MyTechSupport.ca :: Your Computer Technical Resource Headquarters! MyTechSupport.ca :: Your Computer Technical Resource Headquarters!
HOME FORUMS RESOURCES & TOOLS ARTICLES ONLINE STORE ABOUT US
Computer Support Forums arrow Internet & Network Support arrow Security & Viruses arrow Topic: How can i delete the website viewer?
July 11, 2020, 10:26:09 AM
 

Home Forum Rules Help Search Mobile Version Login Register

Welcome, Guest. Please login or register.
Did you miss your activation email?
July 11, 2020, 10:26:09 AM

Login with username, password and session length
 Featured Sites:
News
New  We now offer MyTechSupport.ca Merchandise! Every purchase goes towards maintaining our site.
Thank you for supporting MyTechSupport.ca!
  0 Members and 1 Guest are viewing this topic.
Pages: [1] Go Down Print
Author Topic: How can i delete the website viewer?  (Read 1507 times)
yaNa_17
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Female
Posts: 4


Bookmark and Share

View Profile
« on: November 14, 2004, 12:33:22 PM »

PLEASE SUPPLY RELEVANT INFORMATION:
Operating System Version:windows xp
Problem Application Name & Version: website viewer 124837.exe
Problem Hardware Make & Model:
Error Messages:

please help me...because i cant uninstall the website viewer in my pc...it always Interrupts me when im doing somethin' important...could someone there help me?...i need some answers a.s.a.p...Sad

Logged

 
yaNa_17
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Female
Posts: 4


Bookmark and Share

View Profile
« Reply #1 on: November 14, 2004, 01:09:31 PM »

This is my logfile

________________________________________________________________

Logfile of HijackThis v1.97.7
Scan saved at 8:03:34 PM, on 11/14/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
D:\Program Files\Real\RealPlayer\RealPlay.exe
D:\WINDOWS\system32\ierk.exe
C:\Winamp\winampa.exe
D:\Program Files\inKline Global\PC Booster\pcbooster.exe
D:\WINDOWS\System32\P2P Networking\P2P Networking2.exe
D:\Program Files\Windows SyncroAd\SyncroAd.exe
D:\WINDOWS\System32\wirxmo.exe
D:\WINDOWS\System32\systime.exe
D:\WINDOWS\System32\msrexe.exe
D:\Program Files\Web_Rebates\WebRebates0.exe
D:\Program Files\Windows AdControl\WinAdCtl.exe
D:\Program Files\Windows SyncroAd\WinSync.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Program Files\Yahoo!\Messenger\ypager.exe
D:\WINDOWS\System32\systime.exe
D:\Program Files\Windows AdControl\WinAdAlt.exe
D:\Documents and Settings\user\Application Data\nsts.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\aqayti.dat
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_SICN03.EXE
D:\Program Files\Web_Rebates\WebRebates1.exe
D:\WINDOWS\System32\wuauclt.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\WINDOWS\Downloaded Program Files\CONFLICT.56\rdgCN10.exe
D:\Documents and Settings\user\My Documents\My Poems\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.134/index.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.134/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://213.159.117.134/index.php
O2 - BHO: (no name) - {122E3116-B27B-295E-9A9B-8D26E0CDB011} - D:\WINDOWS\system32\addyg32.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn0\ycomp5_3_19_0.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LVCOMS] D:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
O4 - HKLM\..\Run: [RealTray] D:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [KAZAA] D:\Program Files\Kazaa\Kazaa.exe /SYSTRAY
O4 - HKLM\..\Run: [ierk.exe] D:\WINDOWS\system32\ierk.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Winamp\winampa.exe
O4 - HKLM\..\Run: [PC Booster] D:\Program Files\inKline Global\PC Booster\pcbooster.exe
O4 - HKLM\..\Run: [P2P Networking] D:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [P2P Networking2] D:\WINDOWS\System32\P2P Networking\P2P Networking2.exe /AUTOSTART
O4 - HKLM\..\Run: [Winad Client] D:\Program Files\Winad Client\Winad.exe
O4 - HKLM\..\Run: [Windows SyncroAd] D:\Program Files\Windows SyncroAd\SyncroAd.exe
O4 - HKLM\..\Run: [cgljunkbu] D:\WINDOWS\System32\wirxmo.exe
O4 - HKLM\..\Run: [SysTime] D:\WINDOWS\System32\systime.exe
O4 - HKLM\..\Run: [System Service] D:\WINDOWS\System32\msrexe.exe
O4 - HKLM\..\Run: [WebRebates0] "D:\Program Files\Web_Rebates\WebRebates0.exe"
O4 - HKLM\..\Run: [Windows AdControl] D:\Program Files\Windows AdControl\WinAdCtl.exe
O4 - HKLM\..\Run: [salm] d:\temp\salm.exe
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] D:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [SysTime] D:\WINDOWS\System32\systime.exe
O4 - HKCU\..\Run: [Lwhr] D:\Documents and Settings\user\Application Data\nsts.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = D:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXE
O4 - Global Startup: GStartup.lnk = D:\Program Files\Common Files\GMT\GMT.exe
O8 - Extra context menu item: &Google Search - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Yahoo! Search - file:///D:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://D:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://D:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://D:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Web Rebates - file://D:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///D:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///D:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Real.com (HKLM)
O15 - Trusted Zone: *.blazefind.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.flingstone.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.searchbarcash.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.skoobidoo.com
O15 - Trusted Zone: *.slotch.com
O15 - Trusted Zone: *.windupdates.com
O15 - Trusted Zone: *.xxxtoolbar.com
O16 - DPF: Yahoo! Bingo - http://download.games.yahoo.com/games/clients/y/xt0_x.cab
O16 - DPF: Yahoo! Go Fish - http://download.games.yahoo.com/games/clients/y/zt3_x.cab
O16 - DPF: {064928FC-1848-6D68-7104-6A914CDA735E} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {06CD007F-A665-52E9-FF70-4E2D7AA16BD6} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {08888D56-51A8-71EF-2911-001D6A42D94D} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {0D9E43F0-6D17-6BB3-D01E-50D74A83B54D} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {11059D4B-F896-0276-3CCD-73CB3757E1ED} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {150EAC63-3D6E-4C9A-1F96-55225A720849} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=c87f8c802f1b240623171bfa62bd7ba8b0bb54a97ec0326eb1eb84bb6f599232210336797cbe0015a4bec6594c3783b33c747ba2:5895d9b3ba758e0bc843a87e7b26fedd
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {16D14727-96CB-77DB-9162-40BD2B04C1CF} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {1BD70D45-3B75-3F4B-314E-4560731C8F06} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) - http://www.spywarestormer.com/files2/Install.cab
O16 - DPF: {2131F934-68BF-08E2-3DFF-2871251D7210} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {22450D49-FEA0-6A34-C9D2-77E80F3AA6C9} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {280F4423-5C31-6516-0EE1-6B671BF802F3} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F98} (CR64Loader Object) - http://www.miniclip.com/platypus/miniclipGameLoader.dll
O16 - DPF: {2C870007-2474-1FF9-D324-15950155F3AF} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {2EDF1A47-B739-67A5-AA96-526D498A7225} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {2F5AA4E0-A029-6349-1F55-437E719CA5EE} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {30BE0A7D-32C1-00C9-64C0-7EA0667E6B0B} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {3423AE38-82FC-0CD0-05AE-7B3733BF21D8} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {352B16A5-C9AF-546A-211E-3A5C65101785} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {3566F592-EC56-7F26-D334-1C6F189AD454} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {35BBD500-34D7-6E27-8886-2913463AD981} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {37E630C6-5F3C-1AF8-23D7-3D4730A9A393} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {386A771C-E96A-421F-8BA7-32F1B706892F} (Installer Class) - http://www.xxxtoolbar.com/ist/softwares/v4.0/0006_regular.cab
O16 - DPF: {3BF1C261-95E3-02F0-1A88-484F5E3E3890} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {3D9DDC93-C242-288B-C375-68774988A49D} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {4160A09E-151B-5182-D663-27ED4FC3A4A4} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {41E9A903-B7EE-5F09-3A13-4CE05BAACF76} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {4707E293-0151-3A43-774F-008B3B0EB70A} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {480195C1-6847-77BD-CBBB-2FC006A93C9D} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {4F5C9BD7-F94C-4DA6-D8A2-2BC716764D8F} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {51E78037-1627-2969-0B5B-58BB5DE818B1} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {54D0D113-7DF3-4ECD-37D4-1C23074199C6} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {55998BFD-8315-410B-E13E-5B2B341D0008} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {5EE8C48F-76B1-00A9-EC71-0FD40909854A} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {61322088-CA68-2AC9-FD5A-668574D0B9F0} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {623F6D11-3946-5184-FF72-4B4D43959A83} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {633EA629-502F-15B9-BA4D-5A60586ED028} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {684638A0-C1F2-2F56-2988-3EF01E52151E} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7590463C-4E16-69F9-E01B-08037985486D} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {79A54960-930B-292B-1CB6-2FCE02859B42} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7D9C9CF6-2FD1-72D3-BA09-0240459CBEE2} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7DADF52E-8F81-10A7-3A95-3F54094BD806} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7E57AE9F-279E-698E-1A04-026851812A25} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7FFF1845-101E-43FE-B270-12AE2CCF13C5} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {91433D86-9F27-402C-B5E3-DEBDD122C339} - http://www.netvenda.com/sites/games-intl/ph/games3.cab
O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - http://www.mt-download.com/MediaTicketsInstaller.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Logged

 
jvic
Visiting Administrator
Hero Member
*****

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 1238


Bookmark and Share

View Profile
« Reply #2 on: November 14, 2004, 02:28:20 PM »

Your hijack this is outdated.Please download the newest version
From Here

Make sure you unzip hijack this to its own folder such as C:\Program files as this is where the backups will be created.Run Hijack this but do NOT fix anything.Click save log and a log will open in notepad.Copy and paste your log here.

Logged

John Vickers
yaNa_17
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Female
Posts: 4


Bookmark and Share

View Profile
« Reply #3 on: November 20, 2004, 10:40:27 AM »

Logfile of HijackThis v1.98.2
Scan saved at 7:34:34 PM, on 11/20/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
D:\Program Files\Real\RealPlayer\RealPlay.exe
D:\WINDOWS\system32\ierk.exe
C:\Winamp\winampa.exe
D:\Program Files\inKline Global\PC Booster\pcbooster.exe
D:\WINDOWS\System32\P2P Networking\P2P Networking2.exe
D:\Program Files\Windows SyncroAd\SyncroAd.exe
D:\WINDOWS\System32\wirxmo.exe
D:\WINDOWS\System32\systime.exe
D:\WINDOWS\System32\msrexe.exe
D:\Program Files\Windows SyncroAd\WinSync.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Program Files\Yahoo!\Messenger\ypager.exe
D:\WINDOWS\System32\systime.exe
D:\Documents and Settings\user\Application Data\nsts.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\aqayti.dat
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_SICN03.EXE
D:\WINDOWS\System32\wuauclt.exe
D:\Program Files\Web_Rebates\WebRebates0.exe
c:\winampa.exe
D:\Program Files\Web_Rebates\WebRebates1.exe
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\WebSiteViewer\124492.dlr
C:\Program Files\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.134/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.134/index.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://D:\WINDOWS\gmxgr.dll/sp.html#27859
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://213.159.117.134/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {122E3116-B27B-295E-9A9B-8D26E0CDB011} - D:\WINDOWS\system32\addyg32.dll
O2 - BHO: (no name) - {7B55BB05-0B4D-44fd-81A6-B136188F5DEB} - D:\WINDOWS\questmod.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\Program Files\Yahoo!\Companion\Installs\cpn0\ycomp5_3_19_0.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LVCOMS] D:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
O4 - HKLM\..\Run: [RealTray] D:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [KAZAA] D:\Program Files\Kazaa\Kazaa.exe /SYSTRAY
O4 - HKLM\..\Run: [ierk.exe] D:\WINDOWS\system32\ierk.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Winamp\winampa.exe
O4 - HKLM\..\Run: [PC Booster] D:\Program Files\inKline Global\PC Booster\pcbooster.exe
O4 - HKLM\..\Run: [P2P Networking] D:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [P2P Networking2] D:\WINDOWS\System32\P2P Networking\P2P Networking2.exe /AUTOSTART
O4 - HKLM\..\Run: [Winad Client] D:\Program Files\Winad Client\Winad.exe
O4 - HKLM\..\Run: [Windows SyncroAd] D:\Program Files\Windows SyncroAd\SyncroAd.exe
O4 - HKLM\..\Run: [cgljunkbu] D:\WINDOWS\System32\wirxmo.exe
O4 - HKLM\..\Run: [SysTime] D:\WINDOWS\System32\systime.exe
O4 - HKLM\..\Run: [System Service] D:\WINDOWS\System32\msrexe.exe
O4 - HKLM\..\Run: [WebRebates0] "D:\Program Files\Web_Rebates\WebRebates0.exe"
O4 - HKLM\..\Run: [salm] d:\temp\salm.exe
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] D:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [SysTime] D:\WINDOWS\System32\systime.exe
O4 - HKCU\..\Run: [Lwhr] D:\Documents and Settings\user\Application Data\nsts.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = D:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXE
O4 - Global Startup: GStartup.lnk = D:\Program Files\Common Files\GMT\GMT.exe
O8 - Extra context menu item: &Google Search - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Yahoo! Search - file:///D:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://D:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://D:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://D:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Web Rebates - file://D:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///D:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///D:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - D:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - D:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - D:\WINDOWS\System32\Shdocvw.dll
O15 - Trusted Zone: *.blazefind.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.flingstone.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.searchbarcash.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.skoobidoo.com
O15 - Trusted Zone: *.slotch.com
O15 - Trusted Zone: *.windupdates.com
O15 - Trusted Zone: *.xxxtoolbar.com
O16 - DPF: Yahoo! Bingo - http://download.games.yahoo.com/games/clients/y/xt0_x.cab
O16 - DPF: Yahoo! Go Fish - http://download.games.yahoo.com/games/clients/y/zt3_x.cab
O16 - DPF: {064928FC-1848-6D68-7104-6A914CDA735E} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {06CD007F-A665-52E9-FF70-4E2D7AA16BD6} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {08888D56-51A8-71EF-2911-001D6A42D94D} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {0D9E43F0-6D17-6BB3-D01E-50D74A83B54D} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {0F708781-6FAB-1354-B85D-2CB27612196E} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {11059D4B-F896-0276-3CCD-73CB3757E1ED} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {13986BFC-9A69-18AE-FE03-4CF128B53782} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {150EAC63-3D6E-4C9A-1F96-55225A720849} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {16D14727-96CB-77DB-9162-40BD2B04C1CF} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {1BD70D45-3B75-3F4B-314E-4560731C8F06} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) - http://www.spywarestormer.com/files2/Install.cab
O16 - DPF: {2131F934-68BF-08E2-3DFF-2871251D7210} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {2175D324-164D-3986-E156-5B9F4F1B0ABA} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {22450D49-FEA0-6A34-C9D2-77E80F3AA6C9} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {24506E85-BBB7-21ED-8870-3381384D8448} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {26530DE5-744A-5697-8774-0740206CC8FA} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {280F4423-5C31-6516-0EE1-6B671BF802F3} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F98} (CR64Loader Object) - http://www.miniclip.com/platypus/miniclipGameLoader.dll
O16 - DPF: {2C870007-2474-1FF9-D324-15950155F3AF} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {2EDF1A47-B739-67A5-AA96-526D498A7225} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {2F5AA4E0-A029-6349-1F55-437E719CA5EE} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {30BE0A7D-32C1-00C9-64C0-7EA0667E6B0B} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {3423AE38-82FC-0CD0-05AE-7B3733BF21D8} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {352B16A5-C9AF-546A-211E-3A5C65101785} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {3566F592-EC56-7F26-D334-1C6F189AD454} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {35BBD500-34D7-6E27-8886-2913463AD981} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {37E630C6-5F3C-1AF8-23D7-3D4730A9A393} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {386A771C-E96A-421F-8BA7-32F1B706892F} (Installer Class) - http://www.xxxtoolbar.com/ist/softwares/v4.0/0006_regular.cab
O16 - DPF: {39A44D49-4EF0-5983-B39A-41805D93CC55} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {3BF1C261-95E3-02F0-1A88-484F5E3E3890} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {3D9DDC93-C242-288B-C375-68774988A49D} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {4160A09E-151B-5182-D663-27ED4FC3A4A4} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {41E9A903-B7EE-5F09-3A13-4CE05BAACF76} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {4707E293-0151-3A43-774F-008B3B0EB70A} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {47F450CC-B28B-569C-A8D5-29AC63D68683} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {480195C1-6847-77BD-CBBB-2FC006A93C9D} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {4A3A07D7-7F61-12E7-A0D7-5E4928F2CEB6} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {4F5C9BD7-F94C-4DA6-D8A2-2BC716764D8F} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {51E78037-1627-2969-0B5B-58BB5DE818B1} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {54D0D113-7DF3-4ECD-37D4-1C23074199C6} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {55998BFD-8315-410B-E13E-5B2B341D0008} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {5EE8C48F-76B1-00A9-EC71-0FD40909854A} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {60038D14-17B3-5DB3-D4EE-0DCA7044C1EE} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {61322088-CA68-2AC9-FD5A-668574D0B9F0} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {623F6D11-3946-5184-FF72-4B4D43959A83} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {633EA629-502F-15B9-BA4D-5A60586ED028} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {684638A0-C1F2-2F56-2988-3EF01E52151E} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {6873A8E5-2ABD-3716-540B-00E5774A1B63} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7590463C-4E16-69F9-E01B-08037985486D} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {79A54960-930B-292B-1CB6-2FCE02859B42} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7D9C9CF6-2FD1-72D3-BA09-0240459CBEE2} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7DADF52E-8F81-10A7-3A95-3F54094BD806} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7E57AE9F-279E-698E-1A04-026851812A25} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7F32AEEF-EE93-4BDE-418F-1C6F6EB7D7F0} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {7FFF1845-101E-43FE-B270-12AE2CCF13C5} - http://213.159.117.150/1/rdgCN10.exe
O16 - DPF: {91433D86-9F27-402C-B5E3-DEBDD122C339} - http://www.netvenda.com/sites/games-intl/ph/games3.cab
O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - http://www.mt-download.com/MediaTicketsInstaller.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
Logged

 
Pages: [1] Go Up Print 
 
Jump to:  

Powered by MySQL Powered by PHP

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines

Valid XHTML 1.0! Valid CSS!

Disclaimer
This site is NOT responsible for any damage that the information on this site may cause to your system. Everything you try, whether inspired by the response given from this site or not, is entirely at your own risk. All product names and company names used herein are for identification purpose only and may be trademarks or registered trademarks of their respective owners. We are in no way affiliated or representing any of the companies on this site unless specified.
Back to Top
Stop Spam Harvesters, Join Project Honey Pot Fight Back Against Spammers! Get Firefox! Get Thunderbird! View Sylvain Amyots profile on LinkedIn
Back to Top
Google visited last this page February 17, 2020, 01:35:12 PM