What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Hijack Log dont know what the problem is

10 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Hi BillShar,

Please try and provide me with as much detail as possible about the problems you are having with your desktop. Is it only that it has the appearance of a '98 system?

Have you tried to change it manually?


Trevuren
Post #18
Hi BillShar,

There are 2 things to try:

1. Right click on your Desktop>>Properties>>Theme and chose the theme that you want from the list (I think you are looking for Windows XP). Then OK.

2. Then right-click on your Desktop>>Properties>>Appearance and chose a style in the "Windows and Buttons" window. Click OK


Give this a try and keep me posted please.


Regards,

Trevuren
Post #20
HI Bill,

Try this in reverse:

Change the Windows XP Start Menu to the Classic Windows Theme
To change the Start menu to the classic Start menu: 1. In Control Panel, double-click Appearance and Themes.
2. Click Taskbar and Start Menu.
3. On the Start Menu tab, click Classic Start menu, and then click OK


Regards,

Trevuren
Post #21
I got another probem……My brother used my computer and did who knows what!!!


Heres my log:



Logfile of HijackThis v1.99.1
Scan saved at 9:48:07 PM, on 6/2/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe
C:\Program Files\Dell AIO Printer A940\dlbabmon.exe
C:\Program Files\WinZip\WZQKPICK.EXE
c:\windows\system32\fbpssup.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\msxct.exe
C:\Program Files\Common Files\WinTools\WToolsA.exe
C:\Program Files\Common Files\WinTools\WSup.exe
C:\WINDOWS\System32\cmmlman.exe
C:\Program Files\CxtPls\CxtPls.exe
C:\Program Files\Common Files\WinTools\WToolsS.exe
C:\WINDOWS\System32\exp.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\taskmgr.exe
C:\WINDOWS\System32\dwwin.exe
C:\WINDOWS\System32\uanzua.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Win Server Updt] C:\WINDOWS\wupdt.exe
O4 - HKLM\..\Run: [Dell AIO Printer A940] "C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe"
O4 - HKLM\..\Run: [usxbkpc] C:\WINDOWS\System32\usxbkpc.exe
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [msxct] msxct.exe
O4 - HKLM\..\Run: [lsnapsv] C:\WINDOWS\lsnapsv.exe
O4 - HKLM\..\Run: [PS1] C:\WINDOWS\System32\ps1.exe
O4 - HKLM\..\Run: [exp.exe] C:\WINDOWS\System32\exp.exe
O4 - HKLM\..\Run: [43nQ3qQ] cmmlman.exe
O4 - HKLM\..\Run: [checkrun] c:\windows\system32\elitebvg32.exe
O4 - HKLM\..\Run: [C:\WINDOWS\VCMnet11.exe] C:\WINDOWS\VCMnet11.exe
O4 - HKLM\..\Run: [WinTools] C:\PROGRA~1\COMMON~1\WinTools\WToolsA.exe
O4 - HKLM\..\Run: [KavSvc] C:\WINDOWS\System32\uanzua.exe reg_run
O4 - HKLM\..\Run: [Uninstall_TBPS] C:\WINDOWS\Temp\TBuninst.exe /remove
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/23e5eede7b1843…ip/RdxIE601.cab
O20 - Winlogon Notify: iexplore - C:\WINDOWS\SYSTEM32\f14rg.dll
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: System Startup Service (SvcProc) - Unknown owner - c:\windows\SvcProc.exe
O23 - Service: WinTools for IE service (WinToolsSvc) - Unknown owner - C:\Program Files\Common Files\WinTools\WToolsS.exe
Post #22
Hi Bill,

You have nearly every infection under the sun here. AND i don't see any antivirus or Firewall. You have done any of tour Windows Updates either.


In addition, this does not appear to be the same machine as I worked on before. There are some critical entries that are not present here.

I am going to close this thread and request that you start a new thread.


Trevuren

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI