Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:04:06 Õ, on 6/6/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.12.6321.14712)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
J:\AllPrograms\AVAST\aswUpdSv.exe
J:\AllPrograms\AVAST\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS8SEJUG\MDM.EXE
J:\AllPrograms\AVAST\ashMaiSv.exe
J:\AllPrograms\AVAST\ashWebSv.exe
C:\WINDOWS\explorer.exe
J:\ALLPRO~1\AVAST\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
M:\Orbitdownloader\orbitdm.exe
M:\Orbitdownloader\orbitnet.exe
D:\All Programs\All Adobe\Acrobat 6.0PR\Distillr\AcroTray.exe
D:\All Programs\All Adobe\Acrobat 6.0PR\Distillr\AcroTray.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\freecell.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BA32-C1FB-14S2-891A-0091231D4D45} - M:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
F2 - REG:system.ini: Shell=explorer.exe 
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - F:\Orbitdownloader\orbitcth.dll
O2 - BHO: Adobe PDF Reader Link Helper - {068089G-C8D7-3S59-B87D-785C1D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF423V-C6D2-4b71-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O3 - Toolbar: Grab Pro - {C55BBSF8-41AD-48AD-6753-3609C12JACC7} - D:\Orbitdownloader\GrabPro.dll
O4 - HKLM\..\Run: [avast!] J:\ALLPRO~1\AVAST\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\All Programs\All Adobe\Adobe Acrobat Reader 8.1\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Orbit.lnk = D:\Orbitdownloader\orbitdm.exe
O8 - Extra context menu item: &Download by Orbit - res://D:\Orbitdownloader\orbitmxt.dll/454
O8 - Extra context menu item: &Grab video by Orbit - res://D:\Orbitdownloader\orbitmxt.dll/454
O8 - Extra context menu item: Do&wnload selected by Orbit - res://D:\Orbitdownloader\orbitmxt.dll/454
O8 - Extra context menu item: Down&load all by Orbit - res://D:\Orbitdownloader\orbitmxt.dll/454
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: ÈÍË - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\ALLPRO~1\ALLWOR~1\OFFICE~1\OFFICE11\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{D67349DF-97BB-2SF7-8BE0-B5FF6AD3C575}: NameServer = 10.214.10.33
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - E:\AllPrograms\SUPERAntiSpywarePro\program Files\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\AllPrograms\AVAST\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - E:\AllPrograms\AVAST\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - E:\AllPrograms\AVAST\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - E:\AllPrograms\AVAST\ashWebSv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 4682 bytes