Hello. I think my brother got my pc infected while in a yahoo chat room. I start up my browser and as soon as I visit 2 or 3 pages. It automatically takes me to a porn site. Once I delete this, MORE porn sites pop up, then my browser size is increase so much that I CANT close it! This is very frustrating, since this pc is used by little kids...Can anyone point me to where I can get help on this? I've got Symantec Virus software (whatever good that did), but what else can I do? Thanks..

There are several programs that you should have and use regularly. Go to http://www.lurkhere.com/ and get SpyBot and Adaware. If they do not solve your problem and need an extra strength program get "hijackthis" from that site. Another good website that has Adaware/SpyBot is http://www.wilders.org/ and it also has another good program that is good to have called Spywareblaster, it prevents active x hijacks. You brother needs to use more caution with his security settings and sites that he visits. Take care and all the best!

Also get trojan remover and or anti_trojan.

To close those huge windows....use alt+f4 at the same time...that will close the window. Be careful on hijack this prog...If ya dont know what to fix save the log file and paste the results here.likely Tom41 will answer and tell ya what to fix...go with whatever he says. Be sure to update the ad-aware and spybot b4 running scans...spybot had problem with crashing...the patch is in update.

Here's my log sheet from Adaware... Any help would be appreciated.. Lavasoft Ad-aware Personal Build 162 Logfile created on :Tuesday, July 08, 2003 9:33:06 PM Created with Ad-aware Personal, free for private use. Using reference-file :0R114 09.02.2003 ______________________________________________________ Ad-aware Settings ========================= Set : Activate in-depth scan (Recommended) Set : Safe mode (always request confirmation) Set : Scan active processes Set : Scan registry Set : Deep scan registry Listing running processes ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ #:1 [smss.exe] FilePath : \SystemRoot\System32\ ThreadCreationTime : 7-8-2003 8:22:12 PM BasePriority : Normal #:2 [winlogon.exe] FilePath : \??\C:\WINDOWS\system32\ ThreadCreationTime : 7-8-2003 8:22:20 PM BasePriority : High #:3 [services.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 7-8-2003 8:22:24 PM BasePriority : Normal FileSize : 99 KB FileVersion : 5.1.2600.0 (xpclient.010817-1148) ProductVersion : 5.1.2600.0 Copyright : Microsoft Corporation. All rights reserved. CompanyName : Microsoft Corporation FileDescription : Services and Controller app InternalName : services.exe OriginalFilename : services.exe ProductName : Microsoft Windows Operating System Created on : 8/29/2002 2:00:00 AM Last accessed : 7/9/2003 4:33:06 AM Last modified : 8/29/2002 2:00:00 AM #:4 [lsass.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 7-8-2003 8:22:24 PM BasePriority : Normal FileSize : 11 KB FileVersion : 5.1.2600.1106 (xpsp1.020828-1920) ProductVersion : 5.1.2600.1106 Copyright : Microsoft Corporation. All rights reserved. CompanyName : Microsoft Corporation FileDescription : LSA Shell (Export Version) InternalName : lsass.exe OriginalFilename : lsass.exe ProductName : Microsoft Windows Operating System Created on : 8/29/2002 2:00:00 AM Last accessed : 7/9/2003 4:33:06 AM Last modified : 8/29/2002 2:00:00 AM #:5 [svchost.