10,784 Topics

Member Avatar for
Member Avatar for DaveSW

I've been cleaning this log up in accordance with the tutorial file from merijn, but most of the entries keep coming back. Adaware cleaned 1157 entries off this earlier, and Spybot a further 50... Can someone take a look and tell me what's reinstating all these problems? Logfile of HijackThis …

Member Avatar for DaveSW
0
97
Member Avatar for Omni

Is there any other spyware detect software other then the following (that I already have installed on my system) [B]->Lavasoft Adaware 6 ->Spybot - Search and Destroy ->Spyware Blaster[/B] I seem to have spyware components that norton picks up on but that my current spyware engines dont remove. Is there …

Member Avatar for Omni
0
133
Member Avatar for gecko614

hi guys, im fixing a PC, and it wont let me gain access to any .exe file, the only thing i can notice that could cause this problem is a reg key called 'restrictanonymous' the type is 'reg_dword' and the vaue is '0x00000001 (1)' every time i try to delete, …

0
81
Member Avatar for caperjoe

I've had these three *@$^%'s on my system for about a month now and everything I try to remove them fails. In safe mode I run CWShredder, Ad-Aware, Spybot S&D, AboutBuster, and try to pick them out with RegLite, But they immediately reappear on startup. When I try to Unregister …

Member Avatar for PoA
0
89
Member Avatar for Toronaga

Hi Before i post this message , i read and i try all the answers everybody give.And my problem is still there. My problems My internet is very slow.And after a one or two site in ie , i receive a error message "page not found".So i need to deconnect …

Member Avatar for mikeandike22
0
103
Member Avatar for Zohar818

Dear Group, I have two problems which I think are related but who knows...here's the first problem, my step-daughter downloaded a file from her boyfriend using trillian and then opened it trusting it was safe...a few days later the IE browser started slowing up. [We're on ADSL and the browser …

Member Avatar for Zohar818
0
269
Member Avatar for Sphyenx

Logfile of HijackThis v1.98.2 Scan saved at 9:55:14 PM, on 9/1/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MSTASK.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\STARTER.EXE C:\WINDOWS\SYSTEM\DESK98.EXE C:\WINDOWS\SYSTEM\ATIPTAXX.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE C:\PROGRAM FILES\LINKSYS\WMP11 CONFIG UTILITY\WMP11CFG.EXE …

Member Avatar for DMR
0
95
Member Avatar for Dani

There have been a slew of people lately who have been emailing me and posting that they cannot post in the IE or Security forums. When they click submit, they get the message: "The forum specified does not exist." I have looked into the problem and, unfortunately, it is a …

Member Avatar for antioed
0
666
Member Avatar for serrano

Hi, Thanks for your service. My computer is running really slow and I have used spybot and ad-aware to clean things up..it still is not working as it was. Here's my Hijackthis log. Could you please tell me what I should delete. I especaillly do not want repeated pop-up ads …

Member Avatar for DuncanIdaho
0
158
Member Avatar for sbstandards

I've got a friend whose computer (~2.1Ghz Pent, 256MB I believe) is like molasses when he's using a browser. I did a bandwidth test and he's at 520bps which sounds resonable for his brand of DSL. Apparently it's no better in any particular browser. Attached is his Hijack This log. …

Member Avatar for crunchie
0
220
Member Avatar for agal82

I keep getting this message, JUGS BODY.EXE . SO here is my log. Logfile of HijackThis v1.98.0 Scan saved at 5:26:03 PM, on 8/27/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\ptsnoop.exe C:\WINDOWS\LOADQM.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM …

Member Avatar for crunchie
0
291
Member Avatar for shpusalk

Hi, All I rarely use IE and in P2P softwares I use edonley2000. But somehow I got prosearching.com. It has caused me loads of trouble. It is deleting my email accounts from Mozilla mail. Constantly adding Casino and what not on my desktop. It is just causing havoc. I am …

Member Avatar for deonnanicole
0
294
Member Avatar for 2sweet

ok, so i am addicted to my AIM. and all of the sudden i cant send messages. it logs in fine, i get my buddy list, and people can send me messages....but i cant send messages to anyone, it wont let my type anything into the box. i tryed removing …

Member Avatar for mikeandike22
0
133
Member Avatar for cawwac

I get a lot of popups - even when I don't have Internet Explorer open. When on the internet if the website cannot be found it defaults to Incredifind. I found the IncrediFindBHOLog file in my temporary folder but I can't delete it. It says "Cannot delete IncrediFindBHOLog. There has …

Member Avatar for Bear
0
113
Member Avatar for Xev0luti0nXx

Can someone please point me in the right direction here? I have run all of the progs adaware/spybot s&d/symantec/CWShredder/APM/Hijack this to no avail. I've gone into and read up on all the solutions for the problem but I still cant get it off this computer. Here is a post of …

Member Avatar for Xev0luti0nXx
0
156
Member Avatar for nophin

Please help me with this hijacking Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe C:\WINDOWS\System32\S3tray2.exe C:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\WINDOWS\StartupMonitor.exe C:\Program Files\WindowsSA\omniscient.exe C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe c:\progra~1\mcafee.com\vso\mcvsescn.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe c:\progra~1\intern~1\iexplore.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\aim\aim.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\gearsec.exe c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\wanmpsvc.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\WINDOWS\system32\svchost.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe c:\progra~1\mcafee.com\vso\mcvsftsn.exe C:\WINDOWS\System32\wuauclt.exe C:\Program …

Member Avatar for crunchie
0
139
Member Avatar for Mystic

My homepage keeps getting reset to [url]http://213.159.117.134/index.php[/url] Plz help Here is HiJackThis logfile: Logfile of HijackThis v1.98.2 Scan saved at 7:22:40 PM, on 8/30/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\System32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe …

Member Avatar for crunchie
0
199
Member Avatar for kungfulosophy

several programs were installed on my computer when i try to open them with command prompt they display the numbers in the column next to them EGR55.BAT 166890 RHH49.COM 81598 LWB50.EXE 50378 if i try to open them w/ windows (xp version) the following message is displayed. THE NTVDM CPU …

Member Avatar for DuncanIdaho
0
142
Member Avatar for chuckt

I have a program that runs with windows start up, that I do not know what it is or what it does. I am afraid that it is some form of spyware, or virus. The program name is "lsgj.exe", and even if I do ctrl-alt-del, and end task on it, …

Member Avatar for crunchie
0
36
Member Avatar for paulodowd

[B]Since last week I have not been able to load secure websites. This is my logfile [/B] [/B] I have also included a second logfile since adaware was used. What files should i delete. I would appreciate any help. Thanks Paul Logfile of HijackThis v1.98.2 Scan saved at 14:43:40, on …

Member Avatar for crunchie
0
165
Member Avatar for z3r0

I'm seriously worried because spybot Sd found Roboform spyware. I use it and payed mi license of Roboform... is that really spyware? Heres what SPybot SD says: AI Roboform: Class ID (Registry key, nothing done) HKEY_USERS\S-1-5-21-73586283-1645522239-725345543-1003\Software\Classes\CLSID\{724d43a1-0d85-11d4-9908-00400523e39a} AI Roboform: Class ID (Registry key, nothing done) HKEY_CLASSES_ROOT\CLSID\{3AB6A2BE-5A44-11D3-ABEE-EAF45F643446} AI Roboform: Class ID (Registry …

Member Avatar for crunchie
0
204
Member Avatar for Brians

I have the message windows /system 32/bridge.dll not found at the start of the windows boot up. I have ran adaware then rebooted. I have then downloaded hijack and created the log below. Please help me to remove the culprit(s). Many thanks.. Brian Logfile of HijackThis v1.98.2 Scan saved at …

Member Avatar for alc6379
0
143
Member Avatar for mikeandike22

ok first off before you post a hijack this log you should probably do a basic spyware/virus scan with ad-aware, spybot S&D, and you anti virus software software. Also make sure that when fixing problems to back up the files either via system restore or hijackthis will do it for …

Member Avatar for mikeandike22
0
315
Member Avatar for poody56

I couldnt take all of the popups and redirecting with ads234, so i saw all the help you people gave here. Here is my HiJack This! log: Logfile of HijackThis v1.97.7 Scan saved at 6:15:41 PM, on 8/31/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: …

Member Avatar for mikeandike22
0
177
Member Avatar for acat

I've been looking at other posts and decided perhaps someone could help me get rid of prosearching.com from my computer. I have run Ad-a-Ware and SpyBot. It gets removed but as soon as I get back on the internet, it's back again. I ran hijack this and here is the …

Member Avatar for hostmoon
0
247
Member Avatar for mike_m_14@hotma

I've been having trouble with internet explorer. I get an error that says we are sory for the inconvenience but internet explorer has to close. I always send the report but nothing happens. So I ran Hijack This, can anyone review it for me? Thank you. Logfile of HijackThis v1.98.2 …

Member Avatar for mike_m_14@hotma
0
331
Member Avatar for DuncanIdaho

I'm having no problems, all is well, but I have this hijack log, and I figured I might as well let you all have a gander at it. Logfile of HijackThis v1.98.2 Scan saved at 3:56:42 PM, on 8/31/2004 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 …

Member Avatar for DuncanIdaho
0
109
Member Avatar for CincinnatiMan

Hey experts. I hope you can help with this. I have a Dell CPX laptop which keeps locking up due to the CPU usage hitting 100%. It has a pentium 3 498 MHz processor and 128 MB of RAM. Out of the 18.6GB of storage on my C drive I …

Member Avatar for CincinnatiMan
0
142
Member Avatar for Darkone4ever

For awile now whenever I start IE explorer it goes to the blank site that i usually use but then it changes right away and goes to this "http://ssearch.biz/?wmid=1010" page and it is some bogus spyware remover site or w/e. and when i click on links that open a new …

Member Avatar for Darkone4ever
0
203
Member Avatar for jonnymaun

Will someone please look at my hijack list and tell me what to remove? I have run ad-aware and spybot, they find it but it keeps coming back. Logfile of HijackThis v1.98.2 Scan saved at 4:33:56 PM, on 8/24/2004 Platform: Windows 2000 SP3 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 (6.00.2600.0000) …

Member Avatar for jonnymaun
0
162
Member Avatar for svikik

Hello! I've checked in this forum what to do with bridge.dll , I've downloaded adware ,Spybot, HijackThis and scaned with it my comp. The message at start "...bridge.dll" still exists.Iwould be very happy if somebody could help me to understand what to do with the HijackThis code. This is the …

Member Avatar for svikik
0
221
Member Avatar for robinrofkar

Things just seem to be getting longer and longer every day. i dont know what he gets into. Logfile of HijackThis v1.97.7 Scan saved at 11:34:42 PM, on 8/30/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe …

Member Avatar for DMR
0
108
Member Avatar for flowerman

My IE has been hijacked. I have run AdAware, spybot, Spyware blaster, CW Shredder, Aluria Spyware Eliminator, Norton. Here's my log if anyone can help: Logfile of HijackThis v1.97.7 Scan saved at 2:52:32 PM, on 7/4/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: …

Member Avatar for DMR
0
409
Member Avatar for loftey

:rolleyes: Hi, iam having this problem with my computer. I cant seem to fix this error. Can anyone help. Thanks

Member Avatar for DuncanIdaho
0
252
Member Avatar for ebro

Logfile of HijackThis v1.98.2 Scan saved at 20:44:49, on 27/08/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\GSICON.EXE C:\WINDOWS\System32\dslagent.exe C:\WINDOWS\System32\RUNDLL32.EXE C:\Documents and Settings\Admin\Desktop\New Folder\SpySweeper.exe C:\Documents and Settings\Admin\Desktop\New Folder (2)\HijackThis.exe C:\Program Files\Internet Explorer\iexplore.exe …

Member Avatar for crunchie
0
99
Member Avatar for Larry Eustacy

I've got it; can't get rid of it. Norton directions aren't clear enough to follow. tried CWShredder instructions to no avail I use spybot & adaware I have Hijack this log is as follows: Any help is appreciated StartupList report, 8/29/2004, 9:24:12 PM StartupList version: 1.52 Started from : C:\Documents …

Member Avatar for crunchie
0
109
Member Avatar for jackoutlawz

Hi I have a problem when I start IE there's a toolbar under my adress bar and there's a another one below with music,casino, investing ,travel, mortage and make money logo. When I click on them they send me here [url]http://srch.lop.com/search/search.cgi?affid=66&s=mortgage[/url] can you help me get rid of that here's …

Member Avatar for crunchie
0
114
Member Avatar for onebtwo

THis is what i got when using hiJackthis..... ogfile of HijackThis v1.98.2 Scan saved at 8:12:51 PM, on 8/28/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Unable to get Internet Explorer version! Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\INETSRV\INETINFO.EXE C:\PROGRAM FILES\COMMON FILES\WINTOOLS\WTOOLSA.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\PROGRAM FILES\PLUS!\VIRUSCAN\VSHWIN32.EXE C:\WINDOWS\SYSTEM\MSDTCW.EXE C:\WINDOWS\SYSTEM\RPCSS.EXE C:\PROGRAM FILES\COMMON FILES\WINTOOLS\WSUP.EXE …

Member Avatar for crunchie
0
214
Member Avatar for Mrhegge

Dear [anyone who can help me out] I'm in some serious need of help currently. I recently transfered to a large university an am now in computer virus hell. The universities network was plagued by all sorts of malware, spyware an the lot. My decent pc that never gave me …

Member Avatar for crunchie
0
135
Member Avatar for sunflower0475@c

[B]this is what my hijack this said and I'm having page connot be displayed on page ads[/B] Logfile of HijackThis v1.98.2 Scan saved at 7:44:12 AM, on 8/29/2004 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe …

Member Avatar for crunchie
0
77
Member Avatar for Starscream

Hi everyone, I've had a run in with the bridge.dll spyware and I heard this was the place to come for fixin it. I've run the latest adaware, virus scans etc. to clear it up as best I can, but I still get the "run.dll" pop-up when I start up. …

Member Avatar for Starscream
0
108
Member Avatar for gmg2u

My AV software detected a trojan in C:\System Volume Information\.restore{F2681A7D-91E5-401A-AC8B-01535799DC0}1RP220\A0059613.EXE but access to this file is denied to me & my AV software. Is there any way to fix it? I can't seem to find the name of it now.

Member Avatar for crunchie
0
71
Member Avatar for mikeandike22

Logfile of HijackThis v1.98.2 Scan saved at 9:17:26 PM, on 8/26/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\CTsvcCDA.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\w32usb2.exe C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE C:\WINDOWS\System32\CTHELPER.EXE C:\WINDOWS\System32\winprocessor.exe C:\WINDOWS\System32\Systmesy.exe C:\WINDOWS\System32\syscfg32.exe C:\WINDOWS\System32\Microsoftx.exe …

Member Avatar for crunchie
0
460
Member Avatar for Ashley

Anyone know what this People On Page thing is? It always shows up on my Ad-aware scan, but won't go away. Could it have something to do with my IE not working right?

Member Avatar for Ashley
0
263
Member Avatar for Yzk

Hello there! Thanks for coming to this thread! As some of you know I have been having trouble with a virus lately which was causing my computer to do the strangest things. When I restarted I had a program called "reboot" in my startup menu which what I think was …

Member Avatar for Yzk
0
140
Member Avatar for l33t

How do i clean aboutblank thing? i got the hijack this log attached. thanks! Logfile of HijackThis v1.97.7 Scan saved at 6:27:57 PM, on 8/26/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\TYPELIB.DLL:rmzdo C:\PROGRA~1\MICROS~2\Office\OUTLOOK.EXE C:\WINDOWS\explorer.exe …

Member Avatar for l33t
0
159
Member Avatar for ArtChess

Here is the log file from hijack this,.. please advise what I should check off and what I shuold do? My desktop is gone is has Warning Your in Danger a htlm file on file://C:\WINDOWS\Web\desktop.html I can't get rid of it.. GRRRR Please help. Thanks in advance... -Artchess

Member Avatar for crunchie
0
88
Member Avatar for weller66

For weeks I have been trying to reset my IE home page from About:Blank, which moved in on me, with no luck. I am a bit of a rookie when it comes to this and am in serious need of help.

Member Avatar for crunchie
0
129
Member Avatar for cargenius42

Ok, very odd........... whenever im browsing through the unanswered threads part of this site...... McAfee V-Shield brings up a "TROJAN PROGRAM FOUND." Theres actually two of them but i'll explain this one first. The first warning says that the downloaded file is SEARCH[43].HTML and the trojan name is Exploit-URLSpoof.gen it …

Member Avatar for alc6379
0
117
Member Avatar for Amanda

Hey guys, It seems I am having a little trouble with windows, I am running XP. When I try to shut down I get the error message that the RUNDLL32 file will not close down. Please tell me what I need to do to get the issue fixed! Thanks, Amanda …

Member Avatar for crunchie
0
229

The End.