Information Security Forum

This forum has been of enourmous use to me before, but I've never actually posted here until now.. I got something called "ICOO Loader" on my computer. Everytime i click a download link an annoying dialogue pops up and asks me if I want to use "ICOO loader" to accelerate …

I followed the directions you gave me on a previous thread, this is the scan after the CWS and Critical Updates. Sorry for not posting my own thread right away. Please Help. Thank You. Logfile of HijackThis v1.97.7 Scan saved at 1:24:30 PM, on 5/16/04 Platform: Windows 98 SE (Win9x …

I ran the virus scan at trendmicro.com and it came up with different trojans. troj lalus.a troj revop.c = x6 troj briss.h = x2 the paths lead to different exe's and 1 dll file,here is my hijack log. Logfile of HijackThis v1.97.7 Scan saved at 6:35:54 PM, on 5/12/2004 Platform: …

Hi, I am having all kinds of problems with a PC. I have run Ad-aware, spybot and now I have spywareblaster running. I'm having dll issues which I think is causing virtual memory issues. Can anyone see things that I can clean in this log? I would appreciate any help. …

This is my first post so be gentle guys!! I got the MHTML redirect virus. I'm running Norton Firewall and Anti Virus which picked it up after a scan but now the firewall part keeps prompting for allowing access to sites I've visited countless times in the past. The system …

I followed crunchy's recommendations and downloaded and installed adaware and spybot s&d. They fixed the bridge.dll error and lots of other stuff! :cheesy: I found 164 items to remove with adaware and 48 items with spybot. Nice :p I just thought I post the log I got with HijackThis after …

i have my homepage(home site) set to [url]www.yahoo.com[/url]. Recently when i click the home button the site continues to change to search-dot.com/net/search.html. I switch it back to yahoo and then a few hours later its back to the search-dot.com site. here is my hijack log, you can clearly see the …

as a bit of preamble, I stumbled across this site while working to fix my computer and some of the program links have been a godsend... without further ado, here is the log... any and all help is v. much appreciated Logfile of HijackThis v1.97.7 Scan saved at 4:16:41 PM, …

ad-aware does not get rid of this hijack. here is the log file: C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\FORKCO~1\Daletray.exe C:\PROGRA~1\AIM\aim.exe C:\WINDOWS\system32\winproc32.exe C:\Program Files\Avant Browser\iexplore.exe C:\Documents and Settings\Daniel\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = [url]http://4-counter.com/?a=2&b=cr[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [url]http://prosearching.com/searchbar.html[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [url]http://prosearching.com/searchbar.html[/url] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com …

There was a thread about Bridge.dll so I ran hijackthis like it said but it says to have someone knowledgeable tell me what I should fix and stuff so here is a copy of the log file. Thanks. Logfile of HijackThis v1.97.7 Scan saved at 4:54:42 PM, on 5/10/2004 Platform: …

It seems to be a popular error............I appreciate the help. Let me know if I can do anything to help you guys. I'm not up on computers enough to be a help to anyone. BTW, I'm not using Limewire or Kazaa anymore. I have a good feeling thats where my …

Hi, Could I have some help, My email address is [email]andrew.north6@btinternet.com[/email] Trying to get out something that should not be here, trying to get internet explorer to load.(Its not at the moment) Logfile of HijackThis v1.97.7 Scan saved at 00:46:41, on 13/05/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet …

I need help in diagnosing my hijackthis logfile v1.97.7 Here it is: Logfile of HijackThis v1.97.7 Scan saved at 1:02:26 PM, on 5/13/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec …

i'm not good w/ computers can someone help me w/ this please?? thanx in advance! Logfile of HijackThis v1.97.7 Scan saved at 8:22:41 AM, on 5/13/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: F:\WINNT\System32\smss.exe F:\WINNT\system32\winlogon.exe F:\WINNT\system32\services.exe F:\WINNT\system32\lsass.exe F:\WINNT\system32\svchost.exe F:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe F:\WINNT\system32\spoolsv.exe …

This bridge.dll keep coming up everytime i start up. Some one plz help me make it go away. Make it no more. Here is my log from HijackThis: Logfile of HijackThis v1.97.7 Scan saved at 5:44:02 PM, on 5/14/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 …

i need HELP.... i have my home page changeing, pop ups etc....ran hijack this and here is the log. any suggestions of what to delete. the first 4 entries look suspicious to me.... thanks a million. i already ran spybot. Logfile of HijackThis v1.97.7 Scan saved at 10:38:41, on 14/05/2004 …

On reboot my homepage changes, I have run adaware and tried editing the registry all to no avail. This problem started after I did a download I don't know what the download was. If I change the homepage to google after a reboot this what is in the home page …

I keep getting a post-start up message about a "BRIDGE.DLL" missing from the system file. I have no clue what it is or where it went. Here is the hijackthis log: Logfile of HijackThis v1.97.7 Scan saved at 10:06:58, on 14.05.2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer …

stupid popup, but here's the log file, i've already given it it's own folder not on the desktop and not on the hdd itself, just need what to delete and how, here's the log. Logfile of HijackThis v1.97.7 Scan saved at 10:02:56 PM, on 5/13/2004 Platform: Windows XP SP1 (WinNT …

every time i start up windows, i get a message saying that the bridge.dll file could not be found. how can i get this to stop?

Hi everyone; I'm new here so I will try to describe my problem as well as I can. everytime I open my internet explorer, I always got an about:blank page which provide a kind of search engine. I tried several time to delete the file on my computer (which is …

Could you please tell me how to get rid of bridge.dll error message... Logfile of HijackThis v1.97.7 Scan saved at 10:36:49 AM, on 12/05/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\System32\gearsec.exe …

Bridge.dll again Now I am in the “missing bridge.dll

Must be getting old... But I'm also getting the brigde.dll error... I've read some of the other topics about this. But I still wanted to check my own log with you guys/gals, before I delete something critical. (yep, I'm a n00b :o ) I also keep getting this very annoying …

2020search and search2020 are both in the add/remove programs list and when I try to uninstall them nothing happens. I ran a search on google and it gave me the registry keys and files to delete but they aren't on the system anywhere. Anyone else have this problem?

Hi there, hate to do this to you again but I'm having the same problem... I just closed everything and did a scan with HijackThis and here's my log: Logfile of HijackThis v1.97.7 Scan saved at 8:25:31 PM, on 5/11/2004 Platform: Windows 2000 SP2 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 …

There is a free spyware dector/remover kept prompting me and if I strike the ok key it attempts to take me to the following site: [b]msi2[/b].[b]optima[/b]-[b]host[/b].[b]com[/b]/spyhunter.html. and install PurityScan on my PC. Please help me to get rid off this propmt!!

I have this error to and have no idea whats wrong my computer is being really gay also i have many problems other than that so if you something that shouldnt be there can u tell me how to fix please...thx Logfile of HijackThis v1.97.7 Scan saved at 5:22:38 PM, …

PLZZ help i've got that bridge.dll thingy thats pissin me off(:evil: ) and a hijacker that my pestpatrol and ad-aware cant pick up that always redirects me to [url="http://81.211.105.43/search.php?v=4"]http://81.211.105.43/search.php?v=4[/url] and this is my HJT log Logfile of HijackThis v1.97.7 Scan saved at 10:48:29 AM, on 8/05/2004 Platform: Windows XP SP1 …

[size=2]Hi I have another log to check please on my laptop. Have made a special folder and followed previous instruction running spybot and adaware. thanks for your time and help. Logfile of HijackThis v1.97.7 Scan saved at 12:58:57 , on 11/05/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer …

Logfile of HijackThis v1.97.7 Scan saved at 2:11:47 AM, on 5/9/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\ptsnoop.exe C:\WINDOWS\LOADQM.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\SBC YAHOO!\CONNECTION MANAGER\IP INSIGHT\IPMON32.EXE C:\PROGRAM FILES\BROADJUMP\CLIENT FOUNDATION\CFD.EXE C:\PROGRAM FILES\SUPPORT.COM\BIN\TGCMD.EXE C:\WINDOWS\SYSTEM\QTTASK.EXE C:\PROGRAM FILES\MYWAY\BAR\3.BIN\MWSOEMON.EXE C:\PROGRAM FILES\LYCOS\IEAGENT\LOADER.EXE …

this is my hjt log, yesterday i had the bridge.dll thing but now i still hav the hijacker that always sends me to [url="http://81.211.105.43/search.php?v=4"]http://81.211.105.43/search.php?v=4[/url] when i use a search site and always sends me to [url="http://81.211.105.43/index.php?v=4"]http://81.211.105.43/index.php?v=4[/url] when i try to change my homepage. PLZ HELP ME!!!:cry: Logfile of HijackThis v1.97.7 …

I have this HuuuuUuUUUge problem everytime I start my Computer. This error pops up on my screen which says "The file C:\Windows\System\bridge.dll cannout be found on your computer"- i don't exactly know WHAT it says but it's something like that... but I'm quite sure that it's the right address. So …

Hello everybody, I have a big problem with my computer (not the one I am currently using). Here's some info: I have Windows 98 Version 2, (I don't know what the patch is, but under the general tab I found 4.10.2222, which could be it). Sorry this isn't very informative, …

All: I've been reading with great interest the threads regarding IE hijacking and have tried a number of the sugestions in order to get myself fixed, but still seem to be having a problem. I originally found the following in my Control Panel Add/Remove Programs: MsSearch MSIESH IEFEATSL.DLL I have …

All, I posted this on an earlier thread and caperjack said I should start my own. Basically my default home page has been redirected every time I reboot to [url="http://www.searchdot.net"]www.searchdot.net[/url]. I have run Sypot and tried Hijeckthis.exe but they did not solve the problem. caper's reply indicated I shoudl run …

You should read Merijn's HijackThis log tutorial: [url]http://www.spywareinfo.com/~merijn/htlogtutorial.html[/url] CoolWebSearch Variants , [url]http://www.spywareinfo.com/~merijn/cwschronicles.html[/url] TonyKleins BHO and Toolbar lists are essential references, frequently updated. [url]http://sysinfo.org/bhoinfo.php[/url] and It is very convenient to use Merijn's BHOList app. for searching them. [url]http://www.spywareinfo.com/~merijn/files/bholist.zip[/url] Use Ctrl-Z to toggle between the BHO and Toolbar lists. X means bad …

My home page in IE is now about:blank. I can manually remove all appropriate registry entries (startpage, etc), and then if I click on the IE icon the arrow turns into an hour glass for 15 seconds or so, then back to an arrow. If I then look at the …

My browser is being hijacked to prosearching.com. I haven't installed anything on my computer in the last week other then hijack this tonight and this problem just started today. I am running windows 98 on a gateway computer. Norton Antivirus and Trojan Remover have found nothing . I have posted …

first off ill explain my problem. I keep getting a redirect to best-search.info theres a www. in front of it, but i dont want anyone clicking on it and catching what my computer may have. Now i get this redirect whenever i try to click on a link to download …

Hi this is my fist post, iv been having trouble with my desktop and basicly anything that uses windows explorer. when i click anything (other then netscape which i am having to use to post this) it apears to not load... the mouse changes as if its laoding, but then …

Hello you great people; I have been hijacked by [url="http://th.msie.cc/index.php?aid=20035"]http://th.msie.cc/index.php?aid=20035[/url] and of course am thouroghly annoyed. I have read your previous threads on this issue but would like to be sure that I don't delete something I need. I have adaware, spyware blaster, spybot and hijack this all downloaded and …

:sad: i need to know what to delete. omega is a big problem. Logfile of HijackThis v1.97.7 Scan saved at 8:17:24 PM, on 3/31/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE …

Hi, I had the 1on1 dialer. I have run updated versions of ad aware, and spybot search and destry. Can you please look and see if this log is now clear. Thanks! Logfile of HijackThis v1.97.7 Scan saved at 12:20:50 PM, on 08/04/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: …

I have been hijacked! this is my HijackThis log, I have no idea what to do with it! [size=2]Logfile of HijackThis v1.97.7 Scan saved at 9:55:49 AM, on 6/04/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk …

Hey boys ! I've been hijacked. These are the results after running HijackThis .. Can you tell me what to delete ? Thanks a bunch !! Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\WINDOWS\System32\ScsiAccess.EXE C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\SIMONG~1\LOCALS~1\Temp\Rar$EX00.687\HijackThis.exe …

When I boot up,I get this as my default page in Internet Options: [url="http://%76%70%75%7A%65%65%2E%74%2E%6D%75%78%61%2E%63%63/%68%2E%70%68%70?%61%69%64=35"]http://%76%70%75%7A%65%65%2E%74%2E%6D%75%78%61%2E%63%63/%68%2E%70%68%70?%61%69%64=35[/url] The page eventually loads as : [url="http://th.msie.cc/index.php?aid=20035"]http://th.msie.cc/index.php?aid=20035[/url] On running hijack this,the file looks as follows: [size=2]Logfile of HijackThis v1.97.7 Scan saved at 22:04:29, on 26/03/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) …

Hi, I want to get rid of this [url="http://www.lookfor.cc"]www.lookfor.cc[/url] search pop up thing. I've run Ad-aware and set the settings to how it said on aother post, then I've run the 'Hijack This' program and done the scan, I've fixed a couple of files which I know that should be …

Hello, I been to this forum a few times before for suggestions. This is my first post though. Just wondering if I'm infected any where. bTgX5m8a.exe and also a.exe really stand out to me thx for your help. Logfile of HijackThis v1.97.7 Scan saved at 10:24:05 AM, on 4/1/2004 Platform: …

Logfile of HijackThis v1.97.7 Scan saved at 8:17:24 PM, on 3/31/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPSYSDRV.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\WINDOWS\OLEHELP.EXE C:\PROGRAM FILES\BACKWEB\BACKWEB\PROGRAM\BACKWEB.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\TEMP\RAR$EX01.898\HIJACKTHIS.EXE …