Hijack This Log

Discussion in 'adware, spyware & hijack cleaning' started by stacers, Jun 9, 2004.

Thread Status:
Not open for further replies.
  1. stacers

    stacers Registered Member

    Joined:
    Jun 9, 2004
    Posts:
    2
    I seem to have a trojan horse virus that won't go away. I've ran S&D twice and Hijack this. Here is my current log:

    Logfile of HijackThis v1.97.7
    Scan saved at 11:08:47 AM, on 6/9/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Norton Internet Security\NISUM.EXE
    C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
    C:\Program Files\Norton Internet Security\ccPxySvc.exe
    C:\WINDOWS\System32\spool\drivers\w32x86\hpzstatn.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Documents and Settings\TEMP.YOUR-US67PI6LUV.003\My Documents\HijackThis.exe

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi stacers,

    What leads you to think that you have a trojan?

    There certainly is none visible in your log.

    Regards,

    Pieter
     
  3. stacers

    stacers Registered Member

    Joined:
    Jun 9, 2004
    Posts:
    2
    Well, a window keeps popping up telling me I have it. Plus, my desktop icons are gone, as are all of my bookmarks and 3 yrs worth of pictures.

    I can't even access my email.

    I've tried restoring my system and that doesn't work either.
    Every time I re-boot when it comes back on it says Windows can't log on to my profile because it may be corrupt. So they put me on a temporary profile.
     
  4. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Aha, that would explain the short log.
    Can you use System Restore from safe mode?

    Regards,

    Pieter
     
Thread Status:
Not open for further replies.