[virus-malware] Forum Topics

hi my friends. as i know there are many implemented NIDS based on misuse detection as snort. but my question is about anomaly detection based systems. is there anyone implemented? cheers.

hi all i have a problem with winpcap i have installed on my system. actually the problem is NPF. i used msinfo32 to see if winpcap is running on my pc or not ,it is supposed to be running but it is not.it is stopped . how can i make …

I spent part of yesterday defragging and running all my AV and spyware programs. Everything was clean until I ran PestPatrol, which found a pest named CWS.GoogleMS.3 located in: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\xxxtoolbar.com. I Googled the xxxtoolbar to try to get some info on it, but all I could find were removal …

[url="http://www.us-cert.gov/cas/techalerts/TA04-261A.html"]http://www.us-cert.gov/cas/techalerts/TA04-261A.html[/url] [b]Multiple vulnerabilities in Mozilla products[/b] Original release date: September 17, 2004 Last [url="http://www.us-cert.gov/cas/techalerts/TA04-261A.html#revisions"][u][color=#800080]revised[/color][/u][/url]: -- Source: US-CERT [b]Systems Affected[/b] Mozilla software, including the following: [list] [*]Mozilla web browser, email and newsgroup client [*]Firefox web browser [*]Thunderbird email client [/list][b]Overview[/b] Several vulnerabilities exist in the Mozilla web browser and derived products, …

When I startup I go into Task manager and see that there are programs working under my username that shouldn't be working. Hoe do I foind out where they are stored and get rid of them? I think they are causing pop ups or are spying on me. winaudit.exe happens …

I company I have been working for has the follwing two viruses Backdoor-ciu & Vbs/pyfe according to thier IT support people. Norton has only started recognizing it this morning(one new variant one brand new virus). I don't have norton! I'm using antivir XP. the suspicion is that a CD of …

I had alot of viruses in my computer. My new and updated antyvirus have found most of them, but somehow it seems that there is still something that doesn't let the computer work properly. Spybot also fixed (deleted) few things, but still. (I'm talking about Windows2000). Hope you can find …

I can seem to get rid of this page...searchportal.info/hangman/. I use HJT and it goes away for about 10 mins. I guess it restarts itself or something.

This is my first time using the forum. I have been having trouble for months with spyware and pop-ups. Mostly i have gotten around this by using mozilla and renaming .exe files .backup files but the problem is definatly getting out of hand. I have used ad-aware, aboutbuster, spybot-s&d, cwshredder …

Hi! I'm using Windows 98 and a few days ago I started getting many popups from sites such as "ads1.revenue.net" and "ad-a-w-a-r-e.???". I have Zone Alarm, AVG and Ad-aware on my computer. I also got something called Cookie Wall and I started using Spybot. According to them, my system is …

When I open IE, my Homepage is a Search Page (Named "about:blank") I did not specify. An ad for Anti-Spyware software also comes up. After that, I can browse normally with an occasional Anti-Spyware pop-up. However, I cannot set my homepage. Here is the HijackThis Log I ran: Logfile of …

My neighbor was complaining about adware/spyware/etc and asked me to come over to try and fix it. I ran Norton AV and AdAware to clean things up. Here's the HJT log: Logfile of HijackThis v1.98.2 Scan saved at 1:52:35 PM, on 9/16/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet …

Just got to love the number of posts about this one. While I found it a nuisance after removing the files that left it, I did not find bridge.dll invasive, just painful. The info here (and numerous references to HJ) made it easy to get rid off, but his may …

ok i resently had to reformat my windows Me. i got the new Ad-aware SE personal (free version) and once i installed and tryed to open it i got 2 messages. one: "Ad-aware has caused an error in <unknown> close(in a box) Ad-aware will now close. if you continue to …

Internet Explorer opens up over and over again even in safe mode. Anyone experience this or have any idea how to stop it and then fix it? Any help is appreciated.

Yesterday I was surfing the internet for "nvidia 6800 GT" under google, and I clicked on one of the pages I saw and it was a review page for the video card and after I closed IE there were about 20 different icons on my desktop that werent there before, …

Hi, i have a whole lot of pop ups on my computer whenever i surf the web, i've dl'ed Adaware and spybot sd updated the both and it finds a couple of entries which i end up deleting and removing, although the problems comes back every time i reboot. Any …

everytime i start my computer, this error message pops up. I am not very computer savvy so I'm not really sure what to do. I have run Ad-aware numerous times and there are always objects found. How do I fix this? Please help me!

I have a Dell dimension 4550 running Windows XP home edition Service Pack 1. I have been trying to get rid of spyware and pop-up adds and in the process i think i have deleted some files i needed, one of which is shell.dll. I have downloaded a copy from …

this a lof from adware se 1.04 ok can u guys tell me what to do!!!! Ad-Aware SE Build 1.04 Logfile Created on:Wednesday, September 08, 2004 3:25:28 PM Created with Ad-Aware SE Personal, free for private use. Using definitions file:SE1R7 06.09.2004 »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» References detected during the scan: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» CoolWebSearch(TAC index:10):105 …

I am having major problems with pop ups and other junk installing itself on my computer. I have been running Adaware and Spybot, and I am constantly running Norton. Any help would be great. Here is my HijackThis Log Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common …

HI, I wanted to make sure if you see anything in here that needs to be taken care of. Once in a while my computer slows down badly. I already ran Spybot S&D and Ad aware 6.0, I also use spywareGuard, SpywareBlaster. All of these are updated. I also use …

Is there ANY hope i could get rid of some spyware without formating? To be specific i got Gator, Onflow and possibly a couple more im not aware of. How do i get rid of them? However, the most annoying is SmartSearch. Ive tried everything i know, and it doesnt …

Computers are just too complicated for me anymore, so I hope someone else can help me out here. This is the logfile from HijackThis (I hope it doesn't cause any problems), please look it over, and tell me what you can. Logfile of HijackThis v1.97.7 Scan saved at 11:29:41 PM, …

This is my first time using "HijackTHis" as well as posting a thread. I was wondering if someone could help me with my problem. I can no longer access the files/shortcuts on my desktop. I was informed to post my log and someone could help me soon. Logfile of HijackThis …

[url]http://www.errornuker.com/info/01.php?hop=welcome1[/url] Its called Error Nuker. One problem I have with it is that I cant find reliable reviews for it on the internet. Is it safe to use this program?

Had a virus... cleaned out within the registry. Can't access Yahoo or Google... can access all other sites (CNN, AOL, MSNBC, Delta, etc.). Can access Yahoo and Google from Netscape. Any ideas?

I have recently had a problem where this prosearching.com thing keeps coming up everytime I start my browser and it changes my webpage and pop-ups with a toolbar I dont need. How do I get rid of this?! Help me!

When I run these two programs it says there are four or five things it cannot get rid of due to the program being in "memory" . It asks to restart and then runs before the windows logon comes up. However once again it says it cannot delete them Should …

Juz saw and read so i moved it to the security forum. Please help. Been getting these startup page of coolsearch.biz for a hundred times. Tried deleting the cookies, temp int file but still it is there. Downloaded the CWShredder and it removed some files. Still it is there. Also …

Hi, I have a trojan on my computer at: C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\6JYZY5CX\DLL2_0001[1].BIN It's called: The Trojan horse TR/Scagent.DLL.C My Antivir software found it but cannot delete it or even put it in quarantine. I searched for "Scagent" on here but there was no results. I've run Ad-aware, …

Hi, I read through the link in the sticky thread about bridge.dll and did the regedit that it suggests. However, I still get the warning when I startup. It is also still listed in the Add/Remove Program. I deleted the bridge.dll file through Norton Antivirus when it came up, and …

I have a sales rep that having a spyware issue that i cannot remove. i know what it is but i cant remove it. adaware finds 4 files. 3 of them are sp.htm in the local temp folder. Please let me know if there is anything to be removed thanks! …

I think I have the motherload of all viruses. I loaded Norton2004 and am unable to get updates or go to symantec for any help. my computer occasionally goes black and pops back on. i cant get intelligent updates and i was told by msn that i have corrupt files. …

ok i got Cable on my computer and my computer got very very slow...when i use it online and offline like clicking folders....and i have soooo many internet processes going Logfile of HijackThis v1.98.2 Scan saved at 5:39:40 PM, on 9/11/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer …

Hi guys... I was wondering if anyone could help me with my HijackThis log file.. Everytime I connect to the Internet I get searchcentral.cc as my start page, and I've tried to change it, but when I reboot it comes back. I'm not sure what to fix, so if you …

All, I am experiencing something very weird on my Compaq Presario 720US which is running Windows XP Home with SP2. The firmware is current (version F0.C). My problem: at random intervals, something takes control of my cursor and sends it to the upper right-hand corner of the display, whereupon it …

hi, whenever you press CTRL on my uncle's keyboard, it writes a Z on the screen. when you press A in ie, it opens the favourites, when you press TAB it turns on the CAPS LOCK. when you hold the shift it writes a Q. what should we do to …

Ok, just recently, when I start internet explorer, it automatically starts up with some site with this address: [url]http://your-searcher.com/index.htm[/url]. I assume that I am infected with spyware and was wondering how to get rid of it. Spybot doesn't seem to be helping.

hi, i've found a bug in windows XP that causes it to restart after a few seconds without any warning. Where can i report it???????? :o

Does anyone know what RebateNation.exe is and how to get rid of it???? :eek:

Page cannot be displayed errors HELP!!!!!! Logfile of HijackThis v1.98.2 Scan saved at 11:41:27 AM, on 9/11/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\Explorer.EXE C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE C:\WINNT\System32\nvsvc32.exe C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe C:\WINNT\System32\svchost.exe C:\Program …

I have been having a problem with spyware, adware, trojans, hijacks and a slew of other annoyances. I am posting the Hijackthis version 1.98 log below. Can someone please tell me what to remove? Thank you. Logfile of HijackThis v1.98.2 Scan saved at 3:10:17 PM, on 9/11/2004 Platform: Windows XP …

Hey everyone.. About a week ago I asked in the 95/98/ME forum how to make my computer faster. It's really slow, it drives me crazy some days. It may very well have to do with the fact that the computer doesn't have very much RAM (256Mb if I remember it …

I have a web server at home running Windows 2003 Server. This week, the server has frozen 2 times. It looks like the keyboard stops responding even though the mouse cursor has movement. Once this happens I loose connectivity to the server. The only thing that I can do is …

When my friend is in a particular web site, without doing anything, a new web site with come up. It's always a porn site. I didn't believe this until it happened to me (using his computer). His wife had the same thing happen where she works.

Hi there, I am not sure which forum to post this in. I don't know a lot about the insides of computers, language and the different this and that's. I am very good at going in and playing with stuff and making it eventually work and finding stuff on the …

Hi, Below is my Hijack This log, having problems on daughters computer with annoying pop ups and computer freezing with very high RUNDLL32.exe using high % of cpu usage. Have run CW shredder, adaware, and trojan hunter numerous times, but problems still there.... Any help much appreciated.. Thanks Dawn Logfile …

Just wondering if anyone could help me> I'm new to HiJack This and not sure what to look for. I was refered to this site by someone I ran accross trying to fix my other computer. Can someone tell me if I have any issues and what I should do. …

I too have this nasty about:blank virus. I have been reading the forums and trying everything that is posted. I have downladed to many of this programs to list but I do have hijackthis. I have Norton and it deleted this virus before but its back and its mad. Norton …