10,784 Topics

Member Avatar for
Member Avatar for maryc

I stupidly opened a program someone sent me through AIM (I did scan it for viruses first but found nothing). Now when I boot up, Symantec pops up saying it found HackTool.RootKit virus, on the file msdirectx.sys, which is found under Documents and Settings\Owner. Also, pokapoka70.exe is running somewhere, because …

Member Avatar for maryc
0
213
Member Avatar for Waily

Ive got this missing Bridge.dll, Im posting the HJT Log below, but i would also like to know what this missing file causes and such. Logfile of HijackThis v1.99.1 Scan saved at 21:09:25, on 2005-10-05 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe …

Member Avatar for DMR
0
111
Member Avatar for MelissaH

I'm really stupid when it comes to computers, so I was just wondering if someone could help me out. Lately, my Internet Explorer has been popping up websites randomly and it's really annoying. I've tried running Ad-aware but it still happens. Thanks!!!! Here's my log: Logfile of HijackThis v1.99.1 Scan …

Member Avatar for DMR
0
412
Member Avatar for got_edge

It seems I've one of those viruses/bugs that propagates through AIM buddy lists. Now when Windows starts up, I get one of these: [IMG]http://pics.livejournal.com/got_edge/pic/000estdd[/IMG] No programs or files have been deleted, but any customizations that have been made to Windows goes back to default settings whenever Windows starts up. When …

Member Avatar for crunchie
0
195
Member Avatar for Raven11

I am infected with this virus and am currently disabling when it runs. I was wondering if anyone knew how to remove it securely. I've tried scanning the virus with a few scanners, however none seem to detect it. Thanks for any help in advance.

Member Avatar for crunchie
0
78
Member Avatar for dcaporaletti

Hello. Can anyone help me get rid of this! Upon booting up in Windows XP, Norton shows a meesage that this virus has been detected. Heres my highjack this log file. Any help would be greatly appreciated. Logfile of HijackThis v1.99.1 Scan saved at 10:31:14 PM, on 10/4/2005 Platform: Windows …

0
87
Member Avatar for SuperSam

Logfile of HijackThis v1.99.1 Scan saved at 2:19:02 PM, on 10/4/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\drivers\KodakCCS.exe C:\Program Files\WinAntiVirus 2005\AVSvc.exe C:\WINDOWS\uyefsvc.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe C:\Program Files\Microsoft AntiSpyware\gcasServ.exe C:\Program …

0
49
Member Avatar for doug2k9

ok i got a trojan that i can't get rid of for my life it keeps coming back when i delete the stuff that doesn't belong in safe mode it still comes back and it's driving me nuts any advice and solutions would be perfect here's the logs. here's the …

Member Avatar for doug2k9
0
148
Member Avatar for aolshock

Help you guys! I can get to most websites in IE, except for [url]www.gmail.com[/url] and a few others. They work fine in firefox, but I am trying to use napster and apparently its based on IE so this is giving me login issues. Here is my hijack this log: Logfile …

Member Avatar for DMR
0
153
Member Avatar for Sentient

I'm not exactly sure what I'm infected with, but when I do a search in google and click on a link - I'm not taken to the url of the link, but I am redirected to various ads. After realizing I was infected, I restarted in safe mode and ran …

Member Avatar for DMR
0
148
Member Avatar for MadDave123

Hello everyone, this is my first post on these most helpful forums. I just wish it could be under nicer circumstances. My dad has a fairly old PC (AMD 1300 or abouts) running WinXP, and it has contracted the hacktool.rootkit virus. I did a bit of research to fix the …

Member Avatar for MadDave123
0
683
Member Avatar for goldencavalier

I am getting the same message. here is my logfile from hijackthis. Logfile of HijackThis v1.99.1 Scan saved at 2:48:00 AM, on 10/4/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\hkcmd.exe …

Member Avatar for DMR
0
80
Member Avatar for goodtaste

Hi Guys! I have a critter that I never had before. When I boot up, it takes over and immeditely fires up the Internet whether I had that in mind or not. It takes me in automatically and gets me out when it wants to, it freezes my machine when …

0
89
Member Avatar for tedsie

Hey. I'm trying to delete a file that's entitled sshook.dll and for some reason it just won't. I had been trying to uninstall Trend Micro Anti-spyware program, and this is the only file that won't delete. any help? (i don't have hijack this nor will i dl it as this …

Member Avatar for DMR
0
160
Member Avatar for dkewl16

I had the cachecachekit trojan, tried to remove it and not sure if it's actually gone. I also found several other worms and spyware doing searches. This is the sysclean file after using ewido. /--------------------------------------------------------------\ | Trend Micro Sysclean Package | | Copyright 2002, Trend Micro, Inc. | | [url]http://www.trendmicro.com[/url] …

Member Avatar for dkewl16
0
156
Member Avatar for helpmeplease

Hi everyone, thanks for helping me out and lending your time to solving my problems. My computer keeps restarting randomly when not in safe mode. I have windows XP, 2 yr. old computer. a portion of the Error signature: "BCCode : 10000050 BCP1 : 82400000" Error report contents C:\docume~1\owner\locals~1\temp\wer4.tmp.dir00\sys data.xml …

Member Avatar for DMR
0
284
Member Avatar for Rat Boy

Hey People! You guys are great but i have a problem. I have just noticed a problem that when i try to download anything from the internet the progress bar only opens for a moment before automatically closing. Possibly related is the "file edit etc" bar at the top of …

Member Avatar for Rat Boy
0
66
Member Avatar for R3NN3R22

I've had the major annoyance of this adyieldmanager pop-ups. If you could help me, it would be greatly appreciated. Here is my HiJackThis logfile. Logfile of HijackThis v1.99.1 Scan saved at 4:54:06 PM, on 9/30/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe …

Member Avatar for DMR
0
202
Member Avatar for idRATHERgoHUNT

Logfile of HijackThis v1.99.1 Scan saved at 8:22:22 PM, on 9/30/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe …

Member Avatar for DMR
0
113
Member Avatar for Victor587

[B]I also need to delete this virus.. my hijackthis log:[/B] Logfile of HijackThis v1.99.1 Scan saved at 6:43:29 PM, on 9/29/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe …

Member Avatar for Victor587
0
166
Member Avatar for geezer

I've done just about everything I can think of twice now.[IMG] Ihate posting you these HJT logs but they don't seem to be much good anyhow. anyway here's some notes I took whilst doing the lastest tries... In safe mode the homepage does not reset to about:blank. Having said that …

Member Avatar for DMR
0
622
Member Avatar for DMHltd

Get this message after surfing a few minutes. Doesn't matter where I'm trying to get to. I've run adaware,spybot S&d, CW shredder, autorun, and Hijack this. Could someone take a look at this log? Logfile of HijackThis v1.97.7 Scan saved at 8:25:08 PM, on 5/6/2004 Platform: Windows XP SP1 (WinNT …

Member Avatar for Farkie
0
262
Member Avatar for pedrofigo

Hi, I've been trying to get rid of this Trojan but it seems impossible. Here is my HJT and my Ewido log. --------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 19:38:27, on 29-09-2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe …

Member Avatar for crunchie
0
366
Member Avatar for arieatuw

I have been getting the "page cannot be displayed" massages for most sites. I am having a hard time accessing sites such as yahoo, hotmail, ebay, etc. For example, I can only access yahoo after I refresh the page 100 times, well, a little less than that. But the page …

Member Avatar for arieatuw
0
176
Member Avatar for Txsupra

Logfile of HijackThis v1.98.2 Scan saved at 2:43:43 PM, on 9/30/2005 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\SCARDSVR.EXE C:\PROGRAM FILES\COMMON FILES\EPSON\EBAPI\SAGENT2.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\RPCSS.EXE C:\WINDOWS\SYSTEM\DEVLDR16.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HIDSERV.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\COMPAQ\DIGITAL DASHBOARD\CPQMLDET.EXE …

Member Avatar for ddtredskull
0
180
Member Avatar for marmaliser

Hi Guys, I would appreciate your assistance in removing the aurora visrus as its beginning to keep me awake at night! Here is the HJT Log: - Thanks Logfile of HijackThis v1.99.1 Scan saved at 12:48:01, on 10/06/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) …

Member Avatar for presto
0
476
Member Avatar for Chronica111

Hello, this is my first time on this forum so i will just get to the point. While talking on AIM i received a message with a link which i carelessly clicked. Something installed several ad and search applications including the YupSearch bar. I was able to remove YupSearch but …

Member Avatar for crunchie
0
453
Member Avatar for Farkie

Hey, my IE keeps messing up, i cant use it, so i have to use mozilla firefox (which i prefer anyway, but my brother doesnt) I have scanned it with HJT, and found quite a big log. I was wondering which to fix, and which to leave. Ive attached my …

0
79
Member Avatar for lvlIk3

hey, heres the log Logfile of HijackThis v1.99.1 Scan saved at 10:23:06 PM, on 9/28/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\WINDOWS\System32\nvsvc32.exe c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Logitech\iTouch\iTouch.exe C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE …

Member Avatar for crunchie
0
192
Member Avatar for DeeLLG

Can someone look at my hijack this log and tell me what I can do to get rid of this damned virus? I think it's a virus anyway. Help, please. Logfile of HijackThis v1.99.1 Scan saved at 8:52:15 PM, on 9/29/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer …

0
43

The End.