nolothepoet Posted April 11, 2005 Share Posted April 11, 2005 I use firfox,but lately it seems I get popups,but where from ? Internet explorer of all places. I would uninstall it,but I still use it at certain times. I don't understand why they come up though. This happens when Im using the firefox browser. That is what I find hard to believe,but I also have used spybot search and destroy and also ad aware and xsoft. Any tips ? Link to comment Share on other sites More sharing options...
Greatsilverwyrm Posted April 11, 2005 Share Posted April 11, 2005 Try posting a HJT log, it's possible that even though you use Spybot and etc, you still have some spyware. If you're fairly sure you don't have any spyware and stuff.. Could you take a screenshot of one of the pop-ups? It's possible it's messenger pop-ups, which are quite easy to disable. Post a HJT log and a screenshot of one of the pop-ups, if you can. Link to comment Share on other sites More sharing options...
nolothepoet Posted April 11, 2005 Author Share Posted April 11, 2005 Not familiar with HJT logs,but I think you mean the high jack this program. Never used it. Sure when it happens I will screenshot it. It's come cabin log website and some other stuff....I searched for them on google. Didn't do anything extensive,but yea figured I would get you techs opinion. I know spyware never leaves :P Thanks for the tips screenshots as soon as possible. But thats another thing they happen randomly. So yea next time they come around. Link to comment Share on other sites More sharing options...
Ran_Shadow2 Posted April 11, 2005 Share Posted April 11, 2005 hijackthis is super fast to download and run, wont take you 5 mins to post a log, just type hijackthis into google Link to comment Share on other sites More sharing options...
nolothepoet Posted April 11, 2005 Author Share Posted April 11, 2005 Hijacked Logfile of HijackThis v1.99.1 Scan saved at 5:36:59 PM, on 4/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss[Caution: ExecutableFile] C:\WINDOWS\system32\winlogon[Caution: ExecutableFile] C:\WINDOWS\system32\services[Caution: ExecutableFile] C:\WINDOWS\system32\lsass[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\Program Files\Ahead\InCD\InCDsrv[Caution: ExecutableFile] C:\WINDOWS\Explorer[Caution: ExecutableFile] C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile] C:\WINDOWS\runservice[Caution: ExecutableFile] C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc[Caution: ExecutableFile] C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT[Caution: ExecutableFile] C:\WINDOWS\System32\snmp[Caution: ExecutableFile] C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb[Caution: ExecutableFile] C:\PROGRA~1\NORTON~1\NORTON~1\navapw32[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\PROGRA~1\NORTON~1\WINFAX\WFXSWTCH[Caution: ExecutableFile] C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile] C:\Program Files\Java\jre1.5.0_02\bin\jusched[Caution: ExecutableFile] C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC[Caution: ExecutableFile] C:\WINDOWS\xdamwidt[Caution: ExecutableFile] C:\Program Files\ISTsvc\istsvc[Caution: ExecutableFile] C:\Program Files\Real\RealPlayer\RealPlay[Caution: ExecutableFile] C:\Documents and Settings\Pc\My Documents\Nol\runescape[Caution: ExecutableFile] C:\Program Files\Mozilla Firefox\firefox[Caution: ExecutableFile] C:\Program Files\Yahoo!\Messenger\YPager[Caution: ExecutableFile] C:\DOCUMENTS AND SETTINGS\PC\DESKTOP\HijackThis[Caution: ExecutableFile] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll O1 - Hosts: 213.159.117.217 http://www.22469.com O1 - Hosts: 213.159.117.217 http://www.3wisp.com O1 - Hosts: 213.159.117.217 http://www.adult-cinema.org O1 - Hosts: 213.159.117.217 http://www.adultfreehosting.com O1 - Hosts: 213.159.117.217 http://www.adulthosting.com O1 - Hosts: 213.159.117.217 http://www.adultlinks1.com O1 - Hosts: 213.159.117.217 http://www.adultmegamovies.com O1 - Hosts: 213.159.117.217 http://www.adultsexmovie.net O1 - Hosts: 213.159.117.217 http://www.adultwall.com O1 - Hosts: 213.159.117.217 http://www.afro-sex.com O1 - Hosts: 213.159.117.217 http://www.agreathost.net O1 - Hosts: 213.159.117.217 http://www.alehina.com O1 - Hosts: 213.159.117.217 http://www.allnichestgp.com O1 - Hosts: 213.159.117.217 http://www.allowednet.com O1 - Hosts: 213.159.117.217 http://www.amateurlips.com O1 - Hosts: 213.159.117.217 http://www.amateurnudephoto.com O1 - Hosts: 213.159.117.217 http://www.amateursgonebad.com O1 - Hosts: 213.159.117.217 http://www.ambersamateurhardcore.com O1 - Hosts: 213.159.117.217 http://www.anyamateur.com O1 - Hosts: 213.159.117.217 http://www.apornhost.com O1 - Hosts: 213.159.117.217 http://www.findmodels.com O1 - Hosts: 213.159.117.217 http://www.asianscum.com O1 - Hosts: 213.159.117.217 http://www.awethumbs.com O1 - Hosts: 213.159.117.217 http://www.badassxxx.com O1 - Hosts: 213.159.117.217 http://www.badbimbo.com O1 - Hosts: 213.159.117.217 http://www.beautifulbondage.com O1 - Hosts: 213.159.117.217 http://www.bestpornhost.com O1 - Hosts: 213.159.117.217 inporn.net]http://www.biggest[bleep]inporn.net O1 - Hosts: 213.159.117.217 www1.3wisp.com O1 - Hosts: 213.159.117.217 www1.kinghost.com O1 - Hosts: 213.159.117.217 www1.ndhosting.com O1 - Hosts: 213.159.117.217 www1.sexls.com O1 - Hosts: 213.159.117.217 www1.smutserver.com O1 - Hosts: 213.159.117.217 www1.toptgphost.com O1 - Hosts: 213.159.117.217 www1.xfreehosting.com O1 - Hosts: 213.159.117.217 www10.kinghost.com O1 - Hosts: 213.159.117.217 www10.smutserver.com O1 - Hosts: 213.159.117.217 www11.kinghost.com O1 - Hosts: 213.159.117.217 www11.smutserver.com O1 - Hosts: 213.159.117.217 www12.kinghost.com O1 - Hosts: 213.159.117.217 www12.smutserver.com O1 - Hosts: 213.159.117.217 www13.smutserver.com O1 - Hosts: 213.159.117.217 www14.smutserver.com O1 - Hosts: 213.159.117.217 www15.smutserver.com O1 - Hosts: 213.159.117.217 www16.smutserver.com O1 - Hosts: 213.159.117.217 www17.smutserver.com O1 - Hosts: 213.159.117.217 www18.smutserver.com O1 - Hosts: 213.159.117.217 www19.smutserver.com O1 - Hosts: 213.159.117.217 www2.3wisp.com O1 - Hosts: 213.159.117.217 www2.kinghost.com O1 - Hosts: 213.159.117.217 www2.ndhosting.com O1 - Hosts: 213.159.117.217 www2.smutserver.com O1 - Hosts: 213.159.117.217 www2.toptgphost.com O1 - Hosts: 213.159.117.217 www2.xfreehosting.com O1 - Hosts: 213.159.117.217 www2.zpornstars.com O1 - Hosts: 213.159.117.217 www20.smutserver.com O1 - Hosts: 213.159.117.217 www21.smutserver.com O1 - Hosts: 213.159.117.217 www22.smutserver.com O1 - Hosts: 213.159.117.217 www23.smutserver.com O1 - Hosts: 213.159.117.217 www24.smutserver.com O1 - Hosts: 213.159.117.217 www25.smutserver.com O1 - Hosts: 213.159.117.217 www26.smutserver.com O1 - Hosts: 213.159.117.217 www27.smutserver.com O1 - Hosts: 213.159.117.217 www28.smutserver.com O1 - Hosts: 213.159.117.217 www29.smutserver.com O1 - Hosts: 213.159.117.217 www3.kinghost.com O1 - Hosts: 213.159.117.217 www3.ndhosting.com O1 - Hosts: 213.159.117.217 www3.smutserver.com O1 - Hosts: 213.159.117.217 www3.xfreehosting.com O1 - Hosts: 213.159.117.217 www3.zpornstars.com O1 - Hosts: 213.159.117.217 www30.smutserver.com O1 - Hosts: 213.159.117.217 www31.smutserver.com O1 - Hosts: 213.159.117.217 www32.smutserver.com O1 - Hosts: 213.159.117.217 www4.kinghost.com O1 - Hosts: 213.159.117.217 www4.smutserver.com O1 - Hosts: 213.159.117.217 www4.xfreehosting.com O1 - Hosts: 213.159.117.217 www4.zpornstars.com O1 - Hosts: 213.159.117.217 www5.kinghost.com O1 - Hosts: 213.159.117.217 www5.smutserver.com O1 - Hosts: 213.159.117.217 www6.kinghost.com O1 - Hosts: 213.159.117.217 www6.smutserver.com O1 - Hosts: 213.159.117.217 www7.kinghost.com O1 - Hosts: 213.159.117.217 www7.smutserver.com O1 - Hosts: 213.159.117.217 www8.kinghost.com O1 - Hosts: 213.159.117.217 www8.smutserver.com O1 - Hosts: 213.159.117.217 www9.kinghost.com O1 - Hosts: 213.159.117.217 www9.smutserver.com O1 - Hosts: 213.159.117.217 http://www.bigmovies.com O1 - Hosts: 213.159.117.217 http://www.bigpornvideos.com O1 - Hosts: 213.159.117.217 http://www.big-xxx-movies.com O1 - Hosts: 213.159.117.217 http://www.samplehosting.com O1 - Hosts: 213.159.117.217 http://www.blinghosting.com O1 - Hosts: 213.159.117.217 http://www.blitz-hosting.com O1 - Hosts: 213.159.117.217 http://www.boyanxxx.com O1 - Hosts: 213.159.117.217 http://www.bustyx.com O1 - Hosts: 213.159.117.217 http://www.cleanadulthost.com O1 - Hosts: 213.159.117.217 http://www.cleanpornhost.com O1 - Hosts: 213.159.117.217 http://www.cyberxxxhost.com O1 - Hosts: 213.159.117.217 http://www.dialcom.com O1 - Hosts: 213.159.117.217 http://www.eldererotica.tv O1 - Hosts: 213.159.117.217 http://www.ethniccash.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\NORTON~1\navapw32[Caution: ExecutableFile] O4 - HKLM\..\Run: [WFXSwtch] C:\PROGRA~1\NORTON~1\WINFAX\WFXSWTCH[Caution: ExecutableFile] O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]" -osboot O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon[Caution: ExecutableFile] O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched[Caution: ExecutableFile] O4 - HKLM\..\Run: [xJQm] C:\WINDOWS\xdamwidt[Caution: ExecutableFile] O4 - HKLM\..\Run: [ÃÆÃâÃâà Link to comment Share on other sites More sharing options...
Mercifull Posted April 11, 2005 Share Posted April 11, 2005 Ctrl+Alt+Del C:\WINDOWS\xdamwidt[Caution: ExecutableFile] C:\Program Files\ISTsvc\istsvc[Caution: ExecutableFile] Then "fix the following O1 - Hosts: 213.159.117.217 http://www.22469.com O1 - Hosts: 213.159.117.217 http://www.3wisp.com O1 - Hosts: 213.159.117.217 http://www.adult-cinema.org O1 - Hosts: 213.159.117.217 http://www.adultfreehosting.com O1 - Hosts: 213.159.117.217 http://www.adulthosting.com O1 - Hosts: 213.159.117.217 http://www.adultlinks1.com O1 - Hosts: 213.159.117.217 http://www.adultmegamovies.com O1 - Hosts: 213.159.117.217 http://www.adultsexmovie.net O1 - Hosts: 213.159.117.217 http://www.adultwall.com O1 - Hosts: 213.159.117.217 http://www.afro-sex.com O1 - Hosts: 213.159.117.217 http://www.agreathost.net O1 - Hosts: 213.159.117.217 http://www.alehina.com O1 - Hosts: 213.159.117.217 http://www.allnichestgp.com O1 - Hosts: 213.159.117.217 http://www.allowednet.com O1 - Hosts: 213.159.117.217 http://www.amateurlips.com O1 - Hosts: 213.159.117.217 http://www.amateurnudephoto.com O1 - Hosts: 213.159.117.217 http://www.amateursgonebad.com O1 - Hosts: 213.159.117.217 http://www.ambersamateurhardcore.com O1 - Hosts: 213.159.117.217 http://www.anyamateur.com O1 - Hosts: 213.159.117.217 http://www.apornhost.com O1 - Hosts: 213.159.117.217 http://www.findmodels.com O1 - Hosts: 213.159.117.217 http://www.asianscum.com O1 - Hosts: 213.159.117.217 http://www.awethumbs.com O1 - Hosts: 213.159.117.217 http://www.badassxxx.com O1 - Hosts: 213.159.117.217 http://www.badbimbo.com O1 - Hosts: 213.159.117.217 http://www.beautifulbondage.com O1 - Hosts: 213.159.117.217 http://www.bestpornhost.com O1 - Hosts: 213.159.117.217 inporn.net]http://www.biggest[bleep]inporn.net O1 - Hosts: 213.159.117.217 www1.3wisp.com O1 - Hosts: 213.159.117.217 www1.kinghost.com O1 - Hosts: 213.159.117.217 www1.ndhosting.com O1 - Hosts: 213.159.117.217 www1.sexls.com O1 - Hosts: 213.159.117.217 www1.smutserver.com O1 - Hosts: 213.159.117.217 www1.toptgphost.com O1 - Hosts: 213.159.117.217 www1.xfreehosting.com O1 - Hosts: 213.159.117.217 www10.kinghost.com O1 - Hosts: 213.159.117.217 www10.smutserver.com O1 - Hosts: 213.159.117.217 www11.kinghost.com O1 - Hosts: 213.159.117.217 www11.smutserver.com O1 - Hosts: 213.159.117.217 www12.kinghost.com O1 - Hosts: 213.159.117.217 www12.smutserver.com O1 - Hosts: 213.159.117.217 www13.smutserver.com O1 - Hosts: 213.159.117.217 www14.smutserver.com O1 - Hosts: 213.159.117.217 www15.smutserver.com O1 - Hosts: 213.159.117.217 www16.smutserver.com O1 - Hosts: 213.159.117.217 www17.smutserver.com O1 - Hosts: 213.159.117.217 www18.smutserver.com O1 - Hosts: 213.159.117.217 www19.smutserver.com O1 - Hosts: 213.159.117.217 www2.3wisp.com O1 - Hosts: 213.159.117.217 www2.kinghost.com O1 - Hosts: 213.159.117.217 www2.ndhosting.com O1 - Hosts: 213.159.117.217 www2.smutserver.com O1 - Hosts: 213.159.117.217 www2.toptgphost.com O1 - Hosts: 213.159.117.217 www2.xfreehosting.com O1 - Hosts: 213.159.117.217 www2.zpornstars.com O1 - Hosts: 213.159.117.217 www20.smutserver.com O1 - Hosts: 213.159.117.217 www21.smutserver.com O1 - Hosts: 213.159.117.217 www22.smutserver.com O1 - Hosts: 213.159.117.217 www23.smutserver.com O1 - Hosts: 213.159.117.217 www24.smutserver.com O1 - Hosts: 213.159.117.217 www25.smutserver.com O1 - Hosts: 213.159.117.217 www26.smutserver.com O1 - Hosts: 213.159.117.217 www27.smutserver.com O1 - Hosts: 213.159.117.217 www28.smutserver.com O1 - Hosts: 213.159.117.217 www29.smutserver.com O1 - Hosts: 213.159.117.217 www3.kinghost.com O1 - Hosts: 213.159.117.217 www3.ndhosting.com O1 - Hosts: 213.159.117.217 www3.smutserver.com O1 - Hosts: 213.159.117.217 www3.xfreehosting.com O1 - Hosts: 213.159.117.217 www3.zpornstars.com O1 - Hosts: 213.159.117.217 www30.smutserver.com O1 - Hosts: 213.159.117.217 www31.smutserver.com O1 - Hosts: 213.159.117.217 www32.smutserver.com O1 - Hosts: 213.159.117.217 www4.kinghost.com O1 - Hosts: 213.159.117.217 www4.smutserver.com O1 - Hosts: 213.159.117.217 www4.xfreehosting.com O1 - Hosts: 213.159.117.217 www4.zpornstars.com O1 - Hosts: 213.159.117.217 www5.kinghost.com O1 - Hosts: 213.159.117.217 www5.smutserver.com O1 - Hosts: 213.159.117.217 www6.kinghost.com O1 - Hosts: 213.159.117.217 www6.smutserver.com O1 - Hosts: 213.159.117.217 www7.kinghost.com O1 - Hosts: 213.159.117.217 www7.smutserver.com O1 - Hosts: 213.159.117.217 www8.kinghost.com O1 - Hosts: 213.159.117.217 www8.smutserver.com O1 - Hosts: 213.159.117.217 www9.kinghost.com O1 - Hosts: 213.159.117.217 www9.smutserver.com O1 - Hosts: 213.159.117.217 http://www.bigmovies.com O1 - Hosts: 213.159.117.217 http://www.bigpornvideos.com O1 - Hosts: 213.159.117.217 http://www.big-xxx-movies.com O1 - Hosts: 213.159.117.217 http://www.samplehosting.com O1 - Hosts: 213.159.117.217 http://www.blinghosting.com O1 - Hosts: 213.159.117.217 http://www.blitz-hosting.com O1 - Hosts: 213.159.117.217 http://www.boyanxxx.com O1 - Hosts: 213.159.117.217 http://www.bustyx.com O1 - Hosts: 213.159.117.217 http://www.cleanadulthost.com O1 - Hosts: 213.159.117.217 http://www.cleanpornhost.com O1 - Hosts: 213.159.117.217 http://www.cyberxxxhost.com O1 - Hosts: 213.159.117.217 http://www.dialcom.com O1 - Hosts: 213.159.117.217 http://www.eldererotica.tv O1 - Hosts: 213.159.117.217 http://www.ethniccash.com O4 - HKLM\..\Run: [xJQm] C:\WINDOWS\xdamwidt[Caution: ExecutableFile] O4 - HKLM\..\Run: [ÃÆÃâÃâà Mercifull <3 Suzi "We don't want players to be able to buy their way to success in RuneScape. If we let players start doing this, it devalues RuneScape for others. We feel your status in real-life shouldn't affect your ability to be successful in RuneScape" Jagex 01/04/01 - 02/03/12 Link to comment Share on other sites More sharing options...
nolothepoet Posted April 11, 2005 Author Share Posted April 11, 2005 Thanks Logfile of HijackThis v1.99.1 Scan saved at 6:37:48 PM, on 4/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss[Caution: ExecutableFile] C:\WINDOWS\system32\winlogon[Caution: ExecutableFile] C:\WINDOWS\system32\services[Caution: ExecutableFile] C:\WINDOWS\system32\lsass[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\Program Files\Ahead\InCD\InCDsrv[Caution: ExecutableFile] C:\WINDOWS\Explorer[Caution: ExecutableFile] C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile] C:\WINDOWS\runservice[Caution: ExecutableFile] C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc[Caution: ExecutableFile] C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT[Caution: ExecutableFile] C:\WINDOWS\System32\snmp[Caution: ExecutableFile] C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb[Caution: ExecutableFile] C:\PROGRA~1\NORTON~1\NORTON~1\navapw32[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\PROGRA~1\NORTON~1\WINFAX\WFXSWTCH[Caution: ExecutableFile] C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile] C:\Program Files\Java\jre1.5.0_02\bin\jusched[Caution: ExecutableFile] C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC[Caution: ExecutableFile] C:\Program Files\Real\RealPlayer\RealPlay[Caution: ExecutableFile] C:\Documents and Settings\Pc\My Documents\Nol\runescape[Caution: ExecutableFile] C:\Program Files\Mozilla Firefox\firefox[Caution: ExecutableFile] C:\Program Files\Yahoo!\Messenger\YPager[Caution: ExecutableFile] C:\DOCUMENTS AND SETTINGS\PC\DESKTOP\HijackThis[Caution: ExecutableFile] C:\Program Files\Winamp\winamp[Caution: ExecutableFile] C:\Program Files\mIRC\mirc[Caution: ExecutableFile] C:\Program Files\Ares\Ares[Caution: ExecutableFile] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\NORTON~1\navapw32[Caution: ExecutableFile] O4 - HKLM\..\Run: [WFXSwtch] C:\PROGRA~1\NORTON~1\WINFAX\WFXSWTCH[Caution: ExecutableFile] O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]" -osboot O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon[Caution: ExecutableFile] O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched[Caution: ExecutableFile] O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim[Caution: ExecutableFile] -cnetwait.odl O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL[Caution: ExecutableFile]/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim[Caution: ExecutableFile] O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite[Caution: ExecutableFile] O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite[Caution: ExecutableFile] O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {01FE8D0A-51AD-459B-B62B-85E135128B32} (DD_v4.DDv4) - http://www.drivershq.com/DD_v4.CAB O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/7680 ... scan53.cab O16 - DPF: {9CCE3B43-4DE0-4236-A84E-108CA848EE6A} (WebCam Control) - http://www.webcamnow.com/broadcast/ActiveXWebCam.cab O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) - O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv[Caution: ExecutableFile] O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\WINDOWS\runservice[Caution: ExecutableFile] O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc[Caution: ExecutableFile] O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT[Caution: ExecutableFile] O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ[Caution: ExecutableFile] O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc[Caution: ExecutableFile] O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb[Caution: ExecutableFile] O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC[Caution: ExecutableFile] O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc[Caution: ExecutableFile] Link to comment Share on other sites More sharing options...
Mercifull Posted April 12, 2005 Share Posted April 12, 2005 C:\Program Files\Ares\Ares[Caution: ExecutableFile] = Ares password cracking software? Did it occur to you that the root of your problems may be because you are downloading illegal programs? :evil: :evil: :evil: :evil: :evil: Mercifull <3 Suzi "We don't want players to be able to buy their way to success in RuneScape. If we let players start doing this, it devalues RuneScape for others. We feel your status in real-life shouldn't affect your ability to be successful in RuneScape" Jagex 01/04/01 - 02/03/12 Link to comment Share on other sites More sharing options...
Hannibal Posted April 12, 2005 Share Posted April 12, 2005 C:\Program Files\Ares\Ares.e3e (CAUTION - executable file) = Ares password cracking software? Did it occur to you that the root of your problems may be because you are downloading illegal programs? :evil: :evil: :evil: :evil: :evil: Actually, if may also be a trojan. To the poster: how long since you updated Norton and Spybot? (No, don't go 'they update themselves'. They don't (well, not always, anyway)) I'd advise you to update both, and then scan your computer again. Link to comment Share on other sites More sharing options...
h0max Posted April 12, 2005 Share Posted April 12, 2005 lmao bit of porn sites in there eh? u horny bugger Link to comment Share on other sites More sharing options...
Mercifull Posted April 12, 2005 Share Posted April 12, 2005 lmao bit of porn sites in there eh? u horny bugger Actually those porn sites are host entries to this ip 213.159.117.217 Its so that IF he wants to go on those sites he will be redirected thru the spyware company first to server lots of popup adverts. He hasnt necceserily gone to those sites. 213.159.117.217 = [ sr-DiNN-s2-gw.117-217.justdns.biz ] Registered to a man in Bulgaria Mercifull <3 Suzi "We don't want players to be able to buy their way to success in RuneScape. If we let players start doing this, it devalues RuneScape for others. We feel your status in real-life shouldn't affect your ability to be successful in RuneScape" Jagex 01/04/01 - 02/03/12 Link to comment Share on other sites More sharing options...
L_B_P Posted April 12, 2005 Share Posted April 12, 2005 If you wanna analyse you owne hijack log file you can always do it here http://www.hijackthis.de/ Link to comment Share on other sites More sharing options...
Mercifull Posted April 12, 2005 Share Posted April 12, 2005 If you wanna analyse you owne hijack log file you can always do it here http://www.hijackthis.de/ WARNING TO ALL DO NOT TAKE WHAT HIJACKTHIS.DE SAYS AS GOSPEL. IT IS NOT THE BEST WAY TO GET YOUR LOG CHECKED. THE PEOPLE ON THIS FORUM THAT HELP WITH LOGS CHECK ALL REGISTRY ENTRIES FROM SEVERAL SOURCES. YOU CAN SERIOUSLY DAMAGE YOUR COMPUTER BY DELETING THE WRONG THINGS FROM HIJACKTHIS. ONLY FIX THINGS THAT HAVE BEEN CHECKED BY ONE OF US ON THE TECH AND COMPS BOARD Mercifull <3 Suzi "We don't want players to be able to buy their way to success in RuneScape. If we let players start doing this, it devalues RuneScape for others. We feel your status in real-life shouldn't affect your ability to be successful in RuneScape" Jagex 01/04/01 - 02/03/12 Link to comment Share on other sites More sharing options...
L_B_P Posted April 12, 2005 Share Posted April 12, 2005 Mercifull before you get in total panic and read something I haven't wrote please try read it again. I have never say ppl shouldn't come here and ask for help, but the analyser could be 1 impression if ppl had serios troubles. 2. Something you forgot to mention is, asking ppl to come here that already have problems with viru and trojans, then the ads here spreading virus and trojans to ppl computer. Just do some few test and you will know what im talking about on this site. Stop me a moron and do some test before you claim and accuse ppl. thx in advance hope to see more hopework done before you keep on playing smart Link to comment Share on other sites More sharing options...
Pyro Posted April 12, 2005 Share Posted April 12, 2005 Mercifull before you get in total panic and read something I haven't wrote please try read it again. I have never say ppl shouldn't come here and ask for help, but the analyser could be 1 impression if ppl had serios troubles. 2. Something you forgot to mention is, asking ppl to come here that already have problems with viru and trojans, then the ads here spreading virus and trojans to ppl computer. Just do some few test and you will know what im talking about on this site. Stop me a moron and do some test before you claim and accuse ppl. thx in advance hope to see more hopework done before you keep on playing smartThe Hijackthis.de analyzer was not created to show people which entries are bad, it was created to show people which entries aren't. Hence, it is useless to anyone who cannot distinguish between parasites and false positives. Mercifull is correct, those who do not know what they are doing could risk messing up software by using it, and thus I would say his reaction was justified. Link to comment Share on other sites More sharing options...
nolothepoet Posted April 13, 2005 Author Share Posted April 13, 2005 Yea I know better to download illegal software on Ares,but yea I know I did. That was stupid of me,but I did. However I think that was when a certain game came out and for some reason I chose to use Ares :D My mistake. Just a note I would have been able to figure out some of those porn site issues. As far as checking them,but Im not able to know the other stuff that I was asked to delete and therefore I thank you all for it. But for those who are wondering if I visited any of those. :P No no no. My girlfriend is my porn. Well and I do use Ares for that reason alone sometimes. :D But yea no more popups. Thank you all. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now