[Ydderf]

Logfile of HijackThis v1.99.1
Scan saved at 1:34:51 AM, on 6/1/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\msupd6.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AIM\aim.exe
c:\windows\system32\ljskrh.exe
C:\program files\steam\steam.exe
C:\WINDOWS\System32\l?gonui.exe
C:\PROGRA~1\NETSCAPE\NETSCAPE\NETSCP.EXE
C:\Documents and Settings\Freddy\Desktop\HijackThis.exe

R3 - Default URLSearchHook is missing
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Freddy\Application Data\Mozilla\Profiles\default\rt5hfi3p.slt\prefs.js)
O2 - BHO: Band Class - {0007522A-2297-43C1-8EB1-C90B0FF20DA5} - C:\WINDOWS\enhtb.dll (file missing)
O2 - BHO: (no name) - {518A22DF-6954-4FF4-2458-4901D842C19C} - C:\WINDOWS\System32\sjysyoao.dll
O2 - BHO: (no name) - {CC4D454F-12D3-1CC9-55B6-8A5F84A846BC} - C:\WINDOWS\System32\ejncqewb.dll
O2 - BHO: (no name) - {F78D4595-4110-7CFC-01A8-0BBBAE5CC7D4} - C:\WINDOWS\System32\cdhleope.dll
O4 - HKLM\..\Run: [qxmucefb] c:\windows\system32\qxmucefb.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [nefgymyv] C:\WINDOWS\System32\nefgymyv.exe
O4 - HKLM\..\Run: [pqirulpt] C:\WINDOWS\System32\pqirulpt.exe
O4 - HKLM\..\Run: [rqqnccju] C:\WINDOWS\System32\rqqnccju.exe
O4 - HKLM\..\Run: [hkopqe] c:\windows\system32\ljskrh.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Jeh] C:\WINDOWS\System32\l?gonui.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)
O16 - DPF: {1C955F3B-5B32-4393-A05D-24B4970CD2A1} - http://streamp.baben...cabs/videox.cab
O16 - DPF: {BAB3E70B-A847-4A88-ACFC-778FCCC00287} (CActSetupObj Object) - http://www.odysseusm...om/actsetup.cab
O23 - Service: xmopekxiyqck (MsUpdate6) - Unknown owner - C:\WINDOWS\System32\msupd6.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe






i keep ending process to the ljskrh.exe program and trying to delete it but... the file keeps renaming itself which makes it impossible to delete cuz its in use. i hate these things and i think i have other stuff that i shoulndt have? someone help please i am most greatful