[virus-malware] Forum Topics

I'm trying to remove the mshp.dll hijack. I've tried using CWShredder, AdAware, SpyBot, and FixBlast, but the mshp.dll hijack keeps coming back. Please help. I just ran CWShredder, and below is the HijackThis log. Note: I'm posting this using Netscape, and haven't started IE since I ran CWS. Thanks. Brad …

I have a problem with internet explorer stop running after i leave the computer alone for a while... it says page not found and dns error on the bottom i did the hijackthis and heres the log.... i hope someone cane help me out on this one Logfile of HijackThis …

here's what I have, 1Ghz AMD Athlon 10GB HDD - primary master - FAT32 40GB HDD - primary slave - FAT32 Windows 2000 Pro the problem: It just happened, probably by a virus of some sort... my slave drive suddenly disappeared, there's this unknown device that show's up on the …

hi. i've run spyware programs and CWShredder but i'm still being hijacked by res://mshp.dll/index.html#37049 and lots of pop-ups. also, programs are running slowly. please help! :sad: [code] Logfile of HijackThis v1.97.7 Scan saved at 11:14:14 AM, on 6/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) …

_________________________________________________________________ IE6 has been hijacked spybot version 1.3 was ran but it has not fixed the problem ; every time I run IE start page switches to : [url]http://%68%6F%6D%65%70%61%67%65%2E%63%6F%6D
%00[/url] @%77%77%77%2E%65%2D%66%69%6E%64%65%72%2E%63%63/%68%70/ is there any other program I can install to scan to clear the register / system ? going mad with …

hi running various virus checkers has shown this virus but cant remove it. any ideas how i can remove it? hijack this log: Logfile of HijackThis v1.97.7 Scan saved at 17:22:11, on 10/06/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe …

Hi all, This is an SOS call to anyone who can help me. My work computer is hijacked with the infamous (and extremely annoying) About:Blank homepage. I just cannot get rid of the poxy thing. It has got to the point where I cannot work, and potentially it could be …

Please analyze this...I would be forever appreciative. Thank you. --------------------------------------- Logfile of HijackThis v1.97.7 Scan saved at 10:42:04 PM, on 10/06/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINNT\System32\svchost.exe C:\Program Files\Norton SystemWorks\Norton …

After clearing my computer of all the adware stuff that was on with the help of this website, I have another problem. I can't download any of the Windows Updates still. I thought maybe it was because of the adware and all that was on here, but it still will …

Hi, I don't know much about computers, but I deleted some adware ages ago and now whenever I start up the computer I get a message saying Error loading C:\WINDOWS\Downloaded Program Files\bridge.dll The specified module could not be found Here is my hijackthis log. If anyone could help me get …

Ok My Friends Went On A [url="http://www.adsrve.com/linkredirect.php?h=644,25712072,daniweb.com,0"]Porn[/url] Site..And Then After That All These Pop Ups And Files And Folder And New Processes and Bars Came On My Comp Which I Never Had Before....I Used Ad Aware And Other Stuff...But I Dont Think It Detected It...And I Got Weird Processes i …

Hi I just spent a couple of days resolving a few Trojan viruses on my home pc. I've never run "hijackthis" before and the log intrigues me. Can someone review and advise what I can live without/should remove? Performance (mostly logging on between users) drags a little compared to pre-virus …

Hello, I have run (all up to date) Adaware, Spybot, CWSShredder and AVG. I just wanted to know what was bad on this list, so I can get rid of it. :) When running AVG, I get two viruses, but when I try to remove them, I get these messages: …

my friend needs some help, but he cant get onto the internet cuz of this wacko virus, any help would be appreciated has anyone ever heard of a virus/trojan/adware/etc that appears as "Havok" it is windows 98 he looked at created files the day his comp started messing up, a …

Hey you guys I have a problem with my computer as so many at this forum. :cry: I cleaned my computer up a while ago and there was a lot of addware and spyware. Most of the mess I could clean myself but I'm having trouble with something called: caller.exe …

this is the log from a fresh restart... any help is appreciated!! P.S. the google toolbar is useful to me (blocks pop ups) Logfile of HijackThis v1.97.7 Scan saved at 11:14:47 PM, on 6/8/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

Hi, I am new here and I have read some of the posts, but I never seen anything on what msiesh is. I have the same problem, when i start my internet, a differant start page pops up then my home page. It is some kind of search page. Oh …

StartupList report, 6/9/2004, 12:12:13 PM StartupList version: 1.52 Started from : C:\Documents and Settings\Owner\Desktop\HijackThis.EXE Detected: Windows XP SP1 (WinNT 5.01.2600) Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106) * Using default options ================================================== Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe …

Getting system dangerously low resources popup is it a corrupted normal.dot file or one from below? Logfile of HijackThis v1.97.7 Scan saved at 9:57:11 AM, on 6/9/04 Platform: Windows 98 Gold (Win9x 4.10.1998) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\DRMON\SMARTAGT\SMARTAGT.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE …

Hi. I had problems with my IE. There was that CWS malware. So after 2 days I finally get rid of it - no more search ads and pop-ups. But my program SpyFerret shows that there is something left in registry.. It says that i have: 1. Common Extension hijack …

Athlon 2100+ Geforce 4 Graphics card 512MB ram NForce2 Mobo 40 gig HD Windows XP Pro Hi guys, I'm really stuck and hope someone can help me out. Sorry if I put this in the wrong place. Ive' had AOL Broadband for about a year now. Recently (in the last …

I get the bridge.dll missing thing on startup like so many more people do... anyways, Can some1 help me out with my hijackthis log file? thanks in advance!! heres the log: Logfile of HijackThis v1.97.7 Scan saved at 4:58:00 PM, on 5/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet …

ok i got a problem i used adaware 6.0 and deleted a lot of problems now i keep getting this error message C:\system32\bridge.dll module cannot be located ....i have hijack this.....here is a copy of my registry........can someone please help me.........thanks

I was hijacked by the topotun and cant fix it. I noticed info from other posts about hijack this so here it is Thanks Logfile of HijackThis v1.97.7 Scan saved at 4:17:37 PM, on 6/8/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe …

In my control panel I have this " 2020 search" app in there. I cant remove or delete it. so i looked everywhere online to get rid of this 2020 search thingy and found a forum with instructions on how to and here it is . Re: 2020 search problems …

Location: My house OS: Windows 98 I have a computer that is messed up! We had to get a new one because this one was so bad. What happend was ablout every few hrs (mostly when getting on the Internet) a million popups would come up, one after the other …

Logfile of HijackThis v1.97.7 Scan saved at 12:33:37 PM, on 6/8/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\NavNT\vptray.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2001.exe C:\Program Files\NavNT\defwatch.exe …

my home page has been taken over by "prosearching.com", which is reset as my home page after every reboot. a separate search toolbar also pops up and everytime i do a google search, internet explorer's search function gets turned on but it looks like a search engine for something other …

Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Norton Internet Security\NISUM.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Norton Internet Security\ccPxySvc.exe C:\WINDOWS\system32\crypserv.exe C:\Program Files\Diskeeper Pro 8.0\DkService.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Intel(R) Active Monitor\imonnt.exe C:\WINDOWS\Explorer.EXE C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\Program Files\Intel\Intel(R) Active Monitor\imontray.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe …

Hello, I recently installed Norton internet security and now I get a lot of messages that Windows Messenger is trying to access the internet. But I never use Windows Messenger, but I do use MSN messenger, but I'm not using either when WM wants to connect. Should I allow WM …

I have removed prosearching, here's the HJT log. Logfile of HijackThis v1.97.7 Scan saved at 20:59:20, on 05/06/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MSTASK.EXE C:\PROGRAM FILES\COMMON FILES\WINTOOLS\WTOOLSA.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\PROGRAM FILES\OPTION NURB FORK\MULTI LESS.EXE C:\PROGRAM FILES\WASHER\WASHER.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE …

I just downloaded Hijackthis b/c i get pop ups. Below is the Log file, Can someone advise me what to do next please. Thank you in advance. Logfile of HijackThis v1.97.7 Scan saved at 10:51:56 AM, on 6/1/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: …

Well, it appears I have a CWS trojan on my system (like I even know what that means...). I've run AdAware and Spybot, and then when I run CWShredder it autocloses when it gets to a certain point. I restart it, and it tells me that the trojan is automatically …

:sad: i cant search anymore by just typing in something in the address bar at the top, i used to be able to type something such as "dogs" (with out the quotation marks) then press enter and it would take me to the MSN page of results. now i cant …

I have recently been having a few problems with this coolwwwsearch spyware/virus and am asking for some help please. I have spy-bot and ad-ware and have rune multiple scans with them but they provide only a temporary fix and then the same problems occur. I have downloaded and run Hijackthis …

Hello, recently my computer has been hanging more often than ever. Also I seem to be having trouble loading certain net pages. When I checked the events log I noticed that my fax service has been activated quite a number of times in the last month. Luckily I don't have …

Logfile of HijackThis v1.97.7 Scan saved at 5:58:00 AM, on 6/7/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\svchost.exe C:\WINDOWS\wanmpsvc.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\aim\aim.exe C:\Program Files\Internet Download Manager\IDMan.exe C:\Program Files\America Online 9.0\aoltray.exe …

Hi i can't stay online long when surfing the web.!!!! Why? any help it great! here is hijack this log file Logfile of HijackThis v1.97.7 Scan saved at 4:14:05 AM, on 6/2/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Can someone please review the HJT file so I can clean up my machine from the dreaded mshp.dll start page and the annoying pu's. Thanks, RP Logfile of HijackThis v1.97.7 Scan saved at 11:28:09 AM, on 6/5/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running …

I have been fighting this battle for a couple of months now ... have tried every virus program I can... from ad-aware... spybot..norton.. trends... register mechanic ... pc doctor etc... there must be a shutdown worm or trojan somewhere... it will also shut down for no reason at anytime with …

I have recently had problems with the dpusys icon not leaving my desktop and bridge.dll errors when I turn on my PC. I seem to have fixed them for the time being but I was wondering how many other things were lurking around in my PC. My HijackThis logfile seems …

Logfile of HijackThis v1.97.7 Scan saved at 7:42:19 PM, on 6/4/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\cisvc.exe C:\PROGRA~1\Iomega\System32\AppServices.exe c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe C:\WINDOWS\System32\svchost.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe C:\WINDOWS\System32\hkcmd.exe C:\WINDOWS\System32\DSentry.exe C:\Program Files\Common Files\Dell\EUSW\Support.exe C:\Program Files\Iomega HotBurn\Autolaunch.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe …

I have Symantec Enterprise Edition of Norton operating with an OS of WIN 98. When downloading all the new Anti-Virus updates all the users but [u]one[/u] are receiving the new updates. What could be causing this, and what can I do to get this one user up-to-date updates. :eek:

Logfile of HijackThis v1.97.7 Scan saved at 3:07:55 AM, on 06/05/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\windows\system\hpsysdrv.exe C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe C:\HP\KBD\KBD.EXE C:\Program Files\VERITAS Software\Update Manager\sgtray.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe c:\progra~1\mcafee.com\vso\mcvsescn.exe …

I have read though this forum and followed some of the suggested procedures. I have installed, Adaware, Spybot and HijackThis. Ran all three and below is the HJT log. It really looks infected and I suspect I can delete some but wanted you all to see the untampered log. What …

I have tried adware 6 & cookiewall, but I can't get rid of prosearching My hijack log is Logfile of HijackThis v1.97.7 Scan saved at 7:28:11 PM, on 6/2/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v5.50 (5.50.4134.0100) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\SYSTEM\ATI2EVXX.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE …

when i swich on my computer a message pops up saying something like cannot find C:\WINDOWS\SYSTEM\BRIDGE.DLL file so here is my HJK log.. plz help me fix my problem! =( thanks a lot! Logfile of HijackThis v1.97.7 Scan saved at 7:59:12 PM, on 6/5/04 Platform: Windows 98 SE (Win9x 4.10.2222A) …

[U][B]PLEASE HELP[/B][/U] In Internet Explorer alot of the links that i try to use don't work, explorer freezes and after a couple of minutes in comes back at the origional page. Also some times explorer crashes and this causes the process svchost.exe to increase its cpu usage to above 95%, …

I have run SpyBot, AdAware, and various virus scanners, as well as CW shredder. It appears to go away for a few minutes after CW shredder is run, but then it comes right back and hijacks my home page again! Not sure if they are related, but I'm also having …

For a couple of weeks I been having an error message come up post startup. It sais something along the line of ""C:\WINDOWS\SYSTEM\BRIDGE.DLL" could not be found". I've posted in one of the Windows forums not knowing what it was. Found out it was spyware and was told to delete …