StealthG

July 16, 2005

I sent an email to a friend of mine, a couple days later i get this rather strange email supposedly sent by yahoo.com.

---------------------------------------------------------

its from "[email protected]"

"Subject: failure notice"

"Hi. This is the qmail-send program at yahoo.com.

I'm afraid I wasn't able to deliver your message to the following

addresses.

This is a permanent error; I've given up. Sorry it didn't work out.

****friends email*********

216.145.48.35 does not like recipient.

Remote host said: 550 5.1.2 ******friends email*******Unsupported mail

destination

Giving up on 216.145.48.35.

--- Below this line is a copy of the message.

Return-Path: <****my email******>

Received: (qmail 86343 invoked by uid 60001); 15 Jul 2005 02:49:47

-0000

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=s1024; d=yahoo.com;

h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;

b=RmHDfKm7BOhpX9K4JF0GjuyrfHaat68KWkpo8xqCidYwnGLnGrnscs9FKlEhp6VCEB4898ToCRQiyG

i7JWzHy2Drzoy4p4zBnG5CrH5B9AOUCw8bMUUVcVKoIxRJnwqwSymGV5CDu3X5dRqeDpkbe0QaOtn71Wk

KL5elb3zrXsc=

;

Message-ID: <[email protected]>

Received: from [70.93.115.185] by web33901.mail.mud.yahoo.com via HTTP;

Thu, 14 Jul 2005 19:49:47 PDT

Date: Thu, 14 Jul 2005 19:49:47 -0700 (PDT)

From: *****my name**** <*****my email*******>

Subject: *****my subject line********

To: ****friends email**********

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="0-1595456964-1121395787=:86314"

Content-Transfer-Encoding: 8bit

--0-1595456964-1121395787=:86314

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit"

----------------------------------------------------------------------------

Then it has my messege sent to my friend. lol excuse my french here but what the f*** is this??? lol. anyone know?

July 13, 2005

since it shows up in your device manager, you may be able to right-click on it and choose uninstall.
<{POST_SNAPBACK}>

Hey thanx, but when i rebooted it showed up again? any other ideas?

July 11, 2005

Ive had an older version of alcohol installed on my machine, so i figured i would update to the newest version. I uninstalled the older version but i stupidly did not reboot like it told me to do :blush: I installed the newest version, and then rebooted and found out that my old virtual drive was still there. For some reason i cannot figure out how to remove this virtual drive, now instead i cannot use it or remove it through windows or alcohol, that i have found. lol any ideas?

June 27, 2005

Ive tried to, and it gives me results that deal with javascript and programing? Dont know why its giving me such troubles since im not the one that runs the website. Ive asked others around my area, and theirs seem to be running fine. This thing has me puzzled! :wacko:

Well here are the script errors I get, maybe someone that knows this can help me.

#1

Line:33

Char:5

Code:0

Error:Object expected

URL:http://www.myspace.com/

#2

Line:62

Char:8

Code:0

Error:Object expected

URL:http://www.myspace.com/

#3

Line:72

Char:10

Code:0

Error:Object expected

URL:http://www.myspace.com/

#4

Line:139

Char:8

Code:0

Error:Object expected

URL:http://www.myspace.com/

June 26, 2005

Hello all,

since yesterday morning i have been having trouble with myspace. When i go to the site, it will take minutes to load, and when it finally does "load" i am unable to view the page correctly. All i see is some pictures, and colors, but no graphical things. I also get some script errors saying "object expected" on line such and such and on char such and such. I have cleared my cache, cookies etc. and have reseted my modem as well. Is it just me?? Any suggestions?

**I have also tried going to the site using IE, maxthon, and firefox but same thing occurs.

May 26, 2005

Just tried logging in and it worked for me. maybe you should try cleaning ur cache, cookies, etc. are you using firefox, maxthon or some other browser? try using IE or a different browser.

April 15, 2005

LOL !!!!! Im such an idiot!!! I just tried it with nero and it worked perfectfully. I cant believe all the time i spent converting to .wav while i could have done it quicker and with just one program hahahahahaa.

April 15, 2005

Yes i did have a printer plugged in, but i did remove it since it went crazy when trying to print something, i think it was because the ink cartidge was jammed but i aint sure. Bottom line is that its unplugged. I also have uninstalled diskeeper 8.0 and it hasnt frozen since then. Could this have caused my freezing? Hopefully my computer wont freeze because of this again. Thanx everyone!

April 14, 2005

Heres the new logfile. I have 640MB of memory on windows xp home edition, and i only have my antivirus and video card drivers running on startup.

------------------------------------------------------------------

Logfile of HijackThis v1.99.1

Scan saved at 4:14:42 PM, on 4/14/2005

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\Program Files\Everstrike Software\Universal Shield 3.3.1\US30Service.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer-

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML

O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html

O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM

O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html

O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html

O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM

O8 - Extra context menu item: Customize Menu &4 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O8 - Extra context menu item: Fill Forms &] - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O8 - Extra context menu item: RoboForm &2 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O8 - Extra context menu item: Save Forms &[ - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html

O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll

O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll

O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll

O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll

O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll

O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O9 - Extra 'Tools' menuitem: Fill Forms &] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O9 - Extra 'Tools' menuitem: Save Forms &[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O9 - Extra 'Tools' menuitem: RoboForm &2 - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe

O16 - DPF: {01FE8D0A-51AD-459B-B62B-85E135128B32} (DD_v4.DDv4) - http://www.drivershq.com/DD_v4.CAB

O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB

O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab

O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab

O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/...nst20040510.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1094444379529

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab

O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab

O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...411/mcfscan.cab

O16 - DPF: {F5C90925-ABBF-4475-88F5-8622B452BA9E} (Compaq System Data Class) - http://wwemail.support.hp.com/fd2/objects/SysQuery.cab

O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: US30Service - Unknown owner - C:\Program Files\Everstrike Software\Universal Shield 3.3.1\US30Service.exe

April 13, 2005

Hello all, posting a hijackthis log since im having some freezing troubles when starting up and sometimes shutting down. NOTE: I am not having internet problems such as excessive pop ups, etc. Just that I cant fix my computer from freezing during startup.

---------------------------------------------

Logfile of HijackThis v1.99.1

Scan saved at 4:14:39 PM, on 4/13/2005

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\Program Files\Everstrike Software\Universal Shield 3.3.1\US30Service.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\AIM\aim.exe

C:\Program Files\Maxthon\Maxthon.exe

C:\Documents and Settings\Marin\Desktop\Downloads\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/...rch/search.html