Web Design & Development |
| |

| | Thread Tools |
|
09-Oct-2005, 03:00 AM
#1 |
| omg guys pls help with this.. ive searched all over the place for solutions.. i use windows XP pro... uninstalled SP2 a while ago coz it made my life more diffiult. my IE has stopped working.. i open it and for the first couple seconds it does nothing, then the bar at the bottom shows up... tht shows progress on how far the page has loaded... and it only goes so far as 3-4 of those green bars and stops there... it says "conneting to.." but i wait indefinitely and nothing happens!?!?! theres certain sites tht only work on IE for school and i NEED IT :'( ALSO, every now n then wen my computers been on and firefox has been left unattended ( like wen i go to university ) i come bak and try to work it and nothing happens.. it just says "looking up" no matter wht website i type in .. i try ervything including reinstalling it .. but only a reboot seems to solve it... i HATE to reboot all the time.. and its very unpredictable.. it will work now and not the next min.. and with IE bailing on me .. its a ruff situation! i run norton antivirus 2005, zone alarm, spysweeper, spybot, adaware, spyware blaster, cw shredder.... i cant seem to find anything thats controlling my browsers?! pls pls help with this! i tried ie fix and it didnt work! ![]() |
|
09-Oct-2005, 03:25 AM
#2 |
| does it work long enough to download HijackThis 1.99.1 & post it here? |
|
09-Oct-2005, 10:39 AM
#3 |
| thanx for the ti... heres the log! Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Windows\system32\LEXBCES.EXE C:\Windows\system32\spoolsv.exe C:\Windows\system32\LEXPPS.EXE C:\Windows\System32\alg.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\Windows\System32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Windows\system32\wdfmgr.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\Raxco\PerfectDisk\PDSched.exe C:\Windows\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Windows\System32\hostsvcs.exe C:\PROGRA~1\PESTPA~1\PPControl.exe C:\PROGRA~1\PESTPA~1\PPMemCheck.exe C:\PROGRA~1\PESTPA~1\CookiePatrol.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe C:\Program Files\Blitzz\BWU713\WU713STA.EXE C:\Program Files\Lexmark X74-X75\lxbbbmon.exe C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\BitTornado\btdownloadgui.exe C:\Documents and Settings\Administrator\Local Settings\Temp\IEFix.exe C:\PROGRA~1\WINZIP\winzip32.exe C:\Documents and Settings\Administrator\Local Settings\Temp\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mugglenet.com/ O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {8FFCE2DB-D3DD-2385-DAF3-1BB65CF5BC23} - (no file) O2 - BHO: (no name) - {930AFCFF-CD81-7D1F-DF84-B99B9ECA20CC} - C:\DOCUME~1\ADMINI~1\APPLIC~1\OPENCA~1\Tons Logo.exe (file missing) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\Windows\system32\msdxm.ocx O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\en-us\msntb.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [Cpqset] C:\Program Files\compaq\cpqsetup\cpqset.exe O4 - HKLM\..\Run: [hostsvcs] C:\Windows\System32\hostsvcs.exe O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe" O4 - HKLM\..\Run: [WU713STA.EXE] "C:\Program Files\Blitzz\BWU713\WU713STA.EXE" /START O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\Windows\System32\PRISMSVR.EXE" /APPLY O4 - HKLM\..\Run: [D-Link AirPlus XtremeG] C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKCU\..\Run: [hostsvcs] C:\Windows\System32\hostsvcs.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - Startup: zone alarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Bookshelf - c:\Bookshelf.TR\TRBookshelf_.dll.button.js O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm O8 - Extra context menu item: Enqueue in Star Downloader - C:\Program Files\Star Downloader\sdieenq.htm O8 - Extra context menu item: Leech with Star Downloader - C:\Program Files\Star Downloader\leechie.htm O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Windows\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Windows\web\related.htm O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\system32\LEXBCES.EXE O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Protected Exchange (MainService) - Unknown owner - C:\Windows\system32\prtcom.exe (file missing) O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe |
|
09-Oct-2005, 06:41 PM
#5 |
| Click here to download the trial version of Ewido Security Suite: http://www.ewido.net/en/download/ · Install Ewido. · During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu". · Launch ewido. · It will prompt you to update click the OK button and it will go to the main screen. · On the left side of the main screen click update. · Click on Start and let it update. · DO NOT run a scan yet. Restart your computer into Safe Mode now. (Start tapping the F8 key at Startup, before the Windows logo screen). Perform the following steps in Safe Mode: * Run Ewido: Click on scanner Click Complete System Scan and the scan will begin. During the scan it will prompt you to clean files, click OK. When the scan is finished, look at the bottom of the screen and click the Save report button. Save the report to your desktop. Reboot. Post a new Hijack This log and the results of the Ewido scan.
