943,914 Members | Top Members by Rank

Ad:
Nov 13th, 2003
0

HijackThis Log Help

Expand Post »
Can anybody help with this to tell me what I should delete? Some look a bit iffy to me and I've had a bit of a hacker scare so I want everything cleaned out. Thanks for any help

Sourdust

Logfile of HijackThis v1.97.2
Scan saved at 19:55:08, on 13/11/03
Platform: Windows 95 B (Win9x 4.00.1111)
MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\CREATIVE\SHAREDLL\CTNOTIFY.EXE
C:\WINDOWS\SYSTEM\LOADWC.EXE
C:\IAN\FREERAM XP PRO 1.40.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\CREATIVE\SHAREDLL\MEDIADET.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\TOOLS\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BT Internet
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NewsUpd] C:\Program Files\Creative\News\NewsUpd.EXE /q
O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [BrowserWebCheck] loadwc.exe
O4 - HKLM\..\Run: [LexmarkPrinTray] PrinTray.exe
O4 - HKCU\..\Run: [FreeRAM XP] "C:\IAN\FREERAM XP PRO 1.40.EXE" -win
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {1B86E6D4-A2BE-4F85-8DF8-48AE900BB370} (Chat_Control.WebChat) - http://www.gatewayintruders.com/gcchome/chat/chat.cab
O16 - DPF: ChatSpace Full Java Client 4.0.0.301 - http://irc.everywherechat.com:8000/Java/cfs40301.cab
O16 - DPF: {1501C093-9E7C-4663-85EA-521B533C6ADA} (X9CHAT_v35.WebChat) - http://www.x9chat.com/downloads/x9chat.cab
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
Sourdust is offline Offline
5 posts
since Oct 2003
Nov 13th, 2003
0

Re: HijackThis Log Help

post your log file over here ,they are really good .
http://www.tweakxp.com/forum/forum_topics.asp?FID=29
Team Colleague
Reputation Points: 1056
Solved Threads: 792
I hate 20 Questions
caperjack is offline Offline
12,725 posts
since Aug 2003
Nov 13th, 2003
0

Re: HijackThis Log Help

Is that just for XP?
Reputation Points: 25
Solved Threads: 8
Banned
)BIG"B"Affleck is offline Offline
766 posts
since Oct 2003
Nov 13th, 2003
0

Re: HijackThis Log Help

not sure , i missed that we are in the win95/98/me thread sorry !!
Team Colleague
Reputation Points: 1056
Solved Threads: 792
I hate 20 Questions
caperjack is offline Offline
12,725 posts
since Aug 2003
Nov 14th, 2003
0

Re: HijackThis Log Help

Thanks Caper and Affleck. I don't think HijackThis is specific to XP so I will try TweakXP. I found another help forum through their as well spywareinfo.com

Slainte

Sourdust
Reputation Points: 10
Solved Threads: 0
Newbie Poster
Sourdust is offline Offline
5 posts
since Oct 2003

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
This thread is currently closed and is not accepting any new replies.
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: IE6 hijacked - spybot cleared system but start buttons donīt work
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: Hijack This Logfile Support





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC