hello all. this is my first post having used many of the helpful threads on what i think to be the best technical support website around. my computer however is playing up on me more than ever, taking more and more time to open/close programmes etc at the moment and having fianlly downloaded hjt i have had a look at the log file and it's a site for sore eyes. would anyone please do me the favour of telling me how and what i should remove/fix here.
many thanks in advance.
Logfile of HijackThis v1.99.1
Scan saved at 15:58:19, on 24/06/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\windows\system32\explorer.exe
c:\windows\explorer.exe
c:\windows\rundll32.exe
c:\windows\system32\IEXPLORE.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Quicktime\qttask.exe
C:\WINDOWS\System32\ctfmon.exe
c:\windows\system32\igoeqt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\WINDOWS\system32\intranet.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\tcpcheck.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\wasptis.exe
C:\WINDOWS\system32\udpcheck.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Ad-aware 6\Ad-aware.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.wanadoo.co.uk/iesearch/default.htmR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://community.derbiz.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Wanadoo
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\userinit32.exe,
O1 - Hosts: 222.89.98.219
www.wo365.comO1 - Hosts: 222.89.98.219 cmfu.com
O1 - Hosts: 222.89.98.219
www.cmfu.comO1 - Hosts: 222.89.98.219 9i0.com
O1 - Hosts: 222.89.98.219
www.9flash.comO1 - Hosts: 222.89.98.219 9flash.com
O1 - Hosts: 222.89.98.219
www.nowok.netO1 - Hosts: 222.89.98.219 nowok.net
O1 - Hosts: 222.89.98.219 wisa.com.cn
O1 - Hosts: 222.89.98.219
www.sia.com.cnO1 - Hosts: 222.89.98.219
www.wisa.cnO1 - Hosts: 222.89.98.219 wisa.cn
O1 - Hosts: 222.89.98.219
www.zhao99.comO1 - Hosts: 222.89.98.219 zhao99.com
O1 - Hosts: 222.89.98.219
www.wo123.comO1 - Hosts: 222.89.98.219 wo123.com
O1 - Hosts: 222.89.98.219 wo99.com
O1 - Hosts: 222.89.98.219
www.wo99.comO1 - Hosts: 222.89.98.219
www.page.com.cnO1 - Hosts: 222.89.98.219 page.com.cn
O1 - Hosts: 222.89.98.219
www.432.cnO1 - Hosts: 222.89.98.219 432.cn
O1 - Hosts: 222.89.98.219 wysw.com
O1 - Hosts: 222.89.98.219 14.com.cn
O1 - Hosts: 222.89.98.219
www.14.com.cnO1 - Hosts: 222.89.98.219 cnww.net
O1 - Hosts: 222.89.98.219
www.mv99.comO1 - Hosts: 222.89.98.219 mv99.com
O1 - Hosts: 222.89.98.219
www.youav.comO1 - Hosts: 222.89.98.219
www.mtvav.comO1 - Hosts: 222.89.98.219
www.98983.comO1 - Hosts: 222.89.98.219 98983.com
O1 - Hosts: 222.89.98.219
www.114.com.cnO1 - Hosts: 222.89.98.219 114.com.cn
O1 - Hosts: 222.89.98.219
www.net114.comO1 - Hosts: 222.89.98.219
www.skywz.comO1 - Hosts: 222.89.98.219 skywz.com
O1 - Hosts: 222.89.98.219
www.hao6.comO1 - Hosts: 222.89.98.219 hao6.com
O1 - Hosts: 222.89.98.219
www.678a.comO1 - Hosts: 222.89.98.219 678a.com
O1 - Hosts: 222.89.98.219
www.7510.comO1 - Hosts: 222.89.98.219 7510.com
O1 - Hosts: 222.89.98.219
www.zzkan.comO1 - Hosts: 222.89.98.219 zzkan.com
O1 - Hosts: 222.89.98.219
www.ca183.comO1 - Hosts: 222.89.98.219 ca183.com
O1 - Hosts: 222.89.98.219 3tom.com
O1 - Hosts: 222.89.98.219
www.yhjm.comO1 - Hosts: 222.89.98.219 yhjm.com
O1 - Hosts: 222.89.98.219
www.k369.comO1 - Hosts: 222.89.98.219
www.xxwww.comO1 - Hosts: 222.89.98.219 xxwww.com
O1 - Hosts: 222.89.98.219
www.fm1000.netO1 - Hosts: 222.89.98.219 fm1000.net
O1 - Hosts: 222.89.98.219
www.ok135.comO1 - Hosts: 222.89.98.219 ok135.com
O1 - Hosts: 222.89.98.219
www.link999.comO1 - Hosts: 222.89.98.219 link999.com
O1 - Hosts: 222.89.98.219
www.001wz.comO1 - Hosts: 222.89.98.219 001wz.com
O1 - Hosts: 222.89.98.219
www.7t7t.comO1 - Hosts: 222.89.98.219 7t7t.com
O1 - Hosts: 222.89.98.219
www.7k7k.comO1 - Hosts: 222.89.98.219 7k7k.com
O1 - Hosts: 222.89.98.219
www.webcool.netO1 - Hosts: 222.89.98.219 webcool.net
O1 - Hosts: 222.89.98.219
www.51sobu.comO1 - Hosts: 222.89.98.219 51sobu.com
O1 - Hosts: 222.89.98.219 cy.51sobu.com
O1 - Hosts: 222.89.98.219
www.fj3721.comO1 - Hosts: 222.89.98.219 fj3721.com
O1 - Hosts: 222.89.98.219
www.msncn.comO1 - Hosts: 222.89.98.219 msncn.com
O1 - Hosts: 222.89.98.219
www.6235.comO1 - Hosts: 222.89.98.219 6235.com
O1 - Hosts: 222.89.98.219
www.8goo.comO1 - Hosts: 222.89.98.219 8goo.com
O1 - Hosts: 222.89.98.219
www.baimin.comO1 - Hosts: 222.89.98.219 baimin.com
O1 - Hosts: 222.89.98.219
www.bwwz.comO1 - Hosts: 222.89.98.219 bwwz.com
O1 - Hosts: 222.89.98.219
www.howow.netO1 - Hosts: 222.89.98.219 howow.net
O1 - Hosts: 222.89.98.219
www.tongchi.comO1 - Hosts: 222.89.98.219 tongchi.com
O1 - Hosts: 222.89.98.219
www.65658.comO1 - Hosts: 222.89.98.219 65658.com
O1 - Hosts: 222.89.98.219
www.7o7o.comO1 - Hosts: 222.89.98.219 7o7o.com
O1 - Hosts: 222.89.98.219 5126.net
O1 - Hosts: 222.89.98.219
www.5126.netO1 - Hosts: 222.89.98.219
www.wangzhiku.comO1 - Hosts: 222.89.98.219 wangzhiku.com
O1 - Hosts: 222.89.98.219
www.soyeah.comO1 - Hosts: 222.89.98.219 soyeah.com
O1 - Hosts: 222.89.98.219
www.sowang.cnO1 - Hosts: 222.89.98.219 sowang.cn
O1 - Hosts: 222.89.98.219
www.77177.comO1 - Hosts: 222.89.98.219 77177.com
O1 - Hosts: 222.89.98.219
www.look8.netO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\msgr.en-us.en-gb\msntb.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\Quicktime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MMSystem] c:\windows\rundll32.exe "c:\windows\system32\mmsystem.dll"", RunDll32
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\en-gb\msnappau.exe"
O4 - HKLM\..\Run: [checkrun] C:\windows\system32\elitewdz32.exe
O4 - HKLM\..\Run: [yhjgfj] c:\windows\system32\igoeqt.exe r
O4 - HKLM\..\Run: [tcp checker] tcpcheck.exe
O4 - HKLM\..\Run: [ASDPLUGIN] C:\WINDOWS\System32\temp532.exe -N
O4 - HKLM\..\RunServices: [CPQHotkeys] hotkeysvc.exe
O4 - HKLM\..\RunServices: [CTHelper] cthelper.exe
O4 - HKLM\..\RunServices: [PcSync] PCsync.exe
O4 - HKLM\..\RunServices: [The Intranet] intranet.exe
O4 - HKLM\..\RunServices: [tcp checker] tcpcheck.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [winupd.exe] C:\WINDOWS\System32\winupd.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [MMSystem] c:\windows\rundll32.exe "c:\windows\system32\mmsystem.dll"", RunDll32
O4 - HKCU\..\RunServices: [CPQHotkeys] hotkeysvc.exe
O4 - HKCU\..\RunServices: [CTHelper] cthelper.exe
O4 - HKCU\..\RunServices: [PcSync] PCsync.exe
O4 - HKCU\..\RunServices: [tcp checker] tcpcheck.exe
O4 - HKCU\..\RunServices: [The Intranet] intranet.exe
O4 - Startup: One.Tel Internet.lnk = ?
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: Yahoo! Bridge -
http://download.games.yahoo.com/games/clients/y/bt1_x.cabO16 - DPF: Yahoo! Hearts -
http://download.games.yahoo.com/games/clients/y/ht1_x.cabO16 - DPF: Yahoo! Literati -
http://download.games.yahoo.com/games/clients/y/tt3_x.cabO16 - DPF: Yahoo! Poker -
http://download.games.yahoo.com/games/clients/y/pt3_x.cabO16 - DPF: Yahoo! Pool 2 -
http://download.games.yahoo.com/games/clients/y/pote_x.cabO16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {28AF57CC-DD0B-4166-92C3-5F8F7F8C8ABA} (Illuminatus 5 IE Plugin) -
http://www.digitalworkshop.com/OpusPlugins/ilm500.cabO16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) -
https://webresponse.one.microsoft.com/oas/ActiveX/winrep.cabO16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) -
http://launch.gamespyarcade.com/software/launch/alaunch.cabO16 - DPF: {72C23FEC-3AF9-48FC-9597-241A8EBDFE0A} (InstallShield International Setup Player) -
http://www.installengine.com/engine/isetupml.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/msnmessengersetupdownloader.cabO23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
O23 - Service: Intranet Service (IntranetService) - Brought to you by the Bandwidth Bandits - C:\WINDOWS\SYSTEM32\intranet.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TCPIP Managing Service (TCPIPManagingService) - Unknown owner - C:\WINDOWS\SYSTEM32\tcpcheck.exe