Time for another check

OK the internet is slow and my comp is running slow again….
so i did another check its been about 8 months since the last one so
please help

Logfile of HijackThis v1.99.1
Scan saved at 1:28:25 PM, on 11/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Executive Software\DiskeeperLite\DKService.exe
C:\WINDOWS\Explorer.EXE
F:\Program Files\DAEMON Tools\daemon.exe
F:\Program Files\PowerISO\PWRISOVM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\conime.exe
F:\utorrent.exe
C:\WINDOWS\KukiProc110.exe
F:\hijackthis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [DAEMON Tools] "f:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [PWRISOVM.EXE] "f:\Program Files\PowerISO\PWRISOVM.EXE"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] F:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - F:\Program Files\AIM\aim.exe
O16 - DPF: {00001022-A15C-11D4-97A4-0050BF0FBE67} (NetmarbleStarter22 Class) - http://download.netmarble.com/web/nmstarter/NMStarter22.cab
O16 - DPF: {00001023-A15C-11D4-97A4-0050BF0FBE67} (NetmarbleStarter23 Class) - http://download.netmarble.com/web/nmstarter/NMStarter23.cab
O16 - DPF: {04E7BADF-F3B9-420D-B82D-8D8CADEFE4F9} (CyImage2Ctl Class) - http://cyimg5.cyworld.nate.com/ImageUpload…mageUpload2.cab
O16 - DPF: {072039AB-2117-4ED5-A85F-9B9EB903E021} (NowStarter Control) - http://www.clubbox.co.kr/neo.fld/NowStarter.cab
O16 - DPF: {0DD4ADBE-E91D-48CC-9A04-87EA1674E385} (PerfTestClient) - http://gamer.ubicom.com/benchmarks/PerfTes…oj_20060127.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2931566C-B8A6-46C5-BF4D-E6AB9251E953} (Nexon Package Manager Control) - http://file.nx.com/activex/public_new/nxpm.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.1.2.76.cab
O16 - DPF: {3F55AB01-C44D-42D5-8970-92D5CC66E8D4} (Skopi_cyworldimage Control) - http://cyimg7.cyworld.nate.com/photoPrint/…yworldimage.cab
O16 - DPF: {68253470-5D4F-4CDF-8D9C-353C14A2F013} (SVPorsche Control) - http://img.yahoo.co.kr/multi/2005/tool/pla…6/SVPorsche.cab
O16 - DPF: {8FA141C5-29D7-4408-A57B-619C463ED7BB} (Cychannel_Club1_10.UserControl1) - http://club.cyworld.nate.com/cychannel_clu…lubmain1_11.CAB
O16 - DPF: {92E82FBB-DA00-41E0-ABFE-95482E21A4F6} (NMTransX Module) - http://download.netmarble.com/NMChatX/NMTransX.cab
O16 - DPF: {A5F3B5CF-A05F-479E-B684-13AA512A7B93} (YGLauncher Control) - http://kr.pubbase.yahoo.com/gamesetup/YGLauncher.cab
O16 - DPF: {A671DC03-71D0-4CF0-895C-7D4A248FC1F1} (skcbgmset Class) - http://cyimg7.cyworld.nate.com/cymusic/package/skcbgmset.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {B81CB889-C7A7-4CF0-B34F-54B3F94BCAD9} (OpenBIRD pcBrowser Control) - http://www.ezdrive.net/ezbrowser/pcbrowser…rowser_v142.cab
O16 - DPF: {BE319D04-18BD-4B34-AECC-EE7CB610FCA9} (BewitchedGameClass Control) - http://download.games.yahoo.com/games/web_…itched/main.cab
O16 - DPF: {E34B9A43-BC77-4C42-845C-04E49BADD7AA} (Skopi_ReplyFancy Control) - http://cyimg7.cyworld.nate.com/photoPrint/…_ReplyFancy.cab
O16 - DPF: {E78928A6-3D2A-4BF7-A100-F3FBAA351B49} (KvpIspCtlD Control) - https://www.vpay.co.kr/kvpfiles/KVPISPCTLD.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - F:\Program Files\Executive Software\DiskeeperLite\DKService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe

thanks in advance

ok here it is avg first
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

A V G A n t i - S p y w a r e - S c a n R e p o r t

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



+ C r e a t e d a t : 1 1 : 0 5 : 4 3 P M 1 1 / 2 5 / 2 0 0 6



+ S c a n r e s u l t :







F : \ ??? X? 幷 婉 늚 ? 뚅 ???\ [ 1 1 ] ??? 쵊? 淺뵴 ?? 稗㉦ ???\ W L F 淺뵴 ?못?? V o c a b u l a r y
???낏? e x e / C D _ G i f . d l l - > A d w a r e . C y d o o r : C l e a n e d w i t h b a c k u p ( q u a r a n t i n e d ) .

F : \ ??? X? 幷 婉 늚 ? 뚅 ???\ [ 1 1 ] ??? 쵊? 淺뵴 ?? 稗㉦ ???\ W L F 淺뵴 ?못?? V o c a b u l a r y
???낏? e x e / c d _ c l i n t . d l l - > A d w a r e . C y d o o r : C l e a n e d w i t h b a c k u p ( q u a r a n t i n e d ) .

F : \ ??? X? 幷 婉 늚 ? 뚅 ???\ [ 1 1 ] ??? 쵊? 淺뵴 ?? 稗㉦ ???\ W L F 淺뵴 ?못?? V o c a b u l a r y
???낏? e x e / c d _ l o a d . e x e - > A d w a r e . C y d o o r : C l e a n e d w i t h b a c k u p ( q u a r a n t i n e d ) .

C : \ W I N D O W S \ s y s t e m 3 2 \ n o v a g s u n . e x e - > A d w a r e . D i g i t a l N a m e s : C l e a n e d w i t h b a c k u p ( q u a r a n t i n e d ) .

H K U \ S - 1 - 5 - 2 1 - 8 5 4 2 4 5 3 9 8 - 1 1 7 6 0 9 7 1 0 - 6 8 2 0 0 3 3 3 0 - 1 0 0 3 \ S o f t w a r e \ T r u s t I n - > A d w a r e . G e n e r i c : C l e a n e d w i t h b a c k u p ( q u a r a n t i n e d ) .

H K U \ S - 1 - 5 - 2 1 - 8 5 4 2 4 5 3 9 8 - 1 1 7 6 0 9 7 1 0 - 6 8 2 0 0 3 3 3 0 - 1 0 0 3 \ S o f t w a r e \ T r u s t I n \ W e e k l y E x e c u t e r - > A d w a r e . G e n e r i c : C l e a n e d w i t h b a c k u p ( q u a r a n t i n e d ) .

F : \ P r o g r a m F i l e s \ S h a r e a z a \ d o w n l o a d s \ w w w . f r e e w a r e z . t o m a h j o n g e s c a p e 1 0 5 . z i p / i n s t a l l . e x e - > H i j a c k e r . A g e n t . h i : C l e a n e d w i t h b a c k u p ( q u a r a n t i n e d ) .

: m o z i l l a . 6 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ M o z i l l a \ F i r e f o x \ P r o f i l e s \ i i 7 k a k l e . d e f a u l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . 2 o 7 : C l e a n e d .

: m o z i l l a . 5 0 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . A d b r i t e : C l e a n e d .

: m o z i l l a . 5 3 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . A d b r i t e : C l e a n e d .

: m o z i l l a . 7 9 3 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . A d d y n a m i x : C l e a n e d .

: m o z i l l a . 9 3 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . A d t e c h : C l e a n e d .

: m o z i l l a . 9 4 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . A d t e c h : C l e a n e d .

: m o z i l l a . 4 2 4 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . A d v e r t i s i n g : C l e a n e d .

: m o z i l l a . 4 2 5 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . A d v e r t i s i n g : C l e a n e d .

: m o z i l l a . 4 2 6 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . A d v e r t i s i n g : C l e a n e d .

: m o z i l l a . 4 2 7 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . A d v e r t i s i n g : C l e a n e d .

: m o z i l l a . 8 6 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . A t d m t : C l e a n e d .

: m o z i l l a . 4 8 7 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . B l u e s t r e a k : C l e a n e d .

: m o z i l l a . 6 8 0 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . C a s a l e m e d i a : C l e a n e d .

: m o z i l l a . 6 8 2 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . C a s a l e m e d i a : C l e a n e d .

: m o z i l l a . 6 8 3 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . C a s a l e m e d i a : C l e a n e d .

: m o z i l l a . 7 3 2 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . C l i c k h y p e : C l e a n e d .

: m o z i l l a . 3 2 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . D o u b l e c l i c k : C l e a n e d .

: m o z i l l a . 6 1 6 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . E u r o c l i c k : C l e a n e d .

: m o z i l l a . 3 2 2 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . F a s t c l i c k : C l e a n e d .

: m o z i l l a . 3 2 3 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . F a s t c l i c k : C l e a n e d .

: m o z i l l a . 2 7 3 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . M e d i a p l e x : C l e a n e d .

: m o z i l l a . 2 7 8 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . P o i n t r o l l : C l e a n e d .

: m o z i l l a . 2 7 9 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . P o i n t r o l l : C l e a n e d .

: m o z i l l a . 2 8 0 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . P o i n t r o l l : C l e a n e d .

: m o z i l l a . 2 8 1 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . P o i n t r o l l : C l e a n e d .

: m o z i l l a . 6 7 7 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . Q u e s t i o n m a r k e t : C l e a n e d .

: m o z i l l a . 6 7 8 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . Q u e s t i o n m a r k e t : C l e a n e d .

: m o z i l l a . 2 8 2 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . S e r v i n g - s y s : C l e a n e d .

: m o z i l l a . 2 8 3 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . S e r v i n g - s y s : C l e a n e d .

: m o z i l l a . 2 8 4 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . S e r v i n g - s y s : C l e a n e d .

: m o z i l l a . 2 8 5 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . S e r v i n g - s y s : C l e a n e d .

: m o z i l l a . 2 8 6 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . S e r v i n g - s y s : C l e a n e d .

: m o z i l l a . 6 7 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T a c o d a : C l e a n e d .

: m o z i l l a . 6 8 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T a c o d a : C l e a n e d .

: m o z i l l a . 6 9 3 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T r a f f i c m p : C l e a n e d .

: m o z i l l a . 6 9 4 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T r a f f i c m p : C l e a n e d .

: m o z i l l a . 6 9 5 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T r a f f i c m p : C l e a n e d .

: m o z i l l a . 6 9 6 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T r a f f i c m p : C l e a n e d .

: m o z i l l a . 6 9 7 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T r a f f i c m p : C l e a n e d .

: m o z i l l a . 6 9 8 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T r a f f i c m p : C l e a n e d .

: m o z i l l a . 6 9 9 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T r a f f i c m p : C l e a n e d .

: m o z i l l a . 2 2 6 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T r i b a l f u s i o n : C l e a n e d .

: m o z i l l a . 7 5 6 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . T r i b a l f u s i o n : C l e a n e d .

: m o z i l l a . 2 1 2 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . Y i e l d m a n a g e r : C l e a n e d .

: m o z i l l a . 2 1 3 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . Y i e l d m a n a g e r : C l e a n e d .

: m o z i l l a . 7 9 2 : C : \ D o c u m e n t s a n d S e t t i n g s \ A l u c a r D \ A p p l i c a t i o n D a t a \ K - M e l e o n \ d e f a u l t \ r d v p 4 f 3 1 . s l t \ c o o k i e s . t x t - > T r a c k i n g C o o k i e . Z e d o : C l e a n e d .

C : \ W I N D O W S \ 3 d . e x e - > T r o j a n . S m a l l . j s : C l e a n e d w i t h b a c k u p ( q u a r a n t i n e d ) .





: : R e p o r t e n d

now the hjt log
Logfile of HijackThis v1.99.1
Scan saved at 11:12:54 PM, on 11/25/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
g:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
F:\Program Files\Executive Software\DiskeeperLite\DKService.exe
C:\WINDOWS\Explorer.EXE
F:\Program Files\DAEMON Tools\daemon.exe
F:\Program Files\PowerISO\PWRISOVM.EXE
G:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmplayer.exe
F:\hijackthis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [DAEMON Tools] "f:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [PWRISOVM.EXE] "f:\Program Files\PowerISO\PWRISOVM.EXE"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "G:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - F:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00001022-A15C-11D4-97A4-0050BF0FBE67} (NetmarbleStarter22 Class) - http://download.netmarble.com/web/nmstarter/NMStarter22.cab
O16 - DPF: {00001023-A15C-11D4-97A4-0050BF0FBE67} (NetmarbleStarter23 Class) - http://download.netmarble.com/web/nmstarter/NMStarter23.cab
O16 - DPF: {04E7BADF-F3B9-420D-B82D-8D8CADEFE4F9} (CyImage2Ctl Class) - http://cyimg5.cyworld.nate.com/ImageUpload…mageUpload2.cab
O16 - DPF: {072039AB-2117-4ED5-A85F-9B9EB903E021} (NowStarter Control) - http://www.clubbox.co.kr/neo.fld/NowStarter.cab
O16 - DPF: {0DD4ADBE-E91D-48CC-9A04-87EA1674E385} (PerfTestClient) - http://gamer.ubicom.com/benchmarks/PerfTes…oj_20060127.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.1.2.76.cab
O16 - DPF: {3F55AB01-C44D-42D5-8970-92D5CC66E8D4} (Skopi_cyworldimage Control) - http://cyimg7.cyworld.nate.com/photoPrint/…yworldimage.cab
O16 - DPF: {8FA141C5-29D7-4408-A57B-619C463ED7BB} (Cychannel_Club1_10.UserControl1) - http://club.cyworld.nate.com/cychannel_clu…lubmain1_11.CAB
O16 - DPF: {92E82FBB-DA00-41E0-ABFE-95482E21A4F6} (NMTransX Module) - http://download.netmarble.com/NMChatX/NMTransX.cab
O16 - DPF: {A671DC03-71D0-4CF0-895C-7D4A248FC1F1} (skcbgmset Class) - http://cyimg7.cyworld.nate.com/cymusic/package/skcbgmset.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {B81CB889-C7A7-4CF0-B34F-54B3F94BCAD9} (OpenBIRD pcBrowser Control) - http://www.ezdrive.net/ezbrowser/pcbrowser…rowser_v142.cab
O16 - DPF: {E34B9A43-BC77-4C42-845C-04E49BADD7AA} (Skopi_ReplyFancy Control) - http://cyimg7.cyworld.nate.com/photoPrint/…_ReplyFancy.cab
O16 - DPF: {E78928A6-3D2A-4BF7-A100-F3FBAA351B49} (KvpIspCtlD Control) - https://www.vpay.co.kr/kvpfiles/KVPISPCTLD.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - g:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - F:\Program Files\Executive Software\DiskeeperLite\DKService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe

can i erase the (file missing) things on htj?
^^ thanks in advance