Typical behaviour but hard to kill - help! :(

Hi all,

That's sad, but my WinXP is sick. Malware? Spyware? Who makes this stuff...

Typical behaviour, but hard to kill:
- running programs at sturtup: if i found one and delete it, it is replaced with new one, but it has another name and is again put into HKLM/.../Run (found examples: c:\windows\system32\netyw.exe, C:\Windows\ntlt32.exe, C:\Windows\System32\sdkki32.exe, c:\winstal.exe, )
- another IE search assistant,
- another IE start page,
- suspicious running processes,
- unexpected popups in IE, while browsing,
- underlined and linked words "free" on WWW pages - linked as "goto:free",
- I've found one strange system service ("C:\WINDOWS\system32\ntpo32.exe /s"), but i'm not sure is it only one or more.

I've fight some programs (found and deleted). I've pass thru http://forum.majorgeeks.com/showthread.php?t=38752 - this helps, but not at all. It helps with:
- remove strange programs from "Add/Remove programs": Search Extender, Shopping Wizard, Home Search Assistent
- uninstall SpySheriff.

Still can't uninstall system service, replace start page and search assistant with default, and protect system from running programs at sturtup.

My actual HijackThis! log:

====================================================

• Edit by bjgarrick: Unrequested, Inline HJT log removed!

====================================================

Thanks for help.

 

Welcome to MajorGeeks.com!

Please follow forum guidelines and perform cleaning steps in the sticky thread before posting HijackThis logs.

Now, please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

• Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above and you still have a problem, make sure you have booted to normal mode and run the steps in the below thread to properly use HijackThis and attach the log:

Downloading, Installing, and Running HijackThis

 

Hey, but I've already done it. Like I've wrote. Is there something wrong? Wy mu HijackThis log is cutted out?

 

If you had followed the READ ME completely you would know why I cut it out. All logs are supposed to be attach to your post.

If you have completed the READ ME, you would have attached the 2 logs from the online scans listed in the READ ME and a HJT log.

 

What happened to this part, its part of the READ ME ?