too many TCP/UDP in netstat.. Very slow internet connection..

seagul · April 25th, 2009, 12:53 PM

Hey there guys,
just chanced upon this forum while trying to figure out why my internet connection was so laggy. I'm subscribed to a 1.5Mbps ADSL2+ connection but i feel a lot of lag spikes and slow internet connection. Also, once in awhile, my internet browsers say i am not connected to the internet but connections such as msn and online games still work. The only way get it to work again is to reboot my computer. I'm using AVG free antivirus and spybot but it hasn't detected anything. I have already gone thru my msconfig to remove whatever's necessary, it still doesn't help. Would be nice if someone could offer some help or suggestions?

Here's my netstat -a:
Proto Local Address Foreign Address State
TCP 0.0.0.0:135 David-PC:0 LISTENING
TCP 0.0.0.0:20985 David-PC:0 LISTENING
TCP 0.0.0.0:49152 David-PC:0 LISTENING
TCP 0.0.0.0:49153 David-PC:0 LISTENING
TCP 0.0.0.0:49154 David-PC:0 LISTENING
TCP 0.0.0.0:49155 David-PC:0 LISTENING
TCP 0.0.0.0:49156 David-PC:0 LISTENING
TCP 0.0.0.0:49175 David-PC:0 LISTENING
TCP 127.0.0.1:10080 David-PC:0 LISTENING
TCP 127.0.0.1:10080 David-PC:50629 ESTABLISHED
TCP 127.0.0.1:10080 David-PC:50631 ESTABLISHED
TCP 127.0.0.1:10080 David-PC:50635 ESTABLISHED
TCP 127.0.0.1:10080 David-PC:50748 CLOSE_WAIT
TCP 127.0.0.1:10080 David-PC:50751 ESTABLISHED
TCP 127.0.0.1:10080 David-PC:50754 FIN_WAIT_2
TCP 127.0.0.1:10080 David-PC:50756 FIN_WAIT_2
TCP 127.0.0.1:10080 David-PC:50844 FIN_WAIT_2
TCP 127.0.0.1:10080 David-PC:50854 FIN_WAIT_2
TCP 127.0.0.1:10080 David-PC:50859 TIME_WAIT
TCP 127.0.0.1:10080 David-PC:50862 FIN_WAIT_2
TCP 127.0.0.1:10080 David-PC:50864 TIME_WAIT
TCP 127.0.0.1:10080 David-PC:50866 TIME_WAIT
TCP 127.0.0.1:10080 David-PC:50871 TIME_WAIT
TCP 127.0.0.1:13128 David-PC:0 LISTENING
TCP 127.0.0.1:18080 David-PC:0 LISTENING
TCP 127.0.0.1:18080 David-PC:50817 TIME_WAIT
TCP 127.0.0.1:18080 David-PC:50821 TIME_WAIT
TCP 127.0.0.1:27015 David-PC:0 LISTENING
TCP 127.0.0.1:49188 David-PC:0 LISTENING
TCP 127.0.0.1:49188 David-PC:49191 ESTABLISHED
TCP 127.0.0.1:49191 David-PC:49188 ESTABLISHED
TCP 127.0.0.1:49227 David-PC:49228 ESTABLISHED
TCP 127.0.0.1:49228 David-PC:49227 ESTABLISHED
TCP 127.0.0.1:49229 David-PC:49230 ESTABLISHED
TCP 127.0.0.1:49230 David-PC:49229 ESTABLISHED
TCP 127.0.0.1:50629 David-PC:10080 ESTABLISHED
TCP 127.0.0.1:50631 David-PC:10080 ESTABLISHED
TCP 127.0.0.1:50635 David-PC:10080 ESTABLISHED
TCP 127.0.0.1:50748 David-PC:10080 FIN_WAIT_2
TCP 127.0.0.1:50751 David-PC:10080 ESTABLISHED
TCP 127.0.0.1:50754 David-PC:10080 CLOSE_WAIT
TCP 127.0.0.1:50756 David-PC:10080 CLOSE_WAIT
TCP 127.0.0.1:50819 David-PC:18080 TIME_WAIT
TCP 127.0.0.1:50844 David-PC:10080 CLOSE_WAIT
TCP 127.0.0.1:50854 David-PC:10080 CLOSE_WAIT
TCP 127.0.0.1:50862 David-PC:10080 CLOSE_WAIT
TCP 192.168.2.3:139 David-PC:0 LISTENING
TCP 192.168.2.3:49187 by2msg3020214:msnp ESTABLISHED
TCP 192.168.2.3:50448 cpc1-stkn7-0-0-cust113:18904 LAST_ACK
TCP 192.168.2.3:50511 i125-204-21-10:16068 ESTABLISHED
TCP 192.168.2.3:50513 adsl-160-227-18:8848 ESTABLISHED
TCP 192.168.2.3:50528 c-67-170-13-40:55247 ESTABLISHED
TCP 192.168.2.3:50555 79-119-212-152:15776 ESTABLISHED
TCP 192.168.2.3:50558 24-197-136-186:50001 FIN_WAIT_1
TCP 192.168.2.3:50569 77-253-101-95:60540 ESTABLISHED
TCP 192.168.2.3:50593 aekt148:9733 ESTABLISHED
TCP 192.168.2.3:50596 79-115-135-151:39303 ESTABLISHED
TCP 192.168.2.3:50623 78.179.188.95:58976 FIN_WAIT_2
TCP 192.168.2.3:50630 partnerad-dclk:http ESTABLISHED
TCP 192.168.2.3:50632 tx-in-f101:http ESTABLISHED
TCP 192.168.2.3:50636 64.236.76.160:http ESTABLISHED
TCP 192.168.2.3:50650 IP-59-69:31369 FIN_WAIT_2
TCP 192.168.2.3:50656 dsl54001334:16428 ESTABLISHED
TCP 192.168.2.3:50665 chello084114192029:44547 ESTABLISHED
TCP 192.168.2.3:50666 host-84-220-94-180:56710 TIME_WAIT
TCP 192.168.2.3:50674 dht232:62583 ESTABLISHED
TCP 192.168.2.3:50676 cnw248:23592 ESTABLISHED
TCP 192.168.2.3:50685 58:31440 ESTABLISHED
TCP 192.168.2.3:50705 IGLD-77-124-160-107:63917 FIN_WAIT_1
TCP 192.168.2.3:50714 54037DA1:20900 ESTABLISHED
TCP 192.168.2.3:50721 catv-86-101-0-219:65449 TIME_WAIT
TCP 192.168.2.3:50738 178:44776 ESTABLISHED
TCP 192.168.2.3:50749 ev1s-75-125-36-226:http FIN_WAIT_2
TCP 192.168.2.3:50752 partnerad-dclk:http ESTABLISHED
TCP 192.168.2.3:50755 partner:http CLOSE_WAIT
TCP 192.168.2.3:50757 partner:http CLOSE_WAIT
TCP 192.168.2.3:50762 89.43.44.98:10474 ESTABLISHED
TCP 192.168.2.3:50765 pool-71-120-170-134:26644 ESTABLISHED
TCP 192.168.2.3:50769 host195-44-dynamic:6881 ESTABLISHED
TCP 192.168.2.3:50773 bl8-191-8:52125 ESTABLISHED
TCP 192.168.2.3:50791 adsl-89-132-21-143:31144 ESTABLISHED
TCP 192.168.2.3:50820 221.130.193.24:8080 TIME_WAIT
TCP 192.168.2.3:50824 117.20.128.49:16118 ESTABLISHED
TCP 192.168.2.3:50825 p23188-ipngn601marunouchi:8793 SYN_SENT
TCP 192.168.2.3:50826 p2161-ipngn401sapodori:22924 LAST_ACK
TCP 192.168.2.3:50828 59-190-53-164:24504 TIME_WAIT
TCP 192.168.2.3:50829 ppp-124-121-101-5:13087 SYN_SENT
TCP 192.168.2.3:50830 117.20.128.49:16118 ESTABLISHED
TCP 192.168.2.3:50831 p23188-ipngn601marunouchi:8793 SYN_SENT
TCP 192.168.2.3:50832 p2161-ipngn401sapodori:22924 TIME_WAIT
TCP 192.168.2.3:50833 ppp-61-90-79-60:17746 TIME_WAIT
TCP 192.168.2.3:50834 59-190-53-164:24504 TIME_WAIT
TCP 192.168.2.3:50835 ppp-124-121-101-5:13087 SYN_SENT
