here is my log file kind of new so if u need more info pls tell me
Deckard's System Scanner v20071014.68
Run by Ruben on 2008-08-06 10:28:12
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- HijackThis (run as Ruben.exe) -----------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:28:17 AM, on 8/6/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\ASUS\AASP\1.00.32\aaCenter.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe
C:\Users\Ruben\AppData\Local\ljnmj.exe
C:\Program Files (x86)\MagicTune Premium\GammaTray.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\Program Files (x86)\SEC\Natural Color Pro\NCProTray.exe
C:\Program Files (x86)\Java\jre1.6.0_07\bin\jusched.exe
C:\Windows\SysWOW64\CtHelper.exe
C:\Windows\SysWOW64\Ctxfihlp.exe
C:\Windows\SysWOW64\CTXFISPI.EXE
C:\Program Files (x86)\ASUS\AI Suite\AiNap\AiNap.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Users\Ruben\Desktop\dss.exe
C:\Windows\SysWOW64\conime.exe
C:\Users\Ruben\DOWNLO~1\Ruben.exe
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AsioThk32Reg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files (x86)\ASUS\AI Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files (x86)\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [CTRegRun] C:\Windows\CTRegRun.EXE
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ljnmj] c:\users\ruben\appdata\local\ljnmj.exe ljnmj
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [DevconDefaultDB] C:\Windows\system32\READREG /SILENT /FAIL=1 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DevconDefaultDB] C:\Windows\system32\READREG /SILENT /FAIL=1 (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Program Files (x86)\Xfire\xfire.exe
O4 - Global Startup: GammaTray.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: NCProTray.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~2\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~2\Java\JRE16~3.0_0\bin\ssv.dll
O13 - Gopher Prefix:
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.m...ash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative....15102/CTPID.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Creative ALchemy AL1 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL1Licensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: PIXUS ?g?p?o?μ’2?，?v???O?‰?? (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: MagicTuneEngine - Unknown owner - C:\Program Files (x86)\MagicTune Premium\MagicTuneEngine.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9062 bytes
-- Files created between 2008-07-06 and 2008-08-06 -----------------------------
2008-08-05 22:34:14 0 d-------- C:\Windows\Internet Logs
2008-08-05 20:31:59 0 d-------- C:\Program Files (x86)\Trend Micro
2008-08-04 21:31:25 0 d-------- C:\Users\Ruben\{27810330-5cda-4d8e-b116-063c0cc20436}
2008-08-04 21:28:13 0 d-------- C:\Program Files (x86)\Canon
2008-08-03 17:30:37 0 d-------- C:\data
2008-07-31 15:31:57 0 d-------- C:\Program Files (x86)\Haali
2008-07-31 15:29:12 0 d-------- C:\Program Files (x86)\CoreCodec
2008-07-31 14:56:04 0 d-------- C:\Program Files (x86)\eMule
2008-07-25 19:09:42 0 d-------- C:\Program Files (x86)\Combined Community Codec Pack
2008-07-21 16:54:55 0 d-------- C:\Program Files (x86)\DAEMON Tools Lite
2008-07-21 13:59:45 0 d-------- C:\Program Files (x86)\Common Files\Microsoft Games
2008-07-15 14:37:23 348160 --a------ C:\Windows\system32\msvcr71.dll <Not Verified; Microsoft Corporation; MicrosoftR Visual Studio .NET>
2008-07-15 14:37:23 499712 --a------ C:\Windows\system32\msvcp71.dll <Not Verified; Microsoft Corporation; MicrosoftR Visual Studio .NET>
2008-07-15 14:37:17 0 d-------- C:\Windows\system32\Adobe
2008-07-14 18:25:44 0 d-------- C:\Program Files (x86)\Xfire
2008-07-11 17:44:00 0 d-------- C:\Users\Ruben\AsusUpdt_V71401
2008-07-11 17:27:04 0 d-------- C:\Program Files (x86)\iPod
2008-07-11 17:27:03 0 d-------- C:\Program Files (x86)\iTunes
2008-07-10 12:53:48 0 d-------- C:\Program Files (x86)\DAEMON Tools Toolbar
2008-07-08 21:31:28 0 d-------- C:\Program Files (x86)\mIRC
2008-07-06 22:04:32 24576 -ra------ C:\Windows\system32\AsIO.dll <Not Verified; ; AsIO Dynamic Link Library>
2008-07-06 22:04:28 0 d-------- C:\Program Files (x86)\ASUS
-- Find3M Report ---------------------------------------------------------------
2008-08-06 09:49:31 0 d-------- C:\Users\Ruben\AppData\Roaming\Xfire
2008-08-05 23:15:28 0 d-------- C:\Program Files (x86)\Common Files
2008-08-05 23:05:15 0 d-------- C:\Users\Ruben\AppData\Roaming\Sunbelt Software
2008-08-05 00:41:27 0 d-------- C:\Users\Ruben\AppData\Roaming\uTorrent
2008-07-30 23:22:54 0 d--h----- C:\Program Files (x86)\InstallShield Installation Information
2008-07-30 20:02:46 0 d-------- C:\Users\Ruben\AppData\Roaming\mIRC
2008-07-26 18:43:04 0 d-------- C:\Program Files (x86)\CDisplay
2008-07-26 18:25:32 0 d-------- C:\Users\Ruben\AppData\Roaming\cYo
2008-07-22 13:10:35 0 d-------- C:\Program Files (x86)\Java
2008-07-21 16:52:30 0 d-------- C:\Users\Ruben\AppData\Roaming\Microsoft Games
2008-07-21 15:01:42 0 d-------- C:\Users\Ruben\AppData\Roaming\OpenOffice.org2
2008-07-09 02:02:26 0 d-------- C:\Program Files (x86)\Windows Mail
2008-07-06 22:04:06 0 d-------- C:\Program Files (x86)\Common Files\InstallShield
2008-07-06 12:32:15 0 d-------- C:\Users\Ruben\AppData\Roaming\Creative
2008-07-03 01:09:16 0 d-------- C:\Program Files (x86)\AVG
2008-06-29 14:41:30 0 d-------- C:\Users\Ruben\AppData\Roaming\Media Player Classic
2008-06-29 00:45:12 0 d-------- C:\Program Files (x86)\OpenOffice.org 2.4
2008-06-28 00:42:52 0 d-------- C:\Program Files (x86)\uTorrent
2008-06-26 17:35:13 0 d-------- C:\Users\Ruben\AppData\Roaming\Dreamlords
2008-06-21 13:45:56 0 d-------- C:\Program Files (x86)\QuickTime
2008-06-21 13:35:32 0 d-------- C:\Program Files (x86)\Apple Software Update
2008-06-20 19:58:01 0 d-------- C:\Users\Ruben\AppData\Roaming\SecondLife
2008-06-18 09:29:17 0 d-------- C:\Users\Ruben\AppData\Roaming\Mozilla
2008-05-20 20:53:12 413696 --a------ C:\Windows\system32\wrap_oal.dll <Not Verified; Creative Labs; Creative Labs OpenAL32>
2008-05-20 20:53:12 110592 --a------ C:\Windows\system32\OpenAL32.dll <Not Verified; Portions © Creative Labs Inc. and NVIDIA Corp.; Standard OpenAL™ Library>
2008-05-17 21:15:54 967 --a------ C:\Windows\ScUnin.pif
2008-05-17 21:15:54 70656 --a------ C:\Windows\ScUnin.exe <Not Verified; Blizzard Entertainment; Starcraft Uninstaller>
2008-05-17 21:15:54 31604 --a------ C:\Windows\scunin.dat
-- Registry Dump ---------------------------------------------------------------
-- End of Deckard's System Scanner: finished at 2008-08-06 10:28:26 ------------
running vista 64bit
Edited by airpimp, 06 August 2008 - 11:29 AM.
Sign In
Create Account
