12,960 Topics
Caperjack has helped me w/ my desktop and now I am 'bout to run hijackthis on my laptop and post the results of the log. Can some advise me on what i should check off and Fix. Thank you in advance. And i will be posting the Log file soon.
Just started working with Jenifer's computer. Her system has a lot of stuff that is slowing the system down. Compaq Presario Celeron unknow processor speed, running 95 mb Ram :?: There is a XMI, Parse.dll message at start up. Ran updated CWShreadder revealed no bad CSW. Please help her by …
OK, here's the story. Today my laptop was infected with an extremely malicious strain of the CoolWebSearch spyware virus. It took me nearly two hours to remove it. The removal involved sifting through the Registry (run >> "regedit") and deleting the bugs responsible for the infection. Here's the key: I …
I get the following message (twice) every time I boot. RUNDLL Error loading C:\WINDOWS\sdkqh32.dll The specified module could not be found. Running Windows XP
I'm trying to help a friend who has some wild and wooley spyware on the machine. We're running a Dell Dimension V400 with 130 megs of RAM and op system 2000 Pro. Logfile of HijackThis v1.97.7 Scan saved at 8:49:10 AM, on 6/16/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: …
I have tried the whole gamet to get rid of a nasty hijacker, [url]http://any-find.com/index.htm[/url] I have tried Spybot,HijackThis, Adaware and every other thing I can think of to get rid of these guys. The program seems to reload itself every time I shut down and restart the computer. This program …
My cpu is sending continuous data to my server . It's like 25 bytes per second which is in odd proportion to the data sent to mine . I'm running morpheous and there are currently 57 downloads choosen but only two being downloaded and uploading is disabled . i have …
My PC got attacked by Spyware,Adware and Trojans. I have eTrust EZ Antivrus but it couldn't help me to prevent from Spyware. My browser homepage got changed, it goes to [url]http://default-homepage[/url] .... . Please help me to clean my PC. Logfile of HijackThis v1.97.7 Scan saved at 2:56:19 PM, on …
every time i run adaware and spybot i always get tracking cookies every time i scan even if i delte them and beside them they say "Red Sheriff tracking cookie" and i need to know how to get rid of Red Sheriff please help
Here's my latest log: Logfile of HijackThis v1.97.7 Scan saved at 14:58:39, on 09/06/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLACSD.EXE C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe …
Logfile of HijackThis v1.97.7 Scan saved at 4:34:27 PM, on 6/5/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\runservice.exe c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\WINDOWS\BCMSMMSG.exe C:\Program Files\Logitech\iTouch\iTouch.exe C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE C:\WINDOWS\System32\DSentry.exe C:\Program Files\Real\RealPlayer\RealPlay.exe …
what exactly is that rundll error thing 'bout bxxst5.dll
:sad: Hi Could someone please help me. I am using another computer to access this site. It seems like IE has been hijacked by a program or website. My startpage is redirected to an site call anglefire I cannot access any websites that has antivirus software such as Norton, Mcafee …
I am having a very similar problem as that last post. I have followed all the instructions with Ad-aware and CWS etc.... made sure all the settings were correct etc... I keep removing everything but the problems keep coming back! - Looks like I'll need to manually remove some things??? …
[QUOTE=arobrien]Yzk: Thank You for your assistance. I had used everything except Ad-Aware, and it found about 30 CWS Malware files. I deleted them and was then able to reset my homepage. I ran Spybot--it detected nothing. I ran HiJackThis, and deleted the entries that referenced the "pin" # on the …
I have the same problem except that my homepage gets set to some other dll file. I tried deleteing that dll file from the windows system folder, but it made a new one with some freaking name and then I deleted that and it made a new one. This is …
please help me identify any items on my log that are bad for my computer Logfile of HijackThis v1.97.7 Scan saved at 10:34:54 PM, on 6/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe …
[QUOTE=crunchie]This was written by Mosaic 1, a security expert on another forum. Follow instuctions exactly. At the moment there is no easy way. Get the latest CWShredder from this page. Do not run it yet: [url=http://www.computercops.biz/downloads-cat-14.html]CWShredder[/url] Download TheKillbox from this link: [url=http://download.broadbandmedic.com/VbStuff/KillBox.zip][u]here.[/u][/url] ------------------ Sign off the internet. Run CWShredder and …
I have seen other who have been hijacked by this search engine. Sucks big time. I already rad HijackThis and here is the log file results. Can someone look it over and let me know the steps I need to take to Free my browser. thanks Logfile of HijackThis v1.97.7 …
I keep running Adaware/Spybot S&D/a squared2 and they keep detecting and removing malware/trojans/spyware. I rescan and it comes up with nothing. Once a time period (30 minutes) goes by pop-ups and Norton come up saying that I have new Trojans. Can anyone give me a hand and tell me how …
I have posted on this website before but need some assistance again. I will post my log from Hijackthis to see if I can get some help removing some files correctly. I have done this once before on another machine, but would like help again so I don't mess it …
I have been plagued by About.Blank browser hijacker. I have tried the various remedies posted here and other helpful sites, but all have in common at some point, to find in the registry HLM\software\mircosoft\windowsnt\currentversion\windows\\appinit_dlls My probelm is that when I get to the currentversion folder, there is no windows folder …
[size=2]I have recently fixed a coolwebsearch hijack that hijacks my start page. What I didn't realize is that it had also hijacked my address bar in IE. What I mean is that at times when I type a URL in the IE address bar, even though it is a legit …
'ello one and all! I have this 2 trojan problems of which pc-cillin detected 1. TROJ_BANKER.AF File name: Windows\winupd.exe Windows\cmid32.dll 2. TROJ_STATRPAGE.S File name: Windows\system32\dcgkaa.dll Documents and setting\local settings\temporary internet files\content.IE5\YVI7411T\M[2].bin Does "CMID32" in capitals and "cmid32" in small letters have a difference? as both of these appear in the …
i read a few threads on this.. how do i keep myself from not getting it
I'm having a terrible time right now with pop-ups. Normally, I am able to find the guilty party, unregister the evil dude, and delete it. This new one has been much more of a challenge. I followed the advice of some other posters here and downloaded hijackthis and scanned my …
Thanks so much for the recomendation to start using mozilla in place of explorer... since I started using mozilla and i QUIT using explorer and outlook cold, approximately 2 months ago, I have rerun the spyware removal and such and have had not 1 item show up... that is great... …
All: I seem to have been hijacked and can't get rid of it! I have downloaded adaware, hijackthis, CWShredder and Spybot and run them all as indicated (with internet connection unplugged) in the other postings. I have also checked the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows section of my registry and only found 0000 …
Hello, Im having some problems with my computer, when i rebooted my computer i'm getting a desktop with WARNING You're in Danger , secure yourself right now .. (linked to a company called: smart-security.info) it's spyware but i don't know i can delete it. My startup page from IE is …
My computer was fine untill today morning when some crap spyware infected it. Everytime I search something using google, it opens up a new window which looks like [url]http://search-to-find.com/sec.php?qq=[/url] It resets my homepage to res://dqwrl.dll/index.html#96676 all the time (After I find and delete the dll manually, it makes a new …
Everytime i start my computer there's Wnstssu not responding. It doesn't really do any harm to my computer but it bugs me a lot. Maybe my HijackThis Log might help. Logfile of HijackThis v1.97.7 Scan saved at 11:02:06 PM, on 6/14/04 Platform: Windows 98 Gold (Win9x 4.10.1998) MSIE: Internet Explorer …
Hi all, my computer has begun to act up... it was at first giving me an MFC error whenever i would try to burn/decrypt/encode movies, now it is freezing certain files. It wont let me delete these files, it keeps giving an error this file is in use by another …
ran across this hijacker can't get rid of it have triedjust about everything out there would greatly appreciate some help :)
Location: Counsilor Office OS: Win98 The counsilor has been getting a few e-mails, all in German. She does not know anyone who would send her e-mails like this. Does anyone know if this is connected to some kind of Mass Mailer Worm, or something like that? (I ask because we …
Hello All, Recently I got my PC back from the shop. A vicious virus attack locked everything down, even offline, and I discovered that all my programs were wiped out. I have restored everything lost, and the machine seems to work OK. However, what I am discovering is that I …
I was wondering if you would be willing to share the tools you use to interpret the HijackThis logs? I have the Task List from [url]www.answeresthatwork.com[/url] and it great to see what’s running, but how is it that you know the names of all the processes out there and the …
Hey all, starting today I started getting this problem where I can't change my internet explorer homepage from about_:blank to anything else. I usually use hotmail as my default page, but now every time I change it it goes right back to about_:blank. I've done the following to try and …
Hi, I'm using a Dell Dimension Desktop running Win98 SP2 & have run the Microsoft updates within the past week. I would be grateful if you could help me get rid of this nasty thing. Here is the log from HijackThis: Logfile of HijackThis v1.97.7 Scan saved at 11:59:38 AM, …
I cant find this bridgedll.exe in my notebook. I m using winxp home. I just dont know what's happening to my system. While I m using it, my cpu usage just went up to 100% and wont come down. All of the other software were slow coz of this 100%. …
I am constantly having to remove roings form spyware and errorplace occationaly comes up when I connect with IE. This is my hijackthis file any help would be greatly appriciated. Thank you. Logfile of HijackThis v1.97.7 Scan saved at 10:29:33 PM, on 06/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: …
HJT LOG: Logfile of HijackThis v1.97.7 Scan saved at 11:05:32 PM, on 13/06/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Messenger Plus! 2\MsgPlus.exe C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\EPSON\ESM2\eEBSVC.exe C:\WINDOWS\System32\oodag.exe C:\Program Files\MSN …
hi guys. i'm hoping to god someone here can help me fix my emac. last night, i downloaded a new something called "safari enhancer," thinking it'd be lovely, right? well, turns out after installation, there was this thing that said mismatch in versions(my mac had a diff version of safari …
My uncle is having problems with his computer, his homepage keep defaulting to great search. I recently had a similiar problem with my computer here is his hijack log. please help thx Logfile of HijackThis v1.97.7 Scan saved at 1:38:32 PM, on 6/13/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet …
Ok Every Time I Restart My Comp And Get Back On This Stupid Blue Toolbar Is There Its Called Mags Setting And I Cant Remove It :mad: The Other Thing Every Time Im On A Site...(This Doesnt Happen To All But Few) This Stupid Internet Explorer Script Pops Up..And I …
[quote="friend of mine"]Well, I can't seem to view anything with windows media player, my internet is slow, and my hompage is always some weird website.[/quote]Logfile of HijackThis v1.97.7 Scan saved at 6:44:00 PM, on 6/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe …
Does anyone know what thnall1t.exe is? Should I be worried? It recently starting showing up on my computer trying to access the internet. Symantec denies it access to the internet but is unable to delete it. I ran SpyBot search and destroy. It cleaned up some files but not thnall1t.
Hi, my homepage has been set to About:blank and everytime i tried to fix the problem with CWShredder, it comes back everytime I restart the computer. Here is my hijackthis scan log: Logfile of HijackThis v1.97.7 Scan saved at 3:51:23 AM, on 6/13/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: …
This is my sister's old home business computer. P200, Win98, 256 mb ram. It would make a good boat anchor. I knew it was having problems so I told her I would try to help. I ran CWShreadder three times in safe mode and found 2 Trogans. CWS now says …
I have some sort of spyware/malware installed, and I can't get rid of it. I have run spybot S&D and ad-aware6, both updated with latest dat, uninstalled the bridge that was installed before, and deleted the bridge.dll registry entry that was causing a rundll / bridge.dll error to pop up …
Hi, One of you wonderful souls recently posted a link to a website which described the various sections of the HijackThis log, and how to identify the various things which are reported in it. I'm damned if I can find the reference now, (and I neglected to bookmark it of …
The End.