Logfile of HijackThis v1.99.1
Scan saved at 4:13:44 PM, on 10/8/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\PROGRAM FILES\WEBROOT\WASHER\WWDISP.EXE
C:\PROGRAM FILES\VCOM\SYSTEMSUITE\MXTASK.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\WRSSSDK.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\OZEP2FSZ\HIJACKTHIS[1].EXE
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {1E0DBD32-9CDC-7CDE-EC34-86D260F0FEE0} - (no file)
O2 - BHO: Class - {19B0FA3A-54C6-1225-B920-D32E2D5432FB} - (no file)
O2 - BHO: Class - {67A0D92F-181D-5943-2085-D1C432F0121C} - (no file)
O2 - BHO: Class - {5E2DD815-A676-7CB5-1698-B2A5ABA388C5} - (no file)
O2 - BHO: Class - {0E16BEF1-89D8-5996-205C-ED1F49209591} - (no file)
O2 - BHO: Class - {1446CAF7-D2B9-3F02-EFF6-939AF47CF05D} - (no file)
O2 - BHO: Class - {52CF3EB4-FD29-DF6D-430F-8C449DA50F02} - (no file)
O2 - BHO: Class - {05BCB7D0-2092-8BB5-50DB-5590500B3E7E} - (no file)
O2 - BHO: Class - {3F27AC46-8D2A-6D4C-4940-D5184A7FD11E} - (no file)
O2 - BHO: Class - {71604D4E-04BE-AC2F-9285-3BDCB48262EA} - (no file)
O2 - BHO: Class - {A819655D-4D84-704C-E285-105F6EB941E1} - (no file)
O2 - BHO: Class - {239C22C4-39AD-0E05-069E-10E1F47570B7} - (no file)
O2 - BHO: Class - {3697C3BB-D9E4-A8DD-6A39-9E97B58BC88C} - (no file)
O2 - BHO: Class - {ADF83008-D033-75CF-F558-8F5FD25A0CAC} - (no file)
O2 - BHO: Class - {F72B945A-30F2-008C-135A-89A8FA6CE7DA} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [SpySweeper] "C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE" /startintray
O4 - HKLM\..\Run: [devldr16.exe] C:\WINDOWS\SYSTEM\devldr16.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM\..\RunOnce: [Registering hhctrl.ocx..] C:\WINDOWS\SYSTEM\regsvr32 /s hhctrl.ocx
O4 - HKLM\..\RunOnce: [Registering itircl.dll..] C:\WINDOWS\SYSTEM\regsvr32 /s itircl.dll
O4 - HKLM\..\RunOnce: [Registering itss.dll..] C:\WINDOWS\SYSTEM\regsvr32 /s itss.dll
O4 - HKLM\..\RunOnce: [GrpConv] grpconv.exe -o
O4 - HKCU\..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe
O4 - HKCU\..\RunServices: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe
O4 - Startup: SystemSuite.lnk = C:\Program Files\VCOM\SystemSuite\MXTask.exe
O8 - Extra context menu item: &Search - http://kl.bar.need2f...earch.html?p=KL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O12 - Plugin for .mov: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O14 - IERESET.INF: START_PAGE_URL=http://gateway.yahoo.com
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (IPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: Dialpad US Java Applet - http://www.dialpad.c...et/src/vscp.cab
O16 - DPF: Go2CallClient - http://www.go2call.c.../CallClient.cab
O16 - DPF: {02466323-75ED-11CF-A267-0020AF2546EA} (VivoActive Control) - http://player.vivo.com/ie/vvweb.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O21 - SSODL: DDE - {F33812FB-F35C-4674-90F6-FD757C419C51} - (no file)
O21 - SSODL: EDEJBCEB - {1F255C44-0821-190D-2E30-46C026183A25} - C:\WINDOWS\SYSTEM\Edcinl32.dll
Help!!