hijack this log. I think!

gnimia

I'm downloading the free version as the post recommended - is that the right one!?

gnimia

closed wrote: »

You can still work through the rest while it's scanning



have you got some x10 (control over mains) device?

have you had any strange symptoms, this looks dodgy

O20 - AppInit_DLLs: WIKI.DLL

Firefox has been crashing a lot recently... ?

closed

yes, all the software suggested is free, not sure which you are referring to - avast/malwarebytes?

click start, run

type

cmd

then run tasklist in the box that comes up

spud17

gnimia wrote: »

I've got one of the power save plugs if thats wat you mean? An intelliplug...
Btw i still cant get thetasklist to run - im doing start, run, and then typing both tasklist and tasklist /svc, but the page only comes up for about a second?

Try, run/cmd/tasklist

gnimia

ok! Finally
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\User>tasklist

Image Name PID Session Name Session# Mem Usage
========================= ====== ================ ======== ============
System Idle Process 0 Console 0 28 K
System 4 Console 0 48 K
smss.exe 1028 Console 0 68 K
csrss.exe 1556 Console 0 3,464 K
winlogon.exe 1584 Console 0 4,504 K
services.exe 1628 Console 0 2,336 K
lsass.exe 1640 Console 0 1,864 K
svchost.exe 1788 Console 0 1,944 K
svchost.exe 1856 Console 0 2,276 K
svchost.exe 1896 Console 0 20,580 K
svchost.exe 2024 Console 0 2,000 K
svchost.exe 336 Console 0 1,120 K
spoolsv.exe 852 Console 0 1,732 K
svchost.exe 952 Console 0 740 K
agrsmsvc.exe 1004 Console 0 308 K
AlertService.exe 1008 Console 0 1,188 K
AppleMobileDeviceService. 1036 Console 0 1,448 K
mDNSResponder.exe 1092 Console 0 1,636 K
ehrecvr.exe 1324 Console 0 1,356 K
ehSched.exe 1340 Console 0 1,048 K
explorer.exe 1348 Console 0 18,152 K
IAANTmon.exe 1416 Console 0 428 K
jqs.exe 1452 Console 0 2,188 K
mfevtps.exe 1952 Console 0 5,228 K
nvsvc32.exe 472 Console 0 2,168 K
svchost.exe 632 Console 0 3,388 K
svchost.exe 2248 Console 0 916 K
X10nets.exe 2648 Console 0 1,408 K
ELService.exe 3120 Console 0 404 K
ISSM.exe 3616 Console 0 712 K
MCLServiceATL.exe 3856 Console 0 728 K
mcrdsvc.exe 2376 Console 0 752 K
Remote UI Service.exe 3296 Console 0 1,472 K
ehtray.exe 3880 Console 0 1,240 K
ctfmon.exe 2516 Console 0 2,000 K
mediaserver.exe 3424 Console 0 5,124 K
dllhost.exe 3316 Console 0 1,236 K
svchost.exe 2276 Console 0 720 K
wmpnetwk.exe 1632 Console 0 2,188 K
alg.exe 4108 Console 0 916 K
rsvp.exe 4412 Console 0 1,192 K
iPodService.exe 4896 Console 0 1,432 K
firefox.exe 10140 Console 0 266,804 K
plugin-container.exe 5676 Console 0 19,712 K
mbam.exe 8780 Console 0 68,844 K
Civilization3.exe 5972 Console 0 68,152 K
rundll32.exe 7856 Console 0 9,076 K
msiexec.exe 9116 Console 0 7,284 K
wscntfy.exe 3240 Console 0 2,548 K
McClnUI.exe 2852 Console 0 2,884 K
cmd.exe 7232 Console 0 2,752 K
tasklist.exe 3192 Console 0 4,628 K
wmiprvse.exe 9192 Console 0 6,004 K

C:\Documents and Settings\User>

poppy10_2

Go to the control panel and uninstall Conduit, it's a crapware toolbar.
Also in Firefox, click Tools>Addons and see what is there. Your browser is using up a quarter of your RAM.

gnimia

Cool - conduit removed.

Add ons are:

Name Shockwave Flash Object
Publisher Adobe Systems Incorporated
Status Enabled
File date 22 June 2006, 12:44
Version 9.0.16.0

Name Adobe PDF Link Helper
Publisher Adobe Systems, Incorporated
Status Enabled
File date 22 September 2010, 17:04
Version 9.4.0.195
Load time 0.36 s

Name Vuze Remote Toolbar
Publisher Conduit Ltd.
Status Enabled
File date 18 October 2010, 11:26
Version 6.2.2.4
Load time 0.17 s

Name Vuze Remote Toolbar
Publisher Conduit Ltd.
Status Enabled
File date 18 October 2010, 11:26
Version 6.2.2.4
Load time 0.17 s

Name Diagnose Connection Problems...
Publisher Not Available
Status Enabled

Name Windows Messenger
Publisher Not Available
Status Enabled

Name Java(tm) Plug-In 2 SSV Helper
Publisher Sun Microsystems, Inc.
Status Enabled
File date 17 August 2010, 17:25
Version 6.0.210.7
Load time 0.78 s

Name JQSIEStartDetectorImpl Class
Publisher Sun Microsystems, Inc.
Status Enabled
File date 17 August 2010, 17:25
Version 6.0.210.7
Load time 0.10 s

poppy10_2

Remove JQSIEStartDetectorImpl and both Vuze toolbars from the Firefox addons menu.

gnimia

Ok. I have to go out now and malwarebytes is still scanning. So far its found 1 infection I'll check it and carry on when I get back.

Thanks again for you help and patience!

closed

remember to fix whats found before closing, otherwise you'll have to do it again - it might run faster if you close civilisation