[myasam]

With all the downloading my kids do, I think this system needs a good cleaning. Some Zango site keeps showing up and then I get fatal errors when trying to run Adaware. Here is my hjt log. Thank you for your help.

Logfile of HijackThis v1.99.1
Scan saved at 11:54:17 AM, on 2/27/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\WEBSCANX.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSSTAT.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\AVCONSOL.EXE
C:\WINDOWS\SYSTEM\PRINTRAY.EXE
C:\PROGRAM FILES\AIM\AIM.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presar...archbar&LC=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system\dla\tfswshx.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [AvconsoleEXE] C:\Program Files\Network Associates\McAfee VirusScan\avconsol.exe /minimize
O4 - HKLM\..\Run: [VsecomrEXE] C:\Program Files\Network Associates\McAfee VirusScan\VSECOMR.EXE
O4 - HKLM\..\Run: [Vshwin32EXE] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
O4 - HKLM\..\Run: [VsStatEXE] C:\Program Files\Network Associates\McAfee VirusScan\VSSTAT.EXE /SHOWWARNING
O4 - HKLM\..\Run: [McAfeeWebScanX] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\WebScanX.Exe
O4 - HKLM\..\Run: [CompaqPrinTray] PrinTray.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Vshwin32EXE] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
O4 - HKLM\..\RunServices: [McAfeeWebScanX] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\WebScanX.Exe /RUNSERVICES
O4 - HKCU\..\Run: [AIM] C:\PROGRAM FILES\AIM\aim.exe -cnetwait.odl
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: Yahoo! Poker - http://download.game...nts/y/pt1_x.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://appldnld.m7z....llInstaller.exe
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.web...otoUploader.CAB

[Advertisements]

Hi myasam and welcome,
your log looks clean,
What version of Ad-aware are you running ? Please see this Topic
If you don't have Ad-aware SE download it and run a scan, If your still having problems, Reboot to safe mode and run a scan Safe mode = tapping the F8 key when your computer is starting up,

Download and install Cleanup
Go to Programs look for Cleanup, open the program, click cleanup and let it run, ( it may take a while) it will ask you to reboot do so,

Let us know how you make out,
Sorry for the late reply board has been busy,

[don77]

Hi myasam and welcome,
your log looks clean,
What version of Ad-aware are you running ? Please see this Topic
If you don't have Ad-aware SE download it and run a scan, If your still having problems, Reboot to safe mode and run a scan Safe mode = tapping the F8 key when your computer is starting up,

Download and install Cleanup
Go to Programs look for Cleanup, open the program, click cleanup and let it run, ( it may take a while) it will ask you to reboot do so,

Let us know how you make out,
Sorry for the late reply board has been busy,

[myasam]

Thank you so much. I did update Ad-aware SE and there were a few problems to clean out.

Now I have other problems - my right click on the mouse won't work - probably need a new mouse, heh?

How do I get rid of all the thing on startup, i.e, go to misconfig, click on startup and check what I want to startup - I would like to erase some of this stuff and I just don't know how. Something actually took off AIM so that I can't even add it to the startup status line. But now my mouse is on startup.

Is this a topic for a different board?

Thank you again. You all are great!
Cathy

[don77]

Now I have other problems - my right click on the mouse won't work - probably need a new mouse, heh?

Sounds like it could be,

How do I get rid of all the thing on startup, i.e, go to misconfig, click on startup and check what I want to startup - I would like to erase some of this stuff and I just don't know how.

Having the items listed in msconfig wont hurt anything, If you want certain things running at start up just put a check next to them, If you don't want them starting simply uncheck,

Something actually took off AIM so that I can't even add it to the startup status line. But now my mouse is on startup.

AIM can be set up to start on start up, I don't recommend doing this, Keeping your start ups to a minimum is best,

[myasam]

Thank you so much. I purchase a new mouse and we're good. I'll hang back on the AIM startup - the kids can click the icon when they want to open it.

But I'm such a compulsive "everything has to be clean and orderly" person that I can't stand those listings in startup that don't belong there. If there's a way to get rid of them I'd love to know. I think sometimes that I start "cleaning" this computer to make everything neat and orderly and perhaps make things worse. (I know your eyes are rolling!) Sorry you got stuck with me.

[don77]

Sent you a pm Cathy

[myasam]

Thank you, Don. I truly appreciate all your help. God bless you. -Cathy

[don77]

Your very welcome Cathy glad we could help,

Also a few things to keep in mind for helping to prevent future infections

Download the following program, For keeping crap off your system to begin with
Prevent the installation of ActiveX-based spyware, adware, browser hijackers, dialers, and other potentially unwanted pests. Block spyware/tracking cookies in Internet Explorer and Mozilla/Firefox. Restrict the actions of potentially dangerous sites in Internet Explorer.
Download Spyware Blaster

Keep Ad-aware and Spybot handy, Check them for updates prior to running and run them weekly
Same with your Anti Virus,

For an added check run an online virus scan, you can use one of the 2 below,
TrendMicro's HouseCall
ActiveScan

Be sure and give the Temp folders a cleaning out now and then as well, Make sure after you clean your Temp files to empty out your Recycle bin as well.
For ease use the following program
Download and install Cleanup
Run "Cleanup" and when it has finished, Reboot

Remeber to Check Windows for updates