Page 1 of 1

New log file!

PostPosted: Mon Sep 13, 2004 10:29 pm
by caboosejjs
Logfile of HijackThis v1.98.2
Scan saved at 5:28:36 PM, on 9/13/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\System32\Ati2evxx.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\Mixer.exe
E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
E:\Program Files\Messenger\msmsgs.exe
E:\WINDOWS\System32\wuauclt.exe
E:\Documents and Settings\Jason Daubenspeck\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKCU\..\Run: [MSMSGS] "E:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex ... 0-3-12.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004 ... scan53.cab

PostPosted: Mon Sep 13, 2004 10:36 pm
by Geekgirl
Hey caboosejjs Image

Are you having problems? Not much to your HJT logfile.
I do see you have your HJT in Temp folder which is not recommended.....

And umm wheres your C: drive?
Or is this a slave drive?

PostPosted: Mon Sep 13, 2004 10:46 pm
by brad
As Gg said not much there. What's the problem?
Are you posting all your Friends/Clients Computers or what?
Give us something to go on.......
brad

PostPosted: Mon Sep 13, 2004 10:48 pm
by caboosejjs
I'm on site right now working on a few machines. The only message I got from user on this paticular machines is that it crashes occasionally whenever there is more than one IE window open. He also said that he is on Ebay alot whenever this happens. I noticed that ie was trying to get redirected whenever i opened IE and home page was set to msn. Adaware and Spybot seemed to have fixed that, it doesnt happen anymore. Thisw could be a hardware issue but I thought I would try these programs as a starting point.

This is a custom PC I built for this user. It's a long story but it has something to do with a post I put on here awhile back. The post I did regarding "copyright protection" I ended up gettting a new harddrive in addition to putting a new legitimate OS on. I kept the original drive on during install because I had no other way of backing up critical data other than making it a slave or master it turned out. So once i removed the drive I lost c:\
I'm going to put another post up here in minute.

PostPosted: Mon Sep 13, 2004 10:53 pm
by brad
So we're your IT resource? If you want us to help you make money then you're in the wrong place. I'll help anybody with a problem but if you're passing it off as your fix, then we have problems.

brad

PostPosted: Mon Sep 13, 2004 11:09 pm
by caboosejjs
You are by no means my IT source brad. If i run into problem on site that i think might be related to malware, spyware, then i will post it on this hijack forum. Simple as that. If all you mods feel this way then I will no longer post here please let me know.

PostPosted: Mon Sep 13, 2004 11:31 pm
by brad
That's not what I meant.
I'll (We'll) help you forever.
If you're bringing every Computer you look at into here then there is an issue.
You've posted a lot of Log Files. I'm only looking out for techs that use us as a "easy-out".
You should know that we have helped you every time you asked.
Please understand.....
brad