Logfile of HijackThis v1.97.7
Scan saved at 10:56:10 PM, on 5/13/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\AIM95\aim.exe
C:\Documents and Settings\Owner\My Documents\p0ned owner tools\P0ned Owner Tool2.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\System32\taskmgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Anti-Virus&Spyware\Anti-Virus&Spyware.exe
C:\PROGRA~1\Grisoft\AVG6\AVGCC32.EXE
C:\Program Files\America Online 8.0\waol.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\America Online 8.0\shellmon.exe
C:\Program Files\Common Files\Nullsoft\ActiveX\2.0\AOLMed~1.exe
C:\Documents and Settings\Owner\My Documents\tameclone.exe
C:\Documents and Settings\Owner\My Documents\AimRemix3.0\Aim Remix 3.0\Aim Remix 3.0.exe
C:\Documents and Settings\Owner\My Documents\AimRemix3.0\Aim Remix 3.0\Aim Remix 3.0.exe
C:\Documents and Settings\Owner\My Documents\HijackThis.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://qus7.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://srch-qus7.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Owner\Application Data\Mozilla\Profiles\default\qa63xu2x.slt\prefs.js)
O2 - BHO: (no name) - {80672997-D58C-4190-9843-C6C61AF8FE97} - C:\WINDOWS\rundll16.dll (file missing)
O2 - BHO: (no name) - {9ecf7c28-16d8-477d-8471-5fcb207205fe} - (no file)
O2 - BHO: (no name) - {A85C4A1B-BD36-44E5-A70F-8EC347D9B24F} - (no file)
O2 - BHO: (no name) - {C12E8968-4892-42FC-99B9-EF8E90CFA9EA} - C:\WINDOWS\System32\catsrvmps.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {3D19D956-AFC0-4E66-8D2E-06C406FDBE47} - (no file)
O3 - Toolbar: NewtonKnows - {E9407738-A996-421A-A309-5C93C699E10A} - c:\program files\newton knows\ntoolbar.dll (file missing)
O3 - Toolbar: Netster - {856D6A8E-A24C-498A-A55A-2B25C606A6B4} - C:\Documents and Settings\Owner\Netster.dll (file missing)
O3 - Toolbar: (no name) - {B4573818-8894-48D2-B89D-7DF37C781C88} - (no file)
O4 - HKLM\..\Run: [Tau Monitor] C:\PROGRA~1\Agnitum\TAUSCA~1.7\taumon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - Startup: PowerMenu.lnk = C:\Program Files\WCRobot\PowerMenu.exe
O4 - Startup: PowerMenu.lnk.disabled
O4 - Startup: WinPatrol 6.1.lnk = C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
O4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exe
O4 - Global Startup: AVG Control Center.lnk = C:\Program Files\Grisoft\AVG6\avgcc32.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra 'Tools' menuitem: Turbo Download (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
