artist Posted January 12, 2005 Report Share Posted January 12, 2005 This seems a lot to me?What do you all think?I'm wondering if the M/S firewall is the problem?Maybe I should get Z/A again?Trojan horse Proxy.13.AD just found on an AVG scan. Quote Link to comment Share on other sites More sharing options...
expertec Posted January 12, 2005 Report Share Posted January 12, 2005 If you do get a new firewall, go for Sygate not Zonealarm. Quote Link to comment Share on other sites More sharing options...
-pops- Posted January 12, 2005 Report Share Posted January 12, 2005 I'll back that - Sygate is by far the better firewall. Quote Link to comment Share on other sites More sharing options...
scuzzman Posted January 13, 2005 Report Share Posted January 13, 2005 I actually prefer ZA - the Microsoft firewall, in my experience, doesn't really do anything. Quote Link to comment Share on other sites More sharing options...
artist Posted January 13, 2005 Author Report Share Posted January 13, 2005 Can I stop those pop up messages in Sygate? Quote Link to comment Share on other sites More sharing options...
nellie2 Posted January 13, 2005 Report Share Posted January 13, 2005 what pop up messages? Quote Link to comment Share on other sites More sharing options...
artist Posted January 13, 2005 Author Report Share Posted January 13, 2005 Constantly telling me that something is trying to get access- Some I recognise as spyware. Quote Link to comment Share on other sites More sharing options...
Scarecrow Man Posted January 13, 2005 Report Share Posted January 13, 2005 Post a HijackThis log. Something may be trying to "phone home" Quote Link to comment Share on other sites More sharing options...
artist Posted January 13, 2005 Author Report Share Posted January 13, 2005 Post a HijackThis log. Something may be trying to "phone home"How? Quote Link to comment Share on other sites More sharing options...
artist Posted January 13, 2005 Author Report Share Posted January 13, 2005 I just found a box to tick for hiding notification - Hope it's gone now. :blush: Quote Link to comment Share on other sites More sharing options...
scuzzman Posted January 14, 2005 Report Share Posted January 14, 2005 There's still a rogue program trying to access the internet - it's just no longer telling you about it. It may (very good chance) be another virus or piece of malware. I urge you to post a HiJackThis log. Quote Link to comment Share on other sites More sharing options...
artist Posted January 14, 2005 Author Report Share Posted January 14, 2005 Logfile of HijackThis v1.99.0Scan saved at 09:24:35, on 14/01/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Sygate\SPF\smc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\AnalogX\CookieWall\cookie.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\WINDOWS\system32\tblmouse.exeC:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeC:\Program Files\Wireless Device\Wireless Keyboard\Magickey.exeC:\Program Files\Wireless Device\Wireless Mouse\MouseAp.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\System32\GEARSEC.EXEC:\Program Files\Wireless Device\Wireless Keyboard\osd.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Wt32exe.exeC:\Program Files\Internet Explorer\iexplore.exeC:\DOCUME~1\Munt\LOCALS~1\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exeO2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (file missing)O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dllO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - Global Startup: Enable Wireless Keyboard Driver.lnk = C:\Program Files\Wireless Device\Wireless Keyboard\Magickey.exeO4 - Global Startup: Enable Wireless Optical Mouse Driver.lnk = C:\Program Files\Wireless Device\Wireless Mouse\MouseAp.exeO8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.htmlO8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.htmlO8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.htmlO8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.htmlO8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.htmlO9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\ieSpell.dllO9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\ieSpell.dllO9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\ieSpell.dllO9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\ieSpell.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dllO12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dllO12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dllO16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CABO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409O23 - Service: AVG7 alert Manager Server - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSEC.EXEO23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: Sandra Data Service - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005\RpcDataSrv.exeO23 - Service: Sandra Service - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005\RpcSandraSrv.exeO23 - Service: Sygate Personal Firewall - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exeO23 - Service: Tablet Service - Aiptek - C:\WINDOWS\system32\Wt32exe.exeWell here it is - what do you think? Quote Link to comment Share on other sites More sharing options...
expertec Posted January 14, 2005 Report Share Posted January 14, 2005 Looks clean, but you can fix this: O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (file missing) Quote Link to comment Share on other sites More sharing options...
artist Posted January 14, 2005 Author Report Share Posted January 14, 2005 Looks clean, but you can fix this: O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (file missing)How would I do that? Quote Link to comment Share on other sites More sharing options...
expertec Posted January 14, 2005 Report Share Posted January 14, 2005 Scan again with Hijackthis, put a tick against that entry, click "Fix Checked". :) Quote Link to comment Share on other sites More sharing options...
artist Posted January 14, 2005 Author Report Share Posted January 14, 2005 Thanks :flowers: Quote Link to comment Share on other sites More sharing options...
artist Posted January 14, 2005 Author Report Share Posted January 14, 2005 :huh: It said it was going to remove the file????I thought there was a file MISSING??? Quote Link to comment Share on other sites More sharing options...
expertec Posted January 14, 2005 Report Share Posted January 14, 2005 The file is missing, HJT just removed the registry entry thatpointed to the missing file. Quote Link to comment Share on other sites More sharing options...
artist Posted January 14, 2005 Author Report Share Posted January 14, 2005 Ahhh................ :blink: :D Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.