__________________ Member of ASAP Microsoft MVP/Windows - Consumer Security If we've helped, please donate to TSG. |
|
09-Oct-2005, 11:25 PM
#7 |
| --------------------------------------------------------- ewido security suite - Scan report --------------------------------------------------------- + Created on: 10:59:56 PM, 10/9/2005 + Report-Checksum: D243F1A2 + Scan result: HKU\S-1-5-21-3563514748-2690133624-1694720459-500\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Ignored :mozilla.35:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\orcsk663.default\cookies.txt -> Spyware.Cookie.Com : Ignored :mozilla.36:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\orcsk663.default\cookies.txt -> Spyware.Cookie.Com : Ignored :mozilla.109:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\orcsk663.default\cookies.txt -> Spyware.Cookie.Googleadservices : Ignored :mozilla.33:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Ignored :mozilla.34:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Ignored :mozilla.35:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Ignored :mozilla.36:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Ignored :mozilla.37:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Ignored HKLM\SOFTWARE\Classes\Interface\{CDE7C7D7-EDD4-4FE4-BA9E-7D8DE6E82EDA}\TypeLib\\ -> Spyware.RapidBlaster : Cleaned with backup HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Cleaned with backup :mozilla.89:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\orcsk663.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.38:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.76:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.77:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.78:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.79:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.95:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup :mozilla.96:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup :mozilla.110:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup :mozilla.111:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup :mozilla.116:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.117:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.179:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Pro-market : Cleaned with backup :mozilla.180:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Pro-market : Cleaned with backup :mozilla.198:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup :mozilla.199:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup :mozilla.203:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup :mozilla.204:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup :mozilla.243:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.246:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.247:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.248:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.249:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.255:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Adengage : Cleaned with backup :mozilla.256:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Adengage : Cleaned with backup :mozilla.257:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.258:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.259:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.260:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.261:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.262:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Adengage : Cleaned with backup :mozilla.298:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.321:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.27:C:\Documents and Settings\Moowisha\Application Data\Mozilla\Firefox\Profiles\default.sxq\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup :mozilla.28:C:\Documents and Settings\Moowisha\Application Data\Mozilla\Firefox\Profiles\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.29:C:\Documents and Settings\Moowisha\Application Data\Mozilla\Firefox\Profiles\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.30:C:\Documents and Settings\Moowisha\Application Data\Mozilla\Firefox\Profiles\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.31:C:\Documents and Settings\Moowisha\Application Data\Mozilla\Firefox\Profiles\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup ::Report End HERE IS THE EWIDO LOG... OMG IT FOUND ALMOST 49 THINGS, I FORGOT ABOUT YOU SAYING I SHUD DELETE, SO THE FIRST 9 ARE IGNORED.. ILL RUN THIS WHOLE THING AGAIN, BUT TELL ME IF U SEE ANYTHING FROM HHERE... HJAK THIS LOG COMING UP |
|
09-Oct-2005, 11:33 PM
#8 |
| Post a new Hijack This log too please ![]() |
|
09-Oct-2005, 11:38 PM
#9 |
| --------------------------------------------------------- ewido security suite - Scan report --------------------------------------------------------- + Created on: 10:59:56 PM, 10/9/2005 + Report-Checksum: D243F1A2 + Scan result: HKU\S-1-5-21-3563514748-2690133624-1694720459-500\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Ignored :mozilla.35:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\orcsk663.default\cookies.txt -> Spyware.Cookie.Com : Ignored :mozilla.36:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\orcsk663.default\cookies.txt -> Spyware.Cookie.Com : Ignored :mozilla.109:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\orcsk663.default\cookies.txt -> Spyware.Cookie.Googleadservices : Ignored :mozilla.33:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Ignored :mozilla.34:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Ignored :mozilla.35:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Ignored :mozilla.36:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Ignored :mozilla.37:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Ignored HKLM\SOFTWARE\Classes\Interface\{CDE7C7D7-EDD4-4FE4-BA9E-7D8DE6E82EDA}\TypeLib\\ -> Spyware.RapidBlaster : Cleaned with backup HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Cleaned with backup :mozilla.89:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\orcsk663.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.38:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.76:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.77:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.78:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.79:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.95:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup :mozilla.96:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup :mozilla.110:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup :mozilla.111:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup :mozilla.116:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.117:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.179:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Pro-market : Cleaned with backup :mozilla.180:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Pro-market : Cleaned with backup :mozilla.198:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup :mozilla.199:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup :mozilla.203:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup :mozilla.204:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup :mozilla.243:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.246:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.247:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.248:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.249:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.255:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Adengage : Cleaned with backup :mozilla.256:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Adengage : Cleaned with backup :mozilla.257:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.258:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.259:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.260:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.261:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.262:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Adengage : Cleaned with backup :mozilla.298:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.321:C:\Documents and Settings\Administrator\My Documents\default.sxq\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.27:C:\Documents and Settings\Moowisha\Application Data\Mozilla\Firefox\Profiles\default.sxq\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup :mozilla.28:C:\Documents and Settings\Moowisha\Application Data\Mozilla\Firefox\Profiles\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.29:C:\Documents and Settings\Moowisha\Application Data\Mozilla\Firefox\Profiles\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.30:C:\Documents and Settings\Moowisha\Application Data\Mozilla\Firefox\Profiles\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.31:C:\Documents and Settings\Moowisha\Application Data\Mozilla\Firefox\Profiles\default.sxq\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup ::Report End HERE IT IS |
|
09-Oct-2005, 11:39 PM
#10 |
| Logfile of HijackThis v1.99.1 Scan saved at 11:37:47 PM, on 10/9/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Windows\system32\LEXBCES.EXE C:\Windows\system32\LEXPPS.EXE C:\Windows\system32\spoolsv.exe C:\Windows\System32\alg.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Windows\Explorer.EXE C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\Windows\System32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Windows\system32\wdfmgr.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Windows\System32\hostsvcs.exe C:\PROGRA~1\PESTPA~1\PPControl.exe C:\PROGRA~1\PESTPA~1\PPMemCheck.exe C:\PROGRA~1\PESTPA~1\CookiePatrol.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe C:\Program Files\Blitzz\BWU713\WU713STA.EXE C:\Windows\System32\PRISMSVR.EXE C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe C:\Program Files\Lexmark X74-X75\lxbbbmon.exe C:\Program Files\Raxco\PerfectDisk\PDSched.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Skype\Phone\Skype.exe C:\Windows\System32\ZoneLabs\vsmon.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\PROGRA~1\WINZIP\winzip32.exe C:\Documents and Settings\Administrator\Local Settings\Temp\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mugglenet.com/ O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {8FFCE2DB-D3DD-2385-DAF3-1BB65CF5BC23} - (no file) O2 - BHO: (no name) - {930AFCFF-CD81-7D1F-DF84-B99B9ECA20CC} - C:\DOCUME~1\ADMINI~1\APPLIC~1\OPENCA~1\Tons Logo.exe (file missing) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\Windows\system32\msdxm.ocx O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\en-us\msntb.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [Cpqset] C:\Program Files\compaq\cpqsetup\cpqset.exe O4 - HKLM\..\Run: [hostsvcs] C:\Windows\System32\hostsvcs.exe O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe" O4 - HKLM\..\Run: [WU713STA.EXE] "C:\Program Files\Blitzz\BWU713\WU713STA.EXE" /START O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\Windows\System32\PRISMSVR.EXE" /APPLY O4 - HKLM\..\Run: [D-Link AirPlus XtremeG] C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKCU\..\Run: [hostsvcs] C:\Windows\System32\hostsvcs.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - Startup: zone alarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Bookshelf - c:\Bookshelf.TR\TRBookshelf_.dll.button.js O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm O8 - Extra context menu item: Enqueue in Star Downloader - C:\Program Files\Star Downloader\sdieenq.htm O8 - Extra context menu item: Leech with Star Downloader - C:\Program Files\Star Downloader\leechie.htm O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\system32\LEXBCES.EXE O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Protected Exchange (MainService) - Unknown owner - C:\Windows\system32\prtcom.exe (file missing) O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe HERE SORRY |
|
09-Oct-2005, 11:46 PM
#11 |
| Download KillBox here: http://www.downloads.subratam.org/KillBox.zip Save it to your desktop. DO NOT run it yet. We will use it later. Hijack This is running from the Temp folder. It needs to be in a permanent folder on the hard drive. It will not function properly from there and it cannot create and restore backups from there. Redownload it here: http://thespykiller.co.uk/files/hijackthis_sfx.exe Let it extract to C:\Program Files Rerun it from there and post a new log.
__________________ Member of ASAP Microsoft MVP/Windows - Consumer Security If we've helped, please donate to TSG. |
|
09-Oct-2005, 11:52 PM
#13 |
| I know you ran Hijack This but we need to do fixes with it. We can't do the fixes until it's in a permanent folder. |
|
09-Oct-2005, 11:53 PM
#14 |
| here is another HJT log anyway just incase ![]() Logfile of HijackThis v1.99.1 Scan saved at 11:52:02 PM, on 10/9/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Windows\system32\LEXBCES.EXE C:\Windows\system32\LEXPPS.EXE C:\Windows\system32\spoolsv.exe C:\Windows\System32\alg.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Windows\Explorer.EXE C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\Windows\System32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Windows\system32\wdfmgr.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Windows\System32\hostsvcs.exe C:\PROGRA~1\PESTPA~1\PPControl.exe C:\PROGRA~1\PESTPA~1\PPMemCheck.exe C:\PROGRA~1\PESTPA~1\CookiePatrol.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe C:\Program Files\Blitzz\BWU713\WU713STA.EXE C:\Windows\System32\PRISMSVR.EXE C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe C:\Program Files\Lexmark X74-X75\lxbbbmon.exe C:\Program Files\Raxco\PerfectDisk\PDSched.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Skype\Phone\Skype.exe C:\Windows\System32\ZoneLabs\vsmon.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Administrator\My Documents\hijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mugglenet.com/ O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {8FFCE2DB-D3DD-2385-DAF3-1BB65CF5BC23} - (no file) O2 - BHO: (no name) - {930AFCFF-CD81-7D1F-DF84-B99B9ECA20CC} - C:\DOCUME~1\ADMINI~1\APPLIC~1\OPENCA~1\Tons Logo.exe (file missing) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\Windows\system32\msdxm.ocx O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\en-us\msntb.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [Cpqset] C:\Program Files\compaq\cpqsetup\cpqset.exe O4 - HKLM\..\Run: [hostsvcs] C:\Windows\System32\hostsvcs.exe O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe" O4 - HKLM\..\Run: [WU713STA.EXE] "C:\Program Files\Blitzz\BWU713\WU713STA.EXE" /START O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\Windows\System32\PRISMSVR.EXE" /APPLY O4 - HKLM\..\Run: [D-Link AirPlus XtremeG] C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKCU\..\Run: [hostsvcs] C:\Windows\System32\hostsvcs.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - Startup: zone alarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Bookshelf - c:\Bookshelf.TR\TRBookshelf_.dll.button.js O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm O8 - Extra context menu item: Enqueue in Star Downloader - C:\Program Files\Star Downloader\sdieenq.htm O8 - Extra context menu item: Leech with Star Downloader - C:\Program Files\Star Downloader\leechie.htm O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\system32\LEXBCES.EXE O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Protected Exchange (MainService) - Unknown owner - C:\Windows\system32\prtcom.exe (file missing) O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe |
|
09-Oct-2005, 11:56 PM
#15 |
| PS : in the log i see stuff like blitzz and d link running when im not using them .. im already having my CPU running at 100% and getting stuck all the time... where is all this unused stuff running from? |
![]() |

| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |

| Thread Tools | |
| |
| You Are Using: |
Advertisements do not imply our endorsement of that product or service. All times are GMT -4. The time now is 12:52 AM. Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved. Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd. Search Engine Optimization by vBSEO 3.1.0 | |




