12,960 Topics

Member Avatar for
Member Avatar for tinacolo1717

[SIZE=3]Please help me remove aurora... Logfile of HijackThis v1.99.1 Scan saved at 7:18:50 PM, on 7/19/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe …

Member Avatar for dlh6213
0
303
Member Avatar for dcc

I have a friend who has a Dell computer, and recently he has been getting error messages that when I check them out at Microsoft said that he had the virus MaxDoor. Microsoft went on from there to explain how to remove it in the registry, and warns up front …

Member Avatar for crunchie
0
231
Member Avatar for jfxcoll

Call me crazy but I went in and selected every thing listed in hijackthis.exe and them fixcheck it. Here is what I was left with (didn't stop the hijacker... made it worse!) the system would let go of these. I am about to format my drive and figured what the …

Member Avatar for crunchie
0
132
Member Avatar for RuffRyder357

My Computer Is Just All Around Being Wierd.....Netscape 8.0 Tells Me It Cant Find Websites, That I Know Exist, And Hotmail Says My Password Is Wrong When It Lets Me Log-In To MSN Messenger With Same Password and It Works Fine. When I Scan With Spybot It Finds 2 Problems …

Member Avatar for crunchie
0
275
Member Avatar for mickyola

Hi, I'm new here and really need help. I have been having alot of trouble with my computer latly so I went and ran Trend Micro Housecall and it found 20 virus'... all was going well untill it got to Step 4 - recover. My computer disconnected during this process …

Member Avatar for DMR
0
187
Member Avatar for jfxcoll

Hello world! I am tired of trying to get some work done and being redirected to adfarm, winfix (they are very bad) they promise to fix the problem they have created for $35. Microsoft is no help. they allow the redirection, secret software downloads and changes to the registry what …

Member Avatar for Catweazle
0
103
Member Avatar for catfish

I have been trying to help someone all day rid his computer of spyware attackers. The OS is WindowME and uses "cox-internet" as his internet provider. I installed "ad-aware" software and rid his computer of 284 objects. Once I was finished I begin having difficulty connecting to the internet. The …

Member Avatar for Nabeel
0
203
Member Avatar for nettizen

My Norton alerted me of a virus that it quickly deleted (MHTMLRedir.Exploit) but while on the same website, before I could leave, it alerted that I received a trojan called aun_0011[1].exe "Trojan.Alwaysup". Located in a temporary internet file. It said it tried to repair it but failed. Then it said …

Member Avatar for dlh6213
0
165
Member Avatar for sstarke

I get this message when trying to access certain websites. Here is my hijack this listing. Can anyone help? Logfile of HijackThis v1.99.1 Scan saved at 10:27:53 PM, on 8/5/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe …

0
90
Member Avatar for mwda

:cry: I have been unable to get rid of an infection that my sister has on her computer. She had many and I was able to get rid of all but one. I have run Find-Qoologic Kill2Me.exe LQfix.bat AboutBuster.exe rbkiller.exe VX2Finder9x(126).exe cwshredder.exe in an attempt to get rid of this …

Member Avatar for mwda
0
348
Member Avatar for MagicalVacation

Ok, so here's the problem... I've recently been infected with Spysherrif and found the solution to getting it off my system on this forum. I've managed to follow the steps and have gotten rid of Spysherrif. The only problem I'm left with now, is the blue screen with the red …

Member Avatar for MagicalVacation
0
149
Member Avatar for Young Teck 06

ERROR SIGNATURE AppName: explorer.exe AppVer: 6.0.2800.1106 ModName: ole32.dll ModVer: 5.1.2600.1619 C:\DOCUME~1\FAMILY~1\Temp\WERC3.tmp.dir00\appcompat.txt ^^ This is just some details for ya'll. I am not sure but I cannot open ANY folders (Control Panel, My Documents, NONE) I am running Windows XP and I am about to restore the whole computer if I …

Member Avatar for Young Teck 06
0
249
Member Avatar for zion1

I have had a hacktool rootkit infection. Have scanned with pandascan and bitdefender which has improved things. There are still a few nastys lurking though heres a copy of my hijack file hope someone can help Logfile of HijackThis v1.99.1 Scan saved at 1:54:48 p.m., on 26/07/2005 Platform: Windows XP …

Member Avatar for DMR
0
163
Member Avatar for jwtrenta

I've been struggling with trying to remove a browser hijack from my system. There were 4 user accounts set up within Windows XP. I would seem to clear the problem under one account, but when I would go to another to check on it, the problem would reappear. I finally …

Member Avatar for DMR
0
425
Member Avatar for mechanica

They're in C:\Recycler\[###-###-###] Lots of numbers with hyphens between. I could find no C:\recycler folder on my C drive, so I went start > run C:\recycler and the folder is empty. So I go farther, do C:\recycler\[all the numbers, typed 'em all out] and it opened up my recycle bin. …

Member Avatar for crunchie
0
391
Member Avatar for Vatmax

Hi all! I'm new here and after reading a bit about ways to clean up my computer I came across the hijackthis program. I got it, ran it and then saw on this site were it was suggested that I download the shredder and about buster too. So...I've already done …

Member Avatar for swatkat
0
156
Member Avatar for mookie5381

Yay! for friends and them getting nasties and sharing them via messaging services!!! So, here's my logfile...please help...PLEASE!!! thanks a ton! michael Logfile of HijackThis v1.99.1 Scan saved at 12:50:32 AM, on 8/4/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for dlh6213
0
401
Member Avatar for dcc

Hi all...I had to reformat my computer last week and have just about everything back on line as it should be, but I'm being inundated by pop-up messages telling me that it's urgent that I use their product to repair everything from the registry to my hard drive. If you're …

Member Avatar for dlh6213
0
350
Member Avatar for cajunsunshine

Everytime I type in a url in the address bar it won't go to the page. It will have [url]http:///?%20www.web[/url] page name. I'm unable to go to any webpage at all. I have ran ad aware, spybot S & D. Have searched all search engines. But no such thing on …

Member Avatar for damjan_hr
0
432
Member Avatar for sofcon

hello guys an instant dialer(spyware) has been added in my pc. i am deleting all its files from program files but after restarting my pc automatically run on start up again as before.i ve tried also to remove it using a spyblaster application but without success.another important thing is that …

Member Avatar for sofcon
0
181
Member Avatar for quiksilvr101

I have aurora that keeps on popping up and I downloaded the program and ran the scan... Can you help me from here, thanks Logfile of HijackThis v1.99.1 Scan saved at 9:51:02 PM, on 6/13/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe …

Member Avatar for RickW
0
322
Member Avatar for sfergpack

I am having a problem going to secure sites (https:) and getting access to information. Regular web sites seem to be working OK. I have run Adaware and Spybot to get rid of all the garbage files. I have also run HiJackThis and would appreciate it if someone could take …

Member Avatar for DMR
0
358
Member Avatar for Eua

Hi, I am new to this forum and admittedly am not a technically gifted person but I recently and stupidly unwittingly downloaded hacktool.rootkit virus onto my computer. Now the pop-up ads are unstoppable. I've scanned with ad-aware, spy-bot, panda, and trend micro's house call and I still have problems. Thanks …

Member Avatar for DMR
0
192
Member Avatar for Athersgeo

Hi I'm new. I've just been slogging my way through the removal processes for Aurora/Nail (and there's me thinking I just had a 'small' problem with Trojan.Cachecachekit...). I've followed the instructions in the "Fixes for Specific Infections", and here are the two logs. First Ewido: --------------------------------------------------------- ewido security suite - …

Member Avatar for DMR
0
250
Member Avatar for hbadger30

Hi guys, I've done some searching back through previous threads in order to help me remove the Transponder.pynix spyware (part of VX2 I believe) but to no avail - here is my hijack this log: Logfile of HijackThis v1.99.1 Scan saved at 16:01:04, on 26/07/2005 Platform: Windows XP SP2 (WinNT …

Member Avatar for dlh6213
0
548
Member Avatar for strainjp

This is my hijack this log file Logfile of HijackThis v1.99.1 Scan saved at 7:19:01 PM, on 8/1/2005 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\ATI2EVXX.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\YYIBZBF.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\ATIPTAXX.EXE C:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXE C:\WINDOWS\SYSTEM\PRINTRAY.EXE C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE C:\WINDOWS\TEMP\XP8.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE …

Member Avatar for crunchie
0
253
Member Avatar for izzo

Hi. I keep getting popups from Starware asking me to install their toolbar, as well as being redirected to their search page when I right-click to open a link in a new window. Sometimes I get redirected to www.abcsearch.com instead of starware.com. I've done a scan using Spybot previously and …

Member Avatar for crunchie
0
1K
Member Avatar for coots

I have up to date virus, spy and ad ware, however a few items are being missed and or there picking it up and will not let me do anything with them except stop or exclude. Any help would be greatly appreciated. 1. On startup - Windows cannot find C\windows\system32\services\services.exe …

Member Avatar for coots
0
360
Member Avatar for clagoo

Hi, I have also got the same problem :cry: . I really hope someone can help me asap. I have used HijackThis and have my logfile as follows: Logfile of HijackThis v1.99.1 Scan saved at 15:23:09, on 03/08/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) …

Member Avatar for clagoo
0
201
Member Avatar for fareed88

I searched around the boards and i couldn't find a solution to my problem. Anyways, last night i bought and installed half life 2. During that process i updated my nvidia drivers. After that happened i keep getting an error on all apps except IE and windows explorer. I get …

Member Avatar for fareed88
0
144
Member Avatar for AussieMate

I ran hijackthis but looking at the log i know i am way out of my league. Could someone please take a look at it and let me know whats what. I really appreciate it! Logfile of HijackThis v1.99.1 Scan saved at 1:05:06 AM, on 04/08/2005 Platform: Windows XP SP2 …

Member Avatar for crunchie
0
87
Member Avatar for yaduks

I am having problems with a Trojan - QLowZones-15 - which is stopping me from opening some programs properly. I cannot open My Computer or IE, but can open Word and send emails via MS Outlook Express. It appears to be in C:\WINDOWS.000\SYSTEM\GGLIB.EXE Can anyone advise how to get rid …

Member Avatar for dlh6213
0
116
Member Avatar for ep2002

Hi everyone, I've been having problems with my machine for a while now even though we upgraded about 4-6 months ago. OE keeps causing the machine to go nutso & most of the time I can get it under control & then it will do it again several hours later …

Member Avatar for DMR
0
584
Member Avatar for dedBOYriot

So I have gone through the posts and tried everything I've found (includes aboutbuster, cwshredder, hsremove, AdAware and more) and I still have that stupid SpySheriff virus! It is totally throwing off my chee. Anything you can do to help would be greatly appreciated. Anyway here is my hijackthis report: …

Member Avatar for dlh6213
0
262
Member Avatar for watthe

I'm asking on behalf of my friend. This is his logfile from hijackthis. Logfile of HijackThis v1.99.1 Scan saved at 9:06:45 PM, on 7/28/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe c:\Program Files\Common …

Member Avatar for swatkat
0
117
Member Avatar for akdraw

I need help getting rid of several problems. I'm pretty new to this so please be gental. Here is my hijack this log. Any help would be gratly appreciated. Logfile of HijackThis v1.99.1 Scan saved at 9:35:27 AM, on 7/31/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 …

Member Avatar for crunchie
0
414
Member Avatar for heho

Hi, I recently encountered Coolwebsearch. I used adaware, spybot and hijack this and successfully deleted the spyware. However, now I am unable to browse secure websites. I get a "page cannot be displayed" site. Please help, I am desperate here! Oh yeah, I did everything imaginable. I downloaded winsockfix, it …

Member Avatar for dlh6213
0
205
Member Avatar for Hagar

Hi from Oz Received Mcafee Virus warning on running Anti Virus program - deleted file from System 32 - only problem I have is that now when I boot up Windows tells me it cant locate file Can someone assist me in getting rid of this - step by step …

Member Avatar for dlh6213
0
217
Member Avatar for Crevin

Well I've been trying to do some research and I read how other were having problems with this "super virus/adware/spyware/backdoor/etc". I read in a previous post that if someone else has a similiar problem even with the same virus to make a new topic and stick in a hijack log, …

Member Avatar for dlh6213
0
96
Member Avatar for c21werner

Just repaired Windows through the OS Disk, not the command prompt. Coming back, all looks great, except one LARGE issue. Cannot get into the internet at all. I can get a valid ip address, and can ping websites and other computers, but CANNOT ping the local ip address to that …

0
93
Member Avatar for Phishfood

Okay, this is my first post here, and I am desperate. My computer has been bombarded with popups for a couple months now. I have installed and ran adaware and Spybot to no avail. Using ZoneAlarm, I was able to stop the popups but at the same time, lost my …

Member Avatar for crunchie
0
318
Member Avatar for scottc80

Ok, so I came across your site while searching to try to find a way to remove Yazifind pop-ups. I registered, but I am not sure if I am doing things on your site the way that you want. I downloaded the HJT program (it appeared from other people's posts …

Member Avatar for crunchie
0
107
Member Avatar for prakharprakash

Hi!! Recently, my PC got infected with [COLOR=Red]spyware.bingofun [/COLOR]which only EWIDO detected and successfully removed it . Others like Spybot, Ad-Aware failed. So, exactly where do they stand when compared to Ewido and is Ewido the best choice ??

Member Avatar for prakharprakash
0
264
Member Avatar for kentuckycat

Hello, Please excuse any mistakes I make, this is my first time posting here. If I forget to list any necessary information, just let me know and I'll get it up ASAP. :rolleyes: Thanks! As you can tell by the title, my comp has been infected with at least Nail.exe …

Member Avatar for dlh6213
0
346
Member Avatar for ANDRU

Hello everyone. I've had a problem that has been going on for about a week now and it is really starting to bother me. I hope you guys can help! Like many posts before many have had the problems with random aurora pop ups and VX2 Malware... I have been …

Member Avatar for dlh6213
0
432
Member Avatar for rjeffers

Iv'e just purchased Norton 2005, installed, updated, scanned, and cleaned........plus updated Spybot, AdAware, ran both and cleaned. I'm in good shape, except for 9 popups. They don't bombard me while I'm surfing, usually just when it sets idle for a few hours (I'm on cable). Popups include "Interclick.com / adopt.hbmediapro.com …

Member Avatar for crunchie
0
530
Member Avatar for droogy

[B]Any unwanted entires in this hijack log?[/B] Logfile of HijackThis v1.99.1 Scan saved at 12:37:53 PM, on 7/31/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec …

Member Avatar for crunchie
0
61
Member Avatar for Joanna

I have the above adware on my pc, picked up by free XoftSpy software. :evil: Could anyone please advise how to remove it? Thank you Joanna

Member Avatar for swatkat
0
254
Member Avatar for maj3091

Hi All, I'm new here and I'm having some problems with my PC (Win98SE) which I hope you can help with. I've acquired a toolbar on my IE6 which I can't get rid of, it gives lots of links (see attached image). I also keep getting items trying to connect …

Member Avatar for dlh6213
0
340
Member Avatar for Old Dominion

I found this site attempting to fix a problem where I was unable to access a favorite website. Post 5490 describes many of my problems. Porno everywhere but the last straw was when I was unable to access [url]http://www.dairygoatsplus.com[/url] from my home computer. Works fine from work. I am not …

Member Avatar for dlh6213
0
210

The End.