Author Topic: Check my hijack log?  (Read 3298 times)

0 Members and 1 Guest are viewing this topic.

bas1620

  • Guest
Check my hijack log?
« on: December 04, 2004, 07:59:55 AM »
Logfile of HijackThis v1.98.2
Scan saved at 12:48:23 AM, on 12/4/2004
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\DOORS\System32\smss.exe
C:\DOORS\system32\winlogon.exe
C:\DOORS\system32\services.exe
C:\DOORS\system32\lsass.exe
C:\DOORS\system32\svchost.exe
C:\DOORS\System32\svchost.exe
C:\DOORS\system32\spoolsv.exe
C:\DOORS\Explorer.EXE
C:\DOORS\System32\devldr32.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\DOORS\System32\CTsvcCDA.exe
C:\DOORS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\DOORS\System32\IEXPLORE.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
C:\DOORS\paint.exe
C:\DOORS\site.exe
C:\DOORS\dllmanager.exe
C:\Program Files\Messenger\msmsgs.exe
C:\DOORS\System32\svch0st.exe
C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
C:\DOORS\System32\wuauclt.exe
C:\Program Files\Windows AdService\WinAdServ.exe
C:\Program Files\Windows AdService\WinAdSlave.exe
C:\DOORS\PCHealth\HelpCtr\Binaries\MSConfig.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ben\Local Settings\Temp\Temporary Directory 2 for hijackthis_198.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://63.246.131.130/index.htm
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\WS_FTP Pro\wsbho2k0.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\DOORS\System32\msdxm.ocx
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Microsoft Windows] svch0st.exe


My comp keeps getting the following viruses:
     JS:Istbar
     Win32:Wootbot-CE [Trj]
     Win32:DyfucDldr-S [Trj]
     Win32:DyfucDldr-R [Trj]    
     Win32:DyfucDldr-T [Trj]
     Win32:Trojan-gen {other}


I have fully reformatted properly and started with a fresh comp twice.  I installed firewall and antivirus BEFORE plugging into modem.

Thanks for any help


P.S. I cant figure out what Windows AdService is...

   Oh Yeah, I renamed "WINDOWS"  to "DOORS" during the last format when it asked. (Trying whatever)
    My system still automatically created a WINDOWS folder with lots in it, but i havent had any problems...will I?

Thanks again. Ben

galooma

  • Guest
Re:Check my hijack log?
« Reply #1 on: December 04, 2004, 09:43:23 AM »
yes you do have some problems dont you , but at least you are having fun , and thats important . good luck  ;D ;D ;D ;D

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Check my hijack log?
« Reply #2 on: December 04, 2004, 10:33:56 AM »
http://members.home.nl/edeijl/

Visit the HijackThis section and the malware removal setion.