14,025 Topics

Member Avatar for
Member Avatar for GaryTheK

Hi Crunchie, I tried to find the problen dll myself but I can't seem to find it. I think it's masked or cloaked as a legitimate dll such as for a google toolbar, but I just may not know what I'm looking for. Ad-aware finds the bug, but as usual …

Member Avatar for GaryTheK
0
170
Member Avatar for AvManBob

I've got a spyware virus, probably Winshow K Trojan. Can someone help me to remove it. I have run CWShredder, Hijack This, EZ Antivirus, and Ad Aware, and that cleans it until I restart, then it comes back...Here is latest IE URL line I am getting: res://aipvb.dll/index.html#37049 Here is my …

Member Avatar for AvManBob
0
299
Member Avatar for qwerty

Hi all, I'm struggling with coolwebsearch issue... For diagnostic, I'm using Xsoftspy 3.41 that show me the following scanning result CoolWebSearch Registry Key iSearch Toolbar Registry Key Winpup32 Registry Key Winpup32 Registry Key CWS.Oslogo Registry Key CWS-mrhop Registry Value CWS-mrhop Registry Value I followed the 'jendej' history path (hjt .....cwshredder …

Member Avatar for crunchie
0
127
Member Avatar for jendej

i am hoping that someone here can help me. my computer has been repeatedly infected with cws.searchx virus, resulting in a hijacked homepage to about:blank and popups for spyware and other things. after scouring the internet for help, i found the following conversation: [url]http://daniweb.com/techtalkforums/thread5531.html[/url] i attempted to follow instructions from …

Member Avatar for crunchie
0
675
Member Avatar for steveclement

Hello, Internet explorer 6 has been hijacked to About:Blank and I cannot change it back even manually inside of registry. Seems to have another dll. file that copies its self after a deletion. All the adware ,spyware stuff wont help. I know this isnt the first time this has been …

Member Avatar for crunchie
0
150
Member Avatar for rc_satina

Hello everyone, Bridge.dll keeps on coming out everytime I restarted my computer. I tried to search for a solution to this and I found out this forum. I already run Hijackthis and this is the log. Logfile of HijackThis v1.98.0 Scan saved at 9:05:01 AM, on 6/30/2004 Platform: Windows 2000 …

Member Avatar for rc_satina
0
102
Member Avatar for darek

Higuys, I need your help. I've had two operating sysytems installed on separate partitions of one physical drive: Win XP on C: and Win 98 SE on D:. I was able to choose between them via dual - boot menu. They worked just fine until I installed a new hard …

Member Avatar for zerofeal
0
150
Member Avatar for extasy

Can u analize this sum one, plz... I have done this on my own before but idk what half of this stuff is... Its my friends comp he just reformated cuz of virus's and hes allready having problems.... This isnt my comp and I dont wanna make a vital mistake …

Member Avatar for caperjack
0
131
Member Avatar for bill786

It is time to settle this big problem once and for all. This is just crazy; I just noticed everyone is getting this problem, but now it is getting worse. Please help for all the people who are getting this res: problem. Problem #1 I have Windows XP Service pack …

Member Avatar for caperjack
0
232
Member Avatar for phil hackett

Hello, I am running win XP Prof with all sp and updates installed from the microsoft website, I use Norton AntiVirus and AdAware 6 to try to keep everything clean. Suddenly every time I start or close Internet Explorer my home page is changed to c:\windows\system32\IESP.mht. I have found this …

Member Avatar for caperjack
0
166
Member Avatar for whongtat

Logfile of HijackThis v1.98.0 Scan saved at 7:59:33 AM, on 7/6/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\GSICON.EXE C:\WINDOWS\System32\dslagent.exe C:\Program Files\ICQLite\ICQLite.exe C:\WINDOWS\sm56hlpr.exe C:\Program …

Member Avatar for crunchie
0
175
Member Avatar for nuke-it

tried hijack this about keeps coming back,hope you can help here's the log files Logfile of HijackThis v1.98.0 Scan saved at 8:57:33 PM, on 7/4/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\WINDOWS\Explorer.EXE …

Member Avatar for crunchie
0
130
Member Avatar for GeneralPatton

hello i want to thank everyone for the help in the past. I now have a new problem. After running all of the normal anti-[url="http://go-advertising.com/?go=spyware"]spyware[/url]; the [url="http://go-all.com/?go=spybot"]Spybot[/url] S&D 1.3 Ad-aware and cwshredder I still keep getting the same problem. My website changes after a reboot; the anti-[url="http://0-2u.com/?go=spyware"]spyware[/url] programs seem to …

Member Avatar for crunchie
0
417
Member Avatar for caperjoe

Same problem as everyone else, it seems. Using XP - in safe mode I ran AdAware, rebooted, ran latest Spybot and CWShredder, but on reboot it still tries to change my homepage. Please help! Here's the latest HJT log: Logfile of HijackThis v1.97.7 Scan saved at 8:50:58 AM, on 26/06/2004 …

Member Avatar for caperjoe
0
372
Member Avatar for Worr1127

Hey, Sometime this week, I just suddenly got an insane amount of spyware on my pc. I ran AdAware, and there is still alot left. then I ran Spyware S&D, still its here. I now have HijackThis and heres the log: Logfile of HijackThis v1.98.0 Scan saved at 1:16:04 AM, …

Member Avatar for crunchie
0
80
Member Avatar for lignatius

home page hijacked with "res://scjik.dll/index.html#96676". also starts microsoft windows xp professional installer with front page when using IE. Here is my hjt log: Logfile of HijackThis v1.98.0 Scan saved at 10:07:43, on 04/07/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe …

Member Avatar for caperjack
0
254
Member Avatar for Brian

I have a problem with, I believe a dialler. When I am working off-line, after about 20-30 mins the PC dialls the internet. I have run the latest editions of CWS and ADAWARE, and both say that the system is clean.It clearly isn't. I am on pay as you go …

Member Avatar for Brian
0
123
Member Avatar for laura

Prosearching has taken over my IE and I've already done everything I could to get rid of it (SpySweeper, AdAware, Spybot), but it's still there. Can someone tell me what to do? Please!!!!! Here's my log Logfile of HijackThis v1.97.7 Scan saved at 6:11:51 PM, on 7/2/2004 Platform: Windows XP …

Member Avatar for caperjack
0
253
Member Avatar for flash86

I managed to get aprtial fix using webroot SPy Sweeper, although my computer is still not back to normal. Below is my HJT log. I appreciate any advice. Logfile of HijackThis v1.97.7 Scan saved at 10:11:42 PM, on 7/1/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 …

Member Avatar for caperjack
0
193
Member Avatar for e.dreifus

First would like to say hi to everyone since I'm new here. Now to the problem Every now and then my AVG tells me that there is a trojan in my computer and that I have to run a scane to remove it. However when I run the test it …

Member Avatar for caperjack
0
163
Member Avatar for Kusagi

AVG keeps giving a message saying that I have a trojan called downloader.keenval.C, I ran AVG, trojan remover everything and still can't find it and remove it. here's log Logfile of HijackThis v1.97.7 Scan saved at 19:21:18, on 30/6/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 …

Member Avatar for Kusagi
0
149
Member Avatar for blahhh

oK, I got infected with the CW hijacker about 6 months ago. I was able to fix it with CWS. This time its a little more advanced. Before I could search for help, but now it redirects me to BS pages. Also everytime I open a browser a Win XP …

Member Avatar for blahhh
0
219
Member Avatar for tdaniels

need help please. i can delete the start and search page entries but dont know how to keep them from coming back. heres my hjt log Logfile of HijackThis v1.97.7 Scan saved at 3:10:00 PM, on 6/27/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running …

Member Avatar for crunchie
0
183
Member Avatar for Jengizu

...to remove the prosearching hijack of my IE. I had thought it did, but after rebooting. the problem's back. I downloaded and ran Hijack This, and this is the log (I'm guessing it's the RO that's causing the problem): Logfile of HijackThis v1.98.0 Scan saved at 8:56:59 PM, on 6/30/04 …

Member Avatar for DMR
0
245
Member Avatar for kained

I have a virus which is proving to be very annoying to get rid of. AVG6 will pick it up and destroy but its respawning and i can't find any application that will do anything about it. I hjave treid adaware and spybot. and generally tried to find info online …

Member Avatar for crunchie
0
298
Member Avatar for signe

[B][COLOR=Orange]NOTE: I was FINALLY able to merge the "URLRepair" thing successfully. Sorry about that. Would someone mind, however, peeking at the HJT? Thank you so very much[/COLOR].[/B] Well, I'm sorry to ask for help again -- I followed all previous instructions (or so I thought) while trying to repair the …

Member Avatar for caperjack
0
117
Member Avatar for bill786

Problem #1 I have Windows XP Service pack 1. I need help on how to fix this problem. I did a scan with spybot, ad-aware, CWShredder, and Norton Anti-Virus. I think this happened right after the installation of the google toolbar. I uninstalled it of course by now, but I …

Member Avatar for bill786
0
207
Member Avatar for viperman224

I just bought a Microsoft MN-700 G band router. I will be sitting right next to it and it will drop the connection to my laptop and the two desktops i have hooked to it. I am using a D-Link GW630 wireless adapter in my laptop. I have a LinkSys …

Member Avatar for viperman224
0
139
Member Avatar for sidoe

Hello My friend's computer has been overly popup friendly lately he gets about 7 popups per 2-3 mins. He has run adaware and Spybot but he is still having this problem. Please review his log and let me know what if anything he should remove. Thank you Running processes: C:\WINDOWS\System32\smss.exe …

Member Avatar for caperjack
0
164
Member Avatar for cathzee

Hello, Im having the same problem too. can someone help me with this too. I have use spybot and ad-aware and norton to scan my computer. Everything is okay except that i keep on getting the same message when i turn off the computer. This is my saved log.. thanks …

Member Avatar for cathzee
0
258
Member Avatar for loyalfila

I have several problems that are driving me crazy and only know enough about computers to be dangerous, so any help given is so greatly appreciated. One problem is the prosearching and easy search. I have downloaded spysweeper and it is apparently catching these items, because I continually receive the …

Member Avatar for caperjack
0
209
Member Avatar for JohnUK

I was looking into my error log and noticed these various errors: Access denied attempting to launch a DCOM Server using DefaultLaunchPermssion. The server is: {00020906-0000-0000-C000- 000000000046} The user is Unavailable/Unavailable, SID=Unavailable. I have a lot of these in my error logs. I also noticed recently that i started to …

Member Avatar for bentkey
0
307
Member Avatar for Gary T.

[FONT=Arial]undefined[/FONT][SIZE=7]undefined[/SIZE][COLOR=Black]undefined[/COLOR] My home page has been hijacked by about:blank. The home page changes to a new home page that advertises many adware type programs with constant pop ups that also advertise adware programs. I can change it back to my preferred home page but soon it changes back to about:blank …

Member Avatar for DMR
0
181
Member Avatar for Xander81

I have been having some trouble with a "Bridge.dll". When Windows starts I get an error message, like "could'nt find bridge.dll". I had it removed with Ad-aware. I ran Hijackthis and here is the log: Logfile of HijackThis v1.97.7 Scan saved at 18:29:10, on 01-07-2004 Platform: Windows XP SP1 (WinNT …

Member Avatar for Xander81
0
144
Member Avatar for z3r0

Hello, My internet conexión is very slow days ago, ISP says I have too many "open ports" don't know why because I don't have anything runing but IE. I thought some malware or trojan could be using some ports but I don't know. PC seems to be clean, heres a …

Member Avatar for caperjack
0
160
Member Avatar for bigT

Hi Guys, I´ve been Hijack by a cool web search trojan who reset the IE start page to "res://zkimq.dll/index.html#37049". I´ve read about 100 topics, tips and other pages, and tried anything possible, but I´m not able to get rid of it. So can anybody help me with my hijack log? …

Member Avatar for bigT
0
177
Member Avatar for JohnUK

Well i recently got this about:blank thing that kept redirecting my homepage and kept giving me popups, i followed some of the advice on here and managed to get rid of it but about 2 days later it keeps coming back. Here is my log from Hijack this: Logfile of …

Member Avatar for bentkey
0
133
Member Avatar for Astial

IE has been hijacked and I cannot seem to correct the problem on my own. I downloaded(and checked for current updates) the following programs: CW Shredder, Ad-Aware 6.0, HijackThis, Spy-bot S&D and after following the posts and running the programs I did fix alot of things that were bad, even …

Member Avatar for crunchie
0
178
Member Avatar for harmony99

HEy there, i have two questions. 1) everytime i start up my computer i get the message that the file "bridge.dll" is missing. I read that if you use hijackthis, you get a list of things that it could be. so i did it and this is the list it …

Member Avatar for crunchie
0
264
Member Avatar for sibylbanks

Sorry, I just thought it would save time to answer everyones problems at once. My problems are: I'm having a Network error unable to read url from host g.msn.com: connection reset by peer I have done the same things as the previous people, Adaware, etc. I have now done what …

Member Avatar for caperjack
0
175
Member Avatar for zebov

I have a W2K Server that just recently crashed and needed restored. On restoration, I can not open up the COM+ MMC. When I try to open it, a process (mmc.exe) is started but no window is opened. I have tried running mmc.exe itself and then opening the appropriate .msc …

0
59
Member Avatar for crushed

Please somebody help me i have tried cw shredder1.59.1 ad aware all files it still keeps coming back here is my Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec\DeepSight Extractor\ExtractorService.exe C:\WINDOWS\System32\NMSSvc.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Analog Devices\SoundMAX\Smtray.exe C:\WINDOWS\System32\zwscqwbs.exe C:\program files\earthlinkim\aim.exe C:\Program Files\Nikon\NkView5\NkvMon.exe C:\PROGRA~1\MICROS~2\Office10\OUTLOOK.EXE …

Member Avatar for crunchie
0
82
Member Avatar for CocoDan

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Microsoft Hardware\Mouse\point32.exe C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\Nhksrv.exe C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\System32\svchost.exe C:\Documents and Settings\dlakeman\Desktop\New Folder\Hijackthis\HijackThis.exe F0 - system.ini: Shell= F2 - REG:system.ini: UserInit=C:\WINDOWS\SYSTEM32\Userinit.exe, O18 - Protocol: ayb - (no CLSID) - (no file) I don't know …

Member Avatar for crunchie
0
90
Member Avatar for signe

I need help (actually, my computer does!) :eek: I've got Spyware/Adware/Malware completely overtaking my computer, despite my best efforts. Just when I think I've gotten rid of it all... Anyway, is there someone that could take a look at this and let me know which are the "at-risk" files? I …

Member Avatar for crunchie
0
99
Member Avatar for GeneK

Hello, I have been hit with the about:blank redirected and Hijacked IE. Please review my log and provide guidence on the proper removal process. Thanks. Logfile of HijackThis v1.97.7 Scan saved at 2:09:12 AM, on 6/23/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: …

Member Avatar for crunchie
0
162
Member Avatar for Neno74

Well this is my log please take a look and let me know what you think. This has been kicking my ass all day. I've tried everything I can think of. My hopepage keeps getting reset to about:blank. Logfile of HijackThis v1.97.7 Scan saved at 1:13:54 PM, on 6/29/2004 Platform: …

Member Avatar for crunchie
0
109
Member Avatar for Duga_2010

here is my log from Hijackthis Logfile of HijackThis v1.97.7 Scan saved at 2:11:58 AM, on 6/19/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\ATI Technologies\ATI …

Member Avatar for crunchie
0
228
Member Avatar for BastardAle

Kay here's the deal. I'm trying to network two machines together in the same room, both running XPpro, both recently formatted. I've been fighting with this all night and the closest I get to either PC seeing eachother, is in the Folders Tree under My Network Places/Microsoft Windows Network/MsHome (which …

Member Avatar for bentkey
0
102
Member Avatar for Killer_Typo

Trying to help a friend with her computer, but the computer needs some serious attention. its been used for a long time without firewall, virus scann, adaware spybot, nothing. so i hope to clean it up a bit. heres the LOG, i plan on starting a scan before i go …

Member Avatar for Killer_Typo
0
103
Member Avatar for CrimsonTwilight

Currently running windows XP with service pack 1. I had previously disabled plug and play through msconfig becuase the computer would freeze on start up with plug and play enabled. Now after I think I have finally solved the problem I go back into msconfig to re-enable it and its …

Member Avatar for DMR
0
101

The End.