My HijackThis Log

Discussion in 'adware, spyware & hijack cleaning' started by FoxMulder42, Jun 20, 2004.

Thread Status:
Not open for further replies.
  1. FoxMulder42

    FoxMulder42 Registered Member

    Joined:
    Jun 20, 2004
    Posts:
    4
    My HijackThis Log-Please Help!!!

    Hi there- I wonder if you can help me. I have "svchost.exe has generated errors" messages popping up while I'm using my computer- and the same for Internet Explorer... also unwanted links appear in my favourites folder and unwanted pictures saved as wallpaper before startup. How do I stop this from happening?

    Another (maybe separate?) problem is MSN Messenger service... how can you remove it? My uninstall programs link won't open.

    I'll post my log- I'd be really grateful for any help!

    Thanks!


    Logfile of HijackThis v1.97.7
    Scan saved at 17:57:03, on 20/06/2004
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\spoolsv.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\system32\regsvc.exe
    C:\WINNT\system32\MSTask.exe
    C:\WINNT\system32\stisvc.exe
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\crwn.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\Explorer.EXE
    C:\WINNT\winpi.exe
    C:\WINNT\system32\internat.exe
    C:\saved from win98 install 1\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\General Zod\Desktop\CastleQuest\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINNT\system32\qkaaw.dll/sp.html#22776
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://qkaaw.dll/index.html#22776
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINNT\secure.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = res://qkaaw.dll/index.html#22776
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINNT\system32\qkaaw.dll/sp.html#22776
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://qkaaw.dll/index.html#22776
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINNT\system32\qkaaw.dll/sp.html#22776
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\secure.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\secure.html
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {2E9CAFF6-30C7-4208-8807-E79D4EC6F806} - C:\Program Files\Submit\submithook.dll
    O2 - BHO: (no name) - {3C14482F-CF46-FEFF-C35C-99CDA3BF02AB} - C:\WINNT\winhz.dll
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [Image] rundll32 C:\WINNT\crhr32.dll,Install
    O4 - HKLM\..\Run: [winpi.exe] C:\WINNT\winpi.exe
    O4 - HKCU\..\Run: [internat.exe] internat.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\saved from win98 install 1\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\RunServices: [Image] rundll32 C:\WINNT\crhr32.dll,Install
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Research (HKLM)
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
    O16 - DPF: {EC5A4E7B-02EB-451D-B310-D5F2E0A4D8C3} (webhelper Class) - http://register.btopenworld.com/templates/btwebcontrol012.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{78A79D27-9DAF-497C-AA8B-BFAB1B847341}: NameServer = 213.1.119.98 213.1.119.97
     
    Last edited: Jun 21, 2004
  2. FoxMulder42

    FoxMulder42 Registered Member

    Joined:
    Jun 20, 2004
    Posts:
    4
    And another problem- sometimes when I move the mouse my cursor moves around the screen of its own accord, closing programs/pages I'm using- very annoying indeed- has anyone got any suggestions? Greatly appreciated!

    -Fox : o )
     
  3. FoxMulder42

    FoxMulder42 Registered Member

    Joined:
    Jun 20, 2004
    Posts:
    4
    The problem's still there- does anyone have any suggestions? Please please please let me know! :'( :'( :'( *begs in begging way*
     
  4. FoxMulder42

    FoxMulder42 Registered Member

    Joined:
    Jun 20, 2004
    Posts:
    4
    *begs further in superlative begging fashion*
     
Thread Status:
Not open for further replies.