Hijack This - Anyone good at it?

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • NoSoup4You
    #1

    Hijack This - Anyone good at it?

    I downloaded Hijack this to keep my computer 100% clean (or atleast as clean as can be). Anyone good at reading the logs? I read through it and didn't seem like anything was out of place, but I want to make sure I'm not missing anything.
    Tags: None
    • virussnt
      #2
      Re: Hijack This - Anyone good at it?

      If you post your log file I can have a look and so can anyone else with experience.

        Comment

        • NoSoup4You
          #3
          Re: Hijack This - Anyone good at it?

          Sweetness just what I was looking for. I'm pretty sure I got most everything, but want to make sure!

          Logfile of HijackThis v1.99.1
          Scan saved at 8:46:44 PM, on 10/27/2005
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
          C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
          C:\Program Files\Norton Internet Security\ISSVC.exe
          C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
          C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          E:\Adobe Suite 2\Adobe Version Cue CS2\bin\VersionCueCS2.exe
          C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
          C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
          C:\WINDOWS\system32\CTHELPER.EXE
          E:\Adobe Suite 2\Adobe Acrobat 7.0\Distillr\Acrotray.exe
          C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
          C:\Program Files\Common Files\Symantec Shared\ccApp.exe
          C:\Program Files\Norton Password Manager\AcctMgr.exe
          C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
          C:\Program Files\Visualware Security Suite\tscore.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\WINDOWS\system32\java.exe
          C:\Program Files\Logitech\SetPoint\SetPoint.exe
          C:\WINDOWS\system32\WTablet\TabUserW.exe
          C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
          C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
          C:\WINDOWS\system32\Tablet.exe
          C:\WINDOWS\System32\MsPMSPSv.exe
          E:\Adobe Suite 2\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
          C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\MSN Messenger\msnmsgr.exe
          C:\Program Files\AIM\aim.exe
          C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
          C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Documents and Settings\Joel\Local Settings\Temp\HijackThis.exe

          R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
          R3 - URLSearchHook: (no name) - <default> - (no file)
          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Adobe Suite 2\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: VIPTToolbarManager Class - {1A2641AE-2C42-4C51-A05F-8ECEC3FDC94D} - C:\Program Files\Visual IP Trace\VisualIPTraceIE.dll
          O2 - BHO: Accoona Search Assistant - {944864A5-3916-46E2-96A9-A2E84F3F1208} - C:\Program Files\Accoona\ASearchAssist.dll (file missing)
          O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
          O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Adobe Suite 2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
          O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
          O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Adobe Suite 2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
          O3 - Toolbar: Visual IP Trace - {E70C26AE-DFF1-40A8-8D37-19180F56F0AA} - C:\Program Files\Visual IP Trace\VisualIPTraceIE.dll
          O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
          O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [Adobe Version Cue CS2] "E:\Adobe Suite 2\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
          O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "E:\Adobe Suite 2\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
          O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
          O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
          O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
          O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
          O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
          O4 - HKLM\..\Run: [Visualware Security Suite] "C:\Program Files\Visualware Security Suite\tscore.exe" -autostartup
          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
          O4 - HKCU\..\Run: [Longhorn SideBar] C:\WINDOWS\SideBar\SideBar.exe
          O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
          O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
          O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
          O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
          O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
          O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exe
          O8 - Extra context menu item: Convert link target to Adobe PDF - res://E:\Adobe Suite 2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
          O8 - Extra context menu item: Convert link target to existing PDF - res://E:\Adobe Suite 2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
          O8 - Extra context menu item: Convert selected links to Adobe PDF - res://E:\Adobe Suite 2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
          O8 - Extra context menu item: Convert selected links to existing PDF - res://E:\Adobe Suite 2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
          O8 - Extra context menu item: Convert selection to Adobe PDF - res://E:\Adobe Suite 2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
          O8 - Extra context menu item: Convert selection to existing PDF - res://E:\Adobe Suite 2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
          O8 - Extra context menu item: Convert to Adobe PDF - res://E:\Adobe Suite 2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
          O8 - Extra context menu item: Convert to existing PDF - res://E:\Adobe Suite 2\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
          O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
          O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
          O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
          O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
          O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
          O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126403377484
          O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1126404016968
          O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
          O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
          O23 - Service: Adobe Version Cue CS2 - Unknown owner - E:\Adobe Suite 2\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
          O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
          O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
          O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
          O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
          O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
          O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
          O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
          O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
          O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
          O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
          O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
          O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
          O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe
          Thank you in advance!

            Comment

            • Widkidone
              #4
              Re: Hijack This - Anyone good at it?

              Log is clean!

                Comment

                • imported_Mutrino
                  #5
                  Re: Hijack This - Anyone good at it?

                  Clean except for using Intercrap explorer and Norton intercrap security

                    Comment

                    • NoSoup4You
                      #6
                      Re: Hijack This - Anyone good at it?

                      Originally posted by Mutrino
                      Clean except for using Intercrap explorer and Norton intercrap security
                      I use IE because I don't use any of the security features built in. All of my passwords are stored in Norton Password thingy, and it will only auto-fill for IE. Trust me I'd rather be using Firefox.

                        Comment

                        • bisley
                          #7
                          Re: Hijack This - Anyone good at it?

                          Originally posted by Mutrino
                          Clean except for using Intercrap explorer and Norton intercrap security
                          Lma0 , agreed

                            Comment

                            • Sir. MatDef
                              Member
                              • Sep 2005
                              • 2899
                              #8
                              Re: Hijack This - Anyone good at it?

                              Looks good to me, I noticed you have objectdock running. I just wanted to know, have you tried the new Windowsblinds 5.0 beta? I'm running it right now, and I love the vista affects.

                                Comment

                                • A_cLAME_MORE_DUD
                                  #9
                                  Re: Hijack This - Anyone good at it?

                                  If you know what should and should not be there it is very good.

                                    Comment

                                    • FLYWAYchat
                                      #10
                                      Re: Hijack This - Anyone good at it?

                                      Boy u have alot of things running and in ur start-up defs not needed.
                                      Look at 1st lines "C:\... , E:\... and so on" and the Q4 lines.
                                      1st ones are the processes and applics currently running (u can see them at TaskManager") there should be only the necessary ones. The Q4 lines r the windows_startup applics.

                                      I use Tuneup Utilities to get rid of the unnecessary ones. Try it.

                                        Comment

                                        • bisley
                                          #11
                                          Re: Hijack This - Anyone good at it?

                                          Start/run/ type msconfig / Startup tab and ditch all that stuff you dont need , also there may be some apps you dont need in the Services tab .Just do 1 at a time incase you FUBAR your o/s .

                                            Comment

                                            • NoSoup4You
                                              #12
                                              Re: Hijack This - Anyone good at it?

                                              I unloaded Object Dock and StyleXP and I'm using Window's GUI to theme my computer now, so I got rid of that.

                                              In terms of other stuff at start up, I don't mind much. I have 2GB DDR2-533 so it doesn't much effect my load times and stuff ingame.

                                                Comment

                                                • NoSoup4You
                                                  #13
                                                  Re: Hijack This - Anyone good at it?

                                                  Originally posted by Sir. MatDef
                                                  Looks good to me, I noticed you have objectdock running. I just wanted to know, have you tried the new Windowsblinds 5.0 beta? I'm running it right now, and I love the vista affects.
                                                  No I do not, but I am interested PM me or contact me via IM so we can talk further.

                                                    Comment

                                                    Previous template Next
                                                    Working...

                                                      We process personal data about users of our site, through the use of cookies and other technologies, to deliver our services, personalize advertising, and to analyze site activity. We may share certain information about our users with our advertising and analytics partners. For additional details, refer to our Privacy Policy.

                                                      By clicking "I AGREE" below, you agree to our Privacy Policy and our personal data processing and cookie practices as described therein. You also acknowledge that this forum may be hosted outside your country and you consent to the collection, storage, and processing of your data in the country where this forum is hosted.

                                                      I Agree