Here is my logfile with the virus check at the bottom:
Logfile of HijackThis v1.99.1
Scan saved at 5:28:19 PM, on 5/17/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\Explorer.exe
F:\WINDOWS\.exe
f:\windows\system32\kjlrgq.exe
F:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
F:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
F:\Program Files\VPN Client\cvpnd.exe
F:\Program Files\Diskeeper\DkService.exe
F:\Program Files\ewido\security suite\ewidoctrl.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\MsPMSPSv.exe
F:\WINDOWS\.exe
F:\Program Files\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
F:\Program Files\Microsoft AntiSpyware\gcasServ.exe
F:\Program Files\Grisoft\AVG Free\avgcc.exe
F:\Program Files\Grisoft\AVG Free\avgwb.dat
F:\Program Files\RegCleaner\RegCleanr.exe
F:\Program Files\Internet Explorer\iexplore.exe
F:\Program Files\Motherboard Monitor 5\MBM5.exe
F:\Documents and Settings\Administrator\My Documents\My Downloads\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lds.org/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lds.org/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer =
proxy.usu.edu:80
F2 - REG:system.ini: Shell=Explorer.exe F:\WINDOWS\Nail.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program
Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1
\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - f:\program
files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - f:\program
files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
O4 - HKLM\..\Run: [AVG] F:\\Program Files\\Microsoft AntiSpyware\\gcasServ.exe
O8 - Extra context menu item: &Google Search - res://F:\Program
Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://F:\Program
Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://F:\Program Files\Viewpoint\Viewpoint
Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://F:\Program
Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://F:\Program
Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://F:\Program
Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://F:\Program
Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - F:\Program
Files\AIM\aim.exe
O12 - Plugin for .spop: F:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
http://a840.g.akamai...all/xscan53.cab
O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - F:\PROGRA~1
\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - F:\PROGRA~1
\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - F:\Program
Files\VPN Client\cvpnd.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - F:\Program
Files\Diskeeper\DkService.exe
O23 - Service: ewido security suite control - ewido networks - F:\Program
Files\ewido\security suite\ewidoctrl.exe
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 4:36:27 PM, 5/17/2005
+ Report-Checksum: 9E492537
+ Date of database: 5/17/2005
+ Version of scan engine: v3.0
+ Duration: 22 min
+ Scanned Files: 35349
+ Speed: 26.40 Files/Second
+ Infected files: 12
+ Removed files: 12
+ Files put in quarantine: 12
+ Files that could not be opened: 0
+ Files that could not be cleaned: 0
+ Binder: Yes
+ Crypter: Yes
+ Archives: No
+ Scanned items:
F:\
+ Scan result:
F:\Documents and Settings\Administrator\.jpi_cache\file\1.0\SecurityClassLoader.class-6fd9f626-40c8904e.class -> TrojanDownloader.Small.WV -> Cleaned with backup
F:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6TG7ZIF9\Nail[1].exe -> Trojan.Nail -> Cleaned with backup
F:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\CPT3SNR1\Poller[1].exe -> Trojan.Agent.cp -> Cleaned with backup
F:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EZWVENIN\aurora[1].exe -> Spyware.BetterInternet.c -> Cleaned with backup
F:\Program Files\Microsoft AntiSpyware\Quarantine\5838881D-02F1-421D-95CC-B16795\1ACBDD63-9169-4F80-BF36-0C3753 -> Trojan.Agent.db -> Cleaned with backup
F:\Program Files\Microsoft AntiSpyware\Quarantine\C021C698-B2EC-45EC-98B4-462A59\F11F8E9A-2563-465B-9DDF-B290AE -> Trojan.Agent.db -> Cleaned with backup
F:\WINDOWS\.exe -> Spyware.BetterInternet -> Cleaned with backup
F:\WINDOWS\Nail.exe -> Trojan.Nail -> Cleaned with backup
F:\WINDOWS\svcproc.exe -> Trojan.Stervis.c -> Cleaned with backup
F:\WINDOWS\system32\DrPMon.dll -> Trojan.Agent.db -> Cleaned with backup
F:\WINDOWS\system32\wtfhbmu.exe -> Trojan.Agent.cp -> Cleaned with backup
F:\WINDOWS\tdtb.exe -> Trojan.Imiserv.c -> Cleaned with backup
::Report End
Sign In
Create Account
