Search DaniWeb - hkcu

Changing HKCU on a per user basis 18 Years Ago by ikkyusan …createobject("wscript.shell") myobject.RegWrite "HKCU\Software\Random\item\3.0\Security\iSerialNumber",… "1234567" myobject.RegWrite "HKCU\Software\Random\item\3.0\Security\SerialTemp", …"1234567" myobject.RegWrite "HKCU\Software\Random\item\3.0\Security\sActivationKey", … HJT logfile that I'd appreciate some help with 19 Years Ago by hillmilt …Explorer\IEXPLORE.EXE E:\incoming\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = …system32\ntddetect.exe O4 - HKCU\..\Run: [Ihb] C:\WINNT\system32\Doa.exe O4 - HKCU\..\Run: [ntddetect] C:\WINNT…\system32\ntddetect.exe O4 - HKCU\..\Run: [PayTime] C:\WINNT… spyware has taken control of my pc 18 Years Ago by SYRACUSEVIC ….onload = SafeOnl] c:\WINDOWS\System32\ window.onload = SafeOnload; O4 - HKCU\..\Run: [ gSafeOnload[gSafeOnload.length] ] c:\WINDOWS\System32\ gSafeOnload[gSafeOnload.length….Show = PUW_S] c:\WINDOWS\System32\ this.Show = PUW_Show; O4 - HKCU\..\Run: [ this.CheckFrequency = PUW_CheckFreque] c:\WINDOWS\System32\ this.CheckFrequency = … Browser opens automatically in task manager 19 Years Ago by revenant92 …[url]http://www.mlmzloghbzmhskwohz.com/PhXcFtONKYbCKLKkzGOE_EPnggEUJSZJ7jBtRxEmIvxsFW9zqYBSbiT45MEkfUg5.html[/url] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url]http://… - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = [url]http://all… Re: Browser opens automatically in task manager 19 Years Ago by revenant92 …url]http://www.bywymjqazsiqeueeogsbqzyr.biz/PhXcFtONKYbCKLKkzGOE_EPnggEUJSZJ7jBtRxEmIvzvG_ZCNZrx2iT45MEkfUg5.asp[/url] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url]http… HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = [url]http://all… hackthis log 18 Years Ago by rollsrobb …{069D83E5-1BD8-429A-880D-EE038F315784} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper -…{13F77752-53DD-435C-BB83-67A817EBDCA4} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper -…{16BBB15C-D267-41E7-ABA2-C09F08C1EE2E} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper … Re: hackthis log 18 Years Ago by DMR …{069D83E5-1BD8-429A-880D-EE038F315784} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper …{13F77752-53DD-435C-BB83-67A817EBDCA4} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper …16BBB15C-D267-41E7-ABA2-C09F08C1EE2E} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper … windows won't load on desktop 18 Years Ago by needhelp911 …WINDOWS\SYSTEM32\MSAVCfg.exe H:\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url…]http://www.dellnet.com[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about…Device Service] C:\WINDOWS\SYSTEM32\SysExec.exe O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money… Spyware..about:blank help plz 19 Years Ago by HelpHelp …\Microsoft\Internet Explorer\Main,Search Page = about:NavigationFailure R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:NavigationFailure R0 - …HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:NavigationFailure R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank R1 - … HELP WITH HOTOFFERS PLEASE MY PC IS F'd 19 Years Ago by ROORman05 … [url]http://kon4ay.biz/[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C…http://aflashcounter.com/?a=2[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft…[url]http://www.comcast.net/memberservices/[/url] (file missing) (HKCU) O9 - Extra button: Support - {F2B2E116-47F1-486C-AD38… helpless amish guy/ HJT scan log 18 Years Ago by katanashi …{0D416680-8653-48A5-B37E-319FB2EA4F0B} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper …{1B5A32D3-D89B-4BD2-9BEF-231F56056073} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper …1DF48C15-ED01-41A6-A638-024C9BADC8F6} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper … Re: helpless amish guy/ HJT scan log 18 Years Ago by petercoti …{0D416680-8653-48A5-B37E-319FB2EA4F0B} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper …{1B5A32D3-D89B-4BD2-9BEF-231F56056073} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper …1DF48C15-ED01-41A6-A638-024C9BADC8F6} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper … Re: helpless amish guy/ HJT scan log 18 Years Ago by katanashi …{0D416680-8653-48A5-B37E-319FB2EA4F0B} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper …{1B5A32D3-D89B-4BD2-9BEF-231F56056073} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper …1DF48C15-ED01-41A6-A638-024C9BADC8F6} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper … Check my HJT file plz 17 Years Ago by Killemall …Internet Explorer,Search = c:\searchpage.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url]…http://search.xrenoder.com[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = c:\… - http://www.comcast.net/memberservices/ (file missing) (HKCU) O9 - Extra button: Support - {6C1193BD-EA21-4EEA-… Help My Friend 17 Years Ago by kylethedarkn … Explorer,Search = c:\searchpage.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [URL… - http://www.comcast.net/memberservices/ (file missing) (HKCU) O9 - Extra button: Support - {6C1193BD-EA21-4EEA…E71A0E7DE11F} - http://www.comcastsupport.com (file missing) (HKCU) O9 - Extra button: ComcastHSI - {73009461-C0E6-4F6C… Pls help: Yet another explorer.exe keeps reloading 16 Years Ago by SCJTN …:\WINDOWS\system32\qvvjdgjh.dll",s O4 - HKCU\..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office… Files\ThinkPad\Utilities\TpKmapAp.exe -helper O4 - HKCU\..\Run: [QCWLICON] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON…Files\Common Files\Symantec Shared\ccApp.exe O4 - HKCU\..\Run: [BlazeServoTool] "C:\Program Files\BlazeVideo… can't see c drive, virus alert in taskbar, same fixes as i read won't work 15 Years Ago by Cabinboy …"Stylus CX4800" /EF "HKCU" O4 - HKCU\..\Run: [updateMgr] "C:\Program Files…Messenger\8876480 \Program\LDMConf.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present …no file) . ------- Supplementary Scan ------- . R0 -: HKCU-Main,Search Bar = hxxp://google.icq.com/search/search_frame.… Windows XP crashes at Logon UI after running spybot 15 Years Ago by agent rotary …-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files…Brian\LOCALS~1\Temp\i7zuolkp.exe O4 - HKCU\..\Run: [ua7mndy75d0fmey0fiuxm1hn58qd7fiajzcxkpmvnirr19] C:\DOCUME~1\Brian\LOCALS…Brian\LOCALS~1\Temp\xnohvyhfjhu.exe O4 - HKCU\..\Run: [jveir5u0ko72s66h2dkoyou0nzfwdqa5iik18whu3] C:\DOCUME~1\Brian\LOCALS… Re: Windows XP crashes at Logon UI after running spybot 15 Years Ago by agent rotary …Anti-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files…\Brian\LOCALS~1\Temp\i7zuolkp.exe O4 - HKCU\..\Run: [ua7mndy75d0fmey0fiuxm1hn58qd7fiajzcxkpmvnirr19] C:\DOCUME~1\Brian\LOCALS…Brian\LOCALS~1\Temp\xnohvyhfjhu.exe O4 - HKCU\..\Run: [jveir5u0ko72s66h2dkoyou0nzfwdqa5iik18whu3] C:\DOCUME~1\Brian\LOCALS… Re: Windows XP crashes at Logon UI after running spybot 15 Years Ago by agent rotary …Anti-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files…\Brian\LOCALS~1\Temp\i7zuolkp.exe O4 - HKCU\..\Run: [ua7mndy75d0fmey0fiuxm1hn58qd7fiajzcxkpmvnirr19] C:\DOCUME~1\Brian\LOCALS…Brian\LOCALS~1\Temp\xnohvyhfjhu.exe O4 - HKCU\..\Run: [jveir5u0ko72s66h2dkoyou0nzfwdqa5iik18whu3] C:\DOCUME~1\Brian\LOCALS… hijackthis log...I need help please 19 Years Ago by adzidzor … found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *Registry key… found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key… Hijack This Log, annoying popups 19 Years Ago by Manzi …System32\safrslv.exe C:\hjt\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = [url="…searchmiracle.com/sp.php[/color][/u][/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url=&…name) - {1076CA5B-84B9-45F0-A9D7-3685439FAA4A} - (no file) (HKCU) O9 - Extra button: (no name) - {4F867BD7-AF0D-4297… Something showling my system down (hijackthis log incl) 19 Years Ago by saruman … found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *No values… found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key… Internet access problems linked to norton? 19 Years Ago by hannah22uk …unzipped\hijackthis[1]\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = …]http://gb10.hpwis.com/[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [url…url]http://gb10.hpwis.com/[/url] R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost… 3 weeks of pain! Hijack log 19 Years Ago by =SA=Dragonfire …C:\PROGRA~1\Toolbar\toolbar.dll/sa R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = [url]…http://searchmiracle.com/sp.php[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = [url…]http://www.searchmiracle.com/[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft… hijackthis log pls help quick 18 Years Ago by mikeandike22 …url]http://www.vroomsearch.com/[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url… - HKLM\Software\Microsoft\Internet Explorer R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = […Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU) O9 - Extra button: WeatherBug - {AF6CABAB-61F9… Popups!! (hijackthis included) 18 Years Ago by Mr.Jamie … found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *Registry key… found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key… Another hacktool.rootkit virus 18 Years Ago by oades11 … not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *Registry key not… found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not… Ad/Spy/Malware problem that I can't fix 18 Years Ago by weedabix …E7C6-4E1F-A577-07D4AC549A48} Medium 7AdPower HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0D62A517…-A28B-480F-8C3D-581F119A8AB8} Elevated MediaGateway HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8FCDF9D9…614F-47C0-B3E3-ECFD34EED658} High YourSiteBar HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{42F2C9BA… For Kali2005: HackTool.Rootkit - Help Needed 18 Years Ago by Kali2005 … not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *Registry key not… found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not…