Logfile of HijackThis v1.98.2
Scan saved at 1:34:23 PM, on 2/22/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\NavNT\vptray.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\shawn\Desktop\Utilities\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe"
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: jimmyhelp.CBrowserHelper - {8CD3DB98-0F59-4767-9CF4-3DD34F3C709A} - C:\WINDOWS\ffbvwz.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1629.0\en-gb\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PSDrvCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [csrss.exe] C:\WINDOWS\csrss.exe
O4 - HKLM\..\Run: [PicasaNet] "C:\Program Files\Hello\Hello.exe" -b
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Vafgysd] C:\Program Files\Lgtec\Nrem.exe
O4 - HKCU\..\Run: [Jxdet] C:\Program Files\Bizu\Twoujd.exe
O4 - HKCU\..\Run: [Ebcfrxng] C:\Program Files\Ptzum\Ljtlhz.exe
O4 - HKCU\..\Run: [Dxpdhfxl] C:\Program Files\Wcccji\Guyt.exe
O4 - HKCU\..\Run: [Fhzyrpj] C:\Program Files\Htws\Eepx.exe
O4 - HKCU\..\Run: [Pmuwti] C:\Program Files\Uewkp\Kkwujee.exe
O4 - HKCU\..\Run: [Mnoxhgn] C:\Program Files\Qruy\Ncda.exe
O4 - HKCU\..\Run: [Kbpcpxmq] C:\Program Files\Tqkrb\Hozye.exe
O4 - HKCU\..\Run: [Qqspyly] C:\Program Files\Jkihulz\Xvlcta.exe
O4 - HKCU\..\Run: [Qwckpf] c:\Program Files\Fqafn\Vtvuv.exe
O4 - HKCU\..\Run: [Hdqgxxvz] C:\Program Files\Vyxby\Kltznc.exe
O4 - HKCU\..\Run: [Xiydnf] C:\Program Files\Ouacsa\Cfmnfw.exe
O4 - HKCU\..\Run: [Tqsqjeh] C:\Program Files\Gzlk\Qyuqsnr.exe
O4 - HKCU\..\Run: [Aqnjzmjs] C:\Program Files\Qwdsf\Icxt.exe
O4 - HKCU\..\Run: [Wxmjoeq] C:\Program Files\Mcrxx\Vwkaapn.exe
O4 - HKCU\..\Run: [Opqclz] C:\Program Files\Kqyrfk\Ajjkwnr.exe
O4 - HKCU\..\Run: [Xarjdojk] C:\Program Files\Ncjwa\Zbaylup.exe
O4 - HKCU\..\Run: [Jotqhgbm] C:\Program Files\Fgueupt\Melyjvq.exe
O4 - HKCU\..\Run: [Bjbtu] C:\Program Files\Ycyf\Yncxrlk.exe
O4 - HKCU\..\Run: [Ygevql] C:\Program Files\Hwuvy\Xmmzf.exe
O4 - HKCU\..\Run: [Xfvyttda] C:\Program Files\Dreuvqu\Pijq.exe
O4 - HKCU\..\Run: [Obvmfpj] C:\Program Files\Eivp\Xozpsc.exe
O4 - HKCU\..\Run: [Xssowi] C:\Program Files\Jpadhdi\Gyptcx.exe
O4 - HKCU\..\Run: [Arjhyae] C:\Program Files\Caayyyl\Gxuvw.exe
O4 - HKCU\..\Run: [Xkcbjr] C:\Program Files\Kuyorw\Sdvcugo.exe
O4 - HKCU\..\Run: [Zwqrs] C:\Program Files\Smigia\Rklg.exe
O4 - HKCU\..\Run: [Wmqyz] C:\Program Files\Ozkfx\Tdmmj.exe
O4 - HKCU\..\Run: [Agilelun] C:\Program Files\Ubqpru\Rkgsicx.exe
O4 - HKCU\..\Run: [Nxfrn] C:\Program Files\Nzdv\Nefrmyo.exe
O4 - HKCU\..\Run: [Kdrfxyj] C:\Program Files\Opvj\Txwrx.exe
O4 - HKCU\..\Run: [Nwhxwqe] C:\Program Files\Oomev\Zfrhlg.exe
O4 - HKCU\..\Run: [Rtuubtf] C:\Program Files\Lsavs\Vylnfb.exe
O4 - HKCU\..\Run: [Edaqvrwj] C:\Program Files\Oqqwfn\Jkbx.exe
O4 - HKCU\..\Run: [Potto] C:\Program Files\Bjmiag\Wywhukv.exe
O4 - HKCU\..\Run: [Qqzdtjo] C:\Program Files\Aploloy\Odznr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Share in Hello - {B13B4423-2647-4cfc-A4B3-C7D56CB83487} - C:\Program Files\Hello\PicasaCapture.dll
O9 - Extra 'Tools' menuitem: Share in H&ello - {B13B4423-2647-4cfc-A4B3-C7D56CB83487} - C:\Program Files\Hello\PicasaCapture.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1093643701475
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave...aploader_v5.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = mgsl.net
O17 - HKLM\Software\..\Telephony: DomainName = mgsl.net
O17 - HKLM\System\CCS\Services\Tcpip\..\{B5913D07-F323-46D6-903C-6BCFDF7BBC62}: NameServer = 192.168.0.7
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = mgsl.net
O18 - Protocol hijack: mhtml -