Hijackthis log please help

[Pinscher]

No, I guess I didn't read enough before I asked for help. I'll go through that guide and post back here if I need help.

 

[Osiris]

Download KillBox,unzip/extract it to your desktop.
http://www.killbox.net/downloads/KillBox.exehttp://www.killbox.net/
Start up Killbox and place a check in 'Delete on Reboot'.
In the 'Full path of file to delete' box,copy and paste:

c:\windows\system32\ldcore.dll

Then press the red button with the white cross.
It will then provide a window for you to confirm the delete.
Next it will ask if you now wish to reboot,select YES.
Allow it to reboot.
If it does'nt reboot automatically,reboot manually.


post a new log

 

[peterhuang913]

Not broken link

 

[Osiris]

Fixed

 

[Pinscher]

Alright heres my updated log:

Logfile of HijackThis v1.99.1
Scan saved at 10:45:58 PM, on 6/9/2003
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\D-Link\D-Link DWA-556 Xtreme N PCIe Desktop Adapter\acs.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SPYCLE~1\SpyWatcher.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\D-Link\D-Link DWA-556 Xtreme N PCIe Desktop Adapter\wirelesscm.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\WINDOWS\system32\dllhost.exe
C:\Documents and Settings\August\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
O4 - HKLM\..\Run: [Spy Watcher] "C:\PROGRA~1\SPYCLE~1\SpyWatcher.exe" -S
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Wireless Connection Manager.lnk = C:\Program Files\D-Link\D-Link DWA-556 Xtreme N PCIe Desktop Adapter\wirelesscm.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Atheros Configuration Service (ACS) - Atheros - C:\Program Files\D-Link\D-Link DWA-556 Xtreme N PCIe Desktop Adapter\acs.exe
O23 - Service: EOKRLIWNK - Unknown owner - C:\DOCUME~1\August\LOCALS~1\Temp\EOKRLIWNK.exe (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Access Auto Connection Manager RasAutoWebClient (RasAutoWebClient) - Unknown owner - C:\WINDOWS\system32\adptifp.exe

 

[peterhuang913]

O23 - Service: EOKRLIWNK - Unknown owner - C:\DOCUME~1\August\LOCALS~1\Temp\EOKRLIWNK.exe (file missing)

O23 - Service: Remote Access Auto Connection Manager RasAutoWebClient (RasAutoWebClient) - Unknown owner - C:\WINDOWS\system32\adptifp.exe

 

[Osiris]

That entry is now gone. So are you still having any issues?

 

[Pinscher]

Ya I get a message from Spy Watcher every time I boot. I'm trying to get a screenshot up to show you. Give me a minute.

 

[Pinscher]

Ok I can't get the screenshot to be visible so I will explain it. Spy Watcher says new BHO found.
CLSID: {8f45f99c-0ba4-4402-8136-f1f3a167c31c}
File: c:\WINDOWS\system32\mllmm.dll


Category: Unknown
Component: Unknown

Accept Reject


Thats all the window says.


Also a window pops up on the bottom right of my screen that says:

Registry change denied

Resident denied the change of NvCpIDaemon (category System Startup global entry) based on your black list.

Both of these things happen every time I start my computer.

By the way, while I was typing this, a pop-up just opened advertising an anti-virus program.

 

[Pinscher]

I also keep getting an error message telling me that there aren't sufficient system resources to open the program that I try to open. What is this about?