12,141 Topics
![]() | |
Logfile of HijackThis v1.99.1 Scan saved at 2:19:02 PM, on 10/4/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\drivers\KodakCCS.exe C:\Program Files\WinAntiVirus 2005\AVSvc.exe C:\WINDOWS\uyefsvc.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe C:\Program Files\Microsoft AntiSpyware\gcasServ.exe C:\Program … | |
ok i got a trojan that i can't get rid of for my life it keeps coming back when i delete the stuff that doesn't belong in safe mode it still comes back and it's driving me nuts any advice and solutions would be perfect here's the logs. here's the … | |
Help you guys! I can get to most websites in IE, except for [url]www.gmail.com[/url] and a few others. They work fine in firefox, but I am trying to use napster and apparently its based on IE so this is giving me login issues. Here is my hijack this log: Logfile … | |
I'm not exactly sure what I'm infected with, but when I do a search in google and click on a link - I'm not taken to the url of the link, but I am redirected to various ads. After realizing I was infected, I restarted in safe mode and ran … | |
Hello everyone, this is my first post on these most helpful forums. I just wish it could be under nicer circumstances. My dad has a fairly old PC (AMD 1300 or abouts) running WinXP, and it has contracted the hacktool.rootkit virus. I did a bit of research to fix the … | |
I am getting the same message. here is my logfile from hijackthis. Logfile of HijackThis v1.99.1 Scan saved at 2:48:00 AM, on 10/4/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\hkcmd.exe … | |
Hi Guys! I have a critter that I never had before. When I boot up, it takes over and immeditely fires up the Internet whether I had that in mind or not. It takes me in automatically and gets me out when it wants to, it freezes my machine when … | |
Hey. I'm trying to delete a file that's entitled sshook.dll and for some reason it just won't. I had been trying to uninstall Trend Micro Anti-spyware program, and this is the only file that won't delete. any help? (i don't have hijack this nor will i dl it as this … | |
I had the cachecachekit trojan, tried to remove it and not sure if it's actually gone. I also found several other worms and spyware doing searches. This is the sysclean file after using ewido. /--------------------------------------------------------------\ | Trend Micro Sysclean Package | | Copyright 2002, Trend Micro, Inc. | | [url]http://www.trendmicro.com[/url] … | |
Hi everyone, thanks for helping me out and lending your time to solving my problems. My computer keeps restarting randomly when not in safe mode. I have windows XP, 2 yr. old computer. a portion of the Error signature: "BCCode : 10000050 BCP1 : 82400000" Error report contents C:\docume~1\owner\locals~1\temp\wer4.tmp.dir00\sys data.xml … | |
Hey People! You guys are great but i have a problem. I have just noticed a problem that when i try to download anything from the internet the progress bar only opens for a moment before automatically closing. Possibly related is the "file edit etc" bar at the top of … | |
I've had the major annoyance of this adyieldmanager pop-ups. If you could help me, it would be greatly appreciated. Here is my HiJackThis logfile. Logfile of HijackThis v1.99.1 Scan saved at 4:54:06 PM, on 9/30/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe … | |
Logfile of HijackThis v1.99.1 Scan saved at 8:22:22 PM, on 9/30/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe … | |
[B]I also need to delete this virus.. my hijackthis log:[/B] Logfile of HijackThis v1.99.1 Scan saved at 6:43:29 PM, on 9/29/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe … | |
I've done just about everything I can think of twice now.[IMG] Ihate posting you these HJT logs but they don't seem to be much good anyhow. anyway here's some notes I took whilst doing the lastest tries... In safe mode the homepage does not reset to about:blank. Having said that … | |
Get this message after surfing a few minutes. Doesn't matter where I'm trying to get to. I've run adaware,spybot S&d, CW shredder, autorun, and Hijack this. Could someone take a look at this log? Logfile of HijackThis v1.97.7 Scan saved at 8:25:08 PM, on 5/6/2004 Platform: Windows XP SP1 (WinNT … | |
Hi, I've been trying to get rid of this Trojan but it seems impossible. Here is my HJT and my Ewido log. --------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 19:38:27, on 29-09-2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe … | |
I have been getting the "page cannot be displayed" massages for most sites. I am having a hard time accessing sites such as yahoo, hotmail, ebay, etc. For example, I can only access yahoo after I refresh the page 100 times, well, a little less than that. But the page … | |
Logfile of HijackThis v1.98.2 Scan saved at 2:43:43 PM, on 9/30/2005 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\SCARDSVR.EXE C:\PROGRAM FILES\COMMON FILES\EPSON\EBAPI\SAGENT2.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\RPCSS.EXE C:\WINDOWS\SYSTEM\DEVLDR16.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HIDSERV.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\COMPAQ\DIGITAL DASHBOARD\CPQMLDET.EXE … | |
Hi Guys, I would appreciate your assistance in removing the aurora visrus as its beginning to keep me awake at night! Here is the HJT Log: - Thanks Logfile of HijackThis v1.99.1 Scan saved at 12:48:01, on 10/06/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) … | |
Hello, this is my first time on this forum so i will just get to the point. While talking on AIM i received a message with a link which i carelessly clicked. Something installed several ad and search applications including the YupSearch bar. I was able to remove YupSearch but … | |
Hey, my IE keeps messing up, i cant use it, so i have to use mozilla firefox (which i prefer anyway, but my brother doesnt) I have scanned it with HJT, and found quite a big log. I was wondering which to fix, and which to leave. Ive attached my … | |
hey, heres the log Logfile of HijackThis v1.99.1 Scan saved at 10:23:06 PM, on 9/28/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\WINDOWS\System32\nvsvc32.exe c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Logitech\iTouch\iTouch.exe C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE … | |
Can someone look at my hijack this log and tell me what I can do to get rid of this damned virus? I think it's a virus anyway. Help, please. Logfile of HijackThis v1.99.1 Scan saved at 8:52:15 PM, on 9/29/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer … | |
[B]i keep on full scanning my system for this virus for the nth times, found it, deleted it and when i reboot, it appear again. :cry: help anyone? please. here's my hijackthis log:[/B] Logfile of HijackThis v1.99.1 Scan saved at 10:50:06 AM, on 9/29/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) … | |
Whenever i try to go to a site on Internet Explorer or Search, system restore, help etc... i get a blank screen i tried in Safe Mode and Non-Save Mode but the same thing. I use Microsoft Windows XP SP2. HIJACK THIS FILE [CODE]Logfile of HijackThis v1.99.1 Scan saved at … | |
i seem to have the pesky my way search assistant icon in the add/remove programs box and there is no remove button. this seemed to be preinstalled on my dell inspiron 6000 and i havent noticed it until now. first i scanned with both spybot 1.4 and ad-aware (with settings … | |
Hey guys and gals, just ofund this place and from reading alot on here, sounds like I may have found the right people to help me out. I'm running winnt and had a bad case of trojan the other day. Actually still do have it. I run semantac virus scan … | |
I am experiencing a significant problem. It all started when I updated ZoneAlarm today. Now this may not be related to ZA, but that is when it all happened. First, I have a Win98 SE OS. I seems as though all of my file associations have been corrupted. None of … | |
I need help cuz i ve been having some problems in here =z ! FIRST: a little yellow box with an exclamation point saying somethin like " Your machine might be infected " and it wont stop poping... SECONG: an ANNOYING BIG box saying somethin about " do you want … | |
Here are a few problems I am having: 1) I dont have task manager any more...how can i get it back...it says its locked 2) every time i click on a exe or a shortcut or sumtin like that it always says: "Are you sure you want to open a … | |
Hi I have been through all spyware and HJT and still having problems loading IE and windows explorer in XP. I am using firefox now but still having to wait 2 mins for IE or Explorer (my computer) to open please see my HJT log file below. Any advise would … | |
Hi guys, I've tried to clean my system with the tips that you've given everyone else, but it still keeps coming back... I'm hoping someone can help. Here are my logs: Logfile of HijackThis v1.99.1 Scan saved at 5:14:37 PM, on 9/18/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer … | |
hello i just recently got this trojan. i was using aol instant messenger and one of my friends had the trojan, and it automatically sent a message containing a link, asking to click the link and open a file, well stupid me totally forgot that it was an auto message … | |
Hey guys, i have a problem with yazifind popups. This is one persistent popup and i have no idea how to fix up this problem. I have scanned my computer with symantec antivirus, trend micro house call , spybot and adaware, all of which are unable to resolve this problem. … | |
Is this something I can do on my own? I have downloaded SpyBot and Ewido and taken out the temporary files and basically tried to do what you've asked of helpless souls in my situation. Thank you very much for continuing to take us by the hands and rid us … | |
I have an anoying virus called Home Search Assistent and Shopping Wizard. I went to Control Panel to try to remove them, and was sent to some web site that says if you download their uninstaller it will uninstall the peograms. I don't trust those web sites. I am woundering … | |
hi .. i have read a few threads .. it appears i am having the same prob. hope you can also help me. unable to open my document, my computer, and control panel. also downloaded hijack this and was unable to open zip file. i managed to download it in … | |
I think that the presence of the "Home Search Assistant", "Search Extender", & "Shopping Wizard" are causing my AIM to crash. I haven't noticed it causing problems anywhere else. Any ideas? Here is the HiJack Log: Logfile of HijackThis v1.99.0 Scan saved at 7:45:55 PM, on 03/10/2005 Platform: Windows XP … | |
Hello, When i go to start, settings, control panel, add remove programs i see two things in there called: search extender (which has the image of the msn buddy icon) & home search assistent (which has the image of the monitor, & a disc. when i try to remove "search … | |
desperately hoping someone can help me! I am on a small wireless network with a Linksys Router. I have windows xp pro. Saturday night, all is well. Sunday morning, can't get online. Network works fine, other computer on same network works fine. I run a virus scan and note multiple … | |
Hi, im really glad im able to be able to get help about this stuff, if you can help me i'd greatly appreciate it. Im running Windows 2000, i have microsoft anti-spyware for spyware removal, and Mcafee Real-time protection. I also have ad-aware, and i have spybot search and destroy. … | |
Can somebody please help me, I have been having many problems with my computer lately. Like disconnecting me from the internet, Aurora pop-ups, not being able to find out what DrPMon.dll is and my computer has been running very slow. I have been trying to read through some things and … | |
Hi, I see that you've helped others out on your website with the virus Trojan.Cachecachekit and I was hoping you could help me out too. From reading other threads you've asked users to post a HijackThis logfile. I've posted mine, let me know if you can help and if you … | |
my pc is affected by Hacktool.Rootkit virus. intially my remon.sys file from system32 folder was affected with Hacktool.Rootkit virus. after long time it is fine but now a new file is affected called spoolv.sys from sytem32 itself with the same,Hacktool.Rootkit virus. i m using windows XP i m using NAV2005 … | |
this is my thread plz analieze it to get rid of shopping wizard home search assisLogfile of HijackThis v1.99.1 Scan saved at 11:21:14 م, on 19/09/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\sm56hlpr.exe C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe … | |
I have this virus that opens a windows explorerer page if I dont move the mouse for a minute. IT then auto installs something called "elitebar trojan" Norton finds it eventually and deletes it but there must be another fiel becasue it keeps auto installing itself again and again. It … | |
I am running Widows 98, and was infected with kernels32.exe. I believe that this has been succesfully removed. However, when I switch on my computer, the computer tries to log on to Freeserve, a message pops up, "program already installed", and I lost my Freeserve Desktop Icon, but have replaced … | |
sever busy box pop's up and I have to click retry 20 times then i get an IE pop up. Here's my log file..can someone help me out? Logfile of HijackThis v1.99.1 Scan saved at 1:04:49 AM, on 9/26/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 … | |
Hello and greetings I have a computer using XP as the operating system and with SP 2 installed. I recently had a bad virus infection that thanks to the help from this website was able to remove and I am very grateful as the commercial virus removal programs couldnt help … |
The End.