Logfile of HijackThis v1.99.1
Scan saved at 01:31:35, on 28/10/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\UAService7.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\WINDOWS\System32\services.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\user\Desktop\HijackThis.exe

F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 55.90.10.106 avp.com
O1 - Hosts: 68.160.103.226 ca.com
O1 - Hosts: 218.147.155.235 dispatch.mcafee.com
O1 - Hosts: 111.66.196.239 download.mcafee.com
O1 - Hosts: 159.176.209.211 f-secure.com
O1 - Hosts: 182.128.95.80 ftp.customer.symantec.com
O1 - Hosts: 86.184.133.112 ftp.dispatch.mcafee.com
O1 - Hosts: 34.200.126.106 ftp.download.mcafee.com
O1 - Hosts: 113.228.28.36 ftp.grisoft.com
O1 - Hosts: 132.23.13.99 ftp.liveupdate.symantec.com
O1 - Hosts: 212.250.213.1 ftp.liveupdate.symantecliveupdate.com
O1 - Hosts: 212.38.144.136 ftp.mast.mcafee.com
O1 - Hosts: 51.200.103.67 ftp.mcafee.com
O1 - Hosts: 137.227.178.169 ftp.my-etrust.com
O1 - Hosts: 211.40.192.54 ftp.networkassociates.com
O1 - Hosts: 62.50.40.128 ftp.norton.com
O1 - Hosts: 222.18.204.199 ftp.rads.mcafee.com
O1 - Hosts: 236.253.41.34 ftp.sandbox.norman.com
O1 - Hosts: 159.236.10.139 ftp.secure.nai.com
O1 - Hosts: 252.43.124.81 ftp.securityresponse.symantec.com
O1 - Hosts: 59.230.184.236 ftp.sophos.com
O1 - Hosts: 143.158.191.42 ftp.symantec.com
O1 - Hosts: 244.142.169.22 ftp.symantecliveupdate.com
O1 - Hosts: 196.2.209.244 ftp.symatec.com
O1 - Hosts: 52.176.75.70 ftp.trendmicro.com
O1 - Hosts: 136.4.236.35 ftp.uk.trendmicro-europe.com
O1 - Hosts: 150.245.68.107 ftp.update.symantec.com
O1 - Hosts: 103.93.75.148 ftp.updates.symantec.com
O1 - Hosts: 141.249.143.59 ftp.us.mcafee.com
O1 - Hosts: 32.236.180.7 ftp.viruslist.com
O1 - Hosts: 75.194.74.215 grisoft.com
O1 - Hosts: 63.158.205.224 liveupdate.symantec.com
O1 - Hosts: 83.47.193.89 liveupdate.symantecliveupdate.com
O1 - Hosts: 218.117.221.189 mast.mcafee.com
O1 - Hosts: 89.41.230.25 mcafee.com
O1 - Hosts: 21.97.44.47 networkassociates.com
O1 - Hosts: 241.77.178.73 norton.com
O1 - Hosts: 254.216.137.199 rads.mcafee.com
O1 - Hosts: 89.94.19.137 sandbox.norman.com
O1 - Hosts: 226.184.185.173 securityresponse.symantec.com
O1 - Hosts: 104.109.151.86 symantec.com
O1 - Hosts: 36.44.109.95 symantecliveupdate.com
O1 - Hosts: 235.184.126.104 trendmicro.com
O1 - Hosts: 169.215.167.249 uk.trendmicro-europe.com
O1 - Hosts: 238.174.81.181 update.symantec.com
O1 - Hosts: 181.34.179.27 updates.symantec.com
O1 - Hosts: 75.196.85.53 us.mcafee.com
O1 - Hosts: 28.165.140.156 viruslist.com
O1 - Hosts: 140.232.28.114 www.customer.symantec.com
O1 - Hosts: 81.243.130.25 www.dispatch.mcafee.com
O1 - Hosts: 176.47.9.183 www.download.mcafee.com
O1 - Hosts: 0.252.249.232 www.f-secure.com
O1 - Hosts: 103.112.26.16 www.grisoft.com
O1 - Hosts: 137.10.105.44 www.liveupdate.symantec.com
O1 - Hosts: 23.79.24.116 www.liveupdate.symantecliveupdate.com
O1 - Hosts: 251.148.64.205 www.mast.mcafee.com
O1 - Hosts: 155.15.244.173 www.mcafee.com
O1 - Hosts: 159.165.96.152 www.networkassociates.com
O1 - Hosts: 177.246.37.51 www.norton.com
O1 - Hosts: 197.223.22.159 www.rads.mcafee.com
O1 - Hosts: 57.134.125.246 www.secure.nai.com
O1 - Hosts: 6.189.55.135 www.securityresponse.symantec.com
O1 - Hosts: 223.223.135.2 www.sophos.com
O1 - Hosts: 35.100.100.62 www.symantec.com
O1 - Hosts: 205.181.112.157 www.symantecliveupdate.com
O1 - Hosts: 201.74.188.174 www.symatec.com
O1 - Hosts: 224.2.23.13 www.trendmicro.com
O1 - Hosts: 158.53.158.105 www.uk.trendmicro-europe.com
O1 - Hosts: 78.17.151.23 www.update.symantec.com
O1 - Hosts: 74.171.40.129 www.updates.symantec.com
O1 - Hosts: 89.72.204.98 www.us.mcafee.com
O2 - BHO: Acrobat IE Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE083} - C:\WINDOWS\system\ctldlg32.dll
O2 - BHO: (no name) - {0B5F7FDF-0717-45BF-B49D-695F3168C7FE} - C:\WINDOWS\system32\admparsek.dll
O2 - BHO: (no name) - {11111111-2222-408A-9842-CDBE1C6D37EB} - C:\WINDOWS\netdde.dll
O2 - BHO: (no name) - {16875E09-927B-4494-82BD-158A1CD46BA0} - C:\WINDOWS\prflbmsgp32.dll (file missing)
O2 - BHO: C:\WINDOWS\system32\st3.dll - {1B68470C-2DEF-493B-8A4A-8E2D81BE4EA5} - C:\WINDOWS\system32\st3.dll
O2 - BHO: (no name) - {4A0DFFB1-8C30-13C1-408A-08C3E0544A8A} - C:\WINDOWS\System32\ximrzln.dll
O2 - BHO: (no name) - {5342C0A2-4266-77E6-BCB6-03967B476C6A} - C:\WINDOWS\System32\gvwwzng.dll
O2 - BHO: C:\WINDOWS\q277796.dll - {7A7E6D97-B492-4884-9ABB-C31281DCC4F2} - C:\WINDOWS\q277796.dll
O2 - BHO: C:\WINDOWS\adsldpbd.dll - {826B2228-BC09-49F2-B5F8-42CE26B1B711} - C:\WINDOWS\adsldpbd.dll (file missing)
O2 - BHO: (no name) - {8D82BB89-B58C-4F21-9C5D-377F65947806} - C:\WINDOWS\slassac.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00302} - (no file)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00303} - C:\WINDOWS\adsldpby.dll (file missing)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00304} - C:\WINDOWS\adsldpbz.dll (file missing)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00305} - C:\WINDOWS\system32\compstuia.dll (file missing)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00306} - C:\WINDOWS\compstuib.dll (file missing)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00309} - C:\WINDOWS\system32\compstuid.dll (file missing)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00320} - C:\WINDOWS\compstuif.dll (file missing)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00401} - C:\WINDOWS\system32\fontexta.dll (file missing)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00402} - C:\WINDOWS\system32\fontextb.dll
O2 - BHO: C:\WINDOWS\adsldpbc.dll - {C69ED6B3-3228-4F4F-9477-328A7D509216} - C:\WINDOWS\adsldpbc.dll (file missing)
O2 - BHO: (no name) - {DA223E41-3F7F-4B2B-8CC8-22C6A1197EEB} - C:\WINDOWS\mpatrol.dll
O2 - BHO: (no name) - {DF00FFA0-AEA9-4EA8-A10F-8BB9A7F8508C} - C:\WINDOWS\system32\adsldpbm.dll (file missing)
O2 - BHO: (no name) - {EEE7178C-BBC3-4153-9DDE-CD0E9AB1B5B6} - (no file)
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SDetect.exe] C:\WINDOWS\Twain_32\ScanWiz5\SDetect.exe
O4 - HKLM\..\Run: [C-Media Speaker Configuration] C:\PROGRA~1\C-Media\WIN_ME\Setup.exe /SPEAKER
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RegSvr32] C:\WINDOWS\System32\msmsgs.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WinMedia] C:\DOCUME~1\user\LOCALS~1\Temp\update13584.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Image Transfer.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Add to AMV Convert Tool… - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\user\Start Menu\Programs\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: Yahoo! MahJong - http://download.games.yahoo.com/games/clients/y/ot0_x.cab
O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by24fd.bay24.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1123676113109
O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} (Installer Class) - http://www.tbcode.com/ist/softwares/v4.0/0006_regular.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: cfgmngr32 - C:\WINDOWS\system32\hk.dll
O20 - Winlogon Notify: rpcc - C:\WINDOWS\System32\rpcc.dll
O20 - Winlogon Notify: st3 - C:\WINDOWS\system32\st3.dll
O20 - Winlogon Notify: style32 - C:\WINDOWS\q277796.dll
O20 - Winlogon Notify: winsys2freg - C:\Documents and Settings\All Users\Documents\Settings\winsys2f.dll
O21 - SSODL: lJgropFTzszQv - {A4D658C2-0E7C-F268-3832-53249C012F33} - C:\WINDOWS\System32\lhzqv.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\System32\UAService7.exe






I think it's some spywares but I'm not sure how to go about it. Need help urgently.. thanks alot