12,141 Topics

Member Avatar for
Member Avatar for evilmonkeyzz

Recently I have been getting warnings from zonealarm firewall about an application called: boreregspile.exe trying to access the internet, I have of course blocked it as I have no idea what it is. The file is located here: C:\Documents and Settings\Josh\Application Data\THUNKBAITDEAF, along with another application called fkapgjiw.exe. I have …

Member Avatar for evilmonkeyzz
0
226
Member Avatar for moraira73

Hi, I hope someone out there can help me? Norton flashed up a virus warning 2 days ago and put the file sysinit32z.exe into quarantine. Now my computer takes longer to boot up after the password stage. When the desktop appears there is a warning message saying something like ...the …

Member Avatar for tayspen
0
198
Member Avatar for Ghostrider007

HJT log Logfile of HijackThis v1.99.1 Scan saved at 9:31:48 AM, on 5/4/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\brsvc01a.exe C:\WINDOWS\system32\brss01a.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\Brmfrmps.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\PROGRA~1\Iomega\System32\AppServices.exe C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS C:\WINDOWS\system32\svchost.exe …

Member Avatar for Ghostrider007
0
436
Member Avatar for kylethedarkn

is there anything wrong w/ my comp here my log Logfile of HijackThis v1.99.1 Scan saved at 4:27:15 PM, on 5/10/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\System32\CTsvcCDA.EXE C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\WINDOWS\System32\snmp.exe …

Member Avatar for tayspen
0
292
Member Avatar for mattcurto

hi, I stumbled on this site after running spy sweeper and ad aware and not being able to get rid of this. I would appreciate some help in this. here is my hjt log, thanks Logfile of HijackThis v1.99.1 Scan saved at 4:29:34 PM, on 8/05/2006 Platform: Windows XP SP1 …

Member Avatar for 'Stein
0
482
Member Avatar for WhiteRabbit

It's a grey monitor icon with the red 'anti' through it. It shows up as 'unknown' in my Taskbar Customization window. I can't select it, but when I click while in Firefox, the very top grey bar dims, but nothing else happens. I know I can hide it, but it …

Member Avatar for DMR
0
291
Member Avatar for Sascha

Ok, so I followed the advice, now I've still got these weird problems with my connection (ever since the virus warning came up in AVG), so I'm posting my lists again -- From HijackThis: Logfile of HijackThis v1.99.1 Scan saved at 11:20:33 PM, on 07/05/2006 Platform: Windows XP SP2 (WinNT …

Member Avatar for TiJay
0
162
Member Avatar for MAD_COW711

my antivirus is detecting a "download. trojan" virus, but it cannot be deleted, cleared, or quarantined. its pretty much making it so that i can't get on internet explorer- i'm amazed i was able to get on now... anyways, i ran htj---- here's the log.... hopefully somebody can help me? …

Member Avatar for MAD_COW711
0
640
Member Avatar for Sascha

I recently got a message from AVG Free Edition indicating that I had a virus, which would normally allow me to "heal" or toss the bugger in the virus vault. In this case, it offered that I could "go to the file", which was called system32:cua.dll -- however, when clicking …

Member Avatar for tayspen
0
300
Member Avatar for phildlee

sorry...but i'm a rookie at all this computer stuff....please help me out....trying to write a paper, and keep getting popups....i used HJT... Logfile of HijackThis v1.99.1 Scan saved at 1:49:30 AM, on 5/9/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for DMR
0
416
Member Avatar for neildech

I had posted a thread under ";I get a virus alert in my toolbox"t;. The last post to me asked for a new HJT log. Here is the log. Could somebody please look at it and let me know if there is anythng amiss? In addition, I have not been …

Member Avatar for neildech
0
440
Member Avatar for mischief998

Can anyone help me please! Everytime i try to open a folder on my desktop, a internet explorer window opens trying to open a website ([URL="http://213.159.117.130/di/d/di.html"]http://213.159.117.130/di/d/di.html[/URL]), it can't access the page and don't know if its because im using AOL. Ive read other threads and notice everyone is using hijackthis …

Member Avatar for mischief998
0
276
Member Avatar for nomadron

I have a Gateway 600YGR, and it always shuts itself down anytime I try to install any software (from CD or web), or run a program from cd drive. I used to (last week) be able to use the computer (browse net, solitare, and use previously installed programs) for several …

Member Avatar for caperjack
0
643
Member Avatar for TimP

I have picked up this nasty thing, and have not been able to shake it. Below is my hijackthis log, any help on what to do next would be greatly appreciated. Logfile of HijackThis v1.99.1 Scan saved at 9:29:27 PM, on 5/9/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet …

Member Avatar for 'Stein
0
143
Member Avatar for y2v2001

My computer keeps telling me I have viruses but when i seach for them using mcafee it doesn't find anything. I've posted a hijackthis log below. Thanks for helping! C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program …

Member Avatar for 'Stein
0
212
Member Avatar for bwilliamsdc

Hey all, Found this site through Google. I've been browsing the threads and it seems like this is the new May fun surprise. My Dad's up in Rhode Island and I'm in DC -- he called down to say that he's got this and doesn't know what to do with …

Member Avatar for 'Stein
0
421
Member Avatar for bloodxfight

So I was stupid and accepted a file from someone without thinking twice, only to realize it was a worm/virus. I first did virus scan and nothing came up. Then I did it again and it showed a virus, and got rid of it. Yesterday, however, Norton Antivrus popped up …

Member Avatar for tayspen
0
251
Member Avatar for phildy

I currently am using Norton anti virus and it is about to expire. I have been told that there are better programs out there that can be downloaded for free. Is this true? Any suggestions on where to look? Thanks.

Member Avatar for phildy
0
93
Member Avatar for xhawkjw

os: windows 2000 virus software:symantec 9.0 description: when os start-up,the alarm is appearing,show that find the virus in the directory "[B]c:\windows\system32[/B]",the name of file is "[B]sosdrp.sys[/B]",the name of virus is[B] hacktool rootkit[/B]. after I show all files(include the hide file and protected files),I cann't find sosdrp.sys. maybe this file is …

Member Avatar for tayspen
0
237
Member Avatar for cheriley

please help me obi wan youre my only hope Logfile of HijackThis v1.99.1 Scan saved at 8:39:46 AM, on 5/9/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Spybot - Search …

Member Avatar for tayspen
0
89
Member Avatar for beaner

Can somoene take a look at this for me. This is my sisters log. Shes having problems with her computer, like pop up windows and debug erros coming up. I just told her to give me her log and I would post for her. Thanks in Advance. Logfile of HijackThis …

Member Avatar for tayspen
0
162
Member Avatar for danbarjohnson

Help I have gone through post #6 on common fixes and am posting my hjt log. still having problems and appreciate any help that you can give in advance Thanks Dan Logfile of HijackThis v1.99.1 Scan saved at 5:47:15 AM, on 5/7/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet …

Member Avatar for DMR
0
2K
Member Avatar for roswell1329

Hi all. New to the site, and it looks grand. I ran across it searching for suggestions on clearing out the AntiSpyLab parasite/hijacker for a family member. Looks like I'm in the right place. It also seems like the first step is to post a HijackThis log. Here goes: Logfile …

Member Avatar for DMR
0
221
Member Avatar for xhawkjw

os: windows 2000 virus software:symantec 9.0 description: when os start-up,the alarm is appearing,show that find the virus in the directory "[B]c:\windows\system32[/B]",the name of file is "[B]sosdrp.sys[/B]",the name of virus is [B]hacktool rootkit[/B]. after I show all files(include the hide file and protected files),I cann't find sosdrp.sys. maybe this file is …

Member Avatar for 'Stein
0
111
Member Avatar for Froot_loop04

Hello Its been a while without any probs but I keep getting annoying pop ups on my screen. My Nortons 2006 tells me it's PurityScan (whatever that is), it removes it but it keeps on coming back. Here is my Hijack this log. Please help. Logfile of HijackThis v1.99.1 Scan …

Member Avatar for 'Stein
0
176
Member Avatar for rodp

An icon labeled TAG (TagASaurus) appeared on my desktop. Since then, I have lost my internet access, my browser home page seems to get re-directed and all of my bookmarks have been changed to the same re-direct. I downloaded, installed and ran HijackThis and my log is as follows (any …

Member Avatar for tayspen
0
96
Member Avatar for sheila123083

Logfile of HijackThis v1.99.1 Scan saved at 3:15:02 PM, on 5/8/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\WINDOWS\TmFtZQ\command.exe c:\program files\mcafee.com\agent\mcdetect.exe c:\PROGRA~1\mcafee.com\agent\mctskshd.exe c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Network Monitor\netmon.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\hkcmd.exe …

Member Avatar for tayspen
0
195
Member Avatar for dearwhoever

hey guys i need help getting rid of srufer side kick, when ever i try to look at pages it will come up...what do i do ???(i already have hijackthis)

Member Avatar for tayspen
0
500
Member Avatar for kylethedarkn
Member Avatar for nanosani
0
589
Member Avatar for HalfBrian

I do not know what type of adware this is, but in my taskbar, there is an animated icon that switches from a red circle with a line through it and a green accessability icon. When you click it, it pops up with a box that says: "Your computer is …

Member Avatar for HalfBrian
0
152
Member Avatar for kylethedarkn

About a week ago i noticed that when i tried to acess gmail(google email) i recieved and error message in my mozilla firefox browser. unfortounetly the error was not caused by a bad internet connection or a busy site. I think it was caused by norton internet security because after …

Member Avatar for 'Stein
0
555
Member Avatar for Tinashka

Here is my log tayspey. tell me the worst :lol: Logfile of HijackThis v1.99.1 Scan saved at 23:50:20, on 25/04/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS.001\System32\smss.exe C:\WINDOWS.001\system32\winlogon.exe C:\WINDOWS.001\system32\services.exe C:\WINDOWS.001\system32\lsass.exe C:\WINDOWS.001\system32\svchost.exe C:\WINDOWS.001\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\BELKIN USB Wireless …

Member Avatar for 'Stein
0
611
Member Avatar for grayclay88

hey. first time here. i've got a problem with me desktop. A while ago, i downloaded a UT2004 background with styleXP. it asked me if i wanted to install surfer sidekick, or something like that, and i pressed yes. I knew it was spyware, so afterwards i scanned and deleted …

Member Avatar for 'Stein
0
661
Member Avatar for Andy Ferg.

Hi guys, new to this site, been looking for a while now and is excellent. Now I have (or my daughter at Uni has!) a problem with the browser. I have Windows XP. Message "your browser settings prevent you from automatically redirecting to a new URL." pops up when trying …

Member Avatar for Andy Ferg.
0
362
Member Avatar for Maligns

Okay, got a dell PC, XPS 400, with thefollowing specs: 2.4 Gig Proccessor 1 gig RAM 80 Gigabyte HD RADEON X600 Video Card 512 mb RAM and the list goes on. Anyway, the computer worked for a few months, then when I was in the middle of playing Conter Strike …

Member Avatar for caperjack
0
120
Member Avatar for neildech

Tayspen, here is that log that I could not get to post correctly last night. I think that the virus is dead, but need your assurrance that this is so. Thanks in advance. If it is dead, I will mark the other two (2) threads as solved Logfile of HijackThis …

Member Avatar for neildech
0
110
Member Avatar for Will46

i seem to be having a problem with pop ups from antispylab it disrupts my yahoo and hotmail email and also ebay any help would be greatly appreciated Ive seen others posting hijack this logs but reflecting my noobish nature i dont know where to get this from so if …

Member Avatar for Will46
0
176
Member Avatar for zuckerj

So, I have seen posts about this problem from many people, but as of yet no concrete solution. has anyone come up with a cause and solution to this issue of certain internet application ceasing to work after a certain amount of time? My XP machine has been running into …

Member Avatar for DMR
0
316
Member Avatar for PaulS22401

I started having problems with the near constant Antispylab.com popups/warnings a few nights ago. I ran Ad Aware and Norton AV but to no avail. I ran HJT and deleted a few things that I saw in other threads as being bad. That helped temporarily but apparently I didn't sweep …

Member Avatar for PaulS22401
0
349
Member Avatar for nanosani

This is the hijackthis log of a friend of mine ... please check it n tell me how to remove the spyware... Logfile of HijackThis v1.99.1 Scan saved at 11:13:39 AM, on 5/5/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe …

Member Avatar for tayspen
0
209
Member Avatar for saabmaniac

I have spyware somewhere and I cant get rid of it. SpySweeper, Ad-Aware, and Spyware Doctor all find the problems but none fix them. Here is a hijack this log. Can anyone help? Logfile of HijackThis v1.99.1 Scan saved at 1:18:59 AM, on 5/2/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) …

Member Avatar for saabmaniac
0
242
Member Avatar for tanggeng

I'm using Windows XP. When run with symantec, I have a hacktool.rootkit message that repeatedly comes up and asks for reboot, which does not fix the issue. When run with AVG, the error turns in to backdoor.generic2.ppu of which AVG cannot fix either. Below is the log from my HJT …

Member Avatar for tanggeng
0
2K
Member Avatar for dmonty

Hello, I have no idea how this occurred, but I started receiving a constant a pop-up that says Windows Security Center recommends different things. There are about 4 or 5 different pop-ups and closing them always directs me to a website for AntiSpyLab. I tried running my updated Norton AV …

Member Avatar for dmonty
0
396
Member Avatar for gawduranidiot

Can somebody tell me if I have any spyware? Here is my logfile. Logfile of HijackThis v1.99.1 Scan saved at 6:43:52 AM, on 5/2/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\EARTHL~3\PROTEC~1\ADSSER~1.EXE C:\Program Files\Common Files\Command …

Member Avatar for 'Stein
0
298
Member Avatar for gawduranidiot

I need to know if I have any spyware that AdAware isn't finding. Here is my HJT Logfile... Logfile of HijackThis v1.99.1 Scan saved at 4:29:53 PM, on 5/2/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for 'Stein
0
223
Member Avatar for muzzy786

hi guys, im under my wits in trying to remove this spyware...i dont know what to remove in hijack this either..here my log Logfile of HijackThis v1.99.1 Scan saved at 6:20:00 PM, on 5/4/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for 'Stein
0
161
Member Avatar for Highmount

I'm stilling running a DELL 8400 Dimensions for more details check my previous posts (only a couple of them) i followed the advice from last time and it seemed to work but now my computer freezes compleaztly on start up sometimes i have just run Ewido, spysweeper and Hjackthis [B]Ewido …

Member Avatar for TiJay
0
239
Member Avatar for cbk

last night when I was surfing I ended up on this page and it has me good ever since, yahoo home page wont come back unless I go through a documents back door, it always redirects forwards to [URL="http://antispylab.com/"]http://antispylab.com/[/URL], I keep getting yellow triangle messages with a exclamation point about …

Member Avatar for tayspen
0
186
Member Avatar for amandak

:rolleyes: Hello, For every internet page I open I get the annoying "[I]Invalid Syntax Error[/I]", also the address bar changes his text, for example: from [I][URL="http://www.hotmail.com/"]http://www.hotmail.com[/URL][/I] to [I][URL="http:///?%20www.hotmail.com"]http:///?%20www.hotmail.com[/URL][/I] ive just downloaded Hijack this...this is what its giving me...what should i do? Logfile of HijackThis v1.99.1 Scan saved at 2:11:56 AM, …

Member Avatar for DMR
0
231
Member Avatar for amandak

Hey, I followed the instructions and these are the results from Ewido : --------------------------------------------------------- ewido anti-malware - Scan report --------------------------------------------------------- + Created on: 3:54:04 AM, 03/05/2006 + Report-Checksum: 9DE81C18 + Scan result: HKLM\SOFTWARE\Avenue Media -> Adware.InternetOptimizer : Cleaned with backup HKLM\SOFTWARE\Avenue Media\Internet Optimizer -> Adware.InternetOptimizer : Cleaned with backup HKLM\SOFTWARE\Avenue …

Member Avatar for amandak
0
201

The End.