syntax error

[ELVIROS]

sorry for delays i have had some probs it was inserted twice in different locs yes in all programs must of been operator error (again) have been rebooting to try to find out why it appears on start up i will be back in 5 hopefully i mean minutes thank you 4 bearing with me its like riding a bike i keep falling off though... modifiy now system restore going to get hijack

[ELVIROS]

well i have the 3 icons in desktop 2x hjt icon 1x folder do have double click set correct i have attempted double click at least 10 times the result puts me into a desktop screen with onlly the hjt icon not the folder  when i double click that it opens the main menu 2hjt suggetions please  modify-- absolutly bc that works will follow the rest of guide now

[kpac]

Open the main menu of HJT and follow my instructions.

[ELVIROS]

ok i will small box came on screen brouse,install or quit ?? but ithink install may insert hjt into c/program have now got main menu 

[BC_Programmer]

 

[kpac]

Surely it's not that hard to install. I mean, come on. You're the only person I've had to go through with installing it, step by step.

• Double click on the HJTsetup.exe icon wherever you saved it to.
• By default it will install to C:\Program Files\Hijack This.
• Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
  
• Put a check by Create a desktop icon then click Next again.
  
• Continue to follow the rest of the prompts from there.
• At the final dialogue box click Finish and it will launch Hijack This.
  
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in Notepad.
  
• Click on Edit > Select All then click on Edit > Copy to copy the entire contents of the log.
• Come back here to this thread and Paste the log in your next reply.
• DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or required by the system.
  

[ELVIROS]

548  C:windows\system32\smss.exe                                              628C:windows\system32\winlogon.exe                                                 672C:\windows\system32\services.exe                                              684C:\windows\system32\lsass.exe                                                         892C:\windows\system32\svchost.exe                                         1012C:\windows\system32\svchost.exe                                            1260C:\windows\system32\spoolsv.exe                                       1324C\windows\system32\svchost.exe                                 1664C\windows\explorer.EXE                                                              268C:\windows\system32\wgaTray.exe                                                           576C:\Program files\google\googletoolbarNotifier.exe                                   580C:Program Files\messenger\msmsgs.exe                                                600C:\windows\system32\ctfmon.exe

[ELVIROS]

248C:\Documents and settings\me\desktop\hijackThis.exe  448C:\program files\internet explorer\iexplore.exe  (that is all of the information stored upon this win xp pro 5.1.2600 B\mark module 2.4.258.0 thankyou for you assistance 

[ELVIROS]

oh well i was 1 yr out of high school when the apple 2 e was coming into schools thanks for the help anyways kieran

[ELVIROS]

patio all info provided is in order down the page as it should be when i posted it it turned out as is

[kpac]

oh well i was 1 yr out of high school when the apple 2 e was coming into schools thanks for the help anyways kieran

Which means?

Where is the rest of the log. We need the whole thing.

[ELVIROS]

maybe this is it

[attachment deleted by admin]

[kpac]

Did you click "Do a system scan and save a logfile" button?

[ELVIROS]

maybe now

[attachment deleted by admin]

[ELVIROS]

StartupList report, 8/03/2009, 7:24:22 AM
StartupList version: 1.52.2
Started from : C:\Documents and Settings\aaron\Desktop\desktop\HijackThis.EXE
Detected: Windows XP  (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 (6.00.2600.0000)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\aaron\Desktop\desktop\HijackThis.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

TimeSink Ad Client = "C:\Program Files\TimeSink\AdGateway\TSAdBot.exe"

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

swg = C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
QUAD Windows service = C:\Documents and Settings\aaron\My Documents\QUAD Registry Cleaner\QUAD Registry Cleaner.exe -h
QUAD Scheduler = C:\Documents and Settings\aaron\My Documents\QUAD Registry Cleaner\QUAD Scheduler.exe
MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background
ctfmon.exe = C:\WINDOWS\System32\ctfmon.exe
DesktopMaestro = C:\Program Files\Desktop Maestro\deskmech.exe /S

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
(no name) - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E}

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\System32\Adobe\Director\SwDir.dll
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

[Windows Live Safety Center Base Module]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\wlscBase.dll
CODEBASE = http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6662.cab

[WUWebControl Class]
InProcServer32 = C:\WINDOWS\System32\wuweb.dll
CODEBASE = http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1235660278874

[MUWebControl Class]
InProcServer32 = C:\WINDOWS\System32\muweb.dll
CODEBASE = http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1235660564842

[{D27CDB6E-AE6D-11CF-96B8-444553540000}]
CODEBASE = http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\System32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll

--------------------------------------------------
End of report, 4,874 bytes
Report generated in 0.031 seconds

Command line options:
   /verbose  - to add additional info on each section
   /complete - to include empty sections and unsuspicious data
   /full     - to include several rarely-important sections
   /force9x  - to include Win9x-only startups even if running on WinNT
   /forcent  - to include WinNT-only startups even if running on Win9x
   /forceall - to include all Win9x and WinNT startups, regardless of platform
   /history  - to list version history only