main.txt - notepad

Advertise at AfterDawn.com

Link to us!

Private messages

Compose a private message

List of all updated threads

Threads without replies

Search messages

Sunday 7.9.2025 / 03:13

Search AfterDawn Forums:

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > main.txt - notepad

Browse by topic

Forums

Start a new thread

main.txt - notepad

Jump to:

Posted

Message

donbone

Newbie

12. August 2007 @ 06:29

Link to this message

Deckard's System Scanner v20070809.63
Run by dindo on 2007-08-12 at 22:19:38
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.

-- Last 5 Restore Point(s) --
86: 2007-08-12 14:19:42 UTC - RP235 - Deckard's System Scanner Restore Point
85: 2007-08-12 01:57:22 UTC - RP234 - System Checkpoint
84: 2007-08-11 01:54:31 UTC - RP233 - System Checkpoint
83: 2007-08-09 14:35:44 UTC - RP232 - System Checkpoint
82: 2007-08-07 17:54:30 UTC - RP231 - Installed Nero 7

-- First Restore Point --
1: 2007-05-14 13:05:04 UTC - RP150 - System Checkpoint

Backed up registry hives.
Performed disk cleanup.

-- HijackThis (run as dindo.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:22, on 2007-08-12
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\PROGRA~1\CHIKKA~2\CHIKKA~1.4\ChikkaLauncher.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Metacafe\MetacafeAgent.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\dss.exe
C:\WINDOWS\system32\taskmgr.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\dindo.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defa...rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: (no name) - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - (no file)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [VGAUtil] C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [EasyTuneV] C:\Program Files\Gigabyte\ET5\GUI.exe
O4 - HKLM\..\Run: [FusionRemote] C:\Program Files\DVICO\FusionHDTV\Remote\FusionRc.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE A4 Tech USB PC Camera
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [ChikkaDefault] C:\PROGRA~1\CHIKKA~2\CHIKKA~1.4\ChikkaLauncher.exe
O4 - HKCU\..\Run: [Chikka] C:\PROGRA~1\CHIKKA~2\CHIKKA~1.4\\ChikkaLauncher.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Metacafe.lnk = C:\Program Files\Metacafe\MetacafeAgent.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Metacafe.lnk = C:\Program Files\Metacafe\MetacafeAgent.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/25175/7d/...cat-no-eula.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupd...b?1167722011093
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupd...b?1167721997312
O20 - AppInit_DLLs: wbsys.dll C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O24 - Desktop Component 0: (no name) - http://us.i1.yimg.com/us.yimg.com/i/us/nt/ma/ma_mail_1.gif

--
End of file - 11061 bytes

-- HijackThis Fixed Entries (C:\PROGRA~1\TRENDM~1\HIJACK~1\backups\) -----------

backup-20070812-221337-279 O2 - BHO: (no name) - ??´497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
backup-20070812-221337-374 O2 - BHO: (no name) - P?´49E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
backup-20070812-221337-406 O2 - BHO: (no name) - ¨´¨´D-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
backup-20070812-221337-584 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
backup-20070812-221337-595 O2 - BHO: (no name) - ?´78D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
backup-20070812-221337-677 R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
backup-20070812-221337-770 O2 - BHO: (no name) - rsion - (no file)
backup-20070812-221337-948 O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

-- File Associations -----------------------------------------------------------

All associations okay.

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R2 cx88xbar (FusionHDTV 88x, WDM Crossbar) - c:\windows\system32\drivers\zl88xbar.sys
R2 LBeepKE - c:\windows\system32\drivers\lbeepke.sys
R2 Zulu88Tune (FusionHDTV 88x, WDM Tuner(DVB-T PRO)) - c:\windows\system32\drivers\zl88tune.sys
R2 Zulu88Vid (FusionHDTV 88x, WDM Video Capture) - c:\windows\system32\drivers\zl88vcap.sys
R3 CXAVSAUD (FusionHDTV 880, WDM Audio Capture) - c:\windows\system32\drivers\zl88aud.sys
R3 ET5Drv - c:\windows\system32\drivers\et5drv.sys
R3 GPCIDrv - c:\windows\gpcidrv.sys
R3 GVTDrv - c:\windows\system32\drivers\gvtdrv.sys
R3 Zulu88BDA (FusionHDTV 88x, BDA DVB Tuner/Demod) - c:\windows\system32\drivers\zl88bda.sys
R3 Zulu88Ts (FusionHDTV 88x, BDA Receiver(DVB-T)) - c:\windows\system32\drivers\zl88tcap.sys

S3 GVCplDrv - c:\windows\system32\drivers\gvcpldrv.sys
S3 Uplink - c:\windows\system32\drivers\uplink.sys
S3 ZSMC301b (A4 Tech USB PC Camera) - c:\windows\system32\drivers\usbvm31b.sys

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe"

S3 NBService - c:\program files\nero\nero 7\nero backitup\nbservice.exe

-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.

-- Scheduled Tasks -------------------------------------------------------------

2007-08-12 22:05:00 256 --a------ C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job
2007-08-12 16:56:22 422 --ah----- C:\WINDOWS\Tasks\User_Feed_Synchronization-{522E7E38-8A27-480D-BC95-2BE099DBC7FB}.job
2007-08-03 07:58:00 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2007-07-08 03:30:00 426 --a------ C:\WINDOWS\Tasks\RegistrySmart Scheduled Scan.job

-- Files created between 2007-07-12 and 2007-08-12 -----------------------------

2007-08-12 22:19:01 599047 --a------ C:\dss.exe
2007-08-12 22:09:30 0 d-------- C:\Program Files\Trend Micro
2007-08-12 21:47:47 0 d-------- C:\Documents and Settings\dindo\Application Data\Comodo
2007-08-12 21:47:42 0 d-------- C:\Documents and Settings\All Users\Application Data\Comodo
2007-08-12 21:11:08 0 d-------- C:\Program Files\Comodo
2007-08-12 00:33:22 1412580 --a------ C:\ComboFix.exe
2007-08-08 15:38:19 0 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-08-08 03:03:27 1117491 --a------ C:\dvdshrink32setup.exe DVD Shrink; >
2007-08-08 01:54:37 0 d-------- C:\Documents and Settings\All Users\Application Data\Nero
2007-08-08 01:00:14 0 d-------- C:\SmartRipper 2.41
2007-08-08 00:18:50 0 d-------- C:\Program Files\RegCleaner
2007-08-08 00:18:11 553687 --a------ C:\regcleaner.exe
2007-08-07 23:01:23 0 d-------- C:\Program Files\PC-BugCleaner
2007-08-07 22:59:45 492827 --a------ C:\bcsetup.exe
2007-08-07 22:54:33 2521 --a------ C:\xp_taskbar_desktop_fixall.vbs
2007-08-03 08:17:45 0 d-------- C:\Program Files\iPod
2007-08-03 08:17:42 0 d-------- C:\Program Files\iTunes
2007-07-28 21:26:47 0 d-------- C:\Documents and Settings\ellen\Application Data\Sun
2007-07-26 20:37:50 0 d-------- C:\Documents and Settings\dindo\Application Data\Ahead
2007-07-26 20:37:24 0 d-------- C:\Documents and Settings\All Users\Application Data\Ahead
2007-07-26 20:30:22 0 d-------- C:\Program Files\AskTBar
2007-07-25 22:06:38 0 d-------- C:\Nero 7 Keygen from Embrace
2007-07-23 11:40:53 31232 --a------ C:\WINDOWS\system32\drivers\Uplink.sys
2007-07-23 11:39:32 0 d-------- C:\Documents and Settings\dindo\Application Data\NCH Swift Sound
2007-07-23 11:37:19 0 d-------- C:\Program Files\NCH Swift Sound
2007-07-23 11:37:19 0 d-------- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
2007-07-13 10:52:44 0 d-------- C:\Documents and Settings\dindo\Application Data\Image Zone Express
2007-07-13 08:07:03 0 d-------- C:\Program Files\QuickTime

-- Find3M Report ---------------------------------------------------------------

2007-08-12 21:47:39 5112 --a------ C:\WINDOWS\GPCIDrv.sys
2007-08-12 21:30:46 0 d-------- C:\Documents and Settings\dindo\Application Data\Metacafe
2007-08-08 10:10:13 0 d-------- C:\Documents and Settings\dindo\Application Data\dvdcss
2007-08-08 01:56:02 0 d-------- C:\Program Files\Common Files\Ahead
2007-08-07 23:46:20 0 d-------- C:\Documents and Settings\dindo\Application Data\Skype
2007-08-07 02:56:39 0 d-------- C:\Documents and Settings\dindo\Application Data\uTorrent
2007-08-06 11:58:42 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2007-07-26 19:28:08 0 d-------- C:\Program Files\Common Files
2007-07-22 10:32:28 0 d-------- C:\Documents and Settings\dindo\Application Data\Apple Computer
2007-07-17 13:20:49 0 d-------- C:\Program Files\Java
2007-07-11 22:33:54 0 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-07-11 22:26:49 36803 --a------ C:\Documents and Settings\dindo\Application Data\PatchUpdate_HP_CounterReport_Update_HPSU.log
2007-07-11 22:07:59 2067 --a------ C:\Documents and Settings\dindo\Application Data\HPSU_48BitScanUpdate.log
2007-07-11 22:06:32 0 d-------- C:\Program Files\HP
2007-07-11 22:04:23 524585 --a------ C:\Documents and Settings\dindo\Application Data\Update_HP_RedboxHprblog_HPSU.log
2007-07-11 22:03:32 139264 --a------ C:\WINDOWS\system32\hpzjrd01.dll
2007-07-11 18:14:47 945 --a------ C:\Documents and Settings\dindo\Application Data\Hewlett-PackardHP Officejet 5600 series1184058674_UI.log
2007-07-11 18:14:47 2484 --a------ C:\Documents and Settings\dindo\Application Data\Hewlett-PackardHP Officejet 5600 series1184058674_PROTOCOL.log
2007-07-10 18:30:50 107 --a------ C:\Documents and Settings\dindo\Application Data\Hewlett-PackardHP Officejet 5600 series1184058674_API.log
2007-07-10 18:29:11 0 d-------- C:\Documents and Settings\dindo\Application Data\HP
2007-07-10 17:21:09 112962 --a------ C:\WINDOWS\hpoins07.dat
2007-07-10 17:11:02 0 d-------- C:\Program Files\Common Files\HP
2007-07-10 17:08:10 0 d-------- C:\Program Files\Hewlett-Packard
2007-07-10 17:06:48 0 d-------- C:\Program Files\Common Files\Hewlett-Packard
2007-07-09 10:46:44 85888 --a------ C:\Documents and Settings\dindo\Application Data\GDIPFONTCACHEV1.DAT
2007-07-05 16:08:03 0 d-------- C:\Program Files\Common Files\Apple
2007-07-03 08:15:14 0 d-------- C:\Program Files\Yahoo!

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-07-28 06:03]
"RTHDCPL"="RTHDCPL.EXE" [2005-09-22 13:36 C:\WINDOWS\RTHDCPL.EXE]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2006-06-01 17:22]
"nwiz"="nwiz.exe" [2006-06-01 17:22 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="NvMCTray.dll" [2006-06-01 17:22 C:\WINDOWS\system32\nvmctray.dll]
"VGAUtil"="C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe" [2006-07-12 15:27]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 20:24]
"EasyTuneV"="C:\Program Files\Gigabyte\ET5\GUI.exe" [2004-06-14 11:54]
"FusionRemote"="C:\Program Files\DVICO\FusionHDTV\Remote\FusionRc.exe" [2006-10-26 17:06]
"BigDogPath"="C:\WINDOWS\VM_STI.exe" [2004-02-24 16:00]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]
"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 16:34]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-01-23 14:44 C:\WINDOWS\KHALMNPR.Exe]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 06:24]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-07-31 18:44]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57]
"COMODO Firewall Pro"="C:\Program Files\Comodo\Firewall\CPF.exe" [2007-08-12 21:11]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-08-12 21:48]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-09 22:25]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 19:03]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 11:54]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 15:45]
"ChikkaDefault"="C:\PROGRA~1\CHIKKA~2\CHIKKA~1.4\ChikkaLauncher.exe" [2007-04-11 18:40]
"Chikka"="C:\PROGRA~1\CHIKKA~2\CHIKKA~1.4\\ChikkaLauncher.exe" [2007-04-11 18:40]

C:\Documents and Settings\dindo\Start Menu\Programs\Startup\
Metacafe.lnk - C:\Program Files\Metacafe\MetacafeAgent.exe [2007-02-22 07:43:46]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-01-02 17:53:00]
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 21:05:26]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2005-05-11 23:23:26]
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2007-03-06 14:32:32]
Metacafe.lnk - C:\Program Files\Metacafe\MetacafeAgent.exe [2007-02-22 07:43:46]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoBandCustomize"=0 (0x0)
"NoMovingBands"=0 (0x0)
"NoCloseDragDropBands"=0 (0x0)
"NoSetTaskbar"=0 (0x0)
"NoToolbarsOnTaskbar"=0 (0x0)
"NoSaveSettings"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll 2006-10-10 16:53 135168 C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=wbsys.dll C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"

*Newly Created Service* - CMDAGENT
*Newly Created Service* - CMDMON
*Newly Created Service* - GOOGLEDESKTOPMANAGER
*Newly Created Service* - INSPECT

-- End of Deckard's System Scanner: finished at 2007-08-12 at 22:23:43 ---------

[ + quote]

Auttaja

Suspended permanently

12. August 2007 @ 08:32

Link to this message

Please dont start new topic.. http://forums.afterdawn.com/thread_view.cfm/545847

post that log there.. Dont start anymore new topics, I will assist you in original topic

[ + quote]

Don´t send your HijackThis log to another user topic. Remember to describe what kind of problems you have. (In my opinion afterdawn has very unsupportive attitude against malware fighters)
How to send HijackThis log (step 3-5)Hijackthis login lähettämisohjeet (Finland)
My profile "Therefore I say to you, do not worry about your life, what you will eat or what you will drink; nor about your body, what you will put on."
My home forum (Finland) Geeks To Go - Another place
List of rogue programs. (Finland) For exampe MSG+ is there. Another list

Start a new thread

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > main.txt - notepad


		User name	Password

		Not registered yet? Register here. Lost your password? Click here.