Unsolved
This post is more than 5 years old
9 Posts
0
1503
June 3rd, 2008 22:00
my hjt log
Hello, well when I logon to my computer, My desktop appears but nothing else. No icon, No taskbar, but the mouse works. The task manager works, so I learned to launch explorer.exe from there and everything is fine after that, but I would like to get this problem solved and I want explorer.exe to luanch on its own.
My computer is a sony vaio windows xp if this is any help.
HiJackThis Log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:24:11 PM, on 6/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\isass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\LTSMMSG.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Common Files\Ulead Systems\DVD\USISrv.exe
C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe
C:\Program Files\Verizon\McciTrayApp.exe
D:\iTunes\iTunesHelper.exe
C:\Program Files\Verizon\VSP\VerizonServicepoint.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\program files\aim6\anotify.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\RUNDLL32.exe
C:\WINDOWS\system32\RUNDLL32.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\SyncServer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ketnoinamchau.com
F2 - REG:system.ini: UserInit=C:\windows\windows.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\adobe\acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\lserver\server.vbs
O4 - HKLM\..\Run: [USIUDF_Eject_Monitor] C:\Program Files\Common Files\Ulead Systems\DVD\USISrv.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Verizon_McciTrayApp] C:\Program Files\Verizon\McciTrayApp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "D:\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [*Regedit] c:\windows\regedit.exe
O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
O4 - HKLM\..\RunServices: [*Rundll64] c:\windows\rundll64.exe
O4 - HKCU\..\Run: [MSMSGS] c:\msmsgs.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [AIM] D:\my stuff 2\My Games\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [*Windows] c:\windows\windows.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\my stuff 2\My Games\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: Yahoo! Graffiti - http://download2.games.yahoo.com/games/clients/y/grt5_x.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCommon/download/DSL/tgctlcm.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1198907370144
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: figpecker - {7d7bd0c4-4913-4933-b870-7388a7bffb82} - (no file)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: CSNetManagerXp - Unknown owner - C:\WINDOWS\system32\isass.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: VAIO Media Music Server (Application) (VAIOMediaPlatform-MusicServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
O23 - Service: VAIO Media Photo Server (Application) (VAIOMediaPlatform-PhotoServer-AppServer) - Unknown owner - C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe
O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe
O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
O23 - Service: WMP54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
--
End of file - 7928 bytes
bamajim
10.4K Posts
0
June 4th, 2008 11:00
1. Go HERE and download File Lister.
Rt Click ->> Extract all ->> And extract it to your Desktop
Additional help on extracting zip files can be found HERE
Open the File Lister Folder.
Rt Click FileLister.vbe ->>Select Open Then Open to confirm.
As the program runs, it will appear that nothing is happening.
When the program is fnished it will produce a log for you C:\Files.txt
Copy and paste the contents of that log in your reply.
"The world is what you make of it"
phuongerh25
9 Posts
0
June 5th, 2008 06:00
VAIO Registration
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB888302
Security Update for Windows XP (KB890046)
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Security Update for Windows XP (KB893756)
Windows Installer 3.1 (KB893803)
Update for Windows XP (KB894391)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896428)
Update for Windows XP (KB898461)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Update for Windows XP (KB900485)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Update for Windows XP (KB904942)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows Media Player (KB911564)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Update for Windows XP (KB916595)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Update for Windows XP (KB920872)
Security Update for Windows XP (KB921503)
Update for Windows XP (KB922582)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows Media Player 6.4 (KB925398)
Update for Windows XP (KB925720)
Security Update for Windows XP (KB925902)
Hotfix for Windows XP (KB926239)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Update for Windows XP (KB927891)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Hotfix for Windows Media Format 11 SDK (KB929399)
Security Update for Windows XP (KB930178)
Update for Windows XP (KB930916)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Update for Windows XP (KB932823-v3)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Update for Windows XP (KB936357)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB938127)
Security Update for Windows Internet Explorer 7 (KB938127)
Update for Windows XP (KB938828)
Security Update for Windows XP (KB938829)
Hotfix for Windows Media Player 11 (KB939683)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB942615)
Security Update for Windows Internet Explorer 7 (KB942615)
Update for Windows XP (KB942763)
Update for Windows XP (KB942840)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Update for Windows XP (KB946627)
Hotfix for Windows Internet Explorer 7 (KB947864)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Lucent Technologies Soft Modem AMR
Microsoft .NET Framework 3.5
Motion JPEG Software Decoder
Mozilla Firefox (2.0.0.5)
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft National Language Support Downlevel APIs
NVIDIA Drivers
Verizon Servicepoint 1.5.12
RealOne Player
Uniblue RegistryBooster 2
SiS Compatible VGA V2.09a
Sony on Yahoo! Essentials
VAIO Support
Verizon High Speed Internet
Verizon Online Help and Support
Viewpoint Media Player
Windows Imaging Component
Windows Media Encoder 9 Series
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 2
WinRAR archiver
Windows Media Format 11 runtime
Windows Media Player 11
Microsoft User-Mode Driver Framework Feature Pack 1.0
XML Paper Specification Shared Components Pack 1.0
Yahoo! Install Manager
Experience Vaio
Ulead Photo Explorer 8.5 SE Basic
OpenMG Secure Module 3.1
ijji Auto Installer
VAIO Media 2.0
VAIO Grid Wallpaper
DVgate
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft .NET Framework 3.5
WebFldrs XP
Music Visualizer Library 1.4.00
Macromedia Flash MX
Apple Mobile Device Support
Support Actions WinXP
Linksys Wireless-G PCI Adapter
ImageStation Tour
VAIO Help & Support
PowerDVD
Sony DV Shared Library
VAIO Media Installer 2.0
SonicStage 1.5.00
ImageStation Demo
VAIO Edit Components LE
Click to DVD 1.0
VAIO Serenus Wallpaper
Soldier Front
VAIO Media Photo Server 2.0
Microsoft Office Professional Edition 2003
QuickTime
VAIO Registration
VAIO Brezza Wallpaper
Ulead Data-Add 2.0
iTunes
Microsoft .NET Framework 2.0 Service Pack 1
MapleStory
DivX Web Player
Apple Software Update
Windows Presentation Foundation
Ulead DVD MovieFactory 3.5 Suite
TuneUp Utilities 2007
Sony Certificate PCH
DivX Content Uploader
MovieShaker 3.3
VAIO Media Platform 2.0
VAIO Media Music Server 2.0
Windows Media Encoder 9 Series I awat further instructions, thank you.
phuongerh25
9 Posts
0
June 5th, 2008 06:00
+++++++++++++++++++++++++++++++++
+
+ File Lister
+
+ Version 1.0.2
+
+ By bamajim
+
+++++++++++++++++++++++++++++++++
=== Values under HKLM\~\Run ======
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SiSUSBRG"="C:\\WINDOWS\\SiSUSBrg.exe"
"LTSMMSG"="LTSMMSG.exe"
"ezShieldProtector for Px"="C:\\WINDOWS\\System32\\ezSP_Px.exe"
"TkBellExe"="C:\\Program Files\\Common Files\\Real\\Update_OB\\evntsvc.exe -osboot"
"ZTgServerSwitch"="c:\\program files\\support.com\\client\\lserver\\server.vbs"
"USIUDF_Eject_Monitor"="C:\\Program Files\\Common Files\\Ulead Systems\\DVD\\USISrv.exe"
"Ulead AutoDetector v2"="C:\\Program Files\\Common Files\\Ulead Systems\\AutoDetector\\monitor.exe"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"Verizon_McciTrayApp"="C:\\Program Files\\Verizon\\McciTrayApp.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"D:\\iTunes\\iTunesHelper.exe\""
"*Regedit"="c:\\windows\\regedit.exe"
"VerizonServicepoint.exe"="\"C:\\Program Files\\Verizon\\VSP\\VerizonServicepoint.exe\" /AUTORUN"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"
=== Values under HKCU\~\Run ======
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\\msmsgs.exe"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"Aim6"="\"C:\\Program Files\\AIM6\\aim6.exe\" /d locale=en-US ee://aol/imApp"
"AIM"="D:\\my stuff 2\\My Games\\aim.exe -cnetwait.odl"
"*Windows"="c:\\windows\\windows.exe"
=== Folders and Files from "%\" and "%\Windows" Created Last 30 Days ======
5/7/2008 5:34:44 PM 48514502 C:\flash
5/5/2008 7:07:09 PM 0 C:\torrent
5/15/2008 6:41:02 PM 214904 C:\torrent fdl
6/5/2008 12:04:50 AM 0 32 C:\Files.txt
5/27/2008 1:44:40 PM 889351 C:\WINDOWS\$NtUninstallKB932823-v3$
5/27/2008 1:44:40 PM 594951 C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst
5/17/2008 3:40:42 PM 8214322 C:\WINDOWS\$NtUninstallKB950749$
5/17/2008 3:40:42 PM 604953 C:\WINDOWS\$NtUninstallKB950749$\spuninst
6/2/2008 3:43:38 PM 764 C:\WINDOWS\pss
5/17/2008 3:40:49 PM 0 32 C:\WINDOWS\setupact.log
6/2/2008 4:16:05 PM 2683 32 C:\WINDOWS\setupapi.log
6/3/2008 4:37:11 PM 403 32 C:\WINDOWS\wmsetup.log
5/21/2008 9:04:40 PM 5632 32 C:\WINDOWS\system32\ptpusb.dll
5/21/2008 9:04:38 PM 159232 32 C:\WINDOWS\system32\ptpusd.dll
=== Files under "\Administrator\Startup" Last 30 Days======
5/21/2008 9:04:40 PM 5632 32 C:\WINDOWS\system32\ptpusb.dll
5/21/2008 9:04:38 PM 159232 32 C:\WINDOWS\system32\ptpusd.dll
=== Files under "\All Users\Startup" Last 30 Days======
=== Folders under "\Program Files" Last 30 Days======
5/7/2008 5:47:24 PM 80671224 C:\Program Files\Macromedia
5/7/2008 5:47:24 PM 80671224 C:\Program Files\Macromedia\Flash MX
5/7/2008 5:47:26 PM 811375 C:\Program Files\Macromedia\Flash MX\Configuration
5/7/2008 5:47:26 PM 279208 C:\Program Files\Macromedia\Flash MX\Configuration\HelpSWF
5/7/2008 5:47:26 PM 6505 C:\Program Files\Macromedia\Flash MX\Configuration\HelpSWF\menu
5/7/2008 5:47:26 PM 13583024 C:\Program Files\Macromedia\Flash MX\First Run
5/7/2008 5:47:26 PM 167482 C:\Program Files\Macromedia\Flash MX\First Run\ActionsPanel
5/7/2008 5:47:26 PM 36920 C:\Program Files\Macromedia\Flash MX\First Run\ActionsPanel\CustomActions
5/7/2008 5:47:26 PM 73683 C:\Program Files\Macromedia\Flash MX\First Run\AnswersPanel
5/7/2008 5:47:27 PM 0 C:\Program Files\Macromedia\Flash MX\First Run\Browser
5/7/2008 5:47:27 PM 17013 C:\Program Files\Macromedia\Flash MX\First Run\Color Sets
5/7/2008 5:47:27 PM 428032 C:\Program Files\Macromedia\Flash MX\First Run\Components
5/7/2008 5:47:27 PM 40520 C:\Program Files\Macromedia\Flash MX\First Run\HTML
5/7/2008 5:47:27 PM 11548 C:\Program Files\Macromedia\Flash MX\First Run\HTML\Learning Extensions Srvr Files
5/7/2008 5:47:27 PM 10479 C:\Program Files\Macromedia\Flash MX\First Run\HTML\Learning Extensions Srvr Files\scripts
5/7/2008 5:47:27 PM 5202240 C:\Program Files\Macromedia\Flash MX\First Run\Importers
5/7/2008 5:47:28 PM 82240 C:\Program Files\Macromedia\Flash MX\First Run\Importers\ToonboomStudioImportPlugin
5/7/2008 5:47:28 PM 65111 C:\Program Files\Macromedia\Flash MX\First Run\Importers\ToonboomStudioImportPlugin\html
5/7/2008 5:47:28 PM 31754 C:\Program Files\Macromedia\Flash MX\First Run\Importers\ToonboomStudioImportPlugin\html\graphics
5/7/2008 5:47:28 PM 6690 C:\Program Files\Macromedia\Flash MX\First Run\Keyboard Shortcuts
5/7/2008 5:47:29 PM 3088896 C:\Program Files\Macromedia\Flash MX\First Run\Libraries
5/7/2008 5:47:29 PM 22410 C:\Program Files\Macromedia\Flash MX\First Run\Panel Sets
5/7/2008 5:47:30 PM 3623134 C:\Program Files\Macromedia\Flash MX\First Run\Templates
5/7/2008 5:47:30 PM 179200 C:\Program Files\Macromedia\Flash MX\First Run\Templates\Ads
5/7/2008 5:47:30 PM 16896 C:\Program Files\Macromedia\Flash MX\First Run\Templates\Broadcast
5/7/2008 5:47:30 PM 190174 C:\Program Files\Macromedia\Flash MX\First Run\Templates\Menus
5/7/2008 5:47:30 PM 46080 C:\Program Files\Macromedia\Flash MX\First Run\Templates\MobileDevices
5/7/2008 5:47:31 PM 1121792 C:\Program Files\Macromedia\Flash MX\First
phuongerh25
9 Posts
0
June 5th, 2008 06:00
=== Running Processes ======System Idle Process [0]
System [4]
smss.exe [608] \SystemRoot\System32\smss.exe
csrss.exe [676]
winlogon.exe [704] winlogon.exe
services.exe [748] C:\WINDOWS\system32\services.exe
lsass.exe [760] C:\WINDOWS\system32\lsass.exe
svchost.exe [908] C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe [964]
svchost.exe [1056] C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe [1108]
svchost.exe [1212]
spoolsv.exe [1444] C:\WINDOWS\system32\spoolsv.exe
AppleMobileDeviceService.exe [1548] "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
isass.exe [1576] "C:\WINDOWS\system32\isass.exe"
nvsvc32.exe [1628] C:\WINDOWS\system32\nvsvc32.exe
svchost.exe [1680] C:\WINDOWS\System32\svchost.exe -k imgsvc
ULCDRSvr.exe [1712] "C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe"
SSSvr.exe [1728] "C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (Application)"
PicAppSrv.exe [1820] "C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe"
WLService.exe [1860] "C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe" "WMP54Gv4.exe"
WMP54Gv4.exe [1896] WMP54Gv4.exe
sv_httpd.exe [1936] "C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP"
UPnPFramework.exe [2040] "C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe"
sv_httpd.exe [724] "C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP"
UPnPFramework.exe [1032] "C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe"
alg.exe [1388]
svchost.exe [636] C:\WINDOWS\System32\svchost.exe -k HTTPFilter
wscntfy.exe [2928] C:\WINDOWS\system32\wscntfy.exe
explorer.exe [3136] "C:\WINDOWS\explorer.exe"
LTSMMSG.exe [3268] "C:\WINDOWS\LTSMMSG.exe"
ezSP_Px.exe [3276] "C:\WINDOWS\System32\ezSP_Px.exe"
USISrv.exe [3340] "C:\Program Files\Common Files\Ulead Systems\DVD\USISrv.exe"
Monitor.exe [3352] "C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe"
McciTrayApp.exe [3392] "C:\Program Files\Verizon\McciTrayApp.exe"
iTunesHelper.exe [3408] "D:\iTunes\iTunesHelper.exe"
VerizonServicepoint.exe [3444] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
ctfmon.exe [3464] "C:\WINDOWS\system32\ctfmon.exe"
aim6.exe [3472] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
aolsoftware.exe [3544] "C:\Program Files\AIM6\aolsoftware.exe" /Embedding /c defaultCfg
iPodService.exe [3736] "C:\Program Files\iPod\bin\iPodService.exe"
rundll32.exe [564] RUNDLL32 C:\PROGRA~1\COMMON~1\Vbox\Common\vboxr.dll,PowerPL /M
rundll32.exe [1024] C:\WINDOWS\system32\RUNDLL32.exe C:\PROGRA~1\COMMON~1\Vbox\Common\vboxr.dll,PowerPL /R00000234
AppleMobileDeviceHelper.exe [852] "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe" --pipe \\.\pipe\299350561674342736100561364 --parentPipe \\.\pipe\299350561669936400263231364
distnoted.exe [2072] "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exe"
iexplore.exe [3040] "C:\Program Files\Internet Explorer\iexplore.exe"
WINWORD.EXE [2788] "C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE" /n /dde
iexplore.exe [1984] "C:\Program Files\Internet Explorer\iexplore.exe"
wscript.exe [3920] "C:\WINDOWS\System32\WScript.exe" "C:\Documents and Settings\phoung huynh\Desktop\FileLister\FileLister.vbe"
wmiprvse.exe [3824]
wmiprvse.exe [3100] === Uninstall List From Registry ======Adobe Acrobat 5.0
Adobe Flash Player ActiveX
Adobe Photoshop Elements 2.0
Adobe Premiere 6 LE
AIM 6.0
Canon i350
Gunbound Revolution
HijackThis 2.0.2
Microsoft Internationalized Domain Names Mitigation APIs
phuongerh25
9 Posts
0
June 5th, 2008 06:00
5/7/2008 5:47:31 PM 241664 C:\Program Files\Macromedia\Flash MX\First Run\Templates\Presentation
5/7/2008 5:47:31 PM 1827328 C:\Program Files\Macromedia\Flash MX\First Run\Templates\Quiz
5/7/2008 5:47:31 PM 97820 C:\Program Files\Macromedia\Flash MX\First Run\WindowSWF
5/7/2008 5:47:31 PM 5209 C:\Program Files\Macromedia\Flash MX\First Run\WindowSWF\sitespring
5/7/2008 5:47:27 PM 16716878 C:\Program Files\Macromedia\Flash MX\Help
5/7/2008 5:47:32 PM 13940328 C:\Program Files\Macromedia\Flash MX\Help\Flash
5/7/2008 5:47:32 PM 13933245 C:\Program Files\Macromedia\Flash MX\Help\Flash\html
5/7/2008 5:47:55 PM 3601178 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images
5/7/2008 5:47:55 PM 5337 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch00
5/7/2008 5:47:55 PM 98168 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch01
5/7/2008 5:47:55 PM 78969 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch02
5/7/2008 5:47:56 PM 91207 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch03
5/7/2008 5:47:56 PM 92081 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch04
5/7/2008 5:47:56 PM 14012 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch05
5/7/2008 5:47:56 PM 14548 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch06
5/7/2008 5:47:56 PM 112104 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch07
5/7/2008 5:47:56 PM 23730 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch08
5/7/2008 5:47:56 PM 109260 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch09
5/7/2008 5:47:57 PM 102408 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch10
5/7/2008 5:47:57 PM 60263 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch11
5/7/2008 5:47:57 PM 87060 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch12
5/7/2008 5:47:57 PM 136965 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch13
5/7/2008 5:47:57 PM 106137 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch14
5/7/2008 5:47:57 PM 33729 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch15
5/7/2008 5:47:57 PM 46600 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch16
5/7/2008 5:47:57 PM 53666 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch17
5/7/2008 5:47:57 PM 7014 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch18
5/7/2008 5:47:57 PM 79211 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch19
5/7/2008 5:47:57 PM 82319 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\ch20
5/7/2008 5:47:58 PM 751138 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\tut_actionscript
5/7/2008 5:47:58 PM 75230 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\tut_component
5/7/2008 5:47:58 PM 1336550 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\images\tut_flashintro
5/7/2008 5:47:59 PM 2980714 C:\Program Files\Macromedia\Flash MX\Help\Flash\html\movies
5/7/2008 5:47:59 PM 4287 C:\Program Files\Macromedia\Flash MX\Help\_sharedassets
5/7/2008 5:48:04 PM 3001785 C:\Program Files\Macromedia\Flash MX\Lessons
5/7/2008 5:48:04 PM 6399 C:\Program Files\Macromedia\Flash MX\Lessons\menu
5/7/2008 5:48:04 PM 1654863 C:\Program Files\Macromedia\Flash MX\Lessons\Work files
5/7/2008 5:47:59 PM 12610163 C:\Program Files\Macromedia\Flash MX\Players
5/7/2008 5:47:59 PM 5400021 C:\Program Files\Macromedia\Flash MX\Players\Debug
5/7/2008 5:47:59 PM 5254616 C:\Program Files\Macromedia\Flash MX\Players\Release
5/7/2008 5:47:55 PM 3146300 C:\Program Files\Macromedia\Flash MX\Samples
5/7/2008 5:48:03 PM 1928192 C:\Program Files\Macromedia\Flash MX\Samples\FLA
5/7/2008 5:48:04 PM 43108 C:\Program Files\Macromedia\Flash MX\Samples\html
5/7/2008 5:47:55 PM 460731 C:\Program Files\Macromedia\Flash MX\Samples\images
5/7/2008 5:48:04 PM 708609 C:\Program Files\Macromedia\Flash MX\Samples\SWF
5/7/2008 5:48:01 PM 16442956 C:\Program Files\Macromedia\Flash MX\Tutorials
5/7/2008 5:48:01 PM 5844342 C:\Program Files\Macromedia\Flash MX\Tutorials\ActionScript
5/7/2008 5:48:01 PM 5235574 C:\Program Files\Macromedia\Flash MX\Tutorials\ActionScript\Finished
5/7/2008 5:48:02 PM 608768 C:\Program Files\Macromedia\Flash MX\Tutorials\ActionScript\My_Puzzle
5/7/2008 5:48:02 PM 1777548 C:\Program Files\Macromedia\Flash MX\Tutorials\Components
5/7/2008 5:48:02 PM 813964 C:\Program Files\Macromedia\Flash MX\Tutorials\Components\Finished
5/7/2008 5:48:02 PM 403968 C:\Program Files\Macromedia\Flash MX\Tutorials\Components\My_Sweepstakes
5/7/2008 5:48:02 PM 8821066 C:\Program Files\Macromedia\Flash MX\Tutorials\FlashIntro
5/7/2008 5:48:03 PM 1152449 C:\Program Files\Macromedia\Flash MX\Tutorials\FlashIntro\assets
5/7/2008 5:48:03 PM 0 C:\Program Files\Macromedia\Flash MX\Tutorials\FlashIntro\My_Stiletto
6/2/2008 3:53:06 PM 12848784 C:\Program Files\Uniblue
6/2/2008 3:53:06 PM 12848784 C:\Program Files\Uniblue\RegistryBooster 2
5/5/2008 7:07:36 PM 219952 C:\Program Files\uTorrent
=== Files under "\System32\Drivers" Last 30 Days======
5/27/2008 5:59:38 PM 17920 32 C:\WINDOWS\system32\drivers\Blackbird.sys
5/21/2008 9:04:39 PM 15104 32 C:\WINDOWS\system32\drivers\usbscan.sys
=== Files under "\User\Local Settings\Temp" Last 30 Days======
5/25/2008 12:34:01 PM 233008 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\06YLKQMZ.emf
5/25/2008 12:34:01 PM 47888 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\45H2KQ80.emf
5/27/2008 1:24:38 AM 107 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\689211B7.TMP
6/1/2008 7:27:28 PM 5158 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\ASPNETSetup_00000.log
6/1/2008 7:24:32 PM 147740 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\dd_depcheck_NETFX_EXP_35.txt
6/1/2008 7:24:15 PM 2 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\dd_dotnetfx35error.txt
6/1/2008 7:24:15 PM 258414 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\dd_dotnetfx35install.txt
6/1/2008 7:26:09 PM 6535782 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\dd_NET_Framework20_Setup1A18.txt
6/1/2008 7:28:16 PM 2393772 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\dd_NET_Framework30_Setup1BB7.txt
6/1/2008 7:28:45 PM 797196 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\dd_NET_Framework35_MSI1C16.txt
6/1/2008 7:28:27 PM 3883 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\dd_wcf_retCA35F5.txt
5/30/2008 7:12:41 PM 2247 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\plaxo.log
5/25/2008 9:09:49 PM 711 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\TWAIN.LOG
5/25/2008 9:09:49 PM 2 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\Twain001.Mtx
5/25/2008 9:09:49 PM 156 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\Twunk001.MTX
5/25/2008 9:09:49 PM 0 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\Twunk002.MTX
5/31/2008 3:46:53 PM 1920 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\U3Launcher.log
6/1/2008 7:24:15 PM 2318 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\uxeventlog.txt
6/1/2008 7:28:54 PM 25283 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\WSF228.tmp
6/1/2008 7:28:54 PM 28074 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\WSF229.tmp
6/4/2008 11:40:21 PM 512 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\~DF3A.tmp
6/4/2008 11:40:21 PM 512 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\~DF6C3.tmp
6/4/2008 11:45:09 PM 512 32 C:\Documents and Settings\phoung huynh\Local Settings\Temp\~DF74C1.tmp
=== Files and Folders under "All Users\Application Data" Last 30 Days======
=== Values under HKLM\Software\microsoft\shared tools\msconfig\startupreg ======
HKLM\Software\microsoft\shared tools\msconfig\startupreg\
=== BHO's under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects ======
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
bamajim
10.4K Posts
0
June 5th, 2008 14:00
First Copy and paste the following into NotePad (Not Wordpad)
sc delete CSNetManagerXp
Click File ->> Save as ->>type in cmd.bat
Close Notepad
The cmd.bat file should now appear on your Desktop (if it saved properly it should appear as a blue box with a gear in the middle of it)
Double Click that file (It will appear that nothing has happened, but that's o.k.)
2. Rerun Hijackthis (scan only) and place checks beside the following entries
O4 - HKLM\..\Run: [*Regedit] c:\windows\regedit.exe
O4 - HKLM\..\RunServices: [*Rundll64] c:\windows\rundll64.exe
O4 - HKCU\..\Run: [MSMSGS] c:\msmsgs.exe
O4 - HKCU\..\Run: [*Windows] c:\windows\windows.exe
O22 - SharedTaskScheduler: figpecker - {7d7bd0c4-4913-4933-b870-7388a7bffb82} - (no file)
Close all other open windows except Hijackthis and Select " Fix checked"
Close Hijackthis ->> Reboot your PC ->> Rerun Hijackthis and post a fresh Hijackthis log
"The world is what you make of it"
phuongerh25
9 Posts
0
June 6th, 2008 01:00
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:10:06 PM, on 6/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\LTSMMSG.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Common Files\Ulead Systems\DVD\USISrv.exe
C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe
C:\Program Files\Verizon\McciTrayApp.exe
D:\iTunes\iTunesHelper.exe
C:\Program Files\Verizon\VSP\VerizonServicepoint.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmplayer.exe
D:\iTunes\iTunes.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ketnoinamchau.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\adobe\acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\lserver\server.vbs
O4 - HKLM\..\Run: [USIUDF_Eject_Monitor] C:\Program Files\Common Files\Ulead Systems\DVD\USISrv.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Verizon_McciTrayApp] C:\Program Files\Verizon\McciTrayApp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "D:\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [AIM] D:\my stuff 2\My Games\aim.exe -cnetwait.odl
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\my stuff 2\My Games\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: Yahoo! Graffiti - http://download2.games.yahoo.com/games/clients/y/grt5_x.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCommon/download/DSL/tgctlcm.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1198907370144
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: VAIO Media Music Server (Application) (VAIOMediaPlatform-MusicServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
O23 - Service: VAIO Media Photo Server (Application) (VAIOMediaPlatform-PhotoServer-AppServer) - Unknown owner - C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe
O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe
O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
O23 - Service: WMP54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
--
End of file - 7227 bytes
That is my fresh hjt log.
Also umm when I fixed those files i did not close my open windows.
Sorry, i thought I'd let you know if it does anything.
bamajim
10.4K Posts
0
June 6th, 2008 12:00
Also umm when I fixed those files i did not close my open windows.
Sorry, i thought I'd let you know if it does anything.
That's o.k. it looks like the fix went o.k.
Please perform an Ewido Online Malware Scan
2. What are you using for an Anti Virus program?
"The world is what you make of it"
phuongerh25
9 Posts
0
June 7th, 2008 05:00
__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________
Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@247realmedia[1].txt
Risk: Medium
Name: TrackingCookie.2o7
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@2o7[1].txt
Risk: Medium
Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@4.adbrite[2].txt
Risk: Medium
Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ad.yieldmanager[1].txt
Risk: Medium
Name: TrackingCookie.Clickhype
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ad1.clickhype[1].txt
Risk: Medium
Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@adbrite[1].txt
Risk: Medium
Name: TrackingCookie.Adengage
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@adengage[1].txt
Risk: Medium
Name: TrackingCookie.Euroclick
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@adopt.euroclick[1].txt
Risk: Medium
Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@adrevolver[2].txt
Risk: Medium
Name: TrackingCookie.Bridgetrack
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ads.bridgetrack[2].txt
Risk: Medium
Name: TrackingCookie.Pointroll
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ads.pointroll[2].txt
Risk: Medium
Name: TrackingCookie.Advertising
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@advertising[2].txt
Risk: Medium
Name: TrackingCookie.Adviva
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@adviva[2].txt
Risk: Medium
Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@anad.tacoda[1].txt
Risk: Medium
Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@anat.tacoda[1].txt
Risk: Medium
Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@atdmt[2].txt
Risk: Medium
Name: TrackingCookie.Valuead
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@axxessads.valuead[2].txt
Risk: Medium
Name: TrackingCookie.Bfast
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@bfast[2].txt
Risk: Medium
Name: TrackingCookie.Bluestreak
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@bluestreak[2].txt
Risk: Medium
Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@bs.serving-sys[2].txt
Risk: Medium
Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@burstnet[2].txt
Risk: Medium
Name: TrackingCookie.Casalemedia
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@casalemedia[2].txt
Risk: Medium
Name: TrackingCookie.Zedo
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@d3.zedo[1].txt
Risk: Medium
Name: TrackingCookie.Coremetrics
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@data.coremetrics[1].txt
Risk: Medium
Name: TrackingCookie.2o7
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@divx.112.2o7[1].txt
Risk: Medium
Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@doubleclick[1].txt
Risk: Medium
Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@dynamic.media.adrevolver[1].txt
Risk: Medium
Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@e-2dj6wcmyogaziao.stats.esomniture[2].txt
Risk: Medium
Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@e-2dj6wjlyckcpmep.stats.esomniture[2].txt
Risk: Medium
Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@e-2dj6wjny-1iajkc.stats.esomniture[2].txt
Risk: Medium
Name: TrackingCookie.Ru4
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@edge.ru4[1].txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ehg-dig.hitbox[1].txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ehg-globalgamingleague.hitbox[2].txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ehg-mindshare.hitbox[1].txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ehg-veohnetworksinc.hitbox[1].txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ehg-verizon.hitbox[2].txt
Risk: Medium
Name: TrackingCookie.Fastclick
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@fastclick[2].txt
Risk: Medium
Name: TrackingCookie.Findwhat
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@findwhat[1].txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@hitbox[2].txt
Risk: Medium
Name: TrackingCookie.Hotlog
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@hotlog[1].txt
Risk: Medium
Name: TrackingCookie.Tracking101
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@login.tracking101[1].txt
Risk: Medium
Name: TrackingCookie.Webtrends
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@m.webtrends[1].txt
Risk: Medium
Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@media.adrevolver[1].txt
Risk: Medium
Name: TrackingCookie.Mediaplex
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@mediaplex[1].txt
Risk: Medium
Name: TrackingCookie.2o7
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@msnportal.112.2o7[1].txt
Risk: Medium
Name: TrackingCookie.Realmedia
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@network.realmedia[1].txt
Risk: Medium
Name: TrackingCookie.Overture
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@overture[2].txt
Risk: Medium
Name: TrackingCookie.Questionmarket
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@questionmarket[2].txt
Risk: Medium
Name: TrackingCookie.Realmedia
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@realmedia[2].txt
Risk: Medium
Name: TrackingCookie.Real
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@real[2].txt
Risk: Medium
Name: TrackingCookie.Revenue
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@revenue[2].txt
Risk: Medium
Name: TrackingCookie.Revsci
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@revsci[2].txt
Risk: Medium
Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@rotator.adjuggler[1].txt
Risk: Medium
Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@sales.liveperson[1].txt
Risk: Medium
Name: TrackingCookie.Msn
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@search.msn[2].txt
Risk: Medium
Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@server.iad.liveperson[2].txt
Risk: Medium
Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@serving-sys[1].txt
Risk: Medium
Name: TrackingCookie.Netflame
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ssl-hints.netflame[2].txt
Risk: Medium
Name: TrackingCookie.Dealtime
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@stat.dealtime[1].txt
Risk: Medium
Name: TrackingCookie.Statcounter
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@statcounter[2].txt
Risk: Medium
Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@stats.adbrite[2].txt
Risk: Medium
Name: TrackingCookie.Webtrendslive
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@statse.webtrendslive[2].txt
Risk: Medium
Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@tacoda[2].txt
Risk: Medium
Name: TrackingCookie.Tradedoubler
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@tradedoubler[1].txt
Risk: Medium
Name: TrackingCookie.Trafficmp
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@trafficmp[2].txt
Risk: Medium
Name: TrackingCookie.Tribalfusion
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@tribalfusion[1].txt
Risk: Medium
Name: TrackingCookie.2o7
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@usatoday1.112.2o7[1].txt
Risk: Medium
Name: TrackingCookie.2o7
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@viacomedycentralrl.112.2o7[1].txt
Risk: Medium
Name: TrackingCookie.2o7
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@viamtvcom.112.2o7[2].txt
Risk: Medium
Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@www.adbrite[1].txt
Risk: Medium
Name: TrackingCookie.Burstbeacon
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@www.burstbeacon[1].txt
Risk: Medium
Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@www.burstnet[1].txt
Risk: Medium
Name: TrackingCookie.Zedo
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@zedo[1].txt
Risk: Medium
Name: Trojan.Hider.i
Path: [3644] C:\WINDOWS\system32\isass.exe
Risk: High
Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\luan huynh\Cookies\luan huynh@atdmt[2].txt
Risk: Medium
Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\luan huynh\Cookies\luan huynh@doubleclick[2].txt
Risk: Medium
Name: TrackingCookie.Overture
Path: C:\Documents and Settings\luan huynh\Cookies\luan huynh@perf.overture[1].txt
Risk: Medium
Name: TrackingCookie.Realmedia
Path: C:\Documents and Settings\luan huynh\Cookies\luan huynh@realmedia[1].txt
Risk: Medium
Name: TrackingCookie.Netflame
Path: C:\Documents and Settings\luan huynh\Cookies\luan huynh@ssl-hints.netflame[1].txt
Risk: Medium
Name: TrackingCookie.Trafficmp
Path: C:\Documents and Settings\luan huynh\Cookies\luan huynh@trafficmp[1].txt
Risk: Medium
Name: TrackingCookie.2o7
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@2o7[1].txt
Risk: Medium
Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@ad.yieldmanager[2].txt
Risk: Medium
Name: TrackingCookie.Euroclick
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@adopt.euroclick[2].txt
Risk: Medium
Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@adrevolver[2].txt
Risk: Medium
Name: TrackingCookie.Pointroll
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@ads.pointroll[1].txt
Risk: Medium
Name: TrackingCookie.Advertising
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@advertising[2].txt
Risk: Medium
Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@anad.tacoda[2].txt
Risk: Medium
Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@anat.tacoda[1].txt
Risk: Medium
Name: TrackingCookie.Casalemedia
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@casalemedia[2].txt
Risk: Medium
Name: TrackingCookie.Clickbank
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@clickbank[1].txt
Risk: Medium
Name: TrackingCookie.Coremetrics
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@data.coremetrics[1].txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@ehg-dig.hitbox[2].txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@hitbox[2].txt
Risk: Medium
Name: TrackingCookie.Webtrends
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@m.webtrends[1].txt
Risk: Medium
Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@media.adrevolver[1].txt
Risk: Medium
Name: TrackingCookie.Mediaplex
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@mediaplex[1].txt
Risk: Medium
Name: TrackingCookie.Overture
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@overture[1].txt
Risk: Medium
Name: TrackingCookie.Pro-market
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@pro-market[2].txt
Risk: Medium
Name: TrackingCookie.Questionmarket
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@questionmarket[2].txt
Risk: Medium
Name: TrackingCookie.Revenue
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@revenue[1].txt
Risk: Medium
Name: TrackingCookie.Revsci
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@revsci[2].txt
Risk: Medium
Name: TrackingCookie.Information
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@searchportal.information[1].txt
Risk: Medium
Name: TrackingCookie.Tribalfusion
Path: C:\Documents and Settings\luan huynh\Cookies\luan_huynh@tribalfusion[2].txt
Risk: Medium
Name: Not-A-Virus.Exploit.JS.ADODB.Stream.e
Path: C:\Documents and Settings\luan huynh\Local Settings\Temporary Internet Files\Content.IE5\1W84RW05\ketnoinamchau_com[2].htm
Risk: Low
Name: TrackingCookie.Doubleclick
Path: :mozilla.15:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.2o7
Path: :mozilla.16:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.2o7
Path: :mozilla.17:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Advertising
Path: :mozilla.22:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Advertising
Path: :mozilla.23:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Advertising
Path: :mozilla.24:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Advertising
Path: :mozilla.25:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Advertising
Path: :mozilla.26:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Atdmt
Path: :mozilla.35:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Trafficmp
Path: :mozilla.36:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Trafficmp
Path: :mozilla.37:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Trafficmp
Path: :mozilla.38:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Trafficmp
Path: :mozilla.39:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Trafficmp
Path: :mozilla.40:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: :mozilla.49:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: :mozilla.50:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Hitbox
Path: :mozilla.51:C:\Documents and Settings\phoung huynh\Application Data\Mozilla\Firefox\Profiles\v4rcmdb1.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Pointroll
Path: C:\Documents and Settings\phoung huynh\Cookies\phoung_huynh@ads.pointroll[1].txt
Risk: Medium
Name: Not-A-Virus.Exploit.JS.ADODB.Stream.e
Path: C:\Documents and Settings\phoung huynh\Local Settings\Temporary Internet Files\Content.IE5\KE61BKTF\ketnoinamchau_com[1].htm
Risk: Low
Name: Trojan.Hider.i
Path: C:\System Volume Information\_restore{58E30938-66A1-4D08-9DCD-360CE25B3A88}\RP45\A0008505.exe
Risk: High
Name: Trojan.Hider.i
Path: C:\WINDOWS\system32\isass.exe
Risk: High
Name: Downloader.Wimad.n
Path: E:\music[linh]\sails to the wind cypress.mp3
Risk: High
I don't think i have any anti spy ware.
and uhh it worked thank you very much!!
bamajim
10.4K Posts
0
June 8th, 2008 10:00
You need an Anti Virus Program
Go HERE and download and install AVG8 (Free version)
Update it, and do a full system scan. Allow it to fix what ever it finds.
Once Done; Reboot your PC ->> Rerun Hiajckthis and post a fresh Hijackthis log.
"The world is what you make of it"