connect coolweb

evilkillermouseevilkillermouse
edited August 2006 in Spyware & Virus Removal
Every once and a while, a box will pop up on my firefox that says "Connect CoolWeb" and has a text box labeled dial. I didn't download any coolweb phone servace, so I fear this may be spyware.

Here is my logfile:

Logfile of HijackThis v1.99.1
Scan saved at 10:20:49 PM, on 8/5/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\M-Audio\JamLab\JamLabInst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\windows\hffext\hffsrv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\System32\M-AudioTaskBarIcon.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\{04101C59-0AE6-1033-0108-040305130001}\Update.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
C:\Program Files\Google\Web Accelerator\googlewebaccclient.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Last.fm\LastFM.exe
C:\WINDOWS\system32\cool.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Documents and Settings\Daniel\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://launch.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://localhost:9100/proxy.pac
O3 - Toolbar: Google Web Accelerator - {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll
O3 - Toolbar: ToolBar888 - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - C:\Program Files\ToolBar888\MyToolBar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [hffsrv] c:\windows\hffext\hffsrv.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [M-Audio Taskbar Icon] C:\WINDOWS\System32\M-AudioTaskBarIcon.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.ex" -silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: Run Google Web Accelerator.lnk = C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {A2E05F45-F127-4092-B9F7-9A02C3E04C77} (HGPlugin7USA Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin7USA.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: JamLab Installer (JamLabInstallerService) - M-Audio - C:\Program Files\M-Audio\JamLab\JamLabInst.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe


Is there anything I can remove to make this go away?

Thanks in advance,
Evilkillermouse

Comments

  • mtunickmtunick
    edited August 2006
    Download Smitfraudfix here: http://siri.urz.free.fr/Fix/SmitfraudFix.zip

    Run Smitfraud.cmd and select 1:Scan

    Post contents of log.
  • evilkillermouseevilkillermouse
    edited August 2006
    Alright, here's what I got.
    SmitFraudFix v2.81

    Scan done at 13:05:22.87, Sun 08/06/2006
    Run from C:\Documents and Settings\Daniel\Desktop\Scan
    OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
    Fix ran in normal mode

    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Daniel\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Start Menu


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Daniel\FAVORI~1


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


    »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="My Current Home Page"


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


    »»»»»»»»»»»»»»»»»»»»»»»» End
  • mtunickmtunick
    edited August 2006
    In hjt fix this:

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,AutoConfigURL = http://localhost:9100/proxy.pac

    Go here http://www.grisoft.cz/softw/70/filedir/inst/ewido-setup_4.0.0.172c.exe to download ewido. Update it, then run a complete system scan. Save a log and repost also repost HJT log.
  • evilkillermouseevilkillermouse
    edited August 2006
    ewido anti-spyware - Scan Report

    + Created at: 6:48:25 PM 8/6/2006

    + Scan result:



    C:\Program Files\Aspell\AWS\WeatherBug\MiniBugTransporter.dll -> Adware.Aws : Cleaned with backup (quarantined).
    C:\Documents and Settings\Daniel\Local Settings\Temp\VVSNInst.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
    C:\Documents and Settings\Daniel\Local Settings\Temp\8pur44k9.zip/TNT-CPUCOOL.Patch.exe -> Backdoor.Theef.111 : Cleaned with backup (quarantined).
    :mozilla.175:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.176:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.177:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.178:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.179:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.180:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.181:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.267:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.291:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.346:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.361:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.321:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.324:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.282:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
    :mozilla.284:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
    :mozilla.23:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.24:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.25:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.26:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.27:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.30:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    C:\Documents and Settings\Daniel\Cookies\daniel@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.31:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
    :mozilla.301:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
    :mozilla.302:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
    :mozilla.271:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
    :mozilla.64:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
    :mozilla.56:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.65:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.66:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.67:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.105:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.106:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.107:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.108:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.109:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.110:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.111:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    C:\Documents and Settings\Daniel\Cookies\daniel@com[1].txt -> TrackingCookie.Com : Cleaned.
    :mozilla.167:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.168:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.169:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.170:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.72:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.73:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    C:\Documents and Settings\Daniel\Cookies\daniel@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.295:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Epilot : Cleaned.
    :mozilla.112:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
    :mozilla.113:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
    :mozilla.114:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
    :mozilla.115:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
    :mozilla.116:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
    :mozilla.100:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.91:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.93:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.94:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.95:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.96:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.97:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.98:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.330:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.331:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.355:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.356:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.245:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned.
    :mozilla.409:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Hypertracker : Cleaned.
    :mozilla.218:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Linksynergy : Cleaned.
    :mozilla.219:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Linksynergy : Cleaned.
    :mozilla.130:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
    :mozilla.131:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
    :mozilla.40:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
    C:\Documents and Settings\Daniel\Cookies\daniel@www.myaffiliateprogram[1].txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
    :mozilla.412:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
    :mozilla.413:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
    :mozilla.329:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    C:\Documents and Settings\Daniel\Cookies\daniel@data2.perf.overture[1].txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.365:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Paycounter : Cleaned.
    :mozilla.308:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.309:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.310:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.311:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.312:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.117:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.118:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.119:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.343:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
    :mozilla.344:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
    :mozilla.345:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
    :mozilla.120:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.121:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.382:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.383:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.384:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.385:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.386:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.247:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
    :mozilla.340:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
    :mozilla.341:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
    :mozilla.342:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
    :mozilla.57:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.58:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.59:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.60:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.61:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.62:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.63:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.68:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.188:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.189:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.190:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.229:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
    :mozilla.231:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.157:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.158:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.159:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.160:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.161:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.162:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.163:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.164:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.165:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.281:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Trafic : Cleaned.
    :mozilla.69:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.70:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.71:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.74:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.75:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.76:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.77:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.258:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.259:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.260:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.262:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.246:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
    :mozilla.148:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.149:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.150:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.151:C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\o3n7hrnl.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    C:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\MY5G35IH\bgates[1].exe -> Trojan.Dialer.pz : Cleaned with backup (quarantined).


