5,686 Topics

Member Avatar for
Member Avatar for erts678

i cannot get the Aurora pop ups of my computer, please help here are the log files from hijackthis Logfile of HijackThis v1.99.1 Scan saved at 4:03:28 PM, on 7/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for crunchie
0
122
Member Avatar for WatermelonX

I have some problems with Aurora and Drpmon.dll, and I can't seem to remove it with ad-aware. Here is my Hijack This log: Logfile of HijackThis v1.99.1 Scan saved at 12:26:37 PM, on 7/5/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe …

Member Avatar for crunchie
0
313
Member Avatar for saintlos

I have these annoying Aurora pop-ups. Please, advise what to do - I'll follow the steps exactly! Thank you :) Here is the HJT log with all windows and systray applications closed: Logfile of HijackThis v1.99.1 Scan saved at 4:50:25 PM, on 7/9/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: …

Member Avatar for crunchie
0
175
Member Avatar for Joanna

Hi there My norton keeps alerting me to the above trojan. So far I have tried: deleting the file from where I am told it is located C:\WINDOWS\ but it cannot be found even with hidden files shown. ending the process in task manager but cannot see it. locating it …

Member Avatar for crunchie
0
372
Member Avatar for Hobbierz

Hey guys, welll, last Friday, I left my PC on all day , idle. I come back later that night, and I am infested with SpySheriff. I have not been able to get rid of it . I have done system restore, but 1 or 2 restarts later, it returns. …

Member Avatar for crunchie
0
112
Member Avatar for moraira73

Hi, Please could someone help me, I have something nasty in my PC. Every time I click send/receive on outlook, I get hundreds of un-delivered emails, its driving me round the bend. I have check with AVG, Aluria, CWS, Beta 1 and HJT. Is there anything in this log or …

Member Avatar for crunchie
0
187
Member Avatar for nickyt8

Logfile of HijackThis v1.99.1 Scan saved at 11:47:08 AM, on 7/15/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe …

Member Avatar for crunchie
0
72
Member Avatar for mattisjo

Hi, When I try to launch Internet Explorer, the hourglass cursor displays for a couple seconds, then reverts to the regular cursor. IE does not start and does not appear in the process list. My laptop is running XP. I suspect, (after reading many other posts) that the culprit is …

Member Avatar for crunchie
0
410
Member Avatar for Ghost
Member Avatar for A Monkeys Uncle

While trying to delete, rename, move, or copy and paste a file I get the message: Cannot delete file: Cannot read from the source file or disk. While trying to use a program called Mboot (which can move or delete, move, etc files that don't start up when booting, I …

Member Avatar for DMR
0
517
Member Avatar for RPeeteRules

Logfile of HijackThis v1.99.1 Scan saved at 5:03:08 AM, on 7/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wdfmgr.exe C:\WINDOWS\wanmpsvc.exe C:\WINDOWS\System32\xl.exe C:\WINDOWS\system32\mseq.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Microsoft …

Member Avatar for amill18
0
255
Member Avatar for Atreyu

Can't get rid of Communticator.dll (it keeps refreshing the C:\Program Files\COMMUNICATOR Toolbar (file) ) Ne help heres my Hijack this Log -------------------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 1:04:44 PM, on 7/3/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for dlh6213
0
273
Member Avatar for Shauna3213

A few months ago, my screen began shaking slightly, and has been worsening every since, to the point that it hurts my eyes now to use the computer. Here are the facts: * My computer is an iMac about five years old. Other than the screen, it runs pretty smoothly. …

Member Avatar for Shauna3213
0
246
Member Avatar for C_Man

Dear All: I also have been infected with DrMon.dll and have downloaded and installed Hijackthis. Here is my printout from Hijackthis: Logfile of HijackThis v1.99.1 Scan saved at 10:49:26 PM, on 7/6/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\csrss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe …

Member Avatar for dlh6213
0
139
Member Avatar for thegambler

Hello I recently was on my computer and i was websurfing. I xed out my web browser window and turned opened a new one. SUddenly i realized all my saved settings were gone. I DOnt know what happened. The web browser I use is mozilla firefox. Here is my hijackthis …

Member Avatar for dlh6213
0
131
Member Avatar for tugnutt

It would appear that I've got Aurora and Trojan Horse Downloader.Small.15.BS; here's my Hijackthis log Logfile of HijackThis v1.99.1 Scan saved at 2:26:58 AM, on 7/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe …

Member Avatar for tugnutt
0
416
Member Avatar for quicksilvcanuck

Hey; When i click on favorites in my explorer it shuts down the browser. I know someone else made a post of this and was told to use 'hijackthis' and post the results so here is what came up when i did my scan. Logfile of HijackThis v1.99.1 Scan saved …

Member Avatar for quicksilvcanuck
0
165
Member Avatar for sammy976

Hi Everyone. This is my first time posting. I'd appreciate any help. Here's the problem: My teenage son was using my computer. I have Norton Anti Virus and alert windows started popping up about "high risk" and programs attempting to connect to DSN server. Some of them are "wupdt.exe", "thnall1a.exe", …

Member Avatar for swatkat
0
198
Member Avatar for Girloutside

Hi I've been having repeated problems with the above virus infecting my system. I have up to date Norton antivirus software which didn't seem to be able to shift it, and have since run lots of different scans and spyware programs in an attempt to remove it. The most effective …

Member Avatar for LostSoul
0
248
Member Avatar for monte carlo ss

here's my hjt log files hope you can help me with this Logfile of HijackThis v1.99.1 Scan saved at 17:16:56, on 2005-07-07 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\inetsrv\inetinfo.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for DMR
0
324
Member Avatar for ShhBeQuiet9772

ok this is what is happening... computer is running very slow and has tons of popups that both spybot and adaware will not get rid of. Nortons is the anti-virus software on this computer. most likely downloaded a few bogus popup blockers/killers also, thx for your help Here is the …

Member Avatar for DMR
0
98
Member Avatar for kingdawiyd

can anyone help here is the hijack log. i am having all sorts of pop-ups and crap Logfile of HijackThis v1.99.1 Scan saved at 11:23:24 AM, on 7/8/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe …

Member Avatar for DMR
0
152
Member Avatar for blueradiance

I just did HijackThis and I need some help. Here is the logfile. thank you. Logfile of HijackThis v1.99.1 Scan saved at 5:56:18 PM, on 6/28/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe …

Member Avatar for DMR
0
216
Member Avatar for TehLUEser

Hi, I've been going crazy over this Aurora spyware (or whatever it is). and I just cant seem to get rid of it, I've searched these forums for this problem before, yet I feel I need some hands-on help. Ad-Aware, Spybot and even Nortan cant get rid of this thing. …

Member Avatar for dlh6213
0
148
Member Avatar for troubled

I received this specialgoods trojan like many others, and thanks to the people at this forum, I was able to successfully stop the ads and windows randomly popping up. However, my homepage is still a specialgoods website, and I have been unsuccessful in changing it. Here is my hijackthis log: …

Member Avatar for troubled
0
175
Member Avatar for mizery

i need to save to my desk top but it's telling me that i do not have significate acces privilleges.I brought the computer from some one i dont see any more so if there is a pass code i dont think i can get it.however there are other pass codes …

Member Avatar for mizery
0
203
Member Avatar for cajunjoevp

My eMac takes six minutes to bootup. After that everything works as normal. A friend mentioned to me that she is having the same problem on a G4. Would appreciate any help. Thanks.

0
70
Member Avatar for bultoki

I have a fast dsl connection, but for some reason (presumably spyware) it's recently gone slow. Whenever I try to access a website, it usually says "connecting to host" or "waiting for host" in the status bar, and stays like that for a great while until the website starts to …

Member Avatar for DMR
0
169
Member Avatar for techtard

Hi- I've read many related posts on this and followed the instructions on getting logs from Ewido and Hijack This. Is there anyone that can take a look at the logs and advise what I should/should not delete? I'm not very good at this and worried about messing up my …

Member Avatar for DMR
0
247
Member Avatar for Rybupsp

Hello and thanks to anyone who can give advise. This virus has somehow infected my computer at work which is on a network but I believe our network is safe. I can't get rid of this damn thing cause it keeps regenerating. Any help would be greatly appreciated! Logfile of …

Member Avatar for DMR
0
229
Member Avatar for xceptioner

My girlfriends son downloads off bit torrent sites. Recently he downloaded movie and it said it was corrupt. Now winpatrol pops up frequently about exe.r files and if I'd like them to start-up automatically. I downloaded hijackthis, here is a log, any help, guildance apprieciated. Logfile of HijackThis v1.99.1 Scan …

Member Avatar for dlh6213
0
249
Member Avatar for jaysabz

Hello - I somehow picked up the hookdump.exe and Antivirus Gold trojan. I have an updated subscription to Norton Antivirus but it is unable to detect or remove it. However, several other programs alert me to its existence. There is a small red icon at the bottom of my XP …

Member Avatar for DMR
0
103
Member Avatar for Cup of Squirrel

Recently I've been unable to access the internet i.e. browsers simply show "Page cannot be found". Scanned with AVG, it finds a java openstream virus. I need a little help removing this one ¬_¬ [QUOTE]Logfile of HijackThis v1.99.1 Scan saved at 17:02:55, on 06/07/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) …

