[virus-malware] Forum Topics

Hello, I been to this forum a few times before for suggestions. This is my first post though. Just wondering if I'm infected any where. bTgX5m8a.exe and also a.exe really stand out to me thx for your help. Logfile of HijackThis v1.97.7 Scan saved at 10:24:05 AM, on 4/1/2004 Platform: …

[b]Dangerous Bug in HijackThis 1.97.7 Restoral Procedure[/b] I have searched everywhere to see if this has already been reported to Merjin, but I can not seem to find any reference to this, so am letting people know. VERY IMPORTANT. YOU MUST READ! Dangerous bug in HijackThis version 1.97.7 when restoring …

Is this a virus or an important file? I have received two e-mails telling me to delte it because it is a virus and two more e-mails telling me it is a hoax and actually an important file. Does anyone know for sure if it is good or bad? This …

I have just created 3 new tutorials about Spyware and two of the more prevalent tools when dealing with them. The first is a primer on Spyware and hijackers and is a good read if you don't understand them. It can be found here: [url="http://www.bleepingcomputer.com/forums/index.php?showtutorial=41"]Understanding Spyware and Browser Hijackers[/url] The …

Logfile of HijackThis v1.97.7 Scan saved at 8:17:24 PM, on 3/31/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPSYSDRV.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\WINDOWS\OLEHELP.EXE C:\PROGRAM FILES\BACKWEB\BACKWEB\PROGRAM\BACKWEB.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\TEMP\RAR$EX01.898\HIJACKTHIS.EXE …

my ie 6 homepage was recently hijacked, and i got all sorts of popups.. i checked out this board and got cwshredder as well as adaware... ran them both and the homepage stopped getting hijacked, however, for some reason the majority of the time i cannot close explorer with the …

This is an area that I am not entirely familiar with, hence the following question. I have a service customer some of whose problems can be traced to a bootleg [b]Windows XP Pro[/b] install. When I apprised her of this, she "did the right thing" and obtained a legal OEM …

Hi guys... I was wondering if anyone could help me with my HijackThis log file.. Everytime I connect to the Internet I get searchcentral.cc as my start page, and I

IE6 has been constantly hijacked ; this damn site : [url]http://www.lookfor.cc/index.php?p=37049[/url] , replaces the start page , obliging me to edit the register HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\start page ; It has happened almost every night since the 1st time a week ago ; An updated Spybot search and destroy has scanned the …

I performed the search, quarantine and deletion of certain spyware files on both my computers, but afterwards I experienced some slow-down on my Cable connection, so I restarted. But when I restarted, my comp could no longer go on the net. We're on a network, so I told my bro …

Hi there, I've been having a problem that when I load the task manager it flashes up and then shuts down. I also can't run regedit, renamed it from exe to com and I now can. Based on what I've found there's a virus messing things up. I've done the …

[url="http://mvps.org/winhelp2002/hosts.htm"]http://mvps.org/winhelp2002/hosts.htm[/url] [url="http://www.pcmag.com/article2/0,4149,1420796,00.asp"]http://www.pcmag.com/article2/0,4149,1420796,00.asp[/url] [url="http://browsercheck.qualys.com/"]http://browsercheck.qualys.com/[/url] [url="http://beam.to/spybotsd"]http://beam.to/spybotsd[/url] [url="http://support.microsoft.com/?kbid=307545"]http://support.microsoft.com/?kbid=307545[/url] [url="http://www.spywareinfo.com/~merijn/cwschronicles.html#cwshredder"]http://www.spywareinfo.com/~merijn/cwschronicles.html#cwshredder[/url] [url="http://www.sysinfo.org/startuplist.php?filter=svchost&count=&type"]http://www.sysinfo.org/startuplist.php?filter=svchost&count=&type[/url]= [url="http://www.daniweb.com/techtalkforums/showthread.php?t=947"]http://www.daniweb.com/techtalkforums/showthread.php?t=947[/url] [url="http://www.tweakxp.com/tweak2152.aspx"]http://www.tweakxp.com/tweak2152.aspx[/url] that's it for the moent. If ny 1 wants more, please let me know.

I didn't know where my question fits so I posted it where because it happens everytime I open IE. Everytime I open my browser, I get this warning from Spybot S&D saying that I want to download Avenue A, Inc and asks me if I want to stop it or …

I have home xp and i have a program called FIX IT its a virus program also but it wont let me unistall it and it tells me to re install it but it doesnt work!! it says im missing a file. is there anyway i can delete this off? …

any help with what to fix would be great. thanks in advance. Logfile of HijackThis v1.97.7 Scan saved at 10:59:31 PM, on 3/25/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\CTHELPER.EXE C:\WINDOWS\System32\taskswitch.exe C:\Program …

I have discovered that I have the [email="sobigf@mm"]sobigf@mm[/email] virus on my home xp. I have run symantic and microtrend virus removal tools. One says that I have the virus and couldn't remove it, the other says that It did not locate the virus on my computer. However, my computer is …

Hello, :cry: Internet been terribly slow lately, I have run all anti virus/adwares/ online scans I could, and so far nothing has been found. I have just run hijackthis, does anyone see anything strange in the log? Maybe it has something to do with svchost processes? (all those issr.exe, lass.exe …

I use Tiny Personal Firewall. It is really easy to use, and it works fine for what i do. There are some programs that request outgoing/incoming connections. I'm not sure if i should let these progs communicate or not. If someone could let me know what these progs do, i …

-My explorer keeps adding porn sites to my favorites and hijacking my homepage while keeping my explorer window open or closed. -I ran these spyware removal programs: X-Cleaner, clean out my IE options, ran CShrewder v1.47, ran Adware 6.0 and then SpybotS&D 1.2. -CShrewder cleans out CWS:Winshow and restores IE …

Can someone please have a look at this hjt log as my friend is gettin a lot of pop ups i have run adaware and cwshredder and a dew more and fixed a lot of problems thanking you in advanceLogfile of HijackThis v1.97.7 Scan saved at 14:43:15, on 20/03/04 Platform: …

I am a fairly new PC owner. I had not installed virus protection and unsurprisingly, got infected. I had to totally reinstall all software, drivers etc. I also then installed Norton Anti Virus and Internet Protection software. I now have a problem when accessing the internet in that, seemingly at …

McAfee has detected an infected file by the name of Bridge.exe. The virus name is Downloader-ER I can't clean, delete or quarantine ite file I get the message Access to file is denied. I can remove the files from my C drive, but when I reboot,THERE IT IS AGAIN. Any …

Hi, I am running ME and everytime I try to start IE I get an MSIESH.DLL error and I can't start the program. Do I have a virus?

I'm using windows xpPro and since yesterday when ever i try to log off my computer or turn off the computer i get an error message stating that: "wupdater.exe has failed to respond" a blue timer runs through and then nothing happens. I either have to chose "end process now" …

[size=2]By: Jeff Johnston A new version of the Bagle virus family uses a different infection method then older versions. Bagle-R and Bagle-Q have both been reported to spread via email without an attachment. [/size][url="http://www.sophos.com/virusinfo/articles/bagletwist.html"][size=2][color=#800080][u]Sophos reports[/u][/color][/size][/url][size=2] that this is an attempt to bypass virus protection at the email gateway. Bagle exploits …

A trojan virus seems to have attached itself to my Internet Explorer and I cant get rid of it, I have tried Norton Anti-Virus ,an online virus scan program found it but said it cant remove it, and the Norton program didnt find it at all, does anyone have any …

I have had problems with changed start page by this annoying res://mshp.dll/index.html#10213 ; Besides that every time I run Google.com a pop up ad comes up just after submiting any entry a new browser windows opens with this pesky search company : ([url]http://search-company.com/search.php?qq=kee+bird&pin=10213[/url]) Despite I have employed Hijackthis to clear …

Seems I have been infected with this dreaded worm. I have used the Hijackthis software....with some systems running and have come up with this. Logfile of HijackThis v1.97.7 Scan saved at 8:48:50 PM, on 4/03/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe …

Hi, I appologies I'm sure there are many post regarding this issue. I installed my webcam last night and after that I noticed my system going very slow - I opened task manager checked my cpu usage and it was at 100%, I checked my processes and saw that svchost …

I have the downloader-EV virus on my pc and I wonder if anyone knows ow to get it off i am a computer newbie so could you explain in detail thankyou

I found this file running on my pc imWl2X.exe I have no idea what it does. I also have a trojan dropper.lnor.s I can't get rid of. I ran adware spybot and hijack this. but it is still there the anti virus trys to remove it but it can only …

I was in the middle of a post when (surprise) my computer restarted on me. So here's the quick and dirty version. My computer runs completely fine when it's used for everyday things. But once I start to run (or so it seems) system type programs, my computer bluescreens and …

Ok, I just built this machine for my birthday. It is: AMD XP 3000 w/ 400 FSB. ABIT KV-7 mobo. Seagate baracuda 120 gig Sata HD. ATI 9600 pro 128 mb. And a Modem Blaster modem. I also have a Sony 16x dvd-rom and a sony dvd-burner. 450 w dual …

Recently I've been checked my programs on my C: file in "WINDOWS XP (C:)" and as I started scrolling down, at the bottom of the page I see this hideously long folder name, some random letters for the name. d9458 blah blah. Now i'm thinking damn it this must be …

i downloaded kazaa and ever since ive been getting popups so i delted it ran lavasoft adware remover and spybot but they keep on popping up...can someone please help me its driving me insane!

i need a new virus program, i have Mcafee which came with my computer but i cant get any updates for it unless i pay 30$ or something, whats a free virus program that works good

i was told that myway.com is a web browser highjacker.but when iam on the web site my spyware app doesnt pick up eny spyware and after iam off of the site and i scan for spyware there is nothing.the web site has no ad's no banners no popups :rolleyes:

I ran adware, spybot, and antivirus but none of them remove it. what can I do? here is my hijack this log Logfile of HijackThis v1.97.7 Scan saved at 3:32:53 PM, on 3/10/2004 Platform: Windows 2000 SP2 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe …

Dont where this came from or what the problem is now but i kept getting the WUPDATER data1. is missing. i have since DLd Spybot,Hijack this,A-Ware 6.0 and Spyblaster. Im not sure what this Wupdater is and if i have gotten rid of it as it has caused problems now …

I have 709 processess running on a win2k pc. these 2 programs are repeating them selfs over and over. 844b7whatk.exe and 8wlo0jlvhs.exe/ is this a virus? I ran adware and spybot s&d and they found nothing. I also did a google search on them and nothing. what are they?

I am new here, so forgive my mistakes. I have a dialer or some type of program opening internet explorer which then opens various porn sites in my task manager. I also recently discovered that it is downloading pictures to my local settings, temporary internet folders. sometimes i will even …

Can anyone help me? When i do Ctrl-Alt-Del there is sometimes 2 programs running called eankhtkm. When this happens my windows explorer seems to stop working. I am wondering if it is a virus. Many Thanks

i have already posted this somewhere else but i think its the wrong place i dont know much about computers the problem i have got is i downloaded a crack for an avi converter and when i try and open it a box appears at the top it says loader …

I did a very bad thing. I ran a spyware software program yesterday and found a lot of spyware on my computer. I started deleting the items by hand in regedit. However, I got tired and went to bed. This morning my Windows XP will not completely load. It hangs …

hello - not been on for a while I suspect that my machine (win2k) may be contaminated with spyware and the like. could anyone recommend a good (preferably freeware) tool for scanning and/or removing this stuff? My Norton firewall etc. doesnt seem to be enough to keep me secure.... Thanks …

[b]Ask The Computer Geek[/b] By: Jeff Johnston (jeff@domynoes.net) [i][b]Q:[/b] I have received an email from Microsoft stating that there is a new security update available that fixes some security risks. The email contained the patch for me to install, should I do this right away as it advises? - John …

When i open a page on the internet i cant close it, either by clicking on the x or right clicking and chossing close, alot of other pages open as well and ive had to install a pop up blocker, anyone know why these pages wont close? to close them …

i ran a adaware scan a few days ago then came back and updated it and WHOA! 138 something files found and i got this message when i tried to clean it up what should i do?

Yea I need some help I've run spybot, adaware, and norton. I have a hijack log if you want to see it then ask. Still however, I leave my comp and come back to find the same pop ups everytime.

I was so [i]excited[/i] to find the exact answer to my little difficulty with the missing Advanced Tab! So I changed the AdvancedTab value at HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel. But nothing changed. Now what? I used Spyware Nuker to clean up a few cookie and register probs but have no idea …