TCP 192.168.2.3:50836 117.20.128.49:16118 ESTABLISHED
TCP 192.168.2.3:50837 p2161-ipngn401sapodori:22924 TIME_WAIT
TCP 192.168.2.3:50838 ppp-61-90-79-60:17746 TIME_WAIT
TCP 192.168.2.3:50839 59-190-53-164:24504 TIME_WAIT
TCP 192.168.2.3:50840 ppp-124-121-101-5:13087 SYN_SENT
TCP 192.168.2.3:50843 techimo:http TIME_WAIT
TCP 192.168.2.3:50845 techimo:http CLOSE_WAIT
TCP 192.168.2.3:50846 p23188-ipngn601marunouchi:8793 SYN_SENT
TCP 192.168.2.3:50849 59-190-53-164:24504 TIME_WAIT
TCP 192.168.2.3:50850 ppp-124-121-101-5:13087 SYN_SENT
TCP 192.168.2.3:50852 p23188-ipngn601marunouchi:8793 SYN_SENT
TCP 192.168.2.3:50853 p2161-ipngn401sapodori:22924 TIME_WAIT
TCP 192.168.2.3:50855 techimo:http CLOSE_WAIT
TCP 192.168.2.3:50856 ppp-61-90-79-60:17746 TIME_WAIT
TCP 192.168.2.3:50858 ppp-124-121-101-5:13087 SYN_SENT
TCP 192.168.2.3:50863 images:http CLOSE_WAIT
TCP 192.168.2.3:50868 p23188-ipngn601marunouchi:8793 SYN_SENT
TCP 192.168.2.3:50869 p2161-ipngn401sapodori:22924 SYN_SENT
TCP 192.168.2.3:50873 59-190-53-164:24504 TIME_WAIT
TCP 192.168.2.3:50875 cpe-76-91-47-21:20033 ESTABLISHED
TCP 192.168.2.3:50877 85.122.63.101:41783 SYN_SENT
TCP 192.168.2.3:50878 62.215.121.122:11176 SYN_SENT
TCP 192.168.2.3:50879 fibhost-209-143:52644 ESTABLISHED
TCP 192.168.2.3:50880 ppp-71-138-240-25:51365 ESTABLISHED
TCP 192.168.2.3:50881 62.162.211.140:24748 SYN_SENT
TCP [::]:135 David-PC:0 LISTENING
TCP [::]:445 David-PC:0 LISTENING
TCP [::]:2869 David-PC:0 LISTENING
TCP [::]:5357 David-PC:0 LISTENING
TCP [::]:49152 David-PC:0 LISTENING
TCP [::]:49153 David-PC:0 LISTENING
TCP [::]:49154 David-PC:0 LISTENING
TCP [::]:49155 David-PC:0 LISTENING
TCP [::]:49156 David-PC:0 LISTENING
TCP [::]:49175 David-PC:0 LISTENING
UDP 0.0.0.0:123 *:*
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:5355 *:*
UDP 0.0.0.0:20985 *:*
UDP 0.0.0.0:55989 *:*
UDP 0.0.0.0:62404 *:*
UDP 127.0.0.1:1900 *:*
UDP 127.0.0.1:49152 *:*
UDP 127.0.0.1:57465 *:*
UDP 127.0.0.1:59806 *:*
UDP 127.0.0.1:60215 *:*
UDP 127.0.0.1:62390 *:*
UDP 127.0.0.1:62405 *:*
UDP 127.0.0.1:65187 *:*
UDP 127.0.0.1:65194 *:*
UDP 192.168.2.3:9 *:*
UDP 192.168.2.3:137 *:*
UDP 192.168.2.3:138 *:*
UDP 192.168.2.3:1900 *:*
UDP 192.168.2.3:65193 *:*
UDP [::]:123 *:*
UDP [::]:500 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:5355 *:*
UDP [::]:55990 *:*
UDP [::1]:1900 *:*
UDP [::1]:65191 *:*
UDP [fe80::2cd7:2ef9:84fd:820f%12]:1900 *:*
UDP [fe80::2cd7:2ef9:84fd:820f%12]:65192 *:*
UDP [fe80::950e:36e5:9ece:c474%11]:1900 *:*
UDP [fe80::950e:36e5:9ece:c474%11]:65188 *:*
UDP [fe80::b94f:3f34:915a:a3ba%10]:1900 *:*
UDP [fe80::b94f:3f34:915a:a3ba%10]:65189 *:*
UDP [fe80::d891:ccea:bb0:3c16%8]:1900 *:*
UDP [fe80::d891:ccea:bb0:3c16%8]:65190 *:*

seagul · April 25th, 2009, 12:56 PM

Here's my logfil of my HijackThis scan.. If it helps..

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:55:13 PM, on 25/4/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16809)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Fingerprint Sensor\ATSwpNav.exe
C:\Program Files\Intel\AMT\atchk.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Softex\OmniPass\scureapp.exe
D:\Games\PowerISO\PWRISOVM.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
D:\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\conime.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\explorer.exe
C:\Program Files\BitComet\BitComet.exe
D:\Programs\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Dodo Australia : Members Portal
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.pc-ap.fujitsu.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 10.9.8.4:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SSUtility] C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
O4 - HKLM\..\Run: [ATSwpNav] "C:\Program Files\Fingerprint Sensor\ATSwpNav" -run
O4 - HKLM\..\Run: [atchk] "C:\Program Files\Intel\AMT\atchk.exe"
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [IaNvSrv] C:\Program Files\Intel\Intel Matrix Storage Manager\OROM\IaNvSrv\IaNvSrv.exe
O4 - HKLM\..\Run: [OmniPass] C:\Program Files\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [PWRISOVM.EXE] D:\Games\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [LoadFUJ02E3] C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
O4 - HKLM\..\RunOnce: [PCDrProfiler] C:\Program Files\Fujitsu Hardware Diagnostics Tool\RunProfiler.exe -r
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Canon IJ Status Monitor Canon Inkjet i80.lnk = ?
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanage...ex-2.2.1.6.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2959214F-99B4-42FD-ACC5-DE845B997956}: NameServer = 123.2.6.197,122.148.1.5
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Intel(R) Active Management Technology System Status Service (atchksrv) - Intel Corporation - C:\Program Files\Intel\AMT\atchksrv.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Active Management Technology Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\AMT\LMS.exe
O23 - Service: Logitech IBT Service (LvIBTSvr) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LvIBTSvr\LvIBTSvr.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Program Files\Softex\OmniPass\OmniServ.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - D:\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 11759 bytes

cksboy15 · April 25th, 2009, 01:11 PM

clear your cookies (if you haven't alrerady) then download malwarebytes and run a scan.

Download Malwarebytes Anti-Malware 1.36 - FileHippo.com

you can acces you cookies by typing "cookies" into run.

seagul · April 25th, 2009, 01:36 PM

i have done that.. i can't access my cookies it says access denied, and i'm the "administrator" of my computer.. Is there anyway i can bypass this?

cksboy15 · April 25th, 2009, 01:41 PM

are you running vista?

seagul · April 25th, 2009, 02:41 PM

yes i am, windows vista business

Edit: Oh and another thing, when i run malwarebytes it always get stuck at the quicktime folder for hours and does not carry on... so i can't fully scan my computer with malwarebytes

Aaron_8015 · April 25th, 2009, 03:01 PM

Run malwarebytes in safe mode

Copy and paste your hijack this to HijackThis Logfileauswertung

seagul · April 25th, 2009, 03:10 PM

O17 - HKLM\System\CCS\Services\Tcpip\..\{2959214F-99B4-42FD-ACC5-DE845B997956}: NameServer = 123.2.6.197,122.148.1.5

Do you know the IP or Domain '123.2.6.197,122.148.1.5'? If not, fix this entry.

-------------------------------------------------------------------------
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local;

Extremely nasty

Safe (3.68 / 5.00)
-------------------------------------------------------------------------
These are the 2 key items that are alarming i think.. How do i "fix this entry" for the first one? and what do i do with the 2nd one?

seagul · April 26th, 2009, 12:41 PM

anyone got any ideas?