Logfile of HijackThis v1.99.1
Scan saved at 5:12:22 AM, on 6/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.17184)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\TechniSat DVB\bin\Server4PC.exe
C:\Program Files\FolderSize\FolderSizeSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\XPPRESP3\LOCALS~1\Temp\Rar$EX00.266\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.fannansat.com/vb/forumdisplay.php?f=1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.google.ae
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.ae
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 69.217.73.52:8080
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - (no file)
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [VerbAce] C:\Program Files\VerbAce\VerbAce.exe -AutoRun
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [amva] C:\WINDOWS\system32\amvo.exe
O4 - Global Startup: BlueSoleil.lnk = ?
O4 - Global Startup: Server4PC.lnk = C:\Program Files\TechniSat DVB\bin\Server4PC.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: English<->Arabic - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Arabic) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Bulgarian - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Bulgarian) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Croatian - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Croatian) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Greek - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Greek) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Hebrew - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Hebrew) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Japanese Kanji Kana - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Japanese Kanji Kana) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Japanese Kanji Romaji - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Japanese Kanji Romaji) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Japanese Romaji Kanji - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Japanese Romaji Kanji) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Korean - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Korean) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Persian (Farsi) - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Persian (Farsi)) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Polish - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Polish) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Portuguese - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Portuguese) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Romanian - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Romanian) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Turkish - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Turkish) for Windows\Plugins\IE.htm
O8 - Extra context menu item: English<->Yiddish - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Yiddish) for Windows\Plugins\IE.htm
O8 - Extra context menu item: SYSTRAN Lookup - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
O8 - Extra context menu item: SYSTRAN Translate - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send Sms - {12344678-1234-1234-1234-1234567890ab} - C:\Program Files\FlashSms\FlashSms.EXE (file missing)
O9 - Extra button: English<->Turkish - {15519E74-9007-E947-93A9-1001C66B82BF} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Turkish) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Turkish - {15519E74-9007-E947-93A9-1001C66B82BF} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Turkish) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: English<->Korean - {28312C47-FE57-494D-8EC6-420537292087} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Korean) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Korean - {28312C47-FE57-494D-8EC6-420537292087} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Korean) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Hebrew - {2FAB815D-CC00-BC40-A47E-9CADC886B813} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Hebrew) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Hebrew - {2FAB815D-CC00-BC40-A47E-9CADC886B813} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Hebrew) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Persian (Farsi) - {349D26DA-CC75-D04A-9E28-06C902ED5D86} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Persian (Farsi)) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Persian (Farsi) - {349D26DA-CC75-D04A-9E28-06C902ED5D86} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Persian (Farsi)) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Romanian - {3962C564-09DA-DA4A-A678-B7963BE5E0DB} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Romanian) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Romanian - {3962C564-09DA-DA4A-A678-B7963BE5E0DB} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Romanian) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Portuguese - {4BBAB5A0-6679-624A-A543-3769FB73E9DB} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Portuguese) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Portuguese - {4BBAB5A0-6679-624A-A543-3769FB73E9DB} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Portuguese) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Bulgarian - {4FD6C2D1-0FB9-184B-94BC-F6341E4410DE} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Bulgarian) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Bulgarian - {4FD6C2D1-0FB9-184B-94BC-F6341E4410DE} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Bulgarian) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Yiddish - {5919B012-D882-824D-B50E-7E3E109CF413} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Yiddish) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Yiddish - {5919B012-D882-824D-B50E-7E3E109CF413} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Yiddish) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Greek - {6F9F2082-6D65-9546-96B8-C62BE15CBAA6} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Greek) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Greek - {6F9F2082-6D65-9546-96B8-C62BE15CBAA6} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Greek) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Japanese Kanji Romaji - {7072F510-7DFA-E044-BA2C-3A3E027951FA} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Japanese Kanji Romaji) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Japanese Kanji Romaji - {7072F510-7DFA-E044-BA2C-3A3E027951FA} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Japanese Kanji Romaji) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Arabic - {785582BF-DB45-AD4E-8F7A-6742C0308E46} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Arabic) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Arabic - {785582BF-DB45-AD4E-8F7A-6742C0308E46} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Arabic) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Croatian - {7FD4EC2A-B378-EB42-9C59-B37D5882F8E3} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Croatian) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Croatian - {7FD4EC2A-B378-EB42-9C59-B37D5882F8E3} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Croatian) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Japanese Kanji Kana - {85BB611F-0463-7743-92C5-67369DD6657D} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Japanese Kanji Kana) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Japanese Kanji Kana - {85BB611F-0463-7743-92C5-67369DD6657D} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Japanese Kanji Kana) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Japanese Romaji Kanji - {9F55FA3E-B8C4-FA49-8F20-CD505E2612EE} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Japanese Romaji Kanji) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Japanese Romaji Kanji - {9F55FA3E-B8C4-FA49-8F20-CD505E2612EE} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Japanese Romaji Kanji) for Windows\Plugins\IE.htm (file missing)
O9 - Extra button: English<->Polish - {DCA5FA1E-2195-2847-97A4-1F16BEFA92D3} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Polish) for Windows\Plugins\IE.htm (file missing)
O9 - Extra 'Tools' menuitem: English<->Polish - {DCA5FA1E-2195-2847-97A4-1F16BEFA92D3} - C:\Program Files\LingvoSoft\LingvoSoft Talking Dictionary 2007 (English-Polish) for Windows\Plugins\IE.htm (file missing)
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O17 - HKLM\System\CCS\Services\Tcpip\..\{BBE915B0-5025-4A14-963F-1B48AE5AAB11}: NameServer = 212.72.1.186 212.72.23.4
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVP - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: BlackHole Remote Control Services (BRC_Services) - Unknown owner - C:\WINDOWS\system32\brc_Server.exe" /service (file missing)
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Folder Size (FolderSize) - Brio - C:\Program Files\FolderSize\FolderSizeSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: mysql - Unknown owner - C:\orsm\xampp\mysql\bin\mysqld-nt.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
