HAVING COMPUTER ISSUES...VIRUSES,SPYWARE, ETC...INFO HERE

  • Wanna Join? New users you can now register lightning fast using your Facebook or Twitter accounts.
Doberman

Doberman

Sicc OG
#221
May 1, 2003
6,431
25
0
53
#221
You gotta lotta process running. Unless you use windows messaging I would check that and remove it. You're using SP2 how many of these security fixes do you have installed? http://softwarepatch.com/windows/index.html
====================================
Essential
Windows XP Service Pack 2 (XP SP2)
Windows XP security update (July 2006) - KB914388
Windows XP security update (July 2006) - KB917159
Windows XP security update (July 2006) - KB917537
DirectX 9.0c (June 2006 release)
Windows XP security update (June 2006) - KB911280
Windows XP security update (June 2006) - KB914389
Windows XP security update (June 2006) - KB917344
Windows XP security update (June 2006) - KB917953
Windows XP security update (June 2006) - KB918439
Media Player 10 Critical Security Update (June 2006)
Media Player 9 Critical Security Update (June 2006)
Windows XP security update (May 2006) - KB913580
Windows XP security update (April 2006) - KB908531
Windows XP security update (April 2006) - KB911562
Media Player 10 Critical Security Update (April 2006)
Media Player 9 Critical Security Update (April 2006)
March 2006: no updates - see note
Windows XP security update (February 2006) - KB911927
Windows XP security update (February 2006) - KB913446
Windows XP security update (January 2006) - KB912919
Windows XP security update (January 2006) - KB908519
Windows XP security update (December 2005) - KB904706
Windows XP security update (November 2005) - KB896424
Windows XP security update (October 2005) - KB901017
Windows XP security update (October 2005) - KB900725
Windows XP security update (October 2005) - KB899589
Windows XP security update (October 2005) - KB905414
Windows XP security update (October 2005) - KB902400
Windows XP security update (October 2005) - KB905749
Windows XP security update (August 2005) - KB893756
Windows XP security update (August 2005) - KB896423
Windows XP security update (August 2005) - KB899587
Windows XP security update (August 2005) - KB899588
Windows XP security update (August 2005) - KB899591
Windows XP security update (July 2005) - KB901214
Windows XP security update (June 2005) - KB896358
Windows XP security update (June 2005) - KB890046
Windows XP security update (June 2005) - KB893066
Windows XP security update (June 2005) - KB896422
Windows XP security update (June 2005) - KB896428
Windows XP security update (April 2005) - KB890859
Windows XP security update (April 2005) - KB892944
Windows XP security update (April 2005) - KB893086
Windows XP security update (Feb 2005) - KB888113
Windows XP security update (Feb 2005) - KB885250
Windows XP security update (Feb 2005) - KB873333
Windows XP security update (Feb 2005) - KB891781
Windows XP security update (Feb 2005) - KB890047
Windows XP security update (Feb 2005) - KB888302
Windows XP critical update (Jan 2005) - KB890175
Windows XP critical update (Dec 2004) - KB886185
Windows XP security update (Dec 2004) - KB885836
Windows XP security update (Dec 2004) - KB873339
Windows XP security update (Dec 2004) - KB885835
Windows XP security update (Oct 2004) - KB885523

Optional updates
Windows Defender (beta 2)
Microsoft Malicious Software Removal Tool 1.18
SyncToy 1.2
Windows Media Player Codec Package
Free virtual CD ROM for Windows XP 2.1
Windows XP (Home Edition) boot disk
Windows XP autorun repair wizard
Windows Installer 3.1
Windows Media Player 10
Windows Media Player 11 (beta)
Windows Media Player DVD Video Decoder Utility
Windows XP fix for STOP 0x0000007E error in aec.sys
Windows XP SP2 - Loopback patch KB884020
Windows XP SP2 - 1394 Firewire update KB885222
Windows XP USB 1.1 and 2.0 Update
====================================

Most of processess running on your system seem to be installed by you. I have problems loading pages sometime after playing PS2 online or after switching from the T1 line at work to the wireless setup at home. When that happens I go to the Control Panel>Network Connections and right click on my connection and select repair...it seems to work. You have a couple of anti virus programs running as well as different programs set for automatic update...all this combined can bogg down your system. Try to stick to one good antivirus program or else they can conflict with each other. Since you are using Fire Fox ,I doubt your browser is being hijacked. So that only leaves all those processess you have running in the background that may be responsible. Do a google on each process that you don't know about before you remove it. Especially those set to automatic update. And remove the windows messeger at startup. that can be used for remote access. also download a port scanner to see what ports on your computer open, maybe there are other things making a connection to the internet.
 
