[Closed] Hijack This log

Greetings!

Problem: The computer will try to defend its self by shutting down all processes and programs and go to a blue screen saying that the computer is protecting itself from malicious malware.
Reviving Process: I’ve downloaded the Malicious Virus Scanner from Microsoft and it wouldn’t work for a full scan considering the computer shuts down in a time frame of 5-20 minutes. Five minutes in regular startup mode and 20 or more minutes in safe mode with networking.
———————————————————————————————————————————————————————
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:32:27 PM, on 4/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {6860A44B-5D3E-433D-A7B5-D517F810D0E7} - C:\Program Files\NetProject\sbmdl.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
O2 - BHO: e404 helper - {DF47DD37-AC11-4A93-8E16-2B2364AF0897} - C:\Program Files\Helper\1206231092.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [PhiBtn] %SystemRoot%\System32\drivers\PhiBtn.exe
O4 - HKLM\..\Run: [Traymin900] %SystemRoot%\System32\drivers\Tray900.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SpiralFrog] C:\Program Files\SpiralFrog\Spiralfrog.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [IW Controlcenter] C:\PROGRA~1\Toshiba\INSTAN~1\IWCTRL.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [DW4] "C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: WinCinema Manager.lnk = C:\Program Files\Sandisk\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.iefixgate.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.iefixgate.com/redirect.php (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper20073151.dll
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/Facebo…toUploader3.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab
O22 - SharedTaskScheduler: depreciable - {716002db-288c-4bf0-80cd-a467e78d8b55} - C:\WINDOWS\system32\dxovx.dll (file missing)
O22 - SharedTaskScheduler: figpecker - {7d7bd0c4-4913-4933-b870-7388a7bffb82} - C:\WINDOWS\system32\lvhjtsa.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O24 - Desktop Component 0: (no name) - http://www.fomportal.com/graphics/screensh…pscreen02_m.jpg
O24 - Desktop Component 1: (no name) - http://www.underworldsk8.com/logos/emerica-shoes.gif
O24 - Desktop Component 10: (no name) - http://www.underworldsk8.com/images/decks/…board-decks.jpg
O24 - Desktop Component 11: (no name) - http://www.underworldsk8.com/images/decks/…board-decks.jpg
O24 - Desktop Component 12: (no name) - http://www.underworldsk8.com/images/decks/…board-decks.jpg
O24 - Desktop Component 13: (no name) - http://www.underworldsk8.com/images/decks/…board-decks.jpg
O24 - Desktop Component 14: (no name) - http://www.underworldsk8.com/images/decks/…board-decks.jpg
O24 - Desktop Component 15: (no name) - http://www.underworldsk8.com/images/decks/…board-decks.jpg
O24 - Desktop Component 16: (no name) - http://www.underworldsk8.com/wheels/images/logo_flip.gif
O24 - Desktop Component 17: (no name) - http://www.underworldsk8.com/trucks/images/logo_phantom.gif
O24 - Desktop Component 18: (no name) - http://www.underworldsk8.com/trucks/images/logo_venture.gif
O24 - Desktop Component 19: (no name) - http://www.underworldsk8.com/trucks/images/logo_orion.gif
O24 - Desktop Component 2: (no name) - http://www.underworldsk8.com/logos/dvs-shoes.gif
O24 - Desktop Component 20: (no name) - http://www.underworldsk8.com/trucks/images/logo_thunder.gif
O24 - Desktop Component 21: (no name) - http://www.underworldsk8.com/trucks/images/logo_royal.gif
O24 - Desktop Component 22: (no name) - http://www.underworldsk8.com/trucks/images/logo_krux.gif
O24 - Desktop Component 23: (no name) - http://www.underworldsk8.com/trucks/images…o_destructo.gif
O24 - Desktop Component 24: (no name) - http://www.underworldsk8.com/trucks/images…_grind_king.gif
O24 - Desktop Component 25: (no name) - http://www.underworldsk8.com/trucks/images…independent.gif
O24 - Desktop Component 26: (no name) - http://www.underworldsk8.com/images/decks/…board-decks.jpg
O24 - Desktop Component 27: (no name) - http://www.underworldsk8.com/images/decks/…board-decks.jpg
O24 - Desktop Component 28: (no name) - http://www.underworldsk8.com/completes/ima…blind-swarm.jpg
O24 - Desktop Component 29: (no name) - http://www.underworldsk8.com/wheels/images/logo_spitfire.gif
O24 - Desktop Component 3: (no name) - http://www.underworldsk8.com/logos/es-shoes.gif
O24 - Desktop Component 30: (no name) - http://www.underworldsk8.com/trucks/images/logo_tensor.gif
O24 - Desktop Component 31: (no name) - http://www.underworldsk8.com/wheels/images/logo_world.gif
O24 - Desktop Component 32: (no name) - http://www.underworldsk8.com/wheels/images/logo_blind.gif
O24 - Desktop Component 33: (no name) - http://www.underworldsk8.com/logos/adio-shoes.gif
O24 - Desktop Component 34: (no name) - http://www.underworldsk8.com/logos/fallen-shoes.gif
O24 - Desktop Component 35: (no name) - http://www.underworldsk8.com/logos/globe-shoes.gif
O24 - Desktop Component 36: (no name) - http://www.underworldsk8.com/wheels/images…black_label.gif
O24 - Desktop Component 37: (no name) - http://www.underworldsk8.com/wheels/images…o_birdhouse.gif
O24 - Desktop Component 38: (no name) - http://www.underworldsk8.com/trucks/images/logo_fury.gif
O24 - Desktop Component 39: (no name) - http://www.underworldsk8.com/logos/duffs-shoes.gif
O24 - Desktop Component 4: (no name) - http://www.underworldsk8.com/logos/dc-shoes.gif
O24 - Desktop Component 40: (no name) - http://www.underworldsk8.com/logos/etnies-shoes.gif
O24 - Desktop Component 41: (no name) - http://www.underworldsk8.com/wheels/images/logo_zero.gif
O24 - Desktop Component 42: (no name) - http://www.underworldsk8.com/wheels/images/logo_pig.gif
O24 - Desktop Component 43: (no name) - http://www.underworldsk8.com/skateshoes/im…board-decks.jpg
O24 - Desktop Component 44: (no name) - http://www.underworldsk8.com/completes/ima…nd-crossbar.jpg
O24 - Desktop Component 45: (no name) - http://www.underworldsk8.com/completes/ima…d-collector.jpg
O24 - Desktop Component 46: (no name) - http://www.underworldsk8.com/completes/ima…kstar-sword.jpg
O24 - Desktop Component 5: (no name) - http://www.underworldsk8.com/logos/osiris-shoes.gif
O24 - Desktop Component 6: (no name) - http://www.underworldsk8.com/logos/vans-shoes.gif
O24 - Desktop Component 7: (no name) - http://www.underworldsk8.com/logos/lakai-shoes.gif
O24 - Desktop Component 8: (no name) - http://www.underworldsk8.com/logos/i-path-shoes.gif
O24 - Desktop Component 9: (no name) - http://www.underworldsk8.com/logos/circa-shoes.gif

–
End of file - 12738 bytes