12,141 Topics

Member Avatar for
Member Avatar for baylee's master

Hello. I am new to this site but have learned a lot so far by just reading some of your threads. It all started with being hijacked by coolwebsearch(i think). I have since run cws shredder and have restored the ability to use IE, but I suspect I have more …

Member Avatar for baylee's master
0
194
Member Avatar for rams_

Hi I need help as well. Hijackthis has detected these... I don't seem to find the part that explains why [url="http://www.lookfor.cc"]www.lookfor.cc[/url] appears... The log from Hijackthis Logfile of HijackThis v1.97.7 Scan saved at 09:02:22, on 25.03.2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for TallCool1
0
441
Member Avatar for shalloys

i was surfing the net and my connection cut out, my modem started beeping and then i couldnt reconnect. I realised a dialer had kicked in and unplugged my modem. It left like a folder in program files called "WebSiteViewer" which i had to delete from dos. Im pretty computer …

Member Avatar for TallCool1
0
167
Member Avatar for Catweazle

I see a lot of topics posted in this forum, and in quite a number of other forums I participate in, which post 'Hijackthis' logs and end up with detailed and technical procedures to follow to rid systems of internet 'nasties'. And I have to wonder - just what's the …

Member Avatar for Catweazle
0
307
Member Avatar for gatorman725

Tallcool1 here is the list that Hijackthis gave me. Thanks for all the help. StartupList report, 3/31/2004, 7:15:21 PM StartupList version: 1.52 Started from : C:\WINDOWS\TEMP\HIJACKTHIS.EXE Detected: Windows ME (Win9x 4.90.3000) Detected: Internet Explorer v5.50 (5.50.4134.0100) * Using default options ================================================== Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\PROGRAM …

Member Avatar for TallCool1
0
134
Member Avatar for Patrik1st

Hello, I been to this forum a few times before for suggestions. This is my first post though. Just wondering if I'm infected any where. bTgX5m8a.exe and also a.exe really stand out to me thx for your help. Logfile of HijackThis v1.97.7 Scan saved at 10:24:05 AM, on 4/1/2004 Platform: …

Member Avatar for Patrik1st
0
181
Member Avatar for Grinler

[b]Dangerous Bug in HijackThis 1.97.7 Restoral Procedure[/b] I have searched everywhere to see if this has already been reported to Merjin, but I can not seem to find any reference to this, so am letting people know. VERY IMPORTANT. YOU MUST READ! Dangerous bug in HijackThis version 1.97.7 when restoring …

0
87
Member Avatar for Grinler

I have just created 3 new tutorials about Spyware and two of the more prevalent tools when dealing with them. The first is a primer on Spyware and hijackers and is a good read if you don't understand them. It can be found here: [url="http://www.bleepingcomputer.com/forums/index.php?showtutorial=41"]Understanding Spyware and Browser Hijackers[/url] The …

Member Avatar for Grinler
0
263
Member Avatar for jerm407

Logfile of HijackThis v1.97.7 Scan saved at 8:17:24 PM, on 3/31/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPSYSDRV.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\WINDOWS\OLEHELP.EXE C:\PROGRAM FILES\BACKWEB\BACKWEB\PROGRAM\BACKWEB.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\TEMP\RAR$EX01.898\HIJACKTHIS.EXE …

Member Avatar for crunchie
0
331
Member Avatar for logan

my ie 6 homepage was recently hijacked, and i got all sorts of popups.. i checked out this board and got cwshredder as well as adaware... ran them both and the homepage stopped getting hijacked, however, for some reason the majority of the time i cannot close explorer with the …

Member Avatar for TallCool1
0
287
Member Avatar for Adrix99

Hi guys... I was wondering if anyone could help me with my HijackThis log file.. Everytime I connect to the Internet I get searchcentral.cc as my start page, and I

Member Avatar for Adrix99
0
157
Member Avatar for Ron Wolpa

IE6 has been constantly hijacked ; this damn site : [url]http://www.lookfor.cc/index.php?p=37049[/url] , replaces the start page , obliging me to edit the register HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\start page ; It has happened almost every night since the 1st time a week ago ; An updated Spybot search and destroy has scanned the …

Member Avatar for ocnative1964
0
801
Member Avatar for gord_c

Hi there, I've been having a problem that when I load the task manager it flashes up and then shuts down. I also can't run regedit, renamed it from exe to com and I now can. Based on what I've found there's a virus messing things up. I've done the …

Member Avatar for crunchie
0
158
Member Avatar for unb0und

any help with what to fix would be great. thanks in advance. Logfile of HijackThis v1.97.7 Scan saved at 10:59:31 PM, on 3/25/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\CTHELPER.EXE C:\WINDOWS\System32\taskswitch.exe C:\Program …

Member Avatar for unb0und
0
180
Member Avatar for annna

Hello, :cry: Internet been terribly slow lately, I have run all anti virus/adwares/ online scans I could, and so far nothing has been found. I have just run hijackthis, does anyone see anything strange in the log? Maybe it has something to do with svchost processes? (all those issr.exe, lass.exe …

Member Avatar for BountyX
0
212
Member Avatar for TheComputerGeek

[size=2]By: Jeff Johnston A new version of the Bagle virus family uses a different infection method then older versions. Bagle-R and Bagle-Q have both been reported to spread via email without an attachment. [/size][url="http://www.sophos.com/virusinfo/articles/bagletwist.html"][size=2][color=#800080][u]Sophos reports[/u][/color][/size][/url][size=2] that this is an attempt to bypass virus protection at the email gateway. Bagle exploits …

Member Avatar for Yzk
0
135
Member Avatar for ariel69

hi everybody,I need help,cannot login to hotmail and navigation is too slow,because ActiveX is not functional. In windows update I could not get my Win98SE past the "Administrators Only" roadblock to scan and fetch updates I need,because my ActiveX doesn't work properly. a friend suggest a solution and i do …

Member Avatar for propryaterry
0
180
Member Avatar for layla

I am not sure if this is the right forum to post this but here goes:- I had MS Blaster which was shutting down all my programs. Now I find I have WORM AGOBOT.UY which seems to prevent me from running any virus software. It is in C:\windows\system32\msnmsgr.exe and I …

Member Avatar for layla
0
345
Member Avatar for Ron Wolpa

I have had problems with changed start page by this annoying res://mshp.dll/index.html#10213 ; Besides that every time I run Google.com a pop up ad comes up just after submiting any entry a new browser windows opens with this pesky search company : ([url]http://search-company.com/search.php?qq=kee+bird&pin=10213[/url]) Despite I have employed Hijackthis to clear …

Member Avatar for TallCool1
0
200
Member Avatar for roy66

Seems I have been infected with this dreaded worm. I have used the Hijackthis software....with some systems running and have come up with this. Logfile of HijackThis v1.97.7 Scan saved at 8:48:50 PM, on 4/03/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe …

Member Avatar for roy66
0
295
Member Avatar for DGULLIVER

Hi, I appologies I'm sure there are many post regarding this issue. I installed my webcam last night and after that I noticed my system going very slow - I opened task manager checked my cpu usage and it was at 100%, I checked my processes and saw that svchost …

Member Avatar for orion
0
462
Member Avatar for daymonkey

I have the downloader-EV virus on my pc and I wonder if anyone knows ow to get it off i am a computer newbie so could you explain in detail thankyou

Member Avatar for daymonkey
0
163
Member Avatar for dvr

I found this file running on my pc imWl2X.exe I have no idea what it does. I also have a trojan dropper.lnor.s I can't get rid of. I ran adware spybot and hijack this. but it is still there the anti virus trys to remove it but it can only …

Member Avatar for crunchie
0
390
Member Avatar for buddyb

Can someone tell me what I should fix and what I should leave alone? Thanks, BuddyB Logfile of HijackThis v1.97.7 Scan saved at 7:34:04 AM, on 3/14/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS.000\System32\smss.exe C:\WINDOWS.000\system32\winlogon.exe C:\WINDOWS.000\system32\services.exe C:\WINDOWS.000\system32\lsass.exe C:\WINDOWS.000\system32\svchost.exe C:\WINDOWS.000\system32\spoolsv.exe C:\WINDOWS.000\System32\svchost.exe C:\WINDOWS.000\system32\regsvc.exe C:\WINDOWS.000\system32\MSTask.exe …

Member Avatar for caperjack
0
139
Member Avatar for Griffarien

I was in the middle of a post when (surprise) my computer restarted on me. So here's the quick and dirty version. My computer runs completely fine when it's used for everyday things. But once I start to run (or so it seems) system type programs, my computer bluescreens and …

Member Avatar for crunchie
0
318
Member Avatar for ksuchewie

Ok, I just built this machine for my birthday. It is: AMD XP 3000 w/ 400 FSB. ABIT KV-7 mobo. Seagate baracuda 120 gig Sata HD. ATI 9600 pro 128 mb. And a Modem Blaster modem. I also have a Sony 16x dvd-rom and a sony dvd-burner. 450 w dual …

Member Avatar for RC_Razor
0
142
Member Avatar for afdrano

Recently I've been checked my programs on my C: file in "WINDOWS XP (C:)" and as I started scrolling down, at the bottom of the page I see this hideously long folder name, some random letters for the name. d9458 blah blah. Now i'm thinking damn it this must be …

Member Avatar for afdrano
0
413
Member Avatar for edgee

hi there, i've been hijacked... i read other posts, downloaded HijackThis, ran it and produced a log, i didn't want to delete anything until someone had a look at the log for me, the hijacking is quite agressive, every time a browser window opens you get pop-ups a plenty... anyway, …

Member Avatar for crunchie
0
246
Member Avatar for peterska2

[size=2]This has come into my inbox today from my ISP and I thought I would share it with you. Hopefully it will prevent anyone having any problems. [quote] Dear Customer, Microsoft have contacted us to tell us about a weakness in their Messenger application, which they supply with Windows 2000 …

Member Avatar for TKSS
0
183
Member Avatar for usa1938

Everytime i turn on my Comp Model S3200NX pc with 2 Hdrvs , one cdrw burner , and one dvd, drv,,,,,,,, Windows XP (fullsize) Home Ed. and start up Messenger 6.1 if corrupts and i have to reinstall it and reboot the system or, u play spades games, take breeak …

0
99
Member Avatar for Kizmetturbodsm

Recently whenever i log into windows for not more than 10 minutes i get this blue screen message and i have to shutdown and restart. A problem has been detected and windows has been shut down to prevent damage to computer. If this is the first time you've seen this …

Member Avatar for rasputinj
0
148
Member Avatar for bhoysontour

Can anyone help me? When i do Ctrl-Alt-Del there is sometimes 2 programs running called eankhtkm. When this happens my windows explorer seems to stop working. I am wondering if it is a virus. Many Thanks

Member Avatar for bluedos82
0
169
Member Avatar for Dani

[b]Computer Ports: What You Should Know to Defend Yourself [/b]by Aaron Turpen of Aaronz WebWorkz The number one way a computer is exposed for nefarious uses online is by exploiting open ports on that system. Ports are names or "handles" given to various network connections your computer uses to communicate …

0
134
Member Avatar for Dani

[b]Ask The Computer Geek[/b] By: Jeff Johnston (jeff@domynoes.net) [i][b]Q:[/b] I have received an email from Microsoft stating that there is a new security update available that fixes some security risks. The email contained the patch for me to install, should I do this right away as it advises? - John …

0
82
Member Avatar for ricosapphire

Ok, just when I thought I could tackle pretty much any problem that came my way I get one that leaves me scratching my head... Internet Explorer, Mozilla both display gifs incorrectly. The weird thing is they aren't just displaying them incorrectly, they aren't receiving or saving them properly. I …

Member Avatar for ricosapphire
0
191
Member Avatar for dvr

my outlook wont open any more. I also was using avg virus software and that won't open anymore. I ran adware and SSD and cwdshredder. here is my hijackthis log. sorry so long. any ideas?win 2000 os Logfile of HijackThis v1.97.7 Scan saved at 3:04:43 PM, on 2/25/2004 Platform: Windows …

0
80
Member Avatar for rauty

Hi everyone. I made a post a few weeks ago about deleting everything on my hijackthis log (I know... really stupid), but this is the log from what my computer is currently running, if anyone could help me out with what I need/what I have that I don't need, I …

Member Avatar for rauty
0
223
Member Avatar for NiTeHaWk4787

Hey, today someone named Eliza5021 IM'ed me, and said hey i wanna chat. i said whose this? then they said something which I forget, then i said what? because what he said didnt make sense, then he said one mans trash is another mans treasure (your computer for example). about …

Member Avatar for NiTeHaWk4787
0
264
Member Avatar for krakpipe

All, I have read the thread and picked through my hijack log but after a reboot my home page keeps being reset to [url="http://www.searchdot.net"]www.searchdot.net[/url]. Below is a current hijack log - can someone please help me figure out where the stuff is that is resetting the page. I have also …

Member Avatar for krakpipe
0
109
Member Avatar for Mosco

Hello people, Every time i run windows explorer my computer totaly freezes up, and locks down at 100% cpu usege.! So every time i have to end explorer.exe in task manager. then my comp usege goes back to 15% . I didnt install anything new onto my comp that would …

Member Avatar for crunchie
0
123
Member Avatar for SnotRocket

Ok guys I've got a question for y'all. My bro's comp has been acting really wierd lately. I think it's got a virus, but I'm not the techiest guy around so it may be something simple. Anyway, what it'll do is startup, and get through BIOS and all that. Then …

Member Avatar for SnotRocket
0
185
Member Avatar for billy61788

my computer recently had a virus and it said it deleted internet exlporer so i went to the microsoft website to download it. I have windows 2000 so i couldnt download microsoft 6. when i went to download 5.5 it tols me that an internet explorer application was running and …

Member Avatar for steosaur(oWn)
0
157
Member Avatar for digi-b

Hi There, My CPU is hitting 100% every 10 - 20 minutes for 2 - 3 minutes, not too sure what it could be. I got hit by a virus last week and have updated Windows, AV and spyware. Scanned and scanned but still nothing. Run regisrty cleaners / checkers …

Member Avatar for caperjack
0
422
Member Avatar for lakini980

I was downloading from a friends server and when the file was copying to my folder a virus warning popped up. [url]http://frontiernet.net/~rdjpg/virus.jpg[/url] you can see it there. When I clicked OK it said something about access denied. Then I clicked OK again and it said it had been deleted. The …

Member Avatar for Lander
0
252
Member Avatar for iaboy12

Hi! I am running windows 2000 and seem to be having some fairly common problems. I get the GStartup error, random restarts, freezing, and just lots of program errors. I was wondering if somebody could take a look at my log and tell me if i can fix it. also, …

Member Avatar for caperjack
0
207
Member Avatar for daphish

Still tryin to figgure out what this is. Imagine its spyware of some kind dunno what. Logfile of HijackThis v1.97.7 Scan saved at 1:37:34 AM, on 2/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program …

Member Avatar for daphish
0
696
Member Avatar for graytrekie

i have a virus problem.i have an infected file named windows\system32\cpan.dll and two different anti virus programs have tried to fix it.none were sucessful i have tried to manually delete the file it will not(from windows) it states it is being used nothing is running except windows.how do i get …

Member Avatar for caperjack
0
151
Member Avatar for bomber6989

I've got a problem. Windows Explorer no longer opens. Also, some of my desktop folders won't open, and others (including MY Computer) won't close once they're open. I've done a virus scan with Norton, and have used both Spybot and Ad-Aware. I used HijackThis, but I don't know what's safe …

Member Avatar for caperjack
0
244
Member Avatar for TheOgre

OK, here's one for you MS gurus: I have a client who recently had a local "expert" remove a bunch of "infected" files from a WinXP Home box. Problem is, I have no way of knowing which files were removed, compared to the actual infected files (I don't have access …

0
101
Member Avatar for Ron Wolpa

since the IE6 browser was hijacked and subsequently cleared up by means Hijackthis , I have noticed that dialogue boxes , check boxes and radio buttons work very slowly ; this message had to be typed in a text editor because it would have taken a while to do it …

Member Avatar for caperjack
0
136

The End.