[Dilpickle98]

Well i downloaded something but guess what? CiD POPUPS!!! YAAAA!!
So i did my research and dl'ed a bunch of different softwares but i still get them.

Any help would be appreciated.

(i have NoAdware, Spyware Doctor, and NoLop but none have worked)

[Dilpickle98]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:34:31 PM, on 9/5/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesTGTSoftStyleXPStyleXPService.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
C:WINDOWSsystem32LEXBCES.EXE
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32LEXPPS.EXE
C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
C:Program FilesSymantecLiveUpdateAluSchedulerSvc.exe
C:Program FilesBonjourmDNSResponder.exe
C:WINDOWSsystem32nvsvc32.exe
C:WINDOWSsystem32HPZipm12.exe
C:WINDOWSsystem32PnkBstrA.exe
C:Program FilesSpyware DoctorpctsAuxs.exe
C:Program FilesSpyware DoctorpctsSvc.exe
C:WINDOWSsystem32wdfmgr.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSExplorer.EXE
C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesJavajre1.6.0_07binjusched.exe
C:Program FilesPowerISOPWRISOVM.EXE
C:Program FilesSAMSUNGFW LiveUpdateFWManager.exe
C:Program FilesSyncroSoftPosH2Ocledx.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesSpyware DoctorpctsTray.exe
C:program filessteamsteam.exe
C:program filesncsoftlauncherNCLauncher.exe
C:Program FilesAIM6aim6.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesElectronic ArtsEADMCore.exe
C:Documents and SettingsDylanLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe
C:Program FilesTGTSoftStyleXPStyleXP.exe
C:Program FilesNoneCommonRaUI.exe
C:Program FilesAIM6aolsoftware.exe
C:WINDOWSsystem32wuauclt.exe
C:PROGRA~1COMMON~1SYMANT~1CCPD-LCsymlcsvc.exe
C:Program FilesWindows Media Playerwmplayer.exe
C:Program FilesNoAdware5.0NoAdware5.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe
C:WINDOWSsystem32wbemwmiprvse.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = blank.htm
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:PROGRA~1COMMON~1SYMANT~1IDSIPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_07binssv.dll
O4 - HKLM..Run: Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [JMB36X IDE Setup] C:WINDOWSRaidToolxInsIDE.exe
O4 - HKLM..Run: [36X Raid Configurer] C:WINDOWSsystem32xRaidSetup.exe boot
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe"
O4 - HKLM..Run: [osCheck] "C:Program FilesNorton AntiVirusosCheck.exe"
O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OBrealsched.exe" -osboot
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_07binjusched.exe"
O4 - HKLM..Run: [http://PWRISOVM.EXE C:Program FilesPowerISOPWRISOVM.EXE
O4 - HKLM..Run: [Name of App] C:Program FilesSAMSUNGFW LiveUpdateFWManager.exe r
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 8.0ReaderReader_sl.exe"
O4 - HKLM..Run: [H2O] C:Program FilesSyncroSoftPosH2Ocledx.exe
O4 - HKLM..Run: [AppleSyncNotifier] C:Program FilesCommon FilesAppleMobile Device SupportbinAppleSyncNotifier.exe
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [file wave user bat] C:Documents and SettingsAll UsersApplication DataMail For File WaveDent gram.exe
O4 - HKLM..Run: [ISTray] "C:Program FilesSpyware DoctorpctsTray.exe"
O4 - HKCU..Run: [Steam] "c:program filessteamsteam.exe" -silent
O4 - HKCU..Run: [PlayNC Launcher] C:program filesncsoftlauncherNCLauncher.exe /Minimized
O4 - HKCU..Run: [Aim6] "C:Program FilesAIM6aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU..Run: [EA Core] C:Program FilesElectronic ArtsEADMCore.exe -silent
O4 - HKCU..Run: [16 Creative] C:DOCUME~1DylanAPPLIC~1THUNKC~1copy locks sixth.exe
O4 - HKCU..Run: [Google Update] "C:Documents and SettingsDylanLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe" /c
O4 - HKCU..Run: [STYLEXP] C:Program FilesTGTSoftStyleXPStyleXP.exe -Hide
O4 - Global Startup: 802.11n PCI Wireless LAN Utility.lnk = C:Program FilesNoneCommonRaUI.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_07binssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_07binssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:Program FilesAIMaim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O20 - Winlogon Notify: Love - C:WINDOWSSYSTEM32LoveFly.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:Program FilesSymantecLiveUpdateAluSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:WINDOWSsystem32LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:Program FilesSymantecLiveUpdateLuComServer34.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:WINDOWSsystem32PnkBstrA.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:Program FilesSpyware DoctorpctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:Program FilesSpyware DoctorpctsSvc.exe
O23 - Service: StyleXPService - Unknown owner - C:Program FilesTGTSoftStyleXPStyleXPService.exe
O23 - Service: Symantec Core LC - Unknown owner - C:PROGRA~1COMMON~1SYMANT~1CCPD-LCsymlcsvc.exe
--
End of file - 8933 bytes

[coastie65]

Hi, Go here and download and run the app and see if any thing comes up. www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html . Thi s a very good app and it is free. coastie65

[techie4fun]

CiD?????? I'm calling Spiritwind

[coastie65]

:D Good Idea. He is the security guy around these parts. I was going to after I posted but got sidetracked.

[techie4fun]

I sent Spiritwind a private messages 2 hours ago so he can rain on this parade later. ;)

[SpiritWind]

Hi all :
"Cid" seems to be the latest adware/spyware "running around on the net" ; the easiest &

1st try to "remove" it would be to run a "Full Scan" of the FREE Version of

"SUPERAntiSpyware" from www.superantispyware.com/ . IF that fails to resolve the

"problem", then you should seek Assistance from an experienced, CERTIFIED, Volunteer

"Malware-Fighter", such as the "Microsoft Most Valuable Professionals" that staff the

Forums at [http://aumha.net/] .

Edit :

Recommend you try the info at [http://cidhelp.com/] , especially
" 4) The use and presence of the Software is voluntary. The Software may be uninstalled at any time from your computer. The only authorized means to uninstall the Software is to use the ADD/REMOVE function on your control panel or contact [support@cidhelp.com] for assistance. Instructions to uninstall the Software are as follows:
1. Access your control panel by going to the Start menu;
2. Select Control Panel;
3. Choose ADD/REMOVE PROGRAMS; and,
4. Select Messenger Plus! and Sponsor or CiD Help for removal.
5. If you do not remember which bundled software product you installed that included the sponsor software you can download and run the universal uninstaller located here. "
The Info in "5" is probably what you should be using !?
Message was edited by: SpiritWind
Discovered should try the following FIRST, when dealing with "CiD"