Home > Windows 98 > Windows 98 SE HijackThis Log

Windows 98 SE HijackThis Log

Login now. It seems the files don't occupy space,but I just hate to strike 10 times page down to browse my files in C:\windows. When looking around my C:\windows file I noticed a lot of .TMP files with apparently random names, of 0 kb and coupled in pairs by the last modified date. Make sure all browser and all Windows Explorer windows are closed before fixing: F1 - win.ini: run=fntldr.exe O2 - BHO: (no name) - {D714A94F-123A-45CC-8F03-040BCAF82AD6} - C:\WINDOWS\DOWNLOADED PROGRAM FILES\SBCIE028.DLL O2 - BHO: http://internetpasswordpro.com/windows-98/windows-98-browser-hijacked-need-help-with-reading-hijackthis-log.html

Then I rebooted in Normal Mode, checked all the malicious entries in HJT log,hit fix and then did a third reboot. Register now! Uninstall anything to do with: C:\Program Files\Crystal Ball\CB Predictor\terminator.exe C:\Program Files\ADS Technologies\Channel Surfer TV\ChxInit.exe Press ctrl/alt/del and in Taskmanager try to STOP all the xxx.exe from the O4 - group below. They have only the General tab in properties. official site

If you have any suggestions or observations about this log please post them. All rights reserved. It seems to clean alot of the stuff up, but still have the browser hijacker. Boot in Safe Mode.

Register a free account to unlock additional features at BleepingComputer.com Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Register now to gain access to all of our features, it's FREE and only takes one minute. Look through the Properties tabs for any identifying information such as the name of the company which made the file; let us know what you find (or don't find). Thanks again.

It seems like my computer is always busy doing his things and when I try to do mine it blocks and have to use the ctrl+alt+del to turn off some backgroud on the Task Bar STIMON.EXE - Windows' Still Image Monitor; camera, scanner, etc. Look for the following items and click in the checkbox in front of each item to select it:R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://c:\windows\TEMP\se.dll/spage.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://c:\windows\TEMP\se.dll/spage.htmlO4 - https://forums.spybot.info/showthread.php?56442-Help-with-HijackThis-Log-windows-98 Feb 17, 2005 #3 RealBlackStuff TS Rookie Posts: 6,503 Where have you been surfing?

Sign In Sign Up Browse Back Browse Forums Guidelines Staff Online Users Members Activity Back Activity All Activity My Activity Streams Unread Content Content I Started Search Malwarebytes.com Back Malwarebytes.com Malwarebytes Apr 1, 2005 #10 Laurno2 TS Rookie Topic Starter Lost Log It was attached, I swear. For reasons I have detailed elsewhere on Daniweb, there is no way in hell we will consider a Dell system. ... I believe there must be some other file in charge that has to be deleted.

  • If so, see if there's any helpful information within the found key.
  • Join the community here, it only takes a minute.
  • Hijackthis Log Started by krayz , Nov 01 2004 04:24 PM This topic is locked #1 krayz Posted 01 November 2004 - 04:24 PM krayz Member Member 12 posts Would some
  • The spool.exe and spoolsrv32.exe are in the log.
  • Sign In Sign In Remember me Not recommended on shared computers Sign in anonymously Sign In Forgot your password?
  • Now have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked.
  • That's what the forums are here for.
  • All Rights Reserved.
  • I can't get Simple Toolbar to uninstall and I have no idea what the WexTech thing is.

Ask a question and give support. http://www.techspot.com/community/topics/need-help-reviewing-hijackthis-log.21459/ I have scanned my Win 98 computer with Ad-ware SE and Spybot S&D. Since I got hijacked I noticed that I can connect at 33600 bps instead of the previous 44000 pbs. Apr 2, 2005 #12 (You must log in or sign up to reply here.) Show Ignored Content Topic Status: Not open for further replies.

Sign In All Activity Home Privacy Policy Contact Us Back to Top Malwarebytes Community Software by Invision Power Services, Inc. × Existing user? Get More Info Site Changelog Community Forum Software by IP.Board Sign In Use Facebook Use Twitter Need an account? See Below... Jump to content FacebookTwitter Geeks to Go Forum Retired Forums Windows 98, 95, ME Welcome to Geeks to Go - Register now for FREE Geeks To Go is a helpful hub,

I'm also getting reports on my anit-virus regarding SE.DLL being deleted. Error code: 2S136/C Contact Us Existing user? If you have an Explorer window open, do the following Click in the address bar to the right of the ... http://internetpasswordpro.com/windows-98/windows-98-client-using-windows-server-2000.html Thanks.

Repeat the above for each of the 32-digit strings in the other suspect files. It's an application of about 46k and was created on 01/20/05.(the day I noticed my system was slowing down).It's not a hidden file and this is all about it. You may also...

Use IE only for Windows98-updates (if still available).

Are they still there? Several functions may not work. Click on Config and then click on Miscellaneous Tools. Messenger - {REGISTRY_IDENTIFIER} - {DRIVE}\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE UnnecessaryDangerousUnknownSafe O9 - Extra 'Tools' menuitem: Yahoo!

Terms of Service - Privacy Policy - Contact Please click here if you are not redirected within a few seconds. Messenger - {REGISTRY_IDENTIFIER} - {DRIVE}\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE O9 - Extra 'Tools' menuitem: Yahoo! Jump to content Sign In Create Account Search Advanced Search section: This topic Forums Members Help Files Calendar View New Content Forum Rules BleepingComputer.com Forums Members Tutorials Startup List this page Go to delete a file on reboot and enter c:\windows\tcplddh.exe; when prompted to reboot choose yes.

Looking around my C:\windows I found more of these files. InCd.exe is a software I have installed with my cd-dvd writer) Running processes: KERNEL32.DLL - Windows Dynamic Link Library file MSGSRV32.EXE - Windows file; handles 32-bit system messaging services MPREXE.EXE - I don't recall going to any random websites so I don't know how all of that crap got on my computer in the first place before the switch. It was loaded with Windows 7 but came witha Windows 10 disk and ...

Feb 21, 2005 #6 Laurno2 TS Rookie Topic Starter simple toolbar When I tried to use DrDelete it couldn't find NTOSV.DLL, I didn't see it in the wondows/system directory either so Spool.exe is in the my latest run of HijackThis, I saw spoolsrv32 next to spool in the windows/system directory and I saw Cox block scagent from accessing the internet. The log now looks like this: Logfile of HijackThis v1.99.0 Scan saved at 4.35.14, on 25/01/05 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE Join the community!

If they do not show up in the HJT-log, tell us where they are located on your PC. I rebooted in Safe Mode my Win 98 system and deleted the strange files from C:\windows. Please use them so that others may benefit from your questions and the responses you receive.OldTimer Back to top #3 chilimac chilimac Topic Starter Members 4 posts OFFLINE Local time:11:52