Can't post hijack This log!

GrizzlyAdams_2

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Procedure Call (RPC) RpcSsNtLmSsp (RpcSsNtLmSsp) - Unknown owner - C:\WINDOWS\system32\adsldpg.exe (file missing)
O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
O23 - Service: SMART Board Service - SMART Technologies Inc. - C:\Program Files\SMART Technologies Inc\SMART Board Software\SMARTBoardService.exe
O23 - Service: SMART Web Server - Unknown owner - C:\Program Files\SMART Technologies Inc\SMART Board Software\WebServer.exe
O23 - Service: Sophos Agent - Sophos Plc - C:\Program Files\Sophos\Remote Management System\ManagementAgentNT.exe
O23 - Service: Sophos AutoUpdate Service - Sophos Plc - C:\Program Files\Sophos\AutoUpdate\ALsvc.exe
O23 - Service: Sophos Message Router - Sophos Plc - C:\Program Files\Sophos\Remote Management System\RouterNT.exe
O23 - Service: Sophos AutoUpdate Service SophosWmi (SophosWmi) - Unknown owner - C:\WINDOWS\system32\adpropg.exe (file missing)
O23 - Service: Windows Time W32TimeNetman (W32TimeNetman) - Unknown owner - C:\WINDOWS\system32\aaclienti.exe (file missing)
O23 - Service: VNC Server (winvnc) - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe

--
End of file - 12019 bytes

aliEnRIK

TICK and FIX these in hijack ~
O2 - BHO: SSSIEHelperObj Class - {8F26EAA1-D8B4-41A2-994F-704AEEE25536} - C:\WINDOWS\system32\hlpr.dll
O4 - HKLM\..\RunServices: [CS32] C:\WINDOWS
O15 - ESC Trusted Zone: http://view.atdmt.com
O15 - ESC Trusted Zone: http://*.bart
O15 - ESC Trusted Zone: http://www.bgfl.org
O15 - ESC Trusted Zone: http://www.bhx.co.uk
O15 - ESC Trusted Zone: http://roscoe.bombich.com
O15 - ESC Trusted Zone: http://*.krusty
O15 - ESC Trusted Zone: http://www.papercut.biz
O15 - ESC Trusted Zone: http://www.rapidelec.co.uk
O15 - ESC Trusted Zone:
O23 - Service: Remote Procedure Call (RPC) RpcSsNtLmSsp (RpcSsNtLmSsp) - Unknown owner - C:\WINDOWS\system32\adsldpg.exe (file missing)
O23 - Service: Sophos AutoUpdate Service SophosWmi (SophosWmi) - Unknown owner - C:\WINDOWS\system32\adpropg.exe (file missing)
O23 - Service: Windows Time W32TimeNetman (W32TimeNetman) - Unknown owner - C:\WINDOWS\system32\aaclienti.exe (file missing)


...............................................................................



Reset internet explorer

1. Open Internet Explorer.
2. Click Tools, and then click Internet Options.
3. Click the Advanced tab.
4. Under Reset Internet Explorer Settings, click Reset.


..................................................................................


Download HostsXpert
http://www.softpedia.com/progDownload/Hoster-Download-27041.html
and then follow the below steps.

* Unzip HostsXpert.zip
* It will create a folder named HostsXpert in whatever folder you extract it to.
* Run HostsXpert.exe by double clicking on it.
* click the Make Writeable? button.
* click Restore Microsoft's Hosts File and then click OK.
* Click the X to exit the program


...............................................................................................


Sophos is broken. Uninstall it

Download CCLEANER
http://www.piriform.com/ccleaner/download/slim
Run the CLEANER scan (UNTICK 'cookies')
Then run the REGISTRY scan (Backup the registry when it asks)

Attempt to reinstall Sophos

GrizzlyAdams_2

aliEnRIK wrote: »

TICK and FIX these in hijack ~
O2 - BHO: SSSIEHelperObj Class - {8F26EAA1-D8B4-41A2-994F-704AEEE25536} - C:\WINDOWS\system32\hlpr.dll

O15 - ESC Trusted Zone: http://view.atdmt.com

O15 - ESC Trusted Zone: http://*.bart
O15 - ESC Trusted Zone: http://www.bgfl.org

O15 - ESC Trusted Zone: http://*.krusty

Thanks aliEnRIK,
Of the above,

O2 - BHO: SSSIEHelperObj Class - {8F26EAA1-D8B4-41A2-994F-704AEEE25536} - C:\WINDOWS\system32\hlpr.dll
...is no longer there

O15 - ESC Trusted Zone: http://view.atdmt.com
...no longer there

The following three seem connected to where I work:
bgfl is a work website, bart and krusty are words I have seen used on network drives at work

O15 - ESC Trusted Zone: http://*.bart
O15 - ESC Trusted Zone: http://www.bgfl.org

O15 - ESC Trusted Zone: http://*.krusty
[/QUOTE]

What do you think?

aliEnRIK

Must be yes. It helps in future though if you can explain that you use the computer for work (or whatever)