Recent content by tb525

Hi kipsjag, Thanks for the files. I see you have already removed them, that's good, all are malware. Nwscripnt.exe is a random AdGoblin/AdsInContext executable. C:\Documents and Settings\Administrator\Application Data\acco.exe C:\Documents and Settings\Administrator\Application Data\naat.exe...

The only thing unusual I see is this running process: C:\PROGRAM FILES\INTERNET EXPLORER\FLOW.EXE Is Flow.exe something you installed? If it's not, could you email me a zipped copy to analyze? You can email it here: tbeck41@adelphia.net

Download 'Hijack This!'. Unzip, doubleclick HijackThis.exe, and hit "Scan". When the scan is finished, click "Save Log", and copy and paste it in a reply. http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

It sounds like a domain hijacker. Download 'Hijack This!'. Unzip, doubleclick HijackThis.exe, and hit "Scan". When the scan is finished, click "Save Log", and copy and paste it in a reply. http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Your log is clean...What 'wierd' things is your machine doing?

Download and run the removal tool here: http://securityresponse.symantec.com/avcenter/venc/data/w32.opaserv.worm.removal.tool.html Install this patch: (95/98/ME) http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS00-072.asp Install a firewall...

Download 'Hijack This!'. Unzip, doubleclick HijackThis.exe, and hit "Scan". When the scan is finished, click "Save Log", and copy and paste it in a reply. http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Hi Faheem786, Download 'Hijack This!'. Unzip, doubleclick HijackThis.exe, and hit "Scan". When the scan is finished, click "Save Log", and copy and paste it in a reply. http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

1. First, click on Start, go to Programs, then System Tools, and click on System Restore. 2. The System Restore window will open and give you a brief description of what the System Restore utility does. 3. Click on Create a Restore Point and then click Next. 4. It will ask you to give a...

When you view a web page and have ZA's script blocking on, it adds that tag to effectivly disable javascript/vbscript for that site.

That is in your restore archive. Disable system restore, reboot, re-enable system restore and reboot. Then create a new restore point. Here's how: http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239?OpenDocument&src=sec_doc_nam

Hi kipsjag, Close Internet Explorer and any remaining pop-up windows, then click Start > Run > type regedit and click OK. Click the + next to the following keys: HKEY_LOCAL_MACHINE Software You will see a group of sub folders. There will be a sub folder right at the beginning, with <random>...

Also run HijackThis and fix these entries: O17 - HKLM\System\CCS\Services\Tcpip\..\{D3DAA47B-8F27-4394-AEC7-A47C59AD2EB6}: NameServer = 69.57.146.14,69.57.147.175 O17 - HKLM\System\CCS\Services\Tcpip\..\{DB1EC7C4-4455-4C75-AF58-4A1782FFE30C}: NameServer = 69.57.146.14,69.57.147.175 They are...

You have a CoolWebSearch hijack. Download and run CWShredder to remove it. http://216.180.252.218/~spywareinfo.com/downloads/tools/cwshredder.zip

Run HT again and check the following items. Doublecheck so as to be sure not to miss one. Next, close all browser Windows, and have HT 'fix checked'. You Must restart your computer when you're done. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchdot.net R1 -...