Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

downloader.27, access_control, spy sheriff oh my!

Started by Ginkus , Jun 17 2005 09:34 PM

  • Please log in to reply

#1
Ginkus
Posted 17 June 2005 - 09:34 PM

Ginkus

    New Member

  • Member
  • Pip
  • 2 posts
I'm new to this forum. I use firefox, run adaware, and AVG but I got a downloader.k.27.small virus that keeps coming back no matter how much i delete. Then I get Access_Control keep installing itself every few days or so. Now today I get Spy Sheriff taking over my desktop telling me I have malware. So I went and got Hijackthis, and here is my report.

Logfile of HijackThis v1.99.1
Scan saved at 10:35:23 PM, on 6/17/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTHELPER.EXE
D:\IPOD\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Daily Weather Forecast\weather.exe
C:\Program Files\Java\jre1.5.0_01\bin\jucheck.exe
C:\Program Files\Hewlett-Packard\HP OfficeJet T Series\bin\ktchnsnk.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Logitech\Harmony Remote\EasyZapperMonitor.exe
C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
C:\Program Files\MSI\PC Alert 4\PCAlert4.exe
D:\Anapod Explorer\FULL VERSION\Anapod Explorer\anamgr.exe
C:\Program Files\Logitech\Harmony Remote\EasyZapperManagerExe.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
D:\Spam Pal\spampal.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
D:\SpyWareGuard\SpywareGuard\sgmain.exe
D:\Executive Software\Diskeeper Home Edition\DKService.exe
D:\TRILLION\Trillian\trillian.exe
D:\SpyWareGuard\SpywareGuard\sgbhp.exe
D:\Drive Health\dhcore.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
D:\Ewido\security suite\ewidoctrl.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
C:\WINDOWS\System32\GEARSEC.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
D:\Hijack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.iwon.com...global?SEC=bnav
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.games-fusion.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
N1 - Netscape 4: user_pref("browser.startup.homepage", "http://home.iwon.com/"); (C:\Program Files\Netscape\Users\porkpie\prefs.js)
O1 - Hosts: 200.204.78.203 www.fotolog.net
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - D:\Get Right\GetRight\xx2gr.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - D:\SpyWareGuard\SpywareGuard\dlprotect.dll
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [AceGain LiveUpdate] G:\AceGain\LiveUpdate\LiveUpdate.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] D:\IPOD\iTunesHelper.exe
O4 - HKLM\..\Run: [CloneDVDElbyDelay] "L:\DVD Tools\CloneDVD\CloneDVD\ElbyCheck.exe" /L ElbyDelay
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "D:\CdClone\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [Daily Weather Forecast] C:\Program Files\Daily Weather Forecast\weather.exe
O4 - HKLM\..\Run: [HP OfficeJet T Series] "C:\Program Files\Hewlett-Packard\HP OfficeJet T Series\bin\ktchnsnk.exe" -reg "Software\Hewlett-Packard\OfficeJet T Series\Install"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WallPaper] D:\WALLPA~1\WALLPA~1\WALLPA~1.EXE /h
O4 - HKCU\..\Run: [LDM] \Program\
O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
O4 - HKCU\..\Run: [SpySheriff] C:\Program Files\SpySheriff\SpySheriff.exe
O4 - Startup: Anapod Manager.lnk = D:\Anapod Explorer\FULL VERSION\Anapod Explorer\anamgr.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Startup: SpamPal.lnk = D:\Spam Pal\spampal.exe
O4 - Startup: SpywareGuard.lnk = D:\SpyWareGuard\SpywareGuard\sgmain.exe
O4 - Startup: Trillian.lnk = ?
O4 - Startup: Turbo Tourney Pro Scheduler.lnk = D:\Turbo Tourney Pro 2005 (basketball & football)\Turbo Tourney Pro 2005\tts2005.exe
O4 - Global Startup: Harmony Monitor.lnk = C:\Program Files\Logitech\Harmony Remote\EasyZapperMonitor.exe
O4 - Global Startup: HPAiODevice(hp officejet d series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Harmony Remote\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PC Alert 4.lnk = C:\Program Files\MSI\PC Alert 4\PCAlert4.exe
O8 - Extra context menu item: &Download with &DAP - D:\DAP\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - D:\DAP\DAP\dapextie2.htm
O8 - Extra context menu item: Download with GetRight - D:\Get Right\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - D:\Get Right\GetRight\GRbrowse.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - g:\poker\partypoker\IEExtension.dll
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - g:\poker\partypoker\IEExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: DigiChat Applet - http://host.digichat...s/Client_IE.cab
O16 - DPF: Yahoo! Chess - http://download.game...nts/y/ct1_x.cab
O16 - DPF: Yahoo! Hearts - http://download.game...nts/y/ht1_x.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {1DB3B8DD-5801-443F-B2D5-9BF8912B980E} (dmgrax2Ctrl Class) - http://www.lxsystems...ads/Install.cab
O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ub...s/GSManager.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://bin.mcafee.co...73/mcinsctl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150...tzip/RdxIE6.cab
O16 - DPF: {65FDEDF3-8ED9-4F5B-825E-18C2D44191A7} (OneCCCtl Class) - http://d.208.254.18....348171OneCC.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {BA00165E-C903-11D3-BD27-0050048A82BF} (eShare Technologies NetAgent Customer ActiveX Control) - http://ec112.ecicorp...ts/CustAppX.CAB
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://bin.mcafee.co...,16/mcgdmgr.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcaf...514/mcfscan.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX/kdx.cab
O18 - Protocol: bw+0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Harmony Remote\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - D:\Executive Software\Diskeeper Home Edition\DKService.exe
O23 - Service: DriveHealth - Helexis Software Development - D:\Drive Health\dhcore.exe
O23 - Service: ewido security suite control - ewido networks - D:\Ewido\security suite\ewidoctrl.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSEC.EXE
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe



Any help you can give me would be gladly appreciated.

thanks
  • 0

Advertisements

#2
Ginkus
Posted 20 June 2005 - 02:57 PM

Ginkus

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Well I tried to do some work on this on my own and it seems like I got rid of Spy Sheriff, but I don't know about the rest. I looked at some of the other post and tried to take steps from different ones. Ill give my steps and maybe it will help someone else.

1. went to add remove and uninstalled spy sheriff.
2. reboot in safe mode
3. I used Ewido (bought the full version) to do a full scan of system.
4. ran cleanup
5. then ran adaware
6. rebooted and the spy sheriff was gone. BUT i could not change desktop
7. I ran this Smitfraud.reg file from this thread
http://www.geekstogo...&st=0&p=166364

8. and the desktop seems to fixed, however sometimes I cannot change my wallpaper, it seems like it is stuck, on my default wallpaper.

I think spy sheriff is gone for the most, but I still don't think i got everything, and my wallpaper will not change sometimes. If anyone can look at my log and tell me if I still need to change thing I would greatly appreciate it.

Logfile of HijackThis v1.99.1
Scan saved at 4:55:10 PM, on 6/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTHELPER.EXE
D:\IPOD\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Hewlett-Packard\HP OfficeJet T Series\bin\ktchnsnk.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Logitech\Harmony Remote\EasyZapperMonitor.exe
C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
C:\Program Files\Java\jre1.5.0_01\bin\jucheck.exe
C:\Program Files\MSI\PC Alert 4\PCAlert4.exe
D:\Anapod Explorer\FULL VERSION\Anapod Explorer\anamgr.exe
D:\Spam Pal\spampal.exe
D:\TRILLION\Trillian\trillian.exe
C:\Program Files\Logitech\Harmony Remote\EasyZapperManagerExe.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
D:\Executive Software\Diskeeper Home Edition\DKService.exe
D:\Drive Health\dhcore.exe
D:\EWIDO ANTISPYWARE\security suite\ewidoctrl.exe
C:\WINDOWS\System32\GEARSEC.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
D:\Mozilla\FireFox\firefox.exe
C:\WINDOWS\Explorer.EXE
D:\Hijack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.iwon.com...global?SEC=bnav
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.games-fusion.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
N1 - Netscape 4: user_pref("browser.startup.homepage", "http://home.iwon.com/"); (C:\Program Files\Netscape\Users\porkpie\prefs.js)
O1 - Hosts: 200.204.78.203 www.fotolog.net
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - D:\Get Right\GetRight\xx2gr.dll
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [AceGain LiveUpdate] G:\AceGain\LiveUpdate\LiveUpdate.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] D:\IPOD\iTunesHelper.exe
O4 - HKLM\..\Run: [CloneDVDElbyDelay] "L:\DVD Tools\CloneDVD\CloneDVD\ElbyCheck.exe" /L ElbyDelay
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "D:\CdClone\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [HP OfficeJet T Series] "C:\Program Files\Hewlett-Packard\HP OfficeJet T Series\bin\ktchnsnk.exe" -reg "Software\Hewlett-Packard\OfficeJet T Series\Install"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WallPaper] D:\WALLPA~1\WALLPA~1\WALLPA~1.EXE /h
O4 - HKCU\..\Run: [LDM] \Program\
O4 - Startup: Anapod Manager.lnk = D:\Anapod Explorer\FULL VERSION\Anapod Explorer\anamgr.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Startup: SpamPal.lnk = D:\Spam Pal\spampal.exe
O4 - Startup: Trillian.lnk = ?
O4 - Startup: Turbo Tourney Pro Scheduler.lnk = D:\Turbo Tourney Pro 2005 (basketball & football)\Turbo Tourney Pro 2005\tts2005.exe
O4 - Global Startup: Harmony Monitor.lnk = C:\Program Files\Logitech\Harmony Remote\EasyZapperMonitor.exe
O4 - Global Startup: HPAiODevice(hp officejet d series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Harmony Remote\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PC Alert 4.lnk = C:\Program Files\MSI\PC Alert 4\PCAlert4.exe
O8 - Extra context menu item: &Download with &DAP - D:\DAP\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - D:\DAP\DAP\dapextie2.htm
O8 - Extra context menu item: Download with GetRight - D:\Get Right\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - D:\Get Right\GetRight\GRbrowse.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - g:\poker\partypoker\IEExtension.dll
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - g:\poker\partypoker\IEExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: DigiChat Applet - http://host.digichat...s/Client_IE.cab
O16 - DPF: Yahoo! Chess - http://download.game...nts/y/ct1_x.cab
O16 - DPF: Yahoo! Hearts - http://download.game...nts/y/ht1_x.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {1DB3B8DD-5801-443F-B2D5-9BF8912B980E} (dmgrax2Ctrl Class) - http://www.lxsystems...ads/Install.cab
O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ub...s/GSManager.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://bin.mcafee.co...73/mcinsctl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150...tzip/RdxIE6.cab
O16 - DPF: {65FDEDF3-8ED9-4F5B-825E-18C2D44191A7} (OneCCCtl Class) - http://d.208.254.18....348171OneCC.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {BA00165E-C903-11D3-BD27-0050048A82BF} (eShare Technologies NetAgent Customer ActiveX Control) - http://ec112.ecicorp...ts/CustAppX.CAB
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://bin.mcafee.co...,16/mcgdmgr.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcaf...514/mcfscan.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX/kdx.cab
O18 - Protocol: bw+0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Harmony Remote\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {09A513F6-BC7F-411D-B249-A0DC2FF9E874} - D:\Harmony Remote\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - D:\Executive Software\Diskeeper Home Edition\DKService.exe
O23 - Service: DriveHealth - Helexis Software Development - D:\Drive Health\dhcore.exe
O23 - Service: ewido security suite control - ewido networks - D:\EWIDO ANTISPYWARE\security suite\ewidoctrl.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSEC.EXE
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Thanks for any help
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP