If I am not mistaken that message in the bubble or whatever is a virus/trojan/blah blah, no? If so, how do I find out which one? I did a virus scan last night (twice) and cleaned up everything. But there were two files that could only be quarantined...not sure if that has anything to do with this...but I just finished a scan and my computer found nothing. Is there any way to detect this problem?

__________________


I'm gay. <3 <3 <3

Report this post to a moderator | IP: Logged

Its not a trojan. there is not any virus.

YOu have been hammered by the next generation of MALWARE

fucking sucks to be you in a lot of ways.

YOu will need:

Crap Cleaner
Spybot
AdAware
smitrem
hijack this
Safe mode
Plenty of patience
some booze

Good luck! (I'd also create a new administrator level account to do all your work from.)

__________________

Report this post to a moderator | IP: Logged

Whoa whoa! Seriously?! I can't even access my 'task manager'. I get an error saying, "Task manager has been disabled by your administrator'.

__________________


I'm gay. <3 <3 <3

Report this post to a moderator | IP: Logged

Dude look at your desktop. Just do what EJO says.

Report this post to a moderator | IP: Logged

Sigh. Sounds like a real pain. Thank you for the advice.

__________________


I'm gay. <3 <3 <3

Last edited by OSH on 04-22-2008 at 12:59 PM

Report this post to a moderator | IP: Logged

^Ejo's advice is good to be honest fuckface, you could try "RogueRemover Free" and "Smitfraudfix" to de-cunt it but I reckon you're in for some fun and games with that bastard.

Ejo was going easy on you, for more comprehensive instructions, look at this cunt: http://www.techspot.com/vb/topic58138.html

Report this post to a moderator | IP: Logged

I'm curious as to why I'm having such a difficult time downloading 'smitrem'. Everytime I download it, it goes to my desktop and then deletes itself..?

__________________


I'm gay. <3 <3 <3

Report this post to a moderator | IP: Logged

Just reformat your drive then reinstall your OS.
And remember to install a firewall and AV software this time.

Report this post to a moderator | IP: Logged

I have Trend Micro Internet Security 2008...obviously...

__________________


I'm gay. <3 <3 <3

Report this post to a moderator | IP: Logged

Also stop using Internet Explorer (use Firefox) and stay off those hard core porn sites.

__________________
"Now we can do this easy, or we can do this REAL easy": Denton Van Zan, Reign of Fire.

Last edited by vanzans on 04-22-2008 at 02:28 PM

Report this post to a moderator | IP: Logged

mVs street king is a virus



I will wait for a safer one

__________________
When life hands you lemons, ask for tequila and salt and call me over.

There comes a point in your life when you realise;
who matters,
who never did,
who won't any more...
and who always will.
So, don't worry about people from your past,
there's a reason why they didn't make it to your future.

Report this post to a moderator | IP: Logged

quote:

---

Originally posted by LostInAHazeOfMyself
I'm curious as to why I'm having such a difficult time downloading 'smitrem'. Everytime I download it, it goes to my desktop and then deletes itself..?

---

It's the Malware deleting it, try downloading it in Safe Mode

Report this post to a moderator | IP: Logged

Thank you to all of you for your help. But I just installed a fresh copy of Windows XP (Service Pack3).

__________________


I'm gay. <3 <3 <3

Report this post to a moderator | IP: Logged

I've caught another 'Trojan' or whatever it might be. I'm getting the same little icon that appeared in the picture above. I really want to get this fixed and have tried Spyware Doctor, Trojan Remover and Norton 360. None worked. I also used a registry cleaner, if that's used for these types of problems.

If somebody could PLEASE PLEASE PLEASE help, it would be greatly appreciated! I cannot afford to do a clean install and lose everything!

Note: I tried to do a repair with a copy of Windows XP Pro SP3, but couldn't figure out the proper command to enter.

I also tried setting the date on my computer to a previous one, but it would not allow me to use the date I selected.

__________________
I'm gay. <3 <3 <3

Report this post to a moderator | IP: Logged

You should never download to the same drive your os is on mate, (also don't use admin rights on when downloading either) try using kaspersky anti virus 8 works fine for me and i grab well over 100 gig a week and even though it does use some of your memory/processor up it checks every damn file that goes onto my external drive and that's a 1tb drive

__________________
I was never caught!

Report this post to a moderator | IP: Logged

What about booting to safe mode, running HijackThis and posting the log on one of those dedicated websites where people advise you by looking at the HijackThis log?

Report this post to a moderator | IP: Logged

Smart man.

__________________
I'm gay. <3 <3 <3

Report this post to a moderator | IP: Logged

This?

Note: This was NOT in safe mode. If it matters, I was getting popups out of nowhere in I.E. (which I don't use), so I deleted Internet Explorer. Just had to throw that out there.

Logfile of HijackThis v1.99.1
Scan saved at 4:06:35 PM, on 11/24/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb0
9.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\NetMeter\NetMeter.exe
C:\Documents and Settings\Ryan\Application Data\Twain\Twain.exe
C:\Documents and Settings\Ryan\Application Data\gadcom\gadcom.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.co...er/fix_homepage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://securityresponse.symantec.co...r/fix_homepage/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.co...r/fix_homepage/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int
ernet Settings,ProxyOverride = *.local
O2 - BHO: (no name) - {1DFE4A14-07AD-4328-9912-3BBCAFB611A1} - (no file)
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {A6C54318-5AC7-477D-B0A7-49AF5189300C} - (no file)
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [XboxStat] "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb0
9.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\RunOnce: [AskSBar Uninstall] rundll32 C:\PROGRA~1\UNINST~1.DLL,O -3
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Twain] C:\Documents and Settings\Ryan\Application Data\Twain\Twain.exe
O4 - HKCU\..\Run: [gadcom] "C:\Documents and Settings\Ryan\Application Data\gadcom\gadcom.exe" 61A847B5BBF728173599284503996897C881250221C8670836
AC4FA7C8833201749139
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/Drive.../sysreqlab2.cab
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

__________________
I'm gay. <3 <3 <3

Report this post to a moderator | IP: Logged

I had a glance and to my (untrained) eye nothing stood out. You should know there is a newer version of HijackThis available however.

You were probably right not to perform the Hijackthis scan in safe mode. There are sites such as Hijackthis.de where you can upload the log and get it analysed.

Sorry I can't be of more help.

Report this post to a moderator | IP: Logged

No, you have I appreciate it. Thank you.

__________________
I'm gay. <3 <3 <3

Report this post to a moderator | IP: Logged