TechSpot

My log

By frosty_65
Apr 10, 2007
  1. OS: Vista Home Premium

    Problem: None that I know of.

    More 411: Followed sticky preliminary removal instructions.

    Didnt work: AVG Antispyware, combofix.exe, Look2Me-Destroyer

    Everything came back clean nothing found on my system but i do not understand HJT logs. So there probably problems that i don't know of.


    Thank you
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Please visit this link http://virusscan.jotti.org/
    * Click the Browse... button
    * Navigate to the following file %WINDIR%\SMINST\launcher.exe
    * Click Open
    * Please let me know the results.

    Regards Howard :)

    This thread is for the use of frosty_65 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  3. frosty_65

    frosty_65 TS Rookie Topic Starter

    Found Nothing! That is good right?

    Thanks
     
  4. momok

    momok TS Rookie Posts: 2,265

    I find the following entries a little fishy. Do you know what they are Howard?

    O13 - Gopher Prefix:
    O17 - HKLM\System\CCS\Services\Tcpip\..\{BC1206EB-AE85-4833-901F-16AFF14E1757}: NameServer = 66.75.164.90,66.75.164.89
    O17 - HKLM\System\CCS\Services\Tcpip\..\{FF1DAC66-051C-4416-B731-D639D6385BB1}: NameServer = 66.75.164.90,66.75.164.89

    From what I know, O17 entries are lop.com domain hijackers, not safe to have if the ips contained in them are not the user's own ISP domain.

    O13 entries are IE DefaultPrefix hijacks. Several sites I checked with recommended fixing O13 entries always.
     
  5. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    frosty_65: In that case, your HJT log is clean.

    momok: 017 entries are usually safe except when they are part of a hijacker.(see the other thread you replied to.)

    Not all 013 entries are nasty and in frosty_65`s case the 013 entry is perfectly legit and is part of Windows Vista.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of frosty_65 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  6. frosty_65

    frosty_65 TS Rookie Topic Starter

    Thank you both for your help. Will post if I have any concerns. Thanks Again!
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...