2 quesrions Plz,1 lockup,2 kaspersky antivirus

Discussion in 'other anti-virus software' started by jazzy1120, Jun 24, 2004.

Thread Status:
Not open for further replies.
  1. jazzy1120

    jazzy1120 Registered Member

    Joined:
    Dec 6, 2003
    Posts:
    40
    hello all plz gope someone can help,
    situation 1,
    started maybe 2 weeks ago, (am wondering if Norton firewall or antivirus updates, -heard NAv put out a bad NAV update.
    PROBLEM be on chat room, or email and computer flat free/lock up, pushing ctrl,alt,delete no good only way to unfreeze,unlock is hold powerbutton in till power shuts off,any idea what might be causeing this,
    pulled out noton firewall replace with ZA, still happened,
    just pulled out Norton antivirus,
    now trying kaspersky antivirus,
    running win98se with ie 5.5-for last 3 yrs
    dsl expert package with external modem 5100B
    (wonder IF I NEED TO maybe start useing IE 6.1)
    ran virus scans every file/folder with norton nothing,
    Thank u for the help, "
    p.s. no problems shutting down or starting up
    ==============
    situation 2,
    am trying the trial ware of Kaspersky antivirus,(1)am wondering if or does it show the boot up scan, or just run unseen,and YES have box cked to start scan when system starts. but when booting up don't see any scan or scanning message,(2) will this antivirus protect/detect any virus's ,email at yahoo,,,
    Thanks for the help,"jazzy"
     
  2. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Hi Jazzy, I would start with making sure your Windows is fully up-to-date, including the latest IE 6.1. Then take a look at the following thread:

    https://www.wilderssecurity.com/showthread.php?t=15913

    and follow its advice for running Hijack This and posting a log in that forum...

    Hope this helps...

    Cheers :D
     
  3. snapdragin

    snapdragin Administrator

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    Since these questions are more related to possible AV issues, and not board related (which the General Topics forum is for)_I will move this thread to our "Other Anti-Virus Software" forum shortly. Thread has been moved - snap

    Regards,

    snap
     
    Last edited: Jun 24, 2004
  4. jazzy1120

    jazzy1120 Registered Member

    Joined:
    Dec 6, 2003
    Posts:
    40
    hello Blackspear,have & use both Spybot & AdAware, never tried hijack this,(unknown to me, is it like adaware, am going to down load ie6 or 6.1 as far as updates yes use the microsoft CATOLOG to update all past/presant updates, thanks for the the help,"jazzy"
     
  5. jazzy1120

    jazzy1120 Registered Member

    Joined:
    Dec 6, 2003
    Posts:
    40
    hello Blackspear, here is the results of the scan list, should i delete all these or try to fix them, have no idea what this is telling me, thanks "jaz"

    Logfile of HijackThis v1.97.7
    Scan saved at 4:32:54 PM, on 6/24/04
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\PROGRAM FILES\NORTON UTILITIES\NPROTECT.EXE
    C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
    C:\PROGRAM FILES\KASPERSKY LAB\KASPERSKY ANTI-VIRUS PERSONAL\KAVSVC.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\SYSTEM\HIDSERV.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\COMPAQ\CPQINET\CPQINET.EXE
    C:\WINDOWS\ptsnoop.exe
    C:\PROGRAM FILES\KASPERSKY LAB\KASPERSKY ANTI-VIRUS PERSONAL\KAV.EXE
    C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZONEALARM.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\PROGRAM FILES\NORTON UTILITIES\SYSDOC32.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\WINDOWS\DESKTOP\FIX IT UTILITIES\HIJACKTHIS.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dslhome.prodigy.net
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.presario.net/scripts/redirectors/presario/srchredir.dll?c=2c00&s=searchbar&LC=0409
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presario.net/scripts/redirectors/presario/srchredir.dll?c=2c00&s=searchbar&LC=0409
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.yahoo.com/
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
    O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe
    O4 - HKLM\..\Run: [NPROTECT] C:\Program Files\Norton Utilities\NPROTECT.EXE
    O4 - HKLM\..\Run: [CookieWall] C:\PROGRAM FILES\ANALOGX\COOKIEWALL\COOKIE.EXE
    O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
    O4 - HKLM\..\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
    O4 - HKLM\..\RunServices: [NPROTECT] C:\Program Files\Norton Utilities\NPROTECT.EXE
    O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
    O4 - HKLM\..\RunServices: [kavsvc] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
    O4 - Startup: Norton System Doctor.lnk = C:\Program Files\Norton Utilities\SYSDOC32.EXE
    O4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    O9 - Extra button: Translate (HKLM)
    O9 - Extra 'Tools' menuitem: AV &Translate (HKLM)
    O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL (HKLM)
    O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host (HKLM)
    O9 - Extra 'Tools' menuitem: AV Home (HKLM)
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
    O16 - DPF: ConferenceRoom Java Client - http://66.246.11.137:8000/java/cr.cab
    O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38161.1449537037
    O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4368/mcfscan.cab
     
  6. snapdragin

    snapdragin Administrator

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    Hi jazzy1120,

    If you deleted everything listed in your Hijackthis log, your computer would no longer work. Hijackthis will list list the good and bad entries, most will be good and essential to your computers operation.

    Your log looks clean to me, but I am seeing KAV, Nortons, and left over bits of McAfee AV. Which one are you using now?

    Regards,

    snap
     
  7. jazzy1120

    jazzy1120 Registered Member

    Joined:
    Dec 6, 2003
    Posts:
    40
    oh OK THANK U

    hello "Snap" THANK U for the help, I've as said never heard of "HIjack" think I'll just stay with SPYBot & adAWARE,"jazzy"
     
  8. tazdevl

    tazdevl Registered Member

    Joined:
    May 17, 2004
    Posts:
    837
    Location:
    AZ, USA
    HijackThis just takes a snapshot of your system and allows you to identify where problem areas could be. It's a useful tool to see what you have installed and makes it easy for you to post info so others can help to identify any problems.

    Spybot and Aware are limited by what is in their definititions, which aren't bad, but they do miss quite a bit.

    You might also want to try Ewido. Pretty good stuff.
    http://www.ewido.net/en/

    BTW you have way too much crap on your computer. I'm surprised you haven't had problems sooner. Just use 1 AV and 1 firewall program. Only the massively paranoid have more than 1. Kav and Zonealarm are sufficient. Uninstall all the others.

    Norton.NAV doesn't uninstall cleanly. Head over to the support section of Symantec, do a search and download "RNAV". It will clean all the Norton reg keys and dlls out of your system.
     
  9. jazzy1120

    jazzy1120 Registered Member

    Joined:
    Dec 6, 2003
    Posts:
    40
    happened again 755 am

    hello all again THANK U for the good help, but after took out IE5.5,& INSTALLED IE 6 & all updates, clean defragged,virus scanned (105215 folders,files)took out norton antivirus installed Kaspersky antivirus, ran ad aware,spybot S & D-3.1, all worked ok until 755 this morning,
    had 2 yahoo emails open, (copy 1 yahoo email to another uahoo email) computer again froze,locked up,held power button in, power shut off restarted,auto ran scan disk, then booted up ok, any other suggestions,
    Thanks for the help, "jazzy"
     
  10. tazdevl

    tazdevl Registered Member

    Joined:
    May 17, 2004
    Posts:
    837
    Location:
    AZ, USA
    Are you overclocking?
     
Loading...
Thread Status:
Not open for further replies.