10,784 Topics
 | |
| | Have run Adaware and Spybot S&D, but just to make sure (Thanx for helping out) :) : [font=Courier New][size=2]Logfile of HijackThis v1.97.7 Scan saved at 22:50:48, on 06.04.04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE … |
 | when i start my computer a box comes up saying "missing shortcut" and a few of the shortcuts that it says are missing is: morze5.exe nbjikk9x.exe j635cgrl.exe 3x23gli3.exe and everytime i click one box off another one comes up. i looked them up on the net and the only one …  |
| | Hey boys ! I've been hijacked. These are the results after running HijackThis .. Can you tell me what to delete ? Thanks a bunch !! Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\WINDOWS\System32\ScsiAccess.EXE C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\SIMONG~1\LOCALS~1\Temp\Rar$EX00.687\HijackThis.exe …  |
| | When I boot up,I get this as my default page in Internet Options: [url="http://%76%70%75%7A%65%65%2E%74%2E%6D%75%78%61%2E%63%63/%68%2E%70%68%70?%61%69%64=35"]http://%76%70%75%7A%65%65%2E%74%2E%6D%75%78%61%2E%63%63/%68%2E%70%68%70?%61%69%64=35[/url] The page eventually loads as : [url="http://th.msie.cc/index.php?aid=20035"]http://th.msie.cc/index.php?aid=20035[/url] On running hijack this,the file looks as follows: [size=2]Logfile of HijackThis v1.97.7 Scan saved at 22:04:29, on 26/03/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) … |
| | Hi, I want to get rid of this [url="http://www.lookfor.cc"]www.lookfor.cc[/url] search pop up thing. I've run Ad-aware and set the settings to how it said on aother post, then I've run the 'Hijack This' program and done the scan, I've fixed a couple of files which I know that should be … |
| | Hello. I am new to this site but have learned a lot so far by just reading some of your threads. It all started with being hijacked by coolwebsearch(i think). I have since run cws shredder and have restored the ability to use IE, but I suspect I have more … |
| | Hi I need help as well. Hijackthis has detected these... I don't seem to find the part that explains why [url="http://www.lookfor.cc"]www.lookfor.cc[/url] appears... The log from Hijackthis Logfile of HijackThis v1.97.7 Scan saved at 09:02:22, on 25.03.2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe … |
| | i was surfing the net and my connection cut out, my modem started beeping and then i couldnt reconnect. I realised a dialer had kicked in and unplugged my modem. It left like a folder in program files called "WebSiteViewer" which i had to delete from dos. Im pretty computer … |
| | I see a lot of topics posted in this forum, and in quite a number of other forums I participate in, which post 'Hijackthis' logs and end up with detailed and technical procedures to follow to rid systems of internet 'nasties'. And I have to wonder - just what's the … |
| | Tallcool1 here is the list that Hijackthis gave me. Thanks for all the help. StartupList report, 3/31/2004, 7:15:21 PM StartupList version: 1.52 Started from : C:\WINDOWS\TEMP\HIJACKTHIS.EXE Detected: Windows ME (Win9x 4.90.3000) Detected: Internet Explorer v5.50 (5.50.4134.0100) * Using default options ================================================== Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\PROGRAM … |
| | Hello, I been to this forum a few times before for suggestions. This is my first post though. Just wondering if I'm infected any where. bTgX5m8a.exe and also a.exe really stand out to me thx for your help. Logfile of HijackThis v1.97.7 Scan saved at 10:24:05 AM, on 4/1/2004 Platform: … |
| | [b]Dangerous Bug in HijackThis 1.97.7 Restoral Procedure[/b] I have searched everywhere to see if this has already been reported to Merjin, but I can not seem to find any reference to this, so am letting people know. VERY IMPORTANT. YOU MUST READ! Dangerous bug in HijackThis version 1.97.7 when restoring … |
| | I have just created 3 new tutorials about Spyware and two of the more prevalent tools when dealing with them. The first is a primer on Spyware and hijackers and is a good read if you don't understand them. It can be found here: [url="http://www.bleepingcomputer.com/forums/index.php?showtutorial=41"]Understanding Spyware and Browser Hijackers[/url] The … |
| | Logfile of HijackThis v1.97.7 Scan saved at 8:17:24 PM, on 3/31/2004 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPSYSDRV.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\WINDOWS\OLEHELP.EXE C:\PROGRAM FILES\BACKWEB\BACKWEB\PROGRAM\BACKWEB.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\TEMP\RAR$EX01.898\HIJACKTHIS.EXE … |
| | my ie 6 homepage was recently hijacked, and i got all sorts of popups.. i checked out this board and got cwshredder as well as adaware... ran them both and the homepage stopped getting hijacked, however, for some reason the majority of the time i cannot close explorer with the … |
| | Hi guys... I was wondering if anyone could help me with my HijackThis log file.. Everytime I connect to the Internet I get searchcentral.cc as my start page, and I |
| | IE6 has been constantly hijacked ; this damn site : [url]http://www.lookfor.cc/index.php?p=37049[/url] , replaces the start page , obliging me to edit the register HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\start page ; It has happened almost every night since the 1st time a week ago ; An updated Spybot search and destroy has scanned the … |
| | Hi there, I've been having a problem that when I load the task manager it flashes up and then shuts down. I also can't run regedit, renamed it from exe to com and I now can. Based on what I've found there's a virus messing things up. I've done the … |
| | any help with what to fix would be great. thanks in advance. Logfile of HijackThis v1.97.7 Scan saved at 10:59:31 PM, on 3/25/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\CTHELPER.EXE C:\WINDOWS\System32\taskswitch.exe C:\Program … |
| | Hello, :cry: Internet been terribly slow lately, I have run all anti virus/adwares/ online scans I could, and so far nothing has been found. I have just run hijackthis, does anyone see anything strange in the log? Maybe it has something to do with svchost processes? (all those issr.exe, lass.exe …  |
| | I am not sure if this is the right forum to post this but here goes:- I had MS Blaster which was shutting down all my programs. Now I find I have WORM AGOBOT.UY which seems to prevent me from running any virus software. It is in C:\windows\system32\msnmsgr.exe and I … |
| | I have had problems with changed start page by this annoying res://mshp.dll/index.html#10213 ; Besides that every time I run Google.com a pop up ad comes up just after submiting any entry a new browser windows opens with this pesky search company : ([url]http://search-company.com/search.php?qq=kee+bird&pin=10213[/url]) Despite I have employed Hijackthis to clear … |
| | Seems I have been infected with this dreaded worm. I have used the Hijackthis software....with some systems running and have come up with this. Logfile of HijackThis v1.97.7 Scan saved at 8:48:50 PM, on 4/03/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe … |
| | I have the downloader-EV virus on my pc and I wonder if anyone knows ow to get it off i am a computer newbie so could you explain in detail thankyou |
| | Can someone tell me what I should fix and what I should leave alone? Thanks, BuddyB Logfile of HijackThis v1.97.7 Scan saved at 7:34:04 AM, on 3/14/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS.000\System32\smss.exe C:\WINDOWS.000\system32\winlogon.exe C:\WINDOWS.000\system32\services.exe C:\WINDOWS.000\system32\lsass.exe C:\WINDOWS.000\system32\svchost.exe C:\WINDOWS.000\system32\spoolsv.exe C:\WINDOWS.000\System32\svchost.exe C:\WINDOWS.000\system32\regsvc.exe C:\WINDOWS.000\system32\MSTask.exe …  |
| | hi there, i've been hijacked... i read other posts, downloaded HijackThis, ran it and produced a log, i didn't want to delete anything until someone had a look at the log for me, the hijacking is quite agressive, every time a browser window opens you get pop-ups a plenty... anyway, … |
| | Hi everyone. I made a post a few weeks ago about deleting everything on my hijackthis log (I know... really stupid), but this is the log from what my computer is currently running, if anyone could help me out with what I need/what I have that I don't need, I … |
| | All, I have read the thread and picked through my hijack log but after a reboot my home page keeps being reset to [url="http://www.searchdot.net"]www.searchdot.net[/url]. Below is a current hijack log - can someone please help me figure out where the stuff is that is resetting the page. I have also … |
| | Hi! I am running windows 2000 and seem to be having some fairly common problems. I get the GStartup error, random restarts, freezing, and just lots of program errors. I was wondering if somebody could take a look at my log and tell me if i can fix it. also, … |
| | Still tryin to figgure out what this is. Imagine its spyware of some kind dunno what. Logfile of HijackThis v1.97.7 Scan saved at 1:37:34 AM, on 2/12/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program … |
The End.