1-Step RoboPDF 3.1
ACDSee 7.0
Adobe Acrobat 5.0
Adobe Download Manager 2.0 (Remove Only)
Adobe Photoshop CS
AllToTray
AuthorIT V4 Evaluation
AV Bros. Page Curl 1.2 (Remove Only)
AV Bros. Page Curl 2.0 DEMO (Remove Only)
CA eTrust Antivirus
ccCommon
ClickPic version 1.0
CuteFTP Pro 3.0
DHTML Menu Builder 4.9
eTrust EZ Antivirus
Fontonizer
HijackThis 1.99.1
HTML Help Workshop
Intel® Graphics Media Accelerator Driver
Intel® PRO Network Adapters and Drivers
Java 2 Runtime Environment, SE v1.4.1_01
Macromedia Dreamweaver MX 2004
Macromedia Extension Manager
Macromedia Flash MX 2004
Macromedia Flex Builder
Macromedia HomeSite+
Macromedia Shockwave Player
Magic Recovery Professional 3.2
Microsoft .NET Framework 1.1
Microsoft AntiSpyware
Microsoft Internet Explorer 6 SP1
Microsoft Office 2000 Premium
Microsoft SQL Server 2000
Microsoft Visual J# .NET Redistributable Package 1.1
Microsoft Visual Studio .NET Enterprise Architect 2003 - English
Mozilla Firefox (1.0.2)
MSN Messenger 7.0
Nero Suite
NetCaptor (remove only)
Norton AntiVirus 2005 (Symantec Corporation)
Norton AntiVirus Help
Norton AntiVirus Parent MSI
Norton AntiVirus SYMLT MSI
Norton WMI Update
Opera
QuickTime
RoboHelp Office X5
RoboSource Control
Serials 2000 7.1+
Sothink SWF Quicker
SPBBC
Spybot - Search & Destroy 1.4 RC
SWiSHmax
Sygate Personal Firewall Pro
Symantec
Symantec Script Blocking Installer
SymNet
The Logo Creator v3
TopStyle Lite (Version 3.0)
Web Studio 4.0
Win9x Joke Splash Screen (Bogg)
window resizer .02
Windows 2000 Hotfix - KB329115
Windows 2000 Hotfix - KB842773
Windows 2000 Hotfix - KB873333
Windows 2000 Hotfix - KB890859
Windows 2000 Hotfix - KB890923
Windows 2000 Hotfix - KB892944
Windows 2000 Hotfix - KB893066
Windows 2000 Hotfix - KB893086
Windows Media Player Hotfix [See Q828026 for more information]
Windows Media Player system update (9 Series)
WinHTTrack Website Copier 3.33
Yahoo! Install Manager
Yahoo! Mail Quick Select Tool
Yahoo! Messenger
Yahoo! SiteBuilder
YourSiteBar
Logfile of HijackThis v1.99.1
Scan saved at 12:27:33 PM, on 19-Jul-05
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\UTILITIES\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\netdde.exe
C:\WINNT\System32\msdtc.exe
C:\WINNT\Explorer.exe
C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\Program Files\CA\eTrust Antivirus\InoNmSrv.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\WINNT\System32\tcpsvcs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINNT\svchost.exe
C:\PROGRA~1\CA\SHARED~1\SCANEN~1\InoDist.exe
C:\WINNT\System32\MsiExec.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\System32\locator.exe
C:\WINNT\System32\SCardSvr.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\snmp.exe
C:\WINNT\system32\tlntsvr.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mqsvc.exe
C:\WINNT\System32\igfxtray.exe
C:\WINNT\System32\hkcmd.exe
C:\Program Files\UTILITIES\Microsoft AntiSpyware\gcasServ.exe
C:\PROGRA~1\CA\ETRUST~2\realmon.exe
C:\WINNT\system32\spool\DRIVERS\W32X86\2\RPDFLchr.exe
C:\WINNT\system32\kernels32.exe
C:\Program Files\UTILITIES\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\UTILITIES\AllToTray\AllToTray.exe
C:\WINNT\system32\vxh8jkdq2.exe
C:\WINNT\system32\vxh8jkdq5.exe
C:\WINNT\system32\vxh8jkdq6.exe
C:\WINNT\system32\vxh8jkdq6.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\browser\NetCaptor\NetCaptor.exe
D:\New Folder\SOURCE_SOFT\S-E-C-U-R-I-T-Y\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = SUNIL's Explorer 0.0.0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: Shell=Explorer.exe C:\WINNT\system32\kernels32.exe
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINNT\system32\iasada.dll
O3 - Toolbar: Search Toolbar - {a19ef336-01d4-48e6-926a-fe7e1c747aed} - C:\WINNT\system32\azesearch4.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\UTILITIES\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~2\realmon.exe -s
O4 - HKLM\..\Run: [QuickTime Task] "C:\program files\utilities\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RoboPDF] C:\WINNT\system32\spool\DRIVERS\W32X86\2\RPDFLchr.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\UTILIT~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [System] C:\WINNT\system32\kernels32.exe
O4 - HKCU\..\Run: [QuickStart] C:\Program Files\UTILITIES\QuickStart 2.1.7\quickstart.exe /minimize
O4 - HKCU\..\Run: [AllToTray] C:\Program Files\UTILITIES\AllToTray\AllToTray.exe
O4 - HKCU\..\Run: [Intel system tool] C:\WINNT\system32\hookdump.exe
O4 - HKCU\..\Run: [qiwr] C:\PROGRA~1\COMMON~1\qiwr\qiwrm.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\UTILITIES\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\UTILITIES\FlashGet\jc_link.htm
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\UTILITIES\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\UTILITIES\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.slotchbar.com
O15 - Trusted Zone: *.ysbweb.com
O15 - Trusted Zone: http://ny.contentmatch.net (HKLM)
O15 - Trusted IP range: 67.19.185.246
O15 - Trusted IP range: 67.19.185.246 (HKLM)
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.c...nst_current.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/s...nfo/webscan.cab
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) -
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pdownloader.cab
O16 - DPF: {D19781C5-2051-44F8-8445-DDC82933C191} (VacPro.internazionale_ver11) - http://advnt01.com/d...onale_ver11.CAB
O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.co...l/azesearch.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by106fd.bay10...ex/HMAtchmt.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{1F19D1C2-F28A-439C-8D7B-CA534400C0DF}: NameServer = 69.50.176.196,195.225.176.110
O17 - HKLM\System\CS1\Services\VxD\MSTCP: NameServer = 69.50.176.196,195.225.176.110
O17 - HKLM\System\CS1\Services\Tcpip\..\{1F19D1C2-F28A-439C-8D7B-CA534400C0DF}: NameServer = 69.50.176.196,195.225.176.110
O17 - HKLM\System\CS2\Services\VxD\MSTCP: NameServer = 69.50.176.196,195.225.176.110
O17 - HKLM\System\CS2\Services\Tcpip\..\{1F19D1C2-F28A-439C-8D7B-CA534400C0DF}: NameServer = 69.50.176.196,195.225.176.110
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 69.50.176.196,195.225.176.110
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: eTrust Antivirus Admin Server (InoNmSrv) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoNmSrv.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: svchost.exe (moto) - Unknown owner - C:\WINNT\svchost.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\UTILITIES\Sygate\SPF\smc.exe
O23 - Service: VET Message Service (VETMSGNT) - Unknown owner - C:\WINNT\System32\VetMsgNT.exe (file missing)
Can any one help me...?
Sign In
Create Account
