Logfile of HijackThis v1.99.1
Scan saved at 4:20:57 PM, on 10/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Bell\Security Manager\fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe
C:\Program Files\Bell\Security Manager\Rps.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\WINDOWS\system\lsass.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Chatango\Chatango.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Xfire\xfire.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Hijackthis\HijackThis.exe
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 – HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R3 – URLSearchHook: SweetIM For Internet Explorer – {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} – C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
R3 – URLSearchHook: Yahoo! Toolbar – {EF99BD32-C1FB-11D2-892F-0090271D4F88} – C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 – BHO: &Yahoo! Toolbar Helper – {02478D38-C3F9-4efb-9B51-7695ECA05670} – C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 – BHO: AcroIEHlprObj Class – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 – BHO: SWEETIE – {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} – C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 – BHO: Pop-Up Blocker BHO – {3C060EA2-E6A9-4E49-A530-D4657B8C449A} – C:\Program Files\Bell\Security Manager\pkR.dll
O2 – BHO: (no name) – {491AF6C5-21F2-46E1-C653-3DF529127D7B} – C:\WINDOWS\wcidBHO.dll
O2 – BHO: Megaupload Toolbar – {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} – C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O2 – BHO: Form Filler BHO – {56071E0D-C61B-11D3-B41C-00E02927A304} – C:\Program Files\Bell\Security Manager\FBHR.dll
O2 – BHO: DriveLetterAccess – {5CA3D70E-1895-11CF-8E15-001234567890} – C:\WINDOWS\system32\dla\tfswshx.dll
O2 – BHO: (no name) – {7E853D72-626A-48EC-A868-BA8D5E23E045} – (no file)
O2 – BHO: (no name) – {85CF4327-68DE-1974-B32E-766E84A9706C} – C:\WINDOWS\wcidBHO.dll
O2 – BHO: (no name) – {8E13DDE1-E013-47ec-9C4C-27C2F78BDD26} – C:\WINDOWS\system32\req.dll (file missing)
O2 – BHO: Windows Live Sign-in Helper – {9030D464-4C02-4ABF-8ECC-5164760863C6} – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 – BHO: Google Toolbar Helper – {AA58ED58-01DD-4d91-8333-CF10577473F7} – c:\program files\google\googletoolbar1.dll
O2 – BHO: Google Toolbar Notifier BHO – {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} – C:\Program Files\Google\GoogleToolbarNotifier.0.301.7164\swg.dll
O2 – BHO: Windows Live Toolbar Helper – {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} – C:\Program Files\Windows Live Toolbar\msntb.dll
O2 – BHO: MegaIEMn – {bf00e119-21a3-4fd1-b178-3b8537e75c92} – C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O3 – Toolbar: Megaupload Toolbar – {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} – C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O3 – Toolbar: Windows Live Toolbar – {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} – C:\Program Files\Windows Live Toolbar\msntb.dll
O3 – Toolbar: SweetIM For Internet Explorer – {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} – C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 – Toolbar: &Google – {2318C2B1-4965-11d4-9B18-009027A5CD4F} – c:\program files\google\googletoolbar1.dll
O3 – Toolbar: Yahoo! Toolbar – {EF99BD32-C1FB-11D2-892F-0090271D4F88} – C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 – HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 – HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
O4 – HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 – HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 – HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 – HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 – HKLM\..\Run: [SSA.exe] "C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe"
O4 – HKLM\..\Run: [Security Manager] "C:\Program Files\Bell\Security Manager\Rps.exe"
O4 – HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 – HKLM\..\Run: [msgadjust] C:\Documents and Settings\DANILO\Desktop\msgadjust2[1]\Final\msgadjust.exe
O4 – HKLM\..\Run: [msgairlive] C:\Program Files\MessengerAirLive\msgairlive.exe
O4 – HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 – HKLM\..\Run: [Windows Lsass Services] C:\WINDOWS\system\lsass.exe
O4 – HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 – HKLM\..\Run: [Love default global mess] C:\Documents and Settings\All Users\Application Data\great coal love default\Trust That.exe
O4 – HKCU\..\Run: [MsnMsgr] ~"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 – HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 – HKCU\..\Run: [Chatango] C:\Program Files\Chatango\Chatango.exe
O4 – HKCU\..\Run: [bows clock] C:\DOCUME~1\DANILO\APPLIC~1\GREYTI~1\hole itch.exe
O4 – Startup: Cyber-shot Viewer Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 – Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O8 – Extra context menu item: &Search – http://kl.bar.need2find.com/KL/menusearch.html?p=KL
O8 – Extra context menu item: &Windows Live Search – res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 – Extra context menu item: Add to Windows &Live Favorites – http://favorites.live.com/quickadd.aspx
O8 – Extra context menu item: Open in new background tab – res://C:\Program Files\Windows Live Toolbar\Components\en-ca\msntabres.dll.mui/229?129c670b55994cf9aa2d977583bafe70
O8 – Extra context menu item: Open in new foreground tab – res://C:\Program Files\Windows Live Toolbar\Components\en-ca\msntabres.dll.mui/230?129c670b55994cf9aa2d977583bafe70
O9 – Extra button: (no name) – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:\WINDOWS\system32\msjava.dll
O9 – Extra ‘Tools’ menuitem: Sun Java Console – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:\WINDOWS\system32\msjava.dll
O9 – Extra button: Norton Confidence Online – {144FDEB7-A23D-4D39-A00E-AA44195535B6} – C:\WINDOWS\wcidButton.exe
O9 – Extra button: Real.com – {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} – C:\WINDOWS\system32\Shdocvw.dll
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 – Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O16 – DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) – http://go.microsoft.com/fwlink/?linkid=39204
O16 – DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) – http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 – DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) – http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin11USA.cab
O16 – DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) – http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 – DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} – http://download.divx.com/player/DivXBrowserPlugin.cab
O16 – DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) – http://www.gamesmania.com/ExentCtl.ocx
O16 – DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games – Installer) – http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 – DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) – http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
O16 – DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) – http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 – DPF: {CCC46940-DED0-476C-A27E-115B10DAE0B4} – http://td.nortonconfidenceonline.com/plug-in/WSAS.cab
O16 – DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) – http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin9USA.cab
O16 – DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) – http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O17 – HKLM\System\CCS\Services\Tcpip\..\{03F15FA0-8A3F-48F1-8D7A-EF1547FC750A}: NameServer = 206.47.244.87 206.47.244.136
O17 – HKLM\System\CS1\Services\Tcpip\..\{03F15FA0-8A3F-48F1-8D7A-EF1547FC750A}: NameServer = 206.47.244.87 206.47.244.136
O18 – Protocol: livecall – {828030A1-22C1-4009-854F-8E305202313F} – C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 – Protocol: msnim – {828030A1-22C1-4009-854F-8E305202313F} – C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 – Filter: text/html – {2AB289AE-4B90-4281-B2AE-1F4BB034B647} – (no file)
O20 – Winlogon Notify: igfxcui – C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 – Winlogon Notify: req – C:\WINDOWS\system32\req.dll (file missing)
O20 – Winlogon Notify: WgaLogon – C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 – SSODL: WPDShServiceObj – {AAA288BA-9A4C-45B0-95D7-94D524869DB5} – C:\WINDOWS\system32\WPDShServiceObj.dll
O23 – Service: AOL Connectivity Service (AOL ACS) – America Online, Inc. – C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 – Service: Apple Mobile Device – Apple, Inc. – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 – Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) – Apple Computer, Inc. – C:\Program Files\Bonjour\mDNSResponder.exe
O23 – Service: dlbt_device – Dell – C:\WINDOWS\system32\dlbtcoms.exe
O23 – Service: DvpApi (dvpapi) – Command Software Systems, Inc. – C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 – Service: FLEXnet Licensing Service – Macrovision Europe Ltd. – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 – Service: Google Updater Service (gusvc) – Google – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 – Service: iPod Service – Apple Inc. – C:\Program Files\iPod\bin\iPodService.exe
O23 – Service: Intel NCS NetService (NetSvc) – Intel(R) Corporation – C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 – Service: Security Manager Firewall (RP_FWS) – Radialpoint Inc. – C:\Program Files\Bell\Security Manager\fws.exe
O23 – Service: Windows Live Setup Service (WLSetupSvc) – Unknown owner – C:\Program Files\Windows Live\installer\WLSetupSvc.exe
Tagged with: alcatel speedtouch usb • aolacsd • apple mobile device support • bell sympatico • c program • command software • common files • dragdiag • files windows • hijackthis exe • hkcu • iexplore exe • internet explorer • progra • running processes • security advisor • security manager • spoolsv exe • svchost exe • windows defender
Filed under: Computer Diagnostic Software
Ok some of these file are need to keep windows running. Files like C:\windows are usually file that your operating system needs. If your computer is running fine, i would be careful about what you delete. althought you could delete files like your yahoo tool bar. I had a instructor that said if you do not know what it does just leave it alone.
Hope this helps.
Hello;
I hate to be a smarty pants but I think with that list you have just told the RIAA Recording Inst. Assoc. of America I think?
that you share files on Bearshare.com …and the reason I say this it showed up in the logs in the list above.
Bummer huh? I hope they don’t use this information against you and sew the poo-poo out of you in court.
Good luck,
and try reading what you are posting next time.
Do an internet search for each program, decide based on the description of what each does.
i don’t know EITHER!! jst kall ur provider and ask them…
they will tell u wat to deleat off of that huuuuggggeee list!
WOW!
Looks like all that stuff needs to go… LOL
I’d delete it all and start over!