Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Here Is My Hijackthis Log, Please Help Diagnose.


  • Please log in to reply
1 reply to this topic

#1 sharkkriss

sharkkriss

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:11:56 AM

Posted 11 December 2006 - 02:58 AM

here is my hijackthis log, please help diagnose.

Logfile of HijackThis v1.99.1
Scan saved at 23:45:44, on 2006-12-10
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\Media\winlogon.exe
C:\Windows\system32\GRXRBYXNEEDBM.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\program files\internet explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\system32\PV92Tray.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Microsoft\svhost32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\conime.exe
C:\DOCUME~1\user\LOCALS~1\Temp\1.exe
C:\WINDOWS\system32\rundll32.exe
c:\windows\system32\wbem\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\Media\winlogon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\program files\internet explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\Media\winlogon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\user\Desktop\KillBox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\user\Desktop\HijackThis.exe

R3 - URLSearchHook: Miorosoft Office - {7BEBDE34-060C-40E1-ABDD-ED9B0866B2C6} - C:\Program Files\Miorosoft Office\Miorosoft Office.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,rundll32.exe C:\WINDOWS\system32\winsys16_061209.dll start,rundll32.exe C:\WINDOWS\system32\windown_5.dll mymain
O1 - Hosts: 202.75.218.253 www.hao123.com
O1 - Hosts: 202.75.218.253 hao123.com
O1 - Hosts: 202.75.218.253 www.7939.com
O1 - Hosts: 202.75.218.253 www.360safe.com
O1 - Hosts: 202.75.218.253 360safe.com
O1 - Hosts: 202.75.218.253 update.360safe.com
O1 - Hosts: 202.75.218.253 dl.360safe.com
O1 - Hosts: 202.75.218.253 bbs.360safe.com
O1 - Hosts: 202.75.218.253 www.btbaicai.com
O1 - Hosts: 202.75.218.253 btbaicai.com
O1 - Hosts: 202.75.218.253 www.pctutu.com
O1 - Hosts: 202.75.218.253 www.7322.com
O1 - Hosts: 202.75.218.253 www.5566.net
O1 - Hosts: 202.75.218.253 www.9991.com
O1 - Hosts: 202.75.218.253 9991.com
O1 - Hosts: 202.75.218.253 forum.ikaka.com
O1 - Hosts: 202.75.218.253 www.ikaka.com
O1 - Hosts: 202.75.218.253 update.ikaka.com
O1 - Hosts: 202.75.218.253 www.piaoxue.com
O1 - Hosts: 202.75.218.253 forum.jiangmin.com
O1 - Hosts: 202.75.218.253 update.jiangmin.com
O1 - Hosts: 202.75.218.253 post.baidu.com
O1 - Hosts: 202.75.218.253 zhidao.baidu.com
O1 - Hosts: 202.75.218.253 baidu.com
O1 - Hosts: 202.75.218.253 update.rising.com.cn
O1 - Hosts: 202.75.218.253 online.rising.com.cn
O1 - Hosts: 202.75.218.253 dl.pconline.com.cn
O1 - Hosts: 202.75.218.253 space.uwants.com
O1 - Hosts: 202.75.218.253 www.pcav.cn
O1 - Hosts: 202.75.218.253 mopery.hits.io
O1 - Hosts: 202.75.218.253 www.goodmv.cn
O1 - Hosts: 202.75.218.253 www.5566.net
O1 - Hosts: 202.75.218.253 www.piaoxue.com
O1 - Hosts: 202.75.218.253 www.luosoft.com
O1 - Hosts: 202.75.218.253 luosoft.com
O1 - Hosts: 202.75.218.253 www.7255.com
O1 - Hosts: 202.75.218.253 dl.pconline.com.cn
O1 - Hosts: 202.75.218.253 www.spjoy.com
O1 - Hosts: 202.75.218.253 www.adanywhere.cn
O1 - Hosts: 202.75.218.253 ip.adanywhere.cn
O1 - Hosts: 202.75.218.253 ip1.adanywhere.cn
O1 - Hosts: 202.75.218.253 ip2.adanywhere.cn
O1 - Hosts: 202.75.218.253 www.bannerbox.cn
O1 - Hosts: 202.75.218.253 www.caiqiyue.com
O1 - Hosts: 202.75.218.253 www.2t2t.cn
O1 - Hosts: 202.75.218.253 3.a.kal.cn
O1 - Hosts: 202.75.218.253 ip.alexaanywhere.com
O1 - Hosts: 202.75.218.253 go.ipcenter.cn
O1 - Hosts: 202.75.218.253 www.2yin.cn
O1 - Hosts: 202.75.218.253 wwww.systeel.com.cn
O1 - Hosts: 202.75.218.253 go.baibaoxiang.cn
O1 - Hosts: 202.75.218.253 www.gao58.com
O1 - Hosts: 202.75.218.253 www.2tu.cn
O1 - Hosts: 202.75.218.253 www.91tu.cn
O1 - Hosts: 202.75.218.253 www.haotop.com
O1 - Hosts: 202.75.218.253 www.ycdy.com
O1 - Hosts: 202.75.218.253 ycdy.com
O1 - Hosts: 202.75.218.253 www.maipao.com
O1 - Hosts: 202.75.218.253 www.sina-baidu.com
O1 - Hosts: 202.75.218.253 www.maohehe.com
O1 - Hosts: 202.75.218.253 www.1717kan.cn
O1 - Hosts: 202.75.218.253 www.feixue.net
O1 - Hosts: 202.75.218.253 www.xingkongitv.com
O1 - Hosts: 202.75.218.253 about-blank.cc
O1 - Hosts: 202.75.218.253 www.xfkz.com
O1 - Hosts: 202.75.218.253 xfkz.com
O1 - Hosts: 202.75.218.253 www.365tan.com
O1 - Hosts: 202.75.218.253 cg.9e3.com
O1 - Hosts: 202.75.218.253 www.qqplayer.net
O1 - Hosts: 202.75.218.253 www.sosok.com
O1 - Hosts: 202.75.218.253 img.zhangxiu.com
O1 - Hosts: 202.75.218.253 www.okeaa.com
O1 - Hosts: 202.75.218.253 www.winopen.cn
O1 - Hosts: 202.75.218.253 dnl-eu1.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-eu2.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-eu3.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-eu4.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-eu5.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-us1.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-us2.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-us3.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-us4.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-us5.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-ru1.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-ru2.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-ru3.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-ru4.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-ru5.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-jp1.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-jp2.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-jp3.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-jp4.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-jp5.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-kr1.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-kr2.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-kr3.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-kr4.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-kr5.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 ishare.sina.com.cn
O1 - Hosts: 202.75.218.253 www.my123.com
O1 - Hosts: 202.75.218.253 www.58.com
O2 - BHO: IVXMSFRR - {05A88EFF-9288-4BA2-BA79-91C623303AE2} - C:\WINDOWS\system32\SGGYLOVC.DLL
O2 - BHO: AdPopup - {11F09AFD-75AD-4E51-AB43-E09E9351CE16} - "C:\Program Files\Common Files\CPUSH\cpush.dll" (file missing)
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: Info cache - {385AB8C6-FB22-4D17-8834-064E2BA0A6F0} - C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll (file missing)
O2 - BHO: MallObj Class - {3B30B48F-617D-4F73-A20F-D3D54357F103} - C:\WINDOWS\system32\mallgoo2.dll
O2 - BHO: 实用搜索 - {6CFD436C-7AAD-4e50-992F-C0C87A94CAD2} - C:\Program Files\superutilbar\superutilbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: (no name) - {8321A012-6B5F-4928-BC1C-4F1900403D00} - C:\WINDOWS\system32\testBHO.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NewWeb Controller - {9ACEEE31-1440-471B-AA46-72B061FE7D61} - C:\WINDOWS\system32\SCIntruder.dll (file missing)
O2 - BHO: Webacc - {CAC068F3-A608-406B-8581-458788A67694} - C:\WINDOWS\system32\svchost.dll (file missing)
O2 - BHO: XBTP02060 - {E66D09C9-B25B-465e-9E7A-6020E60FB363} - C:\PROGRA~1\MIOROS~1\MIOROS~1.DLL
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\PROGRA~1\FlashGet\getflash.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: Miorosoft Office - {7BEBDE34-060C-40E1-ABDD-ED9B0866B2C6} - C:\Program Files\Miorosoft Office\Miorosoft Office.dll
O3 - Toolbar: 实用搜索工具条2.0 - {03465FF5-00AE-411a-9C34-960ED566EC03} - C:\Program Files\superutilbar\superutilbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [PV92TRAY] PV92Tray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [SOUNDM] winsmd.exe
O4 - HKLM\..\Run: [ms] C:\Program Files\Microsoft\svhost32.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [wlzs2] C:\DOCUME~1\user\LOCALS~1\Temp\wlzs2.exe
O4 - HKLM\..\Run: [zts2] C:\DOCUME~1\user\LOCALS~1\Temp\1.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [avptask] C:\Progra~1\Eset\svch0st.exe
O4 - HKCU\..\Run: [svc] C:\WINDOWS\svchost.exe
O4 - Global Startup: Microsoft Office 27.lnk = C:\Program Files\Common Files\27OSA.EXE
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe (file missing)
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B0F9E677-4C28-4115-B2A2-706E6E3C2C50}: NameServer = 202.188.0.133 202.188.1.5
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: cdl - {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: file - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ftp - {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: gopher - {79EAC9E4-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: http - {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: https - {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ipp - (no CLSID) - (no file)
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: local - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: mailto - {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11D0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll
O18 - Protocol: mk - {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll
O20 - AppInit_DLLs: 371662M.BMP
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: CDBurner - {D92D637A-0FB7-412D-A7E8-29340A580F7E} - C:\WINDOWS\Downloaded Program Files\jaasnt.dll (file missing)
O21 - SSODL: AdobePDF - {D92D666A-0F7B-5892-A7E8-29340333F07E} - c:\program files\internet explorer\PLUGINS\nppdf.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: InsJebooISOS (JebooISOS) - Unknown owner - C:\Windows\system32\GRXRBYXNEEDBM.EXE
O23 - Service: MRTServ - Unknown owner - C:\WINDOWS\system32\MRTServ.exe (file missing)
O23 - Service: Plus Working Service (PlusService) - Unknown owner - C:\WINDOWS\system32\plusservices.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Audio Adapter (VGADown) - Unknown owner - C:\WINDOWS\avp.exe (file missing)
O23 - Service: WebSystem - Unknown owner - C:\WINDOWS\system32\winplayer.exe

BC AdBot (Login to Remove)

 


#2 MFDnSC

MFDnSC

    Ret. Director I/T


  • Members
  • 4,310 posts
  • OFFLINE
  •  
  • Local time:11:56 AM

Posted 11 December 2006 - 10:50 AM

http://download.bleepingcomputer.com/sUBs/...aB/combofix.exe

Double click combofix.exe & follow the prompts.

When finished, it shall produce a log for you. Post that log and a HiJack log in your next reply

Note:
Do not mouseclick combofix's window while its running. That may cause it to stall
===================

Download Hoster from here:
www.funkytoad.com/download/hoster.zip
Run the program Hoster and press Restore Original Hosts, OK, and Exit Program.
"Nothing could be finer than to be in South Carolina ............"

Member ASAP




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users