|
|||||||||
|
|||||||||
| |||||||||
|
|||||||||
|
|||||||||
| |||||||||
|
|
|
| |||||||||
 |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
Dev Shed Forums Sponsor:
|
|
Stop making mediocre tutorials.The best tutorials are video! Camtasia Studio makes it easy to create engaging, buzz-building screen videos at any size, in any popular format. Download the free trial!
|
|
#1
November 14th, 2004, 08:50 PM
|
|||
|
|||
|
help please 100% cpu usage thread
Hello, within a few days or so my computer has started running very slow. As soon as i turn on the computer it runs at a snails pace. I run the task manager and it always says the cpu is running at 100%. Under the processes tab the different programs or processes are constantly changing so its hard to tell what is using the most resources. I have run adaware and the software from grisoft and it says i'm clean although i have my doubts. I have tried to keep up to date with the updates. I live with my god bro and he uses the computer mostly and now when i need to use the computer it runs slow! the highjackthis log is in the next post.
|
|
#2
November 14th, 2004, 08:52 PM
|
|||
|
|||
|
i have pasted a highjackthis log. It seems very very long compared to others i have seen on this forum. Thankyou in advance for your help
 it won't let me post the whole log because its too long so i'll have to split it in stages. Logfile of HijackThis v1.98.2 Scan saved at 02:32:58, on 15/11/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\Creative\ShareDLL\CtNotify.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-gb\msnappau.exe C:\Program Files\BroadJump\Client Foundation\CFD.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe C:\WINDOWS\System32\windll32.exe C:\Documents and Settings\Revs\Application Data\ttnr.exe C:\Program Files\Creative\ShareDLL\MediaDet.Exe C:\WINDOWS\System32\??rss.exe C:\windows\ekmtccp.exe C:\windows\tjvutsi.exe C:\windows\tjvutsi.exe C:\windows\tjvutsi.exe C:\windows\tjvutsi.exe C:\windows\tjvutsi.exe C:\windows\tjvutsi.exe C:\windows\tjvutsi.exe C:\windows\akhakhw.exe C:\windows\hhdaxii.exe C:\windows\jpsoxay.exe C:\windows\pyexycu.exe C:\windows\bkhnrip.exe C:\windows\bkhnrip.exe C:\windows\bkhnrip.exe C:\windows\bkhnrip.exe C:\windows\bkhnrip.exe C:\windows\bkhnrip.exe C:\windows\bkhnrip.exe C:\windows\pokaxcb.exe C:\windows\uvdnvnc.exe C:\windows\osovdrh.exe C:\windows\thjlqbi.exe C:\windows\tgttwve.exe C:\windows\lfsudvv.exe C:\windows\vsdjlvv.exe C:\windows\bklpvsw.exe C:\windows\snsfvmk.exe C:\windows\gvnroxu.exe C:\windows\iwypmwm.exe C:\windows\cshunat.exe C:\windows\nlwumcm.exe C:\windows\nbidaqm.exe C:\windows\gqrcnut.exe C:\windows\hmxnlpq.exe C:\windows\pokaxcb.exe C:\windows\khinrxw.exe C:\WINDOWS\System32\spm\spmd.exe C:\windows\hnbftin.exe C:\windows\nmyxgxh.exe C:\windows\iofwrpg.exe C:\PROGRA~1\Grisoft\AVG6\avgserv.exe C:\windows\rktaaap.exe C:\windows\dvbskmj.exe C:\windows\situohi.exe C:\windows\hbvcxos.exe C:\WINDOWS\System32\CTSVCCDA.EXE C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe C:\windows\fxcfwya.exe C:\WINDOWS\System32\nvsvc32.exe C:\windows\infrlok.exe C:\Softimage\XSI_3.0\Application\bin\ray3xsi3_0server.exe C:\windows\rdavwyb.exe C:\windows\ubksifi.exe C:\WINDOWS\system32\slserv.exe C:\windows\ylknwlm.exe C:\windows\klprisf.exe C:\WINDOWS\System32\svchost.exe C:\windows\oswucjm.exe C:\windows\ciynlkw.exe C:\windows\oeiklci.exe C:\WINDOWS\System32\Tablet.exe C:\windows\khinrxw.exe C:\windows\hnbftin.exe C:\windows\nmyxgxh.exe C:\windows\iofwrpg.exe C:\windows\dvbskmj.exe C:\windows\rktaaap.exe C:\windows\situohi.exe C:\windows\hbvcxos.exe C:\windows\fxcfwya.exe C:\windows\infrlok.exe C:\windows\rdavwyb.exe C:\windows\klprisf.exe C:\windows\khinrxw.exe C:\windows\hnbftin.exe C:\windows\nmyxgxh.exe C:\windows\iofwrpg.exe C:\windows\dvbskmj.exe C:\windows\rktaaap.exe C:\windows\situohi.exe C:\windows\hbvcxos.exe C:\windows\infrlok.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\windows\fxcfwya.exe C:\windows\rdavwyb.exe C:\windows\khinrxw.exe C:\windows\hnbftin.exe C:\windows\nmyxgxh.exe C:\windows\iofwrpg.exe C:\windows\dvbskmj.exe C:\windows\rktaaap.exe C:\windows\situohi.exe C:\windows\hbvcxos.exe C:\windows\infrlok.exe C:\windows\fxcfwya.exe C:\windows\rdavwyb.exe C:\windows\rdavwyb.exe C:\windows\lxeychb.exe C:\windows\hpwiynx.exe C:\windows\onfjsxo.exe C:\windows\tcxnftb.exe C:\windows\xfqsnvl.exe C:\windows\noxownn.exe C:\windows\lowuvsu.exe C:\windows\fsvbwnb.exe C:\windows\gkpvwvw.exe C:\windows\onrwywg.exe C:\windows\pxxdave.exe C:\windows\pqrlxdf.exe C:\windows\avsflny.exe C:\windows\tlvolwm.exe C:\windows\ovyxqml.exe C:\windows\prsnwcd.exe C:\windows\rhpyfon.exe C:\windows\lhutguv.exe C:\windows\lxeychb.exe C:\windows\hpwiynx.exe C:\windows\onfjsxo.exe C:\windows\tcxnftb.exe C:\windows\xfqsnvl.exe C:\windows\noxownn.exe C:\windows\lowuvsu.exe C:\windows\onrwywg.exe C:\windows\gkpvwvw.exe C:\windows\pxxdave.exe C:\windows\fsvbwnb.exe C:\windows\avsflny.exe C:\windows\lhutguv.exe C:\windows\rhpyfon.exe C:\windows\pqrlxdf.exe C:\windows\lxeychb.exe C:\windows\hpwiynx.exe C:\windows\onfjsxo.exe C:\windows\tcxnftb.exe C:\windows\lowuvsu.exe C:\windows\lxeychb.exe C:\windows\hpwiynx.exe C:\windows\onfjsxo.exe C:\windows\tcxnftb.exe C:\windows\lowuvsu.exe C:\windows\tcxnftb.exe C:\windows\lowuvsu.exe C:\windows\lowuvsu.exe C:\windows\lowuvsu.exe C:\windows\lowuvsu.exe C:\windows\lowuvsu.exe C:\windows\lowuvsu.exe C:\windows\lowuvsu.exe C:\windows\vvogdyc.exe C:\windows\nxuuets.exe C:\windows\wmhwbqv.exe C:\windows\yoobmts.exe C:\windows\lfgkpah.exe C:\windows\cnsbjmb.exe C:\windows\tmrcpms.exe C:\windows\dofnvhu.exe C:\windows\yjkybeq.exe C:\windows\spllcow.exe C:\windows\bcoepij.exe C:\windows\wbdrewd.exe C:\windows\xbocssa.exe C:\Program Files\iPod\bin\iPodService.exe C:\windows\krfjwaq.exe C:\windows\gmtdfgo.exe C:\windows\smprlme.exe C:\windows\fqdeyat.exe C:\windows\akhvotw.exe C:\windows\xvaxexn.exe C:\windows\lxtuhat.exe C:\windows\abetjst.exe C:\windows\qvklgko.exe C:\windows\gafoybs.exe C:\windows\gscnjdt.exe C:\windows\frgskgh.exe C:\windows\oibuktk.exe C:\windows\ifmlsmn.exe C:\WINDOWS\System32\wuauclt.exe C:\windows\qwllfud.exe C:\windows\tguvybl.exe C:\windows\mlglhut.exe C:\windows\sgfvxjo.exe C:\windows\vvogdyc.exe C:\windows\wmhwbqv.exe C:\windows\nxuuets.exe C:\windows\yoobmts.exe C:\windows\tmrcpms.exe C:\windows\cnsbjmb.exe C:\windows\lfgkpah.exe C:\windows\yjkybeq.exe C:\windows\spllcow.exe C:\windows\dofnvhu.exe C:\windows\wbdrewd.exe C:\windows\bcoepij.exe C:\windows\krfjwaq.exe C:\windows\xbocssa.exe C:\windows\gmtdfgo.exe C:\windows\smprlme.exe C:\windows\fqdeyat.exe C:\windows\abetjst.exe C:\windows\akhvotw.exe C:\windows\lxtuhat.exe C:\windows\qvklgko.exe C:\windows\xvaxexn.exe C:\windows\gafoybs.exe C:\windows\frgskgh.exe C:\windows\gscnjdt.exe C:\windows\tguvybl.exe C:\windows\mlglhut.exe C:\windows\qwllfud.exe C:\windows\vvogdyc.exe C:\windows\nxuuets.exe C:\windows\wmhwbqv.exe C:\windows\yoobmts.exe C:\windows\tmrcpms.exe C:\windows\cnsbjmb.exe C:\windows\lfgkpah.exe C:\windows\yjkybeq.exe C:\windows\spllcow.exe C:\windows\dofnvhu.exe C:\windows\wbdrewd.exe C:\windows\bcoepij.exe C:\windows\xbocssa.exe C:\windows\krfjwaq.exe C:\windows\gmtdfgo.exe C:\windows\smprlme.exe C:\windows\abetjst.exe C:\windows\qvklgko.exe C:\windows\akhvotw.exe C:\windows\lxtuhat.exe C:\windows\gafoybs.exe C:\windows\gscnjdt.exe C:\windows\frgskgh.exe C:\windows\xvaxexn.exe C:\windows\tguvybl.exe C:\windows\mlglhut.exe C:\windows\vvogdyc.exe C:\windows\nxuuets.exe C:\windows\wmhwbqv.exe C:\windows\jhjrxlt.exe C:\windows\otviiet.exe C:\windows\meptquf.exe C:\windows\rfaojtd.exe C:\windows\uknilyo.exe C:\windows\onnodrq.exe C:\windows\frlenor.exe C:\windows\vlrrvem.exe C:\windows\lvdlcjp.exe C:\windows\eatwcdx.exe C:\windows\qjvhvur.exe C:\windows\woprhnk.exe C:\windows\fdsxmmu.exe C:\windows\tptllvy.exe C:\windows\lrkhpbs.exe C:\windows\sjlesvi.exe C:\windows\gmmoyat.exe C:\windows\coatkjr.exe C:\windows\aqbmjwa.exe C:\windows\bkrhnns.exe C:\windows\xmohywk.exe C:\windows\cyavkqn.exe C:\windows\smwsrkl.exe C:\windows\wyomdum.exe C:\windows\amsuuob.exe C:\windows\gvkeoga.exe C:\windows\chmflas.exe C:\windows\mmomvjs.exe C:\windows\gaatnru.exe C:\windows\okaryni.exe C:\windows\ighiltn.exe C:\windows\ivrpyjo.exe C:\windows\rnxgoiq.exe C:\windows\dmqlfds.exe C:\windows\gnhhyiw.exe C:\windows\wqmxets.exe C:\windows\gfbopnw.exe C:\windows\piamnvc.exe C:\windows\grcuish.exe C:\Program Files\BigFix\BigFix.exe C:\Program Files\Microsoft Office\Office\OSA.EXE C:\Program Files\BTopenworld NetHelp\bin\mpbtn.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Revs\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://klounada.com/sp.htm R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://klounada.com/index.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://klounada.com/index.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://klounada.com/sp.htm R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://klounada.com/index.htm R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BT Yahoo! Internet R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;127.0.0.1;<local> R3 - Default URLSearchHook is missing O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {39DB302F-9D4E-289F-D503-67557F877C15} - C:\WINDOWS\System32\lacrekax.dll (file missing) O2 - BHO: (no name) - {6D407D80-AC38-661F-3676-30853AE56572} - C:\WINDOWS\system32\netdt32.dll (file missing) O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll O3 - Toolbar: BT Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\common\ycomp5_2_3_0.dll
|
|
#3
November 14th, 2004, 08:57 PM
|
|||
|
|||
|
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-gb\msntb.dll (file missing) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-gb\msnappau.exe" O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe O4 - HKLM\..\Run: [winpipe] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\secmon.exe O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe O4 - HKCU\..\Run: [TaskTray] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe O4 - HKCU\..\Run: [Taskbar] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [windll32.exe] C:\WINDOWS\System32\windll32.exe O4 - HKCU\..\Run: [Drar] C:\Documents and Settings\Revs\Application Data\ttnr.exe
|
|
#4
November 14th, 2004, 08:59 PM
|
|||
|
|||
|
O4 - HKCU\..\Run: [kqqbfce] c:\windows\xfrwkyx.exe
O4 - HKCU\..\Run: [hieihld] c:\windows\gncokkj.exe O4 - HKCU\..\Run: [jrdeeei] c:\windows\gncokkj.exe O4 - HKCU\..\Run: [wafvehe] c:\windows\xfrwkyx.exe O4 - HKCU\..\Run: [scyngfs] c:\windows\xfrwkyx.exe O4 - HKCU\..\Run: [dtyhsdj] c:\windows\glkpnhb.exe O4 - HKCU\..\Run: [jrlacmo] c:\windows\hpqovgx.exe O4 - HKCU\..\Run: [akxcojb] c:\windows\hpqovgx.exe O4 - HKCU\..\Run: [bybnxkv] c:\windows\hpqovgx.exe O4 - HKCU\..\Run: [ixvemii] c:\windows\hpqovgx.exe O4 - HKCU\..\Run: [ekbdpnp] c:\windows\hpqovgx.exe O4 - HKCU\..\Run: [ervvsaf] c:\windows\glkpnhb.exe O4 - HKCU\..\Run: [wdagfon] c:\windows\glkpnhb.exe O4 - HKCU\..\Run: [rkamolv] c:\windows\glkpnhb.exe O4 - HKCU\..\Run: [ldvyxfn] c:\windows\glkpnhb.exe O4 - HKCU\..\Run: [dtirkiv] c:\windows\glkpnhb.exe O4 - HKCU\..\Run: [ocekwyy] c:\windows\yoikwli.exe O4 - HKCU\..\Run: [tblbnpq] c:\windows\yoikwli.exe O4 - HKCU\..\Run: [yspyeey] c:\windows\yoikwli.exe O4 - HKCU\..\Run: [tewudul] c:\windows\yoikwli.exe O4 - HKCU\..\Run: [cvyigsv] c:\windows\yoikwli.exe O4 - HKCU\..\Run: [tboaqye] c:\windows\yoikwli.exe O4 - HKCU\..\Run: [ofuvhnn] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [jeirwsq] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [atysyew] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [emnqkjd] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [hfgvggw] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [jelwhyv] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [eembeyn] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [amtsyok] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [hlosqrl] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [skrqdix] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [bkcvuhq] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [qsryiqh] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [htkhguu] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [wikgsov] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [lsfosym] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [pinbmhm] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [suqfqta] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [ixlndml] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [mmwojfv] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [qeljnbe] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [qyewqej] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [tjxmfxk] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [bhiobue] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [cjoylcb] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [btqllwv] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [fvibhpg] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [euhwxwx] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [lvojumh] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [shydxuw] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [rhdwnto] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [wdwpcmj] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [ujfvmaf] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [wqvruyr] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [pfjsbxa] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [brcymvm] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [huyjgsq] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [cguljjq] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [quvocpc] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [lbdbiam] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [dclbfuu] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [cjjkuab] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [xmcoeei] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [wyhtcnd] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [wtkqqgb] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [nvupcjp] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [qtdtfar] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [wgllmdh] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [nspdxkr] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [fjhgojc] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [pfiuwrr] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [sdkamhf] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [nfwgsim] c:\windows\ickuhyy.exe O4 - HKCU\..\Run: [inbmdfh] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [dvxacqr] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [rrbxdss] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [xwyovsk] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [ntgqwma] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [coglftw] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [pmsxolw] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [dtkboev] c:\windows\ppdeoyp.exe O4 - HKCU\..\Run: [fjneddp] c:\windows\kslyudq.exe O4 - HKCU\..\Run: [wljwlpj] c:\windows\kslyudq.exe O4 - HKCU\..\Run: [rksnauh] c:\windows\pyotckq.exe O4 - HKCU\..\Run: [mrdmsqy] c:\windows\pyotckq.exe O4 - HKCU\..\Run: [hlwoiaf] c:\windows\pyotckq.exe O4 - HKCU\..\Run: [ufpnefx] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [uunfqpv] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [kokvvyp] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [lrvqevb] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [ebubqtn] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [myvhmco] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [phsxwma] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [aigubla] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [jkruogy] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [kvvfixf] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [ghpnpqq] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [jmvpwat] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [deptuex] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [efydjiv] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [awqwkha] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [rtverav] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [ameudmo] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [pupjrhq] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [agqpowc] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [eajejbu] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [yoxojtx] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [xyoynux] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [wqrusjv] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [qxtseok] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [sqntkrl] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [ltyubvb] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [ununfwc] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [lmjsrbx] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [tjikmaf] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [ncddehb] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [kfwkldu] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [lsyiggc] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [jsmwjbb] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [cjaaekk] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [otpvlgp] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [eqfnidi] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [flfbuqh] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [wbhmtaq] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [mlgtlop] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [vglgeln] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [sxmfffg] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [yxuirro] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [kjssois] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [csgmxwk] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [nkwqsvk] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [uocsapc] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [rnfqsqg] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [qijmnel] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [tmbutxd] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [tnsofrx] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [jdvxhbr] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [xyrcaru] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [lsincwa] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [wlpvrjd] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [iykskeo] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [votobye] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [thhiyuy] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [gfijspg] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [ayxtxrs] c:\windows\jwtjnbc.exe O4 - HKCU\..\Run: [imbwrhk] c:\windows\vistcyp.exe O4 - HKCU\..\Run: [grkiaft] c:\windows\yktilse.exe O4 - HKCU\..\Run: [pndigkj] c:\windows\yktilse.exe O4 - HKCU\..\Run: [mkgcfpg] c:\windows\yktilse.exe O4 - HKCU\..\Run: [egjshid] c:\windows\yktilse.exe O4 - HKCU\..\Run: [hytfoav] c:\windows\fgimeoc.exe O4 - HKCU\..\Run: [otbfeot] c:\windows\fgimeoc.exe O4 - HKCU\..\Run: [gxsrtbj] c:\windows\fgimeoc.exe O4 - HKCU\..\Run: [udiekgm] c:\windows\fgimeoc.exe O4 - HKCU\..\Run: [jqihdjk] c:\windows\fgimeoc.exe O4 - HKCU\..\Run: [ssnotrl] c:\windows\yktilse.exe O4 - HKCU\..\Run: [swvnajo] c:\windows\yktilse.exe O4 - HKCU\..\Run: [rnwpvlj] c:\windows\yktilse.exe O4 - HKCU\..\Run: [aummkbs] c:\windows\yktilse.exe O4 - HKCU\..\Run: [ubgjhmf] c:\windows\yktilse.exe O4 - HKCU\..\Run: [mlktkda] c:\windows\yktilse.exe O4 - HKCU\..\Run: [bvhuchk] c:\windows\yktilse.exe O4 - HKCU\..\Run: [fhrjkyq] c:\windows\yktilse.exe O4 - HKCU\..\Run: [pjexsav] c:\windows\yktilse.exe O4 - HKCU\..\Run: [oosrwyw] c:\windows\yktilse.exe O4 - HKCU\..\Run: [rvuqmwe] c:\windows\fgimeoc.exe O4 - HKCU\..\Run: [baxoout] c:\windows\fgimeoc.exe O4 - HKCU\..\Run: [ylkwafw] c:\windows\fgimeoc.exe O4 - HKCU\..\Run: [gistjda] c:\windows\fgimeoc.exe O4 - HKCU\..\Run: [oxorpod] c:\windows\fgimeoc.exe O4 - HKCU\..\Run: [viyktje] c:\windows\yktilse.exe O4 - HKCU\..\Run: [jrhkkff] c:\windows\yktilse.exe O4 - HKCU\..\Run: [gxcnlap] c:\windows\yktilse.exe O4 - HKCU\..\Run: [kbklrtj] c:\windows\yktilse.exe O4 - HKCU\..\Run: [dirodof] c:\windows\yktilse.exe O4 - HKCU\..\Run: [xnemalg] c:\windows\yktilse.exe O4 - HKCU\..\Run: [epcttjs] c:\windows\yktilse.exe O4 - HKCU\..\Run: [ofhowde] c:\windows\yktilse.exe O4 - HKCU\..\Run: [dfocqdr] c:\windows\yktilse.exe O4 - HKCU\..\Run: [ixlaijr] c:\windows\yktilse.exe O4 - HKCU\..\Run: [wiysqif] c:\windows\yktilse.exe O4 - HKCU\..\Run: [ocixfyt] c:\windows\yktilse.exe
|
|
#5
November 14th, 2004, 09:03 PM
|
|||
|
|||
|
O4 - HKCU\..\Run: [pwogage] c:\windows\kpsiqyv.exe
O4 - HKCU\..\Run: [ykgsixy] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [jgsbmuv] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [urdjodv] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [sjqxfsv] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [ahnfvda] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [rhecora] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [vqfvjec] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [wmlunnr] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [wnoupro] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [vwuhcww] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [cosllay] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [unbgovy] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [tnelsou] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [oliuocn] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [nvqcqge] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [bnpnkqj] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [qrjnvbo] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [Uevgcym] C:\WINDOWS\System32\??rss.exe O4 - HKCU\..\Run: [agkrlep] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [tryrupj] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [fquvxcb] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [jjedvlt] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [vlwxodo] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [qareqfk] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [ariednj] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [keimktj] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [ngahuim] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [chofmvk] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [tyydwfr] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [iiqkmvk] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [buxknpx] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [uyemhsv] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [dywgibq] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [pwbujqq] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [wqeqari] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [dcbrnqk] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [qgbydcu] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [qqgqvtw] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [tgqhwmo] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [qnqwhpq] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [kanurid] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [onrpyvx] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [hiygwlx] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [cqopenv] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [hpiertp] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [cmwvnvr] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [sfcexys] c:\windows\acuvoha.exe O4 - HKCU\..\Run: [bfrotnm] c:\windows\kpsiqyv.exe O4 - HKCU\..\Run: [nitebwh] c:\windows\gnkaaie.exe O4 - HKCU\..\Run: [vhjxsrf] c:\windows\gnkaaie.exe O4 - HKCU\..\Run: [xfegvvk] c:\windows\ipewbxw.exe O4 - HKCU\..\Run: [riehybt] c:\windows\ipewbxw.exe O4 - HKCU\..\Run: [akvtdob] c:\windows\ipewbxw.exe O4 - HKCU\..\Run: [gwepqqj] c:\windows\ekmtccp.exe O4 - HKCU\..\Run: [swtupru] c:\windows\sgcxsdp.exe O4 - HKCU\..\Run: [hxlbcvm] c:\windows\tjvutsi.exe O4 - HKCU\..\Run: [pixphmd] c:\windows\sgcxsdp.exe O4 - HKCU\..\Run: [ufbvtni] c:\windows\tjvutsi.exe O4 - HKCU\..\Run: [wsslrqf] c:\windows\sgcxsdp.exe O4 - HKCU\..\Run: [cihfaxf] c:\windows\tjvutsi.exe O4 - HKCU\..\Run: [toijgec] c:\windows\sgcxsdp.exe O4 - HKCU\..\Run: [rjjsfrt] c:\windows\tjvutsi.exe O4 - HKCU\..\Run: [qqcagwv] c:\windows\tjvutsi.exe O4 - HKCU\..\Run: [hlxjuuo] c:\windows\tjvutsi.exe O4 - HKCU\..\Run: [nhtjmnl] c:\windows\tjvutsi.exe O4 - HKCU\..\Run: [qcgebda] c:\windows\oteqaqb.exe O4 - HKCU\..\Run: [twqdkrh] c:\windows\lwskgon.exe O4 - HKCU\..\Run: [ktbfels] c:\windows\akhakhw.exe O4 - HKCU\..\Run: [obvejcq] c:\windows\hhdaxii.exe O4 - HKCU\..\Run: [yujkvbh] c:\windows\jpsoxay.exe O4 - HKCU\..\Run: [bkiniiu] c:\windows\pyexycu.exe O4 - HKCU\..\Run: [blgeyog] c:\windows\wmpobam.exe O4 - HKCU\..\Run: [mgneewd] c:\windows\inmtatj.exe O4 - HKCU\..\Run: [oqoqtsq] c:\windows\vdnxuxr.exe O4 - HKCU\..\Run: [mllapbi] c:\windows\dxqdfji.exe O4 - HKCU\..\Run: [xmromgc] c:\windows\bglwahs.exe O4 - HKCU\..\Run: [segxgst] c:\windows\wkjdmgo.exe O4 - HKCU\..\Run: [aqtmjfs] c:\windows\conmyhm.exe O4 - HKCU\..\Run: [wwxywrm] c:\windows\njjshch.exe O4 - HKCU\..\Run: [ccnmflg] c:\windows\bkhnrip.exe O4 - HKCU\..\Run: [ntvykps] c:\windows\inmtatj.exe O4 - HKCU\..\Run: [uliycnn] c:\windows\vdnxuxr.exe O4 - HKCU\..\Run: [exnbgkl] c:\windows\dxqdfji.exe O4 - HKCU\..\Run: [iknhurh] c:\windows\bglwahs.exe O4 - HKCU\..\Run: [vjcfmim] c:\windows\wkjdmgo.exe O4 - HKCU\..\Run: [vqqsywk] c:\windows\conmyhm.exe O4 - HKCU\..\Run: [cgmjwwt] c:\windows\njjshch.exe O4 - HKCU\..\Run: [ykoifxc] c:\windows\bkhnrip.exe O4 - HKCU\..\Run: [yyavwql] c:\windows\dxqdfji.exe O4 - HKCU\..\Run: [xlfjihc] c:\windows\bglwahs.exe O4 - HKCU\..\Run: [bnkggie] c:\windows\wkjdmgo.exe O4 - HKCU\..\Run: [wysgwap] c:\windows\conmyhm.exe O4 - HKCU\..\Run: [qexmess] c:\windows\psdcisw.exe O4 - HKCU\..\Run: [ismvvrq] c:\windows\njjshch.exe O4 - HKCU\..\Run: [ysanbac] c:\windows\bkhnrip.exe O4 - HKCU\..\Run: [pogotjs] c:\windows\wkjdmgo.exe O4 - HKCU\..\Run: [ktopffj] c:\windows\psdcisw.exe O4 - HKCU\..\Run: [xxwdasi] c:\windows\wmpobam.exe O4 - HKCU\..\Run: [rahrnls] c:\windows\njjshch.exe O4 - HKCU\..\Run: [mslpviy] c:\windows\bkhnrip.exe O4 - HKCU\..\Run: [jhehers] c:\windows\inmtatj.exe O4 - HKCU\..\Run: [vltjrfj] c:\windows\dxqdfji.exe O4 - HKCU\..\Run: [kxylcma] c:\windows\psdcisw.exe O4 - HKCU\..\Run: [naxmpfx] c:\windows\njjshch.exe O4 - HKCU\..\Run: [pqgledq] c:\windows\bkhnrip.exe O4 - HKCU\..\Run: [sjucxmr] c:\windows\dxqdfji.exe O4 - HKCU\..\Run: [djtjijc] c:\windows\inmtatj.exe O4 - HKCU\..\Run: [lnoknoy] c:\windows\vdnxuxr.exe O4 - HKCU\..\Run: [smtbvxk] c:\windows\wkjdmgo.exe O4 - HKCU\..\Run: [svalvbc] c:\windows\wmpobam.exe O4 - HKCU\..\Run: [uokvlai] c:\windows\njjshch.exe O4 - HKCU\..\Run: [xxyuakk] c:\windows\bkhnrip.exe O4 - HKCU\..\Run: [wiqmnng] c:\windows\vdnxuxr.exe O4 - HKCU\..\Run: [cmnpqkb] c:\windows\inmtatj.exe O4 - HKCU\..\Run: [taflldm] c:\windows\dxqdfji.exe O4 - HKCU\..\Run: [mgissdr] c:\windows\bglwahs.exe O4 - HKCU\..\Run: [vlosyqc] c:\windows\wkjdmgo.exe O4 - HKCU\..\Run: [wsblfbm] c:\windows\bkhnrip.exe O4 - HKCU\..\Run: [bkxnpyr] c:\windows\vdnxuxr.exe O4 - HKCU\..\Run: [dwqctyp] c:\windows\inmtatj.exe O4 - HKCU\..\Run: [gogwovf] c:\windows\dxqdfji.exe O4 - HKCU\..\Run: [gfjfcpy] c:\windows\bglwahs.exe O4 - HKCU\..\Run: [pdxlgut] c:\windows\wkjdmgo.exe O4 - HKCU\..\Run: [eryimbs] c:\windows\conmyhm.exe O4 - HKCU\..\Run: [gkfwvma] c:\windows\pokaxcb.exe O4 - HKCU\..\Run: [svfthgp] c:\windows\uvepuna.exe O4 - HKCU\..\Run: [duaqgri] c:\windows\uvdnvnc.exe O4 - HKCU\..\Run: [uaomxas] c:\windows\osovdrh.exe O4 - HKCU\..\Run: [wyrvcnk] c:\windows\thjlqbi.exe O4 - HKCU\..\Run: [xhplgtb] c:\windows\tgttwve.exe O4 - HKCU\..\Run: [vlomvjq] c:\windows\lfsudvv.exe O4 - HKCU\..\Run: [jqnyqjd] c:\windows\vsdjlvv.exe O4 - HKCU\..\Run: [uyfmbga] c:\windows\bklpvsw.exe O4 - HKCU\..\Run: [mhhqwnn] c:\windows\snsfvmk.exe O4 - HKCU\..\Run: [mndjqcg] c:\windows\gvnroxu.exe O4 - HKCU\..\Run: [nmwdhkw] c:\windows\iwypmwm.exe O4 - HKCU\..\Run: [ymwtnhd] c:\windows\cshunat.exe O4 - HKCU\..\Run: [trmingf] c:\windows\nlwumcm.exe O4 - HKCU\..\Run: [fuqnnnq] c:\windows\nbidaqm.exe O4 - HKCU\..\Run: [phvxqoj] c:\windows\gqrcnut.exe O4 - HKCU\..\Run: [hcsrsou] c:\windows\hmxnlpq.exe O4 - HKCU\..\Run: [kknncxh] c:\windows\pokaxcb.exe O4 - HKCU\..\Run: [snclpeq] c:\windows\qgbyidv.exe O4 - HKCU\..\Run: [ajkrkud] c:\windows\ixqgjrl.exe O4 - HKCU\..\Run: [uynvuni] c:\windows\nkfkign.exe O4 - HKCU\..\Run: [jutquku] c:\windows\cwhxgpr.exe O4 - HKCU\..\Run: [qqdwpah] c:\windows\tpwfgdg.exe O4 - HKCU\..\Run: [calkath] c:\windows\kerqgcc.exe O4 - HKCU\..\Run: [phutkgx] c:\windows\diglsbl.exe O4 - HKCU\..\Run: [dvplyfy] c:\windows\dkecovp.exe O4 - HKCU\..\Run: [ysgwllc] c:\windows\eifacdg.exe O4 - HKCU\..\Run: [egwabei] c:\windows\qrrrdpw.exe O4 - HKCU\..\Run: [trpccld] c:\windows\erpuxsn.exe O4 - HKCU\..\Run: [ekkuhat] c:\windows\ttmmaoj.exe O4 - HKCU\..\Run: [sitgatp] c:\windows\qgbyidv.exe O4 - HKCU\..\Run: [mjrwmtt] c:\windows\ixqgjrl.exe O4 - HKCU\..\Run: [nipgtad] c:\windows\nkfkign.exe O4 - HKCU\..\Run: [nhvruwm] c:\windows\tpwfgdg.exe O4 - HKCU\..\Run: [tgwaiwi] c:\windows\cwhxgpr.exe O4 - HKCU\..\Run: [agxjuve] c:\windows\kerqgcc.exe O4 - HKCU\..\Run: [owymegt] c:\windows\ilrnuqn.exe O4 - HKCU\..\Run: [yugdpfo] c:\windows\diglsbl.exe O4 - HKCU\..\Run: [ufykfnl] c:\windows\eifacdg.exe O4 - HKCU\..\Run: [tclghie] c:\windows\rsnpaws.exe O4 - HKCU\..\Run: [jijolyt] c:\windows\ggsstey.exe O4 - HKCU\..\Run: [qhennki] c:\windows\qrrrdpw.exe O4 - HKCU\..\Run: [llsprqn] c:\windows\ttmmaoj.exe O4 - HKCU\..\Run: [mkrtjdk] c:\windows\ffghhif.exe O4 - HKCU\..\Run: [pknjgdg] c:\windows\erpuxsn.exe O4 - HKCU\..\Run: [scychai] c:\windows\nkfkign.exe O4 - HKCU\..\Run: [juqtgsm] c:\windows\cwhxgpr.exe O4 - HKCU\..\Run: [vbrkleb] c:\windows\tpwfgdg.exe O4 - HKCU\..\Run: [wnocbhw] c:\windows\kerqgcc.exe O4 - HKCU\..\Run: [fqadrkk] c:\windows\ilrnuqn.exe O4 - HKCU\..\Run: [tjsnksy] c:\windows\diglsbl.exe O4 - HKCU\..\Run: [xfceipk] c:\windows\dkecovp.exe O4 - HKCU\..\Run: [vgjuelr] c:\windows\vgnhqyw.exe O4 - HKCU\..\Run: [afpphxa] c:\windows\erpuxsn.exe O4 - HKCU\..\Run: [efmkfrg] c:\windows\rsnpaws.exe O4 - HKCU\..\Run: [uyksbwg] c:\windows\ggsstey.exe O4 - HKCU\..\Run: [ahbswiu] c:\windows\eifacdg.exe O4 - HKCU\..\Run: [jqidhwu] c:\windows\qrrrdpw.exe O4 - HKCU\..\Run: [iodntnd] c:\windows\ttmmaoj.exe O4 - HKCU\..\Run: [ltmnlgs] c:\windows\ffghhif.exe O4 - HKCU\..\Run: [epmovrr] c:\windows\qgbyidv.exe O4 - HKCU\..\Run: [idwscyc] c:\windows\nkfkign.exe
|
|
#6
November 14th, 2004, 09:05 PM
|
|||
|
|||
|
O4 - HKCU\..\Run: [Registry Cleaner Scheduler] "C:\Program Files\CleanMyPC\Registry Cleaner\RCScheduler.exe" /startup
O4 - HKCU\..\Run: [evjtkts] c:\windows\hwlrhxy.exe O4 - HKCU\..\Run: [isseikl] c:\windows\uklddwn.exe O4 - HKCU\..\Run: [qejffdx] c:\windows\obpftkr.exe O4 - HKCU\..\Run: [vritwwl] c:\windows\uimgjcq.exe O4 - HKCU\..\Run: [rnpriot] c:\windows\hxhrpci.exe O4 - HKCU\..\Run: [cpaxkyp] c:\windows\eddxktt.exe O4 - HKCU\..\Run: [fvgpqwh] c:\windows\rbxkbwe.exe O4 - HKCU\..\Run: [gwxkwel] c:\windows\mjfqgpf.exe O4 - HKCU\..\Run: [gdxfacc] c:\windows\dajajeb.exe O4 - HKCU\..\Run: [oitxseg] c:\windows\dpqnewg.exe O4 - HKCU\..\Run: [knrddiu] c:\windows\kdumrgt.exe O4 - HKCU\..\Run: [yepnoce] c:\windows\neeqysg.exe O4 - HKCU\..\Run: [kvbccid] c:\windows\ahqdlgv.exe O4 - HKCU\..\Run: [mkxutjy] c:\windows\dbvsoxh.exe O4 - HKCU\..\Run: [wnkwdpr] c:\windows\rhxruwf.exe O4 - HKCU\..\Run: [fbjypqu] c:\windows\kiyaisx.exe O4 - HKCU\..\Run: [tuyyent] c:\windows\wptqvsk.exe O4 - HKCU\..\Run: [twfxefy] c:\windows\tltyywb.exe O4 - HKCU\..\Run: [vjwgyjp] c:\windows\djbjatj.exe O4 - HKCU\..\Run: [guulyfd] c:\windows\ovivmwy.exe O4 - HKCU\..\Run: [xmidhsg] c:\windows\ditmucg.exe O4 - HKCU\..\Run: [eltgrsa] c:\windows\pnagnqa.exe O4 - HKCU\..\Run: [cxbrenx] c:\windows\tqqumhg.exe O4 - HKCU\..\Run: [medmpsr] c:\windows\iaycsdi.exe O4 - HKCU\..\Run: [bukakqk] c:\windows\dewqwan.exe O4 - HKCU\..\Run: [enlndqk] c:\windows\nbingcp.exe O4 - Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE O4 - Global Startup: NetHelp.lnk = C:\Program Files\BTopenworld NetHelp\bin\matcli.exe O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll O9 - Extra button: BT Yahoo! Sidebar - {51085E3D-A958-42A2-A6BE-A6A9B0BAF276} - C:\Program Files\Yahoo!\browser\ysidebarIE.dll O9 - Extra 'Tools' menuitem: BT &Yahoo! Sidebar - {51085E3D-A958-42A2-A6BE-A6A9B0BAF276} - C:\Program Files\Yahoo!\browser\ysidebarIE.dll O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra button: Homepage - {3FA1426D-BCAC-4AB0-A53B-3928AC38DEB0} - http://bt.yahoo.com (file missing) (HKCU) O9 - Extra button: BT - {A09C2591-7C05-4567-BF3C-187C50D9EADF} - http://www.bt.com (file missing) (HKCU) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: WebWorks Help 2.0 - file://E:\files\docs\html\model\wwhelp2.cab O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potc_x.cab O16 - DPF: {11111111-1111-1111-1111-111111113457} - file://c:\explorer.cab O16 - DPF: {231B1C6E-F934-42A2-92B6-C2FEFEC24276} (yucsetreg Class) - C:\Program Files\Yahoo!\common\yucconfig.dll O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/12231ff22cc116de0920/netzip/RdxIE601.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093174901328 O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab O16 - DPF: {8714912E-380D-11D5-B8AA-00D0B78F3D48} (Yahoo! Webcam Upload Wrapper) - http://chat.yahoo.com/cab/yuplapp.cab O16 - DPF: {87D1A6EF-8CBC-458A-84B5-0333562418CD} - http://www.sitetracking.info/cttdl.cab O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab O16 - DPF: {D8A8A7F1-53EF-41F2-B44D-F3E2E595DC27} - ms-its:mhtml:file://C:\MAIN.MHT!http://69.50.167.88/306//main.chm::/update.exe O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
|
|
#8
November 17th, 2004, 11:57 PM
|
|||
|
|||
|
Hi revs boi,
Looks like a ton of virus/trojan activity and then some Let's start here: Download Stinger. Save it to your Desktop. Double-click it to start it. Make sure all of your drives are listed in the "Directories to scan" box (C:\ D:\ E:\, etc.). Click the Scan Now button and let it remove anything it finds. http://vil.nai.com/vil/stinger/ Next... Perform an onlne virus scan from this site: Trend Micro Housecall - Again, select all of your drives to be scanned. Please check "Auto clean" before scanning. http://housecall.trendmicro.com/ If you can, copy and paste the report logs from the scans into your next post, along with a fresh HijackThis log. Tom
__________________
HijackThis Ad-aware Spybot Search & Destroy SpywareBlaster SpywareGuard Housecall Online A/V Scan Please read the stickys at the top of the forum before posting!
|
|
| Viewing: Dev Shed Forums > System Administration > Antivirus Protection > help please 100% cpu usage thread |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
Del.icio.us
Digg
Google
Spurl
Blink
Furl
Simpy
Y! MyWeb
Linear Mode
