Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:44:30 PM, on 4/25/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\QuickTime\QTTask.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtWLan.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.pornkingmovies.com/%20to%20ve…
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.com/g/startpage.html?…
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.com/g/startpage.html?…
R1 – HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.gateway.com/g/startpage.html?…
R1 – HKCU\Software\Microsoft\Windows\CurrentV… Settings,ProxyServer = :0
O2 – BHO: AcroIEHlprObj Class – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 – BHO: (no name) – {11267AD1-B290-453B-A2D5-06E72F5BAE58} – C:\WINDOWS\system32\awtqrSJb.dll (file missing)
O2 – BHO: SSVHelper Class – {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} – C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 – BHO: (no name) – {BFA7416F-6EBA-43E5-B485-D32C6C78E1DB} – C:\WINDOWS\system32\jkkJbbXo.dll (file missing)
O2 – BHO: Browser Address Error Redirector – {CA6319C0-31B7-401E-A518-A07C3DB8F777} – c:\windows\system32\BAE.dll
O4 – HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 – HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 – HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 – HKLM\..\Run: [Reminder] %WINDIR%\Creator\Remind_XP.exe
O4 – HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 – HKLM\..\Run: [ATICCC] “C:\Program Files\ATI Technologies\ATI.ACE\cli.exe” runtime -Delay
O4 – HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 – HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 – HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 – HKLM\..\Run: [QuickTime Task] “C:\Program Files\QuickTime\QTTask.exe” -atboottime
O4 – HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 – HKLM\..\Run: [iTunesHelper] “C:\Program Files\iTunes\iTunesHelper.exe”
O4 – HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 – HKLM\..\Run: [SunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe”
O4 – HKLM\..\Run: [BMfbb4ac12] Rundll32.exe “C:\WINDOWS\system32\weusjuqp.dll”,s
O4 – HKCU\..\Run: [Power2GoExpress] NA
O4 – HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1…
O4 – HKCU\..\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background
O4 – HKCU\..\Run: [ares] “C:\Program Files\Ares\Ares.exe” -h
O4 – HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 – HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘LOCAL SERVICE’)
O4 – HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘NETWORK SERVICE’)
O4 – HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘SYSTEM’)
O4 – HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ‘Default user’)
O4 – Global Startup: REALTEK RTL8187 Wireless LAN Utility.lnk = ?
O8 – Extra context menu item: E&xport to Microsoft Excel – res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCE…
O9 – Extra button: (no name) – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 – Extra ‘Tools’ menuitem: Sun Java Console – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 – Extra button: Research – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.D…
O9 – Extra button: AIM – {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} – C:\Program Files\AIM\aim.exe
O9 – Extra button: Real.com – {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} – C:\WINDOWS\system32\Shdocvw.dll
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
O20 – Winlogon Notify: jkkJbbXo – jkkJbbXo.dll (file missing)
O23 – Service: Apple Mobile Device – Apple, Inc. – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 – Service: Ares Chatroom server (AresChatServer) – Ares Development Group – C:\Program Files\Ares\chatServer.exe
O23 – Service: Ati HotKey Poller – ATI Technologies Inc. – C:\WINDOWS\system32\Ati2evxx.exe
O23 – Service: AVG7 Alert Manager Server (Avg7Alrt) – GRISOFT, s.r.o. – C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 – Service: AVG7 Update Service (Avg7UpdSvc) – GRISOFT, s.r.o. – C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 – Service: AVG E-mail Scanner (AVGEMS) – GRISOFT, s.r.o. – C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 – Service: iPod Service – Apple Inc. – C:\Program Files\iPod\bin\iPodService.exe
O23 – Service: PrismXL – New Boundary Technologies, Inc. – C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
–
End of file – 7177 bytes
Posts Tagged ‘Wrong’
Can Someone Please Look At My Hijack This Log And Tell Me Whats Wrong?
Saturday, January 23rd, 2010What Is Wrong With Her Computer (easy 10 Points)?
Monday, December 28th, 2009what is wrong with my friend computer she has window xp and all this stuff not working for her “sys restore,defrag,disc clean up,checking disc for errors” and when she try to go on her social networks sites it wont load saying page not found and she tried sys restore and it did nothing, she said she cant go back to no dates what is wrong with her computer??
i know this not in the right place so dont start please more people come here so this is where i put it at
What Could Be Wrong With My Dvd Burner Configuration?
Monday, December 21st, 2009I bought new PC, everything was fine until i decided to burn some cd/dvd. The nero v.6 just hanged up after cashing files…. i returned my dvd burner and got another one, installed nero v.7changed the cable, and set the burners jumper to master…the same…just this nero now generates a log file, which gives me no sense…any help would be appreciated…
error from log:
22:26:46#30 CDR -1502 File ThreadedTransferInterface.cpp, Line 1783
DMA-driver error, CRC error
D: _NEC DVD_RW ND-3540A
22:26:46#31 TRANSFER -27 File ThreadedTransferInterface.cpp, Line 1783
Could not perform start of Disc-at-once
22:26:46#32 Phase 34 File dlgbrnst.cpp, Line 1724
Simulation failed at 24x (3.600 KB/s)
Existing drivers:
File ‘Drivers\scsiport.sys’: Ver=5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), size=96256 bytes, created 2004.08.04 14:00:00 (Adapter driver for src)
Registry Keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\AllocateCDROM… : 0 (Security Option)
When I Start Up My Comuter My Folder Ysearchsuggest.dll Opens Up Whats Wrong?
Thursday, November 19th, 2009You’ve got malware on your computer.
Use an antivirus and a spamware remover to clean it up.
For free AVG seems good for an AV and add-aware for spamware.
I Cannot Get Avg Free 8.0 To Install On My Computer. Does Anyone Know What Might Be Wrong?
Thursday, November 5th, 2009Error: Action failed for file _AVG7_avgtdi.sys: stopping service….
What is going on with it. I have tried 5 times now.
Vb Scripters Needed… Whats Wrong With This Script?? *using Notepad*?
Wednesday, October 7th, 2009Dim Msg,input,strFlag
Msg = “Who’s the man ?”
strFlag = False
Do While strFlag = False
input = InputBox(strMsg,”Make your selection”)
MsgBox “Who’s the man??”
Select Case inp01
Case “i am”
msgBox “Hell yea”
strFlag = True
End If
End Select
Case Else
msgBox “No thats wrong now i wil open your cd rom”
Set oWMP = CreateObject(“WMPlayer.OCX.7″ )
Set colCDROMs = oWMP.cdromCollection
if colCDROMs.Count >= 1 then
For i = 0 to colCDROMs.Count – 1
colCDROMs.Item(i).Eject
Next
End If
End Select
Loop
Wscript.Quit
i can’t get it to end.. =/
Something’s Wrong With My Real Player?
Friday, September 18th, 2009It keeps having errors and closing whenever i open it. it says that its error signiature is
AppName: realplay.exe AppVer: 11.0.0.431 ModName: flash9e.ocx
ModVer: 9.0.115.0 Offset: 001b48a0
and it says something about C:\DOCUME~1\Paco\LOCALS~1\Temp\cafb_appc…
HELP!?
This Application Has Failed To Start Because Msmdws.dll Was Not Found. – What Is Wrong?
Sunday, August 16th, 2009Ok so here is the problem. Every time i try to open something on my computer this thing pops up “Unable To Locate Component. This Application has failed to start because msmdws.dll was not found. Reinstalling the application may fix this problem.” Everytime i click something this always happens even when i log in could this be a virus? please help.
After Logging Onto The Lan, A User Gets The Error: “mpr.exe Is Not Responding”. What Is Wrong ?
Monday, August 10th, 2009What is the resolution.
“file Setuppdd.sys.could Not Be Loaded The Error Is 4..whats Wrong With My Computer?please Help?
Monday, August 10th, 2009Im trying to reformat it cause it won’t boot anymore it says System volume C is corrupted or some file is missing what’s wrong?what shuold I do/