trojan

here is log file also have rocketdock and h control in start up how do i remove it


Logfile of Trend Micro

HijackThis v2.0.2
Scan saved at 9:36:50 AM, on

1/13/2009
Platform: Windows XP SP3

(WinNT 5.01.2600)
MSIE: Internet Explorer v6.00

SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.

exe
C:\WINDOWS\system32\services.

exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.e

xe
C:\WINDOWS\System32\svchost.e

xe
C:\WINDOWS\system32\spoolsv.e

xe
C:\Program

Files\Avira\AntiVir

PersonalEdition

Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.

exe
C:\Program Files\Wireless

Console 2\wcourier.exe
C:\Program

Files\Generic\Power4

Gear\BatteryLife.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\sm56hlpr.exe
C:\Program

Files\CyberLink\PowerDVD\PDVD

Serv.exe
C:\Program

Files\Java\jre6\bin\jusched.e

xe
C:\Program

Files\iTunes\iTunesHelper.exe
C:\Program

Files\Avira\AntiVir

PersonalEdition

Classic\avgnt.exe
C:\Program Files\Common

Files\Ahead\Lib\NMBgMonitor.e

xe
C:\WINDOWS\system32\ctfmon.ex

e
C:\Program Files\Common

Files\Ahead\Lib\NMIndexStoreS

vr.exe
C:\Documents and

Settings\Administrator\Local

Settings\Application

Data\Google\Update\GoogleUpda

te.exe
C:\Program Files\AIM\aim.exe
C:\Program

Files\RocketDock\RocketDock.e

xe
C:\Program

Files\Generic\Generic

ChkMail\ChkMail.exe
C:\Program

Files\Avira\AntiVir

PersonalEdition

Classic\avguard.exe
C:\Program Files\Common

Files\Apple\Mobile Device

Support\bin\AppleMobileDevice

Service.exe
C:\Program

Files\Bonjour\mDNSResponder.e

xe
C:\Program

Files\Google\Common\Google

Updater\GoogleUpdaterService.

exe
C:\Program

Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common

Files\LightScribe\LSSrvc.exe
C:\Program

Files\McAfee\SiteAdvisor\McSA

Core.exe
C:\WINDOWS\System32\PAStiSvc.

exe
C:\WINDOWS\system32\svchost.e

xe
C:\Program

Files\Viewpoint\Common\Viewpo

intService.exe
C:\Program

Files\iPod\bin\iPodService.ex

e
C:\Program Files\Common

Files\Ahead\Lib\NMIndexingSer

vice.exe
C:\Program

Files\Viewpoint\Viewpoint

Manager\ViewMgr.exe
C:\WINDOWS\system32\rundll32.

exe
C:\Program Files\Common

Files\Microsoft

Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Trend

Micro\HijackThis\HijackThis.e

xe

R1 -

HKCU\Software\Microsoft\Inter

net

Explorer\SearchURL,(Default)

=

http://search.yahoo.com/searc

h?fr=mcafee&p=%s
R1 -

HKCU\Software\Microsoft\Windo

ws\CurrentVersion\Internet

Settings,ProxyOverride =

*.local
O2 - BHO:

{d8879eb7-4090-469a-3b64-20e6

11db8fe5} -

{5ef8bd11-6e02-46b3-a964-0904

7be9788d} -

C:\WINDOWS\system32\bdvblm.dl

l (file missing)
O2 - BHO: (no name) -

{6D794CB4-C7CD-4c6f-BFDC-9B77

AFBDC02C} -

C:\WINDOWS\system32\urqOHASj.

