What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Stompped!

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I KEEP GETTING ERRORS ON MY COMPUTER. pLEASE CHECK MY HIJACKTHIS LOG.

THANKS,

cASSANDRA

Logfile of HijackThis v1.98.2
Scan saved at 10:15:33 PM, on 9/9/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
E:\WINDOW98\SYSTEM\KERNEL32.DLL
E:\WINDOW98\SYSTEM\MSGSRV32.EXE
E:\WINDOW98\SYSTEM\SPOOL32.EXE
E:\WINDOW98\SYSTEM\MPREXE.EXE
D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE
E:\WINDOW98\SYSTEM\MSTASK.EXE
E:\WINDOW98\SYSTEM\mmtask.tsk
E:\WINDOW98\SYSTEM\RESTORE\STMGR.EXE
D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSSTAT.EXE
D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSHWIN32.EXE
D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE
D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\WEBSCANX.EXE
E:\WINDOW98\TASKMON.EXE
E:\WINDOW98\SYSTEM\SYSTRAY.EXE
D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\ALOGSERV.EXE
E:\WINDOW98\LOADQM.EXE
D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\MESSENGER\YPAGER.EXE
E:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
D:\PROGRAM FILES\CALCHECK.EXE
E:\WINDOW98\SYSTEM\WMIEXE.EXE
E:\WINDOW98\SYSTEM\DDHELP.EXE
E:\WINDOW98\SYSTEM\STIMON.EXE
E:\WINDOW98\EXPLORER.EXE
E:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
E:\PROGRAM FILES\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.thewestpointchurch.org/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\COMPANION\INSTALLS\CPN\YCOMP5_3_12_0.DLL
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\COMPANION\INSTALLS\CPN\YCOMP5_3_12_0.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOW98\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] E:\WINDOW98\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] E:\WINDOW98\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] E:\WINDOW98\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Alogserv] D:\Program Files\McAfee\McAfee VirusScan\alogserv.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [PE2CKFNT SE] d:\program files\ChkFont.exe
O4 - HKLM\..\RunServices: [McAfeeVirusScanService] D:\Program Files\McAfee\McAfee VirusScan\AVSYNMGR.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] E:\WINDOW98\System\Restore\StateMgr.exe
O4 - HKCU\..\Run: [Yahoo! Pager] D:\Program Files\McAfee\McAfee VirusScan\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\RunServices: [Yahoo! Pager] D:\Program Files\McAfee\McAfee VirusScan\Messenger\ypager.exe -quiet
O4 - HKCU\..\RunServices: [MsnMsgr] "E:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Photo Express Calendar Checker SE.lnk = D:\Program Files\CalCheck.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\MESSENGER\YHEXBMES0521.DLL
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - D:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\MESSENGER\YHEXBMES0521.DLL
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/…utocomplete.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://help.bellsouth.net/sdccommon/download/tgctlcm.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/064436019f02a3…ip/RdxIE601.cab
Post #2
Cassandra – Welcome back to SWI :)

I took a quick look at your log, and these are the items that you can fix this time with HijackThis. You should know how from your previous visits to us.

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/064436019f02a3…ip/RdxIE601.cab


Now, I most strongly recommend that you improve the protections on your system!! Your anti-virus is simply not enough.

Please take some prevention steps to keep your computer clean and secure going forward. You may have already taken a few of the steps, but it never hurts to take a quick look :) Please pay special attention to suggestion #2 below.

1 – Use an AntiVirus Software, and be sure you update it at least once a week. There are several very good free programs available. Grinler offers an outstanding overview at Virus, Spyware, and Malware Protection and Removal Resources

2 – To reduce re-infection potential for malware in the future, I strongly recommend installing three free programs: SpywareBlaster, SpywareGuard, and IE/Spyad.

3 – Use AdAware SE and Spybot S&D; to regularly to scan your system.

4 – It is very important to make sure that both Internet Explorer and XP are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.

5 – Consider using a Firewall. Just by using a Firewall in its default configuration can lower your risk greatly. Check out what Lawrence Abrams has to say at Understanding and Using Firewalls

An excellent overview is: So how did I get infected in the first place?. Be sure to visit the browser test link at the end of the article to really see how secure your system is!!

Thanks
daveai
Post #3
Glad we could be of assistance. This topic is now closed. If you wish it
reopened, please send us an email (Click here to email) with a link to your thread.

Donations in support of this Web Site are always appreciated

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI