pinhook Posted February 12, 2008 Report Share Posted February 12, 2008 cLogfile of Trend Micro HijackThis v2.0.2Scan saved at 4:05:37 AM, on 2/12/2008Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\atievxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Messenger\msmsgs.exeC:\Program Files\MSN\MSNCoreFiles\msn6.exeC:\PROGRA~1\FREEWI~1\Regpair.exeC:\Program Files\UltimateBet\UltimateBet.exeC:\HiJackThis.exeR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exeO9 - Extra button: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program Files\UltimateBet\UltimateBet.exeO9 - Extra 'Tools' menuitem: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program Files\UltimateBet\UltimateBet.exeO9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htmO9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htmO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1180755758605O17 - HKLM\System\CCS\Services\Tcpip\..\{119EEE73-29F8-4E33-9A28-019349F76B8D}: NameServer = 209.244.0.3 209.244.0.4O17 - HKLM\System\CS1\Services\Tcpip\..\{119EEE73-29F8-4E33-9A28-019349F76B8D}: NameServer = 209.244.0.3 209.244.0.4O23 - Service: System Managment Controler (SMSCGISVC) - Unknown owner - C:\WINDOWS\system\smscg.exe--End of file - 1968 bytes Link to post Share on other sites
rmurphy Posted February 14, 2008 Report Share Posted February 14, 2008 Welcome to BEstTechie! I'm Ryan, and I'll be helping you clean you computer.Is that the entire log? If it is, let me know. If you already used HiJack This to fix some items, I need them to be restored in order to see a complete log so I can offer you the best advice that I can.To restore the backups:Open HiJackThisClick on "View the list of Backups"Place a check mark next to everything in that windowClick RestoreClick YesReboot your computerRun HiJackThis and post a new HiJackThis log for review.In any case, I'd like to see an Uninstall ListTo obtain an Uninstall list.Open HijackThis, click Config, click Misc ToolsClick "Open Uninstall Manager"Click "Save List" (generates uninstall_list.txt)-Ryan Link to post Share on other sites
Recommended Posts