Over 1 million tech questions and answers.

Porn site infected Internet Explorer

Q: Porn site infected Internet Explorer

i visited a porn site and i believe it has infected my pc. now, whenever i bring up the internet explorer, i get "cannot display the webpage". in doing some web searches, i found hijackthis. it's created a log file and i'm not sure what to do with it. it is attached. can someone please help advise me on how to resolve my issues? thanks! Tom

RELEVANCY SCORE 200
Preferred Solution: Porn site infected Internet Explorer

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Porn site infected Internet Explorer

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HEREAndPlease download DeFogger to your desktop.Double click DeFogger to run the tool. The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OK DeFogger will now ask to reboot the machine - click OKIMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.ThenPlease download GMER from one of the following locations and save it to your desktop:Main MirrorThis version will download a randomly named file (Recommended)Zipped MirrorThis version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply.Exit GMER and re-enable all active protection when done.-- If you encounter any problems, try running GMER in Safe Mode.

Read other 2 answers
RELEVANCY SCORE 84.4

My friend's computer got infected with some worm after visiting some porn site and as a result internet explorer would ot start. Everytime we tried to start iexplorer, it would say "C:\WINDOWS\mslk.exe
the NTVDM CPU has encountered an illegal instruction
CS:Odc9IP:011aOP;65 63 75 72 69 Choose 'Close' to terminate the application"
and a variations of other names like "C:\Windows\sdklg.exe or ~mfcrd.exe and poj32.exe...keeps
changing everytime wetry it. Well this is the hijackthis log and it would be nice if someone could help. Thanks!!!

"Logfile of HijackThis v1.97.7
Scan saved at 2:14:03 AM, on 6/27/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Music\SSSvr.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Photo\appsrv\PhotoAppSrv.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
C:\Program Files\Sony\VAIO Medi... Read more

A:internet explorer not starting after visiting porn site

Download and install APM from here: http://www.diamondcs.com.au/index.php?page=apm

Run HJT again and put a check in the following:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://tcjwo.dll/index.html#96676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\tcjwo.dll/sp.html#96676
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {5C397BB2-36D2-F787-9AA2-DB56173763F4} - C:\WINDOWS\msbb.dll
O2 - BHO: (no name) - {38F40F5F-D7CE-40CE-88E6-C0F5381FA3B6} - C:\WINDOWS\System32\nakob.dll
O4 - HKLM\..\Run: [appwh32.exe] C:\WINDOWS\appwh32.exe
O4 - HKLM\..\RunOnce: [ieuu.exe] C:\WINDOWS\system32\ieuu.exe
O8 - Extra context menu item: &iSearch The Web - res://C:\WINDOWS\S... Read more

Read other 3 answers
RELEVANCY SCORE 73.2

Hello i am reciving many messages about -infected!- malware spyware and other things. It says i am infected from an adult porn site...i need help getting rid of this! what programs should i use to get rid of this? any tips? plz post!!!
ps im microsoft 2000

A:I am infected from a Porn site. what do i do?

Hello and welcome. Let's get a scan and log. hat is your Antivirus?Please download and scan with SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)In the Main Menu, click the Preferences... button.Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program.Do not run a scan just yet.Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repe... Read more

Read other 23 answers
RELEVANCY SCORE 72.4

Hi thanks you for any help u guys can give me.

i cought my mate on my PC looking at porn.

My trend micro gave me a warning straight away about a virus. i thought it isolated it and fixed it.
After that i started getting popups and i was a bit sus so i dloaded spybot and adaware. Both piked up an array of cookies and trojans i also had the antivurus 2008. I scanned and fixed all problems with all 3 spybot adaware and tren micro.
then i go on IE and i am still getting popups. And now weird things are happening like wen i start my pc not all my icons in the bottom right start up. sometimes all my things load like zboard tray nvidea tray and quiktime and such in the bottom right. then some times they dont appear at start up.
i have also noticed wen i am playing world of warcraft i alt tab bak to windows for some reason and these things zboard tray etc seem to have disapeared. and the last 2 days i have gone bak to windows to find everything gone and only my desktop pik up. i cant do anything but either ignore it and alt tab baik to my game or cntrl alt delete and restart PC.
i have had IE set to work offline and i get a system thing saying the programme wants to connect and either connect ot stay offline. i mean i am not even trying to get on the net so obviously i am infected.
My trend is constantly piking up things and so does my adaware and spybot but after fixing and scanning i still get the same problems.

i read about one fo the virus i had i think was virumond it says i... Read more

Read other answers
RELEVANCY SCORE 70.8

My neighbor recently visited a porn site, after which his Internet Explorer web page now contains buttons just under the Tool Bar for accessing the porn site. Also, he no longer is in control of opening to his website after logging in to the internet (MSN) because the porn site directs his computer it its site. He tried to tell his computer to open to MSN by using the Internet Connection in the control panel, but it only works one time.
How con he remove these buttons in his Tool Bar area and get control of accessing his MSN web page?
 

A:Removing Porn site Button from Explorer Tool Bar

Hi, Best thing to do is have him post a Hijackthis logfile for review, otherwise you would be just shooting in the dark- He could look in Add/Remove programs for strange toolbars, but removing them that way usually leaves the junk behind and does not fix anything.
He can download HJT to a disk and run it that way, but if he is able to get to this site

http://s89223352.onlinehome.us/mirror/hjt/

he can use the "HijackThis from Here" link button and by following the directions in the Quick Start guide, he can get a logfile posted that will allow someone to help him.
He can register and post himself, or you could post it for him....the log fits easily on floppy disk, too so he could bring it over if he cannot get online to work.
 

Read other 1 answers
RELEVANCY SCORE 70.8

Hi,
 
I have to admit, I've come home drunk a few times and perhaps gone a little to far in my use of sites such as Chaturbate. Recently the site was able to disconnect my mac from the wifi, control my camera and listen to my microphone.
 
I dont know much about network settings but i know by looking at them they are compromised and when i reset them they always go back to the settings that have been installed by the hackers.
 
I have captured packets using wireshark and will attach them here if im told its safe to do so by a moderator. Im trying to learn how to use it, ill get there but its going to take a while as im starting from nothing.
 
would someone advise me on this please?
 
thanks!

A:MacBook Pro infected and controlled from porn site Chaturbate

Have you scanned it yet?Run ClamX AV free trial

Read other 1 answers
RELEVANCY SCORE 64.4

I have tried most of the posts on the internet to fix this problem--this is under IE6--"Internet Explorer was not able to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later." The problem just suddenly appeared. I'm running a Dell Inspiron B130 laptop with Win XP Home, Service Pack 3 installed, 1 gb ram and a 40 gb HDD. Had McAffee Internet Security Suite preinstalled but removed it via REVO Uninstaller and have only Windows firewall enabled and NO anti-virus. I did try downloading with Windows firewall disbaled and still no success. I can navigate to a site like Google Chrome download page but then when I click on the download button, the error message appears. Also can't download Microsoft or Windows updates from either site, although, again, I can get through the "checking" phase. I've run Malwarebytes, A-Squared, and IObit 360 and removed about 13 traces of malware ranging from low risk to high risk, defragged and cleaned the reg, all to no avail. I originally had IE7 installed, read about rolling back to IE6 and doing the typical repair sequences, again to no avail. Supposedly IE8 fixes this, but I can't download it, although I did try the stand-alone installer of 15 MB without checking the "get updates" box. It loaded and installed and shows up as IE8 but still had the same problems. Then did a system restore back to before the IE8 install, rolled back to IE6 again... Read more

Read other answers
RELEVANCY SCORE 63.2

Unwanted Favorites on Boot(Porn Site and Search site)
Already ran Spybot.
Can any one help with clearing up this problem?
How can it be avoided in the future?
Here is my scan...

Logfile of HijackThis v1.97.7
Scan saved at 8:14:40 PM, on 12/8/03
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\HOMENETWORK\ICM.EXE
D:\PROGRAM FILES\AVKSERVICE.EXE
D:\PROGRAM FILES\AVKWCTL9.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
D:\PROGRAM FILES\OAKTASK.EXE
D:\PROGRAM FILES\OAK SIMPLICD REWRITE\IWCTRL.EXE
C:\WINDOWS\SYSTEM\ICSMGR.EXE
C:\PROGRAM FILES\HOMENETWORK\ICMMONITOR.EXE
D:\PROGRAM FILES\AVKPOP.EXE
D:\GREETINGS WORKSHOP\GWREMIND.EXE
D:\OFFICE\FINDFAST.EXE
D:\PROGRAM FILES\QUICKDCF.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\NETZERO\ZCAST.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\NETZERO\CHKRAS.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\epspmgr4.exe
C:\WINDOWS\SYSTEM\epdsplr4.exe
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://server224.smartbotpro.net/7search/?001
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://6... Read more

A:Unwanted Favorites on Boot(Porn Site and Search site)

Read other 8 answers
RELEVANCY SCORE 63.2

I am having so many problems in my computer that I could hardly stand anymore. I am using Dell PC and there is a toolbar in Internet Explorer which brings porn to me from all over the world. How does it get there at the first place? I have no clue. My roommate is allowed to access internet using my pc and now I am in great trouble. Please help me. Here is the log file

-------------------------------------------------------------------------------
Logfile of HijackThis v1.97.7
Scan saved at 10:10:27 AM, on 2/4/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Sajids\Local Settings\Temp\HijackThis.exe
C:\WINDOWS\notepad.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://rd.yahoo.com/customize/ymsgr/defaults/*http://my.yahoo.com
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files... Read more

A:Porn is all Over Internet Explorer _ HELP HELP

If your roommate is going to continue to have access to your computer, you'll need the following tools in the future, so here's the whole list.

First download LSPFix and remember where you saved it. You may not need it but it you do, you'll be glad you have it.

Then download Spybot, AdAware and CWShredder (link to the download is near the bottom of the page).

Then go into Control Panel>Add/Remove Programs and look for anything related to MyWebSearch, Newdot net, Gator. If found, uninstall them.

Finally, install AdAware, immediately update it and then run its scan. Do the same with Spybot. (Spybot often finds things AdAware misses and vice versa.) Finally, to be doubly sure you got it all, CWShredder. Run Spybot and AdAware about once a week.

Newdot net can mess things up with the stuff it leaves behind so if you find you can't get online after removing all the spyware, just run the LSPFix you download earlier and you should be good to go.
 

Read other 1 answers
RELEVANCY SCORE 61.6

When I launch my IE, besides the default home page, a second page appears with some porn. And on certain occasions, the number for my connection is changed. No virus / malware detected with Norton / Ad-aware. Getting nuts.
Thank you for your help.

Logfile of HijackThis v1.99.0
Scan saved at 4:55:13 AM, on 5/21/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\System32\1XConfig.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\System32\GSICON.EXE
C:\WINDOWS\System32\dslagent.exe
C:\WINDOWS\system32\usbn.exe
C:\Program Files\I8kfanGUI\I8kfanGUI.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Owner\My Documents\HijackThis.e... Read more

A:Solved: Help Needed. 2nd Internet Explorer with Porn

Read other 8 answers
RELEVANCY SCORE 61.6

I'm having a problem with my internet explorer it keeps opening porn sites but I only know by pressing ctrl/alt/del and my MS Outlook is running and when I press ctrl/alt/del it shows a bunch of untitled mail waiting to be sent.Nortons says I have a BlackBox.calss virus but it can't clean or wipe it out because its in use. I installed HT and ran a scan here are my results.
I hope someone can help me get rid of this alloying spam/pop-up/porn & Outlook problem,

Thank you in advance. =)
Here's log of HT's finding's.
Logfile of HijackThis v1.97.7
Scan saved at 6:10:13 PM, on 12/6/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ps2.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\windows\rundll32.exe
C:\WINDOWS\System32\PackethSvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Excursion9.5\mIRC.ExCurSioN.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\My Documents\PC_Doc_SetUp\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page ... Read more

A:Internet explorer keeps opening porn sites

Read other 6 answers
RELEVANCY SCORE 61.2

I hope someone can help

A number of explorere browser popups for various porn/viagra type sites are happening at random.

Various spyware alert pop ups are happening too

I have installed erunt but I am unable to get it to run. Hijack this cannot be installed either. When I try to run HJTInstall.exe a pop up comes up saying

"application cannot be executed, The file hijackthis.ese is infected. Do you want to activate your antivirus software now" comes up, with yes /no options

Taskmanager has been disabled by whatever is doing this as well.

I'm not sure where to start. Any help would be greatly appreciated.

Stupidman

Read other answers
RELEVANCY SCORE 60.4

I am using internet Explorer 11 to access the www.nemsis.org site and when I go to access http://www.nemsis.org/media/CustomElementLibrary/ .

I get the error message below:


I can use Chrome just fine to access the page. I have a coworker who can access just it just fine and he is using Internet Explorer 11 and was also able to access on Firefox. Is there something I am missing to access it? The page should display a map.

Thank you in advanced.

A:Using Internet Explorer 11 but site displays warning that I need internet Explorer 9 or higher.

Answered my own question. Apparently if I place a check in the "Use Microsofts Compatibility list and uncheck the "Displa intranet sites in Compatibility View" it works. 

Read other 1 answers
RELEVANCY SCORE 56.8

A friend just called and said everytime he clicks on the search button on his ie it pulls up a porn site it hasent changed his home page just when he hits search dont know his os but he has ie5 same as me he installed adware ran it no help
 

A:porn site

Read other 8 answers
RELEVANCY SCORE 56.8

My son has been downloading things that he shouldn't! By him doing this he has done something to the computer.

When i use the internet certain words are high-lighted ie..Hand If you click on to the high-lighted word it opens up a new internet window with this link in it ....http://www.hotsearchbar.com/cgi/v30//ezlclk.fcgi?id=114
then goes stright away to another web site with this link...
http://www.aster0ids.com/872151/hxw/index.htmlare

I have ran Spybot and CWSherdder and still this is happening.

Can someone please help with this,i have a teenage daughter and i don't want her to have to see the things that are on this web site.

I have ran a High jack this,here is what it came back with.

ogfile of HijackThis v1.99.0
Scan saved at 14:58:00, on 14/02/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0600)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\NPROTECT.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FI... Read more

A:Porn web site!!!!! HELP

Download and unzip or install these programs/applications if you haven't already got them. If you have them, then make sure they are updated and configured as described
CWshredder from http://www.subratam.org/?page=removal
Spybot - Search & Destroy from http://security.kolla.de
Download Adaware SE http://www.lavasoftusa.com/support/download/
then
Run CWSHREDDER,

Close all browser windows, click on the cwshredder.exe then click "FIX" (Not "Scan only") and let it do it's thing.
and make sure you have all of Microsoft security updates

then reboot &

Run Sybot S&D

After installing, first press Online, press search for updates, then tick the updates it finds, then press download updates. Beside the download button is a little down pointed arrow, select one of the servers listed. If it doesn't work or you get an error message then try a different server

Next, close all Internet Explorer and OE windows, press 'Check for Problems', and have SpyBot remove all it finds that is marked in RED.

then reboot &
Run ADAWARE

Install the program and launch it.

First in the main window look in the bottom right corner and click on Check for updates now then click Connect and download the latest reference files.

From main window :Click Start then under Select a scan Mode tick Perform full system scan.

Next deselect Search for negligible risk entries.

Now to scan just click the Next button.

When the scan is finished... Read more

Read other 3 answers
RELEVANCY SCORE 56.8

I have a Dell 2400 Desktop with a Home XP operating system. I have Norton 2005 Internet Security, Ad-Aware, Spybot Search & Destroy, SpywareBlaster & PCRescue installed on my computer. I keep my machine up-to-date with maintenance for all programs. Recently, I have been getting Pop-up Porn sites appearing frequently whenever I go online to the Internet. The Porn site Pop-ups appear initially and automatically as I go to most any site that I have selected. I can close the porn site window and can then proceed with the Internet site I had choosen initially.

Although I have searched Norton's Internet Security facilities, I cannot find a way to stop this infection. Can anyone here assist me in ridding my machine of these Porn Site pop-up windows?
 

A:Porn Site Pop-ups

Get HiJackThis, run a scan and post the log.
 

Read other 3 answers
RELEVANCY SCORE 56.4

I recently restored my computer back to its factory setting whiping everything clean. I have a HP with windows vista.Bought in 2008. when i was finished restoring the computer i updated all the windows updates it said it had (119 updates). updated java and adobe and a couple other things. Now i am having problems loading certain websites. I looked into it a little bit noticeing most answers said i had something to do with scripting or something of the sort. not sure how to do all that just trying to download google chrome and use the internet.Its having a problem downloading anything really.Is there a way to fix this??
 

A:Internet Explorer cannot open internet site-Operation Aborted

Have you tried the workarounds found here?

http://support.microsoft.com/kb/927917
 

Read other 1 answers
RELEVANCY SCORE 56

HI!
Can anyone show me how to lock out all the porn. site on internet,so my kids can not get access to it.Thanks in advance
 

A:How can i lock out all porn. site?

Check out this site http://www.net-nanny-software.com/
 

Read other 3 answers
RELEVANCY SCORE 56

Please, I need some help from the experts. I purchased the System Suite 5 a few months ago to help protect my pc from viruses, but some have managed to get through. I did a deep virus scan last night and was able to remove 6 viruses, but some are still lingering around because porn site pages continue to pop up. A few other things I've noticed are: my homepage keeps defaulting to "about: blank", no matter how many times I change it; every now and then I get "Best Online Casino" shortcut on my desktop; and last I keep getting web links added to my favorites folder, no matter how many times I delete them (ex: viagra, gift certificate, casino, best search, spyware). I have a feeling that all these "problems" are connected somehow because I started experiencing everything about 1 week ago. I don't know what to do anymore. Please help!!!!!!
 

A:Can't get rid of porn site pages!!!!!

Go here and download Spybot Search&Destroy:
http://www.safer-networking.org/index.php?lang=en&page=download

Check for updates before running the program. A tutorial can be found under help. You can safely delete what it finds.

Do likewise with Adaware 6 that can be found here:
http://lavasoft.element5.com/software/adaware/

Download CW Shredder:

http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Unzip, run and hit the fix tab to fix all found problems.

Go here and download hijack this:

http://tomcoyote.com/hjt/
Create a new folder on you hdd and name it HJT.

To do this go into My Computer and double click on your hdd then right click and select New then Folder and name it HJT.

Unzip HJT into the new folder. Launch HJT, click Scan, and click Save Log. Post the log here but donít make any changes.

Iím not very good with HJT but a lot here are and someone will help you.

Good luck.
 

Read other 2 answers
RELEVANCY SCORE 56

I was getting an error meassage which said InCD helper won't start. I goggled the message for help. When I clicked on a link which I thought was going to techforum I was redirected to a nasty page of porn photos offering free sex movies.I am afraid to let my kids use the internet until I am sure this is fixed. The same thing happened when I clicked another link after typing in the same thing about InCD helper. Last week I was searching for info about ECGs and had a problem of being redirected to sites selling heart tests. This has never happened before.
AVG free and Panda scans both found nothing. I have run spybot and removed the cookies which was all it found. Malwarebytes found 2 files with Rogue.crusader and I have removed them. I have avgfree and I have just installed zonealarm firewall.

Here is the log I was asked to paste

DDS (Ver_09-06-26.01) - NTFSx86
Run by Catherine at 16:28:21.48 on Mon 13/07/2009
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1111 [GMT 9.5:30]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe ... Read more

A:Being redirected to porn site

Hello -

I'd like a look with a different rootkit scanner.

Go here, scroll down and download RootRepeal.zip to your Desktop. Unzip that, and then click RootRepeal.exe to open the scanner. Next click on the Report tab, and then click on Scan. A Window will open asking what to include in the scan. Check all of the below and then click Ok.

Drivers
Files
Processes
SSDT
Stealth Objects
Hidden Services

You will then be asked which drive to scan. Check C: and click Ok again. The scan will start. It will take a little while so please be patient. When the scan has finished, click on Save Report. Name the log RootRepeal.txt and save it to your Documents folder (it should default there). When you have done this, please copy and attach it to your next reply.

Read other 12 answers
RELEVANCY SCORE 56

I keep getting a pop up from webcam sites masquerading as a windows message. I've been waiting a while now to attach an image of the pop up but of course it's not appearing I'll reply with the message when it appears.

In the meantime Norton AV 2003 doesn't find it and after running live update I get a Norton message "Live Update must update Symantec Redirector. Please install update first, restart, and run liveupdate again." Here are the details from the Norton message/error:

Windows 2000 5.0.2195 Service Pack 3

Common Client Core 1.0.2

LiveUpdate was not able to complete this update.

Please contact Technical Support and provide all information displayed on this screen.
For contact information, go to Help->Technical Support from your Symantec product.

The files below could not be updated by LiveUpdate:
-----------------------------------
File: C:\WINNT\System32\ccPasswd.dl^
99352 Bytes 12/2/2003 16:11:10 v1.0.10.6.
File: C:\WINNT\System32\ccTrust.dl^
95480 Bytes 11/6/2003 8:22:48 v1.0.10.2.
File: C:\PROGRA~1\COMMON~1\SYMANT~1\ccApp.ex^
54296 Bytes 12/2/2003 16:11:04 v1.0.10.6.
File: C:\PROGRA~1\COMMON~1\SYMANT~1\ccEmlPxy.dl^
152600 Bytes 12/2/2003 16:11:06 v1.0.10.6.
File: C:\PROGRA~1\COMMON~1\SYMANT~1\ccEmlUI.dl^
74776 Bytes 12/2/2003 16:11:06 v1.0.10.6.
File: C:\PROGRA~1\COMMON~1\SYMANT~1\ccErrDsp.dl^
119832 Bytes 12/2/2003 16:11:08 v1.0.10.6.
File: C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvt.dl^
185368 Bytes 12/2/2003 16:11:54 v1.0.10.6.
Fi... Read more

A:Porn site pop up message help!

Read other 13 answers
RELEVANCY SCORE 56

First of all please do not deride me because I am using windows me.

I visited a particular site which was not to my taste and as soon as I saw it, went back a page. Now every time I start Internet explorer (version 6.0.2600.000015) I am taken to this particular site. I can re-set to my home page but the next time I start internet explorer it has been reset to this offensive page.

I have run regedit.exe and gone to HKEY_CURRENT_USE\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN and found c:\windows\regedit.exe/s c:\system32\and think the offending file is here.

How can I delete or change this file to enable me to be rid of this intrusive website, so that i can set IE to my home page permanently?
 

A:an intrusive porn site, help

Read other 7 answers
RELEVANCY SCORE 56

help, in AOL instant messenger, every time i click on a link it brings up a porn site and my firewall goes crazy and asks if many files can have access to the internet.
here is my hijack this log:
Logfile of HijackThis v1.97.7
Scan saved at 9:48:56 PM, on 5/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Saitek\Saitek Gaming Extensions\saicnfig.exe
C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\program files\quicktime\qttask.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\WINDOWS\System32\tmp2.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WIND... Read more

A:all links to porn site

try running Ad-aware to remove spyware
 

Read other 2 answers
RELEVANCY SCORE 56

Enclosing HijackThis log. Please tell me how to rid my system of this unwelcome intruder. Per instructionsRan Spybot S&D prior to HijackThis. Thanks in advance.

A:HiJacked by Porn Site

Where is the log file?

Read other 1 answers
RELEVANCY SCORE 56

I need help with something strange.

I went to a very innocuous site as http://www.hmtrad.com/
and suddenly a pop up with porn search came up.
Curious, I wanted to see what was causing it (the site is about old musical instruments, and no porn whatsoever is in there).
After some research, I found out that in the page source there is a <meta name="keywords" content="sexto strings">
Apparently the part "sex" in "sexto strings" is triggering the pop up. I verified this creating an html page which is blank except for a line containing <meta name="keywords" content="sex"> and, in fact, the annoying pop up comes up.

My usual web surfing never triggers it, so it is not very annoying, but I do worry about some mysterious process running in the background that is triggering it, and how I got that (I am not a porn surfer). I do have DSL and a continuous connection, but I am puzzled at the fact that somebody might have broken into my computer and put something that seems relatively innocuous. Since, as I said, my surfing does not triggers the problem (www.hmtrad.com is the only site so far where I have seen the problem), I am not sure when this started. It might have been on my computer for quite a while, and it never came up.

Anti-virus and anti-spyware have not found anything wrong. My own register search has not found anything wrong either (but I could have missed something). I am very puzzled. Can anybody help... Read more

A:porn site search pop up

Hi virtualment

Welcome to TSG!

Please do this. Go here http://www.merijn.org/files/hijackthis.zip and download Hijack This. Un Zip it and click on the Hijackthis.exe.

Click the "Scan" button when the scan is finished the scan button will become "Save Log" click that and save the log.

Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.

DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required. Someone here will be glad to advise you on what to fix.

The log may reveal the source of the problem.
 

Read other 3 answers
RELEVANCY SCORE 56

Hi there.

How do I get rid of a link to a porn site that
installed itself on my desktop? It will not delete, it just gives an access denied when I try to delete it and send to the recycle bin.

Thanks for your help.
 

A:How to get rid of porn site on desktop?

go to http://www.tomcoyote.org/hjt/ , and download 'Hijack This!'.
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log somewhere, and please copy & paste its contents to the forum.

It will possibly show issues deserving our attention, but most of what it lists will be harmless or even required, so do NOT fix anything yet.
Someone here will be happy to help you analyze the results.
 

Read other 1 answers
RELEVANCY SCORE 56

Hello,

Today I was looking up some information on terminal blocks to help my 12 year old with his electronics project.
I put 'using a terminal block for children' into google search.
One of the entries was labelled 'Terminal Block Electrical' the address underneath was
'smokers news.com/refer/terminal-block-electrical'- I am not sure if this will act as a link once I post so I have put a space between the smokers and the news which was one word. (I didn't notice the address at the time just looked at the title)
When I clicked on 'Terminal Block Electrical' I was greeted with an obscene photo and found I had been taken to a porn site. The site name in my history is Sex datings in Adelaide (this is where I live).

Here is the dds and I have attached the attach and the ark.text. I have access to a windows install disc.
I am sorry to say that I had a similar problem mid 2009 which you helped me fix. I do hope you can help this time also. Since then a lot of things have changed and I may not have the appropriate security.

Thankyou

Cathy

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16464 BrowserJavaVersion: 10.13.2
Run by Catherine at 16:51:40 on 2013-03-05
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.61.1033.18.2047.895 [GMT 10.5:30]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68D... Read more

A:Redirected to porn site

Hi and Welcome!!

My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
The fixes are specific to your problem and should only be used for the issues on this machine.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.
If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.
Please be sure to subscribe to the topic if you have not already done so.
IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data.

Having said that.... Let's get going!!
----------

Please download aswMBR to your desktop.
Double click the aswMBR icon to run it.
Click the Scan button to start scan.
If you are asked to update the Avast Virus database please allow it to ... Read more

Read other 16 answers
RELEVANCY SCORE 56

My IE will not open website pages on Blogger. The message comes up:Internet Explorer cannot open Internet Site with the http: Operation Aborted.

I just had my laptop repaired. All of the other problems I was encountering are cleared up except this one. I have IE8 downloaded, Soft Pack 2 also.

I visited Microsoft for help. I did not understand how to repair the problem. I have a Gateway Laptop MT 6840 and Vista Home Premium.

Can someone please help me correct this problem in language that I understand and can use? Thanks!
 

A:Solved: Internet Explorer Cannot Open Internet Site

Can you access the site in other browsers like Firefox or Opera etc.?
 

Read other 3 answers
RELEVANCY SCORE 56

i us msn as home page but started recieving this message , Internet Explorer cannot open the internet site http://uk.msn.com/. Operation aborted, however other pages load ok,
i am running xp home, how can i cure this, thank you!
 

A:Solved: Internet Explorer cannot open the internet site

check privacy settings in IE
or
contact your Internet Service provider
 

Read other 2 answers
RELEVANCY SCORE 55.6

I have some how got webb sites on my favorites toolbar which I can not remvove I have tried deleting, runnigg spy ware but every time I reboot they are there any solutions other than a total reboot these sites have fowl language in them

A:porn site web address removal

Please click Here & read This & This HTH

Read other 2 answers
RELEVANCY SCORE 55.6

Whenever my computer reboots or starts up an IE window pops up that leads to www.catlist.com a porn site... How do I get rid of this!?!?!? THank you for your help I really need it!

Logfile of HijackThis v1.99.1
Scan saved at 2:30:21 AM, on 5/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\PROGRA~1\NORTON~2\NORTON~2\GHOSTS~2.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\Program Files\Win Comm\WinC... Read more

A:Catlist Porn Site in IE on Statup! HELP!!

Hi and Welcome
It may help you if you print out or copy this page for easy reference.. Make sure to work through the fixes in the exact order its listed..These instructions only apply to HJT v1.99.1

Please Keep your browser and all open programs closed (except firewalls and antivirus) when you are carrying out the fixes..

Download any of the required programs before attempting to start any of the fixes.


Turn off System Restore instructions (WinXP)
Rightclick My Computer | Properties | System Restore | check ?Turn off System Restore?, <Apply>, <OK>. Reboot. When we have confirmed that your log file is clean, you may renable System Restore and create a new restore point.

SHOW HIDDEN FILES AND FOLDERS.
To show hidden files instructions (WinXP)
Doubleclick My Computer | Tools | Folder Options | View tab
Select Show Hidden Files and Folders
Uncheck Hide extensions for known file types
Uncheck Hide protected operating system files (Recommended)
Select Apply to All Folders | Yes | Apply | OK
------------------------------------------------------------------

Download and run Adaware,SpyBot & CWShredder (check for updates) for a preliminary cleanup first.Some files below may not be present after running the above programs.Full instructions below.

How to setup Ad-Aware

Download Ad-Aware
Save aawsepersonal.exe into its own directory, NOT in a TEMPorary folder or on the Desktop. I recommend c:/program files/Adaware/
Doubleclick aawsep... Read more

Read other 1 answers
RELEVANCY SCORE 55.6

A few days ago, my Google was hijacked by the above. It took me quite a while to resolve the problem. I used FixWareout to fix it.
 

A:Beware porn site voyeurweb.com

Welcome

I think you need to install and run Hijack This which is a free diagnostic tool used to help determine how to remove infections.
After you cut and past the log report be patient and wait for a security expert to advise.

Do not attempt any removals on your own.
Click here to download HJTsetup.exe: http://www.thespykiller.co.uk/files/HJTSetup.exe
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required
 

Read other 1 answers
RELEVANCY SCORE 55.6

My browser keeps redirecting to http://199.227.31.199/ssredir/gb.html it's a porn site and there are younger children that use this computer i've included my hijack this log any help would be greatly appreciated it.
Logfile of HijackThis v1.98.2
Scan saved at 10:09:26 AM, on 10/7/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\Program Files\Panda Software\Panda Antivirus Platinum\apvxdwin.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\D-Link\DSL-200\dslstat.exe
C:\Program Files\D-Link\DSL-200\dslagent.exe
C:\Program Files\Winad Client\Winad.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe
C:\Program Files\Winad Client\WinClt.exe
C:\windows\system32\yjfyhrhh.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Microsoft Office... Read more

A:My browser keeps redirecting to Porn Site

Read other 11 answers
RELEVANCY SCORE 55.6

I caught my cousin looking at porn sites on my computer a couple of days ago. After I went on to clean off everything he had put on there, I found these two programs: DialerX and XXX.

I deleted them both in XP and in Safe Mode, and I haven't seen them come back yet. However, whenever I got to dial my regular dial-up connection, the number is changed EVERYTIME to some intenational number. The same with the username and password.

Logfile of HijackThis v1.97.7
Scan saved at 10:04:37 AM, on 6/27/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\svchost.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\WinRAR\WinRAR.exe

O2 - BHO: (no name) - {BA7270AE-5636-4618-BAF3-F86ADA39F036} - C:\Program Files\ICOO Loader\addons7\icoourl.dll
O2 - BHO: (no name) - {ED657BAF-1EE5-4A07-9D2E-6D0525EFC69B} - C:\Program Files\ICOO Loader\addons7\icoourlext.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.... Read more

A:Porn Site dialer problem!!!!

Read other 15 answers
RELEVANCY SCORE 55.6

A friend was using a new DELL computer 8250 with P4 and activated updated NAV and XP-PRO. He accidentally hit into a porn site which now possesses his computer and become his homepage whenever he begins Internet Explorer. He can not
change to another website other than porn (Unbelievable).
If we change his homepage under Internet Options to Yahoo etc. (something Clean) the computer immediately goes to the same porn site!!!!! Updated NAV scan shows no virus present.
Ad-aware scan of no benefit. Deleting cookies and temporary Internet files no benefit. Computer otherwise seemingly working
fine, but cannot use Internet. Closing the initial porn website goes to a different porn site repeatedly.

Any help greatly appreciated.

tennessee
 

A:homepage overcome by porn site

Read other 14 answers
RELEVANCY SCORE 55.6

Hello

I came across this site http://www.dogagent.com
On the front page it says "The pages are designed only to work in Internet Explorer 5.0 or later".

Can anyone explain why the site wouldn't work with another browser?

Ideas welcomed!
David B.


Lieutenant Commander RN (Rtd)

Read other answers
RELEVANCY SCORE 54.8

I get this message after being on site for a short time. Primarly it is on Ebay site.
My XP machine works fine. Any clues. Let me know.

A:Internet Explorer cannot open the Internet site

Hi, perkinshershel, and welcome to the forums.
Have you performed any sort of autotuning disabling on your machine, or else 'tweaked' the TCP/IP settings?

FWIW, Vista doesn't do well with tweaked TCP/IP settings like XP does - it has an autotuning feature that dynamically changes the values for various settings n the TCP/IP stack as needed, thereby making the need for tweaked TCP/IP settings a thing of the past.

Read other 3 answers
RELEVANCY SCORE 54.8

Just started using IE8, and getting the nag on many pages (while I am already on that page) saying IE cannot open this internet site....and if hit the return arrow to go back a page , and then reclick to the new page, it works. Whats up with that ? Am I missing some file or is this just another glitch ?
Didn't happen with IE7, and may just go back to it.

A:internet explorer cannot open the internet site...

Did you try other sites ? That is a quick check to see if the problem is your browser. And it would need to be a site that uses similar setup. So if the page that doesn;'t display has lots of javascript, go to another one that has lots of javascript, etc.

On one of my sites, sometimes one particular page wouldn't display. I had to re-edit it, upload, it works fine now. So it may not be your browser. It could be that site.

Read other 2 answers
RELEVANCY SCORE 54.8

Hello,
After installing some windows updates I receive from time to time in Vista as well in XP XP3 an error popup when I access a WWW site.
Some times the F5 solves the problem , other times no.....
The attached screenshot is an example of the popup
Any idea?
Thanks in advance.

A:Internet Explorer Cannot Open The Internet Site ....

Are these secure sites or sites that you have to enter a login and password? Have you deleted all of your temp. files, cookies, and history?

Read other 7 answers
RELEVANCY SCORE 54.8

G`day to everyone. I have a friend who just got a new comp with Norton trial version that has a firewall. He has had people tell him that it is ok to go to porn sites, and that the sites can do no harm to his comp because he has the Norton firewall. I told him I thought he was crazy, but, have no real understanding of just exactly how much protection a firewall can provide versus a porn site(scum of the earth). Any thoughts on this matter would be appreciated.

Regards
IMP49
 

A:Will Norton Firewall stop porn site

Read other 6 answers
RELEVANCY SCORE 54.8

well i went away for the weekend and the kids stumbled upon a porno site. needless to say i ended up with a mess! still trying to clean it up. ran my avg ad-ware, and spybot. next i will go to the housecall virus online detector. before i do can someone read my hyjack file? i think i can get rid of the "save and the SEP" just want to make sure and see if there is anything else that i dont know about.

also.....i used the shredder, deleted my history and all my temps. is that porn site stuck with me?

thanks
 

A:7 viruses! kids found a porn site

Read other 16 answers
RELEVANCY SCORE 54.8

I need some help from the experts. A few months ago, I purchased the System Suite 5 to help protect my pc against viruses. Apparently, some have managed to get through. Besides, the porn site pages that continue to pop up all the time, my homepage is changed to "about: blank". No matter how many times I change the homepage, it goes back to the same blank page. A third thing that is happening, I am getting web links added to my favorites. As I do with the homepage, I go in and delete all the links, but when I log back in, the links are still there (viagra, spyware, casino, gift certificate). Every now and then, I will get a "Best Online Casino" shortcut added to my desktop. I'm sure everything is somehow connected because I started experiencing all these problems about 1 week ago. I did a deep virus scan last night and was able to delete about 6 viruses, but the porn-site pages have not completey disappeared, neither has the blank homepage and the added links to my favorites folder. Please help!!!!!
 

A:Porn Site Pages Won't Stop Popping Up

Read other 15 answers
RELEVANCY SCORE 54.8

I already post this in Am i infected? What do i do ? in another forum the other seem to have the same problem with me and Boopme suggest to do this
 
this is my original post link
http://www.bleepingcomputer.com/forums/t/558762/weird-russian-ad-keep-following-me-around-and-redirect-me-to-porn-site/
 
this is the link that Boopme suggest what to do
http://www.bleepingcomputer.com/forums/t/558631/russian-pop-up-virus/

 

A:weird russian ad keep following me around and redirect me to porn site

Sorry i did something wrong on copy process
 
this is a RSIT, DDS is unable to run
 
Logfile of random's system information tool 1.10 (written by random/random)
Run by acer-pc at 2014-12-06 01:57:39
Microsoft Windows 8.1 Pro
System drive C: has 119 GB (80%) free of 150 GB
Total RAM: 3905 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:57:40, on 6/12/2557
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17037)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Internet Download Manager\IDMan.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\ThaiSoftware Enterprise\ThaiSoftware Dictionary\Bin\MagicLnk.exe
C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
C:\Users\acer-pc\Downloads\Programs\SecurityCheck.exe
C:\Program Files\trend micro\acer-p... Read more

Read other 25 answers
RELEVANCY SCORE 54.8

My husband's computer has a nasty bug. Spy Sweeper won't work and anytime I try to click on any program or the internet I get a box that pops up and says-- "Security Warning-- Application cannot be executed. The file wmpnscfg.exe is infected. Do you want to activate your antivirus software now?" Then at the bottom of my screen I get a pop up from my AV Security Suite (expired subscription) that says-- "Your computer is being attacked by an internet virus. It could be a password-stealing attack, a trojan-- dropper of similar." "Details-- ATTACK from: 136.77.114.247, port 24282. Attacked port 29974, Threat Win32/Nuqel.E, do you want to block this attack?" (The IP addresses and ports keep changing)

Then I get a floating Windows security alert that reads "Application cannot be executed. The file wuauclt.exe is infected. Do you want to activate your anti virus software now.

I cannot run HiJack this is regular mode. Here is the log from safe mode. I am working from my computer-- can you please help? Thanks!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:14:44 PM, on 7/11/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Safe mode with network support
Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\Taskmgr.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program... Read more

A:Trying to help my husband who has jacked up his computer on a porn site, I'm sure

Read other 16 answers
RELEVANCY SCORE 54.8

I know there are a lot of people here seem to have the same problem with me. I use firefox most of the time. First firefox tried to blocked pop up but after a couple times it seems to can't. Now it keeps redirect me to porn site, aviasales. There are also small pop up appear at the left corner in russian. And when I tried to load any websites they will tried to transfer data to some weird website that have nothing to do with the side I loading.  it affected more to some website but not all for example reddit, bleacher report, some web blog, but not with tumblr or google. oh and malwarebyte tried to blocked it too.
 
my english might not be good and my understanding in computer is kindda low but please help.

A:weird russian ad keep following me around and redirect me to porn site

Hello there    
 
I'm LighthouseParty and I'll be assisting you with your concern today. Let's run a couple of scans to see what could be causing this. Someone else is having the EXACT same problem as you are.. http://www.bleepingcomputer.com/forums/t/558631/russian-pop-up-virus/
   Download MiniToolBox
Click here to download MiniToolBox to your desktop.
Double click MiniToolBox.
Select the following and then press go.
Post the log in your next reply.
Flush DNS
Reset IE Proxy Settings
Reset FF Proxy Settings
List Installed Programs
List Restore Points
   Install and run a scan with Malwarebytes Anti-Malware
Click here to download Malwarebytes to your desktop.
Double click mbam-setup-x.x.x.xxxx and follow the on-screen instructions.
On the dashboard, click update now.
After that, click scan now - the scan will now begin.
When the scan's completed, select apply actions - make sure the action is quarantine.
Restart your computer.
How to get the log.
On the dashboard, select the history tab and click application logs.
Select the log which has the time and date of when you did the scan.
Click copy to clipboard and paste it into your reply.
 Download Security Check
Click here to download Security Check to your desktop.
Double click SecurityCheck and follow the on-screen instructions.
A log should open, called checkup.txt.
Please post the contents of it in your next reply.
Thanks an... Read more

Read other 8 answers
RELEVANCY SCORE 54.8

I scanned with ZA, then SpyBot S&D, AdAware, BitDefender and Panda AntiVirus. Still giving me the problem. If I type in my dsl gateway homeportal address it brings up a random one of these porn sites:Yahoopolicycentre.comhotproductz.comboobs-porn.comteen-virgin.netAuut.combbwtales.netlovesmoon.net.....Here's my HijackThis log:Logfile of HijackThis v1.99.1Scan saved at 1:12:17 AM, on 2/21/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16414)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exeC:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exeC:\WINDOWS\system32\ZoneLabs\isafe.exeC:\WINDOWS\system32\wuauclt.exeC:\WINDOWS\system32\notepad.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\PROGRA~1\Logitec... Read more

A:Firefox Redirects To A Porn Site When Url Not Found

Welcome to BC flanman Download and run Fixwareout from the link below: http://www.bleepingcomputer.com/files/lonny/Fixwareout.exeAfter the reboot post the contents of the logfile C:\fixwareout\report.txt in your next reply,along with a new Hijackthis log.

Read other 7 answers