4,334 Topics

Member Avatar for
Member Avatar for ten278

Heya - Am riddled with problems that seem to be inherently sprouting from the above mentioned virus/spybots. Ive run Spybot S&D, Adaware (with plugins), Microsoft Spyware, etc to no evail. I trust someone may be able to assist - puh-lease! My HJT and L2M logs are as follows : Logfile …

Member Avatar for crunchie
0
469
Member Avatar for wolvesmatt

i am constantly getting those aurora popups Im not very good at getting rid of these kind of things so could sum1 please help me heres my hijack this file Logfile of HijackThis v1.99.1 Scan saved at 11:31:33, on 06/04/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 …

Member Avatar for crunchie
0
142
Member Avatar for Aldiman

Good night; I have been busy with this problem for the bigger part of the week already. I have run, CWShredder, AdAware, MS antispyware, AboutBuster, Registry First Aid, Spybot - Search & Destroy, HijackThis etc, etc... All in safemode! I am being terrorised by Search Assistent / Shopping Wizard / …

Member Avatar for crunchie
0
130
Member Avatar for sverver

I'm kinda new to this... Could someone explain the obe*.exe records? Logfile of HijackThis v1.99.1 Scan saved at 9:07:17 μμ, on 3/6/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe …

0
101
Member Avatar for scrname

I have that same exact problem. i ran that shredder program ani it founf nothing ( i ran spybot S&D) right before that so i think that deleted it). this is my file Logfile of HijackThis v1.99.1 Scan saved at 1:29:26 AM, on 6/3/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: …

Member Avatar for dlh6213
0
177
Member Avatar for atsand

I would really appreciate your eyes on my problem. I can only access programs and files using Task Manager. I ran SpyBot, Microsoft AntiSpyware, and Adware Filter anti-spy programs today. I can't get Microsoft AntiSpyware or Adware Filter to work now - but I ran SpyBot just before this logfile …

Member Avatar for dlh6213
0
198
Member Avatar for Sagan

First, let me thank anyone who is willing to try an help me. I have tried to fix this for the past 3 hours and it keep coming back. It seems to be related to this stupid Home Search proggy and something called Shopping Wizard. I am unable to remove …

Member Avatar for DMR
0
321
Member Avatar for mattisjo

Hi, I have 4 computers networked using a Netgear router. My ISP is Verizon DSL. Three of the computers are XP, but the one I use for work is Windows 98. I use VPN and my company prefers we use a non-XP machine for security reasons. Well, all was fine …

Member Avatar for DMR
0
94
Member Avatar for rhidassa

I have the blue screen with the "Trojan-Spy.HTML.Smitfraud.c" on, and also "Virus Hunter Security" has created itself on my desktop, and I'm unable to delete it. My system is slower than usual and I've had innumerable trojans pop up from AVG (which I've healed or deleted, depending on the files …

Member Avatar for dlh6213
0
149
Member Avatar for Mart74

HELP....my homepage has been hijacked by a site [url]www.specialgoods.com[/url]. I've never even visited this site. I have tried re-setting my homepage through Internet Explorer but it defaults back to specialgoods.com. I have downloaded Adware, Spybot to name a few and nothing has worked. I have attached a Hijack This Log …

Member Avatar for crunchie
0
131
Member Avatar for playful_julia

Hi i have severe probs with my pc.. for no apparent reason, the keyboard freezes.. then windows media player opens, and approx 20 search file windows open. Please can you check my log, and tell me of any deletes or amendments i should make many thanks julia Logfile of HijackThis …

Member Avatar for crunchie
0
91
Member Avatar for NoVa Audi

ReHello everyone. I have a major problem on my comp. A hijacker has taken over my desktop. The background is all blue and says there is Security Warning. Also there is a bunch of unwanted icons on the desktop i can get rid of. They say things like party poker, …

Member Avatar for crunchie
0
674
Member Avatar for mortalsin

Hi all, Like many posters in this forum, I have been inflicted with the horrible Home Assistent spyware. Whilst troubleshooting on my own, I have: scanned for viruses both online and via Norton; downloaded and ran Ad-Aware, Spybot, CWShredder, Cleanup!, about:Buster in Safe Mode; removed the RI, R3 entries in …

Member Avatar for dlh6213
0
334
Member Avatar for lazypainter

Please help i get this message everytime i boot up, winsock.scr cannot be found please search files or folders! i have heard somewhere it might be a virus!ihave scan it with avg,norton and Mcafee to no avail please help! i have included a hijack log: Logfile of HijackThis v1.99.1 Scan …

Member Avatar for DMR
0
98
Member Avatar for paranoid

I think i have the home search assistent worm. I tried EVERYTHING to remove it. I am desperate!!!If you can help me... Below is my hijackthis log.... Logfile of HijackThis v1.99.1 Scan saved at 11:11:22 πμ, on 28/5/2005 Platform: Windows XP SP2, v.2096 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 …

Member Avatar for dlh6213
0
443
Member Avatar for leikela

hi, shortly after going to a website which i've normally had no problems with, popups came up and i tried to closed them. next, ie stopped working, and none of my folders would open as well. i ran microsoft antispyware, and it removed this hijack browser thing, but it keep …

Member Avatar for crunchie
0
300
Member Avatar for hbmarar

hi to all, Thanks for zeroth as he mentioned this place and the way. I have used the Hijackthis and created the log files of my three systems.It gets slow often especially when trying to access a remote desktop. Also, the system labelled communication do not gets connected instead it …

Member Avatar for dlh6213
0
666
Member Avatar for joe_sausage

Hello, Thanks in advance for the help. I went ahead and downloaded the nailfix and ewido before posting. I followed the steps that y'all have given several people that were having the aurora problems. Below is the log file from right after my ewido scan and right before i checked …

Member Avatar for dlh6213
0
122
Member Avatar for Larom

I got the same AIM Allison did, and got the same virus. The first time I restarted my machine, Windows XP asked me if I wanted to run 'userint32.exe' which is unregistered. I told it "no" and searched google for an answer. I found this page and began working though …

Member Avatar for crunchie
0
152
Member Avatar for Hoggy12

Hey guys, A friends pc has been playing up. Verrrrry slow to start and load anything up and the internet has its own startup page which cannot be changed and unable to go to anyother sites. I have taken a hijack this log which is below and hope that maybe …

Member Avatar for crunchie
0
162
Member Avatar for italianpest

HI, I have this problem with aurora popups and dont know how to get rid of it. i always see the program but it so smart once u end the process it comes back with a new name right away. i tried goin to the system32 folder to delete it …

Member Avatar for dlh6213
0
179
Member Avatar for Mark87

I have just installed Microsoft Office 2003, and everything works fine except for Outlook. Whenever I start up the program it will load up, but immediatley stop responding, and I have no idea what could be causing it to do this. another problem I've been having, which is similar to …

Member Avatar for Soteriologist
0
348
Member Avatar for rebecca51

I believe I have spyware and adware running on my computer - I am constantly getting aurora popups. I have run HijackThis lg, but I don't know what to do now. Here is my log: Logfile of HijackThis v1.99.1 Scan saved at 14:14:52, on 25/05/2005 Platform: Windows XP SP2 (WinNT …

Member Avatar for crunchie
0
361
Member Avatar for Flinn$ter

Please help me make this laptop operational... thanks in advance ------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 7:02:15 PM, on 5/24/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\ati2evxx.exe C:\Program Files\NavNT\defwatch.exe C:\Program Files\NavNT\rtvscan.exe C:\WINDOWS\system32\skeys.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for dlh6213
0
189
Member Avatar for hbmarar

hi, Thanks to the concern and consideration plus help, I recieved from crunchie.thanks to you and it has given me courage to post log files of another system. [COLOR=DarkRed]Logfile of HijackThis v1.99.1 Scan saved at 10:06:47 AM, on 5/17/05 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 …

Member Avatar for crunchie
0
273
Member Avatar for Tom62psu

Rcently got ISTsvc and aurora, tryed getting rid of everything still getting popups, heres a hijac log what else is going wrong?? Logfile of HijackThis v1.99.1 Scan saved at 12:06:58 PM, on 5/21/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe …

Member Avatar for crunchie
0
610
Member Avatar for CanaanJohnMarsh

[FONT=Courier New]Logfile of HijackThis v1.99.1 Scan saved at 12:55:07 AM, on 5/23/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Norton Internet Security\ISSVC.exe C:\Program Files\Norton Internet Security\Norton …

Member Avatar for dlh6213
0
131
Member Avatar for Gilly4

When I open the internet my home page has been hijacked to:-res://msaps.dll/search.html and the message "Tss has caused an error in Tss.exe." keeps appearing My hijack this log is as follows: Logfile of HijackThis v1.99.1 Scan saved at 23:55:59, on 10/05/2005 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 …

Member Avatar for dlh6213
0
357
Member Avatar for faisalniazi

Hello guys, I need some solid help here. Here is my HaijackThis report. I need to get rid of anything thats causing me all the memory drains especially this W32/Bube.gen with my explorer.exe which McAfee does recognize but cannot do anything about it. Any help is appreciated... thanks Logfile of …

Member Avatar for crunchie
0
287
Member Avatar for det54994

Dear someone, I have a problem when IE6 tries to connect to the web. The green bars at the bottom seem to doing something then they seem to stop and it says page can't be displayed. Interestingly when I use a VPN through to the office network and load IE6 …

0
65
Member Avatar for anarchymedes

I think i got some funky virus' and spyware on my computer, heres my HiJack This log....any help would be apprieciated......thanks Logfile of HijackThis v1.99.1 Scan saved at 6:23:45 PM, on 5/22/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for dlh6213
0
263
Member Avatar for chrishop

computer has just recently started being really slow. not sure why. Please help Logfile of HijackThis v1.99.1 Scan saved at 6:07:27 PM, on 5/23/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\BCMSMMSG.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\WINDOWS\System32\DSentry.exe C:\Program …

Member Avatar for paradox814
0
91
Member Avatar for mlbrooks1

Logfile of HijackThis v1.99.1 Scan saved at 9:15:22 PM, on 5/22/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\Explorer.exe C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe C:\Program Files\Common Files\Symantec Shared\Security …

Member Avatar for mlbrooks1
0
187
Member Avatar for PazificDreams

ok guys pls help i need badly. i got firefox installed and after it asksme to update i did the update but after it whenever i type and adress and click go ie doesnt load webpages but with firefox still i can surf no proxies i restored defaults and web …

0
112
Member Avatar for Nashii

HI, I've scanned with Norton and found this adware but cant delete it. I've run Hijackthis and this is the log, could you tell me what can I do to get rid of it please? Thanks, Logfile of HijackThis v1.99.1 Scan saved at 8:54:04 AM, on 21/05/2005 Platform: Windows XP …

Member Avatar for crunchie
0
193
Member Avatar for rvasanth

Hi, I have been living with prosearching.com for few months now. Have tried all Anti-spyware's and searched for the key word "prodsearching" on all the top Anti-spyware vendor sites, with no luck. Here is my HijackThis log Logfile of HijackThis v1.99.1 Scan saved at 9:12:42 PM, on 5/11/2005 Platform: Windows …

Member Avatar for crunchie
0
172
Member Avatar for Johan_Derks

Logfile of HijackThis v1.99.1 Scan saved at 9:39:04, on 19-5-2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Norman\bin\ZANDA.EXE C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\system32\fxssvc.exe C:\WINDOWS\System32\keyhook.exe C:\Norman\bin\ZLH.EXE C:\SCANJET\PrecisionScanLT\hppwrsav.exe C:\WINDOWS\Mixer.exe C:\Program Files\PCI Audio …

Member Avatar for crunchie
0
355
Member Avatar for tonyb130

This is my log file, please help!! Logfile of HijackThis v1.99.1 Scan saved at 9:46:29 PM, on 18/05/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXE C:\windows\system32\ngpw36.exe …

Member Avatar for dlh6213
0
193
Member Avatar for flipstylee

Please help me with this! I've run AdAware, SpyBot Search & Destroy AND SpySubtract. I've run CWShredder and it finds nothing. Yet when I go to Ad/Remove Programs, these three spyware programs remain, with no way of uninstalling them. They're hijacking my homepage, creating new unfavorable Favorites, and causing pop-ups. …

Member Avatar for funkyberger
0
195
Member Avatar for headtohead

Hi The spyware Search Extender/Home Help Assistant/Shopping Wizard programs are on my computer in the Add/Remove Programs window. My startpage has been changed to some spyware website, random words on webpages are highlighted and I can't go onto AOL Instant Messanger because it keeps crashing. I've tried almost everything, but …

Member Avatar for dlh6213
0
322
Member Avatar for KlondikeTW

So, I'm having a problem with Aurora, but don't seem to have the same item as the other thread starters I've seen. I also saw a post to make sure that you start a new thread, rather than tagging it onto the end of anothers, so here's mine. I removed …

Member Avatar for crunchie
0
393
Member Avatar for AlliAnne629

Recently I received an IM from a friend that said something like "this is cool, check it out" where "this" was a link. After clicking on it, a popup sent me to open a new page and immediately the message started sending to everyone on my buddy list. Clearly it's …

Member Avatar for AlliAnne629
0
134
Member Avatar for NoS

Greetings everyone. Here is my HJT log and my VX 2 log. ============================= HJT Log ====== Logfile of HijackThis v1.99.1 Scan saved at 5:48:57 PM, on 5/10/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINNT\system32\csrss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\svchost.exe …

Member Avatar for jackmack
0
303
Member Avatar for ukblade

Hi, Read a couple of posts about Aurora and they seem to be specific to individual machines I have downloaded Hijackthis and saved a log shown below. Any help would be appreciated. Thanks Mark. Logfile of HijackThis v1.99.0 Scan saved at 11:47:54, on 14/05/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) …

Member Avatar for crunchie
0
165
Member Avatar for svikik

:rolleyes: Hi! I have some new problem in Internet. When I click on some site links, white page is just opened. So I can see just the main pages of the sites. What can it be? How to fix this problem? This is my HT file: Logfile of HijackThis v1.99.1 …

Member Avatar for DMR
0
189
Member Avatar for adion

:sad: Hi, My PC had recently been attacked by HackTool.Rootkit virus. I went through some of the instructions that were posted in this forum and was able to remove it partially. But the virus is still lurking somewhere in my PC and i'm unable to remove it completely. Well, here's …

Member Avatar for dlh6213
0
245
Member Avatar for Elslin

Hi there, I'm suffering from various bugs and would greatly appreciate anyone taking the time to scan through this and let me know how to clean things up. Cheers, Em Logfile of HijackThis v1.99.1 Scan saved at 17:16:45, on 04/05/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 …

Member Avatar for dlh6213
0
260
Member Avatar for S|4V3

OK, new user, i think this is the right place, but please move if not. I've installed Symantec antivirus, Adaware, Spybot, Xoftspy and run hijackthis. I've read every thread i can find to fix most of the problems already, but have a few "left" The machine was heavily infested with …

Member Avatar for dlh6213
0
129
Member Avatar for tez

I find the LOP junk has installed itself on my PC. Have used SpyFerret which claimed to remove it but its still there. It has hijacked my home page and lists loads of rubbish in Favourites and a new search bar. How can these people be allowed to do such …

Member Avatar for dlh6213
0
157
Member Avatar for buddyb

Not just my browser, but my entire computer probably. I'm running WinXP Svc Pk2 on a 2 gig machine with 512 megs of mem. My pop-up, spyware situation is like an ants nest. I've run Ad-Aware, Spybot, Microsoft and CW Shredder. I've searched for new downloads, and there weren't many; …

Member Avatar for dlh6213
0
212

The End.