Computer restarts on its own., HJT Log |
![]() ![]() |
Computer restarts on its own., HJT Log |
Jun 22 2005, 09:09 PM
Post
#1
|
|
|
New Member ![]() Posts: 3 OS: Win 2000 NT |
Logfile of HijackThis v1.99.1 Scan saved at 8:00:28 PM, on 6/22/2005 Platform: Windows 2000 SP3 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe c:\winnt\altiris\aclient\AClient.exe C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe C:\PROGRA~1\Compaq\COMPAQ~1\CPQWEB~1\WebDmi.exe C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe C:\WINNT\System32\svchost.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINNT\System32\mgabg.exe C:\Program Files\Symantec_Desktop_Firewall\NISSERV.EXE C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe C:\WINNT\system32\nvsvc32.exe C:\Program Files\McAfee\Remote Desktop 32\CONNSRV.EXE C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\Program Files\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe C:\PROGRA~1\Compaq\COMPAQ~1\cpqdmi.exe C:\Program Files\Softwin\BitDefender8\vsserv.exe C:\Program Files\Symantec_Desktop_Firewall\NISUM.EXE C:\WINNT\Explorer.EXE C:\WINNT\System32\PDesk\PDesk.exe C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE C:\PROGRA~1\Compaq\COMPAQ~1\CHKADMIN.EXE C:\Program Files\Symantec_Desktop_Firewall\IAMAPP.EXE C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe C:\Program Files\Microsoft AntiSpyware\gcasServ.exe C:\Program Files\Softwin\BitDefender8\bdmcon.exe C:\Program Files\Softwin\BitDefender8\bdoesrv.exe C:\Program Files\Softwin\BitDefender8\bdnagent.exe C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Cas\Client\casclient.exe C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe C:\Program Files\ewido\security suite\ewidoguard.exe C:\Documents and Settings\camullen\My Documents\My Received Files\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://insidesrp R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by SRP Desktop Management R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [Matrox Powerdesk] C:\WINNT\System32\PDesk\PDesk.exe /Autolaunch O4 - HKLM\..\Run: [RightFaxFormLoad] regedit /s c:\progra~1\rightfax\rightfax.reg O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [ChkAdmin] C:\PROGRA~1\Compaq\COMPAQ~1\CHKADMIN.EXE O4 - HKLM\..\Run: [iamapp] "C:\Program Files\Symantec_Desktop_Firewall\IAMAPP.EXE" O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe O4 - HKLM\..\Run: [C:\WINNT\VCMnet11.exe] C:\WINNT\VCMnet11.exe O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINNT\cfgmgr52.dll,DllRun O4 - HKLM\..\Run: [exp] C:\WINNT\system32\exp O4 - HKLM\..\Run: [AUNPS2] RUNDLL32 AUNPS2.DLL,_Run@16 O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender8\bdmcon.exe" O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender8\bdoesrv.exe" O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Y0tERSb3V] tcpaccrc.exe O4 - HKCU\..\Run: [CAS Client] "C:\Program Files\Cas\Client\casclient.exe" O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O14 - IERESET.INF: START_PAGE_URL=http://insidesrp O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} (WSDownloader Control) - http://www.webshots.com/samplers/WSDownloader.ocx O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{0047E553-172A-496E-AE20-15FFE2DEBE88}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{1F2B5530-EE2A-43F0-B393-97313014274D}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{45EEFEE3-8277-4144-A473-1C7263628519}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{9782D0A6-7A4D-4FDB-894C-E951DCE1713A}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{AAD57B50-1353-4C88-BA62-65789DF1423B}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{AB219278-628D-4758-BF8A-CA6F2B2DF941}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{C78AF0FF-6FA6-43A7-BEF9-9C88E971EC42}: Domain = srp.gov O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = srp.gov O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = srp.gov O17 - HKLM\System\CS1\Services\Tcpip\..\{0047E553-172A-496E-AE20-15FFE2DEBE88}: Domain = srp.gov O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = srp.gov O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = srp.gov O17 - HKLM\System\CS2\Services\Tcpip\..\{0047E553-172A-496E-AE20-15FFE2DEBE88}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = srp.gov O23 - Service: Altiris Client Service (AClient) - Altiris, Inc. - c:\winnt\altiris\aclient\AClient.exe O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing) O23 - Service: Insight Local Alerter (CPQALERT) - Hewlett-Packard Company - C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe O23 - Service: cpqdmi - Compaq Computer Corporation - C:\PROGRA~1\Compaq\COMPAQ~1\cpqdmi.exe O23 - Service: Insight Web Agent (cpqWebDmi) - Hewlett-Packard Company - C:\PROGRA~1\Compaq\COMPAQ~1\CPQWEB~1\WebDmi.exe O23 - Service: DB2 - DB2 (DB2) - Unknown owner - \\SRPAPP80\db2thin\sqllib\bin\db2syscs.exe (file missing) O23 - Service: DB2 JDBC Applet Server - Control Center (DB2ControlCenterService) - Unknown owner - \\SRPAPP80\db2thin\sqllib\bin\db2ccs.exe (file missing) O23 - Service: DB2 JDBC Applet Server (DB2JDS) - Unknown owner - \\SRPAPP80\db2thin\sqllib\bin\db2jds.exe (file missing) O23 - Service: DB2 Security Server (DB2NTSECSERVER) - Unknown owner - \\SRPAPP80\db2thin\sqllib\bin\db2sec.exe (file missing) O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe O23 - Service: Contivity VPN Service (ExtranetAccess) - Nortel Networks NA, Inc. - C:\Program Files\Nortel Networks\Extranet_serv.exe O23 - Service: MGABGEXE - Matrox Graphics Inc. - C:\WINNT\System32\mgabg.exe O23 - Service: Symantec Desktop Firewall Service (NISSERV) - Symantec Corporation - C:\Program Files\Symantec_Desktop_Firewall\NISSERV.EXE O23 - Service: NISUM - Symantec Corporation - C:\Program Files\Symantec_Desktop_Firewall\NISUM.EXE O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe O23 - Service: RemoteDesktop Connection Manager (RemoteDesktopConnectionManager) - McAfee Associates Inc - C:\Program Files\McAfee\Remote Desktop 32\CONNSRV.EXE O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender8\vsserv.exe" /service (file missing) O23 - Service: Win32Sl (WIN32SL) - Intel - C:\Program Files\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing) |
|
|
Jun 30 2005, 10:17 PM
Post
#2
|
|
![]() SuperMod Posts: 11,394 From: In the gym OS: xp home, xp pro |
Hi CA. Sorry you were overlooked.
I will need you to run a new hijack this log and post it in this thread, so I can see the latest threats to your computer. |
|
|
Jul 3 2005, 01:47 PM
Post
#3
|
|
|
New Member ![]() Posts: 3 OS: Win 2000 NT |
I knw that you are busy. Thanks for your help.
Logfile of HijackThis v1.99.1 Scan saved at 12:41:22 PM, on 7/3/2005 Platform: Windows 2000 SP3 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe c:\winnt\altiris\aclient\AClient.exe C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe C:\PROGRA~1\Compaq\COMPAQ~1\CPQWEB~1\WebDmi.exe C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe C:\WINNT\System32\svchost.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINNT\System32\mgabg.exe C:\Program Files\Symantec_Desktop_Firewall\NISSERV.EXE C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe C:\WINNT\system32\nvsvc32.exe C:\Program Files\McAfee\Remote Desktop 32\CONNSRV.EXE C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\Program Files\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe C:\PROGRA~1\Compaq\COMPAQ~1\cpqdmi.exe C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe C:\Program Files\Softwin\BitDefender8\vsserv.exe C:\WINNT\Explorer.EXE C:\WINNT\System32\PDesk\PDesk.exe C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE C:\PROGRA~1\Compaq\COMPAQ~1\CHKADMIN.EXE C:\Program Files\Symantec_Desktop_Firewall\IAMAPP.EXE C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe C:\Program Files\Softwin\BitDefender8\bdmcon.exe C:\Program Files\Softwin\BitDefender8\bdoesrv.exe C:\Program Files\Softwin\BitDefender8\bdnagent.exe C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Cas\Client\casclient.exe C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe C:\WINNT\webshots.scr C:\Program Files\Symantec_Desktop_Firewall\NISUM.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\camullen\My Documents\My Received Files\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://insidesrp R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by SRP Desktop Management R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [Matrox Powerdesk] C:\WINNT\System32\PDesk\PDesk.exe /Autolaunch O4 - HKLM\..\Run: [RightFaxFormLoad] regedit /s c:\progra~1\rightfax\rightfax.reg O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [ChkAdmin] C:\PROGRA~1\Compaq\COMPAQ~1\CHKADMIN.EXE O4 - HKLM\..\Run: [iamapp] "C:\Program Files\Symantec_Desktop_Firewall\IAMAPP.EXE" O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe O4 - HKLM\..\Run: [C:\WINNT\VCMnet11.exe] C:\WINNT\VCMnet11.exe O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINNT\cfgmgr52.dll,DllRun O4 - HKLM\..\Run: [exp] C:\WINNT\system32\exp O4 - HKLM\..\Run: [AUNPS2] RUNDLL32 AUNPS2.DLL,_Run@16 O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender8\bdmcon.exe" O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender8\bdoesrv.exe" O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Y0tERSb3V] tcpaccrc.exe O4 - HKCU\..\Run: [CAS Client] "C:\Program Files\Cas\Client\casclient.exe" O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O14 - IERESET.INF: START_PAGE_URL=http://insidesrp O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} (WSDownloader Control) - http://www.webshots.com/samplers/WSDownloader.ocx O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{0047E553-172A-496E-AE20-15FFE2DEBE88}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{1F2B5530-EE2A-43F0-B393-97313014274D}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{45EEFEE3-8277-4144-A473-1C7263628519}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{9782D0A6-7A4D-4FDB-894C-E951DCE1713A}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{AAD57B50-1353-4C88-BA62-65789DF1423B}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{AB219278-628D-4758-BF8A-CA6F2B2DF941}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\..\{C78AF0FF-6FA6-43A7-BEF9-9C88E971EC42}: Domain = srp.gov O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = srp.gov O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = srp.gov O17 - HKLM\System\CS1\Services\Tcpip\..\{0047E553-172A-496E-AE20-15FFE2DEBE88}: Domain = srp.gov O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = srp.gov O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = srp.gov O17 - HKLM\System\CS2\Services\Tcpip\..\{0047E553-172A-496E-AE20-15FFE2DEBE88}: Domain = srp.gov O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = srp.gov O23 - Service: Altiris Client Service (AClient) - Altiris, Inc. - c:\winnt\altiris\aclient\AClient.exe O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing) O23 - Service: Insight Local Alerter (CPQALERT) - Hewlett-Packard Company - C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe O23 - Service: cpqdmi - Compaq Computer Corporation - C:\PROGRA~1\Compaq\COMPAQ~1\cpqdmi.exe O23 - Service: Insight Web Agent (cpqWebDmi) - Hewlett-Packard Company - C:\PROGRA~1\Compaq\COMPAQ~1\CPQWEB~1\WebDmi.exe O23 - Service: DB2 - DB2 (DB2) - Unknown owner - \\SRPAPP80\db2thin\sqllib\bin\db2syscs.exe (file missing) O23 - Service: DB2 JDBC Applet Server - Control Center (DB2ControlCenterService) - Unknown owner - \\SRPAPP80\db2thin\sqllib\bin\db2ccs.exe (file missing) O23 - Service: DB2 JDBC Applet Server (DB2JDS) - Unknown owner - \\SRPAPP80\db2thin\sqllib\bin\db2jds.exe (file missing) O23 - Service: DB2 Security Server (DB2NTSECSERVER) - Unknown owner - \\SRPAPP80\db2thin\sqllib\bin\db2sec.exe (file missing) O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe O23 - Service: Contivity VPN Service (ExtranetAccess) - Nortel Networks NA, Inc. - C:\Program Files\Nortel Networks\Extranet_serv.exe O23 - Service: MGABGEXE - Matrox Graphics Inc. - C:\WINNT\System32\mgabg.exe O23 - Service: Symantec Desktop Firewall Service (NISSERV) - Symantec Corporation - C:\Program Files\Symantec_Desktop_Firewall\NISSERV.EXE O23 - Service: NISUM - Symantec Corporation - C:\Program Files\Symantec_Desktop_Firewall\NISUM.EXE O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe O23 - Service: RemoteDesktop Connection Manager (RemoteDesktopConnectionManager) - McAfee Associates Inc - C:\Program Files\McAfee\Remote Desktop 32\CONNSRV.EXE O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender8\vsserv.exe" /service (file missing) O23 - Service: Win32Sl (WIN32SL) - Intel - C:\Program Files\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing) |
|
|
Jul 3 2005, 03:42 PM
Post
#4
|
|
![]() SuperMod Posts: 11,394 From: In the gym OS: xp home, xp pro |
Welcome to GTG.
You have several issues going. You are lacking windows updates. You should download the windows updates and it may help your situation. Also, you have several anti-viral products running. I count: ewido (is that the trial version - if so, that's OK); you have Mcafee, Symantec and Bit Defender. You need only one and having more than one is not good. Causes lots of problems. Keep one firewall. There are quite a few programs available that offer protection features to help keep a computer from getting infected. While this is normally a helpful feature, it can keep you from making the changes necessary to clean your computer. Please review the list to see which programs apply to your machine. These programs need to be uninstalled AdWatch These programs can just be disabled Microsoft Antispyware TeaTimer SpySweeper Win Patrol Spyware Guard Pestpatrol Regrun Diamonds Process controller You may wish to print out a copy of these instructions to follow while you complete this procedure. Please save Hijack This in a permanent folder (i.e. C:\HJT). This ensures backups are saved and accessible. Please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click fix checked. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://insidesrp<<do you use this page? If not, put a check mark next to it R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by SRP Desktop Management<<do you use this page? If not, put a check mark next to it R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O4 - HKLM\..\Run: [RightFaxFormLoad] regedit /s c:\progra~1\rightfax\rightfax.reg<<do you use this program? If not, put a check mark next to it O4 - HKLM\..\Run: [C:\WINNT\VCMnet11.exe] C:\WINNT\VCMnet11.exe O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINNT\cfgmgr52.dll,DllRun O4 - HKLM\..\Run: [exp] C:\WINNT\system32\exp O4 - HKLM\..\Run: [AUNPS2] RUNDLL32 AUNPS2.DLL,_Run@16 O4 - HKCU\..\Run: [Y0tERSb3V] tcpaccrc.exe O4 - HKCU\..\Run: [CAS Client] "C:\Program Files\Cas\Client\casclient.exe" O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe<<do you use this? If not, put a check mark next to it. O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = srp.gov<<same as above? If you use it, don't delete it. If you don't, put a check mark in all the 017s with the srp.gov Please reboot into safe mode (continually tap the F8 key while your system is starting, select Safe Mode from the menu). Be sure you're able to view hidden files, and remove the following files in bold (if found): C:\Program Files\Cas\<<delete the entire folder C:\WINNT\VCMnet11.exe cfgmgr52.dll C:\WINNT\system32\exp AUNPS2.DLL tcpaccrc.exe Reboot your PC. If you would please, rescan with HijackThis and post a fresh log in this same topic, and let us know how your system's working. |
|
|
![]() ![]() |
Similar Topics
| Topic Title | Replies / Views | Topic Information | |||||
|---|---|---|---|---|---|---|---|
![]() |
4 / 1,641 | 30th January 2005 - 04:16 AM n64benjo98 started - last by -=jonnyrotten=- |
|||||
![]() |
19 / 1,129 | 20th July 2005 - 11:35 AM mozzer11 started - last by mozzer11 |
|||||
![]() |
0 / 256 | 25th March 2006 - 07:45 PM cwoodall started - last by cwoodall |
|||||
![]() |
3 / 1,423 | 11th May 2008 - 02:15 PM kelltech started - last by kelltech |
|||||
![]() |
21 / 891 | 5th July 2008 - 12:44 PM Andy35652 started - last by fenzodahl512 |
|||||
|
Time is now: 10th October 2008 - 03:14 PM |
| Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. |