highjacked please help

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

colocrazy

Thread Starter
Joined
Feb 4, 2005
Messages
3
can someone check this log please computer very slow on line now and doesn't seem to act right....thnx

Logfile of HijackThis v1.99.0
Scan saved at 10:35:17 PM, on 2/3/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINNT\System32\smss.exe
D:\WINNT\system32\winlogon.exe
D:\WINNT\system32\services.exe
D:\WINNT\system32\lsass.exe
D:\WINNT\system32\svchost.exe
D:\WINNT\System32\svchost.exe
D:\WINNT\system32\LEXBCES.EXE
D:\WINNT\system32\LEXPPS.EXE
D:\WINNT\system32\spoolsv.exe
D:\WINNT\Explorer.EXE
D:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
D:\Program Files\NavNT\defwatch.exe
D:\Program Files\NavNT\rtvscan.exe
D:\WINNT\wanmpsvc.exe
D:\WINNT\system32\WFXSVC.EXE
D:\WINNT\Mixer.exe
D:\Program Files\NavNT\vptray.exe
D:\Program Files\WinFax\WFXMOD32.EXE
D:\PROGRA~1\WinFax\WFXSWTCH.exe
D:\WINNT\system32\wfxsnt40.exe
D:\Program Files\America Online 9.0\aoltray.exe
D:\Program Files\WinFax\WFXCTL32.EXE
D:\Program Files\Customizer XP\RAMIdle.exe
D:\Program Files\Eyetide Media\Eyetide Viewer\EyetideController.exe
D:\WINNT\system32\Fast.exe
D:\WINNT\system32\MsgSys.EXE
D:\WINNT\System32\svchost.exe
D:\Program Files\America Online 9.0\waol.exe
D:\Program Files\America Online 9.0\shellmon.exe
D:\Program Files\America Online 9.0\aolwbspd.exe
D:\Documents and Settings\Randy\My Documents\hijackthisnew\HijackThis.exe

O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [vptray] D:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [WFXSwtch] D:\PROGRA~1\WinFax\WFXSWTCH.exe
O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe
O4 - HKLM\..\RunOnce: [System Mechanic Cache Cleanup] D:\PROGRA~1\iolo\SYSTEM~1\SysMech4.exe /COMPLETECACHE
O4 - Startup: Eyetide Launcher.lnk = D:\Program Files\Eyetide Media\Eyetide Viewer\EyetideController.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = D:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Controller.LNK = D:\Program Files\WinFax\WFXCTL32.EXE
O4 - Global Startup: RAMIdle.lnk = D:\Program Files\Customizer XP\RAMIdle.exe
O23 - Service: AOL Connectivity Service - America Online, Inc. - D:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: DefWatch - Symantec Corporation - D:\Program Files\NavNT\defwatch.exe
O23 - Service: LexBce Server - Lexmark International, Inc. - D:\WINNT\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Client - Symantec Corporation - D:\Program Files\NavNT\rtvscan.exe
O23 - Service: WAN Miniport (ATW) Service - America Online, Inc. - D:\WINNT\wanmpsvc.exe
O23 - Service: WinFax PRO - Symantec Corporation - D:\WINNT\system32\WFXSVC.EXE
 

colocrazy

Thread Starter
Joined
Feb 4, 2005
Messages
3
here is my current highjack log. keeps opening new pages on its own and constantly changinging home page..please help...thnx

Logfile of HijackThis v1.99.0
Scan saved at 9:49:20 AM, on 02/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINNT\System32\smss.exe
D:\WINNT\system32\winlogon.exe
D:\WINNT\system32\services.exe
D:\WINNT\system32\lsass.exe
D:\WINNT\system32\svchost.exe
D:\WINNT\System32\svchost.exe
D:\WINNT\system32\LEXBCES.EXE
D:\WINNT\system32\spoolsv.exe
D:\WINNT\Explorer.EXE
D:\WINNT\system32\LEXPPS.EXE
D:\Program Files\NavNT\defwatch.exe
D:\WINNT\Mixer.exe
D:\Program Files\NavNT\vptray.exe
D:\PROGRA~1\WinFax\WFXSWTCH.exe
D:\WINNT\system32\wfxsnt40.exe
D:\Program Files\NavNT\rtvscan.exe
D:\Program Files\Microsoft AntiSpyware\gcasServ.exe
D:\Program Files\America Online 9.0\aoltray.exe
D:\Program Files\WinFax\WFXCTL32.EXE
D:\WINNT\System32\svchost.exe
D:\WINNT\wanmpsvc.exe
D:\WINNT\system32\WFXSVC.EXE
D:\Program Files\WinFax\WFXMOD32.EXE
D:\WINNT\system32\Fast.exe
D:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
D:\WINNT\system32\MsgSys.EXE
D:\Program Files\Common Files\AOL\ACS\acsd.exe
D:\Program Files\America Online 9.0\waol.exe
D:\Program Files\America Online 9.0\shellmon.exe
D:\Program Files\America Online 9.0\aolwbspd.exe
D:\Documents and Settings\Randy\My Documents\hijackthisnew\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:7212
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [vptray] D:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [WFXSwtch] D:\PROGRA~1\WinFax\WFXSWTCH.exe
O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe
O4 - HKLM\..\Run: [gcasServ] "D:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = D:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Controller.LNK = D:\Program Files\WinFax\WFXCTL32.EXE
O17 - HKLM\System\CCS\Services\Tcpip\..\{008CCA86-367C-4E13-B9AD-50A22680B2F7}: NameServer = 205.188.146.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{008CCA86-367C-4E13-B9AD-50A22680B2F7}: NameServer = 205.188.146.145
O23 - Service: DefWatch - Symantec Corporation - D:\Program Files\NavNT\defwatch.exe
O23 - Service: LexBce Server - Lexmark International, Inc. - D:\WINNT\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Client - Symantec Corporation - D:\Program Files\NavNT\rtvscan.exe
O23 - Service: WAN Miniport (ATW) Service - America Online, Inc. - D:\WINNT\wanmpsvc.exe
O23 - Service: WinFax PRO - Symantec Corporation - D:\WINNT\system32\WFXSVC.EXE
 

cybertech

Retired Moderator
Joined
Apr 16, 2002
Messages
72,115
Hi colocrazy, Welcome to TSG!!

I have merged your two threads so please reply here.

Have you used msconfig to disable anything?

Download the new version of Hijackthis and post another log.
 

cybertech

Retired Moderator
Joined
Apr 16, 2002
Messages
72,115
I can't tell from your logs what the page is changing to. You must be "fixing" the problem before you run the log.

What is it changing to?
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top