1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Help Hijack Log and clueless

Discussion in 'Virus & Other Malware Removal' started by fluffyworld, Oct 8, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. fluffyworld

    fluffyworld Thread Starter

    Joined:
    Oct 8, 2003
    Messages:
    4
    am so grateful I found this. Wonderful someone is willing to help...My computer was acting strangely so ran "spybot' - nothing found. Saw an ad for "spy hunter" and ran it. It reported I had "navnovell" (or was that novellnav) and "micro gaming". Not being familiar or confident yet about spy hunter...I did a little more searching and happily discovered this forum. I just ran 'hi jack-this' but was not certain which to delete. In addition wondered if the results included the items that spy hunter described as "severe'. I am posting my log below-and thank any or all for help with this.
    __________________________
    Logfile of HijackThis v1.97.2
    Scan saved at 3:11:51 AM, on 10/8/03
    Platform: Windows 98 Gold (Win9x 4.10.1998)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\PROGRAM FILES\AMERICA ONLINE 7.0\WAOL.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\PROGRAM FILES\EPROMPTER\EPROMPTER.EXE
    C:\MY DOCUMENTS\WINZIP\WINZIP32.EXE
    C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE

    O4 - HKLM\..\Run: [SpyHunter] C:\PROGRAM FILES\SPYHUNTER\SPYHUNTER.exe
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://download.yahoo.com/dl/mail/ymmapi.cab
    :confused:
     
  2. normmork

    normmork

    Joined:
    Oct 4, 2002
    Messages:
    76
    This does not look like a complete log file, could you run HJT again
     
  3. fluffyworld

    fluffyworld Thread Starter

    Joined:
    Oct 8, 2003
    Messages:
    4
    Hi Norm I ran it again..it appears to be the same. Should I reinstall the program? (meaning hijack)?

    Logfile of HijackThis v1.97.2
    Scan saved at 6:50:08 AM, on 10/8/03
    Platform: Windows 98 Gold (Win9x 4.10.1998)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\PROGRAM FILES\AMERICA ONLINE 7.0\WAOL.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\PROGRAM FILES\EPROMPTER\EPROMPTER.EXE
    C:\PROGRAM FILES\AIM\AIM.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\MY DOCUMENTS\WINZIP\WINZIP32.EXE
    C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = home.netscape.com
    O4 - HKLM\..\Run: [SpyHunter] C:\PROGRAM FILES\SPYHUNTER\SPYHUNTER.exe
    O4 - HKCU\..\Run: [AIM] C:\PROGRAM FILES\AIM\aim.exe -cnetwait.odl
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O9 - Extra button: AIM (HKLM)
    O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://download.yahoo.com/dl/mail/ymmapi.cab
     
  4. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    There's nothing to reinstall with HijackThis.



    However one things for sure, you have unchecked too many programs under msconfig > startups.

    What do you have there?

    At a minimum you should leave ScanRegistry checked. Systray is harmless.

    And if you have any antivirus or firewall applications, they should be checked too.
     
  5. fluffyworld

    fluffyworld Thread Starter

    Joined:
    Oct 8, 2003
    Messages:
    4
    Thank you for info about opening programs ..in terms of reinstalling hijack this..of course I realize it is not installed..just wonderedif I should download it again and start fresh. Back to my problem at hand........

    does anyone know which if any of these should be deleted???:confused: :confused: :confused: :confused: :confused:
     
  6. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    None of them should be deleted.

    What I am trying to tell you is that you are not running a properly setup Win98 configuration unless you check Scanregistry.

    Run msconfig and click on the Startup tab. Do you have it checked or unchecked?
     
  7. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/170411

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice