wioneo Posted November 19, 2005 Share Posted November 19, 2005 When I am playing Runescape, I receieve this error randomly. The chance of getting this error increases when I kill things in the game. I have completely removed and re-installed both Internet explorer and Sun Java... I didn't know what else to do, so I Scanned with Hijack This while the game was running. Here is the log Logfile of HijackThis v1.99.1 Scan saved at 10:05:42 PM, on 11/18/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss[Caution: ExecutableFile] C:\WINDOWS\system32\winlogon[Caution: ExecutableFile] C:\WINDOWS\system32\services[Caution: ExecutableFile] C:\WINDOWS\system32\lsass[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon[Caution: ExecutableFile] C:\Program Files\ewido\security suite\ewidoctrl[Caution: ExecutableFile] C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE[Caution: ExecutableFile] C:\Program Files\Softex\OmniPass\Omniserv[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\wanmpsvc[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\Program Files\Softex\OmniPass\OPXPApp[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\Mp[bleep]ent[Caution: ExecutableFile] C:\WINDOWS\Explorer[Caution: ExecutableFile] c:\program files\mcafee.com\agent\mcagent[Caution: ExecutableFile] C:\PROGRA~1\mcafee.com\vso\mcvsshld[Caution: ExecutableFile] C:\Program Files\Microsoft AntiSpyware\gcasServ[Caution: ExecutableFile] c:\progra~1\mcafee.com\vso\mcvsescn[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\ACS\AOLDial[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray[Caution: ExecutableFile] C:\Program Files\Java\jre1.5.0_05\bin\jusched[Caution: ExecutableFile] C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: ExecutableFile] C:\WINDOWS\system32\rundll32[Caution: ExecutableFile] C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002[Caution: ExecutableFile] c:\PROGRA~1\mcafee.com\vso\mcvsrte[Caution: ExecutableFile] C:\Program Files\Real\RealOne Player\RealPlay[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLHostManager[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLServiceHost[Caution: ExecutableFile] c:\program files\common files\aol\1101581974\ee\services\antiSpywareApp\ver2_0_7\AOLSP Scheduler[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLServiceHost[Caution: ExecutableFile] C:\Program Files\apsi\wtta[Caution: ExecutableFile] C:\Program Files\America Online 9.0g\waol[Caution: ExecutableFile] C:\Program Files\America Online 9.0g\shellmon[Caution: ExecutableFile] c:\PROGRA~1\mcafee.com\vso\mcshield[Caution: ExecutableFile] C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile] C:\Program Files\Microsoft AntiSpyware\gcasDtServ[Caution: ExecutableFile] C:\Program Files\Internet Explorer\iexplore[Caution: ExecutableFile] C:\Documents and Settings\Owner\Desktop\Game_Maker\Demos\hijackthis\HijackThis[Caution: ExecutableFile] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\companion\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate[Caution: ExecutableFile] O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\McAfee.com\Agent\McAgent[Caution: ExecutableFile] O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr[Caution: ExecutableFile]" /checktask O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld[Caution: ExecutableFile]" O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ[Caution: ExecutableFile]" O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial[Caution: ExecutableFile] O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray[Caution: ExecutableFile] O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask[Caution: ExecutableFile]" -atboottime O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched[Caution: ExecutableFile] O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]" -osboot O4 - HKCU\..\Run: [NVIEW] rundll32[Caution: ExecutableFile] nview.dll,nViewLoadHook O4 - HKCU\..\Run: [innhi] C:\WINDOWS\system32\??chost[Caution: ExecutableFile] O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: ExecutableFile] O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0g\AOL[Caution: ExecutableFile]" -b O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl[Caution: ExecutableFile] O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] O4 - Global Startup: QuickBooks 2002 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002[Caution: ExecutableFile] O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate[Caution: ExecutableFile] O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent[Caution: ExecutableFile] O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim[Caution: ExecutableFile] O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://help.bellsouth.net/sdccommon/download/tgctlcm.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) - O18 - Protocol: start - (no CLSID) - (no file) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: ExecutableFile] O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon[Caution: ExecutableFile] O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl[Caution: ExecutableFile] O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService[Caution: ExecutableFile] O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield[Caution: ExecutableFile] O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr[Caution: ExecutableFile]) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr[Caution: ExecutableFile] O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte[Caution: ExecutableFile] O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE[Caution: ExecutableFile] O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv[Caution: ExecutableFile] O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile] O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd[Caution: ExecutableFile]" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: Security Agent (scagent) - Unknown owner - C:\WINDOWS\system32\scagent[Caution: ExecutableFile]" start (file missing) O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc[Caution: ExecutableFile] Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
weezcake Posted November 19, 2005 Share Posted November 19, 2005 It doesn't look like there's anything suspicious, but I do see maybe 3 anti-viruses running at the same time (ewido, mcafee, AOL?) One is sufficient.. ==================================Retired tip.it moderator.Teaching and inspiring. Link to comment Share on other sites More sharing options...
DJpailo Posted November 19, 2005 Share Posted November 19, 2005 you have a broswer hijacker I believe. Run ad-aware se and spybot search and destroy in safe mode. Then go back to normal mode, and post a fresh log. Link to comment Share on other sites More sharing options...
coltm4carbine Posted November 19, 2005 Share Posted November 19, 2005 *hint* if he did have a browser hijacker it would of been cws. *hint* i won't go into too much detail incase it ends up like last time. Link to comment Share on other sites More sharing options...
DJpailo Posted November 19, 2005 Share Posted November 19, 2005 *hint* if he did have a browser hijacker it would of been cws. *hint* i won't go into too much detail incase it ends up like last time. his homepage is blank, search page blank, thats what made me to think it was browser hijacker. I dunno. Link to comment Share on other sites More sharing options...
wioneo Posted November 19, 2005 Author Share Posted November 19, 2005 My homepage is google, and my search page is blank. When I opened IE 2 minutes ago it showed google, so I don't know why it would appear blank. Also, EWIDO is expired, I'll uninstall that. By AOL do you mean AOL Privacy Wall or AOL Spyware protection? I recently switched from dial-up, so there are is still a lot of AOL stuff. Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
coltm4carbine Posted November 19, 2005 Share Posted November 19, 2005 and my search page is blank if you have setted it like that then it's ok. IF not then: Download CWShredder ]here to its own folder. Update CWShredder * Open CWShredder and click I AGREE * Click Check For Update * Close CWShredder Boot into Safe Mode: Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode. Now run CWShredder. Click I Agree, then Fix and then Next, let it fix everything it asks about. Reboot your computer into normal windows. Link to comment Share on other sites More sharing options...
wioneo Posted November 19, 2005 Author Share Posted November 19, 2005 I already had CWS shredder and ran it. Here is the new log. Logfile of HijackThis v1.99.1 Scan saved at 1:36:24 PM, on 11/19/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss[Caution: ExecutableFile] C:\WINDOWS\system32\winlogon[Caution: ExecutableFile] C:\WINDOWS\system32\services[Caution: ExecutableFile] C:\WINDOWS\system32\lsass[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon[Caution: ExecutableFile] C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE[Caution: ExecutableFile] C:\Program Files\Softex\OmniPass\Omniserv[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\wanmpsvc[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\Program Files\Softex\OmniPass\OPXPApp[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\Mp[bleep]ent[Caution: ExecutableFile] C:\WINDOWS\Explorer[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\Agent\McAgent[Caution: ExecutableFile] C:\PROGRA~1\mcafee.com\vso\mcvsshld[Caution: ExecutableFile] C:\Program Files\Microsoft AntiSpyware\gcasServ[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\ACS\AOLDial[Caution: ExecutableFile] c:\progra~1\mcafee.com\vso\mcvsescn[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray[Caution: ExecutableFile] C:\Program Files\Java\jre1.5.0_05\bin\jusched[Caution: ExecutableFile] C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile] C:\WINDOWS\system32\??chost[Caution: ExecutableFile] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: ExecutableFile] C:\WINDOWS\system32\rundll32[Caution: ExecutableFile] C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] C:\Program Files\America Online 9.0g\waol[Caution: ExecutableFile] C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002[Caution: ExecutableFile] c:\PROGRA~1\mcafee.com\vso\mcvsrte[Caution: ExecutableFile] c:\PROGRA~1\mcafee.com\vso\mcshield[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLHostManager[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLServiceHost[Caution: ExecutableFile] C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile] C:\DOCUME~1\Owner\LOCALS~1\Temp\!update[Caution: ExecutableFile] C:\Program Files\apsi\wtta[Caution: ExecutableFile] C:\Program Files\Microsoft AntiSpyware\gcasDtServ[Caution: ExecutableFile] c:\program files\common files\aol\1101581974\ee\services\antiSpywareApp\ver2_0_7\AOLSP Scheduler[Caution: ExecutableFile] C:\Program Files\America Online 9.0g\shellmon[Caution: ExecutableFile] C:\Program Files\HP\hpcoretech\comp\hpdarc[Caution: ExecutableFile] C:\Documents and Settings\Owner\Desktop\Game_Maker\Demos\hijackthis\HijackThis[Caution: ExecutableFile] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\companion\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate[Caution: ExecutableFile] O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\McAfee.com\Agent\McAgent[Caution: ExecutableFile] O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr[Caution: ExecutableFile]" /checktask O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld[Caution: ExecutableFile]" O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ[Caution: ExecutableFile]" O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial[Caution: ExecutableFile] O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray[Caution: ExecutableFile] O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask[Caution: ExecutableFile]" -atboottime O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched[Caution: ExecutableFile] O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]" -osboot O4 - HKCU\..\Run: [NVIEW] rundll32[Caution: ExecutableFile] nview.dll,nViewLoadHook O4 - HKCU\..\Run: [innhi] C:\WINDOWS\system32\??chost[Caution: ExecutableFile] O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: ExecutableFile] O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0g\AOL[Caution: ExecutableFile]" -b O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl[Caution: ExecutableFile] O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] O4 - Global Startup: QuickBooks 2002 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002[Caution: ExecutableFile] O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate[Caution: ExecutableFile] O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent[Caution: ExecutableFile] O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim[Caution: ExecutableFile] O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://help.bellsouth.net/sdccommon/download/tgctlcm.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) - O18 - Protocol: start - (no CLSID) - (no file) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: ExecutableFile] O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon[Caution: ExecutableFile] O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl[Caution: ExecutableFile] O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService[Caution: ExecutableFile] O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield[Caution: ExecutableFile] O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr[Caution: ExecutableFile]) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr[Caution: ExecutableFile] O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte[Caution: ExecutableFile] O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE[Caution: ExecutableFile] O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv[Caution: ExecutableFile] O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile] O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd[Caution: ExecutableFile]" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: Security Agent (scagent) - Unknown owner - C:\WINDOWS\system32\scagent[Caution: ExecutableFile]" start (file missing) O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc[Caution: ExecutableFile] EDIT: I wasn't running runescape when I scanned for this. Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
coltm4carbine Posted November 19, 2005 Share Posted November 19, 2005 Create a folder on the C: drive called C:\HJT. You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it hjt Move HJT into this new folder please, This is important so please do this prior to anything else please then run ur antivirus. then clean out temp. go offline then reboot and fix these if present: O4 - HKCU\..\Run: [innhi] C:\WINDOWS\system32\??chost[Caution: ExecutableFile] O23 - Service: Security Agent (scagent) - Unknown owner - C:\WINDOWS\system32\scagent[Caution: ExecutableFile] " start (file missing) reboot into safemode and find and delete these files: C:\WINDOWS\system32\??chost[Caution: ExecutableFile] C:\WINDOWS\system32\scagent[Caution: ExecutableFile] reboot into normal mode and post a new log. Link to comment Share on other sites More sharing options...
wioneo Posted November 19, 2005 Author Share Posted November 19, 2005 By "your antivirus" do you mean ad-aware se? Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
DJpailo Posted November 19, 2005 Share Posted November 19, 2005 By "your antivirus" do you mean ad-aware se? Mcafee Link to comment Share on other sites More sharing options...
wioneo Posted November 19, 2005 Author Share Posted November 19, 2005 First a question, If you bought McAfee, and then you downloaded the AOL version, would that downgrade it? Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
coltm4carbine Posted November 19, 2005 Share Posted November 19, 2005 don't use the aol one. i can see 2 viruses/ trojans. run mcafee (in safemode) and it should get rid of them. after that post a new HJT log in normal mode. dj wanna take over? i will need to sleep in a few hours. Link to comment Share on other sites More sharing options...
wioneo Posted November 19, 2005 Author Share Posted November 19, 2005 Those last two processess were not displayed. Here is the log; Logfile of HijackThis v1.99.1 Scan saved at 4:31:40 PM, on 11/19/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss[Caution: ExecutableFile] C:\WINDOWS\system32\winlogon[Caution: ExecutableFile] C:\WINDOWS\system32\services[Caution: ExecutableFile] C:\WINDOWS\system32\lsass[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon[Caution: ExecutableFile] C:\Program Files\ewido\security suite\ewidoctrl[Caution: ExecutableFile] C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE[Caution: ExecutableFile] C:\Program Files\Softex\OmniPass\Omniserv[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\wanmpsvc[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\Program Files\Softex\OmniPass\OPXPApp[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\Mp[bleep]ent[Caution: ExecutableFile] C:\WINDOWS\Explorer[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\Agent\McAgent[Caution: ExecutableFile] C:\PROGRA~1\mcafee.com\vso\mcvsshld[Caution: ExecutableFile] C:\Program Files\Microsoft AntiSpyware\gcasServ[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\ACS\AOLDial[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray[Caution: ExecutableFile] c:\progra~1\mcafee.com\vso\mcvsescn[Caution: ExecutableFile] C:\Program Files\Java\jre1.5.0_05\bin\jusched[Caution: ExecutableFile] C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: ExecutableFile] C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002[Caution: ExecutableFile] C:\WINDOWS\system32\rundll32[Caution: ExecutableFile] c:\PROGRA~1\mcafee.com\vso\mcvsrte[Caution: ExecutableFile] c:\PROGRA~1\mcafee.com\vso\mcshield[Caution: ExecutableFile] C:\Program Files\Microsoft AntiSpyware\gcasDtServ[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLHostManager[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLServiceHost[Caution: ExecutableFile] C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile] c:\program files\common files\aol\1101581974\ee\services\antiSpywareApp\ver2_0_7\AOLSP Scheduler[Caution: ExecutableFile] C:\Program Files\Internet Explorer\iexplore[Caution: ExecutableFile] C:\HJT\HijackThis[Caution: ExecutableFile] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\companion\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate[Caution: ExecutableFile] O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\McAfee.com\Agent\McAgent[Caution: ExecutableFile] O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr[Caution: ExecutableFile]" /checktask O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld[Caution: ExecutableFile]" O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ[Caution: ExecutableFile]" O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial[Caution: ExecutableFile] O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray[Caution: ExecutableFile] O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask[Caution: ExecutableFile]" -atboottime O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched[Caution: ExecutableFile] O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]" -osboot O4 - HKCU\..\Run: [NVIEW] rundll32[Caution: ExecutableFile] nview.dll,nViewLoadHook O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: ExecutableFile] O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl[Caution: ExecutableFile] O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] O4 - Global Startup: QuickBooks 2002 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002[Caution: ExecutableFile] O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate[Caution: ExecutableFile] O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent[Caution: ExecutableFile] O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim[Caution: ExecutableFile] O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://help.bellsouth.net/sdccommon/download/tgctlcm.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) - O18 - Protocol: start - (no CLSID) - (no file) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: ExecutableFile] O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon[Caution: ExecutableFile] O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl[Caution: ExecutableFile] O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService[Caution: ExecutableFile] O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield[Caution: ExecutableFile] O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr[Caution: ExecutableFile]) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr[Caution: ExecutableFile] O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte[Caution: ExecutableFile] O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE[Caution: ExecutableFile] O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv[Caution: ExecutableFile] O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile] O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd[Caution: ExecutableFile]" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: Security Agent (scagent) - Unknown owner - C:\WINDOWS\system32\scagent[Caution: ExecutableFile]" start (file missing) O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc[Caution: ExecutableFile] Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
coltm4carbine Posted November 19, 2005 Share Posted November 19, 2005 ok go offline, close all open browsers and run HJT. fix this: O23 - Service: Security Agent (scagent) - Unknown owner - C:\WINDOWS\system32\scagent[Caution: ExecutableFile] " start (file missing) reboot into safemode. find this and delete the folder. C:\WINDOWS\system32\scagent[Caution: ExecutableFile] now rescan with HJT and post the log. Link to comment Share on other sites More sharing options...
wioneo Posted November 19, 2005 Author Share Posted November 19, 2005 That file still wasn't there. New log... Logfile of HijackThis v1.99.1 Scan saved at 5:27:43 PM, on 11/19/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss[Caution: ExecutableFile] C:\WINDOWS\system32\winlogon[Caution: ExecutableFile] C:\WINDOWS\system32\services[Caution: ExecutableFile] C:\WINDOWS\system32\lsass[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon[Caution: ExecutableFile] C:\Program Files\ewido\security suite\ewidoctrl[Caution: ExecutableFile] C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE[Caution: ExecutableFile] C:\Program Files\Softex\OmniPass\Omniserv[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\wanmpsvc[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\Program Files\Softex\OmniPass\OPXPApp[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\Mp[bleep]ent[Caution: ExecutableFile] C:\WINDOWS\Explorer[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\Agent\McAgent[Caution: ExecutableFile] C:\PROGRA~1\mcafee.com\vso\mcvsshld[Caution: ExecutableFile] C:\Program Files\Microsoft AntiSpyware\gcasServ[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\ACS\AOLDial[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray[Caution: ExecutableFile] c:\progra~1\mcafee.com\vso\mcvsescn[Caution: ExecutableFile] C:\Program Files\Java\jre1.5.0_05\bin\jusched[Caution: ExecutableFile] C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: ExecutableFile] C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002[Caution: ExecutableFile] C:\WINDOWS\system32\rundll32[Caution: ExecutableFile] c:\PROGRA~1\mcafee.com\vso\mcvsrte[Caution: ExecutableFile] c:\PROGRA~1\mcafee.com\vso\mcshield[Caution: ExecutableFile] C:\Program Files\Microsoft AntiSpyware\gcasDtServ[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLHostManager[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLServiceHost[Caution: ExecutableFile] C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile] c:\program files\common files\aol\1101581974\ee\services\antiSpywareApp\ver2_0_7\AOLSP Scheduler[Caution: ExecutableFile] C:\Program Files\Internet Explorer\iexplore[Caution: ExecutableFile] C:\HJT\HijackThis[Caution: ExecutableFile] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\companion\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate[Caution: ExecutableFile] O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\McAfee.com\Agent\McAgent[Caution: ExecutableFile] O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr[Caution: ExecutableFile]" /checktask O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld[Caution: ExecutableFile]" O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ[Caution: ExecutableFile]" O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial[Caution: ExecutableFile] O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray[Caution: ExecutableFile] O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask[Caution: ExecutableFile]" -atboottime O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched[Caution: ExecutableFile] O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]" -osboot O4 - HKCU\..\Run: [NVIEW] rundll32[Caution: ExecutableFile] nview.dll,nViewLoadHook O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: ExecutableFile] O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl[Caution: ExecutableFile] O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] O4 - Global Startup: QuickBooks 2002 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002[Caution: ExecutableFile] O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate[Caution: ExecutableFile] O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent[Caution: ExecutableFile] O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim[Caution: ExecutableFile] O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://help.bellsouth.net/sdccommon/download/tgctlcm.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) - O18 - Protocol: start - (no CLSID) - (no file) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: ExecutableFile] O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon[Caution: ExecutableFile] O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl[Caution: ExecutableFile] O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService[Caution: ExecutableFile] O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield[Caution: ExecutableFile] O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr[Caution: ExecutableFile]) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr[Caution: ExecutableFile] O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte[Caution: ExecutableFile] O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE[Caution: ExecutableFile] O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv[Caution: ExecutableFile] O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile] O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd[Caution: ExecutableFile]" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: Security Agent (scagent) - Unknown owner - C:\WINDOWS\system32\scagent[Caution: ExecutableFile]" start (file missing) O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc[Caution: ExecutableFile] Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
coltm4carbine Posted November 19, 2005 Share Posted November 19, 2005 ok lets try again. You may wish to print out a copy of these instructions to follow while you complete this procedure. Please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items (if found), then click fix checked. O23 - Service: Security Agent (scagent) - Unknown owner - C:\WINDOWS\system32\scagent.e3e (CAUTION - executable file) " start (file missing) Reboot your PC. Please reboot into safe mode (continually tap the F8 key while your system is starting, select Safe Mode from the menu). Be sure you're able to view hidden files, and remove the following files in bold (if found): C:\WINDOWS\system32\scagent.e3e If you would please, rescan with HijackThis and post a fresh log in this same topic, and let us know how your system's working. Link to comment Share on other sites More sharing options...
wioneo Posted November 20, 2005 Author Share Posted November 20, 2005 I fixed scagent[Caution: ExecutableFile], but the file did not appear in the system32 folder. Wouldn't fixing it already delete the executable? Anyway here is the log; Logfile of HijackThis v1.99.1 Scan saved at 3:14:53 AM, on 11/20/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss[Caution: ExecutableFile] C:\WINDOWS\system32\winlogon[Caution: ExecutableFile] C:\WINDOWS\system32\services[Caution: ExecutableFile] C:\WINDOWS\system32\lsass[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon[Caution: ExecutableFile] C:\Program Files\ewido\security suite\ewidoctrl[Caution: ExecutableFile] C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE[Caution: ExecutableFile] C:\Program Files\Softex\OmniPass\Omniserv[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\wanmpsvc[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\Program Files\Softex\OmniPass\OPXPApp[Caution: ExecutableFile] C:\WINDOWS\Explorer[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\Mp[bleep]ent[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\Agent\McAgent[Caution: ExecutableFile] C:\PROGRA~1\mcafee.com\vso\mcvsshld[Caution: ExecutableFile] C:\Program Files\Microsoft AntiSpyware\gcasServ[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\ACS\AOLDial[Caution: ExecutableFile] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray[Caution: ExecutableFile] C:\Program Files\Java\jre1.5.0_05\bin\jusched[Caution: ExecutableFile] C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile] c:\progra~1\mcafee.com\vso\mcvsescn[Caution: ExecutableFile] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: ExecutableFile] C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002[Caution: ExecutableFile] C:\WINDOWS\system32\rundll32[Caution: ExecutableFile] C:\Program Files\Microsoft AntiSpyware\gcasDtServ[Caution: ExecutableFile] c:\PROGRA~1\mcafee.com\vso\mcvsrte[Caution: ExecutableFile] c:\PROGRA~1\mcafee.com\vso\mcshield[Caution: ExecutableFile] C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLHostManager[Caution: ExecutableFile] C:\WINDOWS\system32\wuauclt[Caution: ExecutableFile] C:\Program Files\Common Files\AOL\1101581974\ee\AOLServiceHost[Caution: ExecutableFile] c:\program files\common files\aol\1101581974\ee\services\antiSpywareApp\ver2_0_7\AOLSP Scheduler[Caution: ExecutableFile] C:\HJT\HijackThis[Caution: ExecutableFile] R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\companion\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate[Caution: ExecutableFile] O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\McAfee.com\Agent\McAgent[Caution: ExecutableFile] O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr[Caution: ExecutableFile]" /checktask O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld[Caution: ExecutableFile]" O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ[Caution: ExecutableFile]" O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial[Caution: ExecutableFile] O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray[Caution: ExecutableFile] O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask[Caution: ExecutableFile]" -atboottime O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched[Caution: ExecutableFile] O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]" -osboot O4 - HKCU\..\Run: [NVIEW] rundll32[Caution: ExecutableFile] nview.dll,nViewLoadHook O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer[Caution: ExecutableFile] O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl[Caution: ExecutableFile] O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile] O4 - Global Startup: QuickBooks 2002 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002[Caution: ExecutableFile] O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate[Caution: ExecutableFile] O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent[Caution: ExecutableFile] O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim[Caution: ExecutableFile] O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile] O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://help.bellsouth.net/sdccommon/download/tgctlcm.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) - O18 - Protocol: start - (no CLSID) - (no file) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd[Caution: ExecutableFile] O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon[Caution: ExecutableFile] O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl[Caution: ExecutableFile] O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService[Caution: ExecutableFile] O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield[Caution: ExecutableFile] O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr[Caution: ExecutableFile]) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr[Caution: ExecutableFile] O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte[Caution: ExecutableFile] O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE[Caution: ExecutableFile] O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv[Caution: ExecutableFile] O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile] O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd[Caution: ExecutableFile]" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: Security Agent (scagent) - Unknown owner - C:\WINDOWS\system32\scagent[Caution: ExecutableFile]" start (file missing) O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc[Caution: ExecutableFile] I am about to check to see if the error still occurs. My computer has been shutting down and starting up much faster, though. EDIT: The error is still there :( Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
Timo Posted November 20, 2005 Share Posted November 20, 2005 Can you make a little screeny of the error? Link to comment Share on other sites More sharing options...
wioneo Posted November 20, 2005 Author Share Posted November 20, 2005 There is a picture on the first page. Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
coltm4carbine Posted November 20, 2005 Share Posted November 20, 2005 grrr... the o23 won't go away. try this: Click Start>Run and type in: services.msc Click OK In the Services window find: Security Agent Select/highlight and right click the entry, and choose: Properties On the General tab, under Service Status click the Stop button Beside: Startup Type, in the drop menu, select: Disabled Click Apply, then OK find and delete this: C:\WINDOWS\system32\scagent[Caution: ExecutableFile] <-- (the scagent) Open HJT and click config > misc tools > ̢̢̮ââ¬Å¡Ã¬Ãâ¦Ã¢â¬Ådelete an NT service̢̢̮ââ¬Å¡Ã¬Ãâà Link to comment Share on other sites More sharing options...
wioneo Posted November 21, 2005 Author Share Posted November 21, 2005 First off, my brother has been on the computer for four hours, and I don't know what else might be wrong... Click Start>Run and type in: services.msc Click OK DONE In the Services window find: Security Agent Select/highlight and right click the entry, and choose: Properties DONE On the General tab, under Service Status click the Stop button NOT DONE..It was already stopped. Beside: Startup Type, in the drop menu, select: Disabled Click Apply, then OK DONE find and delete this: C:\WINDOWS\system32\scagent.e3e (CAUTION - executable file) <-- (the scagent) NOT DONE...It still wasn't there Open HJT and click config > misc tools > ̢̢̮ââ¬Å¡Ã¬Ãâ¦Ã¢â¬Ådelete an NT service̢̢̮ââ¬Å¡Ã¬Ãâà Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
wioneo Posted November 21, 2005 Author Share Posted November 21, 2005 I have been playing for over an hour continuously now. However, I am using low detail. Does this mean that my system is too weak? I don't think that it is because I had played RS for over a year before this problem started. Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
Sharper Posted November 21, 2005 Share Posted November 21, 2005 I can't see anything bad in your HiJackThis Log. Are you still getting any annoyances? Errors or anything? Link to comment Share on other sites More sharing options...
