Adblock breaks this site

Am I clean? HiJackThis

Discussion in 'Help & Requests' started by iownyou57, Feb 5, 2011.

Thread Tools

Thread Tools

  • Thread ID:
  1. iownyou57

    iownyou57 Forum Addict
    Banned

    Joined:
    Nov 25, 2010
    Posts:
    320
    Referrals:
    0
    Sythe Gold:
    0
    Am I clean? HiJackThis
    Am I clean? I did a Scan.


    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 11:25:33 PM, on 2/5/2011
    Platform: Windows Vista SP2 (WinNT 6.00.1906)
    MSIE: Internet Explorer v8.00 (8.00.6001.18999)
    Boot mode: Normal

    Running processes:
    C:\Program Files\Dell\DellDock\DellDock.exe
    C:\Program Files\Defender Pro\Defender Pro\bdagent.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Defender Pro\Defender Pro\seccenter.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\DellTPad\Apoint.exe
    C:\Windows\System32\hkcmd.exe
    C:\Windows\System32\igfxpers.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    C:\Windows\System32\WLTRAY.EXE
    C:\Program Files\Dell\MediaDirect\PCMService.exe
    C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\Windows\system32\igfxsrvc.exe
    C:\Windows\system32\wuauclt.exe
    C:\Program Files\DellTPad\HidFind.exe
    C:\Program Files\DellTPad\Apntex.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Users\arodriguez\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Users\arodriguez\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\arodriguez\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\arodriguez\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\arodriguez\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\arodriguez\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\arodriguez\Downloads\HijackThis.exe
    C:\Users\arodriguez\AppData\Local\Google\Chrome\Application\chrome.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.mywebsearch.com/index.jhtml?ptnrS=ZKxdm325YYUS&ptb=a2CDyfZN2oK70hS19kS9HQ&n=77cecfd3
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    R3 - URLSearchHook: (no name) - {9565115d-c7d6-46d3-bd63-b67b481a4368} - (no file)
    O1 - Hosts: ::1 localhost
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Updater For My.Freeze.com Toolbar - {C26CD490-5F01-41E3-B150-EB29F19DA056} - C:\Program Files\myfreezetoolbar\auxi\myfreezetoolbAu.dll (file missing)
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: Defender Pro Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\Defender Pro\Defender Pro\IEToolbar.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
    O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
    O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
    O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Defender Pro Antiphishing Helper] "C:\Program Files\Defender Pro\Defender Pro\IEShow.exe"
    O4 - HKLM\..\Run: [DPAgent] "C:\Program Files\Defender Pro\Defender Pro\bdagent.exe"
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [Google Update] "C:\Users\arodriguez\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
    O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
    O4 - Startup: VZAccess Manager.lnk = C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe
    O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
    O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe
    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
    O15 - Trusted Zone: http://*.mcafee.com
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
    O17 - HKLM\System\CS2\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS3\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS4\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS5\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS6\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS7\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS8\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS9\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS10\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS11\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS12\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS13\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS14\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS15\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O17 - HKLM\System\CS16\Services\Tcpip\..\{15D7C6F4-BA36-4C6D-9D76-146C85766422}: NameServer = 66.174.95.44 69.78.96.14
    O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
    O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
    O23 - Service: Defender Pro Arrakis Server (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:\Program Files\Common Files\Defender Pro\Defender Pro Arrakis Server\bin\arrakis3.exe
    O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
    O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    O23 - Service: Defender Pro Update Service (LIVESRV) - Defender Pro - C:\Program Files\Common Files\Defender Pro\Defender Pro Update Service\livesrv.exe
    O23 - Service: mp3_downloadmanager_service - Unknown owner - C:\Program Files\Verizon Wireless\mp3_downloadmanager_service.exe (file missing)
    O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
    O23 - Service: Defender Pro Virus Shield (VSSERV) - Defender Pro - C:\Program Files\Defender Pro\Defender Pro\vsserv.exe
    O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 10917 bytes
     
    iownyou57, Feb 5, 2011
    #1
  2. GhostedOUT

    GhostedOUT Member
    Banned

    Joined:
    Jan 21, 2011
    Posts:
    64
    Referrals:
    0
    Sythe Gold:
    0
    Am I clean? HiJackThis
    A very select few people understand how to interpret this log. I do, but I will not give you the time of day for me to go through this at the moment as I have work rather soon. If I get the chance, I will look at it after work but the odds of that happening are slim. My advice to you is to take this over to a forum that is more knowledgeable on the subject such as Trend Micro's forums.

    I wouldn't chance listening to anyone around these parts of the internet to tell you if you are clean or not.
     
    GhostedOUT, Feb 6, 2011
    #2
  3. Mrduckysr

    Mrduckysr Guru

    Joined:
    Dec 31, 2008
    Posts:
    1,071
    Referrals:
    2
    Sythe Gold:
    32
    Discord Unique ID:
    458367010309537804
    Am I clean? HiJackThis
    A really helpful website for hijackthis logs and others is 5starsupport.com

    I was wondering if I was clean as well, so I submitted a hijackthis log to that forum, and I got a response within 24 hours each time. I was also using a 64-bit OS, so I used OTL instead. The mods there are professionals, so that's your best bet.
     
    Mrduckysr, Feb 7, 2011
    #3
< Upgrading parts on laptop | What should I say to Paypal in this position? >


 
 
Adblock breaks this site