![]() |
![]() |
![]() |
|||||
![]() |
![]() |
![]() |
![]() |
![]() |
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
|
|
Thread Tools |
|
|
#1 (permalink) |
|
Registered User
Join Date: Apr 2007
Posts: 57
OS: XP
|
Strange Listings in Hijackthis Log
System scanned with multiple antimalware tools. All clean except hijackthis contains entries which I am unsure of. Namely:
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" and O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE These seem strange. Please help me find out what these belong to and if they are safe. UPDATE: I bit the bullet and removed those entries from hijackthis by clicking the fix button. I know this is not a good idea but it seems to have worked very well. The scan no longer includes the entries with the text I mentioned above. If anyone has any idea where these came from, what they do or if I may still have a problem please let me know. Last edited by Angelfire777 : 06-10-2008 at 11:54 PM. |
|
|
| Thread Tools | |
|
|