[Eternal]

Ok lately I've been having problems with my computer and I'd really like to find out if my computer just sucks or I have spyware/viruses. I'm actually pretty sure I have something wrong though because I have 4 SVCHOSTs and SPOOLSV.exe which I've been told can sometimes be a virus. Thanks in advance.

Logfile of HijackThis v1.99.1
Scan saved at 4:51:39 PM, on 7/22/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Nhksrv.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\devldr32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\AIM\aim.exe
C:\Documents and Settings\Janet\Desktop\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

Edited by Eternal, 22 July 2005 - 03:12 PM.

[Advertisements]

Hi Eternal and welcome to Geeks To Go

First things first, it is not uncommon to have many svchost running in your machine, mine i think has 5 running, that is perfectly normal. And i believe spool has something to do with your printing capabilities, here is a brief description of that service.

spoolsv.exe is a Microsoft Windows system executable which handles the printing process to your local printers.

Although at times svchost can be a problem with viruses that is not in your case.

I have burned through your log and find nothing of concern, perhaps a good cleaning would do you wonders. Just follow these easy steps.

For a system clean up:

Go into start/all programs/accessories/system tools/click on disk cleanup make sure downloaded program files, temporary internet files, temporary files and recycle bin are all ticked. Hit ok and then the clean up will begin, sometimes this takes a few minutes depends how long since the last job has been ran.

Defrag:

Same way to get to the defrag as you used to get to disk cleanup. When you click on disk defrag a box will open, click on defragment the defrag will begin, again the time it takes will depend on how long since it’s been done.

Finally download this program and run it.

Ccleaner

Install it, and let it put shortcuts to your Recycle Bin for convenience. Open it, and click on the Options button, and then on the Advanced button; untick the box next to Only delete files in Windows Temp folders older than 48 hours, then click "Ok". Click on "Run Cleaner" and let it do its thing (getting rid of all Temp, temp internet files, cookies, etc..).

Do not play with any of the tabs other than what i have pointed out to you

That should do you some good, let me know how it goes after that

[John_L]

Hi Eternal and welcome to Geeks To Go

First things first, it is not uncommon to have many svchost running in your machine, mine i think has 5 running, that is perfectly normal. And i believe spool has something to do with your printing capabilities, here is a brief description of that service.

spoolsv.exe is a Microsoft Windows system executable which handles the printing process to your local printers.

Although at times svchost can be a problem with viruses that is not in your case.

I have burned through your log and find nothing of concern, perhaps a good cleaning would do you wonders. Just follow these easy steps.

For a system clean up:

Go into start/all programs/accessories/system tools/click on disk cleanup make sure downloaded program files, temporary internet files, temporary files and recycle bin are all ticked. Hit ok and then the clean up will begin, sometimes this takes a few minutes depends how long since the last job has been ran.

Defrag:

Same way to get to the defrag as you used to get to disk cleanup. When you click on disk defrag a box will open, click on defragment the defrag will begin, again the time it takes will depend on how long since it’s been done.

Finally download this program and run it.

Ccleaner

Install it, and let it put shortcuts to your Recycle Bin for convenience. Open it, and click on the Options button, and then on the Advanced button; untick the box next to Only delete files in Windows Temp folders older than 48 hours, then click "Ok". Click on "Run Cleaner" and let it do its thing (getting rid of all Temp, temp internet files, cookies, etc..).

Do not play with any of the tabs other than what i have pointed out to you

That should do you some good, let me know how it goes after that

[John_L]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.