Free PC Performance Scan

Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Resolved]Msconfig: Whats This

[Fixed] Hijackthis! Logs - [Resolved]Msconfig: Whats This posted in the Security & Safety forums; Here are the logs for the Ewido and Hijackthis scan. *I forgot to clean up my cookies before scanning....

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #8  
Old 04-17-2006
Silver Member
My PC
 
Join Date: Dec 2005
Location: malaysia
Posts: 142
terror - See this Members User comments on their Profile page
Send a message via MSN to terror
Default

Here are the logs for the Ewido and Hijackthis scan.
*I forgot to clean up my cookies before scanning.
Attached Files
File Type: txt Scan report_20060417.txt.txt (13.3 KB, 1 views)
File Type: log hijackthis.log (9.1 KB, 1 views)


__________________

  #9  
Old 04-17-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Those two screenshots you posted are nothing to worry about , norton blocked that intrussion attempt , and NTSD.EXE is a legit file.

But you do have an infection on there , boot in safemode (hit f8 when booting up) and fix these with hjt:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [Windows LSASS Service] C:\Program Files\Common Files\Microsoft Shared\DAO\svchost.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
Manually delete the file in bold , and when done post a new hjt log to check please.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #10  
Old 04-18-2006
Silver Member
My PC
 
Join Date: Dec 2005
Location: malaysia
Posts: 142
terror - See this Members User comments on their Profile page
Send a message via MSN to terror
Default

I still received an attack from the same ip.=/
Anyways I have done nearly exactly as told except that i left
" O4 - HKLM\..\Run: [Windows LSASS Service] C:\Program Files\Common Files\Microsoft Shared\DAO\svchost.exe " because it is a spy software to monitor my computer.

I just received another attack. Based on the details my com is attacking my own com? Or norton is just making a mistake. If it is so should i enable it and how?
Attached Images
File Type: jpg attack.JPG (38.2 KB, 2 views)
Attached Files
File Type: log hijackthis.log (7.5 KB, 0 views)


__________________


Last edited by terror; 04-18-2006 at 04:50 AM.
  #11  
Old 04-18-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Originally Posted by terror
I still received an attack from the same ip.=/
Anyways I have done nearly exactly as told except that i left
" O4 - HKLM\..\Run: [Windows LSASS Service] C:\Program Files\Common Files\Microsoft Shared\DAO\svchost.exe " because it is a spy software to monitor my computer.
I didn't know you where using it youreself and on purpose , but it should be save to keep it then.

And i dont think those alerts are caused by anything on youre pc but lets have an other AV have a look , we still dont know what those strange files are that you mentioned in youre other post. Can you do a Panda scan here and post the log from it?

http://www.pandasoftware.com/products/activescan


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #12  
Old 04-18-2006
Silver Member
My PC
 
Join Date: Dec 2005
Location: malaysia
Posts: 142
terror - See this Members User comments on their Profile page
Send a message via MSN to terror
Default

I used spy software to record everything that i did on this computer so i can find the cause just in case it happens. I have screenshots, website logs, application logs, keystrokes and file\folders log.
Here is my panda scan log, took a while longer than expected.
Attached Files
File Type: txt Activescan.txt (27.0 KB, 1 views)


__________________

  #13  
Old 04-18-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Nothing wrong there again , and also not those stange dll files from youre other thread.

To sum things up abit , you have severall problems and threads going on atm , could you make a small list of all the problems you are having? That might give a better overview of what is going on , and what needs/can be done to fix it.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #14  
Old 04-19-2006
Silver Member
My PC
 
Join Date: Dec 2005
Location: malaysia
Posts: 142
terror - See this Members User comments on their Profile page
Send a message via MSN to terror
Default

Should I start a new thread or continue here?


__________________


Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 11:41 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top