you should run a anti virus scan ,there is a online one in my signature .Also recomended that you run ad-aware and spybot ,also in my sig ,update before running .
This [O4 - HKLM\..\Run: [Online Service] C:\WINDOWS\svchost.exe]could be part of the cause of you problem as it is added by a trojan check the norton site below .It is not the windows svchost.exe .check this link .
http://www.sysinfo.org/startuplist.php?filter=Online+Service&count=&type=
http://securityresponse.symantec.com/avcenter/venc/data/w32.hostidel.trojan.b.html
Also hijackthis creates backup when u use it to fix problems so it is not recomended to run it from a temp folder ,so create a new folder on you c:\ drive called it hijack and copt the hijackthis.exe to it and run it from there .
Do all of the above then run hijack again and post a new log .
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
make sure all browser windows are closed and run hijack and fix this .
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O4 - HKLM\..\Run: [Online Service] C:\WINDOWS\svchost.exe.
this one is optional it is not spyware but is not needed and is a known resource hog
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
then reboot into safe mode ,hitting f8 on bootup to enter safe mode .to delete this file .
C:\WINDOWS\svchost.exe ---this file
you may need to set computer to show hidden files to find it .
how to show hidden files
After deleting file run hijack again and post new log
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
im not really sure what you mean by "my search choices"... please explain! :)
when i search the net i use google ,yours is set to use this site , http://66.103.153.158/
if it not the site you use ,then have hijack fix the 2 of them
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
This wasn't in the last log ,it is Wild Tangent Releated for checking for updated web drivers ,so if you want to use wild tangent and update the web drives leave it if not ,run hijack and fix this ,make sure all browser windows are closed .
O4 - HKLM\..\Run: [wcmdmgr] C:\WINDOWS\wt\updater\wcmdmgrl.exe -launch
O16 - DPF: {65E7DB1D-0101-4100-BD66-C5C78C917F93} (WTDMMPVersion Class) - http://install.wildtangent.com/bgn/...lim/install.cab
reboot int osafe mode and delete this folder
C:\WINDOWS\ wt
Ignore all of the Above if you want to use Wild Tangent .
Also this needs attention for safer surfing
Logfile of HijackThis v1.97.7
Scan saved at 7:23:05 PM, on 2/17/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
a trip to the windows update site would be order to update to XP SP1
and IE SP1
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
i restarted my computer and now its back to using "http://66.103.153.158" as the home page... how do i get rid of this.
Don't see anything bad in you new log ,have you tried changing it back in IE Tools/internet options .
Make sure all windows programs and browser windows are closed and run hijackthis and post a new log again ,thanksalso, the part of your message that says "this needs attention for safer surfing"... im not sure what you mean by this or what you want me to do... please explain that was in reference to the windows updates .Scan saved at 8:46:54 PM, on 3/13/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)you now have IE SP1
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
have u run cwshredder lately .in my signature .
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985