Information Security Forum

Hi. Recently I have been unable to access one particular website. There is nothing wrong with my internet connection, and there is nothing wrong with the website in question, as I can reach it via other computers. I have not installed anything on my pc since this problem other than …

Hey, i run hijackthis and removed what i've been told before .. and it works great untill i reboot my computer, it's all back ! Anyways, after running HijackThis and removing the files, i also run adware and i also run cwshredder, everything seems to work great .. i also …

Logfile of HijackThis v1.99.1 Scan saved at 21:00:46, on 05/03/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Archivos de programa\Ahead\InCD\InCDsrv.exe C:\Archivos de programa\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\ARCHIV~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\ARCHIV~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINDOWS\System32\CTSVCCDA.EXE C:\Archivos de programa\Archivos comunes\EPSON\EBAPI\SAgent2.exe C:\Archivos de programa\Archivos comunes\Microsoft …

hi, my other windows xp is really screwed, i scanned it with kaspersky, spyware doctor, ad-aware and lots more, it came up with alot of spyware, when i try to do a full system scan with norton, it won't work. I press "Full System Scan", then "scan now" it loads, …

I need to know what to get delete to stop about blank please help Logfile of HijackThis v1.99.1 Scan saved at 12:09:50 AM, on 4/25/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\Ati2evxx.exe …

Hi, any suggestion on how to remove home search assistent, home shopping. I have used yahoo anti spyware, ad-ware, and I am currently using Spyward Doctor. I download and ran HJT. The log I have posted below. Any help would be great. Logfile of HijackThis v1.99.1 Scan saved at 6:34:54 …

Hi, This is a Hijack this log from my pc. Problem is that IE 6 takes an ages to start up when clicking on icon from desktop, or through the start menu. Also windows explorer has the same problem. Was asked to get a log so here it is and …

This invalid syntax error comes up about every 5 minutes. I can be reading a page or just writing this here and wham, up it pops , there it just did it. I have no idea what I have here. I think it started after an automatic update. But I …

This “two

Hi I have tried most (well, a lot, have given up after two evenings.. :sad: ) of the tips I've seen relating to this problem but I cant seem to get rid of the: - desktop shortcuts (no, dont have to hide them from my wife - divorced ;-) - …

Hey I am afraid my computer may have spyware and other nasties again. Here is a HijackThis log. Logfile of HijackThis v1.99.1 Scan saved at 1:25:46 PM, on 4/12/2005 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\MSMSGS.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\POPUPER.EXE …

Here is my HJ Log Not having any problems but thought it was worth checking it out. Thanks in advance for your time... Logfile of HijackThis v1.99.1 Scan saved at 7:34:11 AM, on 4/23/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe …

Since 1999 i have been using Norton Anti-virus for my PC and for my LAN but lately i am having some problem with it, coz i think it is not stopping all the viruses even though i am running upgrade every day.... A friend of mine suggested me to get …

Hello i have tried everything you suggested on another thread [url]http://www.daniweb.com/techtalkforums/showpost.php?p=110612&postcount=2[/url] and still i'm, more or less, where i was at the beginning. I am having troubles installing kaspersky trial version, probably because i had another version installed some time ago. Here is my hijack log, its my first message …

I have recently turned on my computer and saw this toolbar on it. My PC is just three months old and I have norton 2005 and my modem has built in virus protection. However I downloaded HIjack this and these are the results. First let me thank you in advance …

WHat is it? Is it a hazard? I saw HIjack 1.99.1 or whatever. I cannot download it and I believe it is die to this.

Hello Fellow members 1st timer looking for help ! my home page is getting reset to [url]http://webforuser.com/...with[/url] some reading in this forum I did a few things and here I have hijackthis log for you experts to help.... thanks heaps Logfile of HijackThis v1.99.1 Scan saved at 4:06:12 PM, on …

Help! I've read the other threads but I dont have those files in my Hijackthis log file. I dont know what I have to delete. I have run everything recommended and nothing has worked. Logfile of HijackThis v1.99.1 Scan saved at 7:49:39 PM, on 20/04/2005 Platform: Windows XP SP1 (WinNT …

Hereis my logfile. I select itens, run the FIx but they continue there. What should I do????Logfile of HijackThis v1.99.1 Scan saved at 07:41:47, on 19/4/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\Mixer.exe C:\Arquivos …

I am using win xp home i somtimes can not switch user or close down have to turn off the power.Have enclosed a hijack this log.Thank You Dave. Logfile of HijackThis v1.99.1 Scan saved at 12:09:04, on 4/20/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) …

Logfile of HijackThis v1.99.1 Scan saved at 1:08:03 PM, on 4/15/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\Ati2evxx.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\wltrysvc.exe C:\WINNT\System32\bcmwltry.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\Explorer.EXE C:\Program Files\ATI …

My desktop is filled with shortcuts to web pages and my IE start page is [url]www.hotoffers.com[/url] but I can't change it. I tried Spyware Doctor, Lavasoft Ad-Ware but they can't seem to fix the problem. I keep getting annoying adult web pages open in new tabs on Mozilla Firefox and …

My windows XP got infected and 21 shortcuts got installed in my control painel, and every 5 min my MS-explorer is aborted by a porn advertisement. I ran hijackthis and here is the log file: Logfile of HijackThis v1.99.1 Scan saved at 21:46:04, on 18/4/2005 Platform: Windows XP SP1 (WinNT …

my desktop has been hijacked and a "Security Warning" is permanently displayed on my desktop. The warning states "A fatal error in IE has occured at 0028:C0011E36 in VXD VMM<01> + 00010E36. Error was caused by Trojan-Spy.HTML.Smitfraud.c....* System can not function in normal mode. Please check you security settings...* Scan …

Hi Y'all. I've got the "danger: spyware" desktop thing going on... - I've update and run ad-aware - I've update and run Spybot Search & Destroy and it can fix everything except "CoolWWW Search.Yexe". Spybot exits everytime I try to fix this issue... - I dl'ed HiJackThis and run and …

I have seen other posts on this forum about the same problem but until I post my specific information, Im afraid that a cannot be helped..... Sigh. Ok. I have scanned with adaware, Nothin there, all adware and spyware is gone. Here is my Hijackthis text... Logfile of HijackThis v1.99.1 …

:?: Can anyone tell me what these files are and how to eradicate them: MWMKyh.exe flagged by Zone Alarm as trying to access the internet Adware.memwatcher.100 Trojan Guard flagged this. BTW, I have continously run Spybot, Adaware, CWShredder, Trojan Hunter.. I keep getting alerts for Spyware popping up automatically on …

You did wonders with my computer so I'm posting Mom's as well... She's had her computer for 4 months and already has 3 tool bars :lol: Well thanks for any help :mrgreen: Logfile of HijackThis v1.99.1 Scan saved at 5:43:58 PM, on 04/16/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: …

my father can't seem to stay out of trouble when he goes on the internet. his computer has been hijacked. here is the log. thanks in advance for any help that you may be able to offer. Logfile of HijackThis v1.99.0 Scan saved at 11:34:33 AM, on 4/16/2005 Platform: Windows …

Hello again! Over the last few days, strange things have been happening. I've run my Ad Aware SE, my Spybot, I use Firefox when I browse, but I'm still having trouble. I'm connected to the internet, because I can talk on AIM, but when I try to browse with either …

I need help what to delete plz because I see my computer getting slower every day. I definitely know I should delete: O4 - HKLM\..\Run: [Windows ServeAd] C:\Program Files\Windows ServeAd\WinServAd.exe, because I had conflicting problems with it lots of times before but I can't delete it because it keeps popping …

Trend PCcillin has identified spyware/adware SPYW_NETZANY.100 on my desktop, which runs XP with IE6. (Lavasoft Ad Aware and Microsoft's antispyware beta do not detect it.) But after I remove the file with PCcillin, Internet Explorer either refuses to open at all, or gives me the message that it has 'encountered …

I just upgraded to DSL from dial-up, and all of a sudden I've entered pop-up hell. They were coming at a rate of several a minute at first. I ran Ad Aware, Spybot, and Norton Anti-Virus. After deleting everything I could with those, the pop-ups have slowed dramatically, but I'm …

Logfile of HijackThis v1.98.2 Scan saved at 4:56:56 PM, on 4/3/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\LEXBCES.EXE D:\WINDOWS\system32\LEXPPS.EXE D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\Explorer.EXE D:\Program Files\NavNT\vptray.exe D:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe D:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe D:\WINDOWS\system32\LXSUPMON.EXE C:\Program Files\Ydvq\Pyywyd.exe D:\Program Files\QuickTime\qttask.exe D:\windows\system32\ngrkep.exe D:\WINDOWS\system32\exp.exe D:\WINDOWS\system32\wintask.exe …

For some reason internet explorer keeps on opening on start-up. Now, at first I thought nothing of it as the internet is the first thing I go for when I log on but now im not so sure. I have removed it from the start menu as everyone I've asked …

Logfile of HijackThis v1.99.1 Scan saved at 1:53:33 PM, on 3/31/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\ZoneLabs\isafe.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\AWS\WeatherBug\Weather.exe C:\Program Files\Adobe\Acrobat …

Anyone have the exe file for this? I can't open it with the zip file and I downloaded the older version that someone put on here, the direct download. Any help would be appreciated!! Heidi

PLEASE HAVE A LOOK IN MY HYJACKTHIS LOG, MY COMPUTER IS ACTING VERY STRANGE....THANKS IN ADVANCE GUYS. Logfile of HijackThis v1.99.1 Scan saved at 20:55:02, on 30/03/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec …

I've got a nasty one this time :( Can someone please check my hijackthis log... OS win98 On opening my IE, it takes me to a aboutblank page with a search engine site or some such, and then a popup comes up saying I have a spyware (ya, duh!)....and the …

Hi there, Im not to sure whats going on with my PC, but I seem to have some form of spyware/adware. Im running Trend Micro Internet Sec 2004, I have done scans with Spybot, Adaware and Microsoft Antispyware, and basically they all pick up different things and I quarantine them, …

I have run all the required programs including CWShredder, TrendMicro, Spybot, Ad Aware SE, & VX2 Cleaner. However, I am UNABLE to change my homepage. It continues to change on its own to c:\searchpage.html. When I ran TrendMicro, there was one trojan that could not be deleted: mtwirl.dll -- if …

I run Avant Browser and recently I went to TrendMicro for a free scan. Since then, my Avant or IE favorites will not allow me to organize them and every time I open Avant, instead of my homepage popping up, a window pops up that asks me if I want …

Hi, please help with removal of hsa. Log file below: Logfile of HijackThis v1.99.1 Scan saved at 4:02:51 PM, on 3/22/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program …

Hi guys. I'm really annoyed with this. Let me explain. I have a lan, 17 computers. I have a permanent internet connection in the main computer which is shared among the others via ICS. Firewall is up on the main computer. All computers run windows XP professional. Now, the real …

Hi, I've scanned over and over with spybot and adaware 1.05 and this reg. key entry keeps coming up even after I press remove. I have also tried to delete it from the registry in regedit, and a box pops upthat I can't do it........can someone please help. Thanks George …

Dear sirs, I've had hotoffers on my computer for 5 days now..I've run ad-adware(in safe mode), spybot search and destroy , microsoft anti-spyware and spysweeper(in safe mode 3 times ) and CWS and hotoffers keeps coming back.I've seen a post on Daniweb talking about going to hotoffers.info and downloading their …

I have a problem with IE6. I have Windows XP service pack 2. I am using a straight cable connection (no router). I had a BHO toolbar (ISTBAR). I was trying desperately to get rid of it. So i ran HijackThis. Got rid of it with HijackThis. I have noticed …

My brother downloaded AlertSpy, which will scan for spyware but requires you to pay to delete them. I have uninstalled it but I am still receiving messages that pop up on my desk top warning me of various security alerts (spyware, trojans, suspicious traffic etc). The messages direct me to …

Hello, this is my first post and I have been trying to get this !$#@ hijack off my computer with NO luck. It seems others have been hijacked by the same program. I've read those logs and none of the remedies are relevant to my problem, maybe becuase I'm running …

ok,I have the hijack this and I did the scan using it but now from ther Iam stuck,how to know the applications that's causing the problem?the machine is having a ploblem 4 sure and I have scanned for spywares and removed them all but there is no much diffrence,its damp …