imadreamer2
June 18th, 2006, 10:18 AM
In case any one is interested, here is a copy of hijack this report from my vista partition. Got brave and installed, did get a error that said it couldn't access the host file, didn't know there was one cause I couldn't find it yet but didn't do too extensive of a search yet. And there was another that said
An unexpected error has occurred at procedure:
modMain_CheckOther1Item()
Error #75 - Path/File access error
Please email me at merijn@spywareinfo.com, reporting the following:
* What you were trying to fix when the error occurred, if applicable
* How you can reproduce the error
* A complete HijackThis scan log, if possible
Windows version: Windows NT 6.00.1288
MSIE version: 7.0.5384.4
HijackThis version: 1.99.1
This message has been copied to your clipboard.
Click OK to continue the rest of the scan.
But it didn't freeze the system or knock anything out at least not yet anyway. Maybe on reboot there will be a problem but not yet anyway.
Logfile of HijackThis v1.99.1
Scan saved at 2:24:30 AM, on 6/18/2006
Platform: Unknown Windows (WinNT 6.00.1288)
MSIE: Internet Explorer v7.00 (7.00.5384.0004)
Running processes:
F:\Windows\Explorer.EXE
F:\Windows\system32\taskeng.exe
F:\Program Files\Windows Defender\MSASCui.exe
F:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRid.exe
F:\Windows\System32\p2phost.exe
F:\Windows\system32\wuauclt.exe
F:\hijackthis\HijackThis1991.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lurkhere.com/forum600.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: "F:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
O4 - HKLM\..\Run: "F:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: "F:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKCU\..\Run: F:\Windows\system32\p2phost.exe -s
O10 - Unknown file in Winsock LSP: f:\windows\system32\napinsp.dll
O11 - Options group: International*
O15 - Trusted Zone: http://www.lurkhere.com
O15 - Trusted Zone: http://home.mchsi.com
O15 - Trusted Zone: http://*.newlifesouthernbaptist.com
O15 - Trusted Zone: http://discussions.virtualdr.com
O15 - Trusted Zone: http://www.wilderssecurity.com
O23 - Service: CAISafe - Computer Associates International, Inc. - F:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - F:\Windows\System32\LEXBCES.EXE
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - F:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
An unexpected error has occurred at procedure:
modMain_CheckOther1Item()
Error #75 - Path/File access error
Please email me at merijn@spywareinfo.com, reporting the following:
* What you were trying to fix when the error occurred, if applicable
* How you can reproduce the error
* A complete HijackThis scan log, if possible
Windows version: Windows NT 6.00.1288
MSIE version: 7.0.5384.4
HijackThis version: 1.99.1
This message has been copied to your clipboard.
Click OK to continue the rest of the scan.
But it didn't freeze the system or knock anything out at least not yet anyway. Maybe on reboot there will be a problem but not yet anyway.
Logfile of HijackThis v1.99.1
Scan saved at 2:24:30 AM, on 6/18/2006
Platform: Unknown Windows (WinNT 6.00.1288)
MSIE: Internet Explorer v7.00 (7.00.5384.0004)
Running processes:
F:\Windows\Explorer.EXE
F:\Windows\system32\taskeng.exe
F:\Program Files\Windows Defender\MSASCui.exe
F:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRid.exe
F:\Windows\System32\p2phost.exe
F:\Windows\system32\wuauclt.exe
F:\hijackthis\HijackThis1991.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lurkhere.com/forum600.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: "F:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
O4 - HKLM\..\Run: "F:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: "F:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKCU\..\Run: F:\Windows\system32\p2phost.exe -s
O10 - Unknown file in Winsock LSP: f:\windows\system32\napinsp.dll
O11 - Options group: International*
O15 - Trusted Zone: http://www.lurkhere.com
O15 - Trusted Zone: http://home.mchsi.com
O15 - Trusted Zone: http://*.newlifesouthernbaptist.com
O15 - Trusted Zone: http://discussions.virtualdr.com
O15 - Trusted Zone: http://www.wilderssecurity.com
O23 - Service: CAISafe - Computer Associates International, Inc. - F:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - F:\Windows\System32\LEXBCES.EXE
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - F:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)