12,141 Topics

Member Avatar for
Member Avatar for colonelfox

I am unable to find or remove the trojan TR/Dldr.WinShow.AX. It is being detected by AntiVir as TR/Dldr.WinShow.AX and by Norton as MHTMLRedir.Exploit. The virus is inserting itself into the windows temp file. Once I direct my virus programs to delete the virus, it reinserts itself into the same windows …

Member Avatar for crunchie
0
249
Member Avatar for killerfaber

Hello boys i'm an Italian boys with a problem,THE STEALTH.HIJACK VIRUS!!! :cry: Thisi is my HighJackThis File Log,can you help me??? THANKS!!! ;) Logfile of HijackThis v1.99.0 Scan saved at 14.29.33, on 07/16/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for crunchie
0
239
Member Avatar for manhunt2k

Hi, When I try to launch Internet Explorer, the hourglass cursor displays for a couple seconds, then reverts to the regular cursor. IE does not start and does not appear in the process list. My PC is running XP. I suspect, (after reading many other posts) that the culprit is …

Member Avatar for crunchie
0
188
Member Avatar for courtneycollins

goto w ww.mypctuneup.com then click on uninstall - you have to download a small removal tool - but it works - havent had an aurora popup in a day now!!!!!

Member Avatar for plyerly
0
309
Member Avatar for poppiemeg

I am trying to get online and now the computer is not detecting the modem. I have a Dell Dimension DIM4300S, Pentium(R) 4 CPU. System is Microsoft Windows XP 2002. I have check the Device Manager and there is not a modem listed. I have checked the Phone and Modem …

Member Avatar for Topemup
-1
267
Member Avatar for sharon1

Hi there, I'm new to this forum, so please excuse me if I have posted this in the wrong sub-forum, but this is the one I thought would fit best! I seem to have a virus or spyware that created duplicate icons of things such as IE, Outlook Express, Winamp …

Member Avatar for dlh6213
0
184
Member Avatar for Zooks

hi, i'm not much of a pc techie but I have setup my folders as per the stickies, downloaded Ccleaner,trojanhunter,adaware,spybot etc, ran in safe mode, turned off system restore, (not in that order) but still cant shift this trojan, norton antivirus stops it everytime i connect to the internet but …

Member Avatar for DMR
0
195
Member Avatar for MikeT

My Anti-virus keeps finding a couple of problems, so does Spybot and Ad-Aware occasionally. Hopefully it's not too bad but I'd appreciate any help. Logfile of HijackThis v1.99.1 Scan saved at 21:47:33, on 24/06/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for DMR
0
197
Member Avatar for shane'r69

Hi, my antivirus found this toolbar and spybot found admilli can anyone tell me what I need to erase from my hijack this log? Thank you. Logfile of HijackThis v1.99.1 Scan saved at 10:19:08 AM, on 7/15/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running …

Member Avatar for shane'r69
0
115
Member Avatar for Gorp

Since yesterday, Norton keeps reporting a Virus called 'Hacktool.Rootkit'. It says the file msdirectx.sys in 'C:\Documents and Settings\Roel' is infected. After I remove it (in safe mode, in normal mode I can't see it) it just keeps coming back. Norton says that he can't repair or remove the file. Here's …

Member Avatar for swatkat
0
334
Member Avatar for crunchie

[url]http://www.itworld.com/Tech/2428/050630msadware/[/url] May fall through because of the public perception such a move would cause. MS has also downgraded Claria detections. [url]http://www.dslreports.com/forum/remark,13793423[/url] So much for AntiSpyware :(.

Member Avatar for dlh6213
0
150
Member Avatar for peetrod

I have windows Me and two errors came up. the 1st is in an explorer box that reads. Explorer has caused an error in OLE32.DLL. explorer will now close. Even after restart it is still there. The second is on a blue screen that reads. A fatal error in IE …

Member Avatar for Zorb
0
201
Member Avatar for kwaldeck

hi can someone please help me remove 'begin 2 search' from my computer. ive got hijack this and this is my log but im not sure what i should delete

Member Avatar for crunchie
0
229
Member Avatar for Nightbirds

Hi, I'm experiencing difficulties removing spyware, malware. the start page now goes to a page entitled about: blank. I also experience pop-up ads, despite using anti-pop-up (google) and spyware programs (microsoft, adaware, spybot). I've done a full system scan with norton and removed items, as well as multiple scans with …

Member Avatar for crunchie
0
500
Member Avatar for Taeros

Hey all. I've been having problems with links being added to my favorites and trouble with IE. WHen I first boot up and go online I alwasy get errors where I have to shut down IE and it takes a while before I get it to work. I get around …

Member Avatar for crunchie
0
248
Member Avatar for PhilipbH

Hi Everyone, I hope that someone can please help me with my problem. I started to get the Aurora pop ups on my machine recently. Warning form NAV Searched the n/g's and tried SpyBot S&D M/S Anti Spyware TSG-3 Each one seems to be able to identify the problem - …

Member Avatar for crunchie
0
350
Member Avatar for avgoddess

This seems like a tough virus to get rid of. I have Symantec AntiVirus on my computer, which I update and run everytime I turn on the computer. However I seem to have picked up a virus despite my precautions. Since late last week, every minute or so, I get …

Member Avatar for crunchie
0
262
Member Avatar for JohnnyMitchell

This popup appears every 5 minutes : _________________________________ Microsoft Windows Security Warning _________________________________ Your Windows is corrupted with spyware virus. You must patch your PC urgently to protect yourself. Private info is accessed by ports : -8080 -3128 You can patch your PC for free only now and delete all …

Member Avatar for crunchie
0
917
Member Avatar for Easter Bunny

hi guys. got a problem with norton. lady openen an email with an attachment and hey presto! norton disabled. eventually found and deleted the virus (wiwshost.exe - trojan.tooso.j) by scanning her harddrive with my pc. ran one of those tools from symantec as well, but it found nothing. now i'm …

Member Avatar for crunchie
0
139
Member Avatar for Kevin392

I was hoping someone could help me out. I've been getting tons of Aurora pop-ups. I ran Ad Aware SE which seems to keep detecting things as fast as it quarantines and deletes. Ad Aware was also indicating it was detecting drpmon.dll - I could really use some help. Log …

Member Avatar for crunchie
0
320
Member Avatar for trydor

Hi guys, I've been hijacked (like thousands of others it seems) by aurora. I've managed to rid myself of the dreaded DrPmon.dll and various other nasties but Adaware still picks up 21 references to VX2. I can delete these registry entries in normal mode through regedit but they reappear when …

Member Avatar for crunchie
0
242
Member Avatar for nettizen

Thank you in advance for helping me if you can. I am having a problem when I access internet explorer I get a tcp connection to the same remote ip along with the one I type in. I noticed this when I ran netstat and Active Ports program. I also …

Member Avatar for crunchie
0
261
Member Avatar for erts678

i cannot get the Aurora pop ups of my computer, please help here are the log files from hijackthis Logfile of HijackThis v1.99.1 Scan saved at 4:03:28 PM, on 7/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for crunchie
0
123
Member Avatar for WatermelonX

I have some problems with Aurora and Drpmon.dll, and I can't seem to remove it with ad-aware. Here is my Hijack This log: Logfile of HijackThis v1.99.1 Scan saved at 12:26:37 PM, on 7/5/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe …

Member Avatar for crunchie
0
316
Member Avatar for markie2003

I found this on my computer and can't seem to get rid of it, or find any thing about it. What do you think?

Member Avatar for crunchie
0
77
Member Avatar for saintlos

I have these annoying Aurora pop-ups. Please, advise what to do - I'll follow the steps exactly! Thank you :) Here is the HJT log with all windows and systray applications closed: Logfile of HijackThis v1.99.1 Scan saved at 4:50:25 PM, on 7/9/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: …

Member Avatar for crunchie
0
175
Member Avatar for helpmerhonda

Crunchie.... I hope you're out there! I seem to have been caught. Here's a log from l2mfix and I'll post the next message with one from HJT. Thanks in advance! L2MFIX find log 1.03 These are the registry keys present ********************************************************************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows …

Member Avatar for crunchie
0
322
Member Avatar for Joanna

Hi there My norton keeps alerting me to the above trojan. So far I have tried: deleting the file from where I am told it is located C:\WINDOWS\ but it cannot be found even with hidden files shown. ending the process in task manager but cannot see it. locating it …

Member Avatar for crunchie
0
372
Member Avatar for Fiendforeva

Hello, I just recently got Highjackthis and was wondering if someone could help me in what I should do in regards to this log. :o Logfile of HijackThis v1.98.0 Scan saved at 11:41:18 AM, on 7/9/2004 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: …

Member Avatar for crunchie
0
273
Member Avatar for Jessykah

Ok Im a newbie but with searching for help for my problem I came across this forum..thank god! I seem to be having the same problem as everyone else with these popups. I did try and get rid of this but with mine I notice that when you end the …

Member Avatar for crunchie
0
223
Member Avatar for shmay

Before scanning with Hijack This i scanned with trendmicro and adaware here is the logfile; help would be greatly appreciated my computer has become quite slow. Thanks. Logfile of HijackThis v1.99.1 Scan saved at 3:15:18 AM, on 7/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) …

Member Avatar for crunchie
0
131
Member Avatar for Hobbierz

Hey guys, welll, last Friday, I left my PC on all day , idle. I come back later that night, and I am infested with SpySheriff. I have not been able to get rid of it . I have done system restore, but 1 or 2 restarts later, it returns. …

Member Avatar for crunchie
0
112
Member Avatar for moraira73

Hi, Please could someone help me, I have something nasty in my PC. Every time I click send/receive on outlook, I get hundreds of un-delivered emails, its driving me round the bend. I have check with AVG, Aluria, CWS, Beta 1 and HJT. Is there anything in this log or …

Member Avatar for crunchie
0
187
Member Avatar for yikyang

i'm having a prob now..ermz..[B]msdiretx.sys[/B] keeps popping up on my avg nti virus software.what should i do about it?i deleted it,n it comes back.i've tried to search for the .exe file([B]msnt.exe,sdkcore.exe[/B])..but i can find nothing!!this is driving me nuts..n i cant clear the viruses from my com.they keep comin back!!n …

Member Avatar for crunchie
0
626
Member Avatar for summon

Hi all Plz help me i can't get rid of from hotoffers i tried everything but it still appears. Programs that i used - HiJackThis - Ad-Aware - Pocket Killbox - Spywarevansiher - Cleanmngr And some stupid question in one thread i have read says use Killbox and delete the …

Member Avatar for crunchie
0
144
Member Avatar for fragmented_user

Dear Moderator, I am relatively new to the world of adware, malware and other such inventions consisting of malicious/annoying code, and it is a great relief for me to discover, that there does exist, those few individuals who are dedicated to both fighting it and assisting others to protect themselves …

Member Avatar for crunchie
0
413
Member Avatar for nickyt8

Logfile of HijackThis v1.99.1 Scan saved at 11:47:08 AM, on 7/15/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe …

Member Avatar for crunchie
0
73
Member Avatar for mattisjo

Hi, When I try to launch Internet Explorer, the hourglass cursor displays for a couple seconds, then reverts to the regular cursor. IE does not start and does not appear in the process list. My laptop is running XP. I suspect, (after reading many other posts) that the culprit is …

Member Avatar for crunchie
0
410
Member Avatar for robert81978

[B]about:blank![/B] Hi there i have a really bad problem with about:blank i have tryed all kinds of programs to remove this but nithing has worked it just come straight back again? here is my log from hijackthis! Any ideas anyone? Thanks in advance for any help! Logfile of HijackThis v1.99.1 …

Member Avatar for dlh6213
0
236
Member Avatar for rabbitrob

Hi all! Hope you can help. I was tiring to clean out my friends system that was running slow after a year of Internet. He had Norton 2003 on his system and like many people, didn't realize that he needed to subscribe to keep his machine protected. With that, I …

Member Avatar for kccomputerdr
0
160
Member Avatar for lisaroutly

Hello there! As of yesterday, my computer's been giving me alot of trouble. I'm not quite sure where to start, because I have no idea what's wrong. I have a year-old MDG computer with Windows XP Home edition. Basically, my computer froze yesterday. I thought it was because I was …

Member Avatar for kccomputerdr
0
173
Member Avatar for amill18

[COLOR=Red][B]I have recently acquired the about:blank virus. I have looked at many forums online but nothing as resolved my problem. I get the imfamous blue background stating the problem (Trojan-Spy.html.smit.fraud.c). I also can not get rid of PSGuard (red and white circle in system tray. My homepage will not return …

Member Avatar for DMR
0
256
Member Avatar for A Monkeys Uncle

While trying to delete, rename, move, or copy and paste a file I get the message: Cannot delete file: Cannot read from the source file or disk. While trying to use a program called Mboot (which can move or delete, move, etc files that don't start up when booting, I …

Member Avatar for DMR
0
518
Member Avatar for RPeeteRules

Logfile of HijackThis v1.99.1 Scan saved at 5:03:08 AM, on 7/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wdfmgr.exe C:\WINDOWS\wanmpsvc.exe C:\WINDOWS\System32\xl.exe C:\WINDOWS\system32\mseq.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Microsoft …

Member Avatar for amill18
0
255
Member Avatar for HeidiGiller

Ok. Brief summary of my problem. It first started when I noticed a PartyPoker icon on my desktop, and yazifind pop ups started to occur. I've been hijacked before and cleaned up fairly well (or did I?) so I knew some of the steps to take to get rid of …

Member Avatar for crunchie
0
322
Member Avatar for shellbert

I know I definitely have the Aurora junk and I am sure there are others. Here is my HiJackThis log. Thank you in advance: Logfile of HijackThis v1.99.1 Scan saved at 5:54:10 PM, on 7/13/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe …

Member Avatar for Eddie Traversa
0
182
Member Avatar for Atreyu

Can't get rid of Communticator.dll (it keeps refreshing the C:\Program Files\COMMUNICATOR Toolbar (file) ) Ne help heres my Hijack this Log -------------------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 1:04:44 PM, on 7/3/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for dlh6213
0
273
Member Avatar for Bjoshvm

Hello all. I have a unknown icon flashing on and off in the taskbar whenever i open a new folder. The icon flashes on and off very fast. I managed to stop it by right-clicking on it however i have no idea what it is or how to get rid …

Member Avatar for Bjoshvm
0
80
Member Avatar for DaveSW

I don't really know what category this fits into, since I don't know where the problem lies yet, but hopefully someone can help me. This is a 6 month old acer laptop, so it'll go back under warranty if it's hardware. There have been no hardware changes, and as far …

Member Avatar for DaveSW
0
120
Member Avatar for kip kelly

media player will not work on any type of file extention. have uninstalled and installed a newer version and i still get the same error "1099". also real player will not work either.

Member Avatar for kip kelly
0
66

The End.