To bcastner

[cbmudd]

I dont know what happend to the post. It got deleated. but here is my hijack this log file.

The only thing I see is the Extra button with no name.
and this entry
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class)

Do you see anything else

Logfile of HijackThis v1.99.0
Scan saved at 1:02:20 AM, on 1/19/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
F:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Belkin Bulldog\upsd.exe
F:\WINDOWS\Explorer.EXE
F:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
F:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
F:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
F:\Documents and Settings\Editor Steve\Start Menu\Programs\Startup\Alarm Clock.exe
F:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe
F:\Documents and Settings\Editor Steve\My Documents\Downloads\Hijack this\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://webpages.charter.net/recoveryresources/index.html

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =

http://windowsupdate.microsoft.com/

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [AVG7_CC] F:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] F:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [WinPatrol] F:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - Startup: Alarm Clock.exe
O8 - Extra context menu item: &Copy Location - F:\WINDOWS\WEB\graburl.htm
O9 - Extra button: (no name) - {B06300D0-CCDE-11d2-92D3-0000F87A4A55} - F:\WINDOWS\system32\webzone.dll
O9 - Extra 'Tools' menuitem: Add to R&estricted Zone - {B06300D0-CCDE-11d2-92D3-0000F87A4A55} - F:\WINDOWS\system32\webzone.dll
O9 - Extra button: (no name) - {BF80219A-CCDD-11d2-92D3-0000F87A4A55} - F:\WINDOWS\system32\webzone.dll
O9 - Extra 'Tools' menuitem: Add to Tr&usted Zone - {BF80219A-CCDD-11d2-92D3-0000F87A4A55} - F:\WINDOWS\system32\webzone.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Offline - {FC09D8A3-C85A-11d2-92D0-0000F87A4A55} - F:\WINDOWS\system32\oline.dll
O15 - Trusted Zone:

http://www.2carpros.com

O15 - Trusted Zone:

http://registry.adoption.com

O15 - Trusted Zone:

http://www.bandwidthplace.com

O15 - Trusted Zone:

http://www.boostmobile.com

O15 - Trusted Zone:

http://www.cslb.ca.gov

O15 - Trusted Zone:

http://support2.charter.com

O15 - Trusted Zone:

http://www.charter.com

O15 - Trusted Zone:

http://webpages.charter.net

O15 - Trusted Zone:

http://www.circuitcity.com

O15 - Trusted Zone:

http://members.cox.net

O15 - Trusted Zone:

http://www.darkdel.com

O15 - Trusted Zone:

http://cgi.ebay.com

O15 - Trusted Zone:

http://my.ebay.com

O15 - Trusted Zone:

http://search.ebay.com

O15 - Trusted Zone:

http://micro.magnet.fsu.edu

O15 - Trusted Zone:

http://www.ghostsofedendale.com

O15 - Trusted Zone:

http://www.highpoint-tech.com

O15 - Trusted Zone:

http://meetme.hotornot.com

O15 - Trusted Zone:

http://www.hotornot.com

O15 - Trusted Zone:

http://gismap.co.la.ca.us

O15 - Trusted Zone:

http://www.oralb.com

O15 - Trusted Zone:

http://www.permitla.org

O15 - Trusted Zone:

http://www.sandiegona.org

O15 - Trusted Zone:

http://*.sgvna.org

O15 - Trusted Zone:

http://forums.techguy.org

O15 - Trusted Zone:

http://www.vistafcu.org

O15 - Trusted IP range:

http://192.168.1.1

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1095975994786

O23 - Service: AVG7 Alert Manager Server - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: UPS - UPSlim Service - Delta - F:\Program Files\Belkin Bulldog\upsd.exe

 

[bcastner]

Many here will red flag a HijackThis listing.

I think they should be allowed if requested and not otherwise.

Anyway, your ActiveX controls for Windows update are fine and installed.

Bill

 

[cbmudd]

thanks