[windows-virus] Forum Topics

Hi, I want to get rid of this [url="http://www.lookfor.cc"]www.lookfor.cc[/url] search pop up thing. I've run Ad-aware and set the settings to how it said on aother post, then I've run the 'Hijack This' program and done the scan, I've fixed a couple of files which I know that should be …

Hello. I am new to this site but have learned a lot so far by just reading some of your threads. It all started with being hijacked by coolwebsearch(i think). I have since run cws shredder and have restored the ability to use IE, but I suspect I have more …

Hi I need help as well. Hijackthis has detected these... I don't seem to find the part that explains why [url="http://www.lookfor.cc"]www.lookfor.cc[/url] appears... The log from Hijackthis Logfile of HijackThis v1.97.7 Scan saved at 09:02:22, on 25.03.2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

i was surfing the net and my connection cut out, my modem started beeping and then i couldnt reconnect. I realised a dialer had kicked in and unplugged my modem. It left like a folder in program files called "WebSiteViewer" which i had to delete from dos. Im pretty computer …

I see a lot of topics posted in this forum, and in quite a number of other forums I participate in, which post 'Hijackthis' logs and end up with detailed and technical procedures to follow to rid systems of internet 'nasties'. And I have to wonder - just what's the …

Tallcool1 here is the list that Hijackthis gave me. Thanks for all the help. StartupList report, 3/31/2004, 7:15:21 PM StartupList version: 1.52 Started from : C:\WINDOWS\TEMP\HIJACKTHIS.EXE Detected: Windows ME (Win9x 4.90.3000) Detected: Internet Explorer v5.50 (5.50.4134.0100) * Using default options ================================================== Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\PROGRAM …

Hello, I been to this forum a few times before for suggestions. This is my first post though. Just wondering if I'm infected any where. bTgX5m8a.exe and also a.exe really stand out to me thx for your help. Logfile of HijackThis v1.97.7 Scan saved at 10:24:05 AM, on 4/1/2004 Platform: …

[b]Dangerous Bug in HijackThis 1.97.7 Restoral Procedure[/b] I have searched everywhere to see if this has already been reported to Merjin, but I can not seem to find any reference to this, so am letting people know. VERY IMPORTANT. YOU MUST READ! Dangerous bug in HijackThis version 1.97.7 when restoring …

I have just created 3 new tutorials about Spyware and two of the more prevalent tools when dealing with them. The first is a primer on Spyware and hijackers and is a good read if you don't understand them. It can be found here: [url="http://www.bleepingcomputer.com/forums/index.php?showtutorial=41"]Understanding Spyware and Browser Hijackers[/url] The …

Logfile of HijackThis v1.97.7 Scan saved at 8:17:24 PM, on 3/31/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPSYSDRV.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\WINDOWS\OLEHELP.EXE C:\PROGRAM FILES\BACKWEB\BACKWEB\PROGRAM\BACKWEB.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\TEMP\RAR$EX01.898\HIJACKTHIS.EXE …

my ie 6 homepage was recently hijacked, and i got all sorts of popups.. i checked out this board and got cwshredder as well as adaware... ran them both and the homepage stopped getting hijacked, however, for some reason the majority of the time i cannot close explorer with the …

Hi guys... I was wondering if anyone could help me with my HijackThis log file.. Everytime I connect to the Internet I get searchcentral.cc as my start page, and I

IE6 has been constantly hijacked ; this damn site : [url]http://www.lookfor.cc/index.php?p=37049[/url] , replaces the start page , obliging me to edit the register HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\start page ; It has happened almost every night since the 1st time a week ago ; An updated Spybot search and destroy has scanned the …

Hi there, I've been having a problem that when I load the task manager it flashes up and then shuts down. I also can't run regedit, renamed it from exe to com and I now can. Based on what I've found there's a virus messing things up. I've done the …

any help with what to fix would be great. thanks in advance. Logfile of HijackThis v1.97.7 Scan saved at 10:59:31 PM, on 3/25/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\CTHELPER.EXE C:\WINDOWS\System32\taskswitch.exe C:\Program …

Hello, :cry: Internet been terribly slow lately, I have run all anti virus/adwares/ online scans I could, and so far nothing has been found. I have just run hijackthis, does anyone see anything strange in the log? Maybe it has something to do with svchost processes? (all those issr.exe, lass.exe …

I am not sure if this is the right forum to post this but here goes:- I had MS Blaster which was shutting down all my programs. Now I find I have WORM AGOBOT.UY which seems to prevent me from running any virus software. It is in C:\windows\system32\msnmsgr.exe and I …

I have had problems with changed start page by this annoying res://mshp.dll/index.html#10213 ; Besides that every time I run Google.com a pop up ad comes up just after submiting any entry a new browser windows opens with this pesky search company : ([url]http://search-company.com/search.php?qq=kee+bird&pin=10213[/url]) Despite I have employed Hijackthis to clear …

Seems I have been infected with this dreaded worm. I have used the Hijackthis software....with some systems running and have come up with this. Logfile of HijackThis v1.97.7 Scan saved at 8:48:50 PM, on 4/03/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe …

I have the downloader-EV virus on my pc and I wonder if anyone knows ow to get it off i am a computer newbie so could you explain in detail thankyou

Can someone tell me what I should fix and what I should leave alone? Thanks, BuddyB Logfile of HijackThis v1.97.7 Scan saved at 7:34:04 AM, on 3/14/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS.000\System32\smss.exe C:\WINDOWS.000\system32\winlogon.exe C:\WINDOWS.000\system32\services.exe C:\WINDOWS.000\system32\lsass.exe C:\WINDOWS.000\system32\svchost.exe C:\WINDOWS.000\system32\spoolsv.exe C:\WINDOWS.000\System32\svchost.exe C:\WINDOWS.000\system32\regsvc.exe C:\WINDOWS.000\system32\MSTask.exe …

hi there, i've been hijacked... i read other posts, downloaded HijackThis, ran it and produced a log, i didn't want to delete anything until someone had a look at the log for me, the hijacking is quite agressive, every time a browser window opens you get pop-ups a plenty... anyway, …

Hi everyone. I made a post a few weeks ago about deleting everything on my hijackthis log (I know... really stupid), but this is the log from what my computer is currently running, if anyone could help me out with what I need/what I have that I don't need, I …

All, I have read the thread and picked through my hijack log but after a reboot my home page keeps being reset to [url="http://www.searchdot.net"]www.searchdot.net[/url]. Below is a current hijack log - can someone please help me figure out where the stuff is that is resetting the page. I have also …

Hi! I am running windows 2000 and seem to be having some fairly common problems. I get the GStartup error, random restarts, freezing, and just lots of program errors. I was wondering if somebody could take a look at my log and tell me if i can fix it. also, …

Still tryin to figgure out what this is. Imagine its spyware of some kind dunno what. Logfile of HijackThis v1.97.7 Scan saved at 1:37:34 AM, on 2/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program …

since the IE6 browser was hijacked and subsequently cleared up by means Hijackthis , I have noticed that dialogue boxes , check boxes and radio buttons work very slowly ; this message had to be typed in a text editor because it would have taken a while to do it …

I have win/98 system and as I go online and try to get into my mail or into explorer etc the pages cannot be opened as it cannot find server. When I go to close the program a message appears stating that "WUPDATER" is not responding.I have to shut down …

Steam :sad: Please give me some advice. I downloaded hijackthis and the log is pasted below: [font=Courier New]Logfile of HijackThis v1.97.7[/font] [font=Courier New]Scan saved at 1:28:00 PM, on 2/2/2004[/font] [font=Courier New]Platform: Windows XP (WinNT 5.01.2600)[/font] [font=Courier New]MSIE: Internet Explorer v6.00 (6.00.2600.0000)[/font] [font=Courier New]Running processes:[/font] [font=Courier New]C:\WINDOWS\System32\smss.exe[/font] [font=Courier New]C:\WINDOWS\system32\winlogon.exe[/font] [font=Courier New]C:\WINDOWS\system32\services.exe[/font] …

hi all i read your advise on these pages and you guys are doing a great service glad to see theres still decent peeps out there. Enough with the creeping.LOL Anyway i came across this site as im having probs with ie6 being hijacked im using the usual precautions spybot,zonealarm …