December 18, 200619 yr Logfile of HijackThis v1.99.1 Scan saved at 8:12:48 AM, on 12/18/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss[Caution: ExecutableFile] C:\WINDOWS\system32\winlogon[Caution: ExecutableFile] C:\WINDOWS\system32\services[Caution: ExecutableFile] C:\WINDOWS\system32\lsass[Caution: ExecutableFile] C:\WINDOWS\system32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\system32\LEXBCES[Caution: ExecutableFile] C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile] C:\WINDOWS\system32\LEXPPS[Caution: ExecutableFile] D:\Program Files\Amazon\Amazon Unbox Video\ADVWindowsClientService[Caution: ExecutableFile] C:\WINDOWS\System32\cisvc[Caution: ExecutableFile] C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm[Caution: ExecutableFile] C:\WINDOWS\system32\nvsvc32[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\System32\svchost[Caution: ExecutableFile] C:\WINDOWS\system32\cidaemon[Caution: ExecutableFile] C:\WINDOWS\system32\wscntfy[Caution: ExecutableFile] C:\WINDOWS\Explorer[Caution: ExecutableFile] D:\Program Files\MessengerPlus! 3\MsgPlus[Caution: ExecutableFile] C:\Program Files\Java\jre1.5.0_09\bin\jusched[Caution: ExecutableFile] C:\Program Files\GE\97769 Dual Scroll Optical Mouse\Amoumain[Caution: ExecutableFile] C:\Program Files\Common Files\InstallShield\UpdateService\issch[Caution: ExecutableFile] C:\Program Files\Google\Google Desktop Search\GoogleDesktop[Caution: ExecutableFile] D:\Program Files\Winamp\winampa[Caution: ExecutableFile] C:\WINDOWS\system32\RUNDLL32[Caution: ExecutableFile] C:\PROGRA~1\WHATPU~1\WHATPU~1[Caution: ExecutableFile] C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex[Caution: ExecutableFile] C:\PROGRA~1\MSNMES~1\msnmsgr[Caution: ExecutableFile] D:\Program Files\WordWeb\wweb32[Caution: ExecutableFile] D:\Program Files\EmEditor Pro\EmEditor\emedtray[Caution: ExecutableFile] C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl[Caution: ExecutableFile] C:\Documents and Settings\Landon\Desktop\putty[Caution: ExecutableFile] C:\Documents and Settings\Landon\Desktop\putty[Caution: ExecutableFile] C:\Documents and Settings\Landon\Desktop\FreeMod.uncompressed[Caution: ExecutableFile] G:\GIMP\lib\gimp\2.0\plug-ins\script-fu[Caution: ExecutableFile] C:\WINDOWS\system32\wuauclt[Caution: ExecutableFile] G:\Mozilla Firefox\firefox[Caution: ExecutableFile] D:\Program Files\EmEditor Pro\EmEditor\EMEDITOR[Caution: ExecutableFile] C:\Documents and Settings\Landon\Desktop\HijackThis[Caution: ExecutableFile] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://webct.cowley.edu/webct/public/home.pl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O4 - HKLM\..\Run: [MessengerPlus3] "D:\Program Files\MessengerPlus! 3\MsgPlus[Caution: ExecutableFile]" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched[Caution: ExecutableFile]" O4 - HKLM\..\Run: [WheelMouse] Amoumain[Caution: ExecutableFile] O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32[Caution: ExecutableFile] C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz[Caution: ExecutableFile] /install O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM[Caution: ExecutableFile] -startup O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch[Caution: ExecutableFile]" -start O4 - HKLM\..\Run: [Tweak UI] RUNDLL32[Caution: ExecutableFile] TWEAKUI.CPL,TweakMeUp O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop[Caution: ExecutableFile]" /startup O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa[Caution: ExecutableFile] O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32[Caution: ExecutableFile] C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [WhatPulse] C:\PROGRA~1\WHATPU~1\WHATPU~1[Caution: ExecutableFile] O4 - HKCU\..\Run: [MessengerPlus3] "D:\Program Files\MessengerPlus! 3\MsgPlus[Caution: ExecutableFile]" /WinStart O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager[Caution: ExecutableFile] AcRdB7_0_5 O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr[Caution: ExecutableFile]" /background O4 - Startup: EmEditor.lnk = D:\Program Files\EmEditor Pro\EmEditor\emedtray[Caution: ExecutableFile] O4 - Global Startup: WordWeb.lnk = D:\Program Files\WordWeb\wweb32[Caution: ExecutableFile] O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: &WordWeb... - res://C:\WINDOWS\system32\wweb32.dll/lookup.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1116593829234 O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Amazon Unbox Video Service (ADVService) - Amazon.com - D:\Program Files\Amazon\Amazon Unbox Video\ADVWindowsClientService[Caution: ExecutableFile] O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT[Caution: ExecutableFile] O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService[Caution: ExecutableFile] O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES[Caution: ExecutableFile] O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr[Caution: ExecutableFile]" -sSQLEXPRESS (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32[Caution: ExecutableFile] O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd[Caution: ExecutableFile]" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV[Caution: ExecutableFile] There are my Hijack This logs and here's the T&C board :P I don't suspect anythings going on, but if there is I might as well find out. I just posted something! ^_^ to the terrorist...er... kirbybeam.
December 18, 200619 yr Other then the fact that you have no AntiVirus or Active Firewall running , i see no significant problems there. Still don't understand why folks use WhatPulse though :P I like to fart silently but deadly in movie theatersArd Choille says (11:41 PM):I wouldn't dare tell you what to do m'dear
December 18, 200619 yr Author Other then the fact that you have no AntiVirus or Active Firewall running , i see no significant problems there. Still don't understand why folks use WhatPulse though :P Whaaaa :o I guess I just haven't been bothered to turn WhatPulse off :P I just posted something! ^_^ to the terrorist...er... kirbybeam.
Create an account or sign in to comment