[Prominia]

OK My computer was being very strange recently and when I used HijackThis I found I had something called Jump Logo Each Love which i have no idea what it is. I believe I got rid of it but i want to make sure. Also i have a few programs starting up that I dont know what they are, called dumprep 0 -k and whsurvey. I followed the instructions before posting and got rid of lots of malware but just double checking. Thanks in advance.

Logfile of HijackThis v1.99.1
Scan saved at 5:40:53 PM, on 2/4/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WMP54GSv1_1.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Spencer\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 210.21.75.114:8080
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [webHancer Survey Companion] "C:\Program Files\webHancer\Programs\whSurvey.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative....015/CTSUEng.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1143095110750
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WMP54GSSVC - Unknown owner - C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WLService.exe" "WMP54GSv1_1.exe (file missing)

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 1:45:48 PM 2/4/2007

+ Scan result:



C:\WINDOWS\system32\kewlbutton.ocx -> Backdoor.IRCBot : Cleaned with backup (quarantined).
C:\Program Files\Common Files\owou\owoud\vocabulary -> Downloader.TSUpdate.j : Cleaned with backup (quarantined).
C:\LimeWire PRO 4.10.8.2\LimeWire PRO v4.10.8.2.exe -> Dropper.Agent.ahi : Cleaned with backup (quarantined).
:mozilla.35:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.36:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.315:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.316:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.327:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.533:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
:mozilla.534:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
:mozilla.535:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
:mozilla.536:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
:mozilla.537:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
:mozilla.538:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Gamershell : Cleaned.
:mozilla.379:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.454:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.455:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.531:C:\Documents and Settings\Spencer\Application Data\Mozilla\Firefox\Profiles\umsonsu1.default\cookies.txt -> TrackingCookie.Texttbnru : Cleaned.
C:\System Volume Information\_restore{F215A60C-AF76-4DF0-B595-830226D04128}\RP410\A0081351.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{F215A60C-AF76-4DF0-B595-830226D04128}\RP410\A0086356.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).


::Report end