944,131 Members | Top Members by Rank

Ad:
Sep 4th, 2005
0

Help Needed on HijackThis log

Expand Post »
Hi,
and thanks in advance for those with more brains and experience than me....
Have an old computer, 900mhz AMD-Duron, 512Mb, Win-2000, IE 5

Previously was running Win-98 and suffered much less problems than I have in the last week. Now on my 5th install of OS

From a fresh install, add modem drivers, IE works fine.
Confident on this point, I then go to add further software
At some point, something infects IE, so it can't load any pages

Have tried reinstalling modem drivers, no difference.

HAve run Ad-aware SE (latest def), Spybot 1.3 (can't get online to download latest def), NoAdware 3 (latest def).... some items removed, namely 'Alexa', and one DSO object.

Have also run Anti-Vir (personal) free AV software, hasn't detected anything.

'Last chance' salon barman told me to try HIJACKTHIS....

so here is my logfile....
any help is hugely appreciated, and further directions in case HIjackThis log is fruitless.....? Looks quite clean to me, though I'm a novice.

Logfile of HijackThis v1.99.1
Scan saved at 00:58:04, on 05/09/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
E:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
E:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\WINNT\system32\internat.exe
D:\Program Files\Spybot\TeaTimer.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Wireless Device\Wireless Keyboard\Magickey.exe
C:\Program Files\Wireless Device\Wireless Mouse\MouseAp.exe
C:\Program Files\Wireless Device\Wireless Keyboard\osd.exe
C:\WINNT\explorer.exe
E:\PROGRA~1\WinZip\winzip32.exe
E:\temp\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\Spybot\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [Zone Labs Client] E:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [ElbyCheckElbyCDFL] "E:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot\TeaTimer.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Enable Wireless Keyboard Driver.lnk = C:\Program Files\Wireless Device\Wireless Keyboard\Magickey.exe
O4 - Global Startup: Enable Wireless Optical Mouse Driver.lnk = C:\Program Files\Wireless Device\Wireless Mouse\MouseAp.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = E:\Program Files\Microsoft Office\Office\1033\OLFSNT40.EXE
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - E:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - E:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINNT\system32\ZoneLabs\vsmon.exe
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
flowski521 is offline Offline
3 posts
since Sep 2005
Sep 4th, 2005
0

Re: Help Needed on HijackThis log

Quote ...
From a fresh install, add modem drivers, IE works fine.
Confident on this point, I then go to add further software
Please describe "further software". If the IE problems didn't occur until the installation of that software, we'll need to know what it is.

It would be a good idea to check if you have Internet access at all. To do this, please use the command prompt to ping the daniweb server.

Start | Run | Type "cmd" w/out quotes | Click Ok | Type "ping 69.93.117.133" w/out quotes | hit enter

Please provide the "Ping statistics"

BTW: You're right, it doesn’t appear your log has any illegitimate or malicious entries.

J_
Reputation Points: 27
Solved Threads: 6
Posting Whiz in Training
J_Search is offline Offline
284 posts
since Aug 2005
Sep 5th, 2005
0

Re: Help Needed on HijackThis log

Hi J_
thanks for your reply.

by further software I mean ms office, cubase, winamp, acrobat, photoshop... ie: what I use on the machine, after graphics drivers, modem drivers and WIn2000-SP4 is loaded.

I have an IRQ conflict problem between ATI Radeon AGP card and onboard USB ports (which ADSL modem is on). I have wracked my brains over this but can't seem to solve. I blame it on the old mobo, now running Win2000 (prev win-98 installation worked fine) -- if I change APM/ACPM settings in BIOS according to help I've seen posted online, Win2000 won't load. OS-Aware is set to NO, but that doesn't make any difference.

off=topic i know, but any ideas how I can shift that IRQ conflict, to ease the process of elimination?

Anyway, the IRQ thang may be a red herring, since IE was loading pages fine after fresh installation...

thanks for the ping advice.... results follow:


Pinging 69.93.117.133 with 32 bytes of data:


Reply from 69.93.117.133: bytes=32 time=140ms TTL=50
Reply from 69.93.117.133: bytes=32 time=140ms TTL=50
Reply from 69.93.117.133: bytes=32 time=130ms TTL=50
Reply from 69.93.117.133: bytes=32 time=141ms TTL=50

Ping statistics for 69.93.117.133:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:
Minimum = 130ms, Maximum = 141ms, Average = 137ms
Reputation Points: 10
Solved Threads: 0
Newbie Poster
flowski521 is offline Offline
3 posts
since Sep 2005
Sep 5th, 2005
0

Re: Help Needed on HijackThis log

sorry, I meant to say 'APM/ACPI' regarding BIOS settings!

flowski...
Reputation Points: 10
Solved Threads: 0
Newbie Poster
flowski521 is offline Offline
3 posts
since Sep 2005
Sep 5th, 2005
0

Re: Help Needed on HijackThis log

The thing that you must do is update to IE 6 with Service Pack 1. That may well cure it.
Have you tried installing FireFox to see if you can surf OK?
Moderator
Featured Poster
Reputation Points: 1142
Solved Threads: 982
Most Valuable Poster
crunchie is offline Offline
12,165 posts
since Feb 2004
Sep 5th, 2005
0

Re: Help Needed on HijackThis log

flowski521,

See if this helps your Internet problem: http://dv411.com/irqguide.html

J_
Reputation Points: 27
Solved Threads: 6
Posting Whiz in Training
J_Search is offline Offline
284 posts
since Aug 2005
Sep 5th, 2005
0

Re: Help Needed on HijackThis log

The log file is clean. However, your version of IE is out of date.

Sam.
Reputation Points: 10
Solved Threads: 2
Junior Poster in Training
SuperSam is offline Offline
68 posts
since Aug 2005

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: bling.exe
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: Someone please read this log. I don't speak computer language.





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC