PDA

View Full Version : Can't seem to run Kaspersky, HJT log is included, yes I read the FAQ...



Geodesix
2007-09-07, 14:25
As the title says I can't seem to run Kaspersky online, gives the error or asks me for a path to the file '002E08D9.key' specifically. I can track it down, it's sitting in D:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\" but even when I point the program there it still won't install... any and all help would be greatly appreciated, thanks in advance...


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:11:23 AM, on 9/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
D:\WINDOWS\RTHDCPL.EXE
D:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
D:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\BtUsrBdg.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\Program Files\Folding@Home\F@H2\FAH504-Console.exe
D:\Program Files\Folding@Home\FAH504-Console.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Vidalia Bundle\Tor\tor.exe
D:\Program Files\Logitech\SetPoint\SetPoint.exe
D:\WINDOWS\system32\ZoneLabs\vsmon.exe
D:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
D:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe
D:\Program Files\Zone Labs\ZoneAlarm\MailFrontier\mantispm.exe
D:\Program Files\Extended Systems\XTNDConnect Blue Manager\btprot.exe
D:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Folding@Home\F@H2\FahCore_78.exe
D:\Program Files\Folding@Home\FahCore_78.exe
D:\firefox.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [amd_dc_opt] "D:\Program Files\AMD\amd_dc_opt\amd_dc_opt.exe"
O4 - HKLM\..\Run: [DiskeeperSystray] "D:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [OpwareSE2] "D:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [BTUSRBDG] BtUsrBdg.exe
O4 - HKLM\..\Run: [BTSETBOOTKEY] BTSetBootKey.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [BitComet] "D:\Program Files\BitLord\BitLord.exe"
O4 - HKCU\..\Run: [TorCP] D:\Program Files\TorCP\torcp.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [StartCCC] D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [Vidalia] "D:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe"
O4 - HKUS\S-1-5-18\..\Run: [PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Startup: Privoxy.lnk = D:\Program Files\Privoxy\privoxy.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Privoxy.lnk = D:\Program Files\Vidalia Bundle\Privoxy\privoxy.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: d:\windows\system32\nwprovau.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1147631045484
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: bw+0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {5DDB5108-E25D-498D-AC18-7513ED9695A3} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Adobe LM Service - Adobe Systems - D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - D:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Diskeeper - Diskeeper Corporation - D:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: FAH@D:+Program Files+Folding@Home+F@H2+FAH504-Console.exe - Stanford University - D:\Program Files\Folding@Home\F@H2\FAH504-Console.exe
O23 - Service: FAH@D:+Program Files+Folding@Home+FAH504-Console.exe - Stanford University - D:\Program Files\Folding@Home\FAH504-Console.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - D:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - D:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia. - D:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Tor Win32 Service (tor) - Unknown owner - D:\Program Files\Vidalia Bundle\Tor\tor.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 19355 bytes

Shaba
2007-09-08, 10:57
Hi Geodesix

That seems to common problem nowadays, so nothing to worry about.

Do you have any specific problems?

Run this scan instead, please:

Please run this online scan:

Panda ActiveScan (http://www.pandasoftware.com/activescan/com/activescan_principal.htm)

Once you are on the Panda site, click the Scan your PC button
A new window will open...click the Check Now button
Enter your Country
Enter your State/Province
Enter your e-mail address and click send
Select either Home User or Company
Click the big Scan Now button
If it wants to install an ActiveX component allow it
It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
When download is complete, click on Local Disks to start the scan
When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

Post the contents of the Panda scan report, along with a new HijackThis Log

Geodesix
2007-09-08, 17:14
I've been having issues with my internet connection, when I leave the computer for a long time, i.e. when I goto work, I come home, and have to power cycle the modem, the computer, etc in order to get the internet back up. I have had my ISP send me a new modem/router and that does the same thing, and I have tried to release/renew the IP addy but it's always a moot point for some reason when I leave my desktop for a while I lose my connection to the internet and it takes a full reboot, both computer and modem(not sure of this one, I do it just in case though) to get it back up and running. It's weird, it's just been buggy as of late I guess, but I'll include the log from the Panda scan, I truly appreciate the time you guys put into this, thanks in advance, btw...

Geo


Incident Status Location

Spyware:Cookie/Com.com Not disinfected D:\Documents and Settings\Chillipimp\Application Data\Mozilla\Firefox\Profiles\y65ht2wx.default\cookies.txt[.com.com/]
Spyware:Cookie/Statcounter Not disinfected D:\Documents and Settings\Chillipimp\Application Data\Mozilla\Firefox\Profiles\y65ht2wx.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/Go Not disinfected D:\Documents and Settings\Chillipimp\Application Data\Mozilla\Firefox\Profiles\y65ht2wx.default\cookies.txt[.go.com/]
Spyware:Cookie/Serving-sys Not disinfected D:\Documents and Settings\Chillipimp\Application Data\Mozilla\Firefox\Profiles\y65ht2wx.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected D:\Documents and Settings\Chillipimp\Application Data\Mozilla\Firefox\Profiles\y65ht2wx.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Tucows Not disinfected D:\Documents and Settings\Chillipimp\Application Data\Mozilla\Firefox\Profiles\y65ht2wx.default\cookies.txt[.tucows.com/]
Spyware:Cookie/Xiti Not disinfected D:\Documents and Settings\Chillipimp\Application Data\Mozilla\Firefox\Profiles\y65ht2wx.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Searchportal Not disinfected D:\Documents and Settings\Chillipimp\Application Data\Mozilla\Firefox\Profiles\y65ht2wx.default\cookies.txt[searchportal.information.com/]
Spyware:Cookie/YieldManager Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Falkag Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[.as-us.falkag.net/]
Spyware:Cookie/WUpd Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[.revenue.net/]
Spyware:Cookie/Maxserving Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[.maxserving.com/]
Spyware:Cookie/Statcounter Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/Apmebf Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[.apmebf.com/]
SSpyware:Cookie/RealMedia Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[.realmedia.com/]
Spyware:Cookie/Com.com Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[.com.com/]
Spyware:Cookie/Cd Freaks Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[.cdfreaks.com/]
Spyware:Cookie/Serving-sys Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Tribalfusion Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/onestat.com Not disinfected D:\Documents and Settings\Chillipimp\Application Data\xMozilla\Firefox\Profiles\owmpux5f.default\cookies.txt[stat.onestat.com/]
Spyware:Cookie/WUpd Not disinfected D:\Documents and Settings\Nightshade\Application Data\Mozilla\Firefox\Profiles\j4pgamoi.default\cookies.txt[.revenue.net/]
Spyware:Cookie/Tribalfusion Not disinfected D:\Documents and Settings\Nightshade\Application Data\Mozilla\Firefox\Profiles\j4pgamoi.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/Adserver Not disinfected D:\Documents and Settings\Nightshade\Application Data\Mozilla\Firefox\Profiles\j4pgamoi.default\cookies.txt[adserver.filefront.com/]
Potentially unwanted tool:Application/NirCmd.A Not disinfected D:\Program Files\plugin\AntiVirus\AV7PE\nircmd.exe
Potentially unwanted tool:Application/NirCmd.A Not disinfected D:\UBCD\BartPE\I386\SYSTEM32\NIRCMD.EXE
Potentially unwanted tool:Application/NirCmd.A Not disinfected D:\UBCD\BartPE\kj\I386\SYSTEM32\NIRCMD.EXE
Potentially unwanted tool:Application/NirCmd.A Not disinfected D:\UBCD\BartPE\plugin\AntiVirus\AV7PE\nircmd.exe
Potentially unwanted tool:Application/NirCmd.A Not disinfected D:\UBCD\kj\I386\SYSTEM32\NIRCMD.EXE
Potentially unwanted tool:Application/NirCmd.A Not disinfected D:\UBCD\plugin\AntiVirus\AV7PE\nircmd.exe

Shaba
2007-09-08, 17:39
Hi

Nothing there.

I believe that connection problem is hardware related.

However, I can't help you with it but I can forward you if you like to.

Shaba
2007-09-15, 11:03
Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team
a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.