HijackThis log. Some questions :)

Discussion in 'adware, spyware & hijack cleaning' started by eXeel, Jun 29, 2004.

Thread Status:
Not open for further replies.
  1. eXeel

    eXeel Registered Member

    Jun 29, 2004
    Hi friends :) ,

    I have done what LowWaterrMark told me to and it seems to work :) Great.
    He closed the thread, though, understandable, but hope you have the time to help giving me some answers.

    I have before searched the net for ways of manually removing a virus like backdoor. somthing, that prevented Norton from running and slowing my comp down, but I have never come across this side.
    Probably because spyware has not given me problems since I got Ad-Aware.

    But I wonder...

    1) Is this bridge.dll like an epidemic at the moment, a spyware but worse because it does this on startup?
    Think I removed it by letting Ad-Aware do it on startup, before it ran the file. But what did it do?

    2) How do you know what is good things and what is bad and should be deleted?
    Is it because you remember each of them or are you looking for something specific?

    I was checking the log and I know my computer better than you (Even though you might understand things better than me, hehe) and some of the things I found to NOT seem necessary.
    These are the ones:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wilderssecurity.com/showthread.php?t=15913
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.games-fusion.net/ <--- Why this? I have the above, but I don't need two starting pages. Can I delete this? It is the other, the WS, that is my real start page.

    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmes\Adobe Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll <-- What do I need this for? Only use Acrobat Reader rarely :) But this Help.dll, what use is it for?

    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx <-- Toolbar Radio? Does not seem to be anything I need. Is it needed by other programs that are important?

    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE <-- And this? Helper.exe?

    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll <-- Huh? 10-15 of these, identical. What is it?

    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28177.cab <-- Does not sound important or good to me?

    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_42.cab <-- How about this?

    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://housecall.trendmicro-europe.com/housecall/Xscan53.cab <-- Eeh? Important? What is .cab?

    Hope you can help me out on this one.
    I am interested in not only getting rid of these things that bug my computer but also understand them a little better :)

    Hope someone have the time to explain each of these things.
    I have attached my HijackThis log.
    Hope you will spare some time and enlighten me :) ...

    /Jamie Moeller

    Attached Files:

  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Apr 27, 2002
Thread Status:
Not open for further replies.