lesser-equity

Magazine
Go Back   Computer Juice > Computer Software > General Software Chat

Register


Default Btdna.exe - Need Urgent Help!!!!!!

ComboFix 07-12-17.1 - Boris Mitchell 2007-12-18 17:17:23.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.673 [GMT 11:00] Running from: C:\Documents and Settings\Boris Mitchell\Desktop\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\drivers\sfsync03.sys . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\LEGACY_SFSYNC03 -------\sfsync03 ((((((((((((((((((((((((( Files Created from 2007-11-18 to 2007-12-18 ...


Reply
 
Thread Tools
  #11  
Old 17th Dec 2007, 23:38
New Member Group
 
Posts: 9
Default Btdna.exe - Need Urgent Help!!!!!!

ComboFix 07-12-17.1 - Boris Mitchell 2007-12-18 17:17:23.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.673 [GMT 11:00]
Running from: C:\Documents and Settings\Boris Mitchell\Desktop\ComboFix.exe
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\system32\drivers\sfsync03.sys
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\LEGACY_SFSYNC03
-------\sfsync03

((((((((((((((((((((((((( Files Created from 2007-11-18 to 2007-12-18 )))))))))))))))))))))))))))))))
.
2007-12-17 07:58 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2007-12-17 07:55 . 2007-12-17 07:55 <DIR> d-------- C:\Program Files\Common Files\Java
2007-12-16 15:41 . 2007-12-17 15:37 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2007-12-16 15:41 . 2007-12-16 15:41 <DIR> d-------- C:\Documents and Settings\Boris Mitchell\Application Data\SUPERAntiSpyware.com
2007-12-16 15:41 . 2007-12-16 15:41 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-12-16 07:12 . 2007-12-16 07:12 <DIR> d-------- C:\Program Files\Real
2007-12-16 07:12 . 2007-12-16 07:12 <DIR> d-------- C:\Program Files\Common Files\xing shared
2007-12-16 06:59 . 2007-12-16 06:59 565,170 --a------ C:\WINDOWS\system32\large.bnk
2007-12-16 06:59 . 2007-12-16 06:59 278,528 --a------ C:\WINDOWS\system32\livesnth.dll
2007-12-16 06:58 . 2007-12-16 06:58 203,776 --a------ C:\WINDOWS\system32\clrviddc.dll
2007-12-16 05:01 . 2007-05-29 13:55 22,112 --a------ C:\WINDOWS\system32\drivers\COH_Mon.sys
2007-12-16 05:01 . 2007-05-29 13:55 10,592 --a------ C:\WINDOWS\system32\drivers\COH_Mon.cat
2007-12-16 05:01 . 2007-05-29 13:55 705 --a------ C:\WINDOWS\system32\drivers\COH_Mon.inf
2007-12-15 20:12 . 2007-12-15 20:12 <DIR> d-------- C:\Documents and Settings\Boris Mitchell\Application Data\Locktime
2007-12-15 20:10 . 2007-12-15 20:10 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Locktime
2007-12-15 19:01 . 2007-12-16 07:36 <DIR> d-------- C:\Documents and Settings\Boris Mitchell\Application Data\BitTorrent
2007-12-15 19:00 . 2007-12-15 19:00 <DIR> d-------- C:\Program Files\DNA
2007-12-15 19:00 . 2007-12-18 17:28 <DIR> d-------- C:\Documents and Settings\Boris Mitchell\Application Data\DNA
2007-12-15 15:13 . 2007-12-18 17:29 <DIR> d-------- C:\Program Files\Norton 360
2007-12-15 15:12 . 2007-12-15 19:32 123,952 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-12-15 15:12 . 2007-12-15 19:32 60,800 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
2007-12-15 15:12 . 2007-12-15 19:32 10,740 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2007-12-15 15:12 . 2007-12-15 19:32 805 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.INF
2007-12-15 15:11 . 2007-12-15 19:32 <DIR> d-------- C:\Program Files\Symantec
2007-12-15 15:11 . 2007-12-18 16:54 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2007-12-15 15:11 . 2007-12-18 16:55 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Symantec
2007-12-15 11:35 . 2007-07-10 00:16 582,656 -----c--- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2007-12-15 11:29 . 2007-12-15 11:33 <DIR> d-------- C:\Program Files\Windows Live
2007-12-15 11:29 . 2007-12-15 11:32 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2007-12-15 11:29 . 2007-12-15 11:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2007-12-15 11:22 . 2007-12-15 11:22 479,298 --a------ C:\WINDOWS\system32\wbocx.ocx
2007-12-15 11:22 . 2007-12-15 11:22 172,032 --a------ C:\WINDOWS\system32\AniGIF.ocx
2007-12-15 11:22 . 2007-12-15 11:22 50,688 --a------ C:\WINDOWS\system32\wbhelp2.dll
2007-12-15 11:18 . 2007-12-15 11:18 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Avg7
2007-12-15 11:13 . 2007-07-30 19:18 34,136 --a------ C:\WINDOWS\system32\wucltui.dll.mui
2007-12-15 11:13 . 2007-07-30 19:19 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2007-12-15 11:13 . 2007-07-30 19:19 25,944 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui
2007-12-15 11:13 . 2007-07-30 19:19 25,944 --a------ C:\WINDOWS\system32\wuapi.dll.mui
2007-12-15 11:13 . 2007-07-30 19:18 20,312 --a------ C:\WINDOWS\system32\wuaueng.dll.mui
2007-12-04 19:56 . 2007-12-04 19:56 <DIR> d-------- C:\Program Files\Common Files\GTK
2007-12-03 20:18 . 2007-12-03 20:18 <DIR> d-------- C:\Documents and Settings\Boris Mitchell\Application Data\Lavasoft
2007-12-03 20:17 . 2007-12-03 20:17 <DIR> d-------- C:\Program Files\Lavasoft
2007-12-03 20:16 . 2007-12-16 15:40 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-11-30 23:57 . 2007-11-30 23:57 317,616 --a------ C:\WINDOWS\system32\drivers\srtspl.sys
2007-11-30 23:57 . 2007-11-30 23:57 279,088 --a------ C:\WINDOWS\system32\drivers\srtsp.sys
2007-11-30 23:57 . 2007-11-30 23:57 43,696 --a------ C:\WINDOWS\system32\drivers\srtspx.sys
2007-11-30 23:57 . 2007-11-30 23:57 10,549 --a------ C:\WINDOWS\system32\drivers\srtspx.cat
2007-11-30 23:57 . 2007-11-30 23:57 10,549 --a------ C:\WINDOWS\system32\drivers\srtspl.cat
2007-11-30 23:57 . 2007-11-30 23:57 10,545 --a------ C:\WINDOWS\system32\drivers\srtsp.cat
2007-11-30 23:57 . 2007-11-30 23:57 1,430 --a------ C:\WINDOWS\system32\drivers\srtspl.inf
2007-11-30 23:57 . 2007-11-30 23:57 1,421 --a------ C:\WINDOWS\system32\drivers\srtspx.inf
2007-11-30 23:57 . 2007-11-30 23:57 1,415 --a------ C:\WINDOWS\system32\drivers\srtsp.inf
2007-11-29 22:21 . 2007-12-01 08:24 <DIR> d-------- C:\Documents and Settings\Boris Mitchell\Application Data\InstallShield Installation Information
2007-11-29 15:01 . 2004-11-23 08:34 1,323,095 --a------ C:\WINDOWS\system32\odSupp_M.dll
2007-11-29 15:01 . 2005-08-08 10:58 372,736 --a------ C:\WINDOWS\system32\ANIWZCS2.dll
2007-11-29 15:01 . 2005-08-02 18:20 233,472 --a------ C:\WINDOWS\system32\wlanapi.dll
2007-11-29 15:01 . 2005-06-30 19:30 208,896 --a------ C:\WINDOWS\system32\aIPH.dll
2007-11-29 15:01 . 2005-08-09 15:36 143,360 --a------ C:\WINDOWS\system32\WlanApp.dll
2007-11-29 15:01 . 2004-10-22 13:42 57,407 --a------ C:\WINDOWS\system32\ANICtl.dll
2007-11-29 15:01 . 2005-08-04 13:54 49,152 --a------ C:\WINDOWS\system32\JJAKEn.dll
2007-11-29 15:01 . 2004-10-22 13:42 49,152 --a------ C:\WINDOWS\system32\AQCKGen.dll
2007-11-29 15:00 . 2007-11-29 15:00 <DIR> d-------- C:\Program Files\D-Link
2007-11-29 15:00 . 2007-11-29 15:00 <DIR> d-------- C:\Program Files\ANI
2007-11-29 15:00 . 2004-07-27 11:20 36,864 --a------ C:\WINDOWS\system32\ANIOApi.dll
2007-11-29 15:00 . 2004-07-27 11:20 28,205 --a------ C:\WINDOWS\system32\ANIO.sys
2007-11-29 15:00 . 2004-07-27 11:20 16,997 --a------ C:\WINDOWS\system32\ANIO.VXD
2007-11-29 15:00 . 2004-07-27 11:20 11,904 --a------ C:\WINDOWS\system32\anio4.sys
2007-11-24 21:23 . 2007-11-24 21:23 <DIR> d-------- C:\Program Files\Telstra
2007-11-23 07:41 . 2007-11-23 07:41 <DIR> d-------- C:\Program Files\Raven
2007-11-23 07:40 . 2007-11-23 07:43 934 --a------ C:\WINDOWS\SOFPLAT.ini
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2007-12-18 06:31 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-12-16 20:58 --------- d-----w C:\Program Files\Java
2007-12-15 20:10 --------- d-----w C:\Program Files\Common Files\Real
2007-12-15 08:58 --------- d-----w C:\Program Files\Common Files\Adobe
2007-12-15 00:46 --------- d-----w C:\Program Files\MSN Messenger
2007-12-15 00:23 --------- d-----w C:\Program Files\Google
2007-12-11 10:00 --------- d-----w C:\Program Files\Electronic Arts
2007-12-04 10:19 --------- d-----w C:\Documents and Settings\Boris Mitchell\Application Data\gtk-2.0
2007-12-04 08:57 --------- d-----w C:\Program Files\GIMP-2.0
2007-11-30 06:19 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-29 20:41 --------- d-----w C:\Program Files\EA GAMES
2007-11-24 10:31 --------- d-----w C:\Program Files\Radical Games
2007-11-24 10:21 --------- d-----w C:\Program Files\AlienGUIse
2007-11-24 09:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-17 06:25 108,144 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2007-11-15 10:04 --------- d-----w C:\Program Files\THQ
2007-11-14 08:58 --------- d-----w C:\Program Files\BinarySense
2007-11-14 08:58 --------- d-----w C:\Documents and Settings\Boris Mitchell\Application Data\BinarySense
2007-11-13 10:25 20,480 ------w C:\WINDOWS\system32\drivers\secdrv.sys
2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-27 06:40 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-09-10 08:51 94,080 -c--a-w C:\Documents and Settings\Boris Mitchell\Application Data\ezplay.sys
2007-09-10 08:51 87,608 ----a-w C:\Documents and Settings\Boris Mitchell\Application Data\ezpinst.exe
2007-09-10 08:51 47,360 -c--a-w C:\Documents and Settings\Boris Mitchell\Application Data\pcouffin.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 18:56]
"Start WingMan Profiler"="" []
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\G oogleToolbarNotifier.exe" [2007-12-15 11:23]
"BitTorrent DNA"="C:\Program Files\DNA\btdna.exe" [2007-12-15 19:00]
"OnlineTextBuddy"="C:\Program Files\Telstra\OnlineTextBuddy\OnlineTextBuddy.exe" [2005-04-07 14:13]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"Anvshell"="C:\WINDOWS\Anvshell.exe" [2002-10-22 17:45]
"Share-to-Web Namespace Daemon"="C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [2001-07-03 09:11]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86 \3\hpztsb04.exe" [2001-11-09 22:42]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-04 18:56 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2006-06-23 16:49 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-04 18:56 C:\WINDOWS\system32\rundll32.exe]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.e xe" [2001-07-09 11:50]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 07:24]
"iTunesHelper"="C:\Documents and Settings\Boris Mitchell\My Documents\iTunes\iTunesHelper.exe" [2007-09-07 17:55]
"ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2004-12-16 17:49]
"DownloadAccelerator"="C:\Documents and Settings\Boris Mitchell\My Documents\Download Accelerator Plus\DAP\DAP.exe" [2007-12-15 11:22]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-07-18 12:54]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 18:56]
C:\Documents and Settings\Boris Mitchell\Start Menu\Programs\Startup\
HDDlife.lnk - C:\Program Files\BinarySense\HDDlife\HDDlifePro.exe [2007-04-05 14:56:14]
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\explorer]
"NoUserNameInStartMenu"= 01000000
[hkey_local_machine\software\microsoft\windows\curr entversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB]
C:\Program Files\AlienGUIse\fastload.dll 2001-12-21 00:34 24576 C:\Program Files\AlienGUIse\fastload.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=72.dll,wbsys.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll
R1 nltdi;nltdi;C:\WINDOWS\system32\drivers\nltdi.sys [2007-04-24 03:08]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver;C:\WINDOWS\system32\drivers\WmBEnum.sys [2005-04-12 19:21]
R3 WmXlCore;Logitech WingMan Translation Layer Driver;C:\WINDOWS\system32\drivers\WmXlCore.sys [2005-04-12 19:21]
S3 BTNetFilter;Bluetooth Network Filter;C:\WINDOWS\system32\drivers\BTNetFilter.sys [2004-12-16 16:32]
S3 GcKernel;Microsoft SideWinder Value Add - Filter Driver;C:\WINDOWS\system32\DRIVERS\GcKernel.sys [2004-08-04 17:08]
S3 glauiad;D-Link DSL-302G Modem;C:\WINDOWS\system32\DRIVERS\glauiad.sys [2003-03-07 16:07]
S3 HIDSwvd;Microsoft SideWinder Virtual HID Device Mini-Driver;C:\WINDOWS\system32\DRIVERS\HIDSwvd.sys [2001-08-17 14:02]
S3 iatmunin;iatmunin;C:\DOCUME~1\BORISM~1\LOCALS~1\Te mp\iatmunin.sys []
S3 sony_ssm.sys;sony_ssm.sys;C:\DOCUME~1\BORISM~1\LOC ALS~1\Temp\sony_ssm.sys []
S3 usbprint;Microsoft USB PRINTER Class;C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 16:01]
S3 wanusb;D-Link DSL-200 USB ADSL Modem (WAN);C:\WINDOWS\system32\DRIVERS\gwausb.sys []
S3 WmFilter;Logitech Gaming HID Filter Driver;C:\WINDOWS\system32\drivers\WmFilter.sys [2005-04-12 19:21]
S3 WmVirHid;Logitech Virtual Hid Device Driver;C:\WINDOWS\system32\drivers\WmVirHid.sys [2005-04-12 19:21]
*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2007-12-18 06:30:00 C:\WINDOWS\Tasks\User_Feed_Synchronization-{8E249D77-F640-426A-A4F2-E69D87D83C68}.job"
- C:\WINDOWS\system32\msfeedssync.exe
.
************************************************** ************************
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-18 17:32:29
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
************************************************** ************************
.
Completion time: 2007-12-18 17:34:50 - machine was rebooted
.
2007-12-15 20:40:59 --- E O F ---

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:38, on 2007-12-18
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Documents and Settings\Boris Mitchell\My Documents\Net Limiter 2 Monitor\NetLimiter 2 Monitor\nlsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Documents and Settings\Boris Mitchell\My Documents\Net Limiter 2 Monitor\NetLimiter 2 Monitor\NLClient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Anvshell.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Documents and Settings\Boris Mitchell\My Documents\iTunes\iTunesHelper.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Documents and Settings\Boris Mitchell\My Documents\Download Accelerator Plus\DAP\DAP.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\G oogleToolbarNotifier.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\BinarySense\HDDlife\HDDlifePro.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\Boris Mitchell\My Documents\HiJackthis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\NppBho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\Boris Mitchell\My Documents\John\Real Player\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\UIBHO.dll
O4 - HKLM\..\Run: [Anvshell] C:\WINDOWS\Anvshell.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb0 4.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Documents and Settings\Boris Mitchell\My Documents\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Documents and Settings\Boris Mitchell\My Documents\Download Accelerator Plus\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\G oogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [OnlineTextBuddy] C:\Program Files\Telstra\OnlineTextBuddy\OnlineTextBuddy.exe /quiet
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: HDDlife.lnk = C:\Program Files\BinarySense\HDDlife\HDDlifePro.exe
O4 - Global Startup: billeo.lnk = C:\Documents and Settings\Boris Mitchell\My Documents\John\Billeo\billeo.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Clean Traces - C:\Documents and Settings\Boris Mitchell\My Documents\Download Accelerator Plus\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Documents and Settings\Boris Mitchell\My Documents\Download Accelerator Plus\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Documents and Settings\Boris Mitchell\My Documents\Download Accelerator Plus\DAP\dapextie2.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1145619375421
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6...ws-i586-jc.cab
O20 - AppInit_DLLs: 72.dll,wbsys.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Documents and Settings\Boris Mitchell\My Documents\Net Limiter 2 Monitor\NetLimiter 2 Monitor\nlsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Roxio Easy Media Creator 9 Suite\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Roxio Easy Media Creator 9 Suite\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
--
End of file - 11570 bytes
  #12  
Old 18th Dec 2007, 00:03
Moderator Group
 
Skill Level: Advanced
Posts: 7,136
Default Btdna.exe - Need Urgent Help!!!!!!

What was the name of the game?
__________________

  #13  
Old 18th Dec 2007, 12:57
New Member Group
 
Posts: 9
Default Btdna.exe - Need Urgent Help!!!!!!

im pretty sure its called urban terror or it might be called world of padman. i installed a whole heap in one night but i remember the siren from one of those 2.
  #14  
Old 18th Dec 2007, 17:01
Moderator Group
 
Skill Level: Advanced
Posts: 7,136
Default Btdna.exe - Need Urgent Help!!!!!!

was it Starforce?
__________________

  #15  
Old 19th Dec 2007, 00:28
New Member Group
 
Posts: 9
Default Btdna.exe - Need Urgent Help!!!!!!

no i dont think so
  #16  
Old 19th Dec 2007, 00:29
Banned Group
 
Posts: 114
Default Btdna.exe - Need Urgent Help!!!!!!

can we get these in .txt file links possibly instead? (attachments when writing the response
  #17  
Old 19th Dec 2007, 00:49
Banned Group
 
Posts: 114
Default Btdna.exe - Need Urgent Help!!!!!!

After that some weird things iv seen from these lists
First off stop installing stuff to my documents its just weird..
next do you know what C:\Program Files\DNA\btdna.exe is, if not then there might be something
clear out all that extra junk that is running on your startup O4 - HKLM\..\Run:*
O4 - Global Startup: billeo.lnk = C:\Documents and Settings\Boris Mitchell\My Documents\John\Billeo\billeo.exe thats weird if you don't know what it is.
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O20 - AppInit_DLLs: 72.dll,wbsys.dll
those are all weirdos can't say for certain but they strike me as oddities and could you possibly close some of those other programs before doing that so we don't watch your downloader and telestra and network monitors and roxio and whatever other extrenuous programs you are running. Also if the sound occurs when you do something it might actually be a windows notices setting. In that case none of this is the problem it might be the game configured your computer to make those noises go to control panel and do sounds and audio devices and change the system sounds
  #18  
Old 19th Dec 2007, 11:32
Moderator Group
 
Skill Level: Advanced
Posts: 7,136
Default Btdna.exe - Need Urgent Help!!!!!!

Quote:
Originally Posted by dice14u View Post
can we get these in .txt file links possibly instead? (attachments when writing the response
No we prefer them to be added in the post. Not as attachments. btdna.exe - BitTorrent O4 billeo.exe - Billeo Free Password Manager Plus 012 npdocbox.dll is a module related to Adobe Acrobat 20 wbsys.dll - WindowBlinds/Stardock Create An Uninstall List 1. Start HijackThis 2. Click on the Open the Misc Tools section 3. Click on the Open Uninstall Manager button. 4. Click on the Save list button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. 5. Copy and paste the uninstall_list.txt in the next post. Create a Startup List 1. Open HijackThis and select Open the Misc Tools section 2. Click on the button which says Generate StartupList log 3. Click Yes when prompted and a notepad document will open. 4. Copy and paste it in the next post
__________________

  #19  
Old 19th Dec 2007, 13:02
New Member Group
 
Posts: 9
Default Btdna.exe - Need Urgent Help!!!!!!

1-abc.net Synchronizer (Remove only)
Ad-Aware SE Personal
Adobe Acrobat 4.0, 5.0
Adobe Flash Player 9 ActiveX
Adobe Reader 8.1.1
Age of Empires III
AlienGUIse Theme Manager
ANIO Service
ANIWZCS2 Service
AppCore
Apple Mobile Device Support
Apple Software Update
ArcSoft PhotoImpression
AV
Battlefield 2: Special Forces
BCArchive 1.0
BlueSoleil
Call of Duty(R) 2
ccCommon
CCleaner (remove only)
CCScore
ComproDVD 2
Download Accelerator Plus (DAP)
DVD Decrypter (Remove Only)
EA SPORTS online 2006
ESSBrwr
ESSCDBK
ESScore
ESSgui
ESShelp
ESSini
ESSPCD
ESSPDock
ESSSONIC
ESSTOOLS
essvatgt
essvcpt
FEAR
GameGuard
GameSpy Arcade
GearDrvs
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
GTK+ 2.10.6-1 runtime environment
HDDlife
HijackThis 2.0.2
HLPPDOCK
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB896344)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
hp deskjet 948c series
hp deskjet 948c series (Remove only)
HP Photo Printing Software
HP Precisionscan Pro 3.1
HP Share-to-Web
Indeo® Software
IrfanView (remove only)
iTunes
Java(TM) 6 Update 3
kgcbaby
kgcbase
kgchday
kgchlwn
kgcinvt
kgckids
kgcmove
kgcvday
Kodak EasyShare software
KSU
L&H TTS3000 British English
LimeWire 4.14.12
LiveUpdate 3.2 (Symantec Corporation)
Logitech Gaming Software
Microsoft .NET Framework (English)
Microsoft .NET Framework (English) v1.0.3705
Microsoft .NET Framework 1.0 Hotfix (KB928367)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Data Access Components KB870669
Microsoft Flight Simulator X
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2000 Premium
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 Parser and SDK
MSXML4 Parser
Need for Speed™ Most Wanted
Nero Media Player
Nero OEM
NeroVision Express 2
NetLimiter 2 Monitor (remove only)
Network Play System (Patching)
Norton 360
Norton 360
Norton 360
Norton 360 (Symantec Corporation)
Norton 360 Help
Norton Confidential Browser Component
Norton Confidential Web Authentification Component
Norton Confidential Web Protection Component
Notifier
NVIDIA Drivers
OfotoXMI
OTtBP
OTtBPSDK
Photo Story 3 for Windows
QuickTime
RealPlayer
Rhapsody Player Engine
Roxio Activation Module
Roxio BDAV Plugin
Roxio Creator 9 Home
Roxio Easy Media Creator 9 Suite
Roxio EasyArchive
Roxio RecordNow Audio
Roxio RecordNow Copy
Roxio RecordNow Data
Roxio RecordNow Tools
Sam and Max - Season One - Episode 104 - Abe Lincoln Must Die!
Security Update for Microsoft .NET Framework 2.0 (KB928365)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB944653)
SFR
SHASTA
Shockwave
SKIN0001
SKINXSDK
Soldier of Fortune Platinum
Sonic CinePlayer Decoder Pack
SPBBC 32bit
staticcr
SUPERAntiSpyware Free Edition
SuppSoft
Symantec Technical Support Controls
SymNet
Taskforce (remove only)
Telstra Online Text Buddy 1.0
The GIMP 2.2.13
The Movies(TM) Stunts & Effects
The Sims 2
The Sims 2 Body Shop
The Sims 2 HomeCrafter Plus
The Sims 2 Nightlife
The Sims 2 Open For Business
The Sims 2 Pets
The Sims 2 University
Trellix Web Express Site Building
Tweak UI
Ulead Burn.Now
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB930916)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
VPRINTOL
WIBU-KEY Setup (WIBU-KEY Remove)
WIDCOMM Bluetooth Software
Windows Blaster Worm Removal Tool (KB833330)
Windows Defender Signatures
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live installer
Windows Live Mail
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
WIRELESS



Checking Windows NT UserInit:
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Anvshell = C:\WINDOWS\Anvshell.exe
Share-to-Web Namespace Daemon = C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
HPDJ Taskbar Utility = C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb0 4.exe
NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz = nwiz.exe /install
NvMediaCenter = RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
NeroFilterCheck = C:\WINDOWS\system32\NeroCheck.exe
QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime
iTunesHelper = "C:\Documents and Settings\Boris Mitchell\My Documents\iTunes\iTunesHelper.exe"
ANIWZCS2Service = C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
DownloadAccelerator = "C:\Documents and Settings\Boris Mitchell\My Documents\Download Accelerator Plus\DAP\DAP.EXE" /STARTUP
ccApp = "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
Adobe Reader Speed Launcher = "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
SunJavaUpdateSched = "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run OnceEx
(Default) =
--------------------------------------------------
Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe
Start WingMan Profiler =
swg = C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\G oogleToolbarNotifier.exe
BitTorrent DNA = "C:\Program Files\DNA\btdna.exe"
OnlineTextBuddy = C:\Program Files\Telstra\OnlineTextBuddy\OnlineTextBuddy.exe /quiet
SUPERAntiSpyware = C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
--------------------------------------------------
Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
[OptionalComponents]
=
--------------------------------------------------
Load/Run keys from C:\WINDOWS\WIN.INI:
load=*INI section not found*
run=*INI section not found*
Load/Run keys from Registry:
HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=72.dll,wbsys.dll
--------------------------------------------------
Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:
Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*
Shell & screensaver key from Registry:
Shell=Explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*
Policies Shell key:
HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*
--------------------------------------------------

Enumerating Browser Helper Objects:
(no name) - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\NppBho.dll - {1E8A6170-7264-4D0F-BEAE-D42A53123C75}
(no name) - C:\Documents and Settings\Boris Mitchell\My Documents\John\Real Player\rpbrowserrecordplugin.dll - {3049C3E9-B461-4BC5-8870-4C09146192CA}
(no name) - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
(no name) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
(no name) - c:\program files\google\googletoolbar2.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
--------------------------------------------------
Enumerating Task Scheduler jobs:
User_Feed_Synchronization-{8E249D77-F640-426A-A4F2-E69D87D83C68}.job
--------------------------------------------------
Enumerating Download Program Files:
[Windows Genuine Advantage Validation Tool]
InProcServer32 = C:\WINDOWS\system32\legitcheckcontrol.dll
CODEBASE = http://download.microsoft.com/downlo...eckControl.cab
[{4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}]
CODEBASE = http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
[MUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\muweb.dll
CODEBASE = http://update.microsoft.com/microsof...?1145619375421
[Java Plug-in 1.6.0_03]
InProcServer32 = C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
CODEBASE = http://javadl-esd.sun.com/update/1.6...ws-i586-jc.cab
[{9F1C11AA-197B-4942-BA54-47A8489BB47F}]
CODEBASE = http://v4.windowsupdate.microsoft.co...?38050.6634375
[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx
CODEBASE = http://fpdownload.macromedia.com/get...nt/swflash.cab
--------------------------------------------------
Enumerating ShellServiceObjectDelayLoad items:
PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll
WPDShServiceObj: C:\WINDOWS\system32\WPDShServiceObj.dll
--------------------------------------------------
End of report, 9,928 bytes
Report generated in 0.391 seconds
Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
  #20  
Old 19th Dec 2007, 14:04
Moderator Group
 
Skill Level: Advanced
Posts: 7,136
Default Btdna.exe - Need Urgent Help!!!!!!

I don't know, I can't see anything that may be causing it.

Unless it is something else other then the game doing it.
__________________

Reply

Donate

Register

Bookmarks

Similar Threads
Thread Thread Starter Forum Replies Last Post
Urgent C++ Help! duskmon10 General Software Chat 2 24th Sep 2008 18:32
Urgent help CC xactly General Hardware Chat 1 28th May 2008 06:40
Urgent - please help! teenee23 Laptops, Mobiles & PDAs 1 18th May 2008 15:49
URGENT Help Please! teenee23 Windows Operating Systems 8 3rd Apr 2008 03:56
Btdna.exe - feif feif Virus, Spyware & Security 1 4th Mar 2008 23:27
Thread Tools




Arabic Bulgarian Chinese (Simplified) Chinese (Traditional) Croatian Czech Danish Dutch English Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Latvian Lithuanian Norwegian Polish Portuguese Romanian Russian Serbian Slovak Spanish Swedish Thai Turkish Ukrainian

Copyright ©2006 - 2009 Computer Juice.

Powered by vBulletin® Copyright ©2000 - 2009 Jelsoft Enterprises Ltd. SEO by vBSEO ©2009, Crawlability, Inc.