|
|
|
#1
|
|||
|
|||
computer nightmare
Recently I had a problem with lop toolbar... but managed to find it on the computer and delete it(or atleast I hope I did). Currently, I am having weird problems. My caps lOCKS would turn on at random... and some ads pop out and the google tool bar doesn't take care of it. I also experienced things like the whole page being hilighted(sp?)/highlighted?(sp?) and having the font size in my browser increase or decrease by simply scrolling down using the scroll down wheel on my mouse. Every few seconds.. sometimes a little longer... the browser would act as if there is another window open above it. So I have to click on the browser to "bring it to the front" again. Also.. if I were to leave the computer on and exit out of all programs and browsers... I would find a pop-up ad or 2 on my desktop. All these symptoms began occuring this past week. I am using a PC computer with Windows XP home. If anyone can help me figure out whats causing all this... please let me know. I tried doing an online search.. but all of my keyterms brought up nothing.
I used the following software programs on my computer... Ad-aware version 6.0 Spybot Search and Destroy Spy Sweeper Power Scan CWShredder v. 1.5.2 I managed to remove just about every singe junk item from my hard drive.. but I still get some BS search engine each time I restart the computer. All of these problems began when I downloaded the newer MSFT messenger and recieved the stupid "LOP toolbar". |
#2
|
|||
|
|||
Did you try using spybot? it is a pretty good freeware program that detects viruses and spyware running. Also you might want to check out your registery on your computer, then you can see what is loading up when your computer starts (such as what spyware and whatnot)
But if you are unfamiliar with the registry let me know and I can tell you where to look, since you defintely don't want to just go around in there deleting things (it can cause MAJOR problems) |
#3
|
|||
|
|||
restart in SAFE MODE (usually F8 when you see the first boot screen. then run the Adaware or Spybot.
|
#4
|
|||
|
|||
Hey Sp0ck...
I tried restarting in safe mode.. but it doesn't do a difference. I will PM Philk since he's being nice enough to offer me help. One thing I miss about win98se is that IE browser had a toolbar at the bottom that shows you the progress of the page download. On this OS, I don't have that |
#5
|
||||
|
||||
-do a scan with http://housecall.trendmicro.com/ (won't delete problems)
-download hijackthis and use it to delete the dll's that were found in the scan. hijackthis is the best tool to get rid of these pesky problems but you will have to indentify the problem yourself. last but not least - switch to mozilla and you won't have these problems anymore...
__________________
joE 1993 300e-2.8 - gone now <sigh> "Do not adjust your mind, it's reality that's malfunctioning" http://banners.wunderground.com/bann...L/Key_West.gif |
#6
|
|||
|
|||
wow... it just gets worse. I can't get any webpage to open on my IE browser, so I created a new account on XP and managed to bypass this problem.
I still feel as though SOMEONE is controlling my computer I ran the Windows Task Manager and have the following listed: iexplorer.exe aim.exe WINAMPA.EXE EXPLORER.EXE SPOOLSV.EXE SVCHOST.EXE SVCHOST.EXE taskmgr.exe SVCHOST.EXE Tzatd.exe SVCHOST.EXE LSASS.EXE SERVICES.EXE WINLOGON.EXE CSRSS.EXE SMSS.EXE iexplorer.exe wuauclt.exe kfmJ8U3.exe System System Idle Process I am worried about CSRSS.EXE and SMSS.EXE... i did a search and it APPEARS to be a trojan. I would appreciate it if someone might know what I am in. I am afraid to type in passwords to certain pages in fear someone on the other end is seeing all this $&(%*P@ MSFT |
#7
|
|||
|
|||
Buy a Mac.
Peter
__________________
1972 220D ?? miles 1988 300E 200,012 1987 300D Turbo killed 9/25/07, 275,000 miles 1985 Volvo 740 GLE Turobodiesel 218,000 1972 280 SE 4.5 165, 000 - It runs! |
#8
|
|||
|
|||
SMSS.EXE http://www.symantec.com/avcenter/venc/data/pf/w32.dalbug.worm.html
http://www.viruslist.com/eng/viruslist.html?id=51071 AND you have to run Hijack this, many worms evade windoze task manager. Last edited by MedMech; 03-08-2004 at 05:05 PM. |
#9
|
||||
|
||||
1. You can also try McAfee Avert Stinger (free to anyone)
2. search techtv.com for similar problems. they once told about a worm that keeps changing so it's not detected by adaware or spybot 3. definately use Mozilla hope this helps
__________________
Nello Tare 1982 300D (266,001 mi.) looking and running great Previously owned: 1976 450 SLC 1983 300D 1976 300D also 1982 Jaguar XJ6 (loved, but gone) |
#10
|
|||
|
|||
Quote:
|
#11
|
||||
|
||||
thanx Med. i'm suuprized thets the only mispelt werd
__________________
Nello Tare 1982 300D (266,001 mi.) looking and running great Previously owned: 1976 450 SLC 1983 300D 1976 300D also 1982 Jaguar XJ6 (loved, but gone) |
#12
|
|||
|
|||
Quote:
|
#13
|
||||
|
||||
here's another free utility that I like. http://www.docsdownloads.com/enditall.htm It might show you more of what's running than task manager.. don't know.. and you might be able to block the programs you don't want to run. It is powerful, so be careful.
I also use RegCleaner http://www.docsdownloads.com/regclean.htm it can tell you what's in your start up menu and delete them if you want.
__________________
Nello Tare 1982 300D (266,001 mi.) looking and running great Previously owned: 1976 450 SLC 1983 300D 1976 300D also 1982 Jaguar XJ6 (loved, but gone) |
#14
|
||||
|
||||
Just found these
the following explains a lot about csrss.exe. it's normal but Ladex (and variants) are worms that use this. several links have the "cure"
http://www.google.com/search?hl=en&lr=&ie=UTF-8&oe=UTF-8&q=CSRSS.EXE&btnG=Google+Search they mention you might want to disable your "system restore" so it doesn't keep coming back If you need up to date virus protection www.grisoft.com (free version and cheap pay version) good luck
__________________
Nello Tare 1982 300D (266,001 mi.) looking and running great Previously owned: 1976 450 SLC 1983 300D 1976 300D also 1982 Jaguar XJ6 (loved, but gone) |
#15
|
|||
|
|||
Thank you all...
I *think* I got it under control now. I got a program called "Trend Micro Internet Security". I ran it and it found close to 300 infected files with trojans and viruses! None of these infected files were picked up by adaware or hijackthis. After running the program, I am not encountering any of the symptoms I had earlier (knock on wood). The only problem I have is not being able to get any webpage to show up on my IE browser. So... I am using another "account" on my XP OS. I will move all my bookmarks, files, etc. to the new account and delete the old one. I presume that Mozilla is a browser? I will check it out to see how I like it. Probably better than that POS IE that loooooves to get $(&%ed with viruses and trojans |
Bookmarks |
Thread Tools | |
Display Modes | |
|
|