I must admit that my current version of XP is not very legal, and therefore I can't download SP1 and SP2. I think I have all other updates.

As I understand it there's so many "security-holes"...

I have done as you told me and it seems to do the trick. The housecall-thing found 12 trojans and as they could not be "cleaned" I pressed delete. OK?

The HJ-log:
Logfile of HijackThis v1.99.0...

It´s almost to good to be true...

Guess what, - I got hijacked again.. It seems to be the same problem, so here's a hijack-list and a list of services:

Logfile of HijackThis v1.99.0
Scan saved...

Ok new problem....

After removing the virus/cookie-thing One of my programs won't start. The error message is:

c:\windows<system32\autoexec.nt. The system file is not suitable for running...

and once more, along with the falkag-cookie..

Strange... They are blocked again

Troels

wait a minute...

As i was posting my last reply the "tribal-cookie" asked for permission... Does that mean that it is comming from daniweb?

Troels

Hi.

I did as you suggested and it seems that some of those cookies come from my hotmail-account... they are now blocked.

I ran Adaware once more and it found 5 things which are now deleted.
I...

I now get anywhere from 1 to 3 new cookies on every startup. Here´s a list of the ones that look´s od:

troels@cgi-bin[1]
troels@mediaplex
troels@tribalfusion
troels@as-us.falkag
troels@imho
...

Hi.

Yes I´m back online and all seems to be in perfect order. Allmost.

All the "015´s" are gone, but Spyware Doctor finds a tracking coockie after every reboot.

I don´t know if there´s any...

Hi again.

I ran the web-virus-search-thing and it found 15 things. I deleted (spelling?) all 15. The HJ-log after reboot is as follows:

Logfile of HijackThis v1.99.0
Scan saved at 16:36:16, on...

will try. Sleep later.. Sorry about the ****. I live in Denmark and **** is a part of the normal language.... Maybe i should only curse in danish... skupokkerdaogså...

Troels Mejer

well something worked because the home search thing is gone, but I must have ****** up my internet-connection somewhere along the way...

The infected PC won't go online... ****. But that´s...

ok a new HJ-list.:
Logfile of HijackThis v1.99.0
Scan saved at 03:48:56, on 31-12-2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:...

Ok here goes (its a pretty long list..)


PsService v1.1 - local and remote services viewer/controller
Copyright (C) 2001-2003 Mark Russinovich
Sysinternals - www.sysinternals.com
...

I´m very greatful for the fast reply.

I´ll try to run the "getservices"-thingy now. The list will hopefully be on the the forum soon.

Troels

PS.: Happy newyear. -I guess some of you will be...

Hi there.

I have been attacked by the Home search thing and I have tried to install the "Hijach this". The scan result is this:

Logfile of HijackThis v1.99.0
Scan saved at 16:53:24, on...