how to remove extended search [CLOSED], delete extended search |
Discover the best free computer help!
Learn more about Geeks to Go by taking the tour. Want to ask a question, reply to a topic, or remove all advertising? It's easy, fast and free. Join today!
Spyware, virus, trojan, fake security or privacy alerts? Please start with our malware cleaning guide.
Learn more about Geeks to Go by taking the tour. Want to ask a question, reply to a topic, or remove all advertising? It's easy, fast and free. Join today!
Spyware, virus, trojan, fake security or privacy alerts? Please start with our malware cleaning guide.
  |
 May 29 2005, 01:54 PM
Post
#1
|
|
|
New Member  Posts: 1 OS: xp  |
Here is my Logfile of HijackThis v1.99.1 Scan saved at 2:52:33 PM, on 5/29/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\COMPAQ\Compaq Advisor\bin\compaq-rba.exe C:\WINDOWS\system32\pctspk.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZONELABS\vsmon.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\ScanSoft\OmniPageSE\opware32.exe C:\Program Files\Winamp\Winampa.exe C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Compaq\eakdrv\STARTDRV.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\addkv32.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Compaq\eakdrv\EAKDRV.exe C:\Program Files\Messenger\msmsgs.exe C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe C:\Compaq\eakdrv\EAUSBKBD.EXE C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\TERRILL MANUELE.HOME-9P9JAQ4GD8\Local Settings\Temporary Internet Files\Content.IE5\UFU3MTQ3\HijackThis[1].exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049 R3 - Default URLSearchHook is missing O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx O2 - BHO: GDS module - {A084A565-B09B-4e4c-A497-7CC50AEAB2A7} - C:\WINDOWS\gds.dll (file missing) O2 - BHO: Class - {FF477E96-3AEA-042A-F3F3-EC30EE10E70D} - C:\WINDOWS\netru32.dll O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\COMPAQ\Coloreal\coloreal.exe" O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe" O4 - HKLM\..\Run: [CXMon] "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe" O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe O4 - HKLM\..\Run: [Connector] C:\WINDOWS\System32\ShellExt\CNAT.EXE -n O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [CPQEASYACC] C:\Compaq\eakdrv\STARTDRV.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [iexplore.exe] C:\Program Files\Internet Explorer\iexplore.exe O4 - HKLM\..\Run: [addkv32.exe] C:\WINDOWS\addkv32.exe O4 - HKLM\..\Run: [ntzp32.exe] C:\WINDOWS\ntzp32.exe O4 - HKLM\..\Run: [netln.exe] C:\WINDOWS\system32\netln.exe O4 - HKLM\..\Run: [ieqg.exe] C:\WINDOWS\system32\ieqg.exe O4 - HKLM\..\Run: [sysdf32.exe] C:\WINDOWS\system32\sysdf32.exe O4 - HKLM\..\Run: [crjx.exe] C:\WINDOWS\crjx.exe O4 - HKLM\..\Run: [iesk.exe] C:\WINDOWS\iesk.exe O4 - HKLM\..\Run: [mfcxw.exe] C:\WINDOWS\system32\mfcxw.exe O4 - HKLM\..\Run: [cras.exe] C:\WINDOWS\cras.exe O4 - HKLM\..\RunOnce: [d3az.exe] C:\WINDOWS\d3az.exe O4 - HKLM\..\RunOnce: [ntak32.exe] C:\WINDOWS\system32\ntak32.exe O4 - HKLM\..\RunOnce: [ntra.exe] C:\WINDOWS\system32\ntra.exe O4 - HKLM\..\RunOnce: [apigp.exe] C:\WINDOWS\system32\apigp.exe O4 - HKLM\..\RunOnce: [appkt.exe] C:\WINDOWS\appkt.exe O4 - HKLM\..\RunOnce: [netox.exe] C:\WINDOWS\system32\netox.exe O4 - HKLM\..\RunOnce: [javazy32.exe] C:\WINDOWS\javazy32.exe O4 - HKLM\..\RunOnce: [mfcsr32.exe] C:\WINDOWS\mfcsr32.exe O4 - HKLM\..\RunOnce: [sdkcs32.exe] C:\WINDOWS\sdkcs32.exe O4 - HKLM\..\RunOnce: [apifw.exe] C:\WINDOWS\apifw.exe O4 - HKLM\..\RunOnce: [crys32.exe] C:\WINDOWS\system32\crys32.exe O4 - HKLM\..\RunOnce: [sysrl32.exe] C:\WINDOWS\system32\sysrl32.exe O4 - HKLM\..\RunOnce: [appsa32.exe] C:\WINDOWS\system32\appsa32.exe O4 - HKLM\..\RunOnce: [appul32.exe] C:\WINDOWS\appul32.exe O4 - HKLM\..\RunOnce: [addog32.exe] C:\WINDOWS\system32\addog32.exe O4 - HKLM\..\RunOnce: [addmf32.exe] C:\WINDOWS\addmf32.exe O4 - HKLM\..\RunOnce: [iprp32.exe] C:\WINDOWS\iprp32.exe O4 - HKLM\..\RunOnce: [atlqs32.exe] C:\WINDOWS\atlqs32.exe O4 - HKLM\..\RunOnce: [sysnk32.exe] C:\WINDOWS\sysnk32.exe O4 - HKLM\..\RunOnce: [ntyn.exe] C:\WINDOWS\system32\ntyn.exe O4 - HKLM\..\RunOnce: [javasp32.exe] C:\WINDOWS\system32\javasp32.exe O4 - HKLM\..\RunOnce: [mfcla.exe] C:\WINDOWS\system32\mfcla.exe O4 - HKLM\..\RunOnce: [d3xf.exe] C:\WINDOWS\system32\d3xf.exe O4 - HKLM\..\RunOnce: [iprz32.exe] C:\WINDOWS\iprz32.exe O4 - HKLM\..\RunOnce: [netxw32.exe] C:\WINDOWS\system32\netxw32.exe O4 - HKLM\..\RunOnce: [addcs32.exe] C:\WINDOWS\system32\addcs32.exe O4 - HKLM\..\RunOnce: [ipfe32.exe] C:\WINDOWS\system32\ipfe32.exe O4 - HKLM\..\RunOnce: [javaki.exe] C:\WINDOWS\javaki.exe O4 - HKLM\..\RunOnce: [appkq.exe] C:\WINDOWS\system32\appkq.exe O4 - HKLM\..\RunOnce: [mspk32.exe] C:\WINDOWS\system32\mspk32.exe O4 - HKLM\..\RunOnce: [javaez32.exe] C:\WINDOWS\system32\javaez32.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.comcastsupport.com/sdcxuser/asp/tgctlsr.cab O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EP...l_v1-0-3-24.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by17fd.bay17.hotmail.msn.com/resources/MsnPUpld.cab O16 - DPF: {52454909-B15F-11D3-83A3-000083613743} (SCMDir Class) - https://go14d.wspan.com/secure/DLLs/SCMDirCtl.CAB O16 - DPF: {7DB7E238-1425-4434-8B05-6453AD6A49C6} (WSPrint3 Control) - https://go14d.wspan.com/secure/DLLs/WSPrint3.CAB O16 - DPF: {85788258-6ACF-4FC1-A2CD-3BD248065AB9} (WSKeyboardMap Class) - https://go14d.wspan.com/Secure/DLLs/WSKeyboardTranslator.cab O16 - DPF: {8D33B6F0-1E74-419C-BBEF-D00E976A3A5D} (WSFileIO Class 2) - https://go12f.wspan.com/secure/DLLs/WSFileIO2.cab O16 - DPF: {9145A52A-9B22-4858-AEE7-74D6C7D3F366} (BrowserConfig Class) - https://go11d.wspan.com/secure/DLLs/WSBrowserConfig.cab O16 - DPF: {D4233B6D-88A0-11D3-BC29-400011500032} (WspGoCal Class) - https://go14d.wspan.com/scripts/us/bin/WSCAL.CAB O16 - DPF: {E367B390-9331-4003-B884-7D1EF8C9EEF7} (WSEmul Control 2) - https://go14d.wspan.com/Secure/DLLs/WSEMUL2.CAB O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab O16 - DPF: {E99BF99C-5D95-11D4-A0EC-00500489A32D} (WSFileIO Class) - https://go11d.wspan.com/secure/DLLs/WSFileIO.cab O23 - Service: Network Security Service (NSS) ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\d3az.exe O23 - Service: Compaq Advisor (Compaq_RBA) - NeoPlanet - C:\Program Files\COMPAQ\Compaq Advisor\bin\compaq-rba.exe O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe |
 |
 
|
|
Aug 26 2005, 12:46 AM
Post
#2
|
|
 Faerie Kitty Geek  Posts: 17,875 From: Crawfordsville, IN OS: XP Pro 
|
Due to lack of feedback, this topic has been closed.
If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic. |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
Similar Topics
| Topic Title | Replies / Views | Topic Information | |||||
|---|---|---|---|---|---|---|---|
 |
2 / 1,875 | 8th August 2008 - 08:58 AM joke blue started - last by Essexboy |
|||||
|
5 / 1,592 | 30th August 2008 - 05:40 PM red mug started - last by Rorschach112 |
|||||
|
4 / 196 | 19th December 2008 - 12:53 AM noweesnana started - last by Jimmy2012 |
|||||
|
6 / 336 | 28th December 2008 - 11:50 AM yasirmusa started - last by Rorschach112 |
|||||
|
Time is now: 9th January 2009 - 06:46 AM |
| Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. |
