[dragz]

i have these 3 things runing in my process tab and i have no idea what they are, all i know ever since they appaeared there my computer hasnt operated it's best. Now i located all the files and deleted them once and my whole computer just stuffed up and it didnt function properly.
I need to know are these required for my system 2 run or are they something i should be getting rid off?


Logfile of HijackThis v1.99.1
Scan saved at 8:01:50 PM, on 4/25/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\xwh.exe
C:\WINDOWS\System32\winlite.exe
C:\WINDOWS\System32\scrtkfg.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Dragisa\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ff] xwh.exe
O4 - HKLM\..\Run: [PPPOEOE] winlite.exe
O4 - HKLM\..\Run: [System CSRSS Patch] scrtkfg.exe
O4 - HKLM\..\RunServices: [ff] xwh.exe
O4 - HKLM\..\RunServices: [PPPOEOE] winlite.exe
O4 - HKLM\..\RunServices: [System CSRSS Patch] scrtkfg.exe
O4 - HKCU\..\Run: [ff] xwh.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1112579758777
O17 - HKLM\System\CCS\Services\Tcpip\..\{030C128A-2E40-41E1-A526-AA3B7FB2BB44}: NameServer = 192.189.54.17 203.8.183.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{030C128A-2E40-41E1-A526-AA3B7FB2BB44}: NameServer = 192.189.54.17 203.8.183.1

[Advertisements]

They look like viruses to me.

Please upgrade to SP1 and do an online virusscan for example here: http://housecall.antivirus.com/

Post back with a new log.

Regards,

[Metallica]

They look like viruses to me.

Please upgrade to SP1 and do an online virusscan for example here: http://housecall.antivirus.com/

Post back with a new log.

Regards,