5,190 Topics
 | |
| | I have just cleared my system of aurora and now I'm getting warnings about a trojan called trojan.startup.nameshifter.bk. Is anyone familiar with this and how to get rid of it? Here's my hijack log: Logfile of HijackThis v1.99.1 Scan saved at 1:32:57 PM, on 7/20/2005 Platform: Windows XP SP2 (WinNT …  |
| | I too was plagued by Aurora and probably various other virus. I attempted to use a variety of recommended spyware, which found and fixed many problems, but not Aurora. I eventually found and followed the "Ewido Suite" & Nailfix.cmd recommendations I found on your site, and all in all things … |
| | Greetings. First off, let me say that you have a great community here and I have found many of your pages very helpful and informative. So thank you for being a great resource. With that said I will move on to my problem. Lately my desktop has been running sluggishly …  |
| | I am using a Dell Latitude CPx Laptop with Windows 2000. Access to the internet has stopped working a couple of days ago. However, in "Safe" mode, I can access the internet OK. I suspect that there may be an unwanted guest in my computer. For convenience this message is … |
| | hey just wanted to post my hijackthis log and make sure everything is clean on my comp...thanks! :lol: Logfile of HijackThis v1.99.1 Scan saved at 4:16:16 PM, on 7/18/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe … |
| | At intermittent times, I keep getting the "Cannot find server or DNS error" on IE6 and "Page cannot be found error" on Netscape & Firefox. About 5 minutes later, I can access the sites. I tried the Microsoft fixes, adjusting SSL, TLS, etc.., anti-virus programs, spybot, adaware, but no luck. … |
| | To start off with I have run Adaware, Trendmicro, Norton, And looked up lots, Below is my HJT file. Any help with this would be greatly appreciated, Ihave fought this all night long and am ready to wipe out the drive and start over, after 6 yrs as a tech … |
| | >.<! I never thought i'd be asking for advice on how to fix my comp, but here it goes. Ever since i was bombarded with pop-ups, my computer had this fatal error message on it all i remember it saying was TROJAN.HTML.smitfraud or something like that, anyhow i got rid … |
| | i have been trying everything to get rid of this thing but nothing works so i figure i might as well put my HJT log and see what u tell me, also i noticed that alot of new things have been popping up in my c drive folder, they all … |
| | Hello... I am running Windows XP Home and I use an AOL Broadband connection. I am encountering the Error #317 pop up window The error #317 message appears as follows: "Error 317 - Microsoft Internet Security Warning Windows is corrupted with spyware virus. You must patch your pc urgently to … |
| | Hi, I've been reading some of the other Aurora solutions and looked at the files you are supposed to delete and didn't find them. I'm guessing every one of them is unique? Well anyway, here are my log files. --------------------------------------------------------- ewido security suite - Scan report --------------------------------------------------------- + Created on: …  |
| | I am having some trouble with pop under ads. They seem to pop up randomly (It can go days without happening) and they are popping up even when I am not surfing the web or using IE. The most frequent time they pop under is right when I login and … |
| | I have tried everything to rid my computer of whatever is making it act erratic. Avg anti virus finds nothing but later finds trojans that it can't delete or heal. Trojan hunter just as innefective. Please help here is my hijack this log. Logfile of HijackThis v1.99.1 Scan saved at … |
| | I just picked up About:blank virus yesterday when I downloaded music. The start page now goes to about:blank every time the browser is launched. I tried NoAdware, Spy Ferret, Microsoft AntiSpyware and Ad-Aware SE. They all detected the virus but could not remove it. I have read some other threads … |
| | Hello, AVG pops up now and then saying "Virus detected, GPSRESL.exe, trojan Dialer.18.c". I have also lost the "appearance tab" from the display properties on the desktop. Also IE links to explicit websites occasionally for no reason. I've run the AVG scan a few times but it doesn't detect anything. … |
| | I just brought tis new DIY com a few month ago but my com seems to get slower & more laggy nwadays,ami i installing too much software or is it that my com is hit wif a virus? my cpu usage is always very close to 100%... i have ran …  |
