Home > Hijackthis Log > Hijackthis Log Vcmain.exe Help

Hijackthis Log Vcmain.exe Help

Thank you.Logfile of HijackThis v1.99.1Scan saved at 12:55:46 PM, on 12/27/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\S24EvMon.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\ZCfgSvc.exeC:\Program Files\Network Associates\VirusScan\Avsynmgr.exeC:\WINDOWS\TWFkaGF2aSBOYXJ1bWFuY2hp\command.exeC:\Program Files\Cisco Systems\VPN Client\cvpnd.exeC:\WINDOWS\system32\LxrJD31s.exeC:\WINDOWS\System32\ncsvc.exeC:\WINDOWS\System32\RegSrvc.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\wdfmgr.exeC:\Program Files\Network Associates\VirusScan\VsStat.exeC:\WINDOWS\vyeebom.exeC:\Program Files\Network Associates\VirusScan\Vshwin32.exeC:\Program Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra 'Tools' My computer is slow---My Blog---Follow me on Twitter.My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!Asking for help Smartphone and mobile technology are rapidly taking over the spot that PCs have filled for a long time. http://pcialliance.org/hijackthis-log/hijackthis-exe-itself-is-not-opening-cant-able-to-get-the-hijackthis-log-file.html

L2mfix will continue to scan your computer and when it's finished, notepad will open with a log. Due to a few misunderstandings, I just want to make it clear that this site provides only an online analysis, and not HijackThis the program. New sub-forum for mobile tech - smartphones. Under "What to Scan?" make sure "Scan every file" is selected (default). https://forums.techguy.org/threads/hijackthis-log-vcmain-exe-help.428481/

or read our Welcome Guide to learn how to use this site. Click on "Save Report" to view all completed scans. Hijackthis Log: Please Help Diagnose Started by Linda_nf , Dec 01 2006 10:30 PM Please log in to reply 1 reply to this topic #1 Linda_nf Linda_nf Members 2 posts OFFLINE Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll (file missing) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [SO5 Integrator Pass Two] C:\WINDOWS\SOINTGR.EXE O4

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03 Copyright(C) 2002-2003 [email protected] Killing PID 492 'smss.exe' Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03 Copyright(C) 2002-2003 [email protected] Killing PID 564 'winlogon.exe' Command brendandonhu, Dec 27, 2005 #4 Piringa Thread Starter Joined: Sep 18, 2002 Messages: 494 It couldnt find it anymore I used several other programs in safe mode. Sign in to follow this Followers 0 hijackthis log need help Started by peteypablo, February 27, 2006 3 posts in this topic peteypablo Member New Member 1 post Posted February Select the file C:\DOCUME~1\ramiro\APPLIC~1\WINSET~1\theroad.exe and click Submit.

Your Display Name will now be the only name you have for the forum and, if you used your Username to log in, you will now need to use your Display This applies only to the original topic starter. Install ewido security suite When installing, under "Additional Options" uncheck.. After download, double click on the file to launch the install process. 2.

Register a free account to unlock additional features at BleepingComputer.com Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum. Exit AVG Anti-Spyware 7.5 when done - DO NOT perform a scan yet. Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy

Jump

successful Scanning First Pass. http://www.hijackthis.de/ Below is the HijackThis Log. Are you running an antivirus program? Site Changelog Community Forum Software by IP.Board Sign In Use Facebook Use Twitter Need an account?

Posted February 27, 2006 · Report post Hello,   You forgot to post the top of the hijackthislog. this content Several together can give you problems and decrease the reliability of it seriously! Several functions may not work. In order to find out what entries are nasty and what are installed by the user, you need some background information.A logfile is not so easy to analyze.

Under "Reports" select "Automatically generate report after every scan and UNcheck "Only if threats were found". 2. Paytime.exe (hijackthis Log: Please Help Diagnose?) Started by g_willy , Dec 28 2005 07:15 PM Please log in to reply 1 reply to this topic #1 g_willy g_willy Members 1 posts Sign In Sign In Remember me Not recommended on shared computers Sign in anonymously Sign In Forgot your password? weblink IMPORTANT: Do NOT run any other files in the l2mfix folder unless you are asked to do so!

Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exeO23 - Service: Lexar JD31 (LxrJD31s) - Unknown owner - C:\WINDOWS\SYSTEM32\LxrJD31s.exeO23 - Service: McShield - Unknown owner - C:\Program Files\Common Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: (no name) - {A80F2DB2-80A9-4834-8F5A-4AB70F4EF4C3} - C:\WINDOWS\systb.dll (file missing)O9 - Extra 'Tools' menuitem: IMI -

We will fix this in a moment.

Total of file sizes: 13,211,826 bytes 12.60 M Locate .tmp files: C:\WINDOWS\SYSTEM32\ guard.tmp Tue Dec 27 2005 7:41:42p ..S.R 233,675 228.20 K 1 item found: 1 file (1 H/S), 0 directories. Back to top #3 miekiemoes miekiemoes Malware Killer Dog Malware Response Team 19,420 posts OFFLINE Gender:Female Location:Belgium Local time:11:52 PM Posted 04 January 2006 - 11:02 AM Due to the Download and install AVG Anti-Spyware 7.5 (formerly Ewido) This is a 30 day trial of the program1. How do you make a permanent folder:   Click My Computer, then C:\ and then on Program Files.

Any help will be very much appreciated - THANKS!-------------------------------------------------------------------------------------------------------------------------Logfile of HijackThis v1.99.1Scan saved at 6:50:04 PM, on 12/28/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec If you receive a message from your firewall about this program accessing the internet please allow it.   If you receive a runtime error '339' please download MSWINSCK.OCX from the link It is likely that everyone who visits after the upgrade will need to log in again, so please keep this in mind.   Update again - Feb 7 - We have check over here Restoring Windows Update Certificates.: The following Is the Current Export of the Winlogon notify key: **************************************************************************** Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\ 6c,00,00,00 "Logoff"="ChainWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows

Turn your computer back on. Before we start, you need to realise that you are missing one important program on that computer: An antivirus. Do not use it yet.   Please download Ewido anti-malware ; it is a free version of the program. We will fix this in a moment.   [*]You will need to update ewido to the latest definition files.

The main "Status" menu will appear. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Read here how to unzip/extract properly: http://metallica.geekstogo.com/xpcompressedexplanation.html Create a permanent folder and move hijackthis.exe into it. Several functions may not work.

Sorry about the double post, I was just desperate.