1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

New version of HJT 1.99.1

Discussion in 'Virus & Other Malware Removal' started by dvk01, Feb 16, 2005.

Thread Status:
Not open for further replies.
Advertisement
  1. dvk01

    dvk01 Moderator Malware Specialist Thread Starter

    Joined:
    Dec 14, 2002
    Messages:
    56,223
    First Name:
    Derek
    New version of HJT 1.99.1 now available

    go to here and download 'Hijack This!' self extracter. double click on the file and it will self extract to C:\program files\hijackthis.
    Go to that folder then doubleclick the Hijackthis.exe
    Click the "Scan" button, when the scan is finished the scan button will become "Save Log" click that and save the log.
    Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.
    It will possibly show issues deserving our attention, but most of what it lists will be harmless or even required,
    so do NOT fix anything yet.
    Someone here will be happy to help you analyze the results.
     
  2. Cheeseball81

    Cheeseball81 Retired Moderator

    Joined:
    Mar 3, 2004
    Messages:
    84,315
    Wow that came out fast.

    Thanks Derek :)
     
  3. dvk01

    dvk01 Moderator Malware Specialist Thread Starter

    Joined:
    Dec 14, 2002
    Messages:
    56,223
    First Name:
    Derek
    He's been testing it for a few months and it was scheduled for release about 1 month ago but was held back to fix a few things
     
  4. hewee

    hewee

    Joined:
    Oct 26, 2001
    Messages:
    57,791
    Thanks dvk01. here is my log if you like to look at it. It should be ok but not sure what these two are.
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} -

    Also I hear from another forum and said to be from Merijn's site.

     

    Attached Files:

  5. dvk01

    dvk01 Moderator Malware Specialist Thread Starter

    Joined:
    Dec 14, 2002
    Messages:
    56,223
    First Name:
    Derek
    the first was windows update
    and the second was housecall
    as they both seem to be corrupted fix with HJt and then next time you go to update or housecall you will be promnpted to download new versions

    and yes teh info about McCrappy is correct
     
  6. hewee

    hewee

    Joined:
    Oct 26, 2001
    Messages:
    57,791
    Thanks buddy I was thinking all was ok. I will save it as a good and safe log file to look at for changes.
     
  7. hewee

    hewee

    Joined:
    Oct 26, 2001
    Messages:
    57,791
    Thought I post a new HJT log after looking at mine and wanted to post it where my last good log is already here to look at.
    Been a long time so things have changed.

    But what I was wonder about is this...
    C:\WINDOWS\SYSTEM\SPOOL32.EXE

    What is this for?
    I do not have a printer on this PC and never had one.

    Then if the rest of the log is ok too.

    So much has changed from the last HJT log above like MS Update for 98 like the KB891711 and then the newer versions of adware, spybot, blaster and winpatrol.
     

    Attached Files:

  8. hewee

    hewee

    Joined:
    Oct 26, 2001
    Messages:
    57,791
    bump
     
  9. Flrman1

    Flrman1

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    SPOOL32.EXE:

    http://www.liutilities.com/products/wintaskspro/processlibrary/spool32/

    fix these:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -

    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} -



    Disable this in msconfig:

    KB891711
     
  10. hewee

    hewee

    Joined:
    Oct 26, 2001
    Messages:
    57,791
    Thanks flrman1

    Guess all is ok really or nothing bad. Just unneed things.

    But I have now trouble with the KB891711 after I got the newer version of it.
    So what is the reason I should disable it?

    Also I do not have a printer.
    http://www.winpatrol.com/db/dbinfo/spool32.html?spool32
     
  11. Flrman1

    Flrman1

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    It's not supposed to load at startup like that.

    Just because you don't have a printer doesn't mean you're not supposed to have that file. It's a windows file.
     
  12. hewee

    hewee

    Joined:
    Oct 26, 2001
    Messages:
    57,791
    What is not supposed to load at startup like that? The KB891711 file?
    I ot wondows 98SE

    Ok I will keep the SPOOL32.EXE
     
  13. hewee

    hewee

    Joined:
    Oct 26, 2001
    Messages:
    57,791
    Here is my new log.

    Now going to MS Update I get this here.

    So is that because I deleted this here?
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -

    So if I need to ok this to get the updates then why delete this as it will just make me go tru all this everytime I check for a update.
     

    Attached Files:

  14. Flrman1

    Flrman1

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    I just did some more reading and it appears that it is supposed to load at startup hewee:

    http://support.microsoft.com/kb/891711
    Now I'm confused. I've never seen a windows update before that needed to load at startup like that. Maybe someone else has more insight.

    You needed to delete that because it wasn't any good. You would have had to redownload the Activex anyway because the old one was corrupt. You won't have to download it again unless it gets corrupt again.
     
  15. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    So, what are we meant to do with this update then when seen in the logs 891711 ?

    Use Msconfig on it or delete it, but then they will be open to problems if we delete it?
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/331226

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice