DaniWeb IT Discussion Community

DaniWeb IT Discussion Community (http://www.daniweb.com/forums/index.php)
-   Viruses, Spyware and other Nasties (http://www.daniweb.com/forums/forum64.html)
-   -   Fake "Microsoft Windows Security Warning" & Browser Hijacks (http://www.daniweb.com/forums/thread15510.html)

LuckyUFO Dec 11th, 2004 5:34 pm
Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks
 
Hi,

My friend having the same problem. I tried a lot of
things but nothing works.
Do you now how to get rid of this pop up message?
Thanks

LuckyUFO
Toronto


Quote:
Originally Posted by tralala
here it is :-)
Thanks.

Logfile of HijackThis v1.98.2
Scan saved at 21:19:25, on 27/11/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\ZZZZ-CDsofts\VIRUUUUUUUUUUUUUUUUUs\hijackthis-new\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotpics-tgp.com/cgi-bin/h.pl
O2 - BHO: bxNewFolder - {51C8BCA8-2524-4523-BF09-738C4EEBFC58} - C:\PROGRA~1\BXNEWF~1\BXNEWF~1.DLL
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Matrox Powerdesk] C:\WINDOWS\System32\PDesk\PDesk.exe /Autolaunch
O4 - HKLM\..\Run: [DeltTray] DeltTray.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [pdfFactory Pro Dispatcher v2] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [THGuard] C:\Program Files\TrojanHunter 4.0\THGuard.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1101428902296
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab

deonnanicole Dec 11th, 2004 7:49 pm
Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks
 
Hi LuckyUFO...it would be best if you started your own thread describing your problem in detail rather than tagging on to someone else's post. It takes away from the original poster's problem, and can cause confusion. :)

crunchie Dec 12th, 2004 12:38 am
Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks
 
Yes. Please do not piggyback threads. It gets too confusing and is unfair on the original poster :).

Download shoot the messenger and see if the messages stop.

LuckyUFO Dec 13th, 2004 7:36 am
Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks
 
Should I direct my question or reply to the original sender
Tralala?
Regards,

LuckyUFO

caperjack Dec 13th, 2004 7:41 am
Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks
 
Quote:
Originally Posted by LuckyUFO
Should I direct my question or reply to the original sender
Tralala?
Regards,

LuckyUFO
You should backup just a bit,where you click on to enter this thread , and hit new Thread ,on the left !

dlh6213 Dec 14th, 2004 11:06 am
Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks
 
It appears to have been moved already. Follow crunchie's advice in post #3.


All times are GMT -4. The time now is 3:01 am.

Forum system based on vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
©2003 - 2009 DaniWeb® LLC