Information Security Forum

Hi folks, I hope you can help me. This computer tries to dial all the time. Thanks in advance for your help! Logfile of HijackThis v1.97.7 Scan saved at 11:29:53 AM, on 6/23/04 Platform: Windows 98 Gold (Win9x 4.10.1998) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE …

A co-worker of mine is having problems with his computer at work. Since his browser is so messed up that he is unable to post, I am posting this message for him. Following is his HijackThis log file. Logfile of HijackThis v1.97.7 Scan saved at 9:47:16 AM, on 6/21/2004 Platform: …

Nortons cannot delete Dialer Holistyc. Have gone to many sites & they tell me to delete various registry values, e.g. HKEY_CLASSES_ROOT\clsid & HKEY_CURRENT_USER\software\holistyc & [U]another 5 others. [/U] Trouble is, none of these registries are on the puter! I've found a ".hol file" nearby where it tells me to navigate …

I've run Adaware, Spybot, Spy Sweeper, Stinger, and CW Shredder. After those programs didn't find it, I thought i'd try out HJT. I tried do legitamize the log myself, but am not having any luck. I'm not really understanding some of the things. Maybe you guys can help. Logfile of …

Could someone please help me with this HijackThis log. :sad: I would really appreciate the help. Thanks. Logfile of HijackThis v1.97.7 Scan saved at 8:55:10 PM, on 6/23/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\termsrv.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\LEXBCES.EXE C:\WINNT\system32\spoolsv.exe …

My operating system is Me. I know I got it from a videogame emulating site because both times I went to the site I got the virus, I got rid of it once by using scanreg/restore under a command prompt or maybe I didn't get rid of it completely :-| …

I am having major issues with my computer. I keep getting a message,,, EXPLORER caused an invalid page fault in module CAGWIZ.DLL at 017f:10016e94. Registers: EAX=00000000 CS=017f EIP=10016e94 EFLGS=00010246 EBX=0000000c SS=0187 ESP=01a1da60 EBP=01a1da6c ECX=00000008 DS=0187 ESI=011c7ffc FS=3777 EDX=7efefeff ES=0187 EDI=011c8000 GS=0000 Bytes at CS:EIP: f2 ae f7 d9 03 cb …

I am trying to help someone get some of this spyware/adware stuff off of his computer, but am having a few problems. I ran adaware and spybot search and destroy, and then ran a hijackthis log....I am going to post it here, and any help you can provide will be …

For anyone who may have upgraded from NIS 2003 to NIS 2004..........do you find that your computer acts funny at times i.e. locking up, or being very slow, but not all the time? Just curious. I am running Win98, and have a 5 year old HP, and am on cable …

Hello, I just found this site in desperate hopes of fixing whatever is wrong with my internet explorer. If any of you can help me, I would appreciate it. 1. I have: An HP Pavilion with Windows XP home edition service pack 1 2. Thinking that I had a virus …

i've ran spy bot search and destroy but i cant get get rid of Xabot and DSO exploit and im constantly bombarded with pop ups as well. here's a log in hijackthis. :sad: Logfile of HijackThis v1.97.7 Scan saved at 7:38:26 PM, on 6/21/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: …

Logfile of HijackThis v1.97.7 Scan saved at 5:33:40 PM, on 6/15/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\CTHELPER.EXE C:\Program Files\D-Tools\daemon.exe C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe C:\Program …

I too have the dreaded "about:blank" trojan. The following is my Hijack listing. Please help. Logfile of HijackThis v1.97.7 Scan saved at 11:33:24 PM, on 06/22/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common …

after reading a few posts on the bridge.dll error i downloaded hijackthis and was wondering if some one could tell me what to fix thank you --------------------------------------------------------------------------Logfile of HijackThis v1.97.7 Scan saved at 6:48:03 PM, on 6/22/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running …

Okay. I have windows version 2000, Service pack 4. Custom built computer. Last few programs are...well Trillian Pro, and bit torrent. My problem is that everytime I start my computer I get the error "C:\WINNT\system\bridge.dll Cannot be found" I read on another thread on this site that It's spyware, and …

I downloaded a free panda anti-virus from caperjacks programs on his post but when it's running I can't seem to connect to the internet or at least I can't get a web page to come up. Does anyone know how I can fix this? Thanks for any help in advance …

I'm detecting and removing persistant annoyances. Ad aware finds and removes and also Spybot SD, but they come back. I'm specially worried about "Bridge" should I remove bridge.dll? Is that safe? Please help me with this HJT log: Logfile of HijackThis v1.97.7 Scan saved at 08:44:35 p.m., on 18/06/2004 Platform: …

I have been plagued by this same "about:blank" hijack that keeps reinstalling itself and things like HJT, CWShreeding, Spybot and Adware Away do not do any good to resolve the problem. Every thim I have rebooted the settings have been restored and each new browser version has opened to the …

can someone tell me what i should to to get rid of this CoolWebSearch variant? heres the log for it. the two trojans i have are Troj Stilen.A and Troj Agent.L. Please help me! Logfile of HijackThis v1.97.7 Scan saved at 9:43:51 PM, on 6/16/2004 Platform: Windows XP (WinNT 5.01.2600) …

Crunchie, I have the same problem with trying to delete sqlo.dll, but with no success. My symptoms are my IE homepage keeps being changed to a smartsearch page...'about blank' URL. Please help!!!

Hello, I recently got infected by a homepage hijacker virus and all of my attempts to rid my pc of the virus have failed. Description of the virus: 1. it changes the homepage of IE to res://dbipd.dll/index.html#96676 2. it launches (and relaunches) a bunch of process like sysap32.exe, addql.exe, netey.exe, …

My homepage has been hijacked - about:blank. I have ran spybot and adaware. I have ran hijack this and saved the log. can someone help me get rid of it - i did not press ifx because i do not know what should be delted.

I came to this forum looking for help & found many useful tidbits of info.I have downloaded & ran spybot S&D,CWShredder & HJT.When I tried to run Spybot the 2nd time I got parameter 89 changed & a message in what I think is german.Here is HJT log any help …

im running on windows xp, i cannot remove the about:blank page here is my hijack this report C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Softex\OmniPass\Omniserv.exe C:\PROGRA~1\NORTON~3\SPEEDD~1\nopdb.exe C:\Program Files\Softex\OmniPass\OPXPApp.exe C:\WINDOWS\Explorer.EXE C:\windows\system\hpsysdrv.exe C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe C:\HP\KBD\KBD.EXE C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Common Files\Symantec …

I too have apparently become a victim of the of so annoying about;blank homepage situation. I have attempted to follow the advice posted on other threads, and for a bit...I thought that CWShreader did the trick...but it seems that at around 11 AM every day (not when I reboot...just around …

Hi, I think my browser got hijacked, because sometimes the Iexplorer.exe uses nearly 100% of the CPU. So I used the Hijack this, and here's the log: Logfile of HijackThis v1.97.7 Scan saved at 14:50:32, on 22-06-2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running …

keep being redirected to an error message ending in 37049 this is an example of one - res://plyux.dll/index.html#37049 however, the plyux letters change here is the hijack this log: Logfile of HijackThis v1.97.7 Scan saved at 4:14:06 PM, on 6/17/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 …

Hi everyone! Sorry to post another hijack this log file. I've deleted lots of files with hijack this, just afraid to delete the wrong stuff. I've ran adaware and spybot s &d before running hijack this. Any help would really help me out. In my add/remove program list I have …

I want to get I quick search off of my computer, how do I do that?

I have several problems, not sure if they are related or not. I have WIndows XP Service Pack 1. I am using a Dell 8300 desktop. Here are the problems that I am having: Everytime I open IE - different homepage. Have used CW Shredder. The last couple of days …

When I try and launch Internet Explorer, I get an error "Explorer has caused an error in <unknown>. Explorer will now close." I've ran Spybot and AdAware but they aren't getting it done. Please help! Below are the results of a scan using Hijack This: Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE …

I am unable to log on to the internet using internet explorer. I get two error messages C:/windows/bxxs5 the system cannot find dll the file specified. and program c:/program files/rbenhance/rbenh.exe. this application has requested the runtime to terminate it in an unusual way. Can anyone please help. Thanks in advance. …

I installed xpcspypro recently but decided to uninstall it now. The problem is, tried uninstalling it but failed. Any idea how i can delete that application permantly pls? This is my HJT log:- Logfile of HijackThis v1.97.7 Scan saved at 6:21:52 PM, on 6/22/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) …

Sometimes my system just becomes slow and unresponsive then recovers. This is getting annoying. Spybotsd, CWShredder & Adaware scans turned up nothing. THANKS! :cheesy: Scan saved at 20:29:08, on 18/06/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

i installed avg antivirus system, free edition, and now it is showing a message every 20 minutes or so, saying something like this : " found a trojan on this location C:\system volume information\_restore {76F99043 - 158F - 476E - 90DB - 09E418DFFDA3}\ RP31\A0008834.exe" every time i see that i …

MY computer has been hijacked. Saw an article on system file checker for windows xp. Tried to getting running through start-run-sfc.exe . A quick window comes up really fast and then disappears. Ran adaware and spybot and hijack this. Wife is getting really upset . Any thoughts please help me!

Bwahahahaha. Where is my post? It only lived for a couple of hours. Well, have fun peepel, this is not what I call "Forum" where posts are just deleted by the admin at will.

Scan saved at 12:16:30 PM, on 6/19/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS Logfile of HijackThis v1.97.7 \System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\CTHELPER.EXE C:\Program Files\D-Tools\daemon.exe C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe …

I can't get rid of this hijacker. Any help would be greatly appreciated. Here is my Hijack this log. Thank You. Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Aluria Software\ASE\ASEserv.exe C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\Program Files\NavNT\DefWatch.exe C:\WINNT\System32\svchost.exe C:\Program Files\NavNT\rtvscan.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\System32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\winrz.exe …

Hello, I've the about:blank problem. Logfile of HijackThis v1.97.7 Scan saved at 11:41:10 PM, on 6/21/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe E:\Program Files\NavNT\defwatch.exe C:\WINNT\System32\svchost.exe E:\Program Files\NavNT\rtvscan.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\MsgSys.EXE C:\WINNT\system32\Atiptaxx.exe E:\Program Files\NavNT\vptray.exe …

How do I set IE 6.0 from allowing other webpages to place sex links in my favorites? Everytime I start IE 6.0 the first time after booting there is sex links that are in my favorites. I didn't place them there and I'm the only one that uses this 'puter.

My pc is full of popups and it is slowing it down. I also have a browser hijacker. Could someone please look at my hijackthis log and let me know what to get rid of. thanks Logfile of HijackThis v1.97.7 Scan saved at 9:17:52 PM, on 6/20/2004 Platform: Windows XP …

Logfile of HijackThis v1.97.7 Scan saved at 6:24:28 PM, on 6/20/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe C:\Program Files\NavNT\defwatch.exe C:\Program Files\NavNT\rtvscan.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe C:\WINDOWS\wanmpsvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\MsgSys.EXE C:\WINDOWS\GWMDMMSG.exe C:\PROGRA~1\VOB\INSTAN~1\IWCTRL.EXE C:\Program Files\Logitech\iTouch\iTouch.exe C:\Program …

Not sure if n e one here can give me an insight, but I have a XP home edition and when i press CntL/Alt/Del button i get just the body of the window, with the services listing, and not the whole window. It doesn't show the tabs. so i can't …

Folks, i'm about to through my computer out of the window (not microsoft windo) My Internet Explorer has been hijacked and the spyware (or whatever it is) is changing my home page and add a bunch of websites to my favorate. Needless to say that i've tried a bunch of …

Hello i am new here i like the site.Well i have a problem my computer happens to reboot alot.i am running windows 2000 pro.it reboots when i try to download things or install or some times it just reboots.it shows a blue screen with numbers or letters but it shows …

Name: Jiggatom Date: June 11, 2004 at 16:10:43 Pacific Subject: bridge.dll error please help OS: XP Pro CPU/Ram: Pent III Comment: Hi, every time I boot up my comp an error box pops up titled RUNDLL, saying "C:/WINDOWS/Downloaded Program Files/bridge.dll. My comp has been running really slow and i wasnt …

I have been having a few problems I would like to see if someone could look at my hijack-this log and see if there are any obvious problems Thanks Logfile of HijackThis v1.97.7 Scan saved at 11:09:12 PM, on 6/16/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 …

Hi Folks, Hope you don't mind me jumping in here too. I don't have any problems with desktop icons or installed programs not working, but I am not able to consistently use Internet Explorer. I say consistently because the problem is intermittent. I've followed the instructions regarding Hi-Jack This and …

Hello! I am new in case the post count didn't give it away :o Anywho, the past couple days I have been having problems w/ my computer. When I shut it down rundll32.exe will not shut down and I have to do it manually in order to turn off my …