Logfile of HijackThis v1.99.1 Scan saved at 11:04:04 AM, on 12/5/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\inet20000\services.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\sysvx_.exe C:\frjrp.exe C:\WINDOWS\System32\cmd32.exe C:\WINDOWS\System32\kernels1118.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\inet20000\wpcem.exe C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe C:\WINDOWS\system32\spoolsv.exe C:\DOCUME~1\Kristie\LOCALS~1\Temp\NnmGLqrfg C:\WINDOWS\System32\services.exe C:\WINDOWS\System32\IFXSPMGT.exe C:\WINDOWS\System32\msasvc.exe C:\Program Files\Broadcom\Security Platform Software\PSDsrvc.EXE C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\PROGRA~1\VCOM\SYSTEM~1\MXTask.exe C:\PROGRA~1\VCOM\SYSTEM~1\mxtask.exe C:\WINDOWS\System32\z13.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\z16.exe C:\WINDOWS\System32\sysvx.exe C:\WINDOWS\System32\w.exe.exe C:\WINDOWS\inet20000\wpcem.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\wpabaln.exe C:\Program Files\Internet Explorer\iexplore.exe c:\progra~1\intern~1\iexplore.exe C:\WINDOWS\System32\svchost.exe C:\Documents and Settings\Kristie\Desktop\HijackThis.exe F3 - REG:win.ini: run=C:\WINDOWS\inet20000\services.exe O4 - HKLM\..\Run: [IfxSecurePlatformIndication] C:\Program Files\Broadcom\Security Platform Software\SpTNA.exe O4 - HKLM\..\Run: [PSDruntime] C:\Program Files\Broadcom\Security Platform Software\PSDrt.EXE O4 - HKLM\..\Run: [WINDOWS] C:\frjrp.exe O4 - HKLM\..\Run: [sysvx] C:\WINDOWS\sysvx_.exe O4 - HKLM\..\Run: [Nord] C:\WINDOWS\System32\nordsys.exe O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\System32\cmd32.exe internat.dll,LoadKeyboardProfile O4 - HKLM\..\Run: [xp_system] C:\WINDOWS\inet20000\services.exe O4 - HKLM\..\Run: [System] C:\WINDOWS\System32\kernels1118.exe O4 - HKLM\..\Run: [Microsoft WPCEmail] C:\WINDOWS\inet20000\svchost.exe O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe O4 - HKCU\..\Run: [Nord] C:\WINDOWS\System32\nordsys.exe O4 - HKCU\..\Run: [xp_system] C:\WINDOWS\inet20000\services.exe O4 - HKCU\..\Run: [WinMedia] C:\WINDOWS\System32\z243937811500.exe O20 - Winlogon Notify: rpcc - C:\WINDOWS\System32\rpcc.dll O21 - SSODL: DnJlFmZnDH - {50F46BC6-FA5E-C16C-ED5B-F46C721038B5} - C:\WINDOWS\System32\dcsrs.dll O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\WINDOWS\System32\IFXSPMGT.exe O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\WINDOWS\System32\IFXTCS.exe O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\System32\msasvc.exe O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Broadcom - C:\Program Files\Broadcom\Security Platform Software\PSDsrvc.EXE O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: SystemSuite Task Manager - Avanquest Publishing USA, Inc. - C:\PROGRA~1\VCOM\SYSTEM~1\MXTask.exe O23 - Service: Intel® PROSet/Wireless SSO Service (WLANKEEPER) - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe