[pilgrim33ad]

For some time now, instead of just going to an http: address when I type in the address, I get a delay and then in the gray bar at the bottom it says one of the following:

"Read with.....www.name.com or
Transferring from www.name.com or
Connecting to www.name.com

or similar things and I have had non-stop problems with altered and missing files,
changes made while working with software programs in an unsaved file in progress,
etc.

It looks like somehow there is some sort of filtering process between my computer and the internet, and with other things going on like pages freezing and disappearing, browser switching, and extra 'tools buttons, and content' I am constantly taking off, it looks like someone is able to access what is on my hard drive as well, and I have had like half of huge folders erased down the middle.

This has gotten so serious, that I am doubtful about getting online anymore, because it could mean that someone has set up some sort of 'higher drive' which I am not seeing or controlling: I've also had permissions changed on files on my home computer, and there is no one else here.

If this is happening it affects 7 websites I direct, plus my online work for a testing company. I had them ask recently about whether my email was shared, which it is not, but if what I suspect is the case, it could be being accessed in the same way.

Also, even when the cache is cleared and I delete files, for example, in gmail, when I go back, the deleted or archived files are still there sometimes 2,3 or 4 times later.

Can you explain or expound the possibilities of what could be going on?

[ozrom1e]

Welcome to TSG....

To download HJTsetup.exe from TrendSecure To Download HijackThis go to the following at the File Repository
Click on the link below to Download HijackThis Self Installer:

http://www.trendsecure.com/portal/en...HJTInstall.exe

Save the file to your desktop.
Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\HijackThis.
Continue to click Next in the setup dialog boxes until you get to the Select Additional Tasks dialog.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialog box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
At the top of the Notepad HJT log screen, hit Edit then Select All then click Edit and then click Copy doing that copies the text to the clipboard, you won't see it yet....
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
A security expert with a gold shield to the right of their name should take a look at your log - please be patient.

[pilgrim33ad]

I use Hijack this all the time, and keep finding extra buttons, tools and content, but tonight this is all that came up:

Logfile of HijackThis v1.99.1
Scan saved at 10:31:31 PM, on 8/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Sys32Smm.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\HijackThis\HijackThis.exe

O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup

That spooler seems to be a constant issue: when the freezes and trouble come, it often is erased by stopping that and alg.exe---I've even disabled them on a filter.