Logfile of HijackThis v1.99.1
Scan saved at 12:02:39 PM, on 9/23/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:..WINDOWS..System32..smss.exe
C:..WINDOWS..system32..winlogon.exe
C:..WINDOWS..system32..services.exe
C:..WINDOWS..system32..lsass.exe
C:..WINDOWS..system32..svchost.exe
C:..WINDOWS..System32..svchost.exe
C:..WINDOWS..system32..spoolsv.exe
C:..WINDOWS..system32..drivers..KodakCCS.exe
C:..Program Files..Common Files..LightScribe..LSSrvc.exe
C:..WINDOWS..system32..svchost.exe
C:..Program Files..Trend Micro..Antivirus..Tmntsrv.exe
C:..Program Files..Trend Micro..Antivirus..tmproxy.exe
C:..Program Files..Webroot..Spy Sweeper..SpySweeper.exe
C:..WINDOWS..Explorer.EXE
C:..Program Files..Synaptics..SynTP..SynTPEnh.exe
C:..Program Files..Webroot..Spy Sweeper..SpySweeperUI.exe
C:..Program Files..Trend Micro..Antivirus..pccguide.exe
C:..Program Files..Trend Micro..Antivirus..PCClient.exe
C:..Program Files..Trend Micro..Antivirus..TMOAgent.exe
C:..Program Files..Common Files..AOL..1154990566..ee..AOLSoftware.exe
C:..Program Files..Viewpoint..Viewpoint Manager..ViewMgr.exe
C:..Program Files..QuickTime..qttask.exe
C:..Program Files..iTunes..iTunesHelper.exe
C:..Program Files..Messenger..msmsgs.exe
C:..Program Files..iPod..bin..iPodService.exe
C:..Program Files..Kodak..Kodak EasyShare software..bin..EasyShare.exe
C:..Program Files..Kodak..KODAK Software Updater..7288971..Program..Kodak Software Updater.exe
c:..program files..common files..aol..1154990566..ee..aim6.exe
C:..Program Files..Webroot..Spy Sweeper..SSU.EXE
C:..Program Files..Internet Explorer..iexplore.exe
C:..DOCUME~1..Owner..LOCALS~1..Temp..Temporary Directory 1 for hijackthis.zip..HijackThis.exe
R1 - HKCU..Software..Microsoft..Internet Explorer..Main,Search Bar = http://wapp.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=yahoo_v.1_ie&bm=yh_search
R0 - HKCU..Software..Microsoft..Internet Explorer..Main,Start Page = http://www.yahoo.com/
R1 - HKLM..Software..Microsoft..Internet Explorer..Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=pavilion&pf=laptop
R1 - HKCU..Software..Microsoft..Internet Explorer..Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:..Program Files..Java..jre1.5.0_06..bin..ssv.dll
O4 - HKLM......Run: [SynTPEnh] "C:..Program Files..Synaptics..SynTP..SynTPEnh.exe"
O4 - HKLM......Run: [SpySweeper] "C:..Program Files..Webroot..Spy Sweeper..SpySweeperUI.exe" /startintray
O4 - HKLM......Run: [pccguide.exe] "C:..Program Files..Trend Micro..Antivirus..pccguide.exe"
O4 - HKLM......Run: [PCClient.exe] "C:..Program Files..Trend Micro..Antivirus..PCClient.exe"
O4 - HKLM......Run: [TM Outbreak Agent] "C:..Program Files..Trend Micro..Antivirus..TMOAgent.exe" /run
O4 - HKLM......Run: [HostManager] "C:..Program Files..Common Files..AOL..1154990566..ee..AOLSoftware.exe"
O4 - HKLM......Run: [IPHSend] "C:..Program Files..Common Files..AOL..IPHSend..IPHSend.exe"
O4 - HKLM......Run: [ViewMgr] "C:..Program Files..Viewpoint..Viewpoint Manager..ViewMgr.exe"
O4 - HKLM......Run: [QuickTime Task] "C:..Program Files..QuickTime..qttask.exe" -atboottime
O4 - HKLM......Run: [iTunesHelper] "C:..Program Files..iTunes..iTunesHelper.exe"
O4 - HKCU......Run: [Aim6] "C:..Program Files..Common Files..AOL..Launch..AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU......Run: [MSMSGS] "C:..Program Files..Messenger..msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:..Program Files..Adobe..Acrobat 7.0..Reader..reader_sl.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:..Program Files..Kodak..Kodak EasyShare software..bin..EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:..Program Files..Kodak..KODAK Software Updater..7288971..Program..Kodak Software Updater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:..Program Files..Java..jre1.5.0_06..bin..ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:..Program Files..Java..jre1.5.0_06..bin..ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:..Program Files..Messenger..msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:..Program Files..Messenger..msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=pavilion&pf=laptop
O20 - Winlogon Notify: igfxcui - C:..WINDOWS..SYSTEM32..igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:..WINDOWS..SYSTEM32..WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:..WINDOWS..SYSTEM32..WRLogonNTF.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:..Program Files..Common Files..InstallShield..Driver..11..Intel 32..IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:..Program Files..iPod..bin..iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:..WINDOWS..system32..drivers..KodakCCS.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:..Program Files..Common Files..LightScribe..LSSrvc.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Incorporated. - C:..Program Files..Trend Micro..Antivirus..Tmntsrv.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Incorporated. - C:..Program Files..Trend Micro..Antivirus..tmproxy.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:..Program Files..Webroot..Spy Sweeper..SpySweeper.exe
Scan saved at 12:02:39 PM, on 9/23/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:..WINDOWS..System32..smss.exe
C:..WINDOWS..system32..winlogon.exe
C:..WINDOWS..system32..services.exe
C:..WINDOWS..system32..lsass.exe
C:..WINDOWS..system32..svchost.exe
C:..WINDOWS..System32..svchost.exe
C:..WINDOWS..system32..spoolsv.exe
C:..WINDOWS..system32..drivers..KodakCCS.exe
C:..Program Files..Common Files..LightScribe..LSSrvc.exe
C:..WINDOWS..system32..svchost.exe
C:..Program Files..Trend Micro..Antivirus..Tmntsrv.exe
C:..Program Files..Trend Micro..Antivirus..tmproxy.exe
C:..Program Files..Webroot..Spy Sweeper..SpySweeper.exe
C:..WINDOWS..Explorer.EXE
C:..Program Files..Synaptics..SynTP..SynTPEnh.exe
C:..Program Files..Webroot..Spy Sweeper..SpySweeperUI.exe
C:..Program Files..Trend Micro..Antivirus..pccguide.exe
C:..Program Files..Trend Micro..Antivirus..PCClient.exe
C:..Program Files..Trend Micro..Antivirus..TMOAgent.exe
C:..Program Files..Common Files..AOL..1154990566..ee..AOLSoftware.exe
C:..Program Files..Viewpoint..Viewpoint Manager..ViewMgr.exe
C:..Program Files..QuickTime..qttask.exe
C:..Program Files..iTunes..iTunesHelper.exe
C:..Program Files..Messenger..msmsgs.exe
C:..Program Files..iPod..bin..iPodService.exe
C:..Program Files..Kodak..Kodak EasyShare software..bin..EasyShare.exe
C:..Program Files..Kodak..KODAK Software Updater..7288971..Program..Kodak Software Updater.exe
c:..program files..common files..aol..1154990566..ee..aim6.exe
C:..Program Files..Webroot..Spy Sweeper..SSU.EXE
C:..Program Files..Internet Explorer..iexplore.exe
C:..DOCUME~1..Owner..LOCALS~1..Temp..Temporary Directory 1 for hijackthis.zip..HijackThis.exe
R1 - HKCU..Software..Microsoft..Internet Explorer..Main,Search Bar = http://wapp.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=yahoo_v.1_ie&bm=yh_search
R0 - HKCU..Software..Microsoft..Internet Explorer..Main,Start Page = http://www.yahoo.com/
R1 - HKLM..Software..Microsoft..Internet Explorer..Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=pavilion&pf=laptop
R1 - HKCU..Software..Microsoft..Internet Explorer..Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:..Program Files..Java..jre1.5.0_06..bin..ssv.dll
O4 - HKLM......Run: [SynTPEnh] "C:..Program Files..Synaptics..SynTP..SynTPEnh.exe"
O4 - HKLM......Run: [SpySweeper] "C:..Program Files..Webroot..Spy Sweeper..SpySweeperUI.exe" /startintray
O4 - HKLM......Run: [pccguide.exe] "C:..Program Files..Trend Micro..Antivirus..pccguide.exe"
O4 - HKLM......Run: [PCClient.exe] "C:..Program Files..Trend Micro..Antivirus..PCClient.exe"
O4 - HKLM......Run: [TM Outbreak Agent] "C:..Program Files..Trend Micro..Antivirus..TMOAgent.exe" /run
O4 - HKLM......Run: [HostManager] "C:..Program Files..Common Files..AOL..1154990566..ee..AOLSoftware.exe"
O4 - HKLM......Run: [IPHSend] "C:..Program Files..Common Files..AOL..IPHSend..IPHSend.exe"
O4 - HKLM......Run: [ViewMgr] "C:..Program Files..Viewpoint..Viewpoint Manager..ViewMgr.exe"
O4 - HKLM......Run: [QuickTime Task] "C:..Program Files..QuickTime..qttask.exe" -atboottime
O4 - HKLM......Run: [iTunesHelper] "C:..Program Files..iTunes..iTunesHelper.exe"
O4 - HKCU......Run: [Aim6] "C:..Program Files..Common Files..AOL..Launch..AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU......Run: [MSMSGS] "C:..Program Files..Messenger..msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:..Program Files..Adobe..Acrobat 7.0..Reader..reader_sl.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:..Program Files..Kodak..Kodak EasyShare software..bin..EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:..Program Files..Kodak..KODAK Software Updater..7288971..Program..Kodak Software Updater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:..Program Files..Java..jre1.5.0_06..bin..ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:..Program Files..Java..jre1.5.0_06..bin..ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:..Program Files..Messenger..msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:..Program Files..Messenger..msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=pavilion&pf=laptop
O20 - Winlogon Notify: igfxcui - C:..WINDOWS..SYSTEM32..igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:..WINDOWS..SYSTEM32..WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:..WINDOWS..SYSTEM32..WRLogonNTF.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:..Program Files..Common Files..InstallShield..Driver..11..Intel 32..IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:..Program Files..iPod..bin..iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:..WINDOWS..system32..drivers..KodakCCS.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:..Program Files..Common Files..LightScribe..LSSrvc.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Incorporated. - C:..Program Files..Trend Micro..Antivirus..Tmntsrv.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Incorporated. - C:..Program Files..Trend Micro..Antivirus..tmproxy.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:..Program Files..Webroot..Spy Sweeper..SpySweeper.exe
