Orv...den var slem *G*
------
Logfile of HijackThis v1.94.0
Scan saved at 15:01:48, on 09-06-2003
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://auto.search.msn.com:3128@%61%72%68%65%6F%2E%63%6F%6D/search.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://auto.search.msn.com:3128@%61%72%68%65%6F%2E%63%6F%6D/search.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://auto.search.msn.com:3128@%61%72%68%65%6F%2E%63%6F%6D/search.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://auto.search.msn.com:3128@%61%72%68%65%6F%2E%63%6F%6D/search.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\System32\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=%SystemRoot%\system32\blank.htm
O1 - Hosts: 66.159.18.187 auto.search.msn.com
O1 - Hosts: 66.159.18.187 search.msn.com
O1 - Hosts: 66.159.18.187 srd.yahoo.com
O1 - Hosts: 66.159.18.187
www.n69.comO1 - Hosts: 66.159.18.187
www.pillscash.comO1 - Hosts: 66.159.18.187 cart.penispill.com
O1 - Hosts: 66.159.18.187
www.pillsmoney.comO1 - Hosts: 66.159.18.187
www.pillmedics.comO1 - Hosts: 66.159.18.187
www.big-penis.comO1 - Hosts: 66.159.18.187
www.pluspills1.comO1 - Hosts: 66.159.18.187
www.morepenis.comO1 - Hosts: 66.159.18.187
www.1shoppingcart.comO1 - Hosts: 66.159.18.187
www.herbalo.comO1 - Hosts: 66.159.18.187
www.penilesecrets.comO1 - Hosts: 66.159.18.187
www.penispill.comO1 - Hosts: 66.159.18.187 penismedical.net
O1 - Hosts: 66.159.18.187
www.penismedical.netO1 - Hosts: 66.159.18.187
www.herbalbucks.comO1 - Hosts: 66.159.18.187
www.tv69.comO1 - Hosts: 66.159.18.184 the.sextracker.com
O1 - Hosts: 66.159.18.184 lobby.sexlist.com
O1 - Hosts: 66.159.18.184 in.paycounter.com
O1 - Hosts: 66.159.18.184 adv.sexcounter.com
O1 - Hosts: 66.159.18.184 rd1.hitbox.com
O1 - Hosts: 66.159.18.184 refer.ccbill.com
O1 - Hosts: 66.159.18.184
www.ccbill.comO1 - Hosts: 66.159.18.184 select.2000charge.com
O1 - Hosts: 66.159.18.184 secure.2000charge.com
O1 - Hosts: 66.159.18.184
www.signup.globill-systems.comO1 - Hosts: 66.159.18.184 secure.visionbill.net
O1 - Hosts: 66.159.18.184
www.dibill.comO1 - Hosts: 66.159.18.184 secure.dpbill.com
O1 - Hosts: 66.159.18.184 secure.dutchbilling.com
O1 - Hosts: 66.159.18.184 secure.pswbilling.com
O1 - Hosts: 66.159.18.184
www.maximumcash.comO1 - Hosts: 66.159.18.184
www.adultrevenueservice.comO1 - Hosts: 66.159.18.184
www.eroticacash.comO1 - Hosts: 66.159.18.184
www.oxcash.comO1 - Hosts: 66.159.18.184 track.oxcash.com
O1 - Hosts: 66.159.18.184 potd.oxcash.com
O1 - Hosts: 66.159.18.184 clicks2.oxcash.com
O1 - Hosts: 66.159.18.184
www.webmastersmakemoney.comO1 - Hosts: 66.159.18.184 clicks.nastydollars.com
O1 - Hosts: 66.159.18.184
www.lightspeedcash.comO1 - Hosts: 66.159.18.184 db.fetishcash.com
O1 - Hosts: 66.159.18.184 ctc.amateurpages.com
O1 - Hosts: 66.159.18.184 www2.karupspc.com
O1 - Hosts: 66.159.18.184
www.iteens.comO1 - Hosts: 66.159.18.184 click.payserve.com
O1 - Hosts: 66.159.18.184 vip.mtree.com
O1 - Hosts: 66.159.18.184 c.fsx.com
O1 - Hosts: 66.159.18.184 adultfriendfinder.com
O1 - Hosts: 66.159.18.184 network.nocreditcard.com
O1 - Hosts: 66.159.18.184 php.offshoreclicks.com
O1 - Hosts: 66.159.18.184 links.lifetimebucks.com
O1 - Hosts: 66.159.18.184 cgi.gammae.com
O1 - Hosts: 66.159.18.184 click.passiondollars.com
O1 - Hosts: 66.159.18.184
www.fatpockets.comO1 - Hosts: 66.159.18.184 link.siccash.com
O1 - Hosts: 66.159.18.184
www.clickcash.comO1 - Hosts: 66.159.18.184
www.scoreland.comO1 - Hosts: 66.159.18.184
www.makingitpay.comO1 - Hosts: 66.159.18.184
www.hpic.comO1 - Hosts: 66.159.18.184 referral.topbucks.com
O1 - Hosts: 66.159.18.184 partner.globill-systems.com
O1 - Hosts: 66.159.18.184
www.pornstardollars.comO1 - Hosts: 66.159.18.184 traffic.acpay.com
O1 - Hosts: 66.159.18.184
www.cashforlink.comO1 - Hosts: 66.159.18.184 clickcash.webpower.com
O1 - Hosts: 66.159.18.184
www.dollars4babes.comO1 - Hosts: 66.159.18.184
www.sexfantasyzone.comO1 - Hosts: 66.159.18.184
www.twistyscash.comO1 - Hosts: 66.159.18.184
www.freeticketcash.comO1 - Hosts: 66.159.18.184
www.hawgscash.comO1 - Hosts: 66.159.18.184
www.freeezinebucks.comO1 - Hosts: 66.159.18.184
www.nastydollars.comO1 - Hosts: 66.159.18.184
www.deluxepass.comO1 - Hosts: 66.159.18.184 clicks.oxcash.com
O1 - Hosts: 66.159.18.184 ww2.amateur-pages.com
O1 - Hosts: 66.159.18.184 stats.allliquid.com
O1 - Hosts: 66.159.18.184 secure1.websitebilling.com
O1 - Hosts: 66.159.18.184
www.adultmovienetwork.comO1 - Hosts: 66.159.18.184
www.totally4freecash.comO1 - Hosts: 66.159.18.184 network.nocreditcard.com
O1 - Hosts: 66.159.18.184 php.offshoreclicks.com
O1 - Hosts: 66.159.18.184
www.nocreditcard.comO1 - Hosts: 66.159.18.184 media.fastclick.net
O1 - Hosts: 66.159.18.184 clicks.uni-cash.com
O1 - Hosts: 66.159.18.184
www.clubpix.comO1 - Hosts: 66.159.18.184 programs.wegcash.com
O1 - Hosts: 66.159.18.184 in.cybererotica.com
O1 - Hosts: 66.159.18.184
www.cybererotica.comO1 - Hosts: 66.159.18.184 cybererotica.com
O1 - Hosts: 66.159.18.184 dollartraffic.com
O1 - Hosts: 66.159.18.184
www.xxxesscash.comO1 - Hosts: 66.159.18.184
www.maturemoney.comO1 - Hosts: 66.159.18.184
www.xpays.comO1 - Hosts: 66.159.18.184
www.trueclicks.comO1 - Hosts: 66.159.18.184
www.sexhit.comO1 - Hosts: 66.159.18.184
www.blacksonblondes.comO1 - Hosts: 66.159.18.184 partners.hotgold.com
O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\Program Files\DAP\DAPBHO.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\PROGRA~1\DAP\dapiebar.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AudioDSP24 External Links] EL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Run DAP (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O13 - DefaultPrefix:
http://auto.search.msn.com:3128@%61%72%68%65%6F%2E%63%6F%6D/%63%67%69%2D%62%69%6E/c.pl?url=O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) -
https://components.viewpoint.com/MTSInstallers/MetaStream3.cabO16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) -
http://download.macromedia.com/pub/shockwave/cabs/director/sw.cabO16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) -
http://www.cult3d.com/download/cult.cabO16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -
http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37584.6432638889O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab