[virus-malware] Forum Topics

I just wanted someone else to check this for me so I dont' miss anything if there is anything wrong at all. Thanks Logfile of HijackThis v1.98.2 Scan saved at 10:46:13 AM, on 9/8/2004 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

Now i just updated my pc to sp2 again. And i have seen in other peoples logs that when they install sp2 it brings out viruses hiding on their system. so better safe then sorry. Logfile of HijackThis v1.98.2 Scan saved at 6:01:04 PM, on 9/9/2004 Platform: Windows XP SP2 …

Dear Friends, If you've followed my threads [Zohar posts] you'll know the problems I've had this week trying to cure my Dell from really bad virus downloaded in an e-mail and apparently from someone who got it from a p2p program ...it was a Dreamweaver upgrade [MX2004-en]... So anyway, the …

Please Help Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\LEXBCES.EXE C:\WINNT\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINNT\system32\LEXPPS.EXE C:\WINNT\System32\NMSSvc.exe C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS C:\WINNT\System32\svchost.exe C:\WINNT\wanmpsvc.exe C:\WINNT\System32\SK9910DM.EXE C:\WINNT\System32\igfxtray.exe C:\WINNT\System32\hkcmd.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\WINNT\System32\ranzwzvq.exe C:\Program Files\AIM95\aim.exe C:\WINNT\System32\wuauclt.exe C:\WINNT\explorer.exe C:\Program Files\SpywareGuard\sgmain.exe C:\Program Files\SpywareGuard\sgbhp.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\Documents and …

[FONT=Arial]Hi Guys Hope someone can help me fix this problem I have installed Hijackthis.[/FONT] can someone please advise me what to do next here is the result after running Spybit, Adware and Hijack this. thanks Logfile of HijackThis v1.98.2 Scan saved at 7:34:07 PM, on 9/7/2004 Platform: Windows XP (WinNT …

My husband's computer at work has the prosearching tool bar on it. i have run adware and CWshredder and can;'t seem to get rid of the darn thing. Going to post the hijackthis log from the compurer. Could somoeone please take a look and tell me what to fix? Thanks, …

First off, I'd like to mention that I'm new to this so I'm not sure if I'm posting correctly. Please advise me if not. The OS is WinXP Home, SP1 The make and model is Dell, Dimension 4400, P4-1.6G, 384mb RAM Browser is IE, v6 Started having problems after installing …

I've been jacked by prosearching. Not sure where to start. Can someone please help?Logfile of HijackThis v1.98.2 Scan saved at 8:19:25 PM, on 9/8/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\ezSP_Px.exe C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\System32\atiptaxx.exe …

This appears to be very similar to this thread: [url]http://www.daniweb.com/techtalkforums/showthread.php?t=8508&page=1&pp=15[/url] The PC with the problem has six user accounts and I'm wondering if I need to run HJT in all accounts. I'm believing that I do. I am in the process at this point of using Registrar Lite as instructed …

I was last here in June you fixed me right up. I got a computer for my 16 year old son, and i know he has been doing things that he shouldn't be doing ;) I think I have something in the log or startup that is causing him not …

Would someone please review my hijackthis log and let me know if there is anything that needs to be fixed?? My IE is running very slow and I have done the adaware and spybot cleaning....ne suggestions??? Thanks Logfile of HijackThis v1.98.2 Scan saved at 4:42:05 PM, on 9/4/2004 Platform: Windows …

My computer is running very slow and I have tried everything I know how to do and spent hours trying to fix it. I have run ad-aware, spybot, windows washer, and spy-sweeper. I have run shredder, norton anti virus, and housecall. Please help me before I lose my mind. My …

here is my friends hijack this log im trying to fix his comp without doing a total reinstall. Logfile of HijackThis v1.98.2 Scan saved at 8:46:26 PM, on 9/7/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\windows\system\hpsysdrv.exe …

to anyone that can help: my internet explorer is currently out of commission by what someone has said is spyware. it opens and just tells me that the page cannot be displayed and won't open anything else or refresh. i'm using a compaq presario, windows XP, and i'm on a …

Here it is, if one of you in the know can tell me what to do.

Hello I am having a problem wit IE. When I open it up, My homepage gets redirected to windows.cc(I don't know the whole thing, but i can get it when I get home today) and I get a window that pops up about spyware. I have ran adaware and spybot …

Computer Make: Great Quality (yes, that's what it's really called) Model: GQ3091 AMD Duron 1.6GHz CPU 384 MB RAM; 40GB HDD I've just completed a fresh install of Win98SE & WinXP Pro (dual boot). Had a few buggers get in some how during the process but I believe I'm clean …

hey guys, you seem to be lots of help to people so i am hoping you can do the same for me. i downloaded hijackthis and scanned my computer. can someone please show me how to get rid of all this stuff. here are my files: Logfile of HijackThis v1.98.2 …

[FONT=Century Gothic]hey, how exactly do you create a virus? ive been hit by so many and ive traced quite a few and want to send them a little thank you for crashing my system,reading my mail and bombing me with pop-ups![/FONT] :evil:

I have 2 computers at home using a cable modem. The modem is connected to a PC and then the other PC is networked. The problem is with the the main PCconnected to the modem. It is very strange. Over the past week the Explorer (6.0) and Outlook have worked …

Hey, I would like to have a little checkup, so is my computer sick doctor? ;) Logfile of HijackThis v1.97.7 Scan saved at 12:45:52 PM, on 8/29/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: E:\WINNT\Explorer.EXE E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe E:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe E:\WINNT\system32\RUNDLL32.EXE E:\Program Files\Internet …

Dear group, More on the cntinuing saga of Zohar and the Dell...the only av scan I found that cured anything was bitdefender which eliminated me from having Trojan Backdoor. IzRam1.7, backdoor SBot.Gen, and Downloader Keeval.E But they are not the main culprits..they are invited guests of this file... wrar30b5.exe [WinCon.SFX=>{Upx}..and …

i can not open any icons on my desktop. the only files that my computer will allow me to open are .mp3 and let me play them in winamp. it wont even let me open hjt. its tellin me when i click on a icon to select a program from …

i cant get rid of the bestsearch homepage and now when i get on a screen pops up asking me to download some dialer. Please help!

Right scanned in AVG it finds nothing. very little picked up in either adaware or spybot but my internet connection seems to be taking an age. looking through my log file there are a fair few BHO(no names) that i don't like the look of and just want to check …

I use Windows 98. Rundll32 is present whenever I boot up. It hogs up the computer resources. I run NAV & Ad-Aware religiously. The only malware I can't get rid of is VX2 BetterInternet even with the Ad-Aware VX2cleaner addon (it says my system is clean). I don't know if …

Hey i need some help, i've been lookin at previous posts on [url]www.lookfor.cc[/url] search because i have in it on my computer in order to eradicate it. i've tried running ad-aware6 then cws then hijack this to delete funny looking files. but still it seems to exist. can some one …

(I really need to stop harassing you guys with my computer problems on this forum :-|) I just discovered I have the following two variant viruses floating about in my startup module (Probably allot more thanks to this website which I haven’t thoroughly gone over with every suspicious file type …

I've got pop-up driving me crazy. I'm using Pop-up Blocker from Panicware that I've very satisfied with, but I have some that get by it. Mainly "Warning - Your computer may be infected with spyware", and Netzero, a couple different real player music downloads, PowWow web, and all the free …

I downloaded as many spyware and adware programs that where refered from people in these posts and such and i still cannot solve my problem. whenever i start my internet it goes to a spyware page and i have it set at blank. even the internet settings say its still …

I've been cleaning this log up in accordance with the tutorial file from merijn, but most of the entries keep coming back. Adaware cleaned 1157 entries off this earlier, and Spybot a further 50... Can someone take a look and tell me what's reinstating all these problems? Logfile of HijackThis …

Is there any other spyware detect software other then the following (that I already have installed on my system) [B]->Lavasoft Adaware 6 ->Spybot - Search and Destroy ->Spyware Blaster[/B] I seem to have spyware components that norton picks up on but that my current spyware engines dont remove. Is there …

hi guys, im fixing a PC, and it wont let me gain access to any .exe file, the only thing i can notice that could cause this problem is a reg key called 'restrictanonymous' the type is 'reg_dword' and the vaue is '0x00000001 (1)' every time i try to delete, …

I've had these three *@$^%'s on my system for about a month now and everything I try to remove them fails. In safe mode I run CWShredder, Ad-Aware, Spybot S&D, AboutBuster, and try to pick them out with RegLite, But they immediately reappear on startup. When I try to Unregister …

Hi Before i post this message , i read and i try all the answers everybody give.And my problem is still there. My problems My internet is very slow.And after a one or two site in ie , i receive a error message "page not found".So i need to deconnect …

Dear Group, I have two problems which I think are related but who knows...here's the first problem, my step-daughter downloaded a file from her boyfriend using trillian and then opened it trusting it was safe...a few days later the IE browser started slowing up. [We're on ADSL and the browser …

There have been a slew of people lately who have been emailing me and posting that they cannot post in the IE or Security forums. When they click submit, they get the message: "The forum specified does not exist." I have looked into the problem and, unfortunately, it is a …

I've got a friend whose computer (~2.1Ghz Pent, 256MB I believe) is like molasses when he's using a browser. I did a bandwidth test and he's at 520bps which sounds resonable for his brand of DSL. Apparently it's no better in any particular browser. Attached is his Hijack This log. …

I keep getting this message, JUGS BODY.EXE . SO here is my log. Logfile of HijackThis v1.98.0 Scan saved at 5:26:03 PM, on 8/27/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\ptsnoop.exe C:\WINDOWS\LOADQM.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM …

Hi, All I rarely use IE and in P2P softwares I use edonley2000. But somehow I got prosearching.com. It has caused me loads of trouble. It is deleting my email accounts from Mozilla mail. Constantly adding Casino and what not on my desktop. It is just causing havoc. I am …

ok, so i am addicted to my AIM. and all of the sudden i cant send messages. it logs in fine, i get my buddy list, and people can send me messages....but i cant send messages to anyone, it wont let my type anything into the box. i tryed removing …

I get a lot of popups - even when I don't have Internet Explorer open. When on the internet if the website cannot be found it defaults to Incredifind. I found the IncrediFindBHOLog file in my temporary folder but I can't delete it. It says "Cannot delete IncrediFindBHOLog. There has …

Can someone please point me in the right direction here? I have run all of the progs adaware/spybot s&d/symantec/CWShredder/APM/Hijack this to no avail. I've gone into and read up on all the solutions for the problem but I still cant get it off this computer. Here is a post of …

Please help me with this hijacking Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe C:\WINDOWS\System32\S3tray2.exe C:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\WINDOWS\StartupMonitor.exe C:\Program Files\WindowsSA\omniscient.exe C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe c:\progra~1\mcafee.com\vso\mcvsescn.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe c:\progra~1\intern~1\iexplore.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\aim\aim.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\gearsec.exe c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\wanmpsvc.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\WINDOWS\system32\svchost.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe c:\progra~1\mcafee.com\vso\mcvsftsn.exe C:\WINDOWS\System32\wuauclt.exe C:\Program …

My homepage keeps getting reset to [url]http://213.159.117.134/index.php[/url] Plz help Here is HiJackThis logfile: Logfile of HijackThis v1.98.2 Scan saved at 7:22:40 PM, on 8/30/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\System32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe …

several programs were installed on my computer when i try to open them with command prompt they display the numbers in the column next to them EGR55.BAT 166890 RHH49.COM 81598 LWB50.EXE 50378 if i try to open them w/ windows (xp version) the following message is displayed. THE NTVDM CPU …

I have a program that runs with windows start up, that I do not know what it is or what it does. I am afraid that it is some form of spyware, or virus. The program name is "lsgj.exe", and even if I do ctrl-alt-del, and end task on it, …

I'm seriously worried because spybot Sd found Roboform spyware. I use it and payed mi license of Roboform... is that really spyware? Heres what SPybot SD says: AI Roboform: Class ID (Registry key, nothing done) HKEY_USERS\S-1-5-21-73586283-1645522239-725345543-1003\Software\Classes\CLSID\{724d43a1-0d85-11d4-9908-00400523e39a} AI Roboform: Class ID (Registry key, nothing done) HKEY_CLASSES_ROOT\CLSID\{3AB6A2BE-5A44-11D3-ABEE-EAF45F643446} AI Roboform: Class ID (Registry …

I ran Spybot today and casually clicked on Fix Problems when they told me they had found six things. I guess one of those 6 was critical, because after rebooting I was able to sign in and then not much else. My wallpaper came up and the mouse arrow and …

ok first off before you post a hijack this log you should probably do a basic spyware/virus scan with ad-aware, spybot S&D, and you anti virus software software. Also make sure that when fixing problems to back up the files either via system restore or hijackthis will do it for …