| |||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
#1
|
|||
|
|||
|
:Sigh: ive seen so many posts about this problem.. but none are helping me and they all seem to be different instances of problemsT_T well heres my story.. i clicked something off my friend's AIM away msg.. and i got some kind of virus i suppose and it wont let me open or run those 3 programs.
mm.. heres my HT log.. i dont know whats wrong -_- i cant find any suspicious lines..ive also ran online virus checkers and my Norton stuff.. and also adaware6.0 and spybot.. none are helping pleease someone help me.. but one thing i WAS able to get into registry editor by using this program called "xp_emergencyutil.exe" by Doug.. anyways. hers my HT log **edit** 10/28 5:17 i finally fixed my problems with the taskmgr regedit and the msconfig after 3 days of trying.. although no1 gave any help i managed to fix it by getting rid of all the suspicious .exe and .dll and .cab files:biggrin: |
|
#2
|
|||
|
|||
|
Logfile of HijackThis v1.97.7
Scan saved at 6:11:01 PM, on 10/27/2004 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Winamp\winampa.exe C:\WINDOWS\system32\KAZAALITE.EXE C:\Program Files\AIM\aim.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Common Files\PSD Tools\ChannelUp.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\WINDOWS\system32\conime.exe C:\Program Files\Internet Explorer\iexplore.exe C:\EmergencyUtils\Copy_of_Regedit.com C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Messenger\msmsgs.exe C:\Documents and Settings\Jin\Desktop\misc\tehshiet\Hijackthis\Hija ckThis.exe R3 - URLSearchHook: (no name) - _{5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file) O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {43135AD5-5ECF-4A6A-A709-219F92021ECA} - C:\WINDOWS\System32\olerbho4.dll (file missing) O2 - BHO: (no name) - {58D1234B-917D-57B6-B681-585B2CDF42D6} - (no file) O2 - BHO: (no name) - {91F9A5B6-F7F3-4491-BE96-5A78EE0B825E} - C:\WINDOWS\System32\oleabho5.dll (file missing) O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: ????? - {D09CFF09-A42A-4EDC-9804-E61224F59CA1} - C:\Program Files\NHN\NaverJump\NaverJump_1_9_0_11.dll (file missing) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe" O4 - HKLM\..\Run: [addview2] C:\WINDOWS\adview2.exe /background O4 - HKLM\..\Run: [ecyln] C:\Program Files\ryhi\jampge.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [Kazaa Lite] KAZAALITE.EXE O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [PSD Tools Channel] C:\Program Files\Common Files\PSD Tools\ChannelUp.exe O4 - HKCU\..\Run: [BLMessagingIntegration] C:\Program Files\Common Files\PSD Tools\blengine.exe O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\RunOnce: [Kazaa Lite] KAZAALITE.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O8 - Extra context menu item: 네이버 백과사전 검색 - res://C:\Program Files\NHN\NaverJump\NaverJump_1_9_0_11.dll /S100.HTML O8 - Extra context menu item: 네이버 사전 검색 - res://C:\Program Files\NHN\NaverJump\NaverJump_1_9_0_11.dll /DIC.HTML O8 - Extra context menu item: 네이버 일한 번역 - res://C:\Program Files\NHN\NaverJump\NaverJump_1_9_0_11.dll /JKTRANS.HTML O8 - Extra context menu item: 네이버 지식iN 검색 - res://C:\Program Files\NHN\NaverJump\NaverJump_1_9_0_11.dll /KBIN.HTML O8 - Extra context menu item: 네이버 통합 검색 - res://C:\Program Files\NHN\NaverJump\NaverJump_1_9_0_11.dll /SEARCH.HTML O9 - Extra button: AIM (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://support.charter.com/sdccommon/download/tgctlcm.cab O16 - DPF: {0C4A9D28-66B5-4A70-B915-B6AEA5112472} (Icon02 Control) - http://www.bestcode.co.kr/activex/icon02.cab O16 - DPF: {0CE1EA86-D322-11D7-A9D8-00104B1C8CEF} (Online Control) - http://game.dreamwiz.com/BIN/ocx/_online.cab O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab O16 - DPF: {1DE9BB01-B121-401D-8877-BCD5ED5B7EE5} (Tpwin Control) - http://www.crezio.com/test/leeyunho/AlwaysOn/AlwaysOn.CAB O16 - DPF: {214554E7-6F11-4937-8F49-BB2ACC84CE4D} (CncYKChat Control) - http://kr.chat.yahoo.com/N/APP/CncYKChat.cab O16 - DPF: {2712EB12-3BD3-4003-8113-D23B30FACC62} (P3BugsLoad Class) - http://player.bugs.co.kr/player/cab/bugsLoader20040625.cab O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB O16 - DPF: {5373CE59-8BB8-45DF-96FB-7DC2F668D674} (P3BugsCtrl Class) - http://player.bugs.co.kr/player/cab/bugsmedia.cab O16 - DPF: {5468A766-6749-4EC5-8F7A-5D47EE8FE646} (ConnectControl Control) - http://www.x2game.com/Control/ConnectControl.Cab -FIXED- |
|
#3
|
|||
|
|||
|
starts back-- wouldnt let me post bc too many characters.. sorry for flooding
O16 - DPF: {56EE9628-84F3-452C-A5F6-DFB598385B3F} (padview2.adview2) - http://adopen.co.kr:8080/adprj/adview2.CAB O16 - DPF: {575594D5-8974-4AFE-9919-8FE4AA687DEF} (Nhnplayer Control) - http://galsam.com/FEM/np/nhnplayerx.cab O16 - DPF: {630B5ED1-D6B0-4D31-8AE2-7687DF72BA9D} (Extream Class) - http://wmpdownload.nefficient.co.kr/wmpdownload/CDNExtX.cab O16 - DPF: {63504BC4-B8F2-40C1-9142-7965F4610163} - http://www.itemmania.co.kr/ItemMania_PopIns_Act_Patch2.cab O16 - DPF: {72ED8878-6E16-4EA1-BDD6-3B21EF676E45} (CVTrace Control) - http://www.seevideo.co.kr/pub/cvideox/trace/cvtrace.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab O16 - DPF: {7E9FDB80-5316-11D4-B02C-00C04F0CD404} (XecureWeb 4.0 Client Control) - http://download.softforum.co.kr/XecureObject/XecureWeb/xw_install.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab O16 - DPF: {90231C0E-765E-4429-8F70-F4E9A0F8D348} (WebCtrl Class) - http://mukebox.com/MukePlayer/p3aodsvr.cab O16 - DPF: {9A19966F-AE0E-4699-8CCE-9B6F5F1C352C} (NPKXSite Control) - http://download.netmarble.com/nProtect/npkx/npkxsite.cab O16 - DPF: {A1CCCFF4-0DF9-4FFC-99A3-A37A0F3D8E18} (p3bgset Class) - http://player.bugs.co.kr/install/bugsLoader20040811.cab O16 - DPF: {AE4454BD-04EC-4DB0-9BBF-29B32255E69D} (XBugsChat Control) - http://chatbeta.bugs.co.kr/download/XBugsChat.cab O16 - DPF: {BF628973-1E86-4D0E-B42C-EDDECFFABDBC} (Bugs AoD Class) - http://player.bugs.co.kr/install/bugsLoader20041018.cab O16 - DPF: {C0B6491F-C914-4344-A90E-DA847D7829A1} (XBTDataEncrypt Control) - http://reg.bugs.co.kr/cab/XBTDataEncrypt.CAB O16 - DPF: {CFCB7308-782F-11D4-BE27-000102598CE4} (NPX Control) - http://kr.pristontale.com/nprotect/nprotect/npx.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} (NPKCX Control) - http://kr.pristontale.com/nprotect/keycrypt/npkcx.cab O16 - DPF: {D7F0CC2E-FB09-4B38-B9A7-6807CBCD4859} (NMChatX Control) - http://download.netmarble.com/NMChatX/NMChatX.cab O16 - DPF: {DFB64246-00EA-4996-8C31-1F0855BECDDB} (P3WLoader Class) - http://player.bugs.co.kr/player/cab/bugsLoader.cab O16 - DPF: {ED1EEBEE-F0AA-474B-9829-61C482E72644} (PDBox25 Control) - http://www.pdbox.co.kr/filebox/ctrl_down/PDBox25.cab O16 - DPF: {FDDCE9FF-1FC6-413C-80B1-37B101FDA1D4} - http://download.buddylinks.net/ShellInstaller.cab -FIXED- most the things in red are/were the problems makers |
![]() |
| Viewing: ASP Free Forums > System Administration > Windows OS > regedit,taskmanager,and msconfig not working |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
|
|