Hijackthis new version

anyone else getting this.... never had it with any previous versions... as soon as I overwrote the othe version, started it, scanned got this..

Now.. it scans, then error, OK that, then continues scanning ok...

I even get the same results as previous scans as I have checked...

In process of sending email to said addy.

and yes, I can produce it everytime I Scan with it.

TAS

 

Phew!!!!.. thanks Nick... at least it's not my system... LOL...

Ta,

Cheers, TAS

 

I just dealt with a thread at TC, where a user had the same problem.

We did an export of the HKEY_CURRENT_USER\Control Panel\don't load subkey, which is to Win XP what Control.ini is to Win 9x systems: the place where control panel applets are specified that aren't supposed to launch when you open Control Panel

Nothing out of the ordinary there, least of all a reference to inetcpl.cpl...

No idea what could be causing this to happen...

 

And thanks For your time.

 

No prob, it's a pleasure!

 

Hi All & Tony while your here,

Tried the new version on XP Home ... no error message.

But I have a few questions? (I tried to look it up myself ... but Merijn's site is down atm.)

How come no 016 entries (active x controls)?
What are the F0 & F2 entries? - Mine show :

F0 - system.ini: Shell=
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,

This last one is a comment:These two "extra" button entries are for Norton Firewall & Norton AV 04 editions.

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

TIA,

dog -

 

Screen shot Don't know if this helps

 

There's now a White List for most Microsoft and Macromedia DPFs

Yup, almost everyone is getting that.

As for the first item, the Shell line from your System.ini file is reportedly listed because it's 'empty'.
This stands to reason, as in NT based systems the Shell line is to be found in the Registry.

However, it is confusing, and I've asked Merijn whether it was possible to have HT ignore it.

As for "F2 - REG:system.ini: UserInit" being listed here, that would appear to be some kind of glitch, and Merijn is already looking into it.

I suggest you tell HT to ignore both of those items.

The "No file" thingie, is something that did occur in the beta, but was subsequently fixed....

Let me check on my system...

 

Hmm, I tried it here, but 'my buttons' are listed correctly:

 

Hi Tony,

The info is much appreciated! Thanks Much

The only 2 I have ... and was looking for.

Noted!

EDIT -Your too Quick ... same version? 04? ... Just recheck your post ... I don't see your NAV & NPF entries at all? But I see the connected files ... if that is what you meant.

Thanks again Tony.

Steve -

 

MKempf, would you please start a new thread in the "adware, spyware & hijack cleaning " section of this board, and post your log there?

This topic is strictly for discussion of the new build of Hijack This itself!

 

That would be because I'm running Look n Stop and Nod32... LOL

 

Hi Tony,

Sorry, I was editing my post? ...updated version

EDIT -Your too Quick ... same version? 04? ... Just recheck your post ... I don't see your NAV & NPF entries at all? But I see the connected files ... if that is what you meant.

Thanks again Tony.

Steve -

 

Yup, I guess that's what I meant.

In the beta HT wouldn't enumerate the contents of HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions, but only those of the same subkey in HKEY_LOCAL_MACHINE (the most commonly used)

That has however been fixed.

Anyway., Merijn will by now know of the existence of this topic, and he may drop by himself later on.

Gotta go now... Laterz!

 

MKempf, I have split off your post with the Hijackthis log in it to the Hijack cleaning forum. You can find it here: https://www.wilderssecurity.com/showthread.php?t=38793

Please follow up in that thread.

Regards,

snap