Bullguard Antivirus Forum Download A Free Copy Of Bullguard Antivirus Software
Free Antivirus Forum - Learn about antivirus, firewalls and personal security Free Antivirus Forum - Learn about antivirus, firewalls and personal security
 HomeLog InRegisterCommunity CalendarSearch the ForumView The Member ListHelp
Hijack this log
   
BullGuard Antivirus Forum > General Security > Spyware > Hijack this log  
Forum Quick Jump
 
New Topic Post reply to : Hijack this log Printable version of : Hijack this log
[ << Previous Thread | Next Thread >> ]

Stylom
New Member


Date Joined Oct 2004
Total Posts : 1
 
   Posted 10-23-2004 11:52 (GMT +1)    Quote: Hijack this logAlert an admin about: Hijack this log
Not sure if this is the right place to post this log but hopefully it is...I've got a strange problem on my second PC - I can connect to messenger and get e-mail.  However when I try and use Internet Explorer 6 - my browser trys to connect to 1.0.0.0. and then has a page cannot be displayed shown/
 
My primary PC connects via the router ok to the net and I have checked that all the settings are the same on both PCs - the IP and DNS settings are both set to automatic and ping test seem to show that both PCs can see the internet.  I have even tried two network cards but as I can get mail and messenger I can only assume that the problem is with the browser itself.  I have service pack two installed and have turned off the firewall in case that was stopping net connection. 
 
So I am guessing the problme is something has taken control of the brower so I have run Ad-Aware, CWShredder, and Spybot - I have used hijackthis to get a log from the problem PC and hoped that someone could check the log (its a bit above my head) and tell me whether there is anything there that might be specifally causing the problem (or should not be there anyway).
 
Thanks very much in advance.
 
Logfile of HijackThis v1.97.7
Scan saved at 11:40:53, on 23/10/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Executive Software\DiskeeperServer\DKService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\MAILWA~1\MAILWA~1.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\SetPoint\kem.exe
C:\PROGRAM FILES\LOGITECH\SETPOINT\KHALMNPR.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Jon\My Documents\My Received Files\HijackThis.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Norton AntiVirus\OPScan.exe
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MailWasher] C:\PROGRA~1\MAILWA~1\MAILWA~1.EXE
O4 - HKCU\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: @btrez.dll,-4015 (HKLM)
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38084.3936342593
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{657BC70A-61E9-40F7-A0D6-D7995A5643DE}: NameServer = 192.168.0.1
 
 
I really appreciate any help on this.
 
Stylom
Back to Top
 

Touch
Forum Moderator




Date Joined Jun 2004
Total Posts : 13599
 
   Posted 10-23-2004 1:46 (GMT +1)    Quote: Hijack this logAlert an admin about: Hijack this log
First the good news, you have a clean log;-)
Let´s try the most common things there can be the reason.
Download Lspfix: http://www.cexx.org/lspfix.htm
Run it, put a checkmark to-I know what i am doing-Finish.
You start IE from an icon on Desktop? change it (delete it), with a new.
You have change netcards! maybe you need a newer driver. Download Everest Home:
http://www.lavalys.com/products/overview.php?pid=1&lang=en&pageid=1
Run it, go to network-windows network, in the right window, bottom - Driver download.
Get back, and tell if it work


Touch
Back to Top
 
New Topic Post reply to : Hijack this log Printable version of : Hijack this log
 
Forum Information
Currently it is Thursday, November 20, 2008 10:43 PM (GMT +1)
There are a total of 63.948 posts in 15.824 threads.
In the last 3 days there were 34 new threads and 164 reply posts. View Active Threads
Who's Online
This forum has 27181 registered members. Please welcome our newest member, DilbertCube.
50 Guest(s), 0 Registered Member(s) are currently online.  Details
5 Latest Threads
Generic Host processor for Win32 services (0)20-11-2008 21:28:28 (gio)
Trojan horse SHeur2.FO help :( (3)20-11-2008 21:23:39 (bizzaro)
Bullguard quits scanning after 6200 files (0)20-11-2008 19:59:07 (Ruud Smit)
Virus issues- please help (7)20-11-2008 19:16:52 (digi)
Malware.Trace / Trojan.Vundo - PLEASE HELP CAN'T REMOVE!! (6)20-11-2008 19:07:37 (patel121)