Member Avatar for dlh6213
0
211
Member Avatar for snarkys

forgive me im a big noob at all this and have never tried to remove a virus before but ive tried my best to research how to do this on my own for a few days and this is what i have come up with. I downloaded the ewido software …

Member Avatar for crunchie
0
411
Member Avatar for Zooma

I've tried several spyware adware removers without success. I have aHijack this Log: Logfile of HijackThis v1.99.1 Scan saved at 16:28:42, on 02/07/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common …

Member Avatar for dlh6213
0
215
Member Avatar for nick123

Home Search Assistant, Search Extender, and Shopping Wizard are causing my AIM to crash. I'm sure that there is plenty more wrong with my computer, but these are the only three that I know for a fact are messing things up. If you could help me out that'd be great. …

Member Avatar for DMR
0
243
Member Avatar for randolph555

I mistakenly partitioned my external firewire drive. IS there any way I can recover the data?

Member Avatar for kc0arf
0
318
Member Avatar for jdogg118

Hey Everyone, I am new here and I am having a hell of a time getting this crap off my system. :sad: I have download Microsoft Antispyware, Webroot Spy Sweeper, Adaware SE and nothing can seem to fix the problem. Can someone please help me with this.. here is the …

Member Avatar for jdogg118
0
363
Member Avatar for sandytntn

Hi, Any help would be appreciated. Installed HJT to permanent folder and ran. Log is below. Logfile of HijackThis v1.99.1 Scan saved at 12:39:24 PM, on 7/2/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe …

Member Avatar for swatkat
0
317
Member Avatar for barubin

I recently purchased a FireWire/USB hard drive for my G3. It works fine in both systems when I use the USB port but with the FireWire port, when I boot into Panther (10.3) it mounts as expected, but when I boot into System 9.2.2, the system freezes (the cursor will …

0
48
Member Avatar for Furanu

Hello! I am new here and i really don't know that much about computers ~ekk However, i have the annoying aurora popup too and have tried everything... Here is my hijackthis scan, please help me someone: Logfile of HijackThis v1.99.1 Scan saved at 22:40:20, on 02/06/2005 Platform: Windows XP SP1 …

Member Avatar for DMR
0
177
Member Avatar for GlueFist

well after a few weeks of reading and playing around trying to rid myself of this and lord knows what other manifestations of it from my PC I found this site and after reading up as much as I could have taken the first necessary steps I hope in making …

Member Avatar for crunchie
0
274
Member Avatar for syn8

When trying to play a Quicktime files recently I got a window saying, 'Old Quicktime Please upgrade to Quicktime 7.0 or later'. So I went on Apple's website and downloaded Quicktime 7.0. However when I get to the 'select a destination' window on the installer I keep getting a message …

Member Avatar for Zachery
0
126
Member Avatar for Urdna

[COLOR=DarkRed]On my computer I no longer get the "page not found" page, I get this drwebservicehosts page. Can you Please help me, here is my Hijackthis scan[/COLOR] Logfile of HijackThis v1.99.1 Scan saved at 10:27:11 PM, on 6/27/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) …

Member Avatar for crunchie
0
112
Member Avatar for Moo

Hello A few weeks back I was hit badly by a rougue site that bypassed all my virus and adware blocking software like a knife through hot butter. Popups, viruses and redirects took over like mad. Have managed to get rid of most of everything (and believe me it WAS …

Member Avatar for Moo
0
179
Member Avatar for derekn83

Here is my log. Please help me out with this. Thank you very much. Logfile of HijackThis v1.99.1 Scan saved at 2:47:02 PM, on 6/29/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Intel\ASF Agent\ASFAgent.exe C:\Program …

Member Avatar for dlh6213
0
116
Member Avatar for ohiomomtofour

So I go away for a week of vacation and leave my husband at home, and come home to find a computer overflowing with viruses, adware, UGH. The only thing I haven't been able to get rid of is this stupid about:blank thing. Browser has been hijacked to direct to …

Member Avatar for dlh6213
0
283
Member Avatar for paul_dali

about : blank - claims to be smitfraud The problem is that access on the internet has been very limited, the PC keeps crashing and is slow, the hijacked non-changeable homepage is leading me only to sites that can sell me software to fix the problem but I would rather …

Member Avatar for DMR
0
250
Member Avatar for Atreyu

I used to get aurora Pop-ups but now they don't come but I get Different viruses whenever I log on like hlazlv and DrPMon and stuff like that heres my log O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Sun Java Console …

Member Avatar for DMR
0
252
Member Avatar for TWDervish

I'd appreciate any help on this. The pop-ups are driving me crazy! Thanks. Here is what HijackThis found: Logfile of HijackThis v1.99.1 Scan saved at 10:37:33 PM, on 6/27/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe …

Member Avatar for TWDervish
0
104

The End.