# pc nerds help inside, hijack this log posted **URL:** \ **Category:** NYSpeed Off Topic\ **Created:** [September 23, 2007, 10:29am UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820 "2007-09-23T10:29:06Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![JDMAllstars](https://avatars.discourse-cdn.com/v4/letter/j/76d3ee/32.png) [@JDMAllstars](https://forums.speedlife.net/u/JDMAllstars)\ **Post date:** [September 23, 2007, 10:29am UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/1 "2007-09-23T10:29:06Z")
Logfile of HijackThis v1.99.1 Scan saved at 1:19:29 PM, on 9/23/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5700.0006) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\UB-VPN\cvpnd.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\svchost.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Microsoft IntelliType Pro ype32.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Common Files\AOL\1154309172\ee\AOLSoftware.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\TGTSoft\StyleXP\StyleXP.exe C:\Program Files\Ares\Ares.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\DOCUME~1\LOCALS~1\Temp\msmsgs.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader\_sl.exe C:\Program Files\Logitech\SetPoint\KEM.exe C:\Program Files\SanDisk\SanDisk TransferMate\SD Monitor.exe C:\Program Files\Stardock\ObjectDock\ObjectDock.exe C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE C:\WINDOWS\system32\wuauclt.exe C:\Program Files\UltraMon\UltraMon.exe C:\Program Files\UltraMon\UltraMonTaskbar.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe C:\Program Files\HiJack This\HijackThis.exe R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = \*.local O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: CoTGT\_BHO Class - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT\_BHO.dll O4 - HKLM…\Run: [DAEMON Tools-1033] “C:\Program Files\D-Tools\daemon.exe” -lang 1033 O4 - HKLM…\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM…\Run: [type32] “C:\Program Files\Microsoft IntelliType Pro ype32.exe” O4 - HKLM…\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM…\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” O4 - HKLM…\Run: [HostManager] C:\Program Files\Common Files\AOL\1154309172\ee\AOLSoftware.exe O4 - HKLM…\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM…\Run: [LanguageShortcut] “C:\Program Files\CyberLink\PowerDVD\Language\Language.exe” O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide O4 - HKCU…\Run: [ares] “C:\Program Files\Ares\Ares.exe” -h O4 - HKCU…\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKCU…\Run: [MSMSGS] “C:\DOCUME~1\LOCALS~1\Temp\msmsgs.exe” /background O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader\_sl.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe O4 - Global Startup: Monitor.lnk = C:\Program Files\SanDisk\SanDisk TransferMate\SD Monitor.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra ‘Tools’ menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Bodog Poker\BPGame.exe O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} - [http://supportsoft.adelphia.net/sdccommon/download/tgctlins.cab](http://supportsoft.adelphia.net/sdccommon/download/tgctlins.cab) O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - [http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB](http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - [http://go.microsoft.com/fwlink/?linkid=39204](http://go.microsoft.com/fwlink/?linkid=39204) O17 - HKLM\System\CCS\Services\Tcpip…{34FAE8BE-BABD-40F3-BD55-9F1A08AD89E6}: NameServer = 208.67.222.222,208.67.220.220 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: ##Id\_String1.6844F930\_1628\_4223\_B5CC\_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\UB-VPN\cvpnd.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: InCD File System Service (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe O23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exe O23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe O23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCom\RoxUpnpRenderer.exe O23 - Service: RoxUpnpServer - Sonic Solutions - C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe ---
**Author:** ![JDMAllstars](https://avatars.discourse-cdn.com/v4/letter/j/76d3ee/32.png) [@JDMAllstars](https://forums.speedlife.net/u/JDMAllstars)\ **Post date:** [September 23, 2007, 10:30am UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/2 "2007-09-23T10:30:29Z")
sometimes im having troubles with my sound card saying other things are using it or its not found and my cyberlink power dvd audio doesn’t work anymore, when 2 days ago it used to, not quite sure what is going on here but i don’t like it at all. This never used to happen so im not sure what the deal is. ---
**Author:** ![Dr.Stevil](https://avatars.discourse-cdn.com/v4/letter/d/da6949/32.png) [@Dr.Stevil](https://forums.speedlife.net/u/Dr.Stevil)\ **Post date:** [September 23, 2007, 3:07pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/3 "2007-09-23T15:07:12Z")
did you recently update the computer or something? A little more detail would help. have you tried going to the manufactures website and installing the latest drivers? ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [September 23, 2007, 3:12pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/4 "2007-09-23T15:12:34Z")
C:\DOCUME~1\LOCALS~1\Temp\msmsgs.exe seems weird ---
**Author:** ![JDMAllstars](https://avatars.discourse-cdn.com/v4/letter/j/76d3ee/32.png) [@JDMAllstars](https://forums.speedlife.net/u/JDMAllstars)\ **Post date:** [September 23, 2007, 5:44pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/5 "2007-09-23T17:44:32Z")
someone told me msmsgs was supposed to be there? maybe not? ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [September 23, 2007, 7:46pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/6 "2007-09-23T19:46:00Z")
I didn’t think it was supposed to run from the temp directory I could be wrong… ---
**Author:** ![JDMAllstars](https://avatars.discourse-cdn.com/v4/letter/j/76d3ee/32.png) [@JDMAllstars](https://forums.speedlife.net/u/JDMAllstars)\ **Post date:** [September 23, 2007, 8:51pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/7 "2007-09-23T20:51:06Z")
msmsgs is windows messenger just deleted that its useless anyways ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [September 23, 2007, 9:00pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/8 "2007-09-23T21:00:28Z")
Normal stuff usually doesn’t run out of temp dir ---
**Author:** ![JDMAllstars](https://avatars.discourse-cdn.com/v4/letter/j/76d3ee/32.png) [@JDMAllstars](https://forums.speedlife.net/u/JDMAllstars)\ **Post date:** [September 23, 2007, 9:10pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/9 "2007-09-23T21:10:47Z")
well i deleted it once before then stuffed in there cause i was using it for something but i forgot what a piece of shit it is. Anything else in there not look right? my computer is running like shit now for some reason and Avant cannot find anything Spybot can’t and neither can anything else. ---
**Author:** ![Vile](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/vile/32/7595_2.png) [@Vile](https://forums.speedlife.net/u/Vile)\ **Post date:** [September 24, 2007, 8:39am UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/10 "2007-09-24T08:39:10Z")
[quote=“JDMAllstars”"] Logfile of HijackThis v1.99.1 Scan saved at 1:19:29 PM, on 9/23/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5700.0006) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe NIX C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe NIX C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Bonjour\mDNSResponder.exe NIX C:\Program Files\UB-VPN\cvpnd.exe C:\Program Files\Ahead\InCD\InCDsrv.exe NIX C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE NIX C:\WINDOWS\svchost.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe NIX C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe NIX C:\WINDOWS\System32\svchost.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Microsoft IntelliType Pro ype32.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe NIX C:\Program Files\Common Files\AOL\1154309172\ee\AOLSoftware.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\TGTSoft\StyleXP\StyleXP.exe C:\Program Files\Ares\Ares.exe NIX C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\DOCUME~1\LOCALS~1\Temp\msmsgs.exe NIX C:\Program Files\Adobe\Acrobat 7.0\Reader\reader\_sl.exe NIX C:\Program Files\Logitech\SetPoint\KEM.exe C:\Program Files\SanDisk\SanDisk TransferMate\SD Monitor.exe NIX C:\Program Files\Stardock\ObjectDock\ObjectDock.exe NIX C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE C:\WINDOWS\system32\wuauclt.exe C:\Program Files\UltraMon\UltraMon.exe NIX C:\Program Files\UltraMon\UltraMonTaskbar.exe NIX C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe NIX C:\Program Files\HiJack This\HijackThis.exe NIX R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = \*.local O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL NIX O2 - BHO: CoTGT\_BHO Class - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT\_BHO.dll O4 - HKLM..\Run: [DAEMON Tools-1033] “C:\Program Files\D-Tools\daemon.exe” -lang 1033 O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM..\Run: [type32] “C:\Program Files\Microsoft IntelliType Pro ype32.exe” O4 - HKLM..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe NIX O4 - HKLM..\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” NIX O4 - HKLM..\Run: [HostManager] C:\Program Files\Common Files\AOL\1154309172\ee\AOLSoftware.exe O4 - HKLM..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM..\Run: [LanguageShortcut] “C:\Program Files\CyberLink\PowerDVD\Language\Language.exe” NIX O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide O4 - HKCU..\Run: [ares] “C:\Program Files\Ares\Ares.exe” -h NIX O4 - HKCU..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe NIX O4 - HKCU..\Run: [MSMSGS] “C:\DOCUME~1\LOCALS~1 \Temp\msmsgs.exe” /background NIX O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe NIX O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader\_sl.exe NIX O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe O4 - Global Startup: Monitor.lnk = C:\Program Files\SanDisk\SanDisk TransferMate\SD Monitor.exe NIX O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra ‘Tools’ menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Bodog Poker\BPGame.exe O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll NIX O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} - [http://supportsoft.adelphia.net/sdccommon/download/tgctlins.cab](http://supportsoft.adelphia.net/sdccommon/download/tgctlins.cab) NIX O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - [http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB](http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB) NIX O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - [http://go.microsoft.com/fwlink/?linkid=39204](http://go.microsoft.com/fwlink/?linkid=39204) O17 - HKLM\System\CCS\Services\Tcpip..{34FAE8BE-BABD-40F3-BD55-9F1A08AD89E6}: NameServer = 208.67.222.222,208.67.220.220 NIX O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe NIX O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe NIX O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe NIX O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: ##Id\_String1.6844F930\_1628\_4223\_B5CC\_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe NIX O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\UB-VPN\cvpnd.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: InCD File System Service (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe NIX O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe NIX O23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exe NIX O23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe NIX O23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCom\RoxUpnpRenderer.exe NIX O23 - Service: RoxUpnpServer - Sonic Solutions - C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe NIX O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe NIX O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe [/quote] i’d remove every line with NIX after it… also… uninstall EVERYTHING AOL… leaving only aim. U have pieces of aol security software running along side of AVG… i doubt u’re using MS groove… and there’s just so much other crap on there… lots of monitors. create a hijack backup… and start with those removals in safe mode. ---
**Author:** ![JDMAllstars](https://avatars.discourse-cdn.com/v4/letter/j/76d3ee/32.png) [@JDMAllstars](https://forums.speedlife.net/u/JDMAllstars)\ **Post date:** [September 24, 2007, 5:07pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/11 "2007-09-24T17:07:17Z")
ahahaha i have 3 monitor setup thats wwhy im a dork but it looks cool and the ladies love it :lol: but ok NIX gotcha and Groove is apart of Office 2007 ---
**Author:** ![Vile](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/vile/32/7595_2.png) [@Vile](https://forums.speedlife.net/u/Vile)\ **Post date:** [September 24, 2007, 5:39pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/12 "2007-09-24T17:39:56Z")
yes… but are u using it? and by monitors… i meant programs watching and waiting for u to use one of their features ---
**Author:** ![JDMAllstars](https://avatars.discourse-cdn.com/v4/letter/j/76d3ee/32.png) [@JDMAllstars](https://forums.speedlife.net/u/JDMAllstars)\ **Post date:** [September 24, 2007, 6:59pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/13 "2007-09-24T18:59:06Z")
hmm well let me know what things i need to get rid of. When i ran it again there was no nix things ---
**Author:** ![Vile](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/vile/32/7595_2.png) [@Vile](https://forums.speedlife.net/u/Vile)\ **Post date:** [September 24, 2007, 8:56pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/14 "2007-09-24T20:56:11Z")
uhm… i added the NIX… it was a poor quote… ---
**Author:** ![dmoffitt](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/dmoffitt/32/7455_2.png) [@dmoffitt](https://forums.speedlife.net/u/dmoffitt)\ **Post date:** [September 24, 2007, 11:59pm UTC](https://forums.speedlife.net/t/pc-nerds-help-inside-hijack-this-log-posted/35820/15 "2007-09-24T23:59:53Z")
![http://z2x.us/u/emot/emot-derp.gif](http://z2x.us/u/emot/emot-derp.gif) flatten. rebuild. … fucking windows, heh ![http://z2x.us/u/emot/emot-onlyoption.gif](http://z2x.us/u/emot/emot-onlyoption.gif)