VCDQuality Forums (http://www.vcdhq.com/forum/index.php)
- Computer and Audio/Video help (http://www.vcdhq.com/forum/forumdisplay.php?forumid=56)
-- Trojan? (http://www.vcdhq.com/forum/showthread.php?threadid=80875)

Trojan?

If I am not mistaken that message in the bubble or whatever is a virus/trojan/blah blah, no? If so, how do I find out which one? I did a virus scan last night (twice) and cleaned up everything. But there were two files that could only be quarantined...not sure if that has anything to do with this...but I just finished a scan and my computer found nothing. Is there any way to detect this problem?

__________________


I'm gay. <3 <3 <3

Its not a trojan. there is not any virus.

YOu have been hammered by the next generation of MALWARE

fucking sucks to be you in a lot of ways.

YOu will need:

Crap Cleaner
Spybot
AdAware
smitrem
hijack this
Safe mode
Plenty of patience
some booze

Good luck! (I'd also create a new administrator level account to do all your work from.)

__________________

Whoa whoa! Seriously?! I can't even access my 'task manager'. I get an error saying, "Task manager has been disabled by your administrator'.

__________________


I'm gay. <3 <3 <3

Dude look at your desktop. Just do what EJO says.

Sigh. Sounds like a real pain. Thank you for the advice.

__________________


I'm gay. <3 <3 <3

^Ejo's advice is good to be honest fuckface, you could try "RogueRemover Free" and "Smitfraudfix" to de-cunt it but I reckon you're in for some fun and games with that bastard.

Ejo was going easy on you, for more comprehensive instructions, look at this cunt: http://www.techspot.com/vb/topic58138.html

I'm curious as to why I'm having such a difficult time downloading 'smitrem'. Everytime I download it, it goes to my desktop and then deletes itself..?

__________________


I'm gay. <3 <3 <3

Just reformat your drive then reinstall your OS.
And remember to install a firewall and AV software this time.

I have Trend Micro Internet Security 2008...obviously...

__________________


I'm gay. <3 <3 <3

Also stop using Internet Explorer (use Firefox) and stay off those hard core porn sites.

__________________
"Now we can do this easy, or we can do this REAL easy": Denton Van Zan, Reign of Fire.

mVs street king is a virus



I will wait for a safer one

__________________
When life hands you lemons, ask for tequila and salt and call me over.

There comes a point in your life when you realise;
who matters,
who never did,
who won't any more...
and who always will.
So, don't worry about people from your past,
there's a reason why they didn't make it to your future.

quote:

---

Originally posted by LostInAHazeOfMyself
I'm curious as to why I'm having such a difficult time downloading 'smitrem'. Everytime I download it, it goes to my desktop and then deletes itself..?

---

Thank you to all of you for your help. But I just installed a fresh copy of Windows XP (Service Pack3).

__________________


I'm gay. <3 <3 <3

I've caught another 'Trojan' or whatever it might be. I'm getting the same little icon that appeared in the picture above. I really want to get this fixed and have tried Spyware Doctor, Trojan Remover and Norton 360. None worked. I also used a registry cleaner, if that's used for these types of problems.

If somebody could PLEASE PLEASE PLEASE help, it would be greatly appreciated! I cannot afford to do a clean install and lose everything!

Note: I tried to do a repair with a copy of Windows XP Pro SP3, but couldn't figure out the proper command to enter.

I also tried setting the date on my computer to a previous one, but it would not allow me to use the date I selected.

__________________
I'm gay. <3 <3 <3

You should never download to the same drive your os is on mate, (also don't use admin rights on when downloading either) try using kaspersky anti virus 8 works fine for me and i grab well over 100 gig a week and even though it does use some of your memory/processor up it checks every damn file that goes onto my external drive and that's a 1tb drive

__________________
I was never caught!

What about booting to safe mode, running HijackThis and posting the log on one of those dedicated websites where people advise you by looking at the HijackThis log?

Smart man.

__________________
I'm gay. <3 <3 <3

This?

Note: This was NOT in safe mode. If it matters, I was getting popups out of nowhere in I.E. (which I don't use), so I deleted Internet Explorer. Just had to throw that out there.

Logfile of HijackThis v1.99.1
Scan saved at 4:06:35 PM, on 11/24/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb0
9.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\NetMeter\NetMeter.exe
C:\Documents and Settings\Ryan\Application Data\Twain\Twain.exe
C:\Documents and Settings\Ryan\Application Data\gadcom\gadcom.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.co...er/fix_homepage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://securityresponse.symantec.co...r/fix_homepage/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.co...r/fix_homepage/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int
ernet Settings,ProxyOverride = *.local
O2 - BHO: (no name) - {1DFE4A14-07AD-4328-9912-3BBCAFB611A1} - (no file)
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {A6C54318-5AC7-477D-B0A7-49AF5189300C} - (no file)
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [XboxStat] "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb0
9.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\RunOnce: [AskSBar Uninstall] rundll32 C:\PROGRA~1\UNINST~1.DLL,O -3
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Twain] C:\Documents and Settings\Ryan\Application Data\Twain\Twain.exe
O4 - HKCU\..\Run: [gadcom] "C:\Documents and Settings\Ryan\Application Data\gadcom\gadcom.exe" 61A847B5BBF728173599284503996897C881250221C8670836
AC4FA7C8833201749139
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/Drive.../sysreqlab2.cab
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

__________________
I'm gay. <3 <3 <3

I had a glance and to my (untrained) eye nothing stood out. You should know there is a newer version of HijackThis available however.

You were probably right not to perform the Hijackthis scan in safe mode. There are sites such as Hijackthis.de where you can upload the log and get it analysed.

Sorry I can't be of more help.

No, you have I appreciate it. Thank you.

__________________
I'm gay. <3 <3 <3

quote:

---

Originally posted by eljefeoscuro
Its not a trojan. there is not any virus.

YOu have been hammered by the next generation of MALWARE

fucking sucks to be you in a lot of ways.

YOu will need:

Crap Cleaner
Spybot
AdAware
smitrem
hijack this
Safe mode
Plenty of patience
some booze

Good luck! (I'd also create a new administrator level account to do all your work from.)

---

__________________

Hold Da Motha Fuckin Salad.

I definitely need to fork out the money for an external HDD.

__________________
I'm gay. <3 <3 <3

Also stay away from limewire etc, your asking for trouble long term, i haven't had to do a reinstall on my base download machine or laptop in 2 yrs with xp and service pack updates all is fine

1)External hdd 500 gig u can get cheap now
2)Anti virus kaspersky 2009 as i said i find is great deals with malware etc and is updated every 2 days or so
3)Firewall the pc
4)Don't use internet explorer


Or buy a cheap pent 4 base unit as a download machine, and can use linux if you wish, around same price as an external hdd

__________________
I was never caught!

I do NOT use Limewire.

__________________
I'm gay. <3 <3 <3

quote:

---

Originally posted by Objectivist Seal Hunter
I do NOT use Limewire.

---

__________________
I was never caught!

That picture is nearly 7 months old, and I had it but rarely used it (only for VERY obscure things).

And I have nothing against torrents like the most of you, but lets not even go there. Lol.

__________________
I'm gay. <3 <3 <3

quote:

---

Originally posted by Objectivist Seal Hunter
That picture is nearly 7 months old, and I had it but rarely used it (only for VERY obscure things).

And I have nothing against torrents like the most of you, but lets not even go there. Lol.

---

__________________
I was never caught!

Try Malwarebytes Anti-Malware at http://www.malwarebytes.org/ Got rid of a pesky malware program my 6 yo installed on one of my systems.

__________________

Thanks, though I think I resolved it. I'll still be getting it!

__________________
I'm gay. <3 <3 <3

The other day my computer said, "found new hardware". Something that had to do with audio...and ever since it found this "new hardware", my computer has been making a "beeping noise". It only does it when something completes burning, or something comes on screen that says, "click ok". Have you guys heard of this?

__________________
I'm gay. <3 <3 <3