Hey buddy :)

Oh sorry...this is my hijackthis log: (I am getting this "invader" trying to inject into any program I start...and I really dont know if it is hiding in another program or document that I need to keep??)hopefully this log will HELP ;)

Logfile of HijackThis v1.99.1
Scan saved at 6:38:11 PM, on 12/29/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\TPSMain.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TDispVol.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\FarStone\VDPPro\VHD\RDTask.exe
C:\Program Files\FarStone\VDPPro\VDP\vdtask.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\K-Meleon\loader.exe
C:\Program Files\K-Meleon\k-meleon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Documents and Settings\Justin and Yamila\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [ link ]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [ link ]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [ link ]
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = [ link ]
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe

Thanks again

Hi, I saw your help on a forum for "winantiviruspro2006" and although I dont see that on my computer I am getting infected with this NASTY thing called: "Riskware: Invader (loader)"!!
I have had no luck in getting ahold of those crazy bastards at Kaspersky, and am going crazy with this problem...I have done a complete system restore 2 times and it just popped up again!
Please help me out :)
My handle is "Montito" and my e-mail address is montito96822@hotmail.com
I am new to the forum" site and this is the only place I could find to post a question.

Anyways, would appreciate the help.

Thanks,
montito

hey JaPk I have not see you in the forum for awhile now, if youre taking a break. Well good luck.

Taitaa tulla tämmösestä peeloilusta banaania joka suuntaan :S

Vain taivas on rajana, näköjään uhri teki oman ketjun eng foralle :/
-> [ link ]

Jaahas pojat fiksailee shoutboxissakin :D How I can qualify to Shoutbox fixerman ?