Member Panel


Sponsors and Ads

Join the Team

Live Tag Cloud

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Resolved]Msconfig: Whats This

[Fixed] Hijackthis! Logs - [Resolved]Msconfig: Whats This posted in the Security & Safety forums; While trying to find the cause that triggered the sudden re activation of my windows, i found this....... why is there a space between bitcomet n daemon, theres no name ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 04-16-2006
Silver Member
My PC
 
Join Date: Dec 2005
Location: malaysia
Posts: 142
terror - See this Members User comments on their Profile page
Send a message via MSN to terror
Default [Resolved]Msconfig: Whats This

While trying to find the cause that triggered the sudden re activation of my windows, i found this....... why is there a space between bitcomet n daemon, theres no name and no path.
Attached Images
File Type: jpg msconfig.JPG (21.8 KB, 14 views)


__________________

  #2  
Old 04-16-2006
Hengis's Avatar
PCHF Founder & Owner
My PC
 
Join Date: Jan 2004
Location: Berkshire, England
Posts: 11,114
PC Experience: Always learning
Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page
Send a message via Skype™ to Hengis
Default

Can you extend the window so that we can see the full registry path.


__________________
> Pre-Work > System File Checker
> Did we help you? If we did, please consider A Donation
  #3  
Old 04-16-2006
Bronze Member
My PC
 
Join Date: Mar 2006
Location: Dieren (near. Arnhem)
Posts: 75
CyFanate - See this Members User comments on their Profile page
Send a message via MSN to CyFanate
Default

I had it to. Prob. a malware program, who doesn't want to give his name away. Just make sure it doens't start (by removing the ... id on't know the name for it but that thing in the box :P)


__________________
Life is not hard. It's just hard cause we're trying to understand the reason of all this ****.
  #4  
Old 04-16-2006
Silver Member
My PC
 
Join Date: Dec 2005
Location: malaysia
Posts: 142
terror - See this Members User comments on their Profile page
Send a message via MSN to terror
Default

HLKM\Software\microsoft\windows\current version\run
its the same for all the startup programs =/


__________________

  #5  
Old 04-16-2006
Elite Member
My PC
 
Join Date: Dec 2005
Location: Liverpool
Posts: 538
Scouse - See this Members User comments on their Profile page
Default

Hey Terror,

I've come across these two pieces of freeware that should give an explanation as to what the mystery program is.

http://www.sysinternals.com/Utilities/Autoruns.html
http://www.sysinternals.com/Utilitie...sExplorer.html

Hope these help.


__________________
Scouse...


Did we help? Hit that thanks button!
  #6  
Old 04-17-2006
Silver Member
My PC
 
Join Date: Dec 2005
Location: malaysia
Posts: 142
terror - See this Members User comments on their Profile page
Send a message via MSN to terror
Default

Thanks scouse, thats a very useful program.
Unfortunately I still could not find out what that program is.
I tried to see what it is by opening autorun.exe and copy down whatever which is in the logon tab and reconfigure my msconfig so the mystery program is not scheduled to start upon my next logon. Then i refreshed the logon list of the autorun.exe and compared the new list to the previous one....no difference.
Since Cyfanate mentioned that it is a malware, I suppose it has something to do with my screenshot below?
Btw, I have been receiving attacks from that ip for several times.
That ip comes from the US according to ip tracker.
Ah i found something suspicious under the Image Hijacks's tab. You guys might wanna have a look at it............
Attached Images
File Type: jpg attacks.JPG (35.9 KB, 9 views)
File Type: jpg suspicous.JPG (31.0 KB, 4 views)


__________________


Last edited by terror; 04-17-2006 at 02:29 AM.
  #7  
Old 04-17-2006
double_a_ron's Avatar
Elite Member
My PC
 
Join Date: Sep 2005
Location: Canada
Posts: 909
PC Experience: Very Experienced
double_a_ron - See this Members User comments on their Profile page double_a_ron - See this Members User comments on their Profile page double_a_ron - See this Members User comments on their Profile page double_a_ron - See this Members User comments on their Profile page double_a_ron - See this Members User comments on their Profile page double_a_ron - See this Members User comments on their Profile page double_a_ron - See this Members User comments on their Profile page double_a_ron - See this Members User comments on their Profile page double_a_ron - See this Members User comments on their Profile page double_a_ron - See this Members User comments on their Profile page double_a_ron - See this Members User comments on their Profile page
Default

Hey there terror,


Yes indeedie it looks like you might be looking at a small infection.

Please follow the instructions in the ///Prework\\\ link in my sig and we might have to sick Joe5 on that puppy when he's online.


__________________
//Prework\\\///PCHF RULES\\\///Did we help? Please Donate\\\

CompTIA A+ Certified, MCDST



Did we help? Please hit that Thanks button.

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On


All times are GMT +1. The time now is 08:51 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top
Problem Mortgage
Problem mortgage information and advice from the experts at Ocean Finance.

Valentine Gifts
Give a unique gift they won't forget

Hotel Las Vegas
Hotel search in Las Vegas, Nevada.