718 Topics
![]() | |
Please have a check on the following... Logfile of HijackThis v1.97.7 Scan saved at 8:09:45 PM, on 10/16/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe c:\progra~1\mcafee.com\vso\mcvsescn.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe C:\Program … | |
Hi. I've noticed my computer slowing down the past few days, with IE pop-ups. Found this unusual as I'm currently using Firefox. Opened my IE and noticed the yupsearch.com toolbar. Please help to advice on how to remove this? Logfile of HijackThis v1.99.1 Scan saved at 12:29:12 PM, on 10/15/2005 … | |
yeah...so...uhh...i posted in here a while back about a different computer...but now my current computer has...something seriously wrong with it...for starters, i have to refresh my desktop any time i put an item onto it...weird. and i have this little warning thing that's telling me that i have to download … | |
when i search for anything mainly on google the first three clicks redirects me to a searching site not the proper site tillt he fourth time then it works does anyone know how i can fix this it's so damn annoying. Thanks here's the log Logfile of HijackThis v1.99.1 Scan … | |
Been getting some new pop ups. Did a HJ this log. Please advise. Thanks C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\wanmpsvc.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe C:\Documents and Settings\All Users\Start Menu\Programs\Startup\office.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Somebody\Desktop\Hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start … | |
[QUOTE] [color=navy]The bootable USB flash drive ...using as little as 200MB of flash memory. The device features Atmel's FingerChip sensor for one-swipe secure data access, and a large font LCD display. [/color] [color=navy]Based on Linux 2.6.x Kernel with Gnome GUI Desktop, [/color] [color=navy]an Office Productivity Suite, compatible with Microsoft Office … | |
Hey everybody. I've looked at other threads regarding this problem on these forums and have downloaded and run the HijackThis program (and unzipped it to a permanent folder i.e. C:\Program Files\HijackThis). I've seen that i'll have to post up the logfile, so here it is (i'm running on a Dell … | |
ok i got a trojan that i can't get rid of for my life it keeps coming back when i delete the stuff that doesn't belong in safe mode it still comes back and it's driving me nuts any advice and solutions would be perfect here's the logs. here's the … | |
Hi, I've been trying to get rid of this Trojan but it seems impossible. Here is my HJT and my Ewido log. --------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 19:38:27, on 29-09-2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe … | |
Here are a few problems I am having: 1) I dont have task manager any more...how can i get it back...it says its locked 2) every time i click on a exe or a shortcut or sumtin like that it always says: "Are you sure you want to open a … | |
Logfile of HijackThis v1.99.1 Scan saved at 7:16:01 PM, on 9/25/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Norton Internet Security\ISSVC.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec … | |
I'm not sure where I'm picking this stuff up. After the last time, I've done everything I can to protect my computer. WTH? Here's a copy of my newest HJT log after running Ewido, Adaware & Spybot Logfile of HijackThis v1.99.1 Scan saved at 3:54:03 PM, on 9/18/2005 Platform: Windows … | |
Please could you check out my Hijack this report my son has been downloading things and the computer I think has now got infected. Thank you Klaura Logfile of HijackThis v1.99.1 Scan saved at 09:21:18, on 23/09/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running … | |
Well, like every other post in this fourm....i have yup search and would like to get rid of it...i got it like 3 days ago while on AOL i dont really kno wat happened but i got it....and i need some help My HJT Log: Logfile of HijackThis v1.99.1 Scan … | |
I am having a problem going to secure sites (https). Regular web sites seem to be working OK. I have run Ad-aware and Registry Mechanic to get rid of all the garbage files. I have also run HJT and would appreciate it if someone could take a look at the … | |
Hello, OK, I have a w2kpro machine that was hit with a vast amount of nasty spybot, esobot, etc. that I believe I've removed the last bits of... I was able to do this by following steps from other posts and a previous post of mine (though I was infected … | |
I think I may have picked up something that causes everything to run super slow. Task manager shows 100% CPU usage even when I am not running any programs. It started a few days ago and has recently gotten worse. It may be a hardware probelem, but I suspect some … | |
I am infected with something that I cannot see to remove. Microsoft anitspyware reports it as: Trojan.Downloader.BHO.Req Type: Trojan Downloader And the Registry Key for it is: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E13DDE1-E013-47ec-9C4C-27C2F78BDD26} Neither MS antispyware can remove it, nor Hijack this, although in the logs it does show that as being deleted … | |
My computer is been hijacked by search200.com search bars, pop ups, col.com explorer start up screens, and 4 desktop icons that keep coming up every time I reboot the computer.... very fustrating!! I spent a great deal of time trying to fix the problem as this is how far I … | |
Logfile of HijackThis v1.99.1 Scan saved at 16:32:14, on 9/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\SYSTEM32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\Program Files\ewido\security suite\ewidoguard.exe … | |
Logfile of HijackThis v1.99.1 Scan saved at 8:49:21 PM, on 9/5/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\RnJhbmsgSG91c2UA\command.ex e C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINDOWS\System32\gearsec.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\System32\wdfmgr.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\System32\crmoxen.exe C:\Program Files\VERITAS Software\Update … | |
Hi, Can someone check me up with the HijackThis thing. I just want someone to tell me the stuff to delete, that are bad. Heres it: Logfile of HijackThis v1.99.1 Scan saved at 12:01:46 PM, on 8/31/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe … | |
Logfile of HijackThis v1.99.1 Scan saved at 10:53:39 AM, on 9/2/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ACS.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program … | |
Note -- This post was split from thread [url]http://www.daniweb.com/techtalkforums/thread5036-5.html[/url] [QUOTE=TallCool1]Nothing is lost. Nescape/Mozilla can import favorites from Internet Explorer, and Microsoft provides [URL=http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q152/6/81.asp&NoWebContent=1][b]favtool.exe[/b][/URL], which works both ways. But these are only temporary solutions. Your long-term problem is a hijacker, Trojan, or Virus that's wedged its way into your desktop. This … ![]() | |
Logfile of HijackThis v1.99.1 Scan saved at 15:21:44, on 9/3/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\SYSTEM32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINDOWS\System32\svchost.exe C:\windows\system\hpsysdrv.exe C:\HP\KBD\KBD.EXE C:\Program Files\InterVideo\Common\bin\WinCinemaMgr.exe C:\Program … | |
Hello Folks, You guys have a great site. Wish I found it a long time ago. I've done some research on my problem with adyieldmanager.com on the site already but although I can find c:\windows\sysytem32\conmime.exe in a file search it doesn't show in the process log area of HiJack This. … | |
I originally had Aurora and although I can't see that it's still there, ads keep popping up and some hooowah site too. I am at my wits end, please help!! I'm pretty sure I've done everything recommended except for posting these 2 logs (Ewido & HJT).... thanks so much! ewido … | |
Someone please help me. :cry: I've been trying to fix my computer for a month now and it just keeps getting worse. First it was riddled with popups and would shut down spontaneously. Now the desktop is gone. Here is what I have done so far: For every User listed … | |
My computer started responding really slowly to night, when I click on anything it takes a very long time before it responds. At one point it just stalled and I hit Ctrl Alt Delete and the task manager came up and then started to reboot, it got to the windows … | |
I appreciate someone's help with this hjt log. Do I have nasties? Thanks. Logfile of HijackThis v1.99.1 Scan saved at 8:08:41 p.m., on 26/08/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\AVPersonal\AVGUARD.EXE C:\Program Files\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\system32\ZoneLabs\vsmon.exe … | |
My computer has gone beserk, its really screwed up by some virus, can anybody help me? My McAfee virusscanner identifies a virus called New Poly Win32, I've tried [URL=http://www.daniweb.com/techtalkforums/thread30127.html ]http://www.daniweb.com/techtalkforums/thread30127.html [/URL] and tried formatting the hard drive (I did not come further then 53% then he terminated the Formatting). So … | |
My PC is dying quite quickly! I think its down to something called OIN that I can't remove from my programmes list and normal adware/spyware killers won't get rid off. Heres my log file, could someone please help me clean up the mess! Logfile of HijackThis v1.99.1 Scan saved at … | |
I have a problem that frequently appears...Seqverchos1at keeps causing errors, and my own attempts to rid myself of it got me into getting new errors, with 'Spool32'.... I am running ME, and by no means an expert in computers. I installed spybot in addition to avg 7.0.My hijackthis log comes … | |
Help, my computer seems to be running slower every day. it has trouble loading pages and bringing up something once i have clicked on it. Its not normally this slow with DSL. Logfile of HijackThis v1.99.0 Scan saved at 9:20:03 PM, on 3/1/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: … | |
When i try to go to certain sites like hotmail this page pops up and says Cannot find server or DNS error here is my log: Logfile of HijackThis v1.99.1 Scan saved at 2:58:21 AM, on 8/11/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Unable to get Internet Explorer version! … | |
trying to fix someone's computer for them. Logfile of HijackThis v1.99.1 Scan saved at 10:15:49 PM, on 08/03/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\hkcmd.exe C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe C:\WINDOWS\BCMSMMSG.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\DOCUME~1\JESSIC~1.EIS\LOCALS~1\Temp\See04152005.exe C:\Program … | |
Good day everyone. A couple of days ago my norton av caught trojan.cachecachekit. now the popup nav window keeps coming up, and it can't get it to go away. I tried the following without success: in safe mode, i ran: ewido killbox ad-ware cleanup still didn't stop in Now I … | |
Hi I'm new. I've just been slogging my way through the removal processes for Aurora/Nail (and there's me thinking I just had a 'small' problem with Trojan.Cachecachekit...). I've followed the instructions in the "Fixes for Specific Infections", and here are the two logs. First Ewido: --------------------------------------------------------- ewido security suite - … | |
So I have gone through the posts and tried everything I've found (includes aboutbuster, cwshredder, hsremove, AdAware and more) and I still have that stupid SpySheriff virus! It is totally throwing off my chee. Anything you can do to help would be greatly appreciated. Anyway here is my hijackthis report: … | |
I need help. [B]Hacktool.Rootkit[/B] had attacked my PC. I've ran HijackThis and this is my Log file. Please reply to me ASAP so I know what further action to take... Logfile of HijackThis v1.99.1 Scan saved at 10:20:02 AM, on 7/27/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer … | |
When I got back from vacation the people who were housesitting allowed my computer to infested with God knows what. First I thought it was that Aurora crap that is going around but after following the steps to remove that I still have popups and shortcuts. Here is my Hijack … | |
Hi, and welcome to the world of Linux. Linux offers, so many, new and exciting possibilities, to both experienced and novice alike, that it is oftentimes difficult to get started. One solution to such a problem is to familiarize yourself with the feel of Linux before you go any further … | |
Hello followed ur advice on deleting Drpmon.dll and aurora here is the hijackthis log file and edwido scan file thanks... Logfile of HijackThis v1.99.1 Scan saved at 5:18:36 PM, on 10/07/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe … | |
A few days ago I installed a program which was infected with a virus (I double clicked the .exe file and a DOS command prompt came up but then disappeared). So now randomly when I open IE my VET anti-virus software catches and deletes a virus. I'm not very knowlegeable … | |
Hi, Just new here. I've had problems recently with coolweb and lop and have managed to fix most, also found and fixed tangent. I'd seen it before but didn't know what it was until reading this forum. I'm just left with a small problem now. After I switch on my … | |
Hi! After installing a program that gave me some troubles, I have some problems with my system: 1)when I go to some sites appears a "syntax Error" on my IE 6.While other websites works as usual..but with Firefox No problem at all...all website works ok funny thing 1.1) When going … | |
If it's any help to you, the site it redirects to is: [url]http://69.50.190.131/?to=dname&from=in[/url] , which redirects to a selection of porn sites. Here's the log: Logfile of HijackThis v1.99.1 Scan saved at 11:36:21 AM, on 7/22/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: … | |
First, thanks in advance for any help. I've tried everything I know to do and it's just not good enough. I have supoposedly cleaned this machine of Aurora, Nail, BookedSpace, AlwaysUpdateNews, MSW Seach, AdDestroyer, Transponder (Aurora, DrPMon and Bolger) as well as Navidad Worm Worm. Yet within moments of getting … | |
I have just cleared my system of aurora and now I'm getting warnings about a trojan called trojan.startup.nameshifter.bk. Is anyone familiar with this and how to get rid of it? Here's my hijack log: Logfile of HijackThis v1.99.1 Scan saved at 1:32:57 PM, on 7/20/2005 Platform: Windows XP SP2 (WinNT … | |
Since yesterday, Norton keeps reporting a Virus called 'Hacktool.Rootkit'. It says the file msdirectx.sys in 'C:\Documents and Settings\Roel' is infected. After I remove it (in safe mode, in normal mode I can't see it) it just keeps coming back. Norton says that he can't repair or remove the file. Here's … |
The End.