Hijack this log & problem

themissinglink17 · May 5, 2005

Old log deleted to save room

Problem:

Alright so msn isnt working, wont let me connect... it did this before i formatted last time. Also i'm using firefox and i have 2 profiles for it, default and one i created... well the one i created, when i try to go to use it, says its already in use... and when i was on it, the links i typed in would show up backwards: moc.stepoen - neopets.com and moc.epacsenur - runescape.com Should i format again?

Vape · May 5, 2005

You don't need to reformat, you need to update! http://www.windowsupdate.com :!:

When firefox says "Profile in use" hit ctrl+alt+del and end task on any currently running Firefox processes.

I've no idea about the backwards text, try reverting to the default theme and uninstalling your extensions and see if it goes back to normal. Otherwise, create a new blank firefox profile - does it still happen?

themissinglink17 · May 5, 2005

oh internet explorer isnt working either, so no windows update =p

EDIT: Nevermind, got windows updates but msn messenger and internet explorer still wont work, the backwards text is gone now too

Vape · May 5, 2005

Go to http://www.windowsupdate.com in IE and if it says no more updates are avaliable, post another hijackthis log.

What exactly are the problems with IE and MSN messenger? Have you got the latest version of messenger? (7)

themissinglink17 · May 5, 2005

yeah ive got the latest messenger, whenever i try to go to any page on IE it wont connect or something

themissinglink17 · May 5, 2005

Old log deleted to save room

Vape · May 5, 2005

Dude! :evil:

You have NOT got the latest windows updates. You need to download ALL of them. The most important one is called serive pack 2.

If internet explorer will not work for you in regular mode, restart your pc in safe mode by repeatedly pressing f8 during startup. Then try windowsupdate to get the updates.

Again, I need more information about your problems with MSN and IE, "it wont connect or something" is just not good enough! :roll:

themissinglink17 · May 5, 2005

I wouldnt know what to tell you... i always format when i have these kinds of problems

grin_king · May 5, 2005

1) Get the latest version of Ad-aware

2) Boot into Safe Mode With Networking

3) Scan with Ad-aware and fix any probs (not the minor ones) it finds

4) Go to housecall.antivirus.com and do a scan with that - be sure to select the "Fix errors" option

5) Reboot and try WindowsUpdate again.

If WindowsUpdate STILL doesn't work, tell us exactly what happens, with error messages, etc

themissinglink17 · May 5, 2005

alright heres a NEW hjlog

Logfile of HijackThis v1.99.1

Scan saved at 4:50:13 AM, on 5/5/2005

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:

C:\WINDOWS\System32\smss[Caution: ExecutableFile]

C:\WINDOWS\system32\winlogon[Caution: ExecutableFile]

C:\WINDOWS\system32\services[Caution: ExecutableFile]

C:\WINDOWS\system32\lsass[Caution: ExecutableFile]

C:\WINDOWS\system32\svchost[Caution: ExecutableFile]

C:\WINDOWS\System32\svchost[Caution: ExecutableFile]

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr[Caution: ExecutableFile]

C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile]

C:\WINDOWS\Explorer[Caution: ExecutableFile]

C:\Program Files\Intel\NCS\PROSet\PRONoMgr[Caution: ExecutableFile]

C:\WINDOWS\System32\CTHELPER[Caution: ExecutableFile]

C:\WINDOWS\GWMDMMSG[Caution: ExecutableFile]

C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD[Caution: ExecutableFile]

C:\Program Files\Common Files\Symantec Shared\ccApp[Caution: ExecutableFile]

C:\Program Files\Java\jre1.5.0_01\bin\jusched[Caution: ExecutableFile]

C:\Program Files\Winamp\winampa[Caution: ExecutableFile]

C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]

C:\Program Files\MSN Messenger\msnmsgr[Caution: ExecutableFile]

C:\Program Files\AIM\aim[Caution: ExecutableFile]

C:\Program Files\Yahoo!\Messenger\ypager[Caution: ExecutableFile]

C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile]

C:\Program Files\LimeWire\LimeWire[Caution: ExecutableFile]

C:\Program Files\Norton AntiVirus\navapsvc[Caution: ExecutableFile]

C:\WINDOWS\System32\nvsvc32[Caution: ExecutableFile]

C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS

C:\WINDOWS\System32\wuauclt[Caution: ExecutableFile]

C:\Documents and Settings\Chris\Desktop\HijackThis[Caution: ExecutableFile]

C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\2cf41f1db14bc8f414e16e1555b77108\update\update[Caution: ExecutableFile]

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gatewaybiz.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gatewaybiz.com

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 68.95.120.5:80

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll

O4 - HKLM\..\Run: [PRONoMgr[Caution: ExecutableFile]] C:\Program Files\Intel\NCS\PROSet\PRONoMgr[Caution: ExecutableFile]

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32[Caution: ExecutableFile] C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [CTHelper] CTHELPER[Caution: ExecutableFile]

O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG[Caution: ExecutableFile]

O4 - HKLM\..\Run: [GWMDMpi] C:\WINDOWS\GWMDMpi[Caution: ExecutableFile]

O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD[Caution: ExecutableFile]"

O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp[Caution: ExecutableFile]

O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy[Caution: ExecutableFile]

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched[Caution: ExecutableFile]

O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa[Caution: ExecutableFile]

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]" -osboot

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr[Caution: ExecutableFile]" /background

O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim[Caution: ExecutableFile] -cnetwait.odl

O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager[Caution: ExecutableFile] -quiet

O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire[Caution: ExecutableFile]

O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire[Caution: ExecutableFile]

O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll

O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll

O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim[Caution: ExecutableFile]

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS[Caution: ExecutableFile]

O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS[Caution: ExecutableFile]

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr[Caution: ExecutableFile]

O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc[Caution: ExecutableFile]

O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc[Caution: ExecutableFile]

O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc[Caution: ExecutableFile]

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32[Caution: ExecutableFile]

O23 - Service: PrismXL - Lanovation - C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS

O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ[Caution: ExecutableFile]

Mercifull · May 5, 2005

Platform: Windows XP SP1 (WinNT 5.01.2600)

Are you even listening to the advice people are giving?

Mercifull · May 5, 2005

Platform: Windows XP SP1 (WinNT 5.01.2600)

Are you even listening to the advice people are giving? You need to get SP2

themissinglink17 · May 5, 2005

Platform: Windows XP SP1 (WinNT 5.01.2600)

Are you even listening to the advice people are giving? You need to get SP2

Of course I am.. Do I understand it? No

OHOHOHOOH I was downloading these random updates and its installing service pack 2!!

Elite · May 5, 2005

ONLY GET SP2 WHEN YOUR LOG IS CLEAN, GEEZ SO MANY SMARTASSES NOWADAYS.

themissinglink17 · May 5, 2005