Dan

patrick

soul...

Ok Thanks Ef. dk

Can you please post a new log for me? Thanks, dk

No, I did not PM him. I have seen that topic. I don't really know.... O_o dk

Maybe the files are hidden. To make the hidden files show, do this: * Click Start. * Open My Computer. * Select the Tools menu and click Folder Options. * Select the View Tab. * Under the Hidden files and folders heading select Show hidden files and folders. * Uncheck the Hide protected operating system files (recommended) option. * Click Yes to confirm. * Click OK. Now try to find the files. dk

To tell you the truth, I don't know. dk

Have you checked: C:\winxp\system32\elitefad32.exe This is probably not a legit folder unless you have installed windows on that folder. To see if you have 2 System32 folders, click Start --> Find, and search for System32. Tell me where each of the folders are located. dk

Hi, Open HijackThis, click the "Scan" button, and check the following items: R3 - Default URLSearchHook is missing O4 - HKLM\..\Run: [antiware] C:\winxp\system32\elitefad32.exe O4 - HKLM\..\Run: [antivirus32] ANTIVIRUS.EXE O4 - HKCU\..\RunOnce: [antivirus32] ANTIVIRUS.EXE O21 - SSODL: VkZjo - {3F2A15DC-9580-BF76-AF99-A678692B0DC0} - C:\WINXP\System32\qrtvf.dll If you or your administrator did not put this restriction on Control Panel, also check this item. These restrictions can also be set by software like Spybot Search & Destroy, SpywareBlaster or another similar protection software: O6

vaccine

Hi Prometheus, I am looking at your log and will have a reply soon. dk

IMHO? To the point, that scared me at the beginning...great movie dk

I am moving this to the HijackThis Logs (Resoved) section. If you need more assistence: 1) Post in the Windows Help forum 2) Post a new HJT log. Thanks, dk

Hi n3rrd, Sorry to barge in, I will let Canoeingkidd do the rest of the fix. iexplore is internet explorer. iexplorer is probably malware. Also, you can install MessengerPlus, but choose NO Sponsors. (Note: It is urged NOT to install this program if not necessary.) Please post a log. dk

hitchhikers

echobay, PM me for an invite. lol dk

motel....

Thanks all I am in the middle of trying to get my site in ASAP too. I think I might need more people to sign up though........Look at my sig for a link. cowsgonemadd3, Congrats to you too. Take a look at my sig...lol dk

Ok, You say that you have been infected even more. If you call an expert, you are just wasting your money. Now we need to Shutdown SpySweeper. To do this: * Open it. Click >Options over to the left then >program options >untick load at windows startup * Over to the left click shields and untick all there * Untick ie home page shield * Untick automaticly restore default without notifiction Please download the newest version of HijackThis from http://dknoppix.com/Downloads/HijackThis.exe Put that in a permanent folder. (Such as C:\HJT) Open HijackThis, click the "Scan" button, and eve

No problem. Your log is clean. Follow these steps to keep your computer clean. Please follow these simple steps in order to keep your computer clean and secure: Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this and see it happen almost every day with my clients. Simply using a Firewall in its default configuration can lower your risk greatly. Here is a great free one: http://www.kerio.com/us/kpf_home.html Visit Microsoft's Windows Update

walk...yeah, the good stuff

Panic Room...The movie

Hi mnierman, I will be reviewing your HijackThis log. Open HijackThis, press the "Scan" button, and check the following items: O2 - BHO: (no name) - {2D07800E-E1ED-4AF1-93FE-536B6EE56833} - (no file) O2 - BHO: (no name) - {57952DE8-9126-B7FD-7B66-99DC4C3FE5C9} - C:\WINNT\system32\wvruqlag.dll O2 - BHO: (no name) - {A708A39C-8DA7-4e36-B3B0-0A1FFAFD4B6D} - C:\WINNT\system32\javafix3.dll O2 - BHO: (no name) - {CF021F40-3E14-23A5-CBA2-7173706D1316} - (no file) O4 - HKLM\..\RunOnce: [srv32 spool service] C:\WINNT\System32\spoolsrv32.exe O4 - HKCU\..\RunOnce: [srv32 spool service] C:\WINNT\System32

Hi, This morning HijackThis version 1.99.1 has come out. Please download that from http://dknoppix.com/Downloads/HijackThis.exe Post a new log with that version. Thanks, dk

Hi Jasonp, This morning HijackThis version 1.99.1 has come out. Please download that from http://dknoppix.com/Downloads/HijackThis.exe Post a new log with that version. Thanks, dk