Tech Support Forum - View Single Post

HikariNoKenkaku · 12-01-2005, 11:45 PM

Ewido
This file has too many files in it. There are only 12 main ones, the other 32,382 are from mozilla. Anyways, they were all cleaned, so it should be okay. I tried to add an attachment of the report, but it was too big. On a side, note, the original error that I posted about was fixed, sorry for not mentioning that in my last post.

Panda
Incident Status Location

Virus:Trj/Clicker.LE Not disinfected
Operating system
Adware:adware/navipromo Not disinfected
Windows Registry
Adware:Adware/Lop Not disinfected
C:\HJT\backups\backup-20051201-204651-716.dll
Adware:Adware/Lop Not disinfected
C:\HJT\backups\backup-20051201-204651-736.dll
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\10DF861A.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\11286442.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\13DCB712.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\14296F6F.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\14BB4A5F.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\14C258DF.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\14D69A19.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\155C37EF.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\15670775.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\158C775.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\15AE15BB.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\15BD5706.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\15F1E3D8.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1643DE5F.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\168AAFBB.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\172F9B2B.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1745A9EF.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\177169AB.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1773AC5.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\178CB986.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\17C345CE.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\180A52BE.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1864315F.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\190C3C58.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1939FD4B.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\198BD83E.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\19E5B4DF.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1A2C841A.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1A54E6F.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1AAA244.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1AB96099.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1AC0719A.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1AD4B351.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1B0B5FCB.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1B52F7CF.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1B65C98B.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1BACD53E.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1BB34BCE.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1BF7A3D8.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1C3EB1EC.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1C41A1B0.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1C54363B.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1CA6124E.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1CD27D9E.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1CE54BAD.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1DBE373D.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1E1CA6DA.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1E69691A.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1EFB4742.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1F025590.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1FB0551D.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\1FEEEF83.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\2078CBC4.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\208E6B5.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\2102F376.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\A0032096.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\balm load.VIR
Virus:Exploit/ByteVerify Not disinfected
C:\ProgramFiles\AVPersonal\INFECTED\LOADERADV783.JAR-106D9513-6FC623AD.ZIP.VIR[Matrix.class]
Virus:Exploit/ByteVerify Not disinfected
C:\ProgramFiles\AVPersonal\INFECTED\LOADERADV783.JAR-106D9513-6FC623AD.ZIP.VIR[Dummy.class]
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA111A.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA1335.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA18DE.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA1ACA.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA1B34.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA1CF.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA1D0.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA1D1.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA1DD.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA262F.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2635.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2636.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA28.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2AB3.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2ABA.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2ABC.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2AC5.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2AC6.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2AC8.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2AC9.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2B.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2B0F.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2B7F.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2C6E.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2CA6.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA2D.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA33B.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA453D.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA453E.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA453F.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA4540.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA62EC.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA62ED.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA7490.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA7C.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA8492.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STA9.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STAA1.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STAAD.EXE.VIR
Adware:Adware/Lop Not disinfected
C:\Program Files\AVPersonal\INFECTED\STAAFF.EXE.VIR
Virus:Trj/Agent.AUO Not disinfected
C:\RECYCLER\NPROTECT\00291908.exe
Virus:Trj/Fastmp.A Not disinfected
C:\WINDOWS\system32\MSAgentXP.exe
Virus:Trj/Clicker.LE Not disinfected
C:\WINDOWS\system32\XPAgent.exe
Adware:Adware/IST.ISTBar Not disinfected
F:\Documents and Settings\UokogSobi\Local Settings\Temp\aDgTgP.exe
Virus:Bck/Freeze.C Not disinfected
F:\Documents and Settings\UokogSobi\Local Settings\Temp\GLF41.EXE
Adware:Adware/IST.ISTBar Not disinfected
F:\Documents and Settings\UokogSobi\Local Settings\Temp\XH9ECi.exe
Adware:Adware/IST.ISTBar Not disinfected
F:\Documents and Settings\UokogSobi\Local Settings\Temp\YfGTjI.exe
Spyware:Spyware/New.net Not disinfected
F:\Program Files\filesubmit\Battle Athletes - Victory\NNEZSTB3.exe
Hacktool:Hacktool/Hammer Not disinfected
F:\Program Files\Halflife Logo Creator\HLC.exe
Spyware:Spyware/LinkReplacer Not disinfected
F:\WINDOWS\system32\uninst.exe
Adware:Adware/PurityScan Not disinfected
F:\WINDOWS\system32\w?auboot.exe

HJT
Logfile of HijackThis v1.99.1
Scan saved at 12:17:24 AM, on 12/2/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\NASDAK\OmniMouse Driver\4.0\MOUSE32A.EXE
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Java\jre1.5.0_02\bin\jucheck.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
F:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\MSAgentXP.exe
C:\WINDOWS\system32\XPAgent.exe
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = xanga.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = xanga.com
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: NaviHelperObj Class - {3E422F49-1566-40D3-B43D-077EF739AC32} - C:\WINDOWS\system32\NaviHelper.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\NASDAK\OmniMouse Driver\4.0\MOUSE32A.EXE
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - HKCU\..\Run: [areslite] "C:\Program Files\Ares Lite Edition\AresLite.exe" -h
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [MSAgentXP] C:\WINDOWS\system32\MSAgentXP.exe
O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silent
O4 - HKCU\..\Run: [PhoneProc] C:\DOCUME~1\HIKARI~1\APPLIC~1\SETUPR~1\balm load.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [XPAgent] C:\WINDOWS\system32\XPAgent.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = F:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/09c86d4c...p/RdxIE601.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/pro...anner37460.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Service Client v.3.4) - http://ccon.futuremark.com/global/msc34.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: tsappcmp - Unknown owner - C:\WINDOWS\system32\tsappcmp.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

12-01-2005, 11:45 PM	#7 (permalink)
HikariNoKenkaku Registered User Join Date: Nov 2005 Posts: 7 OS: XP	Ewido This file has too many files in it. There are only 12 main ones, the other 32,382 are from mozilla. Anyways, they were all cleaned, so it should be okay. I tried to add an attachment of the report, but it was too big. On a side, note, the original error that I posted about was fixed, sorry for not mentioning that in my last post. Panda Incident Status Location Virus:Trj/Clicker.LE Not disinfected Operating system Adware:adware/navipromo Not disinfected Windows Registry Adware:Adware/Lop Not disinfected C:\HJT\backups\backup-20051201-204651-716.dll Adware:Adware/Lop Not disinfected C:\HJT\backups\backup-20051201-204651-736.dll Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\10DF861A.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\11286442.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\13DCB712.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\14296F6F.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\14BB4A5F.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\14C258DF.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\14D69A19.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\155C37EF.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\15670775.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\158C775.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\15AE15BB.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\15BD5706.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\15F1E3D8.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1643DE5F.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\168AAFBB.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\172F9B2B.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1745A9EF.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\177169AB.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1773AC5.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\178CB986.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\17C345CE.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\180A52BE.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1864315F.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\190C3C58.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1939FD4B.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\198BD83E.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\19E5B4DF.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1A2C841A.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1A54E6F.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1AAA244.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1AB96099.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1AC0719A.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1AD4B351.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1B0B5FCB.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1B52F7CF.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1B65C98B.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1BACD53E.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1BB34BCE.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1BF7A3D8.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1C3EB1EC.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1C41A1B0.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1C54363B.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1CA6124E.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1CD27D9E.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1CE54BAD.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1DBE373D.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1E1CA6DA.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1E69691A.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1EFB4742.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1F025590.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1FB0551D.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\1FEEEF83.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\2078CBC4.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\208E6B5.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\2102F376.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\A0032096.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\balm load.VIR Virus:Exploit/ByteVerify Not disinfected C:\ProgramFiles\AVPersonal\INFECTED\LOADERADV783.JAR-106D9513-6FC623AD.ZIP.VIR[Matrix.class] Virus:Exploit/ByteVerify Not disinfected C:\ProgramFiles\AVPersonal\INFECTED\LOADERADV783.JAR-106D9513-6FC623AD.ZIP.VIR[Dummy.class] Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA111A.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA1335.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA18DE.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA1ACA.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA1B34.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA1CF.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA1D0.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA1D1.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA1DD.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA262F.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2635.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2636.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA28.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2AB3.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2ABA.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2ABC.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2AC5.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2AC6.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2AC8.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2AC9.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2B.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2B0F.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2B7F.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2C6E.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2CA6.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA2D.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA33B.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA453D.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA453E.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA453F.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA4540.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA62EC.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA62ED.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA7490.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA7C.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA8492.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STA9.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STAA1.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STAAD.EXE.VIR Adware:Adware/Lop Not disinfected C:\Program Files\AVPersonal\INFECTED\STAAFF.EXE.VIR Virus:Trj/Agent.AUO Not disinfected C:\RECYCLER\NPROTECT\00291908.exe Virus:Trj/Fastmp.A Not disinfected C:\WINDOWS\system32\MSAgentXP.exe Virus:Trj/Clicker.LE Not disinfected C:\WINDOWS\system32\XPAgent.exe Adware:Adware/IST.ISTBar Not disinfected F:\Documents and Settings\UokogSobi\Local Settings\Temp\aDgTgP.exe Virus:Bck/Freeze.C Not disinfected F:\Documents and Settings\UokogSobi\Local Settings\Temp\GLF41.EXE Adware:Adware/IST.ISTBar Not disinfected F:\Documents and Settings\UokogSobi\Local Settings\Temp\XH9ECi.exe Adware:Adware/IST.ISTBar Not disinfected F:\Documents and Settings\UokogSobi\Local Settings\Temp\YfGTjI.exe Spyware:Spyware/New.net Not disinfected F:\Program Files\filesubmit\Battle Athletes - Victory\NNEZSTB3.exe Hacktool:Hacktool/Hammer Not disinfected F:\Program Files\Halflife Logo Creator\HLC.exe Spyware:Spyware/LinkReplacer Not disinfected F:\WINDOWS\system32\uninst.exe Adware:Adware/PurityScan Not disinfected F:\WINDOWS\system32\w?auboot.exe HJT Logfile of HijackThis v1.99.1 Scan saved at 12:17:24 AM, on 12/2/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE C:\Program Files\AVPersonal\AVWUPSRV.EXE C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\QuickTime\qttask.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe C:\Program Files\NASDAK\OmniMouse Driver\4.0\MOUSE32A.EXE C:\Program Files\Microsoft IntelliPoint\point32.exe C:\Program Files\Java\jre1.5.0_02\bin\jucheck.exe C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe F:\Program Files\WinZip\WZQKPICK.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\MSAgentXP.exe C:\WINDOWS\system32\XPAgent.exe C:\HJT\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = xanga.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = xanga.com O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: NaviHelperObj Class - {3E422F49-1566-40D3-B43D-077EF739AC32} - C:\WINDOWS\system32\NaviHelper.dll (file missing) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\NASDAK\OmniMouse Driver\4.0\MOUSE32A.EXE O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0 O4 - HKCU\..\Run: [areslite] "C:\Program Files\Ares Lite Edition\AresLite.exe" -h O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h O4 - HKCU\..\Run: [MSAgentXP] C:\WINDOWS\system32\MSAgentXP.exe O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silent O4 - HKCU\..\Run: [PhoneProc] C:\DOCUME~1\HIKARI~1\APPLIC~1\SETUPR~1\balm load.exe O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [XPAgent] C:\WINDOWS\system32\XPAgent.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: WinZip Quick Pick.lnk = F:\Program Files\WinZip\WZQKPICK.EXE O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/09c86d4c...p/RdxIE601.cab O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/pro...anner37460.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Service Client v.3.4) - http://ccon.futuremark.com/global/msc34.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe O23 - Service: tsappcmp - Unknown owner - C:\WINDOWS\system32\tsappcmp.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe __________________ http://img230.imageshack.us/img230/4623/hnk4dw.jpg Last edited by HikariNoKenkaku; 12-01-2005 at 11:49 PM.