Plz Check My HijackThis Log

Discussion in 'Windows Desktop Systems' started by bigman8424, Jan 6, 2005.

  1. bigman8424

    bigman8424 OSNN One Post Wonder

    Messages:
    3
    ---Plz Check My HijackThis Log---I have some bugs I cannot fix..

    Logfile of HijackThis v1.97.7
    Scan saved at 10:54:05 PM, on 1/5/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2
    (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\System32\spool\drivers\w32x86\3

    \hpztsb05.exe
    C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1

    \MotiveSB.exe
    C:\Program Files\Java\j2re1.4.2_06

    \bin\jusched.exe
    C:\Program Files\Common Files\Symantec

    Shared\ccApp.exe
    C:\Program Files\Common

    Files\Real\Update_OB\realsched.exe
    C:\PROGRA~1\ZONEAL~1\zlclient.exe
    C:\WINDOWS\LTMSG.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Common Files\Symantec

    Shared\ccSetMgr.exe
    C:\WINDOWS\system32\crypserv.exe
    C:\Program Files\Diskeeper

    Professional\DkService.exe
    C:\PROGRA~1\Fix-It\mxtask.exe
    C:\Program Files\Verizon

    Online\SupportCenter\bin\mpbtn.exe
    C:\WINDOWS\system32\gearsec.exe
    C:\Program Files\Common Files\Microsoft

    Shared\VS7Debug\mdm.exe
    C:\Program Files\Norton

    AntiVirus\navapsvc.exe
    C:\Program Files\Norton

    AntiVirus\AdvTools\NPROTECT.EXE
    C:\Program Files\Cleans_Cache\OOCCSVC.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec

    Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\Program Files\Common Files\Symantec

    Shared\ccEvtMgr.exe
    C:\Program Files\Common Files\Symantec

    Shared\Security Center\SymWSC.exe
    C:\Program Files\Internet

    Explorer\iexplore.exe
    C:\Program Files\Internet

    Explorer\iexplore.exe
    C:\Documents and

    Settings\Hijackthis_Adware_Removal.exe

    R0 - HKCU\Software\Microsoft\Internet

    Explorer\Main,Start Page =

    http://www.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet

    Explorer\Main,Start Page =

    http://store.presario.net/scripts/redirectors

    /presario/storeredir2.dll?

    s=consumerfav&c=1c02&lc=0409
    R1 - HKLM\Software\Microsoft\Internet

    Explorer\Main,Search Bar =

    http://rd.yahoo.com/customize/yessentials_cq/

    defaults/sb/*http://www.yahoo.com/search/ie.h

    tml
    R1 - HKLM\Software\Microsoft\Internet

    Explorer\Main,Default_Page_URL =

    http://store.presario.net/scripts/redirectors

    /presario/storeredir2.dll?

    s=consumerfav&c=2c02&lc=0409
    R1 -

    HKCU\Software\Microsoft\Windows\CurrentVersio

    n\Internet Settings,ProxyOverride = 127.0.0.1
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-

    B87D-784B7D6BE0B3} - C:\Program

    Files\Adobe\Acrobat 5.0

    \Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {0CF0B8EE-6596-11D5-

    A98E-0003470BB48E} - C:\Program Files\Pop-Up

    Stopper\CCHelper.dll
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-

    A4DF-000874180BB3} - (no file)
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-

    A544-FADC6B084872} - C:\Program Files\Norton

    AntiVirus\NavShExt.dll
    O2 - BHO: (no name) - {E5A1691B-D188-4419-

    AD02-90002030B8EE} - C:\PROGRA~1

    \FlashFXP\IEFlash.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-

    8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: Pop-Up Stopper &Companion -

    {8F05B1A8-9D77-4B8F-AF54-6B2202066F95} -

    C:\Program Files\Pop-Up Stopper\popupus.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-

    3FFB-4238-8AD1-7859DF00B1D6} - C:\Program

    Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [hpsysdrv]

    c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [IgfxTray]

    C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [Recguard]

    C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [srmclean]

    C:\Cpqs\Scom\srmclean.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility]

    C:\WINDOWS\System32\spool\drivers\w32x86\3

    \hpztsb05.exe
    O4 - HKLM\..\Run: [Motive SmartBridge]

    C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1

    \MotiveSB.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched]

    C:\Program Files\Java\j2re1.4.2_06

    \bin\jusched.exe
    O4 - HKLM\..\Run: [NeroFilterCheck]

    C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [QuickTime Task]

    "C:\Program Files\QuickTime\qttask.exe" -

    atboottime
    O4 - HKLM\..\Run: [ccApp] "C:\Program

    Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [NAV CfgWiz] C:\Program

    Files\Common Files\Symantec Shared\CfgWiz.exe

    /GUID NAV /CMDLINE "REBOOT"
    O4 - HKLM\..\Run: [Advanced Tools Check]

    C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program

    Files\Common

    Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [PinnacleDriverCheck]

