SpyFaclon Problems. Please assist :D
| Author |
Message |
Agent
Joined: 11 May 2006
Posts: 1
|
 Post subject: SpyFaclon Problems. Please assist :D |
 |
|
I got a SpyFaclon problem, all assistance would be good.
Logfile of HijackThis v1.99.1
Scan saved at 12:51:32 AM, on 12/05/2006
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\WINNT\Mixer.exe
C:\WINNT\System32\RunDll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Eset\nod32kui.exe
C:\program files\steam\steam.exe
E:\Logitech Mouse\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
c:\winnt\system32\atmclk.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
E:\Music And STuff\installprevx1(2).exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\SFX167.tmp\PXSetup.exe
C:\Documents and Settings\Administrator\Desktop\hijackthis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 203.162.116.54:80
O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINNT\System32\hp6836.tmp
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_0.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O4 - HKLM\..\Run: [vsc32cnf.exe] C:\Program Files\Roland\VSC32\vsc32cnf.exe
O4 - HKLM\..\Run: [vscvol.exe] C:\Program Files\Roland\VSC32\vscvol.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [WinampAgent] E:\Winamp\winampa.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [PrevxOne] C:\Program Files\Prevx1\PXConsole.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [PSwitch] C:\Program Files\Proxy Switcher Standard\ProxySwitcher.exe
O4 - HKCU\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKCU\..\Run: [LDM] E:\Logitech Mouse\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [warez] "C:\Program Files\Warez P2P Client\warez.exe" -h
O4 - Startup: Xfire.lnk = E:\Xfire\Xfire.exe
O4 - Startup: BitTorrent.lnk = E:\bittorrent.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: WinZip Quick Pick.lnk = E:\WinZip\WZQKPICK.EXE
O4 - Global Startup: Logitech SetPoint.lnk = E:\Logitech Mouse\SetPoint\SetPoint.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = E:\Logitech Mouse\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: svchost.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\PartyPoker.exe (file missing)
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1162
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{20A1FC65-D536-49DA-9271-C4D230574A01}: Domain = vic.bigpond.net.au
O17 - HKLM\System\CCS\Services\Tcpip\..\{F6F0BD01-B596-46FC-8E10-0FE21DAA79DE}: NameServer = 10.0.0.138,10.0.0.138
O17 - HKLM\System\CS1\Services\Tcpip\..\{20A1FC65-D536-49DA-9271-C4D230574A01}: Domain = vic.bigpond.net.au
O17 - HKLM\System\CS2\Services\Tcpip\..\{20A1FC65-D536-49DA-9271-C4D230574A01}: Domain = vic.bigpond.net.au
O18 - Protocol: bw+0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: wincni32 - wincni32.dll (file missing)
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing) |
|
Thu May 11, 2006 3:24 pm
 |
|
 |
HJT Analyzer
Joined: 15 Mar 2006
Posts: 663
|
| Post subject: My HijackThis log |
|
|
Hello, visitor!
The Hijack This log analyzer has analyzed your log. Please take a closer look on the results.
Your system seems to be infected with malicious parasites. Please follow the steps below in order to eliminate the infection and clean up your computer.
1. Download the Pocket KillBox utility. You will need it later to delete parasite-related files and folders.
2. The following entries are not malicious, but some of them are not used anymore. You may use HijackThis to fix a few of them. However, please keep in mind that some of the entries marked as Questionable or Not Needed are fully legitimate and might be required by installed software to work properly, while some others might be related to certain parasites. It is up to you to decide whether you need any of them, or not.
C:\WINNT\system32\services.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 203.162.116.54:80
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_0.dll (file missing)
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [LDM] E:\Logitech Mouse\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: svchost.exe
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\PartyPoker.exe (file missing)
O9 - Extra ''Tools'' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\PartyPoker.exe (file missing)
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1162
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{20A1FC65-D536-49DA-9271-C4D230574A01}: Domain = vic.bigpond.net.au
O17 - HKLM\System\CCS\Services\Tcpip\..\{F6F0BD01-B596-46FC-8E10-0FE21DAA79DE}: NameServer = 10.0.0.138,10.0.0.138
O17 - HKLM\System\CS1\Services\Tcpip\..\{20A1FC65-D536-49DA-9271-C4D230574A01}: Domain = vic.bigpond.net.au
O17 - HKLM\System\CS2\Services\Tcpip\..\{20A1FC65-D536-49DA-9271-C4D230574A01}: Domain = vic.bigpond.net.au
O18 - Protocol: bw+0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {C3738F5E-C509-44EA-8E54-040C18233BEC} - E:\Logitech Mouse\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: wincni32 - wincni32.dll (file missing)
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing)
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)3. Now restart your system in Safe Mode. This step is very important!
4. Use the Pocket KillBox utility to delete the following files:
c:\winnt\system32\atmclk.exe
The following files and Windows registry entries are marked as "unknown". Currently, the HijackThis Log Analyzer cannot provide required information on these items. The files and entries in the list below can be both malicious and fully legitimate. Because of this, please do not take any action! Wait for the forum responders or other forum users to provide you with necessary details and further instructions.
E:\Logitech Mouse\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
E:\Music And STuff\installprevx1(2).exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\SFX167.tmp\PXSetup.exe
O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINNT\System32\hp6836.tmp
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O4 - HKLM\..\Run: [vsc32cnf.exe] C:\Program Files\Roland\VSC32\vsc32cnf.exe
O4 - HKLM\..\Run: [vscvol.exe] C:\Program Files\Roland\VSC32\vscvol.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [PrevxOne] C:\Program Files\Prevx1\PXConsole.exe
O4 - HKCU\..\Run: [PSwitch] C:\Program Files\Proxy Switcher Standard\ProxySwitcher.exe
O4 - HKCU\..\Run: [warez] "C:\Program Files\Warez P2P Client\warez.exe" -h
O4 - Startup: BitTorrent.lnk = E:\bittorrent.exe
O4 - Global Startup: Logitech SetPoint.lnk = E:\Logitech Mouse\SetPoint\SetPoint.exe
After going through all the steps, run another HijackThis scan and post a fresh log to the HijackThis analyzer. It is possible that some parasites your system was infected with were not removed completely and may restore themselves later.
If you want to see more detailed analysis of your log, click here.
Thank you for using the 2-Spyware.com HijackThis log analyzer! |
|
Thu May 11, 2006 3:25 pm
|
|
|
1972vet
Joined: 09 Mar 2006
Posts: 47
|
| Post subject: |
|
|
Let's first back up the Registry.
1. Reboot the computer to safe mode (click F8 when Windows starts).
2. Open a DOS command prompt window ( Start > Run , type 'cmd' (on Windows NT/2000/XP ) or 'command' (on Windows 95/98/Me)) and enter the following commands,
cd %systemroot%\system32\
regsvr32 /u dxmpp.dll
regsvr32 /u ginuerep.dll
attrib -r -h dxmpp.dll
attrib -r -h ginuerep.dll
del /q dxmpp.dll
del /q ginuerep.dll
3. Go to Start > Run, type 'regedit' and click OK to open Registry Editor.
4. Navigate to the key:
'HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run \' .
In the right pane, delete the entry "SpyFalcon" (if exists).
5. Navigate to the key:
"HKEY_LOCAL_MACHINE\ SOFTWARE \ Microsoft \Windows \ CurrentVersion \ Explorer \ SharedTaskScheduler",
In the right pane, find and delete the entry "{D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}"
6. Find and delete the key:
"HKEY_CURRENT_USER \ SOFTWARE \ Classes \ CLSID \ {D1A2E7CD-F5C1-21A8-CA2C-13D0AC72D19D}".
7. Exit Registry Editor.
8. Delete the folder "C:\Program Files\ SpyFalcon" and all the contents in it.
9. Reboot the computer.
Post back a new HijackThis log and let us know if you are still having issues.
Regards,
Disabled Vet |
|
Thu May 11, 2006 9:31 pm
|
|
|
GTO
Joined: 15 Nov 2005
Posts: 1519
|
| Post subject: |
|
|
Hi, Agent. Welcome to the 2-Spyware.com forums!
Please follow these steps:
1. Download the smitRem tool and unpack its files to a chosen folder.
2. Download Pocket KillBox or KillBox utility.
3. Use HijackThis to fix the following entries:
O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINNT\System32\hp6836.tmp
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O4 - Global Startup: svchost.exe
O20 - Winlogon Notify: wincni32 - wincni32.dll (file missing)
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
4. Now restart your system in Safe Mode. This step is very important!
5. Once in Safe Mode, run the smitRem tool by executing the RunThis.bat file.
6. Then use either Pocket KillBox or KillBox to delete the following files (if exist):
C:\WINDOWS\System32\atmclk.exe
C:\WINDOWS\System32\dcomcfg.exe
C:\WINDOWS\System32\twain32.dll
C:\WINDOWS\System32\reglogs.dll
C:\WINDOWS\System32\appmagr.dll
C:\Program Files\winupdates\winupdates.exe
Also delete the folder C:\Program Files\winupdates.
7. After you get done, restart your computer, run new HijackThis scan and post a fresh log here.
P.S. Your system is not up-to-date! You have to install Service Pack 4 for Microsoft Windows 2000. Also apply all latest updates and security fixes. |
|
Sun May 14, 2006 10:33 am
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
Recommended software:
Spyware Doctor
 (91/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and easy-to-manage...
Malwarebytes Anti Malware
 (89/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t have many features. One such...
Spy Sweeper
 (85/100)
Spy Sweeper is one of the most powerful and effective spyware removers available today. This Webroot Software's product uses unique, patent-pending parasite detection and removal...
Windows Defender
 (80/100)
Windows Defender is a free anti-spyware program made by the leading software company to add native spyware protection to its most popular product - the Microsoft Windows operating...
SUPERAntiSpyware
 (75/100)
SUPERAntiSpyware is a powerful, highly effective spyware remover introducing advanced parasite detection and removal features along with reliable real-time protection. The program is not...
Encyclopedia of parasites:
|
