HijackThis

marshey · Post by **marshey** » 14 Feb 2007, 15:26

i download HijackThis as i was told it was meant to be good but i done a scan on it and i didnt realise it gave you the choice of things to fix and as i dont have much experiance im not sure which things i need to fix and which things may mess up my system by fixing them so can someone please advize me on which ones to fix and i dont know if it helps but im using windows vista ultimate.

Logfile of HijackThis v1.99.1
Scan saved at 21:08:11, on 14/02/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16386)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Windows\explorer.exe
C:\Users\Scott\Desktop\HijackThis.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKCU\..\Run: [Sidebar] "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

Post by **floodhound2** » 14 Feb 2007, 16:39

Every thing looks good as far as I can tell. If your system is slow run a msconfig and remove the shit in start up.

msnmsgr.exe
wmplayer.exe
wmpnscfg.exe

and if you dont like the side bar uncheck it to.

to get to msconfig go to start and type msconfig in the run section. Look for the start up tab and uncheck what ever you dont want to run at startup.

marshey · Post by **marshey** » 14 Feb 2007, 17:41

ok thanks i have now changed it so only side bar and windows defender starts up but its still a bit slow and while i have nothing open or running my RAM is over 70% used and my CPU just changes between 30-70% used is this normal?

knightm4r3 · Post by **knightm4r3** » 14 Feb 2007, 18:33

Only problem I see is

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

because it points to nothing, its a deactivated entry.

Also, is it a Bill Gates cracked version of Vista? There have been many problems with RTM releases while using certin time-stoppers.

Post by **floodhound2** » 14 Feb 2007, 19:29

WELCOME TO VISTA

Post by **bad_brain** » 15 Feb 2007, 06:32

yeah, that's why I haven't posted an answer to this thread yet.
because as a Vista user you're actually nothing but a beta-tester for MS, and it don't make much sense to look for errors yet because there are so many even MS don't know...not to mention the ones MS already knows, I mean, for me it's totally ridiculous to release an OS and announce at the same time the release of Service Pack 1 in some months. this proves that Vista was released in a beta-state....

marshey · Post by **marshey** » 15 Feb 2007, 14:54

I think i will probably go back to an older version of windows then and i might also try linux. Is it possible to hav 3 partitions because i want to leave vista on one for a few months when service packages come out and i want another partition for linux probably the Fedora version and a final partition for windows xp or 2000 which ever one is faster?

Post by **floodhound2** » 15 Feb 2007, 17:14

It is possible to have as many partitions as you want.

Post by **bad_brain** » 16 Feb 2007, 04:39

floodhound2 wrote:It is possible to have as many partitions as you want.

hm, I had problems a while ago when I tried to setup 3 OSs on one HDD (Debian, Red Hat 9 and Solaris), when trying to installing the last one I always got an "too many partitions" error (I don't remember the exact message anymore). I have googled for this but all I found is that the max. partition amount a 2.4 kernel can handle is 63...

well, I think this was a problem with Solaris...or maybe of the mainboard firmware (designed for windows 95

)

but XP, Vista and a Linux distro should work without any problems...I recommend to use Debian as Linux distro and install it last, because you can simply pick the "install to biggest free space on HDD"-option (only create the partitions you need for XP and Vista and let the space for Debian unformatted) and use the "beginner install" which installs everything to one partition....

knightm4r3 · Post by **knightm4r3** » 16 Feb 2007, 20:42

Ive had up to 5 partitions on one HDD, an FC5, 2000, XP, Knoppix, and a slimmed down custom version of slax.

Not a problem at all other than GRUB couldn't tell the difference between XP and 2000 nd just called them both "Other" so I had to take some time to figure out which "other" was which.

Anytime I partition I use Partition Magic, I hate norton/symentic products, but I will admit I love PM.