Lowyat.NET: Latest topics by Sleepyzai http://forum.lowyat.net/ Mon, 19 Oct 2026 03:33:47 +0800 FeedCreator 1.7.2 Prcess showing iexplore even i dint open http://forum.lowyat.net/topic/596302 My task manager show iexplore even though i dint open iexplore..Can anyone help me solve the problem ??<br /><br /><!--SPOILER BEGIN--><div class="spoilertop" onClick="openClose('3c0d95756eae46de0fce0c6b474658c6')" style="font-weight: bold"><u>&raquo; Click to show Spoiler - click again to hide... &laquo;</u></div><div class="spoilermain" id="3c0d95756eae46de0fce0c6b474658c6" style="display:none"><!--SPOILER END-->Logfile of HijackThis v1.99.1<br />Scan saved at 9:25:38 PM, on 12/22/2007<br />Platform: Windows XP SP2 (WinNT 5.01.2600)<br />MSIE: Internet Explorer v7.00 (7.00.6000.20583)<br /><br />Running processes:<br />C:&#092;WINDOWS&#092;System32&#092;smss.exe<br />C:&#092;WINDOWS&#092;system32&#092;winlogon.exe<br />C:&#092;WINDOWS&#092;system32&#092;services.exe<br />C:&#092;WINDOWS&#092;system32&#092;lsass.exe<br />C:&#092;WINDOWS&#092;system32&#092;Ati2evxx.exe<br />C:&#092;WINDOWS&#092;system32&#092;svchost.exe<br />C:&#092;WINDOWS&#092;System32&#092;svchost.exe<br />C:&#092;WINDOWS&#092;system32&#092;spoolsv.exe<br />C:&#092;Program Files&#092;Avira&#092;AntiVir PersonalEdition Classic&#092;avguard.exe<br />C:&#092;WINDOWS&#092;system32&#092;Ati2evxx.exe<br />C:&#092;WINDOWS&#092;Explorer.EXE<br />C:&#092;Program Files&#092;Avira&#092;AntiVir PersonalEdition Classic&#092;sched.exe<br />C:&#092;Program Files&#092;Analog Devices&#092;Core&#092;smax4pnp.exe<br />C:&#092;Program Files&#092;Analog Devices&#092;SoundMAX&#092;Smax4.exe<br />C:&#092;Program Files&#092;ATI Technologies&#092;ATI Control Panel&#092;atiptaxx.exe<br />C:&#092;Program Files&#092;Avira&#092;AntiVir PersonalEdition Classic&#092;avgnt.exe<br />C:&#092;PROGRA~1&#092;EFFICI~1&#092;TANGOM~1&#092;app&#092;TANGOM~1.EXE<br />C:&#092;Program Files&#092;Windows Live&#092;Messenger&#092;MsnMsgr.Exe<br />C:&#092;Program Files&#092;Messenger&#092;msmsgs.exe<br />C:&#092;WINDOWS&#092;system32&#092;ctfmon.exe<br />C:&#092;Program Files&#092;Common Files&#092;Microsoft Shared&#092;VS7DEBUG&#092;mdm.exe<br />C:&#092;Program Files&#092;QvodPlayer&#092;QvodTerminal.exe<br />C:&#092;Program Files&#092;Efficient Networks&#092;Tango Manager&#092;app&#092;TangoService.exe<br />C:&#092;Program Files&#092;Windows Live&#092;Messenger&#092;usnsvc.exe<br />C:&#092;Program Files&#092;Internet Explorer&#092;iexplore.exe<br />C:&#092;Program Files&#092;Internet Explorer&#092;iexplore.exe<br />C:&#092;Program Files&#092;WinRAR&#092;WinRAR.exe<br />C:&#092;DOCUME~1&#092;CHONG&#092;LOCALS~1&#092;Temp&#092;Rar&#036;EX00.859&#092;HijackThis.exe<br /><br />R1 - HKLM&#092;Software&#092;Microsoft&#092;Internet Explorer&#092;Main,Default_Page_URL = <a href='http://go.microsoft.com/fwlink/?LinkId=69157' target='_blank'>http://go.microsoft.com/fwlink/?LinkId=69157</a><br />R1 - HKLM&#092;Software&#092;Microsoft&#092;Internet Explorer&#092;Main,Default_Search_URL = <a href='http://go.microsoft.com/fwlink/?LinkId=54896' target='_blank'>http://go.microsoft.com/fwlink/?LinkId=54896</a><br />R1 - HKLM&#092;Software&#092;Microsoft&#092;Internet Explorer&#092;Main,Search Page = <a href='http://go.microsoft.com/fwlink/?LinkId=54896' target='_blank'>http://go.microsoft.com/fwlink/?LinkId=54896</a><br />R0 - HKLM&#092;Software&#092;Microsoft&#092;Internet Explorer&#092;Main,Start Page = <a href='http://go.microsoft.com/fwlink/?LinkId=69157' target='_blank'>http://go.microsoft.com/fwlink/?LinkId=69157</a><br />O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:&#092;Program Files&#092;Common Files&#092;Adobe&#092;Acrobat&#092;ActiveX&#092;AcroIEHelper.dll<br />O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:&#092;Program Files&#092;FlashGet&#092;jccatch.dll<br />O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:&#092;PROGRA~1&#092;MEGAUP~2&#092;MEGAUP~1.DLL<br />O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)<br />O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:&#092;Program Files&#092;Common Files&#092;Microsoft Shared&#092;Windows Live&#092;WindowsLiveLogin.dll<br />O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:&#092;program files&#092;google&#092;googletoolbar1.dll<br />O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:&#092;Program Files&#092;Windows Live Toolbar&#092;msntb.dll<br />O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:&#092;Program Files&#092;Megaupload&#092;Mega Manager&#092;MegaIEMn.dll<br />O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:&#092;PROGRA~1&#092;MEGAUP~2&#092;MEGAUP~1.DLL<br />O3 - Toolbar: &amp;Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:&#092;program files&#092;google&#092;googletoolbar1.dll<br />O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:&#092;Program Files&#092;Windows Live Toolbar&#092;msntb.dll<br />O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:&#092;Program Files&#092;Veoh Networks&#092;Veoh&#092;Plugins&#092;reg&#092;VeohToolbar.dll<br />O4 - HKLM&#092;..&#092;Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe<br />O4 - HKLM&#092;..&#092;Run: [IMJPMIG8.1] &quot;C:&#092;WINDOWS&#092;IME&#092;imjp8_1&#092;IMJPMIG.EXE&quot; /Spoil /RemAdvDef /Migration32<br />O4 - HKLM&#092;..&#092;Run: [PHIME2002ASync] C:&#092;WINDOWS&#092;system32&#092;IME&#092;TINTLGNT&#092;TINTSETP.EXE /SYNC<br />O4 - HKLM&#092;..&#092;Run: [PHIME2002A] C:&#092;WINDOWS&#092;system32&#092;IME&#092;TINTLGNT&#092;TINTSETP.EXE /IMEName<br />O4 - HKLM&#092;..&#092;Run: [SoundMAXPnP] C:&#092;Program Files&#092;Analog Devices&#092;Core&#092;smax4pnp.exe<br />O4 - HKLM&#092;..&#092;Run: [SoundMAX] &quot;C:&#092;Program Files&#092;Analog Devices&#092;SoundMAX&#092;Smax4.exe&quot; /tray<br />O4 - HKLM&#092;..&#092;Run: [ATIPTA] &quot;C:&#092;Program Files&#092;ATI Technologies&#092;ATI Control Panel&#092;atiptaxx.exe&quot;<br />O4 - HKLM&#092;..&#092;Run: [avgnt] &quot;C:&#092;Program Files&#092;Avira&#092;AntiVir PersonalEdition Classic&#092;avgnt.exe&quot; /min<br />O4 - HKLM&#092;..&#092;Run: [TangoManager] C:&#092;PROGRA~1&#092;EFFICI~1&#092;TANGOM~1&#092;app&#092;TANGOM~1.EXE<br />O4 - HKLM&#092;..&#092;Run: [clock dvd proxy close] C:&#092;Documents and Settings&#092;All Users&#092;Application Data&#092;Boob Bind Clock Dvd&#092;Base dog.exe<br />O4 - HKCU&#092;..&#092;Run: [msnmsgr] &quot;C:&#092;Program Files&#092;Windows Live&#092;Messenger&#092;MsnMsgr.Exe&quot; /background<br />O4 - HKCU&#092;..&#092;Run: [MSMSGS] &quot;C:&#092;Program Files&#092;Messenger&#092;msmsgs.exe&quot; /background<br />O4 - HKCU&#092;..&#092;Run: [ctfmon.exe] C:&#092;WINDOWS&#092;system32&#092;ctfmon.exe<br />O4 - HKCU&#092;..&#092;Run: [Cdromregs] C:&#092;DOCUME~1&#092;CHONG&#092;APPLIC~1&#092;BINOWN~1&#092;StopGrey.exe<br />O4 - HKCU&#092;..&#092;Run: [Veoh] &quot;C:&#092;Program Files&#092;Veoh Networks&#092;Veoh&#092;VeohClient.exe&quot; /VeohHide<br />O8 - Extra context menu item: &amp;Download All with FlashGet - C:&#092;Program Files&#092;FlashGet&#092;jc_all.htm<br />O8 - Extra context menu item: &amp;Download with FlashGet - C:&#092;Program Files&#092;FlashGet&#092;jc_link.htm<br />O8 - Extra context menu item: &amp;Windows Live Search - res://C:&#092;Program Files&#092;Windows Live Toolbar&#092;msntb.dll/search.htm<br />O8 - Extra context menu item: Add to Windows &amp;Live Favorites - <a href='http://favorites.live.com/quickadd.aspx' target='_blank'>http://favorites.live.com/quickadd.aspx</a><br />O8 - Extra context menu item: Download Link Using Mega Manager... - C:&#092;Program Files&#092;Megaupload&#092;Mega Manager&#092;mm_file.htm<br />O8 - Extra context menu item: E&amp;xport to Microsoft Excel - res://C:&#092;PROGRA~1&#092;MICROS~2&#092;Office12&#092;EXCEL.EXE/3000<br />O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:&#092;PROGRA~1&#092;MICROS~2&#092;Office12&#092;REFIEBAR.DLL<br />O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:&#092;Program Files&#092;FlashGet&#092;FlashGet.exe<br />O9 - Extra &#39;Tools&#39; menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:&#092;Program Files&#092;FlashGet&#092;FlashGet.exe<br />O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%&#092;Network Diagnostic&#092;xpnetdiag.exe (file missing)<br />O9 - Extra &#39;Tools&#39; menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%&#092;Network Diagnostic&#092;xpnetdiag.exe (file missing)<br />O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:&#092;Program Files&#092;Messenger&#092;msmsgs.exe<br />O9 - Extra &#39;Tools&#39; menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:&#092;Program Files&#092;Messenger&#092;msmsgs.exe<br />O11 - Options group: [INTERNATIONAL] International*<br />O11 - Options group: [TABS] Tabbed Browsing<br />O16 - DPF: {072039AB-2117-4ED5-A85F-9B9EB903E021} (NowStarter Control) - <a href='http://www.clubbox.co.kr/neo.fld/NowStarter.cab' target='_blank'>http://www.clubbox.co.kr/neo.fld/NowStarter.cab</a><br />O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - <a href='http://upload.facebook.com/controls/FacebookPhotoUploader3.cab' target='_blank'>http://upload.facebook.com/controls/Facebo...toUploader3.cab</a><br />O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - <a href='http://download.divx.com/player/DivXBrowserPlugin.cab' target='_blank'>http://download.divx.com/player/DivXBrowserPlugin.cab</a><br />O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - <a href='http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab' target='_blank'>http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab</a><br />O16 - DPF: {F6E361B4-40F3-4C90-8A95-D95E0D8CBCD4} (MultiUpload Control) - <a href='http://www.clubbox.co.kr/neo.fld/MultiUpload.cab' target='_blank'>http://www.clubbox.co.kr/neo.fld/MultiUpload.cab</a><br />O17 - HKLM&#092;System&#092;CCS&#092;Services&#092;Tcpip&#092;..&#092;{68979CC2-CC62-4C16-AC44-B5DB77536775}: NameServer = 202.188.0.133 202.188.1.5<br />O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:&#092;PROGRA~1&#092;WI1F86~1&#092;MESSEN~1&#092;MSGRAP~1.DLL<br />O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:&#092;Program Files&#092;Common Files&#092;Microsoft Shared&#092;Help&#092;hxds.dll<br />O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:&#092;PROGRA~1&#092;WI1F86~1&#092;MESSEN~1&#092;MSGRAP~1.DLL<br />O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:&#092;PROGRA~1&#092;COMMON~1&#092;MICROS~1&#092;OFFICE12&#092;MSOXMLMF.DLL<br />O20 - Winlogon Notify: WBSrv - C:&#092;PROGRA~1&#092;Stardock&#092;OBJECT~1&#092;WINDOW~1&#092;wbsrv.dll<br />O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:&#092;WINDOWS&#092;system32&#092;wpdshserviceobj.dll<br />O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:&#092;Program Files&#092;Avira&#092;AntiVir PersonalEdition Classic&#092;sched.exe<br />O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:&#092;Program Files&#092;Avira&#092;AntiVir PersonalEdition Classic&#092;avguard.exe<br />O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:&#092;WINDOWS&#092;system32&#092;Ati2evxx.exe<br />O23 - Service: Google Updater Service (gusvc) - Google - C:&#092;Program Files&#092;Google&#092;Common&#092;Google Updater&#092;GoogleUpdaterService.exe<br />O23 - Service: Qvod Terminal - Shenzhen TASK Technology Co.,Ltd - C:&#092;Program Files&#092;QvodPlayer&#092;QvodTerminal.exe<br />O23 - Service: Tango Service (TangoService) - Unknown owner - C:&#092;Program Files&#092;Efficient Networks&#092;Tango Manager&#092;app&#092;TangoService.exe<br /><br /><!--SPOILER DIV--></div><!--SPOILER DIV--> Sleepyzai Technical Support Sun, 23 Dec 2007 01:48:38 +0800 Help Me pls.. http://forum.lowyat.net/topic/533852 I juz come back from skol n open my com..<br />I found out tat everything in my com like hv been reformat..<br />But those file r still there..<br />Wht is happening??<br />Ytd it was still ok..N i had called my bro ..He say he dint not touch the com..<br />But 2day it bcome like juz hv been format..Help me pls..urgent Sleepyzai Technical Support Tue, 09 Oct 2007 13:43:47 +0800