HijackThis Log

[datruyugo]

Here it is, thanks to whoever helps me with this problem in advance:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:28:45 AM, on 12/30/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
D:\WINNT\System32\smss.exe
D:\WINNT\system32\winlogon.exe
D:\WINNT\system32\services.exe
D:\WINNT\system32\lsass.exe
D:\WINNT\System32\termsrv.exe
D:\WINNT\system32\svchost.exe
D:\WINNT\system32\spoolsv.exe
D:\WINNT\System32\svchost.exe
D:\WINNT\System32\llssrv.exe
D:\WINNT\system32\regsvc.exe
D:\WINNT\system32\MSTask.exe
D:\WINNT\System32\WBEM\WinMgmt.exe
D:\Program Files\RealVNC\VNC4\WinVNC4.exe
D:\WINNT\system32\svchost.exe
D:\WINNT\system32\Dfssvc.exe
D:\WINNT\System32\inetsrv\inetinfo.exe
D:\WINNT\System32\msdtc.exe
D:\WINNT\Explorer.EXE
D:\WINNT\System32\igfxtray.exe
D:\WINNT\System32\hkcmd.exe
D:\WINNT\SOUNDMAN.EXE
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\USS\USS.exe
D:\Program Files\DynDNS Updater\DynDNS.exe
D:\WINNT\psybnc\psybnc.exe
D:\WINNT\System32\svchost.exe
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: player addon - {819EFD78-6FD4-42EF-9030-F6DAB24BB9F0} - D:\WINNT\oggview32.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll (file missing)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll (file missing)
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINNT\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll (file missing)
O4 - HKLM\..\Run: [IgfxTray] D:\WINNT\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] D:\WINNT\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [TkBellExe] 'D:\Program Files\Common Files\Real\Update_OB\realsched.exe'  -osboot
O4 - HKLM\..\Run: [USS] 'D:\Program Files\USS\USS.exe'
O4 - HKCU\..\Run: [DynDNS Updater] 'D:\Program Files\DynDNS Updater\DynDNS.exe'
O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ares] 'D:\Program Files\Ares\Ares.exe' -h
O4 - HKLM\..\Policies\Explorer\Run: [user32.dll] D:\Program Files\Video ActiveX Access\iesmn.exe
O4 - HKUS\S-1-5-21-1715567821-1085031214-725345543-1004\..\RunOnce: [^SetupICWDesktop] D:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'ASPNET')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] D:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - Startup: DrAntispy.lnk = D:\Program Files\DrAntispy\Uninstall.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Shortcut to psybnc.exe.lnk = D:\WINNT\psybnc\psybnc.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINNT\web\related.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{21EA7FD4-3CFD-4EEC-A4DE-1E19A6DCCD07}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{21EA7FD4-3CFD-4EEC-A4DE-1E19A6DCCD07}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{21EA7FD4-3CFD-4EEC-A4DE-1E19A6DCCD07}: NameServer = 192.168.1.1
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - D:\WINNT\System32\dmadmin.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - D:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - D:\Program Files\RealVNC\VNC4\WinVNC4.exe
--
End of file - 4191 bytes

[Bobby]

hello and happy new year!
i'm sure your log will be analyzed soon. i recommend running anti spyware scan while you are waiting for the results. you can get free antispywares here.