Spyware / Malware / Virus Removal

Constant Bho Problems

7 min read

Looking for the outcome? Ask AI

Concrete101 Topic Starter

Post #1August 28, 2004, 5:07 AM UTC

I have been trying to clean my friends computer for over a day, I ran AVG twice, once in safe mode, removing over 202 variants of downloader.agent. Then after running S-D found lots of CWS problems, and some others… installed spyblaster and spywareguard also. Still having problems with BHO warnings and if I don't deny the main one, systw.dll, then it tries to hijack my browser, etc. The warning keeps coming up constantly, it is really annoying. Thanks for any help I can get.

Logfile of HijackThis v1.98.2
Scan saved at 11:47:47 PM, on 8/27/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\EASY INTERNET\ENCMONTR.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\SYSQS.EXE
C:\WINDOWS\WINJX32.EXE
C:\WINDOWS\SYSTEM\D3CT32.EXE
C:\WINDOWS\MSZI32.EXE
C:\WINDOWS\SYSTEM\NTOF32.EXE
C:\WINDOWS\SDKNN.EXE
C:\WINDOWS\APINP32.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\APPST32.EXE
C:\WINDOWS\SDKEO32.EXE
C:\WINDOWS\SYSTEM\IERY32.EXE
C:\WINDOWS\CRIL32.EXE
C:\WINDOWS\SYSTEM\NTOU.EXE
C:\WINDOWS\SYSTEM\NTBF32.EXE
C:\WINDOWS\WINJZ32.EXE
C:\WINDOWS\SYSTEM\MFCXB32.EXE
C:\WINDOWS\SYSTEM\APIMF32.EXE
C:\WINDOWS\SYSTEM\NETQO.EXE
C:\WINDOWS\APPAK.EXE
C:\WINDOWS\SYSTEM\MSPQ32.EXE
C:\WINDOWS\JAVAFD.EXE
C:\WINDOWS\SYSTEM\IPMC32.EXE
C:\WINDOWS\APIRP.EXE
C:\WINDOWS\CRHA32.EXE
C:\WINDOWS\ATLGN.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\WINDOWS\SYSTEM\USBMMKBD.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\PROGRAM FILES\EARTHLINK 5.0\FASTLANE\ARMON32.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\DCFSSVC.EXE
C:\IMAGEMATE COMPACTFLASH USB\SANDICON.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\SUPPORT.COM\BIN\TGCMD.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\SPYWAREGUARD\SGMAIN.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGBHP.EXE
C:\MY DOCUMENTS\HJT\HIJACKTHIS.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = www.comcast.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\uqwyd.dll/sp.html#22776
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\uqwyd.dll/sp.html#22776
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast High-Speed Internet
R3 - Default URLSearchHook is missing
O2 - BHO: . - {D34F08C5-4F18-477c-86CB-1A9BEECFE37B} - C:\WINDOWS\APPLICATION DATA\IEIW\IEIW.DLL (file missing)
O2 - BHO: Class - {462899A9-7B41-9DA4-FE08-29CBDDB597CD} - (no file)
O2 - BHO: Class - {CC74E0B9-F6BF-A716-4F9A-98CC5AAEA235} - (no file)
O2 - BHO: Class - {AAC210E3-5B60-C3CB-4912-4A8EF1D3452C} - (no file)
O2 - BHO: Class - {074499F1-0343-0402-5C16-564761BCBCAE} - C:\WINDOWS\APIBD32.DLL (file missing)
O2 - BHO: Class - {18C2D8F3-3A19-7C0B-2569-4E16C8930B32} - (no file)
O2 - BHO: Class - {6BFC5BA7-FCB6-8F85-8198-1DE00B600B82} - C:\WINDOWS\SYSLA32.DLL (file missing)
O2 - BHO: Class - {DE46322D-5659-ABB6-BA45-EC180411C66A} - (no file)
O2 - BHO: Class - {64CBE75A-CB86-08A5-7CD8-BAD3180D977B} - (no file)
O2 - BHO: Class - {CC82AF69-E143-F017-B227-313BCBE47DBC} - (no file)
O2 - BHO: Class - {40125A23-CDA6-5BCC-7F4F-738DFD6F3935} - (no file)
O2 - BHO: Class - {149C875D-61DC-6453-2883-DD1C7FC427B1} - (no file)
O2 - BHO: Class - {7E3BCB9F-794D-5966-B3C0-BFF81D010A91} - (no file)
O2 - BHO: Class - {0408BD9F-FBE0-566C-EBDA-DBC97DA7E144} - (no file)
O2 - BHO: Class - {9D5088E9-4C96-33DD-92A8-827FF17FB2F0} - (no file)
O2 - BHO: Class - {1AF1EDC8-3CFC-DED1-ECF0-4529CEDED9B1} - (no file)
O2 - BHO: Class - {F75F0D6E-B293-75B7-CEB9-9C175F169FEC} - (no file)
O2 - BHO: Class - {9E8D30B9-0868-64A8-9289-FF52F6770580} - (no file)
O2 - BHO: Class - {627786BB-6448-3092-7B9F-EC2C95F20347} - (no file)
O2 - BHO: Class - {4477089F-D0FD-6D46-A6A1-4D7F5704A5DA} - (no file)
O2 - BHO: Class - {563BADF4-B92C-E9EE-8603-7AC32CC25C50} - (no file)
O2 - BHO: Class - {BD9C151F-3013-8741-FC74-A2A2A38B755A} - (no file)
O2 - BHO: Class - {5D8C38B8-233D-824F-9C0F-A3EBB2B4824A} - (no file)
O2 - BHO: Class - {BB4E38F6-B5AF-49A8-626C-EDA4037FCA0E} - (no file)
O2 - BHO: Class - {D24D5A4B-6272-0822-F819-5B24D8289AB7} - (no file)
O2 - BHO: Class - {01B8230F-FFA5-630F-4267-7F2880D80B57} - (no file)
O2 - BHO: Class - {B8758CB9-31CB-EDCD-9E5A-307A8A0E5851} - (no file)
O2 - BHO: Class - {1989CDA8-1898-9E66-F3AF-1C7B4EFF9DBD} - (no file)
O2 - BHO: Class - {0317AD98-9368-D476-5B88-92ABD481A6D3} - (no file)
O2 - BHO: Class - {7A8D02D8-4565-6846-5AA3-A38A39B92077} - (no file)
O2 - BHO: Class - {9FDEC173-21F7-980A-124F-9D55C74F77FE} - (no file)
O2 - BHO: Class - {DF52A427-A94E-256A-7FF7-A0060FEDB100} - (no file)
O2 - BHO: Class - {4E6A738F-C5A0-7BB2-24BD-5AF24A66A2EE} - (no file)
O2 - BHO: Class - {652D794B-763F-83DD-FAFE-5ACFEB85DA45} - (no file)
O2 - BHO: Class - {58C78D32-033C-933B-522A-8CA01511980B} - (no file)
O2 - BHO: Class - {05C385B6-7FC4-E925-8D56-57E4883FEB91} - (no file)
O2 - BHO: Class - {802085E0-C94D-7B6C-CB7A-22D80A7FF68D} - (no file)
O2 - BHO: Class - {C436CBC1-830F-15E4-B4E2-9CB792F1F829} - (no file)
O2 - BHO: Class - {04D016B1-AA23-A53B-C6CC-B2AD566EC16B} - (no file)
O2 - BHO: Class - {9901F3E7-FA3D-4625-F19B-9AC4EDCBCF55} - (no file)
O2 - BHO: Class - {FC80064B-2F8B-2037-9399-180091F90881} - (no file)
O2 - BHO: Class - {8DFB07E3-83F5-F99B-D4F8-197DE07FEC0D} - (no file)
O2 - BHO: Class - {51789E6A-A27D-CF01-30CD-9C054F4543DB} - (no file)
O2 - BHO: Class - {D81F5E8E-8F3D-2F74-74FD-27E2D77060FA} - (no file)
O2 - BHO: Class - {AC6CC2B2-D566-C16B-1F0F-1195433D1C9B} - (no file)
O2 - BHO: Class - {9037343E-6802-1EC2-D767-E57CC2D9D83C} - (no file)
O2 - BHO: Class - {0CEEC41A-54F9-F1D2-230D-B4B044ECC202} - (no file)
O2 - BHO: Class - {63C2F5DC-BFB1-5647-D8C6-FBF8BC23512E} - (no file)
O2 - BHO: Class - {0CABB4B2-7CC4-FF48-22B3-63D4125B83BC} - (no file)
O2 - BHO: Class - {63537F02-C964-FFA3-CC12-00AA0CDF6EE8} - (no file)
O2 - BHO: Class - {18BEE32C-C398-276F-1D26-8D6F48551400} - (no file)
O2 - BHO: Class - {D9DCC50A-EE62-0287-E4FA-5C092B0FC97E} - (no file)
O2 - BHO: Class - {741A224A-0928-455C-96D0-0B9E0AF542C3} - (no file)
O2 - BHO: Class - {D6FD6C4E-109B-B511-05C7-7FBA99E2FD23} - (no file)
O2 - BHO: Class - {CC3A504B-41DE-5145-BA59-63AEDFBC89C3} - (no file)
O2 - BHO: Class - {9B46EFA0-A8CD-6ED9-3D1F-B1FF1A5FC359} - (no file)
O2 - BHO: Class - {EAA21319-8AF3-391F-D65B-F8DC9A1BE340} - (no file)
O2 - BHO: Class - {66D1AFF7-CEAE-AAF4-2822-1F2F71F1736B} - (no file)
O2 - BHO: Class - {41CA0D50-B030-ABB5-0AC7-148792B633A3} - (no file)
O2 - BHO: Class - {C38A3B8F-04D2-90AB-A5A9-6FA9905AC8D3} - (no file)
O2 - BHO: Class - {97E62626-570E-FA07-68DE-16B260404260} - (no file)
O2 - BHO: Class - {5C19DA3A-627A-8F16-BA65-30D8566CB9E4} - (no file)
O2 - BHO: Class - {02B28394-B7A1-BCE7-CE66-3E95D102B062} - (no file)
O2 - BHO: Class - {64B4EF1A-E644-FC93-33AB-4DAD4D7BB624} - (no file)
O2 - BHO: Class - {C958C8A4-30A7-201D-83AF-44BF99D8F86F} - (no file)
O2 - BHO: Class - {1EA8A49C-F9B6-DABF-B1F2-346BEFD60CC5} - (no file)
O2 - BHO: Class - {BB64CF1B-EDD6-054C-3EC4-EDBA6BF43D9B} - (no file)
O2 - BHO: Class - {617282ED-954E-7A0F-D30A-D2686C8DD1A3} - (no file)
O2 - BHO: Class - {F791AC21-2903-6D60-4286-29118C6728F0} - (no file)
O2 - BHO: Class - {CDEABA9C-2D8F-60CE-21DE-88E91DD57D91} - (no file)
O2 - BHO: Class - {01D0432D-FBCC-F789-8B13-8EDFBFBFA172} - (no file)
O2 - BHO: Class - {1819A5B6-F3D0-0680-3146-E5B7D824ED78} - (no file)
O2 - BHO: Class - {F4D52D76-AF45-0DC7-ECE3-8E5A184A66C4} - (no file)
O2 - BHO: Class - {9116D85D-E2F2-BAD5-61EC-1FA681CC5B9F} - (no file)
O2 - BHO: Class - {9535F540-005D-9820-0E09-6C69B59692D6} - (no file)
O2 - BHO: Class - {F0D9B410-3C4F-707C-2E2D-529E64AA2118} - (no file)
O2 - BHO: Class - {DA2E1456-592A-59FB-D2A9-711A767623D9} - (no file)
O2 - BHO: Class - {8B77D6D5-97E2-05BD-09EC-4D7AED9AEE8B} - (no file)
O2 - BHO: Class - {E0CF02B7-3F02-CE62-D7DB-9CC5B8B345A0} - (no file)
O2 - BHO: Class - {E7117565-F52F-8D6F-1513-6EDC956AA6C8} - (no file)
O2 - BHO: Class - {CA6FA2D1-89CD-8318-899E-68F3AF31C7B4} - (no file)
O2 - BHO: Class - {E19DA520-53EA-5009-D3DC-43F570405B92} - (no file)
O2 - BHO: Class - {24D87AB5-7115-66D2-F97A-234319B569B2} - (no file)
O2 - BHO: Class - {990738A7-3E4B-EF17-0D61-F77B6D347DF9} - (no file)
O2 - BHO: Class - {D8C2F069-EC8F-C36A-95C6-E43772BEB4D8} - (no file)
O2 - BHO: Class - {4F6F8D33-2FB2-9856-EA3F-7FBF992C18DB} - (no file)
O2 - BHO: Class - {A3D28485-72FC-E462-4A5F-18C7402122C0} - (no file)
O2 - BHO: Class - {1A6BB2E8-6802-540F-D30B-7C2EB249A684} - (no file)
O2 - BHO: Class - {881A5C23-96F5-9D86-B285-C0FC40116992} - (no file)
O2 - BHO: Class - {1538E7F0-E0B7-1772-9132-BA5EAF5F0739} - (no file)
O2 - BHO: Class - {22A70AE8-41C8-92B2-0678-EB2550E33400} - (no file)
O2 - BHO: Class - {8A009E39-EE7F-08A1-04FA-99D9DB5C5E33} - (no file)
O2 - BHO: Class - {7DD57E5C-3F90-DF50-DB25-D3F77D75BB22} - (no file)
O2 - BHO: Class - {F818172B-804E-575B-D99F-56B31516B05B} - (no file)
O2 - BHO: Class - {EC242DA4-E210-A44F-433D-92D6C9292A65} - (no file)
O2 - BHO: Class - {2072FEC1-6AA3-15DB-05C5-76EB8F16852A} - (no file)
O2 - BHO: Class - {C07AC68E-55E4-DF79-704E-EA6537118C8B} - (no file)
O2 - BHO: Class - {9EFD529D-46F8-2CEA-E958-34254F447995} - (no file)
O2 - BHO: Class - {A46D4DB5-B0A0-3266-CF6F-8A74F80D5E37} - (no file)
O2 - BHO: Class - {93818BC9-D266-1EB9-EDFE-1C682654EE66} - (no file)
O2 - BHO: Class - {EE095897-CF57-F9F1-0CB8-85D815B6038C} - (no file)
O2 - BHO: Class - {43F180D7-BEB2-9D82-0058-EBDBF43E7CDD} - (no file)
O2 - BHO: Class - {97D10E10-8197-55F4-F520-EC1143F3F330} - (no file)
O2 - BHO: Class - {69B41F32-4AC6-1E89-433B-C41C1477D07C} - (no file)
O2 - BHO: Class - {8704DF49-0E57-AB82-9B58-3C3BAEDCDFC9} - (no file)
O2 - BHO: Class - {4EB58EB3-0FD5-6011-4DCD-7A25720A2623} - (no file)
O2 - BHO: Class - {BE1DB07F-DB34-A204-FC73-DF8C7F8D4FA5} - (no file)
O2 - BHO: Class - {1962378B-88F9-50CC-A804-D2474D43DFCF} - (no file)
O2 - BHO: Class - {13F2712D-5E27-26F9-F75A-8572AC68DF97} - (no file)
O2 - BHO: Class - {81C6CDEF-FD32-1223-1C37-9FDEDA7FC97D} - C:\WINDOWS\SYSTEM\JAVARS32.DLL (file missing)
O2 - BHO: Class - {E6202B83-5AD0-51E9-E709-31CBE37410FF} - (no file)
O2 - BHO: Class - {61A38BCD-289B-C661-39C1-95C426EDDAA6} - (no file)
O2 - BHO: Class - {0B480D7D-6240-7BB5-B32C-EE5F2407D9D8} - (no file)
O2 - BHO: Class - {4809A400-3431-B657-55A0-9397DB42AA45} - (no file)
O2 - BHO: Class - {CAEA8CD1-03BD-C448-732E-0309C92E677F} - (no file)
O2 - BHO: Class - {C5C0C117-8698-0B33-7901-61D0E51A5E5F} - (no file)
O2 - BHO: Class - {426292FE-A477-2883-00B4-6595750FDC34} - (no file)
O2 - BHO: Class - {C2CC6805-C621-10C0-ABD7-9EF0E2DA9945} - (no file)
O2 - BHO: Class - {3732FBFA-6A47-1C64-47E4-B6B9A9902850} - (no file)
O2 - BHO: Class - {B85CCDC0-7927-26BB-423F-64D6261EF49F} - (no file)
O2 - BHO: Class - {DB10DB35-D3E5-1249-9B78-4ABD815D81BC} - (no file)
O2 - BHO: Class - {EF4B1BBF-9691-E915-81F6-F75B7DD313AA} - (no file)
O2 - BHO: Class - {21E4D24D-BFDF-C114-094D-146BCC336764} - (no file)
O2 - BHO: Class - {675AF256-41F8-4BD4-7DEE-B1C88DEE276E} - (no file)
O2 - BHO: Class - {A5AC7366-36E2-7400-BED8-41EC50B36BEC} - (no file)
O2 - BHO: Class - {449C0B31-56AA-FBFD-29EE-928758958E00} - (no file)
O2 - BHO: Class - {A0C00E56-D86B-6A64-8741-677C3D02CBAB} - (no file)
O2 - BHO: Class - {B3445E12-83ED-4794-941D-CC18315D0931} - (no file)
O2 - BHO: Class - {EB7DA5C2-D352-BABD-3A3C-1B6EFE88DDDF} - (no file)
O2 - BHO: Class - {7AF168F5-335D-EAEE-007B-C6675F542A72} - (no file)
O2 - BHO: Class - {D46BD9A7-F0D9-207D-083C-6CC3D1044EE8} - (no file)
O2 - BHO: Class - {DB4FEFF3-7F23-D1EC-252C-4321FF47BA66} - (no file)
O2 - BHO: Class - {FD4B1325-2263-732C-0B29-211D1DF47852} - (no file)
O2 - BHO: Class - {78520B76-8A0D-19C0-A7E5-C18D062F80E4} - (no file)
O2 - BHO: Class - {3D1C8A9C-5E91-9A97-1012-77BADF6D1BE0} - (no file)
O2 - BHO: Class - {77CFFB1B-9A9A-5B55-F605-56A98395ABB5} - (no file)
O2 - BHO: Class - {9928825D-F511-512E-6A16-25709CC2A8EB} - (no file)
O2 - BHO: Class - {C152FD32-565F-4149-CA19-48489A67658E} - (no file)
O2 - BHO: Class - {E0914B1D-7314-458C-5DE1-9A712289F02D} - (no file)
O2 - BHO: Class - {AA6A2FD0-24A6-C684-432B-75625618A175} - (no file)
O2 - BHO: Class - {66EDF9AC-64E1-604D-EADE-7B853B8F23FF} - (no file)
O2 - BHO: Class - {B6DF9E38-BCAE-E1DB-480E-57F04350F351} - (no file)
O2 - BHO: Class - {B7B31397-93FC-5ABD-5E72-3C4626580399} - (no file)
O2 - BHO: Class - {1A2FCB78-BCDE-411A-2F9F-AE7FEB55F327} - (no file)
O2 - BHO: Class - {38EC14CC-C206-2CC6-4F50-92CDF97CCE41} - (no file)
O2 - BHO: Class - {C7207E99-C734-FBE2-99CF-E85DDABEE378} - (no file)
O2 - BHO: Class - {E7FEE8CD-D4D3-8260-44A7-67DD4A71E995} - (no file)
O2 - BHO: Class - {83F0FCBE-4DAA-1E5C-EBA7-EDCE90589E43} - (no file)
O2 - BHO: Class - {B02D3C44-5088-4292-8040-CB902C2FAA78} - (no file)
O2 - BHO: Class - {14B347DC-397D-8A0C-EE38-EDC9B92A99F9} - (no file)
O2 - BHO: Class - {058680EF-4C0E-9D88-7204-989DB27DFD59} - (no file)
O2 - BHO: Class - {7DA97ABD-8EF4-D978-CF33-169AC9529E45} - (no file)
O2 - BHO: Class - {714A75BA-793A-AD03-032C-D32FE3D02CDF} - (no file)
O2 - BHO: Class - {2FCAB757-46CB-EDBA-2F82-3DEE958BC1B1} - (no file)
O2 - BHO: Class - {6EF255E8-4410-1C10-85DA-56626C5EB80D} - (no file)
O2 - BHO: Class - {D16792AD-2C2E-4FCB-872C-0EE369121171} - (no file)
O2 - BHO: Class - {A9B5AF4E-E897-1C45-D86D-9A80E109CAE7} - (no file)
O2 - BHO: Class - {5F54EB56-ABB3-1965-610E-A3DF515F7AB9} - (no file)
O2 - BHO: Class - {E09F949B-33ED-E152-6852-2FECABDB4D1C} - (no file)
O2 - BHO: Class - {D8848232-823F-FF9A-E716-1D542C15E2D8} - (no file)
O2 - BHO: Class - {8E0C3EB6-1569-6F50-9A73-3C96164869C2} - (no file)
O2 - BHO: Class - {282032FC-C6CA-9E36-F009-345A15203683} - (no file)
O2 - BHO: Class - {32011C7F-3430-3AF2-DD1F-0049908763E5} - (no file)
O2 - BHO: Class - {5FF6A832-AA1A-6E3C-B35A-D7932B0283C0} - (no file)
O2 - BHO: Class - {1680C9F9-C963-3F25-F481-EBF1DF741AE8} - (no file)
O2 - BHO: Class - {93546DF7-38BA-CC3C-AB8F-9A9913EAAB54} - (no file)
O2 - BHO: Class - {480B26C9-5493-2FD8-25D1-17A24B1257DA} - (no file)
O2 - BHO: Class - {CDD324D5-6EFC-0661-1A20-52A7083C3D03} - (no file)
O2 - BHO: Class - {696F68F7-8C7E-81A7-13DB-A8A270F3F004} - (no file)
O2 - BHO: Class - {CDDABFD3-90AF-3505-3DF4-F8DF446C5C4F} - (no file)
O2 - BHO: Class - {2536C943-1153-AD4C-300A-B4B7FF0DA8BA} - (no file)
O2 - BHO: Class - {9686D485-C0B1-26EE-772B-CB572D82340F} - (no file)
O2 - BHO: Class - {A0904A77-BFA4-970B-9630-8D199EFD55E9} - (no file)
O2 - BHO: Class - {0E10B003-516B-A5FE-961E-ECF25BE3662B} - (no file)
O2 - BHO: Class - {0A18BB06-C986-D04C-2511-A8C95904EF00} - (no file)
O2 - BHO: Class - {6AB07E42-F1C5-F8BA-44B0-6F818F3C7711} - (no file)
O2 - BHO: Class - {6BE5C394-AA25-266E-D794-88256569CD9D} - (no file)
O2 - BHO: Class - {0B0399F6-33DB-AD00-5AD0-5FC7F1F760D4} - (no file)
O2 - BHO: Class - {E7FCD046-7EFA-EC37-9814-C95DD24FA232} - (no file)
O2 - BHO: Class - {BE0B92E6-FE88-CE97-83A2-80F270CDA5CF} - (no file)
O2 - BHO: Class - {368F3DF4-1A51-3E71-538B-6755A0F289FE} - (no file)
O2 - BHO: Class - {BBC7B4F8-5F23-FEFF-C138-FC39C47B93BF} - (no file)
O2 - BHO: Class - {646E2E0B-4014-CADD-B572-242AA038B2F1} - (no file)
O2 - BHO: Class - {63F1A1BF-6292-25D0-A3BA-12D30D817406} - (no file)
O2 - BHO: Class - {9255F260-AD35-16A6-43F3-901D1F3AC6B2} - (no file)
O2 - BHO: Class - {A490913E-404C-4851-6AFE-B571204BBED4} - (no file)
O2 - BHO: Class - {255C3BAE-1994-8D48-D6F5-CC4350B435DC} - (no file)
O2 - BHO: Class - {140D792F-75A2-4E42-7091-0866E3AE621A} - (no file)
O2 - BHO: Class - {9E454339-F6F3-DE2D-DBD8-5229FD0589FE} - (no file)
O2 - BHO: Class - {2C144E07-0F4D-6EC7-B4B1-B4C6479560E5} - (no file)
O2 - BHO: Class - {3A00AA22-FEC1-FC9A-10CE-46012D4BF6B2} - (no file)
O2 - BHO: Class - {E1DD5397-C1A6-DBD8-1D0F-705866B2510B} - (no file)
O2 - BHO: Class - {9038016A-E91F-5E95-0053-598A505661C7} - (no file)
O2 - BHO: Class - {FA4788F1-4822-A986-4D3E-44B435C19A9C} - (no file)
O2 - BHO: Class - {E4F821BD-35F0-0925-EABA-086BEE404D61} - (no file)
O2 - BHO: Class - {95AF3145-72CF-F3FC-766B-19712121F763} - (no file)
O2 - BHO: Class - {DBEDA669-9CE6-0853-9ABD-154843F0DA5B} - (no file)
O2 - BHO: Class - {51F242CE-3A79-A2F0-3B9D-50A94CC69C30} - (no file)
O2 - BHO: Class - {44C8A3A3-D8E9-D794-648F-B24BC95436BE} - (no file)
O2 - BHO: Class - {3930AD0E-407E-0742-7BAA-CE5F22867714} - (no file)
O2 - BHO: Class - {4779094B-C704-B856-11A4-52CD133E6199} - (no file)
O2 - BHO: Class - {A645334F-FEE6-4734-366C-BD7C0DB2B254} - (no file)
O2 - BHO: Class - {6EB9121A-3517-F0F4-C72C-70B7B624BBD3} - (no file)
O2 - BHO: Class - {A5016BFA-AF2F-38FC-EB59-79C9ECE9256B} - (no file)
O2 - BHO: Class - {74D49E20-C013-4035-3457-1B073899BF8D} - C:\WINDOWS\WINLN32.DLL (file missing)
O2 - BHO: Class - {3E739557-9D68-522B-C5F0-2630AEE4E243} - (no file)
O2 - BHO: Class - {CD9AD05C-ADCC-33B8-C399-551A6BED5208} - (no file)
O2 - BHO: Class - {F264CBC2-6A6B-CAFF-A88C-74D64BFD3120} - (no file)
O2 - BHO: Class - {E0DD7A95-1DF5-210A-C8D1-D9AB86BD9109} - (no file)
O2 - BHO: Class - {EDA38CC9-B865-78BD-C1A5-843DCC6547D9} - (no file)
O2 - BHO: Class - {7DB41198-E91C-381C-C2ED-D46A2E2D7897} - (no file)
O2 - BHO: Class - {888C9598-786C-D066-569E-38D86CC59405} - (no file)
O2 - BHO: Class - {CF175BA3-5E1E-3DA5-CADB-A16A0DD61E83} - (no file)
O2 - BHO: Class - {B055BABB-C120-ED06-3DBF-0CDC7FC381A4} - (no file)
O2 - BHO: Class - {A3B78959-8E14-4604-FD4A-C8737955C5B4} - (no file)
O2 - BHO: Class - {69B032C8-DE17-16EB-8C8C-2407CC242B33} - (no file)
O2 - BHO: Class - {AF451484-05EA-655A-4EE7-4B4F9A677388} - (no file)
O2 - BHO: Class - {5FFB1F51-9CF1-E42C-5147-BD3C21EC3978} - (no file)
O2 - BHO: Class - {64A70346-6FA4-EA8B-7DD1-5A4B17FBDA8B} - (no file)
O2 - BHO: Class - {9295B52A-C518-322A-AF1E-0EE13F821E57} - (no file)
O2 - BHO: Class - {04CABB8A-1C34-EAB8-A8CB-9FFB336540D4} - (no file)
O2 - BHO: Class - {017630A0-5651-24CC-5524-1D24D9B10396} - (no file)
O2 - BHO: Class - {BE19E8BB-F0BF-178F-378D-58D7C4786A75} - (no file)
O2 - BHO: Class - {42B7CFF8-A757-D31D-1B76-9B9401F53679} - (no file)
O2 - BHO: Class - {C18066D6-9B5A-BE5C-3992-F7285FC72E68} - (no file)
O2 - BHO: Class - {0A67AD31-B535-2C48-3648-712FB0FA5C0E} - (no file)
O2 - BHO: Class - {E75E8B2B-38F5-CA1C-2066-2D236A2C8500} - (no file)
O2 - BHO: Class - {38C7E16E-F3BB-831A-1230-372B1E0B4CDF} - (no file)
O2 - BHO: Class - {CE653595-207B-961B-10FD-D19B76E881A3} - (no file)
O2 - BHO: Class - {4CB9FBD7-715E-2372-4851-441F0E8F7435} - (no file)
O2 - BHO: Class - {FF731508-CD28-E0B0-3E85-0CF55FDE9FBA} - (no file)
O2 - BHO: Class - {35B54222-E335-F43C-2815-C458BE45A1E0} - (no file)
O2 - BHO: Class - {6CBA8D1A-FBFC-CF1D-D6A4-A213E2797E12} - (no file)
O2 - BHO: Class - {5E4F3BA8-8431-6734-64CD-822C3E86697B} - (no file)
O2 - BHO: Class - {57F26F3C-EAC4-2E5A-C232-B0372CADD7B7} - (no file)
O2 - BHO: Class - {F52E3C8B-8C95-5087-13C3-410DA6C1D6F7} - (no file)
O2 - BHO: Class - {D6BA699A-B568-C5DC-6026-CF56D6D3D065} - (no file)
O2 - BHO: Class - {30F97DA3-A733-2794-8262-29E0B6F53BA8} - (no file)
O2 - BHO: Class - {A417F704-18F6-554A-C18D-A5FE1A732089} - C:\WINDOWS\SYSTEM\ATLMP.DLL (file missing)
O2 - BHO: Class - {6CADCD05-3E4C-A3DE-2E2B-F4A39620442A} - (no file)
O2 - BHO: Class - {4B05C084-12D2-0FF6-D490-A0CF45280E50} - (no file)
O2 - BHO: Class - {4D53713C-C896-3F54-661B-DFBD9CC2FEB7} - (no file)
O2 - BHO: Class - {1C4EA8D2-2AB1-E54D-DA75-3B904D318D63} - (no file)
O2 - BHO: Class - {A14913FF-B4FA-1BDB-7092-5E13F56A4558} - (no file)
O2 - BHO: Class - {22557A9B-61EA-D4C0-F791-50C21260D6D7} - (no file)
O2 - BHO: Class - {6A680F02-2787-6BB4-4D22-877ABE11697B} - (no file)
O2 - BHO: Class - {C01397B5-886F-E2A8-2FDD-7B4758D1AE8E} - (no file)
O2 - BHO: Class - {F816BFC5-A7FF-B6F8-8568-9821DE00B600} - (no file)
O2 - BHO: Class - {C741BF98-EA31-4B67-1454-78CAB7B849F1} - (no file)
O2 - BHO: Class - {8D1F5508-6A6E-5EA4-B010-5E880FBC9119} - (no file)
O2 - BHO: Class - {85F175D1-7DD4-EDE0-8831-656AB0899A5E} - (no file)
O2 - BHO: Class - {9599FA72-449A-32E4-49DA-E9481AF3FDF6} - (no file)
O2 - BHO: Class - {FBF7402B-F568-97CC-0EFF-2D7ABD52E16B} - (no file)
O2 - BHO: Class - {B88F1746-E10C-1C5A-7958-71C47B49917B} - (no file)
O2 - BHO: Class - {95744E08-BCA9-7DC5-8D02-05BAA6A2035F} - (no file)
O2 - BHO: Class - {248F4AA0-2FBE-AC94-9343-FA3E8832F5B2} - (no file)
O2 - BHO: Class - {CD101537-32F8-4AA3-3402-3E75C232A431} - (no file)
O2 - BHO: Class - {8EAE86BD-6B04-05C6-17FA-AADFA985E2A9} - (no file)
O2 - BHO: Class - {C0AC4624-CFBA-83FE-10C0-14CD8F3E7E42} - (no file)
O2 - BHO: Class - {07B03A44-17FB-5E36-8A0E-EEF98B05B7C2} - (no file)
O2 - BHO: Class - {0DFBCB63-C236-4AA8-9785-4DB42DA67929} - (no file)
O2 - BHO: Class - {01789791-5DA5-E2E1-655E-B7C515B49D81} - (no file)
O2 - BHO: Class - {B99D4763-68F0-F15E-A65F-F547AA0D8494} - (no file)
O2 - BHO: Class - {BAEDEEAF-7A98-43DD-8F99-F4B27E2CE744} - (no file)
O2 - BHO: Class - {1C8FA365-0028-22A7-1770-71759411D32D} - (no file)
O2 - BHO: Class - {821F3C09-EF24-B7E3-091B-658D5989CCE2} - (no file)
O2 - BHO: Class - {6C6535B8-0E28-10F8-F18F-4A14786EF2AB} - (no file)
O2 - BHO: Class - {BB0401E6-61A6-0344-A30F-3DFA178D6F76} - (no file)
O2 - BHO: Class - {A3197D06-F6A2-44B0-558C-F55929D9A6A7} - (no file)
O2 - BHO: Class - {72094E9F-C897-41C5-5DC7-D3E74287417F} - (no file)
O2 - BHO: Class - {EF0E2DA9-45A3-A38E-FA6A-8A14544A8BE4} - (no file)
O2 - BHO: Class - {CC12F8F4-58FB-F424-BB38-E47C13960419} - (no file)
O2 - BHO: Class - {52FAE596-9F81-73C6-7434-6482541BA739} - (no file)
O2 - BHO: Class - {115E5C08-B81B-0D79-CD2A-7B758D540646} - (no file)
O2 - BHO: Class - {81A2631B-5BDA-D851-21DF-25C2E10A72BF} - (no file)
O2 - BHO: Class - {425869CC-CAF3-1D33-10A8-5A48605BB7DE} - (no file)
O2 - BHO: Class - {FA2CAADF-58EF-4535-C3CA-877FBD659904} - (no file)
O2 - BHO: Class - {B10C16EF-15FE-F0C0-4850-4D53713C3C89} - (no file)
O2 - BHO: Class - {F322AB0B-621C-11A3-B1AE-7A7FC2B40350} - (no file)
O2 - BHO: Class - {5DE0DA98-DFC9-EB4A-8C86-8F46A5116CA0} - (no file)
O2 - BHO: Class - {58D0E142-88E8-BFBD-FF8D-64516042C177} - (no file)
O2 - BHO: Class - {63093676-2125-8F3C-BA68-4915122AC394} - (no file)
O2 - BHO: Class - {3EDCBCC0-1EE6-5EB6-3F91-FBD6ED03FF6A} - (no file)
O2 - BHO: Class - {B4124C0E-0880-9F8D-0AE8-633A1896EC0A} - (no file)
O2 - BHO: Class - {6CC375DD-7113-96F5-02B0-46C88EF1D0F9} - (no file)
O2 - BHO: Class - {4FA150BA-1516-4F3B-3410-A9AC37E11963} - (no file)
O2 - BHO: Class - {F8E7FE88-E351-C487-7BAB-3137CB7B9E16} - (no file)
O2 - BHO: Class - {783B9D22-B9F2-EDFC-3D2B-4F6A3D1BCF1B} - (no file)
O2 - BHO: Class - {A522B6F5-3801-8D41-9C0B-CBCF169ADFBD} - (no file)
O2 - BHO: Class - {6AB04E20-C7FB-1976-45F0-4507AA485E64} - (no file)
O2 - BHO: Class - {D7B58010-ECB4-2AAF-C757-B2B10463170A} - (no file)
O2 - BHO: Class - {E958A464-791E-789E-2D64-372E06235F4B} - (no file)
O2 - BHO: Class - {79FA082E-37DA-B1F1-2C8A-8BA7625991BA} - (no file)
O2 - BHO: Class - {00595A1A-F3C3-0278-F9C8-F54F803375B2} - (no file)
O2 - BHO: Class - {181A0061-F7C6-14B8-A961-C99308819ACA} - C:\WINDOWS\NETOS.DLL (file missing)
O2 - BHO: Class - {1D628BF7-9593-0367-E97B-9B283E344A43} - (no file)
O2 - BHO: Class - {AC955C42-F100-D3E2-6044-64DA9B8397E4} - (no file)
O2 - BHO: Class - {18FB2A6A-F233-369E-6A36-6A30EE2D9B65} - (no file)
O2 - BHO: Class - {C78BA420-2354-CF49-9103-FA0AC2A41B6C} - (no file)
O2 - BHO: Class - {8D5586B2-DCD2-8699-92B1-AC9566B40380} - (no file)
O2 - BHO: Class - {47B847AB-7B7C-8A60-D55A-C91D2636BFE1} - (no file)
O2 - BHO: Class - {A0B1BB32-2A5E-E376-CBA9-120065D755BD} - (no file)
O2 - BHO: Class - {9676F784-5E6F-5C0B-13BE-ABEE4D4B4CB9} - (no file)
O2 - BHO: Class - {E6F47311-D791-8542-AC68-11F672B56742} - (no file)
O2 - BHO: Class - {315E32CB-195A-8536-EB55-7CF4CDA121F2} - (no file)
O2 - BHO: Class - {3AF8483F-BD21-516A-EF15-BDC199252DA8} - (no file)
O2 - BHO: Class - {E13EC6E2-FAFF-4340-FA0D-2D25A17AF4C9} - (no file)
O2 - BHO: Class - {C21F34AD-8BCB-3418-4B55-64D50A03A456} - (no file)
O2 - BHO: Class - {2036BC98-7BA8-6855-B291-B538AE628676} - (no file)
O2 - BHO: Class - {F3E905BD-8C63-2844-6318-F249B127F566} - (no file)
O2 - BHO: Class - {6EF0F034-C0DA-6CB6-18F6-2B49B1B81D7A} - (no file)
O2 - BHO: Class - {23DCE837-1D4F-9FB4-67DE-0FDD279FCB0A} - (no file)
O2 - BHO: Class - {741AF238-DF5F-5618-A710-E11515F22917} - (no file)
O2 - BHO: Class - {12899B2B-DA72-DAA3-33E7-18D55F24E119} - (no file)
O2 - BHO: Class - {C903452D-F242-5368-3A53-B53766C88F7C} - (no file)
O2 - BHO: Class - {DF681A51-5F05-1F39-036E-D1C704F8F568} - (no file)
O2 - BHO: Class - {035E8A5B-5C2F-6EFB-6764-3A4CE4128819} - (no file)
O2 - BHO: Class - {6EBA897A-5C75-75DA-CDFA-C2B258DF4528} - (no file)
O2 - BHO: Class - {822763E7-DD22-4292-C69E-C734249AC87F} - (no file)
O2 - BHO: Class - {E868E85F-8A2C-8F90-11C8-C70A8A47961A} - (no file)
O2 - BHO: Class - {F1D7DCBA-0130-C987-716B-EE88E16B0371} - (no file)
O2 - BHO: Class - {46EA962F-CB89-4FB2-770C-D9FC985088EC} - (no file)
O2 - BHO: Class - {D8F788D3-E5C2-624D-A50B-F83DC64696C6} - (no file)
O2 - BHO: Class - {F8505896-A3C1-F3D7-74A4-83C992AB83BC} - (no file)
O2 - BHO: Class - {5465646E-5FF3-A3F7-5FDF-E65961926291} - (no file)
O2 - BHO: Class - {40FA2355-DEA8-B02D-B2CC-10D5115F4DA8} - (no file)
O2 - BHO: Class - {FB065422-2BAE-4B02-3A20-B3E435E5AE93} - (no file)
O2 - BHO: Class - {D1DF8BA5-C70C-3D1B-E931-4D794ECE63C4} - (no file)
O2 - BHO: Class - {4CC44A9A-EFC8-A88E-7497-8165E50B60F8} - (no file)
O2 - BHO: Class - {0BB7F30D-737F-3A50-5B82-0A010CEDEC20} - (no file)
O2 - BHO: Class - {9585DCDF-2CF7-044C-850B-2CC0DBFD6F96} - (no file)
O2 - BHO: Class - {D3F3C489-044D-0060-A451-31243427C6A4} - (no file)
O2 - BHO: Class - {3366A681-63B6-7915-C2CB-2CC4EF3E7DB2} - (no file)
O2 - BHO: Class - {46101548-9DC9-0686-2B47-1789B33EB7A0} - (no file)
O2 - BHO: Class - {AFF44CFF-375F-DEC1-797C-3F61DFA427C0} - (no file)
O2 - BHO: Class - {87FBEFD0-E366-B118-8C2C-F9FEC1BF9788} - (no file)
O2 - BHO: Class - {AF9E47E5-DA5F-2D53-4855-D3DBCC67B6EF} - (no file)
O2 - BHO: Class - {88566BFE-D819-6D1E-73A2-F9AEBA646033} - (no file)
O2 - BHO: Class - {CDCEAEE6-B8F0-9082-5C28-658BC1669AD1} - (no file)
O2 - BHO: Class - {14846E89-B1EC-BE38-0CB7-1FDEFF59AC3D} - (no file)
O2 - BHO: Class - {5B52EF97-ABD3-9E08-6196-8F72B312FA3A} - (no file)
O2 - BHO: Class - {E2B62B52-F19C-7DFB-0CAF-0AA0AF9FF61D} - (no file)
O2 - BHO: Class - {49D8452D-C41B-3944-CE5A-DB4E1261D1C0} - (no file)
O2 - BHO: Class - {819785B4-B42D-6792-E08B-0E68E62598BF} - (no file)
O2 - BHO: Class - {388C5AAE-7B1C-DEF5-E0DC-78773C98BD55} - (no file)
O2 - BHO: Class - {AF0E6521-11D3-E910-5998-4ABEE4595D36} - (no file)
O2 - BHO: Class - {61CA2336-3B48-02B6-27B2-3E7FC80677FC} - (no file)
O2 - BHO: Class - {697B60D8-EE47-204A-CE89-896EB5426EB9} - (no file)
O2 - BHO: Class - {1D625988-E8BB-2679-4764-1226C8D3423F} - (no file)
O2 - BHO: Class - {F53A477A-7B1C-2657-7904-F2611BC95C35} - (no file)
O2 - BHO: Class - {E8995C66-89E4-D9B5-D987-CB89F2AF8546} - (no file)
O2 - BHO: Class - {81B99B40-1BE4-463E-324F-9B7AB83DEDBC} - (no file)
O2 - BHO: Class - {D880E649-6073-8D01-04CC-3F321F6D56A5} - (no file)
O2 - BHO: Class - {6ECF2865-6757-E089-B1FF-8266EC5C3D33} - (no file)
O2 - BHO: Class - {B3203551-0B4E-FCF6-9876-7B853EEBCC3F} - (no file)
O2 - BHO: Class - {199282EC-E1E7-785F-8E93-283E6306E881} - (no file)
O2 - BHO: Class - {3D2ACA16-3F1C-BF97-6524-0F7072E1E895} - (no file)
O2 - BHO: Class - {DA37E403-1C6D-477E-2601-BECE6AB2B1DE} - (no file)
O2 - BHO: Class - {B1A3D9B6-B2A9-FD0E-4B07-24BD86D3B9E0} - (no file)
O2 - BHO: Class - {8D1F9E37-0A0E-42B8-D6EE-2A8A3257FE9F} - (no file)
O2 - BHO: Class - {B7DA37CD-D568-926E-B35E-D257DCC266EC} - (no file)
O2 - BHO: Class - {C8E09CC6-5143-0AEA-9C0D-D61F50C10ABA} - (no file)
O2 - BHO: Class - {91ACFEB4-563E-7346-F46B-988AF1C8F8C5} - (no file)
O2 - BHO: Class - {D7603A0A-83FE-6A34-7598-CA392AC679FB} - (no file)
O2 - BHO: Class - {10E2E07E-D539-9FEE-C3AF-DB4D7AF9F2AD} - (no file)
O2 - BHO: Class - {B89E4008-4828-AC3A-CAF5-00B70ABA441F} - (no file)
O2 - BHO: Class - {CC9908BF-DB26-5D28-B257-C15D770AF166} - (no file)
O2 - BHO: Class - {AC3D0FC9-6E91-197E-8D58-83C94A8325D0} - (no file)
O2 - BHO: Class - {AEB90959-0093-AADA-C479-6B1F6B9B24D6} - (no file)
O2 - BHO: Class - {08A3A1A2-58D3-719F-6F78-E5B86B32FB8F} - (no file)
O2 - BHO: Class - {77B4FD3D-5199-ECFF-B1BD-83EC2149F1D1} - (no file)
O2 - BHO: Class - {377FC94D-A085-2B89-B543-C2E033EE98D3} - (no file)
O2 - BHO: Class - {20904407-F1D7-A5E0-D318-ADCADE1537F1} - (no file)
O2 - BHO: Class - {7CDEF27B-3E79-6C65-25A5-15182309D6F7} - (no file)
O2 - BHO: Class - {AF540F8F-C53A-04B1-430B-1F30D452ECE7} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [USBMMKBD] usbmmkbd.exe
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [AccessRampMonitor] "C:\Program Files\EarthLink 5.0\FastLane\ARMon32.exe"
O4 - HKLM\..\Run: [Dcfssvc] c:\windows\System32\Drivers\dcfssvc.exe
O4 - HKLM\..\Run: [SandIcon] C:\ImageMate CompactFlash USB\SandIcon.Exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [HPScanPatch] C:\WINDOWS\SYSTEM\HPScanFix.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Encompass_ENCMONTR] C:\Program Files\Easy Internet\ENCMONTR.EXE
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~1\MICROS~5\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .3dml: C:\Program Files\Flatland\NProver.dll
O12 - Plugin for .mts: C:\Program Files\MetaCreations\MetaStream\npmetastream.dll
O16 - DPF: {ABE92375-8159-4759-A4B2-BF29E11CAAC3} (HearMe Microphone Configuration Wizard) - http://www.hearme.com/products/vp/config/plugins/evpcfg.cab
O16 - DPF: {1FA643B0-F90E-11D3-BA0B-00C04F384A92} (HomeTsrCtrl Class) - http://image.excite.com/sputnik/dynacat_up…ationchange.dll
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {17163BB4-107E-11D4-9B76-006097DF2317} (EABootStrap Class) - http://www.ea.com/downloads/games/common/b…trap/iegils.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pot5_x.cab
O16 - DPF: Yahoo! Klondike Solitaire - http://yog55.games.scd.yahoo.com/yog/y/ks11_x.cab
O16 - DPF: Yahoo! Freecell Solitaire - http://yog55.games.scd.yahoo.com/yog/y/fs9_x.cab
O16 - DPF: Yahoo! Towers 2.0 - http://download.games.yahoo.com/games/clients/y/ywt0_x.cab
O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/games/clients/y/fltt0_x.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/MTSInstall…w.viewpoint.com
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://64.27.100.83/activex/AxisCamControl.ocx
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {40C83AF8-FEA7-4A6A-A470-431EE84A0886} -
O18 - Protocol: stash - {44D81A5B-F195-11D2-A3D7-000086335B27} - C:\PROGRAM FILES\EARTHLINK 5.0\STASH100.DLL

Concrete101

Post #2August 28, 2004, 7:11 PM UTC

I reran HJT with almost all of the programs in msconfig starting. I couldn't start a few of them b/c I kept getting BSOD's. This log includes a file called stars.exe that I am not sure about as well as some others that the first log did not include. I am about ready to give up and format the hard drive, but if it can be fixed I would much rather fix it… thanks!

Logfile of HijackThis v1.98.2
Scan saved at 2:09:54 PM, on 8/28/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\SYSTEM\D3CT32.EXE
C:\WINDOWS\SYSTEM\NTOF32.EXE
C:\WINDOWS\WINJX32.EXE
C:\WINDOWS\MSZI32.EXE
C:\WINDOWS\SYSQS.EXE
C:\WINDOWS\APINP32.EXE
C:\WINDOWS\SDKNN.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SDKEO32.EXE
C:\WINDOWS\SYSTEM\IERY32.EXE
C:\WINDOWS\APPST32.EXE
C:\WINDOWS\SYSTEM\NTOU.EXE
C:\WINDOWS\SYSTEM\NTBF32.EXE
C:\WINDOWS\CRIL32.EXE
C:\WINDOWS\SYSTEM\MFCXB32.EXE
C:\WINDOWS\WINJZ32.EXE
C:\WINDOWS\SYSTEM\NETQO.EXE
C:\WINDOWS\SYSTEM\APIMF32.EXE
C:\WINDOWS\APPAK.EXE
C:\WINDOWS\JAVAFD.EXE
C:\WINDOWS\SYSTEM\MSPQ32.EXE
C:\WINDOWS\APIRP.EXE
C:\WINDOWS\ATLGN.EXE
C:\WINDOWS\SYSTEM\IPMC32.EXE
C:\WINDOWS\CRHA32.EXE
C:\WINDOWS\IPRA32.EXE
C:\WINDOWS\SYSTEM\APIBC.EXE
C:\WINDOWS\CRWY32.EXE
C:\WINDOWS\SYSTEM\D3YZ32.EXE
C:\WINDOWS\APIQR.EXE
C:\WINDOWS\SYSTEM\SYSEV32.EXE
C:\WINDOWS\IPJY.EXE
C:\WINDOWS\SYSTEM\SDKXH32.EXE
C:\WINDOWS\SYSTEM\NTNK.EXE
C:\WINDOWS\SDKRM32.EXE
C:\WINDOWS\SYSTEM\SYSFF32.EXE
C:\WINDOWS\SYSTEM\MFCVC32.EXE
C:\WINDOWS\NETAU.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\IPUF32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\WINDOWS\SYSTEM\USBMMKBD.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\DCFSSVC.EXE
C:\IMAGEMATE COMPACTFLASH USB\SANDICON.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\SUPPORT.COM\BIN\TGCMD.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\EARTHLINK 5.0\UPDATEMGR.EXE
C:\PROGRAM FILES\EARTHLINK 5.0\CONMGR.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\IOLO\COMMON\TASK AGENT\TASK_AGENT.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGMAIN.EXE
C:\PROGRAM FILES\WINDOWS MEDIA COMPONENTS\ENCODER\WMENCAGT.EXE
C:\PROGRAM FILES\LOGITECH\WINGMAN PROFILER\LWPEVNTM.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\WINDOWS\SYSTEM\MRTMNGR.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGBHP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\MY DOCUMENTS\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = www.comcast.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\uqwyd.dll/sp.html#22776
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\uqwyd.dll/sp.html#22776
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast High-Speed Internet
R3 - Default URLSearchHook is missing
F1 - win.ini: run=STARS.EXE
O2 - BHO: . - {D34F08C5-4F18-477c-86CB-1A9BEECFE37B} - C:\WINDOWS\APPLICATION DATA\IEIW\IEIW.DLL (file missing)
O2 - BHO: Class - {074499F1-0343-0402-5C16-564761BCBCAE} - C:\WINDOWS\APIBD32.DLL (file missing)
O2 - BHO: Class - {18C2D8F3-3A19-7C0B-2569-4E16C8930B32} - (no file)
O2 - BHO: Class - {6BFC5BA7-FCB6-8F85-8198-1DE00B600B82} - C:\WINDOWS\SYSLA32.DLL (file missing)
O2 - BHO: Class - {DE46322D-5659-ABB6-BA45-EC180411C66A} - (no file)
O2 - BHO: Class - {64CBE75A-CB86-08A5-7CD8-BAD3180D977B} - (no file)
O2 - BHO: Class - {CC82AF69-E143-F017-B227-313BCBE47DBC} - (no file)
O2 - BHO: Class - {40125A23-CDA6-5BCC-7F4F-738DFD6F3935} - (no file)
O2 - BHO: Class - {149C875D-61DC-6453-2883-DD1C7FC427B1} - (no file)
O2 - BHO: Class - {7E3BCB9F-794D-5966-B3C0-BFF81D010A91} - (no file)
O2 - BHO: Class - {0408BD9F-FBE0-566C-EBDA-DBC97DA7E144} - (no file)
O2 - BHO: Class - {9D5088E9-4C96-33DD-92A8-827FF17FB2F0} - (no file)
O2 - BHO: Class - {1AF1EDC8-3CFC-DED1-ECF0-4529CEDED9B1} - (no file)
O2 - BHO: Class - {F75F0D6E-B293-75B7-CEB9-9C175F169FEC} - (no file)
O2 - BHO: Class - {9E8D30B9-0868-64A8-9289-FF52F6770580} - (no file)
O2 - BHO: Class - {627786BB-6448-3092-7B9F-EC2C95F20347} - (no file)
O2 - BHO: Class - {4477089F-D0FD-6D46-A6A1-4D7F5704A5DA} - (no file)
O2 - BHO: Class - {563BADF4-B92C-E9EE-8603-7AC32CC25C50} - (no file)
O2 - BHO: Class - {BD9C151F-3013-8741-FC74-A2A2A38B755A} - (no file)
O2 - BHO: Class - {5D8C38B8-233D-824F-9C0F-A3EBB2B4824A} - (no file)
O2 - BHO: Class - {BB4E38F6-B5AF-49A8-626C-EDA4037FCA0E} - (no file)
O2 - BHO: Class - {D24D5A4B-6272-0822-F819-5B24D8289AB7} - (no file)
O2 - BHO: Class - {01B8230F-FFA5-630F-4267-7F2880D80B57} - (no file)
O2 - BHO: Class - {B8758CB9-31CB-EDCD-9E5A-307A8A0E5851} - (no file)
O2 - BHO: Class - {1989CDA8-1898-9E66-F3AF-1C7B4EFF9DBD} - (no file)
O2 - BHO: Class - {0317AD98-9368-D476-5B88-92ABD481A6D3} - (no file)
O2 - BHO: Class - {7A8D02D8-4565-6846-5AA3-A38A39B92077} - (no file)
O2 - BHO: Class - {9FDEC173-21F7-980A-124F-9D55C74F77FE} - (no file)
O2 - BHO: Class - {DF52A427-A94E-256A-7FF7-A0060FEDB100} - (no file)
O2 - BHO: Class - {4E6A738F-C5A0-7BB2-24BD-5AF24A66A2EE} - (no file)
O2 - BHO: Class - {652D794B-763F-83DD-FAFE-5ACFEB85DA45} - (no file)
O2 - BHO: Class - {58C78D32-033C-933B-522A-8CA01511980B} - (no file)
O2 - BHO: Class - {05C385B6-7FC4-E925-8D56-57E4883FEB91} - (no file)
O2 - BHO: Class - {802085E0-C94D-7B6C-CB7A-22D80A7FF68D} - (no file)
O2 - BHO: Class - {C436CBC1-830F-15E4-B4E2-9CB792F1F829} - (no file)
O2 - BHO: Class - {04D016B1-AA23-A53B-C6CC-B2AD566EC16B} - (no file)
O2 - BHO: Class - {9901F3E7-FA3D-4625-F19B-9AC4EDCBCF55} - (no file)
O2 - BHO: Class - {FC80064B-2F8B-2037-9399-180091F90881} - (no file)
O2 - BHO: Class - {8DFB07E3-83F5-F99B-D4F8-197DE07FEC0D} - (no file)
O2 - BHO: Class - {51789E6A-A27D-CF01-30CD-9C054F4543DB} - (no file)
O2 - BHO: Class - {D81F5E8E-8F3D-2F74-74FD-27E2D77060FA} - (no file)
O2 - BHO: Class - {AC6CC2B2-D566-C16B-1F0F-1195433D1C9B} - (no file)
O2 - BHO: Class - {9037343E-6802-1EC2-D767-E57CC2D9D83C} - (no file)
O2 - BHO: Class - {0CEEC41A-54F9-F1D2-230D-B4B044ECC202} - (no file)
O2 - BHO: Class - {63C2F5DC-BFB1-5647-D8C6-FBF8BC23512E} - (no file)
O2 - BHO: Class - {0CABB4B2-7CC4-FF48-22B3-63D4125B83BC} - (no file)
O2 - BHO: Class - {63537F02-C964-FFA3-CC12-00AA0CDF6EE8} - (no file)
O2 - BHO: Class - {18BEE32C-C398-276F-1D26-8D6F48551400} - (no file)
O2 - BHO: Class - {D9DCC50A-EE62-0287-E4FA-5C092B0FC97E} - (no file)
O2 - BHO: Class - {741A224A-0928-455C-96D0-0B9E0AF542C3} - (no file)
O2 - BHO: Class - {D6FD6C4E-109B-B511-05C7-7FBA99E2FD23} - (no file)
O2 - BHO: Class - {CC3A504B-41DE-5145-BA59-63AEDFBC89C3} - (no file)
O2 - BHO: Class - {9B46EFA0-A8CD-6ED9-3D1F-B1FF1A5FC359} - (no file)
O2 - BHO: Class - {EAA21319-8AF3-391F-D65B-F8DC9A1BE340} - (no file)
O2 - BHO: Class - {66D1AFF7-CEAE-AAF4-2822-1F2F71F1736B} - (no file)
O2 - BHO: Class - {41CA0D50-B030-ABB5-0AC7-148792B633A3} - (no file)
O2 - BHO: Class - {C38A3B8F-04D2-90AB-A5A9-6FA9905AC8D3} - (no file)
O2 - BHO: Class - {97E62626-570E-FA07-68DE-16B260404260} - (no file)
O2 - BHO: Class - {5C19DA3A-627A-8F16-BA65-30D8566CB9E4} - (no file)
O2 - BHO: Class - {02B28394-B7A1-BCE7-CE66-3E95D102B062} - (no file)
O2 - BHO: Class - {64B4EF1A-E644-FC93-33AB-4DAD4D7BB624} - (no file)
O2 - BHO: Class - {C958C8A4-30A7-201D-83AF-44BF99D8F86F} - (no file)
O2 - BHO: Class - {1EA8A49C-F9B6-DABF-B1F2-346BEFD60CC5} - (no file)
O2 - BHO: Class - {BB64CF1B-EDD6-054C-3EC4-EDBA6BF43D9B} - (no file)
O2 - BHO: Class - {617282ED-954E-7A0F-D30A-D2686C8DD1A3} - (no file)
O2 - BHO: Class - {F791AC21-2903-6D60-4286-29118C6728F0} - (no file)
O2 - BHO: Class - {CDEABA9C-2D8F-60CE-21DE-88E91DD57D91} - (no file)
O2 - BHO: Class - {01D0432D-FBCC-F789-8B13-8EDFBFBFA172} - (no file)
O2 - BHO: Class - {1819A5B6-F3D0-0680-3146-E5B7D824ED78} - (no file)
O2 - BHO: Class - {F4D52D76-AF45-0DC7-ECE3-8E5A184A66C4} - (no file)
O2 - BHO: Class - {9116D85D-E2F2-BAD5-61EC-1FA681CC5B9F} - (no file)
O2 - BHO: Class - {9535F540-005D-9820-0E09-6C69B59692D6} - (no file)
O2 - BHO: Class - {F0D9B410-3C4F-707C-2E2D-529E64AA2118} - (no file)
O2 - BHO: Class - {DA2E1456-592A-59FB-D2A9-711A767623D9} - (no file)
O2 - BHO: Class - {8B77D6D5-97E2-05BD-09EC-4D7AED9AEE8B} - (no file)
O2 - BHO: Class - {E0CF02B7-3F02-CE62-D7DB-9CC5B8B345A0} - (no file)
O2 - BHO: Class - {E7117565-F52F-8D6F-1513-6EDC956AA6C8} - (no file)
O2 - BHO: Class - {CA6FA2D1-89CD-8318-899E-68F3AF31C7B4} - (no file)
O2 - BHO: Class - {E19DA520-53EA-5009-D3DC-43F570405B92} - (no file)
O2 - BHO: Class - {24D87AB5-7115-66D2-F97A-234319B569B2} - (no file)
O2 - BHO: Class - {990738A7-3E4B-EF17-0D61-F77B6D347DF9} - (no file)
O2 - BHO: Class - {D8C2F069-EC8F-C36A-95C6-E43772BEB4D8} - (no file)
O2 - BHO: Class - {4F6F8D33-2FB2-9856-EA3F-7FBF992C18DB} - (no file)
O2 - BHO: Class - {A3D28485-72FC-E462-4A5F-18C7402122C0} - (no file)
O2 - BHO: Class - {1A6BB2E8-6802-540F-D30B-7C2EB249A684} - (no file)
O2 - BHO: Class - {881A5C23-96F5-9D86-B285-C0FC40116992} - (no file)
O2 - BHO: Class - {1538E7F0-E0B7-1772-9132-BA5EAF5F0739} - (no file)
O2 - BHO: Class - {22A70AE8-41C8-92B2-0678-EB2550E33400} - (no file)
O2 - BHO: Class - {8A009E39-EE7F-08A1-04FA-99D9DB5C5E33} - (no file)
O2 - BHO: Class - {7DD57E5C-3F90-DF50-DB25-D3F77D75BB22} - (no file)
O2 - BHO: Class - {F818172B-804E-575B-D99F-56B31516B05B} - (no file)
O2 - BHO: Class - {EC242DA4-E210-A44F-433D-92D6C9292A65} - (no file)
O2 - BHO: Class - {2072FEC1-6AA3-15DB-05C5-76EB8F16852A} - (no file)
O2 - BHO: Class - {C07AC68E-55E4-DF79-704E-EA6537118C8B} - (no file)
O2 - BHO: Class - {9EFD529D-46F8-2CEA-E958-34254F447995} - (no file)
O2 - BHO: Class - {A46D4DB5-B0A0-3266-CF6F-8A74F80D5E37} - (no file)
O2 - BHO: Class - {93818BC9-D266-1EB9-EDFE-1C682654EE66} - (no file)
O2 - BHO: Class - {EE095897-CF57-F9F1-0CB8-85D815B6038C} - (no file)
O2 - BHO: Class - {43F180D7-BEB2-9D82-0058-EBDBF43E7CDD} - (no file)
O2 - BHO: Class - {97D10E10-8197-55F4-F520-EC1143F3F330} - (no file)
O2 - BHO: Class - {69B41F32-4AC6-1E89-433B-C41C1477D07C} - (no file)
O2 - BHO: Class - {8704DF49-0E57-AB82-9B58-3C3BAEDCDFC9} - (no file)
O2 - BHO: Class - {4EB58EB3-0FD5-6011-4DCD-7A25720A2623} - (no file)
O2 - BHO: Class - {BE1DB07F-DB34-A204-FC73-DF8C7F8D4FA5} - (no file)
O2 - BHO: Class - {1962378B-88F9-50CC-A804-D2474D43DFCF} - (no file)
O2 - BHO: Class - {13F2712D-5E27-26F9-F75A-8572AC68DF97} - (no file)
O2 - BHO: Class - {81C6CDEF-FD32-1223-1C37-9FDEDA7FC97D} - C:\WINDOWS\SYSTEM\JAVARS32.DLL (file missing)
O2 - BHO: Class - {E6202B83-5AD0-51E9-E709-31CBE37410FF} - (no file)
O2 - BHO: Class - {61A38BCD-289B-C661-39C1-95C426EDDAA6} - (no file)
O2 - BHO: Class - {0B480D7D-6240-7BB5-B32C-EE5F2407D9D8} - (no file)
O2 - BHO: Class - {4809A400-3431-B657-55A0-9397DB42AA45} - (no file)
O2 - BHO: Class - {CAEA8CD1-03BD-C448-732E-0309C92E677F} - (no file)
O2 - BHO: Class - {C5C0C117-8698-0B33-7901-61D0E51A5E5F} - (no file)
O2 - BHO: Class - {426292FE-A477-2883-00B4-6595750FDC34} - (no file)
O2 - BHO: Class - {C2CC6805-C621-10C0-ABD7-9EF0E2DA9945} - (no file)
O2 - BHO: Class - {3732FBFA-6A47-1C64-47E4-B6B9A9902850} - (no file)
O2 - BHO: Class - {B85CCDC0-7927-26BB-423F-64D6261EF49F} - (no file)
O2 - BHO: Class - {DB10DB35-D3E5-1249-9B78-4ABD815D81BC} - (no file)
O2 - BHO: Class - {EF4B1BBF-9691-E915-81F6-F75B7DD313AA} - (no file)
O2 - BHO: Class - {21E4D24D-BFDF-C114-094D-146BCC336764} - (no file)
O2 - BHO: Class - {675AF256-41F8-4BD4-7DEE-B1C88DEE276E} - (no file)
O2 - BHO: Class - {A5AC7366-36E2-7400-BED8-41EC50B36BEC} - (no file)
O2 - BHO: Class - {449C0B31-56AA-FBFD-29EE-928758958E00} - (no file)
O2 - BHO: Class - {A0C00E56-D86B-6A64-8741-677C3D02CBAB} - (no file)
O2 - BHO: Class - {B3445E12-83ED-4794-941D-CC18315D0931} - (no file)
O2 - BHO: Class - {EB7DA5C2-D352-BABD-3A3C-1B6EFE88DDDF} - (no file)
O2 - BHO: Class - {7AF168F5-335D-EAEE-007B-C6675F542A72} - (no file)
O2 - BHO: Class - {D46BD9A7-F0D9-207D-083C-6CC3D1044EE8} - (no file)
O2 - BHO: Class - {DB4FEFF3-7F23-D1EC-252C-4321FF47BA66} - (no file)
O2 - BHO: Class - {FD4B1325-2263-732C-0B29-211D1DF47852} - (no file)
O2 - BHO: Class - {78520B76-8A0D-19C0-A7E5-C18D062F80E4} - (no file)
O2 - BHO: Class - {3D1C8A9C-5E91-9A97-1012-77BADF6D1BE0} - (no file)
O2 - BHO: Class - {77CFFB1B-9A9A-5B55-F605-56A98395ABB5} - (no file)
O2 - BHO: Class - {9928825D-F511-512E-6A16-25709CC2A8EB} - (no file)
O2 - BHO: Class - {C152FD32-565F-4149-CA19-48489A67658E} - (no file)
O2 - BHO: Class - {E0914B1D-7314-458C-5DE1-9A712289F02D} - (no file)
O2 - BHO: Class - {AA6A2FD0-24A6-C684-432B-75625618A175} - (no file)
O2 - BHO: Class - {66EDF9AC-64E1-604D-EADE-7B853B8F23FF} - (no file)
O2 - BHO: Class - {B6DF9E38-BCAE-E1DB-480E-57F04350F351} - (no file)
O2 - BHO: Class - {B7B31397-93FC-5ABD-5E72-3C4626580399} - (no file)
O2 - BHO: Class - {1A2FCB78-BCDE-411A-2F9F-AE7FEB55F327} - (no file)
O2 - BHO: Class - {38EC14CC-C206-2CC6-4F50-92CDF97CCE41} - (no file)
O2 - BHO: Class - {C7207E99-C734-FBE2-99CF-E85DDABEE378} - (no file)
O2 - BHO: Class - {E7FEE8CD-D4D3-8260-44A7-67DD4A71E995} - (no file)
O2 - BHO: Class - {83F0FCBE-4DAA-1E5C-EBA7-EDCE90589E43} - (no file)
O2 - BHO: Class - {B02D3C44-5088-4292-8040-CB902C2FAA78} - (no file)
O2 - BHO: Class - {14B347DC-397D-8A0C-EE38-EDC9B92A99F9} - (no file)
O2 - BHO: Class - {058680EF-4C0E-9D88-7204-989DB27DFD59} - (no file)
O2 - BHO: Class - {7DA97ABD-8EF4-D978-CF33-169AC9529E45} - (no file)
O2 - BHO: Class - {714A75BA-793A-AD03-032C-D32FE3D02CDF} - (no file)
O2 - BHO: Class - {2FCAB757-46CB-EDBA-2F82-3DEE958BC1B1} - (no file)
O2 - BHO: Class - {6EF255E8-4410-1C10-85DA-56626C5EB80D} - (no file)
O2 - BHO: Class - {D16792AD-2C2E-4FCB-872C-0EE369121171} - (no file)
O2 - BHO: Class - {A9B5AF4E-E897-1C45-D86D-9A80E109CAE7} - (no file)
O2 - BHO: Class - {5F54EB56-ABB3-1965-610E-A3DF515F7AB9} - (no file)
O2 - BHO: Class - {E09F949B-33ED-E152-6852-2FECABDB4D1C} - (no file)
O2 - BHO: Class - {D8848232-823F-FF9A-E716-1D542C15E2D8} - (no file)
O2 - BHO: Class - {8E0C3EB6-1569-6F50-9A73-3C96164869C2} - (no file)
O2 - BHO: Class - {282032FC-C6CA-9E36-F009-345A15203683} - (no file)
O2 - BHO: Class - {32011C7F-3430-3AF2-DD1F-0049908763E5} - (no file)
O2 - BHO: Class - {5FF6A832-AA1A-6E3C-B35A-D7932B0283C0} - (no file)
O2 - BHO: Class - {1680C9F9-C963-3F25-F481-EBF1DF741AE8} - (no file)
O2 - BHO: Class - {93546DF7-38BA-CC3C-AB8F-9A9913EAAB54} - (no file)
O2 - BHO: Class - {480B26C9-5493-2FD8-25D1-17A24B1257DA} - (no file)
O2 - BHO: Class - {CDD324D5-6EFC-0661-1A20-52A7083C3D03} - (no file)
O2 - BHO: Class - {696F68F7-8C7E-81A7-13DB-A8A270F3F004} - (no file)
O2 - BHO: Class - {CDDABFD3-90AF-3505-3DF4-F8DF446C5C4F} - (no file)
O2 - BHO: Class - {2536C943-1153-AD4C-300A-B4B7FF0DA8BA} - (no file)
O2 - BHO: Class - {9686D485-C0B1-26EE-772B-CB572D82340F} - (no file)
O2 - BHO: Class - {A0904A77-BFA4-970B-9630-8D199EFD55E9} - (no file)
O2 - BHO: Class - {0E10B003-516B-A5FE-961E-ECF25BE3662B} - (no file)
O2 - BHO: Class - {0A18BB06-C986-D04C-2511-A8C95904EF00} - (no file)
O2 - BHO: Class - {6AB07E42-F1C5-F8BA-44B0-6F818F3C7711} - (no file)
O2 - BHO: Class - {6BE5C394-AA25-266E-D794-88256569CD9D} - (no file)
O2 - BHO: Class - {0B0399F6-33DB-AD00-5AD0-5FC7F1F760D4} - (no file)
O2 - BHO: Class - {E7FCD046-7EFA-EC37-9814-C95DD24FA232} - (no file)
O2 - BHO: Class - {BE0B92E6-FE88-CE97-83A2-80F270CDA5CF} - (no file)
O2 - BHO: Class - {368F3DF4-1A51-3E71-538B-6755A0F289FE} - (no file)
O2 - BHO: Class - {BBC7B4F8-5F23-FEFF-C138-FC39C47B93BF} - (no file)
O2 - BHO: Class - {646E2E0B-4014-CADD-B572-242AA038B2F1} - (no file)
O2 - BHO: Class - {63F1A1BF-6292-25D0-A3BA-12D30D817406} - (no file)
O2 - BHO: Class - {9255F260-AD35-16A6-43F3-901D1F3AC6B2} - (no file)
O2 - BHO: Class - {A490913E-404C-4851-6AFE-B571204BBED4} - (no file)
O2 - BHO: Class - {255C3BAE-1994-8D48-D6F5-CC4350B435DC} - (no file)
O2 - BHO: Class - {140D792F-75A2-4E42-7091-0866E3AE621A} - (no file)
O2 - BHO: Class - {9E454339-F6F3-DE2D-DBD8-5229FD0589FE} - (no file)
O2 - BHO: Class - {2C144E07-0F4D-6EC7-B4B1-B4C6479560E5} - (no file)
O2 - BHO: Class - {3A00AA22-FEC1-FC9A-10CE-46012D4BF6B2} - (no file)
O2 - BHO: Class - {E1DD5397-C1A6-DBD8-1D0F-705866B2510B} - (no file)
O2 - BHO: Class - {9038016A-E91F-5E95-0053-598A505661C7} - (no file)
O2 - BHO: Class - {FA4788F1-4822-A986-4D3E-44B435C19A9C} - (no file)
O2 - BHO: Class - {E4F821BD-35F0-0925-EABA-086BEE404D61} - (no file)
O2 - BHO: Class - {95AF3145-72CF-F3FC-766B-19712121F763} - (no file)
O2 - BHO: Class - {DBEDA669-9CE6-0853-9ABD-154843F0DA5B} - (no file)
O2 - BHO: Class - {51F242CE-3A79-A2F0-3B9D-50A94CC69C30} - (no file)
O2 - BHO: Class - {44C8A3A3-D8E9-D794-648F-B24BC95436BE} - (no file)
O2 - BHO: Class - {3930AD0E-407E-0742-7BAA-CE5F22867714} - (no file)
O2 - BHO: Class - {4779094B-C704-B856-11A4-52CD133E6199} - (no file)
O2 - BHO: Class - {A645334F-FEE6-4734-366C-BD7C0DB2B254} - (no file)
O2 - BHO: Class - {6EB9121A-3517-F0F4-C72C-70B7B624BBD3} - (no file)
O2 - BHO: Class - {A5016BFA-AF2F-38FC-EB59-79C9ECE9256B} - (no file)
O2 - BHO: Class - {74D49E20-C013-4035-3457-1B073899BF8D} - C:\WINDOWS\WINLN32.DLL (file missing)
O2 - BHO: Class - {3E739557-9D68-522B-C5F0-2630AEE4E243} - (no file)
O2 - BHO: Class - {CD9AD05C-ADCC-33B8-C399-551A6BED5208} - (no file)
O2 - BHO: Class - {F264CBC2-6A6B-CAFF-A88C-74D64BFD3120} - (no file)
O2 - BHO: Class - {E0DD7A95-1DF5-210A-C8D1-D9AB86BD9109} - (no file)
O2 - BHO: Class - {EDA38CC9-B865-78BD-C1A5-843DCC6547D9} - (no file)
O2 - BHO: Class - {7DB41198-E91C-381C-C2ED-D46A2E2D7897} - (no file)
O2 - BHO: Class - {888C9598-786C-D066-569E-38D86CC59405} - (no file)
O2 - BHO: Class - {CF175BA3-5E1E-3DA5-CADB-A16A0DD61E83} - (no file)
O2 - BHO: Class - {B055BABB-C120-ED06-3DBF-0CDC7FC381A4} - (no file)
O2 - BHO: Class - {A3B78959-8E14-4604-FD4A-C8737955C5B4} - (no file)
O2 - BHO: Class - {69B032C8-DE17-16EB-8C8C-2407CC242B33} - (no file)
O2 - BHO: Class - {AF451484-05EA-655A-4EE7-4B4F9A677388} - (no file)
O2 - BHO: Class - {5FFB1F51-9CF1-E42C-5147-BD3C21EC3978} - (no file)
O2 - BHO: Class - {64A70346-6FA4-EA8B-7DD1-5A4B17FBDA8B} - (no file)
O2 - BHO: Class - {9295B52A-C518-322A-AF1E-0EE13F821E57} - (no file)
O2 - BHO: Class - {04CABB8A-1C34-EAB8-A8CB-9FFB336540D4} - (no file)
O2 - BHO: Class - {017630A0-5651-24CC-5524-1D24D9B10396} - (no file)
O2 - BHO: Class - {BE19E8BB-F0BF-178F-378D-58D7C4786A75} - (no file)
O2 - BHO: Class - {42B7CFF8-A757-D31D-1B76-9B9401F53679} - (no file)
O2 - BHO: Class - {C18066D6-9B5A-BE5C-3992-F7285FC72E68} - (no file)
O2 - BHO: Class - {0A67AD31-B535-2C48-3648-712FB0FA5C0E} - (no file)
O2 - BHO: Class - {E75E8B2B-38F5-CA1C-2066-2D236A2C8500} - (no file)
O2 - BHO: Class - {38C7E16E-F3BB-831A-1230-372B1E0B4CDF} - (no file)
O2 - BHO: Class - {CE653595-207B-961B-10FD-D19B76E881A3} - (no file)
O2 - BHO: Class - {4CB9FBD7-715E-2372-4851-441F0E8F7435} - (no file)
O2 - BHO: Class - {FF731508-CD28-E0B0-3E85-0CF55FDE9FBA} - (no file)
O2 - BHO: Class - {35B54222-E335-F43C-2815-C458BE45A1E0} - (no file)
O2 - BHO: Class - {6CBA8D1A-FBFC-CF1D-D6A4-A213E2797E12} - (no file)
O2 - BHO: Class - {5E4F3BA8-8431-6734-64CD-822C3E86697B} - (no file)
O2 - BHO: Class - {57F26F3C-EAC4-2E5A-C232-B0372CADD7B7} - (no file)
O2 - BHO: Class - {F52E3C8B-8C95-5087-13C3-410DA6C1D6F7} - (no file)
O2 - BHO: Class - {D6BA699A-B568-C5DC-6026-CF56D6D3D065} - (no file)
O2 - BHO: Class - {30F97DA3-A733-2794-8262-29E0B6F53BA8} - (no file)
O2 - BHO: Class - {A417F704-18F6-554A-C18D-A5FE1A732089} - C:\WINDOWS\SYSTEM\ATLMP.DLL (file missing)
O2 - BHO: Class - {6CADCD05-3E4C-A3DE-2E2B-F4A39620442A} - (no file)
O2 - BHO: Class - {4B05C084-12D2-0FF6-D490-A0CF45280E50} - (no file)
O2 - BHO: Class - {4D53713C-C896-3F54-661B-DFBD9CC2FEB7} - (no file)
O2 - BHO: Class - {1C4EA8D2-2AB1-E54D-DA75-3B904D318D63} - (no file)
O2 - BHO: Class - {A14913FF-B4FA-1BDB-7092-5E13F56A4558} - (no file)
O2 - BHO: Class - {22557A9B-61EA-D4C0-F791-50C21260D6D7} - (no file)
O2 - BHO: Class - {6A680F02-2787-6BB4-4D22-877ABE11697B} - (no file)
O2 - BHO: Class - {C01397B5-886F-E2A8-2FDD-7B4758D1AE8E} - (no file)
O2 - BHO: Class - {F816BFC5-A7FF-B6F8-8568-9821DE00B600} - (no file)
O2 - BHO: Class - {C741BF98-EA31-4B67-1454-78CAB7B849F1} - (no file)
O2 - BHO: Class - {8D1F5508-6A6E-5EA4-B010-5E880FBC9119} - (no file)
O2 - BHO: Class - {85F175D1-7DD4-EDE0-8831-656AB0899A5E} - (no file)
O2 - BHO: Class - {9599FA72-449A-32E4-49DA-E9481AF3FDF6} - (no file)
O2 - BHO: Class - {FBF7402B-F568-97CC-0EFF-2D7ABD52E16B} - (no file)
O2 - BHO: Class - {B88F1746-E10C-1C5A-7958-71C47B49917B} - (no file)
O2 - BHO: Class - {95744E08-BCA9-7DC5-8D02-05BAA6A2035F} - (no file)
O2 - BHO: Class - {248F4AA0-2FBE-AC94-9343-FA3E8832F5B2} - (no file)
O2 - BHO: Class - {CD101537-32F8-4AA3-3402-3E75C232A431} - (no file)
O2 - BHO: Class - {8EAE86BD-6B04-05C6-17FA-AADFA985E2A9} - (no file)
O2 - BHO: Class - {C0AC4624-CFBA-83FE-10C0-14CD8F3E7E42} - (no file)
O2 - BHO: Class - {07B03A44-17FB-5E36-8A0E-EEF98B05B7C2} - (no file)
O2 - BHO: Class - {0DFBCB63-C236-4AA8-9785-4DB42DA67929} - (no file)
O2 - BHO: Class - {01789791-5DA5-E2E1-655E-B7C515B49D81} - (no file)
O2 - BHO: Class - {B99D4763-68F0-F15E-A65F-F547AA0D8494} - (no file)
O2 - BHO: Class - {BAEDEEAF-7A98-43DD-8F99-F4B27E2CE744} - (no file)
O2 - BHO: Class - {1C8FA365-0028-22A7-1770-71759411D32D} - (no file)
O2 - BHO: Class - {821F3C09-EF24-B7E3-091B-658D5989CCE2} - (no file)
O2 - BHO: Class - {6C6535B8-0E28-10F8-F18F-4A14786EF2AB} - (no file)
O2 - BHO: Class - {BB0401E6-61A6-0344-A30F-3DFA178D6F76} - (no file)
O2 - BHO: Class - {A3197D06-F6A2-44B0-558C-F55929D9A6A7} - (no file)
O2 - BHO: Class - {72094E9F-C897-41C5-5DC7-D3E74287417F} - (no file)
O2 - BHO: Class - {EF0E2DA9-45A3-A38E-FA6A-8A14544A8BE4} - (no file)
O2 - BHO: Class - {CC12F8F4-58FB-F424-BB38-E47C13960419} - (no file)
O2 - BHO: Class - {52FAE596-9F81-73C6-7434-6482541BA739} - (no file)
O2 - BHO: Class - {115E5C08-B81B-0D79-CD2A-7B758D540646} - (no file)
O2 - BHO: Class - {81A2631B-5BDA-D851-21DF-25C2E10A72BF} - (no file)
O2 - BHO: Class - {425869CC-CAF3-1D33-10A8-5A48605BB7DE} - (no file)
O2 - BHO: Class - {FA2CAADF-58EF-4535-C3CA-877FBD659904} - (no file)
O2 - BHO: Class - {B10C16EF-15FE-F0C0-4850-4D53713C3C89} - (no file)
O2 - BHO: Class - {F322AB0B-621C-11A3-B1AE-7A7FC2B40350} - (no file)
O2 - BHO: Class - {5DE0DA98-DFC9-EB4A-8C86-8F46A5116CA0} - (no file)
O2 - BHO: Class - {58D0E142-88E8-BFBD-FF8D-64516042C177} - (no file)
O2 - BHO: Class - {63093676-2125-8F3C-BA68-4915122AC394} - (no file)
O2 - BHO: Class - {3EDCBCC0-1EE6-5EB6-3F91-FBD6ED03FF6A} - (no file)
O2 - BHO: Class - {B4124C0E-0880-9F8D-0AE8-633A1896EC0A} - (no file)
O2 - BHO: Class - {6CC375DD-7113-96F5-02B0-46C88EF1D0F9} - (no file)
O2 - BHO: Class - {4FA150BA-1516-4F3B-3410-A9AC37E11963} - (no file)
O2 - BHO: Class - {F8E7FE88-E351-C487-7BAB-3137CB7B9E16} - (no file)
O2 - BHO: Class - {783B9D22-B9F2-EDFC-3D2B-4F6A3D1BCF1B} - (no file)
O2 - BHO: Class - {A522B6F5-3801-8D41-9C0B-CBCF169ADFBD} - (no file)
O2 - BHO: Class - {6AB04E20-C7FB-1976-45F0-4507AA485E64} - (no file)
O2 - BHO: Class - {D7B58010-ECB4-2AAF-C757-B2B10463170A} - (no file)
O2 - BHO: Class - {E958A464-791E-789E-2D64-372E06235F4B} - (no file)
O2 - BHO: Class - {79FA082E-37DA-B1F1-2C8A-8BA7625991BA} - (no file)
O2 - BHO: Class - {00595A1A-F3C3-0278-F9C8-F54F803375B2} - (no file)
O2 - BHO: Class - {181A0061-F7C6-14B8-A961-C99308819ACA} - C:\WINDOWS\NETOS.DLL (file missing)
O2 - BHO: Class - {1D628BF7-9593-0367-E97B-9B283E344A43} - (no file)
O2 - BHO: Class - {AC955C42-F100-D3E2-6044-64DA9B8397E4} - (no file)
O2 - BHO: Class - {18FB2A6A-F233-369E-6A36-6A30EE2D9B65} - (no file)
O2 - BHO: Class - {C78BA420-2354-CF49-9103-FA0AC2A41B6C} - (no file)
O2 - BHO: Class - {8D5586B2-DCD2-8699-92B1-AC9566B40380} - (no file)
O2 - BHO: Class - {47B847AB-7B7C-8A60-D55A-C91D2636BFE1} - (no file)
O2 - BHO: Class - {A0B1BB32-2A5E-E376-CBA9-120065D755BD} - (no file)
O2 - BHO: Class - {9676F784-5E6F-5C0B-13BE-ABEE4D4B4CB9} - (no file)
O2 - BHO: Class - {E6F47311-D791-8542-AC68-11F672B56742} - (no file)
O2 - BHO: Class - {315E32CB-195A-8536-EB55-7CF4CDA121F2} - (no file)
O2 - BHO: Class - {3AF8483F-BD21-516A-EF15-BDC199252DA8} - (no file)
O2 - BHO: Class - {E13EC6E2-FAFF-4340-FA0D-2D25A17AF4C9} - (no file)
O2 - BHO: Class - {C21F34AD-8BCB-3418-4B55-64D50A03A456} - (no file)
O2 - BHO: Class - {2036BC98-7BA8-6855-B291-B538AE628676} - (no file)
O2 - BHO: Class - {F3E905BD-8C63-2844-6318-F249B127F566} - (no file)
O2 - BHO: Class - {6EF0F034-C0DA-6CB6-18F6-2B49B1B81D7A} - (no file)
O2 - BHO: Class - {23DCE837-1D4F-9FB4-67DE-0FDD279FCB0A} - (no file)
O2 - BHO: Class - {741AF238-DF5F-5618-A710-E11515F22917} - (no file)
O2 - BHO: Class - {12899B2B-DA72-DAA3-33E7-18D55F24E119} - (no file)
O2 - BHO: Class - {C903452D-F242-5368-3A53-B53766C88F7C} - (no file)
O2 - BHO: Class - {DF681A51-5F05-1F39-036E-D1C704F8F568} - (no file)
O2 - BHO: Class - {035E8A5B-5C2F-6EFB-6764-3A4CE4128819} - (no file)
O2 - BHO: Class - {6EBA897A-5C75-75DA-CDFA-C2B258DF4528} - (no file)
O2 - BHO: Class - {822763E7-DD22-4292-C69E-C734249AC87F} - (no file)
O2 - BHO: Class - {E868E85F-8A2C-8F90-11C8-C70A8A47961A} - (no file)
O2 - BHO: Class - {F1D7DCBA-0130-C987-716B-EE88E16B0371} - (no file)
O2 - BHO: Class - {46EA962F-CB89-4FB2-770C-D9FC985088EC} - (no file)
O2 - BHO: Class - {D8F788D3-E5C2-624D-A50B-F83DC64696C6} - (no file)
O2 - BHO: Class - {F8505896-A3C1-F3D7-74A4-83C992AB83BC} - (no file)
O2 - BHO: Class - {5465646E-5FF3-A3F7-5FDF-E65961926291} - (no file)
O2 - BHO: Class - {40FA2355-DEA8-B02D-B2CC-10D5115F4DA8} - (no file)
O2 - BHO: Class - {FB065422-2BAE-4B02-3A20-B3E435E5AE93} - (no file)
O2 - BHO: Class - {D1DF8BA5-C70C-3D1B-E931-4D794ECE63C4} - (no file)
O2 - BHO: Class - {4CC44A9A-EFC8-A88E-7497-8165E50B60F8} - (no file)
O2 - BHO: Class - {0BB7F30D-737F-3A50-5B82-0A010CEDEC20} - (no file)
O2 - BHO: Class - {9585DCDF-2CF7-044C-850B-2CC0DBFD6F96} - (no file)
O2 - BHO: Class - {D3F3C489-044D-0060-A451-31243427C6A4} - (no file)
O2 - BHO: Class - {3366A681-63B6-7915-C2CB-2CC4EF3E7DB2} - (no file)
O2 - BHO: Class - {46101548-9DC9-0686-2B47-1789B33EB7A0} - (no file)
O2 - BHO: Class - {AFF44CFF-375F-DEC1-797C-3F61DFA427C0} - (no file)
O2 - BHO: Class - {87FBEFD0-E366-B118-8C2C-F9FEC1BF9788} - (no file)
O2 - BHO: Class - {AF9E47E5-DA5F-2D53-4855-D3DBCC67B6EF} - (no file)
O2 - BHO: Class - {88566BFE-D819-6D1E-73A2-F9AEBA646033} - (no file)
O2 - BHO: Class - {CDCEAEE6-B8F0-9082-5C28-658BC1669AD1} - (no file)
O2 - BHO: Class - {14846E89-B1EC-BE38-0CB7-1FDEFF59AC3D} - (no file)
O2 - BHO: Class - {5B52EF97-ABD3-9E08-6196-8F72B312FA3A} - (no file)
O2 - BHO: Class - {E2B62B52-F19C-7DFB-0CAF-0AA0AF9FF61D} - (no file)
O2 - BHO: Class - {49D8452D-C41B-3944-CE5A-DB4E1261D1C0} - (no file)
O2 - BHO: Class - {819785B4-B42D-6792-E08B-0E68E62598BF} - (no file)
O2 - BHO: Class - {388C5AAE-7B1C-DEF5-E0DC-78773C98BD55} - (no file)
O2 - BHO: Class - {AF0E6521-11D3-E910-5998-4ABEE4595D36} - (no file)
O2 - BHO: Class - {61CA2336-3B48-02B6-27B2-3E7FC80677FC} - (no file)
O2 - BHO: Class - {697B60D8-EE47-204A-CE89-896EB5426EB9} - (no file)
O2 - BHO: Class - {1D625988-E8BB-2679-4764-1226C8D3423F} - (no file)
O2 - BHO: Class - {F53A477A-7B1C-2657-7904-F2611BC95C35} - (no file)
O2 - BHO: Class - {E8995C66-89E4-D9B5-D987-CB89F2AF8546} - (no file)
O2 - BHO: Class - {81B99B40-1BE4-463E-324F-9B7AB83DEDBC} - (no file)
O2 - BHO: Class - {D880E649-6073-8D01-04CC-3F321F6D56A5} - (no file)
O2 - BHO: Class - {6ECF2865-6757-E089-B1FF-8266EC5C3D33} - (no file)
O2 - BHO: Class - {B3203551-0B4E-FCF6-9876-7B853EEBCC3F} - (no file)
O2 - BHO: Class - {199282EC-E1E7-785F-8E93-283E6306E881} - (no file)
O2 - BHO: Class - {3D2ACA16-3F1C-BF97-6524-0F7072E1E895} - (no file)
O2 - BHO: Class - {DA37E403-1C6D-477E-2601-BECE6AB2B1DE} - (no file)
O2 - BHO: Class - {B1A3D9B6-B2A9-FD0E-4B07-24BD86D3B9E0} - (no file)
O2 - BHO: Class - {8D1F9E37-0A0E-42B8-D6EE-2A8A3257FE9F} - (no file)
O2 - BHO: Class - {B7DA37CD-D568-926E-B35E-D257DCC266EC} - (no file)
O2 - BHO: Class - {C8E09CC6-5143-0AEA-9C0D-D61F50C10ABA} - (no file)
O2 - BHO: Class - {91ACFEB4-563E-7346-F46B-988AF1C8F8C5} - (no file)
O2 - BHO: Class - {D7603A0A-83FE-6A34-7598-CA392AC679FB} - (no file)
O2 - BHO: Class - {10E2E07E-D539-9FEE-C3AF-DB4D7AF9F2AD} - (no file)
O2 - BHO: Class - {B89E4008-4828-AC3A-CAF5-00B70ABA441F} - (no file)
O2 - BHO: Class - {CC9908BF-DB26-5D28-B257-C15D770AF166} - (no file)
O2 - BHO: Class - {AC3D0FC9-6E91-197E-8D58-83C94A8325D0} - (no file)
O2 - BHO: Class - {AEB90959-0093-AADA-C479-6B1F6B9B24D6} - (no file)
O2 - BHO: Class - {08A3A1A2-58D3-719F-6F78-E5B86B32FB8F} - (no file)
O2 - BHO: Class - {77B4FD3D-5199-ECFF-B1BD-83EC2149F1D1} - (no file)
O2 - BHO: Class - {377FC94D-A085-2B89-B543-C2E033EE98D3} - (no file)
O2 - BHO: Class - {20904407-F1D7-A5E0-D318-ADCADE1537F1} - (no file)
O2 - BHO: Class - {7CDEF27B-3E79-6C65-25A5-15182309D6F7} - (no file)
O2 - BHO: Class - {AF540F8F-C53A-04B1-430B-1F30D452ECE7} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (file missing)
O2 - BHO: Class - {CE5C452C-058A-9C91-01C2-9E4F99DB5962} - C:\WINDOWS\D3XI.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [USBMMKBD] usbmmkbd.exe
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [Dcfssvc] c:\windows\System32\Drivers\dcfssvc.exe
O4 - HKLM\..\Run: [SandIcon] C:\ImageMate CompactFlash USB\SandIcon.Exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [HPScanPatch] C:\WINDOWS\SYSTEM\HPScanFix.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [UpdateMgr.exe] "C:\PROGRAM FILES\EARTHLINK 5.0\UPDATEMGR.EXE" -/NOCM
O4 - HKLM\..\Run: [ConMgr.exe] "C:\PROGRAM FILES\EARTHLINK 5.0\CONMGR.EXE"
O4 - HKLM\..\Run: [Lwinst Run Profiler] C:\Program Files\Logitech\WingMan Profiler\Lwtest.exe /detect /quiet /launch "C:\Program Files\Logitech\WingMan Profiler\Lwpevntm.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [Excite Platform] C:\PROGRA~1\EXCITE\PLATFORM\ExLaunch.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [myCIO.com Splash] C:\WINDOWS\myCIO\VScan\Splash.exe
O4 - HKLM\..\Run: [myCIO.com ASaP] C:\WINDOWS\myCIO\Agent\myagttry.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Encompass_ENCMONTR] C:\Program Files\Easy Internet\ENCMONTR.EXE
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - HKCU\..\Run: [iolo Task Agent] C:\Program Files\iolo\Common\Task Agent\task_agent.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Startup: Encoder Agent.lnk = C:\Program Files\Windows Media Components\Encoder\WMENCAGT.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~1\MICROS~5\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .3dml: C:\Program Files\Flatland\NProver.dll
O12 - Plugin for .mts: C:\Program Files\MetaCreations\MetaStream\npmetastream.dll
O16 - DPF: {ABE92375-8159-4759-A4B2-BF29E11CAAC3} (HearMe Microphone Configuration Wizard) - http://www.hearme.com/products/vp/config/plugins/evpcfg.cab
O16 - DPF: {1FA643B0-F90E-11D3-BA0B-00C04F384A92} (HomeTsrCtrl Class) - http://image.excite.com/sputnik/dynacat_up…ationchange.dll
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {17163BB4-107E-11D4-9B76-006097DF2317} (EABootStrap Class) - http://www.ea.com/downloads/games/common/b…trap/iegils.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pot5_x.cab
O16 - DPF: Yahoo! Klondike Solitaire - http://yog55.games.scd.yahoo.com/yog/y/ks11_x.cab
O16 - DPF: Yahoo! Freecell Solitaire - http://yog55.games.scd.yahoo.com/yog/y/fs9_x.cab
O16 - DPF: Yahoo! Towers 2.0 - http://download.games.yahoo.com/games/clients/y/ywt0_x.cab
O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/games/clients/y/fltt0_x.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/MTSInstall…w.viewpoint.com
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://64.27.100.83/activex/AxisCamControl.ocx
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {40C83AF8-FEA7-4A6A-A470-431EE84A0886} -
O18 - Protocol: stash - {44D81A5B-F195-11D2-A3D7-000086335B27} - C:\PROGRAM FILES\EARTHLINK 5.0\STASH100.DLL

little eagle

Post #3August 28, 2004, 11:57 PM UTC last edited August 29, 2004, 12:00 AM UTC

Please download GetService.zip

Extract it to a new folder in the desktop. Double click on the Getservice.bat file to run it. This will create and open a text file named getservice.txt in the same folder. It will then open getservice.txt for you.
getservice.txt will list all active Services. Copy and paste the contents of getservice.txt in your next reply here.
Along with another Hijack this log.

From the moment you post your list, until you see a detailed fix written up, DO NOT reboot your system or log off. If you do, the service will have changed and the fix provided will not work

Concrete101

Post #4August 29, 2004, 3:10 AM UTC

When I try and run the getservice.bat file I receive the following error message: Error Starting Program The PSSERVICE.EXE file is linked to missing export NETAPI32.DLL:NetServerEnum Also, for some reason notepad closes shortly after opening…

little eagle

Post #5August 29, 2004, 4:12 AM UTC last edited August 29, 2004, 4:13 AM UTC

Download About:buster from http://downloads.subratam.org/AboutBuster.zip and unzip it to your desktop.
Then download CWShredder

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.

Click here for instructions on how to boot into safe mode.

Boot up in safe mode.

Run CWShredder to clean up clicking "FIX" to have it remove all it finds.
Run About:buster, click OK, Start, and OK again to start the scan. Let it scan and fix everything it finds. It should give you a log at this point, copy it to a text file and save it.

Then Reboot your computer in normal mode, and post the log from About:buster and a new log from Hijackthis.

Concrete101

Post #6August 29, 2004, 11:32 AM UTC

I ran in safe mode cws, and then about:buster. CWS removed one file, cws.searchx. The computer seems to be somewhat better since running the two programs, I am still getting some bho warnings, and notepad still closes on its own.

– Scan 1 —————————
About:Buster Version 3.0
Reference List : 15

ADS not scanned System(FAT)
Removed! : C:\WINDOWS\zflxoc.dat
Removed! : C:\WINDOWS\lbznv.dat
Removed! : C:\WINDOWS\rgdlim.dat
Removed! : C:\WINDOWS\kgwqlp.dat
Removed! : C:\WINDOWS\cril32.exe
Removed! : C:\WINDOWS\ntvy32.exe
Removed! : C:\WINDOWS\javarw.exe
Removed! : C:\WINDOWS\mfcvo32.exe
Removed! : C:\WINDOWS\sdkre.exe
Removed! : C:\WINDOWS\addod32.exe
Removed! : C:\WINDOWS\crwy32.exe
Removed! : C:\WINDOWS\ipjy.exe
Removed! : C:\WINDOWS\sdkrm32.exe
Removed! : C:\WINDOWS\ifizvr.dat
Removed! : C:\WINDOWS\afbmpc.dat
Removed! : C:\WINDOWS\tylsre.dat
Removed! : C:\WINDOWS\ipjw.exe
Removed! : C:\WINDOWS\winjx32.exe
Removed! : C:\WINDOWS\ieyx.exe
Removed! : C:\WINDOWS\d3sc.exe
Removed! : C:\WINDOWS\iplz32.exe
Removed! : C:\WINDOWS\netau.exe
Removed! : C:\WINDOWS\sysqs.exe
Removed! : C:\WINDOWS\vlyye.dat
Removed! : C:\WINDOWS\mszi32.exe
Removed! : C:\WINDOWS\ornlmc.dat
Removed! : C:\WINDOWS\sdknn.exe
Removed! : C:\WINDOWS\apinp32.exe
Removed! : C:\WINDOWS\sdkeo32.exe
Removed! : C:\WINDOWS\appst32.exe
Removed! : C:\WINDOWS\sysam32.exe
Removed! : C:\WINDOWS\crvu.exe
Removed! : C:\WINDOWS\winjz32.exe
Removed! : C:\WINDOWS\sysbg32.exe
Removed! : C:\WINDOWS\ntli.exe
Removed! : C:\WINDOWS\sdktu.exe
Removed! : C:\WINDOWS\appak.exe
Removed! : C:\WINDOWS\javafd.exe
Removed! : C:\WINDOWS\apirp.exe
Removed! : C:\WINDOWS\atlgn.exe
Removed! : C:\WINDOWS\optupv.dat
Removed! : C:\WINDOWS\crha32.exe
Removed! : C:\WINDOWS\ipra32.exe
Removed! : C:\WINDOWS\apiqr.exe
Removed! : C:\WINDOWS\javarz32.exe
Removed! : C:\WINDOWS\rjbry.dat
Removed! : C:\WINDOWS\apprz32.exe
Removed! : C:\WINDOWS\SYSTEM\d3ys.exe
Removed! : C:\WINDOWS\SYSTEM\jqgqj.dat
Removed! : C:\WINDOWS\SYSTEM\ntou.exe
Removed! : C:\WINDOWS\SYSTEM\javawc32.exe
Removed! : C:\WINDOWS\SYSTEM\ntdz32.exe
Removed! : C:\WINDOWS\SYSTEM\iexq.exe
Removed! : C:\WINDOWS\SYSTEM\ntbf32.exe
Removed! : C:\WINDOWS\SYSTEM\apibc.exe
Removed! : C:\WINDOWS\SYSTEM\sysev32.exe
Removed! : C:\WINDOWS\SYSTEM\d3yz32.exe
Removed! : C:\WINDOWS\SYSTEM\mfcvc32.exe
Removed! : C:\WINDOWS\SYSTEM\ntnk.exe
Removed! : C:\WINDOWS\SYSTEM\sysrf.exe
Removed! : C:\WINDOWS\SYSTEM\javanv32.exe
Removed! : C:\WINDOWS\SYSTEM\nethy32.exe
Removed! : C:\WINDOWS\SYSTEM\sdkxh32.exe
Removed! : C:\WINDOWS\SYSTEM\ipde32.exe
Removed! : C:\WINDOWS\SYSTEM\iecv.exe
Removed! : C:\WINDOWS\SYSTEM\ievd.exe
Removed! : C:\WINDOWS\SYSTEM\d3uu.exe
Removed! : C:\WINDOWS\SYSTEM\ipuf32.exe
Removed! : C:\WINDOWS\SYSTEM\ieau32.exe
Removed! : C:\WINDOWS\SYSTEM\msdh32.exe
Removed! : C:\WINDOWS\SYSTEM\d3ct32.exe
Removed! : C:\WINDOWS\SYSTEM\ntof32.exe
Removed! : C:\WINDOWS\SYSTEM\nmjlg.dat
Removed! : C:\WINDOWS\SYSTEM\iery32.exe
Removed! : C:\WINDOWS\SYSTEM\crmo.exe
Removed! : C:\WINDOWS\SYSTEM\sdkhs32.exe
Removed! : C:\WINDOWS\SYSTEM\mfcxb32.exe
Removed! : C:\WINDOWS\SYSTEM\winsk32.exe
Removed! : C:\WINDOWS\SYSTEM\apimf32.exe
Removed! : C:\WINDOWS\SYSTEM\netun.exe
Removed! : C:\WINDOWS\SYSTEM\atlvx.exe
Removed! : C:\WINDOWS\SYSTEM\netqo.exe
Removed! : C:\WINDOWS\SYSTEM\mspq32.exe
Removed! : C:\WINDOWS\SYSTEM\euqwy.dat
Removed! : C:\WINDOWS\SYSTEM\ipmc32.exe
Removed! : C:\WINDOWS\SYSTEM\sysff32.exe
Removed! : C:\WINDOWS\SYSTEM\bsdti.dat
Removed! : C:\WINDOWS\SYSTEM\ohqyb.dat
Removed! : C:\WINDOWS\SYSTEM\ziiev.dat
Attempted Clean Of Temp folder.
Removed Uninstall Key (HSA)
Removed Uninstall Key (SE)
Removed Uninstall Key (SW)
Pages Reset… Done!

and here is the new hjt log…

Logfile of HijackThis v1.98.2
Scan saved at 6:29:56 AM, on 8/29/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SYSTEM\CRCU32.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\WINDOWS\SYSTEM\USBMMKBD.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\DCFSSVC.EXE
C:\IMAGEMATE COMPACTFLASH USB\SANDICON.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\PROGRAM FILES\SUPPORT.COM\BIN\TGCMD.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\EARTHLINK 5.0\UPDATEMGR.EXE
C:\PROGRAM FILES\EARTHLINK 5.0\CONMGR.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\IOLO\COMMON\TASK AGENT\TASK_AGENT.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGMAIN.EXE
C:\PROGRAM FILES\WINDOWS MEDIA COMPONENTS\ENCODER\WMENCAGT.EXE
C:\PROGRAM FILES\LOGITECH\WINGMAN PROFILER\LWPEVNTM.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\MRTMNGR.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGBHP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\MY DOCUMENTS\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = www.comcast.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\jbrys.dll/sp.html#22776
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\jbrys.dll/sp.html#22776
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast High-Speed Internet
R3 - Default URLSearchHook is missing
F1 - win.ini: run=STARS.EXE
O2 - BHO: . - {D34F08C5-4F18-477c-86CB-1A9BEECFE37B} - C:\WINDOWS\APPLICATION DATA\IEIW\IEIW.DLL (file missing)
O2 - BHO: Class - {074499F1-0343-0402-5C16-564761BCBCAE} - C:\WINDOWS\APIBD32.DLL (file missing)
O2 - BHO: Class - {6BFC5BA7-FCB6-8F85-8198-1DE00B600B82} - C:\WINDOWS\SYSLA32.DLL (file missing)
O2 - BHO: Class - {DE46322D-5659-ABB6-BA45-EC180411C66A} - (no file)
O2 - BHO: Class - {64CBE75A-CB86-08A5-7CD8-BAD3180D977B} - (no file)
O2 - BHO: Class - {CC82AF69-E143-F017-B227-313BCBE47DBC} - (no file)
O2 - BHO: Class - {40125A23-CDA6-5BCC-7F4F-738DFD6F3935} - (no file)
O2 - BHO: Class - {149C875D-61DC-6453-2883-DD1C7FC427B1} - (no file)
O2 - BHO: Class - {7E3BCB9F-794D-5966-B3C0-BFF81D010A91} - (no file)
O2 - BHO: Class - {0408BD9F-FBE0-566C-EBDA-DBC97DA7E144} - (no file)
O2 - BHO: Class - {9D5088E9-4C96-33DD-92A8-827FF17FB2F0} - (no file)
O2 - BHO: Class - {1AF1EDC8-3CFC-DED1-ECF0-4529CEDED9B1} - (no file)
O2 - BHO: Class - {F75F0D6E-B293-75B7-CEB9-9C175F169FEC} - (no file)
O2 - BHO: Class - {9E8D30B9-0868-64A8-9289-FF52F6770580} - (no file)
O2 - BHO: Class - {627786BB-6448-3092-7B9F-EC2C95F20347} - C:\WINDOWS\APIFA32.DLL (file missing)
O2 - BHO: Class - {4477089F-D0FD-6D46-A6A1-4D7F5704A5DA} - (no file)
O2 - BHO: Class - {563BADF4-B92C-E9EE-8603-7AC32CC25C50} - (no file)
O2 - BHO: Class - {BD9C151F-3013-8741-FC74-A2A2A38B755A} - (no file)
O2 - BHO: Class - {5D8C38B8-233D-824F-9C0F-A3EBB2B4824A} - (no file)
O2 - BHO: Class - {BB4E38F6-B5AF-49A8-626C-EDA4037FCA0E} - (no file)
O2 - BHO: Class - {D24D5A4B-6272-0822-F819-5B24D8289AB7} - (no file)
O2 - BHO: Class - {01B8230F-FFA5-630F-4267-7F2880D80B57} - (no file)
O2 - BHO: Class - {B8758CB9-31CB-EDCD-9E5A-307A8A0E5851} - (no file)
O2 - BHO: Class - {1989CDA8-1898-9E66-F3AF-1C7B4EFF9DBD} - (no file)
O2 - BHO: Class - {0317AD98-9368-D476-5B88-92ABD481A6D3} - (no file)
O2 - BHO: Class - {7A8D02D8-4565-6846-5AA3-A38A39B92077} - (no file)
O2 - BHO: Class - {9FDEC173-21F7-980A-124F-9D55C74F77FE} - (no file)
O2 - BHO: Class - {DF52A427-A94E-256A-7FF7-A0060FEDB100} - (no file)
O2 - BHO: Class - {4E6A738F-C5A0-7BB2-24BD-5AF24A66A2EE} - (no file)
O2 - BHO: Class - {652D794B-763F-83DD-FAFE-5ACFEB85DA45} - (no file)
O2 - BHO: Class - {58C78D32-033C-933B-522A-8CA01511980B} - (no file)
O2 - BHO: Class - {05C385B6-7FC4-E925-8D56-57E4883FEB91} - (no file)
O2 - BHO: Class - {802085E0-C94D-7B6C-CB7A-22D80A7FF68D} - (no file)
O2 - BHO: Class - {C436CBC1-830F-15E4-B4E2-9CB792F1F829} - (no file)
O2 - BHO: Class - {04D016B1-AA23-A53B-C6CC-B2AD566EC16B} - (no file)
O2 - BHO: Class - {9901F3E7-FA3D-4625-F19B-9AC4EDCBCF55} - (no file)
O2 - BHO: Class - {FC80064B-2F8B-2037-9399-180091F90881} - (no file)
O2 - BHO: Class - {8DFB07E3-83F5-F99B-D4F8-197DE07FEC0D} - (no file)
O2 - BHO: Class - {51789E6A-A27D-CF01-30CD-9C054F4543DB} - (no file)
O2 - BHO: Class - {D81F5E8E-8F3D-2F74-74FD-27E2D77060FA} - (no file)
O2 - BHO: Class - {AC6CC2B2-D566-C16B-1F0F-1195433D1C9B} - (no file)
O2 - BHO: Class - {9037343E-6802-1EC2-D767-E57CC2D9D83C} - (no file)
O2 - BHO: Class - {0CEEC41A-54F9-F1D2-230D-B4B044ECC202} - (no file)
O2 - BHO: Class - {63C2F5DC-BFB1-5647-D8C6-FBF8BC23512E} - C:\WINDOWS\MSLX32.DLL (file missing)
O2 - BHO: Class - {0CABB4B2-7CC4-FF48-22B3-63D4125B83BC} - (no file)
O2 - BHO: Class - {63537F02-C964-FFA3-CC12-00AA0CDF6EE8} - (no file)
O2 - BHO: Class - {18BEE32C-C398-276F-1D26-8D6F48551400} - (no file)
O2 - BHO: Class - {D9DCC50A-EE62-0287-E4FA-5C092B0FC97E} - (no file)
O2 - BHO: Class - {741A224A-0928-455C-96D0-0B9E0AF542C3} - (no file)
O2 - BHO: Class - {D6FD6C4E-109B-B511-05C7-7FBA99E2FD23} - (no file)
O2 - BHO: Class - {CC3A504B-41DE-5145-BA59-63AEDFBC89C3} - (no file)
O2 - BHO: Class - {9B46EFA0-A8CD-6ED9-3D1F-B1FF1A5FC359} - (no file)
O2 - BHO: Class - {EAA21319-8AF3-391F-D65B-F8DC9A1BE340} - (no file)
O2 - BHO: Class - {66D1AFF7-CEAE-AAF4-2822-1F2F71F1736B} - (no file)
O2 - BHO: Class - {41CA0D50-B030-ABB5-0AC7-148792B633A3} - (no file)
O2 - BHO: Class - {C38A3B8F-04D2-90AB-A5A9-6FA9905AC8D3} - (no file)
O2 - BHO: Class - {97E62626-570E-FA07-68DE-16B260404260} - (no file)
O2 - BHO: Class - {5C19DA3A-627A-8F16-BA65-30D8566CB9E4} - (no file)
O2 - BHO: Class - {02B28394-B7A1-BCE7-CE66-3E95D102B062} - (no file)
O2 - BHO: Class - {64B4EF1A-E644-FC93-33AB-4DAD4D7BB624} - (no file)
O2 - BHO: Class - {C958C8A4-30A7-201D-83AF-44BF99D8F86F} - (no file)
O2 - BHO: Class - {1EA8A49C-F9B6-DABF-B1F2-346BEFD60CC5} - (no file)
O2 - BHO: Class - {BB64CF1B-EDD6-054C-3EC4-EDBA6BF43D9B} - (no file)
O2 - BHO: Class - {617282ED-954E-7A0F-D30A-D2686C8DD1A3} - (no file)
O2 - BHO: Class - {F791AC21-2903-6D60-4286-29118C6728F0} - (no file)
O2 - BHO: Class - {CDEABA9C-2D8F-60CE-21DE-88E91DD57D91} - (no file)
O2 - BHO: Class - {01D0432D-FBCC-F789-8B13-8EDFBFBFA172} - (no file)
O2 - BHO: Class - {1819A5B6-F3D0-0680-3146-E5B7D824ED78} - (no file)
O2 - BHO: Class - {F4D52D76-AF45-0DC7-ECE3-8E5A184A66C4} - (no file)
O2 - BHO: Class - {9116D85D-E2F2-BAD5-61EC-1FA681CC5B9F} - (no file)
O2 - BHO: Class - {9535F540-005D-9820-0E09-6C69B59692D6} - (no file)
O2 - BHO: Class - {F0D9B410-3C4F-707C-2E2D-529E64AA2118} - (no file)
O2 - BHO: Class - {DA2E1456-592A-59FB-D2A9-711A767623D9} - (no file)
O2 - BHO: Class - {8B77D6D5-97E2-05BD-09EC-4D7AED9AEE8B} - (no file)
O2 - BHO: Class - {E0CF02B7-3F02-CE62-D7DB-9CC5B8B345A0} - (no file)
O2 - BHO: Class - {E7117565-F52F-8D6F-1513-6EDC956AA6C8} - (no file)
O2 - BHO: Class - {CA6FA2D1-89CD-8318-899E-68F3AF31C7B4} - (no file)
O2 - BHO: Class - {E19DA520-53EA-5009-D3DC-43F570405B92} - (no file)
O2 - BHO: Class - {24D87AB5-7115-66D2-F97A-234319B569B2} - (no file)
O2 - BHO: Class - {990738A7-3E4B-EF17-0D61-F77B6D347DF9} - (no file)
O2 - BHO: Class - {D8C2F069-EC8F-C36A-95C6-E43772BEB4D8} - (no file)
O2 - BHO: Class - {4F6F8D33-2FB2-9856-EA3F-7FBF992C18DB} - (no file)
O2 - BHO: Class - {A3D28485-72FC-E462-4A5F-18C7402122C0} - (no file)
O2 - BHO: Class - {1A6BB2E8-6802-540F-D30B-7C2EB249A684} - (no file)
O2 - BHO: Class - {881A5C23-96F5-9D86-B285-C0FC40116992} - (no file)
O2 - BHO: Class - {1538E7F0-E0B7-1772-9132-BA5EAF5F0739} - (no file)
O2 - BHO: Class - {22A70AE8-41C8-92B2-0678-EB2550E33400} - (no file)
O2 - BHO: Class - {8A009E39-EE7F-08A1-04FA-99D9DB5C5E33} - (no file)
O2 - BHO: Class - {7DD57E5C-3F90-DF50-DB25-D3F77D75BB22} - (no file)
O2 - BHO: Class - {F818172B-804E-575B-D99F-56B31516B05B} - (no file)
O2 - BHO: Class - {EC242DA4-E210-A44F-433D-92D6C9292A65} - (no file)
O2 - BHO: Class - {2072FEC1-6AA3-15DB-05C5-76EB8F16852A} - (no file)
O2 - BHO: Class - {C07AC68E-55E4-DF79-704E-EA6537118C8B} - (no file)
O2 - BHO: Class - {9EFD529D-46F8-2CEA-E958-34254F447995} - (no file)
O2 - BHO: Class - {A46D4DB5-B0A0-3266-CF6F-8A74F80D5E37} - (no file)
O2 - BHO: Class - {93818BC9-D266-1EB9-EDFE-1C682654EE66} - (no file)
O2 - BHO: Class - {EE095897-CF57-F9F1-0CB8-85D815B6038C} - (no file)
O2 - BHO: Class - {43F180D7-BEB2-9D82-0058-EBDBF43E7CDD} - (no file)
O2 - BHO: Class - {97D10E10-8197-55F4-F520-EC1143F3F330} - (no file)
O2 - BHO: Class - {69B41F32-4AC6-1E89-433B-C41C1477D07C} - (no file)
O2 - BHO: Class - {8704DF49-0E57-AB82-9B58-3C3BAEDCDFC9} - (no file)
O2 - BHO: Class - {4EB58EB3-0FD5-6011-4DCD-7A25720A2623} - (no file)
O2 - BHO: Class - {BE1DB07F-DB34-A204-FC73-DF8C7F8D4FA5} - (no file)
O2 - BHO: Class - {1962378B-88F9-50CC-A804-D2474D43DFCF} - (no file)
O2 - BHO: Class - {13F2712D-5E27-26F9-F75A-8572AC68DF97} - (no file)
O2 - BHO: Class - {81C6CDEF-FD32-1223-1C37-9FDEDA7FC97D} - C:\WINDOWS\SYSTEM\JAVARS32.DLL (file missing)
O2 - BHO: Class - {E6202B83-5AD0-51E9-E709-31CBE37410FF} - (no file)
O2 - BHO: Class - {61A38BCD-289B-C661-39C1-95C426EDDAA6} - (no file)
O2 - BHO: Class - {0B480D7D-6240-7BB5-B32C-EE5F2407D9D8} - (no file)
O2 - BHO: Class - {4809A400-3431-B657-55A0-9397DB42AA45} - (no file)
O2 - BHO: Class - {CAEA8CD1-03BD-C448-732E-0309C92E677F} - (no file)
O2 - BHO: Class - {C5C0C117-8698-0B33-7901-61D0E51A5E5F} - (no file)
O2 - BHO: Class - {426292FE-A477-2883-00B4-6595750FDC34} - (no file)
O2 - BHO: Class - {C2CC6805-C621-10C0-ABD7-9EF0E2DA9945} - (no file)
O2 - BHO: Class - {3732FBFA-6A47-1C64-47E4-B6B9A9902850} - (no file)
O2 - BHO: Class - {B85CCDC0-7927-26BB-423F-64D6261EF49F} - (no file)
O2 - BHO: Class - {DB10DB35-D3E5-1249-9B78-4ABD815D81BC} - (no file)
O2 - BHO: Class - {EF4B1BBF-9691-E915-81F6-F75B7DD313AA} - (no file)
O2 - BHO: Class - {21E4D24D-BFDF-C114-094D-146BCC336764} - (no file)
O2 - BHO: Class - {675AF256-41F8-4BD4-7DEE-B1C88DEE276E} - (no file)
O2 - BHO: Class - {A5AC7366-36E2-7400-BED8-41EC50B36BEC} - (no file)
O2 - BHO: Class - {449C0B31-56AA-FBFD-29EE-928758958E00} - (no file)
O2 - BHO: Class - {A0C00E56-D86B-6A64-8741-677C3D02CBAB} - (no file)
O2 - BHO: Class - {B3445E12-83ED-4794-941D-CC18315D0931} - (no file)
O2 - BHO: Class - {EB7DA5C2-D352-BABD-3A3C-1B6EFE88DDDF} - (no file)
O2 - BHO: Class - {7AF168F5-335D-EAEE-007B-C6675F542A72} - (no file)
O2 - BHO: Class - {D46BD9A7-F0D9-207D-083C-6CC3D1044EE8} - (no file)
O2 - BHO: Class - {DB4FEFF3-7F23-D1EC-252C-4321FF47BA66} - (no file)
O2 - BHO: Class - {FD4B1325-2263-732C-0B29-211D1DF47852} - (no file)
O2 - BHO: Class - {78520B76-8A0D-19C0-A7E5-C18D062F80E4} - (no file)
O2 - BHO: Class - {3D1C8A9C-5E91-9A97-1012-77BADF6D1BE0} - (no file)
O2 - BHO: Class - {77CFFB1B-9A9A-5B55-F605-56A98395ABB5} - (no file)
O2 - BHO: Class - {9928825D-F511-512E-6A16-25709CC2A8EB} - (no file)
O2 - BHO: Class - {C152FD32-565F-4149-CA19-48489A67658E} - (no file)
O2 - BHO: Class - {E0914B1D-7314-458C-5DE1-9A712289F02D} - (no file)
O2 - BHO: Class - {AA6A2FD0-24A6-C684-432B-75625618A175} - (no file)
O2 - BHO: Class - {66EDF9AC-64E1-604D-EADE-7B853B8F23FF} - (no file)
O2 - BHO: Class - {B6DF9E38-BCAE-E1DB-480E-57F04350F351} - (no file)
O2 - BHO: Class - {B7B31397-93FC-5ABD-5E72-3C4626580399} - (no file)
O2 - BHO: Class - {1A2FCB78-BCDE-411A-2F9F-AE7FEB55F327} - (no file)
O2 - BHO: Class - {38EC14CC-C206-2CC6-4F50-92CDF97CCE41} - (no file)
O2 - BHO: Class - {C7207E99-C734-FBE2-99CF-E85DDABEE378} - (no file)
O2 - BHO: Class - {E7FEE8CD-D4D3-8260-44A7-67DD4A71E995} - (no file)
O2 - BHO: Class - {83F0FCBE-4DAA-1E5C-EBA7-EDCE90589E43} - (no file)
O2 - BHO: Class - {B02D3C44-5088-4292-8040-CB902C2FAA78} - (no file)
O2 - BHO: Class - {14B347DC-397D-8A0C-EE38-EDC9B92A99F9} - (no file)
O2 - BHO: Class - {058680EF-4C0E-9D88-7204-989DB27DFD59} - (no file)
O2 - BHO: Class - {7DA97ABD-8EF4-D978-CF33-169AC9529E45} - (no file)
O2 - BHO: Class - {714A75BA-793A-AD03-032C-D32FE3D02CDF} - (no file)
O2 - BHO: Class - {2FCAB757-46CB-EDBA-2F82-3DEE958BC1B1} - (no file)
O2 - BHO: Class - {6EF255E8-4410-1C10-85DA-56626C5EB80D} - (no file)
O2 - BHO: Class - {D16792AD-2C2E-4FCB-872C-0EE369121171} - (no file)
O2 - BHO: Class - {A9B5AF4E-E897-1C45-D86D-9A80E109CAE7} - (no file)
O2 - BHO: Class - {5F54EB56-ABB3-1965-610E-A3DF515F7AB9} - (no file)
O2 - BHO: Class - {E09F949B-33ED-E152-6852-2FECABDB4D1C} - (no file)
O2 - BHO: Class - {D8848232-823F-FF9A-E716-1D542C15E2D8} - (no file)
O2 - BHO: Class - {8E0C3EB6-1569-6F50-9A73-3C96164869C2} - (no file)
O2 - BHO: Class - {282032FC-C6CA-9E36-F009-345A15203683} - (no file)
O2 - BHO: Class - {32011C7F-3430-3AF2-DD1F-0049908763E5} - (no file)
O2 - BHO: Class - {5FF6A832-AA1A-6E3C-B35A-D7932B0283C0} - (no file)
O2 - BHO: Class - {1680C9F9-C963-3F25-F481-EBF1DF741AE8} - (no file)
O2 - BHO: Class - {93546DF7-38BA-CC3C-AB8F-9A9913EAAB54} - (no file)
O2 - BHO: Class - {480B26C9-5493-2FD8-25D1-17A24B1257DA} - (no file)
O2 - BHO: Class - {CDD324D5-6EFC-0661-1A20-52A7083C3D03} - (no file)
O2 - BHO: Class - {696F68F7-8C7E-81A7-13DB-A8A270F3F004} - (no file)
O2 - BHO: Class - {CDDABFD3-90AF-3505-3DF4-F8DF446C5C4F} - (no file)
O2 - BHO: Class - {2536C943-1153-AD4C-300A-B4B7FF0DA8BA} - (no file)
O2 - BHO: Class - {9686D485-C0B1-26EE-772B-CB572D82340F} - (no file)
O2 - BHO: Class - {A0904A77-BFA4-970B-9630-8D199EFD55E9} - (no file)
O2 - BHO: Class - {0E10B003-516B-A5FE-961E-ECF25BE3662B} - (no file)
O2 - BHO: Class - {0A18BB06-C986-D04C-2511-A8C95904EF00} - (no file)
O2 - BHO: Class - {6AB07E42-F1C5-F8BA-44B0-6F818F3C7711} - (no file)
O2 - BHO: Class - {6BE5C394-AA25-266E-D794-88256569CD9D} - (no file)
O2 - BHO: Class - {0B0399F6-33DB-AD00-5AD0-5FC7F1F760D4} - (no file)
O2 - BHO: Class - {E7FCD046-7EFA-EC37-9814-C95DD24FA232} - (no file)
O2 - BHO: Class - {BE0B92E6-FE88-CE97-83A2-80F270CDA5CF} - (no file)
O2 - BHO: Class - {368F3DF4-1A51-3E71-538B-6755A0F289FE} - (no file)
O2 - BHO: Class - {BBC7B4F8-5F23-FEFF-C138-FC39C47B93BF} - (no file)
O2 - BHO: Class - {646E2E0B-4014-CADD-B572-242AA038B2F1} - (no file)
O2 - BHO: Class - {63F1A1BF-6292-25D0-A3BA-12D30D817406} - (no file)
O2 - BHO: Class - {9255F260-AD35-16A6-43F3-901D1F3AC6B2} - (no file)
O2 - BHO: Class - {A490913E-404C-4851-6AFE-B571204BBED4} - (no file)
O2 - BHO: Class - {255C3BAE-1994-8D48-D6F5-CC4350B435DC} - (no file)
O2 - BHO: Class - {140D792F-75A2-4E42-7091-0866E3AE621A} - (no file)
O2 - BHO: Class - {9E454339-F6F3-DE2D-DBD8-5229FD0589FE} - (no file)
O2 - BHO: Class - {2C144E07-0F4D-6EC7-B4B1-B4C6479560E5} - (no file)
O2 - BHO: Class - {3A00AA22-FEC1-FC9A-10CE-46012D4BF6B2} - (no file)
O2 - BHO: Class - {E1DD5397-C1A6-DBD8-1D0F-705866B2510B} - (no file)
O2 - BHO: Class - {9038016A-E91F-5E95-0053-598A505661C7} - (no file)
O2 - BHO: Class - {FA4788F1-4822-A986-4D3E-44B435C19A9C} - (no file)
O2 - BHO: Class - {E4F821BD-35F0-0925-EABA-086BEE404D61} - (no file)
O2 - BHO: Class - {95AF3145-72CF-F3FC-766B-19712121F763} - (no file)
O2 - BHO: Class - {DBEDA669-9CE6-0853-9ABD-154843F0DA5B} - (no file)
O2 - BHO: Class - {51F242CE-3A79-A2F0-3B9D-50A94CC69C30} - (no file)
O2 - BHO: Class - {44C8A3A3-D8E9-D794-648F-B24BC95436BE} - (no file)
O2 - BHO: Class - {3930AD0E-407E-0742-7BAA-CE5F22867714} - (no file)
O2 - BHO: Class - {4779094B-C704-B856-11A4-52CD133E6199} - (no file)
O2 - BHO: Class - {A645334F-FEE6-4734-366C-BD7C0DB2B254} - (no file)
O2 - BHO: Class - {6EB9121A-3517-F0F4-C72C-70B7B624BBD3} - (no file)
O2 - BHO: Class - {A5016BFA-AF2F-38FC-EB59-79C9ECE9256B} - (no file)
O2 - BHO: Class - {74D49E20-C013-4035-3457-1B073899BF8D} - C:\WINDOWS\WINLN32.DLL (file missing)
O2 - BHO: Class - {3E739557-9D68-522B-C5F0-2630AEE4E243} - (no file)
O2 - BHO: Class - {CD9AD05C-ADCC-33B8-C399-551A6BED5208} - (no file)
O2 - BHO: Class - {F264CBC2-6A6B-CAFF-A88C-74D64BFD3120} - (no file)
O2 - BHO: Class - {E0DD7A95-1DF5-210A-C8D1-D9AB86BD9109} - (no file)
O2 - BHO: Class - {EDA38CC9-B865-78BD-C1A5-843DCC6547D9} - (no file)
O2 - BHO: Class - {7DB41198-E91C-381C-C2ED-D46A2E2D7897} - (no file)
O2 - BHO: Class - {888C9598-786C-D066-569E-38D86CC59405} - (no file)
O2 - BHO: Class - {CF175BA3-5E1E-3DA5-CADB-A16A0DD61E83} - (no file)
O2 - BHO: Class - {B055BABB-C120-ED06-3DBF-0CDC7FC381A4} - (no file)
O2 - BHO: Class - {A3B78959-8E14-4604-FD4A-C8737955C5B4} - (no file)
O2 - BHO: Class - {69B032C8-DE17-16EB-8C8C-2407CC242B33} - (no file)
O2 - BHO: Class - {AF451484-05EA-655A-4EE7-4B4F9A677388} - (no file)
O2 - BHO: Class - {5FFB1F51-9CF1-E42C-5147-BD3C21EC3978} - (no file)
O2 - BHO: Class - {64A70346-6FA4-EA8B-7DD1-5A4B17FBDA8B} - (no file)
O2 - BHO: Class - {9295B52A-C518-322A-AF1E-0EE13F821E57} - (no file)
O2 - BHO: Class - {04CABB8A-1C34-EAB8-A8CB-9FFB336540D4} - (no file)
O2 - BHO: Class - {017630A0-5651-24CC-5524-1D24D9B10396} - (no file)
O2 - BHO: Class - {BE19E8BB-F0BF-178F-378D-58D7C4786A75} - (no file)
O2 - BHO: Class - {42B7CFF8-A757-D31D-1B76-9B9401F53679} - (no file)
O2 - BHO: Class - {C18066D6-9B5A-BE5C-3992-F7285FC72E68} - (no file)
O2 - BHO: Class - {0A67AD31-B535-2C48-3648-712FB0FA5C0E} - (no file)
O2 - BHO: Class - {E75E8B2B-38F5-CA1C-2066-2D236A2C8500} - (no file)
O2 - BHO: Class - {38C7E16E-F3BB-831A-1230-372B1E0B4CDF} - (no file)
O2 - BHO: Class - {CE653595-207B-961B-10FD-D19B76E881A3} - (no file)
O2 - BHO: Class - {4CB9FBD7-715E-2372-4851-441F0E8F7435} - (no file)
O2 - BHO: Class - {FF731508-CD28-E0B0-3E85-0CF55FDE9FBA} - (no file)
O2 - BHO: Class - {35B54222-E335-F43C-2815-C458BE45A1E0} - (no file)
O2 - BHO: Class - {6CBA8D1A-FBFC-CF1D-D6A4-A213E2797E12} - (no file)
O2 - BHO: Class - {5E4F3BA8-8431-6734-64CD-822C3E86697B} - (no file)
O2 - BHO: Class - {57F26F3C-EAC4-2E5A-C232-B0372CADD7B7} - (no file)
O2 - BHO: Class - {F52E3C8B-8C95-5087-13C3-410DA6C1D6F7} - (no file)
O2 - BHO: Class - {D6BA699A-B568-C5DC-6026-CF56D6D3D065} - (no file)
O2 - BHO: Class - {30F97DA3-A733-2794-8262-29E0B6F53BA8} - (no file)
O2 - BHO: Class - {A417F704-18F6-554A-C18D-A5FE1A732089} - C:\WINDOWS\SYSTEM\ATLMP.DLL (file missing)
O2 - BHO: Class - {6CADCD05-3E4C-A3DE-2E2B-F4A39620442A} - (no file)
O2 - BHO: Class - {4B05C084-12D2-0FF6-D490-A0CF45280E50} - (no file)
O2 - BHO: Class - {4D53713C-C896-3F54-661B-DFBD9CC2FEB7} - (no file)
O2 - BHO: Class - {1C4EA8D2-2AB1-E54D-DA75-3B904D318D63} - (no file)
O2 - BHO: Class - {A14913FF-B4FA-1BDB-7092-5E13F56A4558} - (no file)
O2 - BHO: Class - {22557A9B-61EA-D4C0-F791-50C21260D6D7} - (no file)
O2 - BHO: Class - {6A680F02-2787-6BB4-4D22-877ABE11697B} - (no file)
O2 - BHO: Class - {C01397B5-886F-E2A8-2FDD-7B4758D1AE8E} - (no file)
O2 - BHO: Class - {F816BFC5-A7FF-B6F8-8568-9821DE00B600} - (no file)
O2 - BHO: Class - {C741BF98-EA31-4B67-1454-78CAB7B849F1} - (no file)
O2 - BHO: Class - {8D1F5508-6A6E-5EA4-B010-5E880FBC9119} - (no file)
O2 - BHO: Class - {85F175D1-7DD4-EDE0-8831-656AB0899A5E} - (no file)
O2 - BHO: Class - {9599FA72-449A-32E4-49DA-E9481AF3FDF6} - (no file)
O2 - BHO: Class - {FBF7402B-F568-97CC-0EFF-2D7ABD52E16B} - (no file)
O2 - BHO: Class - {B88F1746-E10C-1C5A-7958-71C47B49917B} - (no file)
O2 - BHO: Class - {95744E08-BCA9-7DC5-8D02-05BAA6A2035F} - (no file)
O2 - BHO: Class - {248F4AA0-2FBE-AC94-9343-FA3E8832F5B2} - (no file)
O2 - BHO: Class - {CD101537-32F8-4AA3-3402-3E75C232A431} - (no file)
O2 - BHO: Class - {8EAE86BD-6B04-05C6-17FA-AADFA985E2A9} - (no file)
O2 - BHO: Class - {C0AC4624-CFBA-83FE-10C0-14CD8F3E7E42} - (no file)
O2 - BHO: Class - {07B03A44-17FB-5E36-8A0E-EEF98B05B7C2} - (no file)
O2 - BHO: Class - {0DFBCB63-C236-4AA8-9785-4DB42DA67929} - (no file)
O2 - BHO: Class - {01789791-5DA5-E2E1-655E-B7C515B49D81} - (no file)
O2 - BHO: Class - {B99D4763-68F0-F15E-A65F-F547AA0D8494} - (no file)
O2 - BHO: Class - {BAEDEEAF-7A98-43DD-8F99-F4B27E2CE744} - (no file)
O2 - BHO: Class - {1C8FA365-0028-22A7-1770-71759411D32D} - (no file)
O2 - BHO: Class - {821F3C09-EF24-B7E3-091B-658D5989CCE2} - (no file)
O2 - BHO: Class - {6C6535B8-0E28-10F8-F18F-4A14786EF2AB} - (no file)
O2 - BHO: Class - {BB0401E6-61A6-0344-A30F-3DFA178D6F76} - (no file)
O2 - BHO: Class - {A3197D06-F6A2-44B0-558C-F55929D9A6A7} - (no file)
O2 - BHO: Class - {72094E9F-C897-41C5-5DC7-D3E74287417F} - (no file)
O2 - BHO: Class - {EF0E2DA9-45A3-A38E-FA6A-8A14544A8BE4} - (no file)
O2 - BHO: Class - {CC12F8F4-58FB-F424-BB38-E47C13960419} - (no file)
O2 - BHO: Class - {52FAE596-9F81-73C6-7434-6482541BA739} - (no file)
O2 - BHO: Class - {115E5C08-B81B-0D79-CD2A-7B758D540646} - (no file)
O2 - BHO: Class - {81A2631B-5BDA-D851-21DF-25C2E10A72BF} - (no file)
O2 - BHO: Class - {425869CC-CAF3-1D33-10A8-5A48605BB7DE} - (no file)
O2 - BHO: Class - {FA2CAADF-58EF-4535-C3CA-877FBD659904} - (no file)
O2 - BHO: Class - {B10C16EF-15FE-F0C0-4850-4D53713C3C89} - (no file)
O2 - BHO: Class - {F322AB0B-621C-11A3-B1AE-7A7FC2B40350} - (no file)
O2 - BHO: Class - {5DE0DA98-DFC9-EB4A-8C86-8F46A5116CA0} - (no file)
O2 - BHO: Class - {58D0E142-88E8-BFBD-FF8D-64516042C177} - (no file)
O2 - BHO: Class - {63093676-2125-8F3C-BA68-4915122AC394} - (no file)
O2 - BHO: Class - {3EDCBCC0-1EE6-5EB6-3F91-FBD6ED03FF6A} - (no file)
O2 - BHO: Class - {B4124C0E-0880-9F8D-0AE8-633A1896EC0A} - (no file)
O2 - BHO: Class - {6CC375DD-7113-96F5-02B0-46C88EF1D0F9} - (no file)
O2 - BHO: Class - {4FA150BA-1516-4F3B-3410-A9AC37E11963} - (no file)
O2 - BHO: Class - {F8E7FE88-E351-C487-7BAB-3137CB7B9E16} - (no file)
O2 - BHO: Class - {783B9D22-B9F2-EDFC-3D2B-4F6A3D1BCF1B} - (no file)
O2 - BHO: Class - {A522B6F5-3801-8D41-9C0B-CBCF169ADFBD} - (no file)
O2 - BHO: Class - {6AB04E20-C7FB-1976-45F0-4507AA485E64} - (no file)
O2 - BHO: Class - {D7B58010-ECB4-2AAF-C757-B2B10463170A} - (no file)
O2 - BHO: Class - {E958A464-791E-789E-2D64-372E06235F4B} - (no file)
O2 - BHO: Class - {79FA082E-37DA-B1F1-2C8A-8BA7625991BA} - (no file)
O2 - BHO: Class - {00595A1A-F3C3-0278-F9C8-F54F803375B2} - (no file)
O2 - BHO: Class - {181A0061-F7C6-14B8-A961-C99308819ACA} - C:\WINDOWS\NETOS.DLL (file missing)
O2 - BHO: Class - {1D628BF7-9593-0367-E97B-9B283E344A43} - (no file)
O2 - BHO: Class - {AC955C42-F100-D3E2-6044-64DA9B8397E4} - (no file)
O2 - BHO: Class - {18FB2A6A-F233-369E-6A36-6A30EE2D9B65} - (no file)
O2 - BHO: Class - {C78BA420-2354-CF49-9103-FA0AC2A41B6C} - (no file)
O2 - BHO: Class - {8D5586B2-DCD2-8699-92B1-AC9566B40380} - (no file)
O2 - BHO: Class - {47B847AB-7B7C-8A60-D55A-C91D2636BFE1} - (no file)
O2 - BHO: Class - {A0B1BB32-2A5E-E376-CBA9-120065D755BD} - (no file)
O2 - BHO: Class - {9676F784-5E6F-5C0B-13BE-ABEE4D4B4CB9} - (no file)
O2 - BHO: Class - {E6F47311-D791-8542-AC68-11F672B56742} - (no file)
O2 - BHO: Class - {315E32CB-195A-8536-EB55-7CF4CDA121F2} - (no file)
O2 - BHO: Class - {3AF8483F-BD21-516A-EF15-BDC199252DA8} - (no file)
O2 - BHO: Class - {E13EC6E2-FAFF-4340-FA0D-2D25A17AF4C9} - (no file)
O2 - BHO: Class - {C21F34AD-8BCB-3418-4B55-64D50A03A456} - (no file)
O2 - BHO: Class - {2036BC98-7BA8-6855-B291-B538AE628676} - (no file)
O2 - BHO: Class - {F3E905BD-8C63-2844-6318-F249B127F566} - (no file)
O2 - BHO: Class - {6EF0F034-C0DA-6CB6-18F6-2B49B1B81D7A} - (no file)
O2 - BHO: Class - {23DCE837-1D4F-9FB4-67DE-0FDD279FCB0A} - (no file)
O2 - BHO: Class - {741AF238-DF5F-5618-A710-E11515F22917} - (no file)
O2 - BHO: Class - {12899B2B-DA72-DAA3-33E7-18D55F24E119} - (no file)
O2 - BHO: Class - {C903452D-F242-5368-3A53-B53766C88F7C} - (no file)
O2 - BHO: Class - {DF681A51-5F05-1F39-036E-D1C704F8F568} - (no file)
O2 - BHO: Class - {035E8A5B-5C2F-6EFB-6764-3A4CE4128819} - (no file)
O2 - BHO: Class - {6EBA897A-5C75-75DA-CDFA-C2B258DF4528} - (no file)
O2 - BHO: Class - {822763E7-DD22-4292-C69E-C734249AC87F} - (no file)
O2 - BHO: Class - {E868E85F-8A2C-8F90-11C8-C70A8A47961A} - (no file)
O2 - BHO: Class - {F1D7DCBA-0130-C987-716B-EE88E16B0371} - (no file)
O2 - BHO: Class - {46EA962F-CB89-4FB2-770C-D9FC985088EC} - (no file)
O2 - BHO: Class - {D8F788D3-E5C2-624D-A50B-F83DC64696C6} - (no file)
O2 - BHO: Class - {F8505896-A3C1-F3D7-74A4-83C992AB83BC} - (no file)
O2 - BHO: Class - {5465646E-5FF3-A3F7-5FDF-E65961926291} - (no file)
O2 - BHO: Class - {40FA2355-DEA8-B02D-B2CC-10D5115F4DA8} - (no file)
O2 - BHO: Class - {FB065422-2BAE-4B02-3A20-B3E435E5AE93} - (no file)
O2 - BHO: Class - {D1DF8BA5-C70C-3D1B-E931-4D794ECE63C4} - (no file)
O2 - BHO: Class - {4CC44A9A-EFC8-A88E-7497-8165E50B60F8} - (no file)
O2 - BHO: Class - {0BB7F30D-737F-3A50-5B82-0A010CEDEC20} - (no file)
O2 - BHO: Class - {9585DCDF-2CF7-044C-850B-2CC0DBFD6F96} - (no file)
O2 - BHO: Class - {D3F3C489-044D-0060-A451-31243427C6A4} - (no file)
O2 - BHO: Class - {3366A681-63B6-7915-C2CB-2CC4EF3E7DB2} - (no file)
O2 - BHO: Class - {46101548-9DC9-0686-2B47-1789B33EB7A0} - (no file)
O2 - BHO: Class - {AFF44CFF-375F-DEC1-797C-3F61DFA427C0} - (no file)
O2 - BHO: Class - {87FBEFD0-E366-B118-8C2C-F9FEC1BF9788} - (no file)
O2 - BHO: Class - {AF9E47E5-DA5F-2D53-4855-D3DBCC67B6EF} - (no file)
O2 - BHO: Class - {88566BFE-D819-6D1E-73A2-F9AEBA646033} - (no file)
O2 - BHO: Class - {CDCEAEE6-B8F0-9082-5C28-658BC1669AD1} - (no file)
O2 - BHO: Class - {14846E89-B1EC-BE38-0CB7-1FDEFF59AC3D} - (no file)
O2 - BHO: Class - {5B52EF97-ABD3-9E08-6196-8F72B312FA3A} - (no file)
O2 - BHO: Class - {E2B62B52-F19C-7DFB-0CAF-0AA0AF9FF61D} - (no file)
O2 - BHO: Class - {49D8452D-C41B-3944-CE5A-DB4E1261D1C0} - (no file)
O2 - BHO: Class - {819785B4-B42D-6792-E08B-0E68E62598BF} - (no file)
O2 - BHO: Class - {388C5AAE-7B1C-DEF5-E0DC-78773C98BD55} - (no file)
O2 - BHO: Class - {AF0E6521-11D3-E910-5998-4ABEE4595D36} - (no file)
O2 - BHO: Class - {61CA2336-3B48-02B6-27B2-3E7FC80677FC} - (no file)
O2 - BHO: Class - {697B60D8-EE47-204A-CE89-896EB5426EB9} - (no file)
O2 - BHO: Class - {1D625988-E8BB-2679-4764-1226C8D3423F} - (no file)
O2 - BHO: Class - {F53A477A-7B1C-2657-7904-F2611BC95C35} - (no file)
O2 - BHO: Class - {E8995C66-89E4-D9B5-D987-CB89F2AF8546} - (no file)
O2 - BHO: Class - {81B99B40-1BE4-463E-324F-9B7AB83DEDBC} - (no file)
O2 - BHO: Class - {D880E649-6073-8D01-04CC-3F321F6D56A5} - (no file)
O2 - BHO: Class - {6ECF2865-6757-E089-B1FF-8266EC5C3D33} - (no file)
O2 - BHO: Class - {B3203551-0B4E-FCF6-9876-7B853EEBCC3F} - (no file)
O2 - BHO: Class - {199282EC-E1E7-785F-8E93-283E6306E881} - (no file)
O2 - BHO: Class - {3D2ACA16-3F1C-BF97-6524-0F7072E1E895} - (no file)
O2 - BHO: Class - {DA37E403-1C6D-477E-2601-BECE6AB2B1DE} - (no file)
O2 - BHO: Class - {B1A3D9B6-B2A9-FD0E-4B07-24BD86D3B9E0} - (no file)
O2 - BHO: Class - {8D1F9E37-0A0E-42B8-D6EE-2A8A3257FE9F} - (no file)
O2 - BHO: Class - {B7DA37CD-D568-926E-B35E-D257DCC266EC} - (no file)
O2 - BHO: Class - {C8E09CC6-5143-0AEA-9C0D-D61F50C10ABA} - (no file)
O2 - BHO: Class - {91ACFEB4-563E-7346-F46B-988AF1C8F8C5} - (no file)
O2 - BHO: Class - {D7603A0A-83FE-6A34-7598-CA392AC679FB} - (no file)
O2 - BHO: Class - {10E2E07E-D539-9FEE-C3AF-DB4D7AF9F2AD} - (no file)
O2 - BHO: Class - {B89E4008-4828-AC3A-CAF5-00B70ABA441F} - (no file)
O2 - BHO: Class - {CC9908BF-DB26-5D28-B257-C15D770AF166} - (no file)
O2 - BHO: Class - {AC3D0FC9-6E91-197E-8D58-83C94A8325D0} - (no file)
O2 - BHO: Class - {AEB90959-0093-AADA-C479-6B1F6B9B24D6} - (no file)
O2 - BHO: Class - {08A3A1A2-58D3-719F-6F78-E5B86B32FB8F} - (no file)
O2 - BHO: Class - {77B4FD3D-5199-ECFF-B1BD-83EC2149F1D1} - (no file)
O2 - BHO: Class - {377FC94D-A085-2B89-B543-C2E033EE98D3} - C:\WINDOWS\MSOA32.DLL (file missing)
O2 - BHO: Class - {20904407-F1D7-A5E0-D318-ADCADE1537F1} - (no file)
O2 - BHO: Class - {7CDEF27B-3E79-6C65-25A5-15182309D6F7} - (no file)
O2 - BHO: Class - {AF540F8F-C53A-04B1-430B-1F30D452ECE7} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [USBMMKBD] usbmmkbd.exe
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [Dcfssvc] c:\windows\System32\Drivers\dcfssvc.exe
O4 - HKLM\..\Run: [SandIcon] C:\ImageMate CompactFlash USB\SandIcon.Exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [HPScanPatch] C:\WINDOWS\SYSTEM\HPScanFix.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [UpdateMgr.exe] "C:\PROGRAM FILES\EARTHLINK 5.0\UPDATEMGR.EXE" -/NOCM
O4 - HKLM\..\Run: [ConMgr.exe] "C:\PROGRAM FILES\EARTHLINK 5.0\CONMGR.EXE"
O4 - HKLM\..\Run: [Lwinst Run Profiler] C:\Program Files\Logitech\WingMan Profiler\Lwtest.exe /detect /quiet /launch "C:\Program Files\Logitech\WingMan Profiler\Lwpevntm.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [Excite Platform] C:\PROGRA~1\EXCITE\PLATFORM\ExLaunch.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [myCIO.com Splash] C:\WINDOWS\myCIO\VScan\Splash.exe
O4 - HKLM\..\Run: [myCIO.com ASaP] C:\WINDOWS\myCIO\Agent\myagttry.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Encompass_ENCMONTR] C:\Program Files\Easy Internet\ENCMONTR.EXE
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - HKCU\..\Run: [iolo Task Agent] C:\Program Files\iolo\Common\Task Agent\task_agent.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Startup: Encoder Agent.lnk = C:\Program Files\Windows Media Components\Encoder\WMENCAGT.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~1\MICROS~5\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .3dml: C:\Program Files\Flatland\NProver.dll
O12 - Plugin for .mts: C:\Program Files\MetaCreations\MetaStream\npmetastream.dll
O16 - DPF: {ABE92375-8159-4759-A4B2-BF29E11CAAC3} (HearMe Microphone Configuration Wizard) - http://www.hearme.com/products/vp/config/plugins/evpcfg.cab
O16 - DPF: {1FA643B0-F90E-11D3-BA0B-00C04F384A92} (HomeTsrCtrl Class) - http://image.excite.com/sputnik/dynacat_up…ationchange.dll
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {17163BB4-107E-11D4-9B76-006097DF2317} (EABootStrap Class) - http://www.ea.com/downloads/games/common/b…trap/iegils.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pot5_x.cab
O16 - DPF: Yahoo! Klondike Solitaire - http://yog55.games.scd.yahoo.com/yog/y/ks11_x.cab
O16 - DPF: Yahoo! Freecell Solitaire - http://yog55.games.scd.yahoo.com/yog/y/fs9_x.cab
O16 - DPF: Yahoo! Towers 2.0 - http://download.games.yahoo.com/games/clients/y/ywt0_x.cab
O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/games/clients/y/fltt0_x.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/MTSInstall…w.viewpoint.com
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://64.27.100.83/activex/AxisCamControl.ocx
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {40C83AF8-FEA7-4A6A-A470-431EE84A0886} -
O18 - Protocol: stash - {44D81A5B-F195-11D2-A3D7-000086335B27} - C:\PROGRAM FILES\EARTHLINK 5.0\STASH100.DLL

