please help- limewire virus

[Irishlad]

hi, i think ive got a virus from limewire. i looked around differnent sites and what people are saying is delete the hidden file (complete) and uninstall limewire. ive uninstalled it and in the process of deleting the file., ive also downloaded HijackThis and it said post it 2 people who are knowlegeable so i dont no wot to do. i have the log file but where do i go from here. reply if you can help thanx.

this is my logfile

Logfile of HijackThis v1.99.1
Scan saved at 17:52:21, on 01/29/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\sdktd32.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\system32\ntoz.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\MsMovies\MsMovies.exe
C:\WINDOWS\System32\winlogi.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\NCLAUNCH.EXe
C:\Program Files\Anfield Alerts\anfieldalerts.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\alt.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\DOCUME~1\brien\LOCALS~1\Temp\Rar$EX02.469\HijackThis.exe
C:\Documents and Settings\brien\My Documents\alcragui.com

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.vroomsearch.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.iol.ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\bjics.dll/sp.html#83556%
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\bjics.dll/sp.html#83556%
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about :blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\bjics.dll/sp.html#83556%
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\bjics.dll/sp.html#83556%
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\bjics.dll/sp.html#83556%
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\bjics.dll/sp.html#83556%
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\bjics.dll/sp.html#83556%
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {0059410E-8DEE-0D98-C3BC-33C7339C21E9} - C:\WINDOWS\appck.dll
O2 - BHO: Class - {022B05B8-2B04-C6AA-AF23-E6174F8F7AEB} - C:\WINDOWS\system32\sysif32.dll
O2 - BHO: Class - {1321EF49-6B5C-04F9-66D4-F25BB941C72B} - C:\WINDOWS\addpm32.dll
O2 - BHO: Class - {194C97B0-BB08-6285-FA8C-33BA933986C9} - C:\WINDOWS\system32\atlpy.dll
O2 - BHO: Class - {2905C5FE-1A19-095D-6326-A92967BA6853} - C:\WINDOWS\mfcct32.dll
O2 - BHO: Class - {3D1E8A6D-0FB0-0E2E-D985-66A3F50B7CDB} - C:\WINDOWS\system32\d3pk.dll
O2 - BHO: Class - {504E4541-72B8-7FED-2346-675BD8F5509F} - C:\WINDOWS\system32\syscr32.dll
O2 - BHO: Class - {539A94FE-60D9-42C0-9073-18C6A8AF3DBD} - C:\WINDOWS\system32\netbj32.dll
O2 - BHO: Class - {569EFD00-2040-3D33-6E9D-EBA6ABEFF3C7} - C:\WINDOWS\system32\netdh.dll
O2 - BHO: Class - {75897AF8-779E-E938-121D-38FA5AA18C43} - C:\WINDOWS\ipqk32.dll
O2 - BHO: Class - {9B2B511B-5C73-FBA9-E2FD-33BC0CE5C060} - C:\WINDOWS\system32\javact32.dll
O2 - BHO: Class - {AC68E8A4-ECB5-B787-0BA7-D0089B4855AA} - C:\WINDOWS\system32\ntjn.dll
O2 - BHO: Class - {B36CE871-588C-AE65-E167-C04A68C1168E} - C:\WINDOWS\system32\addjx.dll
O2 - BHO: Class - {B9130181-D07E-0CEE-B1ED-E13DEC0210CF} - C:\WINDOWS\system32\netfe.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O2 - BHO: Class - {CD4D3F61-C588-9FBB-4FD5-E145A3C11A83} - C:\WINDOWS\system32\mfclg.dll
O2 - BHO: Class - {CDA98138-DD7C-FE0B-A3DF-5DFA833F7DD1} - C:\WINDOWS\appzg.dll
O2 - BHO: Class - {CE8D0FE1-1F00-353B-C722-83B91392A8A0} - C:\WINDOWS\ipqk32.dll
O2 - BHO: (no name) - {DA223E41-3F7F-4B2B-8CC8-22C6A1197EEB} - C:\WINDOWS\prflbmsgp32.dll
O2 - BHO: Class - {DB121C76-E851-CA48-18FB-904E2027B535} - C:\WINDOWS\addpm32.dll
O2 - BHO: Class - {F53C3690-8AF3-E462-BA9D-BA684A41DF5F} - C:\WINDOWS\system32\ntjn.dll
O2 - BHO: Class - {FF23FD02-A6AA-B322-75C5-2E1459713ADD} - C:\WINDOWS\system32\netbj32.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [VirusScan] c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
O4 - HKLM\..\Run: [apizm32.exe] C:\WINDOWS\system32\apizm32.exe
O4 - HKLM\..\Run: [msgb32.exe] C:\WINDOWS\System32\msgb32.exe
O4 - HKLM\..\Run: [dmplm.exe] C:\WINDOWS\System32\dmplm.exe
O4 - HKLM\..\Run: [ntoz.exe] C:\WINDOWS\system32\ntoz.exe
O4 - HKLM\..\Run: [atlli32.exe] C:\WINDOWS\atlli32.exe
O4 - HKLM\..\Run: [sdkoh.exe] C:\WINDOWS\system32\sdkoh.exe
O4 - HKLM\..\Run: [mfcbx32.exe] C:\WINDOWS\system32\mfcbx32.exe
O4 - HKLM\..\Run: [syslp.exe] C:\WINDOWS\system32\syslp.exe
O4 - HKLM\..\Run: [d3tp.exe] C:\WINDOWS\system32\d3tp.exe
