2,959 Posted Topics
 | For free Anti-virus programs, try either [url="http://www.grisoft.com/doc/40/lng/us/tpl/tpl01"]AVG[/url] or [url="http://www.avast.com/eng/down_home.html"]Avast![/url]; they often do a better job of removal than some of the "pay for" products from companies like Norton/Symantec or McAfee. |
| | If you already know that you've got one type of infection, it's pretty likely that you have others as well. Please do the following so that we can get a better idea of the state of your system: Download the (free) HijackThis utility: [url]http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe[/url] Once downloaded, follow these instructions to …  |
| | Does the system even have a chance to write any errors to the log files? Use the Event Viewer to check those logs and let us know if you find anything. |
| | Re: dvd burning [QUOTE=Dogtree]If you want to get all insulted over nothing and turn it into a flame war then I'll be happy to rip you a new one. [/QUOTE]And [i]I'll[/i] be happy to lock your account if you even [i]consider[/i] doing so. There will be no flame wars here. A better way … |
| | /dons Kevlar underware to deflect flame...: Steve Gibson has been around for [i]loooonnngg[/i] time, as has his site with the Shields Up! test. I'm not going to place any overall judgement on the guy, but let's just say that he has history of being very opinionated about things, sometimes to … |
| | Hi Andrew, welcome to our site. :) Please do the following so that we can get a better idea of what specific infections may exist on the computer: Download the (free) HijackThis utility: [url="http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe"]http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe[/url] Once downloaded, follow these instructions to install and run the program: Create a folder outside of … |
| | You've got more than the Aurora infection. :( Please follow the instructions below carefully and fully; they are specifically for Aurora removal, but should also clean up some of your other "unwanted guests" as well: Download the trial version of Ewido Security Suite here: [url="http://www.ewido.net/en/download/"]http://www.ewido.net/en/download/[/url] Install it, and update the … |
| | As lloyd suggested, can you boot into Safe Mode or Safe Mode with Networking? If so, does the system seem stable in those modes? |
| | Hi barney_cc, First of all- welcome to TechTalk! We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but … |
| | Hi drrtybyl, First of all- welcome to TechTalk! We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but … |
| | 1. For the problems you're having with the ".dll" files, try running the System File Checker. It will scan your system to make sure you have good copies of the core Windows system files installed, and will tell you if any of the files or missing or corrupted. If it … |
| | There's a little bit of cruft in your HJT log, but nothing which looks like it would be the root of your problem. That, and the additional fact that a DHCP release/renew sometimes fixes the problem, makes it sound like this could be more of a general network connectivity issue … |
 | Re: 3 Spywarers To begin with, please do the following: 1. Run HijackThis again and have it fix: [b] R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - Default URLSearchHook is missing O2 - BHO: Class - {DF83D71D-7E3C-905C-49E6-8B0B8142868F} - C:\WINDOWS\ntqw32.dll O4 - HKLM\..\Run: [iexplore.exe] C:\Program Files\Internet Explorer\iexplore.exe O4 - HKLM\..\Run: [ipmg32.exe] C:\WINDOWS\ipmg32.exe O23 - Service: … |
| | Re: aurora popups Hi lisafigs, welcome to DaniWeb. :) Your log does show signs of the evil Aurora, as well as a few other infections. To begin with, please follow the Aurora removal instructions below carefully: Download the trial version of Ewido Security Suite here: [url]http://www.ewido.net/en/download/[/url] Install it, and update the definitions to … |
 | Hi Rosette, welcome to the site :) [QUOTE=Rosette]Can any of you share your DaniWeb experience[/QUOTE] Hmm, let's see... for me it began about a year and a half ago, when I was drugged and kidnapped in the middle of the night by Dani, our site admin and all-around Forum Goddess. … |
 | This should be pretty straightforward; ask us if you have any questions: - Download the (free) HijackThis utility: [url]http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe[/url] - Once downloaded, follow these instructions to install and run the program: - Create a folder outside of any Temp/Temporary folders for HJT and move it there now. A folder such …  |
| | Aurora is a right pain to remove; please follow these instructions carefully: Please download the trial version of Ewido Security Suite here: [url="http://www.ewido.net/en/download/"]http://www.ewido.net/en/download/[/url] Install it, and update the definitions to the newest files. Do NOT run a scan yet. Please download Nailfix from here: [url="http://www.noidea.us/easyfile/file.php?download=20050515010747824"]http://www.noidea.us/easyfile/file....050515010747824[/url] Unzip it to the desktop … |
| | [QUOTE=Spooner]When you install your router for the first time you can select for example WEP to encrypt the signal[/QUOTE]You can also set up WEP and other security options post-install via the router's built-in setup utility. In addition to WEP/WAP encryption, here's a bit more on security-related wireless settings from an … |
 | [QUOTE=Kamex]and the root partition certainly qualifies as "in use".[/QUOTE]Yes, it certainly does. :mrgreen: Resizing [i]any[/i] partition presents the possibility of data loss, but you're definitely asking to get hosed if you try to resize an active OS/system partition. Also remember that with your particular partition scheme, all branches of your … |
| | Hi Maqrux, welcome to the site :) A couple of things to start with: 1. Post the full and exact contents of the Azureus/MaxConnections error please. 2. Open the Event Viewer utility in your Administrative Tools folder and have a look through your System and Application log files. If you … |
| | I don't see any signs of malicious infections in your log. What happens if you just choose to accept or deny the change when prompted by Sygate instead of closing out of the window each time? One possibility to check: You have at least three programs controlling and monitoring your … |
| | Re: I have isrvs!! Some entries in your log are indicative of the evil "bube.d" infection. Please follow the cleaning instructions in the following link fully and completely (the procedures will most likely clean up some of your other infections as well): [url="http://www.dslreports.com/forum/remark,12688162%7Emode=flat"]http://www.dslreports.com/forum/remark,12688162~mode=flat[/url] After doing the above, run HijackThis again and give us the … |
| | [QUOTE=magnaral]After looking at Event Viewer it looks like there is something wrong with the WIA service, so I have set this one's start up type to "manual", and after that, these pop-ups have disappeared.[/QUOTE]To start with, double-click on the WIA-related messages in Event Viewer and post the specific information that … |
| | [QUOTE=NoaaMan]I am having tha same problem as mister454, the only difference is at the end my message it doesn't say which file is missing. Any ideas??[/QUOTE] Hi NoaaMan, welcome to TechTalk :) You need to start your own thread for your question. For reasons of clarity, we ask that our … |
| | You can post a HijackThis log for us to review if you'd like. If you do that though, please make sure to post it in a thread in the Viruses, Spyware, and other Nasties forum instead of in this forum. 1. Did you do anything software-wise (install, remove, update, etc. … |
| | That sounds like a smitfraud symptom. There are a couple of variants of that infection, and it also tends to bring a few "friends" along with it, so the first thing we should do is get a HijackThis log from you. You probably know the drill already, but: Download the … |
| | Your log is actually very clean; there are no signs of malicious activity there at all. While a clean HJT log does not necessarilly mean that your system is totally clean, there are plenty of non-malicious reasons for abnormal CPU usage. However, if you'd like to examine your system further … |
 | [QUOTE=php4ever]I believe that Forums need a Slap Feature![/QUOTE] Oh, sorry- I guess no one told you about this forum's TroutSlap feature. Here, feel free to try it out: [img]http://www.stevewolfonline.com/Downloads/DMR/Visuals/fishwhack.gif[/img] |
| | Your first run of ewido got a lot of the nasties, but not all. Please perform the following full Aurora removal procedure: Open ewido and update the definitions to the newest files, but Do NOT run a scan yet. Download Nailfix from here: [url]http://www.noidea.us/easyfile/file.php?download=20050515010747824[/url] Unzip it to the desktop but … |
| | 1. You are infected by a worm, which is responsible for many of the entries in your log. A full description of the beast, including removal instructions, can be found at the following site: [url="http://securityresponse.symantec.com/avcenter/venc/data/w32.serflog.c.html#removalinstructions"]http://securityresponse.symantec.com/avcenter/venc/data/w32.serflog.c.html#removalinstructions[/url] 2. There are other infections in addition to the worm. Please do the following to … |
| | [QUOTE=juli]I have been reading the threads and on one of them was the numbers for the web page instead of the www. address I tried this on the explorer and the pages came up[/QUOTE]The "numbers" for the web pages are their IP addresses. If you can reach a site by … |
| | You have a couple of different infections there, including the rather nasty Aurora/Nail.exe infection. Please do the following: (you should print out these directions, as you will need to stay disconnected from the Internet during the course of the fixes) Download the trial version of Ewido Security Suite here: [url="http://www.ewido.net/en/download/"]http://www.ewido.net/en/download/[/url] … |
| | cevans, Considering that this thread was started almost 1 year ago and has been dormant for 8 months, you should start your own thread and post your question there. Being at the end of a very old thread, other members might miss you question here. Also- in our posting guidelines … |
| | Your log indicates that you have at least a couple of different infections. Let's see if we can some of it cleaned up with a few automated utilities before digging in with HJT and manual removal methods 1. Run at least two or three of the following online anti-virus/anti-spyware scans … |
| | You still have active remnants of the iSearch infection, which means that there's a good chance the infection will return in its full glory: [b]O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll [/b]1. You probably [i]will[/i] need to get into Safe Mode to effect the … |
| | Re: VX2 removal 1. [b]C:\WINDOWS\TEMP\RAR$EX00.639\HIJACKTHIS.EXE[/b] That entry indicates that you are running HJT from within a Temp/Temporary folder. Please do the following: Create a folder [i]outside of any Temp/Temporary folders[/i] for HJT and move it there now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do. One of the normal steps … |
| | There's still a little clean-up left to do: 1. Close all open programs, run HijackThis again, and have it fix: [b] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)[/b] 2. Open Windows Explorer and delete the … |
| | Re: Vx2 Help!! Ouch. First and foremost- you have the Aurora/Nail.exe infection. Please follow these instructions carefully and exactly to remove it; and don't hesitate to ask if you have questions about the procedure: Please download the trial version of Ewido Security Suite here: [url]http://www.ewido.net/en/download/[/url] Install it, and update the definitions to the … |
| | Can you give us any more info on the history of the problem? - How long has it been happening? - Had you installed/removed/updated any software at around that time? - Have you had virus/spyware infections or any other problems with the computer lately? You can try running the [url="http://windowsxp.mvps.org/IEFIX.htm"]IEFix[/url] … |
| | Although I doubt this will solve your general browsing problems, that log needs a little clean-up: 1. Uninstall WeatherBug through your Add/Remove Programs control panel; the program has spyware/adware components. I would also suggest removing the Bodog Poker program; although I don't know if that [i]particular[/i] gambling program comes with … |
| | Re: Defragmentation How [i]often[/i]? That really depends on what sort of usage a particular system gets and what functions it performs. It also depends on the particular filesystem you're using on your disks; some filesystems are better than others in terms of dealing with fragmentation (or even minimizing it). For example, Microsoft's … |
| | The function of DNS is to resolve a given site's URL to its corresponding IP address; it plays no direct part in finding a given page and/or file on or within that site. [QUOTE]I wish to send some data to a website in a dns query in this format..where mypage.htm … |
| | We sincerely apologize that the relatively few of us who VOLUNTEER our time helping here did not get a chance to respond to your paricular post out of the hundreds that we work on each day. crickey... :rolleyes: |
| | [QUOTE=Sagan]The hard reboot didn't work, but the web pages instructions did!!! I am going to keep checking it for a few days, but I think it may have done the trick. Thanks a great deal for your help! Sagan[/QUOTE]Can you please post a final log from HijackThis for us to … |
 | Re: List of Objects? The only program in that list that [i]really[/i] needs to go is SpyBouncer; the porgram is bogus. I don't have time to run through your whole list right now, but I'll try to repost tomorrow morning. In general though, Downloaded Program Files can be removed by right-clicking on them and … |
| | [QUOTE=moseley1]hi that worked but i am know losing my taskbar any thoughts[/QUOTE]What worked? Tell us exactly what you've done; that might give us a better idea of what caused the taskbar problem. |
| | Re: Hijack Log [QUOTE=Postie]I think my pc has been hijacked.[/QUOTE]By no less than 4 separate infections even... :mad: 1. HiajckThis alone isn't going to be able to clean all of this up, so let's run a few other tools first. Please download and install: [url="http://www.ewido.net/en/download/"]ewido Security Suite (free trial version)[/url] [url="http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&displaylang=en"]Microsoft AntiSpyware beta[/url] … |
| | [QUOTE=mattisjo]I use VPN and my company prefers we use a non-XP machine for security reasons.[/QUOTE]For security reasons they want you to use [i]Windows 98[/i]?? Now there's a twist... :eek: [QUOTE=mattisjo]I cannot get a browser to run... However, I can still run Yahoo IM, and get to shared directories on other … |
| | Hi Comede, welcome to the site :) Although your log [i]does[/i] shows signs of infection, it doesn't show all of the usual fingerprints of Aurora. Have you already done some cleaning with your Microsoft AntiSpyware and/or other tools? If so, let us know what you've done so far. |
| | There are no indications of malicious infections in your log. You do, however, have a lot of programs/processes set to auto-run when Windows starts, and those can seriously chew up your system resources. Some of them, such as the Norton/Symantec components obviously [i]need [/i]to be running (even if they [i]are[/i] … |
The End.