Tech Support Guy banner
Status
Not open for further replies.
1 - 20 of 21 Posts

·
Registered
Joined
·
10 Posts
Discussion Starter · #1 ·
Please help if you can.
I have been getting this message on my computer since midday. I was on the internet in the morning, and all was fine. I took a break for lunch and turned my laptop off. When i turned it back on i got a message informing me that spyware had been detected. Then came a string of messages saying "iau.exe has encoutered a problem and needs to close." When i re-boot, or try to get onto the internet, i get the "iau.exe" message.

As i understand it (and believe me i don't), "iau" stands for internet acceleration utility, and has something to do with spyware and adware. However, i didn't even know i had adware or spyware on my computer. These mesages are completely out of the blue. The biggest problem is that these faults are preventing me from accesing the internet.
I was also getting messages telling me that there were problems with "i386", but they seem to have subsided.
Please help me to fix the problem. I don't know what i've done wrong.
I am working with XP.

Thankyou kind people.
 

·
Registered
Joined
·
49,014 Posts
SpywareBlaster http://www.javacoolsoftware.com/spywareblaster.html
AdAware SE http://www.majorgeeks.com/download506.html
SpyBot S&D http://www.safer-networking.org/en/download/

DL them (they are free), install them, check each for their
definition updates
and then run AdAware and Spybot, fixing anything
they say.

In SpywareBlaster - Always enable all protection after updates
SpyBot - After an update run immunize and make sure teatimer is enabled

Do these before the next step.

Then get HiJack This http://www.majorgeeks.com/download3155.html, put
it in a permanent folder, run it , DO NOT fix anything, post the
log here.
 

·
Registered
Joined
·
10 Posts
Discussion Starter · #3 ·
I would download them, and have tried to download similar programmes. However, this problem is preventing me from using the internet.
I value your help.
Is there anything else i can do?
The "spyware detected" messages have returned.
 

·
Registered
Joined
·
49,014 Posts
Well you could do START - RUN - MSCONFIG and see if the iau or anything strange is there and disable.

Without at least HJT we are flying blind

You may need to go buy a USB thumb drive, they are not expensive and can be used latere as a second backup of critical files
 

·
Registered
Joined
·
10 Posts
Discussion Starter · #8 ·
Ok. So i have downloaded "SpywareBlaster" and installed it.
I have now installed "Hijack This" and run a scan. Not really sure what i'm looking for now. I can see a big list infront of me with unticked boxes next to each field.
What now?
 

·
Registered
Joined
·
49,014 Posts
Peteus2002 said:
Ok. So i have downloaded "SpywareBlaster" and installed it.
I have now installed "Hijack This" and run a scan. Not really sure what i'm looking for now. I can see a big list infront of me with unticked boxes next to each field.
What now?
Post that log here - I'd get AdAware before posting a log, but SB will suffice if you are having connection problems
 

·
Registered
Joined
·
10 Posts
Discussion Starter · #10 ·
Sorry. Can't log results. Don't know how to.
I am getting a message every five minutes or so, saying that iau.exe has encountered a problem.
The main problem is that the internet is connecting, home page is being shown, but with errors all over the page. Then on trying to enter any other site on web, page can't be displayed.
The "Hijackthis" scan has bought up a 37 strong list.
Is it possible to tell me what to do without seeing a log?
 

·
Registered
Joined
·
10 Posts
Discussion Starter · #12 ·
Still can't load hjt log. Having trouble transfering from laptop to pc (using different word processers.
However, i have used a spyware begone programme which has highlighted 21 spyware programmes running on my laptop. Only, they wan't me to buy their product off of the internet to fix the problems. I don't wan't to pay, and i can't get onto the internet anyway.
The spyware programmes are Adware and Browser Hijacker's.
Surely SpywareBlaster should be able to get rid of these.
How do i get rid of them?
 

·
Registered
Joined
·
10 Posts
Discussion Starter · #14 ·
C : \ W I N D O W S \ S y s t e m 3 2 \ s m s s . e x e
C : \ W I N D O W S \ s y s t e m 3 2 \ w i n l o g o n . e x e
C : \ W I N D O W S \ s y s t e m 3 2 \ s e r v i c e s . e x e
C : \ W I N D O W S \ s y s t e m 3 2 \ l s a s s . e x e
C : \ W I N D O W S \ s y s t e m 3 2 \ s v c h o s t . e x e
C : \ W I N D O W S \ S y s t e m 3 2 \ s v c h o s t . e x e
C : \ W I N D O W S \ E x p l o r e r . E X E
C : \ W I N D O W S \ s y s t e m 3 2 \ s p o o l s v . e x e
C : \ W I N D O W S \ S y s t e m 3 2 \ A t i 2 e v x x . e x e
C : \ P r o g r a m F i l e s \ C o m m o n F i l e s \ M i c r o s o f t S h a r e d \ V S 7 D e b u g \ m d m . e x e
C : \ P r o g r a m F i l e s \ A T I T e c h n o l o g i e s \ A T I C o n t r o l P a n e l \ a t i p t a x x . e x e
C : \ P r o g r a m F i l e s \ J a v a \ j 2 r e 1 . 4 . 2 _ 0 3 \ b i n \ j u s c h e d . e x e
C : \ W I N D O W S \ S y s t e m 3 2 \ s p o o l \ D R I V E R S \ W 3 2 X 8 6 \ 3 \ E _ S 4 I 0 T 1 . E X E
C : \ W I N D O W S \ s t i s v s q . e x e
C : \ W I N D O W S \ s v s h o s t . e x e
C : \ W I N D O W S \ m s q d e v l . e x e
C : \ W I N D O W S \ l s s a s . e x e
C : \ W I N D O W S \ m s e r v i c e . e x e
C : \ P r o g r a m F i l e s \ M e s s e n g e r \ m s m s g s . e x e
C : \ P r o g r a m F i l e s \ S A G E M \ S A G E M F @ s t 8 0 0 - 8 4 0 \ d s l m o n . e x e
C : \ P r o g r a m F i l e s \ I n t e r n e t E x p l o r e r \ i e x p l o r e . e x e
C : \ W I N D O W S \ S y s t e m 3 2 \ w u a u c l t . e x e
C : \ W I N D O W S \ i a u . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ P e t e r E t h e r i n g t o n \ M y D o c u m e n t s \ H i j a c k \ H i j a c k T h i s . e x e

R 0 - H K C U \ S o f t w a r e \ M i c r o s o f t \ I n t e r n e t E x p l o r e r \ M a i n , S t a r t P a g e = h t t p : / / w w w . t i s c a l i . c o . u k / b r o a d b a n d
R 1 - H K L M \ S o f t w a r e \ M i c r o s o f t \ I n t e r n e t E x p l o r e r \ M a i n , D e f a u l t _ P a g e _ U R L = h t t p : / / w w w . t i s c a l i . c o . u k / b r o a d b a n d
R 1 - H K C U \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ I n t e r n e t S e t t i n g s , P r o x y S e r v e r = 1 2 7 . 0 . 0 . 1 : 8 0 8 0
R 1 - H K C U \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ I n t e r n e t S e t t i n g s , P r o x y O v e r r i d e = h t t p s : / /
O 2 - B H O : E p s o n T o o l B a n d K i c k e r C l a s s - { E 9 9 4 2 1 F B - 6 8 D D - 4 0 F 0 - B 4 A C - B 7 0 2 7 C A E 2 F 1 A } - C : \ P r o g r a m F i l e s \ E P S O N \ E P S O N W e b - T o - P a g e \ E P S O N W e b - T o - P a g e . d l l
O 3 - T o o l b a r : & R a d i o - { 8 E 7 1 8 8 8 8 - 4 2 3 F - 1 1 D 2 - 8 7 6 E - 0 0 A 0 C 9 0 8 2 4 6 7 } - C : \ W I N D O W S \ S y s t e m 3 2 \ m s d x m . o c x
O 3 - T o o l b a r : E P S O N W e b - T o - P a g e - { E E 5 D 2 7 9 F - 0 8 1 B - 4 4 0 4 - 9 9 4 D - C 6 B 6 0 A A E B A 6 D } - C : \ P r o g r a m F i l e s \ E P S O N \ E P S O N W e b - T o - P a g e \ E P S O N W e b - T o - P a g e . d l l
O 4 - H K L M \ . . \ R u n : [ A T I M o d e C h a n g e ] A t i 2 m d x x . e x e
O 4 - H K L M \ . . \ R u n : [ A T I P T A ] C : \ P r o g r a m F i l e s \ A T I T e c h n o 5 f e 0 8 0 - 8 f 5 d - 1 1 d 2 - a 2 0 b - 0 0 a a 0 0 3 c 1 5 7 a } - C : \ W I N D O W S \ w e b \ r e l a t e d . h t m
O 9 - E x t r a ' T o o l s ' m e n u i t e m : S h o w & R e l a t e d L i n k s - { c 9 5 f e 0 8 0 - 8 f 5 d - 1 1 d 2 - a 2 0 b - 0 0 a a 0 0 3 c 1 5 7 a } - C : \ W I N D O W S \ w e b \ r e l a t e d . h t m
O 9 - E x t r a b u t t o n : M e s s e n g e r - { F B 5 F 1 9 1 0 - F 1 1 0 - 1 1 d 2 - B B 9 E - 0 0 C 0 4 F 7 9 5 6 8 3 } - C : \ P r o g r a m F i l e s \ M e s s e n g e r \ M S M S G S . E X E
O 9 - E x t r a ' T o o l s ' m e n u i t e m : M e s s e n g e r - { F B 5 F 1 9 1 0 - F 1 1 0 - 1 1 d 2 - B B 9 E - 0 0 C 0 4 F 7 9 5 6 8 3 } - C : \ P r o g r a m F i l e s \ M e s s e n g e r \ M S M S G S . E X E
O 1 4 - I E R E S E T . I N F : S T A R T _ P A G E _ U R L = h t t p : / / w w w . t i s c a l i . c o . u k / b r o a d b a n d
O 2 3 - S e r v i c e : A t i H o t K e y P o l l e r - U n k n o w n - C : \ W I N D O W S \ S y s t e m 3 2 \ A t i 2 e v x x . e x e

/ M " S t y l u s C 4 6 "
O 4 - H K L M \ . . \ R u n : [ E P S O N S t y l u s C 4 6 S e r i e s ( C o p y 1 ) ] C : \ W I N D O W S \ S y s t e m 3 2 \ s p o o l \ D R I V E R S \ W 3 2 X 8 6 \ 3 \ E _ S 4 I 0 T 1 . E X E / P 3 2 " E P S O N S t y l u s C 4 6 S e r i e s ( C o p y 1 ) " / O 6 " U S B 0 0 1 " / M " S t y l u s C 4 6 "

best i can do
 

·
Registered
Joined
·
49,014 Posts
There is definetly stuff there but that log is not complete and as Candy said we cant read - there is a space between every character

AS I said either use notepad or wordpad
 

·
Retired Moderator
Joined
·
72,109 Posts
iau.exe is EasySearch adware, remove that in control panel, add/remove programs if you can.

svshost.exe is Worm.P2P.Spybot.gen virus

The rest we don't need to worry about for now.

Go here and run at least two of the online scanners.
http://forums.techguy.org/t110854/s.html

Reboot.

Download Spybot http://www.majorgeeks.com/download.php?det=2471

Click on "Search For updates" When prompted.

Next, close all Internet Explorer windows, and click Check for Problems. Once the scan is complete, have SpyBot remove all it finds marked in RED.

Reboot.

Download Adaware SE http://lavasoft.element5.com/software/adaware/

Install the program and launch it.

First in the main window look in the bottom right corner and click on Check for updates now then click Connect and download the latest reference files.

From main window: Click Start then under Select a scan Mode tick Perform full system scan.

Next deselect Search for negligible risk entries.

Now to scan just click the Next button.

When the scan is finished mark everything for removal and get rid of it.(Right-click the window and choose select all from the drop down menu and click Next)

Reboot and post another HJT log for review.
 

·
Registered
Joined
·
9 Posts
Hello
I just cleaned up deleting all the files that pretain to iau.exe using this software xoftspy. But now when I try to go to IE it will give me a "page cannot be display" what do I do now to get back onto IE? Thank you

I am using window XP professional and currently running IE6

Thanks!
 
1 - 20 of 21 Posts
Status
Not open for further replies.
Top