Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

filost.com pop-ups (Resolved)

Started by jonjiu , Mar 24 2005 11:18 AM

  • This topic is locked This topic is locked

#1
jonjiu
Posted 24 March 2005 - 11:18 AM

jonjiu

    Member

  • Member
  • PipPip
  • 22 posts
HI Experts, I have this popups from filost.com everytime i start IE. I had cleaned up Adware and Spybot and then here's my hijack this. Could you pls tell me what to delete. Thanks a lot!!

Johnny


Logfile of HijackThis v1.98.2
Scan saved at 上午 01:11:17, on 2005/3/25
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINNT\Explorer.EXE
C:\Program Files\NETVIGATOR\NETVIGATOR BROADBAND\driver\cFosDNT.exe
C:\WINNT\System32\CTHELPER.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINNT\rund1132.exe
C:\WINNT\System32\internat.exe
C:\WINNT\System32\conime.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Winamp\Winamp.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Documents and Settings\Administrator\My Documents\hijackthis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1028,收音機[&R] - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [cFosDNT] C:\Program Files\NETVIGATOR\NETVIGATOR BROADBAND\driver\cFosDNT.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [rundll] C:\WINNT\rund1132.exe
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O16 - DPF: {11111111-1111-1111-1111-111191113457} - file://c:\ied_s7.cab
O16 - DPF: {33331111-1111-1111-1111-611111193458} - file://c:\wx.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{45B8F6D0-C6A5-4410-9354-42A7A232421B}: NameServer = 218.102.32.208 205.252.144.119
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - C:\WINNT\System32\vbsys2.dll
  • 0

Advertisements

#2
jonjiu
Posted 27 March 2005 - 06:21 AM

jonjiu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts
Hi there, it's me again, i just checked some other ppl's post and i manage to fix it in hijack this. no more pop-ups now!

Here's my new log after removal of the popup.

JOhnny

Logfile of HijackThis v1.98.2
Scan saved at 下午 08:19:06, on 2005/3/27
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\Program Files\NETVIGATOR\NETVIGATOR BROADBAND\driver\cFosDNT.exe
C:\WINNT\System32\CTHELPER.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINNT\rund1132.exe
C:\WINNT\System32\internat.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrator\My Documents\hijackthis\HijackThis.exe

O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1028,收音機[&R] - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [cFosDNT] C:\Program Files\NETVIGATOR\NETVIGATOR BROADBAND\driver\cFosDNT.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [rundll] C:\WINNT\rund1132.exe
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{45B8F6D0-C6A5-4410-9354-42A7A232421B}: NameServer = 218.102.32.208 205.252.144.119
  • 0

#3
Guest_usetobe_*
Posted 11 April 2005 - 05:46 AM

Guest_usetobe_*
  • Guest
Hi Jonjui,

Welcome to Geeks 2 Go. Sorry about the delay in replying to you, however we have been extreamly busy.

As it has been sometime since your post, could you please repost a new HJT log.

I notice that you are running an out of date version of HJT, so please download the current version from the link below.

Current version HJT.

Please create a new folder (for example C/HJT) and run HJT from that location so that it can create back-ups if required later.

If you have resolved your problems, please could you let me know so that this thread can be closed.

Regards,

Usetobe
  • 0

#4
jonjiu
Posted 11 April 2005 - 08:29 PM

jonjiu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts
HI! Usetobe

Thanks for helping! I have checked similar threads and managed to fix it.

and i'll certainly get new version of HJT for future use!

Regards,

Jonjiu
  • 0

#5
Guest_usetobe_*
Posted 12 April 2005 - 12:21 AM

Guest_usetobe_*
  • Guest
Topic closed. If origional posted needs this topic re-opening please PM a moderator.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP