New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 22)
· Marcia's (CO8)
· Bill G's (CO10)
· Paul's (AR 5)
· Robin's (AR 2)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· Recommend Us
· RegChat
· Reviews
· Search (Topics)
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 740
Comments: 19
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin 

acculoader/globalized communication limited pop up box
Goto page 1, 2, 3  Next
 
Post new topic   Reply to topic       Computer Cops Forum Index -> Spyware - Guests
View previous topic :: View next topic  
Author Message
Kev

Guest






PostPosted: Mon May 31, 2004 10:54 pm    Post subject: acculoader/globalized communication limited pop up box
Reply with quote

Hello,
Hoping someone can help me.
I have windows 98 second edition.
Some history. My home page kept changing to cool web search.
I ran cw shredder,hijackthis,ad-aware,spybot & Norton anti virus.
That fixed the homepage changing. But I have this box that shows up
on the tool bar every 15 minutes or so. Actually 2 boxes. One says about blank. The other says acculoader. After a few seconds the box that says acculoader changes and says connector object. Then a box pops up that says Globalized Communications Limited. It asks if I want to download
and install a dialer. The only way I can make it go away is
control alt delete one time hi lite it and click end task. But it comes
back in 15 minutes or so. The box that says about blank will go away
if I right click on it and hit close. It also comes back in 15 minutes or so.
These 2 things always come on at the same time. Never just one or the other just both at once.
Can anyone help me get rid of these?
I dont have a lot of computer knowledge.
Thank You.
Back to top
irelynnmisses

1st Responder
1st Responder



Joined: Jan 27, 2004
Posts: 1061
Location: USA

PostPosted: Tue Jun 01, 2004 4:04 am    Post subject:
Reply with quote

Download and install Ad-aware found here: http://www.lavasoftusa.com/support/download/
After installing you need to download all updates for it. Use the Globe Icon in the program, and "Connect" to download latest Reference-file. Please update it before you scan with it then fix all it finds.


Download Hiajckthis at: http://mjc1.com/mirror/hjt/
Unzip to a convenient permanent folder,doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, load it in Notepad, and copy its contents here. Most of what it lists will be harmless or even essential, don't fix anything yet.

_________________
Forum Moderator at:
http://killspyware.go.dyndns.org/
Helper At:
http://www.spywareinfo.com/
1st Rwsponder At:
http://www.computercops.biz/
Back to top
View users profile Send private message Send email Visit posters website AIM Address Yahoo Messenger MSN Messenger
Kev

Guest






PostPosted: Tue Jun 01, 2004 9:59 am    Post subject:
Reply with quote

Thank You.........Here is my log file

Logfile of HijackThis v1.97.7
Scan saved at 9:04:13 AM, on 6/1/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\AHEAD\INCD\INCD.EXE
C:\WINDOWS\SYSTEM32\WINTIME.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HPZTSB05.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\UNZIPPED\HIJACKTHIS1977\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.xena.com/
R3 - Default URLSearchHook is missing
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [WinTime] C:\WINDOWS\system32\wintime.exe
O4 - HKLM\..\Run: [Upgrade Service] C:\WINDOWS\winupd.exe
O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb05.exe
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - Startup: DeskFlag.lnk = C:\Program Files\Tiger Technologies\DeskFlag\deskflag.exe
O9 - Extra button: ICQ (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2002...scan53.cab
O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.143/code/PWActiveXImgCtl.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc...wflash.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/C...6323148148
Back to top
irelynnmisses

1st Responder
1st Responder



Joined: Jan 27, 2004
Posts: 1061
Location: USA

PostPosted: Wed Jun 02, 2004 1:06 am    Post subject:
Reply with quote

Have Hijack This fix all of the following by placing a check in the appropriate boxes and hitting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.

R3 - Default URLSearchHook is missing

O4 - HKLM\..\Run: [WinTime] C:\WINDOWS\system32\wintime.exe
O4 - HKLM\..\Run: [Upgrade Service] C:\WINDOWS\winupd.exe
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe

Set hidden files or folders to show HERE\'S HOW


Reboot your PC in safe mode: HERE\'S HOW Then search for and delete the following files or folders:

C:\WINDOWS\system32\wintime.exe
C:\WINDOWS\winupd.exe
sm56hlpr.exe

FLUSH RESTORE POINTS
After something like this it is a good idea to Flush the Restore Points and start fresh.
To flush the XP system Restore Points.

Go to Start>Run and type msconfig Press enter.

When msconfig opens, click the Launch System Restore Button.
On the next page, click the System Restore Settings Link on the left.

Check the box labeled Turn off System restore on all Drives.

Reboot normally. Go back in and Turn System Restore Back on. A new Restore Point will be created.


Go to START>.ALL PROGRAMS..ACCESSORIES>>SYSTEM TOOLS>> DISK CLEAN UP>> and clean everything...

Go to start >Run and paste this in:
%Userprofile%\Local Settings\Temp folder

It will open your temp folder.

Go to the toolbar>Edit>Select All
Then go back to File>Delete

Then get an online virus scan here: http://housecall.trendmicro.com/ Please select the Autoclean option when prompted.
or here: http://www.pandasoftware.com/activescan/

After This, Reboot and Post a Fresh HijackThis log.
And well take it from there =)

_________________
Forum Moderator at:
http://killspyware.go.dyndns.org/
Helper At:
http://www.spywareinfo.com/
1st Rwsponder At:
http://www.computercops.biz/
Back to top
View users profile Send private message Send email Visit posters website AIM Address Yahoo Messenger MSN Messenger
Kev

Guest






PostPosted: Wed Jun 02, 2004 9:11 pm    Post subject:
Reply with quote

Hello... irelynnmisses
I ran hijack and had it fix

R3 - Default URLSearchHook is missing

O4 - HKLM\..\Run: [WinTime] C:\WINDOWS\system32\wintime.exe
O4 - HKLM\..\Run: [Upgrade Service] C:\WINDOWS\winupd.exe
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe

Then I rebooted in safe mode and found & deleted
C:\WINDOWS\system32\wintime.exe
When I searched for C:\WINDOWS\winupd.exe it said no items shown in this view.
When I searched for sm56hlpr.exe it just came up sm56hlpr
The exe was not there. Not sure if its supposed to have .exe or not.
But I clicked on it to delete and it said
it is a program and if I remove I will no longer be able to run this program
or edit some documents.
Its my modem. I did not remove. Should I go ahead? Will I loose my modem? Sorry I am just being cautious. I`m not sure if its the right thing I am looking for since the .exe isnt there.

I could not find this.
FLUSH RESTORE POINTS
After something like this it is a good idea to Flush the Restore Points and start fresh.
To flush the XP system Restore Points.

Go to Start>Run and type msconfig Press enter.

When msconfig opens, click the Launch System Restore Button.
On the next page, click the System Restore Settings Link on the left.

Check the box labeled Turn off System restore on all Drives.

Reboot normally. Go back in and Turn System Restore Back on. A new Restore Point will be created.
I have 98 and when I opened msconfig did not see any button that said
Launch system restore. So I couldnt do it.
When I pasted this%Userprofile%\Local Settings\Temp folder
in Start>Run it said cannot find the file. Make sure path & file name are correct and all required libraries are available
I did disc cleanup and trend micro.

One more thing since I have done all this my comp has slowed way down.
It has become jerky when scrolling and opening & closing webpages.
Will that quit when we are done?
I am very grateful for your help. Thank You so much.
Here is my new log file

Logfile of HijackThis v1.97.7
Scan saved at 8:10:09 PM, on 6/2/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\AHEAD\INCD\INCD.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HPZTSB05.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\UNZIPPED\HIJACKTHIS1977\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.xena.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb05.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - Startup: DeskFlag.lnk = C:\Program Files\Tiger Technologies\DeskFlag\deskflag.exe
O9 - Extra button: ICQ (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/7b77...scan53.cab
O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.143/code/PWActiveXImgCtl.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc...wflash.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/C...6323148148
Back to top
irelynnmisses

1st Responder
1st Responder



Joined: Jan 27, 2004
Posts: 1061
Location: USA

PostPosted: Wed Jun 02, 2004 10:27 pm    Post subject:
Reply with quote

Ok, I'm sorry. Of course you can't flush restore points.. your on 98.. don't worry about that.. give me a bit to look closely at something.. i'll get back to you.

In the meantime are you recieving any king of messages> or being re-directed.. anything you can think of?

_________________
Forum Moderator at:
http://killspyware.go.dyndns.org/
Helper At:
http://www.spywareinfo.com/
1st Rwsponder At:
http://www.computercops.biz/
Back to top
View users profile Send private message Send email Visit posters website AIM Address Yahoo Messenger MSN Messenger
Kev

Guest






PostPosted: Wed Jun 02, 2004 10:45 pm    Post subject:
Reply with quote

""In the meantime are you recieving any king of messages> or being re-directed.. anything you can think of?""

No. I have been on for a couple hours now.
No pop ups. It seems to be working well
except it has slowed way down and is very jerky
when scrolling and maximizing and minimizing.
The global box seems to be gone.
Hope all is well
kev
Back to top
irelynnmisses

1st Responder
1st Responder



Joined: Jan 27, 2004
Posts: 1061
Location: USA

PostPosted: Wed Jun 02, 2004 11:05 pm    Post subject:
Reply with quote

Ok, good call.. I did some searching and apparently it is your modem.. there is also a baddie with almost the same name. Hmmm.. well the other two items removedare baddies.. so those won't cause your machine to run weird.. try this.. get all your updates.. use adaware again and if still a bit weird i'll call in the big guns to advise on this. Smile
_________________
Forum Moderator at:
http://killspyware.go.dyndns.org/
Helper At:
http://www.spywareinfo.com/
1st Rwsponder At:
http://www.computercops.biz/
Back to top
View users profile Send private message Send email Visit posters website AIM Address Yahoo Messenger MSN Messenger
Kev

Guest






PostPosted: Wed Jun 02, 2004 11:34 pm    Post subject:
Reply with quote

Ok I will check for new updates
run a scan and post results tomorrow evening.
Will you need a new log file?
Also could it be that because I had hijackthis fix this
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
be my problem? Its my modem but I have no problem
connecting to internet.
Thank You for everything.
Its great that there are people out there that will
help someone just for the satisfaction of helping.
May great things always come your way...........Kev
Back to top
Kev

Guest






PostPosted: Wed Jun 02, 2004 11:43 pm    Post subject:
Reply with quote

Ok I will check for new updates
run a scan and post results tomorrow evening.
Will you need a new log file?
Also could it be that because I had hijackthis fix this
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
be my problem? Its my modem but I have no problem
connecting to internet.
Thank You for everything.
Its great that there are people out there that will
help someone just for the satisfaction of helping.
May great things always come your way...........Kev
Back to top
Kev

Guest






PostPosted: Wed Jun 02, 2004 11:44 pm    Post subject:
Reply with quote

Ok I will check for new updates
run a scan and post results tomorrow evening.
Will you need a new log file?
Also could it be that because I had hijackthis fix this
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
be my problem? Its my modem but I have no problem
connecting to internet.
Thank You for everything.
Its great that there are people out there that will
help someone just for the satisfaction of helping.
May great things always come your way...........Kev
Back to top
Kev

Guest






PostPosted: Wed Jun 02, 2004 11:45 pm    Post subject:
Reply with quote

Ok I will check for new updates
run a scan and post results tomorrow evening.
Will you need a new log file?
Also could it be that because I had hijackthis fix this
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
be my problem? Its my modem but I have no problem
connecting to internet.
Thank You for everything.
Its great that there are people out there that will
help someone just for the satisfaction of helping.
May great things always come your way...........Kev
Back to top
Kev

Guest






PostPosted: Thu Jun 03, 2004 6:00 am    Post subject:
Reply with quote

Ok I will check for new updates
run a scan and post results tomorrow evening.
Will you need a new log file?
Also could it be that because I had hijackthis fix this
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
be my problem? Its my modem but I have no problem
connecting to internet.
Thank You for everything.
Its great that there are people out there that will
help someone just for the satisfaction of helping.
May great things always come your way...........Kev
Back to top
Kev

Guest






PostPosted: Thu Jun 03, 2004 8:37 pm    Post subject:
Reply with quote

Hi....I checked for updates and ran ad aware.
Nothing found.
I did disc cleanup.
I did a defrag.
It is still jerky and slow.
anything I click on is jerky & slow.
example...when I just click on something
at top of screen like tools or edit anything the
dropdown box is very jerky and slow to open.
This happens on or off the internet.
scrolling up or down and side to side is awful.
Its almost not usable.
Please help.
Thank You
Hope all is well........
Back to top
irelynnmisses

1st Responder
1st Responder



Joined: Jan 27, 2004
Posts: 1061
Location: USA

PostPosted: Fri Jun 04, 2004 1:46 am    Post subject:
Reply with quote

KEV.. i honestly have no idea what is causing this.. but I have asked a big gun to step in for us Smile

He should be by when he has time.. he is one of the best Smile

_________________
Forum Moderator at:
http://killspyware.go.dyndns.org/
Helper At:
http://www.spywareinfo.com/
1st Rwsponder At:
http://www.computercops.biz/
Back to top
View users profile Send private message Send email Visit posters website AIM Address Yahoo Messenger MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic       Computer Cops Forum Index -> Spyware - Guests All times are GMT - 5 Hours
Goto page 1, 2, 3  Next
Page 1 of 3

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
Jump to:  
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops