|
| ||
| Hacktool.Rootkit Help me Plzzz Logfile of HijackThis v1.99.1 Scan saved at 2:30:48 PM, on 10/16/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\WINDOWS\mssmbios.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Norton AntiVirus\SAVScan.exe C:\WINDOWS\system32\cmd.exe C:\Documents and Settings\Crystal\Desktop\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/ O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: msmbios (Microsoft System Management BIOS Driver) - Unknown owner - C:\WINDOWS\mssmbios.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe thx |
| ||
| Re: Hacktool.Rootkit Help me Plzzz Quote:
More imfermation please. |
| ||
| Re: Hacktool.Rootkit Help me Plzzz Welcome to Daniweb, deacon :) 1. First of all, the header information in your HJT log shows that your versions of Windows XP and Internet Explorer are very out of date: Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Please use Windows' Automatic Update feature to bring your system up to date; many of the updates you're missing address/fix security loopholes through which malware can infect your computer. I definitely wouldn't suggest going all the way to Service Pack 2 until we're sure that you're infection-free, but you need to at least upgrade to Service Pack 1 with all of its most current critical updates. Once you've done that, the upgrades/updates should be reflected in your HJT log's header info as follows: Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) 2. Once you've installed the updates above, please do the following: Please download, install, and run the following two utilities: Microsoft Antispyware beta ewido Security Suite Be sure to use each program's automatic update feature to get the most current detection databases installed before actually running the scans/fixes. If you initially receive a warning message from ewido saying "Database not found" when you first run the program, just click "OK" for this. Next- in the main screen, click "Update" and click "Start Update". Run a full system scan with each utility, and have each program fix whatever "nasties" they find. 3. Once you've done the above, run HijackThis again and post the new log. Also post the scan report log that ewido generated. |
| ||
| Re: Hacktool.Rootkit Help me Plzzz Logfile of HijackThis v1.99.1 Scan saved at 4:37:09 PM, on 10/17/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\Program Files\ewido\security suite\ewidoguard.exe C:\WINDOWS\mssmbios.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe C:\Program Files\Norton AntiVirus\SAVScan.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Crystal\Desktop\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/ O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe" O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1129498207600 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1129498723992 O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe O23 - Service: msmbios (Microsoft System Management BIOS Driver) - Unknown owner - C:\WINDOWS\mssmbios.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe --------------------------------------------------------- ewido security suite - Scan report --------------------------------------------------------- + Created on: 11:17:55 PM, 10/16/2005 + Report-Checksum: 26FC8659 + Scan result: :mozilla.9:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.10:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.11:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.12:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.13:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.14:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.16:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.18:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.24:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.28:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Myaffiliateprogram : Cleaned with backup :mozilla.32:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Myaffiliateprogram : Cleaned with backup :mozilla.34:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Adjuggler : Cleaned with backup :mozilla.35:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.36:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup :mozilla.37:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.38:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.41:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.42:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.43:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.44:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.45:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup :mozilla.57:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup :mozilla.58:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup :mozilla.59:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup :mozilla.60:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup :mozilla.65:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup :mozilla.79:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup :mozilla.80:C:\Documents and Settings\Crystal\Application Data\Mozilla\Firefox\Profiles\jccuispu.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup C:\Documents and Settings\Crystal\Cookies\crystal@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup C:\Documents and Settings\Crystal\Cookies\crystal@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup C:\Documents and Settings\Crystal\Cookies\crystal@rotator.adjuggler[1].txt -> Spyware.Cookie.Adjuggler : Cleaned with backup C:\Documents and Settings\Crystal\Cookies\crystal@tribalfusion[1].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup C:\Documents and Settings\Crystal\Cookies\crystal@www.myaffiliateprogram[2].txt -> Spyware.Cookie.Myaffiliateprogram : Cleaned with backup ::Report End |
| ||
| Re: Hacktool.Rootkit Help me Plzzz the file that is infeted is C:/windows/system32/hpdriver.sys |
| ||
| Re: Hacktool.Rootkit Help me Plzzz o and the reson i didnot have any updates is because i formated the copmuter to try to get rid of the viris.....as u can see it did not work.........sorry for so many posts |
| ||
| Re: Hacktool.Rootkit Help me Plzzz Please do the following: 1. Click on the "Run..." option under your Start menu, type the following in the resulting "Open:" box, and then hit Enter: services.msc In the resulting list of Windows Services, locate the following service and perform the procedure below on it: msmbios (Microsoft System Management BIOS Driver) - Double-click on the service. - In the resulting window, click the Stop button if the service is reported to be currently running. - Once the service is stopped, choose the "Disabled" option in the "Startup Type" drop-down menu, and then click OK. - Close the Services window. 2. Run HijackThis again and have it fix: O23 - Service: msmbios (Microsoft System Management BIOS Driver) - Unknown owner - C:\WINDOWS\mssmbios.exe 3. Once HJT finishes the fix, click on the "Config" button in the lower right corner of HijackThis' main window. In the next window, click on the "Misc Tools" button at the top then click the "Delete an NT service" button. Type the following in the box and click OK: msmbios 4. Reboot into Safe Mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up). - Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files" and "Hide extentions for known file types". - Locate and delete the following file: C:\WINDOWS\mssmbios.exe - Empty your recycle bin and reboot normally. 5. Run at least two or three of the following online anti-virus/anti-spyware scans and let them fix what (if any) leftover "nasties" they find: http://www.kaspersky.com/scanforvirus.html http://housecall.trendmicro.com/ http://us.mcafee.com/root/mfs/default.asp?cid=9914 http://www.pandasoftware.com/active...n_principal.htm http://www.ravantivirus.com/scan/ http://www.bitdefender.com/scan/licence.php 6. Run HJT again and post the new log. |
| ||
| Re: Hacktool.Rootkit Help me Plzzz 2. Run HijackThis again and have it fix: O23 - Service: msmbios (Microsoft System Management BIOS Driver) - Unknown owner - C:\WINDOWS\mssmbios.exe This file is not on Hijack This.............can i just go to the next step with out fixing that file? |
| ||
| Re: Hacktool.Rootkit Help me Plzzz Quote:
|
| ||
| Re: Hacktool.Rootkit Help me Plzzz Logfile of HijackThis v1.99.1 Scan saved at 8:41:31 PM, on 10/18/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\Program Files\ewido\security suite\ewidoguard.exe C:\WINDOWS\msinit.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe C:\Program Files\Norton AntiVirus\SAVScan.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Crystal\Desktop\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/ O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe" O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1129498207600 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1129498723992 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: msinit (Microsoft Scheduling Agent) - Unknown owner - C:\WINDOWS\msinit.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe i havent went past step 2 |
| All times are GMT -4. The time now is 1:27 pm. |
Forum system based on vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
©2003 - 2009 DaniWeb® LLC