im1knight

there r the programs..

HJT log:(those hosts just seems to keep coming back) Logfile of HijackThis v1.99.1 Scan saved at 17:36:54, on 2006-12-12 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss[Caution: ExecutableFile] C:\WINDOWS\system32\winlogon[Caution: ExecutableFile] C:\WINDOWS\system32\services[Caution: ExecutableFile] C:\WINDOWS\system32\lsass[Caution: ExecutableFile] C:\WINDOWS\system32\Ati2evxx[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\Program Files\Common Files\Symantec Shared\ccSvcHst[Caution: ExecutableFile] C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32[Caution: ExecutableFile] C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile] C:\WINDOWS\system32\ctfmon[Caution: ExecutableFile] C:\WINDOWS\Explorer[Caution: ExecutableFile] C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc[Caution: ExecutableFile] C:\WINDOWS\system32\cisvc[Caution: ExecutableFile] C:\Program Files\Analog Devices\Core\smax4pnp[Caution: ExecutableFile] C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm[Caution: ExecutableFile] C:\Program Files\HP\hpcoretech\hpcmpmgr[Caution: ExecutableFile] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy[Caution: ExecutableFile] C:\Program Files\iTunes\iTunesHelper[Caution: ExecutableFile] C:\Program Files\QuickTime\qttask[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1155133248\ee\AOLSoftware[Caution: ExecutableFile] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr[Caution: ExecutableFile] C:\WINDOWS\system32\RunDLL32[Caution: ExecutableFile] C:\Program Files\HP\HP Software Update\HPWuSchd2[Caution: ExecutableFile] C:\Program Files\Common Files\Symantec Shared\ccApp[Caution: ExecutableFile] C:\Program Files\Java\jre1.5.0_09\bin\jusched[Caution: ExecutableFile] C:\Program Files\MSN Messenger\msnmsgr[Caution: ExecutableFile] C:\Program Files\HP\hpcoretech\comp\hptskmgr[Caution: ExecutableFile] C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden[Caution: ExecutableFile] C:\Program Files\Google\Web Accelerator\googlewebaccclient[Caution: ExecutableFile] C:\Program Files\iPod\bin\iPodService[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\Program Files\HP\Digital Imaging\bin\hpqgalry[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\system32\cidaemon[Caution: ExecutableFile] C:\Program Files\Mozilla Firefox\firefox[Caution: ExecutableFile] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc[Caution: ExecutableFile] C:\Documents and Settings\ma kevin\Desktop\New Folder\HijackThis[Caution: ExecutableFile] R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll R3 - URLSearchHook: Yahoo! ÃÆÃÂ¥ÃâïÃâüÃÆèÃâ¹Ã¢â¬Â ÃâêÃÆæÃâÃ

here is the panda scan log: (This is all you really need, just clear the cookies) AdTry ware:Adware/IST.ISTBar Not disinfected C:\Documents and Settings\ma kevin\Local Settings\Temporary Internet Files\Content.IE5\5GGCMAHP\yasrepair[1].cab[yrepair.dll] Adware:Adware/IST.ISTBar Not disinfected C:\Documents and Settings\ma kevin\Local Settings\Temporary Internet Files\Content.IE5\N0NCBS66\yasrepair[1].cab[yrepair.dll] Adware:Adware/IST.ISTBar Not disinfected C:\Documents and Settings\ma kevin\Local Settings\Temporary Internet Files\Content.IE5\N0NCBS66\yasrepair[2].cab[yrepair.dll] Virus:Trj/Agent.CZN Not disinfected C:\Documents and Settings\ma kevin\Local Settings\Temporary Internet Files\Content.IE5\OL78GRPT\ad[1][Caution: Executable File][server[Caution: ExecutableFile]] Virus:Trj/Sinowal.DJ Disinfected C:\Documents and Settings\user.USER-B631A26298\Local Settings\Application Data\Mozilla\Firefox\Profiles\nxxv6gxg.default\Cache\A25B47A2d01 Virus:Trj/Agent.CZN Not disinfected C:\WINDOWS\iister[Caution: ExecutableFile][server[Caution: ExecutableFile]] Virus:Trj/Agent.CZN Disinfected C:\WINDOWS\system32\WinInstall[Caution: ExecutableFile]

erm..weezy just let me done that. i finally made my panda scan work tho=) anyways..ill post the new log..sec

nope..not even once

hm...its better than mine... cuz if u read my thread... I CANT EVEN BROWSE WITH IE ANYMORE~!! anyways..u might want to try do a virus scan. if it still wont go away, then just easily download firefox... or reinstall ur IE

nope..mine is English Windows Xp. and i did not nstall any translators. and does the panda scan thingy install AV to my computer since Norton don't allow any other AV program? and also... my IE is now becaming rarely useable since th virus is on. everytime i click the scan button... it frozen... and it dont support firefox...so any ideas.. also.. should i just do a system restore? i know its no good fro the computer since last time i do system restore and it burned up my hard drive :-w but is there anyway to opent he panda scan without using IE? and feel free to add me on messenger since it took so long on forum to get a reply..lol

any ideas..... :-s

they r just cookies..thats y they keep coming back

what on earth are u talkin about...

for me... its noisy "BEEP! BEEP! BEEP! BEEP! BEEP! BEEP!" my alarm wake my parents up from 2 rooms away... :anxious:

im in 7th grade so..might b different from high school.. math 90% E English 82% S Spanish65% NS hate spanish... Reading 89% E science 90% E PE 100% E History 87% E avarage:84.05(missed my goal by 0.95 points.....)

any1..

hmm...runescape...wenxuecity.com google search... tip.it runehq.. and i think thats about it..and mail.yahoo.com.cn aol.com and msn.com i guess thats it

ok....not sure if this is the log u guys wanted..but uh..here it is almost every of them r ended with "[Caution]" after i pasted on the forum dunno why...but hopefully it dont effect u guys looking at it and TYVM for take time out and read the.....entire....list...and hopefully u guys can find a solution=) Logfile of HijackThis v1.99.1 Scan saved at 19:42:46, on 2006-12-11 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss[Caution: ExecutableFile] C:\WINDOWS\system32\winlogon[Caution: ExecutableFile] C:\WINDOWS\system32\services[Caution: ExecutableFile] C:\WINDOWS\system32\lsass[Caution: ExecutableFile] C:\WINDOWS\system32\Ati2evxx[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\Program Files\Common Files\Symantec Shared\ccSvcHst[Caution: ExecutableFile] C:\WINDOWS\SERVICES[Caution: ExecutableFile] C:\WINDOWS\Explorer[Caution: ExecutableFile] C:\WINDOWS\system32\ctfmon[Caution: ExecutableFile] C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32[Caution: ExecutableFile] C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile] C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc[Caution: ExecutableFile] C:\WINDOWS\system32\cisvc[Caution: ExecutableFile] C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm[Caution: ExecutableFile] C:\Program Files\Analog Devices\Core\smax4pnp[Caution: ExecutableFile] C:\Program Files\HP\hpcoretech\hpcmpmgr[Caution: ExecutableFile] C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy[Caution: ExecutableFile] C:\Program Files\iTunes\iTunesHelper[Caution: ExecutableFile] C:\Program Files\QuickTime\qttask[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1155133248\ee\AOLSoftware[Caution: ExecutableFile] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr[Caution: ExecutableFile] C:\WINDOWS\system32\RunDLL32[Caution: ExecutableFile] C:\Program Files\HP\HP Software Update\HPWuSchd2[Caution: ExecutableFile] C:\Program Files\Common Files\Symantec Shared\ccApp[Caution: ExecutableFile] C:\Program Files\Java\jre1.5.0_09\bin\jusched[Caution: ExecutableFile] C:\PROGRA~1\Yahoo!\ASSIST~1\YLive[Caution: ExecutableFile] C:\Program Files\MSN Messenger\msnmsgr[Caution: ExecutableFile] C:\Program Files\iPod\bin\iPodService[Caution: ExecutableFile] C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden[Caution: ExecutableFile] C:\Program Files\Google\Web Accelerator\googlewebaccclient[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\Program Files\HP\hpcoretech\comp\hptskmgr[Caution: ExecutableFile] C:\Program Files\HP\Digital Imaging\bin\hpqgalry[Caution: ExecutableFile] C:\Program Files\Internet Explorer\IEXPLORE[Caution: ExecutableFile] C:\PROGRA~1\Yahoo!\browser\ycommon[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\Program Files\Mozilla Firefox\firefox[Caution: ExecutableFile] C:\WINDOWS\system32\cidaemon[Caution: ExecutableFile] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc[Caution: ExecutableFile] c:\program files\common files\aol\1155133248\ee\aim6[Caution: ExecutableFile] C:\Documents and Settings\ma kevin\Desktop\New Folder\HijackThis[Caution: ExecutableFile] R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll R3 - URLSearchHook: Yahoo! ÃÆÃÂ¥ÃâïÃâüÃÆèÃâ¹Ã¢â¬Â ÃâêÃÆæÃâÃ

ere..where do i click for system scan?

um... i can't even watch the movie on windows media..... any idea how 2 do it?

erm.. how do u post on that site.....

i think this belongs in gallery forum.. and do not bump ur thread lol

how do i get the data for without the burner then..and how long does the burner last burning..?

finished scanning in safe mode..... find the same virus thing as before..and when i start windows in normal mode... the stupid window pop up again... and also..i noticed that the place where its been placed is in system restore[some numbers] so...maybe i cant remove it? any ideas

yep tis safe

whoa... thats powerful-.-..anyways im gonan try to start pc in safe mode and run scan also... i have see 18 unauthorized access from the website according to my Norton firewall log and is there anyway to block my cmputer from visiting the site?

any..ideas...

im not sure if this belongs to here but im getitng 70 pray and im going to use guided altar in my house. i want to know for the calculator, the number of bones it shows is for with the lamb lighted or without? can any1 tell me