Home > Can Someone > Can Someone Please Review This HJT Log?

Can Someone Please Review This HJT Log?

curlylad 23:09 05 May 05 Part 1 Logfile of HijackThis v1.99.1Scan saved at 23:01:39, on 05/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\system32\ZONELABS\vsmon.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Virus cleanup? Bywedoca ยท 4 replies Sep 7, 2008 Those AntiVirus XP 2008 bugs just about everywhere nowadays; I've recently got hit AGAIN during installing Nero 8, anyway I scaned with Adawae, Spybot, Include the address of this thread in your request. http://linux4newbie.com/can-someone/can-someone-review-my-hjt-log-please.html

So should I fixed the ones you mentioned above with HJT? Register a free account to unlock additional features at BleepingComputer.com Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. That Antivirus XP bug is all around the net, a lot of people got hit by that; the 2nd time happened to me within 3 days was from a program I've One of your startups seems to indicate you have Trojan peper.Go here and run the removal tool.

Back to top #3 SifuMike SifuMike malware expert Staff Emeritus 15,385 posts OFFLINE Gender:Male Location:Vancouver (not BC) WA (Not DC) USA Local time:01:56 AM Posted 22 November 2007 - 11:25 I have a priest over twice a year to bless our C: drive. Consistently helpful members with best answers are invited to staff. TRi&xie?

  • Anything in the HJT log you want confirmation on?
  • Cluster headaches forced retirement of Tom in 2007, and the site was renamed "What the Tech".
  • My IE browser seems okay now but I am still getting random pop-ups.
  • Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:28:17 AM, on 11/22/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe
  • If I've saved you time & money, please make a donation so I can keep helping people just like you!
  • As it says in lots of those Google results....it's because you may not have installed the .NET Framework, we see those entries lots.
  • Login now.
  • p;3 22:10 05 May 05 can u remember what you did to get it originally "uninfected"?and am following :)what can u run on it?
  • If I've saved you time & money, please make a donation so I can keep helping people just like you!

Code: Suspicious - no info Get rid of it. If you should have a new issue, please start a new topic. Back to top Back to Virus, Trojan, Spyware, and Malware Removal Logs 0 user(s) are reading this topic 0 members, 0 guests, 0 anonymous users Reply to quoted postsClear BleepingComputer.com Follow Us Facebook Twitter Help Community Forum Software by IP.BoardLicensed to: What the Tech Copyright © 2003- Geeks to Go, Inc.

I can mark this Solved, you may still reply here if there is anything to add! Join thousands of tech enthusiasts and participate. May 8, 2007 Add New Comment You need to be a member to leave a comment. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Do not apply the instructions from this thread to your own machine. Still not sure what caused the CA to get corrupted but when it works, it works pretty well. What the Tech → Spyware / Malware / Virus Removal → Virus, Spyware & Malware Removal Javascript Disabled Detected You currently have javascript disabled. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged

This applies only to the original topic starter. Stay logged in Sign up now! This site is completely free -- paid for by advertisers and donations. If CTH has helped you, please consider liking and sharing us on Facebook Search Forums Show Threads Show Posts Advanced Search Go to Page...

Discussion in 'Virus & Other Malware Removal' started by aok10461, Jan 22, 2007. get redirected here dammit View Public Profile Find all posts by dammit #3 May 24th, 2004, 02:03 PM sweetpea1994 Member Join Date: Apr 2004 Location: Ohio Posts: 44 Thanks Dammit, here Please start a new thread describing your issue and someone will be along to assist you. Please re-enable javascript to access full functionality.

Click here to Register a free account now! Several functions may not work. Sign In Use Facebook Use Twitter Need an account? navigate to this website I tend to get a bit paranoid with computer security since my ex-wife used to get viruses on her hard drive like people gets colds and things like keyloggers creep me

O15 - Trusted Zone: http://*.att.net O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} - https://components.v...l?noreloadredir O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=58813 O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) No, create an account now. Not that I know a lot about it, but very many startup things can be done without.

I never have had to ask for help because usually the answer is already out there from someone else having the problem, but I cant pinpoint this one down anywhere.Donna Share

dammit View Public Profile Find all posts by dammit #13 May 24th, 2004, 05:12 PM sweetpea1994 Member Join Date: Apr 2004 Location: Ohio Posts: 44 It seems okay, O4 - HKLM\..\Run: [ziT] C:\documents and settings\maupin.11\local settings\temp\ziT.exe O4 - HKLM\..\Run: [2LRX2W83X2T3MQ] C:\WINDOWS\System32\Umpu.exe O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2221e82...ip/RdxIE601.cab Reboot into Safe Mode.....( tap F8 key during reboot, until Facebook Google+ Twitter YouTube Subscribe to TechSpot RSS Get our weekly newsletter Search TechSpot Trending Hardware The Web Culture Mobile Gaming Apple Microsoft Google Reviews Graphics Laptops Smartphones CPUs Storage Cases curlylad 23:12 05 May 05 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = click hereR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = click hereR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tiscali 10.0R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1O2

Booted up with Windows to do a scan but some bizarre filenames were coming up..bizarre to me, anyway (I'm at about an intermediate-level when it comes to home PC security.) Also, I'm not sure if this is a spyware issue but we ought to at least eliminate that possibility. VoG II 21:42 05 May 05 Can you post another HJT log please? my review here I had to install win xp pro instead of xp home as I only had the xp pro cd-rom .I found out that repairing windows would have worked but it kept

curlylad 22:17 06 May 05 Firstly I am now back up and running and no problems so far. Username Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy You can donate using a credit card and PayPal. Edited by SifuMike, 16 November 2007 - 07:41 PM.

You must be connected to the internet for it to work. dammit View Public Profile Find all posts by dammit #5 May 24th, 2004, 02:18 PM sweetpea1994 Member Join Date: Apr 2004 Location: Ohio Posts: 44 Okay, I ran Logfile of HijackThis v1.97.7 Scan saved at 8:45:17 AM, on 5/24/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\hkcmd.exe C:\WINDOWS\System32\DSentry.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE This list could represent "broken" services.

I already made sure to view all hidden files and folders. Login _ Social Sharing Find TechSpot on... Is there a way to find out if what you DL is virus free? It will run in a flash so don't think it hasn't worked!

It's 100% free. Join our site today to ask your question. Logfile of HijackThis v1.97.7 Scan saved at 9:25:00 AM, on 5/24/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\hkcmd.exe C:\WINDOWS\System32\DSentry.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE No, create an account now.

Anybody can ask, anybody can answer. Logfile of HijackThis v1.97.7 Scan saved at 9:17:11 AM, on 5/24/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\hkcmd.exe C:\WINDOWS\System32\DSentry.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE Advertisements do not imply our endorsement of that product or service. It caught that QQRob I trojan I mentioned whereas Norton's (got rid of it) and my AOL antispyware didn't.

Site Changelog Community Forum Software by IP.Board Sign In Use Facebook Use Twitter Need an account?