massive log...
Running processes:
E:\WINDOWS\System32\smss[Caution: ExecutableFile]
E:\WINDOWS\system32\winlogon[Caution: ExecutableFile]
E:\WINDOWS\system32\services[Caution: ExecutableFile]
E:\WINDOWS\system32\lsass[Caution: ExecutableFile]
E:\WINDOWS\system32\svchost[Caution: ExecutableFile]
E:\WINDOWS\System32\svchost[Caution: ExecutableFile]
E:\WINDOWS\system32\spoolsv[Caution: ExecutableFile]
E:\PROGRA~1\COMMON~1\Stardock\SDMCP[Caution: ExecutableFile]
E:\WINDOWS\Explorer[Caution: ExecutableFile]
E:\PROGRA~1\Grisoft\AVG6\avgserv[Caution: ExecutableFile]
E:\Program Files\Common Files\Symantec Shared\ccSetMgr[Caution: ExecutableFile]
E:\WINDOWS\System32\CTsvcCDA[Caution: ExecutableFile]
E:\WINDOWS\System32\gearsec[Caution: ExecutableFile]
E:\WINDOWS\system32\CTHELPER[Caution: ExecutableFile]
E:\Program Files\Common Files\Symantec Shared\ccApp[Caution: ExecutableFile]
E:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]
E:\Program Files\Norton AntiVirus\navapsvc[Caution: ExecutableFile]
E:\Documents and Settings\OCUK\My Documents\Gazza\iTunesHelper[Caution: ExecutableFile]
E:\Program Files\QuickTime\qttask[Caution: ExecutableFile]
E:\Program Files\Messenger Plus! 3\MsgPlus[Caution: ExecutableFile]
E:\PROGRA~1\Grisoft\AVG6\avgcc32[Caution: ExecutableFile]
E:\Program Files\Winamp\winampa[Caution: ExecutableFile]
E:\Program Files\Zone Labs\ZoneAlarm\zlclient[Caution: ExecutableFile]
E:\WINDOWS\system32\rundll32[Caution: ExecutableFile]
E:\WINDOWS\system32\ctfmon[Caution: ExecutableFile]
E:\Program Files\Norton AntiVirus\SAVScan[Caution: ExecutableFile]
E:\WINDOWS\System32\svchost[Caution: ExecutableFile]
E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc[Caution: ExecutableFile]
E:\WINDOWS\system32\ZoneLabs\vsmon[Caution: ExecutableFile]
E:\WINDOWS\System32\MsPMSPSv[Caution: ExecutableFile]
E:\Program Files\Common Files\Symantec Shared\ccEvtMgr[Caution: ExecutableFile]
E:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC[Caution: ExecutableFile]
E:\Program Files\mIRC\mirc[Caution: ExecutableFile]
E:\Program Files\iPod\bin\iPodService[Caution: ExecutableFile]
E:\Program Files\Messenger\msmsgs[Caution: ExecutableFile]
e:\progra~1\intern~1\iexplore[Caution: ExecutableFile]
e:\progra~1\intern~1\iexplore[Caution: ExecutableFile]
E:\PROGRA~1\MOZILL~1\firefox[Caution: ExecutableFile]
E:\DOCUME~1\OCUK\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis[Caution: ExecutableFile]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.jidhjrpxecfvuuks.com/baNU2PBfJhhXXvroRrTTgVHpAYU10qkSk/JQjLJHreo10kJl2J7jmupc3JLgfFyo.asp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startnow.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://minisearch.startnow.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://minisearch.startnow.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = E:\WINDOWS\about.htm
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {0171719F-B638-EBD6-B911-DBF08A0B79CB} - E:\PROGRA~1\CHICOBJ\Time Scr[Caution: ExecutableFile] (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5BEDD189-9DC1-A5E3-11D4-FDA500DF6CF8} - E:\DOCUME~1\OCUK\APPLIC~1\CHICOBJ\Time Scr[Caution: ExecutableFile]
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - E:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NeroCheck] E:\WINDOWS\System32\\NeroCheck[Caution: ExecutableFile]
O4 - HKLM\..\Run: [updReg] E:\WINDOWS\UpdReg[Caution: ExecutableFile]
O4 - HKLM\..\Run: [Jet Detection] "E:\Program Files\Creative\SBLive\PROGRAM\ADGJDet[Caution: ExecutableFile]"
O4 - HKLM\..\Run: [CTHelper] CTHELPER[Caution: ExecutableFile]
O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Common Files\Symantec Shared\ccApp[Caution: ExecutableFile]"
O4 - HKLM\..\Run: [TkBellExe] "E:\Program Files\Common Files\Real\Update_OB\realsched[Caution: ExecutableFile]" -osboot
O4 - HKLM\..\Run: [iTunesHelper] E:\Documents and Settings\OCUK\My Documents\Gazza\iTunesHelper[Caution: ExecutableFile]
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask[Caution: ExecutableFile]" -atboottime
O4 - HKLM\..\Run: [MessengerPlus3] "E:\Program Files\Messenger Plus! 3\MsgPlus[Caution: ExecutableFile]"
O4 - HKLM\..\Run: [Dale Live Nurb Ooze] E:\Documents and Settings\All Users\Application Data\sect rect dale live\Phone else[Caution: ExecutableFile]
O4 - HKLM\..\Run: [AVG_CC] E:\PROGRA~1\Grisoft\AVG6\avgcc32[Caution: ExecutableFile] /STARTUP
O4 - HKLM\..\Run: [WinampAgent] E:\Program Files\Winamp\winampa[Caution: ExecutableFile]
O4 - HKLM\..\Run: [Zone Labs Client] "E:\Program Files\Zone Labs\ZoneAlarm\zlclient[Caution: ExecutableFile]"
O4 - HKLM\..\Run: [symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon[Caution: ExecutableFile]
O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32[Caution: ExecutableFile] bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Peak iso default htm] E:\Documents and Settings\All Users\Application Data\TRUSTWIPEPEAKISO\DaleWait[Caution: ExecutableFile]
O4 - HKLM\..\Run: [sunJavaUpdateSched] E:\Program Files\Java\j2re1.4.2_05\bin\jusched[Caution: ExecutableFile]
O4 - HKCU\..\Run: [mapiball] E:\DOCUME~1\OCUK\APPLIC~1\IDOLHE~1\Eq Bolt Soft[Caution: ExecutableFile]
O4 - HKCU\..\Run: [ctfmon[Caution: ExecutableFile]] E:\WINDOWS\system32\ctfmon[Caution: ExecutableFile]
O4 - HKCU\..\Run: [solidCapture] E:\Program Files\SolidDocuments\SolidCapture\solidcapture[Caution: ExecutableFile]
O4 - Global Startup: Adobe Gamma Loader.lnk = E:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader[Caution: ExecutableFile]
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9[Caution: ExecutableFile]
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\WINDOWS\System32\msjava.dll
O9 - Extra button: ICQ 4.0 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite[Caution: ExecutableFile]
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite[Caution: ExecutableFile]
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs[Caution: ExecutableFile]
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs[Caution: ExecutableFile]
O16 - DPF: Yahoo! Chess - http://download.games.yahoo.com/games/clients/y/ct1_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28177.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-12.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/26d034e4212651377920/netzip/RdxIE601.cab
O16 - DPF: {63DF43C2-469A-41F3-B119-17B1ACE8BB34} (Sony SNC-RZ30 Image Viewer) - http://151.204.174.22/home/SonySncRz30View.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://E:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yse/ymmapi_416.dll
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://E:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/autocomplete.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://E:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://E:\Program Files\AutoCAD 2002\AcPreview.ocx
O23 - Service: AVG6 Service (AvgServ) - GRISOFT s.r.o - E:\PROGRA~1\Grisoft\AVG6\avgserv[Caution: ExecutableFile]
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccEvtMgr[Caution: ExecutableFile]
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc[Caution: ExecutableFile]
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccSetMgr[Caution: ExecutableFile]
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\System32\CTsvcCDA[Caution: ExecutableFile]
O23 - Service: gearsec - GEAR Software - E:\WINDOWS\System32\gearsec[Caution: ExecutableFile]
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - E:\Program Files\iPod\bin\iPodService[Caution: ExecutableFile]
O23 - Service: Macromedia Licensing Service - Unknown owner - E:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing[Caution: ExecutableFile]
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc[Caution: ExecutableFile]
O23 - Service: SAVScan - Symantec Corporation - E:\Program Files\Norton AntiVirus\SAVScan[Caution: ExecutableFile]
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - E:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ[Caution: ExecutableFile]
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\SNDSrvc[Caution: ExecutableFile]
O23 - Service: Symantec Core LC - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc[Caution: ExecutableFile]
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC[Caution: ExecutableFile]
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - E:\WINDOWS\system32\ZoneLabs\vsmon[Caution: ExecutableFile]
apologies for any warez etc, but i do have some on here, not gonna deny it :wink: