jhoneybee
Topic Starter
Logfile of HijackThis v1.99.1
Scan saved at 8:14:43 PM, on 7/31/2006
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
D:\WINNT32\System32\smss.exe
D:\WINNT32\system32\winlogon.exe
D:\WINNT32\system32\services.exe
D:\WINNT32\system32\lsass.exe
D:\WINNT32\system32\svchost.exe
D:\WINNT32\system32\spoolsv.exe
D:\WINNT32\System32\svchost.exe
D:\WINNT32\System32\nvsvc32.exe
D:\WINNT32\system32\regsvc.exe
D:\WINNT32\system32\MSTask.exe
D:\WINNT32\Explorer.EXE
D:\WINNT32\htpatch.exe
D:\WINNT32\System32\pctspk.exe
D:\Program Files\PCI Audio Applications\Mixer.exe
D:\Program Files\WinZip\WZQKPICK.EXE
D:\Program Files\CoreComm SpeedStream\PropelAC.exe
D:\WINNT32\System32\taskmgr.exe
C:\unzipped\hijackthis\HijackThis.exe
D:\Program Files\Internet Explorer\iexplore.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.core.com/web/start
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: IE_PopupBlocker Class - {656EC4B7-072B-4698-B504-2A414C1F0037} - D:\Program Files\CoreComm SpeedStream\prpl_IePopupBlocker.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINNT32\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HTpatch] D:\WINNT32\htpatch.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [C-Media Mixer] D:\Program Files\PCI Audio Applications\Mixer.exe /startup
O4 - HKLM\..\Run: [Propel Accelerator] "D:\Program Files\CoreComm SpeedStream\trayctl.exe" /STARTUPLAUNCH
O4 - Global Startup: Billminder.lnk = D:\Program Files\Quicken\billmind.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = D:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Quicken Startup.lnk = D:\Program Files\Quicken\QWDLLS.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = D:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Allow pop-ups from this site - D:\Program Files\CoreComm SpeedStream\pac-addwl.html
O8 - Extra context menu item: Refresh Pa&ge with Full Quality - D:\Program Files\CoreComm SpeedStream\pac-page.html
O8 - Extra context menu item: Refresh Pi&cture with Full Quality - D:\Program Files\CoreComm SpeedStream\pac-image.html
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINNT32\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINNT32\web\related.htm
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{EF21B657-AC29-4573-8E8B-7F10E0EDCDEB}: NameServer = 207.251.194.54 207.251.194.55
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - D:\WINNT32\System32\dmadmin.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - D:\WINNT32\System32\nvsvc32.exe
Thanks so much
Scan saved at 8:14:43 PM, on 7/31/2006
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
D:\WINNT32\System32\smss.exe
D:\WINNT32\system32\winlogon.exe
D:\WINNT32\system32\services.exe
D:\WINNT32\system32\lsass.exe
D:\WINNT32\system32\svchost.exe
D:\WINNT32\system32\spoolsv.exe
D:\WINNT32\System32\svchost.exe
D:\WINNT32\System32\nvsvc32.exe
D:\WINNT32\system32\regsvc.exe
D:\WINNT32\system32\MSTask.exe
D:\WINNT32\Explorer.EXE
D:\WINNT32\htpatch.exe
D:\WINNT32\System32\pctspk.exe
D:\Program Files\PCI Audio Applications\Mixer.exe
D:\Program Files\WinZip\WZQKPICK.EXE
D:\Program Files\CoreComm SpeedStream\PropelAC.exe
D:\WINNT32\System32\taskmgr.exe
C:\unzipped\hijackthis\HijackThis.exe
D:\Program Files\Internet Explorer\iexplore.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.core.com/web/start
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: IE_PopupBlocker Class - {656EC4B7-072B-4698-B504-2A414C1F0037} - D:\Program Files\CoreComm SpeedStream\prpl_IePopupBlocker.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINNT32\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HTpatch] D:\WINNT32\htpatch.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [C-Media Mixer] D:\Program Files\PCI Audio Applications\Mixer.exe /startup
O4 - HKLM\..\Run: [Propel Accelerator] "D:\Program Files\CoreComm SpeedStream\trayctl.exe" /STARTUPLAUNCH
O4 - Global Startup: Billminder.lnk = D:\Program Files\Quicken\billmind.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = D:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Quicken Startup.lnk = D:\Program Files\Quicken\QWDLLS.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = D:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Allow pop-ups from this site - D:\Program Files\CoreComm SpeedStream\pac-addwl.html
O8 - Extra context menu item: Refresh Pa&ge with Full Quality - D:\Program Files\CoreComm SpeedStream\pac-page.html
O8 - Extra context menu item: Refresh Pi&cture with Full Quality - D:\Program Files\CoreComm SpeedStream\pac-image.html
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINNT32\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINNT32\web\related.htm
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{EF21B657-AC29-4573-8E8B-7F10E0EDCDEB}: NameServer = 207.251.194.54 207.251.194.55
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - D:\WINNT32\System32\dmadmin.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - D:\WINNT32\System32\nvsvc32.exe
Thanks so much