Tech Support Forum - View Single Post

HikariNoKenkaku · 12-02-2005, 11:43 PM

Jotti

The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file

Kaspersky

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Saturday, December 03, 2005 00:36:31
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 3/12/2005
Kaspersky Anti-Virus database records: 153154
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 179091
Number of viruses found: 30
Number of infected objects: 95
Number of suspicious objects: 0
Duration of the scan process: 2440 sec

Infected Object Name - Virus Name
C:\HJT\backups\backup-20051201-204651-716.dll Infected: Trojan-Downloader.Win32.Swizzor.bo
C:\HJT\backups\backup-20051201-204651-736.dll Infected: Trojan-Downloader.Win32.Swizzor.bo
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP359\A0057574.exe Infected: Trojan-Downloader.Win32.Swizzor.co
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP359\A0057575.exe Infected: Trojan-Downloader.Win32.Swizzor.cb
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP359\A0057760.EXE Infected: Trojan-Downloader.Win32.Swizzor.bo
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP360\A0057835.exe Infected: Trojan-Downloader.Win32.Swizzor.co
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP360\A0057836.exe Infected: Trojan-Downloader.Win32.Swizzor.cb
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP360\A0058017.EXE Infected: Trojan-Downloader.Win32.Swizzor.bo
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059644.exe Infected: Virus.Win32.Parite.b
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059645.exe Infected: Virus.Win32.HLLP.Savno
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059648.exe Infected: Virus.Win32.HLLP.Savno
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059649.exe Infected: Virus.Win32.HLLP.Savno
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059650.dll Infected: Trojan.Win32.Delf.gh
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP363\A0059999.exe Infected: Trojan-Downloader.Win32.Swizzor.co
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP363\A0060000.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP363\A0060006.exe Infected: Trojan-Downloader.Win32.Swizzor.cb
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP363\A0060008.exe Infected: Trojan-Downloader.Win32.Swizzor.dd
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP363\A0060009.exe Infected: Trojan-Downloader.Win32.Swizzor.du
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP364\A0060177.exe Infected: Trojan-Downloader.Win32.Swizzor.bo
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP364\A0060178.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP364\A0060182.exe Infected: Trojan-Downloader.Win32.Swizzor.dd
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP364\A0060184.exe Infected: Trojan-Downloader.Win32.Swizzor.du
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP364\A0060370.EXE Infected: Trojan-Downloader.Win32.Agent.am
C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP365\A0060542.exe Infected: Trojan-Downloader.Win32.Reqlook.c
F:\Documents and Settings\UokogSobi\Local Settings\Temp\1.32 MB.exe/data0005/stream/data0002 Infected: Trojan-Downloader.Win32.Agent.cf
F:\Documents and Settings\UokogSobi\Local Settings\Temp\1.32 MB.exe/data0005/stream Infected: Trojan-Downloader.Win32.Agent.cf
F:\Documents and Settings\UokogSobi\Local Settings\Temp\1.32 MB.exe/data0005 Infected: Trojan-Downloader.Win32.Agent.cf
F:\Documents and Settings\UokogSobi\Local Settings\Temp\1.32 MB.exe Infected: Trojan-Downloader.Win32.Agent.cf
F:\Documents and Settings\UokogSobi\Local Settings\Temp\aDgTgP.exe Infected: Trojan-Downloader.Win32.IstBar.ig
F:\Documents and Settings\UokogSobi\Local Settings\Temp\XH9ECi.exe Infected: Trojan-Downloader.Win32.IstBar.ig
F:\Documents and Settings\UokogSobi\Local Settings\Temp\YfGTjI.exe Infected: Trojan-Downloader.Win32.IstBar.ig
F:\Program Files\Ares\My Shared Folder\norton antivirus 2004 professional + crack.exe/Norton.Antivirus.2004.PRO.KEYGEN.exe Infected: Virus.Win32.HLLP.Savno
F:\Program Files\Ares\My Shared Folder\norton antivirus 2004 professional + crack.exe Infected: Virus.Win32.HLLP.Savno
F:\Program Files\Norton AntiVirus\Quarantine\01565F87 Infected: Trojan.Java.ClassLoader.ak
F:\Program Files\Norton AntiVirus\Quarantine\02EC5193 Infected: Trojan.Java.ClassLoader.ak
F:\Program Files\Norton AntiVirus\Quarantine\05DE0DD9.class Infected: Trojan-Downloader.Java.OpenConnection.v
F:\Program Files\Norton AntiVirus\Quarantine\0BB0773D Infected: Trojan.Win32.KillAV.ef
F:\Program Files\Norton AntiVirus\Quarantine\14C4049C Infected: Trojan.Win32.KillAV.ef
F:\Program Files\Norton AntiVirus\Quarantine\15F82302 Infected: Trojan.Java.ClassLoader.z
F:\Program Files\Norton AntiVirus\Quarantine\16C64E85 Infected: Trojan-Downloader.Win32.IstBar.ic
F:\Program Files\Norton AntiVirus\Quarantine\21EC6F1E Infected: Trojan-Downloader.Java.OpenConnection.v
F:\Program Files\Norton AntiVirus\Quarantine\26566095 Infected: Trojan.Java.ClassLoader.z
F:\Program Files\Norton AntiVirus\Quarantine\28BB734B/data0000 Infected: Trojan.Win32.SecondThought.aa
F:\Program Files\Norton AntiVirus\Quarantine\28BB734B Infected: Trojan.Win32.SecondThought.aa
F:\Program Files\Norton AntiVirus\Quarantine\324E7496.exe Infected: Virus.Win32.HLLP.Savno
F:\Program Files\Norton AntiVirus\Quarantine\36CA01ED Infected: Trojan-Downloader.Java.OpenConnection.v
F:\Program Files\Norton AntiVirus\Quarantine\3E0856CC Infected: Trojan-Spy.Win32.Perfloger.l
F:\Program Files\Norton AntiVirus\Quarantine\504C6C9E Infected: Trojan.Java.ClassLoader.ak
F:\Program Files\Norton AntiVirus\Quarantine\63390D6A Infected: Trojan-Spy.Win32.Perfloger.l
F:\Program Files\Norton AntiVirus\Quarantine\67EE538C Infected: Trojan-Spy.Win32.Perfloger.f
F:\Program Files\Norton AntiVirus\Quarantine\68970F93 Infected: Trojan-Downloader.Java.OpenConnection.v
F:\Program Files\Norton AntiVirus\Quarantine\6DB54004 Infected: Trojan.Win32.KillAV.ef
F:\Program Files\Norton AntiVirus\Quarantine\7A705D0F Infected: Trojan.Java.ClassLoader.z
F:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059884.ocx Infected: Trojan-Downloader.Win32.VB.en
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP177\A0189178.exe/rinst.exe Infected: Trojan.Win32.KillAV.ef
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP177\A0189178.exe Infected: Trojan.Win32.KillAV.ef
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP177\A0189186.exe/rinst.exe Infected: Trojan.Win32.KillAV.ef
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP177\A0189186.exe Infected: Trojan.Win32.KillAV.ef
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP180\A0195505.exe Infected: Trojan.Win32.KillAV.ef
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP180\A0195587.exe Infected: P2P-Worm.Win32.Tibick
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP180\A0195588.exe Infected: P2P-Worm.Win32.Tibick.d
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP180\A0195589.exe Infected: P2P-Worm.Win32.Tibick.d
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP182\A0197770.EXE/rinst.exe Infected: Trojan-Spy.Win32.Perfloger.f
