I donot see anything wrong in the hijackthis log.
Maybe the virus or trojan screwed your system ..
Why dont you repair windows 2000
How do I recover Windows 2000?
http://www.jsiinc.com/SUBG
Post back
Main Topics
Browse All TopicsI had SDBot, Optix and some other trojans and virus on this computer. removed them but still when I open regedit, TDS-3, Norton AV the programs will be ended immediately. I cannot find what is causing this.
can you review my log please?
Hijack.........
Logfile of HijackThis v1.97.7
Scan saved at 5:30:04 PM, on 4/23/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.ex
C:\WINNT\system32\winlogon
C:\WINNT\system32\services
C:\WINNT\system32\lsass.ex
C:\WINNT\system32\svchost.
C:\WINNT\system32\LEXBCES.
C:\WINNT\system32\spoolsv.
C:\WINNT\system32\LEXPPS.E
C:\WINNT\System32\svchost.
C:\WINNT\system32\msmsgsvc
C:\WINNT\system32\regsvc.e
C:\WINNT\system32\MSTask.e
C:\PROGRA~1\NORTON~1\SPEED
C:\WINNT\System32\WBEM\Win
C:\WINNT\Explorer.EXE
C:\WINNT\system32\svchost.
C:\PROGRA~1\COMMON~1\ADAPT
C:\Program Files\TrojanHunter 3.8\TrojanHunter.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Janet Lazo\Desktop\HijackThis.ex
C:\Program Files\Norton SystemWorks\OBC.exe
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-7
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-F
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Microsoft Messenger Service] msmsgsvc.exe
O4 - HKLM\..\Run: [CreateCD50] C:\PROGRA~1\COMMON~1\ADAPT
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\Symtray.exe SetReg
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 3.8\THGuard.exe"
O4 - HKLM\..\RunServices: [Microsoft Messenger Service] msmsgsvc.exe
O4 - HKCU\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKLM\..\RunOnce: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\Symtrdr.exe
O9 - Extra button: AIM (HKLM)
O16 - DPF: {74D05D43-3236-11D4-BDCD-0
Thanks.....
paul...
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I donot see anything wrong in the hijackthis log.
Maybe the virus or trojan screwed your system ..
Why dont you repair windows 2000
How do I recover Windows 2000?
http://www.jsiinc.com/SUBG
Post back
Cleaning your computer - and protecting it in the future - can't be answered with one issue.
As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.
The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.
It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/Engl
BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.
Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark
:o) Your brain is like a parachute. It works best when it's open
Follow this thread ...
http://www.experts-exchang
Try McAfee's Stinger
http://vil.nai.com/vil/sti
Also remember to turn off SYSTEM RESTORE (anyone catching on to this yet:)
http://vil.nai.com/vil/Sys
The virus is probably gaobot http://securityresponse.sy
Remember turn off system restore, or next boot, you'll have your viri back, TY M$!
-rich
"removed them but still when I open regedit, TDS-3, Norton AV the programs will be ended immediately" :
This may caused by corrupted some of system files
Solution :
chkdsk c: /r
ENTER
reboot the machine then let it check and repair curropted system files .
after you logon the windows use the command :
sfc /scannow
ENTER
to restore the corrupted system files .
If Sfc.exe does'nt work, then try to copy all the files from C:\WINNT\system32\dllcache
Files Manually Copied to the DLLCache Folder Are Not Used Until the Next Reboot
http://support.microsoft.c
Business Accounts
Answer for Membership
by: LeftofCoolPosted on 2004-04-23 at 20:31:59ID: 10905821
You definitely have a nasty virus or piece of spyware, but nothing jumps out at me in your log. You might want to try rebooting in safe mode and running NAV there. Also, download and install Spybot Search & Destroy and Ad-Aware, which can be found at these links, respectively: http://download.com.com/30 00-8022-10 194058.htm l?tag=lst- 0-3 and http://www.lavasoftusa.com / . If you are having trouble running these two programs in regular mode, run them in safe mode and delete everything found.