What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

what to delete?!

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Logfile of HijackThis v1.99.1
Scan saved at 16.14.13, on 01/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Messenger\msmsgs.exe
C:\Programmi\Microsoft Office\OFFICE11\ONENOTEM.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
C:\Documents and Settings\gerardo\Documenti\TOOLS\hijackthis\HijackThis.exe
C:\Programmi\Internet Explorer\iexplore.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmi\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - Global Startup: Avvio veloce di Microsoft Office OneNote 2003.lnk = C:\Programmi\Microsoft Office\OFFICE11\ONENOTEM.EXE
O8 - Extra context menu item: &Cerca con Google - res://c:\programmi\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Traduci parola in italiano - res://c:\programmi\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Link a ritroso - res://c:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pagine simili - res://c:\programmi\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Versione cache della pagina - res://c:\programmi\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://eu-housecall.trendmicro-europe.com/…ivex/hcImpl.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{42C531C0-4BEB-4A23-8549-68496B78364B}: NameServer = 211.29.129.3,212.29.129.2
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
Post #2
Welcome jack54 to TomCoyote,

Your hijackthis log appears to be clean. Your Java is out-of-date. Are you experiencing problems? If so, please explaiin.


Updating Java
  • Download the latest version of Java Runtime Environment (JRE) 6.0.
  • Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement".
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.
Post #3

Welcome jack54 to TomCoyote,

Your hijackthis log appears to be clean. Your Java is out-of-date. Are you experiencing problems? If so, please explaiin.


Updating Java

  • Download the latest version of Java Runtime Environment (JRE) 6.0.
  • Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement".
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.

Post #4
Hi Susan528, Thanks for your help. I did what you suggested me, and I have updated jre. Yes I'am experience a problem I coulden't be able to solve in the last three months:problem with the cursor Where ever I am - explore folder, word, webmail, excel, and even now while I'am writing the cursor is jumping at the end of folder or at the end of page. it's really frustrating, you cannot do anything. I can only move the cursor using the arrow keys. That's the problem… I trayed to run antivirus, antispam, changed the mouse and at the end I also formatted the disc and re-installed everithing. The same, the cursor always stand at the end… It's like a nightmare Any idea?
Post #5
Hello jack54,

What kind of computer do you have? Have you tried a different mouse? Also do you have the most recent driver for the mouse installed?


You don't seem to have a firewall program installed. Please do not rely solely on the Windows XP firewall. Using a firewall will allow you to give/deny access for applications that want to go online. Select one of these, or another of your choice:Test your Firewall - Please test your firewall and make sure it is working properly.
Test Firewall
Post #6
Hi Susan538, my computer is a notebook - TOSHIBA SPA40 - MODEL PSA 45E
Pentium 4 2.66 GHz - 496 Mb Ram.
I tried a different mouse. (it also have a touch pad). When I check the device, it says "the device is working properly". I will try to remove the driver and check the firewall. It take me time to write because the cursor is continuing to escape.

Hello jack54,

What kind of computer do you have? Have you tried a different mouse? rAlso do you have the most recent driver for the mouse installed?


You don't seem to have a firewall program installed. Please do not rely solely on the Windows XP firewall. Using a firewall will allow you to give/deny access for applications that want to go online. Select one of these, or another of your choice:

Test your Firewall - Please test your firewall and make sure it is working properly.
Test Firewall

Post #7
Just to give you more info: this the configuration
Date 2007/01/01 19:34:54

[PC Information]
Model Name Satellite Pro A40
Part Number PSA45E-001YM-IT
Serial Number 34058737H
OS Version Microsoft Windows XP Professional 5.1.2600 Service Pack 2
BIOS Version Version 1.50
CPU Mobile Intel® Pentium® 4 CPU 2.66GHz
Memory 496MB RAM
Hard Disk Capacity 40,007,761,920 [Byte] 37.260 [GB]
Hard Disk Free Space Capacity 30,709,854,208 [Byte] 28.601 [GB]
Video Intel® 82852/82855 GM/GME Graphics Controller ver=6.13.10.3514
Screen Resolution 1024 x 768 Pixel
Color Quality True Color (32 Bit)
Sound SoundMAX Integrated Digital Audio ver=5.12.1.3670
Network Intel® PRO/100 VE Network Connection ver=6.4.14.0 MacAddr=00:08:0D:FC:8A:F4
Modem TOSHIBA Software Modem AMR ver=3.1.116.0
IDE Device 1 IC25N040ATMR04-0
IDE Device 2 None
IDE Device 3 TOSHIBA DVD-ROM SD-R2412 Firmware=1330
IDE Device 4 None
IDE Device 5 None
IDE Device 6 None
Internet Explorer 6.0.2900.2180


EC/KBC Version ""
PS-MICOM Version ""

[QFE Information]
Windows Update "KB873339"
Windows Update "KB885835"
Windows Update "KB885836"
Windows Update "KB886185"
Windows Update "KB887472"
Windows Update "KB888302"
Windows Update "KB890046"
Windows Update "KB890859"
Windows Update "KB891781"
Windows Update "KB893756"
Windows Update "KB893803v2"
Windows Update "KB894391"
Windows Update "KB896358"
Windows Update "KB896423"
Windows Update "KB896424"
Windows Update "KB896428"
Windows Update "KB898461"
Windows Update "KB899587"
Windows Update "KB899589"
Windows Update "KB899591"
Windows Update "KB900485"
Windows Update "KB900725"
Windows Update "KB901017"
Windows Update "KB901214"
Windows Update "KB902400"
Windows Update "KB904706"
Windows Update "KB905414"
Windows Update "KB905749"
Windows Update "KB908519"
Windows Update "KB908531"
Windows Update "KB910437"
Windows Update "KB911280"
Windows Update "KB911562"
Windows Update "KB911564"
Windows Update "KB911567"
Windows Update "KB911927"
Windows Update "KB912919"
Windows Update "KB913580"
Windows Update "KB914388"
Windows Update "KB914389"
Windows Update "KB916595"
Windows Update "KB917159"
Windows Update "KB917344"
Windows Update "KB917422"
Windows Update "KB917734_WMP9"
Windows Update "KB917953"
Windows Update "KB918439"
Windows Update "KB918899"
Windows Update "KB919007"
Windows Update "KB920213"
Windows Update "KB920214"
Windows Update "KB920670"
Windows Update "KB920683"
Windows Update "KB920685"
Windows Update "KB920872"
Windows Update "KB921398"
Windows Update "KB921883"
Windows Update "KB922582"
Windows Update "KB922616"
Windows Update "KB922760"
Windows Update "KB922819"
Windows Update "KB923191"
Windows Update "KB923414"
Windows Update "KB923689"
Windows Update "KB923694"
Windows Update "KB923980"
Windows Update "KB924191"
Windows Update "KB924270"
Windows Update "KB924496"
Windows Update "KB925398_WMP64"
Windows Update "KB925454"
Windows Update "KB925486"
Windows Update "KB926255"
Windows Update "Q147222"



What kind of computer do you have? Have you tried a different mouse? rAlso do you have the most recent driver for the mouse installed?


You don't seem to have a firewall program installed. Please do not rely solely on the Windows XP firewall. Using a firewall will allow you to give/deny access for applications that want to go online. Select one of these, or another of your choice:Test your Firewall - Please test your firewall and make sure it is working properly.
Test Firewall

tive
Post #8
What kind of mouse do you use?

The following scan for drivers is free. I would like to know if there is a more up-to-date driver for your mouse.
Please run the scan and let me know if the mouse driver is detected as out-of-date or bad.

Get Updated Drivers (Touchstone Driver Agent)
http://www.pcpitstop.com/driverscan.asp
Please click the link and follow the instructions to run the scan.
Let me know if any bad drivers were found.
Post #9

What kind of mouse do you use?

The following scan for drivers is free. I would like to know if there is a more up-to-date driver for your mouse.
Please run the scan and let me know if the mouse driver is detected as out-of-date or bad.

Get Updated Drivers (Touchstone Driver Agent)
http://www.pcpitstop.com/driverscan.asp
Please click the link and follow the instructions to run the scan.
Let me know if any bad drivers were found.


Using either a touchpad or external mouse it's the same. I tested the drives and are fine. The point is that the mouse itself is working properly; when I move it moves in all direction whitout problems, the problems cames when I release it… the cursor jumps to the end of page or to the last folder..
Post #13
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI