10,784 Topics
![]() | |
Hello, I been to this forum a few times before for suggestions. This is my first post though. Just wondering if I'm infected any where. bTgX5m8a.exe and also a.exe really stand out to me thx for your help. Logfile of HijackThis v1.97.7 Scan saved at 10:24:05 AM, on 4/1/2004 Platform: … | |
[b]Dangerous Bug in HijackThis 1.97.7 Restoral Procedure[/b] I have searched everywhere to see if this has already been reported to Merjin, but I can not seem to find any reference to this, so am letting people know. VERY IMPORTANT. YOU MUST READ! Dangerous bug in HijackThis version 1.97.7 when restoring … | |
I have just created 3 new tutorials about Spyware and two of the more prevalent tools when dealing with them. The first is a primer on Spyware and hijackers and is a good read if you don't understand them. It can be found here: [url="http://www.bleepingcomputer.com/forums/index.php?showtutorial=41"]Understanding Spyware and Browser Hijackers[/url] The … | |
Logfile of HijackThis v1.97.7 Scan saved at 8:17:24 PM, on 3/31/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPSYSDRV.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\WINDOWS\OLEHELP.EXE C:\PROGRAM FILES\BACKWEB\BACKWEB\PROGRAM\BACKWEB.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\TEMP\RAR$EX01.898\HIJACKTHIS.EXE … | |
my ie 6 homepage was recently hijacked, and i got all sorts of popups.. i checked out this board and got cwshredder as well as adaware... ran them both and the homepage stopped getting hijacked, however, for some reason the majority of the time i cannot close explorer with the … | |
Hi guys... I was wondering if anyone could help me with my HijackThis log file.. Everytime I connect to the Internet I get searchcentral.cc as my start page, and I | |
IE6 has been constantly hijacked ; this damn site : [url]http://www.lookfor.cc/index.php?p=37049[/url] , replaces the start page , obliging me to edit the register HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\start page ; It has happened almost every night since the 1st time a week ago ; An updated Spybot search and destroy has scanned the … | |
Hi there, I've been having a problem that when I load the task manager it flashes up and then shuts down. I also can't run regedit, renamed it from exe to com and I now can. Based on what I've found there's a virus messing things up. I've done the … | |
any help with what to fix would be great. thanks in advance. Logfile of HijackThis v1.97.7 Scan saved at 10:59:31 PM, on 3/25/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\CTHELPER.EXE C:\WINDOWS\System32\taskswitch.exe C:\Program … | |
Hello, :cry: Internet been terribly slow lately, I have run all anti virus/adwares/ online scans I could, and so far nothing has been found. I have just run hijackthis, does anyone see anything strange in the log? Maybe it has something to do with svchost processes? (all those issr.exe, lass.exe … | |
I am not sure if this is the right forum to post this but here goes:- I had MS Blaster which was shutting down all my programs. Now I find I have WORM AGOBOT.UY which seems to prevent me from running any virus software. It is in C:\windows\system32\msnmsgr.exe and I … | |
I have had problems with changed start page by this annoying res://mshp.dll/index.html#10213 ; Besides that every time I run Google.com a pop up ad comes up just after submiting any entry a new browser windows opens with this pesky search company : ([url]http://search-company.com/search.php?qq=kee+bird&pin=10213[/url]) Despite I have employed Hijackthis to clear … | |
Seems I have been infected with this dreaded worm. I have used the Hijackthis software....with some systems running and have come up with this. Logfile of HijackThis v1.97.7 Scan saved at 8:48:50 PM, on 4/03/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe … | |
I have the downloader-EV virus on my pc and I wonder if anyone knows ow to get it off i am a computer newbie so could you explain in detail thankyou | |
Can someone tell me what I should fix and what I should leave alone? Thanks, BuddyB Logfile of HijackThis v1.97.7 Scan saved at 7:34:04 AM, on 3/14/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS.000\System32\smss.exe C:\WINDOWS.000\system32\winlogon.exe C:\WINDOWS.000\system32\services.exe C:\WINDOWS.000\system32\lsass.exe C:\WINDOWS.000\system32\svchost.exe C:\WINDOWS.000\system32\spoolsv.exe C:\WINDOWS.000\System32\svchost.exe C:\WINDOWS.000\system32\regsvc.exe C:\WINDOWS.000\system32\MSTask.exe … | |
hi there, i've been hijacked... i read other posts, downloaded HijackThis, ran it and produced a log, i didn't want to delete anything until someone had a look at the log for me, the hijacking is quite agressive, every time a browser window opens you get pop-ups a plenty... anyway, … | |
Hi everyone. I made a post a few weeks ago about deleting everything on my hijackthis log (I know... really stupid), but this is the log from what my computer is currently running, if anyone could help me out with what I need/what I have that I don't need, I … | |
All, I have read the thread and picked through my hijack log but after a reboot my home page keeps being reset to [url="http://www.searchdot.net"]www.searchdot.net[/url]. Below is a current hijack log - can someone please help me figure out where the stuff is that is resetting the page. I have also … | |
Hi! I am running windows 2000 and seem to be having some fairly common problems. I get the GStartup error, random restarts, freezing, and just lots of program errors. I was wondering if somebody could take a look at my log and tell me if i can fix it. also, … | |
Still tryin to figgure out what this is. Imagine its spyware of some kind dunno what. Logfile of HijackThis v1.97.7 Scan saved at 1:37:34 AM, on 2/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program … | |
since the IE6 browser was hijacked and subsequently cleared up by means Hijackthis , I have noticed that dialogue boxes , check boxes and radio buttons work very slowly ; this message had to be typed in a text editor because it would have taken a while to do it … | |
I have win/98 system and as I go online and try to get into my mail or into explorer etc the pages cannot be opened as it cannot find server. When I go to close the program a message appears stating that "WUPDATER" is not responding.I have to shut down … | |
Steam :sad: Please give me some advice. I downloaded hijackthis and the log is pasted below: [font=Courier New]Logfile of HijackThis v1.97.7[/font] [font=Courier New]Scan saved at 1:28:00 PM, on 2/2/2004[/font] [font=Courier New]Platform: Windows XP (WinNT 5.01.2600)[/font] [font=Courier New]MSIE: Internet Explorer v6.00 (6.00.2600.0000)[/font] [font=Courier New]Running processes:[/font] [font=Courier New]C:\WINDOWS\System32\smss.exe[/font] [font=Courier New]C:\WINDOWS\system32\winlogon.exe[/font] [font=Courier New]C:\WINDOWS\system32\services.exe[/font] … | |
hi all i read your advise on these pages and you guys are doing a great service glad to see theres still decent peeps out there. Enough with the creeping.LOL Anyway i came across this site as im having probs with ie6 being hijacked im using the usual precautions spybot,zonealarm … | |
This happend to me tonight, I've followed the suggestions in here and ran [url="http://www.merijn.org/files/cwshredder.zip"]http://www.merijn.org/files/cwshredder.zip[/url] 1st, and this is my current HJT log.. I think I've cleared it up but I just want someone more in the know to make sure I didn't miss anything :) Thanks all! Logfile of HijackThis … | |
I don't find a "new post" to click There is post reply and quick reply but danged if i see a new post any how i posted this log elsewhere in another forum and now here please let me know if there is anything in this log i need to … | |
Hello all... I posted this in another forum but it seems those in this forum would be best able to help me out. I have the same issue with the "lookfor" spyware. Please help me to fix this problem. My Hijack.log is below. thanks in advance! Logfile of HijackThis v1.97.7 … | |
I am not too familiar with the HiJack This! program, and would like someone with experience to instruct me on what is safe to delete: Logfile of HijackThis v1.97.7 Scan saved at 10:28:05 PM, on 12/29/2003 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: … | |
I am getting crazy amounts of pop ups. I run ad-aware daily. Can anyone help? Thank you so much! Here is my log: Logfile of HijackThis v1.97.7 Scan saved at 4:23:49 PM, on 12/17/2003 Platform: Windows 2000 SP3 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe … | |
I'm not that much of a computer brainer... so here goes: My computer has been running really slowly lately (I have defragmented it) - and I've got a lot of running processes. Could any of you tell me if you see anything strange in this log I created using HiJackThis? … | |
Can someone please help me determine what items I should eliminate, as they are likely responsible for my homepage being redirected to an unknown site .... as well as the abundance of pop-ups. I have Google toolbar with pop_up blocker but that does not prevent these new breed of pop_ups … | |
Can anybody help with this to tell me what I should delete? Some look a bit iffy to me and I've had a bit of a hacker scare so I want everything cleaned out. Thanks for any help Sourdust Logfile of HijackThis v1.97.2 Scan saved at 19:55:08, on 13/11/03 Platform: … | |
[COLOR=Navy][B]Some days ago my IE6 was hijacked. Spybot scanned and cleared the system , lefting as start page a blank; However the buttons that configure the start page kept disabled ; By editing manually the register (HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main) I was able to change start page. I | |
Hi there , After I have demoted my windows 2000 advanced server from Domain Controller to a member server I decided to use DCPROMO again , to Promote that server to a DC again. It worked well . But : when users log in to the Domain , they have … |
The End.