Newbie dot Org HomePage
Visit one of our web buddies
Anthrax
Capri

08/10/04
Got your attention ... LOL

Please check this log lots of wmva files with .dll extentions ... are they ok? Help me I am gonna be famous one day.

Logfile of HijackThis v1.97.7
Scan saved at 3:26:23 AM, on 8/10/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Nhksrv.exe
C:\PROGRA~1\Grisoft\avgserv.exe
C:\WINDOWS\MMKeybd.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\Grisoft\avgcc32.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\LimeWire\LimeWire 4.0.8\LimeWire.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe
C:\Documents and Settings\Melinda\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://by14fd.bay14.hotmail.msn.com/cgi-bin/getmsg?msg=MSG1089293635.25&start=374408&len=4554&imgsafe=y&curmbox=F000000001&a=5bfe62f4dda4e7508a621bd4cbdcd3d7
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.dellnet.com/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\MMKeybd.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\Wkfud.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\avgcc32.exe /STARTUP
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKLM\..\RunOnce: [WMC_0] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\wmidx2.ocx"
O4 - HKLM\..\RunOnce: [WMC_1] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\wmadmoe.dll"
O4 - HKLM\..\RunOnce: [WMC_2] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\wmadmod.dll"
O4 - HKLM\..\RunOnce: [WMC_3] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\wmsdmoe.dll"
O4 - HKLM\..\RunOnce: [WMC_4] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\wmsdmod.dll"
O4 - HKLM\..\RunOnce: [WMC_5] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\wmvdmoe.dll"
O4 - HKLM\..\RunOnce: [WMC_6] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\wmvdmod.dll"
O4 - HKLM\..\RunOnce: [WMC_7] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\wmv8dmoe.dll"
O4 - HKLM\..\RunOnce: [WMC_8] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\wmv8dmod.dll"
O4 - HKLM\..\RunOnce: [WMC_9] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\mpg4dmod.dll"
O4 - HKLM\..\RunOnce: [WMC_10] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\System32\wmvcore2.dll"
O4 - HKCU\..\RunOnce: [MPlayer2_FixUp] C:\WINDOWS\inf\unregmp2.exe /Fixups
O4 - Global Startup: Camio Viewer 2000.lnk = C:\Program Files\Sierra Imaging\Image Expert 2000\IXApplet.exe
O8 - Extra context menu item: Si&milar Pages - res://c:\windows\downloaded program files\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\windows\downloaded program files\GoogleToolbar2.dll/cmtrans.html
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab

Anti-SpyWare: Ad-aware
Anti-Virus: AVG
Browser: FireFox, MSN Exp
Firewall: Agnitum Outpost
OS: Win XP


© Copyright 1998-2004 Newbie dot Org -- All rights reserved --



This site maintained by Galaxy Website Design


--|--