|
List Home > Computer Viruses > [ Post New Problem ]
Welcome back !
| TrackingID : | 18336 |
| Posted : | Thursday, October 12th, 2006 06:58:14 AM |
| By : | kmc |
| System32 problem? | Configuration: |
Hi all,
I rencently started having some problems with internet connections, pop-ups etc. I used spybot S&D which seemed to work. But when I ran it again the next day the same problems were still present. So I used Hijackthis and saved the report. Any healp making sense of this report would be great.
Thanks in advance.
Here it is....
Logfile of HijackThis v1.99.1
Scan saved at 17:16:25, on 12/10/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\\WINDOWS\\System32\\smss.exe
C:\\WINDOWS\\system32\\winlogon.exe
C:\\WINDOWS\\system32\\services.exe
C:\\WINDOWS\\system32\\lsass.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\WINDOWS\\system32\\spoolsv.exe
C:\\WINDOWS\\Explorer.EXE
C:\\WINDOWS\\System32\\Ati2evxx.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\WINDOWS\\System32\\pctspk.exe
C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe
C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe
C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe
C:\\WINDOWS\\System32\\cmd32.exe
C:\\WINDOWS\\System32\\rundll32.exe
C:\\WINDOWS\\System32\\kernels8.exe
C:\\WINDOWS\\System32\\ctfmon.exe
C:\\Program Files\\Internet Explorer\\iexplore.exe
C:\\Program Files\\Internet Explorer\\iexplore.exe
C:\\Documents and Settings\\Kevin McCullough\\My Documents\\My Music\\ZoneAlarm\\zlclient.exe
C:\\WINDOWS\\System32\\wuauclt.exe
C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe
C:\\WINDOWS\\System32\\ZoneLabs\\isafe.exe
C:\\DOCUME~1\\KEVINM~1\\MYDOCU~1\\MYMUSI~1\\ZONEAL~1\\MAILFR~1\\mantispm.exe
C:\\Documents and Settings\\Kevin McCullough.MCCULLOUGH\\My Documents\\Recieved\\HijackThis.exe
R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://uk.my.yahoo.com/
R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName =
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\\WINDOWS\\System32\\msdxm.ocx
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\\Program Files\\Canon\\Easy-WebPrint\\Toolband.dll
O4 - HKLM\\..\\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\\..\\Run: [SynTPLpr] C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe
O4 - HKLM\\..\\Run: [SynTPEnh] C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe
O4 - HKLM\\..\\Run: [ATIPTA] C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe
O4 - HKLM\\..\\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\\..\\Run: [QuickTime Task] \"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime
O4 - HKLM\\..\\Run: [ControlPanel] C:\\WINDOWS\\System32\\cmd32.exe internat.dll,LoadKeyboardProfile
O4 - HKLM\\..\\Run: [uxirvxf.dll] C:\\WINDOWS\\System32\\rundll32.exe C:\\WINDOWS\\System32\\uxirvxf.dll,hinsred
O4 - HKLM\\..\\Run: [uwa6pcw] \"C:\\Program Files\\Common Files\\WinAntiVirus Pro 2006\\uwa6pcw.exe\" -c
O4 - HKLM\\..\\Run: [System] C:\\WINDOWS\\System32\\kernels8.exe
O4 - HKCU\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\System32\\ctfmon.exe
O4 - HKCU\\..\\Run: [MSMSGS] \"C:\\Program Files\\Messenger\\msmsgs.exe\" /background
O4 - HKCU\\..\\Run: [BitTorrent] \"C:\\Program Files\\BitTorrent\\bittorrent.exe\" --force_start_minimized
O4 - Global Startup: Microsoft Office.lnk = C:\\Program Files\\Microsoft Office\\Office10\\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\\PROGRA~1\\MICROS~2\\Office10\\EXCEL.EXE/3000
O21 - SSODL: UTBZcTCl - {DC275D73-768D-F7D9-7367-8E56B7A9B18B} - C:\\WINDOWS\\System32\\ix.dll (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\\WINDOWS\\System32\\Ati2evxx.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\\WINDOWS\\System32\\ZoneLabs\\isafe.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\\Program Files\\Common Files\\InstallShield\\Driver\\11\\Intel 32\\IDriverT.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe
Additional Comments:
Please forgive me if I've missed out any important info, it's all still a bit of a mystery to me
| Operating System : MS windows XP pro
CPU/Processor : pentium 4
RAM : Actual:512 MB
|
Related Problems :
List Home > Computer Viruses > [ Post New Problem ] |
|
