Please check my Hijackthis log

Discussion in 'System Security & Infection Support' started by Snowwolf, Aug 28, 2004.

  1. Snowwolf

    Snowwolf

    Joined:
    Aug 28, 2004
    Messages:
    2
    Likes Received:
    0
    Location:
    CA
    Recently i've had add pop up problems and it was really annoying. After doing some research I installed spybot/cwshredder/adaware and was able to clean up the pop ups and wintools/wsup.exe now my comp seems to be fine except for some lag spikes issues, not sure if it's worm or isp problem. So it'd be great if you can please check my hijackthis log to see if my computer's now clean. thx for your time ^^

    Logfile of HijackThis v1.98.2
    Scan saved at 11:41:43 AM, on 8/28/2004
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\CTHELPER.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\2Wire\2PortalMon.exe
    C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
    C:\Program Files\ByteGems.com\I Hate This Key\ihtk.exe
    C:\Fraps\fraps.exe
    C:\Program Files\mIRC\mirc.exe
    C:\Program Files\Azureus\Azureus.exe
    C:\Program Files\Java\j2re1.4.2_05\bin\javaw.exe
    C:\Documents and Settings\Wayne Choi\Desktop\HijackThis.exe
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
    O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\2PortalMon.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [IHateThisKey] C:\Program Files\ByteGems.com\I Hate This Key\ihtk.exe
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: Yahoo! Blackjack - http://download.games.yahoo.com/games/clients/y/jt0_x.cab
    O16 - DPF: Yahoo! Chinese Checkers - http://download.games.yahoo.com/games/clients/y/cct0_x.cab
    O16 - DPF: Yahoo! MahJong - http://download.games.yahoo.com/games/clients/y/ot0_x.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1093111164562
    O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptemplates/ActiveSecurity.cab
     
    Snowwolf, Aug 28, 2004
    #1
    1. Advertisements

  2. Snowwolf

    Fenis-Wolf VIP Member

    Joined:
    Apr 30, 2003
    Messages:
    2,951
    Likes Received:
    35
    Location:
    Ann Arbor, Mi
    :\WINDOWS\system32\CTHELPER.EXE
    Check these:
    C:\Program Files\2Wire\2PortalMon.exe
    O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
    O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\2PortalMon.exe
    O4 - HKCU\..\Run: [IHateThisKey] C:\Program Files\ByteGems.com\I Hate This Key\ihtk.exe
     
    Fenis-Wolf, Aug 28, 2004
    #2
    1. Advertisements

  3. Snowwolf

    Snowwolf

    Joined:
    Aug 28, 2004
    Messages:
    2
    Likes Received:
    0
    Location:
    CA
    wow thx for the quick reply. You are telling me to check the 3 things and fix it with hijackthis? um, will it delete those selected programs?

    i am not sure what the cthelper is, but the 2wire portal thing is a program came from my isp setup cd, i hate this key is just a program to disable window key. will it help my pc by checking those 3 items? thx.
     
    Snowwolf, Aug 28, 2004
    #3
  4. Snowwolf

    Fenis-Wolf VIP Member

    Joined:
    Apr 30, 2003
    Messages:
    2,951
    Likes Received:
    35
    Location:
    Ann Arbor, Mi
    Well probably not. I've never heard of 2wire portal, or ihatethiskey. I just did a google search for cthelper, and its a driver 'helper' program from creative.
    You should try Crap Cleaner, which is in the Handy Tools section. It'll clean up your registry, and might speed things up.
     
    Fenis-Wolf, Aug 28, 2004
    #4
  5. Snowwolf

    Grinler

    Joined:
    Aug 28, 2004
    Messages:
    4
    Likes Received:
    0
    Location:
    US
    SP2 ... daring :)

    Do you know what this program is?
    O4 - HKCU\..\Run: [IHateThisKey] C:\Program Files\ByteGems.com\I Hate This Key\ihtk.exe
     
    Grinler, Aug 29, 2004
    #5
  6. Snowwolf

    Phil VIP Member

    Joined:
    Dec 20, 2003
    Messages:
    959
    Likes Received:
    14
    Location:
    Ontario, Canada
    Im assuming it does just what he said, doesnt let you use the Windows Key.
     
    Phil, Aug 29, 2004
    #6
  7. Snowwolf

    Grinler

    Joined:
    Aug 28, 2004
    Messages:
    4
    Likes Received:
    0
    Location:
    US
    Ahh..missed that. Then there is nothing in that log that is bad
     
    Grinler, Aug 29, 2004
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.