Information Security Forum

In my newbishness i posted this on the wrong board..well this time in the right one i assume. Can anyone help me out? I have probbly gotten onto a wrong site when off to download Anti-Virus programs for my new computer, this one. As a result i got infected by …

i just attempted to get rid of the poly win32 and was wondering if someone could check my log id greatly appreciate it! Logfile of HijackThis v1.99.1 Scan saved at 5:35:41 PM, on 8/31/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

I made a topic before but some one who didn't know what they were doing flooded my topic telling me to remove things that shouldn't be removed. Anyways for some reason each time I try clearing my registry of programs that are uninstalled they come back. If this helps at …

A friend of mine had been having problems with his computer, I had him run ad awear spybot and ewido, and he fixed all those problems. So now im posting this log to see it there is anything he missed. Logfile of HijackThis v1.99.1 Scan saved at 11:33:57 PM, on …

I've had some troubles with spyware recently. Norton keeps detecting hclean.exe in the system32 folder and fails to delete it so it is quarantined. I then go and delete it but it keeps coming back. A 'windows security centre' message appears from time to time as well. I've used numerous …

Hi, My hompage has changed to about.blank and I'm getting all kinds of pop-ups. Anyways I did the HijackThis scan and heres what I got: Logfile of HijackThis v1.99.1 Scan saved at 12:48:14 PM, on 8/30/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

A couple of months ago i downloaded a spyware program called spyware stormer. i have just found out that some software downloads its own spyware/adware. How can you tell if it has? As i am new to this site could you tell me what the hijackThis log is. I am …

Rather than posting logs and waiting for help... [url]http://www.hijackthis.de/[/url] J_

I really need some help. I cannot find away to fix my pc. I've run cwsshredder, spybot, adware, housecall, and virus scans and yet i have had no success...i dont know what to do..i get the about:blank homepage and it really affects my yahoo.com and email...i cant see them...here's my …

Norton keeps telling me that i'm infected with Hacktool.Rootkit in C:\windows/system32\hpdriver.sys, but it can't do anything about it. i've scanned with HJT, my log is below. Please help! i just had to reformat my computer to get rid of another virus, and before i've even got all of my programs …

:cry: Hi I am a new member and hoping desperately someone can help me, as I have tried all I know. I had to reformat my hard drive and when I went into windows update to try and download sp2 again. AVG started popping up saying that msdirectx.sys had a …

Here is the log. Also to give you a heads up I tried uninstalling MessengerPlus3 a few months ago. I'm having problems getting it out of the registry and the windows startup. As well as a program called x3watch I uninstalled it but it sticks in the registry and startup …

somebody mind helping me fight this psguard bastard?

Norton AV lists a counter.exe trojan on my sister-in-law's XP S/P2 system. (You know; the sister-in-law whose system had 1,400 spyware threats, and which took me days to clean up over my Xmas vacation because she refused to turn on Norton AV, Norton FW, Ad-Aware, Antispyware, or Spybot even after …

Hi, :confused: Please help me with this spyware infection - [B]PokaPoka63[/B] . Its been in the system for 5 days ( More than that perhaps but the effects started 5 days ago). I even asked other forums but received no reply. Please help me with this. I found a removal …

Hello! My PC randomly freezes and the only way to do anything is to restart. It happens 2-3 times a day and it is bugging me. I don't know what it could be. I don't think it is cooling because I have 3 fans. Here is a HJT log. Logfile …

As i have read in this forum i have been hijacked by terra.es and get constant pop ups by error #317 something about spyware blah blah blah port 8180 3120 something another help here is my hijack log. Thanks in advance for anyone who helps :cry: Logfile of HijackThis v1.99.1 …

After successfully removing this virus, when I boot up my computer I get a message: Can't Load ADMDLL.DLL, Can't load library. Is this related to the virus and how do I get rid off it?

:cry: I would appreciate anyone's help. I've tried whatever i could find online but i may have fiddled around with the settings on my computer so much that i've made it worse. Mozilla Firefox and Outlook seems to be working fine. I can connect through with those programs. However anything …

Hello Folks, You guys have a great site. Wish I found it a long time ago. I've done some research on my problem with adyieldmanager.com on the site already but although I can find c:\windows\sysytem32\conmime.exe in a file search it doesn't show in the process log area of HiJack This. …

I just download Hijack This and wanted to know if everything is ok. thanks Logfile of HijackThis v1.99.1 Scan saved at 8:35:35 AM, on 8/28/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe …

hi there, i was told to post my hijack this log file here so here it is: Logfile of HijackThis v1.99.1 Scan saved at 10:23:39 AM, on 8/30/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\spoolsv.exe C:\WINNT\System32\atiptaxx.exe C:\Program …

somebody please help mne with this problem: whenever i open internet explorer, it closes automaticallly in about 3 seconds without warning. this also happens when i open folders such as my computer, my documents etc. any1 help?

Whenever i press ctrl+alt+delete my task manager opens (no surprise there) However, it stays open for about 3 seconds than closes on its on. It does this everytime i press ctrl+alt+delete and it wont stay open long enough to do anything. I have tried restarting my computer, but that doesnt …

I can't get rid of SurfSideKick3, I have followed as best I can, the directions from various websites... below is my logfile... what do I get rid of? Thanks! Logfile of HijackThis v1.99.1 Scan saved at 10:37:01 AM, on 8/25/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 …

:sad: Help! How in the sam hill do you remove this thing. Tried every available method that can be found online...and it still comes back! I'm open to suggestions....after that I'm nuking the puppy! Stars

I originally had Aurora and although I can't see that it's still there, ads keep popping up and some hooowah site too. I am at my wits end, please help!! I'm pretty sure I've done everything recommended except for posting these 2 logs (Ewido & HJT).... thanks so much! ewido …

MY computer got infected with some spyware. I tried every program, I cleaned the unneccesary entries with HJT but one thing still keeps coming back. Every time I open a web page a minute later IE opens itself and bombards me with related advertisement. The main source for this advertisement …

Someone please help me. :cry: I've been trying to fix my computer for a month now and it just keeps getting worse. First it was riddled with popups and would shut down spontaneously. Now the desktop is gone. Here is what I have done so far: For every User listed …

Having an issue getting rid of "Trojan Horse Downloader.Agent.AS". I've ran AVG and every other online scanner I can find. Some identify the virus and some don't, but none of them can remove it. Do I have to go through the ever dreaded refomat?

Hi! Last days I have some terrible problem. I push on Explorer icon and then receive some message "this page can't be opened offline" McAffe antivirus found some nasties and deleted it. However, it didn't help to fix the problem. This is my hijackthis log file: logfile of HijackThis v1.99.0 …

i started up my computer recently and discovered a number of changes in which i did not change. First off there was a new spyware remover pogram call wareout that i did not install and also my internet explorer had a new search bar...but i cant rember what it was …

i just recently got my system back from a repair then when i surf the web later on my norton repeatedly show the message saying there is a virus called hacktool.rootkit i tried everything that i can but cant delete it. im in desperated mode right now i dont know …

i don't know a lot about this stuff, so you'll have to bare with me. i turned my computer on yesterday and everything was like it was the first time i turned it on (wallpaper was packard bell, it offered me the chance to tour xp, even my media player …

Hi, I'm a new poster that just stumbled upon this site when trying to figure out what the heck is wrong with my computer. Yesterday afternoon, a whole bunch of really common websites just stopped loading for no apparent reason. The same problem occurs on both Firefox and IE, and …

Hello, I noticed a program called winfixer 2005 was being installed on my computer the other day when I was online and I did not authorize it. I deleted it and it came back so I am wondering if it's bad and how to get rid of it. Here is …

Yesterday my Norton Antivirus displayed a message on startup saying that he has detected a file called 27611.sys in the Windows\system32 folder that contains a Hacktool.Rootkit which it cannot repair or quarantine. I tried to do a full system scan but Norton didn't find anything. Deleting the file also didn't …

My computer is running real slow...any help would be greatly appreciated. My log file is below. Logfile of HijackThis v1.99.1 Scan saved at 11:17:27 AM, on 8/27/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe …

Hi guys, My windows won't load on desktop.I have to go through the taskmgr to open my desktop folder.but it also usually says taskmgr not responding.here is my Hijack This! log Logfile of HijackThis v1.99.1 Scan saved at 11:25:54 AM, on 8/28/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet …

The first step in ridding your system of unwanted intruders is to protect it from them in the first place. If you haven’t already done so, please review this thread and follow all of the recommended procedures before continuing here: [URL="http://www.daniweb.com/techtalkforums/thread27519.html"]http://www.daniweb.com/techtalkforums/thread27519.html[/URL] Reminder – If your system is simply too infested …

Logfile of HijackThis v1.98.2 Scan saved at 7:55:16 AM, on 8/23/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINDOWS\Explorer.exe C:\PROGRA~1\Iomega\System32\AppServices.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\SAVScan.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\WinTools\WToolsS.exe C:\Program Files\Media …

Hi I'm Pete and new to this site which I found whilst searching for a problem with my PC as I have a problem in accessing various internet sites. After accessing a site I get the following text at the top of the page and the site is only partially …

My computer started responding really slowly to night, when I click on anything it takes a very long time before it responds. At one point it just stalled and I hit Ctrl Alt Delete and the task manager came up and then started to reboot, it got to the windows …

I appreciate someone's help with this hjt log. Do I have nasties? Thanks. Logfile of HijackThis v1.99.1 Scan saved at 8:08:41 p.m., on 26/08/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\AVPersonal\AVGUARD.EXE C:\Program Files\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\system32\ZoneLabs\vsmon.exe …

I like someone to help me check this log pls. Thanks. Logfile of HijackThis v1.99.1 Scan saved at 7:58:27 p.m., on 26/08/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program …

Hi there everyone. I was wondering if you could provide me with some help removing offline popups. I have already ran Ad-aware 6 and Spybot S&D however the problem has not stoped it seems to have gotten worse. Here is a log from Hijackthis if you could please tell me …

(Split from thread [url]http://www.daniweb.com/techtalkforums/thread29019-1.html[/url]) Hello gentlemen, Same has happend to me... Norton Internet Secureity 2003: Intrution Detection (option) is locked in OFF mode When “Turn On

Hi, everyone. I'm Milton, from Brazil, and I am impressed by the quality and friendlyness of your site/forum. To be honest, however, I just joined 'cause I need help, sort of desperately. Hope you don´t mind. My browser (IE6) has been hijacked - see HiJackThis log posted below. Panda Platinum …

my computer, recently, has been acting quite odd...when i start windows, it takes a conciderable amount of time and when the windows tone starts, it cackles. Once thats all over with, my programs start slow, and when i try to run widows media and open, lets say, a browser, the …

Hi, can someone help me. I keep getting these pop up window sounds and my computer is running slow. Not sure if I have something that I need to remove. Thank you.. Patricia * HijackThis v1.98 * Written by Merijn - [email]merijn@spywareinfo.com[/email] [url]http://www.merijn.org/files/hijackthis.zip[/url] [url]http://www.merijn.org/index.html[/url] See bottom for version history. The …