| | Lately I have been aving a few problems with my computer. IE startpage sometimes goes to Martfinder and sometimes goes to a "Warning Spyware" page-but about 1/3 of the time it goes where it is supposed to. The other problem is from time to time when I am online, I … |
| | My computer surfing is at a slowing to crawl I ran adware and spybot and microsoft antispyware and I also have this thing redswoosh.net constantly trying to log on to the internet. and for the past few days i've been getting messages my virtual memory is low. what do I … |
| | Logfile of HijackThis v1.98.2 Scan saved at 10:15:34 AM, on 7/17/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\system32\ethernet.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Logitech\iTouch\iTouch.exe C:\WINDOWS\WEB\US.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program … |
| | I am unable to find or remove the trojan TR/Dldr.WinShow.AX. It is being detected by AntiVir as TR/Dldr.WinShow.AX and by Norton as MHTMLRedir.Exploit. The virus is inserting itself into the windows temp file. Once I direct my virus programs to delete the virus, it reinserts itself into the same windows … |
| | Hello boys i'm an Italian boys with a problem,THE STEALTH.HIJACK VIRUS!!! :cry: Thisi is my HighJackThis File Log,can you help me??? THANKS!!! ;) Logfile of HijackThis v1.99.0 Scan saved at 14.29.33, on 07/16/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe … |
| | Hi, When I try to launch Internet Explorer, the hourglass cursor displays for a couple seconds, then reverts to the regular cursor. IE does not start and does not appear in the process list. My PC is running XP. I suspect, (after reading many other posts) that the culprit is … |
| | hi, i'm not much of a pc techie but I have setup my folders as per the stickies, downloaded Ccleaner,trojanhunter,adaware,spybot etc, ran in safe mode, turned off system restore, (not in that order) but still cant shift this trojan, norton antivirus stops it everytime i connect to the internet but … |
| | Hi, my antivirus found this toolbar and spybot found admilli can anyone tell me what I need to erase from my hijack this log? Thank you. Logfile of HijackThis v1.99.1 Scan saved at 10:19:08 AM, on 7/15/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running … |
| | Since yesterday, Norton keeps reporting a Virus called 'Hacktool.Rootkit'. It says the file msdirectx.sys in 'C:\Documents and Settings\Roel' is infected. After I remove it (in safe mode, in normal mode I can't see it) it just keeps coming back. Norton says that he can't repair or remove the file. Here's … |
| | Hi, I'm experiencing difficulties removing spyware, malware. the start page now goes to a page entitled about: blank. I also experience pop-up ads, despite using anti-pop-up (google) and spyware programs (microsoft, adaware, spybot). I've done a full system scan with norton and removed items, as well as multiple scans with … |
| | Hey all. I've been having problems with links being added to my favorites and trouble with IE. WHen I first boot up and go online I alwasy get errors where I have to shut down IE and it takes a while before I get it to work. I get around … |
| | Hi Everyone, I hope that someone can please help me with my problem. I started to get the Aurora pop ups on my machine recently. Warning form NAV Searched the n/g's and tried SpyBot S&D M/S Anti Spyware TSG-3 Each one seems to be able to identify the problem - … |
| | This popup appears every 5 minutes : _________________________________ Microsoft Windows Security Warning _________________________________ Your Windows is corrupted with spyware virus. You must patch your PC urgently to protect yourself. Private info is accessed by ports : -8080 -3128 You can patch your PC for free only now and delete all … |
 | hi guys. got a problem with norton. lady openen an email with an attachment and hey presto! norton disabled. eventually found and deleted the virus (wiwshost.exe - trojan.tooso.j) by scanning her harddrive with my pc. ran one of those tools from symantec as well, but it found nothing. now i'm … |
| | Hi guys, I've been hijacked (like thousands of others it seems) by aurora. I've managed to rid myself of the dreaded DrPmon.dll and various other nasties but Adaware still picks up 21 references to VX2. I can delete these registry entries in normal mode through regedit but they reappear when … |
| | Thank you in advance for helping me if you can. I am having a problem when I access internet explorer I get a tcp connection to the same remote ip along with the one I type in. I noticed this when I ran netstat and Active Ports program. I also … |
| | i cannot get the Aurora pop ups of my computer, please help here are the log files from hijackthis Logfile of HijackThis v1.99.1 Scan saved at 4:03:28 PM, on 7/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe … |
 | I have some problems with Aurora and Drpmon.dll, and I can't seem to remove it with ad-aware. Here is my Hijack This log: Logfile of HijackThis v1.99.1 Scan saved at 12:26:37 PM, on 7/5/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe … |
| | I have these annoying Aurora pop-ups. Please, advise what to do - I'll follow the steps exactly! Thank you :) Here is the HJT log with all windows and systray applications closed: Logfile of HijackThis v1.99.1 Scan saved at 4:50:25 PM, on 7/9/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: … |
| | Hi there My norton keeps alerting me to the above trojan. So far I have tried: deleting the file from where I am told it is located C:\WINDOWS\ but it cannot be found even with hidden files shown. ending the process in task manager but cannot see it. locating it … |
| | Ok Im a newbie but with searching for help for my problem I came across this forum..thank god! I seem to be having the same problem as everyone else with these popups. I did try and get rid of this but with mine I notice that when you end the … |
| | Before scanning with Hijack This i scanned with trendmicro and adaware here is the logfile; help would be greatly appreciated my computer has become quite slow. Thanks. Logfile of HijackThis v1.99.1 Scan saved at 3:15:18 AM, on 7/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) … |
| | Hey guys, welll, last Friday, I left my PC on all day , idle. I come back later that night, and I am infested with SpySheriff. I have not been able to get rid of it . I have done system restore, but 1 or 2 restarts later, it returns. … |
| | Hi, Please could someone help me, I have something nasty in my PC. Every time I click send/receive on outlook, I get hundreds of un-delivered emails, its driving me round the bend. I have check with AVG, Aluria, CWS, Beta 1 and HJT. Is there anything in this log or … |
 | Dear Moderator, I am relatively new to the world of adware, malware and other such inventions consisting of malicious/annoying code, and it is a great relief for me to discover, that there does exist, those few individuals who are dedicated to both fighting it and assisting others to protect themselves … |
| | Logfile of HijackThis v1.99.1 Scan saved at 11:47:08 AM, on 7/15/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe … |
| | Hi, When I try to launch Internet Explorer, the hourglass cursor displays for a couple seconds, then reverts to the regular cursor. IE does not start and does not appear in the process list. My laptop is running XP. I suspect, (after reading many other posts) that the culprit is … |
| | While trying to delete, rename, move, or copy and paste a file I get the message: Cannot delete file: Cannot read from the source file or disk. While trying to use a program called Mboot (which can move or delete, move, etc files that don't start up when booting, I … |
| | Ok. Brief summary of my problem. It first started when I noticed a PartyPoker icon on my desktop, and yazifind pop ups started to occur. I've been hijacked before and cleaned up fairly well (or did I?) so I knew some of the steps to take to get rid of … |
| | Can't get rid of Communticator.dll (it keeps refreshing the C:\Program Files\COMMUNICATOR Toolbar (file) ) Ne help heres my Hijack this Log -------------------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 1:04:44 PM, on 7/3/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe … |
| | Logfile of HijackThis v1.99.1 Scan saved at 7:14:06 PM, on 7/8/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\Explorer.exe c:\windows\system32\caemus.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\Sony\HotKey Utility\HKserv.exe C:\Program Files\Common Files\CMEII\CMESys.exe C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe … |
| | I tried following some steps posted at [url]www.pcreview.co.uk/forums/thread-1698461.php[/url] but i just cant delete these things. im new here and any help would be greatly appreciated. here is my hijackthis log file: Logfile of HijackThis v1.99.1 Scan saved at 5:00:01 PM, on 7/12/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet … |
| | Hi, I have taken some of the initial steps to remove this hacktool.rootkit infection on my machine. I have posted below the log from the run of hijackthis. While I did reboot and did not have IE open just before running hijackthis, I did have NAV running and wanted to … |
| | hi there... i have read the other users how they cleared the virus.... do help me out here is the log... Logfile of HijackThis v1.99.1 Scan saved at 3:56:53 PM, on 7/8/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe … |
The End.