12,141 Topics

Member Avatar for
Member Avatar for Caveman

Everytime I start Internet Explorer I receive this homepage res://dkahp.dll/index.html#37049 This will set off a chain of events by causing .EXE's to run and adding them to my registry. I have attempted to delete / modify registry settings & files, but the problem comes back everytime I start Internet Explorer. …

Member Avatar for Caveman
0
121
Member Avatar for manicolo

I have downloaded a free screensaver from the web lately and have caused problems in the wupdater.exe file I have deleted all traces of this screensaver now but i still get program not responding from the wupdater.exe file every time i logoff from my PC Any idea of how i …

Member Avatar for DMR
0
91
Member Avatar for atky2004

Hello. two days ago on start up of my p.c, the error WINDOWS\system32\bridge.dll occurs. Having read up on this error, i have done the following. Installed and updated Ad-ware 6.0, then removed eveything it found Installed Spy-Bot and removed everything it found. I then did the online virus check @ …

Member Avatar for crunchie
0
98
Member Avatar for tonyet

Hello, I am having the same old Home Page Hijacking problems that others are having. I have tried altering the Registry but it always re-sets itself to the about:blank address which opens up a web page called "Search For". I would certainly appreciate any help. Here is my Hijackthis log. …

Member Avatar for crunchie
0
152
Member Avatar for nilsouille2003

PHello, I'm a beginner with pC, in that I used to use other people's PC before, so it is the first time I have to deal with a virus. I apparently have an adware+virus: the Homepage on Internet Explorer is always"res://qcsmj.dll/index.html#37049" (the letters qcsmj change sometimes, I think when I …

Member Avatar for crunchie
0
215
Member Avatar for z3r0

Cleaned with ad aware my pc and found 1 object: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main19-06-2004 12:48:06 a.m.Possible Browser Hijack attempt when ad aware removes it, My "guardian" SpywareGuard says someone is trying to change the value of home page, invites to me to keep the old (the one I really use) What happens? …

Member Avatar for crunchie
0
79
Member Avatar for motopsycho

Hi, this thread is just a repost of my post that a mod asked me to post in here (I was posting it the Win98/Me forum). I guess it's only appropriate since it's security related. Sorry if someone had posted about the "cniaezi.exe" bug already. [repost] ================== I did have …

Member Avatar for crunchie
0
171
Member Avatar for A-train

i noticed that my homepage and search pages were changing all the time so i checked for the bridge.dll file. i found it.. but now i'm unsure as to what to do to get rid of it... i performed a hijackthis log and this is what i found: Logfile of …

Member Avatar for crunchie
0
126
Member Avatar for nosfree

my homepage has been hijacked by "home search" lookfor.cc here's my hijackthis log file.. Logfile of HijackThis v1.97.7 Scan saved at 3:46:32 PM, on 6/18/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLACSD.EXE C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe C:\Program …

Member Avatar for crunchie
0
174
Member Avatar for jwalker

OK -I've run Spybot and AdAware, and done the online virus scan at trendmicro.com. We also have Symantec virus protection that runs daily. I got slammed a while back - hijacked home page, tons of popups, etc., and I've cleaned most of it up but I cannot search from my …

Member Avatar for crunchie
0
78
Member Avatar for steviegee16

my pc has an error with WINDOWS\system32\MSA64CHK.dll my hijack log is Logfile of HijackThis v1.97.7 Scan saved at 21:43:57, on 09/06/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe …

Member Avatar for crunchie
0
146
Member Avatar for Tripod 76

Hi and mega thanks to any repliers. I have had a hell of a time with recent bugs in the system...The latest is "prosearching.com" My log: Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe C:\WINDOWS\System32\CTSvcCDA.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe C:\Program Files\McAfee\McAfee VirusScan\Vshwin32.exe C:\Program …

Member Avatar for crunchie
0
233
Member Avatar for whongtat

Please help. Thanks! Logfile of HijackThis v1.97.7 Scan saved at 17:33:57, on 18/06/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\PROGRA~1\Iomega\System32\AppServices.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE …

Member Avatar for crunchie
0
63
Member Avatar for ajelliott

Older system running Windows 98 Ran CWshreadder no problems AVG sees Dyfica Trojan without being able to fix it. Ran Spybot and fixed 17 problems. Please analyse her HJT log. :lol: Logfile of HijackThis v1.97.7 Scan saved at 12:07:40 PM, on 6/13/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet …

Member Avatar for ajelliott
0
248
Member Avatar for Dementia

[QUOTE=Piddyful]I would be downloading and running Ad-Aware and Spybots Search & Destroy, two of the best malware/spyware scanning programs out there. Just do the web update to get current reference first.[/QUOTE]I downloaded both of these, and though they did show up a bunch a spyware.... that was not the problem. …

Member Avatar for Dementia
0
122
Member Avatar for marijana

hello! i had a massage: "missing bridge.dll" at startup. i red some posts here, downloaded HiJackThis, and fixed one file. Now, i do not recieve that message any more ;) Please, i do not know do i have any more problems, so , here is my log file: Logfile of …

Member Avatar for marijana
0
146
Member Avatar for scgolffreak

My homepage keeps changing to "res://jxtgk.dll/index.html#37049". Also when I reboot the MS Office XP installer comes up and seems like its trying to install IE. I've tried reinstalling IE. I've used CWShredder, Adaware, Spybloc, and Hijack. Here are the Hijack results: Logfile of HijackThis v1.97.7 Scan saved at 3:31:54 PM, …

Member Avatar for caperjack
0
254
Member Avatar for Brad Gibson

whenever I try to log on to my home address ( MSN ) it has been changed and I have to go to internet options and change it back to MSN> How do I stop this from happening?? :evil:

Member Avatar for crunchie
0
74
Member Avatar for vrajesh

Hi, I am dont have much knowledge of these errors, so it would be very helpful if someone could help me get rid of this bridge.dll error. I ran hijack and this is my log: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Network Associates\VirusScan\avsynmgr.exe C:\Program Files\Common Files\Microsoft …

Member Avatar for Yzk
0
147
Member Avatar for SylviaC

I will start this thread by saying you all are awesome! I have been able to clean it each time it shows with spybot, adaware, cwshredder and hijack this (guessing at what to delete myself despite all the warnings not to... I know, I know :o ), but it keeps …

Member Avatar for crunchie
0
273
Member Avatar for flyerorange

I run Windows 98. Yesterday, I cleaned out a bunch of suspicious files, on Norton Internet Security 2004 recommendation. The Updater file was one of them. I deleted all the updater and wupdater files. It was suggested that I eliminate all entries of the same file in the registry, as …

Member Avatar for crunchie
0
80
Member Avatar for ArtChess

Caperjack has helped me w/ my desktop and now I am 'bout to run hijackthis on my laptop and post the results of the log. Can some advise me on what i should check off and Fix. Thank you in advance. And i will be posting the Log file soon.

Member Avatar for ArtChess
0
169
Member Avatar for ajelliott

Just started working with Jenifer's computer. Her system has a lot of stuff that is slowing the system down. Compaq Presario Celeron unknow processor speed, running 95 mb Ram :?: There is a XMI, Parse.dll message at start up. Ran updated CWShreadder revealed no bad CSW. Please help her by …

Member Avatar for ajelliott
0
302
Member Avatar for JBV

Crunchie --- I have read through almost this entire thread because, I too, have a problem with about:blank. I cannot download dllfix from the link you left but here is my log from Hijack This if you can help. Thanks to everyone who has posted and tried to help others. …

Member Avatar for DMR
0
524
Member Avatar for Pseudonym

OK, here's the story. Today my laptop was infected with an extremely malicious strain of the CoolWebSearch spyware virus. It took me nearly two hours to remove it. The removal involved sifting through the Registry (run >> "regedit") and deleting the bugs responsible for the infection. Here's the key: I …

Member Avatar for DMR
0
429
Member Avatar for 1100

hi i have a brand new windows xp and already there are things wrong with it. i get this message after being on the computer that says i have low memory (Windows - Virtual Memory Minimum Too Low. Your system is ow on virtual memory. Windows is increasing the size …

Member Avatar for crunchie
0
86
Member Avatar for WonderingAboutT

Everytime I start the computer I get this message. Could not load or run 'C:\OPLIMIT\ocraware.exe' specified in the registry. Make sure the file exists on your computer or remove the reference to it in the registry. I believe we got it when someone was using our computer looking for a …

Member Avatar for crunchie
0
294
Member Avatar for libster

I get the following message (twice) every time I boot. RUNDLL Error loading C:\WINDOWS\sdkqh32.dll The specified module could not be found. Running Windows XP

Member Avatar for Yzk
0
71
Member Avatar for ams13x

Hello, I am new to this and have read many of the items here about Cannot find server, DNS error and other spyware items. I have run AdAware and cleaned and I do need to get the hijackthis and run it also. But the main problem I have is I …

Member Avatar for crunchie
0
94
Member Avatar for buddyb

I'm trying to help a friend who has some wild and wooley spyware on the machine. We're running a Dell Dimension V400 with 130 megs of RAM and op system 2000 Pro. Logfile of HijackThis v1.97.7 Scan saved at 8:49:10 AM, on 6/16/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: …

Member Avatar for crunchie
0
100
Member Avatar for azvincent

I have tried the whole gamet to get rid of a nasty hijacker, [url]http://any-find.com/index.htm[/url] I have tried Spybot,HijackThis, Adaware and every other thing I can think of to get rid of these guys. The program seems to reload itself every time I shut down and restart the computer. This program …

Member Avatar for crunchie
0
120
Member Avatar for camelNotation

My cpu is sending continuous data to my server . It's like 25 bytes per second which is in odd proportion to the data sent to mine . I'm running morpheous and there are currently 57 downloads choosen but only two being downloaded and uploading is disabled . i have …

Member Avatar for Yzk
0
129
Member Avatar for telugodu

My PC got attacked by Spyware,Adware and Trojans. I have eTrust EZ Antivrus but it couldn't help me to prevent from Spyware. My browser homepage got changed, it goes to [url]http://default-homepage[/url] .... . Please help me to clean my PC. Logfile of HijackThis v1.97.7 Scan saved at 2:56:19 PM, on …

Member Avatar for crunchie
0
199
Member Avatar for kriskarrera

Here's my latest log: Logfile of HijackThis v1.97.7 Scan saved at 14:58:39, on 09/06/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLACSD.EXE C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe …

Member Avatar for kriskarrera
0
93
Member Avatar for ShhBeQuiet9772

Logfile of HijackThis v1.97.7 Scan saved at 4:34:27 PM, on 6/5/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\runservice.exe c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\WINDOWS\BCMSMMSG.exe C:\Program Files\Logitech\iTouch\iTouch.exe C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE C:\WINDOWS\System32\DSentry.exe C:\Program Files\Real\RealPlayer\RealPlay.exe …

Member Avatar for ShhBeQuiet9772
0
232
Member Avatar for ArtChess
Member Avatar for Lucky

:sad: Hi Could someone please help me. I am using another computer to access this site. It seems like IE has been hijacked by a program or website. My startpage is redirected to an site call anglefire I cannot access any websites that has antivirus software such as Norton, Mcafee …

Member Avatar for crunchie
0
74
Member Avatar for steveb99

I am having a very similar problem as that last post. I have followed all the instructions with Ad-aware and CWS etc.... made sure all the settings were correct etc... I keep removing everything but the problems keep coming back! - Looks like I'll need to manually remove some things??? …

Member Avatar for crunchie
0
171
Member Avatar for arobrien

[QUOTE=arobrien]Yzk: Thank You for your assistance. I had used everything except Ad-Aware, and it found about 30 CWS Malware files. I deleted them and was then able to reset my homepage. I ran Spybot--it detected nothing. I ran HiJackThis, and deleted the entries that referenced the "pin" # on the …

Member Avatar for crunchie
0
141
Member Avatar for pmurthy

I have the same problem except that my homepage gets set to some other dll file. I tried deleteing that dll file from the windows system folder, but it made a new one with some freaking name and then I deleted that and it made a new one. This is …

Member Avatar for crunchie
0
99
Member Avatar for tom olson

please help me identify any items on my log that are bad for my computer Logfile of HijackThis v1.97.7 Scan saved at 10:34:54 PM, on 6/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe …

Member Avatar for crunchie
0
182
Member Avatar for kuelze

[QUOTE=crunchie]This was written by Mosaic 1, a security expert on another forum. Follow instuctions exactly. At the moment there is no easy way. Get the latest CWShredder from this page. Do not run it yet: [url=http://www.computercops.biz/downloads-cat-14.html]CWShredder[/url] Download TheKillbox from this link: [url=http://download.broadbandmedic.com/VbStuff/KillBox.zip][u]here.[/u][/url] ------------------ Sign off the internet. Run CWShredder and …

Member Avatar for crunchie
0
121
Member Avatar for pumpkindad

I have seen other who have been hijacked by this search engine. Sucks big time. I already rad HijackThis and here is the log file results. Can someone look it over and let me know the steps I need to take to Free my browser. thanks Logfile of HijackThis v1.97.7 …

Member Avatar for crunchie
0
320
Member Avatar for Xev0luti0nXx

I keep running Adaware/Spybot S&D/a squared2 and they keep detecting and removing malware/trojans/spyware. I rescan and it comes up with nothing. Once a time period (30 minutes) goes by pop-ups and Norton come up saying that I have new Trojans. Can anyone give me a hand and tell me how …

Member Avatar for crunchie
0
101
Member Avatar for Firedad

I have posted on this website before but need some assistance again. I will post my log from Hijackthis to see if I can get some help removing some files correctly. I have done this once before on another machine, but would like help again so I don't mess it …

Member Avatar for crunchie
0
266
Member Avatar for FrankLaney

I have been plagued by About.Blank browser hijacker. I have tried the various remedies posted here and other helpful sites, but all have in common at some point, to find in the registry HLM\software\mircosoft\windowsnt\currentversion\windows\\appinit_dlls My probelm is that when I get to the currentversion folder, there is no windows folder …

Member Avatar for caperjack
0
188
Member Avatar for sensoui

[size=2]I have recently fixed a coolwebsearch hijack that hijacks my start page. What I didn't realize is that it had also hijacked my address bar in IE. What I mean is that at times when I type a URL in the IE address bar, even though it is a legit …

Member Avatar for Killer_Typo
0
645
Member Avatar for quinkky

'ello one and all! I have this 2 trojan problems of which pc-cillin detected 1. TROJ_BANKER.AF File name: Windows\winupd.exe Windows\cmid32.dll 2. TROJ_STATRPAGE.S File name: Windows\system32\dcgkaa.dll Documents and setting\local settings\temporary internet files\content.IE5\YVI7411T\M[2].bin Does "CMID32" in capitals and "cmid32" in small letters have a difference? as both of these appear in the …

Member Avatar for mochastaat
0
147
Member Avatar for xxplosive

heres my log file from my scan Logfile of HijackThis v1.97.7 Scan saved at 11:27:06, on 15/06/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVG6\avgserv.exe C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe C:\WINDOWS\ctfmon.exe C:\Documents and Settings\lee\Desktop\aiepk2.exe C:\Program …

Member Avatar for caperjack
0
239
Member Avatar for ArtChess
Member Avatar for DMR
0
59

The End.