10,784 Topics

Member Avatar for
Member Avatar for gaijin

Logfile of HijackThis v1.98.2 Scan saved at 01:26:54, on 24-May-05 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ScanSoft\OmniPageSE\opware32.exe C:\Program Files\Messenger +\MsgPlus.exe D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Sony\VAIO Action Setup\VAServ.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Messenger\msmsgs.exe …

Member Avatar for crunchie
0
142
Member Avatar for Ilina

hello there, I think my computer has been infected with everything under the sun, it has been running very slow and AwAware and VirusScan both report files that cannot be cleaned. Thought I would give this program a try, appreciate any help!! ogfile of HijackThis v1.99.1 Scan saved at 3:21:27 …

Member Avatar for crunchie
0
141
Member Avatar for Tom62psu

Rcently got ISTsvc and aurora, tryed getting rid of everything still getting popups, heres a hijac log what else is going wrong?? Logfile of HijackThis v1.99.1 Scan saved at 12:06:58 PM, on 5/21/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe …

Member Avatar for crunchie
0
604
Member Avatar for CanaanJohnMarsh

[FONT=Courier New]Logfile of HijackThis v1.99.1 Scan saved at 12:55:07 AM, on 5/23/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Norton Internet Security\ISSVC.exe C:\Program Files\Norton Internet Security\Norton …

Member Avatar for dlh6213
0
127
Member Avatar for Gilly4

When I open the internet my home page has been hijacked to:-res://msaps.dll/search.html and the message "Tss has caused an error in Tss.exe." keeps appearing My hijack this log is as follows: Logfile of HijackThis v1.99.1 Scan saved at 23:55:59, on 10/05/2005 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 …

Member Avatar for dlh6213
0
348
Member Avatar for Soulslinger

First off i want to say that what you guys are doing here is amazing. thank you in advance for all the help. Logfile of HijackThis v1.99.1 Scan saved at 3:24:28 PM, on 05/24/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe …

Member Avatar for Soulslinger
0
99
Member Avatar for faisalniazi

Hello guys, I need some solid help here. Here is my HaijackThis report. I need to get rid of anything thats causing me all the memory drains especially this W32/Bube.gen with my explorer.exe which McAfee does recognize but cannot do anything about it. Any help is appreciated... thanks Logfile of …

Member Avatar for crunchie
0
280
Member Avatar for dbl03

here's the log i ran the other day when i was getting help and then the person helping me just stopped helping me for some reason: Logfile of HijackThis v1.99.1 Scan saved at 12:51:09 PM, on 5/21/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running …

Member Avatar for DMR
0
203
Member Avatar for det54994

Dear someone, I have a problem when IE6 tries to connect to the web. The green bars at the bottom seem to doing something then they seem to stop and it says page can't be displayed. Interestingly when I use a VPN through to the office network and load IE6 …

0
61
Member Avatar for anarchymedes

I think i got some funky virus' and spyware on my computer, heres my HiJack This log....any help would be apprieciated......thanks Logfile of HijackThis v1.99.1 Scan saved at 6:23:45 PM, on 5/22/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe …

Member Avatar for dlh6213
0
253
Member Avatar for chrishop

computer has just recently started being really slow. not sure why. Please help Logfile of HijackThis v1.99.1 Scan saved at 6:07:27 PM, on 5/23/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\BCMSMMSG.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\WINDOWS\System32\DSentry.exe C:\Program …

Member Avatar for paradox814
0
89
Member Avatar for mlbrooks1

Logfile of HijackThis v1.99.1 Scan saved at 9:15:22 PM, on 5/22/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\Explorer.exe C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe C:\Program Files\Common Files\Symantec Shared\Security …

Member Avatar for mlbrooks1
0
182
Member Avatar for Celor

Hello, it has been a while since I posted here, but last time I did you people helped out alot. So, now I have [i]another[/i] problem! THis time with spyware. I have this thing that keeps coming on called "MyWebSearch installer" Which is this installer (duh :P) that pops up …

Member Avatar for alfman
0
91
Member Avatar for WildFire1617

Thanks in advance if anyone looks at this! =) Logfile of HijackThis v1.99.1 Scan saved at 6:58:24 PM, on 5/22/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton …

Member Avatar for crunchie
0
206
Member Avatar for MandyC

I've just started getting this wretched Aurora pop thing too as I see many others have. I have the Microsoft Antispyware Beta thing and Adaware and they pick it up and tell me that they have cleaned it out but it keeps coming back and judging by the information on …

Member Avatar for dlh6213
0
290
Member Avatar for terryg

I have Windows 2000 and when I switch on it runs OK but just before it displays desk top icons, I get a blue frozen screen. If it went over this it would be OK. I can use the PC by switching off in this mode and immediately switching back …

