Bizarre Packet Issue- Hjt Log[INACTIVE]

clerise · December 21, 2008

As of yesterday, my University automatically disabled my internet, saying that I was sending out over 133 packets per minute.

Today, at home, dal.net has banned me with this notice:

[19:03] -riga-r.ca.us.dal.net- *** You are banned from DALnet

-

[19:03] -riga-r.ca.us.dal.net- *** Reason: [AKILL ID:1229824720K-b] [exp/comp] Compromised host, go to http://kline.dal.net/exploits/akills.htm (2008/12/21 01.58)

-

[19:03] -riga-r.ca.us.dal.net- *** Connection info: <unnamed>([-][email protected]) [67.177.251.243]

-

[19:03] -riga-r.ca.us.dal.net- *** Ban contact: [email protected]

-

[19:03] -riga-r.ca.us.dal.net- *** When contacting DALnet, please include all of the information shown above

-

A-banned: [AKILL ID:1229824720K-b] [exp/comp] Compromised host, go to http://kline.dal.net/exploits/akills.htm (2008/12/21 01.58)

I opened ipconfig, pinged myself and...it endlessly replied. Dozens of times. I hope this is a spyware/trojan issue, because if not I fear it is a hardware issue. I have scanned with AVG, symantec, malwarebytes', adaware, and spybot s&d, to no avail.

Here are my logs:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 8:37:32 PM, on 12/20/2008

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\WINDOWS\system32\DVDRAMSV.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\PROGRA~1\AVG\AVG8\avgrsx.exe

C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

c:\TOSHIBA\IVP\swupdate\swupdtmr.exe

C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

C:\WINDOWS\system32\Pen_Tablet.exe

C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

C:\WINDOWS\system32\TODDSrv.exe

C:\PROGRA~1\AVG\AVG8\avgemc.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe

C:\WINDOWS\system32\Pen_Tablet.exe

C:\WINDOWS\system32\dllhost.exe

C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe

C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\ehome\ehtray.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\AGRSMMSG.exe

C:\WINDOWS\eHome\ehmsas.exe

C:\WINDOWS\system32\TPSMain.exe

C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe

C:\Program Files\Toshiba\Tvs\TvsTray.exe

C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe

C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\PROGRA~1\AVG\AVG8\avgtray.exe

C:\WINDOWS\system32\TPSBattM.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Documents and Settings\Jack\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\WINDOWS\system32\RAMASST.exe

C:\Program Files\Trillian\trillian.exe

C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgent.exe

C:\Program Files\Adobe\Adobe Photoshop CS2\Photoshop.exe

C:\Program Files\mIRC\mirc.exe

C:\WINDOWS\system32\svchost.exe

C:\DOCUME~1\Jack\LOCALS~1\Temp\Adobelm_Cleanup.0001

C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

C:\DOCUME~1\Jack\LOCALS~1\Temp\Adobelm_Cleanup.0001