Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

msblank.html [CLOSED]


  • This topic is locked This topic is locked

#1
qb1882

qb1882

    New Member

  • Member
  • Pip
  • 2 posts
Please help. Novice computer user, requestng your patient help on my Win 98 system.
Hijackthis log file below.

Thanks for any help!!



Logfile of HijackThis v1.99.1
Scan saved at 5:16:03 PM, on 8/27/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\2WIRE HOMEPORTAL MONITOR\2PORTALMON.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\OPSCAN.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\SYSTEM\msblank.html
O1 - Hosts: 151.137.254.11 swagelok04 swagelok04.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.39 swagelok10 swagelok10.scs.swagelok.com
O1 - Hosts: 151.137.254.47 SWAGELOK13 SWAGELOK13.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.58 SWAGELOK14 SWAGELOK14.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.59 SWAGELOK15 SWAGELOK15.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.56 SWAGELOK16 SWAGELOK16.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.57 SWAGELOK17 SWAGELOK17.SCS.SWAGELOK.COM webmail.scs.swagelok.com
O1 - Hosts: 151.137.254.52 SWAGELOK18 SWAGELOK18.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.69 SWAGELOK19 SWAGELOK19.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.70 SWAGELOK20 SWAGELOK20.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.20 SWAGELOK21 SWAGELOK21.SCS.SWAGELOK.COM dp.swagelok.com tube.swagelok.com
O1 - Hosts: 151.137.254.53 SWAGELOK24 SWAGELOK24.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.73 SWAGELOK26 SWAGELOK26.SCS.SWAGELOK.COM cfg1.swagelok.com
O1 - Hosts: 151.137.254.74 SWAGELOK27 SWAGELOK27.SCS.SWAGELOK.COM cfg2.swagelok.com
O1 - Hosts: 151.137.254.60 SCSEXCH00 SCSEXCH00.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.61 SCSEXCH01 SCSEXCH01.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.78 swagelokqa02.swagelok.com qa-cfg-scs.swagelok.com qa-cfg.swagelok.com
O1 - Hosts: 151.137.254.49 swagelokqa03.swagelok.com qa-dp.swagelok.com qa-tube.swagelok.com
O1 - Hosts: 151.137.254.76 cfg-scs.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.150 devext-cn.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.59 qa-tw.swagelok.com
O1 - Hosts: 208.217.21.63 qa-hk.swagelok.com
O1 - Hosts: 208.217.21.65 qa-jp.swagelok.com
O1 - Hosts: 208.217.21.86 qa-cn.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: BHOmodObj Class - {7F6828CA-9E42-462C-BC60-418C8144012C} - C:\WINDOWS\SYSTEM\BHOMOD.DLL
O2 - BHO: Loader Class - {2E246FAE-8420-11D9-870D-000C2917DE7F} - C:\WINDOWS\SYSTEM\Loader.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [2wSysTray] C:\PROGRAM FILES\2WIRE HOMEPORTAL MONITOR\2PORTALMON.EXE
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - Startup: Quicken Startup.lnk = C:\QUICKENW\QWDLLS.EXE
O4 - Startup: Billminder.lnk = C:\QUICKENW\billmind.exe
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .wmv: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
O16 - DPF: {76D90D08-EAB7-46D8-BF99-87445BF59E72} (SystemInfo Class) - http://directv.direc.../dpcsysinfo.cab
O16 - DPF: {9145A52A-9B22-4858-AEE7-74D6C7D3F366} (BrowserConfig Class) - https://go.wspan.com...owserConfig.cab
O16 - DPF: {E99BF99C-5D95-11D4-A0EC-00500489A32D} (WSFileIO Class) - https://go.wspan.com...Ls/WSFileIO.cab
O16 - DPF: {C1EA01C5-9E62-11D2-A1DE-000083609ECD} (WORLDSPAN Print Control) - https://go.wspan.com...LLs/WSPRINT.CAB
O16 - DPF: {62CEC9E0-3811-4C36-A94E-4F7565DCD23F} (DDSC Class) - http://dp.swagelok.c...rces/msddsc.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 69.50.176.158,85.255.112.8
  • 0

Advertisements


#2
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi,


We are sorry to have missed your log due to heavy traffic.

If you still need help, please post back a fresh Hijack This log.

