4,334 Topics

Member Avatar for
Member Avatar for BossWolf

Hi,i'm new. I need help to remove the hijacker "hotoffers" This is mi hijackthis log Logfile of HijackThis v1.99.1 Scan saved at 22.35.19, on 11/04/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\GEARSec.exe C:\Programmi\Symantec\Norton Ghost\Agent\PQV2iSvc.exe C:\WINDOWS\System32\nvsvc32.exe …

Member Avatar for dlh6213
0
226
Member Avatar for foxkueh

Logfile of HijackThis v1.99.1 Scan saved at 9:10:18 a.m., on 24/03/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\AVPersonal\AVGUARD.EXE C:\Program Files\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\Program Files\Microsoft AntiSpyware\gcasServ.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\PROGRA~1\DAP\DAP.EXE C:\Program Files\AVPersonal\AVGNT.EXE C:\WINDOWS\system32\ctfmon.exe …

Member Avatar for crunchie
0
418
Member Avatar for gokou1628

last night, all of a sudden when I was surfing, I realized my "right-click" function doesn't work at all in my IE (but it does everywhere else, windows, etc.), and my IE also doesn't change the site's address inthe address bar once I leave a site (for example, if I'm …

Member Avatar for crunchie
0
322
Member Avatar for mnh00002

Hello, I've been having similar problems to those mentioned on this board. All last night, IE wouldn't load, nor would icons on the desktop. I've ran Norton, Ad-Aware, CWS Shredder, and Spybot. Could one of you knowledgeable tech people take a look at my hijack this log and tell me …

Member Avatar for crunchie
0
363
Member Avatar for Maelstrom

Okay, a lot of crap got downloaded on my computer that is giving me so much trouble... 1) Spyware Avenger - I did not download it. 2) Virus Hunter Security -- I did not download this either. 3) There is a desk top icon called Sex and when I right …

Member Avatar for DMR
0
317
Member Avatar for seanmcan

Well last time I had the offeroptimizer popping up you helped alot. Now I get this from 'zipzappromos'. Below is a copy of my HJT. Any suggestions? Logfile of HijackThis v1.99.1 Scan saved at 6:01:47 AM, on 4/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) …

Member Avatar for DMR
0
139
Member Avatar for bubulchis

Hi crunchie. Thank you for your answer. I tried to fix some files yesterday because I had urgency to use my pc. I try to follow the indications you gave to another member, and now it seems to work fine. I can post you the first log with the "search-paga" …

Member Avatar for crunchie
0
100
Member Avatar for bullett1818

I have the same problem but some of the files you are saying to remove are not there. I cannot get hotoffers off my pc! Please Help! Thanks. This is my log file. Logfile of HijackThis v1.99.1 Scan saved at 8:38:10 PM, on 4/6/05 Platform: Windows 98 Gold (Win9x 4.10.1998) …

Member Avatar for dlh6213
0
138
Member Avatar for buckhuckle

I just upgraded to DSL from dial-up, and all of a sudden I've entered pop-up hell. They were coming at a rate of several a minute at first. I ran Ad Aware, Spybot, and Norton Anti-Virus. After deleting everything I could with those, the pop-ups have slowed dramatically, but I'm …

Member Avatar for buckhuckle
0
316
Member Avatar for dumnut101

Whenever I start my comp I gets this meesage (even if not connected to the internet): This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM --------------------- Time before shutdow :60 --------------------- Message …

Member Avatar for DMR
0
317
Member Avatar for donloke2004

Hi, I believe my pc has been hijacked by some viruses. Any experts available, pls share your views. Logfile of HijackThis v1.99.1 Scan saved at 2:34:42 AM, on 4/6/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for DMR
0
157
Member Avatar for kgraczyk

The following is the log file after running hijackthis: Logfile of HijackThis v1.99.1 Scan saved at 1:22:43 PM, on 4/5/2005 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\Program Files\STOPzilla!\szntsvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\Program Files\Symantec_Client_Security\Symantec …

Member Avatar for DMR
0
260
Member Avatar for trandill

Hi there I had a nasty Hijacking of my IE yesterdaywith a lot of worms and Trojans and Spyware and other stuff. I am still not quite free from Nasty things. Just now I discovered that when I try to goto Google.com I am redirected to some Googl Porn Search …

