12,141 Topics

Member Avatar for
Member Avatar for SuperSam

Logfile of HijackThis v1.99.1 Scan saved at 2:19:02 PM, on 10/4/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\drivers\KodakCCS.exe C:\Program Files\WinAntiVirus 2005\AVSvc.exe C:\WINDOWS\uyefsvc.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe C:\Program Files\Microsoft AntiSpyware\gcasServ.exe C:\Program …

0
52
Member Avatar for doug2k9

ok i got a trojan that i can't get rid of for my life it keeps coming back when i delete the stuff that doesn't belong in safe mode it still comes back and it's driving me nuts any advice and solutions would be perfect here's the logs. here's the …

Member Avatar for doug2k9
0
156
Member Avatar for aolshock

Help you guys! I can get to most websites in IE, except for [url]www.gmail.com[/url] and a few others. They work fine in firefox, but I am trying to use napster and apparently its based on IE so this is giving me login issues. Here is my hijack this log: Logfile …

Member Avatar for DMR
0
155
Member Avatar for Sentient

I'm not exactly sure what I'm infected with, but when I do a search in google and click on a link - I'm not taken to the url of the link, but I am redirected to various ads. After realizing I was infected, I restarted in safe mode and ran …

Member Avatar for DMR
0
158
Member Avatar for MadDave123

Hello everyone, this is my first post on these most helpful forums. I just wish it could be under nicer circumstances. My dad has a fairly old PC (AMD 1300 or abouts) running WinXP, and it has contracted the hacktool.rootkit virus. I did a bit of research to fix the …

Member Avatar for MadDave123
0
689
Member Avatar for goldencavalier

I am getting the same message. here is my logfile from hijackthis. Logfile of HijackThis v1.99.1 Scan saved at 2:48:00 AM, on 10/4/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\hkcmd.exe …

Member Avatar for DMR
0
83
Member Avatar for goodtaste

Hi Guys! I have a critter that I never had before. When I boot up, it takes over and immeditely fires up the Internet whether I had that in mind or not. It takes me in automatically and gets me out when it wants to, it freezes my machine when …

0
93
Member Avatar for tedsie

Hey. I'm trying to delete a file that's entitled sshook.dll and for some reason it just won't. I had been trying to uninstall Trend Micro Anti-spyware program, and this is the only file that won't delete. any help? (i don't have hijack this nor will i dl it as this …

Member Avatar for DMR
0
164
Member Avatar for dkewl16

I had the cachecachekit trojan, tried to remove it and not sure if it's actually gone. I also found several other worms and spyware doing searches. This is the sysclean file after using ewido. /--------------------------------------------------------------\ | Trend Micro Sysclean Package | | Copyright 2002, Trend Micro, Inc. | | [url]http://www.trendmicro.com[/url] …

Member Avatar for dkewl16
0
164
Member Avatar for helpmeplease

Hi everyone, thanks for helping me out and lending your time to solving my problems. My computer keeps restarting randomly when not in safe mode. I have windows XP, 2 yr. old computer. a portion of the Error signature: "BCCode : 10000050 BCP1 : 82400000" Error report contents C:\docume~1\owner\locals~1\temp\wer4.tmp.dir00\sys data.xml …

Member Avatar for DMR
0
292
Member Avatar for Rat Boy

Hey People! You guys are great but i have a problem. I have just noticed a problem that when i try to download anything from the internet the progress bar only opens for a moment before automatically closing. Possibly related is the "file edit etc" bar at the top of …

Member Avatar for Rat Boy
0
71
Member Avatar for R3NN3R22

I've had the major annoyance of this adyieldmanager pop-ups. If you could help me, it would be greatly appreciated. Here is my HiJackThis logfile. Logfile of HijackThis v1.99.1 Scan saved at 4:54:06 PM, on 9/30/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe …

Member Avatar for DMR
0
205
Member Avatar for idRATHERgoHUNT

Logfile of HijackThis v1.99.1 Scan saved at 8:22:22 PM, on 9/30/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe …

Member Avatar for DMR
0
117
Member Avatar for Victor587

[B]I also need to delete this virus.. my hijackthis log:[/B] Logfile of HijackThis v1.99.1 Scan saved at 6:43:29 PM, on 9/29/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe …

Member Avatar for Victor587
0
170
Member Avatar for geezer

I've done just about everything I can think of twice now.[IMG] Ihate posting you these HJT logs but they don't seem to be much good anyhow. anyway here's some notes I took whilst doing the lastest tries... In safe mode the homepage does not reset to about:blank. Having said that …

Member Avatar for DMR
0
627
Member Avatar for DMHltd

Get this message after surfing a few minutes. Doesn't matter where I'm trying to get to. I've run adaware,spybot S&d, CW shredder, autorun, and Hijack this. Could someone take a look at this log? Logfile of HijackThis v1.97.7 Scan saved at 8:25:08 PM, on 5/6/2004 Platform: Windows XP SP1 (WinNT …

Member Avatar for Farkie
0
267
Member Avatar for pedrofigo

Hi, I've been trying to get rid of this Trojan but it seems impossible. Here is my HJT and my Ewido log. --------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 19:38:27, on 29-09-2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe …

Member Avatar for crunchie
0
374
Member Avatar for arieatuw

I have been getting the "page cannot be displayed" massages for most sites. I am having a hard time accessing sites such as yahoo, hotmail, ebay, etc. For example, I can only access yahoo after I refresh the page 100 times, well, a little less than that. But the page …

Member Avatar for arieatuw
0
185
Member Avatar for Txsupra

Logfile of HijackThis v1.98.2 Scan saved at 2:43:43 PM, on 9/30/2005 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\SCARDSVR.EXE C:\PROGRAM FILES\COMMON FILES\EPSON\EBAPI\SAGENT2.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\RPCSS.EXE C:\WINDOWS\SYSTEM\DEVLDR16.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HIDSERV.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\COMPAQ\DIGITAL DASHBOARD\CPQMLDET.EXE …

Member Avatar for ddtredskull
0
183
Member Avatar for marmaliser

Hi Guys, I would appreciate your assistance in removing the aurora visrus as its beginning to keep me awake at night! Here is the HJT Log: - Thanks Logfile of HijackThis v1.99.1 Scan saved at 12:48:01, on 10/06/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) …

Member Avatar for presto
0
497
Member Avatar for Chronica111

Hello, this is my first time on this forum so i will just get to the point. While talking on AIM i received a message with a link which i carelessly clicked. Something installed several ad and search applications including the YupSearch bar. I was able to remove YupSearch but …

Member Avatar for crunchie
0
464
Member Avatar for Farkie

Hey, my IE keeps messing up, i cant use it, so i have to use mozilla firefox (which i prefer anyway, but my brother doesnt) I have scanned it with HJT, and found quite a big log. I was wondering which to fix, and which to leave. Ive attached my …

0
84
Member Avatar for lvlIk3

hey, heres the log Logfile of HijackThis v1.99.1 Scan saved at 10:23:06 PM, on 9/28/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\WINDOWS\System32\nvsvc32.exe c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Logitech\iTouch\iTouch.exe C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE …

Member Avatar for crunchie
0
195
Member Avatar for DeeLLG

Can someone look at my hijack this log and tell me what I can do to get rid of this damned virus? I think it's a virus anyway. Help, please. Logfile of HijackThis v1.99.1 Scan saved at 8:52:15 PM, on 9/29/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer …

0
48
Member Avatar for joel_stahleen

[B]i keep on full scanning my system for this virus for the nth times, found it, deleted it and when i reboot, it appear again. :cry: help anyone? please. here's my hijackthis log:[/B] Logfile of HijackThis v1.99.1 Scan saved at 10:50:06 AM, on 9/29/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) …

Member Avatar for crunchie
0
157
Member Avatar for Daniel_Hatcher

Whenever i try to go to a site on Internet Explorer or Search, system restore, help etc... i get a blank screen i tried in Safe Mode and Non-Save Mode but the same thing. I use Microsoft Windows XP SP2. HIJACK THIS FILE [CODE]Logfile of HijackThis v1.99.1 Scan saved at …

Member Avatar for techniner
0
213
Member Avatar for raynoldz125

i seem to have the pesky my way search assistant icon in the add/remove programs box and there is no remove button. this seemed to be preinstalled on my dell inspiron 6000 and i havent noticed it until now. first i scanned with both spybot 1.4 and ad-aware (with settings …

Member Avatar for raynoldz125
0
618
Member Avatar for D DON

Hey guys and gals, just ofund this place and from reading alot on here, sounds like I may have found the right people to help me out. I'm running winnt and had a bad case of trojan the other day. Actually still do have it. I run semantac virus scan …

Member Avatar for River Beast
0
306
Member Avatar for c0801

I am experiencing a significant problem. It all started when I updated ZoneAlarm today. Now this may not be related to ZA, but that is when it all happened. First, I have a Win98 SE OS. I seems as though all of my file associations have been corrupted. None of …

Member Avatar for RON1949
0
130
Member Avatar for derekbka

I need help cuz i ve been having some problems in here =z ! FIRST: a little yellow box with an exclamation point saying somethin like " Your machine might be infected " and it wont stop poping... SECONG: an ANNOYING BIG box saying somethin about " do you want …

Member Avatar for crunchie
0
376
Member Avatar for vjc88

Here are a few problems I am having: 1) I dont have task manager any more...how can i get it back...it says its locked 2) every time i click on a exe or a shortcut or sumtin like that it always says: "Are you sure you want to open a …

Member Avatar for vjc88
0
462
Member Avatar for gazzabhoy

Hi I have been through all spyware and HJT and still having problems loading IE and windows explorer in XP. I am using firefox now but still having to wait 2 mins for IE or Explorer (my computer) to open please see my HJT log file below. Any advise would …

Member Avatar for crunchie
0
511
Member Avatar for jafulton5150

Hi guys, I've tried to clean my system with the tips that you've given everyone else, but it still keeps coming back... I'm hoping someone can help. Here are my logs: Logfile of HijackThis v1.99.1 Scan saved at 5:14:37 PM, on 9/18/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer …

Member Avatar for crunchie
0
502
Member Avatar for josh48315

hello i just recently got this trojan. i was using aol instant messenger and one of my friends had the trojan, and it automatically sent a message containing a link, asking to click the link and open a file, well stupid me totally forgot that it was an auto message …

Member Avatar for swatkat
0
197
Member Avatar for Original

Hey guys, i have a problem with yazifind popups. This is one persistent popup and i have no idea how to fix up this problem. I have scanned my computer with symantec antivirus, trend micro house call , spybot and adaware, all of which are unable to resolve this problem. …

Member Avatar for crunchie
0
188
Member Avatar for BasketCase

Is this something I can do on my own? I have downloaded SpyBot and Ewido and taken out the temporary files and basically tried to do what you've asked of helpless souls in my situation. Thank you very much for continuing to take us by the hands and rid us …

Member Avatar for crunchie
0
212
Member Avatar for kwibster

I have an anoying virus called Home Search Assistent and Shopping Wizard. I went to Control Panel to try to remove them, and was sent to some web site that says if you download their uninstaller it will uninstall the peograms. I don't trust those web sites. I am woundering …

Member Avatar for crunchie
0
286
Member Avatar for juliab

hi .. i have read a few threads .. it appears i am having the same prob. hope you can also help me. unable to open my document, my computer, and control panel. also downloaded hijack this and was unable to open zip file. i managed to download it in …

Member Avatar for crunchie
0
148
Member Avatar for jmkthetruth

I think that the presence of the "Home Search Assistant", "Search Extender", & "Shopping Wizard" are causing my AIM to crash. I haven't noticed it causing problems anywhere else. Any ideas? Here is the HiJack Log: Logfile of HijackThis v1.99.0 Scan saved at 7:45:55 PM, on 03/10/2005 Platform: Windows XP …

Member Avatar for crunchie
0
1K
Member Avatar for apurva16

Hello, When i go to start, settings, control panel, add remove programs i see two things in there called: search extender (which has the image of the msn buddy icon) & home search assistent (which has the image of the monitor, & a disc. when i try to remove "search …

Member Avatar for crunchie
0
860
Member Avatar for Robert88

desperately hoping someone can help me! I am on a small wireless network with a Linksys Router. I have windows xp pro. Saturday night, all is well. Sunday morning, can't get online. Network works fine, other computer on same network works fine. I run a virus scan and note multiple …

Member Avatar for chrisbliss18
0
103
Member Avatar for MrMarth

Hi, im really glad im able to be able to get help about this stuff, if you can help me i'd greatly appreciate it. Im running Windows 2000, i have microsoft anti-spyware for spyware removal, and Mcafee Real-time protection. I also have ad-aware, and i have spybot search and destroy. …

Member Avatar for swatkat
0
237
Member Avatar for Punkermoma

Can somebody please help me, I have been having many problems with my computer lately. Like disconnecting me from the internet, Aurora pop-ups, not being able to find out what DrPMon.dll is and my computer has been running very slow. I have been trying to read through some things and …

Member Avatar for anthony1
0
241
Member Avatar for Sccrsnipr

Hi, I see that you've helped others out on your website with the virus Trojan.Cachecachekit and I was hoping you could help me out too. From reading other threads you've asked users to post a HijackThis logfile. I've posted mine, let me know if you can help and if you …

Member Avatar for Sccrsnipr
0
242
Member Avatar for arunapai0603

my pc is affected by Hacktool.Rootkit virus. intially my remon.sys file from system32 folder was affected with Hacktool.Rootkit virus. after long time it is fine but now a new file is affected called spoolv.sys from sytem32 itself with the same,Hacktool.Rootkit virus. i m using windows XP i m using NAV2005 …

0
66
Member Avatar for jojosoks

this is my thread plz analieze it to get rid of shopping wizard home search assisLogfile of HijackThis v1.99.1 Scan saved at 11:21:14 م, on 19/09/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\sm56hlpr.exe C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe …

Member Avatar for crunchie
0
141
Member Avatar for Niklas

I have this virus that opens a windows explorerer page if I dont move the mouse for a minute. IT then auto installs something called "elitebar trojan" Norton finds it eventually and deletes it but there must be another fiel becasue it keeps auto installing itself again and again. It …

Member Avatar for crunchie
0
250
Member Avatar for Brian

I am running Widows 98, and was infected with kernels32.exe. I believe that this has been succesfully removed. However, when I switch on my computer, the computer tries to log on to Freeserve, a message pops up, "program already installed", and I lost my Freeserve Desktop Icon, but have replaced …

0
109
Member Avatar for lpcc_1937

sever busy box pop's up and I have to click retry 20 times then i get an IE pop up. Here's my log file..can someone help me out? Logfile of HijackThis v1.99.1 Scan saved at 1:04:49 AM, on 9/26/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 …

0
61
Member Avatar for kermie

Hello and greetings I have a computer using XP as the operating system and with SP 2 installed. I recently had a bad virus infection that thanks to the help from this website was able to remove and I am very grateful as the commercial virus removal programs couldnt help …

Member Avatar for goldeagle2005
0
111

The End.