Logfile of HijackThis v1.98.0 -- What can be deleted?

Logfile of HijackThis v1.98.0
Scan saved at 2:39:31 PM, on 7/30/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SYMTRAY.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINEYES\WINEYES.EXE
C:\WINEYES\SPEECH32.EXE
C:\WINEYES\GWM32.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINEYES\BDISPLAY.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\RUNDLL32.EXE
D:\BKUP\PROGRAM FILES\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\WIRELESS DESKTOP\MOUSE32A.EXE
E:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\POPROXY.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\EVNTSVC.EXE
C:\WINDOWS\RunDLL.exe
E:\PROGRAM FILES\AUTOSPELL50\ASWATC32.EXE
C:\PROGRAM FILES\WIRELESS DESKTOP\MAGICKEY.EXE
E:\Program Files\autospell50\aswatc16.exe
C:\WINDOWS\SYSTEM\WMIEXE.EXE
D:\PROGRAM FILES\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy-server.hawaii.rr.com:8080;https=proxy-server.hawaii.rr.com:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ams-server.hawaii.rr.com; update-server.hawaii.rr.com;<local>
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN0\YCOMP5_3_12_0.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\downloaded program files\googletoolbar1.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN0\YCOMP5_3_12_0.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\downloaded program files\googletoolbar1.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [ICSDCLT] c:\windows\rundll32.exe c:\windows\SYSTEM\icsdclt.dll,ICSClient
O4 - HKLM\..\Run: [Norton Auto-Protect] D:\bkup\program files\Program Files\Norton SystemWorks\Norton AntiVirus\navapw32.exe /LOADQUIET
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Wireless Desktop\MOUSE32A.EXE
O4 - HKLM\..\Run: [Norton eMail Protect] E:\Program Files\Norton SystemWorks\Norton AntiVirus\POPROXY.EXE
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [SSDPSRV] c:\windows\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\SymTray.exe "Norton SystemWorks"
O4 - HKLM\..\RunServices: [WinEyes] C:\WINEYES\WINEYES.EXE
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - Startup: AutoSpell 5.lnk = E:\Program Files\autospell50\Aswatc32.exe
O4 - Startup: Wireless Desktop.lnk = C:\Program Files\Wireless Desktop\MagicKey.exe
O4 - Startup: Norton Disk Doctor.LNK = E:\Program Files\Norton SystemWorks\Norton Utilities\NDD32.EXE
O4 - Startup: Image.LNK = E:\Program Files\Norton SystemWorks\Norton Utilities\IMAGE32.EXE
O4 - User Startup: AutoSpell 5.lnk = E:\Program Files\autospell50\Aswatc32.exe
O4 - User Startup: Wireless Desktop.lnk = C:\Program Files\Wireless Desktop\MagicKey.exe
O4 - User Startup: Norton Disk Doctor.LNK = E:\Program Files\Norton SystemWorks\Norton Utilities\NDD32.EXE
O4 - User Startup: Image.LNK = E:\Program Files\Norton SystemWorks\Norton Utilities\IMAGE32.EXE
O8 - Extra context menu item: Fill this form - e:\Program Files\1ClickFF\loadform.html
O8 - Extra context menu item: Save this form - e:\Program Files\1ClickFF\saveform.html
O8 - Extra context menu item: &Google Search - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward &Links - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: TweakIE 3.0 - {79F436C2-3CA2-45A4-A52E-694B23DFFA88} - E:\Program Files\TweakIE 3.0\TweakIE.exe
O9 - Extra 'Tools' menuitem: TweakIE 3.0 - {79F436C2-3CA2-45A4-A52E-694B23DFFA88} - E:\Program Files\TweakIE 3.0\TweakIE.exe
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .bcf: C:\PROGRA~1\INTERN~1\Plugins\NPBelv32.dll
O15 - Trusted Zone: *.etrade.com
O15 - Trusted Zone: *.ameritrade.com
O15 - Trusted Zone: *.nytimes.com
O15 - Trusted Zone: *.amazon.com
O15 - Trusted Zone: *.ebay.com
O15 - Trusted Zone: *.netscape.com
O15 - Trusted Zone: http://*.windowsupdate.microsoft.com 
O15 - Trusted Zone: http://*.windowsupdate.com 
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - file://G:\Bin\html\files\MotivePreQual.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/17de3a79039c13010422/netzip/RdxIE2.cab
O16 - DPF: {A8739816-022C-11D6-A85D-00C04F9AEAFB} (Web Camera Server Control) - http://66.91.151.66/wg_webeye.cab
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/en/deleon/1.1.63-deleon/GoogleNav.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20020713/qtinstall.info.apple.com/samantha/us/win/QuickTimeInstaller.exe
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://ftp.us.dell.com/fixes/PROFILER.CAB
O16 - DPF: {611CF77F-F7F5-4EA1-B979-667671326B4C} (MarketTrader - ETrade v243a) - http://etrade.bridge.com/etgmt_prd/java/gmtb_etrade_i.cab
O16 - DPF: {E93A06EF-ABD8-4FA5-96BF-968614B08531} (MarketTrader - Reuters v243b) - http://etrade.bridge.com/etgmt_prd/java/gmtb_bridge_i.cab
O20 - AppInit_DLLs: APITRAP.DLL

LVL 1
mauiman01Asked:
Who is Participating?
 
SheharyaarSaahilConnect With a Mentor Commented:
Hello mauiman01 =)

Nothing special in this one Also,,,,, pretty clean :)
0
 
mauiman01Author Commented:
Thanks,
So, the notifications that I am sending e-mail with viruses to people I don't know are originating from a   computer some where in the world, who is using my email as the sender??
Many thanks,
Manny
0
 
SheharyaarSaahilCommented:
hmmmmmmm on this machine also :-?

are u being notified via ur particular email ID ??
then its the problem of ur email id, and not of system :)

quite possible someone has hacked ur password =|
0
 
mauiman01Author Commented:
Aloha SheharyaarSaahil
,SheharyaarSaahil

Thanks for letting  me know that hijackthiis did not have a hijacker   on hijackthis.log
May The Force be with you!
Manny
0
 
SheharyaarSaahilCommented:
^_^
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.