1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

HijackThis Log Suspicious Entries???

Discussion in 'Malware and Virus Removal Archive' started by Ann, 2006/09/11.

Thread Status:
Not open for further replies.
  1. 2006/09/11
    Ann

    Ann Well-Known Member Thread Starter

    Joined:
    2002/01/10
    Messages:
    597
    Likes Received:
    1
    Hi -

    Are either of these HijackThis entries something I should be worried about?

    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

    O17 - HKLM\System\CCS\Services\Tcpip\..\{7911F454-CFC7-490D-A3D3-CEFDD0E101B8}: NameServer = 205.171.3.65 205.171.2.65

    They are new items and I would like some input please.

    TIA,

    Ann
     
    Ann,
    #1
  2. 2006/09/11
    TeMerc

    TeMerc Inactive Alumni

    Joined:
    2006/05/13
    Messages:
    3,226
    Likes Received:
    4
    No, the first is related to a system crash, the details of said crash and the other is to what I assume is your ISP, Qwest:

    dumpreg:
    http://www.castlecops.com/s1033-dumprep_0_kdumprep_0_u.html

    IP:
    http://www.dnsstuff.com/tools/whois.ch?ip=205.171.3.65+

    Hope that helps.
     

  3. to hide this advert.

  4. 2006/09/12
    Ann

    Ann Well-Known Member Thread Starter

    Joined:
    2002/01/10
    Messages:
    597
    Likes Received:
    1
    Thanks so much for your reply.

    I do not remember an entry for my ISP before. If I delete it will it just come back when I connect?

    Ann
     
    Ann,
    #3
  5. 2006/09/12
    TeMerc

    TeMerc Inactive Alumni

    Joined:
    2006/05/13
    Messages:
    3,226
    Likes Received:
    4
    No, those need to stay as they are. They relate to the Domain Name Servers which Qwest uses. If you fix them you may have to manually navigate to connect to Qwest.

    From Bleeping Computer HijackThis! Tutorial
     
  6. 2006/09/13
    Ann

    Ann Well-Known Member Thread Starter

    Joined:
    2002/01/10
    Messages:
    597
    Likes Received:
    1
     
    Ann,
    #5
  7. 2006/09/13
    TeMerc

    TeMerc Inactive Alumni

    Joined:
    2006/05/13
    Messages:
    3,226
    Likes Received:
    4
    Glad we could be of assistance. 8)

    Due to resolution this topic is closed.

    If you need this topic reopened, please request this by sending the moderating team a PM with the address of the thread. This applies only to the original topic starter.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.