    ::Report end

    |
    |
    |
    |
    |
    |
    |
    |
    |
    |
    And here's my HJT log

    Logfile of HijackThis v1.99.1
    Scan saved at 6:49:29 PM, on 8/6/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\M-Audio\JamLab\JamLabInst.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\windows\hffext\hffsrv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\BCMSMMSG.exe
    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    C:\WINDOWS\System32\M-AudioTaskBarIcon.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Logitech\MouseWare\system\em_exec.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
    C:\Program Files\Google\Web Accelerator\googlewebaccclient.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\Program Files\ewido anti-spyware 4.0\ewido.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Daniel\Desktop\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://launch.yahoo.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://localhost:9100/proxy.pac
    O3 - Toolbar: Google Web Accelerator - {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [hffsrv] c:\windows\hffext\hffsrv.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
    O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    O4 - HKLM\..\Run: [M-Audio Taskbar Icon] C:\WINDOWS\System32\M-AudioTaskBarIcon.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.ex" -silent
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
    O4 - Global Startup: Run Google Web Accelerator.lnk = C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {A2E05F45-F127-4092-B9F7-9A02C3E04C77} (HGPlugin7USA Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin7USA.cab
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: JamLab Installer (JamLabInstallerService) - M-Audio - C:\Program Files\M-Audio\JamLab\JamLabInst.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
  • benj
    edited August 2006
    Same problem. :(

    Thanks in advance.

    Here's the HJT.
    ==

    Logfile of HijackThis v1.99.1
    Scan saved at 1:49:51 AM, on 8/11/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\System32\sm56hlpr.exe
    C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
    C:\DOCUME~1\iicvolzk\APPLIC~1\SSTEM~1\services.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\Common Files\Teleca Shared\Generic.exe
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
    C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    C:\Program Files\Trend Micro\Tmas\Tmas.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\WINDOWS\System32\wbem\wmiapsrv.exe
    C:\WINDOWS\System32\cool.exe
    C:\Program Files\WinRAR\WinRAR.exe
    C:\DOCUME~1\iicvolzk\LOCALS~1\Temp\Rar$EX00.480\HijackThis.exe

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKCU\..\Run: [Escm] "C:\DOCUME~1\iicvolzk\APPLIC~1\SSTEM~1\services.exe" -vt yazb
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Trend Micro Anti-Spyware.lnk = C:\Program Files\Trend Micro\Tmas\Tmas.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{11C1A766-8755-4EE2-ACB9-990D6DB065F0}: NameServer = 202.78.97.41 202.78.97.35
    O17 - HKLM\System\CS1\Services\Tcpip\..\{11C1A766-8755-4EE2-ACB9-990D6DB065F0}: NameServer = 202.78.97.41 202.78.97.35
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: winipe32 - C:\WINDOWS\SYSTEM32\winipe32.dll
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: O&O Defrag (OODefrag) - O&O Software GmbH - C:\WINDOWS\System32\oodag.exe
Sign In or Register to comment.