English Deutsch Français Italiano Español Português 繁體中文 Bahasa Indonesia Tiếng Việt ภาษาไทย
All categories

Logfile of HijackThis v1.99.1
Scan saved at 15:00:48, on 10/12/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIE.EXE
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\WINDOWS\System32\wuauclt.exe
F:\program files\coverXP\coverxp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAMTAIE.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FARNAIE.EXE
C:\Documents and Settings\getwotucanson\Desktop\HijackThis.exe

O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIE.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB001" /M "Stylus Photo R220"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe

2006-12-10 02:06:04 · 7 answers · asked by miss knowitall 1 in Computers & Internet Software

7 answers

This is a difficult question to answer, so I am posting a link to a Forum that deals specifically with Hijack This. To know what to fix, we need to know everything about your computer and what you are running. Also this log file looks shirt to me. Go to this site and log in as it is free and then read the FAQ section and it will tell you exactly what to do. The site is very busy and you may have to wait a day or so until you get a tech that can help you, but in the mean time gather all information on your set up.

http://forums.spywareinfo.com/index.php?showtopic=87787

Ron

2006-12-10 02:15:26 · answer #1 · answered by Ron75 6 · 0 0

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa0... - C:\WINDOWS\web\related.htm

O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.e...

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.e...

If these are not programs that you installed then it is safe to remove these. If you are having problems with popups or browser hijacking remove the ones that have BHO in the beginning.

2006-12-10 02:10:51 · answer #2 · answered by Anonymous · 0 0

Log looks clean, however you are missing microsoft updates. Click Tools>Windows Update. Get all updates. Reboot. Go back to windows update again. Continue the process until you don't have any updates available.

Also indicates you may not have a firewall or anti-virus running. You can get a good firewall from Comodo. Works great right out of the box. It is free and can be downloaded from ...

http://www.personalfirewall.comodo.com/

Free anti-virus protection is available from ...

http://free.grisoft.com/
http://www.free-av.com/
http://www.avast.com/eng/avast_4_home.html

2006-12-10 02:15:11 · answer #3 · answered by rlh242424 6 · 1 0

Hi there,
I found a free download of Nokia PC suite here http://bit.ly/1rmxQyN
It's a very simple and nice software.

2014-07-21 04:53:47 · answer #4 · answered by Anonymous · 0 0

doesn't look like there is anything really that needs any attention....I would google info about 11d2-a20b-00aa0... - C:\WINDOWS\web\related.htm but other than that it all looks fine.

2006-12-10 02:12:14 · answer #5 · answered by Helping Since 1969 6 · 0 0

Boy have you got a problem, you need professional help

2006-12-10 02:09:32 · answer #6 · answered by Agustin-Jean F 4 · 0 3

u can delete all of it

2006-12-10 02:15:55 · answer #7 · answered by Anonymous · 0 1

fedest.com, questions and answers