[virus-malware] Forum Topics

I think I caught a virus which won't allow my control panel to open. I've run a McAfee virus scan 3X, but it doesn't detect anything. But, yesterday it identified a Trojan which wouldn't allow me to delete or quarantine it. I've been working on this all day, I even …

While talking on AIM, I received some sort of adware that brought up the yupsearch toolbar and when I open up my start window I am missing the programs that are listed above All Programs. Some of the other users arent missing programs but the YupSearch toolbar is still there. …

I keep getting fake windows security messages and "your computer may be at risk" ballons (in the bottom right of windows - i guess that's what its called). I've searched the forums and tried the things others have. I've run CWS newest version and hijack this. Also have run Norton …

w-find.com/index.htm is always coming back as my IE start page! Also, networking is sporadic on this machine now. Here's the HijackThis log that i have seen requested for fixing. Logfile of HijackThis v1.98.2 Scan saved at 12:26:07 AM, on 9/10/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 …

Hello, OK, I have a w2kpro machine that was hit with a vast amount of nasty spybot, esobot, etc. that I believe I've removed the last bits of... I was able to do this by following steps from other posts and a previous post of mine (though I was infected …

I've got a P3 650 with Win98se. There's so much crap on it, we've battled viruses over the years, and god knows what else is wrong with it. It's running so slow that it's either time to trash everything and reinstall Win98se or throw the freakin' thing away and buy …

I think I may have picked up something that causes everything to run super slow. Task manager shows 100% CPU usage even when I am not running any programs. It started a few days ago and has recently gotten worse. It may be a hardware probelem, but I suspect some …

I have the Winfix pop-ups and my spyware/ad-ware/virus protection cant get rid of them here is what i got Microsoft Anti-spyware CounterSpy Ad-Aware SE Profsenial Norton Antivirus 2005 Now i got rid of Aurora perfectly fine but this one is tricky any help that IS EASY would be nice :cheesy:

Hello all! When I start up Windows 2X, I keep getting a message saying "Loading freeprod content." I have previously used Spybot S&D and Ad-Aware, including the VX2 add-on, to remove spyware. Subsequent scans come up clean, but I keep getting the message on start up. Am I still infected …

Logfile of HijackThis v1.99.1 Scan saved at 8:43:26 PM, on 9/11/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\support.com\bin\tgcmd.exe C:\Program Files\Canon\MultiPASS4\MPTBox.exe C:\WINDOWS\System32\fxredir.exe C:\WINDOWS\system32\svcnv.exe C:\Program Files\Canon\MultiPASS4\MPDBMgr.exe C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\WINDOWS\system32\drivers\dcfssvc.exe C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe …

I have "fixed" this computer many times before, but the next time I boot it up, everything comes right back. I have been running AVG, Spybot S&D, and adaware, but to no avail. This computer has been messed up for as long as I can remember, but I actually sat …

Anybody please help me. its URGENT my computer is dual boot running win xp and win 98 and now my win 98 is showing some trouble when I start my win 98 there are no icons on the desktop and no start button and system tray.actully my computer was infected …

Hello all, I have windows xp and a memorex mmp8500 mp3 player. It used to work great!! Then I got a very bad virus in my pc and reformatted the whole computer. I went to install new songs on my mp3 player and now it actually shuts down the whole …

Can anyone help me with this please? Below is my HijackThis log file - what should i do now ? Logfile of HijackThis v1.99.1 Scan saved at 2:02:55 PM, on 9/7/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe …

Need some help with these darn winfix annoyances. I surf the same handful of sights and I got these darn pop ups. I've tried using other peoples logs to solve mine, but to no avail. I have run adaware, cwshredder, microsoft antispy, hijackthis, and spybot. Here is my hijack log...... …

I can not remove the search assistent. I downloaded the hijack this. if anyone can help, this is my log. :sad: Logfile of HijackThis v1.99.1 Scan saved at 2:31:43 PM, on 9/8/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe …

Recently I start to receive every 10 min high risk message from nortn antivirus as: c:\windows\q3645401_disk.dll will be removed from your pc! nembers are different! I ran nav in safe mode and it didn't find any viruses! this is my log file: Logfile of HijackThis v1.99.1 Scan saved at 2:28:51 …

Have been highjack by Privacy Defender. It took over my desktop and won't let go. I've tried the display route and it comes right back. Also I keep getting a run time error and I have to keep refreshing each page. Please help.

Hi there! im having lots of trouble with a virus that is detected by my avast AV. the virus is called msdirectx.sys as the title shows, im sure you are familiar with it. please help me! i use spywaredoctor and microsoft antispyware as well as zonelab firewall and avast AV! …

Even though i have searched the web and have found many people with the same ERROR their situation is different. I get the same messgae a fatal error in IE has occured at 0028:c0011e36 in vxd vmm(01) + 00010e36 Error was caused b Trojan-Spy.HTML.Smitfraud.c but i get mine after i …

My computer has been working fine for years and all of a sudden it has been affected by all sorts of viruses, trojans and adware! McAfee virusScan detected the above virus has affected c:\windows\system32\wininet.dll by can't get rid of it. I've had trojan q, I've got dotcomtoolbar, surfsidekick, iefeats. Can …

i need help with hijackthis, how do i use it to scan for viruses and can someone read my log file to let me know what i need to remove?

Hi, My moms computer has been effected by something which Norton claims is a Hacktool.Rootkit in c:\windows\system32\msdirectx.sys - a file I can't seem to find. I want to help her get rid of it, but I just don't know where to start. Hope you you can help. The log from …

I am infected with something that I cannot see to remove. Microsoft anitspyware reports it as: Trojan.Downloader.BHO.Req Type: Trojan Downloader And the Registry Key for it is: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E13DDE1-E013-47ec-9C4C-27C2F78BDD26} Neither MS antispyware can remove it, nor Hijack this, although in the logs it does show that as being deleted …

Dear list. Please advise how to make this computer have less spyware. Have ran on line scans and the Norton Antivirus. Thank you... -------------------- Logfile of HijackThis v1.99.1 Scan saved at 8:37:42 AM, on 11/3/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe …

I am working from my laptop. My desktop is infected and I can no longer get to the internet from it. Logfile of HijackThis v1.99.1 Scan saved at 7:58:27 AM, on 8/27/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe …

My computer is been hijacked by search200.com search bars, pop ups, col.com explorer start up screens, and 4 desktop icons that keep coming up every time I reboot the computer.... very fustrating!! I spent a great deal of time trying to fix the problem as this is how far I …

Logfile of HijackThis v1.99.1 Scan saved at 16:32:14, on 9/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\SYSTEM32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\Program Files\ewido\security suite\ewidoguard.exe …

Hello, I have been experiencing various problems on my computer, from random crashing/rebooting to unacceptable latency levels and program malfunctions. After several times trying to run HJT without it freezing up, I produced this logfile: Logfile of HijackThis v1.99.1 Scan saved at 5:31:58 PM, on 9/6/2005 Platform: Windows XP (WinNT …

Alright, I bet you're thinking I'm really weird or crazy, but believe me I do have a good reason behind requesting this information. Anyone know of websites or programs that contain/install/or prompt for installation of spyware or adware? I need alot for a spare PC I have for a research …

Hello and thanks for your help!!! I have hclean32.exe re-occurring on my system. It has installed a new toolbar. I removed it. And there was a new spyware remover pogram call wareout that i did not install. Now I can not open norton antivirus nor update it. Thanks agian ... …

:eek: Hello There, It started out on june 1. I turned on my win xp sp1 computer and the program links from the Start menu ( START> PROGRAMS>(Empty) ) were gone! I had a bunch of virus on the machine and have tired norton, trend micro, adware personal, adware and …

Right, I have McAfee Anytivirus and Antispyware, and put simply, it sucks, I also have Spybot Search & Destroy and Ad-aware but I cant detect and delete whatever virus/spyware i have on my comp at this giving moment. Its eating my bandwith I use Firefox and I get popups from …

Logfile of HijackThis v1.99.1 Scan saved at 8:49:21 PM, on 9/5/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\RnJhbmsgSG91c2UA\command.ex e C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINDOWS\System32\gearsec.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\System32\wdfmgr.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\System32\crmoxen.exe C:\Program Files\VERITAS Software\Update …

Anyone know a surefire way to get rid of the [b][u]trojan.elitebar[/u][/b] ? :evil: Is this the same as the downloader trojan? Thanks as always

hi to all, My system is getting slow day by day and sometimes the internet des not get connected or the page would not reload. Issue one: Even if , internetwas accessible 5 minutes ago now it would fail to connect.bringing task manager and ending the 'javaw' makes net accessible.Sometimes …

Logfile of HijackThis v1.99.0 Scan saved at 9:35:07 PM, on 9/4/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\Sm9zaHVh\command.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\WINDOWS\system32\qxiqvj\duvrmcq.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe C:\WINDOWS\System32\nvsvc32.exe …

I have run adaware, spybot, and trend micro anti spyware and these programs have been unable to remove the malware! :cry: Everytime I startup IE, the homepage goes to C:\WINDOWS\system32\msblank.html this webpage automatically prompts me to download their program. Please someone help me fix my computer!! :cry: Logfile of HijackThis …

I keep having spyware problems even though I've been using ad-aware and spybot. Could you please look through my log Logfile of HijackThis v1.99.1 Scan saved at 1:46:50 PM, on 9/4/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe …

my computer is plagued with pop-ups, and spybot nor norton seem to know why. my hjt log is below, i'm hoping someone smarter than i can let me know if there's anything i can do about it. Logfile of HijackThis v1.99.1 Scan saved at 3:27:18 PM, on 9/1/2005 Platform: Windows …

Hi all, Back again with a new problem which hopefully someone can be of some help with. My brother recently tried installing a new codec onto my comuter. Since then windows explorer crashes and shuts down all my open folders. I have tried fixing bits but still have the problem. …

Hello everyone! Lately, I have been having some annoying problems with my computer. It all started about two weeks ago or so. One day I came onto my computer, then to IE, and noticed this strange toolbar. Immeaditly I knew it wasn't good. At first I just hid it, but …

Hi, Can someone check me up with the HijackThis thing. I just want someone to tell me the stuff to delete, that are bad. Heres it: Logfile of HijackThis v1.99.1 Scan saved at 12:01:46 PM, on 8/31/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe …

I got my desktop propeties changed so here. Logfile of HijackThis v1.99.1 Scan saved at 9:31:51 PM, on 8/30/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common …

i recieved this message when browsing the internet using AOL. (see Attchment) Do you think it is legit. -T i seems legit ;)

Hi Guys, I would appreciate your assistance in removing the virus from my computer before they kill me! Here is the HJT Log: - Thanks Logfile of HijackThis v1.99.1 Scan saved at 2:57:23, on 30/08/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe …

Logfile of HijackThis v1.99.1 Scan saved at 10:53:39 AM, on 9/2/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ACS.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program …

Hi, and thanks in advance for those with more brains and experience than me.... Have an old computer, 900mhz AMD-Duron, 512Mb, Win-2000, IE 5 Previously was running Win-98 and suffered much less problems than I have in the last week. Now on my 5th install of OS From a fresh …

Please help. I have found bling.exe and have google'd it. .... it looks a wee bit nasty. Here is the hijackthis log; ogfile of HijackThis v1.99.1 Scan saved at 22:15:32, on 18/08/2005 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Unable to get Internet Explorer version! Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\csrss.exe C:\WINNT\system32\winlogon.exe …

Dear daniweb. Hello people. Am getting a lot of web pop ups. Downloaded and ran HijackThis. Have posted the log to learn what to do to slow/stop them. Have HijackThis in its own folder, system is updated, have anti-virus, Anti Spyware and backups running. Thank you... ============== Logfile of HijackThis …