If the problem has been resolved, please let us know.
  • 0

#3
qb1882

qb1882

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Please help. Novice user on WIndws 98 need assistance. Your helpful geek, Tampabelle, asked I resend a recent log file.



Logfile of HijackThis v1.99.1
Scan saved at 9:00:37 PM, on 9/7/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\2WIRE HOMEPORTAL MONITOR\2PORTALMON.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\SYSTEM\msblank.html
O1 - Hosts: 151.137.254.11 swagelok04 swagelok04.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.39 swagelok10 swagelok10.scs.swagelok.com
O1 - Hosts: 151.137.254.47 SWAGELOK13 SWAGELOK13.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.58 SWAGELOK14 SWAGELOK14.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.59 SWAGELOK15 SWAGELOK15.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.56 SWAGELOK16 SWAGELOK16.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.57 SWAGELOK17 SWAGELOK17.SCS.SWAGELOK.COM webmail.scs.swagelok.com
O1 - Hosts: 151.137.254.52 SWAGELOK18 SWAGELOK18.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.69 SWAGELOK19 SWAGELOK19.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.70 SWAGELOK20 SWAGELOK20.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.20 SWAGELOK21 SWAGELOK21.SCS.SWAGELOK.COM dp.swagelok.com tube.swagelok.com
O1 - Hosts: 151.137.254.53 SWAGELOK24 SWAGELOK24.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.73 SWAGELOK26 SWAGELOK26.SCS.SWAGELOK.COM cfg1.swagelok.com
O1 - Hosts: 151.137.254.74 SWAGELOK27 SWAGELOK27.SCS.SWAGELOK.COM cfg2.swagelok.com
O1 - Hosts: 151.137.254.60 SCSEXCH00 SCSEXCH00.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.61 SCSEXCH01 SCSEXCH01.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.78 swagelokqa02.swagelok.com qa-cfg-scs.swagelok.com qa-cfg.swagelok.com
O1 - Hosts: 151.137.254.49 swagelokqa03.swagelok.com qa-dp.swagelok.com qa-tube.swagelok.com
O1 - Hosts: 151.137.254.76 cfg-scs.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.150 devext-cn.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.59 qa-tw.swagelok.com
O1 - Hosts: 208.217.21.63 qa-hk.swagelok.com
O1 - Hosts: 208.217.21.65 qa-jp.swagelok.com
O1 - Hosts: 208.217.21.86 qa-cn.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: BHOmodObj Class - {7F6828CA-9E42-462C-BC60-418C8144012C} - C:\WINDOWS\SYSTEM\BHOMOD.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [2wSysTray] C:\PROGRAM FILES\2WIRE HOMEPORTAL MONITOR\2PORTALMON.EXE
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - Startup: Quicken Startup.lnk = C:\QUICKENW\QWDLLS.EXE
O4 - Startup: Billminder.lnk = C:\QUICKENW\billmind.exe
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .wmv: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
O16 - DPF: {76D90D08-EAB7-46D8-BF99-87445BF59E72} (SystemInfo Class) - http://directv.direc.../dpcsysinfo.cab
O16 - DPF: {9145A52A-9B22-4858-AEE7-74D6C7D3F366} (BrowserConfig Class) - https://go.wspan.com...owserConfig.cab
O16 - DPF: {E99BF99C-5D95-11D4-A0EC-00500489A32D} (WSFileIO Class) - https://go.wspan.com...Ls/WSFileIO.cab
O16 - DPF: {C1EA01C5-9E62-11D2-A1DE-000083609ECD} (WORLDSPAN Print Control) - https://go.wspan.com...LLs/WSPRINT.CAB
O16 - DPF: {62CEC9E0-3811-4C36-A94E-4F7565DCD23F} (DDSC Class) - http://dp.swagelok.c...rces/msddsc.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 69.50.176.158,85.255.112.8
  • 0

#4
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi,


You posted your fresh log in a new topic and I couldnt see it.

Please post your log in this topic only.

Dont start a new topic.

Run Hijack This and click on scan. The following items need to be fixed -

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\SYSTEM\msblank.html


Close all windows other than Hijack This. Check the boxes next to above items and click on Fix checked.


Reboot the PC and post a fresh HJT log
  • 0

#5
tampabelle

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP