msg121.cpy.dll

Discussion in 'adware, spyware & hijack cleaning' started by odo!!!, Apr 26, 2004.

Thread Status:
Not open for further replies.
  1. odo!!!

    odo!!! Registered Member

    Joined:
    Apr 26, 2004
    Posts:
    1
    i also have this msg121.cpy.dll in my pc(winxp pro)
    i followed the step u show and this is my log file:

    Logfile of HijackThis v1.97.7
    Scan saved at 4:54:33 PM, on 4/26/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
    C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
    C:\Program Files\Trend Micro\OfficeScan Client\ofcdog.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
    C:\Program Files\Winamp3\winampa.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Palm\hotsync.exe
    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\jajc.exe
    C:\Documents and Settings\Hgmwfm\Desktop\level17\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.prudential.net:3128
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp3\winampa.exe"
    O4 - HKLM\..\Run: [PrueHr] C:\Windows\System\HR.js
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: HotSync Manager.lnk = C:\Palm\hotsync.exe
    O4 - Global Startup: jajc.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38095.802650463
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {DDFFA75A-E81D-4454-89FC-B9FD0631E726} - http://www.bundleware.com/activeX/DS3/DS3.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{01E0D316-2828-4CCE-9DE9-8BFEF2E80170}: Domain = prudential.net
    O17 - HKLM\System\CCS\Services\Tcpip\..\{01E0D316-2828-4CCE-9DE9-8BFEF2E80170}: NameServer = 18.37.17.15,18.37.17.16
    O17 - HKLM\System\CS1\Services\Tcpip\..\{01E0D316-2828-4CCE-9DE9-8BFEF2E80170}: Domain = prudential.net
    O17 - HKLM\System\CS1\Services\Tcpip\..\{01E0D316-2828-4CCE-9DE9-8BFEF2E80170}: NameServer = 18.37.17.15,18.37.17.16

    so what should i do now?
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
Thread Status:
Not open for further replies.