Help me please,i need your help

[Mr Mando]

dear members,i need your help plz,i have a serious problem,when i open my pc i find a message that says you are hacked,and when i close it..the pc restarts,and when i click on ok the pc opens,but what is this message and how i remove it..i scanned my pc with avg,and there were no viruses,and i installed spyware doctor and i removed all the spywares and adwares,but the messege wouldnt be affected by what i have done...help plz

[Corrine]

Hi, Mr Mando.  Welcome to LandzDown Forum.  We will do our best to assist you. 

Please download HijackThis© from one of the following sites: 

• http://www.thespykiller.co.uk/files/HJTsetup.exe
  
• http://downloads.malwareremoval.com/HJTsetup.exe
  
• http://security-central.us/downloads/HJTsetup.exe

At the download prompt, choose "Save" 

• Navigate to the saved file and double-click the installer, HJTsetup.exe
  
• By default, HijackThis will be installed on your computer at C:\Program Files\HijackThis, making an entry in the start menu and also providing a desktop shortcut
  
• When the installation is complete, double-click the HijackThis icon on your desktop
  
• Select "Scan"
  
• When the scan is completed, select "Save log"
  
• Select a name for this first log and a text file will be produced in Notepad.
  
• Please UNcheck Word Wrap in Notepad (Click Format > UNcheck Word Wrap)
  
• Copy the text file and paste it as a reply
  
• Do NOT fix anything with HijackThis yet. Most of what is found is harmless or even required
  
• Close HijackThis and Notepad

[Mr Mando]

here it is,Corrine,it's in the attachments,it is saved in a file format so open it by notepad...

[Eric the Red]

Mr Mando,

It doesn't quite work like that. Please open a new reply to this thread and copy and paste the HJT log into the reply.

Thanks,

Eric the Red

[Mr Mando]

sorry about that,i dont know whats wrong with the attachments,but here it is
http://www.megaupload.com/?d=F6IMXBKQ


URL munged by Corrine

[Eric the Red]

Mr Mando,

Please paste the log here. With the best will in the world we cannot afford to take the risk of malicious downloads that may be hosted on other sites. I don't mean to suggest that you would do such a thing but there are people out there who would love to infect our machines because of the damage that we have done to their spyware operations.

[Mr Mando]

the speed is so slow,it wont be posted,i clicked on post after i pasted the log but the page wouldnt change its too slow,i dont know why,so plz download it from here http://rapidshare.com/files/43088011/mylog1.txt.html
and i guarantee for you that nothing will happen.

dont download it from megaupload...download it from rapidshare,its fast

URL Munged by Corrine

[Corrine]

Sorry, Mr Mando.  Our site, our rules.  If you wish assistance, please copy/paste the log as a reply to this thread.

Thank you.

[Mr Mando]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:31:29 PM, on 7/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

[Mr Mando]

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Thomson SpeedTouch\ST330\service\st330service.exe

[Mr Mando]

plz i beg you all,i cant paste them,when i post the thread the page wouldnt change as if it ignores me,

[Corrine]

Thank you, Mr Mando.  We are investigating the problem in posting your logfile. 

[Mr Mando]

corrine this is not the whole log,plz read^^^

[Aaron Hulett]

I'm working on figuring out the cause - please stand by.

[Mr Mando]

thanks aaron but this is not the whole log,plz download it from here [Removed by Aaron Hulett - MSFT]

i beg u all plz download it,i cant even post the log in the reply, the browser is slow when i post huge objects