Computing.Net > Forums > Windows XP > Trojan virus help!!!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Trojan virus help!!!

Reply to Message Icon

Name: Antoine
Date: December 2, 2003 at 16:24:16 Pacific
OS: XP
CPU/Ram: 256
Comment:

i used the norton online virus scan and found that there is a the trojan backdoor.beasty on my computer. The removal instructions weren't any help because the registry keys they told me to remove weren't there. here is my hijack log

Logfile of HijackThis v1.97.5
Scan saved at 7:11:26 PM, on 12/2/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\ups.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\wt\updater\wcmdmgr.exe
C:\program files\quicktime\qttask.exe
C:\Program Files\WildTangent\Apps\GameChannel.exe
C:\Program Files\Messenger Plus! 2\MsgPlus.exe
C:\WINDOWS\Mixer.exe
C:\PROGRA~1\COMMON~3\Toolbar\comwiz.exe
C:\Program Files\RSNet\RSEDNClient.exe
C:\Program Files\AdsGone\adsgone.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Anthony\Local Settings\Temp\HijackThis.exe
C:\PROGRA~1\COMMON~3\Toolbar\winnet.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://dev.ntcor.com/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.broadband.rogers.com/custom.jsp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://dev.ntcor.com/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.broadband.rogers.com/custom.jsp
R3 - Default URLSearchHook is missing
O1 - Hosts: 203.161.127.141 www.dcsresearch.com
O2 - BHO: BabeIE - {00000000-0000-0000-0000-000000000000} - C:\PROGRA~1\COMMON~3\Toolbar\cnbabe.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E1B2879-88FF-11D2-8D96-D7ACAC31337F} - C:\WINDOWS\system32\Mslink32.dll
O2 - BHO: (no name) - {49404cfb-6f00-4305-93a6-baadaac32368} - C:\DOCUME~1\Anthony\APPLIC~1\sseepckierk.dll
O2 - BHO: Httper - {A5483501-070C-41DD-AF44-9BD8864B3015} - C:\Program Files\Httper\httper.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\downloaded program files\googletoolbar_en_2.0.95-big.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FB8CBA0F-78C0-03FA-8032-0E460DA5DEBB} - C:\WINDOWS\system32\fhwarsmv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\downloaded program files\googletoolbar_en_2.0.95-big.dll
O3 - Toolbar: Adult Links - {965E6B07-6832-4738-BDBE-25F226BA2AB0} - C:\WINDOWS\system32\QaBar.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [wcmdmgr] C:\WINDOWS\wt\updater\wcmdmgrl.exe -launch
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.exe
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.exe /IMEName
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Launcher] "C:\Program Files\KFH\cl\launcher.exe" /P
O4 - HKLM\..\Run: [QuickTime Task] "C:\program files\quicktime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WT GameChannel] C:\Program Files\WildTangent\Apps\GameChannel.exe
O4 - HKLM\..\Run: [winnet] C:\PROGRA~1\COMMON~3\Toolbar\winnet.exe
O4 - HKLM\..\Run: [SysComp] C:\WINDOWS\System32\msabiy.com
O4 - HKLM\..\Run: [PAV.EXE] C:\WINDOWS
O4 - HKLM\..\Run: [SafeSurfingUpdate] C:\Program Files\SafeSurfing\SSUpdate.exe
O4 - HKLM\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe"
O4 - HKLM\..\Run: [WinFavorites] c:\program files\winfavorites\WinFavorites.exe1
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] C:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [Content-Type: text/] c:\WINDOWS\System32\Content-Type: text/html
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [66004] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\66004.cpl
O4 - HKCU\..\Run: [65922] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\65922.cpl
O4 - HKCU\..\Run: [66002] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\66002.cpl
O4 - HKCU\..\Run: [65912] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\65912.cpl
O4 - HKCU\..\Run: [131438] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131438.cpl
O4 - HKCU\..\Run: [65958] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\65958.cpl
O4 - HKCU\..\Run: [131414] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131414.cpl
O4 - HKCU\..\Run: [131360] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131360.cpl
O4 - HKCU\..\Run: [262484] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262484.cpl
O4 - HKCU\..\Run: [2949356] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\2949356.cpl
O4 - HKCU\..\Run: [5571108] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\5571108.cpl
O4 - HKCU\..\Run: [524344] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\524344.cpl
O4 - HKCU\..\Run: [262420] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262420.cpl
O4 - HKCU\..\Run: [66000] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\66000.cpl
O4 - HKCU\..\Run: [131456] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131456.cpl
O4 - HKCU\..\Run: [65980] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\65980.cpl
O4 - HKCU\..\Run: [65986] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\65986.cpl
O4 - HKCU\..\Run: [131490] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131490.cpl
O4 - HKCU\..\Run: [196940] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196940.cpl
O4 - HKCU\..\Run: [262402] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262402.cpl
O4 - HKCU\..\Run: [131494] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131494.cpl
O4 - HKCU\..\Run: [327924] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\327924.cpl
O4 - HKCU\..\Run: [262426] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262426.cpl
O4 - HKCU\..\Run: [328042] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\328042.cpl
O4 - HKCU\..\Run: [131404] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131404.cpl
O4 - HKCU\..\Run: [393444] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\393444.cpl
O4 - HKCU\..\Run: [131370] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131370.cpl
O4 - HKCU\..\Run: [327996] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\327996.cpl
O4 - HKCU\..\Run: [262478] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262478.cpl
O4 - HKCU\..\Run: [327994] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\327994.cpl
O4 - HKCU\..\Run: [524460] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\524460.cpl
O4 - HKCU\..\Run: [131286] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131286.cpl
O4 - HKCU\..\Run: [131262] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131262.cpl
O4 - HKCU\..\Run: [196832] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196832.cpl
O4 - HKCU\..\Run: [131256] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131256.cpl
O4 - HKCU\..\Run: [196824] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196824.cpl
O4 - HKCU\..\Run: [393450] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\393450.cpl
O4 - HKCU\..\Run: [196842] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196842.cpl
O4 - HKCU\..\Run: [393470] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\393470.cpl
O4 - HKCU\..\Run: [131300] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131300.cpl
O4 - HKCU\..\Run: [196770] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196770.cpl
O4 - HKCU\..\Run: [196892] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196892.cpl
O4 - HKCU\..\Run: [459024] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\459024.cpl
O4 - HKCU\..\Run: [131386] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131386.cpl
O4 - HKCU\..\Run: [196760] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196760.cpl
O4 - HKCU\..\Run: [131504] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131504.cpl
O4 - HKCU\..\Run: [196826] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196826.cpl
O4 - HKCU\..\Run: [65902] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\65902.cpl
O4 - HKCU\..\Run: [328002] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\328002.cpl
O4 - HKCU\..\Run: [196854] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196854.cpl
O4 - HKCU\..\Run: [131506] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131506.cpl
O4 - HKCU\..\Run: [196942] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196942.cpl
O4 - HKCU\..\Run: [131348] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131348.cpl
O4 - HKCU\..\Run: [131354] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131354.cpl
O4 - HKCU\..\Run: [197058] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\197058.cpl
O4 - HKCU\..\Run: [196802] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196802.cpl
O4 - HKCU\..\Run: [459004] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\459004.cpl
O4 - HKCU\..\Run: [262448] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262448.cpl
O4 - HKCU\..\Run: [327980] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\327980.cpl
O4 - HKCU\..\Run: [393382] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\393382.cpl
O4 - HKCU\..\Run: [262300] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262300.cpl
O4 - HKCU\..\Run: [328004] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\328004.cpl
O4 - HKCU\..\Run: [196836] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196836.cpl
O4 - HKCU\..\Run: [721108] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\721108.cpl
O4 - HKCU\..\Run: [131412] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131412.cpl
O4 - HKCU\..\Run: [262378] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262378.cpl
O4 - HKCU\..\Run: [1245486] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\1245486.cpl
O4 - HKCU\..\Run: [65828] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\65828.cpl
O4 - HKCU\..\Run: [131388] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131388.cpl
O4 - HKCU\..\Run: [786750] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\786750.cpl
O4 - HKCU\..\Run: [131332] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131332.cpl
O4 - HKCU\..\Run: [196956] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196956.cpl
O4 - HKCU\..\Run: [590148] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\590148.cpl
O4 - HKCU\..\Run: [393514] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\393514.cpl
O4 - HKCU\..\Run: [65934] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\65934.cpl
O4 - HKCU\..\Run: [65906] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\65906.cpl
O4 - HKCU\..\Run: [131284] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131284.cpl
O4 - HKCU\..\Run: [131474] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131474.cpl
O4 - HKCU\..\Run: [458996] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\458996.cpl
O4 - HKCU\..\Run: [131430] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131430.cpl
O4 - HKCU\..\Run: [66078] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\66078.cpl
O4 - HKCU\..\Run: [262372] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262372.cpl
O4 - HKCU\..\Run: [262374] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262374.cpl
O4 - HKCU\..\Run: [393554] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\393554.cpl
O4 - HKCU\..\Run: [327890] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\327890.cpl
O4 - HKCU\..\Run: [66042] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\66042.cpl
O4 - HKCU\..\Run: [131326] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131326.cpl
O4 - HKCU\..\Run: [196844] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196844.cpl
O4 - HKCU\..\Run: [327908] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\327908.cpl
O4 - HKCU\..\Run: [524578] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\524578.cpl
O4 - HKCU\..\Run: [196882] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\196882.cpl
O4 - HKCU\..\Run: [131400] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131400.cpl
O4 - HKCU\..\Run: [66236] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\66236.cpl
O4 - HKCU\..\Run: [524444] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\524444.cpl
O4 - HKCU\..\Run: [524586] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\524586.cpl
O4 - HKCU\..\Run: [262370] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262370.cpl
O4 - HKCU\..\Run: [262456] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\262456.cpl
O4 - HKCU\..\Run: [5177512] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\5177512.cpl
O4 - HKCU\..\Run: [524618] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\524618.cpl
O4 - HKCU\..\Run: [327998] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\327998.cpl
O4 - HKCU\..\Run: [66010] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\66010.cpl
O4 - HKCU\..\Run: [131246] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131246.cpl
O4 - HKCU\..\Run: [787512] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\787512.cpl
O4 - HKCU\..\Run: [197186] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\197186.cpl
O4 - HKCU\..\Run: [131732] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\131732.cpl
O4 - HKCU\..\Run: [197284] rundll32.exe shell32.dll,Control_RunDLL C:\WINDOWS\197284.cpl
O4 - HKCU\..\Run: [Red Swoosh EDN Client] C:\Program Files\RSNet\RSEDNClient.exe
O4 - HKCU\..\Run: [ContentService] C:\WINDOWS\System32\winservn.exe
O4 - HKCU\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Content-Type: text/] c:\WINDOWS\System32\Content-Type: text/html
O4 - Startup: AdsGone.lnk = C:\Program Files\AdsGone\adsgone.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: AdsGone 2004.lnk = C:\Program Files\AdsGone\adsgone.exe
O8 - Extra context menu item: &Google Search - res://c:\windows\downloaded program files\GoogleToolbar_en_2.0.95-big.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://c:\windows\downloaded program files\GoogleToolbar_en_2.0.95-big.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\windows\downloaded program files\GoogleToolbar_en_2.0.95-big.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://c:\windows\downloaded program files\GoogleToolbar_en_2.0.95-big.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page - res://c:\windows\downloaded program files\GoogleToolbar_en_2.0.95-big.dll/cmtrans.html
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.trojanscan.com/trojanscan/TDECntrl.CAB
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {407F5185-3B2E-4196-982B-1E258C46F8FD} - ftp://ftp.ea.com/pub/easports/patches/nhl2003/en-us/nhl.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20020713/qtinstall.info.apple.com/samantha/us/win/QuickTimeInstaller.exe
O16 - DPF: {421A63BA-4632-43E0-A942-3B4AB645BE51} - http://download-ak.systemsoap.com/ssoap/pptproactauthakamai/systemsoappro.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/1512f9dfac0305ccfb20/netzip/RdxIE2.cab
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/en/big/1.1.62-big/GoogleNav.cab
O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37613.3965509259
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} (WTHoster Class) - http://www.wildtangent.com/install/wdriver/ddc/shockwave/blasterballwild/wtinst.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {BD11A280-2E73-11CF-B6CF-00AA00A74DAF} - http://images.bonzi.com/freebuddy/wd/bbsetupad1.exe
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/SSC/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab

any advice would be much appreciated



Sponsored Link
Ads by Google

Response Number 1
Name: Chris Angelius
Date: December 2, 2003 at 23:13:05 Pacific
Reply:

download
The Cleaner
its amazing for removing trojans


0
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: Trojan virus help!!!

Cannot delete trojan virus! HELP! www.computing.net/answers/windows-xp/cannot-delete-trojan-virus-help/82154.html

Trojan Virus!! HELP! www.computing.net/answers/windows-xp/trojan-virus-help/92945.html

trojan virus, please help!!!! www.computing.net/answers/windows-xp/trojan-virus-please-help/118279.html