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 7-8-2003 8:22:30 PM BasePriority : Normal FileSize : 12 KB FileVersion : 5.1.2600.0 (xpclient.010817-1148) ProductVersion : 5.1.2600.0 Copyright : Microsoft Corporation. All rights reserved. CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe OriginalFilename : svchost.exe ProductName : Microsoft Windows Operating System Created on : 8/29/2002 2:00:00 AM Last accessed : 7/9/2003 4:33:06 AM Last modified : 8/29/2002 2:00:00 AM #:6 [svchost.exe] FilePath : C:\WINDOWS\System32\ ThreadCreationTime : 7-8-2003 8:22:30 PM BasePriority : Normal FileSize : 12 KB FileVersion : 5.1.2600.0 (xpclient.010817-1148) ProductVersion : 5.1.2600.0 Copyright : Microsoft Corporation. All rights reserved. CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe OriginalFilename : svchost.exe ProductName : Microsoft Windows Operating System Created on : 8/29/2002 2:00:00 AM Last accessed : 7/9/2003 4:33:06 AM Last modified : 8/29/2002 2:00:00 AM #:7 [ccevtmgr.exe] FilePath : C:\Program Files\Common Files\Symantec Shared\ ThreadCreationTime : 7-8-2003 8:22:34 PM BasePriority : Normal FileSize : 309 KB FileVersion : 1.03.4 ProductVersion : 1.03.4 Copyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved. CompanyName : Symantec Corporation FileDescription : Event Manager Service InternalName : ccEvtMgr OriginalFilename : ccEvtMgr.exe ProductName : Event Manager Created on : 11/13/2002 11:44:02 PM Last accessed : 7/9/2003 4:33:06 AM Last modified : 11/13/2002 11:44:02 PM #:8 [spoolsv.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 7-8-2003 8:22:40 PM BasePriority : Normal FileSize : 50 KB FileVersion : 5.1.2600.0 (XPClient.010817-1148) ProductVersion : 5.1.2600.0 Copyright : Microsoft Corporation. All rights reserved. CompanyName : Microsoft Corporation FileDescription : Spooler SubSystem App InternalName : spoolsv.exe OriginalFilename : spoolsv.exe ProductName : Microsoft Windows Operating System Created on : 8/29/2002 2:00:00 AM Last accessed : 7/9/2003 4:33:06 AM Last modified : 8/29/2002 2:00:00 AM #:9 [explorer.exe] FilePath : C:\WINDOWS\ ThreadCreationTime : 7-8-2003 8:22:42 PM BasePriority : Normal FileSize : 980 KB FileVersion : 6.00.2800.1106 (xpsp1.020828-1920) ProductVersion : 6.00.2800.1106 Copyright : Microsoft Corporation. All rights reserved. CompanyName : Microsoft Corporation FileDescription : Windows Explorer InternalName : explorer OriginalFilename : EXPLORER.exe ProductName : Microsoft Windows Operating System Created on : 8/29/2002 2:00:00 AM Last accessed : 7/9/2003 4:33:06 AM Last modified : 8/29/2002 2:00:00 AM #:10 [carpserv.exe] FilePath : C:\WINDOWS\System32\ ThreadCreationTime : 7-8-2003 8:22:53 PM BasePriority : Normal FileSize : 4 KB FileVersion : 5.03.09.00 ProductVersion : 5.03.09.00 Copyright : Copyright Conexant Systems, Inc. 2002 CompanyName : Conexant Systems FileDescription : carpserv InternalName : carpserv OriginalFilename : carpserv.exe ProductName : Conexant carpserv Created on : 10/22/2002 Last accessed : 7/9/2003 4:33:06 AM Last modified : 10/22/2002 #:11 [realsched.exe] FilePath : C:\Program Files\Common Files\Real\Update_OB\ ThreadCreationTime : 7-8-2003 8:22:54 PM BasePriority : Normal FileSize : 148 KB FileVersion : 0.1.0.1566 ProductVersion : 0.1.0.1566 Copyright : Copyright RealNetworks, Inc. 1995-2002 CompanyName : RealNetworks, Inc. FileDescription : RealNetworks Scheduler InternalName : schedapp OriginalFilename : realsched.exe ProductName : RealOne Player (32-bit) Created on : 4/6/2003 12:02:12 AM Last accessed : 7/9/2003 4:33:06 AM Last modified : 4/6/2003 12:02:12 AM #:12 [onetouch.exe] FilePath : C:\PROGRA~1\HPQ\ONE-TO~1\ ThreadCreationTime : 7-8-2003 8:22:55 PM BasePriority : Normal FileSize : 96 KB FileVersion : 1.6.3.0 ProductVersion : 1.6.3.0 Copyright : Copyright 2002 Dritek System Inc. CompanyName : Dritek System Inc. FileDescription : One-Touch InternalName : OneTouch OriginalFilename : OneTouch.exe ProductName : Dritek System Inc. OneTouch 10.05.2002 ( VC60 ) Created on : 10/14/2002 5:57:14 PM Last accessed : 7/9/2003 4:33:06 AM Last modified : 10/14/2002 5:57:14 PM #:13 [syntplpr.exe] FilePath : C:\Program Files\Synaptics\SynTP\ ThreadCreationTime : 7-8-2003 8:22:56 PM BasePriority : Normal FileSize : 124 KB FileVersion : 6.7.4 09Sep02 ProductVersion : 6.7.4 09Sep02 Copyright : Copyright (C) Synaptics, Inc. 1996-2002 CompanyName : Synaptics, Inc. FileDescription : TouchPad Driver Helper Application InternalName : SynTPLpr OriginalFilename : SynTPLpr.exe ProductName : Progressive Touch Created on : 9/9/2002 10:42:38 PM Last accessed : 7/9/2003 4:33:06 AM Last modified : 9/9/2002 10:42:38 PM #:14 [syntpenh.exe] FilePath : C:\Program Files\Synaptics\SynTP\ ThreadCreationTime : 7-8-2003 8:22:58 PM BasePriority : Normal FileSize : 544 KB FileVersion : 6.7.4 09Sep02 ProductVersion : 6.7.4 09Sep02 Copyright : Copyright (C) Synaptics, Inc. 1996-2002 CompanyName : Synaptics, Inc. FileDescription : Synaptics TouchPad Enhancements InternalName : Scrolleroo OriginalFilename : SynTPEnh.exe ProductName : Progressive Touch Created on : 9/9/2002 10:41:42 PM Last accessed : 7/9/2003 4:33:06 AM Last modified : 9/9/2002 10:41:42 PM #:15 [ccapp.exe] FilePath : C:\Program Files\Common Files\Symantec Shared\ ThreadCreationTime : 7-8-2003 8:23:00 PM BasePriority : Normal FileSize : 53 KB FileVersion : 1.03.15 ProductVersion : 1.03.15 Copyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved. CompanyName : Symantec Corporation FileDescription : Common Client CC App InternalName : ccApp OriginalFilename : ccApp.exe ProductName : Common Client Created on : 11/15/2002 2:29:06 AM Last accessed : 7/9/2003 4:33:06 AM Last modified : 11/15/2002 2:29:06 AM #:16 [qttask.exe] FilePath : C:\Program Files\QuickTime\ ThreadCreationTime : 7-8-2003 8:23:00 PM BasePriority : Normal FileSize : 76 KB FileVersion : 6.0.2 ProductVersion : QuickTime 6.0.2 Copyright : Apple Computer, Inc. 2001-2002 CompanyName : Apple Computer, Inc. InternalName : QuickTime Task OriginalFilename : QTTask.exe ProductName : QuickTime Created on : 5/16/2003 2:55:16 AM Last accessed : 7/9/2003 4:33:06 AM Last modified : 5/16/2003 2:55:16 AM #:17 [msmsgs.exe] FilePath : C:\Program Files\Messenger\ ThreadCreationTime : 7-8-2003 8:23:03 PM BasePriority : Normal FileSize : 1476 KB FileVersion : 4.7.0041 ProductVersion : Version 4.7 Copyright : Copyright (c) Microsoft Corporation 1997-2001 CompanyName : Microsoft Corporation FileDescription : Messenger InternalName : msmsgs OriginalFilename : msmsgs.exe ProductName : Messenger Created on : 8/20/2002 5:08:38 PM Last accessed : 7/9/2003 4:25:50 AM Last modified : 8/20/2002 5:08:38 PM #:18 [winlogon.exe] FilePath : C:\windows\ ThreadCreationTime : 7-8-2003 8:23:05 PM BasePriority : Normal FileSize : 200 KB FileVersion : 1, 0, 0, 1 ProductVersion : 1, 0, 0, 1 Copyright : Copyright (C) 2002 FileDescription : rslocal MFC Application InternalName : rslocal OriginalFilename : rslocal.exe ProductName : rslocal Application Created on : 7/8/2003 4:56:21 AM Last accessed : 7/9/2003 4:33:07 AM Last modified : 7/8/2003 4:56:21 AM #:19 [acrotray.exe] FilePath : C:\Program Files\Adobe\Acrobat 6.0\Distillr\ ThreadCreationTime : 7-8-2003 8:23:09 PM BasePriority : Normal FileSize : 212 KB FileVersion : 6.0.0.2003051500 ProductVersion : 6.0.0.0 Copyright : Copyright 1984-2003 Adobe Systems Incorporated and its licensors. All rights reserved. CompanyName : Adobe Systems Inc. FileDescription : AcroTray InternalName : AcroTray OriginalFilename : AcroTray.exe ProductName : AcroTray - Adobe Acrobat Distiller helper application. Created on : 5/15/2003 8:19:50 AM Last accessed : 7/9/2003 4:33:07 AM Last modified : 5/15/2003 8:19:50 AM #:20 [qbupdate.exe] FilePath : C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\ ThreadCreationTime : 7-8-2003 8:23:12 PM BasePriority : Normal FileSize : 636 KB FileVersion : 12.0 R1 ProductVersion : 12.0 R1 Copyright : Copyright Intuit, Inc. 1993-2003. CompanyName : Intuit, Inc. FileDescription : QBUpdate Module InternalName : QBUpdate OriginalFilename : QBUpdate.exe ProductName : QuickBooks Created on : 5/11/2003 1:37:47 PM Last accessed : 7/9/2003 4:33:07 AM Last modified : 11/18/2002 9:11:00 AM #:21 [ati2evxx.exe] FilePath : C:\WINDOWS\System32\ ThreadCreationTime : 7-8-2003 8:23:40 PM BasePriority : Normal FileSize : 128 KB Created on : 6/11/2002 11:38:54 PM Last accessed : 7/9/2003 4:33:07 AM Last modified : 6/11/2002 11:38:54 PM #:22 [hpconfig.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 7-8-2003 8:23:41 PM BasePriority : Normal FileSize : 148 KB FileVersion : 3, 0, 1, 8 ProductVersion : 3, 0, 1, 8 Copyright : Hewlett-Packard Copyright (C) 1999-2002 CompanyName : Hewlett-Packard FileDescription : HPConfig Module InternalName : HPConfig OriginalFilename : HPConfig.exe ProductName : HPConfig Module Created on : 4/6/2003 12:13:06 AM Last accessed : 7/9/2003 4:33:07 AM Last modified : 8/15/2002 7:11:00 PM #:23 [hpwirelessmgr.exe] FilePath : C:\Program Files\HPQ\Notebook Utilities\ ThreadCreationTime : 7-8-2003 8:23:41 PM BasePriority : Normal FileSize : 52 KB FileVersion : 1, 0, 0, 6 ProductVersion : 1, 0, 0, 6 Copyright : Hewlett-Packard Copyright 2002 CompanyName : Hewlett-Packard Co. FileDescription : HPWirelessMgr Module InternalName : HPWirelessMgr OriginalFilename : HPWirelessMgr.exe ProductName : HPWirelessMgr Module Created on : 4/6/2003 12:13:16 AM Last accessed : 7/9/2003 4:33:07 AM Last modified : 7/17/2002 7:12:20 PM #:24 [navapsvc.exe] FilePath : C:\Program Files\Norton AntiVirus\ ThreadCreationTime : 7-8-2003 8:23:41 PM BasePriority : Normal FileSize : 113 KB FileVersion : 9.05.1015 ProductVersion : 9.05.1015 Copyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved. CompanyName : Symantec Corporation FileDescription : Norton AntiVirus Auto-Protect Service InternalName : NAVAPSVC OriginalFilename : NAVAPSVC.exe ProductName : Norton AntiVirus Created on : 11/15/2002 2:41:26 AM Last accessed : 7/9/2003 4:33:07 AM Last modified : 11/15/2002 2:41:26 AM #:25 [wuauclt.exe] FilePath : C:\WINDOWS\System32\ ThreadCreationTime : 7-8-2003 8:25:03 PM BasePriority : Normal FileSize : 136 KB FileVersion : 5.4.3630.1106 (xpsp1.020828-1920) ProductVersion : 5.4.3630.1106 Copyright : Microsoft Corporation. All rights reserved. CompanyName : Microsoft Corporation FileDescription : Windows Update AutoUpdate Client InternalName : wuauclt.exe OriginalFilename : wuauclt.exe ProductName : Microsoft Windows Operating System Created on : 8/29/2002 2:00:00 AM Last accessed : 7/9/2003 4:33:07 AM Last modified : 8/29/2002 2:00:00 AM #:26 [mss.exe] FilePath : C:\DOCUME~1\Sam\LOCALS~1\Temp\ ThreadCreationTime : 7-9-2003 12:10:20 AM BasePriority : Normal FileSize : 2 KB Created on : 7/9/2003 12:10:20 AM Last accessed : 7/9/2003 4:33:07 AM Last modified : 7/9/2003 12:10:20 AM #:27 [iexplore.exe] FilePath : C:\Program Files\Internet Explorer\ ThreadCreationTime : 7-9-2003 4:27:02 AM BasePriority : Normal FileSize : 89 KB FileVersion : 6.00.2800.1106 (xpsp1.020828-1920) ProductVersion : 6.00.2800.1106 Copyright : Microsoft Corporation. All rights reserved. CompanyName : Microsoft Corporation FileDescription : Internet Explorer InternalName : iexplore OriginalFilename : IEXPLORE.exe ProductName : Microsoft Windows Operating System Created on : 8/29/2002 2:00:00 AM Last accessed : 7/9/2003 4:27:09 AM Last modified : 8/29/2002 2:00:00 AM #:28 [ad-aware.exe] FilePath : C:\Program Files\Lavasoft\Ad-aware 6\ ThreadCreationTime : 7-9-2003 4:31:53 AM BasePriority : Normal FileSize : 645 KB FileVersion : 6.0.1.165 ProductVersion : 6.0.0.0 Copyright : Copyright Lavasoft Sweden CompanyName : Lavasoft Sweden FileDescription : Ad-aware 6 core application InternalName : Ad-aware.exe OriginalFilename : Ad-aware.exe ProductName : Lavasoft Ad-aware Plus Created on : 7/9/2003 1:20:35 AM Last accessed : 7/9/2003 4:31:53 AM Last modified : 2/9/2003 4:50:52 AM Memory scan result : ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ New objects : 0 Objects found so far: 0 Started registry scan ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ Registry scan result : ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ New objects : 0 Objects found so far: 0 Started deep registry scan ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ Deep registry scan result : ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ New objects : 0 Objects found so far: 0 Deep scanning and examining files (C:) ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ Tracking Cookie Object recognized! Type : File Data : sam@atdmt[1].txt Object : C:\Documents and Settings\Sam\Cookies\ Created on : 7/9/2003 4:29:05 AM Last accessed : 7/9/2003 4:29:05 AM Last modified : 7/9/2003 4:29:05 AM Disk scan result for C: ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ New objects : 0 Objects found so far: 1 9:36:33 PM Scan complete Summary of this scan ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ Total scanning time :00:03:26:928 Objects scanned :54093 Objects identified :1 Objects ignored :0 New objects :1

Joe, The item below is most probably the culprit. #:26 [mss.exe] FilePath : C:\DOCUME~1\Sam\LOCALS~1\Temp\ Check out the thread especially "Cyric's" reply about half way down the page at the link below. http://boards.cexx.org/viewtopic.php?t=427 You may want to download HijackThis where you'll find references to it at that link above and submit the log after running it to that board. Those guys are experts on this type of problem and will help you out. HTH Tufenuf

mss.exe will change your homepage to a search engine that will include porn links and popups but that is all that it will do. I have the same problems, check out these two items in your list: #:2 [winlogon.exe] #:18 [winlogon.exe] I have the same problem on two different systems with this file, if I end task on it the system returns to normal. Notice that #2 has been given high processor priority and the path has an error; #18 has been renamed from rslocal.exe to winlogon.exe and was created the day of your post. unfortunately this is the only site I could find that mentioned this file when I did a Google search.