My computer thanks you for the help in advance.
Logfile of HijackThis v1.98.2
Scan saved at 8:19:01 PM, on 3/13/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\inet10047\services.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Ahead\InCD\InCD.exe
C:\WINDOWS\System32\G-VGA.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe
C:\WINDOWS\msng32.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\WINDOWS\System32\open32.exe
C:\WINDOWS\System32\Pob.exe
C:\WINDOWS\system32\sdkcm32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\mctxp.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\mctxp.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\mctxp.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\mctxp.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\mctxp.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\mctxp.dll/sp.html#44768
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\mctxp.dll/sp.html#44768
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - Default URLSearchHook is missing
F3 - REG:win.ini: run=C:\WINDOWS\inet10047\services.exe
F2 - REG:system.ini: UserInit=Userinit.exe,TGBRFV_
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {0899A5EA-920C-480E-4880-15E50AA52116} - C:\WINDOWS\javamu.dll
O2 - BHO: (no name) - {5321E378-FFAD-4999-8C62-03CA8155F0B3} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-ca\msntb.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [VGAUtil] C:\WINDOWS\System32\G-VGA.exe
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [MSNSysRestore] C:\WINDOWS\System32\pc32.exe bg
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [xp_system] C:\WINDOWS\inet10047\services.exe
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe"
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [Shell] open32.exe
O4 - HKLM\..\Run: [IEXPLORE.EXE] C:\Program Files\Internet Explorer\IEXPLORE.EXE
O4 - HKLM\..\Run: [Nlm] C:\WINDOWS\System32\Fcl.exe
O4 - HKLM\..\Run: [Cpd] C:\WINDOWS\System32\Pob.exe
O4 - HKLM\..\Run: [Luh] C:\WINDOWS\System32\Qmi.exe
O4 - HKLM\..\Run: [Uav] C:\WINDOWS\System32\Slu.exe
O4 - HKLM\..\Run: [Oef] C:\WINDOWS\System32\Pti.exe
O4 - HKLM\..\Run: [Emq] C:\WINDOWS\System32\Krt.exe
O4 - HKLM\..\Run: [Pen] C:\WINDOWS\System32\Ncf.exe
O4 - HKLM\..\Run: [Eca] C:\WINDOWS\System32\Stq.exe
O4 - HKLM\..\Run: [Qsd] C:\WINDOWS\System32\Cfq.exe
O4 - HKLM\..\Run: [Tfm] C:\WINDOWS\System32\Brg.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Tih] C:\WINDOWS\System32\Vrb.exe
O4 - HKLM\..\Run: [Gmc] C:\WINDOWS\System32\Unf.exe
O4 - HKLM\..\Run: [Mol] C:\WINDOWS\System32\Vfe.exe
O4 - HKLM\..\Run: [Olv] C:\WINDOWS\System32\Avn.exe
O4 - HKLM\..\Run: [Vcj] C:\WINDOWS\System32\Dqk.exe
O4 - HKLM\..\Run: [Mmg] C:\WINDOWS\System32\Bpf.exe
O4 - HKLM\..\Run: [Crc] C:\WINDOWS\System32\Muc.exe
O4 - HKLM\..\Run: [Npj] C:\WINDOWS\System32\Lca.exe
O4 - HKLM\..\Run: [Paf] C:\WINDOWS\System32\Map.exe
O4 - HKLM\..\Run: [Rmt] C:\WINDOWS\System32\Vni.exe
O4 - HKLM\..\Run: [Kno] C:\WINDOWS\System32\Ljd.exe
O4 - HKLM\..\Run: [Cip] C:\WINDOWS\System32\Srh.exe
O4 - HKLM\..\Run: [Rci] C:\WINDOWS\System32\Fnu.exe
O4 - HKLM\..\Run: [Hqo] C:\WINDOWS\System32\Nro.exe
O4 - HKLM\..\Run: [Gdl] C:\WINDOWS\System32\Nsi.exe
O4 - HKLM\..\Run: [Tls] C:\WINDOWS\System32\Sdj.exe
O4 - HKLM\..\Run: [Pbs] C:\WINDOWS\System32\Oka.exe
O4 - HKLM\..\Run: [Fjm] C:\WINDOWS\System32\Kut.exe
O4 - HKLM\..\Run: [Jnl] C:\WINDOWS\System32\Ejp.exe
O4 - HKLM\..\Run: [Lgu] C:\WINDOWS\System32\Cqu.exe
O4 - HKLM\..\Run: [Csf] C:\WINDOWS\System32\Tni.exe
O4 - HKLM\..\Run: [Tci] C:\WINDOWS\System32\Udo.exe
O4 - HKLM\..\Run: [Djv] C:\WINDOWS\System32\Ccs.exe
O4 - HKLM\..\Run: [Jfc] C:\WINDOWS\System32\Bse.exe
O4 - HKLM\..\Run: [Jih] C:\WINDOWS\System32\Ahl.exe
O4 - HKLM\..\Run: [Bsp] C:\WINDOWS\System32\Vvr.exe
O4 - HKLM\..\Run: [Tfj] C:\WINDOWS\System32\Aus.exe
O4 - HKLM\..\Run: [Sjl] C:\WINDOWS\System32\Ens.exe
O4 - HKLM\..\Run: [Qcu] C:\WINDOWS\System32\Svp.exe
O4 - HKLM\..\Run: [Oma] C:\WINDOWS\System32\Tqp.exe
O4 - HKLM\..\Run: [Fec] C:\WINDOWS\System32\Ign.exe
O4 - HKLM\..\Run: [Rbi] C:\WINDOWS\System32\Htk.exe
O4 - HKLM\..\Run: [Tvi] C:\WINDOWS\System32\Jse.exe
O4 - HKLM\..\Run: [Rkq] C:\WINDOWS\System32\Kud.exe
O4 - HKLM\..\Run: [Has] C:\WINDOWS\System32\Ibc.exe
O4 - HKLM\..\Run: [sdkcm32.exe] C:\WINDOWS\system32\sdkcm32.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [Vac] C:\WINDOWS\System32\Bvp.exe
O4 - HKCU\..\Run: [Qsd] C:\WINDOWS\System32\Cfq.exe
O4 - HKCU\..\Run: [Tfm] C:\WINDOWS\System32\Brg.exe
O4 - HKCU\..\Run: [Tih] C:\WINDOWS\System32\Vrb.exe
O4 - HKCU\..\Run: [Gmc] C:\WINDOWS\System32\Unf.exe
O4 - HKCU\..\Run: [Mol] C:\WINDOWS\System32\Vfe.exe
O4 - HKCU\..\Run: [Olv] C:\WINDOWS\System32\Avn.exe
O4 - HKCU\..\Run: [Vcj] C:\WINDOWS\System32\Dqk.exe
O4 - HKCU\..\Run: [Mmg] C:\WINDOWS\System32\Bpf.exe
O4 - HKCU\..\Run: [Crc] C:\WINDOWS\System32\Muc.exe
O4 - HKCU\..\Run: [Npj] C:\WINDOWS\System32\Lca.exe
O4 - HKCU\..\Run: [Paf] C:\WINDOWS\System32\Map.exe
O4 - HKCU\..\Run: [Rmt] C:\WINDOWS\System32\Vni.exe
O4 - HKCU\..\Run: [Kno] C:\WINDOWS\System32\Ljd.exe
O4 - HKCU\..\Run: [Cip] C:\WINDOWS\System32\Srh.exe
O4 - HKCU\..\Run: [Rci] C:\WINDOWS\System32\Fnu.exe
O4 - HKCU\..\Run: [Hqo] C:\WINDOWS\System32\Nro.exe
O4 - HKCU\..\Run: [Gdl] C:\WINDOWS\System32\Nsi.exe
O4 - HKCU\..\Run: [Tls] C:\WINDOWS\System32\Sdj.exe
O4 - HKCU\..\Run: [Pbs] C:\WINDOWS\System32\Oka.exe
O4 - HKCU\..\Run: [Fjm] C:\WINDOWS\System32\Kut.exe
O4 - HKCU\..\Run: [Jnl] C:\WINDOWS\System32\Ejp.exe
O4 - HKCU\..\Run: [Lgu] C:\WINDOWS\System32\Cqu.exe
O4 - HKCU\..\Run: [Csf] C:\WINDOWS\System32\Tni.exe
O4 - HKCU\..\Run: [Tci] C:\WINDOWS\System32\Udo.exe
O4 - HKCU\..\Run: [Jih] C:\WINDOWS\System32\Ahl.exe
O4 - HKCU\..\Run: [Bsp] C:\WINDOWS\System32\Vvr.exe
O4 - HKCU\..\Run: [Tfj] C:\WINDOWS\System32\Aus.exe
O4 - HKCU\..\Run: [Sjl] C:\WINDOWS\System32\Ens.exe
O4 - HKCU\..\Run: [Qcu] C:\WINDOWS\System32\Svp.exe
O4 - HKCU\..\Run: [Oma] C:\WINDOWS\System32\Tqp.exe
O4 - HKCU\..\Run: [Rkq] C:\WINDOWS\System32\Kud.exe
O4 - HKCU\..\Run: [xp_system] C:\WINDOWS\inet10047\services.exe
O4 - HKCU\..\Run: [Aik] C:\WINDOWS\Oik.exe
O4 - HKCU\..\Run: [Has] C:\WINDOWS\System32\Ibc.exe
O4 - HKCU\..\Run: [Tqj] C:\WINDOWS\Nkv.exe
O4 - HKCU\..\Run: [Vac] C:\WINDOWS\System32\Bvp.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} (InstallX Class) - http://www.20x2p.com...15008/enter.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1098151191531
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/...ro.cab27513.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/z...s/heartbeat.cab
O16 - DPF: {FEE41EED-1DA6-46C9-8EC6-F0BE1B7157DC} (iiittt Class) - http://felt.backer.6...RN_SOFTWARE.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{47DCE43E-5A9B-4769-B7D3-E15940D49A84}: NameServer = 205.207.69.245,205.207.69.246
O17 - HKLM\System\CS1\Services\Tcpip\..\{47DCE43E-5A9B-4769-B7D3-E15940D49A84}: NameServer = 205.207.69.245,205.207.69.246
O17 - HKLM\System\CS2\Services\Tcpip\..\{47DCE43E-5A9B-4769-B7D3-E15940D49A84}: NameServer = 205.207.69.245,205.207.69.246
O21 - SSODL: MSMserv - {22DFD4B8-4C8B-476B-A459-24ED22282965} - C:\WINDOWS\System32\extrpmsp.dll
Sign In
Create Account
