Page 1 of 1

Someone check my Hijackthis log please?

PostPosted: Sun Apr 25, 2004 2:47 pm
by Jazzman
Hi all!

This forums great - such a massive help to us novices who aren't sure what on earth we're doing!

I run spybot and adaware regularly, as well as bazzooka (which I highly reccomend). Just for peace of mind, could someone check my unusually short hijackthis log.

Oh, and does it offer any clues as to the maddening 15 seconds that Outlok express is taking to start?

Cheers!

Jazzman :cool:

Logfile of HijackThis v1.97.7
Scan saved at 14:38:34, on 25/04/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Messenger Plus! 2\MsgPlus.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... Client.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1E9E8E1B-97EC-4D15-B103-ACB329F8A788}: NameServer = 194.168.4.100 194.168.8.100

PostPosted: Sun Apr 25, 2004 3:10 pm
by brad
First thing, you need to update IE and Windows.
The only other thing I see is:
O17 - HKLM\System\CCS\Services\Tcpip\..\{1E9E8E1B-97EC-4D15-B103-ACB329F8A788}: NameServer = 194.168.4.100 194.168.8.100
Are you on a Network?
brad

PostPosted: Sun Apr 25, 2004 8:38 pm
by Jazzman
No im not on a network, but I think I clicked something i wasn't supposed to when installing windows, so it has always thought i am on a network. Any idea how to sort it out?

Thanks

Jazzman :cool:

PostPosted: Sun Apr 25, 2004 10:53 pm
by brad
Have HiJack This Fix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{1E9E8E1B-97EC-4D15-B103-ACB329F8A788}: NameServer = 194.168.4.100 194.168.8.100

Other than that, if you're not having problems, leave well enough alone.
brad