Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Dr Watson Debugger probs[RESOLVED]


  • This topic is locked This topic is locked

#1
korigen

korigen

    New Member

  • Member
  • Pip
  • 4 posts
Here's my log file, hope you can help!





Logfile of HijackThis v1.97.7
Scan saved at 10:09:38 PM, on 3/1/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\msxb32.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\cnetcfg1.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\system32\wsxsvc\wsxsvc.exe
C:\WINDOWS\system32\vmss\vmss.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\WINDOWS\system32\w?aclt.exe
C:\Documents and Settings\Josh Fisk\Application Data\tubt.exe
C:\WINDOWS\system32\tapub.exe
C:\WINDOWS\system32\appit.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Josh Fisk\My Documents\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\WINDOWS\system32\SearchBar.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CPROGRA%7E1%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Josh Fisk\Application Data\Mozilla\Profiles\default\4th7ezcu.slt\prefs.js)
O2 - BHO: (no name) - {80DAA425-DA60-3DA0-927D-F4CE735B581F} - C:\WINDOWS\sysng32.dll
O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [msxb32.exe] C:\WINDOWS\system32\msxb32.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [atlse32.exe] C:\WINDOWS\system32\atlse32.exe
O4 - HKLM\..\Run: [L3] C:\documents and settings\josh fisk\local settings\temp\L3.exe
O4 - HKLM\..\Run: [3vwD] C:\documents and settings\josh fisk\local settings\temp\3vwD.exe
O4 - HKLM\..\Run: [XftZC] C:\documents and settings\josh fisk\local settings\temp\XftZC.exe
O4 - HKLM\..\Run: [wj] C:\documents and settings\josh fisk\local settings\temp\wj.exe
O4 - HKLM\..\Run: [0Nft] C:\documents and settings\josh fisk\local settings\temp\0Nft.exe
O4 - HKLM\..\Run: [27b6df1c9812] C:\WINDOWS\System32\cnetcfg1.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Dvx] C:\WINDOWS\system32\wsxsvc\wsxsvc.exe
O4 - HKLM\..\Run: [vmss] C:\WINDOWS\system32\vmss\vmss.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [vI] C:\documents and settings\josh fisk\local settings\temp\vI.exe
O4 - HKLM\..\Run: [TUfC] C:\documents and settings\josh fisk\local settings\temp\TUfC.exe
O4 - HKLM\..\Run: [31c196a548aa] C:\WINDOWS\system32\actxprxy.exe
O4 - HKLM\..\Run: [SurfBuddy] rundll32 "C:\Program Files\SurfBuddy\sbuddy.dll",run
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape\Netscape\Netscp.exe" -turbo
O4 - HKCU\..\Run: [SurfBuddy] rundll32 "C:\Program Files\SurfBuddy\sbuddy.dll",run
O4 - HKCU\..\Run: [Nktpfx] C:\WINDOWS\system32\w?aclt.exe
O4 - HKCU\..\Run: [Rdat] C:\Documents and Settings\Josh Fisk\Application Data\tubt.exe
O4 - HKCU\..\Run: [gBstRRd2R] tapub.exe
O4 - HKLM\..\RunOnce: [appit.exe] C:\WINDOWS\system32\appit.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: eclean.bat
O9 - Extra 'Tools' menuitem: MaxSpeed (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.ma...ash/swflash.cab
  • 0

Advertisements


#2
korigen

korigen

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
This Dr. Watson debug is a pain! I've run all the ad-ware progs I can download, but still nothing...hopefully I can get some answers soon.

ps. see above post for my hi-jack log, thanks
  • 0

#3
Guest_thatman_*

Guest_thatman_*
  • Guest
Hi korigen

Welcome to geeks togo ;)

Please update HijackThis v 1.99.1

Post a new HJT.Log

Thank You

Kc :tazz:
  • 0

#4
Guest_thatman_*

Guest_thatman_*
  • Guest
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member with address of this thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP