Forum: Viruses, Spyware and other Nasties Oct 3rd, 2004 |
| Replies: 8 Views: 3,235 You should have started by reading the messages at the top of the Security Forum page: UPDATED: DO NOT POST ABOUT BRIDGE.DLL BEFORE READING THIS... |
Forum: Viruses, Spyware and other Nasties Sep 28th, 2004 |
| Replies: 62 Views: 77,316 You are not without recourse. Try running HijackThis in Safe Mode and see if that gives you enough time to delete the offending startups. There are also alternative tools available to kill the... |
Forum: Viruses, Spyware and other Nasties Apr 21st, 2004 |
| Replies: 18 Views: 25,668 Actually, you only posted half the information--you left out the Registry-entries list.
What you posted looks almost clean--except for the RunDLL32 entry, which usually indicates a problem. ... |
Forum: Viruses, Spyware and other Nasties Apr 21st, 2004 |
| Replies: 62 Views: 77,316 A major problem right-off-the-bat is that neither your Windows XP nor your Internet Explorer are up-to-date. Partly due to this, you have been loaded with nasties. As soon as you clean up your... |
Forum: Viruses, Spyware and other Nasties Apr 17th, 2004 |
| Replies: 62 Views: 77,316 It looks like the Hungry Hands pr0n hijacker is hard at work again. It seems to be consistently causing this problem. I think there are two means of attack at your disposal which can probably be... |
Forum: Viruses, Spyware and other Nasties Apr 13th, 2004 |
| Replies: 62 Views: 77,316 I moved your original post to its own thread (http://www.daniweb.com/techtalkforums/thread5259.html) and answered it there. Sorry you didn't find it the first time! |
Forum: Viruses, Spyware and other Nasties Apr 13th, 2004 |
| Replies: 62 Views: 77,316 Cool! :cool: Yes, you can turn them back on. |
Forum: Viruses, Spyware and other Nasties Apr 13th, 2004 |
| Replies: 3 Views: 7,582 Before you remove anything, turn off System Restore to keep stuff from coming back. While I cannot identify the hijacker, I can identify which files to remove. You need to remove the 02 - BHO... |
Forum: Viruses, Spyware and other Nasties Apr 13th, 2004 |
| Replies: 62 Views: 77,316 I see your problem. You have WindowBlinds installed, a clever hack that wedges into the desktop. You have two hijackers: MyWebSearch and HungryHands. The result is massive confusion as the... |
Forum: Viruses, Spyware and other Nasties Apr 7th, 2004 |
| Replies: 5 Views: 4,261 There's a couple of others that will be useful to remove. Have only HjT running and remove these entries:
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
Microsoft "trickleware"--potential spyware. Causes... |
Forum: Viruses, Spyware and other Nasties Apr 6th, 2004 |
| Replies: 5 Views: 3,036 Remove these keys:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
res://C:\WINDOWS\System32\mihaba.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet... |
Forum: Viruses, Spyware and other Nasties Apr 4th, 2004 |
| Replies: 5 Views: 4,877 You still have some problems. Remove the following:
N1 - Netscape 4: user_pref("browser.startup.homepage", "http://www.worldusa.com"); (C:\Program Files\Netscape\Users\sproston\prefs.js)
O4 -... |
Forum: Viruses, Spyware and other Nasties Apr 2nd, 2004 |
| Replies: 62 Views: 77,316 Nothing is lost. Nescape/Mozilla can import favorites from Internet Explorer, and Microsoft provides favtool.exe... |
Forum: Viruses, Spyware and other Nasties Mar 31st, 2004 |
| Replies: 7 Views: 3,636 You double-posted. I responded to the other thread, so check that out, too. |
Forum: Viruses, Spyware and other Nasties Mar 30th, 2004 |
| Replies: 4 Views: 8,334 MSIE: Internet Explorer v6.00 (6.00.2600.0000)
First problem: IE patches are needed. You are way behind.
C:\ARCHIV~1\WINZIP\winzip32.exe
Versions of WinZip prior to v9.0 are security risks. See... |
Forum: Viruses, Spyware and other Nasties Mar 27th, 2004 |
| Replies: 5 Views: 4,568 You have a couple of things here that may be causing you trouble. Whether you want to get rid of them or not depends upon how you use your machine.
C:\WINDOWS\System32\WISPTIS.EXE
A lot of... |
Forum: Viruses, Spyware and other Nasties Mar 23rd, 2004 |
| Replies: 3 Views: 4,035 You are correct. Remove the following (some are merely resource drains, but absolutely unecessary):
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 -... |
Forum: Viruses, Spyware and other Nasties Mar 22nd, 2004 |
| Replies: 38 Views: 38,724 The only remaining things that I would remove:
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
R0 - HKLM\Software\Microsoft\Internet... |
Forum: Viruses, Spyware and other Nasties Mar 4th, 2004 |
| Replies: 38 Views: 38,724 First of all, before removing stuff manually with HijackThis, you should run at least the free version of Ad-aware (http://www.LavaSoft.nu). I also recommend Spybot -Search & Destroy... |