DMR

Hi jillian175, Welcome to the site, and thanks for reposting your HJT log in the proper forum. :)

[QUOTE=kc0arf]...but there are other solutions.[/QUOTE]Yup- the following links have more on that; please give them a read and try the suggestions given there, as you may still have malicious components messing with your Net connection. [url]http://www.daniweb.com/techtalkforums/thread27570.html[/url] [url]http://www.daniweb.com/techtalkforums/thread27519.html[/url] If the problems persist after trying the above suggestions: Download the (free) HijackThis …

Your HJT log indicates the presence of more than a few infections. Please follow these general spyware/virus removal procedures to get some/most of the "unwanted guests" off of your system: You will need to disconnect from the Internet for some of the following, so you should print out the following …

Your latest log looks cleaner :) Let's go for the remains. You should print these instructions out or save them into a text file, as you will need to have Internet Explorer (andany other web browser) closed when you do the HiajckThis fixes. 1. I'd suggest you do the following; …

[b]1.[/b] Uninstall the SurfAccuracy program through your Add/Remove Programs control panel if possible. [b] 2.[/b] Follow these general malware removal instructions to clean up as many of the other "nasties" as possible: A) Run at least two or three of the following online anti-virus/anti-spyware scans and let them fix what …

Can you tell us what [i]exact[/i] problems/symptoms you are experiencing, please? Here are links to a couple of HJT tutorials which should help you better understand the log entries: [url]http://www.bleepingcomputer.com/forums/index.php?showtutorial=42[/url] [url]http://www.help2go.com/article153.html[/url]

At the very least, your log shows signs of the Aurora/Nail.exe infection. Please read [url="http://www.daniweb.com/techtalkforums/post142200-5.html"]this post[/url] for hte Aurora removal procedure. The procedure will probably clean out some other infections as well, so follow the instructions carefully, and then post a new HijackThis log after that.

[QUOTE=Gizzard]Thanks for the loads of helping information. [/QUOTE] We are [i]volunteers[/i] here, and provide help in our own spare time (of which we have precious little). The fact that your particular problem was not addressed within 14 hours is not unusual on this support forum or any other. By the …

Yoiks! You tried to run XP on 64M of RAM?! :eek: :eek: Does memzip identify a particular program/process as being the source of the excessive resource usage? If so, please tell us what that process is.

Your log indicates signs of a couple of infections, and there may be more than that. Please perform the following general cleaning procedures: You will need to disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text …

1. Drop your firewalls while troubleshooting, regardless of whether or not you think they have nothing to do with the problems. One less variable is one less variable. 2. If possible, connect the problematic machines via Ethernet as a test. IOW, determine if the problems are only related to WiFi, …

Please do the following: Download the latest version of HijackThis: [url="http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe"]http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe[/url] Once downloaded, follow these instructions to install and run the program: Create a folder outside of any Temp/Temporary folders for HJT and move it there now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do. Run HijackThis, …

Here's the culprit in your particular case: O2 - BHO: ohb - {98640C3B-0699-4D51-ADB4-A6FC48ACB966} - C:\WINDOWS\system32\[b]nst1C.dll[/b] 1. Go to Start -> Programs -> Accessories -> Command Prompt; this will open a DOS box. Type the following command at the DOS prompt and then hit Enter: [b]regsvr32 /u C:\WINDOWS\system32\nst1C.dll[/b] 2. Run HijackThis …

Which program? If you, or Windows itself, are launching multiple instances of the same program, you may see mutiple instances of that program in the taskbar. It could also be a "glitch", though.

Hey phenetic, welcome to the site! :) Browse around, get familiar with our layout, and feel free to ask questions if aanything crops up.

Bridge.dll is a component of a particular malicious infection, but your log shows signs of other infections as well. Please follow the suggestions in the following thread: [url]http://www.daniweb.com/techtalkforums/showthread.php?p=138737#post138737[/url] You don't have to install all of the anti-malware utilities mentioned, but I'd suggest downloading and running Ad-Aware, SpyBot, Microsoft Antispyware, and …

Hang in there MelissaH, we're still with you. Since crunchie is already working through a procedure with you I won't interfere, but he should be online soon.

:rolleyes: .........

Routers are normally used to connect computers on [i]different[/i] networks/subnets; if you really want all of the computers to be on [i]one[/i] network, replacing routers B and C with switches would be the recommended way to go. However, if you connect the A router to one of the LAN ports …

You really should have installed ME first; the recommended order of installation in a multi-boot setup is oldest OS first. If you post your boot.ini file here we might be able to suggest a fix.

1. If the hits are being reported as coming from the outside world, that's normal; there are a lot of malicious programs and people out there trying random IPs and network ports to see if they can find a way into your system. Do your firewall logs give you any …

Hi doug2k9, First of all- welcome to Daniweb! 1. [QUOTE=doug2k9]Logfile of HijackThis v1.99.1 Scan saved at 11:36:00 PM, on 9/30/2005 [B]Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000)[/B] [/QUOTE]The above info in your log indicates that you are sorely behind on your Windows XP and IE updates. Please …

[QUOTE=aolshock]...so this is giving me login issues. [/QUOTE]I don't see any obvious signs of infections in your log. Can you give us specific details of the problem please?

Your log indicates the presence of [I]two[/I] files named "svchost.exe"; one in your C:\WINDOWS\system32 folder, and one in your C:\WINDOWS folder. Only the one in C:\WINDOWS\system32 is legit; the other is almost certainly malicious. There are probably other infectious components still present in your system as well. Please download, install, …

Hi sshohdi, First of all- welcome to TechTalk! We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but …

Hi goldencavalier, We ask that members not "tag" their questions on to a thread originally started by another member; all members who have a question need to start [I]their own[/I] thread for that question. In light of that, I've split your question out from the thread in which you originally …

Hi gracess, welcome to the site! :) We don't deal with technical issues in this particular forum, but if you post your question in a new thread in our [URL=http://www.daniweb.com/techtalkforums/forum64.html]Viruses, Spyware, and other Nasties[/URL], we can help you out there.

Hi Sorsonel, welcome! :)

sshook.dll may still be being loaded by the system. If so, you will not be able to delete the file, because it is in use. Try deleting the file when [URL=http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406]booted into Safe Mode[/URL].

You have a variant of the W32/SDBot worm, as evidenced by the "lockx.exe" file mentioned in your HJT log. Please do the following: 1. Reboot into safe mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up) - Open Windows …

Hi Rat Boy, You're running an outdated version of HijackThis (1.99.0). Please download the [URL=http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe]latest version[/URL] (1.99.1) and post a new log from that version.

Your log shows signs of a few different infections. Please perform the following general cleaning procedures: You will need to disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text file with Notepad. 1. Run at least …

Ouch; that's a pretty heavily infested system. :( Please perform the following general cleaning procedures: You will need to disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text file with Notepad. 1. Run at least two …

[QUOTE=geezer]...and for some reason I couldn't get DaniWeb yesterday at all.[/QUOTE] I don't think that was a problem on your end- I was unable to reach the site for most of the day as well. As for the rest of your post: Crikey! I just don't have the time to …

2. You'll probably have to edit your Registry to get rid of the "crazywinnings" entries; they'll just keep reappearing if you don't. - First, remove the site from your Trusted Zone: Start Internet Explorer, click [b]Internet Options[/b] on the [b]Tools[/b] menu, and then click the [b]Security[/b] tab. Click [b]Trusted Sites[/b], …

Good work. Between CWShredder and your other fixes, you've removed most of the problems. There's still a little bit of clean-up to do though: 1. Have HijackThis fix: [b] R3 - Default URLSearchHook is missing O4 - Startup: DLHelperEXE.exe O16 - DPF: {640B39C1-D713-464F-92C3-75BD972B95EE} - [url]http://www.sidestep.com/get/k42037/sb02a.cab[/url] O16 - DPF: {AED98630-0251-4E83-917D-43A23D66D507} (WebHandler …

It sounds that way to me as well, so I'm moving this to our Security Forum. KimMik1982, Have a read through the following post to find out how to download, configure, and use a few of the recommended (and free) "malware" detection and removal programs: [url="http://www.daniweb.com/techtalkforums/thread5690.html"]http://www.daniweb.com/techtalkforums/thread5690.html[/url] If you have any …

Good- the main "nasties" are no longer present in your latest log. A couple of things, though: 1. MessengerPlus! 3 has a "Sponsored" installation mode, and if installed in this mode, the program will install adware on your system. If you are unsure of which installation mode you chose, you …

Let's start with this so that we can get an overall idea of what's lurking in your computer: Download the (free) HijackThis utility: [url]http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe[/url] Once downloaded: Create a folder outside of any Temp/Temporary folders for HJT and move it there now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis …

Hi, welcome to the site. :) Unfortunately, you have more than the Aurora infection. To begin with, please follow these general cleaning procedures to remove (hopefully) most of the "unwanted guests: 1. Run at least two or three of the following online anti-virus/anti-spyware scans and let them fix what they …

If you haven't already, download another web browser (Firefox, Netscape, etc.) and see if it experiences the same problem. That could help you determine if you have a hardware problem, or a software problem.

[QUOTE=aeinstein]a hub will work for you only if your ISP is setup to assign 2 or more ip addresses for your account/cable modem... my guess is that your isp only assigns 1 ip address per account or cable modem[/QUOTE]That's almost certainly the case, and a broadband router (from Linksys, Netgear, …

[QUOTE=caperjack]I have had all 3 on at one time and don't see why you are having aproblem installing firefox...[/QUOTE] Agreed. I can't say where your problem lies either, but I can say that I had Netscape (version 7.1 at the time) installed on one of my computers and then later …

Hi Daradus, First of all- welcome to the site. :) 1. The standard fix for the Aurora infection can be found [url="http://www.daniweb.com/techtalkforums/post142200-5.html"]here[/url]. 2. In terms of general detection and cleaning, have a read through the suggestions in [url="http://www.daniweb.com/techtalkforums/thread27570.html"]this thread[/url]. 3. If you need specific help from us after following the …

Cheap monitor cabling (or overly-long cabling) is the primary cause of the signal degradation. If you're using thin, flimsy video cables such as those sold by CompUSA, Radio Shack, and the like you'll almost certainly experience the problems you describe.

Please do the following: 1. Download [url="http://www.ewido.net/en/download/"]ewido Security Suite[/url] and install it, and then open the program. If you initially receive a warning message saying "Database not found" when you first run the program, just click "OK" for this. Next- in the main screen, click "Update" and click "Start Update". …

Hi CrosbyBrownlie, First of all- welcome to our site. :) Your log definitely does indicate infections, but it also looks incomplete to me. On an XP computer, there should be much more information beyond the "O4 - HKLM...." entries at the end of log you posted. Please do the following: …

Did you burn the installation CD? If so, did you burn it correctly? 1. A very common mistake is to download a Linux iso images and then just burn it to CD as a file instead of burning the iso as a disk image. Insert the Linux CD into your …

Nothing in your log stands out as an obvious suspect. If you haven't already, [i]entirely[/i] disable your firewall software; that's first step to take when troubleshooting what appear to be global/cross-browser connection problems.

You've got a lot more than the Winfixer problem going on there. :( Please perform the following general cleaning procedures: You will need to disconnect from the Internet for some of the following, so you' should print out the following instructions or save them into a text file with Notepad. …