Logfile of HijackThis v1.99.1

Scan saved at 10:02:03 AM, on 8/22/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)



Running processes:

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\csrss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\system32\spoolsv.exe

E:\Program Files\Network Associates\VirusScan\mcshield.exe

E:\Program Files\Network Associates\VirusScan\vstskmgr.exe

E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

E:\WINDOWS\System32\svchost.exe

E:\Program Files\Tivoli\TSM\baclient\dsmcsvc.exe

E:\WINDOWS\System32\wdfmgr.exe

E:\WINDOWS\system32\drwatsn.exe

E:\WINDOWS\System32\alg.exe

E:\Program Files\Network Associates\VirusScan\SHSTAT.EXE

E:\Program Files\Network Associates\Common Framework\UpdaterUI.exe

E:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe

E:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

E:\Program Files\Analog Devices\Core\smax4pnp.exe

E:\WINDOWS\system32\Rtvcan.exe

E:\WINDOWS\system32\ctfmon.exe

E:\Program Files\Messenger\msmsgs.exe

E:\Program Files\Adobe\Acrobat 7.0\Distillr\acrotray.exe

E:\Program Files\SAS\SAS 9.1\sas.exe

E:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE

E:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe

E:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe

E:\WINDOWS\system32\rundll32.exe

E:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE

E:\WINDOWS\explorer.exe

E:\HijackThis.exe



F2 - REG:system.ini: UserInit=E:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\lncdnbl.exe

O2 - BHO: internet explorer helper - {02C9B9AB-6372-46C5-B356-773FAF3B6B1E} - E:\WINDOWS\fonts\msshapi.dll (file missing)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: MonitorURL Class - {08A312BB-5409-49FC-9347-54BB7D069AC6} - E:\PROGRA~1\DESKAD~1\deskipn.dll (file missing)

O2 - BHO: CAISHOW TOOLBAR - {3AF40CB8-B3BA-4E2D-8968-4BF8DB172997} - E:\Program Files\CaiShow Tech\CaiShow\BrowerHelper.dll

O2 - BHO: ÍøÂç¼ÓËÙ - {5673A7C0-95CC-4646-BB07-3BD71234CEF9} - E:\WINDOWS\system32\wuwebex.dll

O2 - BHO: ActiveBHO Class - {63C55A7F-6E29-8D4F-5C76-4F850F28D13A} - C:\Progra~1\DoDoorRSSFinder\ActiveBandObject.dll

O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - E:\PROGRA~1\MMSASS~1\mmsass~1.dll

O2 - BHO: MSHlper Class - {721E6521-4CAD-4A8D-A7F1-4E230B31EF19} - E:\WINDOWS\system32\MSHLP.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: CpapView Class - {77962960-536E-47EC-9DDB-52651519705F} - E:\WINDOWS\system32\Rundl132.dll

O2 - BHO: Spoolsv Class - {9C363D55-07D7-433d-A13E-D9C105202F6F} - C:\WINDOWS\system32\drivers\spoolsv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - e:\program files\google\googletoolbar1.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: Java Enhancer - {AF098F95-7CEA-407A-8552-3846737CC4B2} - E:\WINDOWS\system32\contwin.dll

O2 - BHO: RealPlayer Control - {BDBFE1F2-14C7-42D3-ACC7-4C2757F27F55} - E:\WINDOWS\system32\RMOC3360.DLL

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - e:\program files\google\googletoolbar1.dll

O4 - HKLM\..\Run: [ShStatEXE] "E:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE

O4 - HKLM\..\Run: [McAfeeUpdaterUI] "E:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey

O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "E:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"

O4 - HKLM\..\Run: [SunJavaUpdateSched] E:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [SoundMAXPnP] E:\Program Files\Analog Devices\Core\smax4pnp.exe

O4 - HKLM\..\Run: [MSService_v1.0] E:\WINDOWS\system\realsched.exe

O4 - HKLM\..\Run: [Rtvcan] E:\WINDOWS\system32\Rtvcan.exe

O4 - HKLM\..\Run: [spoolsv] E:\WINDOWS\system32\spoolsv\spoolsv.exe -printer

O4 - HKLM\..\Run: [ourmini] E:\WINDOWS\System\svchost.exe

O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\RunOnce: [BaigooUninstall] cmd /c rd /s /q E:\PROGRA~1\baigoo

O4 - HKLM\..\RunOnce: [NSIS.Library.RegTool.v2] "E:\WINDOWS\System32\NSIS.Library.RegTool.v2.0.exe" /S

O4 - HKLM\..\RunOnce: [AAW] "E:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe" "+b1"

O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MyShares] e:\program Files\Ò×»¢\MyShares.exe /tray

O4 - HKCU\..\Run: [caishowmanage] E:\Program Files\CaiShow Tech\CaiShow\UpdateManager.EXE

O4 - HKCU\..\Run: [msnnt] E:\WINDOWS\Updateb.exe

O4 - HKCU\..\Run: [MSMSGS] "E:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [sys001] C:\windows\rundll32.exe

O8 - Extra context menu item: &Google Search - res://e:\program files\google\GoogleToolbar1.dll/cmsearch.html

O8 - Extra context menu item: &Translate English Word - res://e:\program files\google\GoogleToolbar1.dll/cmwordtrans.html

O8 - Extra context menu item: >>²ÊÐÅ·¢ËÍ<< - res://E:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm

O8 - Extra context menu item: Backward Links - res://e:\program files\google\GoogleToolbar1.dll/cmbacklinks.html

O8 - Extra context menu item: Cached Snapshot of Page - res://e:\program files\google\GoogleToolbar1.dll/cmcache.html

O8 - Extra context menu item: Convert link target to Adobe PDF - res://E:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - res://E:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - res://E:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - res://E:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - res://E:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - res://E:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - res://E:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert to existing PDF - res://E:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Similar Pages - res://e:\program files\google\GoogleToolbar1.dll/cmsimilar.html

O8 - Extra context menu item: Translate Page into English - res://e:\program files\google\GoogleToolbar1.dll/cmtrans.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - E:\Program Files\Microsoft ActiveSync\inetrepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - E:\Program Files\Microsoft ActiveSync\inetrepl.dll

O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - E:\Program Files\Microsoft ActiveSync\inetrepl.dll

O9 - Extra button: ¿áÈÈÓ°Òô - {7D73FF86-05F1-39ed-C850-A423120EC338} - www.kuree.com/index.htm?id=00011001 (file missing)

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1129912036527

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = cougarnet.uh.edu

O17 - HKLM\Software\..\Telephony: DomainName = cougarnet.uh.edu

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = cougarnet.uh.edu

O20 - Winlogon Notify: WgaLogon - E:\WINDOWS\SYSTEM32\WgaLogon.dll

O21 - SSODL: webwork - {4C611512-2C1D-44b2-A044-872AD2AD5A61} - E:\WINDOWS\webwork\webwork.dll

O21 - SSODL: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - (no file)

O21 - SSODL: thememms - {73C98DB8-ADF3-40a3-A83D-2F1281126B91} - E:\WINDOWS\system32\thememms.dll

O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - E:\Program Files\Network Associates\Common Framework\FrameworkService.exe

O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - E:\Program Files\Network Associates\VirusScan\mcshield.exe

O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - E:\Program Files\Network Associates\VirusScan\vstskmgr.exe

O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZipm12.exe

O23 - Service: TSM Scheduler - IBM Corporation - E:\Program Files\Tivoli\TSM\baclient\dsmcsvc.exe

O23 - Service: UpdateService - Unknown owner - E:\WINDOWS\system32\UpdateService.exe

O23 - Service: Windows Audio Server - Unknown owner - E:\WINDOWS\system32\drwatsn.exe