[virus-malware] Forum Topics

I have run avg antivirus and there is a trojan horse downloader purity.E in C/:doc. and settings/paul application data/ttdu.exe that avg can't remove I could really use some advice on how to get rid of this I have run cw shredder/adaware/spybot search and destroyand a few other prorams that said …

I know it sounds weird, but here is my story. Well, I have Windows XP Service Pack 1, and I have a Toshiba Laptop. My weird story: Well, it all began with the res:// problem. I did everything, but I foundout how to fix it. I just had to UPDATE …

Win98SE I cannot start the computer. At startup the Dell banner window appears for a full minute or so. The Window 98 banner page then appears briefly. Instead of then opening Windows a black page appears with the following message. Cannot find SYSTEM.INI. You need to run Windows Setup again …

Here is my HijackThis logfile. Thank you for your help. Logfile of HijackThis v1.97.7 Scan saved at 1:13:25 PM, on 6/22/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\svchost.exe …

Please help me help this guy who has completly stuffed up his new computer and its riddled with spy ware etc. I have run all the usual progs and its not easily fixable. If I post my hijack-this log, can someone just quickly point out the safe items to delete …

in browsing the web, my computer has contracted a program which has hijaked my desktop. It has created an image over the desktop background which properties are: __________________________________ General: Not Available Protocol: File Protocol Type: HTML document Connection: Not encrypted Address(URL): file://C:\WINDOWS\Web\desktop.html Size: Not Available Created: Not available modified: Not …

Here is my hijack log. I am being blocked from going to msn, yahoo, and other major sites. I have researched this, and I have used just about every fix suggested. I ran cws earlier, and I just ran ad-aware and spybot in safe mode. I also used ipconfig dnsflush …

I am unable to enter the regedit -The box pops up and then exits , same for the control panel add and remove. Is this a virus or just software glitch? there are no error msgs this happens both in 98se and 2000

Can anyone help with this: RUNDLL: Error loading C\Windows\downloaded program files\bridge.dll The specified module could not be found :?:

Hi everyone! This is my first post, so I'm saying hi, as well as seeing if anyone can help me with this little problem I'm having... I've recently got back from a 2-week trip, and upon turning on my computer, the monitor screen flickers continuously. This doesn't happen in safe …

My home page resets to About:blank. I've tried everything I could think of. So now I seek help from the experts. Please help me out here. Here is my current log: Logfile of HijackThis v1.97.7 Scan saved at 2:03:41 PM, on 6/29/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet …

I've been having problems with my AOL connection kepps crashing, when I ran HijackThis I found the BHO file: smiehlp.dll this seems a bit strange, anyone know what it is, is it causing my problem? thanks

Anyone knows how I get rid of tracking cookie? Have one locaeted c:\documents and settings\eier\cookies\eier@cgi-bin[1].txt That seems to be a hard one to get rid of, this one makes a lot of other cookies... (and now a folder called or located c:\windows\mslagent\) Anyone knows what this cookie does? I really …

please help.home page changed.i've run spybot and hijackthis cleaned what i could everything came back Logfile of HijackThis v1.97.7 Scan saved at 9:49:02 AM, on 7/13/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\McAfee.com\Agent\mcagent.exe …

[COLOR=DarkRed]W2K machine. Trying to cut back on pop-ups and spyware. Have used Ad-aware, Spybot, and CWShredder. This is my hijackthis log. What should be eliminated?[/COLOR] Logfile of HijackThis v1.97.7 Scan saved at 8:07:36 AM, on 7/8/2004 Platform: Windows 2000 SP3 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: …

I've had this laptop for about two years now, and its never given me any problems up until recently. Its a Dell Inspiron 8200... P4/2.2GHz... 512MB RAM... Runnin WinXP Home Edition SP1. Lately, I've started experiencing several problems. First, I got hit hard with the w32.pinfi virus. I'm not sure …

hi, My homepage keeps reseting to res://hsnyc.dll/index.html#37049...it used to reset to about:blank, which i never got a chance to fix, and now its reseting to this. I've tried Sbybot, CWshredder and AntiVirus Software--and I really dont know what to do at this point. I'm not very computer savvy, so any …

I'm having trouble getting rid of the virus Dropper.Small.4.AG AVG Is failing to get rid of it. Any help would be appreaciated. Here is my hijack this log. Logfile of HijackThis v1.97.7 Scan saved at 10:22:48, on 03/07/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) …

Hello, My startpage is hijacked by a website called [url]www.e-catalog.org[/url], can't get ride of it. Help, Mike

I've run ad-aware and spy sweeper. I'll delete everything it finds, only to run the programs again to find that its all back. I manually remove the traces in the registry, and they pop back in. My homepage keeps getting set to "about:blank" which isn't the real blank page(full of …

My computer is a mess at the moment, was infected with the Zafi virus, very nasty. Managed to get rid of it, but seem to have two more problems. I own a website and of course I keep copies of the pages on my harddrive, but now for some reason …

[COLOR=Navy]Am facing a problem with windows 2000. Each time i try to submit a long email thru yahoo or try to delete lost of messages at a time thru yahoo or try to "submit" lot of information thru any web-site my browser window closes as soon as i hit the …

Greetings all, I am trying to make sure my PC is clear of bad things and found out about Hijackthis from a friend. He was unsure of anything in my log file and suggested that I try to find a forum that had people with the knowledge so here I …

ok, here's what I've done to try and get rid of it: ran adaware (custom settings to suggested on here), CWShredder, Spybot S&D, the free internet virus search thingemy (cant remember the name), and i've attempted to remove it myself with HJT, but i must've missed a file somewhere.. anyways, …

Well I have a Toshiba laptop, windows XP SP1. I start my computer, and then I am on the log-in screen. I click my user name, put in my password, and press enter. Here is where the problem starts. My name goes to the middle, and then takes a minute …

OK i have run udtated adaware, spybot and cwshreadder and still have some problems with a anoying redirect spyware here is my Hijack this log. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [url]http://www.sympatico.ca/ie-recherche.html[/url] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url]http://www1.sympatico.ca/[/url] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url]http://www.sympatico.ca/accueilpage.html[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title …

Logfile of HijackThis v1.97.7 Scan saved at 2:39:57 PM, on 7/10/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\System32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe C:\WINNT\System32\NMSSvc.exe C:\WINNT\System32\nvsvc32.exe C:\WINNT\System32\svchost.exe C:\WINNT\Explorer.EXE C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe C:\Program Files\McAfee\McAfee VirusScan\Vshwin32.exe C:\WINNT\System32\SK9910DM.EXE C:\WINNT\GWMDMMSG.exe C:\WINNT\System32\PROMon.exe C:\WINNT\System32\CTHELPER.EXE C:\Program …

I have been having afew problems with Blue Screens of Death, windows telling me i have a bunch of spyware and possible viruses. I open up IE explorer and get popups that add an icon on my desktop called "Best online casino" and i'm just really getting tired of all …

Need some help to get rid of the file bridge.dll Tried many options from different posts on this site, but nothing seems to work for me... Please help I can post my log file... Appreciate all help I can get!

This might sound like a lame problem, but I 'm getting these annoying pop-ups each time I'm on the internet. It doesn't matter which website I'm on, they always seem to pop up on the screen. It's always the same ads, they're all in swedish (I live in sweden). I've …

[url]http://news.com.com/Security+hole+found+in+Mozilla+browser/2100-1002_3-5262676.html?tag=cd.lede[/url]

Hi! Some INFO: I dont know what kinda Virus this is, but I hope that you can help me. Some day ago i had CWS Trojan, but got reed of it when I manuel took care of it. So thats gone, atleast that is what adaware says. I still go …

I have napster on my computer, and have a fairly large collection of songs- music is the primary use of my computer. Recently, my computer began using 100% cpu when windows media player was running. Songs would stutter and programs freeze. If i go to task manager, windows media player …

I hate to ask, however I've run numerous cleaners on a friends pc and cant get it clean. This is the hijack log, I think it needs a expert to fix this stuff. If you can help I would appriciate it-- Thank you Logfile of HijackThis v1.98.0 Scan saved at …

This is my first post here. I have been having this problem for a few months and cannot figure out why! When I try to go to a javascript "new" window at any website, I get "Page cannot be Displayed" and the Address Bar reads "javascript:reqWin4('part1.html'). This is just an …

I've tried adawre, spybot and various others and after a lot of looking I'm pretty sure I've been hijacked. When I open IE, the default webpage is automatically "res://lkqya.dll/index.html#96676". I've ran out of stuff to try, I'm almost computer illiterate and am about 18 minutes from assaulting this damn machine …

Hi. Could U check my friend's PC's logfile? THANX a lot! :) Logfile of HijackThis v1.97.7 Scan saved at 16:03:21, on 2004.07.02 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE C:\WINDOWS\System32\svchost.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\spoolsv.exe C:\Documents and Settings\VigiAbra\My Documents\PC …

I've got help in here before, when I had trouble with my PC and trouble interpreting the log from "Hijackthis". Now I'm giving it a shot. Spent some time reading up on the material and tried to "do it myself". But as I wrote it's only the second time I'm …

i can't seem to be able to remove mysearchnow from my pc with spybot help me out. here is my hijack log: Logfile of HijackThis v1.97.7 Scan saved at 20:53:25, on 2004-07-06 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe …

This is intended for anyone who has been plagued by the practically impossible-to-remove d8t.biz spyware. If your browser homepage and searchpage have been hijacked by the address “[url]http://s1di.d8t.biz/index.php?aid=20038

Hi Crunchie, I tried to find the problen dll myself but I can't seem to find it. I think it's masked or cloaked as a legitimate dll such as for a google toolbar, but I just may not know what I'm looking for. Ad-aware finds the bug, but as usual …

I was running a panda scan and it found 2 viruses and got rid of it. I tried to find information about the viruses and did not find any info..I have the names of the viruses as follows..Trj/P2E.A C:\windows\sys32\EGAUTH.dll and Trj/P2E.A C:\windows\system32\p2esocks_1014.dll....If someone can tell me what these viruses mean …

Oh i just type this damn thing up spent a good 15 minutes and a stupid popup thing changed the page i was on so now i have to do it again a bit frustrated i am for sure. [B]Malwar[/B] seems to me to be a scam for those damn …

I've got a spyware virus, probably Winshow K Trojan. Can someone help me to remove it. I have run CWShredder, Hijack This, EZ Antivirus, and Ad Aware, and that cleans it until I restart, then it comes back...Here is latest IE URL line I am getting: res://aipvb.dll/index.html#37049 Here is my …

Hi all, I'm struggling with coolwebsearch issue... For diagnostic, I'm using Xsoftspy 3.41 that show me the following scanning result CoolWebSearch Registry Key iSearch Toolbar Registry Key Winpup32 Registry Key Winpup32 Registry Key CWS.Oslogo Registry Key CWS-mrhop Registry Value CWS-mrhop Registry Value I followed the 'jendej' history path (hjt .....cwshredder …

i am hoping that someone here can help me. my computer has been repeatedly infected with cws.searchx virus, resulting in a hijacked homepage to about:blank and popups for spyware and other things. after scouring the internet for help, i found the following conversation: [url]http://daniweb.com/techtalkforums/thread5531.html[/url] i attempted to follow instructions from …

I went to a website, and got all sorts of spyware. I got rid of most of it, but when I go to access my Media Player, it comes up with an install for something called CHILK CHAT (I think I spelled that right). I have to stop the installation …

Hello, Internet explorer 6 has been hijacked to About:Blank and I cannot change it back even manually inside of registry. Seems to have another dll. file that copies its self after a deletion. All the adware ,spyware stuff wont help. I know this isnt the first time this has been …

Hello everyone, Bridge.dll keeps on coming out everytime I restarted my computer. I tried to search for a solution to this and I found out this forum. I already run Hijackthis and this is the log. Logfile of HijackThis v1.98.0 Scan saved at 9:05:01 AM, on 6/30/2004 Platform: Windows 2000 …

Can u analize this sum one, plz... I have done this on my own before but idk what half of this stuff is... Its my friends comp he just reformated cuz of virus's and hes allready having problems.... This isnt my comp and I dont wanna make a vital mistake …