little eagle

Post #7August 29, 2004, 3:12 PM UTC

PLEASE read through the instructions before you start (you may want to print this out).

You have one (or more) of these programs running on your machine and that is good.

Winpatrol
Spywareguard
Spybot s&d (Teatimer option)

But prior to doing the fix below with hijackthis they need to be turned off.
Please do the following.

Right click the running icon of spybot's teatimer, and choose exit.
Right click the running icon of winpatrol, and choose exit.
Right click the running icon of Spywareguard, it will open the program, Menu, file, exit, and confirm the programs close.

Unless they are turned off they could interfer with the fix by hijackthis.

Please note that everytime you reboot your computer there's a good chance that the files names may have changed.

Please download and unzip
AboutBuster to a folder. Inside the folder is a readme file that has instructions on the use of the program.
AboutBuster MUST be updated before you use it.
Start AboutBuster, click the update button, check for update, drag the box to the side and hit download updates, close the box . Don't run it yet.
Current reference list # is 15
Sometimes AboutBuster works better in safe mode, try it.

You may also find the TheKillBox helpful for deleting and ending task on files to be deleted.
To end task on a file that's running use the drop down arrow in the right lower corner of the program and the button to the left of it.

1. Please download and install AD-Aware.
Check Here on how setup and use it - please make sure you update it first.

2. Go to Start->Run and type "Services.msc" (without quotes) then hit Ok
Scroll down and find the service called "Network Security Service" (it may also be listed as Remote Procedure Call (RPC) Helper or Workstation NetLogon Service)

When you find it, double-click on it. In the next window that opens, click the Stop button, then click on properties and under the General Tab, change the Startup Type to Disabled. Now hit Apply and then Ok and close any open windows. If you don´t find this service listed go ahead with the next steps.

3. Open Windows Explorer & Go to Tools > Folder Options. Click on the View tab and make sure that "Show hidden files and folders" is checked.
Also uncheck "Hide protected operating system files" and untick "hide extensions for known file types" . Now click "Apply to all folders"
Click "Apply" then "OK"

For anyone using Windows XP, 'Search' will not automatically show hidden files even if your folder options settings are set to do that. Do this so you can see hidden files and folders - click here http://www.davehigham.zen.co.uk/downloads/xphidden.zip to download xphidden.zip. Extract xphidden.reg from the zip file and save it to the desktop. When done, double-click the xphidden.reg and when asked to merge say yes.

4. CLOSE ALL WINDOWS AND BROWSERS Scan with Hijack This and put checks next to all the following, then click "Fix Checked"

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\jbrys.dll/sp.html#22776
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\jbrys.dll/sp.html#22776
R3 - Default URLSearchHook is missing

ALL THE 02's but this one
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (file missing)

5. Delete the following files if present:

C:\WINDOWS\jbrys.dll
C:\WINDOWS\APIBD32.DLL
C:\WINDOWS\SYSLA32.DLL
C:\WINDOWS\SYSTEM\JAVARS32.DLL
C:\WINDOWS\WINLN32.DLL
C:\WINDOWS\SYSTEM\ATLMP.DLL
C:\WINDOWS\NETOS.DLL

(and any other files with the same name that end in .dll, .exe or .dat, you may find them right next to each other, example - appsw.exe, appsw.dll, appsw.dat)

6. Run AboutBuster . This will scan your computer for the bad files and delete them. Save the report (copy and paste into notepad or wordpad and save as a .txt file) and post a copy back here when you are done with all the steps.

7. Scan with AdAware and let it remove any bad files found.

8. Clean out temporary and TIF files. Go to Start > Run and type in the box: cleanmgr. Let it scan your system for files to remove. Make sure these 3 are checked and then press *ok* to remove:

Temporary Files
Temporary Internet Files
Recycle Bin

9. Click here http://www.davehigham.zen.co.uk/downloads/cwsuninst.zip to download cwsuninst.zip.
Extract cwsuninst.reg from the zip file and save it to the desktop.
When done, double-click the cwsuninst.reg and when asked to merge say yes.

10. Download the Hoster from here http://members.aol.com/toadbee/hoster.zip. Press "Restore Original Hosts" and press "OK". Exit Program.

11. Download and run this online virus scan:
http://housecall.trendmicro.com/housecall/start_corp.asp
Make sure you check "AutoClean"

12. (optional) Download to and run from your desktop CW-Shredder
Hit the fix button and let it run and fix what it finds, make sure you have all browser windows closed.

13. Reboot to normal mode and post a fresh HJT log.

Concrete101

Post #8August 29, 2004, 11:32 PM UTC

1. done
2. cannot run services.msc… running windows 98.
3. done
4. done, see hjt log below
5. none present
6. done, see below
7. done
8. done
9. done
10. done
11. done, found 32 files of trojan_agent.EL
12. done

– Scan 1 —————————
About:Buster Version 3.0
Reference List : 15

ADS not scanned System(FAT)
Removed! : C:\WINDOWS\SYSTEM\crcu32.exe
Attempted Clean Of Temp folder.
Removed Uninstall Key (HSA)
Removed Uninstall Key (SE)
Removed Uninstall Key (SW)
Pages Reset… Done!

Logfile of HijackThis v1.98.2
Scan saved at 6:33:24 PM, on 8/29/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\WINDOWS\SYSTEM\USBMMKBD.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\DCFSSVC.EXE
C:\IMAGEMATE COMPACTFLASH USB\SANDICON.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\SUPPORT.COM\BIN\TGCMD.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\EARTHLINK 5.0\UPDATEMGR.EXE
C:\PROGRAM FILES\EARTHLINK 5.0\CONMGR.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\IOLO\COMMON\TASK AGENT\TASK_AGENT.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGMAIN.EXE
C:\PROGRAM FILES\LOGITECH\WINGMAN PROFILER\LWPEVNTM.EXE
C:\PROGRAM FILES\WINDOWS MEDIA COMPONENTS\ENCODER\WMENCAGT.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\MRTMNGR.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGBHP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\MY DOCUMENTS\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = www.comcast.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast High-Speed Internet
F1 - win.ini: run=STARS.EXE
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [USBMMKBD] usbmmkbd.exe
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [Dcfssvc] c:\windows\System32\Drivers\dcfssvc.exe
O4 - HKLM\..\Run: [SandIcon] C:\ImageMate CompactFlash USB\SandIcon.Exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [HPScanPatch] C:\WINDOWS\SYSTEM\HPScanFix.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [UpdateMgr.exe] "C:\PROGRAM FILES\EARTHLINK 5.0\UPDATEMGR.EXE" -/NOCM
O4 - HKLM\..\Run: [ConMgr.exe] "C:\PROGRAM FILES\EARTHLINK 5.0\CONMGR.EXE"
O4 - HKLM\..\Run: [Lwinst Run Profiler] C:\Program Files\Logitech\WingMan Profiler\Lwtest.exe /detect /quiet /launch "C:\Program Files\Logitech\WingMan Profiler\Lwpevntm.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [Excite Platform] C:\PROGRA~1\EXCITE\PLATFORM\ExLaunch.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [myCIO.com Splash] C:\WINDOWS\myCIO\VScan\Splash.exe
O4 - HKLM\..\Run: [myCIO.com ASaP] C:\WINDOWS\myCIO\Agent\myagttry.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Encompass_ENCMONTR] C:\Program Files\Easy Internet\ENCMONTR.EXE
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - HKCU\..\Run: [iolo Task Agent] C:\Program Files\iolo\Common\Task Agent\task_agent.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Startup: Encoder Agent.lnk = C:\Program Files\Windows Media Components\Encoder\WMENCAGT.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~1\MICROS~5\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O12 - Plugin for .3dml: C:\Program Files\Flatland\NProver.dll
O12 - Plugin for .mts: C:\Program Files\MetaCreations\MetaStream\npmetastream.dll
O16 - DPF: {ABE92375-8159-4759-A4B2-BF29E11CAAC3} (HearMe Microphone Configuration Wizard) - http://www.hearme.com/products/vp/config/plugins/evpcfg.cab
O16 - DPF: {1FA643B0-F90E-11D3-BA0B-00C04F384A92} (HomeTsrCtrl Class) - http://image.excite.com/sputnik/dynacat_up…ationchange.dll
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {17163BB4-107E-11D4-9B76-006097DF2317} (EABootStrap Class) - http://www.ea.com/downloads/games/common/b…trap/iegils.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pot5_x.cab
O16 - DPF: Yahoo! Klondike Solitaire - http://yog55.games.scd.yahoo.com/yog/y/ks11_x.cab
O16 - DPF: Yahoo! Freecell Solitaire - http://yog55.games.scd.yahoo.com/yog/y/fs9_x.cab
O16 - DPF: Yahoo! Towers 2.0 - http://download.games.yahoo.com/games/clients/y/ywt0_x.cab
O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/games/clients/y/fltt0_x.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/MTSInstall…w.viewpoint.com
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://64.27.100.83/activex/AxisCamControl.ocx
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {40C83AF8-FEA7-4A6A-A470-431EE84A0886} -
O18 - Protocol: stash - {44D81A5B-F195-11D2-A3D7-000086335B27} - C:\PROGRAM FILES\EARTHLINK 5.0\STASH100.DLL

little eagle

Post #9August 29, 2004, 11:47 PM UTC

Hello Concrete101, Looks a little better.

Close all Browser and Program Windows and have HijackThis fix the following by checking the box beside each and then clicking on Fix checked.

O16 - DPF: {1FA643B0-F90E-11D3-BA0B-00C04F384A92} (HomeTsrCtrl Class) - http://image.excite.com/sputnik/dynacat_up…ationchange.dll
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/MTSInstall…w.viewpoint.com
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {40C83AF8-FEA7-4A6A-A470-431EE84A0886} -

Then Download System Security Suite. Extract it from the zip file into a folder.
http://www.igorshpak.net/software/3ssetup104.zip
Under "items to clear" click all. Then click "clear selected items"

Go here and run online scans (all), allow them to delete whatever they find:

TrendMicro HouseCall
eTrust AntiVirus Web Scanner
Panda ActiveScan
Note any thing that can't be fixed
Reboot when done. Rescan with HJT and post a new log here.

Concrete101

Post #10August 30, 2004, 2:38 PM UTC

I really appreciate your help so far little eagle,

Virus Results:
TrendMicro - None
eTrust - 15 files of win32.winshow.u
Panda - none

Whenever I reboot, Spywareguard announces that several items such as start page, and search info, is being changed to google.com When I tell it not to, the system starts bogging down, and ie has no start page, so I let it for now.

here is the most recent hjt log:

Logfile of HijackThis v1.98.2
Scan saved at 9:32:38 AM, on 8/30/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\WINDOWS\SYSTEM\USBMMKBD.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\DCFSSVC.EXE
C:\IMAGEMATE COMPACTFLASH USB\SANDICON.EXE
C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\SUPPORT.COM\BIN\TGCMD.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\EARTHLINK 5.0\UPDATEMGR.EXE
C:\PROGRAM FILES\EARTHLINK 5.0\CONMGR.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\SPYWAREGUARD\SGMAIN.EXE
C:\PROGRAM FILES\WINDOWS MEDIA COMPONENTS\ENCODER\WMENCAGT.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\WINDOWS\SYSTEM\MRTMNGR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGBHP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\MY DOCUMENTS\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = www.comcast.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast High-Speed Internet
F1 - win.ini: run=STARS.EXE
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [USBMMKBD] usbmmkbd.exe
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [Dcfssvc] c:\windows\System32\Drivers\dcfssvc.exe
O4 - HKLM\..\Run: [SandIcon] C:\ImageMate CompactFlash USB\SandIcon.Exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [HPScanPatch] C:\WINDOWS\SYSTEM\HPScanFix.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [UpdateMgr.exe] "C:\PROGRAM FILES\EARTHLINK 5.0\UPDATEMGR.EXE" -/NOCM
O4 - HKLM\..\Run: [ConMgr.exe] "C:\PROGRAM FILES\EARTHLINK 5.0\CONMGR.EXE"
O4 - HKLM\..\Run: [myCIO.com Splash] C:\WINDOWS\myCIO\VScan\Splash.exe
O4 - HKLM\..\Run: [myCIO.com ASaP] C:\WINDOWS\myCIO\Agent\myagttry.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Encompass_ENCMONTR] C:\Program Files\Easy Internet\ENCMONTR.EXE
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Startup: Encoder Agent.lnk = C:\Program Files\Windows Media Components\Encoder\WMENCAGT.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~1\MICROS~5\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O12 - Plugin for .3dml: C:\Program Files\Flatland\NProver.dll
O12 - Plugin for .mts: C:\Program Files\MetaCreations\MetaStream\npmetastream.dll
O16 - DPF: {ABE92375-8159-4759-A4B2-BF29E11CAAC3} (HearMe Microphone Configuration Wizard) - http://www.hearme.com/products/vp/config/plugins/evpcfg.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {17163BB4-107E-11D4-9B76-006097DF2317} (EABootStrap Class) - http://www.ea.com/downloads/games/common/b…trap/iegils.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pot5_x.cab
O16 - DPF: Yahoo! Klondike Solitaire - http://yog55.games.scd.yahoo.com/yog/y/ks11_x.cab
O16 - DPF: Yahoo! Freecell Solitaire - http://yog55.games.scd.yahoo.com/yog/y/fs9_x.cab
O16 - DPF: Yahoo! Towers 2.0 - http://download.games.yahoo.com/games/clients/y/ywt0_x.cab
O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/games/clients/y/fltt0_x.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://64.27.100.83/activex/AxisCamControl.ocx
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O18 - Protocol: stash - {44D81A5B-F195-11D2-A3D7-000086335B27} - C:\PROGRAM FILES\EARTHLINK 5.0\STASH100.DLL

little eagle

Post #11August 30, 2004, 9:04 PM UTC

Reboot in SAFE MODE.

Close all Browser and Program Windows and have HijackThis fix the following by checking the box beside each and then clicking on Fix checked.

F1 - win.ini: run=STARS.EXE

Concrete101

Post #12August 30, 2004, 9:29 PM UTC

I ran hjt in safe mode and deleted F1 - win.ini: run=STARS.EXE

little eagle

Post #13August 30, 2004, 9:51 PM UTC

I ran hjt in safe mode and deleted F1 - win.ini: run=STARS.EXE

And

Is the PC running fine?

Concrete101

Post #14August 30, 2004, 9:53 PM UTC

It seems to be running fine but I haven't figured why google keeps wanting to be the start page. I am going to change the home page, reboot and see if it wants to switch back to google.

Concrete101

Post #15August 30, 2004, 9:59 PM UTC

Switched home page to yahoo. when I rebooted spywareguard asked if I wanted to keep yahoo, so that was good, but it had some other search strings as google. I think everything is ok. That's the only message that pops up now, all the BHO warnings are gone, and the computer is finally usable!

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Constant Bho Problems

✨ Ask AI

Ask AI