Information Security Forum

I too was plagued by Aurora and probably various other virus. I attempted to use a variety of recommended spyware, which found and fixed many problems, but not Aurora. I eventually found and followed the "Ewido Suite" & Nailfix.cmd recommendations I found on your site, and all in all things …

I'm new to this site so I hope I'm posting in the right place....Anyway, I think...no I know I've caught a spyware or virus. I have a java come up in the middle of the window and if I try to close the window or the pop-up my whole computer …

Greetings. First off, let me say that you have a great community here and I have found many of your pages very helpful and informative. So thank you for being a great resource. With that said I will move on to my problem. Lately my desktop has been running sluggishly …

Yeah so this has really been pissing me off recently. It just happened recently, very recently actually. I cannot access a bunch of websites that I used to and aim will not work on top of that. And aim.com wont load so i'm sorta screwed. I just ran avast and …

And the guys at tech support say that it's malware that is reseting my admin privilages like every second... I have literally tried everything, and I can't find the malware. I have also done this NTrights program that should fix it... bit isn't. Any ideas other then reformating?

I am using a Dell Latitude CPx Laptop with Windows 2000. Access to the internet has stopped working a couple of days ago. However, in "Safe" mode, I can access the internet OK. I suspect that there may be an unwanted guest in my computer. For convenience this message is …

The following virus popped up : [B]MSplg7.dll[/B]. Norton identifies it as a Trojan. It is preventing Explorer from opening. Mozilla works just fine. I do not know what other probems it may be causing. The annoying part is that the virus has parked itself in the system32 folder. Therefore Norton …

I've been trying to rid a friends computer of several viruses/spyware/adware!! Using several utilities(Ad-Aware, HJthis) and info on the regedit files from Symantec I've followed the instructions (I thought carefully). The computer seemes to do better and I no longer found the "elite.." nor the "Oxqrn" running in task mgr. …

hey just wanted to post my hijackthis log and make sure everything is clean on my comp...thanks! :lol: Logfile of HijackThis v1.99.1 Scan saved at 4:16:16 PM, on 7/18/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

At intermittent times, I keep getting the "Cannot find server or DNS error" on IE6 and "Page cannot be found error" on Netscape & Firefox. About 5 minutes later, I can access the sites. I tried the Microsoft fixes, adjusting SSL, TLS, etc.., anti-virus programs, spybot, adaware, but no luck. …

To start off with I have run Adaware, Trendmicro, Norton, And looked up lots, Below is my HJT file. Any help with this would be greatly appreciated, Ihave fought this all night long and am ready to wipe out the drive and start over, after 6 yrs as a tech …

>.<! I never thought i'd be asking for advice on how to fix my comp, but here it goes. Ever since i was bombarded with pop-ups, my computer had this fatal error message on it all i remember it saying was TROJAN.HTML.smitfraud or something like that, anyhow i got rid …

i have been trying everything to get rid of this thing but nothing works so i figure i might as well put my HJT log and see what u tell me, also i noticed that alot of new things have been popping up in my c drive folder, they all …

Hello... I am running Windows XP Home and I use an AOL Broadband connection. I am encountering the Error #317 pop up window The error #317 message appears as follows: "Error 317 - Microsoft Internet Security Warning Windows is corrupted with spyware virus. You must patch your pc urgently to …

Hi, I've been reading some of the other Aurora solutions and looked at the files you are supposed to delete and didn't find them. I'm guessing every one of them is unique? Well anyway, here are my log files. --------------------------------------------------------- ewido security suite - Scan report --------------------------------------------------------- + Created on: …

I am having some trouble with pop under ads. They seem to pop up randomly (It can go days without happening) and they are popping up even when I am not surfing the web or using IE. The most frequent time they pop under is right when I login and …

I have tried everything to rid my computer of whatever is making it act erratic. Avg anti virus finds nothing but later finds trojans that it can't delete or heal. Trojan hunter just as innefective. Please help here is my hijack this log. Logfile of HijackThis v1.99.1 Scan saved at …

I have Windows XP, with SP2 installed on my computer, and I think it has a virus on it, because it constantly crashes, can't detect a firewall, and recently, my Norton Antivirus was disabled and requires reinstall. Now, when I try to boot it, a majority of the time it …

I just picked up About:blank virus yesterday when I downloaded music. The start page now goes to about:blank every time the browser is launched. I tried NoAdware, Spy Ferret, Microsoft AntiSpyware and Ad-Aware SE. They all detected the virus but could not remove it. I have read some other threads …

Hi, ive had my computer for over a year now and about 6 months ago i couldn't access properties on my desktop. I finally need to reize my screen and can't do so, so i need your HELP. Im assuming that i will have more probalems than just accessing properties, …

Hello, AVG pops up now and then saying "Virus detected, GPSRESL.exe, trojan Dialer.18.c". I have also lost the "appearance tab" from the display properties on the desktop. Also IE links to explicit websites occasionally for no reason. I've run the AVG scan a few times but it doesn't detect anything. …

I just brought tis new DIY com a few month ago but my com seems to get slower & more laggy nwadays,ami i installing too much software or is it that my com is hit wif a virus? my cpu usage is always very close to 100%... i have ran …

Lately I have been aving a few problems with my computer. IE startpage sometimes goes to Martfinder and sometimes goes to a "Warning Spyware" page-but about 1/3 of the time it goes where it is supposed to. The other problem is from time to time when I am online, I …

My computer surfing is at a slowing to crawl I ran adware and spybot and microsoft antispyware and I also have this thing redswoosh.net constantly trying to log on to the internet. and for the past few days i've been getting messages my virtual memory is low. what do I …

The aurora popups are driving me crazy. There may be other things on this computer I don't know about. I've done all the virus scanning / spyware removal I know of. I did do a HJT scan. Logfile of HijackThis v1.99.1 Scan saved at 10:53:33 AM, on 7/10/2005 Platform: Windows …

Hi All, I saw that Crunchi posted this to another user & I decided to go ahead & try another anti virus sofware other than AntiVir just to see what it would come up with.... ----------------------------- Please visit at least two of the following sites for an online virus scan: …

Logfile of HijackThis v1.98.2 Scan saved at 10:15:34 AM, on 7/17/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\system32\ethernet.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Logitech\iTouch\iTouch.exe C:\WINDOWS\WEB\US.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program …

I made the mistake of bringing in a "freeware" program and since a week ago have been fighting popup ads and a slow computer. I've deleted some of the culprits but can't end the infection. My log from hijackthis is below. If anyone can give me advice on how to …

I am unable to find or remove the trojan TR/Dldr.WinShow.AX. It is being detected by AntiVir as TR/Dldr.WinShow.AX and by Norton as MHTMLRedir.Exploit. The virus is inserting itself into the windows temp file. Once I direct my virus programs to delete the virus, it reinserts itself into the same windows …

Hello boys i'm an Italian boys with a problem,THE STEALTH.HIJACK VIRUS!!! :cry: Thisi is my HighJackThis File Log,can you help me??? THANKS!!! ;) Logfile of HijackThis v1.99.0 Scan saved at 14.29.33, on 07/16/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe …

Hi, When I try to launch Internet Explorer, the hourglass cursor displays for a couple seconds, then reverts to the regular cursor. IE does not start and does not appear in the process list. My PC is running XP. I suspect, (after reading many other posts) that the culprit is …

goto w ww.mypctuneup.com then click on uninstall - you have to download a small removal tool - but it works - havent had an aurora popup in a day now!!!!!

hi, i'm not much of a pc techie but I have setup my folders as per the stickies, downloaded Ccleaner,trojanhunter,adaware,spybot etc, ran in safe mode, turned off system restore, (not in that order) but still cant shift this trojan, norton antivirus stops it everytime i connect to the internet but …

My Anti-virus keeps finding a couple of problems, so does Spybot and Ad-Aware occasionally. Hopefully it's not too bad but I'd appreciate any help. Logfile of HijackThis v1.99.1 Scan saved at 21:47:33, on 24/06/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

Hi, my antivirus found this toolbar and spybot found admilli can anyone tell me what I need to erase from my hijack this log? Thank you. Logfile of HijackThis v1.99.1 Scan saved at 10:19:08 AM, on 7/15/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running …

Since yesterday, Norton keeps reporting a Virus called 'Hacktool.Rootkit'. It says the file msdirectx.sys in 'C:\Documents and Settings\Roel' is infected. After I remove it (in safe mode, in normal mode I can't see it) it just keeps coming back. Norton says that he can't repair or remove the file. Here's …

[url]http://www.itworld.com/Tech/2428/050630msadware/[/url] May fall through because of the public perception such a move would cause. MS has also downgraded Claria detections. [url]http://www.dslreports.com/forum/remark,13793423[/url] So much for AntiSpyware :(.

I have windows Me and two errors came up. the 1st is in an explorer box that reads. Explorer has caused an error in OLE32.DLL. explorer will now close. Even after restart it is still there. The second is on a blue screen that reads. A fatal error in IE …

hi can someone please help me remove 'begin 2 search' from my computer. ive got hijack this and this is my log but im not sure what i should delete

Hi, I'm experiencing difficulties removing spyware, malware. the start page now goes to a page entitled about: blank. I also experience pop-up ads, despite using anti-pop-up (google) and spyware programs (microsoft, adaware, spybot). I've done a full system scan with norton and removed items, as well as multiple scans with …

Hey all. I've been having problems with links being added to my favorites and trouble with IE. WHen I first boot up and go online I alwasy get errors where I have to shut down IE and it takes a while before I get it to work. I get around …

Hi Everyone, I hope that someone can please help me with my problem. I started to get the Aurora pop ups on my machine recently. Warning form NAV Searched the n/g's and tried SpyBot S&D M/S Anti Spyware TSG-3 Each one seems to be able to identify the problem - …

This seems like a tough virus to get rid of. I have Symantec AntiVirus on my computer, which I update and run everytime I turn on the computer. However I seem to have picked up a virus despite my precautions. Since late last week, every minute or so, I get …

This popup appears every 5 minutes : _________________________________ Microsoft Windows Security Warning _________________________________ Your Windows is corrupted with spyware virus. You must patch your PC urgently to protect yourself. Private info is accessed by ports : -8080 -3128 You can patch your PC for free only now and delete all …

hi guys. got a problem with norton. lady openen an email with an attachment and hey presto! norton disabled. eventually found and deleted the virus (wiwshost.exe - trojan.tooso.j) by scanning her harddrive with my pc. ran one of those tools from symantec as well, but it found nothing. now i'm …

I was hoping someone could help me out. I've been getting tons of Aurora pop-ups. I ran Ad Aware SE which seems to keep detecting things as fast as it quarantines and deletes. Ad Aware was also indicating it was detecting drpmon.dll - I could really use some help. Log …

Hi guys, I've been hijacked (like thousands of others it seems) by aurora. I've managed to rid myself of the dreaded DrPmon.dll and various other nasties but Adaware still picks up 21 references to VX2. I can delete these registry entries in normal mode through regedit but they reappear when …

Thank you in advance for helping me if you can. I am having a problem when I access internet explorer I get a tcp connection to the same remote ip along with the one I type in. I noticed this when I ran netstat and Active Ports program. I also …

i cannot get the Aurora pop ups of my computer, please help here are the log files from hijackthis Logfile of HijackThis v1.99.1 Scan saved at 4:03:28 PM, on 7/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

I have some problems with Aurora and Drpmon.dll, and I can't seem to remove it with ad-aware. Here is my Hijack This log: Logfile of HijackThis v1.99.1 Scan saved at 12:26:37 PM, on 7/5/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe …