Forum Replies Created
-
Posts
-
Logfile of HijackThis v1.99.1
Scan saved at 12:20:31 PM, on 6/16/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSExplorer.EXE
C:Program FilesCommon FilesSymantec SharedccProxy.exe
C:Program FilesCommon FilesSymantec SharedccSetMgr.exe
C:Program FilesNorton Internet SecurityISSVC.exe
C:Program FilesCommon FilesSymantec SharedSNDSrvc.exe
C:Program FilesCommon FilesSymantec SharedSPBBCSPBBCSvc.exe
C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32GEARSec.exe
C:Program FilesNorton Internet SecurityNorton AntiVirusnavapsvc.exe
C:Program FilesNorton SystemWorksNorton GhostAgentPQV2iSvc.exe
C:PROGRA~1NORTON~2NORTON~1NPROTECT.EXE
C:WINDOWSsystem32nvsvc32.exe
C:Program FilesNorton Internet SecurityNorton AntiVirusSAVScan.exe
C:PROGRA~1NORTON~2NORTON~1SPEEDD~1NOPDB.EXE
C:WINDOWSsystem32svchost.exe
C:Program FilesWebrootSpy SweeperWRSSSDK.exe
C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe
C:WINDOWSsystem32wdfmgr.exe
C:Program FilesUPSMONUPSMON_Service.Exe
C:WINDOWSsystem32WFXSVC.EXE
C:Program FilesWinFaxWFXMOD32.EXE
C:WINDOWSSystem32alg.exe
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:Program FilesUPSMONUPSMON.exe
C:Program FilesMessengerPlus! 3MsgPlus.exe
C:WINDOWSsystem32wfxsnt40.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMSGTAGMSGTAG.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesMSN Messengermsnmsgr.exe
C:Program FilesNetscapeCommunicatorProgramnetscape.exe
C:PROGRA~1ALURIA~1ASEASE.exe
C:Documents and SettingsAdministratorDesktophijackthisHijackThis.exeR3 – Default URLSearchHook is missing
N1 – Netscape 4: user_pref(“browser.startup.homepage”, “”); (C:Program FilesNetscapeUserssaritprefs.js)
O2 – BHO: AcroIEHlprObj Class – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:Program FilesAdobeAcrobat 6.0AcrobatActiveXAcroIEHelper.dll
O2 – BHO: (no name) – {53707962-6F74-2D53-2644-206D7942484F} – C:Program FilesSpybot – Search & DestroySDHelper.dll
O2 – BHO: Norton Internet Security – {9ECB9560-04F9-4bbc-943D-298DDF1699E1} – C:Program FilesCommon FilesSymantec SharedAdBlockingNISShExt.dll
O2 – BHO: AcroIEToolbarHelper Class – {AE7CD045-E861-484f-8273-0445EE161910} – C:Program FilesAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll
O2 – BHO: NAV Helper – {BDF3E430-B101-42AD-A544-FADC6B084872} – C:Program FilesNorton Internet SecurityNorton AntiVirusNavShExt.dll
O2 – BHO: FlashFXP Helper for Internet Explorer – {E5A1691B-D188-4419-AD02-90002030B8EE} – C:PROGRA~1FlashFXPIEFlash.dll
O3 – Toolbar: Norton Internet Security – {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} – C:Program FilesCommon FilesSymantec SharedAdBlockingNISShExt.dll
O3 – Toolbar: Norton AntiVirus – {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} – C:Program FilesNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 – Toolbar: Adobe PDF – {47833539-D0C5-4125-9FA8-0819E2EAAC93} – C:Program FilesAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll
O3 – Toolbar: FlashGet Bar – {E0E899AB-F487-11D5-8D29-0050BA6940E3} – C:PROGRA~1FlashGetfgiebar.dll
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 – HKLM..Run: [ccApp] “C:Program FilesCommon FilesSymantec SharedccApp.exe”
O4 – HKLM..Run: [Symantec NetDriver Monitor] C:PROGRA~1SYMNET~1SNDMon.exe /Consumer
O4 – HKLM..Run: [UPSMON] C:Program FilesUPSMONUPSMON.exe
O4 – HKLM..Run: [MessengerPlus3] “C:Program FilesMessengerPlus! 3MsgPlus.exe”
O4 – HKLM..Run: [WinFaxAppPortStarter] wfxsnt40.exe
O4 – HKLM..Run: [SpyCop ScanCheck] C:Program FilesCommon FilesMicrosoft SharedMAIN.EXE /LASTSCAN
O4 – HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 – HKCU..Run: [MSGTAG] “C:Program FilesMSGTAGMSGTAG.exe” /startup
O4 – HKCU..Run: [Spyware Doctor] “C:Program FilesSpyware Doctorswdoctor.exe” /Q
O4 – HKCU..Run: [MSMSGS] “C:Program FilesMessengermsmsgs.exe” /background
O4 – Startup: ASE Scheduler.lnk = C:Program FilesAluria SoftwareASEASE Scheduler.exe
O8 – Extra context menu item: &יצא ל- Microsoft Excel – res://C:PROGRA~1MICROS~1Office10EXCEL.EXE/3000
O8 – Extra context menu item: Download All by FlashGet – C:Program FilesFlashGetjc_all.htm
O8 – Extra context menu item: Download using FlashGet – C:Program FilesFlashGetjc_link.htm
O9 – Extra button: (no name) – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:Program FilesJavajre1.5.0_02binnpjpi150_02.dll
O9 – Extra ‘Tools’ menuitem: Sun Java Console – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:Program FilesJavajre1.5.0_02binnpjpi150_02.dll
O9 – Extra button: FlashGet – {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} – C:PROGRA~1FlashGetflashget.exe
O9 – Extra ‘Tools’ menuitem: &FlashGet – {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} – C:PROGRA~1FlashGetflashget.exe
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:Program FilesMessengermsmsgs.exe
O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:Program FilesMessengermsmsgs.exe
O16 – DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5co…b?1117803974951
O16 – DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) – http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 – DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) – http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 – DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) – http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 – DPF: {CBF2C04B-50B5-4C7B-8D49-ACB62582F8E6} (LauncherV1 Class) – http://chat-basic.nana.co.il/Cabs/launcher.cab
O17 – HKLMSystemCCSServicesTcpip..{9F47A89C-0683-48CE-9764-958B0D275F56}: NameServer = 212.143.212.143 194.90.1.5
O23 – Service: Symantec Event Manager (ccEvtMgr) – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
O23 – Service: Symantec Network Proxy (ccProxy) – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedccProxy.exe
O23 – Service: Symantec Password Validation (ccPwdSvc) – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedccPwdSvc.exe
O23 – Service: Symantec Settings Manager (ccSetMgr) – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedccSetMgr.exe
O23 – Service: GEARSecurity – GEAR Software – C:WINDOWSSystem32GEARSec.exe
O23 – Service: ISSvc (ISSVC) – Symantec Corporation – C:Program FilesNorton Internet SecurityISSVC.exe
O23 – Service: Norton AntiVirus Auto-Protect Service (navapsvc) – Symantec Corporation – C:Program FilesNorton Internet SecurityNorton AntiVirusnavapsvc.exe
O23 – Service: Norton Ghost – Symantec Corporation – C:Program FilesNorton SystemWorksNorton GhostAgentPQV2iSvc.exe
O23 – Service: Norton Unerase Protection (NProtectService) – Symantec Corporation – C:PROGRA~1NORTON~2NORTON~1NPROTECT.EXE
O23 – Service: NVIDIA Display Driver Service (NVSvc) – NVIDIA Corporation – C:WINDOWSsystem32nvsvc32.exe
O23 – Service: Pml Driver HPZ12 – HP – C:WINDOWSsystem32HPZipm12.exe
O23 – Service: SAVScan – Symantec Corporation – C:Program FilesNorton Internet SecurityNorton AntiVirusSAVScan.exe
O23 – Service: ScriptBlocking Service (SBService) – Symantec Corporation – C:PROGRA~1COMMON~1SYMANT~1SCRIPT~1SBServ.exe
O23 – Service: Symantec Network Drivers Service (SNDSrvc) – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedSNDSrvc.exe
O23 – Service: Symantec SPBBCSvc (SPBBCSvc) – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedSPBBCSPBBCSvc.exe
O23 – Service: Speed Disk service – Symantec Corporation – C:PROGRA~1NORTON~2NORTON~1SPEEDD~1NOPDB.EXE
O23 – Service: Webroot Spy Sweeper Engine (svcWRSSSDK) – Webroot Software, Inc. – C:Program FilesWebrootSpy SweeperWRSSSDK.exe
O23 – Service: Symantec Core LC – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedCCPD-LCsymlcsvc.exe
O23 – Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) – TuneUp Software GmbH – C:Program FilesTuneUp Utilities 2004WinStylerThemeSvc.exe
O23 – Service: UPSMONService – Unknown owner – C:Program FilesUPSMONUPSMON_Service.Exe
O23 – Service: WinFax PRO (wfxsvc) – Symantec Corporation – C:WINDOWSsystem32WFXSVC.EXEThank you for you help, I will give it a try then and ofcourse will create a restore point (Im running XP). hopefully they’ll both work well
Quote:quote:Originally posted by DavidWindows NT, 2000, XP and 2003 have a disk management utility in Windows setup, I wouldn’t recommend anything unless I know the size of your Hard disk.
Thanks for taking the time to reply.
Yes, currently I am using 32bit version, but it sounds like its the standard version when installing XP so thats good enough for me.
my HD size is 40GB and like I said before I would like to have one partition just for windows but I’m not sure about the size I need to make it and also, when exactly am I asked to create the partitions – during the installation or afterwards.
I use Ad-Aware, Spybot S&D, Pest Patrol and recently installed SpySweeper as I heard good things about it. its good to have more than one so that one can find what the other couldnt.
Doubt if you got infected yourself.
I also got one of those e-mails from someone’s provider saying they recieved an e-mail from me with a virus or something like that stating my yahoo account but I know for a fact I dont even open those e-mails, norton catch them straight away. I dont even recognize all those people I have supposedly sent e-mails to. it might be that one of our friends is infected and it scans through thier address book or might be collecting from sites or mailing lists of some sorts, who knows.
Lately I’m getting them in pairs. I know that if norton catch one infected e-mail, it means that another is on the way.
Thanks for all the help everyone and for the information provided, I will check more closely into it.
Well I dont really use the ‘remote assistance’ so I dont need to have ‘Terminal services’ enabled. as far as I know if someone has your computer address/IP they can use and control your computer through ‘Terminal Services’ from a far. so until I will need to use ‘remote assistence’ I guess its better to have it disabled.
Yes as a matter of fact I did disable Terminal Services recently, didnt know they are related. however I was told that by disableing this service it is safer in that no one can connect to your computer and work on it through that service??!
I also had the same problem with the notifications. mind you, it was only for a day or two but it solved itself now on its own like it was for geosdaisy. hopefully it stays this way!
Quote:quote:Originally posted by He-ManIf you can’t connect to Messenger on your own pc, you have a different problem and this is not the right topic to post.
– Try turn off your firewall(s) and try to connect.
If is does connect without your firewall, you have to configurate the firewall to give access to Messenger and turn it back on.
If it doesn’t connect, you have to search harder for a firewall or another device which blocks the Messenger ports. :pI already posted about on a different thread – thing is I know for a fact it is the firewall causing me problems as when I turn it off I can even use the audio. I’ve tried opening the right ports in the firewall for audio, cam etc but it still doesnt help. I can use the cam with the firewall on but it disconnects often. I never had this problem with the firewall before, it started recently.
Quote:quote:Originally posted by He-ManIf the gateway.messenger.hotmail.com:80 isn’t working (Tweety, Britarchivist, kisanjo) then it’s probably blocked by your network administrator. He’s smarter then my network admin 🙂
Well this is my own computer no one else uses it and I am the administrator account. but still doesnt work I’m affraid.
I tried this solution but then I couldnt connect to MSN so I Had to go back to the original settings in the registry
Hi all,
I am also having problems lately with the audio part.
I have win xp pro and use MSN 6. the cam works fine (Logitech quickcam pro 4000) but when trying to add audio it trys to connect but after a while fails. even without the cam being in use it happens. but when the other person sent me audio invite it seems to have worked.Now here’s the thing, I know it must be the firewall because when I turned it off I am able to send audio invite and it connects just fine. but not when the firewall is on (I use norton Internet security 2003). I know for audio the ports should be 5004-65535 UDP so I tried to open them in my firewall – not sure if this is how you open ports (please correct me if I am wrong) but in Personal firewall – advance tab – clicked on general rules button and clicked on add —- i chose permit to and from computers, choose UDP from the options and in the ports area I entered the port range 5004-65535.
I tried again to send an audio invite but it didnt make any difference. thing is I am sure its the firewall that causing my problem but I cant just disable it for a long time. there must be another solution or way to fix it. the other person also uses XP and MSN6
Any help would be appreciated!
Thanks!p/s- Looks like my cam gets disconnected after like 10-15 min. it used to be ok up until now. its just my cam, the cam of my friend stays connected.
