Congratulations to AcaCandy on her 100,000th post!| Congratulations to AcaCandy on her 100,000th post! |
 General Security |
| |
| |
| | Thread Tools |
13-Jan-2008, 12:51 PM
#1 | |||||
| I'm nervous about this page ...
__________________ Mary Ann Win XP - Desktop Win Vista - Laptop Kaspersky Internet Security "What we think or what we know or what we believe is, in the end, of little consequence. The only consequence is what we do." |
| |
13-Jan-2008, 12:56 PM
#2 | ||||||
|
__________________ Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, chocolate in one hand, wine in the other, body thoroughly used up, totally worn out and screaming... Damn, What a ride!!  Marlene Missing you every day my partner in crime  My New Home  |
13-Jan-2008, 01:00 PM
#3 | |||||
|
__________________ Mary Ann Win XP - Desktop Win Vista - Laptop Kaspersky Internet Security "What we think or what we know or what we believe is, in the end, of little consequence. The only consequence is what we do." |
13-Jan-2008, 01:10 PM
#4 | |||||
| I uninstalled the older version and installed the newer version of HJT. Thanks!!  Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 1:13:38 PM, on 1/13/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe C:\PROGRA~1\ROADRU~1\PHOTOS~1\data\Xtras\mssysmgr.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe C:\PROGRA~1\INCRED~1\bin\IMApp.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe" O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe" O4 - HKLM\..\Run: [cafwc] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl O4 - HKLM\..\Run: [capfasem] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe O4 - HKLM\..\Run: [capfupgrade] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Road Runner PhotoShow Media Manager] C:\PROGRA~1\ROADRU~1\PHOTOS~1\data\Xtras\mssysmgr.exe O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user') O4 - Global Startup: Digital Line Detect.lnk = ? O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://activation.rr.com/install/downloads/tgctlcm.cab O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/k...an_unicode.cab O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/25175...at-no-eula.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsof...?1193203394640 O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1193203382437 O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.gamehouse.com/realarcade-...pcaploader.cab O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/MARYAN~1/LOCALS~1/APPLIC~1/IM/Runtime/Image/5147BB~1/AWESOM~1.JPG O24 - Desktop Component 1: (no name) - file:///C:/DOCUME~1/MARYAN~1/LOCALS~1/APPLIC~1/IM/Runtime/Image/C97216~1/ECG_1_~1.GIF O24 - Desktop Component 2: (no name) - file:///C:/DOCUME~1/MARYAN~1/LOCALS~1/APPLIC~1/IM/Runtime/Image/4320FE~1/ELMO2_~1.GIF -- End of file - 8261 bytes
__________________ Mary Ann Win XP - Desktop Win Vista - Laptop Kaspersky Internet Security "What we think or what we know or what we believe is, in the end, of little consequence. The only consequence is what we do." |
13-Jan-2008, 02:11 PM
#5 | |||||
|
__________________ ATTN: I tend to edit my replies often, Refresh your browser pages to see added info! My Signature links: Donate directly to TSG to help the site- http://www.techguy.org/donate.html TSG's Welcome Guide- Tips, Rules, How to use TSG and more! Is your computer going so slow you can see the electrons moving?....Post in our Hijack This and Malware Removal forum for Help! |
13-Jan-2008, 03:06 PM
#6 | |||||
|
__________________ Mary Ann Win XP - Desktop Win Vista - Laptop Kaspersky Internet Security "What we think or what we know or what we believe is, in the end, of little consequence. The only consequence is what we do." |
13-Jan-2008, 03:10 PM
#7 | |||||
|
__________________ ATTN: I tend to edit my replies often, Refresh your browser pages to see added info! My Signature links: Donate directly to TSG to help the site- http://www.techguy.org/donate.html TSG's Welcome Guide- Tips, Rules, How to use TSG and more! Is your computer going so slow you can see the electrons moving?....Post in our Hijack This and Malware Removal forum for Help! |
13-Jan-2008, 03:33 PM
#9 | |||||
| Hi, Java(TM) 6 Update 3 <<this has been updated to Update 4. Java(TM) SE Runtime Environment 6 Update 1<< these older versions of Java plugins very vulnerable to trojan Vundo, uninstall it, as you have the latest already installed.  Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version of Java components and upgrade the application. Beware it is NOT supported for use in 9x or ME and probably will not install in those systemsUpgrading Java:
Spybot - Search & Destroy 1.3 <<very outdated, it's at version 1.5 now, you should uninstall the old one after downloading this one, don't install it over the older version! SpyBot-Search & Destroy Tools ***Note: I would NOT advise you letting it install the Tea Timer as it will conflict and cause you trouble. There is a checkbox you will see during the install, UNcheck theTea Timer one. Install, Update, and then be sure to IMMUNIZE in SpyBot after installing it.
__________________ ATTN: I tend to edit my replies often, Refresh your browser pages to see added info! My Signature links: Donate directly to TSG to help the site- http://www.techguy.org/donate.html TSG's Welcome Guide- Tips, Rules, How to use TSG and more! Is your computer going so slow you can see the electrons moving?....Post in our Hijack This and Malware Removal forum for Help! |
13-Jan-2008, 04:48 PM
#11 | |||||
|
__________________ Give someone a fish and they eat for a day. Teach someone to fish and they eat for a lifetime. With apologies to a Chinese proverb. Give a man a fish and you feed him for a day. Teach a man to fish and you feed him for a lifetime. Chinese proverb. The International Thesaurus of Quotations, ed. Rhoda Thomas Tripp, p. 76, no. 3 (1970). Change is constant. Growth is optional. Attributes. http://www.wayneburke.com/Changeqte.html |
13-Jan-2008, 04:54 PM
#12 | |||||
| Correct- either way, by using the link or re-tying the right address, will get her back to the English display. Quote:
|
13-Jan-2008, 06:14 PM
#13 | |||||
| Hi Byteman and Rainforest! I've done absolutely everything each of you has suggested and nothing has changed. The Google page appears the same in IE and in FF. Typing the correct URL takes me straight to the Japanese page anyway. Clicking on "Google.com in English" doesn't help. Byteman, I've followed all of your instructions regarding Java and SpyBot. Rainforest, I've emptied my cache. I'm concerned and also curious as to why it's only Google that shows up that way. All of the other pages that I browse to appear perfectly normal. I can't shake the feeling that there is something very wrong. If you can think of something else to check, I will do it.
__________________ Mary Ann Win XP - Desktop Win Vista - Laptop Kaspersky Internet Security "What we think or what we know or what we believe is, in the end, of little consequence. The only consequence is what we do." |
13-Jan-2008, 06:19 PM
#14 | |||||
|
__________________ Give someone a fish and they eat for a day. Teach someone to fish and they eat for a lifetime. With apologies to a Chinese proverb. Give a man a fish and you feed him for a day. Teach a man to fish and you feed him for a lifetime. Chinese proverb. The International Thesaurus of Quotations, ed. Rhoda Thomas Tripp, p. 76, no. 3 (1970). Change is constant. Growth is optional. Attributes. http://www.wayneburke.com/Changeqte.html |
13-Jan-2008, 06:22 PM
#15 | |||||
| |
|
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
| You Are Using:  |
Advertisements do not imply our endorsement of that product or service. All times are GMT -4. The time now is 01:38 AM. Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved. Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd. Search Engine Optimization by vBSEO 3.1.0 |  |
