Ok, I pretty much fixed the problem now, I got zonealarm which is great, a little bit overprotective sometimes but thats all good lol. Now I've got a problem with those stupid things that take over your hompage and give you some crappy toolbar and some web search panel that it sometimes sticks at the bottom of the screen. I dont know how to get rid of this one, I ran hijackthis, and it found a whole load of things, but at the top it says "below are the results of the scan, Be careful what you delete,HijackThis cannot determine what is bad and what is merely customized by you. The best thing you can do is save a log and show it to knowlegable folks."
So here ya go...
Logfile of HijackThis v1.98.2
Scan saved at 16:56:31, on 10/09/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\System32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
D:\WINDOWS\system32\spoolsv.exe
C:\Grisoft\AVG6\avgserv.exe
D:\Program Files\Eset\nod32krn.exe
D:\WINDOWS\system32\ZONELABS\vsmon.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
D:\Program Files\DSE\ADSL\CnxDslTb.exe
C:\Grisoft\AVG6\avgcc32.exe
D:\Program Files\Messenger Plus! 3\MsgPlus.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\Program Files\TGTSoft\StyleXP\StyleXP.exe
d:\progra~1\intern~1\iexplore.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Grisoft\AVG6\avgw.exe
D:\Program Files\Netscape\Netscape\Netscp.exe
D:\DOCUME~1\BENWAE~1\LOCALS~1\Temp\Rar$EX02.121\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.co.nz/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://hdnmxzrbudff.com/MGi6mFMaDgTnHUyHJgQ56EL05gvSpcRxKCs_iuKV5Qy54fYUB8pA3TOgsX/hgTt_.htmlN3 - Netscape 7: user_pref("browser.startup.homepage", "
http://home.netscape.com/bookmark/7_2/home.html"); (D:\Documents and Settings\Ben Waelend\Application Data\Mozilla\Profiles\default\w309o7j3.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://D%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (D:\Documents and Settings\Ben Waelend\Application Data\Mozilla\Profiles\default\w309o7j3.slt\prefs.js)
O2 - BHO: (no name) - {3989D5B4-486A-7750-FF21-AA34825E3136} - D:\PROGRA~1\SETTIN~1\dale less.exe
O2 - BHO: (no name) - {F74-2DD7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8EF-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ATIPTA] D:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [CTStartup] D:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [CnxDslTaskBar] D:\Program Files\DSE\ADSL\CnxDslTb.exe
O4 - HKLM\..\Run: [AVG_CC] C:\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [MessengerPlus3] "D:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [datecloselogball] D:\Documents and Settings\All Users\Application Data\Dale Two Date Close\mapitons.exe
O4 - HKLM\..\Run: [keep mp3] D:\PROGRA~1\STOPJU~1\Supportaxis.exe
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\RunServices: [Microsoft Update Machine] Win32.exe
O4 - HKLM\..\RunServices: [System Main Functionality] systemtemp32.exe
O4 - HKCU\..\Run: [STYLEXP] D:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [MessengerPlus3] "D:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &Google Search - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://D:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://D:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://D:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) -
http://messenger.zone.msn.com/binary/MineSweeper.cab30149.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?O16 - DPF: {8E0D4DE-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsClient.cab30149.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{1CBA4166-6CF7-4270-BE38-FD89BF83093E}: NameServer =
O17 - HKLM\System\CS1\Services\Tcpip\..\{1CBA4166-6CF7-4270-BE38-FD89BF83093E}: NameServer =
Author
Logged
