Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed Forums > System Administration > Antivirus Protection
Reload this Page

Can't download anything?

Discuss Can't download anything? in the Antivirus Protection forum on Dev Shed.
Can't download anything? Antivirus Protection forum discussing issues relating to antivirus programs, spyware, hijack protection, and personal firewalls for all operating systems. Keep your systems protected from hackers and other hazards.

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Page 1 of 2 1 2 >
« Previous Thread | Next Thread »  
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old March 6th, 2005, 11:02 AM
BABYMOONGEESE BABYMOONGEESE is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Sep 2004
Posts: 63 BABYMOONGEESE Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 11 h 52 m 2 sec
Reputation Power: 0
Question Can't download anything?
I guess I have a virus despite nothing detected by AVG and spybot.

I tried to download noadaware but despite trying loads of different links I can never download it - I get the 'page not found message'

I have 44 processes currently running - most of them I have never seen before. If I end the processes as soon as I reboot they are all back.

Have I been hijacked?

Your help is much appreciated
Reply With Quote
  #2  
Old March 6th, 2005, 11:06 AM
christo's Avatar
christo christo is offline
Introspective
Dev Shed Loyal (3000 - 3499 posts)
  
Join Date: Nov 2001
Location: London, UK
Posts: 3,297 christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 3 Days 1 h 9 m 17 sec
Reputation Power: 104
Send a message via ICQ to christo Send a message via Yahoo to christo
download HijackThis.exe, run a scan, save the log and post it in the Adware/Virus forum (whatever it's called).


christo
Comments on this post
BABYMOONGEESE disagrees!
Reply With Quote
  #3  
Old March 6th, 2005, 11:42 AM
BABYMOONGEESE BABYMOONGEESE is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Sep 2004
Posts: 63 BABYMOONGEESE Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 11 h 52 m 2 sec
Reputation Power: 0
Grrrr - Can't find Hijack this - nobody replying in the antivirus forum :0(
Reply With Quote
  #4  
Old March 6th, 2005, 11:48 AM
BABYMOONGEESE BABYMOONGEESE is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Sep 2004
Posts: 63 BABYMOONGEESE Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 11 h 52 m 2 sec
Reputation Power: 0
When I find the correct link - I have the same problem as I had with noadaware - 'I get the page not found' message again. Please help
Reply With Quote
  #5  
Old March 6th, 2005, 11:52 AM
aitken325i's Avatar
aitken325i aitken325i is offline
At a NO MA'AM meeting . . . .
Dev Shed God 18th Plane (13500 - 13999 posts)
  
Join Date: Mar 2004
Location: nr Edinburgh, Scotland
Posts: 13,504 aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)aitken325i User rank is General 14th Grade (Above 100000 Reputation Level)  Folding Points: 10110 Folding Title: Novice Folder
Time spent in forums: 5 Months 2 Weeks 20 h 36 m 50 sec
Reputation Power: 1935
Quote:
Originally Posted by BABYMOONGEESE
When I find the correct link - I have the same problem as I had with noadaware - 'I get the page not found' message again. Please help


You tried http://www.majorgeeks.com/download3155.html - I can get it fine from there.
__________________
The No Ma'am commandments:

1.) It is O.K. to call hooters 'knockers' and sometimes snack trays
2.) It is wrong to be French
3.) It is O.K. to put all bad people in a giant meat grinder
4.) Lawyers, see rule 3
5.) It is O.K. to drive a gas guzzler if it helps you get babes
6.) Everyone should car pool but me
7.) Bring back the word 'stewardesses'
8.) Synchronized swimming is not a sport
9.) Mud wrestling is a sport
Reply With Quote
  #6  
Old March 6th, 2005, 11:53 AM
christo's Avatar
christo christo is offline
Introspective
Dev Shed Loyal (3000 - 3499 posts)
  
Join Date: Nov 2001
Location: London, UK
Posts: 3,297 christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 3 Days 1 h 9 m 17 sec
Reputation Power: 104
Send a message via ICQ to christo Send a message via Yahoo to christo
download hijackthis from here: http://www.majorgeeks.com/download3155.html

move or unzip HijackThis to a permanent folder such as C:\HJT - ie create a new folder called HJT under c:\ and put the hijackthis.exe file in there.. then run the .exe, save a log and paste it into a new thread in tihe Antivirus forum. Nudge me on this thread too when you've done that and I'll cruise over and have a look..

I'm going out in 2 hrs tho to the cinema, so be quick


christo
Reply With Quote
  #7  
Old March 6th, 2005, 11:56 AM
christo's Avatar
christo christo is offline
Introspective
Dev Shed Loyal (3000 - 3499 posts)
  
Join Date: Nov 2001
Location: London, UK
Posts: 3,297 christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 3 Days 1 h 9 m 17 sec
Reputation Power: 104
Send a message via ICQ to christo Send a message via Yahoo to christo
hmmm - well I'll try sticking it up on my site.. see if you can get it from there: http://www.spiration.co.uk/hijackthis.zip


christo
Reply With Quote
  #8  
Old March 6th, 2005, 11:56 AM
codergeek42's Avatar
codergeek42 codergeek42 is offline
[Insert clever comment here.]
Dev Shed God 2nd Plane (6000 - 6499 posts)
  
Join Date: Jul 2003
Location: Anaheim, CA (USA)
Posts: 6,427 codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)codergeek42 User rank is General 2nd Grade (Above 100000 Reputation Level)  Folding Points: 39542 Folding Title: Starter FolderFolding Points: 39542 Folding Title: Starter Folder
Time spent in forums: 1 Month 1 Week 6 Days 7 h 37 m 26 sec
Reputation Power: 1141
Send a message via ICQ to codergeek42 Send a message via AIM to codergeek42 Send a message via Yahoo to codergeek42 Send a message via Google Talk to codergeek42
Moved from the Lounge...
__________________
~~ Peter ~~
( My Blog: It's exactly like normal nerdiness, but completely different. ) :: ( Supporter of the EFF & FSF ) :: ( I'm a GNU/Linux addict and Free Software Advocate. ) :: ( How to Ask Questions the Smart Way ) :: ( The Fedora Project, sponsored by Red Hat ) :: ( GNOME: The Free Software Desktop Project ) :: ( GnuPG Public Key )
Reply With Quote
  #9  
Old March 6th, 2005, 12:02 PM
BABYMOONGEESE BABYMOONGEESE is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Sep 2004
Posts: 63 BABYMOONGEESE Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 11 h 52 m 2 sec
Reputation Power: 0
You are a total star - thankyou :0)

Can't get to it throught that link either though

I got a Xoftspylog if that helps? Hurts your eyes as it's so big though.

Shall I try to post it - 14 pages?

thanks again
Reply With Quote
  #10  
Old March 6th, 2005, 12:08 PM
BABYMOONGEESE BABYMOONGEESE is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Sep 2004
Posts: 63 BABYMOONGEESE Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 11 h 52 m 2 sec
Reputation Power: 0
Not really fair as nobody is replying in the other forum?

Thanks Christo - I'll try the link :0)
Reply With Quote
  #11  
Old March 6th, 2005, 12:12 PM
christo's Avatar
christo christo is offline
Introspective
Dev Shed Loyal (3000 - 3499 posts)
  
Join Date: Nov 2001
Location: London, UK
Posts: 3,297 christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level)christo User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 3 Days 1 h 9 m 17 sec
Reputation Power: 104
Send a message via ICQ to christo Send a message via Yahoo to christo
I don't know Xoftspylog, but maybe somebody in the antivirus forum will...
in the meantime, I've attempted to attatch the zip file to this reply... is that working?



christo
Attached Files
File Type: zip hijackthis.zip (207.9 KB, 63 views)
Reply With Quote
  #12  
Old March 6th, 2005, 12:13 PM
BABYMOONGEESE BABYMOONGEESE is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Sep 2004
Posts: 63 BABYMOONGEESE Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 11 h 52 m 2 sec
Reputation Power: 0
The link worked - running the scan now :0)

Thanks
Reply With Quote
  #13  
Old March 6th, 2005, 12:20 PM
BABYMOONGEESE BABYMOONGEESE is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Sep 2004
Posts: 63 BABYMOONGEESE Negative: is most likely a SPAMMER and a traitor to the cause. 
Time spent in forums: 11 h 52 m 2 sec
Reputation Power: 0
Red face Got a log at last
Here goes...

Logfile of HijackThis v1.99.1
Scan saved at 18:12:25, on 06/03/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Analog Devices\SoundMAX\PmProxy.exe
C:\WINDOWS\LTSMMSG.exe
C:\WINDOWS\System32\00THotkey.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\WINDOWS\system32\TPWRTRAY.EXE
C:\WINDOWS\dzmjfydz.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S09IC1.EXE
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S09IC1.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Labtec\Wireless Mouse\MulMouse.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\frgsnapd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\MATEYB~1.VIC\LOCALS~1\Temp\Rar$EX08.142\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://webmail.blueyonder.co.uk/
O1 - Hosts file is located at: C:\WINDOWS\nsdb\hosts
O1 - Hosts: 81.211.105.69 lender-search.com
O1 - Hosts: 81.211.105.68 hot-searches.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll
O2 - BHO: pifmge - {71DD4A5A-7E22-6519-D3B1-321C26FEFB1E} - (no file)
O2 - BHO: jimmyhelp.CBrowserHelper - {D8B3A4A5-2012-4393-A927-BC927C5E5B93} - C:\WINDOWS\mlgsz.dll
O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\system32\msbe.dll (file missing)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PmProxy] C:\Program Files\Analog Devices\SoundMAX\PmProxy.exe
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [NDSTray.exe] "C:\Program Files\Toshiba\ConfigFree\NDSTray.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [Windows Shell Command] loadsh.exe
O4 - HKLM\..\Run: [zggk] C:\WINDOWS\dzmjfydz.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPSON Stylus C44 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S09IC1.EXE /P23 "EPSON Stylus C44 Series" /O6 "USB001" /M "Stylus C44"
O4 - HKLM\..\Run: [smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [EPSON Stylus C44 Series (Copy 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S09IC1.EXE /P32 "EPSON Stylus C44 Series (Copy 1)" /O5 "LPT1:" /M "Stylus C44"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [frgsnapd] C:\WINDOWS\system32\frgsnapd.exe
O4 - HKLM\..\RunServices: [Windows Shell Command] loadsh.exe
O4 - Global Startup: Labtec Mouse Software 2.0.lnk = C:\Program Files\Labtec\Wireless Mouse\MulMouse.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei-2/SmileyCentralFWBInitialSetup1.0.0.8-2.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {665585FD-2068-4C5E-A6D3-53AC3270ECD4} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/en/filesharingctrl.cab
O16 - DPF: {79849612-A98F-45B8-95E9-4D13C7B6B35C} (Loader2 Control) - http://static.topconverting.com/activex/jabber.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BB95299D-B65B-47E0-8DDB-697A66298C3A} (UniVoiceX Control) - http://webcamnow.com/voice/voice.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/insaniquarium/popcaploader_v6.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by101fd.bay101.hotmail.msn.com/activex/HMAtchmt.ocx
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

Is it terminal ??
Reply With Quote