Cable Forum - View Single Post - HELP

Raistlin · 07-09-2008, 16:29

Ok, initial thoughts:

1. Can't see an AV running. What one are you using?

2. Can't see a firewall running. What one are you using?

3. This entry appears to be redundent, and can probably be 'fixed':

Code:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

4. The jury's out on this one, but it appears to be adware of some sort. I would suggest doing some searches/reading and then try disabling it and see what happens. There are some suggestions that it's a legitimate piece of software that is installed with something else and just reminds you to register every now and then, it's impossible to be sure without doing some more checking up on exactly what it's doing and when. If it were my system I would just 'fix' it and see how things went:

Code:

O4 - Startup: PowerReg Scheduler.exe

Other than that there doesn't seem to be much there to worry about (a couple of minor niggles over the Wannado branding and search setups). It's possible that you've got some sort of rootkit which has hidden itself from HijackThis, but there's no real way to diagnose that without some more intensive checking.

You could try rootkit revealer (info and download here: http://technet.microsoft.com/en-gb/s.../bb897445.aspx) and see if that throws anything up.

07-09-2008, 16:29	#21
Raistlin Inactive Join Date: Feb 2004 Location: There's no place like 127.0.0.1 Services: Depends on the person and the price they're offering Posts: 12,384	Re: HELP - Massive System Problem Ok, initial thoughts: 1. Can't see an AV running. What one are you using? 2. Can't see a firewall running. What one are you using? 3. This entry appears to be redundent, and can probably be 'fixed': Code: O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 4. The jury's out on this one, but it appears to be adware of some sort. I would suggest doing some searches/reading and then try disabling it and see what happens. There are some suggestions that it's a legitimate piece of software that is installed with something else and just reminds you to register every now and then, it's impossible to be sure without doing some more checking up on exactly what it's doing and when. If it were my system I would just 'fix' it and see how things went: Code: O4 - Startup: PowerReg Scheduler.exe Other than that there doesn't seem to be much there to worry about (a couple of minor niggles over the Wannado branding and search setups). It's possible that you've got some sort of rootkit which has hidden itself from HijackThis, but there's no real way to diagnose that without some more intensive checking. You could try rootkit revealer (info and download here: http://technet.microsoft.com/en-gb/s.../bb897445.aspx) and see if that throws anything up.