[windows-virus] Forum Topics

dear all , i am using windows 2000 with IE 6 . Due to an oversight of my colleague i have been infected with some kind of spyware whcih keeps opening pop up windows and Urls such as [url]www.searc-h.com/normal/yyy34.html[/url] along with it opens www220.paypopup.com/links.php?data (etc) i have Microsoft anti spyware …

i think this is an unusual problem. several months ago, i embarked on a mission to clean up my pc, remove spyware, adware viruses etc as best i could. iirc, i came across this process 'svcihos1at.exe' in my task manager. i created a Notepad file, and named it 'svcihos1at'. afterwards …

Is it just me or is there a problem with the spybot software? Not so long ago when I tried to update the definitions it gave me an error message "!!!bad checksum!" I was having other problems with my system, so I had just reformated my whole drive. Now I …

My operating system is Windows 2000, so THERE IS NO SYSTEM RESTORE. I can follow all the instructions from the link to Symantec and Norton to the letter, except for disabling system restore because in Windows 2000 THERE IS NO SYSTEM RESTORE. Arrrrrrrrrggggggggggggg!!!!! Because of this, doing a full system …

I have had to clear my hard drive several times as someone keeps hacking me, can you tell if my Hijackthis log file is clean now as I found that everytime I try to go to eharmony.com it won't load for some reason, but I don't seem to have problems …

[QUOTE=agbd]This is my first visit to this site and I need some help. When you open Internet Explorer the following virus notice comes onto the screen VIRUS DETECTED C:\WINDOWS\TEMP\SE.DLL Trojan Horse Startpage.19J When you press the heal button it heals it and then comes up with a box in the …

Logfile of HijackThis v1.99.1 Scan saved at 4:23:53 PM, on 10/25/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Yahoo!\Antivirus\ISafe.exe C:\Program Files\Norton Utilities\NPROTECT.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\tcpsvcs.exe C:\WINDOWS\System32\snmp.exe C:\Program Files\Speed Disk\nopdb.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\UPHClean\uphclean.exe C:\WINDOWS\Explorer.EXE C:\HP\KBD\KBD.EXE C:\windows\system\hpsysdrv.exe C:\WINDOWS\system32\S3apphk.exe …

I just finished following the clean your pc post and was just wondering if someone could look at my log and see if anything needs to be deleted. Thanks for your time. Logfile of HijackThis v1.99.1 Scan saved at 6:48:31 PM, on 10/25/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: …

I received a virus alert from norton regarding hacktool.roofkit. Alert stated that access was denied to fix the problem. I ran Norton scan and Norton could not re-find the problem. After scanning these boards, I downloaded ewido and ran. Results are below. I need advise to determine whether hacktool.....still exists …

I am running Windows XP & have LQfix.exe, AdAware, SpyBot Search & Destroy, Hijack This, ewido, WinPatrol, etc. I've tried several ways to get rid of pokapoka76, but I must be overlooking something. Your help greatly appreciated! Re: pokapoka76 Hi miles316, Welcome to Daniweb Please start a new topic in …

Hi, im new here and i want to try if this kind of forums works to get rid of my inoing virus.its a trojan.cachecachekit(window\system32\rsdriv) and every time he say he deletes it and after that there comes an other virus W32.spybot.worm and there comes a lot of different file names, …

I think my laptop is infected with hacktool.rootkit. When I try to load DAP (Download accelerator) Norton Antivirus 2005 quarantines "skvp.sys" - found in C:\WINDOWS\SYSTEM32. Norton then tells me the virus is hacktool.rootkit but can't remove it. I have tried several full system scans with Norton and others, also in …

I'm the most IT litErate person at mY work (which doesn't really sAy much, except I know enouGh to come to the eXperts!) Anyway, I just ran acrosS some weirdness. My co-wOrker's mouse pOinter clicKs raNdomly, opening programs, cloSing documents while he's working, even attempts to send eMails while working …

Hey, I need some help. Whenever I start up my computer, I get a dialog box that pops up (see below). I did a little google search on "newdot" and found this:[url]http://www.neuber.com/taskmanager/process/newdot~2.dll.html[/url] which doesnt look like something i want. Please let me know how to get this dialog box from …

I continusly receive "Page Cannot Be Found Errors"in IE and "www.page_name_here.com could not be found" errors in Firefox. If I hit refresh several times the pages eventually come up. It doesn't always happen. Error appears about 80% of the time. Refreshing the page over and over again fixes the problem …

I ran all antivirus software and spyware prevention software I could, but nothing worked. I really appreciate any help I could get. Here is my hackthis startuplist: StartupList report, 10/24/2005, 1:23:24 AM StartupList version: 1.52.2 Started from : C:\Documents and Settings\Mr X\Desktop\HijackThis.EXE Detected: Windows XP SP2 (WinNT 5.01.2600) Detected: Internet …

:mad: OK, I have already posted one thread and have not gotten any response from my last post which was 2 days ago......I really need someone's help! Here is my latest HIJACTHIS LOG FILE....If you can help.....PLEASE REPLY!! :cry: :!: Logfile of HijackThis v1.98.2 Scan saved at 11:59:28 AM, on …

I have been having troubles with my IE, WMP, Norton Antivirus, and my PC slowed down alot, and freezes alot more then it did before. Most of the time I can't open anything without mp pc freezing for about 5 mins. I'm posting a hijackthis log, can someone look it …

Having a real hard time with my computer these past few days. When I sometimes click on something like starting up IE or just simply looking into My Computer, my computer freezes up and takes a while to start up again. Once it starts IE though, there's no problem. However, …

Logfile of HijackThis v1.99.1 Scan saved at 5:30:38 PM, on 10/24/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBXserv.exe C:\WINDOWS\Explorer.EXE c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\helpdll.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\wanmpsvc.exe C:\WINDOWS\BCMSMMSG.exe C:\WINDOWS\Logi_MwX.Exe C:\Program …

Something is deffinatly wron live updates for norton dont work and neither will my autolook connect please help: Logfile of HijackThis v1.99.1 Scan saved at 11:54:14 PM, on 10/23/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program …

Hi Guys - I'm a newly joined member Living in the Uk. Started in computers way back in 1960, but rarely needed to go inside them until I retired. I swapped computers from W98 to XP about 6 months ago and eventually gave my old m/c to a granddaughter after …

Logfile of HijackThis v1.99.1 Scan saved at 11:07:03 AM, on 10/24/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\System32\uyimbge.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\PROGRA~1\MOZILL~1\firefox.exe C:\Documents and …

Within the last few days, Norton antivirus detects a SVKP file associated with hacktool.rootkit in the system32 folder. I have used Spybot, ADaware, spyware doctor, ccleaner, and ewido to clear everything but it comes back everytime I restart. Here is my HIjackthis log if anyone can possibly help me out. …

Everytime I try to open the control panel, anywhich way, it sends an error and then reboots? windows. Here is the highjack this...please help Logfile of HijackThis v1.99.1 Scan saved at 6:38:45 PM, on 10/22/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe …

Please look at this HijackThis Logfile. It is a Windows XP computer at one of my friends house, he asked me to troubleshoot. Had a new cable hook up and no firewall. Ran "Stinger" and a few Spy scans. Computer is very slow and IE works slow/Hijacked. I have also …

Howdy ya'll - I'm confused - I just walked a friend through updating and immunizing Spybot over the phone and after the immunization was done, my friend said the number of blocked products was 7324! After I updated my own and immunized, there were only 2505 blocked products. How can …

Logfile of HijackThis v1.99.1 Scan saved at 1:04:08 PM, on 10/23/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Administrator\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url]http://www.dell4me.com/myway[/url] R0 - HKCU\Software\Microsoft\Internet …

Hi, Could anybody guide me how to interpret a l2mfix log. It seems all Greek to me. There is a guide for hijackthis on the net but none for l2mfix.

I was recently infected with the hacktool.rootkit virus. The file msdirectx.sys has been quarantined by my symantec antivirus, but cannot be repaired. Each time I restart my computer, it detects the virus and quarantines it again. I have included my current HiJackThis log and would really appreciate help getting rid …

Help!! I'm having loads of popups and I don't know why, I've scanned loads of times but nothing gets rid of them. PLease help...please.... StartupList report, 23/10/2005, 01:59:01 StartupList version: 1.52.2 Started from : C:\Documents and Settings\Jamie Lowry\My Documents\hijackthis\hijackthis\HijackThis.EXE Detected: Windows XP SP2 (WinNT 5.01.2600) Detected: Internet Explorer v6.00 SP2 …

Help!! I have been infected today with this monster of a popup that popsup an add every 30 seconds. I hev to get rid of this as I cant work!! I have tried everything in my capability and I need professional advice. The sites are all endon in a yyy32.html …

Hey guys! Today I accidently extracted a zip folder and it installed something on my computer and it's making popups appear from nowhere. The pages usually have an address similar to this one: [url]http://www.virtual-coupon.com/normal/yyy34.html[/url], [url]http://www.mega-savings.com/normal/yyy34.html[/url] (usually with yyy35, yyy35 at the end). I've downloaded loads of spyware and adware programs …

Logfile of HijackThis v1.99.1 Scan saved at 2:30:48 PM, on 10/16/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\WINDOWS\mssmbios.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE …

I'm getting a bunch of pop-ups recently and I can't find the source. Logfile of HijackThis v1.99.1 Scan saved at 11:33:45 PM, on 10/21/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe …

So recently I downloaded the virus. Somehow the toolbar is gone now but I'm not sure if it's completely gone and just a few secs. ago, some other toolbar downloaded. I'm pretty sure there's a lot more crap in my compy than just those two. :o HijackThis log: Logfile of …

can someone please help me? I have been invaded by popups. Thanks! Logfile of HijackThis v1.99.1 Scan saved at 11:57:41 AM, on 20/10/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program …

I had Hacktool.rootkit. I went to google and looked for a Free Scan that would get rid of my Trojan. They all claim to get rid of it for free but the three I downloaded didn't do anything to the Trojan and at the end said for a fee would …

I have been reading alot of posts about this bug. I don't know if the fix is the same for each person / pc so I have listed my HJT log below. Thanks in advance for your help. Does anybody know if there has been any legal action taken against …

CAN SOMEONE PLEASE HELP I HAVE BEEN INFECTED WITH THE TROJAN.CACHECACHE.KIT VIRUS AND CANT GET RID OF IT MY NORTON 05 KEEPS DETECTING IT IN WINDOWS\SYSTEM32\RDRIV.SYS HERE IS MY HIJACK LOG Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe …

Hi, my symantec antivirus repeatedly tells me that i have a "hacktool.rootkit" virus. i was wondering how i could get rid of it? i ran a hijack this scan and here's my logfile: Logfile of HijackThis v1.99.1 Scan saved at 2:22:35 AM, on 10/22/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) …

I got a BIG problem.When i try to go on aol,wordperfect and every other thing it takes longer to get on.HELP!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Logfile of HijackThis v1.99.1 Scan saved at 8:20:27 PM, on 10/21/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Yahoo!\Antivirus\ISafe.exe C:\Program Files\Softex\OmniPass\Omniserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Yahoo!\Antivirus\VetMsg.exe C:\Program Files\Softex\OmniPass\OPXPApp.exe C:\WINDOWS\Explorer.EXE C:\windows\system\hpsysdrv.exe C:\WINDOWS\System32\hkcmd.exe C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe C:\Program Files\HP\HP Software …

I got it, and can't get rid of it. Does anybody have any suggestions? My OS is Windows 2000. I have followed the instructions from Symantec. Here is what I have done so far: 1. Started the computer in Safe Mode. 2. Ran Norton Antivirus 2003 - Full System Scan …

Hi, Could anybody guide me how to interpret a l2mfix log. It seems all Greek to me. There is a guide for hijackthis on the net but none for l2mfix. Sam.

i know u people must get tired of people like me, but i am no good with computers. please, could someone look at my hijack scan log Logfile of HijackThis v1.99.1 Scan saved at 12:50:38 AM, on 10/20/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) …

Hi, I'm an IT assistant at my workplace, and according to a network management fellow, one of the user's computers (Win2K OS) is sending traffic to an IRC server without her knowledge (she doesn't even know what IRC is). I did a scan with Adaware and found/removed Alexia and VX2. …

Hello there everyone. I just could swear that I have a new boogey in my laptop. At least I can't find any record of it anywhere no matter how I change the name or cut of it. The thing is that Trend micro Auto protect detected some virus or malware, …

Hi, My son just called me and said he's been trying to start his computer(windows xp), and when it starts up it goes into the black and white safe mode choice screen, flickers, thjen goes to blue screen which says somethng like: "windows shut down to prevent damage to computer......uninstall …

Hello guys! :cheesy: I have a very anoyying problem. I get pop-ups ever minute or even more. The ads are ussualy something containing ''searc-h'' and ''yyy34''. Please help me! Logfile of HijackThis v1.99.1 Scan saved at 20:41:17, on 20-10-2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 …