Computing.Net > Forums > Security and Virus > Won't LiveUpdage, go Symantec,Mcafe

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Won't LiveUpdage, go Symantec,Mcafe

Reply to Message Icon

Name: rubikscube
Date: April 9, 2004 at 13:28:08 Pacific
OS: XP SP1
CPU/Ram: P4 128MB
Comment:

I've cleaned a lot off of this computer, but it still won't run liveupdate successfully or browse to mcafee.com or symantec.com

Here's the HJ log:

Logfile of HijackThis v1.97.2
Scan saved at 3:12:55 PM, on 4/9/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\MsgSys.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\System32\ICO.exe
C:\WINDOWS\System32\WScript.exe
C:\WINDOWS\System32\atiptaxx.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\NavNT\vptray.exe
C:\PROGRA~1\AIM\aim.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
c:\progra~1\Support.com\client\bin\tgcmd.exe
C:\Documents and Settings\Jennifer\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.webmail.uark.edu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\adobe\acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.exe
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\lserver\server.vbs
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.exe"
O4 - HKLM\..\Run: [ConMgr.exe] "C:\Program Files\EarthLink 5.0\ConMgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38071.3621180556
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab




Sponsored Link
Ads by Google

Response Number 1
Name: blender
Date: April 10, 2004 at 08:58:55 Pacific
Reply:

Rubixcube

First of all...your version of hijack is way out of date...I expect to see a "hosts" file hijack but that version does not read the host file...Should grab yourself the newest version of hijackthis. The one you have is no longer safe to use with some of the crap out there now...I and I hope noone else will tell you to remove anything with that hijack program.

You can get a new one here: (download it to same folder and let it overwrite the old copy)

http://spywarewarrior.com/files/HijackThis.exe

Run a search for the file hosts

To do:

Click start> search> for files and folders> all files and folders> in the "all or part of filename" box type hosts

Look in: C:

Click more advanced options

Have the first 3 options checked.

Click search

For each hosts file found...(that is just hosts...no extension)
Open in notepad...(make sure always open file of this type is unchecked)

There will likely be a big list in there all starting with:

127.0.0.1

Delete all found except

127.0.0.1 localhost <--Leave This!

What is happening here is this:

127.0.0.1 is your computer's own loopback address...so if I or a virus puts this entry in my hosts file:

127.0.0.1 www.mcafee.com

When I try to go to mcafee's site...I am sent back to my computer!

Once you are done modifying it, save the file.
Try updating your AV now.

If you need more help post back.


I never give up!

Windows Update


0
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Won't LiveUpdage, go Symantec,Mcafe

McAfee Won't Go Away!! www.computing.net/answers/security/mcafee-wont-go-away/14663.html

Pop Up That Won't Go www.computing.net/answers/security/pop-up-that-wont-go/16116.html

Hijacker won't remove: Adware.Look2 www.computing.net/answers/security/hijacker-wont-remove-adwarelook2/13779.html