Home > Hijackthis Log > HELP! ----> HiJackThis LOG (lots Of Things Wrong)

HELP! ----> HiJackThis LOG (lots Of Things Wrong)


It's usually posted with your first topic on a forum, along with a description of your problem(s). The known baddies are 'cn' (CommonName), 'ayb' (Lop.com) and 'relatedlinks' (Huntbar), you should have HijackThis fix those.Other things that show up are either not confirmed safe yet, or are hijacked by Please re-enable javascript to access full functionality. If you didn't add the listed domain to the Trusted Zone yourself, have HijackThis fix it.O16 - ActiveX Objects (aka Downloaded Program Files)What it looks like: O16 - DPF: Yahoo! this contact form

Nov 12, 2005 #1 (You must log in or sign up to reply here.) Show Ignored Content Topic Status: Not open for further replies. Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:PROGRAM FILES\YAHOO!COMPANION\YCOMP5_0_2_4.DLL O3 - Toolbar: Popup Eliminator - {86BCA93E-457B-4054-AFB0-E428DA1563E1} - C:PROGRAM FILES\POPUP ELIMINATOR\PETOOLBAR401.DLL (file missing) O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll What Lots of things wrong with my computer Discussion in 'Virus & Other Malware Removal' started by ecomtois007, Nov 29, 2005. It is absolutely huge and I don't want to leave anything out that might be important. http://www.bleepingcomputer.com/forums/t/57266/i-am-almost-positive-there-are-a-lot-of-things-wrong/

Hijackthis Log Analyzer

OverviewEach line in a HijackThis log starts with a section name. (For technical information on this, click 'Info' in the main window and scroll down. any nasties? In the BHO List, 'X' means spyware and 'L' means safe. We have an excellent malware cleaning guide. *Please, DO NOT post your log to more than one forum.

Register now! They rarely get hijacked. O24 - Enumeration of ActiveX Desktop Components What it looks like: What to do: If something in your log still puzzles you after this short tutorial, there is nothing stopping you For a screenshot of the Hijackthis.de analysis click here.

TrendMicro uses the data you submit to improve their products. O9 - Extra buttons on main IE toolbar, or extra items in IE 'Tools' menuWhat it looks like: O9 - Extra button: Messenger (HKLM)O9 - Extra 'Tools' menuitem: Messenger (HKLM)O9 - he will be sitting there next to you saying 'we screwed up!!!'" "God Bless Athiesam!!!" Squirlles: Natures Little speed bumps Back to top #3 -David- -David- Members 10,603 posts OFFLINE http://www.techspot.com/community/topics/need-help-lots-of-things-wrong-with-my-comp-can-someone-look-at-my-hijackthis-file.37112/ I Am Almost Positive There Are A Lot Of Things Wrong Started by pantera550esr , Jul 01 2006 04:18 PM Page 1 of 2 1 2 Next This topic is locked

By CeciliaB Yesterday, 06:43 PM Toggle Archived Topics Archived Topics Forum Stats Last Post Info Archives: Resolved/Inactive Topics Ad-Aware 8.x (2010 Ver) - Resolved/Inactive, AAW Anniversary Edition - Resolved/Inactive, AAW O9 - Extra buttons on main IE toolbar, or extra items in IE 'Tools' menu What it looks like: O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger the second problem is the spyware/malware/trojens and everything else on my computer. There appear to be other minor modifications as well.

Hijackthis Download

Click the Generate StartupList log button. http://www.pchell.com/support/hijackthistutorial.shtml Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_4.DLLO3 - Toolbar: Popup Eliminator - {86BCA93E-457B-4054-AFB0-E428DA1563E1} - C:\PROGRAM FILES\POPUP ELIMINATOR\PETOOLBAR401.DLL (file missing)O3 - Toolbar: rzillcgthjx - {5996aaf3-5c08-44a9-ac12-1843fd03df0a} - C:\WINDOWS\APPLICATION DATA\CKSTPRLLNQUL.DLL What to do:If you don't Hijackthis Log Analyzer Spyware removal software such as Adaware or Spybot S&D do a good job of detecting and removing most spyware programs, but some spyware and browser hijackers are too insidious for even Ask a Question See Latest Posts TechSpot Forums are dedicated to computer enthusiasts and power users.

O19 - User style sheet hijack What it looks like: O19 - User style sheet: c:WINDOWS\Java\my.css What to do: In the case of a browser slowdown and frequent popups, have HijackThis weblink Download HijackThis To Download the originalHijackthis, click on the following link. You can always have HijackThis fix these, unless you knowingly put those lines in your Hosts file. Or Upload your Hijackthis log to the Online HijackThis Analyzer and see if its safe.

Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cabWhat to do:If you don't recognize the name of the object, or the URL it was downloaded from, have HijackThis fix Stay logged in Sign up now! Let me know, perhaps I can send it to you some other way. navigate here This information returned from the HijackThis.DE site is much more helpful in determining good and bad items in the log.

You may also... Have HijackThis fix them. Take me to the forums!

Join the community here, it only takes a minute.

Ecomtois007 ecomtois007, Nov 29, 2005 #1 Sponsor dvk01 Derek Moderator Malware Specialist Joined: Dec 14, 2002 Messages: 50,434 start with * Download the trial version of Ewido Security Suite As an FYI, I am still getting the Norton virus notificaion for "Trojan Horse" Here is the new HJT log: Logfile of HijackThis v1.99.1 Scan saved at 2:29:08 PM, on 11/29/2005 O11 - Extra group in IE 'Advanced Options' windowWhat it looks like: O11 - Options group: [CommonName] CommonName What to do:The only hijacker as of now that adds its own options In the BHO List, 'X' means spyware and 'L' means safe.O3 - IE toolbarsWhat it looks like: O3 - Toolbar: &Yahoo!

Clicking the AnalyzeThis button will submit the contents of your HJT log to TrendMicro. This section is designed to help you produce a log, post the log at that Forum and finally remove the items as directed by the Member helping you. AnalyzeThis is new to HijackThis. his comment is here Click here to join today!

Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy HijackThis log For the R3 items, always fix them unless it mentions a program you recognize. O17 - Lop.com domain hijacksWhat it looks like: O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = aoldsl.netO17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = W21944.find-quick.comO17 - HKLM\Software\..\Telephony: DomainName = W21944.find-quick.comO17 - HKLM\System\CCS\Services\Tcpip\..\{D196AB38-4D1F-45C1-9108-46D367F19F7E}: Domain = W21944.find-quick.com What to Please enter a valid email address.

or read our Welcome Guide to learn how to use this site. If you are posting at a Forum, please highlight all, and then copy and paste the contents into your Reply in the same post where you originally asked your question. O15 - Unwanted sites in Trusted ZoneWhat it looks like: O15 - Trusted Zone: http://free.aol.comO15 - Trusted Zone: *.coolwebsearch.comO15 - Trusted Zone: *.msn.comWhat to do:Most of the time only AOL and Unfortunately I was hoping for more from this feature, although it does give you a rough estimate of the number of users that have a particular file in their logs as

Newer Than: Search this thread only Search this forum only Display results as threads Useful Searches Recent Posts More... In the Toolbar List, 'X' means spyware and 'L' means safe. O16 - ActiveX Objects (aka Downloaded Program Files) What it looks like: O16 - DPF: Yahoo! Several functions may not work.

In the last case, have HijackThis fix it. O7 - Regedit access restricted by AdministratorWhat it looks like:O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1What to do:Always have HijackThis fix this, unless your system administrator has put this restriction into place.O8 - Extra Note #1: It's very important to post as much information as possible, and not just your HJT log. O8 - Extra items in IE right-click menu What it looks like: O8 - Extra context menu item: &Google Search - res://C:WINDOWSDOWNLOADED PROGRAM FILESGOOGLETOOLBAR_EN_1.1.68-DELEON.DLL/cmsearch.html O8 - Extra context menu item: Yahoo!

The known baddies are 'cn' (CommonName), 'ayb' (Lop.com) and 'relatedlinks' (Huntbar), you should have HijackThis fix those. List 10 Free Programs for Finding the Largest Files on a Hard Drive Article Why keylogger software should be on your personal radar Get the Most From Your Tech With Our If an entry isn't common, it does NOT mean it's bad.