Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Regular check up

Started by hopeforclean , Feb 16 2006 04:11 PM

  • Please log in to reply

#1
hopeforclean
Posted 16 February 2006 - 04:11 PM

hopeforclean

    banned

  • Banned
  • Pip
  • 3 posts
I am not sure If I am Having a problem or my Computer is just getting old.

Here is my Hijack This log

Logfile of HijackThis v1.99.1
Scan saved at 6:45:36 AM, on 1/6/06
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\My Documents\spybot\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [ICSDCLT] C:\WINDOWS\rundll32.exe C:\WINDOWS\SYSTEM\icsdclt.dll,ICSClient
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM\..\RunServices: [V128IID] Rundll32.exe C:\WINDOWS\SYSTEM\v128iitw.dll,STB_InitTweak
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitd...can8/oscan8.cab
  • 0

Advertisements

#2
Metallica
Posted 19 February 2006 - 01:27 PM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
One thing that I'm not sure about:

Can you surf to http://virusscan.jotti.org/ and upload this file:
C:\WINDOWS\SYSTEM\SSDPSRV.EXE

If your OS was Windows ME I would not even have mentioned it, but I have never seen it on a '98 computer before.

The rest of your log looks OK.

Regards,
  • 0

#3
hopeforclean
Posted 19 February 2006 - 01:44 PM

hopeforclean

    banned

  • Topic Starter
  • Banned
  • Pip
  • 3 posts
Scanner Malware name
AntiVir Packer/MEW packer
ArcaVir X
Avast X
AVG Antivirus X
BitDefender X
ClamAV X
Dr.Web Tool.ASEye.2
F-Prot Antivirus X
Fortinet X
Kaspersky Anti-Virus X
NOD32 a variant of Win32/Tool.TPE.A application
Norman Virus Control X
UNA X
VBA32 X


File: Ssdpsrv.exe
Status: OK
MD5 95914d31a0b7001e99a537dc5f563f4d
Packers detected: -
  • 0

#4
Metallica
Posted 19 February 2006 - 01:55 PM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Can you retry that?

This time copy the data that belongs to your file and only those.
Do NOT copy any data about the last virus that was found into your own.

Although looking at the little bit of usefull info you posted that file will turn out to be clean.

Regards,
  • 0

#5
hopeforclean
Posted 19 February 2006 - 02:41 PM

hopeforclean

    banned

  • Topic Starter
  • Banned
  • Pip
  • 3 posts
File: Ssdpsrv.exe
Status: OK
MD5 95914d31a0b7001e99a537dc5f563f4d
Packers detected: -
  • 0

#6
Metallica
Posted 19 February 2006 - 02:53 PM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
OK. False alarm on my side.

Did you run any online scans on that machine?

If those didn't reveal anything either, I suggest you stick with the thread in networking.

Regards,
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP