10,784 Topics

Member Avatar for
Member Avatar for Patrik1st

Hello, I been to this forum a few times before for suggestions. This is my first post though. Just wondering if I'm infected any where. bTgX5m8a.exe and also a.exe really stand out to me thx for your help. Logfile of HijackThis v1.97.7 Scan saved at 10:24:05 AM, on 4/1/2004 Platform: …

Member Avatar for Patrik1st
0
176
Member Avatar for Grinler

[b]Dangerous Bug in HijackThis 1.97.7 Restoral Procedure[/b] I have searched everywhere to see if this has already been reported to Merjin, but I can not seem to find any reference to this, so am letting people know. VERY IMPORTANT. YOU MUST READ! Dangerous bug in HijackThis version 1.97.7 when restoring …

0
86
Member Avatar for Grinler

I have just created 3 new tutorials about Spyware and two of the more prevalent tools when dealing with them. The first is a primer on Spyware and hijackers and is a good read if you don't understand them. It can be found here: [url="http://www.bleepingcomputer.com/forums/index.php?showtutorial=41"]Understanding Spyware and Browser Hijackers[/url] The …

Member Avatar for Grinler
0
258
Member Avatar for jerm407

Logfile of HijackThis v1.97.7 Scan saved at 8:17:24 PM, on 3/31/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPSYSDRV.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\WINDOWS\OLEHELP.EXE C:\PROGRAM FILES\BACKWEB\BACKWEB\PROGRAM\BACKWEB.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\TEMP\RAR$EX01.898\HIJACKTHIS.EXE …

Member Avatar for crunchie
0
329
Member Avatar for logan

my ie 6 homepage was recently hijacked, and i got all sorts of popups.. i checked out this board and got cwshredder as well as adaware... ran them both and the homepage stopped getting hijacked, however, for some reason the majority of the time i cannot close explorer with the …

Member Avatar for TallCool1
0
282
Member Avatar for Adrix99

Hi guys... I was wondering if anyone could help me with my HijackThis log file.. Everytime I connect to the Internet I get searchcentral.cc as my start page, and I

Member Avatar for Adrix99
0
156
Member Avatar for Ron Wolpa

IE6 has been constantly hijacked ; this damn site : [url]http://www.lookfor.cc/index.php?p=37049[/url] , replaces the start page , obliging me to edit the register HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\start page ; It has happened almost every night since the 1st time a week ago ; An updated Spybot search and destroy has scanned the …

Member Avatar for ocnative1964
0
799
Member Avatar for gord_c

Hi there, I've been having a problem that when I load the task manager it flashes up and then shuts down. I also can't run regedit, renamed it from exe to com and I now can. Based on what I've found there's a virus messing things up. I've done the …

Member Avatar for crunchie
0
157
Member Avatar for unb0und

any help with what to fix would be great. thanks in advance. Logfile of HijackThis v1.97.7 Scan saved at 10:59:31 PM, on 3/25/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\CTHELPER.EXE C:\WINDOWS\System32\taskswitch.exe C:\Program …

Member Avatar for unb0und
0
179
Member Avatar for annna

Hello, :cry: Internet been terribly slow lately, I have run all anti virus/adwares/ online scans I could, and so far nothing has been found. I have just run hijackthis, does anyone see anything strange in the log? Maybe it has something to do with svchost processes? (all those issr.exe, lass.exe …

Member Avatar for BountyX
0
206
Member Avatar for layla

I am not sure if this is the right forum to post this but here goes:- I had MS Blaster which was shutting down all my programs. Now I find I have WORM AGOBOT.UY which seems to prevent me from running any virus software. It is in C:\windows\system32\msnmsgr.exe and I …

Member Avatar for layla
0
340
Member Avatar for Ron Wolpa

I have had problems with changed start page by this annoying res://mshp.dll/index.html#10213 ; Besides that every time I run Google.com a pop up ad comes up just after submiting any entry a new browser windows opens with this pesky search company : ([url]http://search-company.com/search.php?qq=kee+bird&pin=10213[/url]) Despite I have employed Hijackthis to clear …

Member Avatar for TallCool1
0
199
Member Avatar for roy66

Seems I have been infected with this dreaded worm. I have used the Hijackthis software....with some systems running and have come up with this. Logfile of HijackThis v1.97.7 Scan saved at 8:48:50 PM, on 4/03/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe …

Member Avatar for roy66
0
294
Member Avatar for daymonkey

I have the downloader-EV virus on my pc and I wonder if anyone knows ow to get it off i am a computer newbie so could you explain in detail thankyou

Member Avatar for daymonkey
0
161
Member Avatar for buddyb

Can someone tell me what I should fix and what I should leave alone? Thanks, BuddyB Logfile of HijackThis v1.97.7 Scan saved at 7:34:04 AM, on 3/14/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS.000\System32\smss.exe C:\WINDOWS.000\system32\winlogon.exe C:\WINDOWS.000\system32\services.exe C:\WINDOWS.000\system32\lsass.exe C:\WINDOWS.000\system32\svchost.exe C:\WINDOWS.000\system32\spoolsv.exe C:\WINDOWS.000\System32\svchost.exe C:\WINDOWS.000\system32\regsvc.exe C:\WINDOWS.000\system32\MSTask.exe …

Member Avatar for caperjack
0
137
Member Avatar for edgee

hi there, i've been hijacked... i read other posts, downloaded HijackThis, ran it and produced a log, i didn't want to delete anything until someone had a look at the log for me, the hijacking is quite agressive, every time a browser window opens you get pop-ups a plenty... anyway, …

Member Avatar for crunchie
0
243
Member Avatar for rauty

Hi everyone. I made a post a few weeks ago about deleting everything on my hijackthis log (I know... really stupid), but this is the log from what my computer is currently running, if anyone could help me out with what I need/what I have that I don't need, I …

Member Avatar for rauty
0
221
Member Avatar for krakpipe

All, I have read the thread and picked through my hijack log but after a reboot my home page keeps being reset to [url="http://www.searchdot.net"]www.searchdot.net[/url]. Below is a current hijack log - can someone please help me figure out where the stuff is that is resetting the page. I have also …

Member Avatar for krakpipe
0
106
Member Avatar for iaboy12

Hi! I am running windows 2000 and seem to be having some fairly common problems. I get the GStartup error, random restarts, freezing, and just lots of program errors. I was wondering if somebody could take a look at my log and tell me if i can fix it. also, …

Member Avatar for caperjack
0
203
Member Avatar for daphish

Still tryin to figgure out what this is. Imagine its spyware of some kind dunno what. Logfile of HijackThis v1.97.7 Scan saved at 1:37:34 AM, on 2/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program …

Member Avatar for daphish
0
692
Member Avatar for Ron Wolpa

since the IE6 browser was hijacked and subsequently cleared up by means Hijackthis , I have noticed that dialogue boxes , check boxes and radio buttons work very slowly ; this message had to be typed in a text editor because it would have taken a while to do it …

Member Avatar for caperjack
0
130
Member Avatar for xena

I have win/98 system and as I go online and try to get into my mail or into explorer etc the pages cannot be opened as it cannot find server. When I go to close the program a message appears stating that "WUPDATER" is not responding.I have to shut down …

Member Avatar for pgwolfe
0
343
Member Avatar for dragonlogic

Steam :sad: Please give me some advice. I downloaded hijackthis and the log is pasted below: [font=Courier New]Logfile of HijackThis v1.97.7[/font] [font=Courier New]Scan saved at 1:28:00 PM, on 2/2/2004[/font] [font=Courier New]Platform: Windows XP (WinNT 5.01.2600)[/font] [font=Courier New]MSIE: Internet Explorer v6.00 (6.00.2600.0000)[/font] [font=Courier New]Running processes:[/font] [font=Courier New]C:\WINDOWS\System32\smss.exe[/font] [font=Courier New]C:\WINDOWS\system32\winlogon.exe[/font] [font=Courier New]C:\WINDOWS\system32\services.exe[/font] …

Member Avatar for caperjack
0
155
Member Avatar for drummerboy

hi all i read your advise on these pages and you guys are doing a great service glad to see theres still decent peeps out there. Enough with the creeping.LOL Anyway i came across this site as im having probs with ie6 being hijacked im using the usual precautions spybot,zonealarm …

Member Avatar for drummerboy
0
245
Member Avatar for ower

This happend to me tonight, I've followed the suggestions in here and ran [url="http://www.merijn.org/files/cwshredder.zip"]http://www.merijn.org/files/cwshredder.zip[/url] 1st, and this is my current HJT log.. I think I've cleared it up but I just want someone more in the know to make sure I didn't miss anything :) Thanks all! Logfile of HijackThis …

Member Avatar for ower
0
101
Member Avatar for pisconi

I don't find a "new post" to click There is post reply and quick reply but danged if i see a new post any how i posted this log elsewhere in another forum and now here please let me know if there is anything in this log i need to …

Member Avatar for Dani
0
179
Member Avatar for jensensd

Hello all... I posted this in another forum but it seems those in this forum would be best able to help me out. I have the same issue with the "lookfor" spyware. Please help me to fix this problem. My Hijack.log is below. thanks in advance! Logfile of HijackThis v1.97.7 …

Member Avatar for steamwiz
0
127
Member Avatar for Anomaly

I am not too familiar with the HiJack This! program, and would like someone with experience to instruct me on what is safe to delete: Logfile of HijackThis v1.97.7 Scan saved at 10:28:05 PM, on 12/29/2003 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: …

Member Avatar for caperjack
0
164
Member Avatar for jdonisthorpe

I am getting crazy amounts of pop ups. I run ad-aware daily. Can anyone help? Thank you so much! Here is my log: Logfile of HijackThis v1.97.7 Scan saved at 4:23:49 PM, on 12/17/2003 Platform: Windows 2000 SP3 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe …

Member Avatar for caperjack
0
505
Member Avatar for Clusen

I'm not that much of a computer brainer... so here goes: My computer has been running really slowly lately (I have defragmented it) - and I've got a lot of running processes. Could any of you tell me if you see anything strange in this log I created using HiJackThis? …

Member Avatar for Paladine
0
208
Member Avatar for champ57

Can someone please help me determine what items I should eliminate, as they are likely responsible for my homepage being redirected to an unknown site .... as well as the abundance of pop-ups. I have Google toolbar with pop_up blocker but that does not prevent these new breed of pop_ups …

Member Avatar for TallCool1
0
145
Member Avatar for Sourdust

Can anybody help with this to tell me what I should delete? Some look a bit iffy to me and I've had a bit of a hacker scare so I want everything cleaned out. Thanks for any help Sourdust Logfile of HijackThis v1.97.2 Scan saved at 19:55:08, on 13/11/03 Platform: …

Member Avatar for Sourdust
0
225
Member Avatar for Ron Wolpa

[COLOR=Navy][B]Some days ago my IE6 was hijacked. Spybot scanned and cleared the system , lefting as start page a blank; However the buttons that configure the start page kept disabled ; By editing manually the register (HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main) I was able to change start page. I

Member Avatar for caperjack
0
194
Member Avatar for www.bitsel.com

Hi there , After I have demoted my windows 2000 advanced server from Domain Controller to a member server I decided to use DCPROMO again , to Promote that server to a DC again. It worked well . But : when users log in to the Domain , they have …

Member Avatar for feigned
0
121

The End.