Constant Browser Hijack Attempts: New Scan?
Mar 11, 2005Ok, new scan with updated hijackthis. Hopefully I will get an answer now using the new verion.
View 2 Replies
ADVERTISEMENT
Run Adaware Results In Constant Browser Hijack Attempts?
Mar 11, 2005After running Adaware, I keep getting browser hijack attempts even though I'm not surfing to questionable sites. I ran hijack this and here is the report.
View 3 Replies View RelatedLaptop Running Slow And Showing Signs Of Hijack Attempts?
Sep 4, 2006My laptop is running very slow and has been showing signs of hijacks. I have run Ad Aware and also Avast Virus Checker. I have Avast and AVG, Spyguard, Zone Alarm running and on my other machine running the same programs have no problems.
View 13 Replies View RelatedBSOD During PerfectDisc Scan Or Registry Mechanic Scan
Nov 19, 2006I went to use PerfectDisc yesterday, it suggested I do a bootup scan, I did, allowed it to do pagefile scan too. Ran fine. Then rebooted, went to do regular scan. it locked up on the Blue Screen of Death.
"Bad_Pool_Header" and gave some error info... 0x00000019, and so on.
Computer runs fine though otherwise, which is funny.
Then when I try to go to Registry Mechanic and scan, it goes all the way through, and on I believe the deepscan, it always goes to BSOD there. I think while it's in the HKEY section of current user.
There may be other programs that will cause the BSOD, but these 2 are the only ones so far. Please guide me through this....Anyone.
McAfee Virus Scan Takes Very Long To Scan
Aug 19, 2005I have McAfee Managed Virus Scan.When I scan my computer or a folder it takes a very long time. How would I speed things up?
View 5 Replies View RelatedWarnings In Scan Report - Did A Virus Scan
Mar 6, 2006I did a virus scan using Avira Antivir. There were no viruses on the computer bit it said there were 53 warnings which are as follows:
C:pagefile.sys
[WARNING] The file could not be opened!
C:Documents and SettingsLocalServiceNTUSER.DAT
[WARNING] The file could not be opened!
C:Documents and SettingsLocalService
Default Browser - Can Open MSN Messenger In Browser
Oct 4, 2005Is there any way to have a default Browser? I want every program that has links to open up in say. Firefox, I have tried setting it as my default browser in the settings option, and in "Set programs access and defaults". It works quite well... But can I get MSN Messenger to open up in that browser? When I click on my e-mails or MSN Space Etc. It opens up in Internet Explorer. Is there ANY way to open it in my default browser?
View 5 Replies View RelatedFour Or More Attempts To Get Running To Startup?
Sep 4, 2005Can anyone throw any light on my computers startup problems? 1.6Athlon 512mg 20gig HDD rock?motherboard running legit XP Home with SP2. HDD less than half full, defrag shows not necessary.The computer starts ok but at some point in the process, it varies, it will freeze/lock and will not unlock and has to be rebooted, which in itself may not happen at the first or even second attempt. This gosz on about four times, freezing at different points, and can even be
after I have successfully used the computer for 5 or 10 minutes. Eventually it will boot up and run without a problem.
Log To View Login Attempts In XP?
Aug 15, 2007Was wondering is there a way for me to know if someone has used a PC, or not, within the last month. Is there a Login Log, or PC activity Log in XP?
View 4 Replies View RelatedComputer Not Booting With Several Attempts
Oct 1, 2006Computer blue screens with no specific error msg and everytime i try to do pretty much anything with safe mode regular mode last known good configurations but here is it blue screens off of two different windows xp pro install cds. I ran several of their debugin tests that came up clean although there was an error about the cpu fan speed. The tech support guy said that i need to wipe the hard drive. I have tried booting with only one of the two ram chips and that didn't help at all.
View 10 Replies View RelatedArbitrary Attempts To Install Program?
Feb 18, 2008Frequently when I right click anything, and occassionally when I select items for the start menu on my windows XP pro machine, the installation process for a program I already have installed wil begin - it must be manually cancelled (some times 2 or three times) before the originally requested response is given. At first it was Norton Anti Virus which attempted to install. More recently, Contribute seems to be the favorite. (Both are already installed).
View 4 Replies View RelatedUnauthorized Access Attempts Originating?
Jul 5, 2008I have a win 2003 dedicated server. My datacenter person has sent given report. I would like to know what indicates the report.
View 1 Replies View RelatedUnwanted Attempts To Access The Internet?
Sep 20, 2005Norton keeps telling me that several programs are atempting to access the internet. How do I delete them?
View 1 Replies View RelatedAt Powerup, PC Attempts To Boot From A: Drive?
Nov 8, 2007Win XP Sp2, Dell 4100, HD 200gb. Bios boot order HD,CD,Floppy. After receiving msg.."Invalid Boot Diskette", "Insert Boot Diskette in A:" Ctrl-Alt-Del now boots system from C: This as a result of a motherboard failure and rebuild of C:
View 10 Replies View RelatedIE 7 Crashes Whenever Attempts To Load A Pdf File?
Sep 7, 2007I dislike MS but I would really like to know where to go in IE to fix its's linking to Adobe Reader 7.
View 3 Replies View RelatedBrowser Opening Causes All Other Browser Windows
Aug 24, 2005I am half way computer literate, but this one has me. I am hoping someone can tell me where to look. When I open Internet Explorer, my home page (www.google.com) opens.When it is finished loading, it automatically redirets to yahoo mail login page. The catch is, all my browsers windows that are open will be changed too. If I hit "stop" before the page is loaded, then hit "refresh", this action does not occur. I have Microsoft updates automatically downloade do my computer. I have the latest MacAfee anti-virus on my computer and have run the latest scan. I have run Microsoft beta spy-ware, ad aware and yahoo's version. I am not seeing anything.
View 2 Replies View RelatedCrashing After Log In - HiJack This Log
Feb 26, 2008Curious if anyone here can see any problems in here I can't.
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20733)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32oneLabsvsmon.exe..................
Could Someone Also Please Check This Hijack Log
Oct 20, 2005This is from my own computer ,it seems to have got slower and slower in starting up.
View 11 Replies View Related"attempts At Rebooting Had Failed" - Pc Wont Boots
Jun 6, 2006I recently downloaded a service pack for XP, but when I re-started the computer, it got stuck in the middle of the re-boot, tried several times to start it with no success and after a while it just gave me an error message saying that the attempts at rebooting had failed.
View 3 Replies View RelatedHijack This Log After Fixing Log On Log Off Loop
Oct 8, 2009i was reading an old thread about the log on log off loop because my computer was expirencing the same difficulties, i managed to fix the promblem and log back on, but the end of the old thread i was reading(expired now) said to run hijack this and to send in the log file, so im sending mine now to avoid this promblem in the future,can someone tell me if there is still something wrong with my computer and i have a dell inspiron 1100 sp3.
this is my log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:02:11 AM, on 10/8/2009
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32hkcmd.exe
C:WINDOWSSystem32igfxtray.exe
C:Program FilesNETGEARWPN511UtilityWPN511.exe
C:WINDOWSBCMSMMSG.exe
C:WINDOWSsystem32ctfmon.exe
C:Documents and SettingsOwnerApplication DataU335155111AD82C629LaunchPad.exe
F:Blow your mindHijackThis.exe
C:Documents and SettingsOwnerApplication DataU335155111AD82C629285E6953-BF3C-4445-9376-3FE5D7F645B2ExecinSignupShield.exe
C:WINDOWSSystem32wuauclt.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O4 - HKLM..Run: [IgfxTray] C:WINDOWSSystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSSystem32hkcmd.exe
O4 - HKLM..Run: [AS00_WPN511] C:Program FilesNETGEARWPN511UtilityWPN511.exe -hide
O4 - HKLM..Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSSystem32ctfmon.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb
elated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb
elated.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX� - C:Program FilesMAGIXCommonDatabaseinfbserver.exe
--
End of file - 2272 bytes
Logfile Of Hijack V1.99.0 - Check This Log
Jan 14, 2005Logfile of HijackThis v1.99.0 Scan saved at 2:30:42 PM, on 01/14/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe............
PC Keeps Crashing - Hijack Log Included
Feb 12, 2008Not sure what the problem is, PC just keeps freezing up on me.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:08:26, on 12/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Computer Is Rebooting On It's Own/Event Log And Hijack Log
Feb 18, 2008Programs closing out on their own or just hanging up.
Below are two logs you might need to help me. I've tried a system restore but it does not have any dates prior to Feb 4th which is also odd because it's always been on. I've run Spybot and Ad-Aware and AVG with no luck.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:27:32 PM, on 2/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSSystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:Program FilesLavasoftAd-Aware 2007aawservice.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32PackethSvc.exe
C:Program FilesCommon FilesAOLACSAOLAcsd.exe
C:PROGRA~1GrisoftAVG7avgamsvr.exe
C:PROGRA~1GrisoftAVG7avgupsvc.exe
C:PROGRA~1GrisoftAVG7avgemc.exe
C:WINDOWSSystem32svchost.exe
c:PROGRA~1mcafee.comvsomcvsrte.exe
C:WINDOWSSystem32
vsvc32.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesViewpointCommonViewpointService.exe
C:Program Filesmcafee.comVSOmcshield.exe
C:windowssystemhpsysdrv.exe
C:HPKBDKBD.EXE
C:Program FilesWildTangentDDCDDCManagerDDCMan.exe
C:Program FilesRealRealPlayerRealPlay.exe
C:Program FilesCommon FilesAOL1192911245eeAOLSoftware.exe
C:Program FilesSeagateSystemTrayStxMenuMgr.exe
C:Program FilesBellSouthAMBellSouthAlertManager.exe
C:Program FilesBellsouthHelpCenter40binsprtcmd.exe
C:PROGRA~1GrisoftAVG7avgcc.exe
C:Program FilesJavajre1.6.0_03injusched.exe
C:Program FilesCommon FilesAOLLoaderaolload.exe
C:Program FilesMacrogamingSweetIMSweetIM.exe
C:PROGRA~1EROKN~1FreedomFreedom.exe
C:Program FilesSpybot - Search & DestroyTeaTimer.exe
C:Program FilesCreativeSync Manager UnicodeCTSyncU.exe
C:Program FilesWindows Media PlayerWMPNSCFG.exe
C:Program FilesAOL 9.1waol.exe
C:Program FilesCommon FilesAOLLoaderaolload.exe
C:WINDOWSexplorer.exe
C:Program FilesAOL 9.1shellmon.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:WINDOWSsystem32wuauclt.exe
C:Documents and SettingsHijack thisHijackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://us4.hpwis.com/
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://srch-us4.hpwis.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://hometab.bellsouth.net/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://srch-us4.hpwis.com/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://srch-us4.hpwis.com/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://srch-us4.hpwis.com/
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://home.sweetim.com
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = http://srch-us4.hpwis.com/
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:Program FilesAOLAOL Toolbar 5.0aoltb.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:PROGRA~1Yahoo!CompanionInstallscpnyt.dll (file missing)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:PROGRA~1Yahoo!CompanionInstallscpnyt.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx
O2 - BHO: AT&T Toolbar - {4E7BD74F-2B8D-469E-8CBD-FD60BB9AAE2E} - C:PROGRA~1BLSTOO~1BLSTOO~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: Freedom BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:Program Filesero KnowledgeFreedomFreeBHOR.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:Program FilesYahoo!Commonyiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_03inssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:Program FilesAOLAOL Toolbar 5.0aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesWindows Live Toolbarmsntb.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:Program FilesMicrosoft MoneySystemmnyviewer.dll
O3 - Toolbar: &Zero-Knowledge Freedom - {FA91B828-F937-4568-82C1-843627E63ED7} - C:Program Filesero KnowledgeFreedomBandObjs.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:Program FilesAOLAOL Toolbar 5.0aoltb.dll
O3 - Toolbar: AT&T Toolbar - {4E7BD74F-2B8D-469E-8CBD-FD60BB9AAE2E} - C:PROGRA~1BLSTOO~1BLSTOO~1.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:PROGRA~1Yahoo!CompanionInstallscpnyt.dll (file missing)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesWindows Live Toolbarmsntb.dll
O4 - HKLM..Run: [hpsysdrv] c:windowssystemhpsysdrv.exe
O4 - HKLM..Run: [KBD] C:HPKBDKBD.EXE
O4 - HKLM..Run: [DDCM] "C:Program FilesWildTangentDDCDDCManagerDDCMan.exe" -Background
O4 - HKLM..Run: [DDCActiveMenu] "C:Program FilesWildTangentDDCActiveMenuDDCActiveMenu.exe" -boot
O4 - HKLM..Run: [Recguard] C:WINDOWSSMINSTRECGUARD.EXE
O4 - HKLM..Run: [IgfxTray] C:WINDOWSSystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSSystem32hkcmd.exe
O4 - HKLM..Run: [S3TRAY2] S3tray2.exe
O4 - HKLM..Run: [PS2] C:WINDOWSsystem32ps2.exe
O4 - HKLM..Run: [VirusScan Online] C:Program Filesmcafee.comVSOmcvsshld.exe
O4 - HKLM..Run: [MCAgentExe] C:Program Filesmcafee.comAgentmcagent.exe
O4 - HKLM..Run: [MCUpdateExe] C:Program Filesmcafee.comAgentmcupdate.exe /embedding
O4 - HKLM..Run: [RealTray] C:Program FilesRealRealPlayerRealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM..Run: [HostManager] C:Program FilesCommon FilesAOL1192911245eeAOLSoftware.exe
O4 - HKLM..Run: [StxTrayMenu] "C:Program FilesSeagateSystemTrayStxMenuMgr.exe"
O4 - HKLM..Run: [BellSouthAlertManager.exe] "C:Program FilesBellSouthAMBellSouthAlertManager.exe" /AUTORUN
O4 - HKLM..Run: [HelpCenter4.1] C:Program FilesBellsouthHelpCenter40binsprtcmd.exe /P HelpCenter4.1
O4 - HKLM..Run: [AVG7_CC] C:PROGRA~1GrisoftAVG7avgcc.exe /STARTUP
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_03injusched.exe"
O4 - HKLM..Run: [FastAccess Help] C:Program FilesBellSouth Application Managementcontent..Start.exe
O4 - HKLM..Run: [SweetIM] C:Program FilesMacrogamingSweetIMSweetIM.exe
O4 - HKLM..Run: [googletalk] C:Program FilesGoogleGoogle Talkgoogletalk.exe /autostart
O4 - HKLM..RunOnce: [*Restore] C:WINDOWSsystem32
estore
strui.exe -i
O4 - HKCU..Run: [Zero Knowledge Freedom] C:PROGRA~1EROKN~1FreedomFreedom.exe
O4 - HKCU..Run: [Microsoft Works Update Detection] c:Program FilesMicrosoft WorksWkDetect.exe
O4 - HKCU..Run: [SweetIM] C:Program FilesMacrogamingSweetIMSweetIM.exe
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesWindows LiveMessengerMsnMsgr.Exe" /background
O4 - HKCU..Run: [CTSyncU.exe] "C:Program FilesCreativeSync Manager UnicodeCTSyncU.exe"
O4 - HKCU..Run: [AOL Fast Start] "C:Program FilesAOL 9.1AOL.EXE" -b
O4 - HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 - HKUSS-1-5-19..Run: [AVG7_Run] C:PROGRA~1GrisoftAVG7avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-20..Run: [AVG7_Run] C:PROGRA~1GrisoftAVG7avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUSS-1-5-18..Run: [AVG7_Run] C:PROGRA~1GrisoftAVG7avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [AVG7_Run] C:PROGRA~1GrisoftAVG7avgw.exe /RUNONCE (User 'Default user')
O4 - .DEFAULT User Startup: AutoPlay.exe (User 'Default user')
O8 - Extra context menu item: &AOL Toolbar Search - c:program filesaolaol toolbar 5.0
esourcesen-USlocalsearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:Program FilesWindows Live Toolbarmsntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_03inssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_03inssv.dll
O9 - Extra button: MktBrowser - {17A27031-71FC-11d4-815C-005004D0F1FA} - C:Program FilesMarketBrowserlmtMarketBrowser_Launch.xpy
O9 - Extra 'Tools' menuitem: MarketBrowser - {17A27031-71FC-11d4-815C-005004D0F1FA} - C:Program FilesMarketBrowserlmtMarketBrowser_Launch.xpy
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:Program FilesAOLAOL Toolbar 5.0aoltb.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:Program FilesYahoo!Commonyiesrvc.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:WINDOWSSystem32Shdocvw.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:Documents and SettingsOwnerStart MenuProgramsIMVURun IMVU.lnk
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:Program FilesMicrosoft MoneySystemmnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O12 - Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:Program FilesYahoo!CommonYinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1193621932743
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1193622525202
O17 - HKLMSystemCCSServicesTcpip..{9FE0C803-14C4-45C9-A72D-398BC835A8D4}: NameServer = ,
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:Program FilesLavasoftAd-Aware 2007aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:Program FilesCommon FilesAOLACSAOLAcsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSSystem32Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVG7avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVG7avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVG7avgemc.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - C:Program Filesmcafee.comVSOmcshield.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Mcafee.com Corporation - c:PROGRA~1mcafee.comvsomcvsrte.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32
vsvc32.exe
O23 - Service: Virtual NIC Service (PackethSvc) - America Online, Inc. - C:WINDOWSSystem32PackethSvc.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:Program FilesViewpointCommonViewpointService.exe
--
End of file - 12660 bytes
Reviewing And Cleaning Hijack This Log File?
Apr 30, 2006dont know how to reviewing and cleaning Hijack this log file?
View 11 Replies View RelatedSlow Running Computer - Hijack Log
Jan 13, 2005could someone check this HJT log please?
Logfile of HijackThis v1.99.0
Scan saved at 19:48:20, on 13/01/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Computer Running Slow - Hijack Log
Feb 19, 2005the hijackthis log and tell me why my computer is running slow?
Logfile of HijackThis v1.99.1
Scan saved at 10:31:23 PM, on 2/19/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Computer Is Extremely Slow - Hijack This Log
May 10, 2005I used spybot and removed 111 objects, adware 48 and Microsoft Antispyware tool 20 objects. However my computer is still running slow. My hijackthis log is attached please help.
Logfile of HijackThis v1.98.2
Scan saved at 4:23:49 PM, on 5/10/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Deleting Unnecessary Items From Hijack Log?
Dec 23, 2005If someone could advise me on what to remove from hijack log. I ran AdAware before I made the log. I'll check back in an hour or so.
View 12 Replies View RelatedSlow Running - Hijack Log Attached
Mar 20, 2007I've got win xp, recently it is running very slowly especially when I try to get on the internet. I am attaching hicjackthis log, are there any obvious problems, I have a hunch that there are some programs which I don't use which slow down the system. Any suggestions? Thanks Logfile of Trend Micro HijackThis v2.0.0 (BETA) Scan saved at 22:02:05, on 20/03/2007 Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal Running processes: C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWS system32lsass.exe C:WINDOWSsystem32svchost.exe C:Program FilesWindows DefenderMsMpEng.exe C:WINDOWSSystem32svchost.exe C:WINDOWS system32spoolsv.exe D:avasy anti virusaswUpdSv.exe D:avasy anti virusashServ.exe C:WINDOWSsystem32 vsvc32.exe C:WINDOWS system32svchost.exe C:WINDOWSExplorer.EXE C:Program FilesCanonCALCALMAIN.exe D:avasy anti virusashMaiSv.exe D:AVASYA~1ashDisp.exe
D:scannerHP Share-to-Webhpgs2wnd.exe C:Program FilesPicasa2PicasaMediaDetector.exe C:WINDOWSsystem32LVCOMSX.EXE C:Program Files LogitechVideoLogiTray.exe C:Program FilesThomsonSpeedTouch USBDragdiag.exe C:Program FilesCommon FilesRealUpdate_OB ealsched.exe
D:avasy anti virusashWebSv.exe C:WINDOWSsystem32RUNDLL32.EXE C:Program FilesWindows DefenderMSASCui.exe C:WINDOWSsystem32 undll32.exe
D:Javainjusched.exe C:Program FilesQuickTimeqttask.exe D:iTunesiTunesHelper.exe C:WINDOWSsystem32ctfmon.exe C:Program FilesGoogle Google ToolbarNotifier1.2.1128.5462GoogleToolbarNotifier.exe C:Program FilesWireless DeviceWireless KeyboardMagickey.exe C:Program FilesWireless DeviceWireless MouseMouseAp.exe D:scannerHP Share-to-Webhpgs2wnf.exe C:Program FilesWireless DeviceWireless Keyboardosd.exe
C:Program FilesLogitechVideoFxSvr2.exe C:Program FilesiPodiniPodService.exe C:Program FilesInternet Exploreriexplore.exe D:Program Files weak uiHiJackThis_v2.exe R0 - HKCUSoftwareMicrosoftInternet Explorer Main,Start Page = http://news.bbc.co.uk/ R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:Javainssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program files googlegoogletoolbar4.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar4.dll
O4 - HKLM..Run: [avast!] D:AVASYA~1ashDisp.exe O4 - HKLM..Run: [Share-to-Web Namespace Daemon] D:scannerHP Share-to-Webhpgs2wnd.exe
O4 - HKLM..Run: [Picasa Media Detector] C:Program FilesPicasa2PicasaMediaDetector.exe O4 - HKLM..Run: [LVCOMSX] C:WINDOWSsystem32LVCOMSX.EXE O4 - HKLM..Run: [LogitechVideoRepair] C:Program FilesLogitechVideoISStart.exe O4 - HKLM..Run: [LogitechVideoTray] C:Program FilesLogitechVideoLogiTray.exe O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [NeroCheck] C:WINDOWSsystem32NeroCheck.exe O4 - HKLM..Run: [SpeedTouch USB Diagnostics] "C:Program FilesThomsonSpeedTouch USBDragdiag.exe" /icon O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OB
ealsched.exe" -osboot O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup O4 - HKLM..Run: [nwiz] nwiz.exe /install O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit O4 - HKLM..Run: [Windows Defender] "C:Program FilesWindows DefenderMSASCui.exe" -hideO4 - HKLM..Run: [SunJavaUpdateSched] "D:Javainjusched.exe" O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime O4 - HKLM..Run: [iTunesHelper] "D:iTunesiTunesHelper.exe" O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe O4 - HKCU..Run: [LogitechSoftwareUpdate] "C:Program Files Logitech VideoManifestEngine.exe" boot O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifier1.2.1128.5462GoogleToolbarNotifier.exe
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUSS-1-5-21-1214440339-2025429265-725345543-1004..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background (User 'Mary') O4 - HKUSS-1-5-21-1214440339-2025429265-725345543-1004..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifier1.2.1128.5462GoogleToolbarNotifier.exe (User 'Mary') O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM') O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeAcrobat 7.0Reader eader_sl.exe O4 - Global Startup: Enable Wireless Keyboard Driver.lnk = C:Program FilesWireless DeviceWireless KeyboardMagickey.exe O4 - Global Startup: Enable Wireless Optical Mouse Driver.lnk = C:Program FilesWireless DeviceWireless MouseMouseAp.exe O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE O8 - Extra context menu item: &Google Search - res://c:program filesgoogle GoogleToolbar2.dll /cmsearch.htmlO8 - Extra context menu item: &Translate English Word - res://c:program filesgoogleGoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:program filesgoogleGoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:program filesgoogleGoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:MICROS~1OFFICE11EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:program filesgoogleGoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://c:program filesgoogleGoogleToolbar2.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:Javainssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:Javainssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:MICROS~1OFFICE11REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe O15 - Trusted Zone: http://www.boots.co.uk O15 - Trusted Zone: http://www.skl-network.com O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.co/kos/english...an_unicode.cab
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/1f16/uploader2.cab O16 - DPF: {4E62C4DE-627D-4604-B157-4B7D6B09F02E} (AccountTracking Profile Manager Class) - https://moneymanager.egg.com/Pinsafe...nttracking.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5...ws-i586-jc.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandon demand.com/eval/cod/cabs/cssweb.cab O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab O17 - HKLMSystemCCSServicesTcpip..{DF43DB2B-C236-4154-B334-12818626C126}: NameServer = 212.139.132.5 212.139.132.4
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32rowseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32rowseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:avasy anti virusaswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - D:avasy anti virusashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - D:avasy anti virusashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - D:avasy anti virusashWebSv.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:Program FilesCanonCALCALMAIN.exe O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:Program FilesCommon FilesInstallShield Driver11Intel32IDriverT.exe (file missing) O23 - Service: iPod Service - Apple Computer, Inc. - C:Program FilesiPodiniPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32 vsvc32.exe
Slow Computer - Hijack Log Attached
Oct 13, 2005what I'm thinking is that I'm just going to have to pay & get this pc cleaned because after I go thru all the steps to correct it.later it starts freezing and stuff sooo bad that I always have to reset it like you do when you first by the pc because it won't let me estore pc using restore systems. So, here is my hijack this log. Logfile of HijackThis v1.99.1 Scan saved at 11:49:15 AM, on 10/13/2005
Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes:C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:WINDOWSSystem32svchost.exe C:WINDOWSExplorer.EXE C:WINDOWSsystem32spoolsv.exe C:windowssystemhpsysdrv.exe C:Program FilesHewlett-PackardDigital ImagingUnloadhpqcmon.exe C:Program FilesVERITAS SoftwareUpdate Managersgtray.exe C:WINDOWSsystem32dla fswctrl.exe
C:WINDOWSSystem32igfxtray.exe C:WINDOWSSystem32hkcmd.exe C:WINDOWSsystem32ps2.exe C:WINDOWSetbpokapoka75.exe C:WINDOWSSystem32w?auclt.exe
C:Program Filesapsiwtta.exe C:Program Fileshp center137903ProgramBackWeb-137903.exe c:Program FilesNorton AntiVirus avapsvc.exe
C:Program FilesInternet Exploreriexplore.exe C:Program Filesewidosecurity suiteSecuritySuite.exe C:Program FilesInternet Exploreriexplore.exe C:Program FilesHijackThisHijackThis.exe R1 - HKCUSoftwareMicrosoftInternet Explorer,SearchURL =http://www.24-7searching-and-more.com/sp2.php R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://us6.hpwis.com/
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://srch-us6.hpwis.com/ R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://www.24-7searching-and-more.com/sp2.php R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.24-7searching-and-more.com/sp2.php R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yahoo.com/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://us6.hpwis.com/ R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://srch-us6.hpwis.com/ R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://srch-us6.hpwis.com/ R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://srch-us6.hpwis.com/ R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://us6.hpwis.com/ R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://srch-us6.hpwis.com/ R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = http://srch-us6.hpwis.com/ R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = localhost O4 - HKLM..Run: [hpsysdrv] c:windowssystemhpsysdrv.exe O4 - HKLM..Run: [CamMonitor] c:Program FilesHewlett-PackardDigital ImagingUnloadhpqcmon.exe O4 - HKLM..Run: [StorageGuard] "C:Program FilesVERITAS SoftwareUpdate Managersgtray.exe" /r O4 - HKLM..Run: [dla] C:WINDOWSsystem32dla fswctrl.exe
O4 - HKLM..Run: [DDCActiveMenu] "C:Program FilesWildTangentDDCActiveMenuDDCActiveMenu.exe" -boot O4 - HKLM..Run: [Recguard] C:WINDOWSSMINSTRECGUARD.EXE O4 - HKLM..Run: [IgfxTray] C:WINDOWSSystem32igfxtray.exe O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSSystem32hkcmd.exe O4 - HKLM..Run: [PS2] C:WINDOWSsystem32ps2.exe O4 - HKLM..Run: [IST Service] C:Program FilesISTsvcistsvc.exe
O4 - HKLM..Run: [System service75] C:WINDOWSetbpokapoka75.exe O4 - HKCU..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background
O4 - HKCU..Run: [Mrqx] C:WINDOWSSystem32w?auclt.exe O4 - HKCU..Run: [Notn] "C:Program Filesapsiwtta.exe" -vt mt O4 - Global Startup: hp center.lnk = C:Program Fileshp center137903ProgramBackWeb-137903.exe O16 - DPF: Yahoo! Pyramids - http://download.games.yahoo.com/game...s/y/pyt1_x.cab O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com download.yaho...st20040510.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O20 - Winlogon Notify: igfxcui - C:WINDOWSSYSTEM32igfxsrvc.dll O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - c:Program FilesNorton AntiVirus avapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32 vsvc32.exe O23 - Service: Windows 32 Bit (Windows 32 Bit Drivers) - Unknown owner - C:WINDOWSWinVid32.exe
Slow Computer - Hijack Log Attached
Apr 11, 2007Computer seems to be slowed down, PLUS it seems to slow down its internet connection that is max 10 mips down, to a crawl, then it speeds back up. Cable claims all is okay on their end, and is something on my system. If someone can tell me if there is anything running in this HJ log that shouldn't be, or that I don't need to have running, Logfile of HijackThis v1.99.1 Scan saved at 1:21:21 PM, on 4/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes:
C:WINDOWSSystem32smss.exe C:WINDOWSsystem32winlogon.exe C:WINDOWSsystem32services.exe C:WINDOWSsystem32lsass.exe C:WINDOWSsystem32svchost.exe C:Windows DefenderMsMpEng.exe C:WINDOWSsystem32svchost.exe C:Program FilesCommon FilesSymantec SharedccProxy.exe C:Program FilesCommon FilesSymantec SharedccSetMgr.exe C:Norton Personal FirewallISSVC.exe C:Program FilesCommon FilesSymantec SharedSNDSrvc.exe C:Program FilesCommon FilesSymantec SharedSPBBCSPBBCSvc.exe C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe C:WINDOWSExplorer.EXE C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe C:WINDOWSsystem32rsvc01a.exe
C:WINDOWSsystem32rss01a.exe C:WINDOWSsystem32spoolsv.exe C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe C:WINDOWSsystem32CTsvcCDA.EXE C:Norton SystemWorksNorton AntiVirusIWPNPFMntor.exe C:NORTON~1NORTON~1NPROTECT.EXE C:WINDOWSsystem32PSIService.exe C:NORTON~1NORTON~1SPEEDD~1NOPDB.EXE C:WINDOWSsystem32svchost.exe C:WINDOWSsystem32WFXSVC.EXE C:WINDOWSsystem32MsPMSPSv.exe C:WINDOWSsystem32hkcmd.exe C:Windows DefenderMSASCui.exe C:Program FilesCommon FilesSymantec SharedccApp.exe C:WINDOWSsystem32wfxsnt40.exe C:Program FilesMicrosoft IntelliType Proitype.exe C:WINDOWSsystem32ctfmon.exe C:LogitechMouseWaresystemem_exec.exe C:WinZipwinzip32.exe C:DoughijackthisHijackThis.exe R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.cnn.com/ R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = ftp=localhost:8118;gopher=localhost:8118;http=localhost:8118;https=localhos t:8118;socks=localhost:8118 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll O2 - BHO: Norton Personal Firewall - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:Program FilesCommon FilesSymantec SharedAdBlockingNISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:Norton SystemWorksNorton AntiVirusNavShExt.dll O3 - Toolbar: Norton Personal Firewall - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:Program FilesCommon FilesSymantec SharedAdBlockingNISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:Norton SystemWorksNorton AntiVirusNavShExt.dll O4 - HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe O4 - HKLM..Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE O4 - HKLM..Run: [Windows Defender] "C:Windows DefenderMSASCui.exe" -hide O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime O4 - HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe" O4 - HKLM..Run: [Symantec NetDriver Monitor] C:PROGRA~1SYMNET~1SNDMon.exe /Consumer O4 - HKLM..Run: [WinFaxAppPortStarter] wfxsnt40.exe O4 - HKLM..Run: [itype] "c:Program FilesMicrosoft IntelliType Proitype.exe" O4 - HKLM..RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:WINDOWSsystem32sti_ci.dll,WiaCreateWizardMenu O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [Norton SystemWorks] "C:Norton SystemWorkscfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:MICROS~1OFFICE11EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Javain pjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Javain pjpi150_04.dll O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://www.activation.rr.com/install...ds/tgctlcm.cab O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} - http://a516.g.akamai.net/f/516/25175...at-no-eula.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1155682376421 O20 - Winlogon Notify: igfxcui - C:WINDOWSSYSTEM32igfxsrvc.dll O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dll O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:WINDOWSsystem32rsvc01a.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccProxy.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccSetMgr.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:WINDOWSsystem32CTsvcCDA.EXE O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:Norton Personal FirewallISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:Norton SystemWorksNorton AntiVirus avapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:Norton SystemWorksNorton AntiVirusIWPNPFMntor.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:NORTON~1NORTON~1NPROTECT.EXE O23 - Service: ProtexisLicensing - Unknown owner - C:WINDOWSsystem32PSIService.exe O23 - Service: SAVScan - Symantec Corporation - C:Norton SystemWorksNorton AntiVirusSAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:PROGRA~1COMMON~1SYMANT~1SCRIPT~1SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedSNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedSPBBCSPBBCSvc.exe O23 - Service: Speed Disk service - Symantec Corporation - C:NORTON~1NORTON~1SPEEDD~1NOPDB.EXE O23 - Service: Symantec Core LC - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe O23 - Service: WinFax PRO (wfxsvc) - Symantec Corporation - C:WINDOWSsystem32WFXSVC.EXE