Jump to content


Photo

Please Check This


  • Please log in to reply
2 replies to this topic

#1 goherd

goherd

    Member

  • Full Member
  • Pip
  • 10 posts

Posted 21 May 2004 - 04:30 PM

Logfile of HijackThis v1.97.7
Scan saved at 5:29:25 PM, on 05/21/2004
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\GAMBLOCK.EXE
C:\WINDOWS\SYSTEM\GAMBLOCK1.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\EDF3C4YC\HIJACKTHIS[1].EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ca.uky.edu/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [GCommand] C:\WINDOWS\SYSTEM\Gamblock.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...7910.7575925926
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab

#2 coops456

coops456

    Member

  • Full Member
  • Pip
  • 28 posts

Posted 21 May 2004 - 05:38 PM

Hmm, can't find any information on these two:

C:\WINDOWS\SYSTEM\GAMBLOCK.EXE
C:\WINDOWS\SYSTEM\GAMBLOCK1.EXE

Do you know what they are?
Could you go to them in Explorer, right click on the file and choose Properties. Post whatever information you can see on version, copyright, etc etc

thanks

#3 goherd

goherd

    Member

  • Full Member
  • Pip
  • 10 posts

Posted 21 May 2004 - 06:27 PM

Previous owner downloaded them...they block gaming. I can't seem to delete them because they run while windows is running. Any suggestions?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button