Doberman

Doberman

Sicc OG
#223
May 1, 2003
6,431
25
0
53
#223
I went over everything again...I was half sleep when I looked at it last night. Within your quote I ommited everything that you may need. Look at the list below , run hijack this again and select all of these items and get rid of them. Especially that last one. Looks like MicroSoft got you.
this should help a little. but still check to see what ports are open. I use Outpost FireWall 4 and AntiVir....runs smooth as a baby's ass. AnitVir is free but is top notch. Google it You can find Outpost somewhere:) You can view all your open ports and see what's comin in, what's comin out and where it is going.
DukeNaintEZ said:
HERE YA GO DOBERMAN...THANKS

Logfile of HijackThis v1.99.1
Scan saved at 8:45:14 PM, on 7/20/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\system32\spoolsv.exe


C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE


C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

C:\Program Files\Messenger\msmsgs.exe


C:\WINDOWS\ALCXMNTR.EXE

c:\windows\system\hpsysdrv.exe

C:\PROGRA~1\DVDIDL~1\DVDIdlePro.exe


C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Rar$EX00.938\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?T...=Q405&bd=presario&pf=desktop&parm1=seconduser

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?T...=Q405&bd=presario&pf=desktop&parm1=seconduser

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com


R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?T...=Q405&bd=presario&pf=desktop&parm1=seconduser

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?T...=Q405&bd=presario&pf=desktop&parm1=seconduser

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?T...=Q405&bd=presario&pf=desktop&parm1=seconduser

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?T...=Q405&bd=presario&pf=desktop&parm1=seconduser

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?T...=Q405&bd=presario&pf=desktop&parm1=seconduser

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?T...=Q405&bd=presario&pf=desktop&parm1=seconduser

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe

O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe

O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Bodog Poker\BPGame.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1148430611672

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll *** This is Windows Genuine Advantage SPYWARE...GET RID OF IT LOOK HERE! http://www.theinquirer.net/default.aspx?article=31281
Click to expand...
 
X

xThizzin408x

Sicc OG
#224
Apr 22, 2006
533
0
0
39
#224
alright here doberman, hopefully you could help me and also sometimes when i stream videos online using windows media player in my browser the vids wont show, it justs all green instead of showin the vid thankz for you help

Logfile of HijackThis v1.99.1
Scan saved at 1:34:35 PM, on 7/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\pavsrv51.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\program files\panda software\panda titanium 2006 antivirus + antispyware\firewall\PNMSRV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\PavFnSvr.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\psimsvc.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Windows Media Connect 2\wmccds.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\hphmon06.exe
C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
C:\Program Files\Yahoo!\browser\ybrwicon.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\APVXDWIN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\WebProxy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\iTunes\iTunes.exe
C:\Documents and Settings\HP_Owner\Desktop\HijackThis Webrowser fixer.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\avciman.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\psimreal.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q105&bd=pavilion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../sbcydsl/*http://www.yahoo.com/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/sbcydsl/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://yahoo.sbc.com/dsl
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [YBrowser] C:\Program Files\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Media Connect 2] "C:\Program Files\Windows Media Connect 2\WMCCFG.exe" /StartQuiet
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\APVXDWIN.EXE" /s
O4 - HKLM\..\RunServices: [] winlog.exe
O4 - HKLM\..\RunOnce: [vmc] C:\PROGRA~1\COMMON~1\SONYSH~1\OpenMG\Regsvr32.exe /s C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\vmc.dll
O4 - HKLM\..\RunOnce: [Falcon] C:\PROGRA~1\COMMON~1\SONYSH~1\OpenMG\Regsvr32.exe /s C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Falcon.dll
O4 - HKLM\..\RunOnce: [mswm] C:\PROGRA~1\COMMON~1\SONYSH~1\OpenMG\Regsvr32.exe /s C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\mswm.dll
O4 - HKLM\..\RunOnce: [NetMD] C:\PROGRA~1\COMMON~1\SONYSH~1\OpenMG\Regsvr32.exe /s C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\NetMD.dll
O4 - HKLM\..\RunOnce: [SPTISRVps] C:\PROGRA~1\COMMON~1\SONYSH~1\OpenMG\Regsvr32.exe /s C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\SPTISR~1.DLL
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [URLy Warning] "C:\Program Files\URLy Warning\URLyWarning.exe" -quiet
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - http://files.member.yahoo.com/dl/installs/sbc/yinst.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\pavsrv51.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software - c:\program files\panda software\panda titanium 2006 antivirus + antispyware\firewall\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software - C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\psimsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\TPSrv.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE
 
Doberman

Doberman

Sicc OG
#225
May 1, 2003
6,431
25
0
53
#225
xThizzin408x said:
alright here doberman, hopefully you could help me and also sometimes when i stream videos online using windows media player in my browser the vids wont show, it justs all green instead of showin the vid thankz for you help

Logfile of HijackThis v1.99.1
Scan saved at 1:34:35 PM, on 7/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
******This is used for debugging...don't think you are doing any of that.

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\system32\csrss.exe
Read this first about csrss.exe- http://www.auditmypc.com/process/csrss.asp


C:\Program Files\Yahoo!\browser\ybrwicon.exe

C:\PROGRA~1\Yahoo!\browser\ycommon.exe

C:\WINDOWS\system32\wuauclt.exe
wuauclt.exe (Cult Trojan) - Details
Many viruses will appear in the task list with the process name 'wuauclt.exe'. One such example is the CultB trojan. You should treat this process with caution as it may be a virus.
Read here:
http://www.auditmypc.com/process/wuauclt.asp



C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe




R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=desktop

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q105&bd=pavilion&pf=desktop

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../sbcydsl/*http://www.yahoo.com/search/ie.html

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/sbcydsl/*http://www.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl


R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll




O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll

O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll

O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll


O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [YBrowser] C:\Program Files\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe


O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKCU\..\Run: [URLy Warning] "C:\Program Files\URLy Warning\URLyWarning.exe" -quiet
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - http://files.member.yahoo.com/dl/installs/sbc/yinst.cab
O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab

===============================

If it were mine ...I would get rid of all of these.. do you really need all those tool bars? and extra buttons. You also gotta lot of stuff running at start up. Only thing you really need at start up is your AntiVirus. everything else you should start manually if you need it. That problem with your media player happens because you are probably using MediaPlayer9 or less. and are trying to play file that it doesn't fully recognize. Upgrade to MP10 and you should be able to play those same files with no problem. Also if you need to update something...do it manually.
Click to expand...
 
Doberman

Doberman

Sicc OG
#228
May 1, 2003
6,431
25
0
53
#228
im pretty sure i got mp10 on my comp but does that mean i have mp10 on my internet also, so i should delete most of those and especially the ones you made bold
Click to expand...
Maybe you have to just uninstall and reinstall

do you know what could be the reason why my connection would randomly not working or why sometimes images wont display, could it be something on my comp like a virus or trojan?
Click to expand...
yes. Like the one I have highlighted in bold. It is ok to remove the ones I have listed
 
Doberman

Doberman

Sicc OG
#230
May 1, 2003
6,431
25
0
53
#230
xThizzin408x said:
im thinking about uninstalling firefox and reinstalling it cuz for some reason it wont display images and also is there a way to save my bookmarks so i could use them when i reinstall firefox
Click to expand...
If you go to Bookmarks at the top of the browser, then click on Manage Bookmarks. Anoter window will open, Click on File in the new window, then click on Export. This will export your Bookmarks, you can then uninstall FireFox and import your old Bookmark settings after you reinstall. Make sure you export to a folder other than your fire fox folder, since you will be uninstalling that.
 
DukeNaintEZ

DukeNaintEZ

Sicc OG
#231
May 12, 2004
3,744
19
0
46
#231
thanks for checkin out my problems..but im not to computer savy..can you explain to me in laman(sp?) terms how to fix my problems..if not to big of a hassle..thanks bro
 
Doberman

Doberman

Sicc OG
#234
May 1, 2003
6,431
25
0
53
#234
MAVA said:
is there an anti virus & spyware remover for free?
Click to expand...
AnitVir http://www.free-av.com/ This is one of the best if not the best you can get for free or for purchase. I've been usin it for years. This combined with Outpost Firewall has protected all my XP installations for years. Only time I ever got something is when I let my guard down and disabled them for whatever reason.
 
T-Spoon

T-Spoon

Sicc OG
#236
Apr 26, 2002
3,897
638
113
#236
doberman, sup, i've been runnin spy sweeper for like a year now, and then they came out with a newer version. i updated it, and now my ad-aware se doesnt finish scanning. when i shut down spy sweeper, adaware runs thru. since i've updated spysweeper, about a week ago, whenever i run a scan, it NEVER catches any spyware. my comp won't go into standby with ss on, when i shut it down, it goes into standby, BUT something triggers it to my password/login screen, it never stays in standby. i used to have bellsouth dsl, and it never did that, but then i got comcast cable internet and it seems like i started having that problem. i don't kno if it's my new internet service or tha spy sweeper starting to cause my comp problems, u think u can help? is there any anti spyware programs u recommend? i thought ss wuz tha best. u mentioned above about the antivir, do you have anything for spyware? i'm scared my comp might crash or somethin if i don't nip this shit in tha butt right now. thanks in advance. fold.
 
Doberman

Doberman

Sicc OG
#238
May 1, 2003
6,431
25
0
53
#238
T-Spoon said:
doberman, sup, i've been runnin spy sweeper for like a year now, and then they came out with a newer version. i updated it, and now my ad-aware se doesnt finish scanning. when i shut down spy sweeper, adaware runs thru. since i've updated spysweeper, about a week ago, whenever i run a scan, it NEVER catches any spyware. my comp won't go into standby with ss on, when i shut it down, it goes into standby, BUT something triggers it to my password/login screen, it never stays in standby. i used to have bellsouth dsl, and it never did that, but then i got comcast cable internet and it seems like i started having that problem. i don't kno if it's my new internet service or tha spy sweeper starting to cause my comp problems, u think u can help? is there any anti spyware programs u recommend? i thought ss wuz tha best. u mentioned above about the antivir, do you have anything for spyware? i'm scared my comp might crash or somethin if i don't nip this shit in tha butt right now. thanks in advance. fold.
Click to expand...
AntiVir covers it all. AntiVirus/Spyware. As long as you keep it updated weekly, because there are many new viruses/worms weekly, you should be ok. Along with OutPost FireWall. I have used this combination for the past couple of years with no problems on XP SP1/SP2. Like I told the other person, having multiple types of antivirus programs will conflict with each other in some cases. It seems to be something in the new version of your Spysweeper that's conflicting with ad-aware. Do you have a firewall other than the built in XP firewall enabled. The XP firewall is weak and hackers have figured out a way around it. Go here to download all the necessary security fixes for XP. http://www.softwarepatch.com/windows/index.html I'm assuming you have XP because of the SpySweeper and Ad-Aware. If you had a Mac you wouldn't need those.
 
T-Spoon

T-Spoon

Sicc OG
#239
Apr 26, 2002
3,897
638
113
#239
Doberman said:
AntiVir covers it all. AntiVirus/Spyware. As long as you keep it updated weekly, because there are many new viruses/worms weekly, you should be ok. Along with OutPost FireWall. I have used this combination for the past couple of years with no problems on XP SP1/SP2. Like I told the other person, having multiple types of antivirus programs will conflict with each other in some cases. It seems to be something in the new version of your Spysweeper that's conflicting with ad-aware. Do you have a firewall other than the built in XP firewall enabled. The XP firewall is weak and hackers have figured out a way around it. Go here to download all the necessary security fixes for XP. http://www.softwarepatch.com/windows/index.html I'm assuming you have XP because of the SpySweeper and Ad-Aware. If you had a Mac you wouldn't need those.
Click to expand...
thanks doberman, i dled that outpost firewall, its a 30 day trial so hopefully i can find a key for it, and i got that antivir thing also. i'll play around with it when i get off work, but preciate ur advice homie. i'll let u kno how it goes.
 
Doberman

Doberman

Sicc OG
#240
May 1, 2003
6,431
25
0
53
#240
T-Spoon said:
thanks doberman, i dled that outpost firewall, its a 30 day trial so hopefully i can find a key for it, and i got that antivir thing also. i'll play around with it when i get off work, but preciate ur advice homie. i'll let u kno how it goes.
Click to expand...
You Got mail!
 
You must log in or register to reply here.
Top Bottom