XTREME-SOURCE
Search:

Go Back   XTREME-SOURCE > OPERATING SYSTEMS SUPPORT > OPERATING SYSTEMS > WINDOWS XP
Shoutbox
Loading...


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 02-14-2008, 03:02 PM
Member
 
Join Date: Oct 2007
Posts: 289
Send a message via MSN to Darlyle
Hjt

Please and Thank you.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:56:34, on 2/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = IE7
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe

--
End of file - 3841 bytes
__________________
[IMG]file:///C:/DOCUME%7E1/ADMINI%7E1/LOCALS%7E1/Temp/moz-screenshot-2.jpg[/IMG]
Reply With Quote
 
Old 02-14-2008, 03:37 PM
Lord Sesshomaru's Avatar
Moderator
 
Join Date: Nov 2005
Location: Anti-Spirals Realm
Posts: 8,377

Looks clean, quit posting clean logs dammit. :P
__________________


Quote:
Gigabyte DQ6 X-48/Intel Core 2 Quad Q6700@3.00Ghz/4x1GB Corsair Dominator DDR2 PC 8500/Sapphire Radeon HD3870 (Omega Drivers)/Seasonic 650w PSU/Western Digital 500GB SATA II HDD/NZXT Blackline Midtower/Xigmatek HDT-S963 92mm Rifle CPU Cooler/Xigmatek Crossbow LGA 775 Bolt through kit (Burn in hell pushpins!)/Silverstone FM121 120mm Case Fan x3/Logitech Z5500 5.1 Surround Sound
Reply With Quote
 
Old 02-14-2008, 04:06 PM
Member
 
Join Date: Oct 2007
Posts: 289
Send a message via MSN to Darlyle

Well yanno Just got to be sure.

Ty LS.

On a side note, I deleted:

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

That's not a bad thing is it?
__________________
[IMG]file:///C:/DOCUME%7E1/ADMINI%7E1/LOCALS%7E1/Temp/moz-screenshot-2.jpg[/IMG]
Reply With Quote
 
Old 02-14-2008, 04:12 PM
Lord Sesshomaru's Avatar
Moderator
 
Join Date: Nov 2005
Location: Anti-Spirals Realm
Posts: 8,377

Nah shouldn't matter, probably remnants of uninstalled software. Registry programs will also scan BHO entries with no corresponding files and remove them.
__________________


Quote:
Gigabyte DQ6 X-48/Intel Core 2 Quad Q6700@3.00Ghz/4x1GB Corsair Dominator DDR2 PC 8500/Sapphire Radeon HD3870 (Omega Drivers)/Seasonic 650w PSU/Western Digital 500GB SATA II HDD/NZXT Blackline Midtower/Xigmatek HDT-S963 92mm Rifle CPU Cooler/Xigmatek Crossbow LGA 775 Bolt through kit (Burn in hell pushpins!)/Silverstone FM121 120mm Case Fan x3/Logitech Z5500 5.1 Surround Sound
Reply With Quote
 
Old 02-14-2008, 07:02 PM
Member
 
Join Date: Oct 2007
Posts: 289
Send a message via MSN to Darlyle

Ah ok, I just deleted it because it said No File, and I figured it wouldn't matter.

And I know I keep postin clean logs, but it's better safe than sorry yea?
__________________
[IMG]file:///C:/DOCUME%7E1/ADMINI%7E1/LOCALS%7E1/Temp/moz-screenshot-2.jpg[/IMG]
Reply With Quote
 
Old 02-14-2008, 08:32 PM
Lord Sesshomaru's Avatar
Moderator
 
Join Date: Nov 2005
Location: Anti-Spirals Realm
Posts: 8,377

Yeah it's cool man, I was just messin with ya before. Extremely infected HJT logs can take quite awhile to sort through, the average one isn't so bad.
__________________


Quote:
Gigabyte DQ6 X-48/Intel Core 2 Quad Q6700@3.00Ghz/4x1GB Corsair Dominator DDR2 PC 8500/Sapphire Radeon HD3870 (Omega Drivers)/Seasonic 650w PSU/Western Digital 500GB SATA II HDD/NZXT Blackline Midtower/Xigmatek HDT-S963 92mm Rifle CPU Cooler/Xigmatek Crossbow LGA 775 Bolt through kit (Burn in hell pushpins!)/Silverstone FM121 120mm Case Fan x3/Logitech Z5500 5.1 Surround Sound
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


vBulletin 3.7.1 ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.2.0