[liloltiredblood]

Hello,

I tried sending a file to a friend and it had said that I had a virus, I did run my AVG Antivirus and nothing had showed up.
I ran hijack this and copied to below.
Is there anything that needs to be fixed or deleted?
thank you for your help.


Logfile of HijackThis v1.98.2
Scan saved at 7:55:56 PM, on 3/17/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\Mixer.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.eueyzmdhj...85fyCoY7_e4.cgi
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapp...//www.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

[Advertisements]

you are using an old version of hijackthis, you may want to update.

Nothing screams problem, but be aware of a couple things.

a) some AV programs will register false positives
b) you are running a P2P program (ares) that often leads to malware investations. At the very least, I would not allow it to run at startup, and if you are going to use such programs you need to be careful about monitoring your system closely (as you appear to be doing)

[gerryf]

you are using an old version of hijackthis, you may want to update.

Nothing screams problem, but be aware of a couple things.

a) some AV programs will register false positives
b) you are running a P2P program (ares) that often leads to malware investations. At the very least, I would not allow it to run at startup, and if you are going to use such programs you need to be careful about monitoring your system closely (as you appear to be doing)

[liloltiredblood]

I have not yet been able to download the new HiJackThis. When I was browsing my computer, I have noticed that I had some sort of malware or something and than I did a research on the computer and it showed how to get rid of it. So I checked out "regedit" and I seen that there was a lot of programs or what ever it is that I don't even use or has been uninstalled long time ago. Is there a way of cleaning it out? or does it really not matter?
I also did find a virus on my computer, and it was hard to get rid of and i finally got into my Virus Vault in AVG. I am not sure if I still have any virus's cause it always tells me that I don't have any. I will soon upgrade the Hijackthis and than post a new one.
HELP, n thank you