943,771 Members | Top Members by Rank

Ad:
Feb 24th, 2008
0

!!SOMETHING'S UP (hijackthis log included)

Expand Post »
hEY EVERYONE

Some of the problems i am having includes sql error messages when i got to some websites. i.e(for example i will load a page while some part for the page will load normally one part might give an sql message, or the whole page i am trying to access will give an sql error message).

Another problem i have is running flash games not on the web but on my computer by way of using the flash player. i get and error message to download a plugin. ( i followed the instructions to download plugin because the error window gives a direct link to it. I download the program but it doesn't work.

Also when i going to shut down my computer an error message sometimes pop up not all the time. but when it comes up it says AN ERROR HAS OCCURRED AND WINDOWS NEED TO CLOSE. I don't know why this happens but it is bothersome. I can't fix neither of these problems at the moment.

Please help I've included the HIJACKTHIS LOG AND IMAGES for reference( eg. for the SQL error and the flash player errors).

THANKS IN ADVANCE


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:41:53 AM, on 2/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\ZoneLabs\isafe.exe
C:\WINNT\Explorer.EXE
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe
C:\WINNT\System32\hkcmd.exe
C:\WINNT\system32\SK9910DM.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\Installations\HIJACKTHIS\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://minisearch.startnow.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://minisearch.startnow.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startnow.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://minisearch.startnow.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://minisearch.startnow.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://minisearch.startnow.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = internet explorer
R3 - URLSearchHook: (no name) - {5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file)
O2 - BHO: (no name) - {02518731-3F88-4D5B-A24F-1CA8761951B5} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6148028B-D532-4417-8C0B-5A4A0B745393} - (no file)
O2 - BHO: (no name) - {67C55A8D-E808-4caa-9EA7-F77102DE0BB6} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINNT\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINNT\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
O4 - HKLM\..\Run: [Hot Key Kbd 9910 Daemon] SK9910DM.EXE
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://*.windowsupdate.microsoft.com
O15 - Trusted Zone: http://Download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} -
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - http://us.dl1.yimg.com/download.yaho...bio5_1_5_0.cab
O20 - Winlogon Notify: cbxyaby - cbxyaby.dll (file missing)
O20 - Winlogon Notify: vtsqp - C:\WINNT\
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINNT\system32\ZoneLabs\isafe.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe

--
End of file - 5079 bytes
Attached Images
File Type: bmp 2008-02-24_355615.bmp (413.8 KB, 12 views)
File Type: bmp 2008-02-24_error.bmp (233.6 KB, 11 views)
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
Asiweb is offline Offline
12 posts
since May 2007
Feb 26th, 2008
0

Re: !!SOMETHING'S UP (hijackthis log included)

Check the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://minisearch.startnow.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://minisearch.startnow.com/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startnow.com/

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://minisearch.startnow.com/

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://minisearch.startnow.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://minisearch.startnow.com/

URLSearchHook: (no name) - {5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file)

O2 - BHO: (no name) - {02518731-3F88-4D5B-A24F-1CA8761951B5} - (no file)

O2 - BHO: (no name) - {6148028B-D532-4417-8C0B-5A4A0B745393} - (no file)

O2 - BHO: (no name) - {67C55A8D-E808-4caa-9EA7-F77102DE0BB6} - (no file)

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} -

O20 - Winlogon Notify: cbxyaby - cbxyaby.dll (file missing)
Reputation Points: 10
Solved Threads: 5
Junior Poster in Training
Malwarehunter94 is offline Offline
61 posts
since Jan 2008
Mar 1st, 2008
0

Re: !!SOMETHING'S UP (hijackthis log included)

Hey

Thanks for the tip Malwarehunter94,......but i don't know what i should do from here on out. should i just ask hijackthis to fix the ones you mentioned? Or get a malware program? if i should get a program what should i be looking for?


Quick note: The "cbxyaby.dll" is a malware and hijackthis says it's missing why should worry about it when it's missing? Just a thought

Thanks
Last edited by Asiweb; Mar 1st, 2008 at 12:59 am.
Reputation Points: 10
Solved Threads: 0
Newbie Poster
Asiweb is offline Offline
12 posts
since May 2007
Mar 1st, 2008
0

Re: !!SOMETHING'S UP (hijackthis log included)

Usually file missing means its a deactivated file, which are unnecessary and just take up space. As for Anti-malware programs, I recommend these:

Spybot S&D:
http://www.safer-networking.org/en/index.html

AVG anti-virus:
http://free.grisoft.com/doc/5390/us/frt/0?prd=aff

Comodo Firewall:
http://www.personalfirewall.comodo.com/

These are the best free programs that I use, No-adware is also good, but you have to pay for that one.
Reputation Points: 10
Solved Threads: 5
Junior Poster in Training
Malwarehunter94 is offline Offline
61 posts
since Jan 2008

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: BrowsingAdvisor - PLEASE HELP!!!!
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: andt.sys & indt2.sys HELP!!





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC