I really need some help...and it would be most appreciated. Here is my HJT logfile:
Logfile of HijackThis v1.99.1
Scan saved at 9:31:35 AM, on 5/9/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\WINDOWS\System32\Services\{5D421D11-998F-4387-862B-5D45490ADFEA}\SVCHOST.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\YumgoHomepageProtector.exe
C:\Program Files\Hewlett-Packard\AiO\hp officejet 7100 series\Bin\hpogrp07.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
C:\WINDOWS\System32\hpoipm07.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOFXM07.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YServer.exe
C:\Program Files\JGsoft\EditPadLite\EditPad.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\HJT\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.msnbc.comR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.msnbc.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.msnbc.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
http://www.msnbc.comR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: NavErrRedir Class - {0026AD90-C86F-4269-97F3-DAB4897C6D06} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx (file missing)
O2 - BHO: REALBAR - {4E7BD74F-2B8D-469E-C0FF-FD60B590A87D} - C:\PROGRA~1\COMMON~1\Real\Toolbar\realbar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\WS_FTP Pro\wsbho2k0.dll
O2 - BHO: LinkTracker Class - {8B6DA27E-7F64-4694-8F8F-DC87AB8C6B22} - C:\WINDOWS\System32\qlink32.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: REALBAR - {4E7BD74F-2B8D-469E-C0FF-FD60B590A87D} - C:\PROGRA~1\COMMON~1\Real\Toolbar\realbar.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [Service Host] C:\WINDOWS\System32\Services\{5D421D11-998F-4387-862B-5D45490ADFEA}\SVCHOST.EXE
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Internet Washer Pro] C:\PROGRA~1\INTERN~2\iw.exe min
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yumgo's Homepage Protector V1] YumgoHomepageProtector.exe
O4 - Global Startup: HPAiODevice(hp officejet 7100 series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet 7100 series\Bin\hpogrp07.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: UPS Online PLD Reminder Utility.lnk = C:\UPS\UOWS\PldReminder.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: Aces Up! by pogo -
http://game3.pogo.com/applet-6.1.0.39/aces...s-ob-assets.cabO16 - DPF: Animal Ark by pogo -
http://playweb04.pogo.com/applet-6.1.0.39/...l-ob-assets.cabO16 - DPF: Backgammon by pogo -
http://gammon.pogo.com/applet-6.1.0.39/bac...n-ob-assets.cabO16 - DPF: Canasta by pogo -
http://game1.pogo.com/applet-6.1.3.21/cana...a-ob-assets.cabO16 - DPF: Checkers by pogo -
http://game1.pogo.com/applet-6.1.2.25/chec...s-ob-assets.cabO16 - DPF: Chess by pogo -
http://chess2.pogo.com/applet-6.0.4.37/che...2-ob-assets.cabO16 - DPF: ConferenceRoom Java Client -
http://irc4.bondage.com:8080/java/cr.cabO16 - DPF: Cribbage by pogo -
http://crib.pogo.com/applet-6.1.0.39/cribb...e-ob-assets.cabO16 - DPF: Dice Derby by pogo -
http://checkeredflag.pogo.com/applet-6.0.4...g-ob-assets.cabO16 - DPF: Dominoes by pogo -
http://game1.pogo.com/applet-6.1.3.21/domi...o-ob-assets.cabO16 - DPF: First Class Solitaire by pogo -
http://game3.pogo.com/applet-6.0.4.37/soli...2-ob-assets.cabO16 - DPF: Fortune Bingo by pogo -
http://superbingo.pogo.com/applet-6.0.4.31...o-ob-assets.cabO16 - DPF: Greenback Bayou by pogo -
http://greenback.pogo.com/applet-6.0.3.35/...k-ob-assets.cabO16 - DPF: Hearts by pogo -
http://hearts.pogo.com/applet-6.0.3.35/hea...s-ob-assets.cabO16 - DPF: High Stakes Poker by pogo -
http://game5.pogo.com/applet-6.0.4.37/draw...r-ob-assets.cabO16 - DPF: High Stakes Pool by pogo -
http://game1.pogo.com/applet-6.1.3.28/pool...l-ob-assets.cabO16 - DPF: Jigsaw Detective by pogo -
http://game3.pogo.com/applet-6.0.3.35/jigs...w-ob-assets.cabO16 - DPF: JT's Blocks -
http://download.games.yahoo.com/games/clients/y/blt1_x.cabO16 - DPF: Jungle Gin by pogo -
http://gin.pogo.com/applet-6.1.0.39/gin/gin-ob-assets.cabO16 - DPF: Keno by pogo -
http://keno.pogo.com/applet-6.0.4.31/keno/keno-ob-assets.cabO16 - DPF: Lottso by pogo -
http://game1.pogo.com/applet-6.1.3.28/lott...o-ob-assets.cabO16 - DPF: Mah Jong Garden by pogo -
http://game1.pogo.com/applet-6.1.3.21/mahj...g-ob-assets.cabO16 - DPF: Multiline Slots by pogo -
http://game6.pogo.com/applet-6.0.4.31/mlsl...s-ob-assets.cabO16 - DPF: Pai Gow by pogo -
http://game3.pogo.com/applet-6.1.0.39/paig...w-ob-assets.cabO16 - DPF: Payday FreeCell by pogo -
http://game1.pogo.com/applet-6.1.3.21/free...l-ob-assets.cabO16 - DPF: Perfect Pair Solitaire by pogo -
http://waterwheel.pogo.com/applet-6.1.1.21...l-ob-assets.cabO16 - DPF: Phlinx by pogo -
http://game4.pogo.com/applet-6.0.4.37/flin...r-ob-assets.cabO16 - DPF: Pinochle by pogo -
http://game4.pogo.com/applet-6.1.0.39/pino...e-ob-assets.cabO16 - DPF: Pop Fu by pogo -
http://popfu.pogo.com/applet-6.0.4.37/popf...u-ob-assets.cabO16 - DPF: Poppit TM by pogo -
http://game5.pogo.com/applet-6.1.1.29/popp...t-ob-assets.cabO16 - DPF: Ricochet by pogo -
http://game4.pogo.com/applet-6.0.4.37/rico...t-ob-assets.cabO16 - DPF: SciFi Slots by pogo -
http://game1.pogo.com/applet-6.1.2.25/slot...i-ob-assets.cabO16 - DPF: Showbiz Slots by pogo -
http://game1.pogo.com/applet-6.1.1.29/slot...z-ob-assets.cabO16 - DPF: Spades by pogo -
http://game1.pogo.com/applet-6.1.3.21/spad...s-ob-assets.cabO16 - DPF: Spider Solitaire by pogo -
http://game4.pogo.com/applet-6.0.4.37/spid...r-ob-assets.cabO16 - DPF: Squelchies by pogo -
http://squelchies.pogo.com/applet-6.0.4.37...s-ob-assets.cabO16 - DPF: Sweet Tooth TM by pogo -
http://sweettooth.pogo.com/applet-6.0.4.37...h-ob-assets.cabO16 - DPF: Tank Hunter by pogo -
http://playweb08.pogo.com/applet-6.0.4.37/...k-ob-assets.cabO16 - DPF: Texas Hold'em Poker by pogo -
http://game4.pogo.com/applet-6.0.4.31/hold...m-ob-assets.cabO16 - DPF: Toki Toki Boom -
http://download.games.yahoo.com/games/clients/y/vto_x.cabO16 - DPF: Tornado 21 -
http://download.games.yahoo.com/games/clients/y/t21t0_x.cabO16 - DPF: Tri-Peaks by pogo -
http://game1.pogo.com/applet-6.1.3.21/peak...s-ob-assets.cabO16 - DPF: Tumble Bees by pogo -
http://jumbee.pogo.com/applet-6.0.4.31/jum...e-ob-assets.cabO16 - DPF: Turbo 21 TM by pogo -
http://game1.pogo.com/applet-6.1.3.21/turb...1-ob-assets.cabO16 - DPF: Video Poker -
http://download.games.yahoo.com/games/clients/y/vpt0_x.cabO16 - DPF: Word Whomp by pogo -
http://game5.pogo.com/applet-6.0.4.37/word...p-ob-assets.cabO16 - DPF: Word Whomp Whackdown by pogo -
http://whackdown.pogo.com/applet-6.0.4.37/...n-ob-assets.cabO16 - DPF: WordJong by pogo -
http://game1.pogo.com/applet-6.1.3.28/word...g-ob-assets.cabO16 - DPF: World Class Solitaire by pogo -
http://game4.pogo.com/applet-6.0.4.37/worl...s-ob-assets.cabO16 - DPF: Yahoo! Chat -
http://us.chat1.yimg.com/us.yimg.com/i/cha...t/c381/chat.cabO16 - DPF: Yahoo! Chess -
http://download.games.yahoo.com/games/clients/y/ct1_x.cabO16 - DPF: Yahoo! Dominoes -
http://download.games.yahoo.com/games/clients/y/dot8_x.cabO16 - DPF: Yahoo! Dots -
http://download.games.yahoo.com/games/clients/y/dtt1_x.cabO16 - DPF: Yahoo! Gin -
http://download.games.yahoo.com/games/clients/y/nt1_x.cabO16 - DPF: Yahoo! Graffiti -
http://download.games.yahoo.com/games/clients/y/grt5_x.cabO16 - DPF: Yahoo! Literati -
http://download.games.yahoo.com/games/clients/y/tt3_x.cabO16 - DPF: Yahoo! MahJong -
http://download.games.yahoo.com/games/clients/y/ot0_x.cabO16 - DPF: Yahoo! MahJong Solitaire -
http://download.games.yahoo.com/games/clients/y/mjst4_x.cabO16 - DPF: Yahoo! Pool 2 -
http://download.games.yahoo.com/games/clients/y/pote_x.cabO16 - DPF: Yahoo! Pyramids -
http://download.games.yahoo.com/games/clients/y/pyt1_x.cabO16 - DPF: Yahoo! Reversi -
http://download.games.yahoo.com/games/clients/y/rt0_x.cabO16 - DPF: Yahoo! Spades -
http://download.games.yahoo.com/games/clients/y/st2_x.cabO16 - DPF: Yahoo! Spelldown -
http://download.games.yahoo.com/games/clients/y/sdt1_x.cabO16 - DPF: Yahoo! Word Racer -
http://download.games.yahoo.com/games/clients/y/wt1_x.cabO16 - DPF: {01111C00-3E00-11D2-8470-0060089874ED} (Support.com ActionRunner Class) -
http://help.rr.com/Foundrysdccommon/download/tgctlar.cabO16 - DPF: {072D3F2E-5FB6-11D3-B461-00C04FA35A21} (CFForm Runtime) -
http://www.crackerbarrel.com/CFIDE/classes/CFJava.cabO16 - DPF: {084F552D-19EB-4668-9788-984CBC781A8F} (AsyncDownloader Class) -
http://survey.otxresearch.com/Preloader.dllO16 - DPF: {0D3983A9-4E29-4F33-8313-DA22B29D3F87} (QuickBooks Online Edition Utilities Class v6) -
https://accounting.quickbooks.com/v10.164/qboax6.cabO16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
http://imgfarm.com/images/nocache/funwebpr...etup1.0.0.6.cabO16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {1DF36010-E276-11D4-A7C0-00C04F0453DD} (Stamps.com Secure Postal Account Registration) -
https://secure.stamps.com/download/us/regis...55/sdcregie.cabO16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} -
http://a1540.g.akamai.net/7/1540/52/200305...meInstaller.exeO16 - DPF: {421A63BA-4632-43E0-A942-3B4AB645BE51} -
http://i.rn11.com/iwasher/pptproactauthmir...etwasherpro.cabO16 - DPF: {4C226336-4032-489F-9674-67E74225979B} (OTXMovie Class) -
http://otx.ifilm.com/OTXMedia/OTXMedia.dllO16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) -
http://tools.ebayimg.com/eps/wl/activex/EP...ol_v1-0-3-9.cabO16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) -
http://207.188.7.150/2837b1976976f86cc006/...ip/RdxIE601.cabO16 - DPF: {58172624-85DD-4482-9E64-02ADCA637E96} (shizmoo Class) -
http://shizmoo.com/activex/web665.cabO16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
http://us.games2.yimg.com/download.games.y...ctl_0_0_0_1.ocxO16 - DPF: {70522FA0-4656-11D5-B0E9-0050DAC24E8F} -
http://cc.iwon.com/ct/pm3/iwonpm_12_1,0,2,5.cabO16 - DPF: {70522FA2-4656-11D5-B0E9-0050DAC24E8F} -
http://download.iwon.com/ct/pm3/iwonpm_8_1,0,2,5.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cabO16 - DPF: {92CA8ACC-4E99-4A2A-93F1-B2C5CADC8613} (NMInstall Control) -
http://a14.g.akamai.net/f/14/7141/1d/www.n...GAPANEL_USA.cabO16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) -
http://a19.g.akamai.net/7/19/7125/4019/ftp...23/cpbrkpie.cabO16 - DPF: {A031D222-B496-11D2-9CC8-00105A10AAF6} (WONWebLauncher Class) -
http://hoylegames.sierra.com/cab/WONWebLauncherControl.cabO16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) -
https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocxO16 - DPF: {C6B086D2-146B-47A4-A218-B82DCAF2D872} (cpbrxpie Control) -
http://a19.g.akamai.net/7/19/7125/4007/ftp...20/cpbrxpie.cabO16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://playweb07.pogo.com/game/deluxe/zuma...aploader_v6.cabO16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) -
http://tools.ebayimg.com/eps/activex/EPSControl_v1-32.cabO16 - DPF: {E922EBC9-50D4-4B53-B454-73376453E98D} (LOSActiveX.MainForm) -
https://www.xpertonline.net/losactivex/LOSActiveX.CABO16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) -
http://h30043.www3.hp.com/aio/en/check/qdiagh.cab?326O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -
http://fdl.msn.com/public/chat/msnchat45.cabO16 - DPF: {FE1A240F-B247-4E06-A600-30E28F5AF3A0} -
http://toolbar2.globalwebsearch.com/winenc32.cabO18 - Filter: text/html - {DFAA31C8-A356-4313-9D95-5EDAB46C5070} - C:\WINDOWS\System32\qlink32.dll
O23 - Service: AutoComplete Service (Autocomplete) - Unknown owner - C:\PROGRA~1\INTERN~2\autocomp.exe (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
Thanks in advance for any help
