Hijack This Log

Discussion in 'adware, spyware & hijack cleaning' started by stacers, Jun 9, 2004.

Thread Status:
Not open for further replies.
  1. stacers

    stacers Registered Member

    Joined:
    Jun 9, 2004
    Posts:
    2
    I seem to have a trojan horse virus that won't go away. I've ran S&D twice and Hijack this. Here is my current log:

    Logfile of HijackThis v1.97.7
    Scan saved at 11:08:47 AM, on 6/9/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Norton Internet Security\NISUM.EXE
    C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
    C:\Program Files\Norton Internet Security\ccPxySvc.exe
    C:\WINDOWS\System32\spool\drivers\w32x86\hpzstatn.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Documents and Settings\TEMP.YOUR-US67PI6LUV.003\My Documents\HijackThis.exe

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,439
    Location:
    Netherlands
    Hi stacers,

    What leads you to think that you have a trojan?

    There certainly is none visible in your log.

    Regards,

    Pieter
     
  3. stacers

    stacers Registered Member

    Joined:
    Jun 9, 2004
    Posts:
    2
    Well, a window keeps popping up telling me I have it. Plus, my desktop icons are gone, as are all of my bookmarks and 3 yrs worth of pictures.

    I can't even access my email.

    I've tried restoring my system and that doesn't work either.
    Every time I re-boot when it comes back on it says Windows can't log on to my profile because it may be corrupt. So they put me on a temporary profile.
     
  4. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,439
    Location:
    Netherlands
    Aha, that would explain the short log.
    Can you use System Restore from safe mode?

    Regards,

    Pieter
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.