Logfile of HijackThis v1.99.1
Scan saved at 6:15:50 PM, on 7/9/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iRiver\iRiver Manager\Updater\Updater.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\crkt32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\hookdump.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\McAfee.com\VSO\mcmnhdlr.exe
c:\program files\mcafee.com\shared\mghtml.exe
C:\WINDOWS\system32\mdm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dwsrd.dll/sp.html#69589
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dwsrd.dll/sp.html#69589
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\dwsrd.dll/sp.html#69589
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dwsrd.dll/sp.html#69589
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dwsrd.dll/sp.html#69589
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dwsrd.dll/sp.html#69589
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {539B572E-7B0F-7CC3-9352-C94BF984726F} - C:\WINDOWS\apiht.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iRiver Updater] C:\Program Files\iRiver\iRiver Manager\Updater\Updater.exe
O4 - HKLM\..\Run: [iexplore.exe] C:\Program Files\Internet Explorer\IEXPLORE.EXE
O4 - HKLM\..\Run: [crkt32.exe] C:\WINDOWS\crkt32.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\mcregwiz.exe /autorun
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe /startup
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunOnce: [ntov.exe] C:\WINDOWS\ntov.exe
O4 - HKLM\..\RunOnce: [javafr.exe] C:\WINDOWS\javafr.exe
O4 - HKLM\..\RunOnce: [mfckl32.exe] C:\WINDOWS\system32\mfckl32.exe
O4 - HKLM\..\RunOnce: [iekt.exe] C:\WINDOWS\system32\iekt.exe
O4 - HKLM\..\RunOnce: [sdkpn32.exe] C:\WINDOWS\system32\sdkpn32.exe
O4 - HKLM\..\RunOnce: [javadk.exe] C:\WINDOWS\javadk.exe
O4 - HKLM\..\RunOnce: [appcu32.exe] C:\WINDOWS\system32\appcu32.exe
O4 - HKLM\..\RunOnce: [mfcwf.exe] C:\WINDOWS\mfcwf.exe
O4 - HKLM\..\RunOnce: [atlwn32.exe] C:\WINDOWS\atlwn32.exe
O4 - HKLM\..\RunOnce: [addow.exe] C:\WINDOWS\addow.exe
O4 - HKLM\..\RunOnce: [addih32.exe] C:\WINDOWS\addih32.exe
O4 - HKLM\..\RunOnce: [crnl32.exe] C:\WINDOWS\crnl32.exe
O4 - HKLM\..\RunOnce: [appix32.exe] C:\WINDOWS\system32\appix32.exe
O4 - HKLM\..\RunOnce: [d3hl32.exe] C:\WINDOWS\system32\d3hl32.exe
O4 - HKLM\..\RunOnce: [netbe32.exe] C:\WINDOWS\system32\netbe32.exe
O4 - HKLM\..\RunOnce: [ipbm.exe] C:\WINDOWS\system32\ipbm.exe
O4 - HKLM\..\RunOnce: [netjm.exe] C:\WINDOWS\system32\netjm.exe
O4 - HKLM\..\RunOnce: [crzj32.exe] C:\WINDOWS\crzj32.exe
O4 - HKLM\..\RunOnce: [syspr32.exe] C:\WINDOWS\system32\syspr32.exe
O4 - HKLM\..\RunOnce: [mssv.exe] C:\WINDOWS\system32\mssv.exe
O4 - HKLM\..\RunOnce: [iprk32.exe] C:\WINDOWS\system32\iprk32.exe
O4 - HKLM\..\RunOnce: [atlha32.exe] C:\WINDOWS\atlha32.exe
O4 - HKLM\..\RunOnce: [ntff32.exe] C:\WINDOWS\ntff32.exe
O4 - HKLM\..\RunOnce: [d3dn32.exe] C:\WINDOWS\d3dn32.exe
O4 - HKLM\..\RunOnce: [javazq.exe] C:\WINDOWS\javazq.exe
O4 - HKLM\..\RunOnce: [mfcyg32.exe] C:\WINDOWS\mfcyg32.exe
O4 - HKLM\..\RunOnce: [winov32.exe] C:\WINDOWS\system32\winov32.exe
O4 - HKLM\..\RunOnce: [addwd.exe] C:\WINDOWS\system32\addwd.exe
O4 - HKLM\..\RunOnce: [netub32.exe] C:\WINDOWS\system32\netub32.exe
O4 - HKLM\..\RunOnce: [sdkki32.exe] C:\WINDOWS\system32\sdkki32.exe
O4 - HKLM\..\RunOnce: [ipfm.exe] C:\WINDOWS\ipfm.exe
O4 - HKLM\..\RunOnce: [appec32.exe] C:\WINDOWS\system32\appec32.exe
O4 - HKLM\..\RunOnce: [ntil32.exe] C:\WINDOWS\system32\ntil32.exe
O4 - HKLM\..\RunOnce: [d3yt.exe] C:\WINDOWS\system32\d3yt.exe
O4 - HKLM\..\RunOnce: [wincx32.exe] C:\WINDOWS\system32\wincx32.exe
O4 - HKLM\..\RunOnce: [mslx.exe] C:\WINDOWS\system32\mslx.exe
O4 - HKLM\..\RunOnce: [msgr32.exe] C:\WINDOWS\system32\msgr32.exe
O4 - HKLM\..\RunOnce: [apioj.exe] C:\WINDOWS\apioj.exe
O4 - HKLM\..\RunOnce: [sdkep32.exe] C:\WINDOWS\system32\sdkep32.exe
O4 - HKLM\..\RunOnce: [apisx.exe] C:\WINDOWS\system32\apisx.exe
O4 - HKLM\..\RunOnce: [crik32.exe] C:\WINDOWS\crik32.exe
O4 - HKLM\..\RunOnce: [apiek.exe] C:\WINDOWS\apiek.exe
O4 - HKLM\..\RunOnce: [addiw.exe] C:\WINDOWS\addiw.exe
O4 - HKLM\..\RunOnce: [ipxl32.exe] C:\WINDOWS\system32\ipxl32.exe
O4 - HKLM\..\RunOnce: [appqc.exe] C:\WINDOWS\system32\appqc.exe
O4 - HKLM\..\RunOnce: [crsb32.exe] C:\WINDOWS\crsb32.exe
O4 - HKLM\..\RunOnce: [ieye.exe] C:\WINDOWS\system32\ieye.exe
O4 - HKLM\..\RunOnce: [appiw.exe] C:\WINDOWS\system32\appiw.exe
O4 - HKLM\..\RunOnce: [atlcn.exe] C:\WINDOWS\system32\atlcn.exe
O4 - HKLM\..\RunOnce: [mswe32.exe] C:\WINDOWS\system32\mswe32.exe
O4 - HKLM\..\RunOnce: [ntbj32.exe] C:\WINDOWS\system32\ntbj32.exe
O4 - HKLM\..\RunOnce: [ieev32.exe] C:\WINDOWS\system32\ieev32.exe
O4 - HKLM\..\RunOnce: [adddi32.exe] C:\WINDOWS\adddi32.exe
O4 - HKLM\..\RunOnce: [addvu.exe] C:\WINDOWS\addvu.exe
O4 - HKLM\..\RunOnce: [netkr.exe] C:\WINDOWS\system32\netkr.exe
O4 - HKLM\..\RunOnce: [mfczy.exe] C:\WINDOWS\system32\mfczy.exe
O4 - HKLM\..\RunOnce: [syskr32.exe] C:\WINDOWS\syskr32.exe
O4 - HKLM\..\RunOnce: [windk32.exe] C:\WINDOWS\system32\windk32.exe
O4 - HKLM\..\RunOnce: [mslc.exe] C:\WINDOWS\mslc.exe
O4 - HKLM\..\RunOnce: [apiug32.exe] C:\WINDOWS\system32\apiug32.exe
O4 - HKLM\..\RunOnce: [mfcse.exe] C:\WINDOWS\system32\mfcse.exe
O4 - HKLM\..\RunOnce: [addvc32.exe] C:\WINDOWS\system32\addvc32.exe
O4 - HKLM\..\RunOnce: [apilk.exe] C:\WINDOWS\system32\apilk.exe
O4 - HKLM\..\RunOnce: [apptj32.exe] C:\WINDOWS\apptj32.exe
O4 - HKLM\..\RunOnce: [apiff.exe] C:\WINDOWS\system32\apiff.exe
O4 - HKLM\..\RunOnce: [javayu.exe] C:\WINDOWS\javayu.exe
O4 - HKLM\..\RunOnce: [sysdk.exe] C:\WINDOWS\sysdk.exe
O4 - HKLM\..\RunOnce: [winqg32.exe] C:\WINDOWS\winqg32.exe
O4 - HKLM\..\RunOnce: [sysxd32.exe] C:\WINDOWS\system32\sysxd32.exe
O4 - HKLM\..\RunOnce: [javacz32.exe] C:\WINDOWS\javacz32.exe
O4 - HKLM\..\RunOnce: [javakf32.exe] C:\WINDOWS\javakf32.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Intel system tool] C:\WINDOWS\system32\hookdump.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .aif: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\ntov.exe" /s (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: McAfee SpamKiller Server (MskService) - Networks Associates Technology. Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
//
Any help is appreciated. Thanks.
Sign In
Create Account
