This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

hijack

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Logfile of HijackThis v1.99.1 Scan saved at 13:39:10, on 20.08.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\Program Files\HyperTechnologies\Deep Freeze\DfServEx.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\HyperTechnologies\Deep Freeze\_$Df\FrzState.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe C:\WINDOWS\VM305_STI.EXE C:\Program Files\D-Tools\daemon.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe C:\Program Files\MessengerDiscovery\MessengerDiscovery Live.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\PC-Clean\PC-Clean.exe C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\restless78\Desktop\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com.tr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Bağlantılar O1 - Hosts: 208.217.256.90 testtesttest.com O1 - Hosts: 208.117.236.70 youtube.com O1 - Hosts: 208.117.236.70 www.youtube.com O1 - Hosts: 74.125.65.118 img.youtube.com O1 - Hosts: 64.15.124.143 sjc-v1.sjc.youtube.com O1 - Hosts: 64.15.124.144 sjc-v2.sjc.youtube.com O1 - Hosts: 64.15.124.145 sjc-v3.sjc.youtube.com O1 - Hosts: 64.15.124.146 sjc-v4.sjc.youtube.com O1 - Hosts: 64.15.124.147 sjc-v5.sjc.youtube.com O1 - Hosts: 64.15.124.148 sjc-v6.sjc.youtube.com O1 - Hosts: 64.15.124.149 sjc-v7.sjc.youtube.com O1 - Hosts: 64.15.124.150 sjc-v8.sjc.youtube.com O1 - Hosts: 64.15.124.151 sjc-v9.sjc.youtube.com O1 - Hosts: 209.222.148.138 megaupload.com O1 - Hosts: 209.222.148.138 www.megaupload.com O1 - Hosts: 85.17.90.3 wwwstatic.megaupload.com O1 - Hosts: 84.16.242.65 server1.files.youporn.com O1 - Hosts: 85.17.19.37 server6.files.youporn.com O1 - Hosts: 89.149.209.42 server23.files.youporn.com O1 - Hosts: 89.149.209.43 server24.files.youporn.com O1 - Hosts: 89.149.209.44 server25.files.youporn.com O1 - Hosts: 89.149.209.45 server26.files.youporn.com O1 - Hosts: 89.149.209.46 server27.files.youporn.com O1 - Hosts: 89.149.209.48 server28.files.youporn.com O1 - Hosts: 89.149.209.49 server29.files.youporn.com O1 - Hosts: 89.149.209.50 server30.files.youporn.com O1 - Hosts: 89.149.209.51 server31.files.youporn.com O1 - Hosts: 89.149.208.240 server32.files.youporn.com O1 - Hosts: 38.103.4.236 server33.files.youporn.com O1 - Hosts: 85.17.105.10 server37.files.youporn.com O1 - Hosts: 84.16.252.97 server61.files.youporn.com O1 - Hosts: 84.16.230.128 server62.files.youporn.com O1 - Hosts: 89.149.209.12 server63.files.youporn.com O1 - Hosts: 89.149.209.13 server64.files.youporn.com O1 - Hosts: 89.149.209.15 server65.files.youporn.com O1 - Hosts: 89.149.209.40 server66.files.youporn.com O1 - Hosts: 89.149.208.248 server67.files.youporn.com O1 - Hosts: 84.16.227.97 server68.files.youporn.com O1 - Hosts: 84.16.252.142 server69.files.youporn.com O1 - Hosts: 84.16.242.76 server70.files.youporn.com O1 - Hosts: 38.103.4.235 server71.files.youporn.com O1 - Hosts: 38.100.22.69 server87.files.youporn.com O1 - Hosts: 84.16.240.193 server96.files.youporn.com O1 - Hosts: 84.16.231.177 server97.files.youporn.com O1 - Hosts: 89.149.197.210 server98.files.youporn.com O1 - Hosts: 89.149.197.211 server99.files.youporn.com O1 - Hosts: 89.149.197.212 server100.files.youporn.com O1 - Hosts: 89.149.197.213 server101.files.youporn.com O1 - Hosts: 89.149.197.214 server102.files.youporn.com O1 - Hosts: 89.149.197.215 server103.files.youporn.com O1 - Hosts: 89.149.197.216 server104.files.youporn.com O1 - Hosts: 89.149.197.217 server105.files.youporn.com O1 - Hosts: 84.16.227.95 server125.files.youporn.com O1 - Hosts: 84.16.227.52 server126.files.youporn.com O1 - Hosts: 84.16.231.193 server127.files.youporn.com O1 - Hosts: 89.149.195.79 server128.files.youporn.com O1 - Hosts: 89.149.208.227 server129.files.youporn.com O1 - Hosts: 89.149.208.230 server130.files.youporn.com O1 - Hosts: 89.149.209.33 server131.files.youporn.com O1 - Hosts: 89.149.196.203 server132.files.youporn.com O1 - Hosts: 89.149.196.206 server133.files.youporn.com O1 - Hosts: 89.149.196.208 server134.files.youporn.com O1 - Hosts: 84.16.224.96 server135.files.youporn.com O1 - Hosts: 89.149.202.63 server136.files.youporn.com O1 - Hosts: 89.149.202.66 server137.files.youporn.com O1 - Hosts: 89.149.202.67 server138.files.youporn.com O1 - Hosts: 89.149.202.68 server139.files.youporn.com O1 - Hosts: 89.149.202.69 server140.files.youporn.com O1 - Hosts: 89.149.202.70 server141.files.youporn.com O1 - Hosts: 89.149.202.73 server142.files.youporn.com O1 - Hosts: 89.149.202.74 server143.files.youporn.com O1 - Hosts: 89.149.202.75 server144.files.youporn.com O1 - Hosts: 89.149.217.245 server175.files.youporn.com O1 - Hosts: 89.149.217.246 server176.files.youporn.com O1 - Hosts: 89.149.217.247 server177.files.youporn.com O1 - Hosts: 89.149.217.248 server178.files.youporn.com O1 - Hosts: 89.149.217.249 server179.files.youporn.com O1 - Hosts: 89.149.217.250 server180.files.youporn.com O1 - Hosts: 89.149.217.251 server181.files.youporn.com O1 - Hosts: 89.149.202.84 server182.files.youporn.com O1 - Hosts: 89.149.202.85 server183.files.youporn.com O1 - Hosts: 89.238.136.98 server184.files.youporn.com O1 - Hosts: 89.238.136.99 server185.files.youporn.com O1 - Hosts: 89.238.136.100 server186.files.youporn.com O1 - Hosts: 89.238.136.101 server187.files.youporn.com O1 - Hosts: 89.238.136.102 server188.files.youporn.com O1 - Hosts: 89.149.209.41 server189.files.youporn.com O1 - Hosts: 89.149.202.80 server190.files.youporn.com O1 - Hosts: 89.149.195.104 server191.files.youporn.com O1 - Hosts: 84.16.240.229 server192.files.youporn.com O1 - Hosts: 89.149.195.105 server193.files.youporn.com O1 - Hosts: 84.16.230.33 server194.files.youporn.com O1 - Hosts: 217.20.112.161 server195.files.youporn.com O1 - Hosts: 89.149.197.225 server196.files.youporn.com O1 - Hosts: 89.149.195.106 server197.files.youporn.com O1 - Hosts: 89.238.136.103 server198.files.youporn.com O1 - Hosts: 38.103.4.237 server199.files.youporn.com O1 - Hosts: 217.20.112.153 server200.files.youporn.com O1 - Hosts: 89.149.196.205 server201.files.youporn.com O1 - Hosts: 89.149.196.207 server202.files.youporn.com O1 - Hosts: 89.149.202.59 server203.files.youporn.com O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - (no file) O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Web Class - {D03B6018-E880-4A89-99A2-7354FE52DDAE} - C:\PROGRA~1\NLIA\Nlia.dll O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305) O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe O4 - Global Startup: ATI CATALYST Sistem Tepsisi.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O8 - Extra context menu item: Microsoft Excel'e Gö&nder - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll O9 - Extra button: (no name) - {AEF9B8DB-0DEF-4c0b-8209-661C9E82B8C3} - C:\Program Files\WinSysClean 2008 Trial\UDManager\UDManager.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing) O14 - IERESET.INF: START_PAGE_URL=http://www.mynet.com O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll,C:\PROGRA~1\KASPER~2\KASPER~1\mzvkbd.dll O20 - Winlogon Notify: DfLogon - C:\WINDOWS\SYSTEM32\LogonDll.dll O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Kaspersky Anti-Virus (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" -r (file missing) O23 - Service: DFServEx - Hyper Technologies Inc. - C:\Program Files\HyperTechnologies\Deep Freeze\DfServEx.exe O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
Your post has been Moved, Closed or Edited for one of the following reasons:

1.) You posted multiple topics and only one is required

2.) You are spamming links to other places without approval

3.) You have posted your hijackthis log to the wrong forum:
( http://forums.whatthetech.com/HijackThis_L…emoval_f27.html ) <— correct forum for HijackThis Logs

4.) Abusive language or other problems in your text

5.) Your log is too old (20 days or more) and no replies from you after a volunteer tried to help you

If you came here for help, and you have not posted a Hijackthis log to the proper forum, then you may do so now, if you came here to spam or abuse, you will be dealt with harsher on your next offense

This is a family oriented forum to help those that need help.

==============================

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI