[windows-virus] Forum Topics

Had problems with homepage being changed - tried locking it with Spybot but still changed. Ran free virus prog and it found 2 Trojans that it coulnt delete - bridge.dll and msxslab.dll Trojanhunter also detected them. Ran hijackthis and deleted 2 entries that people have previously advised that included the …

Hello evryone I think I had a redirect on my Internet explorer , I ran Ad-aware,Spybot,Windows washer & CWShredder I am currently running Sygate Personal firewall and was hopeing someone can look at my Hyjackthis log to see if i got it all...thank you in advance Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

Hi, I have a similar problem to recent poster amdm55. If a web link opens a new web page that's Ok but if it opens a small window from within that page it opens blank and freezes. I operate windows 98 second edition. If you open [url="http://www.betfair.com"]www.betfair.com[/url] and click on …

About:blank and c:\searchpage.html keep popping up as my new homepage, regardless of what I do. I am not sure if they are one and the same or not. I am using Windows XP pro w/ service pack 1a. I ran norton anti-virus, spybot, and then Hijackthis. I deleted two registry …

Several days ago I asked for help getting rid of about:blank. I followed the recomendation to remove a number of things from my hjt log, and thought I had successfully fixed my problem. Alas, I had not. Every day or day and a half I find that something has again …

Novice looking for feedback. Just downloaded and ran HijackThis software. Before deleting anything, it said to seek advice. So, I'm posting for input. [b]Do I delete all below or ignore what was detected?[/b] [b]Thanks, Ben[/b] Logfile of HijackThis v1.97.7 Scan saved at 8:59:49 AM, on 4/20/2004 Platform: Windows 2000 SP4 …

Something changes IE home page to about:blank or C:\searchpage.html Here is the Hijack. Thanks Logfile of HijackThis v1.97.7 Scan saved at 2:45:48 AM, on 4/17/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program …

Hey Guys, Just wonderin if someone would be kind enough to go through the hastle of telling me what to fix in my log. I have an unwanted home page with the address: [url="http://th.msie.cc/index.php?aid=20035"]http://th.msie.cc/index.php?aid=20035[/url]. Also whenever I go to download something it sends me to this page, [url="http://searchpage.cc/1520/"]http://searchpage.cc/1520/[/url]. Thank you …

The homepage - res://mshp.dll/index.html#37049 appears eveytime I reboot my computer, along with pop ups. I can get rid of it temporarily with anti-virus and sky-bot tools, but it always returns. My hijack this log is as follows: Logfile of HijackThis v1.97.7 Scan saved at 12:37:08, on 15/04/2004 Platform: Windows XP …

Jumping on the bandwagon. Trying to open any shortcuts, my computer, or control panel results in all icons disapearing and then reappearing but without the item opening. Here is my HiJackThis log. Any help appreciated. Logfile of HijackThis v1.97.7 Scan saved at 11:31:49 AM, on 4/13/2004 Platform: Windows XP SP1 …

My home page in IE is now about:blank. I can manually remove all appropriate registry entries (startpage, etc), and then if I click on the IE icon the arrow turns into an hour glass for 15 seconds or so, then back to an arrow. If I then look at the …

Hi, I am new here and I have read some of the posts, but I never seen anything on what msiesh is. I have the same problem, when i start my internet, a differant start page pops up then my home page. It is some kind of search page. Oh …

My browser is being hijacked to prosearching.com. I haven't installed anything on my computer in the last week other then hijack this tonight and this problem just started today. I am running windows 98 on a gateway computer. Norton Antivirus and Trojan Remover have found nothing . I have posted …

Hey Guys, I got hijacked also the other day. I have been trying to fix it, but it still keeps coming up in IE with 'Top Search' when I try to search for something in the location bar. I downloaded all the apps mentioned, but still it shows that page. …

first off ill explain my problem. I keep getting a redirect to best-search.info theres a www. in front of it, but i dont want anyone clicking on it and catching what my computer may have. Now i get this redirect whenever i try to click on a link to download …

Hi this is my fist post, iv been having trouble with my desktop and basicly anything that uses windows explorer. when i click anything (other then netscape which i am having to use to post this) it apears to not load... the mouse changes as if its laoding, but then …

thanks for looking at it. If i create a new icon, it does not work either. path looks to be correct.

HijackThis is a [free] program designed to scan your computers settings for things related to spyware and adware. HijackThis will not delete anything initally; it will just report on what it finds. You can download directly from [url="http://www.spywareinfo.com/~merijn/files/HijackThis.exe"]here[/url]. Save it to a place like your desktop, and run it. When …

Hello you great people; I have been hijacked by [url="http://th.msie.cc/index.php?aid=20035"]http://th.msie.cc/index.php?aid=20035[/url] and of course am thouroghly annoyed. I have read your previous threads on this issue but would like to be sure that I don't delete something I need. I have adaware, spyware blaster, spybot and hijack this all downloaded and …

I have a problem which most people seem to be having about IE not working and other programs in the Start menu (control panel, search,etc...) I downloaded the Hijackthis program and have the log created: Logfile of HijackThis v1.97.7 Scan saved at 1:31:44 PM, on 4/8/2004 Platform: Windows XP SP1 …

:sad: i need to know what to delete. omega is a big problem. Logfile of HijackThis v1.97.7 Scan saved at 8:17:24 PM, on 3/31/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE …

Hi, I had the 1on1 dialer. I have run updated versions of ad aware, and spybot search and destry. Can you please look and see if this log is now clear. Thanks! Logfile of HijackThis v1.97.7 Scan saved at 12:20:50 PM, on 08/04/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: …

Recently my IE was hijacked. This my log. Maybe somebody cah check it and help me to fix this problem. Thanks, Marsik. Logfile of HijackThis v1.97.7 Scan saved at 1:15:29 PM, on 2/11/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v5.00 (5.00.2614.3500) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk …

I have been hijacked! this is my HijackThis log, I have no idea what to do with it! [size=2]Logfile of HijackThis v1.97.7 Scan saved at 9:55:49 AM, on 6/04/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk …

I have a feeling this one will challenge you senior techies out there bigtime -- about 2 weeks ago my IBM T21 just started spinning the hard drive CONSTANTLY whenever I would visit Yahoo sites (my mail server, for one thing) using IE6. Most all else works fine, except whenever …

Hey boys ! I've been hijacked. These are the results after running HijackThis .. Can you tell me what to delete ? Thanks a bunch !! Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\WINDOWS\System32\ScsiAccess.EXE C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\SIMONG~1\LOCALS~1\Temp\Rar$EX00.687\HijackThis.exe …

Have run Adaware and Spybot S&D, but just to make sure (Thanx for helping out) :) : [font=Courier New][size=2]Logfile of HijackThis v1.97.7 Scan saved at 22:50:48, on 06.04.04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE …

when i start my computer a box comes up saying "missing shortcut" and a few of the shortcuts that it says are missing is: morze5.exe nbjikk9x.exe j635cgrl.exe 3x23gli3.exe and everytime i click one box off another one comes up. i looked them up on the net and the only one …

Hey boys ! I've been hijacked. These are the results after running HijackThis .. Can you tell me what to delete ? Thanks a bunch !! Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\WINDOWS\System32\ScsiAccess.EXE C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\SIMONG~1\LOCALS~1\Temp\Rar$EX00.687\HijackThis.exe …

When I boot up,I get this as my default page in Internet Options: [url="http://%76%70%75%7A%65%65%2E%74%2E%6D%75%78%61%2E%63%63/%68%2E%70%68%70?%61%69%64=35"]http://%76%70%75%7A%65%65%2E%74%2E%6D%75%78%61%2E%63%63/%68%2E%70%68%70?%61%69%64=35[/url] The page eventually loads as : [url="http://th.msie.cc/index.php?aid=20035"]http://th.msie.cc/index.php?aid=20035[/url] On running hijack this,the file looks as follows: [size=2]Logfile of HijackThis v1.97.7 Scan saved at 22:04:29, on 26/03/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) …