    C:\WINDOWS\System32\PSDrvCheck.exe
    O4 - HKLM\..\Run: [Zone Labs Client]

    C:\PROGRA~1\ZONEAL~1\zlclient.exe
    O4 - HKLM\..\Run: [DeadAIM] rundll32.exe

    "C:\PROGRA~1\AIM95

    <A href="file://\DeadAIM.ocm",ExportedCheckODLs">\\DeadAIM.ocm",ExportedCheckODLs
    O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
    O4 - HKLM\..\Run: [DiskeeperSystray]

    "C:\Program Files\Diskeeper

    Professional\DkIcon.exe"
    O4 - HKCU\..\Run: [ctfmon.exe]

    C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: Diskeeper 9 Professional

    Edition Registration.lnk = C:\Program

    Files\Diskeeper Professional\ESIRegister.exe
    O4 - Startup: Registration-InstantCopy.lnk =

    C:\Program Files\Pinnacle\Shared

    Files\InstantCDDVD\Pixie\RegTool.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk =

    C:\Program Files\Common

    Files\Adobe\Calibration\Adobe Gamma

    Loader.exe
    O4 - Global Startup: Quicken Scheduled

    Updates.lnk = C:\Program

    Files\QUICKENW\bagent.exe
    O4 - Global Startup: Verizon Online Support

    Center.lnk = C:\Program Files\Verizon

    Online\SupportCenter\bin\matcli.exe
    O4 - Global Startup: Verizon Online.lnk =

    C:\Program Files\Verizon Online\VOLSW\Verizon

    Online.exe
    O8 - Extra context menu item: E&xport to

    Microsoft Excel - res://C:\PROGRA~1\MICROS~4

    \Office10\EXCEL.EXE/3000
    O9 - Extra 'Tools' menuitem: Sun Java Console

    (HKLM)
    O9 - Extra button: Yahoo! Login (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Login

    (HKLM)
    O9 - Extra button: Control Pad (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger

    (HKLM)
    O9 - Extra button: AIM (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Windows

    Messenger (HKLM)
    O12 - Plugin for .spop: C:\Program

    Files\Internet Explorer\Plugins\NPDocBox.dll
    O14 - IERESET.INF:

    START_PAGE_URL=http://store.presario.net/scri

    pts/redirectors/presario/storeredir2.dll?

    s=consumerfav&c=2c02&lc=0409
    O16 - DPF: {02BCC737-B171-4746-94C9-

    0D8A0B2C0089} (Microsoft Office Template and

    Media Control) -

    http://office.microsoft.com/templates/ieawsdc

    .cab
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-

    D3488ABDDC6B} (QuickTime Object) -

    http://www.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {0E5F0222-96B9-11D3-8997-

    00104BD12D94} (PCPitstop Utility) -

    http://www.pcpitstop.com/pcpitstop/PCPitStop.

    CAB
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-

    444553540000} (Shockwave ActiveX Control) -

    http://download.macromedia.com/pub/shockwave/

    cabs/director/sw.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-

    FA1D4F56A2AB} (YInstStarter Class) -

    http://us.dl1.yimg.com/download.yahoo.com/dl/

    installs/yinst0401.cab
    O16 - DPF: {33564D57-0000-0010-8000-

    00AA00389B71} -

    http://download.microsoft.com/download/F/6/E/

    F6E491A6-77E1-4E20-9F5F-

    94901338C922/wmv9VCM.CAB
    O16 - DPF: {4C39376E-FA9D-4349-BACC-

    D305C1750EF3} (EPUImageControl Class) -

    http://tools.ebayimg.com/eps/wl/activex/EPUWA

    LControl_v1-0-3-9.cab
    O16 - DPF: {4E888414-DB8F-11D1-9CD9-

    00C04F98436A} (Microsoft.WinRep) -

    https://webresponse.one.microsoft.com/OAS/Act

    iveX/winrep.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-

    FCFDF33E833C} (WUWebControl Class) -

    http://v5.windowsupdate.microsoft.com/v5consu

    mer/V5Controls/en/x86/client/wuweb_site.cab?

    1093206166687
    O16 - DPF: {90C9629E-CD32-11D3-BBFB-

    00105A1F0D68} (InstallShield International

    Setup Player) -

    http://companion.wyldfyre.com/download/isetup

    .cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-

    5009F29E09E1} (ActiveScan Installer Class) -

    http://www.pandasoftware.com/activescan/as5/a

    sinst.cab
    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-

    00105AA9B6AE} (Symantec RuFSI Registry

    Information Class) -

    http://security.symantec.com/sscv6/SharedCont

    ent/common/bin/cabsa.cab
    O16 - DPF: {CFCB7308-782F-11D4-BE27-

    000102598CE4} (NPX Control) -

    http://kr.pristontale.com/nprotect/nprotect/n

    px.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-

    444553540000} (Shockwave Flash Object) -

    http://download.macromedia.com/pub/shockwave/

    cabs/flash/swflash.cab
    O16 - DPF: {E855A2D4-987E-4F3B-A51C-

    64D10A7E2479} (EPSImageControl Class) -

    http://tools.ebayimg.com/eps/activex/EPSContr

    ol_v1-0-3-0.cab
     
  2. j79zlr

    j79zlr Glaanies script monkey Political User

    Messages:
    2,725
    Location:
    Chicago
  3. bigman8424

    bigman8424 OSNN One Post Wonder

    Messages:
    3
    Updated Spybot ran it, and updated HiJackThis, new log:

    New Updated HiJackthis log, could not fit all in one post, please see second post for second half...

    Logfile of HijackThis v1.99.0
    Scan saved at 6:16:45 PM, on 1/6/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
    C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
    C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\PROGRA~1\ZONEAL~1\zlclient.exe
    C:\WINDOWS\LTMSG.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\crypserv.exe
    C:\Program Files\Diskeeper Professional\DkService.exe
    C:\Program Files\Verizon Online\VOLSW\Verizon Online.exe
    C:\PROGRA~1\Fix-It\mxtask.exe
    C:\WINDOWS\system32\gearsec.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Verizon Online\SupportCenter\bin\mpbtn.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
    C:\Program Files\Cleans_Cache\OOCCSVC.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\WINDOWS\system32\notepad.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\DOCUME~1\SUSHMA~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe
    C:\DOCUME~1\SUSHMA~1\LOCALS~1\Temp\Temporary Directory 2 for hijackthis[1].zip\HijackThis.exe
    C:\DOCUME~1\SUSHMA~1\LOCALS~1\Temp\Temporary Directory 3 for hijackthis[1].zip\HijackThis.exe
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=2c02&lc=0409
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://rd.yahoo.com/customize/yessentials_cq/defaults/sb/*http://www.yahoo.com/search/ie.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=1c02&lc=0409
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: CCHelper Class - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\Program Files\Pop-Up Stopper\CCHelper.dll
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: Pop-Up Stopper &Companion - {8F05B1A8-9D77-4B8F-AF54-6B2202066F95} - C:\Program Files\Pop-Up Stopper\popupus.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
    O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [NAV CfgWiz] C:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
    O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
    O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONEAL~1\zlclient.exe
    O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\PROGRA~1\AIM95\\DeadAIM.ocm",ExportedCheckODLs
    O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
    O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Professional\DkIcon.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: Diskeeper 9 Professional Edition Registration.lnk = C:\Program Files\Diskeeper Professional\ESIRegister.exe
    O4 - Startup: Registration-InstantCopy.lnk = C:\Program Files\Pinnacle\Shared Files\InstantCDDVD\Pixie\RegTool.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\QUICKENW\bagent.exe
    O4 - Global Startup: Verizon Online Support Center.lnk = C:\Program Files\Verizon Online\SupportCenter\bin\matcli.exe
    O4 - Global Startup: Verizon Online.lnk = C:\Program Files\Verizon Online\VOLSW\Verizon Online.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
    O9 - Extra button: Control Pad - {28D44DAC-D1FC-4d4f-BB1B-ADF037C8DDBC} - C:\Program Files\Verizon Online\ControlPad\Misc\a_menu.exe
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O14 - IERESET.INF: START_PAGE_URL=http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=2c02&lc=0409
    O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst0401.cab
    O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-9.cab
    O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.com/OAS/ActiveX/winrep.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093206166687
    O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://companion.wyldfyre.com/download/isetup.cab
     
  4. bigman8424

    bigman8424 OSNN One Post Wonder

    Messages:
    3
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab

    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

    O16 - DPF: {CFCB7308-782F-11D4-BE27-000102598CE4} (NPX Control) - http://kr.pristontale.com/nprotect/nprotect/npx.cab

    O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab

    O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    O23 - Service: Symantec Password Validation - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

    O23 - Service: Symantec Settings Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    O23 - Service: Crypkey License - Unknown - crypserv.exe (file missing)

    O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Diskeeper Professional\DkService.exe

    O23 - Service: Fix-It Task Manager - Ontrack Data International - C:\PROGRA~1\Fix-It\mxtask.exe

    O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\system32\gearsec.exe

    O23 - Service: IP Refresh - Unknown - C:\WINDOWS\system32\ServiceHost.exe (file missing)

    O23 - Service: Content Monitoring Tool - Unknown - C:\WINDOWS\system32\msCMTSrvc.exe (file missing)

    O23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe

    O23 - Service: Norton Unerase Protection - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE

    O23 - Service: O&O CleverCache Pro - O&O Software GmbH - C:\Program Files\Cleans_Cache\OOCCSVC.exe

    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe

    O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

    O23 - Service: StyleXPService - Unknown - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

    O23 - Service: SymWMI Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

    O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe