Do you have Adware, Spyware, Virus/Trojan or a Browser Hijacker?

I think webroot has a free 30 day trail on their spyware....have it on my moms lap top and seems to work okay...

http://www.webroot.com/enterprise/downloads/?WRSID=89fa2203c650e6f5d69ede0e856b622d

just an old highway tramp
---Bill---

 

again:

well im still having a problem with that virus or whaatever it is that is opening things (usually opens the start menue thing) and im i've been trying to remove it since august now im bak to here asking again, if you guys no what this is and how i remove it..

 

dude845

you have to post more info on the type and name of the virus you have

post all the info you have on it,like any errors...and so forth..

 

Whisper10
just wondering if you have ever tried a custom install ...which gives you control of what you install ...like i have system works in ..with out ghost and with out go back...and well maybe you just haven't looked deep enough...but with the works...and might "ADD A LEGAL COPY" ....that next year for the same protection and all the regular weekly updates on the new virus..and so forth...only cost you 20 ....yea sure the first pop is 70....but as long as your legal next year is only 20...and so on...As for the added fire wall..only running the worm....but it has saved me a lot of headaches...but then again...I am running 1 gig of ram...(daul channel) expandable to 4 gig....and haven't noticed any slow down.....my video card has my Drain on my useage than what norton does......BOTTOM line it... boils down to the set up your running...board ..chipset... and ram...then what all you have set to run on opening ....

anyway going to get out of here before the MOD deciedes to but a boot to me.....hehehe

TAKE CARE ALL

just an old highway tramp
----Bill----

 

i don't noe the virus name (or if adware spywer)or the errors it does, all the scans i've done, with diffrent scanners havn't found anythin. all i noe is it opens programs at random times usually startmenue thing. it seems that its eating my memory i think its eating my memory or its another virus dun noe, i just want it out.

 

dude845
for some reason I got something in the back of my mind telling me that you might try this link.....as you maybe dealing with a rapid blaster......I maybe way off base....but you don't know till you try.

http://rapidblaster.antispytools.com/

check it out and please let me know as you now have my curiousty up..

just an old highway tramp
---Bill---

 

dude845
here is a page to also read about rapid blaster....

http://www.wilderssecurity.net/specialinfo/rapidblaster.html

and here is where you can down load the tool

http://www.wilderssecurity.net/specialinfo/rapidblaster.html#removal

just an old highway tramp
---Bill---

 

i scaned with it didn't find it, damn it...

 

like I said it was a thought ..and I might be off base...but worth a try.....

just an old highway tramp
---Bill---

 

well please someone help me..

 

dude845 ,

run hjt and post your log , ive got a friend who is a security expert at another site and i will get him to review and diagnose the problem for , also it would help in the research of this problem .

Mark

 

run hjt? wtf is that?

 

it sounds like he has a problem with his system, run this command..in start run.type that in the run box.
sfc /scannow

this checks your system protected files and fixes them on your system,it might ask for your windows install cd

 

@Ireland , you beat me to that one . That's what i was gonna suggest next.

@dude845, hjt is hijackthis . what it does is scan your computer and creates a log , which shows nasties on your system such as viruses , spyware etc,

im sorry i never explained before what it was , i thought because you are a senior member you would of known what it was ,

unfortunately as im a newbie on this site im not sure how to post links to get this prog
Mark

 

http://www.download.com/HijackThis/3000-8022_4-10379544.html?tag=lst-0-1

here the link for hjthis

 

i scaned it and saved log copyed everything that came up in not pad and pasted it...


i tried that start run and typed that thing in it scanned my pc but didn't fix anything..

--------------------------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 8:46:45 PM, on 11/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSLAUNCH.EXE
C:\Program Files\F-Secure\Common\FSLAUNCH.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\xpuser\LOCALS~1\Temp\Temporary Directory 2 for hijackthis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: PowerReg Scheduler.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37240.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab31267.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: F-Secure BackWeb LAN Access - F-Secure Corporation - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwlan.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE

 

Windows XP log-on issue. Going into "Admin" requires 2 logins. I worried that I've got a bug. I am running the AdAware, Spybot, etc. sequence as I write this. Any legit reason or problem why I should have to log-in 2 times? I have the sneaky feeling that I'm loging in right the first time and then being directed to log-in again to reveal my log-in info.

 

@Dswe2 - Check the registry

 

@Dswe2 - Check the registry

 

Sorry for the double post. I pressed send twise. Really sorry. Please delete other post