718 Topics

Member Avatar for
Member Avatar for helpmerhonda

Crunchie.... I hope you're out there! I seem to have been caught. Here's a log from l2mfix and I'll post the next message with one from HJT. Thanks in advance! L2MFIX find log 1.03 These are the registry keys present ********************************************************************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows …

Member Avatar for crunchie
0
318
Member Avatar for Jessykah

Ok Im a newbie but with searching for help for my problem I came across this forum..thank god! I seem to be having the same problem as everyone else with these popups. I did try and get rid of this but with mine I notice that when you end the …

Member Avatar for crunchie
0
223
Member Avatar for fragmented_user

Dear Moderator, I am relatively new to the world of adware, malware and other such inventions consisting of malicious/annoying code, and it is a great relief for me to discover, that there does exist, those few individuals who are dedicated to both fighting it and assisting others to protect themselves …

Member Avatar for crunchie
0
412
Member Avatar for Atreyu

Can't get rid of Communticator.dll (it keeps refreshing the C:\Program Files\COMMUNICATOR Toolbar (file) ) Ne help heres my Hijack this Log -------------------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 1:04:44 PM, on 7/3/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for dlh6213
0
273
Member Avatar for kingdawiyd

can anyone help here is the hijack log. i am having all sorts of pop-ups and crap Logfile of HijackThis v1.99.1 Scan saved at 11:23:24 AM, on 7/8/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe …

Member Avatar for DMR
0
152
Member Avatar for nguyenn_99

Please help me with instruction on how to remove this Aurora. I am pasting my HiJackThis log. Thank You Logfile of HijackThis v1.99.1 Scan saved at 9:56:38 AM, on 7/2/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for crunchie
0
155
Member Avatar for Urdna

[COLOR=DarkRed]On my computer I no longer get the "page not found" page, I get this drwebservicehosts page. Can you Please help me, here is my Hijackthis scan[/COLOR] Logfile of HijackThis v1.99.1 Scan saved at 10:27:11 PM, on 6/27/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) …

Member Avatar for crunchie
0
112
Member Avatar for Dancke1

was cleaning out my temp folder and came across this file which cannot be deleted Perflib_Perfdata_79c, did some searching and found out this has to do with some lop.com thing I read ur forums and I dont see any of the files listed in as being associated with this, here …

Member Avatar for Dancke1
0
113
Member Avatar for robertmidkiff

I have been browsing the internet trouble-free for the past several days, but yesterday after I restarted, I could no longer access web pages through Internet Explorer. Mozilla Firefox is still working fine, but every page I attempt to visit with IE returns the standard "The page cannot be displayed" …

Member Avatar for robertmidkiff
0
166
Member Avatar for flaviuscrispus

The complete and utter cynicism of an outfit spreading virusus, worms and spyware having the unmitigated gall to call itself "A Better Internet" just sickens me. Anyway, it has hit me badly (I think my daughter downloaded Aurora along with something called Limewire, a music program), and now my machine …

Member Avatar for dlh6213
0
146
Member Avatar for rkaradi

I have the ABI Network virus/trojan horse and I can't get rid of it completely. I have run Ewido in safe and reuglar mode, Ad-Aware 6.0, Spybot, MS AntiSpyware and Symntec to nocomplete avail. I have web links downloaded automatically, and I have pop up and new web pages open …

Member Avatar for DMR
0
563
Member Avatar for Tadaka1

Hi Experienced users, I came upon this site while trying to figure out why all of a sudden some of the links on the websites which used to work don't work anymore. I don't exactly know when this issue began, but I noticed it only this weekend. I have already …

0
84
Member Avatar for Ladymercury

Hey, I have some troubles with this laptop I'm using. It just magically was plagued by this Aurora BS and I've been trying to get rid of it for weeks. I tried originally the steps with Hijijack this but it keeps coming back, and now my computer is running slow …

Member Avatar for crunchie
0
224
Member Avatar for shaas

Everytime I try to log in get wtkernel error then its says windows shutting down can't load... ran bazillion spy and virus programs and deleted tons of stuff. This is a copy of my hijack this log. Any suggestions? Logfile of HijackThis v1.99.1 Scan saved at 9:31:05 PM, on 6/23/2005 …

Member Avatar for crunchie
0
155
Member Avatar for Michelle1070

I got this spyware/virus a few days ago and I think I may have more than just that. I've tried so many things to try to remove it. Here is my Hijack This log. Thank you so much! Logfile of HijackThis v1.99.1 Scan saved at 1:46:54 PM, on 6/20/2005 Platform: …

Member Avatar for DMR
0
627
Member Avatar for Kirsty

Hi, Im really sorry to keep repeating the 'Aurora' thing but i'm really stuck. I hardly the most computer literate person in the world and i'm struggling to understand the instructions you've given to other people. My computer keeps getting aurora pop-ups. I've recently installed adaware and HijackThis. HijackThis gave …

Member Avatar for DMR
0
415
Member Avatar for Dancke1

was cleaning out my temp folder and came across this file which cannot be deleted Perflib_Perfdata_79c, did some searching and found out this has to do with some lop.com thing I read ur forums and I dont see any of the files listed in as being associated with this, here …

0
68
Member Avatar for phidelt649

Alright, here we go. I, like everyone else, tried to manually uninstall this godforsaken program. Then I ran the symantec program, which claimed to remove it. For a while, it seemed to actually have removed it, of course...in the long run, it didn't. So, I d/led HiJackThis and this is …

Member Avatar for crunchie
0
234
Member Avatar for franzq

Hi there, So I've been using McAfee, MS AntiSpyware, Spybot S&D, AdAware, TrendMicro, and Avast, and still cannot get rid of this beastie that opens IE at start-up and sends me to a page at [url]www.freewebs.com[/url]. (This is doubly annoying because I use Firefox. :evil: Thanks, MS.) It's slowing the …

Member Avatar for DMR
0
447
Member Avatar for bbogert

Not sure if this is a virus/spyware problem, or XP in general, so I decided to post in both forums. OK, I got hit by SpySheriff yesterday, after fixing that with AdAware and ewido, the 'Display' control panel does not offer the option to select an image for the background, …

0
58
Member Avatar for bbogert

OK, I got hit by SpySheriff, after fixing that, the 'Display' control panel does not offer the option to select an image for the background, I can only choose a color. Here's my HJT log: Logfile of HijackThis v1.99.1 Scan saved at 5:18:06 PM, on 6/18/2005 Platform: Windows XP SP2 …

0
51
Member Avatar for grindking

Hello all, I hope you can help me.....I have recently been getting strange AURORA POPUPS, and constant bothers with spyware......my computer has slowed down because of it..........I put HiJack This into its own folder and ran the file......these are my results. Logfile of HijackThis v1.99.1 Scan saved at 5:28:49 PM, …

Member Avatar for crunchie
0
190
Member Avatar for c01dud

Hi i have just been going through the forums to remove the Home search , search assistant etc. i have run the CWshreader, the aboutbuster too the fixes are done and completed. Then i ran the Hijack (v1.99.1) and using some of the fourms i have fixed some of the …

Member Avatar for crunchie
0
191
Member Avatar for lisafigs

can someone help me? i have aurora popups so bad and i cant figure our how to get rid of them. here is my hijack log. Logfile of HijackThis v1.99.1 Scan saved at 9:48:52 AM, on 6/9/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180) Running …

Member Avatar for DMR
0
91
Member Avatar for coldhearted

Hi i have had this virus for a few days and have disabled system restore. can anyone help me get rid of it as AVG brings it up everytime i log on to the net which as i'm broadband is all the time Logfile of HijackThis v1.99.1 Scan saved at …

Member Avatar for coldhearted
0
306
Member Avatar for ten278

Heya - Am riddled with problems that seem to be inherently sprouting from the above mentioned virus/spybots. Ive run Spybot S&D, Adaware (with plugins), Microsoft Spyware, etc to no evail. I trust someone may be able to assist - puh-lease! My HJT and L2M logs are as follows : Logfile …

Member Avatar for crunchie
0
469
Member Avatar for wolvesmatt

i am constantly getting those aurora popups Im not very good at getting rid of these kind of things so could sum1 please help me heres my hijack this file Logfile of HijackThis v1.99.1 Scan saved at 11:31:33, on 06/04/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 …

Member Avatar for crunchie
0
142
Member Avatar for mattisjo

Hi, I have 4 computers networked using a Netgear router. My ISP is Verizon DSL. Three of the computers are XP, but the one I use for work is Windows 98. I use VPN and my company prefers we use a non-XP machine for security reasons. Well, all was fine …

Member Avatar for DMR
0
94
Member Avatar for joe_sausage

Hello, Thanks in advance for the help. I went ahead and downloaded the nailfix and ewido before posting. I followed the steps that y'all have given several people that were having the aurora problems. Below is the log file from right after my ewido scan and right before i checked …

Member Avatar for dlh6213
0
122
Member Avatar for Larom

I got the same AIM Allison did, and got the same virus. The first time I restarted my machine, Windows XP asked me if I wanted to run 'userint32.exe' which is unregistered. I told it "no" and searched google for an answer. I found this page and began working though …

Member Avatar for crunchie
0
152
Member Avatar for Tom62psu

Rcently got ISTsvc and aurora, tryed getting rid of everything still getting popups, heres a hijac log what else is going wrong?? Logfile of HijackThis v1.99.1 Scan saved at 12:06:58 PM, on 5/21/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe …

Member Avatar for crunchie
0
610
Member Avatar for det54994

Dear someone, I have a problem when IE6 tries to connect to the web. The green bars at the bottom seem to doing something then they seem to stop and it says page can't be displayed. Interestingly when I use a VPN through to the office network and load IE6 …

0
64
Member Avatar for rvasanth

Hi, I have been living with prosearching.com for few months now. Have tried all Anti-spyware's and searched for the key word "prodsearching" on all the top Anti-spyware vendor sites, with no luck. Here is my HijackThis log Logfile of HijackThis v1.99.1 Scan saved at 9:12:42 PM, on 5/11/2005 Platform: Windows …

Member Avatar for crunchie
0
172
Member Avatar for AlliAnne629

Recently I received an IM from a friend that said something like "this is cool, check it out" where "this" was a link. After clicking on it, a popup sent me to open a new page and immediately the message started sending to everyone on my buddy list. Clearly it's …

Member Avatar for AlliAnne629
0
134
Member Avatar for philip kershaw

I seem to be yet another vitim of hotoffers hijack spyware. ie, internet explored home page hijack, smuty desktop icons, virus warnings. All pointing to the same website: globolook. I've done a hijackthis scan and here are the results... Logfile of HijackThis v1.99.1 Scan saved at 09:19:46, on 25/04/2005 Platform: …

Member Avatar for dlh6213
0
410
Member Avatar for ShhBeQuiet9772

I think i got searchmaid and something else but im not sure... like virtualmaid or something... might be the same thing but i dont know here is my HijackThis logfile before the restart, will post one after restart in a min Logfile of HijackThis v1.99.1 Scan saved at 12:00:28 PM, …

Member Avatar for dlh6213
0
175
Member Avatar for seanmcan

Well last time I had the offeroptimizer popping up you helped alot. Now I get this from 'zipzappromos'. Below is a copy of my HJT. Any suggestions? Logfile of HijackThis v1.99.1 Scan saved at 6:01:47 AM, on 4/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) …

Member Avatar for DMR
0
139
Member Avatar for bullett1818

I have the same problem but some of the files you are saying to remove are not there. I cannot get hotoffers off my pc! Please Help! Thanks. This is my log file. Logfile of HijackThis v1.99.1 Scan saved at 8:38:10 PM, on 4/6/05 Platform: Windows 98 Gold (Win9x 4.10.1998) …

Member Avatar for dlh6213
0
138
Member Avatar for Krayakin

This is from my relative's computer, I was able to get rid of most of the stuff using Spybot and Adaware. But I'm still having troubles removing a few other things. Here's the HJT Log [Code] Logfile of HijackThis v1.99.1 Scan saved at 11:11:53 AM, on 3/22/2005 Platform: Windows XP …

Member Avatar for dlh6213
0
178
Member Avatar for burketdsl

This came up on the screen after being on the net yesterday. Does anyone know what it means? An unexpected exception has been detected in native code outside the VM. Unexpected Signal : EXCEPTION_ACCESS_VIOLATION (0xc0000005) occurred at PC=0x6D312033 Function=[Unknown.] Library=C:\Program Files\Java\j2re1.4.2\bin\jpiexp32.dll NOTE: We are unable to locate the function name …

Member Avatar for burketdsl
0
753
Member Avatar for deg

Hello... I'm in trouble!!! I also have been hijacked by hotoffers.info Have tried Ad-Aware SE, Trend Micro Housecall, A2 (squared) and SpySubtract. They all find critical objects and delete them but this hotoffers hijack keeps comin' on back..... Here is my latest HJT Logfile... can someone pleeeaassse help? Thanks, - …

Member Avatar for crunchie
0
235
Member Avatar for ROORman05

here is my scan from Hijack this. Any help would be greatly appreciated. Thank you soo much Logfile of HijackThis v1.98.2 Scan saved at 11:56:58 PM, on 3/11/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\Explorer.EXE C:\WINNT\System32\NMSSvc.exe …

Member Avatar for dlh6213
0
257
Member Avatar for illuminatirex

Hi, i need help with removing the hotoffers problem and i also get this annoying popup which tells me to download some antispy software i tried to fix it for the past week , unsuccesfully. I used spy sweeper and xsoftspy software to fix it it showed that it did …

Member Avatar for illuminatirex
0
146
Member Avatar for Turnip

Hi everyone I'm posting because my dad's laptop has essentially filled up with spyware to the extent that he cannot connect to the internet. Essentially he has a Sony Vaio laptop that had windows 98 SE on and just recently he put xp on also. He never connected it to …

Member Avatar for crunchie
0
203
Member Avatar for kdtrimble

The only 2 workstations on my network running WIN 2000 have contracted some sort of nasty. Here are the HJT logs. COMPUTER A Logfile of HijackThis v1.99.1 Scan saved at 9:45:31 AM, on 2/24/2005 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe …

Member Avatar for caperjack
0
264
Member Avatar for DarthZ

Hello, I am having the same problem as posted by Jennelle in [url]www.daniweb.com/techtalkforums/thread16359.html[/url] But the solution didn't work, but it seemed be tailored to her machine. The Problem When I click on the IE icon the hourglass appears for a couple of seconds then disappears, but no IE. I check …

Member Avatar for DMR
0
110
Member Avatar for anatal

[COLOR=Sienna]I am trying to help a friend get her laptop back in control, but I am afraid to delete anything possibly needed... she can't seem to stay online any more, and last time this happened I deleted quite a few viruses and spyware, etc from her computer. Can anyone help …

Member Avatar for crunchie
0
107
Member Avatar for smartmoney

mother-in-law has prob on computer.ran Ran M$ spyware removal software and removed some Ran SBS&D and removed stuff Ran AD AW and removed stuff. Did an AGV AV Full scan and now clean of all above with deep scan done When going to M$ update site it comes up blank. …

Member Avatar for crunchie
0
229
Member Avatar for user_pat

I am using the latest Internet Explorer (6) on Windows XP. About couple days ago, I was using Internet Explorer with a breeze, but now any website or url sites i type it won't apperar. It takes me straight to the Cannot find Server screen. And at the bottom it …

Member Avatar for crunchie
0
337
Member Avatar for butchcombs

I have been experiencing some trouble lately I can't fiqure out. My system will begin to slow down over time during the day to an almost freeze. Now, I can't even delete my "sent" mail in outlook express. I get a message that "an error has occured" I use nortons …

Member Avatar for dlh6213
0
157

The End.