This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

HJT file given , help me to remove viruses and malware

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

hi , —————————————————————- Logfile of HijackThis v1.99.1 Scan saved at 15:45:23, on 10/27/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\ishost.exe C:\WINDOWS\System32\ismini.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\System32\cmd32.exe C:\Program Files\Common Files\{288601B9-01F5-1033-0313-00120219002c}\Update.exe C:\Program Files\Internet Explorer\iexplore.exe E:\free Softwares\Freewares\AnitiVirus\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: localhost 127.0.0.1 O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: ToolBar888 - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{388601B9-01F5-1033-0313-00120219002c}\MyToolBar.dll O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [ScanSoft Product Registration Reminder] :"C:\Program Files\ScanSoft\OmniPageSE\EregEng\NAVBrowser.exe" /r /i "C:\Program Files\ScanSoft\OmniPageSE\EregEng\NavLoad.ini" O4 - HKLM\..\Run: [iCall Internet Phone] :"C:\Program Files\iCall\iCall.exe" O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\WINDOWS\System32\drvrif.dll,startup O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\System32\cmd32.exe internat.dll,LoadKeyboardProfile O4 - HKCU\..\Run: [msnmsgr] :"C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Yahoo! Pager] :"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [BitTorrent] :"C:\Program Files\BitTorrent\bittorrent.exe" –force_start_minimized O8 - Extra context menu item: + &Download Express: download this file - C:\Program Files\Download Express\Add_Url.htm O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{022734BB-C581-4378-B275-9A3C7BC28E29}: NameServer = 85.255.115.75,85.255.112.139 O17 - HKLM\System\CCS\Services\Tcpip\..\{A632C72F-4535-41B4-8DF1-0DFFCE14BB7B}: NameServer = 192.168.11.1,203.153.34.190 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.75 85.255.112.139 O17 - HKLM\System\CS1\Services\Tcpip\..\{022734BB-C581-4378-B275-9A3C7BC28E29}: NameServer = 85.255.115.75,85.255.112.139 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.75 85.255.112.139 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - AppInit_DLLs: c:\windows\system32\ldcore.dll O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe ————————————————————- looking for help soon, Mogun.
Your post has been Moved, Closed or Edited for one of the following reasons:

1.) You posted multiple topics and only one is required

2.) You are spamming links to other places without approval

3.) You have posted your hijackthis log to the wrong forum:
( http://forums.whatthetech.com/HijackThis_L…emoval_f27.html ) <— correct forum for HijackThis Logs

4.) Abusive language or other problems in your text

5.) Your log is too old (20 days or more) and no replies from you after a volunteer tried to help you

If you came here for help, and you have not posted a Hijackthis log to the proper forum, then you may do so now, if you came here to spam or abuse, you will be dealt with harsher on your next offense

This is a family oriented forum to help those that need help.

==============================

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI