10,784 Topics

Member Avatar for
Member Avatar for sandytntn

Hi, Any help would be appreciated. Installed HJT to permanent folder and ran. Log is below. Logfile of HijackThis v1.99.1 Scan saved at 12:39:24 PM, on 7/2/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe …

Member Avatar for swatkat
0
316
Member Avatar for RondaB

PLEASE HELP!!! I have windows XP. I keep receiving pop ups from Aurora and when I restart I receive this RUNDLL ERROR Error loading C:\WINDOWS\cfgmgr52.dll The specified module could not be found. At the same time Norton detected C:\WINDOWS\SYSTEM32\Poller.exe Trojan Horse. Can anyone tell me how to fix these problems? …

Member Avatar for crunchie
0
212
Member Avatar for einstein72586

i have hotoffers on my computer and it has been causing every sex ad on the internet to pop up on my computer, it also has a little round red ball with a white X in the middle on it on my start bar, can someone help me remove it

Member Avatar for crunchie
0
128
Member Avatar for scv909

ok this is my problem, one day i was on my computer and one of my friends on aol instant messenger sent me a link saying, "is this you?' but with a web address so seeing as it was my friend i clicked it and it automatically downloaded something onto …

Member Avatar for crunchie
0
149
Member Avatar for Maddog52

I am having simillar problems to others with DrPMon.dll and Aurora. I have followed the basic instructions given to others regarding HijackThis placement, cleanup of temp files, and virus scan. But now I need some futher instruction. Here is my log file. Logfile of HijackThis v1.99.1 Scan saved at 10:18:39 …

Member Avatar for Maddog52
0
184
Member Avatar for vittic

I'm having problems latly with this Aurora like so many other people and have also been infected by Trojan viruses (not too sure what kind). I don't know if the Aurora and virus is contected but I do know I need help. This is the HijackThis log I recently did …

Member Avatar for crunchie
0
245
Member Avatar for GregSLogin

Hi, I am new here, and have taught myself a little about computers and how to protect them. I have bought plenty of pro\grams, like Black Ice, Norton, Zone Alarm, etc and even a Linksys Router to try to stop the guy that keeps attacking our system. Non of them …

Member Avatar for DMR
0
154
Member Avatar for nguyenn_99

Please help me with instruction on how to remove this Aurora. I am pasting my HiJackThis log. Thank You Logfile of HijackThis v1.99.1 Scan saved at 9:56:38 AM, on 7/2/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for crunchie
0
153
Member Avatar for davecrosby

Hi. I've managed to catch myself some nasties that got in past NAV and MS-AntiSpyware. Have spent many hours trying my best to no avail. Can you help? Here's my HijackThis log. Logfile of HijackThis v1.99.1 Scan saved at 09:17:14, on 01/07/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet …

Member Avatar for crunchie
0
237
Member Avatar for Furanu

Hello! I am new here and i really don't know that much about computers ~ekk However, i have the annoying aurora popup too and have tried everything... Here is my hijackthis scan, please help me someone: Logfile of HijackThis v1.99.1 Scan saved at 22:40:20, on 02/06/2005 Platform: Windows XP SP1 …

Member Avatar for DMR
0
176
Member Avatar for datry

[COLOR=Blue]hi all :) i m sorry if my english is too bad cuz i'm not english so accept please some eventual errors :mrgreen: would u please if time allows help me to examine this hijackthis log full of pests lol :cheesy: i thank you all in advance :[/COLOR] [COLOR=Black][COLOR=DarkOrange]especially to …

Member Avatar for datry
0
90
Member Avatar for gee777

Please help me out this my first post.I have been infected by a plethora of spyware .One of the messages I get is the 'Microsoft Windows Security Warning' which always instals obscene pictures onto my desktop. Logfile of HijackThis v1.99.1 Scan saved at 2:20:35 PM, on 6/25/2005 Platform: Windows ME …

Member Avatar for gee777
0
244
Member Avatar for oldlimey

As a new poster I am not certain of the normal procedure on here so please bear with me. In short my norton sercurity has told me of a hacktool.rootkit infection but is unable to delete the file. This results in a continual norton warning pop up referring to the …

Member Avatar for crunchie
0
401
Member Avatar for Seannk

Hey guys, I have read everything and tried everything to get IE to run faster now I am asking for your assistance please check this file and tell me what to do. Thanks Seann Logfile of HijackThis v1.99.1 Scan saved at 11:14:51 PM, on 6/15/2005 Platform: Windows XP SP2 (WinNT …

Member Avatar for crunchie
0
173
Member Avatar for GlueFist

well after a few weeks of reading and playing around trying to rid myself of this and lord knows what other manifestations of it from my PC I found this site and after reading up as much as I could have taken the first necessary steps I hope in making …

Member Avatar for crunchie
0
274
Member Avatar for the_joker

my hi-jack this log.....please help me. Best on my e-mail: address removed, see [url]http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_faq#faq_rules[/url] Logfile of HijackThis v1.99.1 Scan saved at 23:26:27, on 01.07.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Intel\Wireless\Bin\EvtEng.exe C:\Programme\Intel\Wireless\Bin\S24EvMon.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe C:\WINDOWS\Explorer.EXE …

Member Avatar for dlh6213
0
259
Member Avatar for Marcus763

I'd really appreciate any help on offer... I'm a bit of a novice but from what I've read and understand so far I have this About:blank virus and just can't get rid of it and it's driving me crazy. I've downloaded and run HJT and here is the log after …

Member Avatar for Marcus763
0
205
Member Avatar for derek1000

Hello all, Please help, I am able to connect to net OK, but after a few minutes and connecting to 1or2 pages, all I can get is 'page cannot be displayed', The sites I am trying are those I have used for very long time!! The only way out of …

Member Avatar for DMR
0
265
Member Avatar for marksummy

Hi all, my first post, and guess what?? a cry for help I seem to be having a problem with a couple of files, namely nail.exe, jnzscteial.exe and drpmon.dll that keep reappearing and causing my anti virus software to go mad! i saved a log from hijack this and here …

Member Avatar for DMR
0
261
Member Avatar for Kaetra

ok i did myself in for this one, i swear i was trying to download a silly typing tutor to improve my keyboard skills a bit, got it off some mirror site and then noticed that this wierd pop-up was turning up near the taskbar, it looks vaguely like a …

Member Avatar for DMR
0
128
Member Avatar for melloncolin88

Hiya i have a similar problem to many others it seems. In my systray there is a small logo that looks like the file icon of killbox, any click on it instantly brings up a fake windows spyware message and also loads up a webpage for hotoffers.com. also this seems …

Member Avatar for dlh6213
0
239
Member Avatar for snipescastle2

Aloha! I am sure you folks have read this one many times, but here goes: Seems I have caught that "Specialgoods.info" infection. Man! I have tried everything (Or so I thought) I bought "Remove About:Blank Buddy" and that didn't even phase it, tried "Hijack this" to no avail...... Here is …

Member Avatar for crunchie
0
130
Member Avatar for Urdna

[COLOR=DarkRed]On my computer I no longer get the "page not found" page, I get this drwebservicehosts page. Can you Please help me, here is my Hijackthis scan[/COLOR] Logfile of HijackThis v1.99.1 Scan saved at 10:27:11 PM, on 6/27/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) …

Member Avatar for crunchie
0
112
Member Avatar for Moo

Hello A few weeks back I was hit badly by a rougue site that bypassed all my virus and adware blocking software like a knife through hot butter. Popups, viruses and redirects took over like mad. Have managed to get rid of most of everything (and believe me it WAS …

Member Avatar for Moo
0
178
Member Avatar for Space_switch

Hey guys. Ran various spyware removal tools including norton, microsoft antivirus,ad-aware se and a couple of online scanners, but i got a couple of persistent little sods that i cant get rid of. Including "aprps" Hijack is included below. hope you guys can help Cheers. Im sure i got all …

Member Avatar for crunchie
0
154
Member Avatar for SediAK

For some reason I picked it up and dont know where. Tried to remove it using Adaware and its still there and when I tried deleting the drpmon.dll file it wont let me. SO I ran hijackthis and here is my log Logfile of HijackThis v1.99.1 Scan saved at 11:53:09 …

Member Avatar for SediAK
0
585
Member Avatar for bobdesktop

Help please, I use norton antivirus 2004 weekly. It recently found 19 at risk files. All spyware, malware, adware junk. But it cant remove them. All 19 come back "delete failed" when I try to remove them from nortons screen. So I read what norton says to do. Some have …

Member Avatar for dlh6213
0
100
Member Avatar for Patriot

Hello all, I've been having a little trouble with being unable to change my homepage on Microsoft IE.. Friend suggested i try HJT.. Here is the log from the scan, can anyone help me figure out if there's a problem?? thanks in advance: C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\windows\system\hpsysdrv.exe c:\Program Files\Norton AntiVirus\navapsvc.exe …

Member Avatar for crunchie
0
102
Member Avatar for geryd

This started out as a problem with numerous popups and windows with Aurora in the window border. Urls I entered in address bars would also be redirected after I clicked go. After following the preliminary steps .. (I originally prepared this for another Forum but their server crashed before i …

Member Avatar for crunchie
0
224
Member Avatar for topias

Hallo, I have the same proplem as other with p2esocks_1021.dll , i scaned the maschine with Hijackthis and have the following logfile: please what should i do now (PS. my email and the whole windowsxp system on the machine doesnot work well now!) Topias Logfile of HijackThis v1.99.1 Scan saved …

Member Avatar for crunchie
0
119
Member Avatar for bh99mh

Can anyone help me with the above error. I don't know where to start to resolve it. Mary :sad:

Member Avatar for crunchie
0
178
Member Avatar for derekn83

Here is my log. Please help me out with this. Thank you very much. Logfile of HijackThis v1.99.1 Scan saved at 2:47:02 PM, on 6/29/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Intel\ASF Agent\ASFAgent.exe C:\Program …

Member Avatar for dlh6213
0
115
Member Avatar for ohiomomtofour

So I go away for a week of vacation and leave my husband at home, and come home to find a computer overflowing with viruses, adware, UGH. The only thing I haven't been able to get rid of is this stupid about:blank thing. Browser has been hijacked to direct to …

Member Avatar for dlh6213
0
281
Member Avatar for paul_dali

about : blank - claims to be smitfraud The problem is that access on the internet has been very limited, the PC keeps crashing and is slow, the hijacked non-changeable homepage is leading me only to sites that can sell me software to fix the problem but I would rather …

Member Avatar for DMR
0
248
Member Avatar for UserName

My brother's Windows user account started misbehaving last night. He could no longer open Internet Explorer, iTunes, Windows Explorer, MSN Messenger, and probably many others he hasn't tried (Firefox is fine). The actual processes do run, but they never get anywhere. For instance, Messenger's system tray icon is there, but …

Member Avatar for DMR
0
166
Member Avatar for Jen1388

I'm using Windows XP. I've had it for just over a year now. First of all I could pick out what desktops I wanted to, but for some reason all that shows up is a white background. I know the desktop is behind it, because I scrolled down the start …

Member Avatar for Jen1388
0
172
Member Avatar for Dancke1

was cleaning out my temp folder and came across this file which cannot be deleted Perflib_Perfdata_79c, did some searching and found out this has to do with some lop.com thing I read ur forums and I dont see any of the files listed in as being associated with this, here …

Member Avatar for Dancke1
0
109
Member Avatar for stefan

so norton told me that msmx32 is effected, but its not possible to delet it, because windows is using it .. so what can i do?? thx

Member Avatar for crunchie
0
221
Member Avatar for joe_sausage

I currently am having some serious problems with my sister's computer. This was the worse I think I have ever seen. Anyway, I downloaded AWG, Ewido, Microsoft's anti-spyware & Spy Sweeper. I have cleaned all the viruses off, but cannot get the spyware off this computer. I appreciate any help. …

Member Avatar for DMR
0
176
Member Avatar for stubbus

Hi, I have a pretty good knowledge of computers and have been able to cleanse my computer of every virus problem that it has had so far. But I was recently hit with aurora and have been battling it, and losing, for quite some time now. I have tried just …

Member Avatar for DMR
0
240
Member Avatar for Atreyu

I used to get aurora Pop-ups but now they don't come but I get Different viruses whenever I log on like hlazlv and DrPMon and stuff like that heres my log O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Sun Java Console …

Member Avatar for DMR
0
248
Member Avatar for lizbee2003

Hi Here's my log file- after running Adaware. Hope someone can help. Thanks Logfile of HijackThis v1.97.7 Scan saved at 15:37:09, on 28/06/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Norton …

Member Avatar for lizbee2003
0
190
Member Avatar for thatboialex
Member Avatar for crunchie
0
437
Member Avatar for chadweiser

I have a search toolbar that will not go away and I cannot figure out how to remove it. Here is my HiJackthis log: Logfile of HijackThis v1.99.1 Scan saved at 12:53:39 AM, on 6/29/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe …

Member Avatar for dlh6213
0
186
Member Avatar for MJMason30

Friend refered me for a slow running computer. On XP, SP2 Any help appreciated. Pixie Logfile of HijackThis v1.99.1 Scan saved at 6:05:13 PM, on 6/27/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe …

Member Avatar for DMR
0
133
Member Avatar for TWDervish

I'd appreciate any help on this. The pop-ups are driving me crazy! Thanks. Here is what HijackThis found: Logfile of HijackThis v1.99.1 Scan saved at 10:37:33 PM, on 6/27/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe …

Member Avatar for TWDervish
0
103
Member Avatar for tgober

I am the latest victim of the Aurora infection making its way around. I have read several threads and know that I need to supply a log file from Hijackthis. My logfile is below. Can anyone help me please. Thanks. Logfile of HijackThis v1.99.1 Scan saved at 8:15:20 AM, on …

Member Avatar for DMR
0
593
Member Avatar for kashres

Hi all: I just discovered this pesky virus when I downloaded an undated version of Ad-AWare this morning. Following other postings, I have used HijackThis and here is a posting of my scan. I would be incredibly grateful for any help.... Logfile of HijackThis v1.99.1 Scan saved at 2:20:48 PM, …

Member Avatar for DMR
0
462
Member Avatar for katieinlimbo

i'm having a lot of trouble with search extender and hijackers that have completely obliterated my machine. could anyone help? now i know everyone uses hijack this so i got it, i don't understand any of it but here's the log it gave me (thank you to anyone who can …

Member Avatar for dlh6213
0
137
Member Avatar for frenemy

I've been mystified about this for a few days, ever since I came here. I heard there's a "list" to check normal vs abnormal, but off-the-bat, peculiar stuff, what does one look for?

Member Avatar for dlh6213
0
183

The End.