Jump to content


Strange HJT entries


  • This topic is locked This topic is locked
2 replies to this topic

#1 Guest_Joey1_*

Guest_Joey1_*
  • Guests

Posted 30 July 2004 - 01:47 PM

My computer is usually clean. However, when I manually enabled spyware guard and Teatimer, Something strange happened. Spyware Guard warned me that both my default search engine and home page were changing to google.com. I decided to block it. Teatimer said that a value was deleted. Ironically, the value was Teatimer. When I ran hjt, I found these entries that I hadn't noticed before.

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName


The other 04's were all legit. What's going on here? :keybrd:

P.S. I'm using hjt 1.98, and my OS is XP home. A scan with Spybot found nothing. :keybrd:

#2 dave38

dave38

    Devout Murphyite!

  • Emeritus
  • PipPipPipPipPip
  • 8,508 posts

Posted 30 July 2004 - 06:53 PM

Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word

( from http://www.sysinfo.o...tartuplist.php)
Be wary of strong drink. It may make you shoot at tax collectors, and miss!
Please support SWI forum

#3 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,317 posts

Posted 02 August 2004 - 10:04 AM

You were running About:Buster - it changes your home page to Google. (Easily blocked or changed to the home page you want).

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button