Computer brings up blank desktop; system upgrade does nothing[inactive]

Unknown
edited June 2006 in Spyware & Virus Removal
so my computer keeps bringing up a blank desktop/toolbar. i have access to aim and other programs only through taskmanager. can someone please check out my hijackthis?

Logfile of HijackThis v1.99.1
Scan saved at 12:26:43 AM, on 6/22/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\System32\ctfmon.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Slashtap3.SLASHTAP\Desktop\HijackThis.exe

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O2 - BHO: BrowserHelper Class - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\WINDOWS\System32\StopzillaBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [SRFirstRun] rundll32 srclient.dll,CreateFirstRunRp
O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
O4 - HKLM\..\Run: [DXDllRegExe] C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdllreg.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: NavLogon - C:\windows\System32\NavLogon.dll
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Comments

  • jmoney3457jmoney3457 Maine
    edited June 2006
    Please do an online scan with Kaspersky WebScanner

    Click on Kaspersky Online Scanner

    You will be promted to install an ActiveX component from Kaspersky, Click Yes.
    • The program will launch and then begin downloading the latest definition files:
    • Once the files have been downloaded click on NEXT
    • Now click on Scan Settings
    • In the scan settings make that the following are selected:
      • Scan using the following Anti-Virus database:
        Extended (if available otherwise Standard)
      • Scan Options:
        Scan Archives
        Scan Mail Bases

        [*]Click OK
        [*]Now under select a target to scan:
          Select
        My Computer

        [*]This will program will start and scan your system.
        [*]The scan will take a while so be patient and let it run.
        [*]Once the scan is complete it will display if your system has been infected.
        • Now click on the Save as Text button:
        [*]Save the file to your desktop.
        [*]Copy and paste that information in your next post.
      • seiken_izumi
        edited June 2006
        KASPERSKY ON-LINE SCANNER REPORT
        Thursday, June 22, 2006 6:04:31 PM
        Operating System: Microsoft Windows XP Professional, (Build 2600)
        Kaspersky On-line Scanner version: 5.0.78.0
        Kaspersky Anti-Virus database last update: 22/06/2006
        Kaspersky Anti-Virus database records: 190025

        Scan Settings:
        Scan using the following antivirus database: standard
        Scan Archives: true
        Scan Mail Bases: true

        Scan Target - My Computer:
        A:\
        C:\
        D:\

        Scan Statistics:
        Total number of scanned objects: 53204
        Number of viruses found: 5
        Number of infected objects: 74
        Number of suspicious objects: 0
        Duration of the scan process: 02:10:28

        Infected Object Name / Virus Name / Last Action
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\017C0001.VBN Infected: Worm.Win32.VB.an skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\017C0002.VBN Infected: Worm.Win32.VB.an skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80000.VBN Infected: Trojan-Spy.Win32.Qukart.ab skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80004.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80005.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80006.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80007.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80008.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80009.VBN Infected: Trojan-Dropper.Win32.VB.lu skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A8000A.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A8000B.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A8000C.VBN Infected: Trojan-Dropper.Win32.VB.lu skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A8000D.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A8000E.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A8000F.VBN Infected: Trojan-Dropper.Win32.VB.lu skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80010.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80011.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80012.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80013.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80014.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80015.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80016.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80017.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80018.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A80019.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A8001A.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A8001B.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\07D00000.VBN Infected: P2P-Worm.Win32.VB.dw skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800000\4BD58F30.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800001\4BD58F86.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800002\4BD58FCD.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800003\4BD59010.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800004\4BD59058.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800005\4BD590A1.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800006\4BD590E7.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800007\4BD59132.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800008\4BD59177.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800009\4BD591BF.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80000A\4BD59208.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80000B\4BD5924A.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80000C\4BD59295.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80000D\4BD592E8.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80000E\4BD59326.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80000F\4BD59345.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800010\4BD59363.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800011\4BD5938B.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800012\4BD593CD.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800013\4BD59417.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800014\4BD59463.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800015\4BD594AC.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800016\4BD594EE.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800017\4BD5953B.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800018\4BD59591.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800019\4BD595D9.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80001A\4BD5961C.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80001B\4BD5965C.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80001C\4BD596C1.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80001D\4BD59758.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80001E\4BD597E6.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80001F\4BD59804.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800020\4BD59821.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800021\4BD59853.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800022\4BD59897.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800023\4BD598D6.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800024\4BD59918.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800025\4BD59957.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800026\4BD59999.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800027\4BD599D4.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800028\4BD59A25.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A800029\4BD59A72.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80002A\4BD59ABB.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80002B\4BD59B02.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80002C\4BD59B45.VBN Infected: Backdoor.Win32.Hupigon.bv skipped
        C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0A80002D\4BD59B82.VBN Infected: Backdoor.Win32.Hupigon.bv skipped

        Scan process completed.
      • seiken_izumi
        edited June 2006
        jmoney3457 wrote:
        Please do an online scan with Kaspersky WebScanner

        Click on Kaspersky Online Scanner

        You will be promted to install an ActiveX component from Kaspersky, Click Yes.
        • The program will launch and then begin downloading the latest definition files:
        • Once the files have been downloaded click on NEXT
        • Now click on Scan Settings
        • In the scan settings make that the following are selected:
          • Scan using the following Anti-Virus database:
            Extended (if available otherwise Standard)
          • Scan Options:
            Scan Archives
            Scan Mail Bases

            [*]Click OK
            [*]Now under select a target to scan:
              Select
            My Computer

            [*]This will program will start and scan your system.
            [*]The scan will take a while so be patient and let it run.
            [*]Once the scan is complete it will display if your system has been infected.
            • Now click on the Save as Text button:
            [*]Save the file to your desktop.
            [*]Copy and paste that information in your next post.

            unfortunately, all the previous symptoms are still there. if i try to run explorer.exe through taskmanager, it flashes very quickly and i still have no access to the desktop and the toolbar.
          • jmoney3457jmoney3457 Maine
            edited June 2006
            hmm...those all are from your symantec quarentine folder..could you please flush out (delete) all those in quarentine and post a new HJT log
          • seiken_izumi
            edited June 2006
            jmoney3457 wrote:
            hmm...those all are from your symantec quarentine folder..could you please flush out (delete) all those in quarentine and post a new HJT log

            Logfile of HijackThis v1.99.1
            Scan saved at 1:05:26 AM, on 6/23/2006
            Platform: Windows XP (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 (6.00.2600.0000)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\System32\ctfmon.exe
            C:\Program Files\Netropa\Multimedia Keyboard\Traymon.exe
            C:\Program Files\Netropa\Onscreen Display\osd.exe
            C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
            C:\Program Files\AIM\aim.exe
            C:\Documents and Settings\Slashtap3.SLASHTAP\Desktop\HijackThis.exe

            O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
            O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
            O2 - BHO: BrowserHelper Class - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\WINDOWS\System32\StopzillaBHO.dll
            O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
            O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
            O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
            O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
            O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
            O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
            O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
            O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
            O4 - HKLM\..\Run: [SRFirstRun] rundll32 srclient.dll,CreateFirstRunRp
            O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
            O4 - HKLM\..\Run: [DXDllRegExe] C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdllreg.exe
            O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
            O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
            O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
            O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
            O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
            O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
            O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
            O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
            O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
            O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
            O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
            O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
            O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
            O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
            O20 - Winlogon Notify: NavLogon - C:\windows\System32\NavLogon.dll

            after a quick reboot, still the same symptoms are here.
          • jmoney3457jmoney3457 Maine
            edited June 2006
            hi zumi please run this scanner remove any it finds..let me know if it found anything & please post new hjt log after scan..reboot then do hjt and post logfile heres the scanner --->http://www.trendmicro.com/spyware-scan/free_spyware_scan.asp
          This discussion has been closed.