msg121.cpy.dll

Discussion in 'adware, spyware & hijack cleaning' started by odo!!!, Apr 26, 2004.

Thread Status:
Not open for further replies.
  1. odo!!!

    odo!!! Registered Member

    Joined:
    Apr 26, 2004
    Posts:
    1
    i also have this msg121.cpy.dll in my pc(winxp pro)
    i followed the step u show and this is my log file:

    Logfile of HijackThis v1.97.7
    Scan saved at 4:54:33 PM, on 4/26/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
    C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
    C:\Program Files\Trend Micro\OfficeScan Client\ofcdog.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
    C:\Program Files\Winamp3\winampa.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Palm\hotsync.exe
    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\jajc.exe
    C:\Documents and Settings\Hgmwfm\Desktop\level17\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.prudential.net:3128
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp3\winampa.exe"
    O4 - HKLM\..\Run: [PrueHr] C:\Windows\System\HR.js
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: HotSync Manager.lnk = C:\Palm\hotsync.exe
    O4 - Global Startup: jajc.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38095.802650463
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {DDFFA75A-E81D-4454-89FC-B9FD0631E726} - http://www.bundleware.com/activeX/DS3/DS3.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{01E0D316-2828-4CCE-9DE9-8BFEF2E80170}: Domain = prudential.net
    O17 - HKLM\System\CCS\Services\Tcpip\..\{01E0D316-2828-4CCE-9DE9-8BFEF2E80170}: NameServer = 18.37.17.15,18.37.17.16
    O17 - HKLM\System\CS1\Services\Tcpip\..\{01E0D316-2828-4CCE-9DE9-8BFEF2E80170}: Domain = prudential.net
    O17 - HKLM\System\CS1\Services\Tcpip\..\{01E0D316-2828-4CCE-9DE9-8BFEF2E80170}: NameServer = 18.37.17.15,18.37.17.16

    so what should i do now?
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,440
    Location:
    Netherlands
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.