Home › Forums › Archives › Computer Support › Computer Support Discussion › my hijackthis logfile
- This topic has 1 reply, 2 voices, and was last updated 21 years, 9 months ago by
Tigerblade.
-
AuthorPosts
-
January 5, 2005 at 9:57 pm #15813
pacific
MemberI have been getting pop ups in Internet Explorer that I cannot get rid of by Spybot or Ad-aware. Here is my logfile, can you please tell me what to keep and what to delete as I am not sure.. Thanks =]
Logfile of HijackThis v1.99.0
Scan saved at 4:55:24 PM, on 1/5/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32driversKodakCCS.exe
C:WINDOWSsystem32pctspk.exe
C:WINDOWSsystem32ScsiAccess.EXE
C:WINDOWSSystem32svchost.exe
C:Program FilesWZCBDL ServiceWZCBDLS.exe
C:Program FilesD-LinkAir USB UtilityAirCFG.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:Program FilesViewpointViewpoint ManagerViewMgr.exe
C:Program FilesSupport.combintgcmd.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Documents and SettingsShawn GebertApplication Datascic.exe
C:WINDOWSsystem32??plorer.exe
C:Program FilesKodakKODAK Software Updater7288971ProgramKodak Software Updater.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesWindows Media Playerwmplayer.exe
C:WINDOWSSystem32imapi.exe
C:Program FilesAIMaim.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:Program FilesInternet Exploreriexplore.exe
C:DOCUME~1SHAWNG~1LOCALS~1TempTemporary Directory 1 for hijackthis[1].zipHijackThis.exeR0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
O2 – BHO: (no name) – {378DA7B6-1253-408D-0235-3B3626EEA894} – C:WINDOWSsystem32euvt.dll
O3 – Toolbar: (no name) – {BA52B914-B692-46c4-B683-905236F6F655} – (no file)
O4 – HKLM..Run: [D-Link Air USB Utility] C:Program FilesD-LinkAir USB UtilityAirCFG.exe
O4 – HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 – HKLM..Run: [QuickTime Task] “C:Program FilesQuickTimeqttask.exe” -atboottime
O4 – HKLM..Run: [ViewMgr] C:Program FilesViewpointViewpoint ManagerViewMgr.exe
O4 – HKLM..Run: [Windows Manager] winamp.exe
O4 – HKLM..Run: [tgcmd] “C:Program FilesSupport.combintgcmd.exe” /server /startmonitor /deaf
O4 – HKLM..Run: [TkBellExe] “C:Program FilesCommon FilesRealUpdate_OBrealsched.exe” -osboot
O4 – HKCU..Run: [MSMSGS] “C:Program FilesMessengermsmsgs.exe” /background
O4 – HKCU..Run: [Rueu] C:Documents and SettingsShawn GebertApplication Datascic.exe
O4 – HKCU..Run: [Rqkqfsiq] C:WINDOWSsystem32??plorer.exe
O4 – Global Startup: Adobe Gamma Loader.lnk = ?
O4 – Global Startup: Kodak EasyShare software.lnk = C:Program FilesKodakKodak EasyShare softwarebinEasyShare.exe
O4 – Global Startup: Kodak software updater.lnk = C:Program FilesKodakKODAK Software Updater7288971ProgramKodak Software Updater.exe
O8 – Extra context menu item: &AOL Toolbar search – res://C:Program FilesAOL Toolbartoolbar.dll/SEARCH.HTML
O9 – Extra button: Messenger – {4528BBE0-4E08-11D5-AD55-00010333D0AD} – C:Program FilesYahoo!Messengeryhexbmes0521.dll
O9 – Extra ‘Tools’ menuitem: Yahoo! Messenger – {4528BBE0-4E08-11D5-AD55-00010333D0AD} – C:Program FilesYahoo!Messengeryhexbmes0521.dll
O9 – Extra button: AIM – {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} – C:Program FilesAIMaim.exe
O9 – Extra button: (no name) – {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} – (no file)
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:Program FilesMessengermsmsgs.exe
O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:Program FilesMessengermsmsgs.exe
O16 – DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) – http://help.bellsouth.net/sdccommon/download/tgctlcm.cab
O16 – DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100547544014
O16 – DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) – http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
O16 – DPF: {9E17A5F9-2B9C-4C66-A592-199A4BA1FBC8} – http://pictures06.aim.com/ygp/aol/plugin/upf/AOLUPF.en-US-AIM.9.5.1.7.cab
O16 – DPF: {B9F3009B-976B-41C4-A992-229DCCF3367C} (CoAxTrack Class) – http://ns-radio.netscape.com/radio/cabs/ampx.cab
O16 – DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} – http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O23 – Service: avast! iAVS4 Control Service – Unknown – C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 – Service: avast! Antivirus – Unknown – C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 – Service: avast! Mail Scanner – ALWIL Software – C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 – Service: Kodak Camera Connection Software – Eastman Kodak Company – C:WINDOWSsystem32driversKodakCCS.exe
O23 – Service: PCTEL Speaker Phone – PCtel, Inc. – C:WINDOWSsystem32pctspk.exe
O23 – Service: ScsiAccess – Unknown – C:WINDOWSsystem32ScsiAccess.EXE
O23 – Service: WZCBDL Service – D-Link – C:Program FilesWZCBDL ServiceWZCBDLS.exeJanuary 6, 2005 at 12:05 am #111205Tigerblade
Participantrunning processes:
pctspk.exe – this is up to you if you want to remove…
“C:WINDOWSsystem32??plorer.exe” – that’s not right… shouldnt come up. have hijackthis fix that.
“realsched.exe” – doesnt need to be running unless you’re a big fan of realplayer… by default everytime you open RP it starts this process tooother entries: remove the following…
O4 – HKLM..Run: [QuickTime Task] “C:Program FilesQuickTimeqttask.exe” -atboottime
O4 – HKLM..Run: [ViewMgr] C:Program FilesViewpointViewpoint ManagerViewMgr.exe
O4 – HKCU..Run: [MSMSGS] “C:Program FilesMessengermsmsgs.exe” /background
O8 – Extra context menu item: &AOL Toolbar search – res://C:Program FilesAOL Toolbartoolbar.dll/SEARCH.HTML
O9 – Extra button: AIM – {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} – C:Program FilesAIMaim.exe
O9 – Extra button: (no name) – {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} – (no file)
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:Program FilesMessengermsmsgs.exe
O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:Program FilesMessengermsmsgs.exethe rest seems harmless enough to keep
-
AuthorPosts
- You must be logged in to reply to this topic.