Computers| Computers |
|
12-06-2007, 11:55 PM
| #1 (permalink) |
| Super Techie  Join Date: Apr 2007 Location: Franklin, WI
Posts: 429
 |  Can someone just check this real quick? I think there are a few things I can remove without any problems, but can someone just verify them for me? LOG: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:49:46 PM, on 12/6/2007 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16546) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Microsoft IntelliType Pro\itype.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\AIM6\aim6.exe C:\Program Files\AIM6\aolsoftware.exe C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe C:\Program Files\Xfire\xfire.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Erich\Desktop\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe" O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-544423973-3403352939-1661853892-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Erich') O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{29336FB2-673C-4BC1-BD4A-8FE27F39AA81}: NameServer = 24.94.163.100,24.94.163.101 O20 - AppInit_DLLs: O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll O23 - Service: Eset HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe -- End of file - 5285 bytes
__________________ SYSTEM: RAIDMAX SMILODON Case LANPARTY DK P35-T2RS Intel Core2Duo E6600 (2.40) @ OC'ing 2 gigs G.Skill DDR2 800 RAM @ OC'ing 2x 320 Seagate Barracuda 7200.10 (RAID 0) EVGA Ge-Force 7900 GS KO @ 710/985 @ 1.48v/2.20v LITE-ON 20x DVD+/-R Burner/12x DVD-RAM w/ LightScribe LITE-ON 48x CD Burner/16x DVD-ROM Hanns·G 19" Widescreen LCD Windows Vista Ultimate Edition |
|
|
12-07-2007, 06:17 AM
| #2 (permalink) |
| Ultra Techie  Join Date: Jul 2006
Posts: 880
| Re: Can someone just check this real quick? Looks fine to me, whats your problem? im not that sure with this thou O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll i dont see why there are loads running, this is known in vista, so i think your running vista because you have the side bar aswel, am i right? i think it is normal, someone else might help on that Put a tick in these boxes R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O13 - Gopher Prefix:
__________________  Last edited by jay_bo; 12-07-2007 at 06:19 AM. |
|
|
|
12-07-2007, 10:03 AM
| #3 (permalink) |
| Security/Hacking Mod  Join Date: Jan 2005 Location: USA
Posts: 25,458
| Re: Can someone just check this real quick? There is nothing wrong with this entry O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll Its the Vista parental control .dll Your log looks clean. Are you having any issues or just a checkup?
__________________  www.MasterB365.com www.Tech-Dump.com "On 10-3-08 Obama Supporters Vandalized-Tresspassed and STOLE My Palin-McCain Sign Violating My First Amendment Right To Free Speech. Do It Again And You Will Find Out What The 2nd Amendment Is All ABOUT!" |
|
|
|
12-07-2007, 03:46 PM
| #4 (permalink) |
| Super Techie Join Date: Apr 2007 Location: Franklin, WI
Posts: 429
| Re: Can someone just check this real quick? Just a checkup. Yes, the sidebar is running. Thank you.
__________________ SYSTEM: RAIDMAX SMILODON Case LANPARTY DK P35-T2RS Intel Core2Duo E6600 (2.40) @ OC'ing 2 gigs G.Skill DDR2 800 RAM @ OC'ing 2x 320 Seagate Barracuda 7200.10 (RAID 0) EVGA Ge-Force 7900 GS KO @ 710/985 @ 1.48v/2.20v LITE-ON 20x DVD+/-R Burner/12x DVD-RAM w/ LightScribe LITE-ON 48x CD Burner/16x DVD-ROM Hanns·G 19" Widescreen LCD Windows Vista Ultimate Edition |
|
|
|
12-07-2007, 06:55 PM
| #5 (permalink) |
| Security/Hacking Mod Join Date: Jan 2005 Location: USA
Posts: 25,458
| Re: Can someone just check this real quick? welcome 
__________________ www.MasterB365.com www.Tech-Dump.com "On 10-3-08 Obama Supporters Vandalized-Tresspassed and STOLE My Palin-McCain Sign Violating My First Amendment Right To Free Speech. Do It Again And You Will Find Out What The 2nd Amendment Is All ABOUT!" |
|
|
| Thread Tools | |
| Display Modes | |
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Half Life 2: Episode 2 Quick Performance Preview | Osiris | PC Gaming | 4 | 10-10-2007 04:13 PM |
| plz have a quick check :) | weewun | HijackThis Logs (finished) | 11 | 07-15-2007 06:54 PM |
| Saving Quick Launch Icons | cliffhucker | Windows Operating Systems and Software | 6 | 06-25-2007 07:37 PM |
| Please check my log real quick | wolfeyes89 | HijackThis Logs (finished) | 4 | 06-02-2007 12:50 AM |
| A quick check before i order | jerry5739 | Building, Buying, or Upgrading High Performance PC Systems | 5 | 05-29-2007 08:17 AM |
Linear Mode
