Where can I post a Hijackthis log?

thewolfe · Post by **thewolfe** » Mon Jan 07, 2008 11:25 am

Krom · Post by **Krom** » Mon Jan 07, 2008 12:04 pm

Unless there is some specific forum on the net for the problem you are having, here would be a perfectly acceptable place.

thewolfe · Post by **thewolfe** » Mon Jan 07, 2008 12:52 pm

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:15:12 AM, on 1/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\\WINDOWS\\System32\\smss.exe
C:\\WINDOWS\\system32\\winlogon.exe
C:\\WINDOWS\\system32\\services.exe
C:\\WINDOWS\\system32\\lsass.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\Program Files\\Windows Defender\\MsMpEng.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\WINDOWS\\System32\\wltrysvc.exe
C:\\WINDOWS\\System32\\bcmwltry.exe
C:\\Program Files\\Lavasoft\\Ad-Aware 2007\\aawservice.exe
C:\\WINDOWS\\system32\\spoolsv.exe
C:\\Program Files\\Common Files\\Apple\\Mobile Device Support\\bin\\AppleMobileDeviceService.exe
C:\\Program Files\\LogMeIn\\x86\\RaMaint.exe
C:\\Program Files\\LogMeIn\\x86\\LogMeIn.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\system32\\wscntfy.exe
C:\\WINDOWS\\Explorer.EXE
C:\\WINDOWS\\system32\\igfxtray.exe
C:\\WINDOWS\\system32\\hkcmd.exe
C:\\Program Files\\ScanSoft\\TextBridge Millennium\\Bin\\InstantAccess.exe
C:\\WINDOWS\\system32\\LVCOMSX.EXE
C:\\Program Files\\Logitech\\Video\\LogiTray.exe
C:\\Program Files\\Creative\\Shared Files\\CAMTRAY.EXE
C:\\Program Files\\Logitech\\Video\\FxSvr2.exe
C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe
C:\\Program Files\\Windows Defender\\MSASCui.exe
C:\\Program Files\\LogMeIn\\x86\\LogMeInSystray.exe
C:\\Program Files\\iTunes\\iTunesHelper.exe
C:\\PROGRA~1\\Yahoo!\\MESSEN~1\\YAHOOM~1.EXE
C:\\Program Files\\ScanSoft\\Pagis\\Monitor.exe
C:\\Program Files\\iPod\\bin\\iPodService.exe
C:\\PROGRA~1\\Yahoo!\\browser\\ycommon.exe
C:\\Program Files\\LogMeIn\\x86\\LogMeIn.exe
C:\\Program Files\\SmartPopupBlocker\\SmartPopupBlockerTray.exe
C:\\Program Files\\Lavasoft\\Ad-Aware 2007\\Ad-Aware2007.exe
C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe
C:\\Program Files\\Internet Explorer\\iexplore.exe
C:\\Program Files\\Common Files\\Microsoft Shared\\Windows Live\\WLLoginProxy.exe
C:\\Program Files\\Trend Micro\\HijackThis\\HijackThis.exe

R1 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Search Bar = http://red.clientapps.yahoo.com/customi ... ch/ie.html
R1 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://www.attyahoo.com/
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Bar = http://red.clientapps.yahoo.com/customi ... ch/ie.html
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\\Software\\Microsoft\\Internet Explorer\\SearchURL,(Default) = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\\PROGRA~1\\Yahoo!\\Companion\\Installs\\cpn0\\yt.dll
F2 - REG:system.ini: UserInit=C:\\WINDOWS\\system32\\Userinit.exe
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\\PROGRA~1\\Yahoo!\\Companion\\Installs\\cpn0\\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll
O2 - BHO: PopupBlockerBHO.CPopupBlockerBHO - {0D929918-C804-4756-B0AC-640EF3F061E9} - C:\\Program Files\\SmartPopupBlocker\\PopupBlockerBHO.dll
O2 - BHO: (no name) - {36ADA89D-2440-4DC4-820A-3A05E8630935} - C:\\Program Files\\Video ActiveX Access\\iesplg.dll (file missing)
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\\PROGRA~1\\Yahoo!\\Common\\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\Program Files\\Java\\jre1.5.0_04\\bin\\ssv.dll (file missing)
O2 - BHO: CleanMyPCPopupBlocker Class - {7A9BC6B1-7F27-47c6-A66D-13582E81E537} - C:\\Program Files\\CleanMyPC Popup Blocker\\CleanBHO.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\\Program Files\\Common Files\\Microsoft Shared\\Windows Live\\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\\Program Files\\Google\\GoogleToolbarNotifier\\2.1.615.5858\\swg.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\\Program Files\\Windows Live Toolbar\\msntb.dll
O2 - BHO: PersonalWebBHO - {D35980CB-66DF-477B-BF63-64EB8F48CB3A} - C:\\Program Files\\Claria\\PersonalWeb\\PersonalWebIE_v1505.dll
O2 - BHO: (no name) - {DD13196A-DCA8-842D-8FAD-A728E376329E} - (no file)
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\\Program Files\\Yahoo!\\browser\\YSidebarIEBHO.dll
O3 - Toolbar: CleanMyPC Toolbar - {04164EC4-1E48-4279-818E-3721931E7636} - C:\\Program Files\\CleanMyPC Popup Blocker\\CleanBar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\\Program Files\\Windows Live Toolbar\\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\\PROGRA~1\\Yahoo!\\Companion\\Installs\\cpn0\\yt.dll
O4 - HKLM\\..\\Run: [IgfxTray] C:\\WINDOWS\\system32\\igfxtray.exe
O4 - HKLM\\..\\Run: [HotKeysCmds] C:\\WINDOWS\\system32\\hkcmd.exe
O4 - HKLM\\..\\Run: [InstantAccess] C:\\Program Files\\ScanSoft\\TextBridge Millennium\\Bin\\InstantAccess.exe /h
O4 - HKLM\\..\\Run: [LVCOMSX] C:\\WINDOWS\\system32\\LVCOMSX.EXE
O4 - HKLM\\..\\Run: [LogitechVideoRepair] C:\\Program Files\\Logitech\\Video\\ISStart.exe
O4 - HKLM\\..\\Run: [LogitechVideoTray] C:\\Program Files\\Logitech\\Video\\LogiTray.exe
O4 - HKLM\\..\\Run: [UserFaultCheck] %systemroot%\\system32\\dumprep 0 -u
O4 - HKLM\\..\\Run: [Creative WebCam Tray] C:\\Program Files\\Creative\\Shared Files\\CAMTRAY.EXE
O4 - HKLM\\..\\Run: [googletalk] C:\\Program Files\\Google\\Google Talk\\googletalk.exe /autostart
O4 - HKLM\\..\\Run: [TkBellExe] \"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot
O4 - HKLM\\..\\Run: [Windows Defender] \"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide
O4 - HKLM\\..\\Run: [LogMeIn GUI] \"C:\\Program Files\\LogMeIn\\x86\\LogMeInSystray.exe\"
O4 - HKLM\\..\\Run: [PRISMSVR.EXE] \"C:\\WINDOWS\\system32\\PRISMSVR.EXE\" /APPLY
O4 - HKLM\\..\\Run: [QuickTime Task] \"C:\\Program Files\\QuickTime\\QTTask.exe\" -atboottime
O4 - HKLM\\..\\Run: [Adobe Reader Speed Launcher] \"C:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\"
O4 - HKLM\\..\\Run: [iTunesHelper] \"C:\\Program Files\\iTunes\\iTunesHelper.exe\"
O4 - HKCU\\..\\Run: [LogitechSoftwareUpdate] \"C:\\Program Files\\Logitech\\Video\\ManifestEngine.exe\" boot
O4 - HKCU\\..\\Run: [LDM] C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe
O4 - HKCU\\..\\Run: [Registry Defender] \"C:\\Program Files\\Registry Defender Trial\\RegClean.exe\"
O4 - HKCU\\..\\Run: [SOProc_RegSoAlertAjWxNn] rundll32 shell32.dll,ShellExec_RunDLL C:\\PROGRA~1\\SOFTWA~1\\soproc.exe -pack RegSoAlertAjWxNn
O4 - HKCU\\..\\Run: [googletalk] \"C:\\Program Files\\Google\\Google Talk\\googletalk.exe\" /autostart
O4 - HKCU\\..\\Run: [Yahoo! Pager] \"C:\\PROGRA~1\\Yahoo!\\MESSEN~1\\YAHOOM~1.EXE\" -quiet
O4 - HKCU\\..\\Run: [msnmsgr] \"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background
O4 - Global Startup: Dynex Wireless Networking Utility.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LDMConf.exe
O4 - Global Startup: Pagis Schedule Monitor.lnk = C:\\Program Files\\ScanSoft\\Pagis\\Monitor.exe
O8 - Extra context menu item: &MSN Search - res://C:\\Program Files\\MSN Toolbar Suite\\TB\\02.05.0001.1119\\en-us\\msntb.dll/search.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\\Program Files\\Windows Live Toolbar\\msntb.dll/search.htm
O8 - Extra context menu item: Open in new background tab - res://C:\\Program Files\\MSN Toolbar Suite\\TAB\\02.05.0001.1119\\en-us\\msntabres.dll/229?6c3b79aa7ccc4d0caa677b71b887dcf5
O8 - Extra context menu item: Open in new foreground tab - res://C:\\Program Files\\MSN Toolbar Suite\\TAB\\02.05.0001.1119\\en-us\\msntabres.dll/230?6c3b79aa7ccc4d0caa677b71b887dcf5
O9 - Extra button: Open PersonalWeb - {03F0E28F-1C51-4a56-A8F1-E8BF15AF8346} - C:\\Program Files\\Claria\\PersonalWeb\\PersonalWebIE_v1505.dll
O9 - Extra button: Add to My Sites - {1BD60387-6806-4897-8002-0B855DFEAEEA} - C:\\Program Files\\Claria\\PersonalWeb\\PersonalWebIE_v1505.dll
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\\PROGRA~1\\Yahoo!\\Common\\yiesrvc.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\\windows\\system32\\nwprovau.dll
O12 - Plugin for .spop: C:\\Program Files\\Internet Explorer\\Plugins\\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\\Program Files\\Yahoo!\\Common\\Yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 0150219343
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMe ... loader.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/RACtrl.cab
O18 - Protocol: bw+0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {FB54FBC7-F1FE-45D5-9EAA-96B1914CB8FA} - C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: o?
O22 - SharedTaskScheduler: {ee2975b6-e8d5-405e-8448-8fe9590f6cfb} - cholecyst - (no file)
O22 - SharedTaskScheduler: {874443fe-aa33-4ebf-a6ac-73208787e62d} - bestreak - (no file)
O22 - SharedTaskScheduler: cankered - {44e670f2-d57b-4815-a576-955d17dbbf2d} - C:\\WINDOWS\\system32\\dooep.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\\Program Files\\Lavasoft\\Ad-Aware 2007\\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\\Program Files\\Common Files\\Apple\\Mobile Device Support\\bin\\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\\Program Files\\Symantec\\LiveUpdate\\ALUSchedulerSvc.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\\Program Files\\Google\\Common\\Google Updater\\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\\Program Files\\iPod\\bin\\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\\PROGRA~1\\Symantec\\LIVEUP~1\\LUCOMS~1.EXE
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\\Program Files\\LogMeIn\\x86\\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\\Program Files\\LogMeIn\\x86\\LogMeIn.exe
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\\WINDOWS\\System32\\wltrysvc.exe
O24 - Desktop Component 1: (no name) - http://www.yahoo.com/r/m2

--
End of file - 23434 bytes

thewolfe · Post by **thewolfe** » Mon Jan 07, 2008 1:17 pm

BTW. I'm using LogMeIn

Krom · Post by **Krom** » Mon Jan 07, 2008 1:29 pm

So what is your problem? Or did you want us to just guess it from the log?

thewolfe · Post by **thewolfe** » Mon Jan 07, 2008 1:34 pm

He's getting a bunch of popups (with IE popup blocker on) and when I was looking at it a couple of weeks ago I saw something about \"Zedo\" on there.

I know he was looking at porno at one time also.

Krom · Post by **Krom** » Mon Jan 07, 2008 1:41 pm

My first guess would be everything related to Claria PersonalWeb. (The rest of us know of this as formerly GAIN Gator.)

O2 - BHO: PersonalWebBHO - {D35980CB-66DF-477B-BF63-64EB8F48CB3A} - C:\\Program Files\\Claria\\PersonalWeb\\PersonalWebIE_v1505.dll
O9 - Extra button: Open PersonalWeb - {03F0E28F-1C51-4a56-A8F1-E8BF15AF8346} - C:\\Program Files\\Claria\\PersonalWeb\\PersonalWebIE_v1505.dll
O9 - Extra button: Add to My Sites - {1BD60387-6806-4897-8002-0B855DFEAEEA} - C:\\Program Files\\Claria\\PersonalWeb\\PersonalWebIE_v1505.dll

thewolfe · Post by **thewolfe** » Mon Jan 07, 2008 2:28 pm

I see he has \"Spiceworks\" which is supossed to be a \"Free Network Monitoring Software for Network Management\".

Is it legit? I know he had someone helping him with his wireless card & connection.

Top Wop · Post by **Top Wop** » Tue Jan 08, 2008 1:30 pm

The best way to find out if something is legit is to stick it into Google and do 2 mins of research on it.

Id also recommend using Dr. Web Anti-Virus, their online scanner is here:
http://download.drweb.com/drweb+antivir ... ervices/#1

And download and install BOClean and let it run a scan:
http://www.comodo.com/boclean/boclean.html

What adware scanners have you run on this machine so far?

thewolfe · Post by **thewolfe** » Tue Jan 08, 2008 3:47 pm

Thanks, I do use Google and it looked fine but why not get more info from \"you all\".

I ran Windows Defender, Ad-Aware, Nortin Scan and then AVG that found 4 viruses.

Top Wop · Post by **Top Wop** » Tue Jan 08, 2008 6:19 pm

Run the 2 previous programs mentioned in my post and it should remove that Claria garbage. Let us know how it goes.