O4 - HKLM\..\Run: [ipaw32.exe] C:\WINDOWS\ipaw32.exe
O4 - HKLM\..\Run: [apihd.exe] C:\WINDOWS\apihd.exe
O4 - HKLM\..\Run: [addsw32.exe] C:\WINDOWS\addsw32.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [MsMovies] C:\Program Files\MsMovies\MsMovies.exe /auto
O4 - HKLM\..\Run: [virtual-ie] winlogi.exe
O4 - HKLM\..\Run: [iptx.exe] C:\WINDOWS\iptx.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [sysqt32.exe] C:\WINDOWS\sysqt32.exe
O4 - HKLM\..\Run: [ntox.exe] C:\WINDOWS\system32\ntox.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\RunServices: [virtual-ie] winlogi.exe
O4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1047.dll,InstantAccess
O4 - HKCU\..\Run: [NCLaunch] C:\WINDOWS\NCLAUNCH.EXe
O4 - HKCU\..\Run: [Anfield Alerts] C:\Program Files\Anfield Alerts\anfieldalerts.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AlexaToolbar] C:\WINDOWS\alt.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binar...kr.cab31267.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v1...UI.cab40641.cab
O16 - DPF: {07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157} - http://akamai.downloadv3.com/binari...ESS_1063_XP.cab
O16 - DPF: {0D1011B3-89C8-4F8E-8693-BB970E2E81E0} - http://scripts.downloadv3.com/binar...9_ASPIV4_XP.cab
O16 - DPF: {0DA910BC-6919-489E-B584-D9A4AAC7B8DE} - http://scripts.downloadv3.com/binar...8_ASPIV4_XP.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2AEEAC34-FD74-4142-B891-4B05C0C03C87} - http://akamai.downloadv3.com/binari...054_pack_XP.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.co...v45/yacscom.cab
O16 - DPF: {3616F4B5-F6AD-4E67-966A-C218673648A0} - http://scripts.downloadv3.com/binar...0_ASPIV4_XP.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v1...dy.cab32846.cab
O16 - DPF: {3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B} - http://scripts.downloadv3.com/binar...ESS_1070_XP.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v1...at.cab32846.cab
O16 - DPF: {624321F1-0581-49D8-99BD-2E952C2DF31B} - http://akamai.downloadv3.com/binari...3_ASPIV4_XP.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windows...b?1134405815984
O16 - DPF: {71CBDCD9-0830-4470-A890-35D364DA352C} - http://scripts.downloadv3.com/binar..._1047_EN_XP.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {88C51E90-8E9C-4C96-8A45-574D88B63FAF} - http://acceso.masminutos.com/aplicacion.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binar...nt.cab31267.cab
O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binar...ESS_1068_XP.cab
O16 - DPF: {B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} - http://scripts.downloadv3.com/binar...svc32_EN_XP.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/M...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v1...ro.cab34246.cab
O16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} - http://scripts.downloadv3.com/binar...ESS_1069_XP.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v1...xy.cab35645.cab
O16 - DPF: {DDF44FD9-749F-4761-89BB-E8A59339E459} - http://akamai.downloadv3.com/binari...ice_9_EN_XP.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {EF4DCD99-D26B-44A4-BA77-CFDCC97E7291} - http://akamai.downloadv3.com/binari...ESS_1062_XP.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - http://akamai.downloadv3.com/binari...slv32_EN_XP.cab
O16 - DPF: {FA83E942-B796-46DE-9155-1632ECC5473B} - http://akamai.downloadv3.com/binari...ESS_1061_XP.cab
O16 - DPF: {FF3C5A9F-5A91-4930-80E8-4709194C2AD3} (CheckersZPA Object) - http://zone.msn.com/bingame/zpagame...PA.cab40641.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A0946B9F-34B9-494E-9322-41C2833BE7B8}: NameServer = 85.255.114.101,85.255.112.139
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: st3 - C:\WINDOWS\system32\st3.dll (file missing)
O23 - Service: Network Security Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\sdktd32.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe

 

[MicroBell]

Please follow the instructions on this page MicroBellÂ’s 5 Step Process
http://www.techsupportforum.com/hijackthis-log-help/15968-please-read-before-posting-hijackthis.html

Then post your log again.

*Note*

You are SEVERLEY infected...and can format/reinstall windows quicker then clearing all this out.

 

[slygnu05]

What are the symptoms of the virus. If it is what i had i can get rid of it for you without reinstalling windows.

 

[Osiris]

Has this been fixed yet?