12,141 Topics

Member Avatar for
Member Avatar for codexp3

Please Help! I've been able to get rid of NGPW36 despite my best efforts...Here's the Logfile from Hijack This... Logfile of HijackThis v1.99.1 Scan saved at 6:11:09 PM, on 1/15/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for crunchie
0
249
Member Avatar for 'Stein

Sry...my bro's a dumb piece...he used a P2P and downloaded several viruses hidden in another folder. Norton Antivirus caught 1. However, when I tried to delete the folder from the desktop, it told me it was in use. This freaked me out, so i went and checked processes. I THINK …

Member Avatar for DMR
0
1K
Member Avatar for glennmoore

Hi all I am sure that my computer as become laced with bugs, I have just run Spybot and I have Norton but here is the output from HiJackThis If somebody could take a look and tell me wat is going on and how to correct it I would be …

Member Avatar for crunchie
0
416
Member Avatar for Mr. M

My friend presented with this PC problem (really it's not me). His machine (Win XP Pro) is popping up with error messages prompting him to shut down about every 3-4 hours, saying something about these files: C:\DOCUME`1\MARKAN`1\LOCALS`1\Temp\WERcce2.dir00\services.exe.mdmp C:\DOCUME`1\MARKAN`1\LOCALS`1\Temp\WERcce2.dir00\appcompat.txt He's tried manually emptying the Temp folders, updating virus definitions and running …

Member Avatar for dlh6213
0
145
Member Avatar for chansky

ok so im a 17year old kid who is the "computer expert" in the family. my moms laptop (DELL Latitude C840; Windows 2000) got some pop up trouble and i assume viruses anywhere from 3-2 years ago. my mom ended up just getting a new laptop, and this 1 was …

Member Avatar for dlh6213
0
68
Member Avatar for sickofit

I need help, please. I have run into the Spyaxe adware program and it is currently giving me the system intrusion detected pop up on my task bar. It has not taken over my homepage as of yet but I expect it to sometime. I have run adaware and it …

Member Avatar for crunchie
0
319
Member Avatar for reidmoran

hey, this hacktool.rootkit virus has infected my computer and is specifically in my remon.sys file in my system32 folder, I have tried following the steps norton has given to delete the file and I can get rid of it in safe mode but as soon as I reboot in normal …

Member Avatar for crunchie
0
304
Member Avatar for dlh6213

[url]http://www.consumeraffairs.com/news04/2006/01/symantec_rootkit.html[/url] [url]http://www.theregister.co.uk/2006/01/16/sony_bmg_rootkit_still_widespread/[/url] [url]http://news.zdnet.co.uk/software/applications/0,39020384,39247725,00.htm[/url]

0
82
Member Avatar for amagad2

Hi, I have just purchased a new computer with windows xp media center 2005 and SP2. The first day i got a message saying there was an error in windows and then the drwatson32 debbuger message. It keeps doing this for no reason, i have to click ctrl+alt+delete abd close …

Member Avatar for DRice
0
119
Member Avatar for djm123

WINDOWS XP, I have the Verison DSL with the Yahoo tools IT FINDS THIS VIRUS., can someone please guid me how to get rid of this, should the scan do it or where do I get help?

Member Avatar for DMR
0
130
Member Avatar for sslone

Hey guys I'm new to the forum, this hit one of my roommates computers and then this one is my cousin. Please help us out here, we've scanned and everything. Logfile of HijackThis v1.99.1 Scan saved at 8:41:13 PM, on 1/9/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer …

Member Avatar for DMR
0
211
Member Avatar for Whit

[B]I am not sure what to do at this point[/B] Logfile of HijackThis v1.99.1 Scan saved at AA 12EETING!! 8:06:14 AM, on 1/11/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ACS.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program …

Member Avatar for DMR
0
159
Member Avatar for perlanda

I am working on a friends computer, and they had Norton 2003, they bought the newest 2006 version and we downloaded it online (dial up) and it took several hours. So when I ran setup, it does a scan of the system to make sure that it can install properly. …

Member Avatar for DMR
0
118
Member Avatar for Problem

Hi. I also have a hacktool.rootkit problem in windows/system32/remon.sys. I have updated my programs and run the scans in Safe Mode. I can find and remove that virus, but it keeps coming Back. I am quite helpless, Any help is approciated :sad: My Hijacklog: Logfile of HijackThis v1.99.1 Scan saved …

Member Avatar for DMR
0
186
Member Avatar for Sassy

hey everyone. :) it's been a long time since I've had to be here :evil: . and this time it isnt even for me. so please bare with me, and if i say something stupid, please excuse me. :o my friend's laptop has now been playing up for sometime, and …

Member Avatar for crunchie
0
122
Member Avatar for sebryna808

i've got a virus and need help. Logfile of HijackThis v1.99.1 Scan saved at 2:01:11 AM, on 1/11/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec …

Member Avatar for DMR
0
228
Member Avatar for bernadette42

I have recently found out I have the hacktool.rootkit virus. I tried to delete the files according to Nortons instructions but no luck. This is what a scan by Hackthis gave me. Logfile of HijackThis v1.99.1 Scan saved at 9:17:47 AM, on 1/12/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: …

Member Avatar for DMR
0
182
Member Avatar for Trent

Hi All, Ive been infected with Spy Sheriff (amoung others no doubt). I have trawled thru the various forums on how to clean this any everything seems to be different and all seem to start with a HJT log so I will start here too. Please help me. Many Thanks …

Member Avatar for DMR
0
145
Member Avatar for 'Stein

First off, ya gotta understand that I read in full thru most of these posts, and I've come to a realization: DMR is the solution to mostly all of the problems in here. Yes, I realize that this should be posted in another location, but then its true impact wouldn't …

0
76
Member Avatar for H2ofield

Hello, Today, I had to disconnect my modem.When I reconnected it, all hell broke loose. Norton alerted me to a trojan virus that it wasn't able to delete (C:\windows\system32\howiper.exe). I ran all my spyware programs (ad-aware, spybot S&D, norton anti). It was at this point when I knew I had …

Member Avatar for crunchie
0
252
Member Avatar for mikeandike22

i need someone to check out this log Logfile of HijackThis v1.99.1 Scan saved at 3:13:27 PM, on 1/10/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\windows\system\hpsysdrv.exe …

Member Avatar for DMR
0
138
Member Avatar for tmdemby

Hello there, New here and I've been searching the internet for solutions on how to remove these 3 nasty things that won't go away. Already tried Ad-Aware and Spybot and they still won't go away. Can somebody please help? Here's my log from Hijack This. Thank you so much!!! Logfile …

Member Avatar for dlh6213
0
145
Member Avatar for shawn07

I did all the suggested processes listed in [url]http://www.daniweb.com/techtalkforums/thread28196.html[/url] for the spyware listed in title. (Post 6). Here is my HJT Log after. Question: Should I fix all the missing files?? Logfile of HijackThis v1.99.1 Scan saved at 11:53:15 PM, on 1/12/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet …

Member Avatar for dlh6213
0
199
Member Avatar for little_fish

Could I have some lovely person check out my HijackThis log please, pretty please! My computer's being all slow... Logfile of HijackThis v1.99.1 Scan saved at 9:46:29 PM, on 1/11/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\windows\System32\smss.exe C:\windows\system32\winlogon.exe C:\windows\system32\services.exe C:\windows\system32\lsass.exe C:\windows\System32\ibmpmsvc.exe C:\windows\system32\svchost.exe …

Member Avatar for dlh6213
0
152
Member Avatar for mookie5381

So, I inherited a computer when I was upgraded from pee-on for the whole workplace to one particular individual's b****. As it were, I inherited a computer with issues, and three IT visits later, they're still not fixed, so I'm hoping I can get some help here, where I have …

Member Avatar for dlh6213
0
64
Member Avatar for santacruz05

Hi, I have all the req'd anti spyware software. I like spyware doctor the most, and it cant get rid of trojan.spambot. It says to restart in SAFE MODE and rescan, but that never works. And It's like the longer i ignore spambot the more it invited lots more spyware …

Member Avatar for dlh6213
0
157
Member Avatar for masclez

Sorry for annoying you with my desperate cry of help, but I'm italian and not too good with the english language, so I'll try to go straight to the point: my poor pc got something, because every time I've tried to open Task Manager, it didn't open, and everytime I've …

Member Avatar for dlh6213
0
146
Member Avatar for stranoblaze

when i try to a new window in IE, it doesn't go directly to my set homepage. instead, it takes me to [url]www.securitycaution.com[/url] supposedly it's an anti-spyware service. the message that appears on this website is: Attention! Your system is under control of remote computer with IP address 227.4.167.118. The …

Member Avatar for dlh6213
0
315
Member Avatar for kained

Basicly my computer is running very very poorly and none of my spyware/virus stuff is finding anything. Anyone got any ideas? Logfile of HijackThis v1.99.1 Scan saved at 10:19:35, on 11/01/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe …

Member Avatar for DMR
0
113
Member Avatar for dirky083

For awhile now, everytime I start up my computer, something occupies all my cpu. As it begins to load, I cntrl+alt+delete and go to processes, and it shows that a program called realsched.exe is taking up all the cpu. I always have to end the process to get my computer …

Member Avatar for DMR
0
273
Member Avatar for cjfb_1

Please help me. I am so tired of seeing the DNS errors. HijackThis log: Logfile of HijackThis v1.99.1 Scan saved at 8:10:38 PM, on 1/2/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE …

Member Avatar for DMR
0
316
Member Avatar for ski38off

Hello, and thanks for your help in advance. I apparently picked up a virus the other day when I opened an email. Whatever it did completely forze up the computer. I couldn't open any program at all. Somehow, by starting in safe mode and restoring to an earlier date, I …

Member Avatar for DMR
0
274
Member Avatar for ChiQuitaPeKita

I cannot find a way to make Search Extender go away. the unistall will not work! Can anoy one help me with this?

Member Avatar for crunchie
0
223
Member Avatar for cesgal

I have tried to remove these programs and I believe there are remnants in the registry keys that keep me from being successful. In desperation I paid $40 for XOFTSpy, but it has been been able to remove it either. I stumbled across this website, downloaded HijackThis.... Here is the …

Member Avatar for crunchie
0
544
Member Avatar for vmock001

Computer has been moving very slowly, I'm not sure if it is infected, but in the add/remove screen there is a program call "Myway Search Assistant" but it can not be removed, thank you

Member Avatar for DMR
0
115
Member Avatar for vishalp.bhavsar

(This post has been split from this thread -- [url]http://www.daniweb.com/techtalkforums/thread28035.html[/url]) pls help me i m facing same problem from one week.made my life hell.. i have attached log here i dont know how and which one should i delete? Logfile of HijackThis v1.99.1 Scan saved at 6:52:46 PM, on 09/01/2006 …

Member Avatar for DMR
0
121
Member Avatar for Loopah

My WIndows Media Player has been acting up lately. When I am streaming videos or sometimes when I already have them downloaded it will play them very choppy where I can't even tell what is happening. Also after this happens repeatedly it crashes and give me the option to send …

Member Avatar for DMR
0
150
Member Avatar for new death2

when i try and install programs i have download from the net eg. winamp, xfire (i dont have any trouble installing anything from cd). i get this error message. "NSIS Error The installer you are trying to use is corrupted or incomplete. This could be the result of a damaged …

Member Avatar for new death2
0
138
Member Avatar for 'Stein

I'm having a problem with a start up program titled 'jake.scr' I know it's spyware/malware because I accidently dl-ed it, and it caused AIM spamming. I somehow disabled it, and the only place I can find it now is in the startup registry in msconfig. Title: jake Command: jake.scr Location: …

Member Avatar for DMR
0
210
Member Avatar for solipsist

After server upgrade, noticing unexplained performance problems and am unable to install the Windows critical upgrades. AntiVirus and spyware software doesn't seem to find anything. I am posting the HJT logfile for your review. - Thanks Logfile of HijackThis v1.99.1 Scan saved at 2:01:42 PM, on 01/12/06 Platform: Windows XP …

Member Avatar for solipsist
0
133
Member Avatar for dirky083

I have this pop-up that won't go away no matter how many anti-spyware/virus software I use. It usually says "the best offers" preceded my a symbol that looks like 6 different colored circles forming a ring. What is this thing and how do I get rid of it?

Member Avatar for DMR
0
451
Member Avatar for Daniela1

Hi, I have the following problem... The cd-rom on my dad's computer opens and closes continuously, the computer is obviously infected. First I suspected the problem was spyware. I tried: Adaware, SpyBot Search and Destroy, SpySweeper and others but this hasn't fixed the problem. Now I suspect the problem may …

Member Avatar for DMR
0
256
Member Avatar for holz01imp

i have been reading around and established this is a web server, but the question is i have no idea what it is doing on my system? I try loading internet explorer and no matter what address i type in the same page is displayed. In the middle of the …

0
69
Member Avatar for moen'm'down

Hi guys. i stumbled apon your sit when i got a virus. hacktool rootkit. I have nortons internet security 2006 and it finds the virus and will quarantine it but not delete it. as i read some of the previous treads i tried some of the remedies but to no …

Member Avatar for moen'm'down
0
163
Member Avatar for goplease

Hello, My problems started on this machine when I attempt to login either into Hotmail ([url]www.hotmail.com[/url]) or my bank accounts online or almost all login required sites. They do not fully load to either the login page or even thereafter the user/pass is entered I receive a blank page that …

Member Avatar for DMR
0
168
Member Avatar for mikeandike22

[url]http://www.razespyware.net/[/url] is a program that offers anti-spyware protection but my friend has said that it added spyware and hijacked his computer. I thought maybe it was worth sharing for other ppl to check out and warn ppl.

0
32
Member Avatar for vmock001

How do u get rid of programs that wont let u unistall them because it says a file is missing?

Member Avatar for tayspen
0
147
Member Avatar for stljorj

My brother must have downloaded SOMETHING. I have three entries in the add/remove programs that I cannot get rid of. I have tried in Safemode as well. I have put HijackThis 1.99.1 on his computer and the following is a copy of the log file. Please can someone help? I …

Member Avatar for stljorj
0
163
Member Avatar for Problem

Hello everybody. I need some help with that bastard hacktool.Rootkit... I have done everything that was said in the previous posts (Used Ewido, Spy Sweeper and Spybot S&D) with newest updates. Ewido found the hacktool.Rootkit in Windows/system32/remon.sys and deleted it. After Reboot it was found again, and i deleted it …

Member Avatar for Problem
0
310
Member Avatar for tomstirk

hi i just recovered my pc from spyware but now i cant change my background(selection grayed out) the message on the background reads "spyware infection" this is my hackthis log, (i think the problem may be in the top 2 or 3 files) Logfile of HijackThis v1.99.1 Scan saved at …

Member Avatar for DMR
0
321

The End.