944,028 Members | Top Members by Rank

Hardware and Software > Microsoft Windows > Viruses, Spyware and other Nasties > Fake "Microsoft Windows Security Warning" & Browser Hijacks
Ad:
Permalink
Dec 11th, 2004
0

Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks

Expand Post »
Hi,

My friend having the same problem. I tried a lot of
things but nothing works.
Do you now how to get rid of this pop up message?
Thanks

LuckyUFO
Toronto


Quote originally posted by tralala ...
here it is :-)
Thanks.

Logfile of HijackThis v1.98.2
Scan saved at 21:19:25, on 27/11/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\ZZZZ-CDsofts\VIRUUUUUUUUUUUUUUUUUs\hijackthis-new\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotpics-tgp.com/cgi-bin/h.pl
O2 - BHO: bxNewFolder - {51C8BCA8-2524-4523-BF09-738C4EEBFC58} - C:\PROGRA~1\BXNEWF~1\BXNEWF~1.DLL
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Matrox Powerdesk] C:\WINDOWS\System32\PDesk\PDesk.exe /Autolaunch
O4 - HKLM\..\Run: [DeltTray] DeltTray.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [pdfFactory Pro Dispatcher v2] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [THGuard] C:\Program Files\TrojanHunter 4.0\THGuard.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1101428902296
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
LuckyUFO is offline Offline
4 posts
since Dec 2004
Permalink
Dec 11th, 2004
0

Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks

Hi LuckyUFO...it would be best if you started your own thread describing your problem in detail rather than tagging on to someone else's post. It takes away from the original poster's problem, and can cause confusion.
Reputation Points: 18
Solved Threads: 13
Posting Whiz in Training
deonnanicole is offline Offline
253 posts
since Jun 2004
Permalink
Dec 12th, 2004
0

Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks

Yes. Please do not piggyback threads. It gets too confusing and is unfair on the original poster .

Download shoot the messenger and see if the messages stop.
Moderator
Featured Poster
Reputation Points: 1142
Solved Threads: 982
Most Valuable Poster
crunchie is offline Offline
12,165 posts
since Feb 2004
Permalink
Dec 13th, 2004
0

Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks

Should I direct my question or reply to the original sender
Tralala?
Regards,

LuckyUFO
Reputation Points: 10
Solved Threads: 0
Newbie Poster
LuckyUFO is offline Offline
4 posts
since Dec 2004
Permalink
Dec 13th, 2004
0

Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks

Quote originally posted by LuckyUFO ...
Should I direct my question or reply to the original sender
Tralala?
Regards,

LuckyUFO
You should backup just a bit,where you click on to enter this thread , and hit new Thread ,on the left !
Team Colleague
Reputation Points: 1056
Solved Threads: 792
I hate 20 Questions
caperjack is offline Offline
12,730 posts
since Aug 2003
Permalink
Dec 14th, 2004
0

Re: Fake "Microsoft Windows Security Warning" & Browser Hijacks

It appears to have been moved already. Follow crunchie's advice in post #3.
Team Colleague
Reputation Points: 63
Solved Threads: 213
Posting Maven
dlh6213 is offline Offline
2,962 posts
since Jul 2004

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: Rundll32.exe problem (NOT bridge.dll related - I think)
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: HJT log i'm stumped





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC