Vista - Hjt logs?

Hi,

Does this site offer support for HJT Logs? If not then does anyone know where I can go and post a log.


Thanks,

Wizkid

You can post your Hijack this log, but I want you to also run Diagnostics and post them too. I will look at them. zip and upload as attachment.What is your issue?

I need to know also if you are running (or have run) registry cleaners.
------------------------------------------------------------------------
System Files - SFC Command
Run sfc/scannow under "Administrator:Command Prompt" to check for integrity Violations and repair if possible

Run these and save and attach to your post:
Start>Control Panel>System and Maintenance>Performance Information and Tools>Advanced Tools>

Generate a system health Report

Open Reliability and Performance Monitor>Reliability Monitor

View Performance Details In Event Log

Hi,

Thanks for your reply.

I am not having any issues but I just wanted someone to check out my HJT log and let me know if there is any infections and any entries that need cleaning up.


Is it ok if I post the log in a Zip file? Do I need to run SFC as well and post the results of that or just the HJT log? I use Wise Registry Cleaner 4 Free

ps- registry cleaners almost always result in Windows/Program Corruption. They are unable to distinguish between legimate and unwanted registry entries. Half the problems in this forum are a direct result of using registry cleaners as "performance Boosters". Registry cleaners are ok If you know how to use them- but if you dont you are gonna end up re-installing Windows due to corruption.
read this thread for more Info:Do not use registry cleaners!

I want to you to run these in order (very important- do it all)- as they will tell me if you have any Vista NTFS attribute curruption, Integrity violations, and virus/malware infections.
Just tell me the results of the following scans, zip and post Hijack, and then after I have all the info I will tell you If you have any issues. Chances are good though with the registry cleaner you have corruption.

1.
System Files - SFC Command
Run sfc/scannow under "Administrator:Command Prompt" to check for integrity Violations and repair if possible

2.
Scan for malware/virus and "unwanted" items (online scanner/cleaner)
Eset NOD32: Free ESET Online Antivirus Scanner

3. Command Prompt full defrag [-w] and check for and fix file system errors, check for and recover bad disk sectors:
How To Make Vista more responsive and faster

ok, after I have completed the 3 steps do I then post the HJT log?

You can post it now, but i still need the results of the 3 scans. If for whatever reason #3 fails any part I would backup your data and get ready for a repair/restore or re-install of Vista as chances are likely that you will lose the ability at some point (in the near future) to boot into Windows.

Ok I have attached the HJT log, I'll do the other scans now.

You have Windows and PROGRAM file corruption:

23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)

Arcsoft
Nvidia Graphics driver/software
Wireless/network card (Marvel Yukon)
Media Player
and alot Of critical Windows services

Right ok, thats not good, is there anyway to fix this without having to reformat and install agian? I am not having any problems though atm.

Edit SFC ended and said it did not find any integrity violations

It depends on how long ago the corruption occured (due most likely to the registry cleaner)
System restore depending on the size of your Hard drive, may only go back a week or so. The program corruption (like Arcsoft, and Nvidia) can be fixed by re-installing the programs. Windows corruption if it cannot be restored, will require a repair/re-install. I will give you a link to the tutorial. Even this though, while perserving your data will require a re-install of programs.
Tell me the results of the other three. I see you run Kaspersky- it is a good antivus program (almost as good as Eset NOD32). #1 and #3 (which will take about an hour) are now critical.