« previous next »
Pages: [1]

Author Topic: Services Admin Tool Problems  (Read 697 times)

Offline Hybrid

  • Full Member
  • ***
  • Posts: 183
  • Karma: +0/-0
    • View Profile
Services Admin Tool Problems
« on: May 08, 2007, 03:21:26 PM »
Well its like this, i recently had a subseven attack on my pc...dont ask me how...well i thought i deleted it after scanning with norton and AVG it was 2 trojans...i have deleted them then i ran a spyware scan, i found 230 spyware 227 of them cookies and 3 trojans...i have deleted them and now in controlpanel/administrativetools/services i cannot keep services such as windows audio, wireless zero, network connections, themes. I start them up and they are on automatic but then they turn off...

recently now my startup on my pc is very slow despite having dual core, 1gig RAM, defraged frequently and cleaned.


Heres your log file if this helps

Logfile of HijackThis v1.99.1
Scan saved at 9:13:37 PM, on 5/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\samsung\Samsung Network Manager\SNMWLANService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Samsung\AVStation Premium 3.75\AVSAgent.exe
C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
C:\Program Files\SAMSUNG\MagicKBD\MagicKBD.exe
C:\Program Files\Samsung\DisplayManager\dmhkcore.exe
C:\Program Files\Samsung\DisplayManager\DisplayManager.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\vsnpstd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe

I NEED HELP BADLY!
Logged
[color=\"#006400\"]I AM A SCAMMER! BAN ME PLEASE![/color][color=\"#48d1cc\"][color=\"#000080\"]

 [/color][/color][color=\"#0000ff\"]Transactions[/color]

 [color=\"red\"][color=\"red\"]Traded level 70 main for level 53 ancient to danielisew UNSUCCESSFULL

Bought level 60 ancient/range hybrid off jaamal UNSUCCESSFUL - he recovered next day

Bought level 86 main and pure ranger of MR.SANTA - Sent false details. Scammed. Left ttg. STILL OWES ME RANGER.

[/color][color=\"#000080\"][color=\"#00ff00\"] Bought lvl 40str pure off BloodSplatter SUCCESSFUL --- TRUSTED

 Transfered Items for BloodSplatter  SUCCESSFUL

Sold sig to DeScReTe GoD - SUCCESSFUL- He went first - NO MM

Sold sig to FagexFun.-  SUCCESSFUL - I went first - NO MM - this guy is fishy. <[email protected]> and <[email protected]> both the same guy

Sold 2 sigs 200k to ttg forum ownage - took a while - SUCCESSFUL

Sold lvl 30 skiller to Holes 2mil - He went first NO MM - SUCCESSFUL - Trusted

Sharing acc's with 4rrows k1ss - TRUSTED - SO FAR SO GOOD -



[/color]

[color=\"#000080\"][color=\"#0000ff\"]Freebies[/color]

[color=\"#00ff00\"]Gave free sig to BloodSplatter

Gave free sig to 4rrow k1ss - he gave me a pixel - i put stuff on it.



[/color][/color][/color][/color]SCAMMERS - These guys are assh0les. Dont trust em with a penny

1. Jaamal

2. MR.SANTA - ASS SCAMMING NUB - DONT BUY FROM HIM.



Trusted -

1. BloodSplatter

2. Holes - Hes a nice guy.

3. 4rrows k1ss sucks n0b.



I DONT BUY OR SELL MILLS SO DONT ASK.



My MSN: [email protected] <--------------- ADD THIS ONE

and my other one: psychic-elemental@Email Removed.co.uk - i dont really use this one



anything else it aint me.

[color=\"red\"]









[/color]

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Services Admin Tool Problems
« Reply #1 on: May 08, 2007, 03:46:55 PM »
I see that you may be running more than one Anti-Virus software at the same time
Running more than one can cause conflicts and produce system instabilites
I suggest, you keep the one your happiest with
Either Norton's or AVG
UNinstall one or the other
Reboot your computer

Afterwards, post a fresh hijackthis log
I need to see the whole log, you only supplied part of it

"Do a SCAN and Save a Log file"
A log will open in Notepad

To copy and paste the Whole log
You can use these steps
In the Hijackthis log>>Click EDIT at the top
and then SELECT ALL
Then EDIT and select COPY
Come back here and PASTE to your reply
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Offline Hybrid

  • Full Member
  • ***
  • Posts: 183
  • Karma: +0/-0
    • View Profile
Services Admin Tool Problems
« Reply #2 on: May 09, 2007, 11:02:43 AM »
i thought i did post the whole lot but i didnt go to select all...currently uninstalling norton. wish me luck!
Logged
[color=\"#006400\"]I AM A SCAMMER! BAN ME PLEASE![/color][color=\"#48d1cc\"][color=\"#000080\"]

 [/color][/color][color=\"#0000ff\"]Transactions[/color]

 [color=\"red\"][color=\"red\"]Traded level 70 main for level 53 ancient to danielisew UNSUCCESSFULL

Bought level 60 ancient/range hybrid off jaamal UNSUCCESSFUL - he recovered next day

Bought level 86 main and pure ranger of MR.SANTA - Sent false details. Scammed. Left ttg. STILL OWES ME RANGER.

[/color][color=\"#000080\"][color=\"#00ff00\"] Bought lvl 40str pure off BloodSplatter SUCCESSFUL --- TRUSTED

 Transfered Items for BloodSplatter  SUCCESSFUL

Sold sig to DeScReTe GoD - SUCCESSFUL- He went first - NO MM

Sold sig to FagexFun.-  SUCCESSFUL - I went first - NO MM - this guy is fishy. <[email protected]> and <[email protected]> both the same guy

Sold 2 sigs 200k to ttg forum ownage - took a while - SUCCESSFUL

Sold lvl 30 skiller to Holes 2mil - He went first NO MM - SUCCESSFUL - Trusted

Sharing acc's with 4rrows k1ss - TRUSTED - SO FAR SO GOOD -



[/color]

[color=\"#000080\"][color=\"#0000ff\"]Freebies[/color]

[color=\"#00ff00\"]Gave free sig to BloodSplatter

Gave free sig to 4rrow k1ss - he gave me a pixel - i put stuff on it.



[/color][/color][/color][/color]SCAMMERS - These guys are assh0les. Dont trust em with a penny

1. Jaamal

2. MR.SANTA - ASS SCAMMING NUB - DONT BUY FROM HIM.



Trusted -

1. BloodSplatter

2. Holes - Hes a nice guy.

3. 4rrows k1ss sucks n0b.



I DONT BUY OR SELL MILLS SO DONT ASK.



My MSN: [email protected] <--------------- ADD THIS ONE

and my other one: psychic-elemental@Email Removed.co.uk - i dont really use this one



anything else it aint me.

[color=\"red\"]









[/color]

Offline Hybrid

  • Full Member
  • ***
  • Posts: 183
  • Karma: +0/-0
    • View Profile
Services Admin Tool Problems
« Reply #3 on: May 09, 2007, 11:22:49 AM »
[quote name=\'psychicelemental\' post=\'323632\' date=\'May 9 2007, 10:02 AM\']i thought i did post the whole lot but i didnt go to select all...currently uninstalling norton. wish me luck![/quote]

wow...so far so good...

Logfile of HijackThis v1.99.1
Scan saved at 5:15:38 PM, on 5/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\samsung\Samsung Network Manager\SNMWLANService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Samsung\AVStation Premium 3.75\AVSAgent.exe
C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
C:\Program Files\Samsung\DisplayManager\DisplayManager.exe
C:\PROGRA~1\SYMNET~1\SNDMon.exe
C:\Program Files\Samsung\DisplayManager\dmhkcore.exe
C:\WINDOWS\vsnpstd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Xerox One Touch\OneTouchMon.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\SAMSUNG\MagicKBD\MagicKBD.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\MsiExec.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\MsiExec.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Documents and Settings\Laurence Smyth\Desktop\HijackThis.exe
C:\Program Files\Symantec\LiveUpdate\AUpdate.exe
C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IDSinst.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.huddi.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [EDS] C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [AVStation Premium 3.75] C:\Program Files\Samsung\AVStation Premium 3.75\AVSAgent.exe
O4 - HKLM\..\Run: [MagicKeyboard] C:\Program Files\SAMSUNG\MagicKBD\PreMKBD.exe
O4 - HKLM\..\Run: [RestoreIT!] "C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE" VBStart
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [BatteryManager] C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
O4 - HKLM\..\Run: [DMHotKey] C:\Program Files\Samsung\DisplayManager\DMLoader.exe
O4 - HKLM\..\Run: [DisplayManager] C:\Program Files\Samsung\DisplayManager\DisplayManager.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [OneTouch Monitor] "C:\Program Files\Xerox One Touch\OneTouchMon.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BlueSoleil.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} (VideoEgg ActiveX Loader) - http://update.videoegg.com/Install/Windows...ggPublisher.exe
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Samsung Update Plus - Unknown owner - C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe
O23 - Service: SNM WLAN Service - Unknown owner - C:\Program Files\samsung\Samsung Network Manager\SNMWLANService.exe

thats all i have got...thanks guestolo...youre doing a grand job

still doesnt sort out the slowish startup but i can live with that...thanks guest!
Logged
[color=\"#006400\"]I AM A SCAMMER! BAN ME PLEASE![/color][color=\"#48d1cc\"][color=\"#000080\"]

 [/color][/color][color=\"#0000ff\"]Transactions[/color]

 [color=\"red\"][color=\"red\"]Traded level 70 main for level 53 ancient to danielisew UNSUCCESSFULL

Bought level 60 ancient/range hybrid off jaamal UNSUCCESSFUL - he recovered next day

Bought level 86 main and pure ranger of MR.SANTA - Sent false details. Scammed. Left ttg. STILL OWES ME RANGER.

[/color][color=\"#000080\"][color=\"#00ff00\"] Bought lvl 40str pure off BloodSplatter SUCCESSFUL --- TRUSTED

 Transfered Items for BloodSplatter  SUCCESSFUL

Sold sig to DeScReTe GoD - SUCCESSFUL- He went first - NO MM

Sold sig to FagexFun.-  SUCCESSFUL - I went first - NO MM - this guy is fishy. <[email protected]> and <[email protected]> both the same guy

Sold 2 sigs 200k to ttg forum ownage - took a while - SUCCESSFUL

Sold lvl 30 skiller to Holes 2mil - He went first NO MM - SUCCESSFUL - Trusted

Sharing acc's with 4rrows k1ss - TRUSTED - SO FAR SO GOOD -



[/color]

[color=\"#000080\"][color=\"#0000ff\"]Freebies[/color]

[color=\"#00ff00\"]Gave free sig to BloodSplatter

Gave free sig to 4rrow k1ss - he gave me a pixel - i put stuff on it.



[/color][/color][/color][/color]SCAMMERS - These guys are assh0les. Dont trust em with a penny

1. Jaamal

2. MR.SANTA - ASS SCAMMING NUB - DONT BUY FROM HIM.



Trusted -

1. BloodSplatter

2. Holes - Hes a nice guy.

3. 4rrows k1ss sucks n0b.



I DONT BUY OR SELL MILLS SO DONT ASK.



My MSN: [email protected] <--------------- ADD THIS ONE

and my other one: psychic-elemental@Email Removed.co.uk - i dont really use this one



anything else it aint me.

[color=\"red\"]









[/color]

Offline Hybrid

  • Full Member
  • ***
  • Posts: 183
  • Karma: +0/-0
    • View Profile
Services Admin Tool Problems
« Reply #4 on: May 09, 2007, 11:23:50 AM »
new problem...i cannot start my firewall...
Logged
[color=\"#006400\"]I AM A SCAMMER! BAN ME PLEASE![/color][color=\"#48d1cc\"][color=\"#000080\"]

 [/color][/color][color=\"#0000ff\"]Transactions[/color]

 [color=\"red\"][color=\"red\"]Traded level 70 main for level 53 ancient to danielisew UNSUCCESSFULL

Bought level 60 ancient/range hybrid off jaamal UNSUCCESSFUL - he recovered next day

Bought level 86 main and pure ranger of MR.SANTA - Sent false details. Scammed. Left ttg. STILL OWES ME RANGER.

[/color][color=\"#000080\"][color=\"#00ff00\"] Bought lvl 40str pure off BloodSplatter SUCCESSFUL --- TRUSTED

 Transfered Items for BloodSplatter  SUCCESSFUL

Sold sig to DeScReTe GoD - SUCCESSFUL- He went first - NO MM

Sold sig to FagexFun.-  SUCCESSFUL - I went first - NO MM - this guy is fishy. <[email protected]> and <[email protected]> both the same guy

Sold 2 sigs 200k to ttg forum ownage - took a while - SUCCESSFUL

Sold lvl 30 skiller to Holes 2mil - He went first NO MM - SUCCESSFUL - Trusted

Sharing acc's with 4rrows k1ss - TRUSTED - SO FAR SO GOOD -



[/color]

[color=\"#000080\"][color=\"#0000ff\"]Freebies[/color]

[color=\"#00ff00\"]Gave free sig to BloodSplatter

Gave free sig to 4rrow k1ss - he gave me a pixel - i put stuff on it.



[/color][/color][/color][/color]SCAMMERS - These guys are assh0les. Dont trust em with a penny

1. Jaamal

2. MR.SANTA - ASS SCAMMING NUB - DONT BUY FROM HIM.



Trusted -

1. BloodSplatter

2. Holes - Hes a nice guy.

3. 4rrows k1ss sucks n0b.



I DONT BUY OR SELL MILLS SO DONT ASK.



My MSN: [email protected] <--------------- ADD THIS ONE

and my other one: psychic-elemental@Email Removed.co.uk - i dont really use this one



anything else it aint me.

[color=\"red\"]









[/color]

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Services Admin Tool Problems
« Reply #5 on: May 09, 2007, 09:01:30 PM »
Although the log doesn't look that bad, can you do the following for me please

A few tools, all don't take much time to run
Download [color=\"red\"]SDFix[/color] and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Reboot your computer into Safe Mode. To boot into Safe Mode, please restart your computer. Tap F8 before Windows loads. Select Safe Mode on the top of the screen that appears.
Sign in with your normal user account

SDFix
Go to START>>My Computer>>Double click to open the C:\ folder
  • Open the extracted SDFix folder and double click RunThis.bat to start the script.
  • Type Y to begin the cleanup process.
  • It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
  • Press any Key and it will restart the PC.
  • When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
  • Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
I'll need to see that log later

Afterwards:
Download NoLop to your desktop from one of the links below...
http://www.spywareedge.net/nolop/NoLop.exe
http://www.spywaretimes.com/To...3ca2625ab6208a197bcc5/
http://www.thespykiller.co.uk/...action=tpmod;dl=item16
Note that it will require a reboot so close all open windows.
  • Double click NoLop.exe to run it
  • Now click the button labelled "Search and Destroy"

    <<your computer will now be scanned for infected files>>

  • When scanning is finished you will be prompted to reboot only if infected, Click OK
  • Now click the "REBOOT" Button.
  • A Message should popup from NoLop. If not, double click the program again and it will finish
1. Can you post the log from NoLop located here >>>> C:\NoLop.txt
2. Can you post a fresh hijackthis log
3. Post the report from SDFix
4. Can you also
Download fl.zip
Extract the contents to a new folder on Desktop.
Within the folder, locate & double-click fl.bat.
It should produce a report at c:\findlop.txt. Post the contents of the report in your next reply.

NOTE: Did you decide to hold onto AVG and remove Nortons'???
Just enquiring
I still see remnans of Nortons installed, do you have other products by Symantec's installed besides the AntiVirus??
« Last Edit: May 09, 2007, 09:03:48 PM by guestolo »
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Pages: [1]
« previous next »