Unsolved
This post is more than 5 years old
9 Posts
0
306
December 11th, 2005 23:00
Problem with WinFixer pop up messages
Hi,
I was facing problem because of WinFixer pop-ups. I executed "VirtumundoBeGone.exe" and "FixVundo.exe" executables. Following is the log genearted by VBG.
Right now it looks ok. Anyway please see this log and tell me if there is any problem or everything is fine.
In next post i will send the HJT log.
[12/11/2005, 0:22:22] - VirtumundoBeGone v1.5 ( "C:\Downloads\MSDN\VirtumundoBeGone.exe" )
[12/11/2005, 0:22:53] - Detected System Information:
[12/11/2005, 0:22:53] - Windows Version: 5.1.2600, Service Pack 2
[12/11/2005, 0:22:53] - Current Username: AMIT (Admin)
[12/11/2005, 0:22:53] - Windows is in NORMAL mode.
[12/11/2005, 0:22:53] - Searching for Browser Helper Objects:
[12/11/2005, 0:22:53] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[12/11/2005, 0:22:53] - BHO 2: {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} (McBrwHelper Class)
[12/11/2005, 0:22:53] - BHO 3: {3EC8255F-E043-4cae-8B3B-B191550C2A22} (McAfee Privacy Service Popup Blocker)
[12/11/2005, 0:22:53] - BHO 4: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} ()
[12/11/2005, 0:22:53] - WARNING: BHO has no default name. Checking for Winlogon reference.
[12/11/2005, 0:22:53] - Checking for HKLM\...\Winlogon\Notify\deSrcAs
[12/11/2005, 0:22:53] - Key not found: HKLM\...\Winlogon\Notify\deSrcAs, continuing.
[12/11/2005, 0:22:53] - BHO 5: {5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)
[12/11/2005, 0:22:53] - BHO 6: {B313D637-F405-4052-AC37-E2119AB3C8F8} (MSEvents Object)
[12/11/2005, 0:22:53] - ALERT: Found MSEvents Object!
[12/11/2005, 0:22:53] - Finished Searching Browser Helper Objects
[12/11/2005, 0:22:53] - *** Detected MSEvents Object
[12/11/2005, 0:22:53] - Trying to remove MSEvents Object...
[12/11/2005, 0:22:54] - Terminating Process: IEXPLORE.EXE
[12/11/2005, 0:22:54] - Terminating Process: RUNDLL32.EXE
[12/11/2005, 0:22:55] - Disabling Automatic Shell Restart
[12/11/2005, 0:22:55] - Terminating Process: EXPLORER.EXE
[12/11/2005, 0:22:55] - Suspending the NT Session Manager System Service
[12/11/2005, 0:22:55] - Terminating Windows NT Logon/Logoff Manager
[12/11/2005, 0:22:55] - Re-enabling Automatic Shell Restart
[12/11/2005, 0:22:55] - File to disable: C:\WINDOWS\system32\vtstr.dll
[12/11/2005, 0:22:55] - Renaming C:\WINDOWS\system32\vtstr.dll -> C:\WINDOWS\system32\vtstr.dll.vir
[12/11/2005, 0:22:56] - File successfully renamed!
[12/11/2005, 0:22:56] - Removing HKLM\...\Browser Helper Objects\{B313D637-F405-4052-AC37-E2119AB3C8F8}
[12/11/2005, 0:22:56] - Removing HKCR\CLSID\{B313D637-F405-4052-AC37-E2119AB3C8F8}
[12/11/2005, 0:22:56] - Adding Kill Bit for ActiveX for GUID: {B313D637-F405-4052-AC37-E2119AB3C8F8}
[12/11/2005, 0:22:56] - Deleting ATLEvents/MSEvents Registry entries
[12/11/2005, 0:22:56] - Removing HKLM\...\Winlogon\Notify\vtstr
[12/11/2005, 0:22:56] - Searching for Browser Helper Objects:
[12/11/2005, 0:22:56] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[12/11/2005, 0:22:56] - BHO 2: {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} (McBrwHelper Class)
[12/11/2005, 0:22:56] - BHO 3: {3EC8255F-E043-4cae-8B3B-B191550C2A22} (McAfee Privacy Service Popup Blocker)
[12/11/2005, 0:22:56] - BHO 4: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} ()
[12/11/2005, 0:22:56] - WARNING: BHO has no default name. Checking for Winlogon reference.
[12/11/2005, 0:22:56] - Checking for HKLM\...\Winlogon\Notify\deSrcAs
[12/11/2005, 0:22:56] - Key not found: HKLM\...\Winlogon\Notify\deSrcAs, continuing.
[12/11/2005, 0:22:56] - BHO 5: {5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)
[12/11/2005, 0:22:56] - Finished Searching Browser Helper Objects
[12/11/2005, 0:22:56] - Finishing up...
[12/11/2005, 0:22:56] - A restart is needed.
[12/11/2005, 0:22:56] - Automatic Reboot on STOP Error is not set. User will have to manually restart.
[12/11/2005, 0:23:11] - Attempting to Restart via STOP error (Blue Screen!)
[12/11/2005, 0:32:27] - VirtumundoBeGone v1.5 ( "C:\Downloads\MSDN\VirtumundoBeGone.exe" )
[12/11/2005, 0:32:43] - Detected System Information:
[12/11/2005, 0:32:43] - Windows Version: 5.1.2600, Service Pack 2
[12/11/2005, 0:32:43] - Current Username: AMIT (Admin)
[12/11/2005, 0:32:43] - Windows is in NORMAL mode.
[12/11/2005, 0:32:43] - Searching for Browser Helper Objects:
[12/11/2005, 0:32:43] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[12/11/2005, 0:32:43] - BHO 2: {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} (McBrwHelper Class)
[12/11/2005, 0:32:43] - BHO 3: {3EC8255F-E043-4cae-8B3B-B191550C2A22} (McAfee Privacy Service Popup Blocker)
[12/11/2005, 0:32:43] - BHO 4: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} ()
[12/11/2005, 0:32:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
[12/11/2005, 0:32:43] - Checking for HKLM\...\Winlogon\Notify\deSrcAs
[12/11/2005, 0:32:43] - Key not found: HKLM\...\Winlogon\Notify\deSrcAs, continuing.
[12/11/2005, 0:32:43] - BHO 5: {5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)
[12/11/2005, 0:32:43] - Finished Searching Browser Helper Objects
[12/11/2005, 0:32:43] - Finishing up...
[12/11/2005, 0:32:43] - Nothing found! Exiting...
I was facing problem because of WinFixer pop-ups. I executed "VirtumundoBeGone.exe" and "FixVundo.exe" executables. Following is the log genearted by VBG.
Right now it looks ok. Anyway please see this log and tell me if there is any problem or everything is fine.
In next post i will send the HJT log.
[12/11/2005, 0:22:22] - VirtumundoBeGone v1.5 ( "C:\Downloads\MSDN\VirtumundoBeGone.exe" )
[12/11/2005, 0:22:53] - Detected System Information:
[12/11/2005, 0:22:53] - Windows Version: 5.1.2600, Service Pack 2
[12/11/2005, 0:22:53] - Current Username: AMIT (Admin)
[12/11/2005, 0:22:53] - Windows is in NORMAL mode.
[12/11/2005, 0:22:53] - Searching for Browser Helper Objects:
[12/11/2005, 0:22:53] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[12/11/2005, 0:22:53] - BHO 2: {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} (McBrwHelper Class)
[12/11/2005, 0:22:53] - BHO 3: {3EC8255F-E043-4cae-8B3B-B191550C2A22} (McAfee Privacy Service Popup Blocker)
[12/11/2005, 0:22:53] - BHO 4: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} ()
[12/11/2005, 0:22:53] - WARNING: BHO has no default name. Checking for Winlogon reference.
[12/11/2005, 0:22:53] - Checking for HKLM\...\Winlogon\Notify\deSrcAs
[12/11/2005, 0:22:53] - Key not found: HKLM\...\Winlogon\Notify\deSrcAs, continuing.
[12/11/2005, 0:22:53] - BHO 5: {5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)
[12/11/2005, 0:22:53] - BHO 6: {B313D637-F405-4052-AC37-E2119AB3C8F8} (MSEvents Object)
[12/11/2005, 0:22:53] - ALERT: Found MSEvents Object!
[12/11/2005, 0:22:53] - Finished Searching Browser Helper Objects
[12/11/2005, 0:22:53] - *** Detected MSEvents Object
[12/11/2005, 0:22:53] - Trying to remove MSEvents Object...
[12/11/2005, 0:22:54] - Terminating Process: IEXPLORE.EXE
[12/11/2005, 0:22:54] - Terminating Process: RUNDLL32.EXE
[12/11/2005, 0:22:55] - Disabling Automatic Shell Restart
[12/11/2005, 0:22:55] - Terminating Process: EXPLORER.EXE
[12/11/2005, 0:22:55] - Suspending the NT Session Manager System Service
[12/11/2005, 0:22:55] - Terminating Windows NT Logon/Logoff Manager
[12/11/2005, 0:22:55] - Re-enabling Automatic Shell Restart
[12/11/2005, 0:22:55] - File to disable: C:\WINDOWS\system32\vtstr.dll
[12/11/2005, 0:22:55] - Renaming C:\WINDOWS\system32\vtstr.dll -> C:\WINDOWS\system32\vtstr.dll.vir
[12/11/2005, 0:22:56] - File successfully renamed!
[12/11/2005, 0:22:56] - Removing HKLM\...\Browser Helper Objects\{B313D637-F405-4052-AC37-E2119AB3C8F8}
[12/11/2005, 0:22:56] - Removing HKCR\CLSID\{B313D637-F405-4052-AC37-E2119AB3C8F8}
[12/11/2005, 0:22:56] - Adding Kill Bit for ActiveX for GUID: {B313D637-F405-4052-AC37-E2119AB3C8F8}
[12/11/2005, 0:22:56] - Deleting ATLEvents/MSEvents Registry entries
[12/11/2005, 0:22:56] - Removing HKLM\...\Winlogon\Notify\vtstr
[12/11/2005, 0:22:56] - Searching for Browser Helper Objects:
[12/11/2005, 0:22:56] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[12/11/2005, 0:22:56] - BHO 2: {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} (McBrwHelper Class)
[12/11/2005, 0:22:56] - BHO 3: {3EC8255F-E043-4cae-8B3B-B191550C2A22} (McAfee Privacy Service Popup Blocker)
[12/11/2005, 0:22:56] - BHO 4: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} ()
[12/11/2005, 0:22:56] - WARNING: BHO has no default name. Checking for Winlogon reference.
[12/11/2005, 0:22:56] - Checking for HKLM\...\Winlogon\Notify\deSrcAs
[12/11/2005, 0:22:56] - Key not found: HKLM\...\Winlogon\Notify\deSrcAs, continuing.
[12/11/2005, 0:22:56] - BHO 5: {5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)
[12/11/2005, 0:22:56] - Finished Searching Browser Helper Objects
[12/11/2005, 0:22:56] - Finishing up...
[12/11/2005, 0:22:56] - A restart is needed.
[12/11/2005, 0:22:56] - Automatic Reboot on STOP Error is not set. User will have to manually restart.
[12/11/2005, 0:23:11] - Attempting to Restart via STOP error (Blue Screen!)
[12/11/2005, 0:32:27] - VirtumundoBeGone v1.5 ( "C:\Downloads\MSDN\VirtumundoBeGone.exe" )
[12/11/2005, 0:32:43] - Detected System Information:
[12/11/2005, 0:32:43] - Windows Version: 5.1.2600, Service Pack 2
[12/11/2005, 0:32:43] - Current Username: AMIT (Admin)
[12/11/2005, 0:32:43] - Windows is in NORMAL mode.
[12/11/2005, 0:32:43] - Searching for Browser Helper Objects:
[12/11/2005, 0:32:43] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[12/11/2005, 0:32:43] - BHO 2: {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} (McBrwHelper Class)
[12/11/2005, 0:32:43] - BHO 3: {3EC8255F-E043-4cae-8B3B-B191550C2A22} (McAfee Privacy Service Popup Blocker)
[12/11/2005, 0:32:43] - BHO 4: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} ()
[12/11/2005, 0:32:43] - WARNING: BHO has no default name. Checking for Winlogon reference.
[12/11/2005, 0:32:43] - Checking for HKLM\...\Winlogon\Notify\deSrcAs
[12/11/2005, 0:32:43] - Key not found: HKLM\...\Winlogon\Notify\deSrcAs, continuing.
[12/11/2005, 0:32:43] - BHO 5: {5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)
[12/11/2005, 0:32:43] - Finished Searching Browser Helper Objects
[12/11/2005, 0:32:43] - Finishing up...
[12/11/2005, 0:32:43] - Nothing found! Exiting...
No Events found!
amitnirvan
9 Posts
0
December 11th, 2005 23:00
O18 - Protocol: bw+0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: offline-8876480 - {0A2F2546-F447-432C-B1A9-93E09F4E3B1B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Virtual CD v7 Management Service (VC7SecS) - H+H Software GmbH - C:\Program Files\HHVcdV7Sys\VC7SecS.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
amitnirvan
9 Posts
0
December 11th, 2005 23:00
I am breaking the log files because it is exceeding the allowed size.
Here is first part....
Logfile of HijackThis v1.99.1
Scan saved at 2:13:55 PM, on 12/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.40607\aspnet_admin.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HHVcdV7Sys\VC7SecS.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\HHVcdV7Sys\VC7Play.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\support.com\bin\tgcmd.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Downloads\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\PROGRA~1\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: McAfee PopupKiller - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [mmtask] C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [VC7Player] C:\Program Files\HHVcdV7Sys\VC7Play.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MskDetct.exe /startup
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted IP range: http://141.211.66.139
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
O16 - DPF: {665585FD-2068-4C5E-A6D3-53AC3270ECD4} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/en/filesharingctrl.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {90051A81-3018-4826-8B38-DD60B6B53F9C} (Snapfish File Upload ActiveX Control) - http://www.costcophotocenter.com/CostcoUpload.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
ky331
5 Journeyman
•
15.6K Posts
•
45K Points
0
December 12th, 2005 12:00
Nice work. the HJT log confirms that VBG successfully deactivated the bad WinFixer file.
it appears you're running Sun Java j2re1.4.2_03 . there is much speculation that a "hole" in this particular version is being exploited by WinFixer. so we should upgrade to the latest version, 1.5.0_06 from http://www.java.com/en/download/manual.jsp
At this point, I'm gonna try to ask someone else to step-in, to determine additional problems (if any) that you might have. Please be advised that we're very "understaffed" at the moment, so I can't make any guarantee as to when the next helper will arrive.
Good luck.
Message Edited by ky331 on 12-12-2005 09:36 AM
RKinner
2 Intern
•
5.9K Posts
0
December 12th, 2005 23:00
usually means IIS is running. This is fine if you are aware that it is running but a security hole if you are not.
and then you can just go back to an earlier time if you hit a bad site.
To avoid going to a bad site you might want to install IE-SpyAd and SpywareBlaster and make the other changes recommended at:.
http://www.mvps.org/winhelp2002/restricted.htm
I used to recommend Spybot's Immunize system but have recently learned it is not as good as the one at:
http://www.mvps.org/winhelp2002/hosts.htm
www.pandasoftware.com/activescan/activescan.asp?
http://housecall.trendmicro.com/
In addition to Microsoft AntiSpy
http://www.microsoft.com/athome/security/downloads/default.mspx
I like to run Spybot S&D.
http://www.safer-networking.org/en/download/index.html
Also like to run AdAware once in a while.
http://www.lavasoftusa.com/software/adaware/
Java:
http://www.java.com/en/download/windows_automatic.jsp
As an alternative you can dump adobe completely and use fox-it instead:
http://www.foxitsoftware.com/pdf/rd_intro.php