bchivers
Topic Starter
Here is my scan, thank you for your help.
Logfile of HijackThis v1.99.1
Scan saved at 11:42:11 AM, on 8/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\Windows Defender\MsMpEng.exe
E:\WINDOWS\system32\svchost.exe
E:\PROGRA~1\CACHEM~1\CachemanXP.exe
E:\WINDOWS\explorer.exe
E:\Program Files\ewido anti-spyware 4.0\guard.exe
E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
E:\Program Files\ViRobotXP\vrmonsvc.exe
E:\PROGRA~1\BILLPS~1\WINPAT~1\WinPatrol.exe
E:\Program Files\Saitek\Software\SaiMfd.exe
E:\Program Files\ViRobotXP\vrmonnt.exe
E:\Program Files\Saitek\Software\ProfilerU.exe
E:\WINDOWS\SOUNDMAN.EXE
E:\WINDOWS\system32\nvraidservice.exe
J:\Program Files\DS Clock\dsclock.exe
E:\WINDOWS\system32\wbem\unsecapp.exe
E:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe
E:\PROGRA~1\FREEDO~1\fdm.exe
E:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
E:\WINDOWS\system32\svchost.exe
E:\DOCUME~1\GAMES\LOCALS~1\Temp\7zO8.tmp\A64Info.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Documents and Settings\GAMES\Desktop\D0wnloads EG\ProcessExplorerNt\procexp.exe
E:\WINDOWS\explorer.exe
E:\Documents and Settings\GAMES\Desktop\D0wnloads EG\RootkitRevealer\RootkitRevealer.exe
E:\DOCUME~1\GAMES\LOCALS~1\Temp\JRHTU.exe
E:\Program Files\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
F2 - REG:system.ini: Shell=explorer.exe
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [WinPatrol] "E:\PROGRA~1\BILLPS~1\WINPAT~1\WinPatrol.exe"
O4 - HKLM\..\Run: [SaiMfd] E:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [VrSchedule] E:\Program Files\ViRobotXP\Vrres.exe
O4 - HKLM\..\Run: [Vrmon] E:\Program Files\ViRobotXP\vrmonnt.exe Main
O4 - HKLM\..\Run: [VrBootScan] E:\Program Files\ViRobotXP\VRBScan.exe
O4 - HKLM\..\Run: [RCScheduleCheck] E:\Program Files\VCOM\Recovery Commander\RCSCHED.EXE -CHECK
O4 - HKLM\..\Run: [Fix-It AV] E:\PROGRA~1\VCOM\Fix-It\MemCheck.exe
O4 - HKLM\..\Run: [Profiler] E:\Program Files\Saitek\Software\ProfilerU.exe
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NVRaidService] E:\WINDOWS\system32\nvraidservice.exe
O4 - HKCU\..\Run: [DS Clock] "J:\Program Files\DS Clock\dsclock.exe"
O8 - Extra context menu item: Download all with Free Download Manager - file://E:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://E:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site with Free Download Manager - file://E:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Download with Free Download Manager - file://E:\Program Files\Free Download Manager\dllink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1144797185875
O18 - Protocol: AutorunsDisabled - (no CLSID) - (no file)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - E:\WINDOWS\system32\brsvc01a.exe
O23 - Service: CachemanXP (CachemanXPService) - OuterTechnologies - E:\PROGRA~1\CACHEM~1\CachemanXP.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - E:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: JRHTU - Sysinternals - www.sysinternals.com - E:\DOCUME~1\GAMES\LOCALS~1\Temp\JRHTU.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - E:\Program Files\SiSoftware\SiSoftware Sandra Lite 2007\RpcSandraSrv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: ViRobot Expert Monitoring (vrmonsvc) - HAURI - E:\Program Files\ViRobotXP\vrmonsvc.exe
Logfile of HijackThis v1.99.1
Scan saved at 11:42:11 AM, on 8/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\Windows Defender\MsMpEng.exe
E:\WINDOWS\system32\svchost.exe
E:\PROGRA~1\CACHEM~1\CachemanXP.exe
E:\WINDOWS\explorer.exe
E:\Program Files\ewido anti-spyware 4.0\guard.exe
E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
E:\Program Files\ViRobotXP\vrmonsvc.exe
E:\PROGRA~1\BILLPS~1\WINPAT~1\WinPatrol.exe
E:\Program Files\Saitek\Software\SaiMfd.exe
E:\Program Files\ViRobotXP\vrmonnt.exe
E:\Program Files\Saitek\Software\ProfilerU.exe
E:\WINDOWS\SOUNDMAN.EXE
E:\WINDOWS\system32\nvraidservice.exe
J:\Program Files\DS Clock\dsclock.exe
E:\WINDOWS\system32\wbem\unsecapp.exe
E:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe
E:\PROGRA~1\FREEDO~1\fdm.exe
E:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
E:\WINDOWS\system32\svchost.exe
E:\DOCUME~1\GAMES\LOCALS~1\Temp\7zO8.tmp\A64Info.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Documents and Settings\GAMES\Desktop\D0wnloads EG\ProcessExplorerNt\procexp.exe
E:\WINDOWS\explorer.exe
E:\Documents and Settings\GAMES\Desktop\D0wnloads EG\RootkitRevealer\RootkitRevealer.exe
E:\DOCUME~1\GAMES\LOCALS~1\Temp\JRHTU.exe
E:\Program Files\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
F2 - REG:system.ini: Shell=explorer.exe
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [WinPatrol] "E:\PROGRA~1\BILLPS~1\WINPAT~1\WinPatrol.exe"
O4 - HKLM\..\Run: [SaiMfd] E:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [VrSchedule] E:\Program Files\ViRobotXP\Vrres.exe
O4 - HKLM\..\Run: [Vrmon] E:\Program Files\ViRobotXP\vrmonnt.exe Main
O4 - HKLM\..\Run: [VrBootScan] E:\Program Files\ViRobotXP\VRBScan.exe
O4 - HKLM\..\Run: [RCScheduleCheck] E:\Program Files\VCOM\Recovery Commander\RCSCHED.EXE -CHECK
O4 - HKLM\..\Run: [Fix-It AV] E:\PROGRA~1\VCOM\Fix-It\MemCheck.exe
O4 - HKLM\..\Run: [Profiler] E:\Program Files\Saitek\Software\ProfilerU.exe
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NVRaidService] E:\WINDOWS\system32\nvraidservice.exe
O4 - HKCU\..\Run: [DS Clock] "J:\Program Files\DS Clock\dsclock.exe"
O8 - Extra context menu item: Download all with Free Download Manager - file://E:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://E:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site with Free Download Manager - file://E:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Download with Free Download Manager - file://E:\Program Files\Free Download Manager\dllink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: e:\windows\system32\nvappfilter.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1144797185875
O18 - Protocol: AutorunsDisabled - (no CLSID) - (no file)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - E:\WINDOWS\system32\brsvc01a.exe
O23 - Service: CachemanXP (CachemanXPService) - OuterTechnologies - E:\PROGRA~1\CACHEM~1\CachemanXP.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - E:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: JRHTU - Sysinternals - www.sysinternals.com - E:\DOCUME~1\GAMES\LOCALS~1\Temp\JRHTU.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - E:\Program Files\SiSoftware\SiSoftware Sandra Lite 2007\RpcSandraSrv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: ViRobot Expert Monitoring (vrmonsvc) - HAURI - E:\Program Files\ViRobotXP\vrmonsvc.exe