Anybody know what i can do to start fixing this?

Safe Mode wont start either. but if i login to my other user account then i can access the CTRL ALT DEL. the three processes running the highest CPU is msmsgs.exe, explorer.exe and svchost.exe, also...

Umm, actually now when you try CTRL ALT DEL nothing happens. After i type in my password on the login screen it loads up the background picture on my desktop and the toolbar is just solid blue. When...

I think the spyware has really gotten bad on my computer. When i turn on the computer it goes to the windows login screen i type in my password and it never logs in. It just sits there with a hour...

Actually my homepage is not being changed anymore. It is coming up as i want it to now. to yahoo.com. Wahoo!!!!

How does this look?

"Silent Runners.vbs", revision 37, http://www.silentrunners.org/
Operating System: Windows XP
Output limited to non-default values, except where indicated by "{++}"

...

Here ya go, thanks for all your help thus far.

"Silent Runners.vbs", revision 37, http://www.silentrunners.org/
Operating System: Windows XP
Output limited to non-default values, except where...

Okay i followed all the steps. When i went to paste from clipboard to the killbox in SAFE MODE. It only pasted five of the eight file paths. So i manually typed in the other three and deleted them...

Okay i did the steps you posted. I did not find any of the following files to delete while in SAFE mode.


C:\Program Files\Search Maid
C:\Program Files\Virtual Maid
C:\Windows\System32\Log...

Got rid of the hosts in the logfile, but the desktop is still the same with all the unwanted icons and the blue security warning background. Dont think its fixed quite yet.
Here is the new logfile....

here ya go. From a permanent folder.

Logfile of HijackThis v1.99.1
Scan saved at 8:29:14 PM, on 5/22/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)...

Okay done.

ReHello everyone.

I have a major problem on my comp. A hijacker has taken over my desktop. The background is all blue and says there is Security Warning. Also there is a bunch of unwanted icons on...

Okay here is my latest log after i tried everything you told me. Some of it worked. Ill let you know if the hotoffers comes back, how can i be assured that it won't?

Logfile of HijackThis v1.99.1...

C:\WINDOWS\System32\netdc.exe - Would not let me delete.
C:\WINDOWS\System32\lsasrv.exe - Says file does not seem to exist
C:\Documents and Settings\DAD\rundll32.exe - Says file does not seem to...

hmmm, i didnt really go to any sites excpet yahoo. Would clearing my temp internet files help?

Followed all the steps to uninstall. it worked for the night!!. But it came back the next morning. Dammmmmm!!!!!!

i dont see that link, my hotoffers.info page that pulls up is just porn without a link for that, it is hotoffers.info/192/index.html

Hello everyone,

Can someone help me to get rid of this. here is a copy of my most recent HiJack This Log from right now. Let me know if you need anything else.




Logfile of HijackThis...