This is a strange problem I've been getting recently... In the last week or so, My AIM, or MSN messengers, crash my internet (Strangley.. If I do not open any IM program, after I reset my internet via unplugging the router and restarting, I can browse the internet, download things, and play games online, I can even use WEB IM programs, such as AIM express~). A week or so ago this was not happening, I figured, perhaps it's my xp version, so I updated XP, and my IM programs, I also ran virus scanning programs, as well as registry and spybot scanners. After all of this I tried once again. And yet again, when I sign on AIM or MSN it crashes my internet. I'm pretty stumped... I figure it may be my Modem? Or Router.. But I thought I should ask here first, to see if anyone had any ideas.

And finally, the HiJackThis Scan Log.

I was curious, since the program is a IM password stealer. Should I go through my various applications that I use a password on, like games for example, and change my passwords?

http://attachments.techguy.org/attac...1&d=1178153959
hijackthis scan.txt

Here you go dvk01~

http://www.thespykiller.co.uk/index....c=4096.new#new

I attached the file you requested.

Rootchk program. (There were 205 hidden files, I'm not sure if thats what you meant by Hidden Drivers? I can rescan if you would like.)


http://attachments.techguy.org/attac...1&d=1178150831
rootlog.txt

Heres the folders, I just zipped the folder inside the movedfiles.

http://www.thespykiller.co.uk/index....c=4111.new#new

And once again thanks for all the help, dvk~ I wouldn't have ever guessed the internet issue was a PW stealer.. Thats a huge security threat there. Thanks for helping me pin point this!

Thanks for all the help so far Dvk01~ Heres the scan result.


http://attachments.techguy.org/attachment.php?attachmentid=104704&stc=1&d=1178000583
WinPFind3.Txt


I did run a virus scan the other night, it found a trojan, which I was able to remove. Though you never know with viruses, it may still be there, I'm going to run some more virus scans and spyware scans in the meantime.

Thanks for your reply, dvk01. I went ahead and did what you asked, And saved the log.

Logfile of HijackThis v1.99.1
Scan saved at 9:26:36 PM, on 4/29/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missin

I did not fix anything as you asked, I'm pretty sure I'd end up messing it up if I did lol. So theres the results~

Heres the result from the Kaspersky Scan.

http://attachments.techguy.org/attac...1&d=1178153708
Kaspersky Scan.txt

WinPFind3 - Fix, I ran this first, with the information you provided, and this is the resulting log. Two errors popped up, I did not write down the names of the files that received the errors (Mistake by me..~) So once I restarted I ran the program again, with the same fix, and it did not error. Here is the 2nd log. The one without the errors, I can post the one that received the errors if you want that one.


http://attachments.techguy.org/attac...1&d=1178150647
05022007_164924.log