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP182\A0197770.EXE Infected: Trojan-Spy.Win32.Perfloger.f
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP185\A0197973.exe Infected: Trojan-Spy.Win32.Perfloger.f
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP185\A0197974.exe Infected: Trojan.Win32.KillAV.ef
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP185\A0197976.exe Infected: Trojan.Win32.KillAV.ef
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP189\A0208803.exe Infected: Trojan.Win32.KillAV.ef
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP209\A0260331.exe Infected: Trojan-Spy.Win32.Perfloger.l
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP210\A0260333.dll Infected: Trojan-Spy.Win32.Perfloger.i
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP215\A0263417.dll Infected: Trojan-Downloader.Win32.Braidupdate.d
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP215\A0263418.DLL Infected: Trojan-Clicker.Win32.Agent.dh
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP227\A0275089.exe Infected: Trojan-Downloader.Win32.IstBar.ie
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP228\A0276424.exe Infected: Trojan-Downloader.Win32.IstBar.ie
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP234\A0278765.exe Infected: Trojan-Downloader.Win32.IstBar.gen
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP237\A0280765.exe Infected: Trojan-Downloader.Win32.IstBar.gen
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP237\A0281765.exe Infected: Trojan-Downloader.Win32.IstBar.gen
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP238\A0283765.exe Infected: Trojan-Downloader.Win32.IstBar.gen
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP240\A0285942.exe Infected: Trojan-Downloader.Win32.IstBar.gen
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP241\A0285985.EXE/WISE0021.BIN Infected: Trojan-Downloader.Win32.Agent.er
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP241\A0285985.EXE Infected: Trojan-Downloader.Win32.Agent.er
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP241\A0285993.exe/WISE0021.BIN Infected: Trojan-Downloader.Win32.Agent.er
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP241\A0285993.exe Infected: Trojan-Downloader.Win32.Agent.er
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP242\A0286027.exe/data0000 Infected: Trojan.Win32.SecondThought.aa
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP242\A0286027.exe Infected: Trojan.Win32.SecondThought.aa
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP245\A0286085.exe Infected: Trojan-Downloader.Win32.IstBar.gen
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP246\A0286369.exe Infected: Trojan-Downloader.Win32.IstBar.gen
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP246\A0286375.exe Infected: Trojan-Downloader.Win32.IstBar.gen
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP249\A0288192.EXE Infected: Trojan-Downloader.Win32.Agent.er
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP253\A0292318.exe Infected: Trojan-Downloader.Win32.IstBar.gen
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP254\A0292437.exe Infected: Trojan-Downloader.Win32.IstBar.gen
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP255\A0292624.exe/WISE0022.BIN Infected: Trojan-Downloader.Win32.Agent.er
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP255\A0292624.exe Infected: Trojan-Downloader.Win32.Agent.er
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP259\A0294822.exe/rinst.exe Infected: Trojan.Win32.KillAV.ef
F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP259\A0294822.exe Infected: Trojan.Win32.KillAV.ef

Scan process completed.

HJT

Logfile of HijackThis v1.99.1
Scan saved at 12:42:08 AM, on 12/3/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jucheck.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\NASDAK\OmniMouse Driver\4.0\MOUSE32A.EXE
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
F:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = xanga.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = xanga.com
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: NaviHelperObj Class - {3E422F49-1566-40D3-B43D-077EF739AC32} - C:\WINDOWS\system32\NaviHelper.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\NASDAK\OmniMouse Driver\4.0\MOUSE32A.EXE
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - HKCU\..\Run: [areslite] "C:\Program Files\Ares Lite Edition\AresLite.exe" -h
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silent
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = F:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/k...an_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/09c86d4c...p/RdxIE601.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/pro...anner37460.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Service Client v.3.4) - http://ccon.futuremark.com/global/msc34.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: tsappcmp - Unknown owner - C:\WINDOWS\system32\tsappcmp.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

-Hikari No Kenkaku

12-02-2005, 11:43 PM	#9 (permalink)
HikariNoKenkaku Registered User Join Date: Nov 2005 Posts: 7 OS: XP	Jotti The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file Kaspersky ------------------------------------------------------------------------------- KASPERSKY ON-LINE SCANNER REPORT Saturday, December 03, 2005 00:36:31 Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky On-line Scanner version: 5.0.67.0 Kaspersky Anti-Virus database last update: 3/12/2005 Kaspersky Anti-Virus database records: 153154 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: standard Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ E:\ F:\ Scan Statistics: Total number of scanned objects: 179091 Number of viruses found: 30 Number of infected objects: 95 Number of suspicious objects: 0 Duration of the scan process: 2440 sec Infected Object Name - Virus Name C:\HJT\backups\backup-20051201-204651-716.dll Infected: Trojan-Downloader.Win32.Swizzor.bo C:\HJT\backups\backup-20051201-204651-736.dll Infected: Trojan-Downloader.Win32.Swizzor.bo C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP359\A0057574.exe Infected: Trojan-Downloader.Win32.Swizzor.co C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP359\A0057575.exe Infected: Trojan-Downloader.Win32.Swizzor.cb C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP359\A0057760.EXE Infected: Trojan-Downloader.Win32.Swizzor.bo C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP360\A0057835.exe Infected: Trojan-Downloader.Win32.Swizzor.co C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP360\A0057836.exe Infected: Trojan-Downloader.Win32.Swizzor.cb C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP360\A0058017.EXE Infected: Trojan-Downloader.Win32.Swizzor.bo C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059644.exe Infected: Virus.Win32.Parite.b C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059645.exe Infected: Virus.Win32.HLLP.Savno C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059648.exe Infected: Virus.Win32.HLLP.Savno C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059649.exe Infected: Virus.Win32.HLLP.Savno C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059650.dll Infected: Trojan.Win32.Delf.gh C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP363\A0059999.exe Infected: Trojan-Downloader.Win32.Swizzor.co C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP363\A0060000.exe Infected: Trojan-Downloader.Win32.Swizzor.de C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP363\A0060006.exe Infected: Trojan-Downloader.Win32.Swizzor.cb C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP363\A0060008.exe Infected: Trojan-Downloader.Win32.Swizzor.dd C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP363\A0060009.exe Infected: Trojan-Downloader.Win32.Swizzor.du C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP364\A0060177.exe Infected: Trojan-Downloader.Win32.Swizzor.bo C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP364\A0060178.exe Infected: Trojan-Downloader.Win32.Swizzor.de C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP364\A0060182.exe Infected: Trojan-Downloader.Win32.Swizzor.dd C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP364\A0060184.exe Infected: Trojan-Downloader.Win32.Swizzor.du C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP364\A0060370.EXE Infected: Trojan-Downloader.Win32.Agent.am C:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP365\A0060542.exe Infected: Trojan-Downloader.Win32.Reqlook.c F:\Documents and Settings\UokogSobi\Local Settings\Temp\1.32 MB.exe/data0005/stream/data0002 Infected: Trojan-Downloader.Win32.Agent.cf F:\Documents and Settings\UokogSobi\Local Settings\Temp\1.32 MB.exe/data0005/stream Infected: Trojan-Downloader.Win32.Agent.cf F:\Documents and Settings\UokogSobi\Local Settings\Temp\1.32 MB.exe/data0005 Infected: Trojan-Downloader.Win32.Agent.cf F:\Documents and Settings\UokogSobi\Local Settings\Temp\1.32 MB.exe Infected: Trojan-Downloader.Win32.Agent.cf F:\Documents and Settings\UokogSobi\Local Settings\Temp\aDgTgP.exe Infected: Trojan-Downloader.Win32.IstBar.ig F:\Documents and Settings\UokogSobi\Local Settings\Temp\XH9ECi.exe Infected: Trojan-Downloader.Win32.IstBar.ig F:\Documents and Settings\UokogSobi\Local Settings\Temp\YfGTjI.exe Infected: Trojan-Downloader.Win32.IstBar.ig F:\Program Files\Ares\My Shared Folder\norton antivirus 2004 professional + crack.exe/Norton.Antivirus.2004.PRO.KEYGEN.exe Infected: Virus.Win32.HLLP.Savno F:\Program Files\Ares\My Shared Folder\norton antivirus 2004 professional + crack.exe Infected: Virus.Win32.HLLP.Savno F:\Program Files\Norton AntiVirus\Quarantine\01565F87 Infected: Trojan.Java.ClassLoader.ak F:\Program Files\Norton AntiVirus\Quarantine\02EC5193 Infected: Trojan.Java.ClassLoader.ak F:\Program Files\Norton AntiVirus\Quarantine\05DE0DD9.class Infected: Trojan-Downloader.Java.OpenConnection.v F:\Program Files\Norton AntiVirus\Quarantine\0BB0773D Infected: Trojan.Win32.KillAV.ef F:\Program Files\Norton AntiVirus\Quarantine\14C4049C Infected: Trojan.Win32.KillAV.ef F:\Program Files\Norton AntiVirus\Quarantine\15F82302 Infected: Trojan.Java.ClassLoader.z F:\Program Files\Norton AntiVirus\Quarantine\16C64E85 Infected: Trojan-Downloader.Win32.IstBar.ic F:\Program Files\Norton AntiVirus\Quarantine\21EC6F1E Infected: Trojan-Downloader.Java.OpenConnection.v F:\Program Files\Norton AntiVirus\Quarantine\26566095 Infected: Trojan.Java.ClassLoader.z F:\Program Files\Norton AntiVirus\Quarantine\28BB734B/data0000 Infected: Trojan.Win32.SecondThought.aa F:\Program Files\Norton AntiVirus\Quarantine\28BB734B Infected: Trojan.Win32.SecondThought.aa F:\Program Files\Norton AntiVirus\Quarantine\324E7496.exe Infected: Virus.Win32.HLLP.Savno F:\Program Files\Norton AntiVirus\Quarantine\36CA01ED Infected: Trojan-Downloader.Java.OpenConnection.v F:\Program Files\Norton AntiVirus\Quarantine\3E0856CC Infected: Trojan-Spy.Win32.Perfloger.l F:\Program Files\Norton AntiVirus\Quarantine\504C6C9E Infected: Trojan.Java.ClassLoader.ak F:\Program Files\Norton AntiVirus\Quarantine\63390D6A Infected: Trojan-Spy.Win32.Perfloger.l F:\Program Files\Norton AntiVirus\Quarantine\67EE538C Infected: Trojan-Spy.Win32.Perfloger.f F:\Program Files\Norton AntiVirus\Quarantine\68970F93 Infected: Trojan-Downloader.Java.OpenConnection.v F:\Program Files\Norton AntiVirus\Quarantine\6DB54004 Infected: Trojan.Win32.KillAV.ef F:\Program Files\Norton AntiVirus\Quarantine\7A705D0F Infected: Trojan.Java.ClassLoader.z F:\System Volume Information\_restore{2E2A5DFF-EE83-49B6-97FA-DBCBA5CCC538}\RP362\A0059884.ocx Infected: Trojan-Downloader.Win32.VB.en F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP177\A0189178.exe/rinst.exe Infected: Trojan.Win32.KillAV.ef F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP177\A0189178.exe Infected: Trojan.Win32.KillAV.ef F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP177\A0189186.exe/rinst.exe Infected: Trojan.Win32.KillAV.ef F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP177\A0189186.exe Infected: Trojan.Win32.KillAV.ef F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP180\A0195505.exe Infected: Trojan.Win32.KillAV.ef F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP180\A0195587.exe Infected: P2P-Worm.Win32.Tibick F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP180\A0195588.exe Infected: P2P-Worm.Win32.Tibick.d F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP180\A0195589.exe Infected: P2P-Worm.Win32.Tibick.d F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP182\A0197770.EXE/rinst.exe Infected: Trojan-Spy.Win32.Perfloger.f F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP182\A0197770.EXE Infected: Trojan-Spy.Win32.Perfloger.f F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP185\A0197973.exe Infected: Trojan-Spy.Win32.Perfloger.f F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP185\A0197974.exe Infected: Trojan.Win32.KillAV.ef F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP185\A0197976.exe Infected: Trojan.Win32.KillAV.ef F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP189\A0208803.exe Infected: Trojan.Win32.KillAV.ef F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP209\A0260331.exe Infected: Trojan-Spy.Win32.Perfloger.l F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP210\A0260333.dll Infected: Trojan-Spy.Win32.Perfloger.i F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP215\A0263417.dll Infected: Trojan-Downloader.Win32.Braidupdate.d F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP215\A0263418.DLL Infected: Trojan-Clicker.Win32.Agent.dh F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP227\A0275089.exe Infected: Trojan-Downloader.Win32.IstBar.ie F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP228\A0276424.exe Infected: Trojan-Downloader.Win32.IstBar.ie F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP234\A0278765.exe Infected: Trojan-Downloader.Win32.IstBar.gen F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP237\A0280765.exe Infected: Trojan-Downloader.Win32.IstBar.gen F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP237\A0281765.exe Infected: Trojan-Downloader.Win32.IstBar.gen F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP238\A0283765.exe Infected: Trojan-Downloader.Win32.IstBar.gen F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP240\A0285942.exe Infected: Trojan-Downloader.Win32.IstBar.gen F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP241\A0285985.EXE/WISE0021.BIN Infected: Trojan-Downloader.Win32.Agent.er F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP241\A0285985.EXE Infected: Trojan-Downloader.Win32.Agent.er F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP241\A0285993.exe/WISE0021.BIN Infected: Trojan-Downloader.Win32.Agent.er F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP241\A0285993.exe Infected: Trojan-Downloader.Win32.Agent.er F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP242\A0286027.exe/data0000 Infected: Trojan.Win32.SecondThought.aa F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP242\A0286027.exe Infected: Trojan.Win32.SecondThought.aa F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP245\A0286085.exe Infected: Trojan-Downloader.Win32.IstBar.gen F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP246\A0286369.exe Infected: Trojan-Downloader.Win32.IstBar.gen F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP246\A0286375.exe Infected: Trojan-Downloader.Win32.IstBar.gen F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP249\A0288192.EXE Infected: Trojan-Downloader.Win32.Agent.er F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP253\A0292318.exe Infected: Trojan-Downloader.Win32.IstBar.gen F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP254\A0292437.exe Infected: Trojan-Downloader.Win32.IstBar.gen F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP255\A0292624.exe/WISE0022.BIN Infected: Trojan-Downloader.Win32.Agent.er F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP255\A0292624.exe Infected: Trojan-Downloader.Win32.Agent.er F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP259\A0294822.exe/rinst.exe Infected: Trojan.Win32.KillAV.ef F:\System Volume Information\_restore{E06CC13C-B2B2-4A6E-9DA8-3F9B07F5CC0F}\RP259\A0294822.exe Infected: Trojan.Win32.KillAV.ef Scan process completed. HJT Logfile of HijackThis v1.99.1 Scan saved at 12:42:08 AM, on 12/3/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE C:\Program Files\AVPersonal\AVWUPSRV.EXE C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\QuickTime\qttask.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe C:\Program Files\Java\jre1.5.0_02\bin\jucheck.exe C:\Program Files\AVPersonal\AVGNT.EXE C:\Program Files\NASDAK\OmniMouse Driver\4.0\MOUSE32A.EXE C:\Program Files\Microsoft IntelliPoint\point32.exe C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe F:\Program Files\WinZip\WZQKPICK.EXE C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\HJT\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = xanga.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = xanga.com O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: NaviHelperObj Class - {3E422F49-1566-40D3-B43D-077EF739AC32} - C:\WINDOWS\system32\NaviHelper.dll (file missing) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\NASDAK\OmniMouse Driver\4.0\MOUSE32A.EXE O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0 O4 - HKCU\..\Run: [areslite] "C:\Program Files\Ares Lite Edition\AresLite.exe" -h O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silent O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: WinZip Quick Pick.lnk = F:\Program Files\WinZip\WZQKPICK.EXE O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/k...an_unicode.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/09c86d4c...p/RdxIE601.cab O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/pro...anner37460.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Service Client v.3.4) - http://ccon.futuremark.com/global/msc34.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe O23 - Service: tsappcmp - Unknown owner - C:\WINDOWS\system32\tsappcmp.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -Hikari No Kenkaku __________________ http://img230.imageshack.us/img230/4623/hnk4dw.jpg Last edited by HikariNoKenkaku; 12-02-2005 at 11:45 PM.