Posts by getrid

Hi there,
Thanks for the response. I have been opening attachements from the desk top, and I'll try what you suggest.
Thanks,
Rick

Hi,
I run Win XP home Edition.
I use outlook v 6 for some emails. I get sent many word doc documents as attachments. When I click on an attachment in outlook, wordpad opens them, and I prefer that they be opened in Ms Word. tried to correct the problem on my own, but wordpad still prevails. Deleted wordpad.exe and still wordpad opens the attachments. What can I do to remedy the problem? Thanks in anticipation.

Hi there,
The ad problem is solved, now I have icons that flicker at startup! I'm taking issue with that now.
Rick

Hi Butrnsy,
Thanks bunch! I'll get on it. Let you know what transpires.
Rick

Hey Rick,

Here's what I would try... first realize that HijackThis! is a great tool (I use it all the time) but it only provides data that is meaningful when used with additional information. When I got nailed with the Vundo virus it had placed files on my system that looked like legitimate Microsoft OS support files. I've also had disguised driver files... HijackThis! reports them and they look kosher at first glance, but of course they're not.

First, I'd like you to run Security Task Manager. Just google it, download the file and run it. It will give you a prioritized list of what's running (or available to run) on your system. The things at the top and in red are most likely malware and need to be removed. BUT BE CAREFUL! It's only reporting what looks suspicious... some of these could be drivers or other useful items. Removing them could make things worse.

So the next step is identifying what's bad and what's not. For every entry that we suspect we query the filename against one of the startup databases on the net. I use

www.bleepingcomputer.com/startups

If someone in the community has seen it before there's probably at least one entry for it. This is also useful in identifying trojans. If the file on your system is in the wrong directory or if the filename uses the wrong upper or …

Hi folk,
I've been trying to get rid of something that's hijacking my browser and freezing it at the same time. Junk ads like Ebay, Javvin, Podshow, Celbrity Calculator, blowsearch, ezanga, jambotv, etc. popup in a new firefox window. I've run HJT, SmitFraudFix, Vundofix, Look2me Destroyer, VirtumundoBegone, PC Health, EZ-Antivirus with the result of a nicer running machine, but still the ads popup.

Here is my newestHJT scan:
Logfile of HijackThis v1.99.1
Scan saved at 12:12:48 PM, on 6/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SABSVC.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\sstray.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Optimum Online\Netsurf.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Zamaan's Software\Browser Hijack Retaliator 4.5\BHR.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SAdBlock.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = …