The registry entries for Avast... well?

[druzila]

Please, starting with Windows XP, I have experienced some difficulties. This, below, is a content of the log file, from Hijackthis. This entries are well?

Workstation(no network - single machine) with AMD Duron 1.6mhz. with 512mb RAM. and 40mb. IDE/HD.

----- start log
Logfile of HijackThis v1.99.1
Scan saved at 08:59:06, on 5/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe
C:\Arquivos de programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Arquivos de programas\Alwil Software\Avast4\aswUpdSv.exe
C:\Arquivos de programas\Alwil Software\Avast4\ashServ.exe
C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe
C:\Arquivos de programas\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Arquivos de programas\Opera\Opera.exe
C:\hijack\HijackThis.exe

O4 - HKLM\..\Run: [avast!] C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Arquivos de programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O17 - HKLM\System\CCS\Services\Tcpip\..\{02ED2F6A-39EA-4E08-9C79-FF5859F5DD19}: NameServer = 201.10.128.3 201.10.120.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{02ED2F6A-39EA-4E08-9C79-FF5859F5DD19}: NameServer = 201.10.128.3 201.10.120.3
O17 - HKLM\System\CS2\Services\Tcpip\..\{02ED2F6A-39EA-4E08-9C79-FF5859F5DD19}: NameServer = 201.10.128.3 201.10.120.3
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Arquivos de programas\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Arquivos de programas\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Arquivos de programas\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

---- end log.

Thanks for possible help...

[FreewheelinFrank]

This seems very short for a HijackThis! log!  Are you sure you have posted the entire log?

What difficulties have you experienced?

[druzila]

Thank you for help me. 
I think that yes, however I cannot guarantee. I do not have much experience with the hijackthis. 
The machine breaks constantly, when initiating (?).
Thanks and best regards,

Dru

[FreewheelinFrank]

There's nothing in the HijacKThis log.

I think you have a problem while the computer is booting, if I understand correctly.

It could be a hardware problem or damaged XP installation.

You could try running a hard disk check, booting into 'last known good,' a system restore, or repairing XP.

http://support.microsoft.com/kb/315265

http://www.xmission.com/~comphope/issues/ch000626.htm

http://www.geekstogo.com/forum/index.php?showtopic=138

[druzila]

Ok. Thank you very much for your help.
Escuse me for my poor english... I don't speak or write very well.

Dru

[WwTIPPYwW]

off topic -If you don't use these a lot, you might want to consider removing these from starting up every time you turn on your PC.  Really not needed and might speed up your boot up.

Code: [Select]

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Arquivos de programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"

[druzila]

Ok.
Thank you for your suggestion.  I was traveling and came back just today.  So, I have made the suggested alterations. Thanks and best regards. 
Dru.

[jackthib]

I could be wrong (newbie here) but you seem to be missing 2 programs which could slow down the logon process:

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Arquivos de programas\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

Check to see if you have them at the specified location...

[chocholo]

Hijackthis is searching for 'C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe" /service' (including double quotes and '/service' parameter) as a file, this causes 'file missing', because only present is 'C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe'.

[igor]

So, this is a bug in HijackThis, actually - there's nothing wrong about those entries.

[essexboy]

Hi druzilla, you appear to missing the 02 entries whilst it is not beyond possibility that you have none it is also a sign of malware intrusion.  So I would suggest you rename HJT to somthing else e.g. Gotcha and then re-run it and see if you get any 02 entries appearing.  If you do it may be a sign of a Virtumondo infection