Logfile of HijackThis v1.97.7
Scan saved at 08:59:23, on 3.9.2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Running processes:
C:\windows\System32\smss.exe
C:\windows\SYSTEM32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Programfiler\Fellesfiler\Symantec Shared\ccSetMgr.exe
C:\Programfiler\Fellesfiler\Symantec Shared\ccEvtMgr.exe
C:\windows\system32\spoolsv.exe
C:\windows\Explorer.EXE
T:\Messenger Plus! 2\MsgPlus.exe
C:\WINDOWS\SYSTEM32\qttask.exe
C:\Programfiler\Java\j2re1.4.2_03\bin\jusched.exe
C:\PROGRA~1\DRWEBF~1\spiderml.exe
C:\windows\System32\rundll32.exe
C:\windows\System32\nvsvc32.exe
C:\Programfiler\DrWeb for Windows\spidernt.exe
C:\windows\System32\svchost.exe
C:\windows\System32\devldr32.exe
C:\WINDOWS\System32\wisptis.exe
T:\Overnet Lite\overnet.exe
C:\Documents and Settings\ernst\Skrivebord\hjk\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.one.ruR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.startsiden.no/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.vseposelki.ruR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.one.ruR0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://www.one.ruR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.one.ruR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koblinger
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O1 - Hosts: 216.239.53.99 www.mp3downloadhq.com
O1 - Hosts: 216.239.53.99 www.easymusicdownload.com
O1 - Hosts: 216.239.53.99 easymusicdownload.com
O1 - Hosts: 216.239.53.99 www.mp3madeeasy.com
O1 - Hosts: 216.239.53.99 www.monstershare.com
O1 - Hosts: 216.239.53.99 monstershare.com
O1 - Hosts: 216.239.53.99 www.edonkey.com
O1 - Hosts: 216.239.53.99 www.madeformusic.com
O1 - Hosts: 216.239.53.99 www.mp3u.com
O1 - Hosts: 216.239.53.99 www.mp3specialty.com
O1 - Hosts: 216.239.53.99 music-download-world.com
O1 - Hosts: 216.239.53.99 song-download-world.com
O1 - Hosts: 216.239.53.99 www.flixs.net
O1 - Hosts: 216.239.53.99 www.ishareit.net
O1 - Hosts: 216.239.53.99 www.ishareit.com
O1 - Hosts: 216.239.53.99 www.download-doctor.com
O1 - Hosts: 216.239.53.99 www.ezmp3download.com
O1 - Hosts: 216.239.53.99 mp3-network.com
O1 - Hosts: 216.239.53.99 www.mp3-network.com
O2 - BHO: (no name) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - (no file)
O2 - BHO: (no name) - {021BB032-80A8-4FB6-B3D5-CF27B1553B95} - C:\windows\mslagent\4b_1,0,1,0_mslagent.dll (file missing)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programfiler\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0D70C561-9129-11D7-BC44-0040F401C318} - C:\WINDOWS\SYSTEM32\pkilrrey.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {E9FEE465-6A94-F06C-7DFC-CF0B9A02A2F6} - (no file)
O2 - BHO: (no name) - {ED73F88C-D21A-F72A-9354-3ABDE2B3E3AF} - C:\WINDOWS\system32\mmfwskig.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MessengerPlus2] "T:\Messenger Plus! 2\MsgPlus.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programfiler\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\windows\System32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [SpIDerMail] "C:\PROGRA~1\DRWEBF~1\spiderml.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1016.dll,InstantAccess
O4 - Global Startup: Microsoft Office.lnk = C:\Programfiler\Microsoft Office\Office\OSA9.EXE
O9 - Extra 'Tools' menuitem: Sun Java-konsol (HKLM)
O9 - Extra button: ICQ (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O10 - Unknown file in Winsock LSP: c:\windows\system32\drwebsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\drwebsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\drwebsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\drwebsp.dll
O12 - Plugin for .m3u: C:\Programfiler\Opera7\PLUGINS\npqtplugin6.dll
O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} -
http://akamai.downlo..._1016_EN_XP.cabO16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} -
http://akamai.downlo...thv32_EN_XP.cabO16 - DPF: {706F3805-27D7-478D-80E5-E25D2BB030B3} (VacPro.internazionale_ver3) -
http://www.advnt01.c...ionale_ver3.CABO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
http://a840.g.akamai...all/xscan53.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://www.pandasoft.../as5/asinst.cabO16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) -
http://www.nullsoft....ayx_vp3_mp3.cab