Logfile of HiJackFree v3.0
Scan saved at 7:55:49 PM, on 3/24/2008
Platform: Windows XP Service Pack 2 (Windows NT 5.1.2600)
MSIE: Internet Explorer v 6.0 Service Pack 2 (6.0.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device
Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\SoundMan.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\system32\umonit.exe
C:\Program Files\Common Files\Real\Update_OB ealsched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program
Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\a-squared HiJackFree\a2hijackfree.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
about:blank
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_SG&c=64&bd=PRESARIO&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default)
= http://www.google.com/search?q=%s
R0 - HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName = Links
O2 - BHO: Yahoo! Toolbar Helper -
{02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program
Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program
Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection -
{53707962-6F74-2D53-2644-206D7942484F} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
- C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: - {7E853D72-626A-48EC-A868-BA8D5E23E045} -
O2 - BHO: Windows Live Sign-in Helper -
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common
Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper -
{AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program
files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO -
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program
Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper -
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows
Live Toolbar\msntb.dll
O2 - BHO: - {D29DCEE0-457B-45A2-A92D-741B95B7723B} -
C:\Program Files\Internet Explorer\PLUGINS\NewSys55.Sys
O2 - BHO: SearchSettings Class -
{E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search
Settings\kb125\SearchSettings.dll
O3 - Toolbar: Yahoo! Toolbar -
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program
Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Windows Live Toolbar -
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows
Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F}
- c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3}
-
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE"
/Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002]
C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync]
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A]
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP
Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [Reminder]
"C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP
Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\system32\umonit.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB ealsched.exe" -osboot
O4 - HKLM\..\Run: [WSockDrv32] C:\WINDOWS\WSockDrv32.exe
O4 - HKLM\..\Run: [MsIMMs32] C:\WINDOWS\MsIMMs32.exE
O4 - HKLM\..\Run: [AVPSrv] C:\WINDOWS\AVPSrv.exE
O4 - HKLM\..\Run: [DbgHlp32] C:\WINDOWS\DbgHlp32.exe
O4 - HKLM\..\Run: [cmdbcs] C:\WINDOWS\cmdbcs.exe
O4 - HKLM\..\Run: [dkngzfru] C:\WINDOWS\kgfumltw.exe
O4 - HKLM\..\Run: [LotusHlp] C:\WINDOWS\LotusHlp.exe
O4 - HKLM\..\Run: [SHAProc] C:\WINDOWS\SHAProc.exe
O4 - HKLM\..\Run: [Kvsc3] C:\WINDOWS\Kvsc3.exE
O4 - HKLM\..\Run: [SoundMan] SoundMan.exe
O4 - HKLM\..\Run: [PTSShell] C:\WINDOWS\PTSShell.exe
O4 - HKLM\..\Run: [upxdnd] C:\WINDOWS\upxdnd.exe
O4 - HKLM\..\Run: [msccrt] C:\WINDOWS\msccrt.exe
O4 - HKLM\..\Run: [WINSvr32] C:\WINDOWS\WINSvr32.exE
O4 - HKLM\..\Run: [swg] C:\Program
Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKLM\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O7 - Regedit - Enabled
O8 - Extra context menu item: &Windows Live Search -
res://C:\Program Files\Windows Live
Toolbar\msntb.dll/search.htm
O9 - Extra button: PartyPoker.com -
{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program
Files\PartyGaming\PartyPoker\images\ppicon.ico
O9 - Extra "Tools" menuitem: PartyPoker.com -
{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program
Files\PartyGaming\PartyPoker\images\ppicon.ico
O9 - Extra button: Connection Help -
{E2D4D26B-0180-43a4-B05F-462D6D54C789} -
C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\conn_support.ico
O9 - Extra "Tools" menuitem: Connection Help -
{E2D4D26B-0180-43a4-B05F-462D6D54C789} -
C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\conn_support.ico
O9 - Extra button: Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O9 - Extra "Tools" menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O14 - IERESET.INF: SearchAssistant=http://www.google.com/ie
O14 - IERESET.INF:
START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
O14 - IERESET.INF:
SEARCH_PAGE_URL="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
O14 - IERESET.INF:
MS_START_PAGE_URL="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine
Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter
Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl
Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {5CD4310E-88FB-43C1-BE24-5F3FA9C5C9D1} (KooPlayer
Control) - http://www.tvkoo.com/update/KooPlayer.ocx
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader
Control) - http://mocca.com/MediaCorp/ImageUploader4.cab
O20 - AppInit_DLLs:
mrjhtjd.dll,qrhhb.dll,xdfntt.dll,hgfhk.dll,hjaiq.dll,kduy.dll,frntrn.dll,dnteh.dll,chmfcmh.dll,jwlah.dll,crugd.dll,lariytrz.dll,thurh.dll,mgmgmm.dll,oqrthc.dll,ydgn.dll,dbfb.dll,fjnbv.dll,wmsat.dll,gmnait.dll,hfjg.dll,xdndn.dll,rgfjj.dll,dscef.dll,xfng.dll,njritc.dll,setrhes.dll,cdxbfxdb.dll,xfgnxfn.dll,gjkhj.dll,fxnfnh.dll,bjrvm.dll,ektvm.dll,fehom.dll,jyjlt.dll,ijatnaw.dll,sehhter.dll,fhjfg.dll,zdbdb.dll,rhs.dll,atehhz.dll,gjjte.dll,xgnfn.dll,xfgnhcgfm.dll,serger.dll,bnxnb.dll,fxgnfx.dll,jzijj.dll,xfgnfx.dll,serghjm.dll,thsddh.dll,xbcvxb.dll,zfdzb.dll,hkfgh.dll,drghszd.dll,fngn.dll,xdhdg.dll,zdbfbd.dll,fjyjy.dll,,msosmhfp00.dll,msosdohs00.dll,msoscqit00.dll
O20 - Winlogon Notify: AtiExtEvent -
C:\WINDOWS\System32\Ati2evxx.dll
O20 - Winlogon Notify: WgaLogon -
C:\WINDOWS\System32\WgaLogon.dll
O21 - ShellServiceObjectDelayLoad: PostBootReminder -
O21 - ShellServiceObjectDelayLoad: CDBurn -
O21 - ShellServiceObjectDelayLoad: WebCheck -
O21 - ShellServiceObjectDelayLoad: SysTray -
O21 - ShellServiceObjectDelayLoad: WPDShServiceObj -
O22 - SharedTaskScheduler: Browseui preloader -
C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon -
C:\WINDOWS\system32\browseui.dll
O23 - Service: Alerter - C:\WINDOWS\system32\svchost.exe
O23 - Service: Application Layer Gateway Service -
C:\WINDOWS\System32\alg.exe
O23 - Service: Apple Mobile Device - C:\Program Files\Common
Files\Apple\Mobile Device
Support\bin\AppleMobileDeviceService.exe
O23 - Service: Application Management -
C:\WINDOWS\system32\svchost.exe
O23 - Service: ASP.NET State Service -
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
O23 - Service: Windows Audio -
C:\WINDOWS\System32\svchost.exe
O23 - Service: AVG7 Alert Manager Server -
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service -
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner -
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Background Intelligent Transfer Service -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Bonjour Service - C:\Program
Files\Bonjour\mDNSResponder.exe
O23 - Service: Computer Browser -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Indexing Service -
C:\WINDOWS\system32\cisvc.exe
O23 - Service: ClipBook - C:\WINDOWS\system32\clipsrv.exe
O23 - Service: COM+ System Application -
C:\WINDOWS\system32\dllhost.exe
O23 - Service: cqit -
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\tmp5D.tmp
O23 - Service: Cryptographic Services -
C:\WINDOWS\system32\svchost.exe
O23 - Service: DCOM Server Process Launcher -
C:\WINDOWS\system32\svchost
O23 - Service: DHCP Client - C:\WINDOWS\system32\svchost.exe
O23 - Service: Logical Disk Manager Administrative Service -
C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Logical Disk Manager -
C:\WINDOWS\System32\svchost.exe
O23 - Service: DNS Client - C:\WINDOWS\system32\svchost.exe
O23 - Service: dohs -
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\tmp134.tmp
O23 - Service: Error Reporting Service -
C:\WINDOWS\System32\svchost.exe
O23 - Service: Event Log - C:\WINDOWS\system32\services.exe
O23 - Service: COM+ Event System -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Fast User Switching Compatibility -
C:\WINDOWS\System32\svchost.exe
O23 - Service: Fax - C:\WINDOWS\system32\fxssvc.exe
O23 - Service: Google Updater Service - C:\Program
Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Help and Support -
C:\WINDOWS\system32\interne.exe
O23 - Service: Human Interface Device Access -
C:\WINDOWS\System32\svchost.exe
O23 - Service: HTTP SSL - C:\WINDOWS\System32\svchost.exe
O23 - Service: InstallDriver Table Manager - C:\Program
Files\Common Files\InstallShield\Driver\11\Intel
32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service -
C:\WINDOWS\system32\imapi.exe
O23 - Service: iPod Service - C:\Program
Files\iPod\bin\iPodService.exe
O23 - Service: Server - C:\WINDOWS\system32\svchost.exe
O23 - Service: Workstation - C:\WINDOWS\system32\svchost.exe
O23 - Service: TCP/IP NetBIOS Helper -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Messenger - C:\WINDOWS\system32\svchost.exe
O23 - Service: mhfp -
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\tmpB7.tmp
O23 - Service: NetMeeting Remote Desktop Sharing -
C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: mnsf -
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\tmpD5.tmp
O23 - Service: Windows Installer -
C:\WINDOWS\system32\msiexec.exe
O23 - Service: Network DDE - C:\WINDOWS\system32 etdde.exe
O23 - Service: Network DDE DSDM - C:\WINDOWS\system32
etdde.exe
O23 - Service: Net Logon - C:\WINDOWS\system32\lsass.exe
O23 - Service: Network Connections -
C:\WINDOWS\System32\svchost.exe
O23 - Service: Network Location Awareness (NLA) -
C:\WINDOWS\system32\svchost.exe
O23 - Service: NT LM Security Support Provider -
C:\WINDOWS\system32\lsass.exe
O23 - Service: Removable Storage -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Plug and Play -
C:\WINDOWS\system32\services.exe
O23 - Service: IPSEC Services - C:\WINDOWS\system32\lsass.exe
O23 - Service: Protected Storage -
C:\WINDOWS\system32\lsass.exe
O23 - Service: Remote Access Auto Connection Manager -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Remote Access Connection Manager -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Remote Desktop Help Session Manager -
C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Routing and Remote Access -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Remote Procedure Call (RPC) Locator -
C:\WINDOWS\system32\locator.exe
O23 - Service: Remote Procedure Call (RPC) -
C:\WINDOWS\system32\svchost
O23 - Service: QoS RSVP - C:\WINDOWS\system32 svp.exe
O23 - Service: Security Accounts Manager -
C:\WINDOWS\system32\lsass.exe
O23 - Service: Smart Card - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Task Scheduler -
C:\WINDOWS\System32\svchost.exe
O23 - Service: Secondary Logon -
C:\WINDOWS\System32\svchost.exe
O23 - Service: System Event Notification -
C:\WINDOWS\system32\svchost.exe
O23 - Service: ServiceLayer - C:\Program Files\PC Connectivity
Solution\ServiceLayer.exe
O23 - Service: Windows Firewall/Internet Connection Sharing (ICS) -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Shell Hardware Detection -
C:\WINDOWS\System32\svchost.exe
O23 - Service: Print Spooler -
C:\WINDOWS\system32\spoolsv.exe
O23 - Service: System Restore Service -
C:\WINDOWS\system32\svchost.exe
O23 - Service: SSDP Discovery Service -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Windows Image Acquisition (WIA) -
C:\WINDOWS\system32\svchost.exe
O23 - Service: MS Software Shadow Copy Provider -
C:\WINDOWS\system32\dllhost.exe
O23 - Service: Performance Logs and Alerts -
C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Telephony - C:\WINDOWS\System32\svchost.exe
O23 - Service: Terminal Services -
C:\WINDOWS\System32\svchost
O23 - Service: Themes - C:\WINDOWS\System32\svchost.exe
O23 - Service: Distributed Link Tracking Client -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Universal Plug and Play Device Host -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Uninterruptible Power Supply -
C:\WINDOWS\System32\ups.exe
O23 - Service: Messenger Sharing Folders USN Journal Reader service
- C:\Program Files\MSN Messenger\usnsvc.exe
O23 - Service: User Privilege Service -
C:\WINDOWS\System32\svchost.exe
O23 - Service: Volume Shadow Copy -
C:\WINDOWS\System32\vssvc.exe
O23 - Service: Windows Time - C:\WINDOWS\System32\svchost.exe
O23 - Service: WebClient - C:\WINDOWS\system32\svchost.exe
O23 - Service: Windows Management Instrumentation -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Portable Media Serial Number Service -
C:\WINDOWS\System32\svchost.exe
O23 - Service: WMI Performance Adapter -
C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Windows Media Player Network Sharing Service -
C:\Program Files\Windows Media Player\WMPNetwk.exe
O23 - Service: Security Center -
C:\WINDOWS\System32\svchost.exe
O23 - Service: Automatic Updates -
C:\WINDOWS\system32\svchost.exe
O23 - Service: Windows Driver Foundation - User-mode Driver
Framework - C:\WINDOWS\system32\svchost.exe
O23 - Service: Wireless Zero Configuration -
C:\WINDOWS\System32\svchost.exe
O23 - Service: Network Provisioning Service -
C:\WINDOWS\System32\svchost.exe