Member Avatar for terryg
0
123
Member Avatar for Jbraz

Ok, I give up. After 3 days of trying to do this on my own, I humbly bow before you and ask for expert advice on how to free my computer of this plague ! :) Here is my HJT log file Logfile of HijackThis v1.99.1 Scan saved at 8:50:56 …

Member Avatar for Jbraz
0
164
Member Avatar for mellinda

hya eveybody. Can anyone help me please. i have got norton internet firewall, when i try to turn on the Intrusion Detection option,it says that "Failed to save setting. Please verify that your windows account is not restricted" i have also try to do it in safe mode as well, …

Member Avatar for phoenix98
0
118
Member Avatar for SKK

Can some one please tell me what i should check as I keep getting "page cannot be displayed" messages when ever I try to browse. I use Internet explorer 6.0 and my OS is windows 2000. I also tried using netscape(7.2) but I still get the error msg "document contains …

Member Avatar for crunchie
0
122
Member Avatar for Stereovisionary

Here's the log: Logfile of HijackThis v1.99.1 Scan saved at 7:17:17 PM, on 5/22/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\csrss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\Tablet.exe C:\WINNT\wanmpsvc.exe C:\WINNT\Explorer.exe C:\WINNT\System32\SK9910DM.EXE C:\WINNT\GWMDMMSG.exe C:\Program Files\Adaptec\Easy CD Creator …

Member Avatar for dlh6213
0
257
Member Avatar for Thong_Ispector

I have had three spoofs in three days all relating to Ebay and Paypal... Title of the messges say things like New Email Address Added, suspicious activity etc... DO NOT CLICK THE LINKS... Go to paypal.com and read how to identify these spoofs... [b][Moderator's edit]: [/b]Even the email links seem …

Member Avatar for DMR
0
86
Member Avatar for Thong_Ispector

Not having any problems but I cant identify everything in the log.. I NEVER use IE... (If that helps) Help as always is greatly appreciated... Running processes: I had not noticed this before... D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe I had not noticed this before... D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\System32\Ati2evxx.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\system32\ZONELABS\vsmon.exe D:\WINDOWS\Explorer.EXE D:\Program …

Member Avatar for DMR
0
185
Member Avatar for kAtHicKa

Howdy Y'all, I actually understood almost all of Gorilla's Host File explanation [URL=http://www.accs-net.com/hosts/what_is_hosts.html]here[/URL] - but my brain collapsed when I got to this papragraph - just couldn't get my mind around this: [COLOR=DarkGreen]"Computers have a host address of their own - it is known as the "localhost" address, with an …

Member Avatar for DMR
0
218
Member Avatar for kAtHicKa

Ok, my 'puter is working a [U]lot[/U] better after all the work I've done, but I'm still having some trouble. Maybe you can figure it out. Here's what I've done to try and help myself... 1) Read the READ ME posts in this forum 2) Ran Trendmicro Virus Scan (no …

Member Avatar for kAtHicKa
0
346
Member Avatar for bgot22

hey...im trying to get rid of search extender and shopping wizard.. heres my log file from hijackthis Logfile of HijackThis v1.99.1 Scan saved at 3:29:02 PM, on 21/05/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE …

Member Avatar for dlh6213
0
143
Member Avatar for Nashii

HI, I've scanned with Norton and found this adware but cant delete it. I've run Hijackthis and this is the log, could you tell me what can I do to get rid of it please? Thanks, Logfile of HijackThis v1.99.1 Scan saved at 8:54:04 AM, on 21/05/2005 Platform: Windows XP …

Member Avatar for crunchie
0
188
Member Avatar for Barak

Well I wanted to connect my other pc (music studio pc) to the LAN and it connected to the net aswell which installed a "Click Me" software...I tried to uninstall and figured out that it ain't the normal software you can uninstall... Anyhow I searched the site and found a …

Member Avatar for crunchie
0
255
Member Avatar for Commodore_64

Thanks for taking the time to read this. As the 'username' shows, I am in the darkages when it comes to technical issues ... so please go easy on me guys. :D Windows 98SE I ran Adaware (safe mode) and it came up clean. I ran SpyBot S&D (safe mode) …

Member Avatar for crunchie
0
361
Member Avatar for zinglo

Hello. I have seen other posts about the Aurora Popup, but Im new to this and am not sure if I would do the same as them. I downloaded HijackThis and did a scan, I got this log: Logfile of HijackThis v1.99.1 Scan saved at 3:05:06 PM, on 5/19/2005 Platform: …

Member Avatar for crunchie
0
212
Member Avatar for maggiebr

please help with the hijack this i dont know what to get rid of.. Logfile of HijackThis v1.99.1 Scan saved at 3:37:46 PM, on 05/21/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\ACCELE~1\SCRIPT~1\scan.exe …

Member Avatar for crunchie
0
283

The End.