Kills On Site
Posts: 1741 Joined: Wed Jul 23, 2003 7:00 am
Post
by Kills On Site Sun Jan 28, 2007 11:17 pm
I have had this site come up twice. First time it happened when I went to newegg and this time it happened when I went to winbook (laptops).http://www.newegg.com/ , and then is followed by isapi.dll?c=home&htx=loginfrontmember this is annoying and makes me feel that I have some form of virus or adware. Ad-Aware, Spybot S&D, Norton foundd nothing. Can anyone shed some light on this? [size=92][color=#0000FF]Hugh Hefner for President[/color][/size]
Survivor
Posts: 4202 Joined: Fri Dec 27, 2002 8:00 am
Post
by Survivor Sun Jan 28, 2007 11:24 pm
IE7=Tried Windows defender? Or panda/trend micro online scan?
Kills On Site
Posts: 1741 Joined: Wed Jul 23, 2003 7:00 am
Post
by Kills On Site Sun Jan 28, 2007 11:27 pm
I tried the one at PC Pitstop, but it wouldn't load. I searched through my registry and found some registry entires containing MyFamily, they were under a thing for a HP Photoscanner, which I did recently use and haven't used it before that since my last reinstall. Could be it. I'll check out Windows Defender and trend micro.
[size=92][color=#0000FF]Hugh Hefner for President[/color][/size]
+JuggerNaut+
Posts: 22175 Joined: Sun Oct 14, 2001 7:00 am
Post
by +JuggerNaut+ Sun Jan 28, 2007 11:38 pm
grab
hijack this and check for this line:
O16 - DPF: {21F16767-8DA7-4113-BEB0-F161B313407F} - "http://www.myfamily.com/plugins/ue/Install_UE.exe"
Kills On Site
Posts: 1741 Joined: Wed Jul 23, 2003 7:00 am
Post
by Kills On Site Mon Jan 29, 2007 12:04 am
I did not see that like or any myfamily things from hijack this.
[size=92][color=#0000FF]Hugh Hefner for President[/color][/size]
Kills On Site
Posts: 1741 Joined: Wed Jul 23, 2003 7:00 am
Post
by Kills On Site Mon Jan 29, 2007 4:14 am
Here you go: Logfile of HijackThis v1.99.1http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://dlmanager.akamaitools.com.edgesu ... .0.6.0.cab http://update.microsoft.com/windowsupda ... 5473389753 http://update.microsoft.com/microsoftup ... 5803474953 http://www.crucial.com/controls/cpcScanner.cab http://messenger.msn.com/download/MsnMe ... loader.cab
[size=92][color=#0000FF]Hugh Hefner for President[/color][/size]
Kills On Site
Posts: 1741 Joined: Wed Jul 23, 2003 7:00 am
Post
by Kills On Site Mon Jan 29, 2007 6:10 pm
Well I deleted the Viewpoint Manager and Media Player. When I rebooted I Ctrl+Alt+Del and looked at the running processes and saw something that I hadn't before. The name of it is wuaclt.exe, I googled it and it called the Cult Trojan. Here is the hijack this log Logfile of HijackThis v1.99.1http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://dlmanager.akamaitools.com.edgesu ... .0.6.0.cab http://update.microsoft.com/windowsupda ... 5473389753 http://update.microsoft.com/microsoftup ... 5803474953 http://acs.pandasoftware.com/activescan ... asinst.cab http://www.crucial.com/controls/cpcScanner.cab http://messenger.msn.com/download/MsnMe ... loader.cab
[size=92][color=#0000FF]Hugh Hefner for President[/color][/size]
Foo
Posts: 13840 Joined: Thu Aug 03, 2000 7:00 amLocation: New Zealand
Post
by Foo Mon Jan 29, 2007 6:11 pm
if you read more than just the first google hit on the process, you'd see its part of the microsoft updater system.
"Maybe you have some bird ideas. Maybe that’s the best you can do."
Kills On Site
Posts: 1741 Joined: Wed Jul 23, 2003 7:00 am
Post
by Kills On Site Mon Jan 29, 2007 6:15 pm
Ah, thanks Foo, I almost deleted it.
[size=92][color=#0000FF]Hugh Hefner for President[/color][/size]
+JuggerNaut+
Posts: 22175 Joined: Sun Oct 14, 2001 7:00 am
Post
by +JuggerNaut+ Mon Jan 29, 2007 6:22 pm
Kills On Site wrote: Well I deleted the Viewpoint Manager and Media Player. When I rebooted I Ctrl+Alt+Del and looked at the running processes and saw something that I hadn't before. The name of it is wuaclt.exe, I googled it and it called the Cult Trojan. Here is the hijack this log Logfile of HijackThis v1.99.1http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://dlmanager.akamaitools.com.edgesu ... .0.6.0.cab http://update.microsoft.com/windowsupda ... 5473389753 http://update.microsoft.com/microsoftup ... 5803474953 http://acs.pandasoftware.com/activescan ... asinst.cab http://www.crucial.com/controls/cpcScanner.cab http://messenger.msn.com/download/MsnMe ... loader.cab
yup, wauclt.exe is okie dokie, as foo said.
Kills On Site
Posts: 1741 Joined: Wed Jul 23, 2003 7:00 am
Post
by Kills On Site Wed Jan 31, 2007 2:27 am
Well the problem with the My Family popup thing is that it has only happened twice in a span of 3 weeks, so to be positive it will take a while, but nothing else has been out of the ordinary.
[size=92][color=#0000FF]Hugh Hefner for President[/color][/size]
