0
   

Another HJT Log

 
 
Reply Mon 24 Jan, 2005 10:01 pm
Hi ,
I followed the steps in Timber's post and this is what I get from HJT.

Logfile of HijackThis v1.98.2
Scan saved at 10:49:58 PM, on 1/24/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\system32\cisvc.exe
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\WINDOWS\system32\hkcmd.exe
E:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
E:\Program Files\Common Files\Symantec Shared\ccApp.exe
E:\WINDOWS\System32\snmp.exe
E:\WINDOWS\system32\wscntfy.exe
E:\WINDOWS\system32\wuauclt.exe
E:\WINDOWS\system32\cidaemon.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\WINDOWS\system32\NOTEPAD.EXE
E:\Documents and Settings\Owner\My Documents\Unzipped\hijackthis\HijackThis.exe
E:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = E:\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IgfxTray] E:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] E:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "E:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] E:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKCU\..\Run: [Windows Registry Repair Pro] E:\Program Files\3B Software\Windows Registry Repair Pro\RegistryRepairPro.exe 4
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE30B2C9-60FD-4A94-B637-9D29F05DEA65}: NameServer = 207.69.188.187 207.69.188.186

Anything funky in there ?
Thanks in advance.,
LTX
  • Topic Stats
  • Top Replies
  • Link to this Topic
Type: Discussion • Score: 0 • Views: 624 • Replies: 5
No top replies

 
Don77
 
  1  
Reply Tue 25 Jan, 2005 05:43 am
Hi LionTamerX and welcome to A2K,
Your log looks clean, are you having any problems in particular ?
0 Replies
 
LionTamerX
 
  1  
Reply Tue 25 Jan, 2005 05:32 pm
The only thing I'm having trouble with is when I run Spybot S&D. It does the scan and keeps coming up with the same DSO Exploits . I go to fix the problem, and run the scan again and they keep showing up.
0 Replies
 
Don77
 
  1  
Reply Tue 25 Jan, 2005 05:36 pm
That was a bug in the version go Here
Download the fix,
Run another scan,
Let us know how you make out
0 Replies
 
LionTamerX
 
  1  
Reply Tue 25 Jan, 2005 08:17 pm
Many thanks,
It worked like a charm. Ahh the joy of a squeaky clean system.

Cheers
0 Replies
 
Don77
 
  1  
Reply Tue 25 Jan, 2005 09:59 pm
Great to hear LionTamerX
Ain't nothing like it Very Happy

Download the following programs, For keeping crap off your system to begin with
Prevent the installation of ActiveX-based spyware, adware, browser hijackers, dialers, and other potentially unwanted pests. Block spyware/tracking cookies in Internet Explorer and Mozilla/Firefox. Restrict the actions of potentially dangerous sites in Internet Explorer.
Download Spyware Blaster and SpywareGaurd
Check for updates after you install them, And check weekly as well
Keep Ad-aware and Spybot handy, Check them for updates and run them weekly
Same with your Anti Virus,

Be sure and give the Temp folders a cleaning out now and then as well, Make sure after you clean your Temp files to empty out your Recycle bin as well.

Remeber to Check Windows for updates

Probably a good time to create a new restore point See Here Name it clean or something like that,
0 Replies
 
 

Related Topics

Clone of Micosoft Office - Question by Advocate
Do You Turn Off Your Computer at Night? - Discussion by Phoenix32890
The "Death" of the Computer Mouse - Discussion by Phoenix32890
Windows 10... - Discussion by Region Philbis
Surface Pro 3: What do you think? - Question by neologist
Windows 8 tips thread - Discussion by Wilso
GOOGLE CHROME - Question by Setanta
.Net and Firefox... - Discussion by gungasnake
Hacking a computer and remote access - Discussion by trying2learn
 
  1. Forums
  2. » Another HJT Log
Copyright © 2024 MadLab, LLC :: Terms of Service :: Privacy Policy :: Page generated in 0.03 seconds on 11/05/2024 at 07:43:00