wioneo Posted November 21, 2005 Author Share Posted November 21, 2005 I have been playing for over an hour continuously now. However, I am using low detail. Does this mean that my system is too weak? I don't think that it is because I had played RS for over a year before this problem started. Barrows: 9~2 V Brass,V Flail,2 Dh Plate,V Helm,V Skirt,T Legs,Malevolent Shield + DKing: 48~6 W Ring,13 A Ring,8 M Staff,9 S Ring,7 B Ring,3 SeercullDragon Drops: 500+~50+ Med,26 Axe,3 Chain,10+ Legs,10+ Spear,2 D2h,10+ L Half,49 Boots,2 DDs,10+ Lump,9 Claws,50+ Dagger,14 Visage,50+ Mace,4 Scimitar,7 Hasta,Baxe,50+ Long,30+ Royal,2 Kite,4 Ward,2 Plate,Staff,Hammer,Limbs, Mattock,HalberdGWD: 156~4 S Staff,50+ Shard,9 B Tass,13 B Plate,5 B Boots,6 A Plate,11 S Sword,8 A Hilt,4 A Skirt,9 A Helm,S Hilt,3 B Hilt,B Glove,2 A Buckler,Z Ward,Z Garb,2 Z Boots,B Shield,B Helm Corp: 3~Elysian,2 Sp Sh + Nex: 6~Torva Legs,Cere,P cowl,Z bow,2 T boots + GWD2: 9~2 Glaive,Wand,2 Crest,Blade,2 Essence,Core + Araxyte: 5~Web,3 Pheromone,Fang + Raids: 4~3 Codex,P Boots + Trails: 2~Bob Shirt,Fortunate Etc: 64~3 Sceptre,B Mask,16 Whip,2 Focus Sight,5 D Bow,7 SOL,Ragefire,2 Steadfast,Arma Staff,6 Rider Armor,5 Vine,2 Razorback,2 A Wand,Abby Orb,3 Blood Shard,6 Hydrix,Gland,Asc Xbow [spoiler=Capes]Quest Cape Aquired 12-7-07 ~ Level 93 + + + Completionist Cape Aquired 5-22-15 ~ Level 138Hitpoints Cape Aquired 9-21-09 ~ Level 131 + Magic Cape Aquired 9-24-09 + Attack Cape Aquired 3-5-10 ~ Level 135 + Summoning Cape Aquired 3-12-10Strength Cape Aquired 6-1-11 ~ Level 137 + Fire Cape Aquired 6-23-11 + Defence Cape Aquired 7-5-11 + Ranged Cape Aquired 8-1-11 + Kiln Cape Aquired 2-26-12 ~ Level 138Dungeoneering Cape Aquired 4-22-12 + Slayer Cape Aquired 6-25-14 ~ Level 200 + Herblore Cape Acquired 12-9-14 ~ Level 138 + Prayer Cape Acquired 12-20-14Agility Cape Acquired 1-4-15 + Hunter Cape Acquired 1-30-15 + Construction Cape Acquired 1-31-15 + Crafting Cape Acquired 2-22-15 + Thieving Cape Acquired 3-18-15Runecrafting Cape Acquired 4-14-15 + Mining Cape Acquired 4-19-15 + Fishing Cape Acquired 4-25-15 + Firemaking Cape Acquired 4-26-15 + Woodcutting Cape Acquired 4-26-15Cooking Cape Acquired 4-26-15+ Smithing Cape Acquired 4-28-15 + Farming Cape Acquired 4-29-15 + Divination Cape Acquired 5-3-15 + Dungeoneering Mastery 5-4-15Fletching Cape Acquired 5-4-15 + Max Cape Acquired 5-4-15 + Invention Cape Acquired 11-9-16 + Invention Mastery 5-16-19 + Archaeology Cape Acquired 10-30-20 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now