DSLfanpal
join:2002-08-15
Good Country
| reply to DSLfanpal
Re: R1, R2, R3 not showing in hijackthis?
No, You misunderstood my question. I know what is R0 to R3. My question is why my scan result has no R1, R2 & R3 but the log starts from O1 onwards. A normal scan will consist log that starts from R1 or R0 onwards but mine is that R0 to R3 is missing from the log.
Hope your understand my question.
Please advice and thanks in advance. |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| said by DSLfanpal  :
No, You misunderstood my question. I know what is R0 to R3. My question is why my scan result has no R1, R2 & R3 but the log starts from O1 onwards. A normal scan will consist log that starts from R1 or R0 onwards but mine is that R0 to R3 is missing from the log.
Hope your understand my question.
Please advice and thanks in advance.
i under stood your question..and i think John2g did also.  Fact is I also do not have any R1, R2 & R3 or R0 in my log either..that is not odd..
I do have the O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
but I could also take that one out if I did not want the Mplayer in my browser.
I have no need for any of these...
R - Registry, StartPage/SearchPage changes
R0 - Changed registry value
R1 - Created registry value
R2 - Created registry key
R3 - Created extra registry value where only one should be
Do you ? 
Here are the rest of those two letter codes for General Info if anyone else reads this thread.
***************************
Two Letter Codes
After the running processes, the list of entries found by Hijack This begins. Each entry starts with a 2-letter code to say what it is. According to Hijack This' Info, heres what each code means:
R - Registry, StartPage/SearchPage changes
R0 - Changed registry value
R1 - Created registry value
R2 - Created registry key
R3 - Created extra registry value where only one should be
F - IniFiles, autoloading entries
F0 - Changed inifile value
F1 - Created inifile value
N - Netscape/Mozilla StartPage/SearchPage changes
N1 - Change in prefs.js of Netscape 4.x
N2 - Change in prefs.js of Netscape 6
N3 - Change in prefs.js of Netscape 7
N4 - Change in prefs.js of Mozilla
O - Other, several sections which represent:
O1 - Hijack of auto.search.msn.com with Hosts file
O2 - Enumeration of existing MSIE BHO's
O3 - Enumeration of existing MSIE toolbars
O4 - Enumeration of suspicious autoloading Registry entries
O5 - Blocking of loading Internet Options in Control Panel
O6 - Disabling of 'Internet Options' Main tab with Policies
O7 - Disabling of Regedit with Policies
O8 - Extra MSIE context menu items
O9 - Extra 'Tools' menuitems and buttons
O10 - Breaking of Internet access by New.Net or WebHancer
O11 - Extra options in MSIE 'Advanced' settings tab
O12 - MSIE plugins for file extensions or MIME types
O13 - Hijack of default URL prefixes
O14 - Changing of IERESET.INF
O15 - Trusted Zone Autoadd
O16 - Download Program Files item
O17 - Domain hijack
O18 - Enumeration of existing protocols
O19 - User stylesheet hijack
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kidshttp://www.missingkids.com/ |
|
John2g
Qui Tacet Consentit
Premium
join:2001-08-10
England
| said by Name Game :
i under stood your question..and i think John2g did also.
I did.
--
Better to remain silent and be thought a fool, than to speak and remove all doubt. |
|
