Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

msblank.html [CLOSED]

Started by qb1882 , Aug 27 2005 03:43 PM

  • This topic is locked This topic is locked

#1
qb1882
Posted 27 August 2005 - 03:43 PM

qb1882

    New Member

  • Member
  • Pip
  • 2 posts
Please help. Novice computer user, requestng your patient help on my Win 98 system.
Hijackthis log file below.

Thanks for any help!!



Logfile of HijackThis v1.99.1
Scan saved at 5:16:03 PM, on 8/27/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\2WIRE HOMEPORTAL MONITOR\2PORTALMON.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\OPSCAN.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\SYSTEM\msblank.html
O1 - Hosts: 151.137.254.11 swagelok04 swagelok04.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.39 swagelok10 swagelok10.scs.swagelok.com
O1 - Hosts: 151.137.254.47 SWAGELOK13 SWAGELOK13.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.58 SWAGELOK14 SWAGELOK14.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.59 SWAGELOK15 SWAGELOK15.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.56 SWAGELOK16 SWAGELOK16.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.57 SWAGELOK17 SWAGELOK17.SCS.SWAGELOK.COM webmail.scs.swagelok.com
O1 - Hosts: 151.137.254.52 SWAGELOK18 SWAGELOK18.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.69 SWAGELOK19 SWAGELOK19.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.70 SWAGELOK20 SWAGELOK20.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.20 SWAGELOK21 SWAGELOK21.SCS.SWAGELOK.COM dp.swagelok.com tube.swagelok.com
O1 - Hosts: 151.137.254.53 SWAGELOK24 SWAGELOK24.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.73 SWAGELOK26 SWAGELOK26.SCS.SWAGELOK.COM cfg1.swagelok.com
O1 - Hosts: 151.137.254.74 SWAGELOK27 SWAGELOK27.SCS.SWAGELOK.COM cfg2.swagelok.com
O1 - Hosts: 151.137.254.60 SCSEXCH00 SCSEXCH00.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.61 SCSEXCH01 SCSEXCH01.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.78 swagelokqa02.swagelok.com qa-cfg-scs.swagelok.com qa-cfg.swagelok.com
O1 - Hosts: 151.137.254.49 swagelokqa03.swagelok.com qa-dp.swagelok.com qa-tube.swagelok.com
O1 - Hosts: 151.137.254.76 cfg-scs.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.150 devext-cn.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.59 qa-tw.swagelok.com
O1 - Hosts: 208.217.21.63 qa-hk.swagelok.com
O1 - Hosts: 208.217.21.65 qa-jp.swagelok.com
O1 - Hosts: 208.217.21.86 qa-cn.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: BHOmodObj Class - {7F6828CA-9E42-462C-BC60-418C8144012C} - C:\WINDOWS\SYSTEM\BHOMOD.DLL
O2 - BHO: Loader Class - {2E246FAE-8420-11D9-870D-000C2917DE7F} - C:\WINDOWS\SYSTEM\Loader.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [2wSysTray] C:\PROGRAM FILES\2WIRE HOMEPORTAL MONITOR\2PORTALMON.EXE
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - Startup: Quicken Startup.lnk = C:\QUICKENW\QWDLLS.EXE
O4 - Startup: Billminder.lnk = C:\QUICKENW\billmind.exe
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .wmv: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
O16 - DPF: {76D90D08-EAB7-46D8-BF99-87445BF59E72} (SystemInfo Class) - http://directv.direc.../dpcsysinfo.cab
O16 - DPF: {9145A52A-9B22-4858-AEE7-74D6C7D3F366} (BrowserConfig Class) - https://go.wspan.com...owserConfig.cab
O16 - DPF: {E99BF99C-5D95-11D4-A0EC-00500489A32D} (WSFileIO Class) - https://go.wspan.com...Ls/WSFileIO.cab
O16 - DPF: {C1EA01C5-9E62-11D2-A1DE-000083609ECD} (WORLDSPAN Print Control) - https://go.wspan.com...LLs/WSPRINT.CAB
O16 - DPF: {62CEC9E0-3811-4C36-A94E-4F7565DCD23F} (DDSC Class) - http://dp.swagelok.c...rces/msddsc.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 69.50.176.158,85.255.112.8
  • 0

Advertisements

#2
tampabelle
Posted 31 August 2005 - 09:03 AM

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi,


We are sorry to have missed your log due to heavy traffic.

If you still need help, please post back a fresh Hijack This log.

If the problem has been resolved, please let us know.
  • 0

#3
qb1882
Posted 07 September 2005 - 07:40 PM

qb1882

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Please help. Novice user on WIndws 98 need assistance. Your helpful geek, Tampabelle, asked I resend a recent log file.



Logfile of HijackThis v1.99.1
Scan saved at 9:00:37 PM, on 9/7/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\2WIRE HOMEPORTAL MONITOR\2PORTALMON.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\SYSTEM\msblank.html
O1 - Hosts: 151.137.254.11 swagelok04 swagelok04.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.39 swagelok10 swagelok10.scs.swagelok.com
O1 - Hosts: 151.137.254.47 SWAGELOK13 SWAGELOK13.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.58 SWAGELOK14 SWAGELOK14.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.59 SWAGELOK15 SWAGELOK15.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.56 SWAGELOK16 SWAGELOK16.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.57 SWAGELOK17 SWAGELOK17.SCS.SWAGELOK.COM webmail.scs.swagelok.com
O1 - Hosts: 151.137.254.52 SWAGELOK18 SWAGELOK18.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.69 SWAGELOK19 SWAGELOK19.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.70 SWAGELOK20 SWAGELOK20.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.20 SWAGELOK21 SWAGELOK21.SCS.SWAGELOK.COM dp.swagelok.com tube.swagelok.com
O1 - Hosts: 151.137.254.53 SWAGELOK24 SWAGELOK24.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.73 SWAGELOK26 SWAGELOK26.SCS.SWAGELOK.COM cfg1.swagelok.com
O1 - Hosts: 151.137.254.74 SWAGELOK27 SWAGELOK27.SCS.SWAGELOK.COM cfg2.swagelok.com
O1 - Hosts: 151.137.254.60 SCSEXCH00 SCSEXCH00.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.61 SCSEXCH01 SCSEXCH01.SCS.SWAGELOK.COM
O1 - Hosts: 151.137.254.78 swagelokqa02.swagelok.com qa-cfg-scs.swagelok.com qa-cfg.swagelok.com
O1 - Hosts: 151.137.254.49 swagelokqa03.swagelok.com qa-dp.swagelok.com qa-tube.swagelok.com
O1 - Hosts: 151.137.254.76 cfg-scs.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.150 devext-cn.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.59 qa-tw.swagelok.com
O1 - Hosts: 208.217.21.63 qa-hk.swagelok.com
O1 - Hosts: 208.217.21.65 qa-jp.swagelok.com
O1 - Hosts: 208.217.21.86 qa-cn.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O1 - Hosts: 208.217.21.13 www.swagelok.com
O1 - Hosts: 208.217.21.59 devext-tw.swagelok.com
O1 - Hosts: 208.217.21.60 devext-es.swagelok.com
O1 - Hosts: 208.217.21.61 devext-fr.swagelok.com
O1 - Hosts: 208.217.21.62 devext-de.swagelok.com
O1 - Hosts: 208.217.21.63 devext-hk.swagelok.com
O1 - Hosts: 208.217.21.64 devext-en.swagelok.com
O1 - Hosts: 208.217.21.65 devext-jp.swagelok.com
O1 - Hosts: 208.217.21.14 qa.swagelok.com qa-en.swagelok.com
O1 - Hosts: 208.217.21.80 qa-es.swagelok.com
O1 - Hosts: 208.217.21.81 qa-de.swagelok.com
O1 - Hosts: 208.217.21.82 qa-fr.swagelok.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: BHOmodObj Class - {7F6828CA-9E42-462C-BC60-418C8144012C} - C:\WINDOWS\SYSTEM\BHOMOD.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [2wSysTray] C:\PROGRAM FILES\2WIRE HOMEPORTAL MONITOR\2PORTALMON.EXE
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - Startup: Quicken Startup.lnk = C:\QUICKENW\QWDLLS.EXE
O4 - Startup: Billminder.lnk = C:\QUICKENW\billmind.exe
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .wmv: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
O16 - DPF: {76D90D08-EAB7-46D8-BF99-87445BF59E72} (SystemInfo Class) - http://directv.direc.../dpcsysinfo.cab
O16 - DPF: {9145A52A-9B22-4858-AEE7-74D6C7D3F366} (BrowserConfig Class) - https://go.wspan.com...owserConfig.cab
O16 - DPF: {E99BF99C-5D95-11D4-A0EC-00500489A32D} (WSFileIO Class) - https://go.wspan.com...Ls/WSFileIO.cab
O16 - DPF: {C1EA01C5-9E62-11D2-A1DE-000083609ECD} (WORLDSPAN Print Control) - https://go.wspan.com...LLs/WSPRINT.CAB
O16 - DPF: {62CEC9E0-3811-4C36-A94E-4F7565DCD23F} (DDSC Class) - http://dp.swagelok.c...rces/msddsc.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 69.50.176.158,85.255.112.8
  • 0

#4
tampabelle
Posted 14 September 2005 - 06:12 PM

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Hi,


You posted your fresh log in a new topic and I couldnt see it.

Please post your log in this topic only.

Dont start a new topic.

Run Hijack This and click on scan. The following items need to be fixed -

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\SYSTEM\msblank.html

Close all windows other than Hijack This. Check the boxes next to above items and click on Fix checked.


Reboot the PC and post a fresh HJT log
  • 0

#5
tampabelle
Posted 08 October 2005 - 07:09 AM

tampabelle

    Member 5k

  • Retired Staff
  • 6,363 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP