Logfile of HijackThis v1.98.2
Scan saved at 12:48:23 AM, on 12/4/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\DOORS\System32\smss.exe
C:\DOORS\system32\winlogon.exe
C:\DOORS\system32\services.exe
C:\DOORS\system32\lsass.exe
C:\DOORS\system32\svchost.exe
C:\DOORS\System32\svchost.exe
C:\DOORS\system32\spoolsv.exe
C:\DOORS\Explorer.EXE
C:\DOORS\System32\devldr32.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\DOORS\System32\CTsvcCDA.exe
C:\DOORS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\DOORS\System32\IEXPLORE.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
C:\DOORS\paint.exe
C:\DOORS\site.exe
C:\DOORS\dllmanager.exe
C:\Program Files\Messenger\msmsgs.exe
C:\DOORS\System32\svch0st.exe
C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
C:\DOORS\System32\wuauclt.exe
C:\Program Files\Windows AdService\WinAdServ.exe
C:\Program Files\Windows AdService\WinAdSlave.exe
C:\DOORS\PCHealth\HelpCtr\Binaries\MSConfig.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ben\Local Settings\Temp\Temporary Directory 2 for hijackthis_198.zip\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://63.246.131.130/index.htm
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\WS_FTP Pro\wsbho2k0.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\DOORS\System32\msdxm.ocx
O4 - HKLM..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM..\Run: [Microsoft Windows] svch0st.exe
My comp keeps getting the following viruses:
JS:Istbar
Win32:Wootbot-CE [Trj]
Win32:DyfucDldr-S [Trj]
Win32:DyfucDldr-R [Trj]
Win32:DyfucDldr-T [Trj]
Win32:Trojan-gen {other}
I have fully reformatted properly and started with a fresh comp twice. I installed firewall and antivirus BEFORE plugging into modem.
Thanks for any help
P.S. I cant figure out what Windows AdService is…
Oh Yeah, I renamed “WINDOWS” to “DOORS” during the last format when it asked. (Trying whatever)
My system still automatically created a WINDOWS folder with lots in it, but i havent had any problems…will I?
Thanks again. Ben