dll (file missing)
O2 - BHO: Java™ Plug-In

SSV Helper -

{761497BB-D6F0-462C-B6EB-D4DA

F1D92D43} - C:\Program

Files\Java\jre6\bin\ssv.dll
O2 - BHO: Viewpoint Toolbar

BHO -

{A7327C09-B521-4EDB-8509-7D26

60C9EC98} - C:\Program

Files\Viewpoint\Viewpoint

Toolbar\3.8.0\ViewBarBHO.dll

(file missing)
O2 - BHO: Google Toolbar

Notifier BHO -

{AF69DE43-7D58-4638-B6FA-CE66

B5AD205D} - C:\Program

Files\Google\GoogleToolbarNot

ifier\4.1.805.4472\swg.dll
O2 - BHO: McAfee SiteAdvisor

BHO -

{B164E929-A1B6-4A06-B104-2CD0

E90A88FF} -

c:\PROGRA~1\mcafee\SITEAD~1\m

cieplg.dll
O2 - BHO: (no name) -

{C315F6CC-D7F7-4D9A-8471-A554

3FC62CDE} -

C:\WINDOWS\system32\yayaBuUm.

dll (file missing)
O2 - BHO: Java™ Plug-In 2

SSV Helper -

{DBC80044-A445-435b-BC74-9C25

C1C588A9} - C:\Program

Files\Java\jre6\bin\jp2ssv.dl

l
O3 - Toolbar: Viewpoint

Toolbar -

{F8AD5AA5-D966-4667-9DAF-2561

D68B2012} - C:\Program

Files\Common

Files\Viewpoint\Toolbar

Runtime\3.8.0\IEViewBar.dll
O3 - Toolbar: McAfee

SiteAdvisor Toolbar -

{0EBBBE48-BAD4-4B4C-8E5A-516A

BECAE064} -

c:\PROGRA~1\mcafee\SITEAD~1\m

cieplg.dll
O4 - HKLM\..\Run: [igfxhkcmd]

C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers]

C:\WINDOWS\system32\igfxpers.

exe
O4 - HKLM\..\Run: [Wireless

Console 2] C:\Program

Files\Wireless Console

2\wcourier.exe
O4 - HKLM\..\Run:

[Power_Gear] C:\Program

Files\Generic\Power4

Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [RTHDCPL]

RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel]

SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr]

ALCMTR.EXE
O4 - HKLM\..\Run: [SMSERIAL]

sm56hlpr.exe
O4 - HKLM\..\Run:

[NeroFilterCheck] C:\Program

Files\Common

Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run:

[RemoteControl] "C:\Program

Files\CyberLink\PowerDVD\PDVD

Serv.exe"
O4 - HKLM\..\Run:

[SunJavaUpdateSched]

"C:\Program

Files\Java\jre6\bin\jusched.e

xe"
O4 - HKLM\..\Run:

[AppleSyncNotifier]

C:\Program Files\Common

Files\Apple\Mobile Device

Support\bin\AppleSyncNotifier

.exe
O4 - HKLM\..\Run: [QuickTime

Task] "C:\Program

Files\QuickTime\QTTask.exe"

-atboottime
O4 - HKLM\..\Run:

[iTunesHelper] "C:\Program

Files\iTunes\iTunesHelper.exe

"
O4 - HKLM\..\Run: [prunnet]

"C:\WINDOWS\system32\prunnet.

exe"
O4 - HKLM\..\Run: [avgnt]

"C:\Program

Files\Avira\AntiVir

PersonalEdition

Classic\avgnt.exe" /min
O4 - HKCU\..\Run:

[BgMonitor_{79662E04-7C6C-4d9

f-84C7-88D8A56B10AA}]

"C:\Program Files\Common

Files\Ahead\Lib\NMBgMonitor.e

xe"
O4 - HKCU\..\Run:

[ctfmon.exe]

C:\WINDOWS\system32\ctfmon.ex

e
O4 - HKCU\..\Run: [updateMgr]

"C:\Program

Files\Adobe\Acrobat

7.0\Reader\AdobeUpdateManager

.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [Tunebite]

C:\Program

Files\RapidSolution\Tunebite\

Tunebite.exe -tray
O4 - HKCU\..\Run: [Google

Update] "C:\Documents and

Settings\Administrator\Local

Settings\Application

Data\Google\Update\GoogleUpda

te.exe" /c