[cleo27]

Hello

I my computer will not connect to the internet so i ran ad-ware and nothing was found. I then ran Kaspersky on-line scanner and it found a trojan. Here are my scan logs for hijackthis and kaspersky

Logfile of HijackThis v1.99.1
Scan saved at 9:09:29 AM, on 10/13/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\DIGStream\digstream.exe
C:\Program Files\ESPNRunTime\DIGServices.exe
C:\Program Files\PHILIPS\PSADMM\DMM\bin\AutoLaunch.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Palm\Hotsync.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\COMMON~1\PHILIP~1\USBCON~1.EXE
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\AccuWeatherDesktopAlerts\AccuWeatherDesktopAlerts.exe
C:\hijackthis\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: WinStat - {EE02B99B-1D55-48bc-B8DB-649A42CE45F6} - C:\WINDOWS\system32\WinStat12.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &ESPN - {AE6F2894-AF10-4C9C-B16E-1DFC6FF8C0C6} - C:\Program Files\ESPN\Toolbar\DIGToolBar.dll
O4 - HKLM\..\Run: [ycvs] C:\WINDOWS\system32\ycvs.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
O4 - HKLM\..\Run: [DIGServices] C:\Program Files\ESPNRunTime\DIGServices.exe /brand=ESPN /priority=0 /poll=24
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [/AutoLaunch] C:\Program Files\PHILIPS\PSADMM\DMM\bin\AutoLaunch.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AccuWeatherDesktopAlerts] C:\Program Files\AccuWeatherDesktopAlerts\AccuWeatherDesktopAlerts.exe
O4 - HKCU\..\Run: [oiim] C:\PROGRA~1\COMMON~1\oiim\oiimm.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Palm\Hotsync.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.neededware.com
O16 - DPF: NDWCab - http://www.neededware.com/ndw3.cab
O16 - DPF: {00C0A1F2-D492-4DBA-A8E2-76CB1B791724} (TNPLDownloader Control) - https://dtwx2.accuwe...LDownloader.cab
O16 - DPF: {0D062C61-F69C-11D6-A718-00C0F02CC8EE} (FISERV FIPSCO Report Viewer) - https://lpss.amerus..../amurptview.cab
O16 - DPF: {3D4C3992-ABD6-4F85-9A1B-8568E3B4DB3E} (FISERV FIPSCO Insmark Interface Class) - https://lpss.amerus....Mark/imkctl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.r...ip/RdxIE601.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1097778744138
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installen...gine/isetup.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec....ta/SymAData.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.s.../ActiveData.cab
O16 - DPF: {EF0DBA6F-43CE-4B26-9808-2AB38FA0DB29} (MSN Money Ticker) - http://fdl.msn.com/p.../v13/ticker.cab

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Wednesday, October 12, 2005 15:59:18
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 12/10/2005
Kaspersky Anti-Virus database records: 144379
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - Folders:
D:\

Scan Statistics:
Total number of scanned objects: 39266
Number of viruses found: 15
Number of infected objects: 85
Number of suspicious objects: 0
Duration of the scan process: 6736 sec

Infected Object Name - Virus Name
D:\Documents and Settings\Todd\Local Settings\Temp\toc_0032.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\01C02FCA.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\01D37503.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\026A51C4.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\026E7BC0.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\027125BD.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\02744FB9.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\027779B6.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\027B23B2.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\027E4DAE.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\028177AB.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\02A43BFA.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\04E02194.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\05DD1767.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\06DC675F.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\07DB3756.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\08DA074E.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\08E001C6.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\093C38A3.exe Infected: Trojan-Dropper.Win32.Delf.ev
D:\Program Files\Norton AntiVirus\Quarantine\093F629F.exe Infected: Trojan-Downloader.Win32.Adload.a
D:\Program Files\Norton AntiVirus\Quarantine\0CFD3D25.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\0D22210B.exe Infected: Trojan-Downloader.Win32.Small.akz
D:\Program Files\Norton AntiVirus\Quarantine\0D633102.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\0D713406.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\0E0533DA.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\0F2D3382.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\1054332A.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\10E832FE.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\1102031B.exe/WISE0007.BIN Infected: Trojan-Downloader.Win32.TSUpdate.j
D:\Program Files\Norton AntiVirus\Quarantine\1102031B.exe Infected: Trojan-Downloader.Win32.TSUpdate.j
D:\Program Files\Norton AntiVirus\Quarantine\11052D18.EXE/WISE0007.BIN Infected: Trojan-Downloader.Win32.TSUpdate.j
D:\Program Files\Norton AntiVirus\Quarantine\11052D18.EXE Infected: Trojan-Downloader.Win32.TSUpdate.j
D:\Program Files\Norton AntiVirus\Quarantine\11085714.exe/WISE0010.BIN Infected: Trojan-Downloader.Win32.TSUpdate.k
D:\Program Files\Norton AntiVirus\Quarantine\11085714.exe/WISE0011.BIN Infected: Trojan-Downloader.Win32.TSUpdate.j
D:\Program Files\Norton AntiVirus\Quarantine\11085714.exe/WISE0012.BIN Infected: Trojan-Downloader.Win32.TSUpdate.l
D:\Program Files\Norton AntiVirus\Quarantine\11085714.exe Infected: Trojan-Downloader.Win32.TSUpdate.l
D:\Program Files\Norton AntiVirus\Quarantine\110C0111.exe/WISE0001.BIN Infected: Trojan-Downloader.Win32.TSUpdate.m
D:\Program Files\Norton AntiVirus\Quarantine\110C0111.exe Infected: Trojan-Downloader.Win32.TSUpdate.m
D:\Program Files\Norton AntiVirus\Quarantine\117C32D2.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\13D35855.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\13DF40F3.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\18F36D00.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\1BCF6A49.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\1FE03577.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\248428FF.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\2A0A3F21.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\2C244177.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\2D13702D.exe Infected: Trojan-Dropper.Win32.Small.qn
D:\Program Files\Norton AntiVirus\Quarantine\31202C08.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\312B111D.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\32A47694.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\32DB4E4E.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\338C095A.exe Infected: Trojan-Downloader.Win32.TSUpdate.j
D:\Program Files\Norton AntiVirus\Quarantine\384B6318.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\384D3607.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\39F33E6A.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\465C7F63.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\479B5303.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\48180A42.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\495A6F4A.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\4D403CEB.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\52554E78.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\532B0F01.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\5665420B.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\59752073.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\5EBC4B00.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\5F9C1C15.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\6096726F.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\63310612.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\63787DC7.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\66E93FAE.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\6A4C06FE.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\6DED0597.frB Infected: Trojan.Win32.Agent.db
D:\Program Files\Norton AntiVirus\Quarantine\6F5A7AA3.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\727F2E03.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\76DA541C.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\Program Files\Norton AntiVirus\Quarantine\7B826F34.exe Infected: Trojan-Downloader.Win32.Agent.jq
D:\System Volume Information\_restore{75D0BB5F-145E-491C-906B-C75C4CB917D6}\RP39\A0014781.exe Infected: Trojan-Dropper.Win32.Small.aaq
D:\System Volume Information\_restore{75D0BB5F-145E-491C-906B-C75C4CB917D6}\RP39\A0014782.ocx Infected: Trojan-Dropper.Win32.Agent.or
D:\System Volume Information\_restore{75D0BB5F-145E-491C-906B-C75C4CB917D6}\RP39\A0014783.ocx Infected: Trojan-Dropper.Win32.Agent.or
D:\System Volume Information\_restore{75D0BB5F-145E-491C-906B-C75C4CB917D6}\RP39\A0014784.exe Infected: Trojan-Downloader.Win32.Lastad.h
D:\System Volume Information\_restore{75D0BB5F-145E-491C-906B-C75C4CB917D6}\RP39\A0014785.exe Infected: Trojan-Downloader.Win32.Lastad.h
D:\System Volume Information\_restore{75D0BB5F-145E-491C-906B-C75C4CB917D6}\RP39\A0014786.exe Infected: Trojan-Downloader.Win32.Lastad.p
D:\System Volume Information\_restore{75D0BB5F-145E-491C-906B-C75C4CB917D6}\RP39\A0014789.exe Infected: Trojan-Downloader.Win32.Lastad.r
D:\System Volume Information\_restore{75D0BB5F-145E-491C-906B-C75C4CB917D6}\RP39\A0014790.dll Infected: Trojan-Downloader.Win32.Lastad.r

Scan process completed.