Need Help! I heard its easy to fix but I dont know how to! Please!

By DAY_TRIPPER ยท 5 replies
Jun 13, 2007
  1. main problem = i can only be on the web (like on forums and websites) for the first 10-15 minutes my computer is on then it wont work after that ... but after i can still get on teamspeak, msn, x-fire, ut , and everythign else just cant get on the web. But I CAN get on webadmin at anytime (lol)

    hard problem but any answers to that???

    here is the log of HijackThis for my SYSTEM ONLY scan:


    Also I have tried just to go to websites ips but still dont work like: dont work and neither does, but they do work within the first 10-15 minutes when i turn on my pc

    when i type in "ipconfig /all" in the run command it does nothing, it open the black box but then closes within .5 seconds


    only spybot caught something, and the 2 things it caught was:

    Product: FakeMSN8Beta
    Threat: Trojan

    poses as MSN 8 Messanger inofficial Beta

    hijacks hostsfile to block antivirusupdateservers and antiviruscompany webservers.
    Runs in background, creates directory with random name in Systemdirectory and copies itself to that location. Also adds itself to a hidden Systemstart entry.
    Adds 2 additional empty csrss.exe Systemstart entries.
    runs a csrss.exe from a random directory in systemdirectory.

    Second File
    Company: WebTrends live
    Product: Cookie
    Threat: Tracking cookie or cookie of tracking site.

    Uses information about your web surfing that could include any information, like accounts and passwords.

    But it caught this thing about 15 times then i scan again and it finds 5 more ... but now it dont find any the only problem is, is that i can only browse the web for the first 10-15 minutes my computer is on

    if you guys have a ts ip please give me that because like i said i can rarely check these forums .... I have a ut clan ts server Ip and i am normally on it

    the ip to that is:
    and there is no password


    ok i took a screenshot of that and when i cant broswe the web again i'll take another screenshot of it and post both of them... but i have to keep restarting my pc to keep checking this forum :( lol


    I took a screenshot when my webbrowser worked and when it didnt but it is the same thing, here is a screenshot


    Does anyone know how to fix this? Please I really need help

    Please I will do anything if you could help me!
  2. momok

    momok TS Rookie Posts: 2,265

    Hi DAY_TRIPPER and welcome to techspot. =)

    Sorry for the delay in response. We have plenty of new threads everyday, and there is the occasional lapse in spotting new threads.

    Important: Please read this thread HERE before you decide whether to clean or reformat your system.

    Should you decide to clean your computer, please go ahead to Viruses/Spyware/Malware, preliminary removal instructions and follow the steps given. Do follow all the instructions exactly. They will provide logs for analysis of your system so I will know how to instruct you to proceed.

    Thereafter, please post fresh HijackThis, AVG Antispyware and Combofix logs as attachments into this thread. Do not copy and paste your logs if not it will be ignored and/or removed.

    Also, please let me know the results of the AVG Antirootkit scan

    Your friendly momok =)

    This thread is for the use of DAY_TRIPPER only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
  3. jobeard

    jobeard TS Ambassador Posts: 11,128   +982

    run the command this way:
    run->cmd /k ipconfig /all​

    DAY_TRIPPER TS Rookie Topic Starter

    I already did, look at the last 2 quotes of my first post

    Thanks momok but that really desont help me ... cant you just tell me what to delete or what not?
  5. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    How can we tell you what to remove, when you haven`t posted the requested logfiles? ;)

    The portion of your HJT pic we can see, doesn`t seem to contain anything nasty, but obviously, that`s not a complete HJT log.

    Follow the instructions given by momok and post the requested logfiles, that way we`ll be able to see if your system is infected. Obviously, if it isn`t malware related, then there must be another problem of some kind.

    Regards Howard :)

    DAY_TRIPPER TS Rookie Topic Starter

    ok will follow those, thanks
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...