Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

how to remove extended search [CLOSED]


  • This topic is locked This topic is locked

#1
tangomania

tangomania

    New Member

  • Member
  • Pip
  • 1 posts
Please help me rid of extended search
Here is my Logfile of HijackThis v1.99.1
Scan saved at 2:52:33 PM, on 5/29/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\COMPAQ\Compaq Advisor\bin\compaq-rba.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\Winamp\Winampa.exe
C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Compaq\eakdrv\STARTDRV.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\addkv32.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Compaq\eakdrv\EAKDRV.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Compaq\eakdrv\EAUSBKBD.EXE
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\TERRILL MANUELE.HOME-9P9JAQ4GD8\Local Settings\Temporary Internet Files\Content.IE5\UFU3MTQ3\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\apyja.dll/sp.html#37049
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: GDS module - {A084A565-B09B-4e4c-A497-7CC50AEAB2A7} - C:\WINDOWS\gds.dll (file missing)
O2 - BHO: Class - {FF477E96-3AEA-042A-F3F3-EC30EE10E70D} - C:\WINDOWS\netru32.dll
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\COMPAQ\Coloreal\coloreal.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [CXMon] "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [Connector] C:\WINDOWS\System32\ShellExt\CNAT.EXE -n
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CPQEASYACC] C:\Compaq\eakdrv\STARTDRV.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [iexplore.exe] C:\Program Files\Internet Explorer\iexplore.exe
O4 - HKLM\..\Run: [addkv32.exe] C:\WINDOWS\addkv32.exe
O4 - HKLM\..\Run: [ntzp32.exe] C:\WINDOWS\ntzp32.exe
O4 - HKLM\..\Run: [netln.exe] C:\WINDOWS\system32\netln.exe
O4 - HKLM\..\Run: [ieqg.exe] C:\WINDOWS\system32\ieqg.exe
O4 - HKLM\..\Run: [sysdf32.exe] C:\WINDOWS\system32\sysdf32.exe
O4 - HKLM\..\Run: [crjx.exe] C:\WINDOWS\crjx.exe
O4 - HKLM\..\Run: [iesk.exe] C:\WINDOWS\iesk.exe
O4 - HKLM\..\Run: [mfcxw.exe] C:\WINDOWS\system32\mfcxw.exe
O4 - HKLM\..\Run: [cras.exe] C:\WINDOWS\cras.exe
O4 - HKLM\..\RunOnce: [d3az.exe] C:\WINDOWS\d3az.exe
O4 - HKLM\..\RunOnce: [ntak32.exe] C:\WINDOWS\system32\ntak32.exe
O4 - HKLM\..\RunOnce: [ntra.exe] C:\WINDOWS\system32\ntra.exe
O4 - HKLM\..\RunOnce: [apigp.exe] C:\WINDOWS\system32\apigp.exe
O4 - HKLM\..\RunOnce: [appkt.exe] C:\WINDOWS\appkt.exe
O4 - HKLM\..\RunOnce: [netox.exe] C:\WINDOWS\system32\netox.exe
O4 - HKLM\..\RunOnce: [javazy32.exe] C:\WINDOWS\javazy32.exe
O4 - HKLM\..\RunOnce: [mfcsr32.exe] C:\WINDOWS\mfcsr32.exe
O4 - HKLM\..\RunOnce: [sdkcs32.exe] C:\WINDOWS\sdkcs32.exe
O4 - HKLM\..\RunOnce: [apifw.exe] C:\WINDOWS\apifw.exe
O4 - HKLM\..\RunOnce: [crys32.exe] C:\WINDOWS\system32\crys32.exe
O4 - HKLM\..\RunOnce: [sysrl32.exe] C:\WINDOWS\system32\sysrl32.exe
O4 - HKLM\..\RunOnce: [appsa32.exe] C:\WINDOWS\system32\appsa32.exe
O4 - HKLM\..\RunOnce: [appul32.exe] C:\WINDOWS\appul32.exe
O4 - HKLM\..\RunOnce: [addog32.exe] C:\WINDOWS\system32\addog32.exe
O4 - HKLM\..\RunOnce: [addmf32.exe] C:\WINDOWS\addmf32.exe
O4 - HKLM\..\RunOnce: [iprp32.exe] C:\WINDOWS\iprp32.exe
O4 - HKLM\..\RunOnce: [atlqs32.exe] C:\WINDOWS\atlqs32.exe
O4 - HKLM\..\RunOnce: [sysnk32.exe] C:\WINDOWS\sysnk32.exe
O4 - HKLM\..\RunOnce: [ntyn.exe] C:\WINDOWS\system32\ntyn.exe
O4 - HKLM\..\RunOnce: [javasp32.exe] C:\WINDOWS\system32\javasp32.exe
O4 - HKLM\..\RunOnce: [mfcla.exe] C:\WINDOWS\system32\mfcla.exe
O4 - HKLM\..\RunOnce: [d3xf.exe] C:\WINDOWS\system32\d3xf.exe
O4 - HKLM\..\RunOnce: [iprz32.exe] C:\WINDOWS\iprz32.exe
O4 - HKLM\..\RunOnce: [netxw32.exe] C:\WINDOWS\system32\netxw32.exe
O4 - HKLM\..\RunOnce: [addcs32.exe] C:\WINDOWS\system32\addcs32.exe
O4 - HKLM\..\RunOnce: [ipfe32.exe] C:\WINDOWS\system32\ipfe32.exe
O4 - HKLM\..\RunOnce: [javaki.exe] C:\WINDOWS\javaki.exe
O4 - HKLM\..\RunOnce: [appkq.exe] C:\WINDOWS\system32\appkq.exe
O4 - HKLM\..\RunOnce: [mspk32.exe] C:\WINDOWS\system32\mspk32.exe
O4 - HKLM\..\RunOnce: [javaez32.exe] C:\WINDOWS\system32\javaez32.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.comcastsu...asp/tgctlsr.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg...l_v1-0-3-24.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by17fd.bay17....es/MsnPUpld.cab
O16 - DPF: {52454909-B15F-11D3-83A3-000083613743} (SCMDir Class) - https://go14d.wspan....s/SCMDirCtl.CAB
O16 - DPF: {7DB7E238-1425-4434-8B05-6453AD6A49C6} (WSPrint3 Control) - https://go14d.wspan....Ls/WSPrint3.CAB
O16 - DPF: {85788258-6ACF-4FC1-A2CD-3BD248065AB9} (WSKeyboardMap Class) - https://go14d.wspan....dTranslator.cab
O16 - DPF: {8D33B6F0-1E74-419C-BBEF-D00E976A3A5D} (WSFileIO Class 2) - https://go12f.wspan....s/WSFileIO2.cab
O16 - DPF: {9145A52A-9B22-4858-AEE7-74D6C7D3F366} (BrowserConfig Class) - https://go11d.wspan....owserConfig.cab
O16 - DPF: {D4233B6D-88A0-11D3-BC29-400011500032} (WspGoCal Class) - https://go14d.wspan....s/bin/WSCAL.CAB
O16 - DPF: {E367B390-9331-4003-B884-7D1EF8C9EEF7} (WSEmul Control 2) - https://go14d.wspan....LLs/WSEMUL2.CAB
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg...ol_v1-0-3-0.cab
O16 - DPF: {E99BF99C-5D95-11D4-A0EC-00500489A32D} (WSFileIO Class) - https://go11d.wspan....Ls/WSFileIO.cab
O23 - Service: Network Security Service (NSS) ( 11F#`I) - Unknown owner - C:\WINDOWS\d3az.exe
O23 - Service: Compaq Advisor (Compaq_RBA) - NeoPlanet - C:\Program Files\COMPAQ\Compaq Advisor\bin\compaq-rba.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
  • 0

Advertisements


#2
Kat

Kat

    Retired

  • Retired Staff
  • 19,711 posts
  • MVP
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP