Help w/StartupTracker log info please!

G

Guest

Please review the following. Any and all comments/suggestions are welcome.
THANKS MUCH!

XP Home SP2 x2002

3/23/2005 7:07:11 PM

-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

No Items Found

-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

SoundMAXPnP C:\Program Files\Analog
Devices\Core\smax4pnp.exe
IgfxTray C:\WINDOWS\system32\igfxtray.exe
HotKeysCmds C:\WINDOWS\system32\hkcmd.exe
IntelMeM C:\Program Files\Intel\Modem Event
Monitor\IntelMEM.exe
UpdateManager "C:\Program Files\Common Files\Sonic\Update
Manager\sgtray.exe" /r
dla C:\WINDOWS\system32\dla\tfswctrl.exe
VSOCheckTask "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe"
/checktask
MCAgentExe c:\PROGRA~1\mcafee.com\agent\mcagent.exe
MCUpdateExe c:\PROGRA~1\mcafee.com\agent\McUpdate.exe
VirusScan Online "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
MPFExe C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
iTunesHelper C:\Program Files\iTunes\iTunesHelper.exe
QuickTime Task "C:\Program Files\QuickTime\qttask.exe"
-atboottime
mmtask C:\Program Files\Musicmatch\Musicmatch
Jukebox\mmtask.exe
TkBellExe "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot

-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce

No Items Found

-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

No Items Found

-- Registry --
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce

No Items Found

-- Start Menu - Current User --
DESKTOP.INI

-- Start Menu - All Users --
DESKTOP.INI
Microsoft Office.lnk
Microsoft Works Calendar Reminders.lnk

-- Disabled Items --
No Items Found

-- Registry - Shell Value - HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon --
Explorer.exe

-- Running Processes --
System Idle Process
System
SMSS.EXE \SystemRoot\System32\smss.exe
CSRSS.EXE
WINLOGON.EXE winlogon.exe
SERVICES.EXE C:\WINDOWS\system32\services.exe
LSASS.EXE C:\WINDOWS\system32\lsass.exe
SVCHOST.EXE C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
SVCHOST.EXE C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
SPOOLSV.EXE C:\WINDOWS\system32\spoolsv.exe
EXPLORER.EXE C:\WINDOWS\Explorer.EXE
smax4pnp.exe "C:\Program Files\Analog Devices\Core\smax4pnp.exe"
hkcmd.exe "C:\WINDOWS\system32\hkcmd.exe"
IntelMEM.exe "C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe"
tfswctrl.exe "C:\WINDOWS\system32\dla\tfswctrl.exe"
mcvsshld.exe "C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
MpfTray.exe "C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe"
iTunesHelper.exe "C:\Program Files\iTunes\iTunesHelper.exe"
mmtask.exe "C:\Program Files\Musicmatch\Musicmatch
Jukebox\mmtask.exe"
McVSEscn.exe "c:\progra~1\mcafee.com\vso\mcvsescn.exe" /disabled
realsched.exe "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
WkCalRem.exe "C:\Program Files\Common Files\Microsoft Shared\Works
Shared\wkcalrem.exe"
MpfAgent.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe -Embedding
mcvsrte.exe c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe /Embedding
MpfService.exe C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
SVCHOST.EXE C:\WINDOWS\system32\svchost.exe -k imgsvc
wdfmgr.exe
uphclean.exe "C:\Program Files\UPHClean\uphclean.exe"
SVCHOST.EXE C:\WINDOWS\system32\svchost.exe -k netsvcs
iPodService.exe "C:\Program Files\iPod\bin\iPodService.exe"
McShield.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe
ALG.EXE
mcagent.exe "c:\program files\mcafee.com\agent\mcagent.exe" /nosplash
StartupTracker3.exe "C:\DOCUME~1\Home\LOCALS~1\Temp\Temporary Directory 1
for StartupTracker3.zip\StartupTracker3.exe"
WMIPRVSE.EXE
 
T

Thorsten Matzner

MrGib said:
Please review the following. Any and all comments/suggestions are welcome.

Leave this alone unless you are experiencing problems with your OS.
 
G

Guest

I will do just that and thanks for the blount advice! ...wondering if you'd
have a look at the following hijackthis data... (and no I'm not changing and
f-ing up reg's with this program) Let me know what you think, please sir...
Thx!

O17 -
HKLM\System\CCS\Services\Tcpip\..\{4E2E0274-3BA0-4F54-B4A2-02E2713157D8}:
NameServer = 205.152.132.235 205.152.37.254

(O17 = Domain Hijack??)
 
T

Thorsten Matzner

MrGib said:
I will do just that and thanks for the blount advice! ...wondering if you'd
have a look at the following hijackthis data... (and no I'm not changing and
f-ing up reg's with this program) Let me know what you think, please sir...
Thx!

O17 -
HKLM\System\CCS\Services\Tcpip\..\{4E2E0274-3BA0-4F54-B4A2-02E2713157D8}:
NameServer = 205.152.132.235 205.152.37.254

Looks like some proxy setting etc. You could remove the entry with
HijackThis and see what happens.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top