Member Avatar for Slade

ok, my other computer is going wack, here is my hjt log:

Logfile of HijackThis v1.97.7
Scan saved at 10:41:23 AM, on 29/05/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\atiptaxx.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\hjt\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://windowsupdate.microsoft.com/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -

Thanks so much in advance.

Slade

  • 2 Contributors
  • 3 Replies
  • 116 Views
  • 8 Hours Discussion Span
  • Latest Post Latest Post by crunchie

Dani AI

Generated

A quick follow-up based on ’s read of the scan: that snapshot does not show an obvious infection, but HijackThis is just one diagnostic view and can miss or be fooled by programs that masquerade as legitimate items. A few quick, conservative steps will close gaps and give better confidence the system is clean.

First, make a full backup or create a System Restore point before changing anything. Update the operating system to the latest Windows XP service pack and install all security updates (if XP is still in use). Microsoft provides the official service pack and update downloads; keep the OS and all plugins current.

Second, update signatures and run the installed antivirus as a full scan, then run a second-opinion scanner from Safe Mode with Networking. Tools such as Malwarebytes are effective at finding adware/spyware missed by some AV products. After those scans, run Microsoft’s Safety Scanner or another reputable on-demand scanner to double-check.

Third, inspect startup and autorun entries with a dedicated tool (Sysinternals Autoruns) rather than deleting entries blindly from HijackThis. Autoruns shows exactly what will start and where; export a copy of the list before disabling anything. When using HijackThis: save its backup file and only “fix” items you can identify from trusted references. Avoid random “fix lists” from unknown sites.

If problems persist (slowdown, redirects, popups), collect fresh diagnostics: a new HijackThis log plus a current process/autoruns export and post them. If uncertain about an entry, report it rather than removing it. This conservative workflow protects system stability while improving the chance of finding anything that a single scan might miss.

Recommended Answers

All 3 Replies

Member Avatar for crunchie

Apart from Messenger Plus which needs to be installed without the 3rd party sponsor, LOP, there doesn't appear to be anything bad in your log.

Member Avatar for Slade

yeah I installed it without the third party sponsor... thanks again crunchie you are a very great addition to these forums. We'd be lost without you.

Member Avatar for crunchie

Thanks for the kind remarks, appreciate it.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.