2007-11-05 20:56 Por favor revisen mi log no puedo entrar a una pag de internet
Bueno mi problema es q no quiere entrar a una sola pag de internet pero probe en otra pc y entra lo mas bien... aqui dejo el log a ver si me pueden dar una mano.. grax Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:45:15 p.m., on 05/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass. …
Read more on “Foro de Spyware”
|
Tags:
|
ADA NameServer,
ActiveScan Installer Class,
Adobe Systems,
Ahead Lib NeroCheck,
Apple Computer Inc,
Archivo,
Bonjour,
Bonjour Service,
CKAVWebScan Object,
Consola,
Control,
EDFD DCD NameServer,
Eset,
Extra,
Extra Tools,
IntelAudioStudio,
Internet Explorer,
Java,
LClock,
LClock LClock,
LinkId,
Logfile,
MSN Messenger,
MSN PUpld,
Macrovision Corporation,
Macrovision Europe Ltd,
Messenger,
MessengerStat,
MessengerStatsClient Class,
Microsoft Excel,
MineSweeper,
NVIDIA Corporation,
NameServer,
Nero AG,
NeroFilterCheck,
Normal Running,
NvCpl,
NvCplDaemon RUNDLL,
NvMcTray,
NvMediaCenter RUNDLL,
NvStartup,
NvTaskbarInit,
Referencia,
Service Boonty Games,
Service Id String,
Service NBService,
Settings ProxyOverride,
SigmatelSysTrayApp,
Sun Java,
SunJavaUpdateSched,
Trend Micro HijackThis,
UnoCtrl Class,
User Default,
User SERVICIO LOCAL,
User SYSTEM,
User Servicio,
WINDOWS Explorer,
WINDOWS System,
WUWebControl Class,
Winamp,
Windows Messenger,
..
|
2007-08-20 05:18 my computer acting slow lately...
it has been acting really slow lately, just want to see if i missed anything. i tried the kaspersky online scan and it failed before it even downloaded. then i tried the one you guys mention below it and it didn't work either. heres my hijack this log: Logfile of HijackThis v1.99.1 Scan saved at 9:15:23 PM, on 8/19/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16512) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WIN …
Read more on “Safer Networking Forums”
|
Tags:
|
ATI Technologies Inc,
AcRdB,
AcroIEHelper,
ActiveScan Installer Class,
AdobeUpdateManager,
Apple Inc,
AppleMobileDeviceService,
BHO SSVHelper Class,
CKAVWebScan Object,
Cpqset,
Extra,
Extra Tools,
F-Secure Online Scanner,
HGPlugin USA Class,
HP Software Update,
Hewlett-Packard Development Company,
HijackThis,
IMEName,
INTERNATIONAL International,
Internet Explorer,
LinkId,
Logfile,
Macrovision Corporation,
Messenger,
Network Diagnostic,
Option,
PHIME ASync,
PROGRA SPYBOT SDHelper,
Program Files,
Program Files Java,
Program Files Messenger,
Protocol,
QuickTime Task,
SSODL WPDShServiceObj,
Service,
Service Kaspersky Anti-Virus,
Spoil RemAdvDef Migration,
Start,
Sun Java Console,
SunJavaUpdateSched,
SynTPEnh,
SynTPLpr,
Unknown,
WINDOWS Explorer,
WINDOWS SYSTEM WgaLogon,
WINDOWS System,
WPDShServiceObj,
Web Anti-Virus,
Windows Messenger,
Winlogon Notify,
Winlogon Notify WgaLogon,
..
|
2007-08-20 04:12 clean bill of health 2
Hi I work away all week and my wife says the PC going very slow (again)! with the screen blaning out now and again for 2-3 seconds Would like to know if there is anything amiss here done on-line scan, run spybot in safe mode results below many thanks ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Sunday, August 19, 2007 6:29:44 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scan …
Read more on “Safer Networking Forums”
|
Tags:
|
AcroIEHelper,
Anti-Virus,
AppEvent,
CKAVWebScan Object,
CatRoot,
Critical Areas,
Duration,
Extra,
Extra Tools,
FC MUWebControl Class,
Google,
HijackThis,
INTERNATIONAL International,
Internet,
Internet Explorer,
Kaspersky Anti-Virus,
LOCALS Temp DFC,
LinkId,
Messenger,
NVIDIA Corporation,
Network Diagnostic,
Number,
NvCplDaemon RUNDLL,
NvStartup,
Object,
Option,
PROGRA Grisoft AVG,
PROGRA SPYBOT SDHelper,
Program Files Messenger,
Program Files Spybot,
Repository FS INDEX,
Repository FS MAPPING,
Repository FS OBJECTS,
SAM Object,
SECURITY Object,
Scan,
Scan Archives,
Scan Mail Bases,
Scan Settings Scan,
Scan Target,
Search Destroy SpybotSD,
Search Destroy TeaTimer,
SecEvent,
Service MATLAB Server,
Service WLTRYSVC,
Shockwave Flash Object,
Sony Corporation,
SpybotSD TeaTimer,
SpybotSnD,
SymDlBrg,
SysEvent,
Toolbar,
Toolbar Google,
URLSearchHook Yahoo,
Uniblue RegistryBooster,
Unknown,
WINDOWS Debug PASSWD,
WINDOWS Explorer,
WINDOWS SYSTEM WgaLogon,
WINDOWS SchedLgU,
WINDOWS SoftwareDistribution EventCache,
WINDOWS SoftwareDistribution ReportingEvents,
WINDOWS Sti Trace,
WINDOWS System,
WINDOWS System NvCpl,
WINDOWS WindowsUpdate,
WUWebControl Class,
Windows Messenger,
Winlogon Notify WgaLogon,
Would,
..
|
2007-08-20 03:39 Problems with Virtumonde and CmdService
Last week, an unrequested download ran on my computer. I could not get rid of it. I turned to Spybot, which showed several issues. Earlier in the week, there were no issues. Now the system is slow and browser windows popp up every few minutes to advertisements. Spybot sidebar instructions for Virtumonde directed me to this forum for assistance. I have completed "Before you post" steps and hope they provide sufficient information to help get rid of these problems. Can someone please help Here is …
Read more on “Safer Networking Forums”
|
Tags:
|
ATIModeChange Ati,
AdaptecDirectCD,
Apoint,
BascsTray,
Before,
Brio,
Broadcom Corp,
CARPService,
CKAVWebScan Object,
Cisco Systems Inc,
ClamTray,
ClamWin,
CmdService,
Computer,
Corporation,
DVDSentry,
Dell QuickSet,
Draco,
EvMon,
EventMonitor,
Extra,
Extra Tools,
F-Secure AVP,
F-Secure Blacklight,
F-Secure Libra,
F-Secure Online Scanner,
F-Secure Orion,
F-Secure Pegasus,
FC MUWebControl Class,
HP Software Update,
Here,
Intel,
Intel Corporation,
Internet Explorer,
Juniper Networks,
JuniperSetupSP Control,
Kaspersky,
LAPTOP Scanning,
LinkId,
Logfile,
Macrovision Corporation,
Messenger,
Microsoft Excel,
Ncao,
NetMon,
Next,
Normal Running,
Options Scanning,
PRONoMgr,
Program Files,
Program Files ClamWin,
Program Files Java,
Program Files Messenger,
Program Files QuickTime,
Program Files WinPcap,
QuickTime Task,
Reader,
Renamed Submitted,
Renamed Submitted Trojan,
Renamed Submitted Trojan-Downloader,
Renamed Submitted Trojan-Proxy,
Research,
Result,
Scan,
Scanning,
Service CVPND,
Service OracleMTSRecoveryService,
Service OracleOraHome ClientCache,
Service RegSrvc,
Service RoamMgr,
Spybot,
Submitted,
Sun Java Console,
SunJavaUpdateSched,
Target,
TkBellExe,
Tracking Cookie,
Trend Micro HijackThis,
Unknown,
Virtumonde,
Vundo,
VundoFix,
WINDOWS Explorer,
WINDOWS Network Diagnostic,
WINDOWS System,
WINDOWS System Ati,
WINDOWS System DSentry,
WINDOWS System HPZipm,
WINDOWS System RegSrvc,
WINDOWS System RoamMgr,
WUWebControl Class,
Windows Messenger,
ZCfgSvc,
..
|
2007-08-09 22:00 Zlob.DNSchanger and possibly other malware
HI, I've been having trouble with Zlob.DNSchanger and possibly with several other malware as well. I followed the instructions in the ``BEFORE you POST'' topic : 1) eTrust Web Scanner did not find any infections (also it did not produce a log-file) and I used this scanner several times over the course of about a week. 2) Trend Micro did initially find infections, namely ADWARE_BHOT_E-VENTURES (13 infections), ADWARE_BHOT_IEHELPER (1 infection) and TSPY_BLASTER (1 infection). Incidentally, the ts …
Read more on “Safer Networking Forums”
|
Tags:
|
ActiveX AcroIEHelper,
Administrator,
Anti-Virus,
AppEvent,
AttachMail,
BHO AcroIEHlprObj Class,
Backdoor,
CKAVWebScan Object,
Control,
DEFAULT Object,
Document,
Duration,
Extra,
FC MUWebControl Class,
HPDJ Taskbar Utility,
HijackThis,
IM-Worm,
Infected IM-Worm,
Inno,
Kaspersky,
Kaspersky Anti-Virus,
McAfeeUpdaterUI,
Micro,
My Computer,
Net-Worm,
Network Associates Inc,
Number,
Object,
PROGRA Yahoo,
Program Files,
Program Files Support,
Program Files Yahoo,
SAM Object,
SECURITY Object,
SOFTWARE Object,
SYSTEM Object,
Safe Mode,
Scan,
Scan Archives,
Scan Mail Bases,
Scan Settings Scan,
Scan Statistics Total,
Scan Target,
SecEvent,
Service,
Settings Administrator,
Settings Administrator Cookies,
Settings Administrator NTUSER,
ShStatEXE,
Spybot,
StartedFromRunKey,
Startup Manager,
Synchronization Manager,
SysEvent,
TFTP Infected Backdoor,
Trend Micro,
URLSearchHook,
URLSearchHook Yahoo,
Unknown,
VERITAS Software Corp,
WINNT CSC Object,
WINNT Debug,
WINNT Debug PASSWD,
WINNT Internet Logs,
WINNT SchedLgU,
WINNT SoftwareDistribution ReportingEvents,
WINNT System,
WINNT System TFTP,
WINNT Temp ZLT,
WINNT WindowsUpdate,
WUWebControl Class,
Web Scanner,
YInstStarter Class,
Yahoo,
Yahoo Messenger,
Zlob,
Zone Labs LLC,
ZoneAlarm Client,
ZoneLabs,
..
|
2007-07-25 05:41 Ultimate Cleaner, Ultimate Defender, Ultimate Fixer, Security Monitor
Hello, I noticed today that I have been infected with this. I have researched the forums and tried several things, hijack this, spyware doctor, and the online scan at http://www.kaspersky.com/downloads/kws/kavwebscan.htm. Below are my logs as I have not yet gotten rid of it. Any help is greatly appreciated. P.S. I will post the kaspersky log as soon as it is done. Hijack This Log: Logfile of Trend Micro HijackThis v2.0.0 (BETA) Scan saved at 1:29:42 AM, on 7/25/2007 Platform: Windows XP SP2 (Win …
Read more on “Safer Networking Forums”
|
Tags:
|
AVG Run,
AcRdB,
AcroIEHelper,
Adobe Systems,
AdobeUpdateManager,
Apple Inc,
BHO SSVHelper Class,
CACE Technologies,
CKAVWebScan Object,
Desktop Component,
Document,
ED Support,
EFFAEF NCWeb,
EPSON Stylus Photo,
Extra,
Extra Tools,
Hewlett-Packard Company,
INCA Internet Co,
InCD,
Init,
Installer,
LinkID,
MSWindowsUpdate,
Macrovision Corporation,
MemoryManager,
Messenger,
MetaStreamCtl Class,
Microsoft Excel,
MsPMSPSv,
NVIDIA Corporation,
Name,
NameServer,
Nero AG,
NeroCheck,
NeroFilterCheck,
Normal Running,
NvCpl,
NvCplDaemon RUNDLL,
NvMcTray,
NvMediaCenter RUNDLL,
NvStartup,
NvTaskbarInit,
PC Tools,
PROGRA Grisoft AVG,
Program,
Program Files,
Program Files AIM,
Program Files Java,
Program Files Messenger,
Program Files QuickTime,
Program Files USoft,
Program Files WinPcap,
QuickTime Task,
Registration,
RemoteControl,
Rodolofo,
SDTray,
Scan,
Serie,
Service,
Service MySQL,
SharedTaskScheduler Browseui,
SharedTaskScheduler Component Categories,
Sothink SWF Catcher,
SoundMan SOUNDMAN,
SpyHunter,
Startup Adobe Gamma,
Startup Epson,
Stylus Photo,
Sun Java Console,
SunJavaUpdateSched,
This Log Logfile,
Titles Ereg EPSONREG,
Trend Micro HijackThis,
Unknown,
User Default,
User SYSTEM,
WINDOWS Explorer,
WINDOWS System,
WgaTray,
Windows Messenger,
Windows Update Host,
WindowsFirewallSvc,
Winlogon Notify,
Zune Launcher,
..
|
2007-07-15 21:50 think i got virtumonde
sorry i didnt do online scan i dont have internet explorer. the reason im requesting help is because when I ran spybot virtumonde showed up and when i read the discription it said that could be hard to remove so i just want to make sure it is gone. Anyway here is my hjt Logfile of HijackThis v1.99.1 Scan saved at 5:44:32 PM, on 7/15/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system3 …
Read more on “Safer Networking Forums”
|
Tags:
|
ATI Technologies Inc,
ActiveX AcroIEHelper,
BHO AcroIEHlprObj Class,
BHO SSVHelper Class,
BHO Yahoo,
Backward Links,
Bonjour,
CKAVWebScan Object,
Cached Snapshot,
Desktop HijackThis,
Document,
English,
Extra,
Extra Tools,
Google Search,
GoogleToolbar,
Helper,
Hewlett-Packard Company,
Hewlett-Packard Development Company,
HijackThis,
ISUSPM Startup,
ISUSScheduler,
Install,
Internet Explorer,
Java Plug-in,
Logfile,
Macrovision Corporation,
Messenger,
PROGRA Grisoft AVGFRE,
Page,
Program Files,
Program Files Java,
Program Files Messenger,
Program Files Spybot,
Program Files Yahoo,
RecGuard,
SSODL WPDShServiceObj,
Search Destroy SpybotSD,
Search Destroy TeaTimer,
Service,
Services Button,
Setting,
Similar Pages,
SpybotSD TeaTimer,
Sun Java Console,
SunJavaUpdateSched,
SynTPEnh,
SynTPLpr,
Toolbar Yahoo,
Translate English Word,
Translate Page,
URLSearchHook Yahoo,
Unknown,
WINDOWS Explorer,
WINDOWS System,
WPDShServiceObj,
Windows Messenger,
Windows SMINST RecGuard,
Winsock LSP,
YInstStarter Class,
Yahoo,
YahooMessenger,
..
|
2007-07-11 05:39 Can't get rid of VIRTUMONDE
Hello, both adaware and spybot have detected and removed virtumonde, but it sometimes comes back on scans, and pop ups still sporadically occur. It seems to run within the winlogon.exe (which is system-critical) and explorer.exe processes from two recently created files in my system32 folder, mljgh.dll and ssqnlih.dll. Neither of these can be deleted. I have tried using killbox to remove them on reboot, but killbox is unable to this. I receive the error: "PendingFileRenameOperations Registry Dat …
Read more on “Safer Networking Forums”
|
Tags:
|
ALWIL Software,
AdWare,
Anti-Virus,
Antivirus,
AppEvent,
AshWebSv,
CKAVWebScan Object,
Cache CACHE Object,
CatRoot,
Control Service,
DEFAULT Object,
Document,
Duration,
EvMon,
EventMonitor,
External Process,
Extra,
Extra Tools,
Infected,
Infected Trojan-Downloader,
Infected Trojan-Dropper,
Intel Corporation,
Internet Explorer,
Kapersky Online,
Kaspersky Anti-Virus,
Lavasoft AB,
MSConfig,
Messenger,
Microsoft Excel,
My Computer,
NVIDIA Corporation,
Normal Running,
Number,
NvCpl,
NvCplDaemon RUNDLL,
NvStartup,
Object,
PROGRA ALWILS Avast,
PendingFileRenameOperations Registry Data,
PrEz,
Program Files Java,
Program Files Messenger,
Program Files Spybot,
Real,
Removed,
Research,
Resident,
SAM Object,
SECURITY Object,
SOFTWARE Object,
SYSTEM Object,
Scan,
Scan Archives,
Scan Mail Bases,
Scan Settings Scan,
Scan Statistics Total,
Scan Target,
Scanner,
Search Destroy TeaTimer,
SecEvent,
Service,
Service Ad-Aware Service,
Service EvtEng,
Service RegSrvc,
Service WLANKEEPER,
Settings NetworkService,
Settings NetworkService NTUSER,
Settings UserOne,
Settings UserOne Cookies,
Settings UserOne NTUSER,
Shdocvw,
SpybotSD TeaTimer,
Sun Java Console,
Suspicious Password-protected-EXE,
SysEvent,
Temp,
Trend Micro HijackThis,
Trusted Zone,
User,
WINDOWS Debug PASSWD,
WINDOWS Explorer,
WINDOWS Sti Trace,
WINDOWS System,
WINDOWS Temp,
WUWebControl Class,
Webshlock,
Windows Messenger,
Yazzle OinUninstaller,
..
|
2007-07-10 20:01 PLEASE HELP ME... VundoMunde started it all...
hey there, thank you so much if you can help me... i am having real problems with my computer and have tried to solve this problem myself and thought i had done it, but later today it came back! what happens is my computer will crash with a fatal error or unexpected error, and when i reboot it tells me I have had a critical error and should report it to microsoft.... don't know if this will help but here is what it said the error was:- BCCode : 1000007f BCP1 : 00000008 BCP2 : 80042000 BCP3 : 000 …
Read more on “Safer Networking Forums”
|
Tags:
|
AcroIEHelper,
Adobe Systems,
AppInit DLLs,
Apple Inc,
AxisMediaControl Class,
BAB RegUserCfgUI Class,
BCCode,
BDMCon,
BDNewsAgent,
BHO DriveLetterAccess,
BHO SSVHelper Class,
CKAVWebScan Object,
CTSVolFE,
Checkers Class,
Common Lib,
Corporation,
DC- MSN Games,
DMV Service,
DMXLauncher,
DVDLauncher,
DellSupport,
EvMon,
EventMonitor,
Extra,
Extra Tools,
FC MUWebControl Class,
FCF CMediaMix Object,
Filter,
Google,
HijackThis,
INTERNATIONAL International,
ISUSPM Startup,
ISUSScheduler,
Installer,
Intel,
Intel Corporation,
Intel PROSet Wireless,
IntelWireless,
IntelZeroConfig,
Internet Explorer,
LinkId,
Logfile,
Medialogic,
Messenger,
MessengerStatsClient Class,
Microsoft Excel,
Mini,
ModemOnHold,
NameServer,
Network Diagnostic,
Option,
PCMService,
PROGRA Grisoft AVG,
PROSet Wireless Service,
PartyPoker,
Program Files,
Program Files Java,
Program Files Messenger,
Program Files NetWaiting,
Protocol,
Real,
Research,
SMSystemAnalyzer,
SSODL WPDShServiceObj,
ScanningProcess,
Service,
Service Intel,
Shdocvw,
SigmatelSysTrayApp,
SingleClick Systems,
Startup Adobe Gamma,
Sun Java Console,
Symantec Corporation,
SynTPEnh,
System Requirements Lab,
TLIEFlashObj Class,
TkBellExe,
Toolbar,
Toolbar Google,
Unknown,
UnoCtrl Class,
Viewbar,
Visito,
WINDOWS Explorer,
WINDOWS SYSTEM WgaLogon,
WINDOWS System,
WPDShServiceObj,
WUWebControl Class,
Windows Messenger,
Winlogon Notify,
Winlogon Notify WgaLogon,
ZCfgSvc,
Zone Labs LLC,
ZoneAlarm Client,
ZoneLabs,
..
|