Member Avatar for Comatose
0
521
Member Avatar for CiscoJP

I've been having problems with my browsers running slowly lately. I ran all the sypware software, AV softwares, etc. Cleaned up my system, my DSL is working fine according to a number of tests. Is there still something here I'm missing? My updated HJT log is attached. Thanks! Logfile of …

Member Avatar for CiscoJP
0
219
Member Avatar for moscoop18

Hi, Someone in my household messed with my computer and my cpu got infected with the edmond.exe trojan horse and the ceres.dll trojan horse. Here is my Hijackthis v.1.99.1 log. Any help would gratefully be appreciated. Matt Logfile of HijackThis v1.99.1 Scan saved at 7:47:47 AM, on 4/4/2005 Platform: Windows …

Member Avatar for crunchie
0
194
Member Avatar for Mechlsd

Hi After suffering around i got an attack of Iguard and Virtual Maid. It kept throwing pop-ups at me, and just making surfing a pain. I have now deleted these spyware programs using Adware, and SpyBot. I also did online virus checks, and firewall checks, which all say i am …

Member Avatar for crunchie
0
166
Member Avatar for gusfaz

Opened in Safe mode and tried HJT for line RO-HKCU .... hotoffers, reboot and kept coming back, please help me. gusfaz, post log next: Logfile of HijackThis v1.99.1 Scan saved at 10:55:10 p.m., on 03/04/05 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL …

Member Avatar for dlh6213
0
242
Member Avatar for ShadowAlchemist

Hey guys I need some help! I got a link from my friend and it took me to some stupid site that ended up Hijacking my desktop. I already posted this once it the other thread. But I thought I'd make my own post so I could get some new …

Member Avatar for phoenix.jpg
0
195
Member Avatar for Laurchie

after downloading a new update for windows media player on my comp, it wouldn't open up and instead a pop-up alarming "an internal application error has occurred" would appear! Please help me.. I'm not sure if a log would help.. Logfile of HijackThis v1.99.1 Scan saved at 5:28:17 PM, on …

Member Avatar for dlh6213
0
214
Member Avatar for AngelMelzBabiee

Our computer is highly essential because we have a home studio working out of it. Without it, we can't really pay the bills. So, yes, I'm totally stressin... Now here is the problem. I have run a number of scans on the computer. Both Spybot S&D and Norton Anti-virus. Everytime …

Member Avatar for armaniking04
0
157
Member Avatar for crucifixio

I bought the parts myself for the PC I'm using now and had someone install everything (XP Pro). After about a month I had problems with slow scatching sound when playing music (ALC 850, Included in motherboard.) Then I formated the HD and installed a fresh XP Media Center Edition …

Member Avatar for DMR
0
247
Member Avatar for sweet_jam_in

Problem : automatic adult popups. here is the log file of HJT Logfile of HijackThis v1.99.1 Scan saved at 8:30:03 PM, on 3/28/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program …

Member Avatar for dlh6213
0
127
Member Avatar for debihawk

I hope I've posted this in the right place. I keep getting redirected to a couple of sites...one is "AllFreeStuff"...one asks to download cookies from "gl0ck.9.net", and the other generates a popup with "Sitebar! You sitebar is ready to be downloaded". I've tried and tried to get rid of it, …

Member Avatar for caperjack
0
97
Member Avatar for sickofit

I have tried to remove these with various spyware products with no luck, i am inundated with pops, redirects, and homepage switches. Here is the Hijackthis log, what to do now. Thanks in advance Logfile of HijackThis v1.99.1 Scan saved at 10:20:29 PM, on 3/26/2005 Platform: Windows XP SP2 (WinNT …

Member Avatar for dlh6213
0
183
Member Avatar for jamesdawson

Hi there, Im not to sure whats going on with my PC, but I seem to have some form of spyware/adware. Im running Trend Micro Internet Sec 2004, I have done scans with Spybot, Adaware and Microsoft Antispyware, and basically they all pick up different things and I quarantine them, …

Member Avatar for jamesdawson
0
186
Member Avatar for LaurenB

I have run all the required programs including CWShredder, TrendMicro, Spybot, Ad Aware SE, & VX2 Cleaner. However, I am UNABLE to change my homepage. It continues to change on its own to c:\searchpage.html. When I ran TrendMicro, there was one trojan that could not be deleted: mtwirl.dll -- if …

Member Avatar for caperjack
0
242
Member Avatar for ineedshelp

well im at my friends house and his computer is running really slow. i have tried many things but when he does anything on his computer it takes forever. if you could please take a look. here is the log Logfile of HijackThis v1.98.2 Scan saved at 6:15:42 PM, on …

Member Avatar for DMR
0
145
Member Avatar for gwar80

Hello All, I have decided to make the switch and buy a mac. However, I don't know anything beyond knowing that I want to buy one. I am looking to get an ibook and I bascially want to use it for: -microsoft office stuff -internet/email -music creation it is this …

Member Avatar for Blade10878
0
97
Member Avatar for silmov

Invasion of something new! (I thought I had downloaded the latest version of Hijack This) -------------------------------------------------------------------------------- Help! Please! Several days ago a super-tenacious toolbar appeared which I thought I had finally eliminated via the Control Panel, AVG, and Spybot. It was called something like "web search" and I suspect my …

Member Avatar for dlh6213
0
174
Member Avatar for Matthis

Hi, I am also new to the forum. Right now ive got hit hard with a bunch of crap and im stilling milling through the mess. I have taken down few of the viruses but this one is giving me the slip. Its where certain words are linked and when …

Member Avatar for DMR
0
306
Member Avatar for moscoop18

Hi, I need some help. My dad downloaded an email and am computer became infected with callinghome.biz and cxtpls. There was a trojan horse which I took out with cwshredder. Spybot helped, but didn't get a rid of callinghome.biz or cxtpls. Here is my log from Hijackthis. ANy help will …

Member Avatar for moscoop18
0
218
Member Avatar for waterboy

Hi, please help with removal of hsa. Log file below: Logfile of HijackThis v1.99.1 Scan saved at 4:02:51 PM, on 3/22/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program …

Member Avatar for dlh6213
0
127
Member Avatar for Mady

For sometime I had my computer clean and safe. Lately, a Yahoo search jump to my web whenever it pleases it. Could you verify for me the Hijackthis log and see if it's clean? Logfile of HijackThis v1.99.1 Scan saved at 14:36:55, on 22/03/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) …

Member Avatar for Mady
0
285
Member Avatar for thehosley

Someone PLEASE help!!!!! I am running Windows XP and have had nothing but problems with IE. I usually only use AOL, but had to use IE for a school assignment. A few minutes ago, I was horrified when I closed Windows Media Center and IE was opened to an inappropriate …

Member Avatar for dlh6213
0
445
Member Avatar for Krayakin

This is from my relative's computer, I was able to get rid of most of the stuff using Spybot and Adaware. But I'm still having troubles removing a few other things. Here's the HJT Log [Code] Logfile of HijackThis v1.99.1 Scan saved at 11:11:53 AM, on 3/22/2005 Platform: Windows XP …

Member Avatar for dlh6213
0
178
Member Avatar for thug4life

This popup appears every 5 minutes : _________________________________ Microsoft Windows Security Warning _________________________________ Your Windows is corrupted with spyware virus. You must patch your PC urgently to protect yourself. Private info is accessed by ports : -8080 -3128 You can patch your PC for free only now and delete all …

Member Avatar for caperjack
0
238
Member Avatar for fishystar

Hi all. New to the Daniweb community! I just ran Hijackthis and I need help checking for the bad stuff. I updated & ran Spybot and checked all the boxes in msconfig before scanning. Thank you! Logfile of HijackThis v1.99.1 Scan saved at 11:14:49 AM, on 3/19/05 Platform: Windows 98 …

Member Avatar for DMR
0
191
Member Avatar for monkeyone

I have a hijack program I cannot get rid of. I have run the beta version of microsoft spyware and AdAware. Several times for both. Microsoft Spyware doesn't even find it, AdAware finds it, says it removes it, but it is there again when you reboot. I also get a …

Member Avatar for caperjack
0
104
Member Avatar for zeroth

I don't know why I keep getting this but can somebody take a look at my HJT log? Many thanks... Logfile of HijackThis v1.99.1 Scan saved at 10:47:59 PM, on 3/18/2005 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe …

Member Avatar for DMR
0
359
Member Avatar for SirYuri

hey guys tried MANY programs, but every time i go into my internet explorer, i get to some hotoffers site... i read around, but couldnt find an explanation for win xp :(.. (sorry noob here). here is my hiject log: Logfile of HijackThis v1.98.2 Scan saved at 4:00:55 PM, on …

Member Avatar for caperjack
0
87
Member Avatar for shahss

I am having a really hard time trying to get URL logic off of my computer. It keeps poping up ads as I surf the web. I have sweeped my system with Spy Sweeper but it cannot find and remove the spyware. I have tried also tried to use hijack …

Member Avatar for shahss
0
328
Member Avatar for jesse_1012

I did a scan with trendmicro and it said i have a trojan krepper.y in my computer, but i can't figure out how to fix it, or whether there is anything else wrong with my computer, so here is my logfile. I don't know what is wrong with my computer. …

Member Avatar for dlh6213
0
130
Member Avatar for patentleather11

I've read through the other posts regarding Hotoffers.info, and tried some of the solutions suggested, but have been unable to fix it. Here is my HJT log - any help would be appreciated. Logfile of HijackThis v1.97.7 Scan saved at 12:17:47 AM, on 3/17/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: …

Member Avatar for caperjack
0
277
Member Avatar for Zephyr

I'm new to this site and I'm kinda having troubles with my computer. I know it's infected with spy/malware, pop ups etc but I would like some help dealing with the problems. I downloaded hijackthis and ran a scan and came up with the following logfile. I'd appreciate any advice …

Member Avatar for crunchie
0
169
Member Avatar for galtg

Dear sirs, I've had hotoffers on my computer for 5 days now..I've run ad-adware(in safe mode), spybot search and destroy , microsoft anti-spyware and spysweeper(in safe mode 3 times ) and CWS and hotoffers keeps coming back.I've seen a post on Daniweb talking about going to hotoffers.info and downloading their …

Member Avatar for crunchie
0
618
Member Avatar for burketdsl

This came up on the screen after being on the net yesterday. Does anyone know what it means? An unexpected exception has been detected in native code outside the VM. Unexpected Signal : EXCEPTION_ACCESS_VIOLATION (0xc0000005) occurred at PC=0x6D312033 Function=[Unknown.] Library=C:\Program Files\Java\j2re1.4.2\bin\jpiexp32.dll NOTE: We are unable to locate the function name …

Member Avatar for burketdsl
0
753
Member Avatar for Fitzad

some time in the last couple of days i received the malware for hotoffer's and another one that popups as an error msg for windows that says that windows is corrupted and that i need to download some antispy program which there is no chance in hell fo me downloading …

Member Avatar for crunchie
0
349
Member Avatar for NoVa Audi

Hello everyone, Can someone help me to get rid of this. here is a copy of my most recent HiJack This Log from right now. Let me know if you need anything else. Logfile of HijackThis v1.99.1 Scan saved at 9:02:45 PM, on 3/14/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) …

Member Avatar for crunchie
0
244
Member Avatar for falcon123

I'm having problems with IE, WE, and all other folders on the desktop. Any help would be appreciated. Logfile of HijackThis v1.99.1 Scan saved at 12:01:27 AM, on 16/03/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: F:\WINDOWS\System32\smss.exe F:\WINDOWS\system32\winlogon.exe F:\WINDOWS\system32\services.exe F:\WINDOWS\system32\lsass.exe F:\WINDOWS\system32\svchost.exe F:\WINDOWS\System32\svchost.exe F:\Program …

Member Avatar for crunchie
0
283
Member Avatar for joeman3285

ok i just ran ad-aware then dled hijackthis here's the log. brace yourself i think this pc may be very sick. thanks alot Logfile of HijackThis v1.99.1 Scan saved at 7:29:15 PM, on 3/14/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for caperjack
0
239

The End.