Tập 45 : Tết sắp đến , 21- 1 sắp đến , chúc mừng một người sắp về quê hương , chúc mừng 2 người xa n

Nhắn ấy, tớ vote rồi nhá. Trả laị cho tớ đi.

14

đã lên 52

14

Sao tớ chưa thấy gì nhỉ?

vào profile mới thấy

s

Logfile of HijackThis v1.99.1
Scan saved at 3:44:48 PM, on 6/30/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOW***plorer.EXE
Crogram FilesSophosRemotecachemgr.exe
Crogram FilesSophos SWEEP for NTSWNETSUP.EXE
Crogram FilesSophos SWEEP for NTSWEEPSRV.SYS
C:WINDOWSSystem32spoolDRIVERSW32X862fppdis1.exe
Crogram FilesJavajre1.5.0_02injusched.exe
Crogram FilesCommon FilesRealUpdate_OB
ealsched.exe
Crogram FilesMessengermsmsgs.exe
C:WINDOWSSystem32esemyp.exe
C:WINDOWSSystem32ctfmon.exe
Crogram FilesSophosRemoteimonitor.exe
Crogram FilesSophos SWEEP for NTICMON.EXE
D:sofwaresMessengerMessengerYPager.exe
C:WINDOWSSystem32wuauclt.exe
Crogram FilesWinRARWinRAR.exe
COCUME~1user2LOCALS~1TempRar$EX00.584HijackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://uk.red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr6/uk/*http://uk.docs.yahoo.com/info/bt_side.html
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://uk.red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr6/uk/*http://www.yahoo.co.uk
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://vn-n.com
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://uk.red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/uk/*http://www.yahoo.co.uk
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://uk.red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr6/uk/*http://uk.docs.yahoo.com/info/bt_side.html
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://uk.red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr6/uk/*http://www.yahoo.co.uk
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://uk.red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/uk/*http://www.yahoo.co.uk
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = http://www.latrobe.edu.au/students/
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = stproxy.latrobe.edu.au:8080
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = 127.0.0.1
131.172.*;149.144.*;*.latrobe.edu.au;*.ltu.edu.au;<local>
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - Cocuments and Settingsuser2Local SettingsTempICQToolbar oolbaru.dll
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - D:sofwaresCOMPAN~1INSTALLScpnycomp5_6_2_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - Crogram FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - Crogram FilesShopperReportsBin1.0.5.0ShprRprt.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - D:sofwaresCommonyiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - D:sofwaresCommonYIeTagBm.dll
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - CROGRA~1TEXTwareQUICKF~1PlugInsIEHelp.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:sofwaresCOMPAN~1INSTALLScpnycomp5_6_2_0.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - Cocuments and Settingsuser2Local SettingsTempICQToolbar oolbaru.dll
O4 - HKLM..Run: [Windows Compliant] esemyp.exe
O4 - HKLM..Run: [pdfFactory Pro Dispatcher v1] C:WINDOWSSystem32spoolDRIVERSW32X862fppdis1.exe
O4 - HKLM..Run: [SunJavaUpdateSched] Crogram FilesJavajre1.5.0_02injusched.exe
O4 - HKLM..Run: [TkBellExe] "Crogram FilesCommon FilesRealUpdate_OB
ealsched.exe" -osboot
O4 - HKLM..RunServices: [Windows Compliant] esemyp.exe
O4 - HKCU..Run: [MSMSGS] "Crogram FilesMessengermsmsgs.exe" /background
O4 - HKCU..Run: [mtd2002Svr] "Crogram Filesmtd2002"mtdserver.exe -f
O4 - HKCU..Run: [Windows Compliant] esemyp.exe
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSSystem32ctfmon.exe
O4 - HKCU..Run: [System32] C:WINDOWSsystem32Microsoft.js
O4 - HKCU..RunOnce: [Windows] C:WINDOWSsystem32Microsoft.js
O4 - Global Startup: Microsoft Office.lnk = Crogram FilesMicrosoft OfficeOffice10OSA.EXE
O4 - Global Startup: Remote Update Monitor.lnk = Crogram FilesSophosRemoteimonitor.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = Crogram FilesAdobeAcrobat 7.0Reader
eader_sl.exe
O4 - Global Startup: InterCheck Monitor.LNK = Crogram FilesSophos SWEEP for NTICMON.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://Cocuments and Settingsuser2Local SettingsTempICQToolbar oolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///D:sofwaresCommon/ycsrch.htm
O8 - Extra context menu item: Download the &current page with Offline Explorer - file://COCUME~1user2LOCALS~1TempRar$EX01.100Offline Explorer Pro v2.4.934 SR1Add_AllO.htm
O8 - Extra context menu item: Download using Offline &Explorer - file://COCUME~1user2LOCALS~1TempRar$EX01.100Offline Explorer Pro v2.4.934 SR1Add_UrlO.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://CROGRA~1MICROS~2Office10EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///D:sofwaresCommon/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///D:sofwaresCommon/ycmap.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Crogram FilesJavajre1.5.0_02in
pjpi150_02.dll
O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Crogram FilesJavajre1.5.0_02in
pjpi150_02.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - D:sofwaresCommonyiesrvc.dll
O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - Crogram FilesShopperReportsBin1.0.5.0ShprRprt.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb
elated.htm
O9 - Extra ''Tools'' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb
elated.htm
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:sofwaresMESSEN~1MESSEN~1YPAGER.EXE
O9 - Extra ''Tools'' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:sofwaresMESSEN~1MESSEN~1YPAGER.EXE
O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - Crogram FilesShopperReportsBin1.0.5.0ShprRprt.dll
O16 - DPF: {11311111-1111-1111-1111-111111111157} - file://C:RecycledQ330995.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - D:sofwaresCommonyinsthelper.dll
O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} (HbtInstObj) - http://installs.hotbar.com/installs/hbtools/programs/hbtools.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/autocomplete.cab
O17 - HKLMSystemCCSServicesTcpip..{74494132-62B1-43F1-BCE9-B76A442180FF}: NameServer = 131.172.2.2,131.172.4.1
O18 - Protocol: textwareilluminatorbase - {CE5CD329-1650-414A-8DB0-4CBF72FAED87} - C:WINDOWSSystem32 extwareilluminatorbaseProtocol.dll
O23 - Service: Sophos Cache Manager (CacheMgr) - SOPHOS Plc - Crogram FilesSophosRemotecachemgr.exe
O23 - Service: Sophos Anti-Virus Network (SweepNet) - Sophos Plc - Crogram FilesSophos SWEEP for NTSWNETSUP.EXE
O23 - Service: Sophos Anti-Virus (SWEEPSRV.SYS) - Sophos Plc - Crogram FilesSophos SWEEP for NTSWEEPSRV.SYS