Hi


Logfile of HijackThis v1.98.2
Scan saved at 12:09:32 PM, on 4/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Media Access\MediaAccK.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Media Access\MediaAccess.exe
C:\WINNT\system32\wuauclt.exe
C:\WINNT\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Highjack this\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://web.cxwykniwdrcuwnpcve.com/tApYpUg3...k1aSykCS4q.html
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab
O20 - AppInit_DLLs: MsgPlusLoader.dll



Thanks

Hi BIG...can you tell us a little of what's going on. Lots of startups have been disabled. If you disabled them in Msconfig, re-enable them, reboot and post a fresh log. Can't tell what's going on from what you posted, but it looks like there's a LOP infection there. Did you install Messenger Plus! 3?

QUOTE (HKEd @ Apr 19 2005, 07:39 PM)

Hi BIG...can you tell us a little of what's going on.  Lots of startups have been disabled.  If you disabled them in Msconfig, re-enable them, reboot and post a fresh log.  Can't tell what's going on from what you posted, but it looks like there's a LOP infection there.  Did you install Messenger Plus! 3?

Hey HKed


Yes i have D/l MSN plus 3 and do think i have the virus LOP. Everything in Msconfig startup is enabled including, MediaAccK,Qttask and msnmsgr, unfortunately there is nothing else to enable. As for the the problem it varies, most common is constantly having to refresh certain website sites a few times because they do not load correctly, and just now i couldn’t connect to MSN or browse the IE (But i can now), hope that helps..

Where's your antivirus program?

MediaAccK.exe is fairly nasty spyware. Fix the startup in HJT, then reboot and delete the C:\Program Files\Media Access folder.

You can usually get rid of LOP by uninstalling MP! 3, then reinstall it but decline the "sponsor's" program (LOP). Fix this line in HJT:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://web.cxwykniwdrcuwnpcve.com/tApYpUg3...k1aSykCS4q.html

Let us know if that improves things.