NEWS
PARASITES
SOFTWARE
FORUM
DIRECTORY
 
 
 
 
 
 
  
Register   FAQ   Login  

zlob trojan/ ultimatecleaner removal help pleae........





AddThis Social Bookmark Button AddThis Feed Button

       2-spyware forum index -> HijackThis log analysis
Author Message
Sergio B



Joined: 13 May 2007
Posts: 5
Location: London
Post Post subject: zlob trojan/ ultimatecleaner removal help pleae........ Reply with quote
Hi all, new to this site and not brilliant tech wise with computers so i really would appreciate any help getting rid of this damn zlob trojan.I keep getting the usual Integrity threats detected warning, then a link to the Ulimate Cleaner security centre.
Thanks for your help,
Sergio

Logfile of HijackThis v1.99.1
Scan saved at 11:07:08, on 13/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\rmctrl.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\TomTom HOME\TomTomHOME.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Dell\QuickSet\Quickset.exe
C:\WINDOWS\system32\kbqlqvgx.exe
C:\WINDOWS\system32\pchtls32.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Apoint\HidFind.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\SERGIO~1\LOCALS~1\Temp\Rar$EX00.906\HijackThis.exe

F2 - REG:system.ini: Shell=explorer.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {f5c49124-1dd1-11b2-b23f-dba28a09a622} - C:\WINDOWS\system32\R7MgL6AL.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ShowLOMControl] 
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\system32\rmctrl.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\Quickset.exe
O4 - HKLM\..\Run: [kbqlqvgx.exe] C:\WINDOWS\system32\kbqlqvgx.exe
O4 - HKLM\..\Run: [PCHelp tools] C:\WINDOWS\system32\pchtls32.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Tottenham Hotspur News Alerts] "C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O18 - Protocol: bw+0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw+0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
Sun May 13, 2007 9:50 am
Back to top
Sergio B View user's profile Send private message
 
HJT Analyzer



Joined: 15 Mar 2006
Posts: 636
Post Post subject: My HijackThis log Reply with quote
Hello, visitor!

The Hijack This log analyzer has analyzed your log. Please take a closer look on the results.

Your log does not indicate any spyware or virus infection. However, there are some entries that you might want to fix. Please follow the steps below.

The following entries are not malicious, but some of them are not used anymore. You may use HijackThis to fix a few of them. However, please keep in mind that some of the entries marked as Questionable or Not Needed are fully legitimate and might be required by installed software to work properly, while some others might be related to certain parasites. It is up to you to decide whether you need any of them, or not.
O4 - HKLM\..\Run: [ShowLOMControl] 
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra ''Tools'' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O18 - Protocol: bw+0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw+0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll


The following files and Windows registry entries are marked as "unknown". Currently, the HijackThis Log Analyzer cannot provide required information on these items. The files and entries in the list below can be both malicious and fully legitimate. Because of this, please do not take any action! Wait for the forum responders or other forum users to provide you with necessary details and further instructions.
C:\Program Files\TomTom HOME\TomTomHOME.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\kbqlqvgx.exe
C:\WINDOWS\system32\pchtls32.exe
C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
O2 - BHO: (no name) - {f5c49124-1dd1-11b2-b23f-dba28a09a622} - C:\WINDOWS\system32\R7MgL6AL.dll
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [kbqlqvgx.exe] C:\WINDOWS\system32\kbqlqvgx.exe
O4 - HKLM\..\Run: [PCHelp tools] C:\WINDOWS\system32\pchtls32.exe
O4 - HKCU\..\Run: [Tottenham Hotspur News Alerts] "C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe"
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe

If you want to see more detailed analysis of your log, click here.

Thank you for using the 2-Spyware.com HijackThis log analyzer beta 2!
Sun May 13, 2007 9:50 am
Back to top
HJT Analyzer View user's profile Send private message
 
GTO



Joined: 15 Nov 2005
Posts: 1519
Post Post subject: Reply with quote
Hi Sergio B. Welcome to the 2-Spyware.com forums!

Please follow these steps:

1. Download Pocket KillBox or KillBox utility.

2. Use HijackThis to fix the following entries:
O2 - BHO: (no name) - {f5c49124-1dd1-11b2-b23f-dba28a09a622} - C:\WINDOWS\system32\R7MgL6AL.dll
O4 - HKLM\..\Run: [kbqlqvgx.exe] C:\WINDOWS\system32\kbqlqvgx.exe
O4 - HKLM\..\Run: [PCHelp tools] C:\WINDOWS\system32\pchtls32.exe
O18 - Protocol: bw+0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw+0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw-0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw00s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw10s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw20s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw30s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw40s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw50s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw60s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw70s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw80s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bw90s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwa0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwb0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwc0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwd0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwe0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwf0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwg0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwh0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwi0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwj0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwk0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwl0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwm0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwn0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwo0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwp0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwq0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwr0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bws0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwt0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwu0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwv0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bww0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwx0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwy0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: bwz0s - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {C8914859-514F-4571-A353-A8717696AA66} - C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

3. Now restart your system in Safe Mode. This step is very important!

4. Once in Safe Mode, use either Pocket KillBox or KillBox to delete the following files:
C:\WINDOWS\system32\kbqlqvgx.exe
C:\WINDOWS\system32\pchtls32.exe
C:\WINDOWS\system32\R7MgL6AL.dll

5. Reboot your computer. Download the free version of SUPERAntiSpyware. Install the program, update its definitions and run a complete system scan.

6. After you get done, run new HijackThis scan and post a fresh log here.
Tue May 15, 2007 5:09 am
Back to top
GTO View user's profile Send private message
 
Sergio B



Joined: 13 May 2007
Posts: 5
Location: London
Post Post subject: Update Reply with quote
Logfile of HijackThis v1.99.1
Scan saved at 13:07:18, on 15/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Apoint\HidFind.exe
C:\WINDOWS\system32\rmctrl.exe
C:\Program Files\Apoint\Apntex.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\TomTom HOME\TomTomHOME.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Dell\QuickSet\Quickset.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\SERGIO~1\LOCALS~1\Temp\Rar$EX00.922\HijackThis.exe

F2 - REG:system.ini: Shell=explorer.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ShowLOMControl] 
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\system32\rmctrl.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\Quickset.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Tottenham Hotspur News Alerts] "C:\Program Files\Tottenham Hotspur News Alerts\spursnewsalerts.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Documents and Settings\Sergio Bernuzzi\Desktop\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

Thanks a lot for your help, the 'critical systems error' appears to have stopped, but the SuperAntiSpyware is detecting Malware.Ultimate Defender and KillBox said the 3 files you mentioned to delete as not exsisting.
Things seem to be running a lot better though so once again thanks very much for your help in the meantime.
Tue May 15, 2007 11:55 am
Back to top
Sergio B View user's profile Send private message
 
GTO



Joined: 15 Nov 2005
Posts: 1519
Post Post subject: Reply with quote
Hi Sergio B

Well, your HijackThis log looks clean.

Does SUPERAntiSpyware remove malware detected or not? Please post spyware scan log.
Wed May 16, 2007 5:40 am
Back to top
GTO View user's profile Send private message
 
Sergio B



Joined: 13 May 2007
Posts: 5
Location: London
Post Post subject: Reply with quote
Hi again,
ran the spyware and all coming up clean, it has removed the malware, so thanks to you my laptop is spotless.
Great work , thanks vey much for your excellent help
Sergio
Wed May 16, 2007 3:18 pm
Back to top
Sergio B View user's profile Send private message
 
       2-spyware forum index -> HijackThis log analysis All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




Recommended software:
Spyware Doctor
(91/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and easy-to-manage...
SUPERAntiSpyware
(89/100)
SUPERAntiSpyware is a powerful, highly effective spyware remover introducing advanced parasite detection and removal features along with reliable real-time protection. The program is not...
CounterSpy
(85/100)
CounterSpy is a powerful spyware remover based on revolutionary hybrid engine, which incorporates traditional anti-spyware and advanced antivirus engines. Such combination allows CounterSpy...
Malwarebytes Anti Malware
(75/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t have many features. One such...
Windows Defender
(75/100)
Windows Defender is a free anti-spyware program made by the leading software company to add native spyware protection to its most popular product - the Microsoft Windows operating...
Encyclopedia of parasites:
Latest Spyware Threats: VirusProtect Pro | VirusLocker | SpyCrush | ContraVirus | SpyLocked | SpyDawn | AntiVerminser | SpywareQuake | VirusBurst | AntiVermins | AntiVermeans | Zlob | PopCorn.net | MovieLand | TagASaurus | BraveSentry | VirusBurster | SystemDoctor | VirusRescue | MalwareWipe | SpySheriff | CmdService | Smitfraud | SpywareStrike | WinFixer | WinHound | PestTrap | UnSpyPC
Agreement of Use | Privacy policy | Webmasters | Contact us | RSS Feeds
© 2001-2007 2-spyware.com All Rights Reserved. Reproduction in part or whole without written permission is prohibited. Powered by: eSolutions. Forum powered by phpBB