Over 1 million tech questions and answers.

HTML/Exploit.Mhtml HTML & HTML/Infected.WebPage.Gen HTML

Q: HTML/Exploit.Mhtml HTML & HTML/Infected.WebPage.Gen HTML

Hello,My Avira keeps finding daily everytime I scan it.....HTML/Exploit.Mhtml HTML and HTML/Infected.WebPage.Gen HTML script viruses. This has been going on a long time. The only thing I have noticed is high cpu 90-100% in task manager all the time, which does'nt seem to impact the speed of the computer. Occasionally, I pick up things in Malwarebytes and Spybot if I neglect to run a scan on Avira for a few days. I've also scanned Adaware and Avast but nothing shows up on them. This has been driving me nuts and any help would be greatly appreciated!!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:13:12 AM, on 8/8/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0013)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\A4Tech\Keyboard\Ikeymain.exeC:\Program Files\ASUS\Probe\AsusProb.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\PROGRA~1\KEYWAL~1\KWallet.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\devldr32.exeC:\Program Files\AntiVir PersonalEdition Classic\sched.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\Documents and Settings\Richard\Application Data\mjusbsp\magicJack.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\AntiVir PersonalEdition Classic\avgnt.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.covers.com/index.aspx?t=0R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1O1 - Hosts: y.comO1 - Hosts: dspouse.comO1 - Hosts: 208.93.147.32 www.winmx.comO2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dllO2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dllO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dllO2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dllO2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dllO2 - BHO: {49716aa2-b364-ebfb-dbc4-83c81baac86e} - {e68caab1-8c38-4cbd-bfbe-463b2aa61794} - (no file)O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dllO3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dllO3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dllO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [iKeyWorks] C:\PROGRA~1\A4Tech\Keyboard\Ikeymain.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /minO4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exeO4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"O4 - HKLM\..\Run: [LXCICATS] rundll32 C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\LXCItime.dll,[email protected] - HKCU\..\Run: [KeyWallet] C:\PROGRA~1\KEYWAL~1\KWallet.exeO4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exeO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeO4 - HKCU\..\Run: [cdloader] "C:\Documents and Settings\Richard\Application Data\mjusbsp\cdloader2.exe" MAGICJACKO4 - Startup: Quick ShutDown.lnk = C:\Program Files\Quick ShutDown\qsd.exeO8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.htmlO8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.htmlO8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.htmlO8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.htmlO9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.htmlO9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.htmlO9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.htmlO9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.htmlO9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exeO9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.htmlO9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.htmlO9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra button: Odds Maker - {b3cab7b9-eb43-46a2-8e15-02cc298dec71} - C:\Documents and Settings\Richard\Start Menu\Programs\Odds Maker\Odds Maker.lnk (HKCU)O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} - O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cabO16 - DPF: {50BD5CDA-4BA8-4048-8FAA-763F222E41D8} - ms-its:mhtml:file://c:\\nores.mht!http://adxrnet.net/code/chm/xpre.chm::/xpreload.ocxO16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/221326b13c845d...ip/RdxIE601.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1248302944234O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://www.pcpitstop.com/mhLbl.cabO16 - DPF: {C9DB5AF8-4C14-4A3E-90F8-DB49D6B4866D} (YBUICtrl.FloatWnd.1) - http://racing.youbet.com/wr_9_3/controls/YBUICtrl.cabO18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dllO23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeO23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exeO23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exeO23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\RpcAgentSrv.exe

RELEVANCY SCORE 200
Preferred Solution: HTML/Exploit.Mhtml HTML & HTML/Infected.WebPage.Gen HTML

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: HTML/Exploit.Mhtml HTML & HTML/Infected.WebPage.Gen HTML

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE

Read other 14 answers
RELEVANCY SCORE 197.2

Hi all,
My problem started a few weeks ago! I caught a Virus and Dr. Web got rid of it as well as some trojan downloaders that Malwarebytes killed.
The virus ruined my Avast as well as Google Chrome - so I installed Avira and Zone Alarm Firewall as well as ZA Forcefield browser. Avira continues to tell me I have a virus and quarantines it. I contacted Avira and they say it looks like a Zone Alarm problem - I contacted ZA - and am still waiting - I also uploaded these to Avira to be checked for a false positive and have not heard back from them either.
I was wondering - if I still have a problem or if this is a false positive?
Here is what Avira's log says on the last catch:
Avira AntiVir Personal
Report file date: Thursday, December 23, 2010 18:30

Scanning for 2292269 virus strains and unwanted programs.

The program is running as an unrestricted full version.
Online services are available:

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows 7 x64
Windows version : (plain) [6.1.7600]
Boot mode : Normally booted
Username : SYSTEM
Computer name : TAMHBRIH-PC

Version information:
BUILD.DAT : 10.0.0.609 31824 Bytes 12/13/2010 09:43:00
AVSCAN.EXE : 10.0.3.5 435368 Bytes 12/8/2010 12:49:25
AVSCAN.DLL : 10.0.3.0 46440 Bytes 4/1/2010 20:57:04
LUKE.DLL : 10.0.3.2 104296 Bytes 12/8/2010 12:49:28
LUKERES.DLL : 10.0.0.1 1264... Read more

A:HTML/Infected.WebPage.Gen HTML script virus

A common attack against the web infrastructure can be the infection of harmless web pages. Some malware changes every HTML file stored on the disc and adds a link (very often an IFrame) to a site hosting malicious code. Other attacks can aim for the web servers and try to insert forwarding to the pages hosted there. The owner of these pages is advised to take them offline. Fix the hole (either on his own PC or on the server), check the pages for infections, clean them and go online again. Infected Web Pages often contain additional Iframe, Object or Script Tags. The Script Tags often contain encrypted Code.Special detection HTML/Infected.WebPage.GenSince Avira is making the detection and you submitted samples, I suggest you wait on a reply from them or follow up by contacting them again with a reminder.See this Avira link for a discussion of a similar report.

Read other 4 answers
RELEVANCY SCORE 189.6

Hi
As my title suggests my bro's laptop has this annoying infection.
I have Avira like my logs will say and the infection seems to be in a firefox profile. (Can I reinstall Firefox to fix my problem?)
I use Firefox but my brother IE 8 (and so IE is default).
At random times and when connected to Internet, a popup appears with usually
a scanner showing you its scanning your computer or ad for bad, virulent AV software. I know it's bad so I click
the X button in corner and it will go for a variable amount of time.
Avira btw cannot get rid of it and in fact does not even find it after scanning with maximum options.
This also happens sometimes much rare tho: A message appears telling I have an infected computer and wants me to press OK and scan using IE. I click X and once it opened IE with scanning screen. I click X ASAP.

One more issue: Firefox sometimes will say "Firefox has stopped working.."
and that it will close. Right away a balloon pops up in tray telling me the browser was closed to protect me from Data Execution Prevention.

Avira sometimes at random times pops up saying Virus or unwanted program was found, right? It asks me what to do with this file.
Move to quarantine
Delete
Overwrite and delete
Rename
Deny access
Ignore

I usually picked delete or deny access
It found the virus in this file:
C:\Users\Piotrek\AppData\Local\Mozilla\Firefox\Profiles\jfyfitzg.default\Cache\34F11269d01

I understand I have Limewire. My brother uses it... Read more

A:[SOLVED] Infected with HTML/Infected.WebPage.Gen HTML script virus

Bump, please

Read other 16 answers
RELEVANCY SCORE 180.8

Antivir found HTML/Exploit.Mhtml [virus] in a firefox cache file. Upon further research, some places said this was a false positive and some said it was really a browser exploit that uses a security flaw in Internet Explorer....but why would it be in a firefox cache? My computer has also been running slow, so i suspect i am infectedI'm running VistaHjt-Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:53:26 PM, on 8/18/2008Platform: Windows Vista (WinNT 6.00.1904)MSIE: Internet Explorer v7.00 (7.00.6000.16711)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Windows Defender\MSASCui.exeC:\Windows\system32\taskeng.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Windows\sttray.exeC:\Windows\System32\WLTRAY.EXEC:\Program Files\Dell\MediaDirect\PCMService.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeC:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exeC:\Program Files\Java\jre1.6.0_07\bin\jusched.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Windows\System32\rundll32.exeC:\Program Files\DellSupport\DSAgnt.exeC:\ProgramData\Dell\TransferAgent\TransferAgent.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exe... Read more

A:Html/exploit.mhtml [virus] - Help

Hello and welcome to BCWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. We aim to provide the valuable service known to come from BC to every member we can, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay. Please see here for instructionshow to install HijackThis and make a logfile. Save it into convenient location and include it to your next reply, please.NextPlease do a scan with Kaspersky Online ScannerNote: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.Click on the Accept button and install any components it needs.The program will install and then begin downloading the latest definition files.After the files have been downloaded on the left side of the page in the Scan section select My ComputerThis will start the program and scan your system.The scan will take a while, so b... Read more

Read other 2 answers
RELEVANCY SCORE 174.8

Hi there. I have been seeing the bluescreen of death and then the computer has restarted. I left it for about an hour and it kept on restarting and then crashing.

I have received messages from Antivir about trojans and HTML/Exploit.Mhtml

I also looked up this process and it seems suspicious: IEXwe.exe
Can I follow the advice posted here: http://forums.techguy.org/malware-removal-hijackthis-logs/366777-solved-iexwe-exe-mousehs-exe.html
by Flrman1 - http://forums.techguy.org/members/41002-flrman1.html

Thanks for your help!
Here is my HijackThis logfile:

Logfile of HijackThis v1.99.1
Scan saved at 8:58:53 PM, on 03/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDO... Read more

A:Continuous Blue screen - IEXwe.exe, HTML/Exploit.Mhtml

Read other 14 answers
RELEVANCY SCORE 159.6

HTML file for reproducing:
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<label for="pet-select">Choose an item:</label>
<select name="list" id="selectId">
<option disabled value="text hello">Item 01</option>
<option value="item02">Item 02</option>
<option value="item03">Item 03</option>
<option disabled="Redundant value" value="item04">Item 04</option>
<option value="item05">Item 05</option>
</select>

<br>
<button id="btnId" onclick="getInfo()">INFO</button>
<br>
<br>
<div id="resultId">RESULT</div>

<script>
function getInfo(){
var selectCtrl = document.getElementById('selectId');
var options = selectCtrl.options;
var textCtrl = document.getElementById('resultId');

for (var i = 0; i < options.length; ++i){
var option = options[i];
var tmpTxt = '\n//=====\n';
tmpTxt += 'option.attributes: ' + option.attributes + '[' + i + ']\n';
tmpTxt += 'option.text = ' + option.text + '\n';
tmpTxt += 'option.disabled = ' + option.disabled + '\n';
tmpTxt += 'option.hideFocus = ' + option.hideFocus + '\n';
tmpTxt += 'option.spellcheck = ' + option.spellc... Read more

Read other answers
RELEVANCY SCORE 159.6

Outlook keeps popping up two download boxes whenever I get email with attachments or that is in HTML format. I played with the trust center to see if I could turn this feature off, but it still pops up every time I open an email from Facebook or from a friend with an attachment in it.

