![]() ![]() |
Jun 30 2009, 11:22 PM
Post
#1
|
|
![]() Authentic Member ![]() ![]() Group: Authentic Member Posts: 72 Joined: 9-August 04 From: Truth or Consequences, NM Member No.: 12,110 Operating System: Win XP Media Center Edition SP2, HP Pavilion, AMD Athlon(tm) 64 3400+ (supposed to be 2.14ghz, tends to run at 1.77ghz on occasion) 640mb ram |
This log is from a small panasonic netbook. I'm not sure of the model, but it was originally sold only in japan. it has no CD drive, just below the keyboard on the left side it says Let's note. I have been trying to download a 35mb application off the internet to be able to use it for my current work. the internet connection is available through a usb adapter, but for some reason the connection disconnects after about 60 seconds. I then have to double click the wireless connect icon, and tell it to reconnect. Although this is distracting when trying to complete the download, it will be especially frustrating with my current work, as staying connected to the object server is a must, in order to accomplish anything useful.
I am well aware that you all may be quite backlogged, and i will await a response when you have time. thank you for all assistance in helping to solve this issue. below is the hjt log. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:01:43 AM, on 7/1/2009 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\Program Files\Panasonic\HotKey Appendix\HKEYAPP.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\iWare\iWare Mouse\3.0\lwbwheel.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Panasonic\NSelect\NSelect.exe C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanCU.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\System32\wuauclt.exe C:\Documents and Settings\michaleb\Desktop\HijackThis.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\SoftwareDistribution\Download\eb5ff0ae9fdaa24285c4924997a7aa90\update\update.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.pc.panasonic.co.jp/pc/ O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [Panasonic HotKey Manager] "C:\Program Files\Panasonic\HotKey Appendix\HKEYAPP.EXE" O4 - HKLM\..\Run: [Hotkey] C:\WINDOWS\System32\hkeyman.exe O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [LWBMOUSE] "C:\Program Files\iWare\iWare Mouse\3.0\lwbwheel.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: Net Selector.lnk = C:\Program Files\Panasonic\NSelect\NSelect.exe O4 - Global Startup: Wireless Configuration Utility HW.32.lnk = ? O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe -- End of file - 3690 bytes |
|
|
|
Jul 1 2009, 01:33 PM
Post
#2
|
|
![]() Classroom Teacher Group: Classroom Teacher Posts: 2,566 Joined: 30-July 06 Member No.: 59,198 Operating System: Windows XP |
Due, in part, to the large numbers of HJT logs being posted, there are four things that you need to be aware of.
1) If you have already posted this log at another forum, you need to post here that you have done so and this topic will be closed. Multiple posting not only ties up valuable resources, but could also result is some unpleasant side-effects for your system if you follow two sets of instructions at the same time. If, during research, an identical log is identified at another forum, this thread will be closed. 2) If you don't post a meaningful reply to any of my posts within five days, this thread will be closed. Due to limited free time I can only have so many open threads at any one time and if yours isn't active, somebody else's will be. If, by omission, the thread hasn't be closed after five days and you post, it will just serve as a reminder to me to close it. Please note that "I just dropped in to say Hi!" isn't a meaningful reply! 3) Malware removal is a tricky business, and malware writers don't tend to worry about the damage their creations do, so it is advisable to back-up all important files BEFORE we start. Although most cases have a successful conclusion, on occasion things don't go according to plan and it is better to be prepared for the worst. 4) Back-ups can get lost or damaged, so make two if the files are that important to you! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Download Sec-Info2.zip from here and save it to your Desktop. You will need to extract the file. Right click on the zipped folder and from the menu that appears, click on Extract All... In the 'Extraction Wizard' window that opens, click on Next> and in the next window that appears, click on Next> again. In the final window, click on Finish You should now see a folder with a file in it - double click Sec-info2.vbs to run it. Once you have been informed that the script has completed, a text file called Sec-Info.txt should be created in the same folder - you may need to wait a couple of seconds for it to appear.. Please copy and paste the contents of the text file into your next reply and then you can delete both of the folders and their contents. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Run HJT and click on Open the Misc Tools section.
|
|
|
|
Jul 6 2009, 12:53 PM
Post
#3
|
|
![]() Classroom Teacher Group: Classroom Teacher Posts: 2,566 Joined: 30-July 06 Member No.: 59,198 Operating System: Windows XP |
Due to inactivity this topic will be closed.
If you need help please start a new thread and post a new HJT log |
|
|
|
![]() ![]() |
Similar Topics
| Topic Title | Replies | Topic Starter | Views | Last Action | |||
|---|---|---|---|---|---|---|---|
![]() |
2 | Havoc | 63 | Today, 03:59 PM Last post by: LDTate |
|||
![]() |
2 | Ticker | 279 | Today, 03:59 PM Last post by: LDTate |
|||
![]() |
2 | valhuse | 79 | Today, 03:59 PM Last post by: LDTate |
|||
![]() |
2 | emmabell22 | 71 | Today, 03:59 PM Last post by: LDTate |
|||
|
Time is now: 20th November 2009 - 11:52 PM |