Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Please help with HijackThis Log


  • Please log in to reply
2 replies to this topic

#1 adrockvt

adrockvt

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:35 PM

Posted 08 March 2005 - 11:30 AM

I think I have the Home Search virus, (is it called CRW??) so I have been following the directions listed here:

http://www.bleepingcomputer.com/tutorials/remove-home-search-assistant/

I have Adaware and SD-Search & Destroy running. I really need help on identifying which items to fix in Hijack though. Any help would be appreciated. Thanks!

Logfile of HijackThis v1.99.1
Scan saved at 8:29:11 PM, on 3/7/2005
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\ibmpmsvc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Connected\CBRegCap.exe
C:\Program Files\Connected\CBlaunch.exe
C:\PROGRA~1\NavNT\DefWatch.exe
C:\WINNT\system32\hidserv.exe
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\PROGRA~1\NavNT\rtvscan.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\crqy32.exe
C:\PROGRA~1\AIM\StartScn.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\tp4serv.exe
C:\WINNT\System32\dpmw32.exe
C:\WINNT\System32\NWTRAY.EXE
C:\Program Files\DialUp\DialStub.exe
C:\WINNT\System32\RunDll32.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\tphkmgr.exe
C:\WINNT\System32\RunDll32.exe
C:\WINNT\System32\PRPCUI.exe
C:\Program Files\CheckPoint\SecuRemote\bin\fwenc.exe
C:\PROGRA~1\NavNT\vptray.exe
C:\WINNT\system32\msja.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINNT\System32\RunDLL32.exe
C:\PROGRA~1\AIM\aim.exe
C:\Program Files\Linksys\WPC11 Config Utility\WPC11Cfg.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\youngag\Desktop\Computer Tools\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINNT\system32\mkhxm.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINNT\system32\mkhxm.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINNT\system32\mkhxm.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINNT\system32\mkhxm.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINNT\system32\mkhxm.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINNT\system32\mkhxm.dll/sp.html#29126
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINNT\system32\mkhxm.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,AutoConfigURL = http://home.arthurandersen.com/w2kie55.ins
R3 - Default URLSearchHook is missing
N1 - Netscape 4: user_pref("browser.startup.homepage", "http://www.msn.com/"); (C:\Program Files\Netscape\Users\default\prefs.js)
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.msn.com/"); (C:\Documents and Settings\youngag\Application Data\Mozilla\Profiles\default\pmk6gpx1.slt\prefs.j s)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csea rchplugins%5CSBWeb_02.src"); (C:\Documents and Settings\youngag\Application Data\Mozilla\Profiles\default\pmk6gpx1.slt\prefs.j s)
O2 - BHO: (no name) - {79594BEC-6756-9AEC-9631-43E29D822932} - C:\WINNT\system32\apinr32.dll
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
O4 - HKLM\..\Run: [NDPS] C:\WINNT\System32\dpmw32.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [DialStub] C:\Program Files\DialUp\DialStub.exe
O4 - HKLM\..\Run: [Sametime] "c:\program files\lotus\sametime client\asametime.exe"
O4 - HKLM\..\Run: [SoundFusion] RunDll32 cwcprops.cpl,CrystalControlWnd
O4 - HKLM\..\Run: [TpHotkey] C:\PROGRA~1\ThinkPad\UTILIT~1\tphkmgr.exe
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPw rMonitor
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [fwenc.exe] "C:\Program Files\CheckPoint\SecuRemote\bin\fwenc.exe"
O4 - HKLM\..\Run: [a_diag] c:\diag.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\NavNT\vptray.exe
O4 - HKLM\..\Run: [msja.exe] C:\WINNT\system32\msja.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [QveCtl2Tray] C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [OfotoNow USB Detection] C:\WINNT\System32\RunDLL32.exe C:\PROGRA~1\Ofoto\OfotoNow\OFUSBS.DLL,WatchForConn ection OfotoNow
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Instant Wireless Configuration Utility.lnk = C:\Program Files\Linksys\WPC11 Config Utility\WPC11Cfg.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Document Tree - C:\WINNT\web\tree.htm
O8 - Extra context menu item: &Highlight - C:\WINNT\WEB\highlight.htm
O8 - Extra context menu item: &Links List - C:\WINNT\WEB\urllist.htm
O8 - Extra context menu item: &Web Search - C:\WINNT\WEB\selsearch.htm
O8 - Extra context menu item: I&mages List - C:\WINNT\Web\imglist.htm
O8 - Extra context menu item: Open Frame in &New Window - C:\WINNT\WEB\frm2new.htm
O8 - Extra context menu item: View Partial So&urce - C:\WINNT\web\source.htm
O8 - Extra context menu item: Zoom &In - C:\WINNT\WEB\zoomin.htm
O8 - Extra context menu item: Zoom O&ut - C:\WINNT\WEB\zoomout.htm
O9 - Extra button: (no name) - {438AFBA1-B0CB-11d2-9214-00104B3BCE5F} - C:\WINNT\web\tree.htm
O9 - Extra 'Tools' menuitem: &Document Tree - {438AFBA1-B0CB-11d2-9214-00104B3BCE5F} - C:\WINNT\web\tree.htm
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: http://www.aacts.com
O15 - Trusted Zone: http://bc.intranet.andersen.com
O15 - Trusted Zone: http://command.andersen.com
O15 - Trusted Zone: http://emeiastaging.intranet.andersen.com
O15 - Trusted Zone: http://eSupport.andersen.com
O15 - Trusted Zone: http://intranet.andersen.com
O15 - Trusted Zone: http://portal.andersen.com
O15 - Trusted Zone: http://PortfolioManagement.andersen.com
O15 - Trusted Zone: http://sametime.andersen.com
O15 - Trusted Zone: http://sametime.amr.andersen.com
O15 - Trusted Zone: http://sametime.apa.andersen.com
O15 - Trusted Zone: http://sametime.eme.andersen.com
O15 - Trusted Zone: http://solutions.andersen.com
O15 - Trusted Zone: http://solutionspace.andersen.com
O15 - Trusted Zone: http://tlba.americas.andersen.com
O15 - Trusted Zone: http://tlba.ap.andersen.com
O15 - Trusted Zone: http://tlba.emeia.andersen.com
O15 - Trusted Zone: http://tlbastaging.americas.andersen.com
O15 - Trusted Zone: http://tlbastaging.ap.andersen.com
O15 - Trusted Zone: http://weceemeia.intranet.andersen.com
O15 - Trusted Zone: http://www.intranet.andersen.com
O15 - Trusted Zone: http://www.soar.andersen.com
O15 - Trusted Zone: http://*.fs90.arthurandersen.com
O15 - Trusted Zone: http://aagtslearning.arthurandersen.com
O15 - Trusted Zone: http://aatgslearning.arthurandersen.com
O15 - Trusted Zone: http://aavlnlearning.arthurandersen.com
O15 - Trusted Zone: http://aba.americas.arthurandersen.com
O15 - Trusted Zone: http://aba.asiapac.arthurandersen.com
O15 - Trusted Zone: http://aba.emeia.arthurandersen.com
O15 - Trusted Zone: http://amrhd5910.arthurandersen.com
O15 - Trusted Zone: http://amrln4005.arthurandersen.com
O15 - Trusted Zone: http://amrws4011-008.us.arthurandersen.com
O15 - Trusted Zone: http://apald3001.arthurandersen.com
O15 - Trusted Zone: http://apintranet.arthurandersen.com
O15 - Trusted Zone: http://bc.kspace.arthurandersen.com
O15 - Trusted Zone: http://bcglobalvistaceregion.arthurandersen.com
O15 - Trusted Zone: http://bcglobalvistalaregion.arthurandersen.com
O15 - Trusted Zone: http://bcglobalvistaneregion.arthurandersen.com
O15 - Trusted Zone: http://bcglobalvistaparegion.arthurandersen.com
O15 - Trusted Zone: http://bcglobalvistaseregion.arthurandersen.com
O15 - Trusted Zone: http://bcglobalvistaswregion.arthurandersen.com
O15 - Trusted Zone: http://chiws0005.us.arthurandersen.com
O15 - Trusted Zone: http://clientstar.arthurandersen.com
O15 - Trusted Zone: http://devws5003.us.arthurandersen.com
O15 - Trusted Zone: http://devws5008.us.arthurandersen.com
O15 - Trusted Zone: http://emeia.ks.arthurandersen.com
O15 - Trusted Zone: http://fs90.arthurandersen.com
O15 - Trusted Zone: http://globalvista.arthurandersen.com
O15 - Trusted Zone: http://integrator.arthurandersen.com
O15 - Trusted Zone: http://kmap.fr.arthurandersen.com
O15 - Trusted Zone: http://kseld5901.arthurandersen.com
O15 - Trusted Zone: http://kspace.arthurandersen.com
O15 - Trusted Zone: http://lit.arthurandersen.com
O15 - Trusted Zone: http://lonln3101.arthurandersen.com
O15 - Trusted Zone: http://lonws3100.uk.arthurandersen.com
O15 - Trusted Zone: http://lonws3101.uk.arthurandersen.com
O15 - Trusted Zone: http://lonws3102.uk.arthurandersen.com
O15 - Trusted Zone: http://lonws3103.uk.arthurandersen.com
O15 - Trusted Zone: http://my.kspacedemo.arthurandersen.com
O15 - Trusted Zone: http://myaats.arthurandersen.com
O15 - Trusted Zone: http://opt.fs90.arthurandersen.com
O15 - Trusted Zone: http://pedln0012.arthurandersen.com
O15 - Trusted Zone: http://pedws0001.us.arthurandersen.com
O15 - Trusted Zone: http://pedws0010.aapl.arthurandersen.com
O15 - Trusted Zone: http://pedws0026.us.arthurandersen.com
O15 - Trusted Zone: http://previewfs90.arthurandersen.com
O15 - Trusted Zone: http://search.arthurandersen.com
O15 - Trusted Zone: http://singapore.intranet.arthurandersen.com
O15 - Trusted Zone: http://taxinfo.uk.arthurandersen.com
O15 - Trusted Zone: http://tis.us.arthurandersen.com
O15 - Trusted Zone: http://tlba.americas.arthurandersen.com
O15 - Trusted Zone: http://tlba.ap.arthurandersen.com
O15 - Trusted Zone: http://tlba.emeia.arthurandersen.com
O15 - Trusted Zone: http://tyods4002.jp.arthurandersen.com
O15 - Trusted Zone: http://tyods4004.jp.arthurandersen.com
O15 - Trusted Zone: http://ushws5007.us.arthurandersen.com
O15 - Trusted Zone: http://ushws5008.us.arthurandersen.com
O15 - Trusted Zone: http://vistaabacanada.arthurandersen.com
O15 - Trusted Zone: http://vistaabaflorida.arthurandersen.com
O15 - Trusted Zone: http://vistaabagreatlakes.arthurandersen.com
O15 - Trusted Zone: http://vistaabagreatplains.arthurandersen.com
O15 - Trusted Zone: http://vistaabagulf.arthurandersen.com
O15 - Trusted Zone: http://vistaabaheartlands.arthurandersen.com
O15 - Trusted Zone: http://vistaabamidatlantic.arthurandersen.com
O15 - Trusted Zone: http://vistaabanewengland.arthurandersen.com
O15 - Trusted Zone: http://vistaabanewyork.arthurandersen.com
O15 - Trusted Zone: http://vistaabapnw.arthurandersen.com
O15 - Trusted Zone: http://vistaabapsw.arthurandersen.com
O15 - Trusted Zone: http://vistaabasouth.arthurandersen.com
O15 - Trusted Zone: http://vistaabasouthwest.arthurandersen.com
O15 - Trusted Zone: http://www.arthurandersen.com
O15 - Trusted Zone: http://www.abareview.arthurandersen.com
O15 - Trusted Zone: http://www.bcdev.arthurandersen.com
O15 - Trusted Zone: http://www.kspace.arthurandersen.com
O15 - Trusted Zone: http://www.soar.arthurandersen.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: http://netshow.knowledgespace.com
O15 - Trusted Zone: http://store.knowledgespace.com
O15 - Trusted Zone: http://ww2.knowledgespace.com
O15 - Trusted Zone: http://ww3.knowledgespace.com
O15 - Trusted Zone: http://www.knowledgespace.com
O15 - Trusted Zone: http://www2.knowledgespace.com
O15 - Trusted Zone: http://*.knowledgespace.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.05p.com (HKLM)
O15 - Trusted Zone: http://www.aacts.com (HKLM)
O15 - Trusted Zone: http://bc.intranet.andersen.com (HKLM)
O15 - Trusted Zone: http://command.andersen.com (HKLM)
O15 - Trusted Zone: http://emeiastaging.intranet.andersen.com (HKLM)
O15 - Trusted Zone: http://eSupport.andersen.com (HKLM)
O15 - Trusted Zone: http://intranet.andersen.com (HKLM)
O15 - Trusted Zone: http://portal.andersen.com (HKLM)
O15 - Trusted Zone: http://PortfolioManagement.andersen.com (HKLM)
O15 - Trusted Zone: http://sametime.andersen.com (HKLM)
O15 - Trusted Zone: http://sametime.amr.andersen.com (HKLM)
O15 - Trusted Zone: http://sametime.apa.andersen.com (HKLM)
O15 - Trusted Zone: http://sametime.eme.andersen.com (HKLM)
O15 - Trusted Zone: http://solutions.andersen.com (HKLM)
O15 - Trusted Zone: http://solutionspace.andersen.com (HKLM)
O15 - Trusted Zone: http://tlba.americas.andersen.com (HKLM)
O15 - Trusted Zone: http://tlba.ap.andersen.com (HKLM)
O15 - Trusted Zone: http://tlba.emeia.andersen.com (HKLM)
O15 - Trusted Zone: http://tlbastaging.americas.andersen.com (HKLM)
O15 - Trusted Zone: http://tlbastaging.ap.andersen.com (HKLM)
O15 - Trusted Zone: http://weceemeia.intranet.andersen.com (HKLM)
O15 - Trusted Zone: http://www.intranet.andersen.com (HKLM)
O15 - Trusted Zone: http://www.soar.andersen.com (HKLM)
O15 - Trusted Zone: http://*.fs90.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://aagtslearning.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://aatgslearning.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://aavlnlearning.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://aba.americas.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://aba.asiapac.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://aba.emeia.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://amrhd5910.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://amrln4005.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://amrws4011-008.us.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://apald3001.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://apintranet.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://bc.kspace.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://bcglobalvistaceregion.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://bcglobalvistalaregion.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://bcglobalvistaneregion.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://bcglobalvistaparegion.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://bcglobalvistaseregion.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://bcglobalvistaswregion.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://chiws0005.us.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://clientstar.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://devws5003.us.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://devws5008.us.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://emeia.ks.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://fs90.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://globalvista.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://integrator.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://kmap.fr.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://kseld5901.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://kspace.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://lit.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://lonln3101.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://lonws3100.uk.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://lonws3101.uk.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://lonws3102.uk.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://lonws3103.uk.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://my.kspacedemo.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://myaats.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://opt.fs90.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://pedln0012.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://pedws0001.us.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://pedws0010.aapl.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://pedws0026.us.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://previewfs90.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://search.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://singapore.intranet.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://taxinfo.uk.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://tis.us.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://tlba.americas.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://tlba.ap.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://tlba.emeia.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://tyods4002.jp.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://tyods4004.jp.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://ushws5007.us.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://ushws5008.us.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabacanada.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabaflorida.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabagreatlakes.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabagreatplains.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabagulf.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabaheartlands.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabamidatlantic.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabanewengland.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabanewyork.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabapnw.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabapsw.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabasouth.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://vistaabasouthwest.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://www.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://www.abareview.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://www.bcdev.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://www.kspace.arthurandersen.com (HKLM)
O15 - Trusted Zone: http://www.soar.arthurandersen.com (HKLM)
O15 - Trusted Zone: *.clickspring.net (HKLM)
O15 - Trusted Zone: http://netshow.knowledgespace.com (HKLM)
O15 - Trusted Zone: http://store.knowledgespace.com (HKLM)
O15 - Trusted Zone: http://ww2.knowledgespace.com (HKLM)
O15 - Trusted Zone: http://ww3.knowledgespace.com (HKLM)
O15 - Trusted Zone: http://www.knowledgespace.com (HKLM)
O15 - Trusted Zone: http://www2.knowledgespace.com (HKLM)
O15 - Trusted Zone: http://*.knowledgespace.com (HKLM)
O15 - Trusted Zone: *.mt-download.com (HKLM)
O15 - Trusted Zone: *.my-internet.info (HKLM)
O15 - Trusted Zone: *.scoobidoo.com (HKLM)
O15 - Trusted Zone: *.searchmiracle.com (HKLM)
O15 - Trusted IP range: 206.161.125.149
O15 - Trusted IP range: 206.161.125.149 (HKLM)
O16 - DPF: {15B782AF-55D8-11D1-B477-006097098764} (Macromedia Authorware Web Player Control) -
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.ofoto.com/downloads/BUM/..._1/axofupld.cab
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildtangent.com/bgn/...ron/install.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = arthurandersen.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = arthurandersen.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = arthurandersen.com,andersen.com,awo.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = arthurandersen.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = arthurandersen.com,andersen.com,awo.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = arthurandersen.com,andersen.com,awo.com
O20 - Winlogon Notify: AANotify - C:\WINNT\SYSTEM32\AANotify.dll
O20 - Winlogon Notify: NavLogon - C:\WINNT\System32\NavLogon.dll
O23 - Service: Arthur Andersen Start Scan (AAStartScan) - Arthur Andersen - C:\PROGRA~1\AIM\StartScn.exe
O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: CBRegCap - Connected Corporation - C:\Program Files\Connected\CBRegCap.exe
O23 - Service: Connected Launcher (ConnectedLauncher) - Connected Corporation - C:\Program Files\Connected\CBlaunch.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\NavNT\DefWatch.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: FwSRService - Unknown owner - C:\Program Files\CheckPoint\SecuRemote\bin\fwsrservice.exe
O23 - Service: IBM PM Service (IBMPMSVC) - IBM Corp. - C:\WINNT\System32\ibmpmsvc.exe
O23 - Service: Intel File Transfer - Unknown owner - C:\WINNT\system32\cba\xfr.exe (file missing)
O23 - Service: Intel PDS - Unknown owner - C:\WINNT\system32\cba\pds.exe (file missing)
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\NavNT\rtvscan.exe
O23 - Service: Network Security Service (NSS) ( 6Q'8) - Unknown owner - C:\WINNT\crqy32.exe

Edited by adrockvt, 08 March 2005 - 02:57 PM.


BC AdBot (Login to Remove)

 


#2 adrockvt

adrockvt
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:35 PM

Posted 08 March 2005 - 02:58 PM

Can someone please help me with what lines to fix?

#3 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,614 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:35 PM

Posted 16 March 2005 - 04:26 PM

We just implemented a way to find posts that may have been over looked. We apologize for that and if you are still having a problem, which we hope you are not, then post a new log.

Sorry for the inconvenience.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users