HJT log

Advertise at AfterDawn.com

Link to us!

Private messages

Compose a private message

List of all updated threads

Threads without replies

Search messages

Thursday 6.3.2025 / 13:29

Search AfterDawn Forums:

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > hjt log

Browse by topic

Forums

Start a new thread

HJT log

Jump to:

Posted

Message

anarkya

Junior Member

19. August 2006 @ 18:19

Link to this message

Hello,
Here's my friend HjT log, Can you guys look at it? he is having some problems with his PC. His clock move 3 times faster and he cannot connect to Firefox and msn.
I made him run Vundofix and Smitfraudfix and it didnt help.

Thank you for your help.

Anarkya

Logfile of HijackThis v1.99.1
Scan saved at 7:15:47 PM, on 8/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Softimage\XSI_5.0\Application\bin\ray3xsi5_0server.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\anyone\Desktop\HijackThis_v1.99.1.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\kernels64.exe
O2 - BHO: (no name) - {007B911E-5570-A396-6F4A-A0CC235143DC} - (no file)
O2 - BHO: (no name) - {007F3E5D-5957-E86E-8681-82EE2B1C5E7F} - (no file)
O2 - BHO: (no name) - {01397EFB-DB13-FC80-D515-37FE199B36B4} - (no file)
O2 - BHO: (no name) - {0155F0FD-B763-E202-7DD5-FD3E8D258B75} - (no file)
O2 - BHO: (no name) - {026DEDBF-DB64-0143-D3F3-260B28824F6B} - (no file)
O2 - BHO: (no name) - {03447597-2072-30AA-1960-A7E155CE5AC6} - (no file)
O2 - BHO: (no name) - {05C14565-6A58-3226-F0E3-0143E875B618} - (no file)
O2 - BHO: (no name) - {063FF24F-53A7-58B0-86E1-F81C9BAAFF3A} - (no file)
O2 - BHO: (no name) - {0664BE2E-CCA3-0F0E-86A7-E0ABFA0E5932} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {07DABBD5-6266-88F3-4EEF-7DCA2FA9AB12} - (no file)
O2 - BHO: (no name) - {07F009CC-0ADE-5083-F469-92CE6474B119} - (no file)
O2 - BHO: (no name) - {089ABD91-26C6-7AA0-2AB0-C46C5C3AF77F} - (no file)
O2 - BHO: (no name) - {094C8991-D4CA-2D16-BFB0-B84ABF8D27DA} - (no file)
O2 - BHO: (no name) - {0D6ECE59-7291-07DE-DCA0-00ABE0C14F46} - (no file)
O2 - BHO: (no name) - {11897CC4-53D0-91EC-CD00-264D5155B63E} - (no file)
O2 - BHO: (no name) - {131BF8BB-81BA-2059-36D4-F6347DFAFF17} - (no file)
O2 - BHO: (no name) - {13C5C5B6-9C48-F9B9-B1DD-39AF7595AF49} - (no file)
O2 - BHO: (no name) - {13DFFD82-94B1-31CB-5C0B-300B9E37563F} - (no file)
O2 - BHO: (no name) - {165E6766-EBA8-44B6-A74C-0B7B4D913A32} - (no file)
O2 - BHO: (no name) - {16D60090-130F-47CE-41BD-1AFF536AC88E} - (no file)
O2 - BHO: (no name) - {184CF53A-43DD-BBD2-D3F8-E5964A5DC684} - (no file)
O2 - BHO: (no name) - {18E79D78-37FF-46FB-174F-D52C8A9B4AA4} - (no file)
O2 - BHO: (no name) - {18EA7FE0-8BD6-2D3D-4A77-6732EFEC2B2C} - (no file)
O2 - BHO: (no name) - {18EA91F9-6792-38ED-9791-EC436A3BB3CF} - (no file)
O2 - BHO: (no name) - {199D9E0B-2F5F-DA98-2B62-FA9AA3710DD5} - (no file)
O2 - BHO: (no name) - {19A743FF-D985-0DCF-CFC2-5DE372D16830} - (no file)
O2 - BHO: (no name) - {1C5CF169-7102-1F3D-5594-86EE2D6D9EE0} - (no file)
O2 - BHO: (no name) - {1E883F2F-29E2-AD4B-A546-1CFC8B6CBE28} - (no file)
O2 - BHO: (no name) - {205C6908-B58B-58E1-DDB3-F55EC80EF005} - (no file)
O2 - BHO: (no name) - {21DD6C43-4909-73BD-AC73-F4B1A19AC112} - (no file)
O2 - BHO: (no name) - {235AC682-1EA0-63EA-569B-DB01B824F50A} - (no file)
O2 - BHO: (no name) - {25BC0079-2A8E-B1F2-44CA-1C9AE7CFE95A} - (no file)
O2 - BHO: (no name) - {26292D92-C47D-8978-68F1-EADFBF80E5DD} - (no file)
O2 - BHO: (no name) - {2B059896-BB0E-9E34-798B-01B795993144} - (no file)
O2 - BHO: (no name) - {2B4E1834-BFE0-707E-3449-46EC0AEDF9DC} - (no file)
O2 - BHO: (no name) - {2CEB755B-6BCC-9879-D315-A49FBFA75BD7} - (no file)
O2 - BHO: (no name) - {2FD1CA00-24E1-FC67-3211-CC143E32E448} - (no file)
O2 - BHO: (no name) - {321EE6F6-38D2-4E50-0092-8423258A5117} - (no file)
O2 - BHO: (no name) - {32D49AC6-E2D7-4904-D7DB-D80E36A7A1A3} - (no file)
O2 - BHO: (no name) - {338E9F9A-BBF9-233A-33C3-E48A66C94FFA} - (no file)
O2 - BHO: (no name) - {34575C2A-5B57-EBAD-7D49-F18EE966FA39} - (no file)
O2 - BHO: (no name) - {347CE5A5-6599-8A80-9D8E-06843CFEDD27} - (no file)
O2 - BHO: (no name) - {3487A0E4-207B-E09F-81B8-A8EDBD853E83} - (no file)
O2 - BHO: (no name) - {369D3C07-F0E6-911F-75DF-C3B06260CE96} - (no file)
O2 - BHO: (no name) - {371FF568-518E-125B-A6C7-DE20312D535C} - (no file)
O2 - BHO: (no name) - {382544E1-147D-F605-A678-BBD18A0F3232} - (no file)
O2 - BHO: (no name) - {395AC10C-9B60-248F-194C-9D8697C487C3} - (no file)
O2 - BHO: (no name) - {3A175AA1-C661-1142-D773-47AE66A178FA} - (no file)
O2 - BHO: (no name) - {3B9CB54E-F318-B709-AA3D-26315C164573} - (no file)
O2 - BHO: (no name) - {3BA5C516-2E23-6854-9EFC-21E89FEB7C2E} - (no file)
O2 - BHO: (no name) - {3F196571-8AE3-1455-9565-1D33F6C41C58} - (no file)
O2 - BHO: (no name) - {3F4A50AD-904E-7E61-9D73-3F174291F4B2} - (no file)
O2 - BHO: (no name) - {3F787872-61C2-E14A-5458-CFF5381DEA94} - (no file)
O2 - BHO: (no name) - {407FFCD2-654F-817E-A2EE-B535B9FBC95D} - (no file)
O2 - BHO: (no name) - {41E85D98-6F3B-5C26-6D90-5875C3B7B83A} - (no file)
O2 - BHO: (no name) - {424E3970-C42B-B0EE-5949-FE8987AD05F6} - (no file)
O2 - BHO: (no name) - {42C21F01-F6DE-4B57-9CA9-ECDBD48392AD} - (no file)
O2 - BHO: (no name) - {430C166C-49CE-19E8-CF15-95AB6EE7E7CE} - (no file)
O2 - BHO: (no name) - {442D8F79-8826-B4A6-92B0-B5389B535D9B} - (no file)
O2 - BHO: (no name) - {46F0B586-63AE-3428-88FC-AD230B3E4D26} - (no file)
O2 - BHO: (no name) - {48522E44-2657-63AA-D1A5-88BD8F6F6BCB} - (no file)
O2 - BHO: (no name) - {4873121D-827E-1BD4-1A2C-B5A0C13C9785} - (no file)
O2 - BHO: (no name) - {48824338-44C0-7912-89AA-850C0E0875C0} - (no file)
O2 - BHO: (no name) - {49D8788B-72E3-2632-6071-544088C2D9E3} - (no file)
O2 - BHO: (no name) - {4A5ABB53-102D-C19C-B368-482572DCB536} - (no file)
O2 - BHO: (no name) - {4A5B3E71-F19A-1D5B-B786-EF21EDBFE12C} - (no file)
O2 - BHO: (no name) - {4C8EF58C-1E8B-772E-B285-50C063477787} - (no file)
O2 - BHO: (no name) - {4D7AAE7E-60D8-7CE4-E215-285680E2A5E4} - (no file)
O2 - BHO: (no name) - {4ECCDA5C-3EB8-D769-3EAD-C45654F9083C} - (no file)
O2 - BHO: (no name) - {51516028-FA3B-8261-B4D3-346C6B349CAE} - (no file)
O2 - BHO: (no name) - {5514309F-226E-4564-4CC0-558961C76698} - (no file)
O2 - BHO: (no name) - {55C8C6D7-0FC7-6CAC-AA38-69CB63141D4E} - (no file)
O2 - BHO: (no name) - {570908A4-FE60-6ABF-B123-69E2CEC6741D} - (no file)
O2 - BHO: (no name) - {572A44A6-4945-DA71-B13F-066F8EC29E66} - (no file)
O2 - BHO: (no name) - {57FD4D84-8261-8F19-F386-D7902792B1C6} - (no file)
O2 - BHO: (no name) - {595AD4D2-88BB-5563-8BB4-F6F7AC5BB382} - (no file)
O2 - BHO: (no name) - {59EE4542-8EDF-55ED-0398-74D600792B04} - (no file)
O2 - BHO: (no name) - {5AC5C3B9-9CEC-BC17-DFFB-3F33F50B8236} - (no file)
O2 - BHO: (no name) - {5B7AB13C-069E-0A96-369B-83180E283DCD} - (no file)
O2 - BHO: (no name) - {5BA8BAA2-A8F8-C5AE-06EC-5A7D9EFC3436} - (no file)
O2 - BHO: (no name) - {5F101202-11AE-81D3-D484-0354226D02AE} - (no file)
O2 - BHO: (no name) - {6211EC0C-2CF4-DEC3-4695-A8A0A9B57676} - (no file)
O2 - BHO: (no name) - {62F9E29F-0396-506F-A1AF-EC0A261735CD} - (no file)
O2 - BHO: (no name) - {63DFBE3B-D797-50E4-BE10-0AD1C6D7B7AD} - (no file)
O2 - BHO: (no name) - {63EDD3FE-AFF5-BAA7-633A-B83D248F62B6} - (no file)
O2 - BHO: (no name) - {64FC896F-F223-9929-AE61-5B3CD69B9146} - (no file)
O2 - BHO: (no name) - {65E38C5A-C2E5-319D-507E-7617213EEC42} - (no file)
O2 - BHO: (no name) - {65F0E138-122A-6E08-A5F0-E375D08E2101} - (no file)
O2 - BHO: (no name) - {6604595C-B90A-8BCC-F8EF-5C2F9611D23F} - (no file)
O2 - BHO: (no name) - {67AD8EEC-DBC9-81F8-1EAB-6D24CF242AC2} - (no file)
O2 - BHO: (no name) - {683EAC7F-683C-AF5F-A8BE-9D9877B52E10} - (no file)
O2 - BHO: (no name) - {68DE9027-1CBD-5899-FC4F-E5B84A8F6BE4} - (no file)
O2 - BHO: (no name) - {6A770916-35E5-FF9E-E4EC-F0D453A172D3} - (no file)
O2 - BHO: (no name) - {6B014825-F801-F6B3-8BFB-8D1EDD53C72E} - (no file)
O2 - BHO: (no name) - {6BCDE398-C8C8-7128-9CA9-82F81B85402E} - (no file)
O2 - BHO: (no name) - {6D25C675-70D8-EC23-84B5-DA5169D62ABC} - (no file)
O2 - BHO: (no name) - {6F9CD290-449C-DBE4-621A-E7E113A0EE2F} - (no file)
O2 - BHO: (no name) - {71F3E61A-9FC2-684B-270A-33AEBC0E2EC0} - (no file)
O2 - BHO: (no name) - {73387395-ABB2-DEF3-C455-735DB3177062} - (no file)
O2 - BHO: (no name) - {736D52E2-B286-6230-5722-E4EDA9DBD27E} - (no file)
O2 - BHO: (no name) - {741FAA78-FB1F-CB3C-44BD-E14600CFF87A} - (no file)
O2 - BHO: (no name) - {75897AF8-779E-E938-121D-38FA5AA18C43} - (no file)
O2 - BHO: (no name) - {759713F7-705A-2B13-02E3-9E591EAEF259} - (no file)
O2 - BHO: (no name) - {766D2566-60FD-10F1-92DB-18BB4F8AF267} - (no file)
O2 - BHO: (no name) - {7743F003-44EF-1F75-AF4B-3683EF4A7346} - (no file)
O2 - BHO: (no name) - {782EFECF-07F2-F82F-8EDE-F319601EAE66} - (no file)
O2 - BHO: (no name) - {793E35F2-B88F-15B6-3AEC-CEADED9E2A95} - (no file)
O2 - BHO: (no name) - {7B630149-A84A-17F7-4D18-6D554AEC18DB} - (no file)
O2 - BHO: (no name) - {7B9F0EE4-BFCC-13BF-7127-EC3A3BA67B92} - (no file)
O2 - BHO: (no name) - {7C461C96-0310-49FA-767A-6D27FEB941E6} - (no file)
O2 - BHO: (no name) - {7DB27A26-99E5-D3F2-DE5E-69D6A77FC596} - (no file)
O2 - BHO: (no name) - {81798751-29AB-CDD7-94B0-440339635507} - (no file)
O2 - BHO: (no name) - {822904F6-6515-F4CA-FCA6-3DD79347C0E0} - (no file)
O2 - BHO: (no name) - {82FCD2C0-6CAF-9AD2-CAC6-D68F740206C3} - (no file)
O2 - BHO: (no name) - {837083AF-B511-DCC4-05AB-DB06515B52E4} - (no file)
O2 - BHO: (no name) - {848A750E-82F4-F1BA-633F-89CAC4D3092C} - (no file)
O2 - BHO: (no name) - {84B31CA2-4ABA-BD58-F6B2-15F1D1739686} - (no file)
O2 - BHO: (no name) - {852064D5-D83D-C0DA-ED78-76551794EE8D} - (no file)
O2 - BHO: (no name) - {85350E27-DDF3-4D24-ABE1-57F9792608C9} - (no file)
O2 - BHO: (no name) - {86041CA1-6D62-16AB-85F3-D49D60FDF6D8} - (no file)
O2 - BHO: (no name) - {8604FBEF-52C2-EE38-8CC6-738DD1B1DC95} - (no file)
O2 - BHO: (no name) - {86A6FBFC-1991-4760-7966-9152C01207F3} - (no file)
O2 - BHO: (no name) - {86EC1399-152F-7B85-24FA-2CE7E962248F} - (no file)
O2 - BHO: (no name) - {8757DCF3-EDCB-AF1D-2A96-1BA99BF8F486} - (no file)
O2 - BHO: (no name) - {8955C38D-4C95-80AA-4D9C-204125ADD200} - (no file)
O2 - BHO: (no name) - {8A6CC37B-7883-F9CA-C742-9785D83F18C7} - (no file)
O2 - BHO: (no name) - {8A75EA04-9575-A22B-4FC7-E64CB83DA5F3} - (no file)
O2 - BHO: (no name) - {8B088183-9C7B-6F8C-21F6-7FA52E5B8262} - (no file)
O2 - BHO: (no name) - {8C7D53BF-2F81-F6A2-202A-C13B9FDF7854} - (no file)
O2 - BHO: (no name) - {8D404A47-9791-D80C-3E84-8E7B3D9C3C44} - (no file)
O2 - BHO: (no name) - {8DD0E093-F203-A226-34B6-803644787EFF} - (no file)
O2 - BHO: (no name) - {8F847879-40F7-B232-AEC5-D3214B36C965} - (no file)
O2 - BHO: (no name) - {94059374-9687-2B88-4C00-22E2FF8039AE} - (no file)
O2 - BHO: (no name) - {9600C465-7C6A-0B9C-2B1E-DA75DD1BD842} - (no file)
O2 - BHO: (no name) - {967871F3-038A-F72E-C5FF-CE710FAFDEA8} - (no file)
O2 - BHO: (no name) - {986BD453-5B57-5C00-BC7E-97C1B11930A9} - (no file)
O2 - BHO: (no name) - {986EB30A-4B14-6249-1774-A75D9AEAC359} - (no file)
O2 - BHO: (no name) - {98B06E7B-7D84-30CB-A991-794990630F1F} - (no file)
O2 - BHO: (no name) - {991DF816-06EC-05DF-D306-F828A69AEF22} - (no file)
O2 - BHO: (no name) - {9ADFE229-40FB-615D-BB53-35E7CF17109E} - (no file)
O2 - BHO: (no name) - {9B1A2625-49C3-7881-A453-1C2B2E4282F9} - (no file)
O2 - BHO: (no name) - {9CC24F8C-C090-F78B-2849-1C3653933660} - (no file)
O2 - BHO: (no name) - {9CC8F542-1A40-D18B-FB14-9CD9B4908857} - (no file)
O2 - BHO: (no name) - {9D824F52-D30D-CDCC-B4A2-0861DBD812D6} - (no file)
O2 - BHO: (no name) - {9DB2564C-B368-0DA1-BB00-6F46F0DD9CD2} - (no file)
O2 - BHO: (no name) - {9DE1545A-6CDE-C52E-C2EE-15ABB18D6F1A} - (no file)
O2 - BHO: (no name) - {9FDEC173-21F7-980A-124F-9D55C74F77FE} - (no file)
O2 - BHO: (no name) - {A21022CC-4063-2FB0-2846-65FB99D6E89E} - (no file)
O2 - BHO: (no name) - {A2D89F27-175B-994F-3147-AA6CADE063DE} - (no file)
O2 - BHO: (no name) - {A2E2EDE4-E2D3-F3DF-1F23-8C3BEE10E0AA} - (no file)
O2 - BHO: (no name) - {A493684E-9B4F-2C08-E3D3-1677B7786D2B} - (no file)
O2 - BHO: (no name) - {A515DB28-6353-A6A5-258A-23E58675622A} - (no file)
O2 - BHO: (no name) - {A5363EEA-80FF-2D9D-B95C-136303CBE2E5} - (no file)
O2 - BHO: (no name) - {A733C711-3E32-9E03-FC91-8987286C8BE5} - (no file)
O2 - BHO: (no name) - {A81BCDA3-15E4-11AF-47AC-CDE1A5CE4A3C} - (no file)
O2 - BHO: (no name) - {A8C8A388-61C0-F0D9-91D0-47615F2F6A9B} - (no file)
O2 - BHO: (no name) - {A8D30C47-4510-9BB5-0432-574064529B27} - (no file)
O2 - BHO: (no name) - {A8DBFF81-041C-F290-213E-2D0CB852CF56} - (no file)
O2 - BHO: (no name) - {A951E8A4-0C15-D6A1-B279-C69CE7DFFB06} - (no file)
O2 - BHO: (no name) - {AA22FEC5-204E-D1C9-8EAB-F1C63F3BCE8D} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {AADB9ABD-0002-CBE6-1BE2-2AB853D25403} - (no file)
O2 - BHO: (no name) - {AD558823-F711-D52F-CF3D-E2058029C0DD} - (no file)
O2 - BHO: (no name) - {AF0E6521-11D3-E910-5998-4ABEE4595D36} - (no file)
O2 - BHO: (no name) - {AF9E47E5-DA5F-2D53-4855-D3DBCC67B6EF} - (no file)
O2 - BHO: (no name) - {B13C0965-868F-283A-5E4E-C1B07A643E7A} - (no file)
O2 - BHO: (no name) - {B49B7CB5-DE38-EE8F-E72D-484C0FED08D3} - (no file)
O2 - BHO: (no name) - {B4F8C4E0-F516-5DEF-B102-AAF1ADBCBB04} - (no file)
O2 - BHO: (no name) - {B58B9B1C-55D9-1746-5D04-4AD3FEBB33BE} - (no file)
O2 - BHO: (no name) - {B6EFF8ED-FE91-D486-61D0-EF55DD5220AC} - (no file)
O2 - BHO: (no name) - {B74D7ADF-0D9A-236B-88D0-5341D065D6CE} - (no file)
O2 - BHO: (no name) - {B7C236A8-174F-E368-2B49-6729088050CA} - (no file)
O2 - BHO: (no name) - {B7E615F6-2E23-77B4-BE15-D9B9EE44B2E6} - (no file)
O2 - BHO: (no name) - {B824C0E3-2D3F-4C0D-C74F-6A9E9873BE3B} - (no file)
O2 - BHO: (no name) - {BAA0D3EB-6EAA-378D-EABD-428A8C6CBCDC} - (no file)
O2 - BHO: (no name) - {BD58C39B-DC86-1C66-6B5B-2D9C7B1C970D} - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {BE0D8EA0-8960-8DE8-30E4-E8710ED84A81} - (no file)
O2 - BHO: (no name) - {C1CD277B-16A9-E698-A991-DD5E2FEDEB4A} - (no file)
O2 - BHO: (no name) - {C20427B5-F4CC-E04E-6477-FCAF3C116979} - (no file)
O2 - BHO: (no name) - {C21C63F8-4294-8448-115A-32EF23FDED10} - (no file)
O2 - BHO: (no name) - {C3425118-CE29-04D1-3C22-36802146C4F5} - (no file)
O2 - BHO: (no name) - {C5149068-08D4-7379-7115-E35C21E90399} - (no file)
O2 - BHO: (no name) - {C5E5AAF1-E338-ED8E-4D57-DC8FB2DE04CB} - (no file)
O2 - BHO: (no name) - {C6515C08-028F-7E34-837C-D5405B542821} - (no file)
O2 - BHO: (no name) - {C684B7E4-5C80-3711-FE91-063EACA2347E} - (no file)
O2 - BHO: (no name) - {C77119AD-B010-7430-67AD-6E3A4C0E744C} - (no file)
O2 - BHO: (no name) - {C7CEA3E7-B58C-0117-58AA-8E0E57E0565E} - (no file)
O2 - BHO: (no name) - {C8BD5992-93A2-C72D-346C-BE031396197E} - (no file)
O2 - BHO: (no name) - {C91C6A50-4E18-389A-6EEB-F0FC5AC3AC38} - (no file)
O2 - BHO: (no name) - {CA14850C-FA9C-DE0D-27DA-8BD9DA485F0B} - (no file)
O2 - BHO: (no name) - {CAFF6042-9822-36A6-4764-C0BF5E59EF31} - (no file)
O2 - BHO: (no name) - {CDF9C391-2BED-F4A8-C899-0144B25686F9} - (no file)
O2 - BHO: (no name) - {CE8B07CF-9A43-6140-608C-092AA763D1BD} - (no file)
O2 - BHO: (no name) - {CE91F604-199F-7882-72AB-B4D8255E7E3A} - (no file)
O2 - BHO: (no name) - {CF1C66A5-22A7-AA44-A767-EB79B05C5F1B} - (no file)
O2 - BHO: (no name) - {CF28B2B6-4BF8-5E57-FC69-B5570B57EE06} - (no file)
O2 - BHO: (no name) - {D04B13F5-0E39-EE4E-D33A-14F3941F8539} - (no file)
O2 - BHO: (no name) - {D241F789-5659-5DF9-1F51-4D46D0E3964A} - (no file)
O2 - BHO: (no name) - {D337CF3A-4A39-86E1-B3F2-5AA0D97926D3} - (no file)
O2 - BHO: (no name) - {D36BD597-630F-D814-CF19-D7AAC22FEDDA} - (no file)
O2 - BHO: (no name) - {D3F6EDB3-54C6-DE0B-5911-30B33BA4264B} - (no file)
O2 - BHO: (no name) - {D54285E4-B4B1-6830-3009-C1211A0CD05E} - (no file)
O2 - BHO: (no name) - {D7630E68-79D7-6EF3-062A-A8D62572DA69} - (no file)
O2 - BHO: (no name) - {D772EDB5-7E28-3680-0DFD-47B69536B127} - (no file)
O2 - BHO: (no name) - {D7AADEDD-97A8-C970-FA3A-C2E0C1831A77} - (no file)
O2 - BHO: (no name) - {DA3AAC09-2842-4792-FD3F-8A5A9649EF1C} - (no file)
O2 - BHO: (no name) - {DA3AC16D-881C-500D-EEA0-6EE3A2056627} - (no file)
O2 - BHO: (no name) - {DA5F3BAE-6318-EE03-9D47-260E2FA367B7} - (no file)
O2 - BHO: (no name) - {DAD64CB5-6A52-35C2-38BD-73771485436C} - (no file)
O2 - BHO: (no name) - {DB99FC8C-8A73-A988-8229-764512FCAD1B} - (no file)
O2 - BHO: (no name) - {DBD602A8-8F55-C964-E168-4A9DD3C20AC4} - (no file)
O2 - BHO: (no name) - {DD7F1708-D0FC-9336-482E-B32F8180E1F3} - (no file)
O2 - BHO: (no name) - {DEFF3B98-3686-8151-5CDB-C593651F3170} - (no file)
O2 - BHO: (no name) - {DF68EA3F-353B-2006-149E-B74E2F05DCBC} - (no file)
O2 - BHO: (no name) - {E2A6A5F0-F499-A477-E58D-4D5A4B562721} - (no file)
O2 - BHO: (no name) - {E2E6C0E2-FA3A-8992-181C-3BA9E7ED6D56} - (no file)
O2 - BHO: (no name) - {E42B61C2-66D3-07B5-A6D8-5FD00BC22603} - (no file)
O2 - BHO: (no name) - {E655B30E-6312-F0CC-F75E-35C1460C02FD} - (no file)
O2 - BHO: (no name) - {E6B5BD9E-F3FF-E5A3-4B37-210B4F9B2CFF} - (no file)
O2 - BHO: (no name) - {E7EA31BC-040D-2E4D-88EF-40381EB92CB7} - (no file)
O2 - BHO: (no name) - {E86CB8A6-5ACF-DE17-8629-2E3D0D603A51} - (no file)
O2 - BHO: (no name) - {E8F8DF77-A372-CB3E-F005-44B07E1086DE} - (no file)
O2 - BHO: (no name) - {EAADD167-D492-D64A-6508-6BCC2A6B4D56} - (no file)
O2 - BHO: (no name) - {EB79404D-AE0E-86BB-F3E5-F15C2D55C061} - (no file)
O2 - BHO: (no name) - {ECDB01F4-FF73-F26C-DD86-4D5A54623E8F} - (no file)
O2 - BHO: (no name) - {EF499FF4-5D68-4F48-3C5E-65411AF29344} - (no file)
O2 - BHO: (no name) - {EFEBB260-C21E-967D-CA15-0C1770C3C5C5} - (no file)
O2 - BHO: (no name) - {F55AF506-EB9F-47DF-AB8E-D6D291DE1757} - (no file)
O2 - BHO: (no name) - {F6BCAC5B-F512-DB71-1A25-5B568F21C13C} - (no file)
O2 - BHO: (no name) - {F72C2F74-8735-611B-5E85-D33CA3E557A9} - (no file)
O2 - BHO: (no name) - {F99DA94E-8003-7D47-5B90-44A2088F5120} - (no file)
O2 - BHO: (no name) - {FA30FBE1-2D6A-60CB-19A0-CC0872CC2F67} - (no file)
O2 - BHO: (no name) - {FBF04123-7B6C-5A17-E393-11BC902B1B9B} - (no file)
O2 - BHO: (no name) - {FD3DA53B-7B48-41D2-9F9A-F137210DEFBA} - (no file)
O2 - BHO: (no name) - {FD53AF3D-B5A4-3DEC-C009-E2E6791F3EE9} - (no file)
O2 - BHO: (no name) - {FE912560-84DA-169C-94D6-8B410D6F44B3} - (no file)
O2 - BHO: (no name) - {FEDB5C70-C8D3-5CE0-5433-3BFBF961AF4B} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\WINDOWS\DOWNLO~1\vzbb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
O4 - HKLM\..\Run: [62.tmp] C:\DOCUME~1\anyone\LOCALS~1\Temp\62.tmp.exe
O4 - HKLM\..\Run: [63.tmp] C:\DOCUME~1\anyone\LOCALS~1\Temp\63.tmp.exe
O4 - HKLM\..\Run: [62.tmp.exe] C:\DOCUME~1\anyone\LOCALS~1\Temp\62.tmp.exe
O4 - HKLM\..\Run: [63.tmp.exe] C:\DOCUME~1\anyone\LOCALS~1\Temp\63.tmp.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemyfios.verizon.net/sdcCommon/download/tgctlcm.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.1.2.76.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by114fd.bay114.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} - http://static.zangocash.com/cab/180solutions/ie/bridge-c24.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {BDEE1959-AB6B-4745-A29B-F492861102CC} -
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: awvvu - awvvu.dll (file missing)
O20 - Winlogon Notify: browsela - C:\WINDOWS\system32\browsela.dll (file missing)
O20 - Winlogon Notify: RegCompact - C:\WINDOWS\SYSTEM32\RegCompact.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Norton AntiVirus firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Ray3xsi5_0 Server (Ray3xsi5_0Server) - Unknown owner - C:\Softimage\XSI_5.0\Application\bin\ray3xsi5_0server.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SPM License Server (spmd) - mental images GmbH - C:\WINDOWS\system32\spm\spmdib.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

[ + quote]

This message has been edited since posting. Last time this message was edited on 19. August 2006 @ 19:53

Xeres

Junior Member

20. August 2006 @ 11:50

Link to this message

Well, I'm not a expert, but the first thing I would do is Download
Ewido AntiMalware http://free.grisoft.com/doc/20/lng/us/tpl/v5 to the desptop and run the install routine, but not a scan. Than get the latest updates for it and install them.
Next I would download a copy of ATF Cleaner http://www.atribune.org/content/view/25/2 Don't run it just yet.
reboot to safe mode and run a scan with Ewido with the option to fix ALL. save the report, as and expert will want to see it.

Reboot normal. Run a new HjT scan and post it back to the list. Don't check anything yet

Cheers
Xeres

[ + quote]

AMDFX 60 2gig Corsair 3200 Asusmb 8armvr Dual ATI1900xt 1 Tbyt raid 0 ,XP-PRO .Do not mess in the affairs of dragons as you taste good and are cruchy.

Xeres

Junior Member

20. August 2006 @ 11:52

Link to this message

ooopps .... fat fingered that one,
Also include the ewido scan.

Cheers
Xeres

[ + quote]

AMDFX 60 2gig Corsair 3200 Asusmb 8armvr Dual ATI1900xt 1 Tbyt raid 0 ,XP-PRO .Do not mess in the affairs of dragons as you taste good and are cruchy.

anarkya

Junior Member

20. August 2006 @ 12:59

Link to this message

Thank you for your answer.

His PC doesnt wanna work now.
He had to reboot the pc from the start, but it still doesnt work. it gets into the create an acct thing and freezes.

Any advice would be appreciated

Thank you again for your help.

[ + quote]

Xeres

Junior Member

20. August 2006 @ 13:51

Link to this message

Try booting to safe mode. reboot and while the system starts up keep tapping the F8 key. Select safe mode from the menue.

Xeres

[ + quote]

AMDFX 60 2gig Corsair 3200 Asusmb 8armvr Dual ATI1900xt 1 Tbyt raid 0 ,XP-PRO .Do not mess in the affairs of dragons as you taste good and are cruchy.

thugs121

Member

21. August 2006 @ 09:18

Link to this message

This is often the case when trying to log into the comp when the comp is severely infected. It may take awhile (maybe 10 or more minutes).

Once the freezing is over,please start by downloading VirtumundoBegone: http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe
and save it to your desktop. When you have done this doubleclick on VirtumundoBeGone.exe and follow the instructions. Do not worry if you see a BLUE SCREEN "Fatal Error" Message, it is normal and expected. A file called VBG.txt will be created on your desktop. Save that file for later.

In this case, you may have to reboot this compuer several times in order to alleviate the freezing...

As Xeres mentioned, try and use ATF Cleaner and Ewido Ant-Spyware... When you do have the chance, try and update Ewido and provide the latest Hijack this log...

[ + quote]

- Ideal way to deal with the MPAA~RIAA

Start a new thread


		User name	Password

		Not registered yet? Register here. Lost your password? Click here.