February 13, 2012, 09:10:06 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: SMF - Just Installed!
 
   Home   Help Search Login Register  

zlob trojan/ ultimatecleaner removal help pleae........


AddThis Social Bookmark Button AddThis Feed Button
Pages: [1]
  Print  
Author Topic: zlob trojan/ ultimatecleaner removal help pleae........  (Read 1879 times)
Sergio B
Newbie
*
Posts: 5


View Profile
« on: May 13, 2007, 03:50:14 AM »

Hi all, new to this site and not brilliant tech wise with computers so i really would appreciate any help getting rid of this damn zlob trojan.I keep getting the usual Integrity threats detected warning, then a link to the Ulimate Cleaner security centre.
Thanks for your help,
Sergio

Logfile of HijackThis v1.99.1
Scan saved at 11:07:08, on 13/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\rmctrl.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\TomTom HOME\TomTomHOME.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Dell\QuickSet\Quickset.exe
C:\WINDOWS\system32\kbqlqvgx.exe
C:\WINDOWS\system32\pchtls32.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Apoint\HidFind.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\SERGIO~1\LOCALS~1\Temp\Rar$EX00.906\HijackThis.exe

F2 - REG:system.ini: Shell=explorer.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {f5c49124-1dd1-11b2-b23f-dba28a09a622} - C:\WINDOWS\system32\R7MgL6AL.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ShowLOMControl] 
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\system32\rmctrl.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\Quickset.exe
O4 - HKLM\..\Run: [kbqlqvgx.exe] C:\WINDOWS\system32\kbqlqvgx.exe
O4 - HKLM\..\Run: [PCHelp tools] C:\WINDOWS\system32\pchtls32.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Tottenham Hotspur News Alerts] "C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O18 - Protocol: bw+0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw+0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
Logged
Guest
Guest
« Reply #1 on: May 13, 2007, 03:50:25 AM »

Hello, visitor!

The Hijack This log analyzer has analyzed your log. Please take a closer look on the results.

Your log does not indicate any spyware or virus infection. However, there are some entries that you might want to fix. Please follow the steps below.

The following entries are not malicious, but some of them are not used anymore. You may use HijackThis to fix a few of them. However, please keep in mind that some of the entries marked as Questionable or Not Needed are fully legitimate and might be required by installed software to work properly, while some others might be related to certain parasites. It is up to you to decide whether you need any of them, or not.
O4 - HKLM\..\Run: [ShowLOMControl] 
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra ''Tools'' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O18 - Protocol: bw+0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw+0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll



The following files and Windows registry entries are marked as "unknown". Currently, the HijackThis Log Analyzer cannot provide required information on these items. The files and entries in the list below can be both malicious and fully legitimate. Because of this, please do not take any action! Wait for the forum responders or other forum users to provide you with necessary details and further instructions.
C:\Program Files\TomTom HOME\TomTomHOME.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\kbqlqvgx.exe
C:\WINDOWS\system32\pchtls32.exe
C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
O2 - BHO: (no name) - {f5c49124-1dd1-11b2-b23f-dba28a09a622} - C:\WINDOWS\system32\R7MgL6AL.dll
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [kbqlqvgx.exe] C:\WINDOWS\system32\kbqlqvgx.exe
O4 - HKLM\..\Run: [PCHelp tools] C:\WINDOWS\system32\pchtls32.exe
O4 - HKCU\..\Run: [Tottenham Hotspur News Alerts] "C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe"
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe


If you want to see more detailed analysis of your log, click here.

Thank you for using the 2-Spyware.com HijackThis log analyzer beta 2!
Logged
GTO
Global Moderator
Newbie
*****
Posts: 1519



View Profile
« Reply #2 on: May 14, 2007, 11:09:42 PM »

Hi Sergio B. Welcome to the 2-Spyware.com forums!

Please follow these steps:

1. Download Pocket KillBox or KillBox utility.

2. Use HijackThis to fix the following entries:
O2 - BHO: (no name) - {f5c49124-1dd1-11b2-b23f-dba28a09a622} - C:\WINDOWS\system32\R7MgL6AL.dll
O4 - HKLM\..\Run: [kbqlqvgx.exe] C:\WINDOWS\system32\kbqlqvgx.exe
O4 - HKLM\..\Run: [PCHelp tools] C:\WINDOWS\system32\pchtls32.exe
O18 - Protocol: bw+0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw+0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)


3. Now restart your system in Safe Mode. This step is very important!

4. Once in Safe Mode, use either Pocket KillBox or KillBox to delete the following files:
C:\WINDOWS\system32\kbqlqvgx.exe
C:\WINDOWS\system32\pchtls32.exe
C:\WINDOWS\system32\R7MgL6AL.dll


5. Reboot your computer. Download the free version of SUPERAntiSpyware. Install the program, update its definitions and run a complete system scan.

6. After you get done, run new HijackThis scan and post a fresh log here.
Logged
Sergio B
Newbie
*
Posts: 5


View Profile
« Reply #3 on: May 15, 2007, 05:55:18 AM »

Logfile of HijackThis v1.99.1
Scan saved at 13:07:18, on 15/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Apoint\HidFind.exe
C:\WINDOWS\system32\rmctrl.exe
C:\Program Files\Apoint\Apntex.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\TomTom HOME\TomTomHOME.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Dell\QuickSet\Quickset.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\SERGIO~1\LOCALS~1\Temp\Rar$EX00.922\HijackThis.exe

F2 - REG:system.ini: Shell=explorer.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ShowLOMControl] 
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\system32\rmctrl.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\Quickset.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Tottenham Hotspur News Alerts] "C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

Thanks a lot for your help, the 'critical systems error' appears to have stopped, but the SuperAntiSpyware is detecting Malware.Ultimate Defender and KillBox said the 3 files you mentioned to delete as not exsisting.
Things seem to be running a lot better though so once again thanks very much for your help in the meantime.
Logged
GTO
Global Moderator
Newbie
*****
Posts: 1519



View Profile
« Reply #4 on: May 15, 2007, 11:40:09 PM »

Hi Sergio B

Well, your HijackThis log looks clean.

Does SUPERAntiSpyware remove malware detected or not? Please post spyware scan log.
Logged
Sergio B
Newbie
*
Posts: 5


View Profile
« Reply #5 on: May 16, 2007, 09:18:05 AM »

Hi again,
ran the spyware and all coming up clean, it has removed the malware, so thanks to you my laptop is spotless.
Great work , thanks vey much for your excellent help
Sergio
Logged
Pages: [1]
  Print  
 
Jump to:  




Recommended software:
STOPzilla
(90/100)
STOPzilla is a powerful anti-spyware program that detects, blocks, and removes malicious software allowing users to surf the Web not worrying about spyware, Trojan horses,...
Malwarebytes Anti Malware
(88/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t...
Spyware Doctor
(87/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and...
SpyHunter
(86/100)
SpyHunter is a quite simple, but yet highly effective spyware remover with an easy-to-use interface. This program is an excellent choice for users, who are...
XoftSpySE Anti Spyware
(84/100)
XoftSpySE, an anti-spyware program made by ParetoLogic, Inc., is a simple, but effective on-demand scanner with the typical set of functions but very easy to...
Encyclopedia of parasites:

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
add text box
rss feed
help other