I'm sorry I'm new here, where is this
other thread?
I'll just post the log here:
Logfile of HijackThis v1.99.0
Scan saved at 18:55:53, on 26.03.2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\LOSEXP\System32\smss.exe
C:\LOSEXP\system32\winlogon.exe
C:\LOSEXP\system32\services.exe
C:\LOSEXP\system32\lsass.exe
C:\LOSEXP\system32\svchost.exe
C:\LOSEXP\System32\svchost.exe
C:\LOSEXP\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
E:\Program Files\Ipswitch\WS_FTP Server\iFtpSvc.exe
C:\LOSEXP\System32\inetsrv\inetinfo.exe
C:\LOSEXP\Samsung\LaserSMMgr\ssmmgr.exe
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
E:\Program Files\ABBYY\Lingvo 11\Lvagent.exe
C:\LOSEXP\System32\tcpsvcs.exe
C:\LOSEXP\System32\Grxp4exe.exe
C:\LOSEXP\System32\svchost.exe
C:\LOSEXP\System32\CTFMON.EXE
C:\Program Files\Messenger\msmsgs.exe
E:\Program Files\Universal Shield 3.1\US30Service.exe
E:\Program Files\Symantec\Norton Process Viewer\PrcView.exe
C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files\Netropa\Onscreen Display\OSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\LOSEXP\explorer.exe
H:\My Downloads\no-spies\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\System32\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Micro$oft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 24.250.153.208:3128
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: ClickCatcher MSIE handler - {16664845-0E00-11D2-8059-000000000000} - C:\Program Files\Common Files\ReGet Shared\Catcher.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - E:\Program Files\ReGetDx\iebar.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\LOSEXP\System32\msdxm.ocx
O4 - HKLM\..\Run: [Samsung LBP SM] "C:\LOSEXP\Samsung\LaserSMMgr\ssmmgr.exe" /autorun
O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Lingvo Launcher] "E:\Program Files\ABBYY\Lingvo 11\Lvagent.exe" /STARTUP
O4 - HKLM\..\Run: [LingvoTraining] "E:\Program Files\ABBYY\Lingvo 11\Tutor.exe" /ND /NW /AS
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Gravis Xperience Driver Support] Grxp4exe.exe /init
O4 - HKCU\..\Run: [ctfmon.exe] C:\LOSEXP\System32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: PrcView.lnk = E:\Program Files\Symantec\Norton Process Viewer\PrcView.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~1\Office\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - shell32.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - shell32.dll (file missing)
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - E:\Program Files\Drivers\ATI Multimedia\tv\EXPLBAR.DLL
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - E:\Program Files\Symantec\Norton System Works\Norton Cleanup\WCQuick.lnk
(file missing)
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - E:\Program Files\Symantec\Norton System Works\Norton
Cleanup\WCQuick.lnk (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~1\Office\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Affiliate Beta - {C49DD894-C6DE-4910-8C41-BA20F852D8BC} - shell32.dll (file missing)
O9 - Extra 'Tools' menuitem: Affiliate Beta - {C49DD894-C6DE-4910-8C41-BA20F852D8BC} - shell32.dll (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\LOSEXP\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\LOSEXP\web\related.htm
O15 - Trusted Zone: *.0.0.0.0
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) -
http://download.gigabyte.com.tw/object/Dldrv.ocx
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) -
http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) -
http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.1.2.76.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1134168566309
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1134168558997
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) -
http://212.80.66.25/activex/AxisCamControl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D2F152BB-5FA6-438F-8060-629C14365EC9}: NameServer = 71.242.0.12 68.237.161.12
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\LOSEXP\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown - C:\LOSEXP\system32\ati2sgag.exe
O23 - Service: Ipswitch WS_FTP Service - Ipswitch, Inc. 10 Maguire Road - Suite 220 Lexington MA. - E:\Program Files\Ipswitch\WS_FTP Server\iFtpSvc.exe
O23 - Service: Netropa NHK Server - Unknown - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: OpenSSH Server - Unknown - E:\Program Files\OpenSSH\bin\cygrunsrv.exe
O23 - Service: Sandra Data Service - SiSoftware - E:\Program Files\SiSoftware\SiSoftware Sandra Lite\RpcDataSrv.exe
O23 - Service: Sandra Service - SiSoftware - E:\Program Files\SiSoftware\SiSoftware Sandra Lite\RpcSandraSrv.exe
O23 - Service: SPBBCSvc - Unknown - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (file missing)
O23 - Service: US30Service - Unknown - E:\Program Files\Universal Shield 3.1\US30Service.exe