943,754 Members | Top Members by Rank

Hardware and Software > Microsoft Windows > Viruses, Spyware and other Nasties > can't stay on line
Ad:
You are currently viewing page 1 of this multi-page discussion thread
Permalink
Jun 2nd, 2004
0

can't stay on line

Expand Post »
Hi i can't stay online long when surfing the web.!!!! Why? any help it great! here is hijack this log file

Logfile of HijackThis v1.97.7
Scan saved at 4:14:05 AM, on 6/2/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [rundll32.exe] C:\WINDOWS\System32\rundll32.exe.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCDRealtime] C:\WINDOWS\realtime.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/downlo...22/wmv9VCM.CAB
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/v...fo/webscan.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...tatsClient.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...AB?38004.94875
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by15fd.bay15.hotmail.msn.com/...x/HMAtchmt.ocx
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary...reShowdown.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A25B4830-2FC7-47F1-9152-D66BEFBB37E7}: NameServer = 142.177.1.2 142.177.129.11
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
moxin is offline Offline
13 posts
since Mar 2004
Permalink
Jun 2nd, 2004
0

Re: can't stay on line

Hi moxin,

I'm moving this to our new (or perhaps not-so-new by now) Security forum; that's where we're now concentrating spyware-related troubleshoots.



When you say that you "can't stay on line", what exactly do you mean, and what type of Internet connection do you have?


By the way, this looks a bit odd:

"[rundll32.exe] C:\WINDOWS\System32\rundll32.exe.exe".

Does that entry really have a double ".exe" extension?
DMR
Team Colleague
Reputation Points: 221
Solved Threads: 369
Wombat At Large
DMR is offline Offline
6,439 posts
since Dec 2003
Permalink
Jun 2nd, 2004
0

Re: can't stay on line

Get rid of these:

O4 - HKLM\..\Run: [rundll32.exe] C:\WINDOWS\System32\rundll32.exe.exe
O4 - HKLM\..\Run: [PCDRealtime] C:\WINDOWS\realtime.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/...all/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/...nfo/webscan.cab

I'm not sure about the nameserver line (it probably should be gotten rid of too, but I don't know if you actually have one set).
O17 - HKLM\System\CCS\Services\Tcpip\..\{A25B4830-2FC7-47F1-9152-D66BEFBB37E7}: NameServer = 142.177.1.2 142.177.129.11
Moderator
Reputation Points: 322
Solved Threads: 28
The C# Man, Myth, Legend
Tekmaven is offline Offline
914 posts
since Feb 2002
Permalink
Jun 2nd, 2004
0

Re: can't stay on line

Upon further reasearch, the nameserver line is definatly bad. In fact, its probably the one causing your problems.
Moderator
Reputation Points: 322
Solved Threads: 28
The C# Man, Myth, Legend
Tekmaven is offline Offline
914 posts
since Feb 2002
Permalink
Jun 3rd, 2004
0

Re: can't stay on line

Search IP here .
http://www.arin.net/whois/
Team Colleague
Reputation Points: 1056
Solved Threads: 792
I hate 20 Questions
caperjack is offline Offline
12,720 posts
since Aug 2003
Permalink
Jun 3rd, 2004
0

Re: can't stay on line

Its... really not legit :-P.
Moderator
Reputation Points: 322
Solved Threads: 28
The C# Man, Myth, Legend
Tekmaven is offline Offline
914 posts
since Feb 2002
Permalink
Jun 3rd, 2004
0

Re: can't stay on line

I got rid of the one that were there, but I'm still having trouble with being able to surf the web after about 10 min's. It IE says I have a dns error I believe but can't be sure because the error flashes so fast I can't read it all. I have DSL Is that what you needed? Thx for the help so far. Still something is not quite right!
Reputation Points: 10
Solved Threads: 0
Newbie Poster
moxin is offline Offline
13 posts
since Mar 2004
Permalink
Jun 3rd, 2004
0

Re: can't stay on line

Quote originally posted by moxin ...
I got rid of the one that were there, but I'm still having trouble with being able to surf the web after about 10 min's. It IE says I have a dns error I believe but can't be sure because the error flashes so fast I can't read it all. I have DSL Is that what you needed? Thx for the help so far. Still something is not quite right!
you have the sasser worm it infects IE go to symantec and find the removal tool, but I strongly recommend Norton Antivirus to protect you from further issues.
Reputation Points: 10
Solved Threads: 1
Newbie Poster
nic_m_moon is offline Offline
14 posts
since Jun 2004
Permalink
Jun 3rd, 2004
0

Re: can't stay on line

Oh duh forgot to tell you that the file with the isue was C:\WINDOWS\system32\lsass.exe.
Reputation Points: 10
Solved Threads: 1
Newbie Poster
nic_m_moon is offline Offline
14 posts
since Jun 2004
Permalink
Jun 4th, 2004
0

Re: can't stay on line

hi there

to get rid of the sasser worm virus please click the below link to get the removal tool

CLICK HERE

and i suggest you download AVG 6.0 FREE EDITION to detect further worm/trojan infections and get rid of them!

while downloading you should try WEBROOT SPY SWEEPER to get rid of any spyware that may be causing problems.

I hope you problem is sorted soon!

Lee.
Reputation Points: 10
Solved Threads: 1
Light Poster
xxplosive is offline Offline
33 posts
since May 2004

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: IE6 SLOW - Tried everything in the book ...
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: rundll32.exe problem on shutdown





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC