Page 1 of 1

Yet Another Huge Problem! Help!

PostPosted: Sun Jan 15, 2006 6:02 pm
by Un4g1v3n

PostPosted: Sun Jan 15, 2006 6:05 pm
by Gecko
Please download , unzip it to it's own folder.
Start HijackThis and select 'Do a system scan and save a logfile'
Now post the contents of the logfile back into this thread.

PostPosted: Sun Jan 15, 2006 6:44 pm
by Un4g1v3n
Okay, well maybe this is weird too... when i'm not in safe mode, I get this error when trying to post here:

"Warning: Your browser, a proxy or a firewall is stopping connection from HEADER_POSTER (i think thats what it was) on this site. Please switch browsers, turn off proxy and firewall and you should have no problems POSTING on this forum"

Aswell, here's the HiJackThis Log:

Logfile of HijackThis v1.99.1
Scan saved at 12:22:03 PM, on 1/15/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\windows\SYSTEM32\ZoneLabs\vsmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promot ... r37520.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMe ... loader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\windows\SYSTEM32\ZoneLabs\vsmon.exe


I'm thinking of just deleting ZoneAlarm.

PostPosted: Sun Jan 15, 2006 6:57 pm
by Un4g1v3n
I uninstalled ZA and I fix that "HEADER POSTING" thing.

What are you able to see from the hijack log? Thats the full thing. That's all it gave me. Some people have huge ones... Why's mine so small?

PostPosted: Sun Jan 15, 2006 8:09 pm
by Gecko

PostPosted: Sun Jan 15, 2006 10:37 pm
by Un4g1v3n

PostPosted: Sun Jan 15, 2006 11:39 pm
by Gecko
Have you tried downloading and using it as your browser?
It could be some activeX running within IE

PostPosted: Mon Jan 16, 2006 7:05 pm
by Un4g1v3n
Turns out it was my modem. It was fried. I called the ISP and they ran diagnostics on it and discovered it had a 92% packet loss.

I got a new modem and seems it's running nice.

Thanks for everything Gecko.

PostPosted: Tue Jan 17, 2006 8:01 pm
by Herm862001
have you tried getting highspeed it will help you in the long run.
i know verizon has a deal running $14.99 per month for 640k download.