Results 1 to 9 of 9
  1. #1
    New Lounger
    Join Date
    Mar 2001
    Posts
    19
    Thanks
    0
    Thanked 0 Times in 0 Posts

    HijackThis Logs Included

    <P ID="edit" class=small>(Edited by jscher2000 on 05-Nov-04 20:58. Lengthy logs moved to an attachment.)</P>I have two Dell Window XP computers networked together through a router and attached to cable internet. We have had the cable internet for only about 2 weeks, and my one teen-age son has evidently downloaded something that is causing problems on the Dell 2003 computer.

    I have run Spybot and find BargainBuddy and 5 DSO Exploit entries. I can

  2. #2
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: HijackThis Logs Included

    Don't worry about the DSO Exploit entries. Those same registry settings can be installed by legitimate software, and I don't think they do any harm in and of themselves.

    Your "Run" keys contain some funny file names (funny "ha ha" and funny peculiar). Some of the Browser Helper Objects (BHOs) also sound sketchy. I'd have to Google the file names, though, as they mean nothing to me. I've heard that the folks on the HijackThis forums are expert at picking out the ones that should not be there. That might be faster for you.

  3. #3
    4 Star Lounger
    Join Date
    Sep 2002
    Location
    Stafford, Staffordshire, England
    Posts
    585
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: HijackThis Logs Included

    Have tried the HijackThis tutorial. It may be of general interest to all loungers.

    http://hjt.wizardsofwebsites.com/
    <font color=blue><font face="Script MT Bold"><big>Rob</big></font face=script></font color=blue>

  4. #4
    New Lounger
    Join Date
    Mar 2001
    Posts
    19
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: HijackThis Logs Included

    OK, I have posted it on the Tom Coyote HJT Forum. Thanks. -Barb

  5. #5
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: HijackThis Logs Included

    <P ID="edit" class=small>(Edited by jscher2000 on 06-Nov-04 11:46. Fixed errant italics tags.)</P>Hi Barb,

    I did a Google on the one entry that stuck out and it's likely the cause of most of your trouble. First I wonder if you are running the latest versions of Adaware and Spybot ?? Adaware would be Adaware se v1.05 and Spybot is v 1.03. If you aren't up to date I'd suggest you try to update them first. If you can't or it's difficult to do with all the problems going on then you might wnat to give this a try. I got the information here.

    Download http://www.cexx.org/LSPFix.exe

    Boot to safe mode.

    Run LSPFix. Check the "I know what I'm doing" Button and remove all traces of calsp.dll and nothing else. Reboot.


    That should clear your browser and allow you to start accessing the internet more normally. If so, I'd get all your protection software up to date and then educate your teen (I know it's tough <img src=/S/sorry.gif border=0 alt=sorry width=15 height=15>) about the problems careless internet surfing can cause and the resultant lack of a computer and possible <img src=/S/money.gif border=0 alt=money width=17 height=15> necessary to get it fixed if you can't.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  6. #6
    New Lounger
    Join Date
    Mar 2001
    Posts
    19
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: HijackThis Logs Included

    OK, I did those things, and now I CAN access the internet. I will persevere updating and scanning to try to rid the computer of ALL (?) of its problems. Thank you SO MUCH for your prompt (!) and useful (!) information. -Barb.

  7. #7
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: HijackThis Logs Included

    That's good news. Nothing like progress to improve one's outlook. Now......... I did some more poking around and there are two other items in your HIjackThis log that require some attention.

    These two entries are related to Spyware and information and removal instructions can be found here and here.
    C:windows180ax.exe
    O4 - HKLM..Run: [180ax] c:windows180ax.exe


    The entry in the log createAMonster.exe is also an issue. Seems to be a variant of the LookToMe adware. Information can be found here and removal instructions are here

    Anything from Tom Coyote's forum ??
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  8. #8
    New Lounger
    Join Date
    Mar 2001
    Posts
    19
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: HijackThis Logs Included

    Nothing yet from Tom Coyote's forum, I think they are swamped? I am so glad that you took "mercy" on me and got the computer back on-line! I downloaded Webroot Spy Sweeper for a 30 day free trial, and it seemed to get rid of a lot of malware, including the Bargain Buddy. Probably should restart and run scans a few more times, but......do have to do laundry, shop, cook, supervise 4 children, 3 dogs, etc. I have updated copies of Spybot, Adaware, Spyware Blaster, Spyware Guard, and Startup Monitor. I got updates for WindowsXP (all except SP2), MSOffice, and IE. I am using the Foxfire browser. The two computers are back networked together and working "faster" than thay have in a long time - I imagine due to not being bogged down with malware. I will run new hijack logs and see if the entries that you found still exist. This is becoming quite an "education"!

    Thanks, Barb.

  9. #9
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: HijackThis Logs Included

    You are one busy lady !!! <img src=/S/nosleep.gif border=0 alt=nosleep width=27 height=15> Running a house and being the IT department for the home network are TWO full time jobs !!! Sounds like you have both under control. <img src=/S/smile.gif border=0 alt=smile width=15 height=15>

    Webroot's Spy Sweeper is an excellent program that I was just recently introduced to. It cleaned several things from my system that I didn't know were there and removed some old traces of stuff that had been removed previously, but apparently not completely, and has notified me of a few new intrusion attempts and one attempted browser hijack of my homepage. You also seem to have a "complete set" of spyware/malware protection utilities. Keep them all up to date and run them all at least once a week and you should have the cleanest system on the block !! Be sure to use the "immunize" feature on the programs that have one (Spybot & Spyware Blaster come to mind). I would also strongly recommend that you get SP2 on CD, <img src=/S/free.gif border=0 alt=free width=30 height=15> from Microsoft, and install it. Despite all the bad press it is not an issue for most users and the benefits far outweigh the negatives.

    Otherwise, it sound like you're making progress and if you want to post your HijackThis log after a fresh scan, I'll be glad to take a look at it. You might also want to update your post on Tom Coyote's forum (sometimes that wiil jump start the process and get you a response from someone more knowledgeable than I).
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •