Information Security Forum

Hi I have been infected with a heck lot of spyware my background has been changed to a message saying SYSTEM STOPPED ive a program called spysherrif thats got onto the computer and another called access members area.exe is on the desktop. I have been trying to fix this myself …

I'm having trouble with Home Search Assistent, Search Extender, and Shopping Wizard, as well as trojan horses, popups, and other nasties that have hijacked my dad's computer. I'm trying to fix it for him, and would appreciate your help! Logfile of HijackThis v1.99.1 Scan saved at 2:28:38 PM, on 6/21/2005 …

yada! yada! yada! So much spyware, even more spyware programs to choose from. so much other PC problems even more maintenance programs to choose from.. Well here's the rap up on the best free programs.. 1. SpyBot Search and Destroy; this program is powerful!!! it, removes spyware, malicious,bad registry entries, …

Ok, Im a 13 year old kid who somehow screwed up his computer :-/. Anyways, I hope this forum could help me on what to do. See the problem is, now im grounded, so im sneaking on to try and fix the comp..(Dad not too helpful).. Ok, I cant do …

Hi guys, I'm new here and I'm having few problems removing Aurora. I've already taken suggested steps, [ run ewindo, safe mode run nailfix.bat, hijackthis scan and delete nail.exe ] but the program seems to be keep coming back. I'm running on winxp and i've already installed the service pack …

Alright, here we go. I, like everyone else, tried to manually uninstall this godforsaken program. Then I ran the symantec program, which claimed to remove it. For a while, it seemed to actually have removed it, of course...in the long run, it didn't. So, I d/led HiJackThis and this is …

I have been struggling to fix this for a couple days now. I've run ad-aware, spybot, and many other programs. But I really don't know what I'm doing. I change my homepage and it just keeps resetting back to [url]www.findyourcouple.com[/url]. It seems like it's forwarding to another page every day. …

Hi, My Norton Antivirus detects the Hacktool.rootkit virus but is unable to delete it as it says that the msdirect.sys file cannot be accessed. This is an annoying problem as the error window from Norton keeps popping up, and I need to disable Autoprotect to proceed. Hope someone can help …

Hi, I'm new here and I am having a lot of problems with my PC. Okay, my problem is that I have a ton of spyware/adware on my computer and no matter how many times I delete them with many different spyware killing softwares they just keep on getting back(After …

Hi there, So I've been using McAfee, MS AntiSpyware, Spybot S&D, AdAware, TrendMicro, and Avast, and still cannot get rid of this beastie that opens IE at start-up and sends me to a page at [url]www.freewebs.com[/url]. (This is doubly annoying because I use Firefox. :evil: Thanks, MS.) It's slowing the …

Need help to remove spybot virus. Any suggestion froma anyone upthere? Thanks, I greatly appreciate it

This is my HJT log...someone please help...I've been so frustrated over this for weeks...and it won't go away...Aurora are like cockroaches...always coming back.

I am trying to fix a friend's computer. Here is the HijackThis log: Logfile of HijackThis v1.99.1 Scan saved at 2:49:26 AM, on 6/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\appvh32.exe C:\Program Files\HPQ\One-Touch\OneTouch.EXE C:\Program …

Hoping someone can help me rid IE of a nasty little hijack. I have taken the liberty of posting a Hijackthis log, to see if anyone out there can advise? Please let me know what you think, so I can return to normal, happy computing! Apologies in advance for the …

Hi guys, I am new to this forum and i am seeking help to fix a virus i have on my computer. My desktop has been replaced with a blue background and text saying: Security Warning: A fatal error in IE has occured at 0028:C0011E36 in VXD VMM(01) + 00010E36. …

this is my log from highjack this i didnt really understand all the things i was told to do before posting hope this helps Logfile of HijackThis v1.99.1 Scan saved at 9:33:38 PM, on 6/15/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe …

I was able to remove Aurora by reading some advice from other threads.(thanks crunch) Now that I removed aurora, I get no VX2 report from adaware. But I ran VX2 finder and wanted to know if any of these were a concern. -----VX2Finder------ Files Found--- Additional Files--- Keys Under Notify--- …

Could someone please look at my hijack log. I have found two trojan horses: C:\windows\system32\hsmjmv.exe C:\windows\system32\tggvemp.exe Norton couldnt delete them however. Any information will be much appreciated. Thank you very much. Logfile of HijackThis v1.99.1 Scan saved at 01:31:55, on 19/06/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer …

Logfile of HijackThis v1.99.1 Scan saved at 1:22:48 PM, on 6/18/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe C:\Program …

I posted over in the Windows XP forum, but not much help popped up other than come here. So here I am, and here's my problem: My PC will NOT boot up in regular mode, only in any form of safe mode. So here I am in Safe Mode with …

Here is my log, what should I remove from the registry? Thanks in advance. Also, I can't run Spybot (it closes when I "fix selected problems" and AVG wont update. [i]Logfile of HijackThis v1.99.1[/i] [i]Scan saved at 6:51:27 PM, on 6/17/2005[/i] [i]Platform: Windows XP SP2 (WinNT 5.01.2600)[/i] [i]MSIE: Internet Explorer …

I am a new user and apologise for using someone else's thread. My apologies and thanks to DMR, As I posted I am unable to get rid of this virus despite numerous virus killers and as requested here is the log of Hijackthis you thoughtfully provided a link for and …

[COLOR=Red]please help me![/COLOR] I am now really desperate. I know you must be sick and tired of hearing about Aurora but I've tried every spyware program under the sun including spykiller, spybot and many others. All programs delete Aurora (A Better Internet) but it always comes back. Here is my …

My desktop is now all black with a message saying how you can still access deleated files of the hard drive and that spyware can access it, followed by hyperlink that says "removal instructions". This seems to be sitting on top of my background image, and if you right click, …

It simply asks if I would like it to remove VX2 next time windows starts. Trouble is this nasty has embedded itself in the "system32" folder and i've tried removing in safe mode and everything. Has anyone else had this problem and if so did they fix it? Cheers Kris

Firstly, thanks to [b]chrunchie[/b] for the previous help in getting my system back up to normal. :D This quick question though is on behalf of my friend. He is running Windows Me and has been getting an alert message popping up asking if he is sure he wants to delete …

Hey, I have been reading other posts about getting rid of these things, but I'm at a loss as to where to begin. I have just installed Norton - didn't help, I have updated to SP2, I have all the available Windows and Microsoft Updates, I have installed Stinger, Microsoft …

I know you guys must get this a lot, but this Keyspy Trial junk is really ticking me off. I scanned with Hijackthis(latest version v.1.99.1) Now what do I do? Here's the log file Logfile of HijackThis v1.99.1 Scan saved at 3:42:37 PM, on 17/06/2005 Platform: Windows XP SP2 (WinNT …

I am a first time user of the forum so please let me know if you need more info. I keep receiving Aurora popups and unable to clean. I also noticed that when I opened regedit or task manager, they would immediately close. I have used Ad-aware, spybot, ccleaner, ewido …

[SIZE=5]Pop-up "Windows Security Center"[/SIZE][SIZE=5][/SIZE][B][COLOR=Red][SIZE=5][FONT=Times New Roman]In the body of this pop-up I get the message- "WARNING: Firewall detected suspicious network activity Etc, etc.. Do you want to learn how to protect your computer? [YES] [NO] At the same time Internet Explorer tries to log on. Any ideas where to find …

Hello, Can someone please help me with a virus. It keeps popping up in my Task manager, taking 50% of the CPU. If I stop it, either another starts later or when I reboot it. Now something is attaching to my emails and I can't stop it. Here is the …

Hi all, I just performed a clean install of windows xp, and immediately after the install I recieved multiple error messages. The error messages go something like this: "Your registry may be corrupted with spyware", "Corrupted windows registry". Obviously there is an issue somewhere within the registry, but can someone …

hi, i'm having trouble logging onto hotmail. the problem has developed overnight and i think it is down to a virus or other such nasty because i can access it on other computers and i haven't changed any settings. i would be very grateful if somebody could help and look …

please help me! i wish there was an easier way than posting a log... it must get boring for all you gurus. i'm not sure if this is worth noting or not... but i use firefox 99 percent of the time. thanks in advance, joe Logfile of HijackThis v1.99.1 Scan …

I've got a lot of crap on my computer and I have no idea how it got here. I've tried ad-aware, spybot etc. and while they seem to catch a lot of it and remove it, it all comes back when I restart my computer. Here is my HijackThis Log. …

Hi all, I'm new to this forum and also all these virus problems. I have quite a good virus scanner and, as far as i can tell, have never had a problem before. The problem I have now is with internet explorer. I have a search bar which I dont …

i think my anti-virus/anti-spyware software eliminated it, however, i am not sure that i am still free of bugs and/or infections. what do you think ? here is my hijackthis log: -------------------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 6:44:54 PM, on 06/16/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: …

I am new to this but apparently still clueless on how to get rid of this search extender -- I should be able to navigate thru stuff - but can't get my PC to hook up to the internet in safe mode - when i reboot in safe - to …

I keep getting this thing with that file name and I know it is some dialer. I'm not sure how to get rid of it so if someone could help that would be great. Thanks.

i had the same problem with this Trojan Collected 5.L its a pain in the ass. nothing wants to get rid of it.. i downloaded HiJack and heres my resultant log file.. please help me! thanks! Logfile of HijackThis v1.99.1 Scan saved at 10:49:56 PM, on 6/16/2005 Platform: Windows XP …

please can somebody tell me what files need to be deleted and what files i should keep as my computer wont let me run spybot updater and has crippled my nortons anti virus(which i cant uninstall) and keeps redirecting me to clicksearchclick sites please help. Logfile of HijackThis v1.99.1 Scan …

hi, just joined this page, really hoping i can get some help. i am by no means an expert, but i usually can get rid of problems on my computer by running spybot / adaware / norton, but unfortunately this virus seems to be harder to extract. Whenever i try …

Hello all, I hope you can help me.....I have recently been getting strange AURORA POPUPS, and constant bothers with spyware......my computer has slowed down because of it..........I put HiJack This into its own folder and ran the file......these are my results. Logfile of HijackThis v1.99.1 Scan saved at 5:28:49 PM, …

Hi. I went traveling and my roomate messed my pc. Dont know wich websites he did access, but now when i came back i found my pc has this searchbar above start menu. I ran Ad-Aware, Spybot S&D, avast antivirus, and nothing seems to fix this. The protection of Spybot …

recently i had my awsome system infected with spyware. i formated and they came back, i did again, came back. i tried making new partitions and they stay clen a little while, then come back. i htink my IP is listed and alg.exe is letting third party stuff come into …

I was trying get my AIM to work, because every time I try to open an IM box, the whole thing closes, and I went to the aim site, and it said that if i had these three programs, it might be causing it and to delete it...Well I can't …

Hi there, I'm computer inept so thought I'd follow Hijackthis' advice and post the log from my first scan with them. I have a HP Pavilion 542x, use Microsoft XP, and am trying Hijackthis, Adaware, and MacAffee Virus Scan to try to speed up my broadband connection. I have around …

I dont think I have a virus, but who knows. My system has been takes forever to shutdown. Most of the time I get the message that the CCAPP.EXE is not responding. When I ran hijackthis (1.991) the CCAPP.EXE is showing on the log. Does everything that show on the …

Hello, everyone. I having some problems in my computer and I hope you can help me. Everytime I connect the Internet, a lot of I.E. windows with adversitments start to open non stop. And when this problem started, a green icon named "Click Me" appeared in the desktop. I tried …

could someone please look at my hijack log I found a trojan horse called "Trojan horse Agent.AG. If someone could tell me what I need to delete I would appreciate it. Thank you. Logfile of HijackThis v1.99.1 Scan saved at 10:55:29 AM, on 6/10/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) …