HI Dear Team, This the hijack logfile of my computer.. It is running slow nowadays despite running virus scans. Internet page usually shows not respomding in the task manager and the computer hangs. Please assist me resolve this. Warm Regards, Vimal Logfile of HijackThis v1.99.1 Scan saved at 8:13:26 PM, on 12/14/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\brsvc01a.exe D:\WINDOWS\system32\brss01a.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe D:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe D:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe D:\PROGRA~1\Grisoft\AVG7\avgemc.exe D:\WINDOWS\system32\Brmfrmps.exe D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe D:\WINDOWS\System32\nvsvc32.exe D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\Explorer.EXE D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\HIJACK\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp/def…/search/ie.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/def…//www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/def…//www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo! R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O1 - Hosts: 205.209.153.86 lloydstsb.co.uk O1 - Hosts: 205.209.153.86 www.lloydstsb.co.uk O1 - Hosts: 205.209.153.86 www.lloydstsb.com O1 - Hosts: 205.209.153.86 personal.barclays.co.uk O1 - Hosts: 205.209.153.86 barclays.co.uk O1 - Hosts: 205.209.153.86 www.barclays.co.uk O1 - Hosts: 205.209.153.86 nwolb.com O1 - Hosts: 205.209.153.86 hsbc.co.uk O1 - Hosts: 205.209.153.86 www.hsbc.co.uk O1 - Hosts: 205.209.153.86 abbey.com O1 - Hosts: 205.209.153.86 www.abbey.com O1 - Hosts: 205.209.153.86 www.abbey.co.uk O1 - Hosts: 205.209.153.86 abbey.co.uk O1 - Hosts: 205.209.153.86 cahoot.com O1 - Hosts: 205.209.153.86 www.cahoot.com O1 - Hosts: 205.209.153.86 www.cahoot.co.uk O1 - Hosts: 205.209.153.86 cahoot.co.uk O1 - Hosts: 205.209.153.86 www.co-operativebank.co.uk O1 - Hosts: 205.209.153.86 co-operativebank.co.uk O1 - Hosts: 205.209.153.86 www.co-operativebank.com O1 - Hosts: 205.209.153.86 co-operativebank.com O1 - Hosts: 205.209.153.86 welcome2.co-operativebankonline.co.uk O1 - Hosts: 205.209.153.86 welcome6.co-operativebankonline.co.uk O1 - Hosts: 205.209.153.86 welcome8.co-operativebankonline.co.uk O1 - Hosts: 205.209.153.86 welcome10.co-operativebankonline.co.uk O1 - Hosts: 205.209.153.86 www.smile.co.uk O1 - Hosts: 205.209.153.86 smile.co.uk O1 - Hosts: 205.209.153.86 www.cajamar.es O1 - Hosts: 205.209.153.86 cajamar.es O1 - Hosts: 205.209.153.86 www.cajamar.com O1 - Hosts: 205.209.153.86 www.unicaja.es O1 - Hosts: 205.209.153.86 unicaja.es O1 - Hosts: 205.209.153.86 www.unicaja.com O1 - Hosts: 205.209.153.86 unicaja.com O1 - Hosts: 205.209.153.86 www.caixagalicia.es O1 - Hosts: 205.209.153.86 caixagalicia.es O1 - Hosts: 205.209.153.86 www.caixagalicia.com O1 - Hosts: 205.209.153.86 caixagalicia.com O1 - Hosts: 205.209.153.86 activa.caixagalicia.es O1 - Hosts: 205.209.153.86 www.caixapenedes.es O1 - Hosts: 205.209.153.86 caixapenedes.es O1 - Hosts: 205.209.153.86 www.caixapenedes.com O1 - Hosts: 205.209.153.86 caixapenedes.com O1 - Hosts: 205.209.153.86 www.caixasabadell.es O1 - Hosts: 205.209.153.86 caixasabadell.es O1 - Hosts: 205.209.153.86 www.caixasabadell.net O1 - Hosts: 205.209.153.86 caixasabadell.net O1 - Hosts: 205.209.153.86 www.cajamadrid.es O1 - Hosts: 205.209.153.86 cajamadrid.es O1 - Hosts: 205.209.153.86 www.cajamadrid.com O1 - Hosts: 205.209.153.86 cajamadrid.com O1 - Hosts: 205.209.153.86 www.ccm.es O1 - Hosts: 205.209.153.86 ccm.es O1 - Hosts: 205.209.153.86 www.haspa.de O1 - Hosts: 205.209.153.86 haspa.de O1 - Hosts: 205.209.153.86 ssl2.haspa.de O1 - Hosts: 205.209.153.86 www.dresdner-bank.de O1 - Hosts: 205.209.153.86 dresdner-bank.de O1 - Hosts: 205.209.153.86 www.dresdner-privat.de O1 - Hosts: 205.209.153.86 postbank.de O1 - Hosts: 205.209.153.86 www.postbank.de O1 - Hosts: 205.209.153.86 www.sparda-b.de O1 - Hosts: 205.209.153.86 sparda-b.de O1 - Hosts: 205.209.153.86 www.bankingonline.de O1 - Hosts: 205.209.153.86 www.raiffeisenbank-erding.de O1 - Hosts: 205.209.153.86 raiffeisenbank-erding.de O1 - Hosts: 205.209.153.86 www.vr-networld-ebanking.de O1 - Hosts: 205.209.153.86 vr-networld-ebanking.de O1 - Hosts: 205.209.153.86 www.bnhof.de O1 - Hosts: 205.209.153.86 bnhof.de O1 - Hosts: 205.209.153.86 www.deutsche-bank.de O1 - Hosts: 205.209.153.86 deutsche-bank.de O1 - Hosts: 205.209.153.86 www.citibank.de O1 - Hosts: 205.209.153.86 citibank.de O1 - Hosts: 205.209.153.86 cipehb13.cdg.citibank.de O1 - Hosts: 205.209.153.86 www.dkb.de O1 - Hosts: 205.209.153.86 dkb.de O1 - Hosts: 205.209.153.86 www.sparkasse-regensburg.de O1 - Hosts: 205.209.153.86 sparkasse-regensburg.de O1 - Hosts: 205.209.153.86 www.berliner-bank.de O1 - Hosts: 205.209.153.86 berliner-bank.de O1 - Hosts: 205.209.153.86 www.berliner-sparkasse.de O1 - Hosts: 205.209.153.86 berliner-sparkasse.de O1 - Hosts: 203.197.24.163 www.citibank.co.in O1 - Hosts: 210.210.19.82 www.sifymall.com O2 - BHO: DownloadRedirect Class - {00000000-6CB0-410C-8C3D-8FA8D2011D0A} - blank (file missing) O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Acrobat New\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar1.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Acrobat New\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Acrobat New\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [SoundMAXPnP] D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O8 - Extra context menu item: &Yahoo! Search - file:///D:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Acrobat New\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Acrobat New\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Acrobat New\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Acrobat New\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Acrobat New\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Acrobat New\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Acrobat New\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert to existing PDF - res://C:\Acrobat New\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Yahoo! &Dictionary - file:///D:\Program Files\Yahoo!\Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///D:\Program Files\Yahoo!\Common/ycmap.htm O8 - Extra context menu item: Yahoo! &SMS - file:///D:\Program Files\Yahoo!\Common/ycsms.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - D:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - D:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Microsoft AntiSpyware helper - {963005E1-6E05-4D7D-8AB9-78F44A6024A6} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {963005E1-6E05-4D7D-8AB9-78F44A6024A6} - (no file) (HKCU) O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - D:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {459E93B6-150E-45D5-8D4B-45C66FC035FE} (get_atlcom Class) - http://apps.corel.com/nos_dl_manager_dev/p…IEGetPlugin.ocx O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m…90/mcinsctl.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1196139665671 O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {701DC9DC-ACD5-4E94-85E3-F3F1ED68611A} (CWebClientCtl Object) - http://download.paltalk.com/webclienttest/webclientctl.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…canner37390.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/…ropper1_6us.cab O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://mediamax.streamload.com/Upload/XUpload.ocx O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…529/mcfscan.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{4695802C-2E56-4591-8809-C60A1270A44E}: NameServer = 202.56.215.54,202.56.215.55 O17 - HKLM\System\CS1\Services\Tcpip\..\{4695802C-2E56-4591-8809-C60A1270A44E}: NameServer = 202.56.215.54,202.56.215.55 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - (no file) O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - D:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - (no file) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\ O21 - SSODL: DCFBDHDF - {471E72FD-3287-7EA4-3D90-0CB85A6E62EC} - (no file) O21 - SSODL: mtklefa - {6054F144-4626-4B96-EDA0-719A397BAB28} - (no file) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - D:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - D:\WINDOWS\system32\Brmfrmps.exe" -service (file missing) O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - D:\WINDOWS\system32\brsvc01a.exe O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZONELABS\vsmon.exe