Any ideas?
 

A:Outlook - download on HTML files when email containing HTML is received

Can you post a screen shot of these "pop ups"?
 

Read other 2 answers
RELEVANCY SCORE 159.6

I'm currently designing a table based website in Dreamweaver, but am having a problem importing a drop down menu in the form of html. It gives me the error "The selected file is not the correct format. Please select a file which was exported from Fireworks".

The problem with this is that all the export options have been set correctly, and is being exported as Dreamweaver HTML, and obviously being exported from Fireworks - so what's the problem? Does anyone have an answer to my problem?
 

Read other answers
RELEVANCY SCORE 158

Good morning all, (at least here in EST) Im not sure if this is the proper forum, so ill see if it dies here before I try to post somewhere else.
Every Month, i need to send in a report on what i have done here at work (read: justify my existence). It generally takes me about an hour to do. What i would like to do is to create a HTML form, formatted the way they want it, with text boxes/pulldown menus, and fill in my information, and have the completed form either A)saved as an html form without the boxes; IE:the information gets added into the actual html OR B) All the information gets pushed into a word.doc.
Ultimately, i would like to have it save with something like this "Report-{date or month}.html (or doc).
Soooo, this being said, any of you code wizards out there know how to do this? Thanks alot for any imput you can give.
 

A:HTML forms ->send to word/html document?

Cmon! somebody has to know something! {tap tap tap} is this thing on??
(guess whos bored at work)
 

Read other 2 answers
RELEVANCY SCORE 158

Hi all,

I have created a JApplet and I have applied that to my web page. Now I want to know how to navigate from that web page to another web page using the "OK" JButton in my JApplet. I have no idea about how to do this. Please help me..please..
 

A:Solved: JAVA: Navigating from one HTML to another HTML using JButton

Solved...
 

Read other 1 answers
RELEVANCY SCORE 158

When saving an html document to any location e.g.; the
desktop the correct icon for an HTML document
does not appear (white page with blue 'e') ,all i get
is a default icon (white background with an Windows flag).

Right clicking and selecting 'properties' to change the icon is
not available as Change Button is greyed out.

Double clicking the file does open IE6 correctly.
Interestingly shortcuts to HTML sites do have the correct
icon.

Reinstalling IE6 has not fixed the fault.

Any help?
 

A:missing icon for HTML documents; htm and html files

Directions for changing the icon for HTML files.

Open any folder.
Hit View->Folder options.
Choose the 'File Types' tab.
Find 'HTML Document' and click on it.
Click on 'edit'.
Click on 'change icon'.Find a good icon to use and close all the windows.
Shortcuts are a different type of file according to the computer, so it handles them differently.
 

Read other 3 answers
RELEVANCY SCORE 158

I am using Windows XP SP3.

I am trying to add an "edit" action to the .html file type. I have .html associated with Firefox. I go to Tools>Folder Options>File Types> and .html isn't even listed! (Nor is .htm) So I click "New" and add the .html file type. Then I click "Advanced" and fill in the action info and hit "OK". Then I hit "Close".

It doesn't work, and then when I go back into "File Types", html is not listed anymore. Basically, Windows is ignoring my attempts to add the .html file type.

I created the .xxx file type and added actions to open with Firefox and Word. It worked perfectly.

So what is it with the .html file type that Windows won't create it or list it?
 

Read other answers
RELEVANCY SCORE 155.2

Hi,

I have a problem with HTML popups that are driving me crazy.
Is there anyone that can help solve this problem?
I have noticed that some other people have had similar problems
with muon.html or tau.html popups, and I have read them, but
understand that these problems have to be handled carefully.

My HiJackThis log is given below:

Logfile of HijackThis v1.99.1
Scan saved at 00:59:08, on 2006-04-30
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:... Read more

A:Problem with muon.html and tau.html popups

Please download Look2Me-Destroyer.exe to your desktop.

* Close all windows before continuing.
* Double-click Look2Me-Destroyer.exe to run it.
* Put a check next to Run this program as a task.
* You will receive a message saying Look2Me-Destroyer will close and re-open in approximately 10 seconds. Click OK
* When Look2Me-Destroyer re-opens, click the Scan for L2M button, your desktop icons will disappear, this is normal.
* Once it's done scanning, click the Remove L2M button.
* You will receive a Done Scanning message, click OK.
* When completed, you will receive this message: Done removing infected files! Look2Me-Destroyer will now shutdown your computer, click OK.
* Your computer will then shutdown.
* Turn your computer back on.
* Please post the contents of C:\Look2Me-Destroyer.txt and a new HiJackThis log.

If you receive a message from your firewall about this program accessing the internet please allow it.

If you receive a runtime error '339' please download MSWINSCK.OCX from the link below and place it in your C:\Windows\System32 Directory.
http://www.ascentive.com/support/new/images/lib/MSWINSCK.OCX
 

Read other 3 answers
RELEVANCY SCORE 154

Hi,
Our Avira Antivir keeps picking up this HTML/Infected.WebPage.Gen trojan and every time we click deny access or delete it still keeps on popping up. It has been non stop for 2 days.

Used Spyware blaster, spybot search and destroy, spyware terminator and Avira and cannot remove this. Only spyware terminator picked up but suggests you have to uninstall the program which we can't as it's apparently in our temporary files.

Here is the HJT log:

Logfile of HijackThis v1.99.0
Scan saved at 9:14:07 AM, on 4/25/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\msd.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Fi... Read more

Read other answers
RELEVANCY SCORE 154

HTML/Infected.WebPage.Gen
How do i get rid of this please
 

Read other answers
RELEVANCY SCORE 154

I have a HTML/Infected.WebPage.Gen error when I open Internet Explorer 7. Someone told me to post here the log file from hijackthis and you can help me. Please do so...
LOG FILE
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:23:10, on 6-3-2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\SPAMfighter\sfus.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe
C:\Prog... Read more

A:HTML/Infected.WebPage.Gen

can someone help please?
 

Read other 1 answers
RELEVANCY SCORE 154

Hey guys I'm infected and I cannot remove this thing. Please help. My logs are atttached but I cannot run the GMER tool because it causes my computer to go to the BSOD every time. Thanks for the help.

A:HTML/Infected.WebPage.Gen

Hello Shady1475,Please download Malwarebytes' Anti-Malware from HereNote: If you already have Malwarebytes' Anti-Malware, just update then run it.Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan (the scan may take some time to finish, so please be patient).When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy and Paste the entire report in your next reply .Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Under the Custom Scans/Fixes box at the bottom, paste in the following bold text.%systemroot%\... Read more

Read other 33 answers
RELEVANCY SCORE 154

I have been getting HTML/Infected.Webpage.gen detections from Avira AnriVir everytime I restart my computer. IE tries to open, but Avira does block it, but it still does something to my computer. I have tried removing with Avira, Malwarebytes, and ATF-Cleaner. Nothing gets rid of this. Each time I reboot, I receive more alerts from Avira which slows down my boot time. I don't even use IE, I use Google Chrome. Last night while I was surfing Avira popped up with alerts and this time it was Google chrome. Please Help. I am inserting a HJT Log, DDS Logs, and RootRepeal logs. I really need help. I have a home business, and this is my work laptop. I have tried other sites, but they will not reply. PLEASE HELP!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:24:44 AM, on 10/7/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18813)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\Windows\RtHDVCpl.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Windows\System32\hkcmd.exeC:\Windows\System32\igfxpers.exeC:\Windows\PLFSetI.exeC:\Windows\system32\igfxsrvc.exeC:\Program Files\Avira... Read more

A:HTML/Infected.Webpage.gen PLEASE HELP!

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 154

Ok, so I forgot your website name... and stupidly went to geekstogo. Total waste of time. Logged a thread on 12/7..still no response.

I have the virus in the Title.
Ran Combo Fix and Hijack this. Here are the logs. Let me know if you need updated ones. I would GREATLY appreciate any help you could give.

~~~~~~~~
ComboFix
~~~~~~~~

ComboFix 07-12-09.1 - test 2007-12-08 15:43:29.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.166 [GMT -6:00]
Running from: C:\Documents and Settings\test\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2007-11-09 to 2007-12-09 )))))))))))))))))))))))))))))))
.

2007-11-27 14:48 . 2007-11-27 14:48 7,168 --ahs---- C:\WINDOWS\Thumbs.db
2007-11-22 01:24 . 2007-11-22 01:24 <DIR> d-------- C:\Documents and Settings\test\Application Data\Viewpoint
2007-11-21 01:16 . 2007-11-21 01:16 <DIR> d-------- C:\Program Files\Blubster Toolbar
2007-11-21 01:16 . 2007-11-21 01:16 228,676 --a------ C:\WINDOWS\Blubster_Toolbar_Uninstaller_3375.exe
2007-11-12 16:46 . 2006-10-04 08:06 1,197,294 --------- C:\WINDOWS\system32\dllcache\sysmain.sdb
2007-11-12 16:46 . 2006-10-04 08:06 764,868 --------- C:\WINDOWS\system32\dllcache\apph_sp.sdb
2007-11-12 16:46 . 2006-10-04 08:06 217,118 --------- C:\WINDOWS\system32\dllcache\apphelp.sdb
2007-11-12 16:44 . 2007-11-27 14:49 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-11-12 16:42 . 2007-11-12 16:43 <DIR> d------... Read more

Read other answers
RELEVANCY SCORE 154

Good day to you for mine is not. Can some one please assist me on removing this HTML/Infected.WebPage.Gen im using a window vista...Hope to hear soon from the experts..chow
 

A:HTML/Infected.WebPage.Gen need some help Pls!!

Hi, Welcome to TSG!!
Click here to download HJTInstall.exe

Save HJTInstall.exe to your desktop.
Doubleclick on the HJTInstall.exe icon on your desktop.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

 

Read other 1 answers
RELEVANCY SCORE 154

Hi there,The problem started today sometime, my antivirus keeps popping up constantly over and over stating that a virus or unwanted program was found: HTML/Infected.WebPage.GenSo, I guess my computer has been infected with something?I will paste my DDS log and attach my "attach" file, but my ark.txt came out blank with no problems listed.I also have a hijack this log; not sure if anyone wants to see that?Thanks,Michael.DDS (Ver_10-03-17.01) - NTFSX64 Run by Michael at 20:03:44.36 on 03/04/2010Internet Explorer: 7.0.6002.18005Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.2.1033.18.6077.4232 [GMT -7:00]SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\system32\Ati2evxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_f86438be\STacSV64.exeC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svchost.exe -k NetworkServi... Read more

A:HTML/Infected.WebPage.Gen

Hello,I couldn't wait any longer; need my computer for work purposes and reinstalled Vista - Infection GONE!Thanks for reading and trying to help, but this thread can be closed.Michael.

Read other 3 answers
RELEVANCY SCORE 154

Hello!
I dont know how i got this, but Avira detected it, i cant seem to get rid of it. And now, it has modified AVG and i cannot use it anymore.
Any help on how to remove it?

It appeared at the same time as a appel.gen or something similar to that, i cannot view the name of this one since Avira broke before i could take note of it. If you know which one this is, could you also provide a solution for it?

Ive not downloaded anything, or opened links from IM/email, so i dont know how i got it. Im using Windows XP professional.

Thanks!
 

A:HTML/Infected.WebPage.Gen

Read other 9 answers
RELEVANCY SCORE 154

My antivirus says I have the HTML/Infected.WebPage.Gen virus and I cant get rid of it. I have been getting many popups all the time now.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:17:24 AM, on 10/29/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\iTunes\iTunesHelpe... Read more

Read other answers
RELEVANCY SCORE 154

Hi there,

All of the sudden this past weekend my antivrus keeps popping up with a message that my computer is infected over and over and over again, no matter what I click. I try to deny access to the file, quarantine and delete and it just keeps popping up. Seems if i just move the alerts to the side, then they stop popping up, but that's not a solution is it?

I have run CCcleaner, Malwarebytes, ISObit, Spybot search and destroy and deleted anything it finds.
It's still happening.
The alerts seems to point into a c: folder in appdata and IE5 something something blog ???
I don't even use IE, I've always used Firefox.

One strange things I have noticed though is that usually when I use CCcleaner, it cleans everything out and then if i would run it again there would be nothing there, BUT if i do it every 10 seconds, there are Internet Explorer temp files in there each time i do it which is odd I think.

Can anyone enlighten me here on this?

Thanks so much!
Mike.

A:HTML/Infected.WebPage.Gen

Please do this:




Download DDS and save it to your desktop from here or here.



Disable any script blocker, and then double click dds to run the tool. When done, DDS will open two (2) logs:DDS.txt
Attach.txt

Save both reports to your desktop.
---------------------------------------------------------------------------------------------

Download GMER Rootkit Scanner from here to your desktop. Rename it to a .com extension. You may need to ensure file extensions are viewable.

Go to My Computer->Tools->Folder Options->View tab:
* make sure there is no checkmark beside Hide file extensions for known file types


* Click Yes to confirm and then click OK.Double click the renamed .com file.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.

Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in reply.
**Caution** ... Read more

Read other 2 answers
RELEVANCY SCORE 154

i accidentally downloaded and opened a program because i thought it was gona let me view this certain type of media, anyways, it put some malware on my computer and ive used antivir to try and get it off but it hasnt detected it, well it keeps coming up from my temp files from internet explorer, i know that the temp files arent the source of the problem because i keep deleting them and they come back, spysweeper might have fixed some of the problems i dont know, i used registry mechanic to try and fix the problem but no luck because it fixed the problems it had seen, which didnt fix the malware. I have hijack this, but i recently like a month ago had reformatted my hard drive, i have enough firewalls and antivirus software but i let this little bugger past and i cant get rid of it. I have had experience dealing with malware before but i looked at my hijack this checklist and i am not familiar enough with some of the programs to start checking stuff off with being certain it is what it is, I just need some help getting rid of this malware and possibly ending all the little ad crap that keeps dropping into my computer from internet explorers little holes. I would greatly appreciate the help thanks
 

A:HTML/Infected.WebPage.Gen

Read other 12 answers
RELEVANCY SCORE 154

my avira antivirus keeps finding the above. it says it cant remove or quarrantine it & it won't give me the name of the virus.
what do i do please?
 

Read other answers
RELEVANCY SCORE 154

Somehow I seem to have HTML/Infected.WebPage.Gen and I cant get rid of it

I have run several malware removal programs but they get closed by something while running for just a minute or less

Any ideas on how to get rid of this??

I have followed a few threads on doing so but everything I try to run shuts down and then wont load again to run

Thanks for any help
 

A:I seem to have --> HTML/Infected.WebPage.Gen

It looks as if the HTML/Infected WebPage.Gen has gone?? as it hasnt appeared for awhile. But it seems that I still have something. If I try and run any AV program it still only runs for a few seconds to a minute or so then shuts down, Then If I try to run it again it is not able to run and the Desktop Icon has been partially removed. It wont run unless i reinstall the program.

I tried to run HJT and same issue, ran for about 1 minute then shut down. Now my desktop icon looks wrong and it wont run
 

Read other 1 answers
RELEVANCY SCORE 153.2

I ran Bit Defender and it found "Infected with: Exploit.Html.MhtRedir.Gen"

It also said it FAILED to disinfect.

Anyone know how to kill this bad boy?
 

A:Infected with: Exploit.Html.MhtRedir.Gen

Read other 9 answers
RELEVANCY SCORE 152.4

Hi there,

Avira notified me quite a few times today about a HTML/Infected.WebPage.Gen virus my computer has now. I did a little research and I find out that I have to post a HijackThis logfile on a forum so experts could tell me what to do. Here it is and thanks in advance:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:56:18, on 2009-10-10
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Brot... Read more

Read other answers
RELEVANCY SCORE 152.4

I am on a PC running Vista. I have an infection which my Avira Antivirus is calling HTML/Infected.Webpage.Gen - Malware. It seems to creat files in the temporary internet files folder which are HTML files with "promote" in the filename, and also script files labeled "b". These files regenerate instantaneously upon deletion. It seems to redirect to different web pages, and I get strange popups asking if I would like to navigate away from this page, and about script errors and debugging. These popups regenerate as well. I could not enclose an HJT log because the malware disables any malware assossiated program I attempt to run, including HJT.
 

Read other answers
RELEVANCY SCORE 152.4

can you please help every time i sign in to msn messenger i get the html infected webpage virus come up on my avira antivir prog
enclosed is my hijackthis search

How do i get rid of the HTML infected webpage virus ive installed the programme and here is my list on hijack this Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:30:39, on 08/07/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\igfxext.exe
C:\Windows\system32\igfxsrvc.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\System32\wsqmcons.exe
C:\program files\avira\antivi... Read more

Read other answers
RELEVANCY SCORE 152.4

I closed my internet before and Avira popped up with a window saying that a virus had been detected and it had a list of actions that I could take such as delete, quarantine etc. I clicked on quarantine and then did a full scan. Nothing was detected but going to the quarantine list it says the following:

Detection - Contains recognition pattern of the HTML\Infected.WebPage.Gen HTML
Source - Users\a\AppData\Local\Mozilla\Firefox\Profiles\Kfiy92cp.default\Cache_002_

I went and cleared my cache after doing the Avira scan. I have also done a MalwareBytes scan and it is clear as well. I also went in and scanned the selected file in quarantine and nothing was detected.

HJT log is below:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:09:16 PM, on 29/09/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Users\a\AppData\Roaming\Google\Google Talk\googletalk.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C... Read more

A:Solved: Infected WebPage.Gen HTML?

Bump
 

Read other 3 answers
RELEVANCY SCORE 152.4

Hallo, i hope i am on the right place...i have a problem with the virus called HTML/Infected.WebPage.Gen:when i start the computer, something is trying to run, but avira antivirus can hold it - i just click <remove>. But on the next start of computer it is the same. So i think the virus is still in computer. I have done the full scan with no results. I have also the spyware doctor active and i have also done full scan. But the virus is still there. Avira is reporting this: The file 'C:\Documents and Settings\MaRa\Local Settings\Temporary Internet Files\Content.IE5\Q5RQ4BTE\ahmedriad75_jeeran_com[1].htm'contained a virus or unwanted program 'HTML/Infected.WebPage.Gen' [virus] Intrenet explorer is trying to connect to : http://ahmedriad75.jeeran.com/ - but Avira stops it . Can someone please look at it to find out what to do next ?Thank you very much, Radovan

Read other answers
RELEVANCY SCORE 151.2

Following is a report from my anti virus log. The antivirus (bitdefender) cannot remove it. Please can somone help as BITDEFENDER are useless and you are my last hope before i re-format the computer completely!!!!!!!!

C:\Documents and Settings\Nick\Local Settings\Temporary Internet Files\Content.IE5\NKB3W5X3\x[1].chm=>/exec.htm Infectés avec Exploit.Html.Codebase.Exec.Gen

C:\Documents and Settings\Nick\Local Settings\Temporary Internet Files\Content.IE5\NKB3W5X3\x[1].chm=>/x.htm Infectés avec Exploit.Html.Codebase.Exec.Gen

C:\Documents and Settings\Nick\Local Settings\Temporary Internet Files\Content.IE5\EX5E3QDW\1575688910[1].chm=>/index.html Infectés avec Exploit.Html.Codebase.Exec.Gen

C:\Documents and Settings\Nick\Local Settings\Temporary Internet Files\Content.IE5\G7LB2IJD\EXPLOIT[1].CHM=>/exploit.htm Infectés avec Exploit.ADODB.Stream.Gen
 

A:Infected with exploit.html cannot remove or find it

Read other 11 answers
RELEVANCY SCORE 150.8

Hi,
I'm using Windows XP on an Inspiron, using a wireless secured network. I noticed when I used the Google toolbar (on Firefox, but same issue on IE and Chrome), I was getting a fake Google site with fake search results, very shortly thereafter my browsers wouldn't connect to the internet at all. IE completely disappeared. Now I have a spotty connection. My virus scans (AVG, Avira) aren't finding anything, and Trojan Removal removed a couple items but I'm still having the connection problems and dummy search engine. I'm getting warnings from Avira about "HTML/Infected.WebPage.Gen" and "Vundo" infections. I ran Hijackthis, and I'll attach the DDS txts. I've never tried to fix my laptop myself, so please forgive my ignorance! Thanks for any help!
DDS (Ver_09-07-30.01) - NTFSx86
Run by user at 2:03:05.90 on Sun 08/02/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.511.105 [GMT -7:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs... Read more

A:HTML/Infected.WebPage.Gen and Vundo infection!

Hello missivy, I (as well as MicroSoft, McAfee and Symantec) recommend that you DO NOT have more than one anti virus product installed and running on your computer at a time. The reason for this is that if both products have their automatic (Real-Time) protection switched on, then those products which do not encrypt the virus strings within them can cause other anti virus products to cause "false alarms". It can also lead to a clash as both products fight for access to files which are opened again this is the resident/automatic protection. In general terms, the two programs may conflict and cause:1) False Alarms: When the anti virus software tells you that your PC has a virus when it actually doesn't.2) System Performance Problems: Your system may lock up due to both products attempting to access the same file at the same time.Therefore please go to add/remove in the control panel and remove one of these. Anti-Virus Free Antivirus or Avira AntiVir Antivirus **************** Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update. Please download Java Version 6 Update 15
Click the "Free Java Download" button.
Click "Free Java Download" again
Save the file jxpiinstall.exe to your desktop
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove ... Read more

Read other 2 answers
RELEVANCY SCORE 150.8

yesterday my friend got some malware from a url while browsing the net on my desktop. Now I'm stuck with it, pop ups keep coming up every 10 or so minutes, asking me to buy some sh1t. here is the log from hijack this.

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 11:03:26 PM, on 4/4/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Avira\AntiVir Desktop\sched.exe
D:\Program Files\Avira\AntiVir Desktop\avguard.exe
D:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
D:\Program Files\Java\jre6\bin\jqs.exe
D:\Program Files\Avira\AntiVir Desktop\avshadow.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\Hletub.exe
D:\Program Files\Avira\AntiVir Desktop\avgnt.exe
D:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
D:\Program Files\Everything\Everything.exe
D:\WINDOWS\system32\RunDll32.exe
D:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe
D:\Program Files\Cyberlink\Shared files\brs.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\Program Files\Replay Media Catcher\FLVSrvc.exe
D:\Program Files\Java\jre6\bin\jusched.exe
D:\Program Files\Canon\MyPrinter\BJMyPrt.exe
D:\Program Files\ScanSoft\OmniPage... Read more

A:HTML/Infected.WebPage.Gen - Need some help for removal, log inside

Read other 6 answers
RELEVANCY SCORE 150.8

Hello all. Yesterday, Avira Personal edition found the following program/virus/thing while I was opening Windows LIVE messenger:HTML/Infected.WebPage.GenThey were found here:'C:\Users\Username\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4EFHK6W4\pid=Messenger_IMSCB2_234x60_MMN[1].htm.'C:\Users\Username\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\553S9XHB\pid=Messenger_IMSCB2_234x60_MMN[1].htm.Avira popped up 4 times with this instantly as I opened the program. Live messenger was minimized but running in the system tray. I moved the infected files to the quarantine. I scanned my PC with Avira in safe mode, as well as Spybot and Malwarebytes (only Windows and Users folder with Mbam). It came out clean. I then ran crap cleaner with its registry cleaner. I figured it was done. Today, I was using live messenger. It worked fine, until again, I got the same same thing. Aviria popped up. Exact same location. It popped up 4 times (just like last time). I moved them to the quarantine once again.So I am wondering if this is a false alarm for Avira? Or if not, how can I remove this virus? Did some of the ads in Windows live messenger get hijacked? I use this program daily (a leave it running all day), so I would like to remove the virus if there is one.I am running the Eset online scanner right this minute to see if it finds anythin... Read more

Read other answers
RELEVANCY SCORE 150.8

lsass.exe, winlogon.exe and HTML/infected.WebPage.Gen hi, I am having a very hard time trying to delete lsass.exe, winlogon.exe and infected.WebPage.Gen. Also I don't have any windows open but I'm getting auto from somewhere. Please help me out. Thank you.

P.S. here is my HJT

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:04:45 PM, on 10/14/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\NeroCheck.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C... Read more

Read other answers
RELEVANCY SCORE 150.8

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:58:12 AM, on 3/29/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18000)Boot mode: NormalRunning processes:C:\Windows\System32\smss.exeC:\Windows\system32\csrss.exeC:\Windows\system32\wininit.exeC:\Windows\system32\csrss.exeC:\Windows\system32\services.exeC:\Windows\system32\lsass.exeC:\Windows\system32\winlogon.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exeC:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exeC:\Windows\system32\svchost.exeC:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exeC:\Program Files\Protector Suite QL\upeksvr.exeC:\Windows\System32\spoolsv.exeC:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exeC:\Windows\system32\svchost.exeC:\Windows\system32\taskeng.exeC:\Windows\system32\taskeng.exeC:\Windows\system32\agrsmsvc.exeC:\Program Files\Avira\AntiVir Pers... Read more

A:HijackThis Log - HTML/Infected.WebPage.Gen Problem!

I really need some help guys. This thing is getting in the way every time I try to do something. I already did the DDS file so I just need to know what I can do to fix this! Shouldn't be that bad, right?

Read other 5 answers
RELEVANCY SCORE 149.2

Greetings,

For the past week I've been getting notices of HTML/Infected.WebPage.Gen [virus] and random redirect tabs on Firefox to advertisement sites. I ran several scans on Malwarebytes' Anti-Malware, SUPERAntiSpyware Free Ed., and Spybot - Search & Destroy. From time to time I find adware from cookies and they were able to delete it with reboot but they keep coming back. I don't know what else to do. Please give me advice and help as to what I should do to remove this. Thank you for your time.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:52:48 AM, on 6/11/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\DISC\DISCover.exe
C:\Program Files\DISC\DiscUpdMgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logite... Read more

A:HTML/Infected.WebPage.Gen [virus] & Redirect Tabs

Read other 10 answers
RELEVANCY SCORE 149.2

While perusing some websites, Home.com, People.com, I'm getting a popup from Antivir saying they've recognized the pattern of HTML/Infected.WebPage.Gen in a file "img[1].htm" Help!

Here is the HijackThis Log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:49:21 PM, on 3/25/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\DRIVERS\o2flash.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\DellTPad\Apoint.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\OEM13Mon.exe
C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\De... Read more

Read other answers
RELEVANCY SCORE 148

Hi

i was browsing a blog using the latest version of Mozilla Firefox 3, and clicked on a tinyurl link. NOD32 seemed to have detected a trojan, and quarantined it. However, in Firefox multiple windows opened, at which time in opened the Task Manager and killed the Firefox process.
Below is an extract of the information contained in the NOD32 Log files:

02/08/2008 16:03:25 HTTP filter file http:// pastebin.on.nimp. org/LastCoffee/class.class probably a variant of HTML/Exploit.DialogArg.A trojan connection terminated - quarantined Threat was detected upon access to web by the application: C:\Program Files\Mozilla Firefox\firefox.exe.
02/08/2008 16:03:24 HTTP filter file http:// pastebin.on.nimp. org/LastCoffee.class probably a variant of HTML/Exploit.DialogArg.A trojan connection terminated - quarantined Threat was detected upon access to web by the application: C:\Program Files\Mozilla Firefox\firefox.exe.

After this i restarted the PC, and after updating Nod32 with the latest definition files, i performed an in-depth scan and detected no threats (a log was saved)

I also performed a complete scan with SuperAntiSpyware, all it found were tracking cookies, these were then removed.

I am running on a WinXp S2 operating System, with 2 admin accounts, and 3 limited user accounts.

HijackThis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:10:24, on 02/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16... Read more

A:[SOLVED] Infected With a variant of HTML/Exploit.DialogArg.A trojan

Is that trojan still being detected now? Does uninstalling and reinstalling Firefox help?

Perform an online scan with Internet Explorer at Panda ActiveScan http://www.pandasoftware.com/products/activescan.htm

* Click on 'Scan your PC' button. There should be a popup - if you have a pop-up blocker, make sure it's not blocking it.
* Click 'Check Now' & a pop-up window will appear.
* Enter your Country, State and E-mail Address & click 'Scan Now' - begin downloading Panda's ActiveX controls (8 MB size).
* Begin the scan by selecting My Computer.
* If it finds any malware, it will offer you a report. Ignore any entry it finds (since it wants you to buy the program for removal) as we will address this later.
* Click on see report. Then click Save report.
* Post that log in your next reply.

Read other 4 answers
RELEVANCY SCORE 138

hey im getting those crazy popups which you've probably heard of. if anyone can give me instructions on how to fix them it would be good.

cheers
matt
 

A:muon.html and tau.html

Read other 13 answers
RELEVANCY SCORE 138

Hi,

I have a problem with HTML popups that are driving me crazy.
Is there anyone that can help solve this problem?
The pages end up in muon.html or tau.html popups,
I am this close to losing it/.....

My HiJackThis log is given below:

Logfile of HijackThis v1.99.1
Scan saved at 6:19:37 PM, on 5/13/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VIA\RAID\raid_tool.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Documents and Settings\user\Desktop\defender19a.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\YWJj\command.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Network Monitor\netmon.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\CC... Read more

A:muon.html and tau.html (S.O.S)

Read other 16 answers
RELEVANCY SCORE 137.6

This is a continuous virus that I have not been able to rid my computer of it; I have followed extensive instructions on line and failed to find any of the applicable files or titles of the files that was provided in manual instructions for removal. Meanwhile, on every other scan of Microsoft Essentials or within the last few days, that is, this Exploit virus will show up in the history field of where the Essentials logs are and it's quarantined. I remove it (of course) but as I say, it repeats itself and therefore, hasn't really removed. At first I thought it was a false positive or something like that. Thanks for your help! It is very much appreciated.
 
 
 
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 11.0.9600.17496
Run by Keith at 10:01:21 on 2014-12-21
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.3455.2420 [GMT -8:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: Microsoft Security Essentials *Enabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Exp... Read more

A:Exploit: HTML/Axpergle.M

Hello and Welcome on board ,my Name is Machiavelli and I will assist you with your problem.If you booted into safe mode on your computer then print my instructions!I'm in the 'Malware Staff Team' and will provide you with advice:To remove Malware on a computer can be very complicated. Malware (malicious software) is able to hide and so I may not be able to find it so easily. In order to remove Malware from you Computer, you need to follow my instructions carefully. Don't be worried if you don't know what to do. just ask me! Please stay in contact with me until the problem is fixed.Below are a few tips:Removing Malware is usually very difficult.We need to search and analyse a lot of files. As this is done in our free time, please be patient especially if I don't answer every day!Please follow these instructionsIf you don't follow the instructions your computer may crash. If you fix your PC by yourself, this can be very risky!Please stay in contact with me until your problem is resolvedAs Malware may not be totally removed in one session or in one day, please stay in contact with me until the problem is resolved.Please don't run any other tools without consulting with me as this can complicate finding and removing all MalwareDon't run any tools while I'm fixing your PC. That is counter productive and again, will only complicate finding and removing all Malware!Read my post completelyIf you don't do so, you may make mistakes that could result in your System crashing by your own ... Read more

Read other 20 answers
RELEVANCY SCORE 137.6

Microsoft Security Essentials found Exploit:HTML/IframeRef.V
I started the computer in Safe Mode and Scanned and removed the infected files.
Things seem to be running better but I want to make sure it's gone.
Here are the dss logs

Thank you for your help

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385
Run by Jim at 11:59:51 on 2012-02-19
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.3037.1608 [GMT -6:00]
.
AV: BitDefender Antivirus *Enabled/Updated* {50909708-FF80-02AF-F814-B28405891E92}
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: BitDefender AntiSpyware *Enabled/Updated* {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F}
FW: BitDefender Firewall *Enabled* {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\... Read more

A:Exploit:HTML/IframeRef.V

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Please download ComboFix from any of the links below, and save it to your desktop. For information regarding this download, please visit this web page: http://www.bleepingcomputer.com/combofix/how-to-use-combofixLink 1Link 2* IMPORTANT !!! Save ComboFix.exe to your DesktopIMPORTANT....1. Close any open browsers.2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.3. Do not install any other programs until this if fixed.How to : Disable Anti-virus and Firewall...http://www.bleepingcomputer.com/forums/topic114351.htmlDouble click on ComboFix.exe & follow the prompts. When finished, it will produce a report for you. Please post the C:\ComboFix.txt Note:Do not mouse click ComboFix's window while it's running. That may cause it to stallNote: If you have difficulty properly disabling your protective programs, refer to this link --> http://www.bleepingcomputer.com/forums/topic114351.html===Third party programs if not up to date can be the cause infiltration of an infection.Please run this security check for my review.Download Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad... Read more

Read other 2 answers