okay, I've done it. Thanks again Crunchie, your a good guy.

Excuse me for double-posting.. I've just ran a check-up with spybot (newest version), somehow it always finds the same DSO exploit (2). However Ad-aware SE says that it finds nothing. I'll show you...

Alright, I'm chillin' :cool: like check out my shades and stuff ;)

Thanks for your help, Crunchie. As you can see some of my room mates have been busy. now lets see what is going on the follow up! And Crunchie do take your time. If things are a bit under the...

Thanks for the response, I'll use the programs you posted.

Hey, I would like to have a little checkup, so is my computer sick doctor? ;)

Logfile of HijackThis v1.97.7
Scan saved at 12:45:52 PM, on 8/29/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)...

Hello there! Thanks for coming to this thread! As some of you know I have been having trouble with a virus lately which was causing my computer to do the strangest things. When I restarted I had a...

Hey guys, the virus caught up with me and as you can see it did a great job too! I couldn't connect for a VERY long time. Thank you both for the reply's, because of the interference with the virus I...

Hello everybody, now even I have a problem identifiying a virus.. this virus can change directory's to <an infamous Ascii type-like smiley> and an s, just a plain s. Scandisk tells me that they can...

Activeplus? Thats an MSN Messenger add-on pack.. hmm.
MSN toolbar, youknow these things may/may not cause your problems.

DUDE, you have a VIRUS! The Cirebot!

DO NOT TRY TO REMOVE THESE YET!...

Remove these:

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\BARRYW~1\LOCALS~1\Temp\sp.html
R0 - HKLM\Software\Microsoft\Internet...

Well, ok, but how?

If it is possible if spyware will not let you open anti-spyware sites? None that I know off, however Trojans do that, and viruses do it to anti-virus sites btw. ...

Too late to edit my post but, here's the instructions:
Create a folder on your desktop, doubleclick on the dllfix and install it into the folder you just created.
1.Run start.bat and press option...

The bomb? We didn't explode yet :D
And it isn't you, its always weird windows and its antics!

thnx for the help, Crunchie, sometimes they do tend to be a little too big!

and btw, where HJT is located it leaves behind a backup of the removal that you've done. The only problem is that it is difficult to locate in the temp folder.. so thats why we say that you need to...

wow, like that totally shortened out the Log! Nice going!

seems fine to me, maybe some of the software or hardware are having compatibility problems??

Try removing this thread

O2 - BHO: (no name) - {F7F808F0-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem218.dll

and then ctrl+alt+del and then (if its in there) Nem218.dll if you have winXP or...

Try using DLLfix and post the log here
Download from http://tools.zerosrealm.com/dllfix.exe (here

Okay try removing these:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wwe.com/
O1 - Hosts: 255.255.255.255 www.casinoxo.com (http://www.casinoxo.com)

And...

okay, first of all put HJT into C:\HJT\ as it will create backups and will be easier trackable. Instead of C:\DOCUME~1\Vrajesh\LOCALS~1\Temp\Rar$EX79.528\
Then follow these steps:
First run...

Now That Is A Log! ;)
I'm leaving this one to Crunchie though

Your missing the upper layer, how weird..

Edit:
I've been searching on the net with google, but I couldn't find anything..

What your brother has Manny is spyware. Follow these steps please:

First run Ad-aware6.0 (click here) (http://www.lavasoft.nu/) and UPDATE accordingly with the [check for updates now] button and...

Maybe you got a trojan or virus; try downloading a free trial of trojanhunter here (http://www.misec.net/) and running an anti-virus scan of trend micro here (http://housecall.trendmicro.com/)...

Did you install, run and update spybot (http://www.safer-networking.org/) and adaware (http://www.lavasoft.nu/)?

Yes with the Print Screen button above the [insert][home][page Up] buttons
and then go to paint and click the edit menu and then paste. It would be interesting to know how it looks like..

Good job on running the programs :) Though Limeshop is used by Gnutella networks, some people still consider it as spyware, because of its ability to send user information. Its up to you if you wish...

You can get rid of the trojans using TrojanHunter (http://www.misec.net/trojanhunter/?aff=12129). Afterwards try running and updating Spybot
(www.safer-networking.org) and Ad-aware6.0...

Hello, could you please run Regcleaner? Instructions are on this site (http://www.createwindow.com/wininfo/regclean.htm)

I'm 2 years older than you are :p
Try removing this one:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank

Viruses like Blaster and Sasser are able to do annoying things like that. Try using the programs that are in this thread (http://www.daniweb.com/techtalkforums/thread5690.html)


And follow these...

Hello CamelN,
please follow the instructions on this site (click here) (http://www.pchell.com/virus/msblast.shtml) to remove the blaster.E virus and use TrojanHunter to get rid of any trojans....

Yowza!
Okay Arobrien, the whole point of spy/mal/adware is to be OBNOXIOUS! But we all know that now don't we?

FOR BOTH OF YOU, Be sure that you have Hijack this in a local folder called C:\HJT\...

Try running this regcleaning program (click here) (http://www.createwindow.com/wininfo/regclean.htm) Regclean 4.3 by JouniVuorio. Manual is on the site. It finds and deletes DEAD registry links.

app_init is the initialization of applications, this means executables, possibly spyware, but I'm not sure.
Remove this one and it should cure your about:blank problem

R1 -...

So you refreshed your background? Just gotta hate spyware for ruining a good background.


p.s we gaan winnen! :p

maybe there is a registry entry left?