14,025 Topics

Member Avatar for
Member Avatar for brandonatutsa

i have been trying everything to get rid of this thing but nothing works so i figure i might as well put my HJT log and see what u tell me, also i noticed that alot of new things have been popping up in my c drive folder, they all …

Member Avatar for dlh6213
0
322
Member Avatar for PaulBiscardi

Hello... I am running Windows XP Home and I use an AOL Broadband connection. I am encountering the Error #317 pop up window The error #317 message appears as follows: "Error 317 - Microsoft Internet Security Warning Windows is corrupted with spyware virus. You must patch your pc urgently to …

Member Avatar for dlh6213
0
244
Member Avatar for TwoThirtyEight

Hi, I've been reading some of the other Aurora solutions and looked at the files you are supposed to delete and didn't find them. I'm guessing every one of them is unique? Well anyway, here are my log files. --------------------------------------------------------- ewido security suite - Scan report --------------------------------------------------------- + Created on: …

Member Avatar for crunchie
0
378
Member Avatar for SilentK

I am having some trouble with pop under ads. They seem to pop up randomly (It can go days without happening) and they are popping up even when I am not surfing the web or using IE. The most frequent time they pop under is right when I login and …

Member Avatar for dlh6213
0
136
Member Avatar for taimaishu

I have tried everything to rid my computer of whatever is making it act erratic. Avg anti virus finds nothing but later finds trojans that it can't delete or heal. Trojan hunter just as innefective. Please help here is my hijack this log. Logfile of HijackThis v1.99.1 Scan saved at …

Member Avatar for dlh6213
0
143
Member Avatar for danny123

I just picked up About:blank virus yesterday when I downloaded music. The start page now goes to about:blank every time the browser is launched. I tried NoAdware, Spy Ferret, Microsoft AntiSpyware and Ad-Aware SE. They all detected the virus but could not remove it. I have read some other threads …

Member Avatar for dlh6213
0
180
Member Avatar for Kohan

Hi, ive had my computer for over a year now and about 6 months ago i couldn't access properties on my desktop. I finally need to reize my screen and can't do so, so i need your HELP. Im assuming that i will have more probalems than just accessing properties, …

Member Avatar for dlh6213
0
230
Member Avatar for casiofraction

Hello, AVG pops up now and then saying "Virus detected, GPSRESL.exe, trojan Dialer.18.c". I have also lost the "appearance tab" from the display properties on the desktop. Also IE links to explicit websites occasionally for no reason. I've run the AVG scan a few times but it doesn't detect anything. …

Member Avatar for casiofraction
0
278
Member Avatar for skyleon

I just brought tis new DIY com a few month ago but my com seems to get slower & more laggy nwadays,ami i installing too much software or is it that my com is hit wif a virus? my cpu usage is always very close to 100%... i have ran …

Member Avatar for JANINE
0
358
Member Avatar for engine-cadet

Lately I have been aving a few problems with my computer. IE startpage sometimes goes to Martfinder and sometimes goes to a "Warning Spyware" page-but about 1/3 of the time it goes where it is supposed to. The other problem is from time to time when I am online, I …

Member Avatar for dlh6213
0
195
Member Avatar for jr02004

My computer surfing is at a slowing to crawl I ran adware and spybot and microsoft antispyware and I also have this thing redswoosh.net constantly trying to log on to the internet. and for the past few days i've been getting messages my virtual memory is low. what do I …

Member Avatar for dlh6213
0
234
Member Avatar for Telano

The aurora popups are driving me crazy. There may be other things on this computer I don't know about. I've done all the virus scanning / spyware removal I know of. I did do a HJT scan. Logfile of HijackThis v1.99.1 Scan saved at 10:53:33 AM, on 7/10/2005 Platform: Windows …

Member Avatar for dlh6213
0
191
Member Avatar for civic

Logfile of HijackThis v1.98.2 Scan saved at 10:15:34 AM, on 7/17/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\system32\ethernet.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Logitech\iTouch\iTouch.exe C:\WINDOWS\WEB\US.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program …

Member Avatar for DMR
0
136
Member Avatar for jweintraub

I made the mistake of bringing in a "freeware" program and since a week ago have been fighting popup ads and a slow computer. I've deleted some of the culprits but can't end the infection. My log from hijackthis is below. If anyone can give me advice on how to …

Member Avatar for crunchie
0
298
Member Avatar for colonelfox

I am unable to find or remove the trojan TR/Dldr.WinShow.AX. It is being detected by AntiVir as TR/Dldr.WinShow.AX and by Norton as MHTMLRedir.Exploit. The virus is inserting itself into the windows temp file. Once I direct my virus programs to delete the virus, it reinserts itself into the same windows …

Member Avatar for crunchie
0
245
Member Avatar for killerfaber

Hello boys i'm an Italian boys with a problem,THE STEALTH.HIJACK VIRUS!!! :cry: Thisi is my HighJackThis File Log,can you help me??? THANKS!!! ;) Logfile of HijackThis v1.99.0 Scan saved at 14.29.33, on 07/16/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for crunchie
0
239
Member Avatar for manhunt2k

Hi, When I try to launch Internet Explorer, the hourglass cursor displays for a couple seconds, then reverts to the regular cursor. IE does not start and does not appear in the process list. My PC is running XP. I suspect, (after reading many other posts) that the culprit is …

Member Avatar for crunchie
0
187
Member Avatar for synth

Lately I purchased VC++ 6. It worked well for a while until it suddenly ceased to function at all just a few days ago. Here is what happens: Visual Studio opens and runs well enough. I can open a project, edit code, and so on. I can execute my program …

Member Avatar for winbatch
0
236
Member Avatar for poppiemeg

I am trying to get online and now the computer is not detecting the modem. I have a Dell Dimension DIM4300S, Pentium(R) 4 CPU. System is Microsoft Windows XP 2002. I have check the Device Manager and there is not a modem listed. I have checked the Phone and Modem …

Member Avatar for Topemup
-1
265
Member Avatar for sharon1

Hi there, I'm new to this forum, so please excuse me if I have posted this in the wrong sub-forum, but this is the one I thought would fit best! I seem to have a virus or spyware that created duplicate icons of things such as IE, Outlook Express, Winamp …

Member Avatar for dlh6213
0
184
Member Avatar for NilovSerge

Hi, all! I need to load base from ODBC-source into MSSql base using MsSql DTS at my customer's side with automatic as much as possible('Pushing 1 buton'). I have found such an example: DECLARE @object int DECLARE @hr int --create a package object EXEC @hr = sp_OACreate 'DTS.Package', @object OUTPUT …

0
63
Member Avatar for Zooks

hi, i'm not much of a pc techie but I have setup my folders as per the stickies, downloaded Ccleaner,trojanhunter,adaware,spybot etc, ran in safe mode, turned off system restore, (not in that order) but still cant shift this trojan, norton antivirus stops it everytime i connect to the internet but …

Member Avatar for DMR
0
192
Member Avatar for MikeT

My Anti-virus keeps finding a couple of problems, so does Spybot and Ad-Aware occasionally. Hopefully it's not too bad but I'd appreciate any help. Logfile of HijackThis v1.99.1 Scan saved at 21:47:33, on 24/06/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for DMR
0
196
Member Avatar for shane'r69

Hi, my antivirus found this toolbar and spybot found admilli can anyone tell me what I need to erase from my hijack this log? Thank you. Logfile of HijackThis v1.99.1 Scan saved at 10:19:08 AM, on 7/15/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running …

Member Avatar for shane'r69
0
115
Member Avatar for Gorp

Since yesterday, Norton keeps reporting a Virus called 'Hacktool.Rootkit'. It says the file msdirectx.sys in 'C:\Documents and Settings\Roel' is infected. After I remove it (in safe mode, in normal mode I can't see it) it just keeps coming back. Norton says that he can't repair or remove the file. Here's …

Member Avatar for swatkat
0
333
Member Avatar for Nightbirds

Hi, I'm experiencing difficulties removing spyware, malware. the start page now goes to a page entitled about: blank. I also experience pop-up ads, despite using anti-pop-up (google) and spyware programs (microsoft, adaware, spybot). I've done a full system scan with norton and removed items, as well as multiple scans with …

Member Avatar for crunchie
0
498
Member Avatar for Taeros

Hey all. I've been having problems with links being added to my favorites and trouble with IE. WHen I first boot up and go online I alwasy get errors where I have to shut down IE and it takes a while before I get it to work. I get around …

Member Avatar for crunchie
0
247
Member Avatar for PhilipbH

Hi Everyone, I hope that someone can please help me with my problem. I started to get the Aurora pop ups on my machine recently. Warning form NAV Searched the n/g's and tried SpyBot S&D M/S Anti Spyware TSG-3 Each one seems to be able to identify the problem - …

Member Avatar for crunchie
0
348
Member Avatar for avgoddess

This seems like a tough virus to get rid of. I have Symantec AntiVirus on my computer, which I update and run everytime I turn on the computer. However I seem to have picked up a virus despite my precautions. Since late last week, every minute or so, I get …

Member Avatar for crunchie
0
261
Member Avatar for JohnnyMitchell

This popup appears every 5 minutes : _________________________________ Microsoft Windows Security Warning _________________________________ Your Windows is corrupted with spyware virus. You must patch your PC urgently to protect yourself. Private info is accessed by ports : -8080 -3128 You can patch your PC for free only now and delete all …

Member Avatar for crunchie
0
916
Member Avatar for Easter Bunny

hi guys. got a problem with norton. lady openen an email with an attachment and hey presto! norton disabled. eventually found and deleted the virus (wiwshost.exe - trojan.tooso.j) by scanning her harddrive with my pc. ran one of those tools from symantec as well, but it found nothing. now i'm …

Member Avatar for crunchie
0
138
Member Avatar for Kevin392

I was hoping someone could help me out. I've been getting tons of Aurora pop-ups. I ran Ad Aware SE which seems to keep detecting things as fast as it quarantines and deletes. Ad Aware was also indicating it was detecting drpmon.dll - I could really use some help. Log …

Member Avatar for crunchie
0
319
Member Avatar for trydor

Hi guys, I've been hijacked (like thousands of others it seems) by aurora. I've managed to rid myself of the dreaded DrPmon.dll and various other nasties but Adaware still picks up 21 references to VX2. I can delete these registry entries in normal mode through regedit but they reappear when …

Member Avatar for crunchie
0
239
Member Avatar for nettizen

Thank you in advance for helping me if you can. I am having a problem when I access internet explorer I get a tcp connection to the same remote ip along with the one I type in. I noticed this when I ran netstat and Active Ports program. I also …

Member Avatar for crunchie
0
260
Member Avatar for erts678

i cannot get the Aurora pop ups of my computer, please help here are the log files from hijackthis Logfile of HijackThis v1.99.1 Scan saved at 4:03:28 PM, on 7/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for crunchie
0
122
Member Avatar for WatermelonX

I have some problems with Aurora and Drpmon.dll, and I can't seem to remove it with ad-aware. Here is my Hijack This log: Logfile of HijackThis v1.99.1 Scan saved at 12:26:37 PM, on 7/5/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe …

Member Avatar for crunchie
0
313
Member Avatar for saintlos

I have these annoying Aurora pop-ups. Please, advise what to do - I'll follow the steps exactly! Thank you :) Here is the HJT log with all windows and systray applications closed: Logfile of HijackThis v1.99.1 Scan saved at 4:50:25 PM, on 7/9/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: …

Member Avatar for crunchie
0
175
Member Avatar for helpmerhonda

Crunchie.... I hope you're out there! I seem to have been caught. Here's a log from l2mfix and I'll post the next message with one from HJT. Thanks in advance! L2MFIX find log 1.03 These are the registry keys present ********************************************************************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows …

Member Avatar for crunchie
0
318
Member Avatar for Joanna

Hi there My norton keeps alerting me to the above trojan. So far I have tried: deleting the file from where I am told it is located C:\WINDOWS\ but it cannot be found even with hidden files shown. ending the process in task manager but cannot see it. locating it …

Member Avatar for crunchie
0
372
Member Avatar for Fiendforeva

Hello, I just recently got Highjackthis and was wondering if someone could help me in what I should do in regards to this log. :o Logfile of HijackThis v1.98.0 Scan saved at 11:41:18 AM, on 7/9/2004 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: …

Member Avatar for crunchie
0
273
Member Avatar for Jessykah

Ok Im a newbie but with searching for help for my problem I came across this forum..thank god! I seem to be having the same problem as everyone else with these popups. I did try and get rid of this but with mine I notice that when you end the …

Member Avatar for crunchie
0
223
Member Avatar for shmay

Before scanning with Hijack This i scanned with trendmicro and adaware here is the logfile; help would be greatly appreciated my computer has become quite slow. Thanks. Logfile of HijackThis v1.99.1 Scan saved at 3:15:18 AM, on 7/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) …

Member Avatar for crunchie
0
131
Member Avatar for Hobbierz

Hey guys, welll, last Friday, I left my PC on all day , idle. I come back later that night, and I am infested with SpySheriff. I have not been able to get rid of it . I have done system restore, but 1 or 2 restarts later, it returns. …

Member Avatar for crunchie
0
112
Member Avatar for moraira73

Hi, Please could someone help me, I have something nasty in my PC. Every time I click send/receive on outlook, I get hundreds of un-delivered emails, its driving me round the bend. I have check with AVG, Aluria, CWS, Beta 1 and HJT. Is there anything in this log or …

Member Avatar for crunchie
0
187
Member Avatar for summon

Hi all Plz help me i can't get rid of from hotoffers i tried everything but it still appears. Programs that i used - HiJackThis - Ad-Aware - Pocket Killbox - Spywarevansiher - Cleanmngr And some stupid question in one thread i have read says use Killbox and delete the …

Member Avatar for crunchie
0
144
Member Avatar for fragmented_user

Dear Moderator, I am relatively new to the world of adware, malware and other such inventions consisting of malicious/annoying code, and it is a great relief for me to discover, that there does exist, those few individuals who are dedicated to both fighting it and assisting others to protect themselves …

Member Avatar for crunchie
0
412
Member Avatar for nickyt8

Logfile of HijackThis v1.99.1 Scan saved at 11:47:08 AM, on 7/15/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe …

Member Avatar for crunchie
0
72
Member Avatar for mattisjo

Hi, When I try to launch Internet Explorer, the hourglass cursor displays for a couple seconds, then reverts to the regular cursor. IE does not start and does not appear in the process list. My laptop is running XP. I suspect, (after reading many other posts) that the culprit is …

Member Avatar for crunchie
0
409
Member Avatar for robert81978

[B]about:blank![/B] Hi there i have a really bad problem with about:blank i have tryed all kinds of programs to remove this but nithing has worked it just come straight back again? here is my log from hijackthis! Any ideas anyone? Thanks in advance for any help! Logfile of HijackThis v1.99.1 …

Member Avatar for dlh6213
0
235
Member Avatar for johnpro

Am trying to get a simple program to run to get it to set the default connection that i am setting up in win xp, making it in VB, need it to edit the registry to make the connection the default connection when ran. Can get it to make the …

0
52

The End.