Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

HiJackThis Log File [CLOSED]


  • This topic is locked This topic is locked

#16
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Hello!

Ugh..Cancel that idea then.

let me hold a Geek Conference with my fellow geeks that are around...Ill get back to you soon.

Edited by Jfcap, 31 July 2005 - 11:47 PM.

  • 0

Advertisements


#17
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Hello!

One of the Helpers here at GeekstoGo found a SP2 Download for you at the microsoft site.

Download SP2 here

And then try to install it. :tazz:
  • 0

#18
thefyu

thefyu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
i went to the site and downloaded the program. however, while i was installing it (three times), my computer gives a warning saying my computer is running low on virtual memory. then the installation says there's an error, but the only message it gives is "8." is there anyway around this?

thefyu.
  • 0

#19
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Hi There!

Go to the website that has the WinXP SP 2 download.

Then end explorer.exe

Hit Ctrl-Alt-Del
Select Processes
Select EXPLORER.EXE and press end.

Your tray and desktop icons will disappear, this is normal.

Then try to Download SP2.

If that does not work, then I would suggest ordering the SP2 CD and seeing if you can isntall it that way. Its free!

Here is the link to order the SP2 CD

Edited by Jfcap, 02 August 2005 - 12:11 AM.

  • 0

#20
thefyu

thefyu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
I ended the "explorer" process and I still received the same results. I have put in an order to Microsoft to order the CD. It should come in 4-6 weeks. Will it be safe to wait that long, especially if I will be moving from university network to university network?

In addition, I have been getting other annoying little errors that I presume is due to my new hard drive and the re-installation of my computer by Sony.

I cannnot delete any pictures or folders in "My Pictures" folder. It says, "Cannot delete thumbs.db" file. This has been a nightmare for me to organize my stuff.

Also, when I try to open Word, Excel, or any Office program, I get the same error: "Norton Antivirus was unable to scan your computer for infections because a critical error occurred during the scan." The document then shows up, but each time with the error message.

I checked Norton Antivirus and it says that LiveUpdate cannot get the new update because of an internal error. Then when I try to close a document, it says, "Word cannot complete the save due to a file permission error. C:\Documents and Settings\...\Normal.dot" I click ok and then try closing the program and it asks if I want to change the global template. Should I reinstall Office 2000?

On top of this, when I go to performance and maintenance and click system, it still says my system is running at 590 MHz out of the 1.7 GHz. Is this normal? I remember before my computer was changed that it used to say 1.7 GHz out of the normal 1.7 GHz.

Sorry for throwing so many things at you once.

Much appreciated,
thefyu.
  • 0

#21
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Hello!

It will be perfectly safe for you to have SP1a until the new SP2 disc arrives.

Lets try one more scan to see if there is anything infected on yoru computer.

I need you to download MWav to a convenient location.

This scan might take around 3+ hours to finish when set to scan everything.
I need you to run MWav by double-clicking on mwav.exe.
Put a check next to the below items before scanning:
  • Memory
  • Startup Folders
  • Drive - All Local Drives
  • Folder - then click "browse" to change the directory to C: (default is C:\Windows)
  • Registry
  • System Folders
  • Services
  • Include Sub-Directory
  • Scan All Files
Please make sure ALL of these are checked, then press the Scan button. This typically will take hours to complete.

**NOTE*** Sometimes MWav will pause and it appears to be finished, but it isn't done. Just let it run until it says it's complete.

On the bottom portion of the window, you will see the lower panel where MWav is listing "infected items". When it's done scanning, please highlight everything in that lower panel and copy them by holding CTRL + C then paste it here. The whole log will be extremely BIG so there is no way to post the log. I just need the infected items list.
  • 0

#22
thefyu

thefyu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Hi.
My infected file list is below. It says 2 viruses were detected.


Object "Quicken Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "%JavaDir%\QTJava.zip". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\InterVideo\Common\Bin\IVIPromotion.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\System32\pxsfs.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227CF05-1F01-11D6-A4E5-00E02921EA26}" refers to invalid object "PLGLCTR.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf50-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "SEM.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf51-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "PLGLCTR.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf53-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "msdvplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf54-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "msdvplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf55-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "msdvplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf56-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "msdvplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf57-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "msdvplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf58-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "m2tsplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf59-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "m2tsplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf5a-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "m2tsplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf5b-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "m2tsplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf5c-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "m2tsplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0227cf80-1f01-11d6-a4e5-00e02921ea26}" refers to invalid object "msdvplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{026371C0-1B7C-11CF-9D53-00AA003C9CB6}" refers to invalid object "D:\abu\Comct232.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{030B4A80-1B7C-11CF-9D53-00AA003C9CB6}" refers to invalid object "D:\abu\Comct232.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{030B4A81-1B7C-11CF-9D53-00AA003C9CB6}" refers to invalid object "D:\abu\Comct232.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{030B4A82-1B7C-11CF-9D53-00AA003C9CB6}" refers to invalid object "D:\abu\Comct232.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{10686BC1-2199-11D6-A4E5-00E02921EA26}" refers to invalid object "chkfrnd.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1E216240-1B7D-11CF-9D53-00AA003C9CB6}" refers to invalid object "D:\abu\Comct232.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1F6F8D20-1B7D-11CF-9D53-00AA003C9CB6}" refers to invalid object "D:\abu\Comct232.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{45D66640-2199-11D6-A4E5-00E02921EA26}" refers to invalid object "cookie.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5B7524C8-2446-40E9-9474-94A779DBA224}" refers to invalid object "C:\WINDOWS\Downloaded Program Files\isusweb.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{63ba30ae-7909-11d4-919b-006008c0a5c6}" refers to invalid object "m2tsplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{68B957A0-C4DA-11D6-A4E5-00E02921EA26}" refers to invalid object "NeoMic.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{68b957a1-c4da-11d6-a4e5-00e02921ea26}" refers to invalid object "NeoMic.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{885BB46A-3F1E-44C3-A01B-A7D9260CC98B}" refers to invalid object "C:\WINDOWS\DOWNLO~1\dwusplay.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{99180163-DA16-101A-935C-444553540000}" refers to invalid object "recncl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B0121D00-1FBF-11d6-A4E5-00E02921EA26}" refers to invalid object "cookie.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E0FCD4C3-D347-42D2-90BB-FA8856DADBF6}" refers to invalid object "m2tsplg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E70B4BA0-1F20-11d6-A4E5-00E02921EA26}" refers to invalid object "chkfrnd.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EBB3ED10-209D-11D6-A4E5-00E02921EA26}" refers to invalid object "SEM.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EBB3ED11-209D-11D6-A4E5-00E02921EA26}" refers to invalid object "msdvplg.dll". Action Taken: No Action Taken.
Entry "HKCR\ActMsg.Session" refers to invalid object "{3FA7DEB3-6438-101B-ACC1-00AA00423326}". Action Taken: No Action Taken.
Entry "HKCR\ComPlusMetaData.MsCorHost" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.
Entry "HKCR\ComPlusMetaData.MsCorHost.2" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.
Entry "HKCR\DSP.DSP" refers to invalid object "{9C123EA9-AEC9-4f75-BBC0-7565FA1398966}". Action Taken: No Action Taken.
Entry "HKCR\DSP.DSPDMOProp_Chorus.1" refers to invalid object "{6F63B172-5543-4593-91CE-EDBA65B9FACDB}". Action Taken: No Action Taken.
Entry "HKCR\MailFileAtt" refers to invalid object "{00020D05-0000-0000-C000-000000000046}". Action Taken: No Action Taken.
Entry "HKCR\mapifvbx.object" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.
Entry "HKCR\mapifvbx.object.1" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.
Entry "HKCR\MessengerNative.UIAutomation" refers to invalid object "{DF66AFC9-C61D-404a-B535-64FBF91D420F}". Action Taken: No Action Taken.
Entry "HKCR\MessengerNative.UIAutomation.1" refers to invalid object "{DF66AFC9-C61D-404a-B535-64FBF91D420F}". Action Taken: No Action Taken.
Entry "HKCR\MessengerPrivateNative.MessengerPriv" refers to invalid object "{BBBFCB14-3B21-491c-9E2A-B0F3D50F83FD}". Action Taken: No Action Taken.
Entry "HKCR\MessengerPrivateNative.MessengerPriv.1" refers to invalid object "{BBBFCB14-3B21-491c-9E2A-B0F3D50F83FD}". Action Taken: No Action Taken.
Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
Entry "HKCR\Plenoptic.Plenoptic.1" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
Entry "HKCR\SymWriter.pdb" refers to invalid object "{520DC67A-752E-11D3-8D56-00C04F680B2B}". Action Taken: No Action Taken.
Entry "HKCR\TSLV.TSLV" refers to invalid object "{612DE685-FCC5-11D1-8A36-00A0C9B82ABC}". Action Taken: No Action Taken.
Entry "HKCR\TSLV.TSLV.1" refers to invalid object "{612DE685-FCC5-11D1-8A36-00A0C9B82ABC}". Action Taken: No Action Taken.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr.1" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
File D:\Program Files\Downloads\wfallsfreed17.exe tagged as "not-a-virus:AdWare.SaveNow.c". Action Taken: No Action Taken.

Thanks.
thefyu.
  • 0

#23
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Hello!

Please delete this file:

File D:\Program Files\Downloads\wfallsfreed17.exe


Then let me know how the computer is running.
  • 0

#24
thefyu

thefyu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Hey,

Sorry for not replying in a while. I've been moving around the country. I received my SP2 CD and installed it. Everything seems to be cured by this. I can delete files now with no problems. The computer is, however, running slower, but that seems to be the common symptom from most people as I look at the forums online about the SP2 patch. My CPU speed is also up to 1.7 GHz now instead of the 550 MHz from before.

The file you asked me to delete also helped in removing some of the previous errors. I have recently removed Symantec and Norton; I have installed Kerio Firewall instead.

Should I run another scan on this computer for you?

Much appreciated.
thefyu.
  • 0

#25
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Hello!

Im glad you got SP2 installed!

Post another HiJackThis log for me, so I can make sure that you are clean!

:tazz:
  • 0

Advertisements


#26
thefyu

thefyu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Hi Justin,

Here is my new logfile:

Logfile of HijackThis v1.99.1
Scan saved at 7:13:14 PM, on 8/9/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
D:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
D:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Dantz\Retrospect\retrorun.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\WINDOWS\Explorer.EXE
D:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Program Files\Sony\HotKey Utility\HKWnd.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Apoint\Apntex.exe
C:\program files\support.com\client\bin\tgcmd.exe
C:\WINDOWS\system32\WDBtnMgr.exe
D:\Program Files\Creative\Detector\CTDetect.exe
C:\Program Files\PowerPanel\Program\PcfMgr.exe
D:\Program Files\Downloads\hijackthis-2\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sony.com/vaiopeople
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.sony.com/vaiopeople
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CPROGRA%7E1%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\F.Yu\Application Data\Mozilla\Profiles\default\esyz7u1f.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - d:\program files\adobe\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [Switcher.exe] C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [VAIOSurvey] c:\program files\sony\vaio survey\surveysa.exe
O4 - HKLM\..\Run: [ZTgServerSwitch] "c:\program files\support.com\client\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKCU\..\Run: [Creative Detector] D:\Program Files\Creative\Detector\CTDetect.exe /R
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: PowerPanel.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - D:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\retrorun.exe
O23 - Service: Retrospect WD Service (RetroWDSvc) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
O23 - Service: VAIO Media Music Server (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Music\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (file missing)
O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing)
O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Photo Server (VAIOMediaPlatform-PhotoServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Photo\appsrv\PhotoAppSrv.exe
O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing)
O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing)
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing)
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe


Thanks for all the support.

thefyu.
  • 0

#27
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Your log looks clean to me. Are you noticing any Popups or any other issues with your computer? :tazz:
  • 0

#28
thefyu

thefyu

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Everything thus far looks good. There are no popups or any other issue that I've noticed with my computer.

Again, thanks for the support. Your help was invaluable. Thanks.

thefyu
  • 0

#29
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Hello!

I will leave this topic open for a few days so you can let me know if there are any futher issues.

The following is a list of tools and utilities that I like to suggest to people. This list is full of great tools and utilities to help you understand how you got infected and how to keep from getting infected again.
  • Spybot Search & Destroy - Uber powerful tool which can search and annhilate nasties that make it onto your system. Now with an Immunize section that will help prevent future infections.
  • AdAware - Another very powerful tool which searches and kills nasties that infect your system. AdAware and Spybot Search & Destroy compliment each other very well.
  • SpywareBlaster - Great prevention tool to keep nasties from installing on your system.
  • SpywareGuard - Works as a Spyware "Shield" to protect your computer from getting malware in the first place.
  • IE-SpyAd - puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.
  • CleanUP! - Cleans temporary files from IE and Windows, empties the recycle bin and more. Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders.
  • Windows Updates - It is very important to make sure that both Internet Explorer and Windows are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.
  • Google Toolbar - Free google toolbar that allows you to use the powerful Google search engine from the bar, but also blocks pop up windows.
  • Trillian or Miranda-IM - These are Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN)
To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Tony Klein
  • 0

#30
Justin

Justin

    I do a little bit of everything

  • Member
  • PipPipPipPipPip
  • 2,353 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP