Problem going into Internet Explorer

• ahhquan

  13 Dec 07, 09:44

  Hi I have a problem using my Internet explorer now.
  
  Every time i double click on it, it says the following message and I am unable to go into INTERNET EXPLORER.
  
  Your Browser is infected by Trojan.Win32.Obfuscated.gx
  You need to clean your system immediately, in other case it will crash soon!
  Click OK to download the high-tech antispyware protection software! (Recommended)
  
  I did a scan with AVG but did not detect any problems.
  
  I also get the messages when i click on MY COMPUTER.
  
  Please Help!!
  
  Thanks a lot!
• ad3285

  13 Dec 07, 09:55

  What you got is commonly known as spyware.
  They do no harm but is just plain irritating. You only get infected when you download the so call 'high-tech antivirus'.
  
  Solution:
  
  Download Ad-Aware Free
  http://www.lavasoftusa.com/products/ad_aware_free.php
  
  Install, updates the definition to the latest, run a full system scans.
  Delete/Quarantine those affected items.
  
  Run scan again just to make sure u are free from them.
  
  Any questions post back again
• kenn3th

  13 Dec 07, 12:49

  Aiya. Again.
  
  Rouge Spyware la.
  
  
• kenn3th

  13 Dec 07, 12:52

  Originally posted by ad3285:

  What you got is commonly known as spyware.
  They do no harm but is just plain irritating. You only get infected when you download the so call 'high-tech antivirus'.
  
  Solution:
  
  Download Ad-Aware Free
  http://www.lavasoftusa.com/products/ad_aware_free.php
  
  Install, updates the definition to the latest, run a full system scans.
  Delete/Quarantine those affected items.
  
  Run scan again just to make sure u are free from them.
  
  Any questions post back again

  Actually it's not only high tech anti virus.
  When you download codecs you will get it too.
  
  Thread starter. Is there any other programme installed in your computer. Something new?
• ndmmxiaomayi

  13 Dec 07, 13:10

  I've been taking up lots of these cases (Google my nickname... should be able to find me about everywhere)
  
  Follow this topic: http://www.sgforums.com/?action=thread_display&thread_id=295854
  
  If it doesn't get fixed, post the HijackThis log and Uninstall list.
• ahhquan

  14 Dec 07, 23:59

  here is my hijackthis log
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\WINDOWS\Explorer.EXE
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\ltmoh\Ltmoh.exe
  C:\WINDOWS\System32\hkcmd.exe
  C:\Grisoft\AVGFRE~1\avgcc.exe
  C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
  C:\Program Files\QuickTime\qttask.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Files\MSN Messenger\MsnMsgr.Exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\Messenger\msmsgs.exe
  C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
  C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe
  C:\WinZip\WZQKPICK.EXE
  C:\Grisoft\AVGFRE~1\avgamsvr.exe
  C:\Grisoft\AVGFRE~1\avgupsvc.exe
  C:\Grisoft\AVGFRE~1\avgemc.exe
  C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
  C:\WINDOWS\system32\CTsvcCDA.exe
  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
  C:\Program Files\iPod\bin\iPodService.exe
  C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
  C:\Program Files\MSN Messenger\usnsvc.exe
  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
  R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: Video - {0F596190-DEC2-4D19-AB43-50B54243923F} - C:\WINDOWS\windivx.dll
  O2 - BHO: Mp3 Video - {5DE176A4-B5FF-4D50-B084-E047526B8E97} - C:\WINDOWS\system32\VideoMP3.dll (file missing)
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
  O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
  O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
  O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
  O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
  O4 - HKLM\..\Run: [AVG7_CC] C:\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
  O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
  O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
  O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'Default user')
  O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Adobe\Acrobat 7.0\Reader\reader_sl.exe
  O4 - Global Startup: BlueSoleil.lnk = ?
  O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
  O4 - Global Startup: WinZip Quick Pick.lnk = C:\WinZip\WZQKPICK.EXE
  O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
  O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\MICROS~1\OFFICE11\EXCEL.EXE/3000
  O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-sg\msntabres.dll.mui/229?8906f104fd734d9baf15312b9e0f5337
  O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-sg\msntabres.dll.mui/230?8906f104fd734d9baf15312b9e0f5337
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\MICROS~1\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www1.snapfish.com.sg/SnapfishActivia.cab
  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
  O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\Grisoft\AVGFRE~1\avgamsvr.exe
  O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\Grisoft\AVGFRE~1\avgupsvc.exe
  O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\Grisoft\AVGFRE~1\avgemc.exe
  O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
  O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
  O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  
  --
  End of file - 6669 bytes
  
• ahhquan

  15 Dec 07, 00:10

  and my uninsall_list log...hope all these isn't too messy...
  
  Ad-Aware SE Personal
  Adobe Flash Player 9 ActiveX
  Adobe Flash Player Plugin
  Adobe Reader 7.0.7
  Agere Systems AC'97 Modem
  Apple Software Update
  AudibleManager
  AVG Free Edition
  BlueSoleil
  Creative MediaSource 5
  Creative MuVo V100
  Creative System Information
  HijackThis 2.0.2
  Hotfix for Windows Media Format 11 SDK (KB929399)
  Hotfix for Windows Media Player 11 (KB939683)
  Hotfix for Windows XP (KB926239)
  Intel(R) Extreme Graphics 2 Driver
  iTunes
  J2SE Runtime Environment 5.0 Update 6
  Java(TM) SE Runtime Environment 6 Update 1
  LUMIX Simple Viewer
  Macromedia Shockwave Player
  Metacafe
  Microsoft Compression Client Pack 1.0 for Windows XP
  Microsoft Office Professional Edition 2003
  Microsoft User-Mode Driver Framework Feature Pack 1.0
  Mozilla Firefox (2.0.0.11)
  O2Micro MemoryCardBus Windows Driver
  OneCare Advisor (Windows Live Toolbar)
  Popup Blocker (Windows Live Toolbar)
  PowerDVD
  QuickTime
  Rhapsody Player Engine
  Security Update for Windows Media Player (KB911564)
  Security Update for Windows Media Player 10 (KB917734)
  Security Update for Windows Media Player 10 (KB936782)
  Security Update for Windows Media Player 11 (KB936782)
  Security Update for Windows Media Player 6.4 (KB92539
  Security Update for Windows XP (KB890046)
  Security Update for Windows XP (KB893756)
  Security Update for Windows XP (KB89635
  Security Update for Windows XP (KB896423)
  Security Update for Windows XP (KB89642
  Security Update for Windows XP (KB899587)
  Security Update for Windows XP (KB899591)
  Security Update for Windows XP (KB900725)
  Security Update for Windows XP (KB901017)
  Security Update for Windows XP (KB901190)
  Security Update for Windows XP (KB901214)
  Security Update for Windows XP (KB902400)
  Security Update for Windows XP (KB904706)
  Security Update for Windows XP (KB905414)
  Security Update for Windows XP (KB905749)
  Security Update for Windows XP (KB908519)
  Security Update for Windows XP (KB911562)
  Security Update for Windows XP (KB911927)
  Security Update for Windows XP (KB913580)
  Security Update for Windows XP (KB91438
  Security Update for Windows XP (KB914389)
  Security Update for Windows XP (KB917344)
  Security Update for Windows XP (KB917422)
  Security Update for Windows XP (KB917953)
  Security Update for Windows XP (KB91811
  Security Update for Windows XP (KB918439)
  Security Update for Windows XP (KB919007)
  Security Update for Windows XP (KB920213)
  Security Update for Windows XP (KB920670)
  Security Update for Windows XP (KB920683)
  Security Update for Windows XP (KB920685)
  Security Update for Windows XP (KB921503)
  Security Update for Windows XP (KB922819)
  Security Update for Windows XP (KB923191)
  Security Update for Windows XP (KB923414)
  Security Update for Windows XP (KB923689)
  Security Update for Windows XP (KB923694)
  Security Update for Windows XP (KB923980)
  Security Update for Windows XP (KB924191)
  Security Update for Windows XP (KB924270)
  Security Update for Windows XP (KB924496)
  Security Update for Windows XP (KB924667)
  Security Update for Windows XP (KB925902)
  Security Update for Windows XP (KB926255)
  Security Update for Windows XP (KB926436)
  Security Update for Windows XP (KB927779)
  Security Update for Windows XP (KB927802)
  Security Update for Windows XP (KB928255)
  Security Update for Windows XP (KB928843)
  Security Update for Windows XP (KB929123)
  Security Update for Windows XP (KB929969)
  Security Update for Windows XP (KB93017
  Security Update for Windows XP (KB931261)
  Security Update for Windows XP (KB93176
  Security Update for Windows XP (KB931784)
  Security Update for Windows XP (KB93216
  Security Update for Windows XP (KB933566)
  Security Update for Windows XP (KB933729)
  Security Update for Windows XP (KB935839)
  Security Update for Windows XP (KB935840)
  Security Update for Windows XP (KB936021)
  Security Update for Windows XP (KB937143)
  Security Update for Windows XP (KB937894)
  Security Update for Windows XP (KB938127)
  Security Update for Windows XP (KB938829)
  Security Update for Windows XP (KB939653)
  Security Update for Windows XP (KB941202)
  Security Update for Windows XP (KB94156
  Security Update for Windows XP (KB941569)
  Security Update for Windows XP (KB942615)
  Security Update for Windows XP (KB943460)
  Security Update for Windows XP (KB944653)
  Shockwave
  SigmaTel AC97 Audio Drivers
  Smart Menus (Windows Live Toolbar)
  Tabbed Browsing (Windows Live Toolbar)
  Update for Windows XP (KB894391)
  Update for Windows XP (KB898461)
  Update for Windows XP (KB900485)
  Update for Windows XP (KB908531)
  Update for Windows XP (KB910437)
  Update for Windows XP (KB911280)
  Update for Windows XP (KB916595)
  Update for Windows XP (KB920872)
  Update for Windows XP (KB922582)
  Update for Windows XP (KB927891)
  Update for Windows XP (KB930916)
  Update for Windows XP (KB931836)
  Update for Windows XP (KB933360)
  Update for Windows XP (KB936357)
  Update for Windows XP (KB93882
  Update for Windows XP (KB942763)
  Update for Windows XP (KB942840)
  Windows Installer 3.1 (KB893803)
  Windows Live Favorites for Windows Live Toolbar
  Windows Live Messenger
  Windows Live Outlook Toolbar (Windows Live Toolbar)
  Windows Live Sign-in Assistant
  Windows Live Toolbar
  Windows Live Toolbar
  Windows Live Toolbar Extension (Windows Live Toolbar)
  Windows Live Toolbar Feed Detector (Windows Live Toolbar)
  Windows Media Format 11 runtime
  Windows Media Format 11 runtime
  Windows Media Player 10 Hotfix - KB895316
  Windows Media Player 11
  Windows Media Player 11
  Windows Rights Management Client Backwards Compatibility SP2
  Windows Rights Management Client with Service Pack 2
  Windows XP Hotfix - KB873339
  Windows XP Hotfix - KB885835
  Windows XP Hotfix - KB885836
  Windows XP Hotfix - KB886185
  Windows XP Hotfix - KB887472
  Windows XP Hotfix - KB888302
  Windows XP Hotfix - KB890859
  Windows XP Hotfix - KB891781
  Windows XP Service Pack 2
  WinZip
  XnView 1.90.2
  Yahoo! Toolbar
• ndmmxiaomayi

  15 Dec 07, 13:09

  Full HijackThis log please. The top part is gone.
• ahhquan

  16 Dec 07, 12:34

  Originally posted by ndmmxiaomayi:

  Full HijackThis log please. The top part is gone.

  Apologies...here it is..
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 23:49:09, on 12/14/2007
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  Boot mode: Normal
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\WINDOWS\Explorer.EXE
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\ltmoh\Ltmoh.exe
  C:\WINDOWS\System32\hkcmd.exe
  C:\Grisoft\AVGFRE~1\avgcc.exe
  C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
  C:\Program Files\QuickTime\qttask.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Files\MSN Messenger\MsnMsgr.Exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\Messenger\msmsgs.exe
  C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
  C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe
  C:\WinZip\WZQKPICK.EXE
  C:\Grisoft\AVGFRE~1\avgamsvr.exe
  C:\Grisoft\AVGFRE~1\avgupsvc.exe
  C:\Grisoft\AVGFRE~1\avgemc.exe
  C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
  C:\WINDOWS\system32\CTsvcCDA.exe
  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
  C:\Program Files\iPod\bin\iPodService.exe
  C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
  C:\Program Files\MSN Messenger\usnsvc.exe
  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
  R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: Video - {0F596190-DEC2-4D19-AB43-50B54243923F} - C:\WINDOWS\windivx.dll
  O2 - BHO: Mp3 Video - {5DE176A4-B5FF-4D50-B084-E047526B8E97} - C:\WINDOWS\system32\VideoMP3.dll (file missing)
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
  O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
  O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
  O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
  O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
  O4 - HKLM\..\Run: [AVG7_CC] C:\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
  O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
  O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
  O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'Default user')
  O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Adobe\Acrobat 7.0\Reader\reader_sl.exe
  O4 - Global Startup: BlueSoleil.lnk = ?
  O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
  O4 - Global Startup: WinZip Quick Pick.lnk = C:\WinZip\WZQKPICK.EXE
  O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
  O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\MICROS~1\OFFICE11\EXCEL.EXE/3000
  O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-sg\msntabres.dll.mui/229?8906f104fd734d9baf15312b9e0f5337
  O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-sg\msntabres.dll.mui/230?8906f104fd734d9baf15312b9e0f5337
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\MICROS~1\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www1.snapfish.com.sg/SnapfishActivia.cab
  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
  O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\Grisoft\AVGFRE~1\avgamsvr.exe
  O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\Grisoft\AVGFRE~1\avgupsvc.exe
  O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\Grisoft\AVGFRE~1\avgemc.exe
  O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
  O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
  O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  
  --
  End of file - 6669 bytes
  
• ndmmxiaomayi

  16 Dec 07, 12:53

  If you already have Smitfraudfix, please delete this copy and download it again as it's being updated regularly.
  
  Please download SmitFraudFix.exe by S!Ri and save it to the desktop.
  
  If you can't download it, please download it from these alternative sites:
  
  From Geekstogo
  From Security Cadets
  From Zebulon
  
  

  [*]Double click on SmitfraudFix.exe.
  [*]Press 1 then hit the Enter key.
  [*]It will create a report named rapport.txt, usually at C drive.
  [*]Please post back this log in your next reply.

  
  
  Note: process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. Read more here.
  
  Please post back this log and a new HijackThis log.