can somebody please look over

Discussion in 'adware, spyware & hijack cleaning' started by FukenFooser 007.5, Jan 27, 2004.

Thread Status:
Not open for further replies.
  1. FukenFooser 007.5

    FukenFooser 007.5 Registered Member

    Joined:
    Sep 28, 2003
    Posts:
    118
    Location:
    High Mnt West. Idaho
    Please take a look at my stuff. :oops:

    system getting weird
     
  2. Unzy

    Unzy Registered Member

    Joined:
    Nov 2, 2003
    Posts:
    1,098
    Location:
    Belgium
    Hi FukenFooser,

    that looks clean to me.

    Maybe you can get more detailed on how you feel your system is acting up?

    Thnx

    Cheers,
     
  3. subratam

    subratam Registered Member

    Joined:
    Nov 14, 2003
    Posts:
    1,310
    Location:
    Issaquah, WA
    hi fukenfooser,
    was just going thru your log...
    and do wait for the experts here to check through the log you posted and help you out regarding that
    thx
     
  4. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
    Looks like one of the experts beat you to it, subratam. :)

    FukenFooser 007.5,

    Maybe a new version of HijackThis would reveal some more.
    Latest is 1.97.7

    Regards,

    Pieter
     
  5. FukenFooser 007.5

    FukenFooser 007.5 Registered Member

    Joined:
    Sep 28, 2003
    Posts:
    118
    Location:
    High Mnt West. Idaho
    o_O
    "I don't know about #'s 2,2,4th #4 or 6th and 12th 4's also, 12,1st 16,o_Oo_Oo_O?
    any help will be greatly apprecated!!

    Thank you for looking!
    HAVE A GREAT DAY!!" from first log post bottem of log file.

    By "weird" I mean, when starting task mngr, go to performance and cpu usage will be at 100% then drop to
    a more realistic amount for app's that are running, or in the processes tab the iexplore.exe=13,464k, explorer.exe=
    16,068k,svchost.exe=13,700k, winlogon.exe=16,576k.
    also what is the number of processes that should be running at a clean install? 21 is what I think.
    I just "feel" that something else is running in the background, I even sometimes pull the cable out to isolate my puter and run all Anti's I have to see what is
    happening. The AntiVir xp shows a bunch of stuff that is over my head and I would love to post that stuff sometime. Also it seams like symantec and liveupdate are getting on-line way to much, like about every 20min. And how many things need to get on-line in the sys for lets say, me to launch internet explorer?
    Can I attach more than one file or do I need to post for each one? o_O
    :oops: :doubt:
    Aha, forgot to name file as .txt
    but did remember to copy message before trying to post!!
     
  6. FukenFooser 007.5

    FukenFooser 007.5 Registered Member

    Joined:
    Sep 28, 2003
    Posts:
    118
    Location:
    High Mnt West. Idaho
    o_O o_O o_O o_O o_O o_O

    sub, you lost me? I don't know what you was trying to tell me with your reply.
    I am a "braindead" type so please give detailed info.

    I can (sometimes) follow good instructions.

    BUT, thanks for looking and trying to help,(I need it).

    Have a great day\night whatever it is for all who help!

    :cool:



    ff
     
  7. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
    Some items you can uncheck in msconfig:

    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
    O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
    O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe

    Source: http://www.sysinfo.org/startupinfo.php

    Maybe it will help you to get a betterview of what is going on.

    Regards,

    Pieter
     
  8. FukenFooser 007.5

    FukenFooser 007.5 Registered Member

    Joined:
    Sep 28, 2003
    Posts:
    118
    Location:
    High Mnt West. Idaho
    :)


    Thank you Pieter! You Are The ONE!!!!!!!!!!
    I didn't find disc detector or CTStartup but I did find the others in
    Start, run, type in "msconfig", startup tab.
    Thank you.
    I also found a post by you that links to all the stuff I don't know or
    understand. It was in the help for this "Browser Hijacks and Spyware Problems". It is a great starting point for the people like me who don't or can't seem to get it. WOO WOOO!!!!!
    So great I even wrote them down besides adding to fav. (because I tend to reinstall or reformat a bunch).
    Have a great one!

    ff
     
  9. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
    Glad to help. :cool:

    Pieter
     
  10. FukenFooser 007.5

    FukenFooser 007.5 Registered Member

    Joined:
    Sep 28, 2003
    Posts:
    118
    Location:
    High Mnt West. Idaho
    :D

    Hey Pieter, Thanks again.
    Something keeps leaving stuffon my desktopo_O
    like, "CurrentBatch.tbe" and "CurrentCfg.tpr" .
    I don't have a clue as usual and can't open with anything and webhelp is not very helpful. Any ideas.
    Just wondering.

    l8r


    ff
     
  11. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
    When using TMPGEnc you can specify the directories where to put those files.
    Maybe the Desktop is not a great idea. :p

    Regards,

    Pieter
     
  12. subratam

    subratam Registered Member

    Joined:
    Nov 14, 2003
    Posts:
    1,310
    Location:
    Issaquah, WA
    hey ff,

    what i meant to say was that the IP address in the HOST place was not the correct one to go to www.dcsresearch.com as i am sure you have got one or more of their product which needs to have one such HOST address. The right one was also advised which is the one that should be there at the HOST for proper redirection
    hope that made u understand
    thx
     
Thread Status:
Not open for further replies.