I've Been Hijacked!

need help, posting log as follows

Logfile of HijackThis v1.98.2
Scan saved at 9:58:29 PM, on 10/17/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HIJACK THIS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b=hc
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://s-redirect.com/?b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://s-redirect.com/?a=2&b=hc
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://s-redirect.com/?a=2&b=hc
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://s-redirect.com/?a=2&b=hc
R3 - URLSearchHook: (no name) - {0584C3DE-F864-576F-054B-5D3E7785EC00} - C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O1 - Hosts: 69.61.29.131 yahoo.com
O2 - BHO: MxTargetObj Class - {0000607D-D204-42C7-8E46-216055BF9918} - C:\WINDOWS\mxTarget.dll
O2 - BHO: Band Class - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll (file missing)
O2 - BHO: MyWay Search Assistant BHO - {04079851-5845-4dea-848C-3ECD647AA554} - C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CheckIt 86 - {82DF1118-9B92-45d8-B78F-1737A69A06E1} - C:\Program Files\CheckIt\86\CheckIt86.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
O4 - HKLM\..\Run: [WLMonWPC54G] C:\Program Files\Linksys\Wireless-G Notebook Adapter\WLMon.exe
O4 - HKLM\..\Run: [elufzyzcy] C:\WINDOWS\System32\tqsqmdy.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
O4 - HKLM\..\Run: [EbatesMoeMoneyMaker0] "C:\Program Files\Ebates_MoeMoneyMaker\EbatesMoeMoneyMaker0.exe"
O4 - HKLM\..\Run: [9CD2FBCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3vafz1.exe
O4 - HKLM\..\Run: [9A35A576] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O4 - HKLM\..\Run: [9AA09666] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qsd3gszlmf.exe
O4 - HKLM\..\Run: [4C3CD276] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esel8sj4.exe
O4 - HKLM\..\Run: [92C46CEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mrl.exe
O4 - HKLM\..\Run: [5FE65356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u9d7.exe
O4 - HKLM\..\Run: [FB427DCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\iteqr67oo9z9.exe
O4 - HKLM\..\Run: [88EE14E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fm53t2e.exe
O4 - HKLM\..\Run: [551A7D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zt9jkyink.exe
O4 - HKLM\..\Run: [90CBAB6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeru2vn8e.exe
O4 - HKLM\..\Run: [9C21E7CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jg7pq7uz1.exe
O4 - HKLM\..\Run: [BC200D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7mij1yzxks.exe
O4 - HKLM\..\Run: [E6627CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dvr.exe
O4 - HKLM\..\Run: [F56468EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bcm.exe
O4 - HKLM\..\Run: [ACBDD9DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\noitfy20.exe
O4 - HKLM\..\Run: [90925F5B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jaxkf0.exe
O4 - HKLM\..\Run: [B0FAEEF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vjnx8z.exe
O4 - HKLM\..\Run: [42C0494E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k9xt593.exe
O4 - HKLM\..\Run: [B7C65C7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1ez.exe
O4 - HKLM\..\Run: [F6CA184B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ahq57x.exe
O4 - HKLM\..\Run: [44CC74F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\a4w.exe
O4 - HKLM\..\Run: [BE70D803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O4 - HKLM\..\Run: [E682798B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k3s01hwnw450.exe
O4 - HKLM\..\Run: [ABA0A60B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbrnq4p.exe
O4 - HKLM\..\Run: [DA25388B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vztaby1.exe
O4 - HKLM\..\Run: [B7D5C843] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qf11eg8h.exe
O4 - HKLM\..\Run: [AB58CA5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lkwifiiltj.exe
O4 - HKLM\..\Run: [14C45AEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3t7.exe
O4 - HKLM\..\Run: [C6FECA66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\364eyh50bkma.exe
O4 - HKLM\..\Run: [ABFCFE03] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vqjw8ezv.exe
O4 - HKLM\..\Run: [0B615A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3ngo.exe
O4 - HKLM\..\Run: [4D72DBD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x6memf.exe
O4 - HKLM\..\Run: [DD96ECE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\o7s22.exe
O4 - HKLM\..\Run: [FC16D8D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2qaz2h27.exe
O4 - HKLM\..\Run: [FA46D256] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jrqz.exe
O4 - HKLM\..\Run: [D73B0B4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\09dd6r.exe
O4 - HKLM\..\Run: [DE0B19FB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wl0wg.exe
O4 - HKLM\..\Run: [99601C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tmq.exe
O4 - HKLM\..\Run: [EF6E5303] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\584f.exe
O4 - HKLM\..\Run: [C926577E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6yjah8s37fw.exe
O4 - HKLM\..\Run: [BBEB30D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\92gvhvc.exe
O4 - HKLM\..\Run: [AADA58CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f97kzfapze.exe
O4 - HKLM\..\Run: [CBA1B65E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cp6jmx1.exe
O4 - HKLM\..\Run: [EE852546] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\16xbcdoiwnqy.exe
O4 - HKLM\..\Run: [8B0EECF3] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\n01rgv3oe5.exe
O4 - HKLM\..\Run: [B90E11EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\dg8n9as.exe
O4 - HKLM\..\Run: [F8EFC4DB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\4q9wpbh47pp0.exe
O4 - HKLM\..\Run: [E340D4D6] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6bm8w.exe
O4 - HKLM\..\Run: [ED3B97DE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\z1s257f2b.exe
O4 - HKLM\..\Run: [CFC01E7E] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\5vm.exe
O4 - HKLM\..\Run: [F8BDBE43] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\45808o.exe
O4 - HKLM\..\Run: [E060A24B] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6co53fd8tx8h.exe
O4 - HKLM\..\Run: [406711EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\zu97vt02.exe
O4 - HKLM\..\Run: [F28FEB46] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\ue9da.exe
O4 - HKLM\..\Run: [F0EF91EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\s4iei8xm.exe
O4 - HKLM\..\Run: [CBBC3D86] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\cy24u00.exe
O4 - HKLM\..\Run: [E01804EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\czcjqi6f.exe
O4 - HKLM\..\Run: [5BC51C66] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\twk9.exe
O4 - HKLM\..\Run: [A0C188FB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\3sqwr6h9ecz5.exe
O4 - HKLM\..\Run: [D02261E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wnm9wtkd5g.exe
O4 - HKLM\..\Run: [40D8D7D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pinxodmsn1x.exe
O4 - HKLM\..\Run: [51138C46] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uhezh9rs3.exe
O4 - HKLM\..\Run: [4ECF0D8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ex4vxmwg65i.exe
O4 - HKLM\..\Run: [89460FD3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\g4p5.exe
O4 - HKLM\..\Run: [BD84545B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9et9xbvpyw6.exe
O4 - HKLM\..\Run: [DE41FED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\oze3.exe
O4 - HKLM\..\Run: [880602CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vo3ws0ctfy.exe
O4 - HKLM\..\Run: [5B4E3206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ep7g.exe
O4 - HKLM\..\Run: [D07E3DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ge8dbnje2.exe
O4 - HKLM\..\Run: [8B5C4DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y2nubydg.exe
O4 - HKLM\..\Run: [BE6EA653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9h96.exe
O4 - HKLM\..\Run: [ED73F36E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\khupeji4v4g.exe
O4 - HKLM\..\Run: [95283AFB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x0h9vm6tllz.exe
O4 - HKLM\..\Run: [F2EF1E7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gc2swbcrshh.exe
O4 - HKLM\..\Run: [902C8A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c7f9did.exe
O4 - HKLM\..\Run: [C6494C53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j91x768q13zz.exe
O4 - HKLM\..\Run: [A9E4818B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z5zl.exe
O4 - HKLM\..\Run: [F46B1476] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\28p.exe
O4 - HKLM\..\Run: [8B983C5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n13k873rme.exe
O4 - HKLM\..\Run: [FE3DA04B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\swbc90.exe
O4 - HKLM\..\Run: [AB674B8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\30sl.exe
O4 - HKLM\..\Run: [E5C11706] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yg8irvp6o.exe
O4 - HKLM\..\Run: [AB39A50E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7gkt12lp.exe
O4 - HKLM\..\Run: [876D4CEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrsxq.exe
O4 - HKLM\..\Run: [AD943E76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esr6i.exe
O4 - HKLM\..\Run: [D0D73A76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\d9e7quu4w45.exe
O4 - HKLM\..\Run: [CCE6914B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\beyjkku4m3vb.exe
O4 - HKLM\..\Run: [F8E791D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i7dz.exe
O4 - HKLM\..\Run: [D1CCA20E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9e8k.exe
O4 - HKLM\..\Run: [D94184D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jtk3.exe
O4 - HKLM\..\Run: [CE5FD0F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ndpao.exe
O4 - HKLM\..\Run: [886D0E6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y971g6wqoz.exe
O4 - HKLM\..\Run: [0DB18B5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x4iv6k55.exe
O4 - HKLM\..\Run: [90AE025E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y1846niaxpx.exe
O4 - HKLM\..\Run: [1ABF9AF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i5vll.exe
O4 - HKLM\..\Run: [9D6045F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9ljyvjpri0h.exe
O4 - HKLM\..\Run: [0DAF7566] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\125my.exe
O4 - HKLM\..\Run: [B6204CDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0q2qxja18qrs.exe
O4 - HKLM\..\Run: [8E0791DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7gbnhwui.exe
O4 - HKLM\..\Run: [0C593FE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vn5f5.exe
O4 - HKLM\..\Run: [8C9E4CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9bdhg.exe
O4 - HKLM\..\Run: [F1B85266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zr496omywi.exe
O4 - HKLM\..\Run: [D07CBE6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y75pge86ook.exe
O4 - HKLM\..\Run: [812957E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\w1zn2plux.exe
O4 - HKLM\..\Run: [D1045CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tp46w4.exe
O4 - HKLM\..\Run: [0EC56206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1isg.exe
O4 - HKLM\..\Run: [CEF32F76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lsnutg706.exe
O4 - HKLM\..\Run: [DC14D7E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z7vr7l29.exe
O4 - HKLM\..\Run: [CA0E93EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kt8ufzan2k2.exe
O4 - HKLM\..\Run: [4B734DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\no49rpya.exe
O4 - HKLM\..\Run: [855D625E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5rka64.exe
O4 - HKLM\..\Run: [FD3CD246] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\37qnrruk.exe
O4 - HKLM\..\Run: [DCCC24C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y6sf37.exe
O4 - HKLM\..\Run: [DAA34046] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2mb4mggu.exe
O4 - HKLM\..\Run: [979F4BEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\812hu.exe
O4 - HKLM\..\Run: [A00AF68B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\l7s9apwgrid3.exe
O4 - HKLM\..\Run: [F00F8CE3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5titqj4cou9.exe
O4 - HKLM\..\Run: [E9EC925E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yc48.exe
O4 - HKLM\..\Run: [9BA644EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vnl7svq.exe
O4 - HKLM\..\Run: [E146BE53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4sab85fsxd4.exe
O4 - HKLM\..\Run: [9070456B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gpejii.exe
O4 - HKLM\..\Run: [FA8D80E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ezkry.exe
O4 - HKLM\..\Run: [D0B38B4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\44lqo8t19.exe
O4 - HKLM\..\Run: [AB057146] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\e0m6q8jri1.exe
O4 - HKLM\..\Run: [AA2874CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zqtvbpv.exe
O4 - HKLM\..\Run: [E9CD158B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\656n.exe
O4 - HKLM\..\Run: [C1619B66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bdak9zlwoap.exe
O4 - HKLM\..\Run: [442A1C8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbx3yhs.exe
O4 - HKLM\..\Run: [804E9C8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lf7m.exe
O4 - HKLM\..\Run: [D51B3E8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jd8tcd1befj.exe
O4 - HKLM\..\Run: [A4F5FD73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hf06n.exe
O4 - HKLM\..\Run: [87813BCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\t9lu1qfqgk.exe
O4 - HKLM\..\Run: [0CEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dm17.exe
O4 - HKLM\..\Run: [EE46A203] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mzsf.exe
O4 - HKLM\..\Run: [169F8266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\84tj1.exe
O4 - HKLM\..\Run: [A13A16EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\07x0i69.exe
O4 - HKLM\..\Run: [93C50C76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9zs.exe
O4 - HKLM\..\Run: [A3A09A73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wg1ywhl.exe
O4 - HKLM\..\Run: [8173CC06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mbek3k4xx.exe
O4 - HKLM\..\Run: [59E4AB56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y5z7.exe
O4 - HKLM\..\Run: [50254EF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n5dpe92.exe
O4 - HKLM\..\Run: [906264EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zpk.exe
O4 - HKLM\..\Run: [9B9D3756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\13938mmw.exe
O4 - HKLM\..\Run: [FBF2E056] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zlbibv.exe
O4 - HKLM\..\Run: [DAAE11C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ncjq3b3.exe
O4 - HKLM\..\Run: [E8AC0D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f7r7bvlzmcae.exe
O4 - HKLM\..\Run: [AE9C4653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ru811x.exe
O4 - HKLM\..\Run: [D86FB8FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\66oee.exe
O4 - HKLM\..\Run: [BBEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qq5x.exe
O4 - HKLM\..\Run: [E1AC2FCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c9ys2j6.exe
O4 - HKLM\..\Run: [9A23327E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4ow6hwsg.exe
O4 - HKLM\..\Run: [FD5351F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\74j2zq.exe
O4 - HKLM\..\Run: [1F837A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ykp1u.exe
O4 - HKLM\..\Run: [CFBD8BFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\q90sc.exe
O4 - HKLM\..\Run: [8DE549D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gdxl31w4qrke.exe
O4 - HKLM\..\Run: [C7C738E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qhd.exe
O4 - HKLM\..\Run: [EA34AC83] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tx2izb6hk.exe
O4 - HKLM\..\Run: [90DA8DF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jw59gti5.exe
O4 - HKLM\..\Run: [E3EC89F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3crigq904b7u.exe
O4 - HKLM\..\Run: [AE8F337E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4q4ddkt553h.exe
O4 - HKLM\..\Run: [A7FF2F53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c8wfjz6xrjqi.exe
O4 - HKLM\..\Run: [96A24A53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0iyayo8.exe
O4 - HKLM\..\Run: [C6C50873] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7yt.exe
O4 - HKLM\..\Run: [CAC6D586] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gcrl31jj4a.exe
O4 - HKLM\..\Run: [A3A34FF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1t9p3e8.exe
O4 - HKLM\..\Run: [A164586B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dm.exe
O4 - HKLM\..\Run: [09E76206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qccg.exe
O4 - HKLM\..\Run: [D4C520F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\azv.exe
O4 - HKLM\..\Run: [DDE8FA4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jpjipe64rixj.exe
O4 - HKLM\..\Run: [43646A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nc7.exe
O4 - HKLM\..\Run: [C842E356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\b9c9fwkvw.exe
O4 - HKLM\..\Run: [EC230866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s524irh.exe
O4 - HKLM\..\Run: [F6E8500B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4y2jffwuki.exe
O4 - HKLM\..\Run: [94CC6A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s33.exe
O4 - HKLM\..\Run: [E76474F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fdr.exe
O4 - HKLM\..\Run: [BD929086] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9vrnag81.exe
O4 - HKLM\..\Run: [AB8B5A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gykxkga0hi.exe
O4 - HKLM\..\Run: [8D0FCA0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9iusdxq22.exe
O4 - HKLM\..\Run: [836270E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xuf.exe
O4 - HKLM\..\Run: [CD2451DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\acv5oh.exe
O4 - HKLM\..\Run: [5D810CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gym6laf9.exe
O4 - HKLM\..\Run: [11C724E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uig.exe
O4 - HKLM\..\Run: [BB184F0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5fy4w8ezaapb.exe
O4 - HKLM\..\Run: [E0807CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\klk5y.exe
O4 - HKLM\..\Run: [517D8DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\41gfe5jk4pcs.exe
O4 - HKLM\..\Run: [F857FF06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zngaqyc5kx.exe
O4 - HKLM\..\Run: [CE710A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8d80m0.exe
O4 - HKLM\..\Run: [B940504E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j8u6af8uza.exe
O4 - HKLM\..\Run: [9C423A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4k5elznb.exe
O4 - HKLM\..\Run: [9C54D263] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nvf67.exe
O4 - HKLM\..\Run: [58410ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cvi7.exe
O4 - HKLM\..\Run: [A803048B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pjjcaf0.exe
O4 - HKLM\..\Run: [0EEC88D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni37.exe
O4 - HKLM\..\Run: [51E7DCD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeg7.exe
O4 - HKLM\..\Run: [84CC6CF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s2v.exe
O4 - HKLM\..\Run: [AA9F54F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fknrqz0h.exe
O4 - HKLM\..\Run: [0A9F91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5x8ai.exe
O4 - HKLM\..\Run: [AB465D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\znz5ozat.exe
O4 - HKLM\..\Run: [916530EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tnk.exe
O4 - HKLM\..\Run: [9D2E34DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nxmrn3rhfkkx.exe
O4 - HKLM\..\Run: [9198BFCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8b3o7ji.exe
O4 - HKLM\..\Run: [DE3980F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5m46lafeevx.exe
O4 - HKLM\..\Run: [E1D8C64E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\35rh2ivy.exe
O4 - HKLM\..\Run: [E518D5CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrm9gulnlqt.exe
O4 - HKLM\..\Run: [B49532D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r9fcvy.exe
O4 - HKLM\..\Run: [9AA64C0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xs56cv.exe
O4 - HKLM\..\Run: [48396746] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2hlf15j.exe
O4 - HKLM\..\Run: [BD2E568E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nzq8v5x8aio.exe
O4 - HKLM\..\Run: [D0DCC406] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cei1vogm.exe
O4 - HKLM\..\Run: [E9C5138B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\75qn.exe
O4 - HKLM\..\Run: [C1645863] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dd.exe
O4 - HKLM\..\Run: [AFC9108B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nquczbh.exe
O4 - HKLM\..\Run: [D4C4464B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\osxay7b.exe
O4 - HKLM\..\Run: [0F8E7ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\sg9roteu.exe
O4 - HKLM\..\Run: [C4539F0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0blqc0.exe
O4 - HKLM\..\Run: [E5C730FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cnz.exe
O4 - HKLM\..\Run: [8CB4C9FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u443a.exe
O4 - HKLM\..\Run: [A1E6BCCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yeot.exe
O4 - HKLM\..\Run: [A3C148F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jjm0k.exe
O4 - HKLM\..\Run: [B9460856] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gtsx.exe
O4 - HKLM\..\Run: [F955BE86] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uvsg6x99.exe
O4 - HKLM\..\Run: [AA9A14F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cor6ycc7g.exe
O4 - HKLM\..\Run: [FE4038D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pze2.exe
O4 - HKLM\..\Run: [BBE7FD76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wxq8691cv50.exe
O4 - HKLM\..\Run: [D1C42A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\li3hqo.exe
O4 - HKLM\..\Run: [FD9CFCF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\exruo.exe
O4 - HKLM\..\Run: [97950456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r1e3qz.exe
O4 - HKLM\..\Run: [9815058B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tf6a6w3914.exe
O4 - HKLM\..\Run: [D064766E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zd1.exe
O4 - HKLM\..\Run: [A016C9DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fy3662sb.exe
O4 - HKLM\..\Run: [DD650ACB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u4p787l9ltb4.exe
O4 - HKLM\..\Run: [9DEF65D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\psbuhx5c.exe
O4 - HKLM\..\Run: [B9D4CAF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dul3k.exe
O4 - HKLM\..\Run: [8DB4B8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hthtua2gk3.exe
O4 - HKLM\..\Run: [EE39174E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\64tpr0n47.exe
O4 - HKLM\..\Run: [906A7D6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fw10m8e01y.exe
O4 - HKLM\..\Run: [B46B086E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\29j.exe
O4 - HKLM\..\Run: [FBCD6243] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ouq7i3gj.exe
O4 - HKLM\..\Run: [D8AD98FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7d2kr93.exe
O4 - HKLM\..\Run: [9B680673] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\p6x5k457p0q.exe
O4 - HKLM\..\Run: [DFE67A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wydk.exe
O4 - HKLM\..\Run: [B4335756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\opvw7yoi3q6n.exe
O4 - HKLM\..\Run: [B7C44866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1pb.exe
O4 - HKLM\..\Run: [91D94E8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fr853p1o.exe
O4 - HKLM\..\Run: [B8167253] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5o5b6v6pf3.exe
O4 - HKLM\..\Run: [F76A68F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f3u.exe
O4 - HKLM\..\Run: [B73197CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x9mreo.exe
O4 - HKLM\..\Run: [B4814456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\m6rpvveza8su.exe
O4 - HKLM\..\Run: [A34D82DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8obqu4xxu.exe
O4 - HKLM\..\Run: [E69C0043] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r4k0qno8.exe
O4 - HKLM\..\Run: [9C1B0CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wlgpc.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [browselc] C:\WINDOWS\System32\browselc.exe
O4 - HKCU\..\Run: [rpcns4] C:\WINDOWS\System32\rpcns4.exe
O4 - HKCU\..\Run: [hhornthh] C:\WINDOWS\system32\hhornthh.exe
O4 - HKCU\..\Run: [orhhorors-] C:\WINDOWS\orhhorors-.exe
O4 - HKCU\..\Run: [9CD2FBCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3vafz1.exe
O4 - HKCU\..\Run: [PEsy] C:\WINDOWS\system32\PEsy.exe
O4 - HKCU\..\Run: [oror] C:\WINDOWS\oror.exe
O4 - HKCU\..\Run: [9A35A576] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O4 - HKCU\..\Run: [32SPhh] C:\WINDOWS\system32\32SPhh.exe
O4 - HKCU\..\Run: [9AA09666] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qsd3gszlmf.exe
O4 - HKCU\..\Run: [hhs-s-] C:\WINDOWS\hhs-s-.exe
O4 - HKCU\..\Run: [4C3CD276] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esel8sj4.exe
O4 - HKCU\..\Run: [nt64PE] C:\WINDOWS\system32\nt64PE.exe
O4 - HKCU\..\Run: [PEPEsynt] C:\WINDOWS\PEPEsynt.exe
O4 - HKCU\..\Run: [92C46CEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mrl.exe
O4 - HKCU\..\Run: [5FE65356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u9d7.exe
O4 - HKCU\..\Run: [s-PE] C:\WINDOWS\s-PE.exe
O4 - HKCU\..\Run: [FB427DCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\iteqr67oo9z9.exe
O4 - HKCU\..\Run: [326464PEs-] C:\WINDOWS\326464PEs-.exe
O4 - HKCU\..\Run: [88EE14E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fm53t2e.exe
O4 - HKCU\..\Run: [32PE] C:\WINDOWS\system32\32PE.exe
O4 - HKCU\..\Run: [s-or] C:\WINDOWS\system32\s-or.exe
O4 - HKCU\..\Run: [64ntsy] C:\WINDOWS\system32\64ntsy.exe
O4 - HKCU\..\Run: [syms] C:\WINDOWS\system32\syms.exe
O4 - HKCU\..\Run: [msnt64hh] C:\WINDOWS\system32\msnt64hh.exe
O4 - HKCU\..\Run: [64646464] C:\WINDOWS\system32\64646464.exe
O4 - HKCU\..\Run: [32syhhsy] C:\WINDOWS\system32\32syhhsy.exe
O4 - HKCU\..\Run: [sysy] C:\WINDOWS\system32\sysy.exe
O4 - HKCU\..\Run: [551A7D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zt9jkyink.exe
O4 - HKCU\..\Run: [90CBAB6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeru2vn8e.exe
O4 - HKCU\..\Run: [sySPmssy] C:\WINDOWS\system32\sySPmssy.exe
O4 - HKCU\..\Run: [9C21E7CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jg7pq7uz1.exe
O4 - HKCU\..\Run: [64hhSPmsnt] C:\WINDOWS\64hhSPmsnt.exe
O4 - HKCU\..\Run: [BC200D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7mij1yzxks.exe
O4 - HKCU\..\Run: [64hhPESP32] C:\WINDOWS\64hhPESP32.exe
O4 - HKCU\..\Run: [E6627CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dvr.exe
O4 - HKCU\..\Run: [nt3232msPE] C:\WINDOWS\system32\nt3232msPE.exe
O4 - HKCU\..\Run: [F56468EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bcm.exe
O4 - HKCU\..\Run: [ntsySPhhor] C:\WINDOWS\system32\ntsySPhhor.exe
O4 - HKCU\..\Run: [ACBDD9DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\noitfy20.exe
O4 - HKCU\..\Run: [SPs-64SPhh] C:\WINDOWS\system32\SPs-64SPhh.exe
O4 - HKCU\..\Run: [or64] C:\WINDOWS\or64.exe
O4 - HKCU\..\Run: [sy32PEms] C:\WINDOWS\system32\sy32PEms.exe
O4 - HKCU\..\Run: [nts-SP] C:\WINDOWS\system32\nts-SP.exe
O4 - HKCU\..\Run: [or32] C:\WINDOWS\system32\or32.exe
O4 - HKCU\..\Run: [PEmsornt32] C:\WINDOWS\PEmsornt32.exe
O4 - HKCU\..\Run: [nt3232] C:\WINDOWS\system32\nt3232.exe
O4 - HKCU\..\Run: [msntnt] C:\WINDOWS\system32\msntnt.exe
O4 - HKCU\..\Run: [hh3264] C:\WINDOWS\system32\hh3264.exe
O4 - HKCU\..\Run: [90925F5B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jaxkf0.exe
O4 - HKCU\..\Run: [nts-syorms] C:\WINDOWS\system32\nts-syorms.exe
O4 - HKCU\..\Run: [B0FAEEF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vjnx8z.exe
O4 - HKCU\..\Run: [s-64nts-] C:\WINDOWS\system32\s-64nts-.exe
O4 - HKCU\..\Run: [42C0494E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k9xt593.exe
O4 - HKCU\..\Run: [64syPE] C:\WINDOWS\64syPE.exe
O4 - HKCU\..\Run: [B7C65C7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1ez.exe
O4 - HKCU\..\Run: [s-nt] C:\WINDOWS\s-nt.exe
O4 - HKCU\..\Run: [F6CA184B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ahq57x.exe
O4 - HKCU\..\Run: [PEhhntmsPE] C:\WINDOWS\PEhhntmsPE.exe
O4 - HKCU\..\Run: [hhor64hhsy] C:\WINDOWS\hhor64hhsy.exe
O4 - HKCU\..\Run: [ntPEorhh] C:\WINDOWS\system32\ntPEorhh.exe
O4 - HKCU\..\Run: [hhntPE] C:\WINDOWS\hhntPE.exe
O4 - HKCU\..\Run: [32hhor] C:\WINDOWS\system32\32hhor.exe
O4 - HKCU\..\Run: [orms] C:\WINDOWS\orms.exe
O4 - HKCU\..\Run: [64or64PEs-] C:\WINDOWS\system32\64or64PEs-.exe
O4 - HKCU\..\Run: [44CC74F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\a4w.exe
O4 - HKCU\..\Run: [or64hhSP] C:\WINDOWS\or64hhSP.exe
O4 - HKCU\..\Run: [BE70D803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O4 - HKCU\..\Run: [E682798B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k3s01hwnw450.exe
O4 - HKCU\..\Run: [ABA0A60B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbrnq4p.exe
O4 - HKCU\..\Run: [DA25388B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vztaby1.exe
O4 - HKCU\..\Run: [B7D5C843] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qf11eg8h.exe
O4 - HKCU\..\Run: [AB58CA5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lkwifiiltj.exe
O4 - HKCU\..\Run: [14C45AEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3t7.exe
O4 - HKCU\..\Run: [C6FECA66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\364eyh50bkma.exe
O4 - HKCU\..\Run: [ABFCFE03] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vqjw8ezv.exe
O4 - HKCU\..\Run: [0B615A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3ngo.exe
O4 - HKCU\..\Run: [4D72DBD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x6memf.exe
O4 - HKCU\..\Run: [DD96ECE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\o7s22.exe
O4 - HKCU\..\Run: [FC16D8D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2qaz2h27.exe
O4 - HKCU\..\Run: [FA46D256] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jrqz.exe
O4 - HKCU\..\Run: [D73B0B4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\09dd6r.exe
O4 - HKCU\..\Run: [DE0B19FB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wl0wg.exe
O4 - HKCU\..\Run: [99601C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tmq.exe
O4 - HKCU\..\Run: [EF6E5303] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\584f.exe
O4 - HKCU\..\Run: [C926577E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6yjah8s37fw.exe
O4 - HKCU\..\Run: [BBEB30D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\92gvhvc.exe
O4 - HKCU\..\Run: [AADA58CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f97kzfapze.exe
O4 - HKCU\..\Run: [CBA1B65E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cp6jmx1.exe
O4 - HKCU\..\Run: [EE852546] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\16xbcdoiwnqy.exe
O4 - HKCU\..\Run: [D02261E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wnm9wtkd5g.exe
O4 - HKCU\..\Run: [40D8D7D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pinxodmsn1x.exe
O4 - HKCU\..\Run: [51138C46] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uhezh9rs3.exe
O4 - HKCU\..\Run: [4ECF0D8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ex4vxmwg65i.exe
O4 - HKCU\..\Run: [89460FD3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\g4p5.exe
O4 - HKCU\..\Run: [BD84545B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9et9xbvpyw6.exe
O4 - HKCU\..\Run: [DE41FED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\oze3.exe
O4 - HKCU\..\Run: [880602CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vo3ws0ctfy.exe
O4 - HKCU\..\Run: [5B4E3206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ep7g.exe
O4 - HKCU\..\Run: [D07E3DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ge8dbnje2.exe
O4 - HKCU\..\Run: [8B5C4DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y2nubydg.exe
O4 - HKCU\..\Run: [BE6EA653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9h96.exe
O4 - HKCU\..\Run: [ED73F36E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\khupeji4v4g.exe
O4 - HKCU\..\Run: [95283AFB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x0h9vm6tllz.exe
O4 - HKCU\..\Run: [F2EF1E7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gc2swbcrshh.exe
O4 - HKCU\..\Run: [902C8A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c7f9did.exe
O4 - HKCU\..\Run: [A9E4818B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z5zl.exe
O4 - HKCU\..\Run: [C6494C53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j91x768q13zz.exe
O4 - HKCU\..\Run: [F46B1476] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\28p.exe
O4 - HKCU\..\Run: [8B983C5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n13k873rme.exe
O4 - HKCU\..\Run: [FE3DA04B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\swbc90.exe
O4 - HKCU\..\Run: [SpywareGuardPlus] C:\WINDOWS\system32\winmm64.exe
O4 - HKCU\..\Run: [syor] C:\WINDOWS\system32\syor.exe
O4 - HKCU\..\Run: [PEs-] C:\WINDOWS\system32\PEs-.exe
O4 - HKCU\..\Run: [AB674B8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\30sl.exe
O4 - HKCU\..\Run: [64PEsyPE] C:\WINDOWS\system32\64PEsyPE.exe
O4 - HKCU\..\Run: [E5C11706] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yg8irvp6o.exe
O4 - HKCU\..\Run: [PEmshh] C:\WINDOWS\system32\PEmshh.exe
O4 - HKCU\..\Run: [AB39A50E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7gkt12lp.exe
O4 - HKCU\..\Run: [3232nts-32] C:\WINDOWS\system32\3232nts-32.exe
O4 - HKCU\..\Run: [s-3264PE] C:\WINDOWS\s-3264PE.exe
O4 - HKCU\..\Run: [ntSPms32hh] C:\WINDOWS\system32\ntSPms32hh.exe
O4 - HKCU\..\Run: [PEhhsy] C:\WINDOWS\PEhhsy.exe
O4 - HKCU\..\Run: [64sy] C:\WINDOWS\system32\64sy.exe
O4 - HKCU\..\Run: [876D4CEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrsxq.exe
O4 - HKCU\..\Run: [hhors-hh] C:\WINDOWS\system32\hhors-hh.exe
O4 - HKCU\..\Run: [AD943E76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esr6i.exe
O4 - HKCU\..\Run: [SPs-] C:\WINDOWS\SPs-.exe
O4 - HKCU\..\Run: [D0D73A76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\d9e7quu4w45.exe
O4 - HKCU\..\Run: [PEs-PESP] C:\WINDOWS\PEs-PESP.exe
O4 - HKCU\..\Run: [SP32nthh] C:\WINDOWS\SP32nthh.exe
O4 - HKCU\..\Run: [6464] C:\WINDOWS\system32\6464.exe
O4 - HKCU\..\Run: [orsyorPE] C:\WINDOWS\system32\orsyorPE.exe
O4 - HKCU\..\Run: [CCE6914B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\beyjkku4m3vb.exe
O4 - HKCU\..\Run: [orsyms32PE] C:\WINDOWS\system32\orsyms32PE.exe
O4 - HKCU\..\Run: [F8E791D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i7dz.exe
O4 - HKCU\..\Run: [syntSPPEor] C:\WINDOWS\syntSPPEor.exe
O4 - HKCU\..\Run: [D1CCA20E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9e8k.exe
O4 - HKCU\..\Run: [ors-] C:\WINDOWS\ors-.exe
O4 - HKCU\..\Run: [64hhSPSPs-] C:\WINDOWS\system32\64hhSPSPs-.exe
O4 - HKCU\..\Run: [s-32] C:\WINDOWS\system32\s-32.exe
O4 - HKCU\..\Run: [PEhh] C:\WINDOWS\PEhh.exe
O4 - HKCU\..\Run: [D94184D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jtk3.exe
O4 - HKCU\..\Run: [msnt] C:\WINDOWS\msnt.exe
O4 - HKCU\..\Run: [CE5FD0F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ndpao.exe
O4 - HKCU\..\Run: [symss-hhhh] C:\WINDOWS\system32\symss-hhhh.exe
O4 - HKCU\..\Run: [886D0E6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y971g6wqoz.exe
O4 - HKCU\..\Run: [ms3264] C:\WINDOWS\system32\ms3264.exe
O4 - HKCU\..\Run: [ntPE64] C:\WINDOWS\ntPE64.exe
O4 - HKCU\..\Run: [msPEs-] C:\WINDOWS\msPEs-.exe
O4 - HKCU\..\Run: [0DB18B5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x4iv6k55.exe
O4 - HKCU\..\Run: [s-SPsy] C:\WINDOWS\system32\s-SPsy.exe
O4 - HKCU\..\Run: [90AE025E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y1846niaxpx.exe
O4 - HKCU\..\Run: [SPms] C:\WINDOWS\system32\SPms.exe
O4 - HKCU\..\Run: [1ABF9AF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i5vll.exe
O4 - HKCU\..\Run: [32PESP] C:\WINDOWS\system32\32PESP.exe
O4 - HKCU\..\Run: [9D6045F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9ljyvjpri0h.exe
O4 - HKCU\..\Run: [symsms] C:\WINDOWS\system32\symsms.exe
O4 - HKCU\..\Run: [0DAF7566] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\125my.exe
O4 - HKCU\..\Run: [32s-hhms32] C:\WINDOWS\system32\32s-hhms32.exe
O4 - HKCU\..\Run: [s-SP64] C:\WINDOWS\s-SP64.exe
O4 - HKCU\..\Run: [B6204CDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0q2qxja18qrs.exe
O4 - HKCU\..\Run: [hhs-msmsor] C:\WINDOWS\system32\hhs-msmsor.exe
O4 - HKCU\..\Run: [8E0791DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7gbnhwui.exe
O4 - HKCU\..\Run: [orsys-ms] C:\WINDOWS\system32\orsys-ms.exe
O4 - HKCU\..\Run: [0C593FE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vn5f5.exe
O4 - HKCU\..\Run: [64PEms] C:\WINDOWS\64PEms.exe
O4 - HKCU\..\Run: [8C9E4CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9bdhg.exe
O4 - HKCU\..\Run: [32s-s-SP] C:\WINDOWS\32s-s-SP.exe
O4 - HKCU\..\Run: [F1B85266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zr496omywi.exe
O4 - HKCU\..\Run: [mss-hh32] C:\WINDOWS\system32\mss-hh32.exe
O4 - HKCU\..\Run: [s-32PEPE64] C:\WINDOWS\system32\s-32PEPE64.exe
O4 - HKCU\..\Run: [64ntPE] C:\WINDOWS\64ntPE.exe
O4 - HKCU\..\Run: [PEs-ors-] C:\WINDOWS\system32\PEs-ors-.exe
O4 - HKCU\..\Run: [D07CBE6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y75pge86ook.exe
O4 - HKCU\..\Run: [nts-msor] C:\WINDOWS\nts-msor.exe
O4 - HKCU\..\Run: [812957E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\w1zn2plux.exe
O4 - HKCU\..\Run: [32hhs-nt] C:\WINDOWS\32hhs-nt.exe
O4 - HKCU\..\Run: [D1045CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tp46w4.exe
O4 - HKCU\..\Run: [s-syPE] C:\WINDOWS\system32\s-syPE.exe
O4 - HKCU\..\Run: [0EC56206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1isg.exe
O4 - HKCU\..\Run: [PEmss-ntSP] C:\WINDOWS\system32\PEmss-ntSP.exe
O4 - HKCU\..\Run: [CEF32F76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lsnutg706.exe
O4 - HKCU\..\Run: [sys-PEPE] C:\WINDOWS\system32\sys-PEPE.exe
O4 - HKCU\..\Run: [s-hhhh] C:\WINDOWS\s-hhhh.exe
O4 - HKCU\..\Run: [DC14D7E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z7vr7l29.exe
O4 - HKCU\..\Run: [CA0E93EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kt8ufzan2k2.exe
O4 - HKCU\..\Run: [msSPs-] C:\WINDOWS\msSPs-.exe
O4 - HKCU\..\Run: [4B734DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\no49rpya.exe
O4 - HKCU\..\Run: [s-SP] C:\WINDOWS\s-SP.exe
O4 - HKCU\..\Run: [855D625E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5rka64.exe
O4 - HKCU\..\Run: [sys-] C:\WINDOWS\sys-.exe
O4 - HKCU\..\Run: [hhorSPSP32] C:\WINDOWS\system32\hhorSPSP32.exe
O4 - HKCU\..\Run: [ntntsynt] C:\WINDOWS\ntntsynt.exe
O4 - HKCU\..\Run: [syPE] C:\WINDOWS\syPE.exe
O4 - HKCU\..\Run: [nthhhh] C:\WINDOWS\nthhhh.exe
O4 - HKCU\..\Run: [s-SP3264] C:\WINDOWS\system32\s-SP3264.exe
O4 - HKCU\..\Run: [32hh] C:\WINDOWS\32hh.exe
O4 - HKCU\..\Run: [ntms32sysy] C:\WINDOWS\system32\ntms32sysy.exe
O4 - HKCU\..\Run: [PEntnt] C:\WINDOWS\system32\PEntnt.exe
O4 - HKCU\..\Run: [6432] C:\WINDOWS\system32\6432.exe
O4 - HKCU\..\Run: [syorPEnt] C:\WINDOWS\system32\syorPEnt.exe
O4 - HKCU\..\Run: [32ms] C:\WINDOWS\32ms.exe
O4 - HKCU\..\Run: [hhSPornt64] C:\WINDOWS\system32\hhSPornt64.exe
O4 - HKCU\..\Run: [sy32] C:\WINDOWS\sy32.exe
O4 - HKCU\..\Run: [SPs-sy] C:\WINDOWS\system32\SPs-sy.exe
O4 - HKCU\..\Run: [FD3CD246] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\37qnrruk.exe
O4 - HKCU\..\Run: [SPms64] C:\WINDOWS\SPms64.exe
O4 - HKCU\..\Run: [64hh] C:\WINDOWS\64hh.exe
O4 - HKCU\..\Run: [PEntorPEnt] C:\WINDOWS\PEntorPEnt.exe
O4 - HKCU\..\Run: [hhs-SPPEnt] C:\WINDOWS\hhs-SPPEnt.exe
O4 - HKCU\..\Run: [DCCC24C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y6sf37.exe
O4 - HKCU\..\Run: [DAA34046] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2mb4mggu.exe
O4 - HKCU\..\Run: [979F4BEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\812hu.exe
O4 - HKCU\..\Run: [SP64] C:\WINDOWS\SP64.exe
O4 - HKCU\..\Run: [A00AF68B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\l7s9apwgrid3.exe
O4 - HKCU\..\Run: [orSPhh3232] C:\WINDOWS\orSPhh3232.exe
O4 - HKCU\..\Run: [F00F8CE3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5titqj4cou9.exe
O4 - HKCU\..\Run: [ntsys-] C:\WINDOWS\system32\ntsys-.exe
O4 - HKCU\..\Run: [E9EC925E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yc48.exe
O4 - HKCU\..\Run: [hhhh32] C:\WINDOWS\hhhh32.exe
O4 - HKCU\..\Run: [9BA644EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vnl7svq.exe
O4 - HKCU\..\Run: [msmsms] C:\WINDOWS\system32\msmsms.exe
O4 - HKCU\..\Run: [SPPEPE] C:\WINDOWS\system32\SPPEPE.exe
O4 - HKCU\..\Run: [hhsyornt] C:\WINDOWS\system32\hhsyornt.exe
O4 - HKCU\..\Run: [hhsy] C:\WINDOWS\hhsy.exe
O4 - HKCU\..\Run: [E146BE53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4sab85fsxd4.exe
O4 - HKCU\..\Run: [64s-nt32or] C:\WINDOWS\64s-nt32or.exe
O4 - HKCU\..\Run: [9070456B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gpejii.exe
O4 - HKCU\..\Run: [hhor64msSP] C:\WINDOWS\hhor64msSP.exe
O4 - HKCU\..\Run: [FA8D80E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ezkry.exe
O4 - HKCU\..\Run: [s-msorhh] C:\WINDOWS\s-msorhh.exe
O4 - HKCU\..\Run: [D0B38B4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\44lqo8t19.exe
O4 - HKCU\..\Run: [syntsys-] C:\WINDOWS\system32\syntsys-.exe
O4 - HKCU\..\Run: [s-msmsntSP] C:\WINDOWS\s-msmsntSP.exe
O4 - HKCU\..\Run: [msSP] C:\WINDOWS\system32\msSP.exe
O4 - HKCU\..\Run: [hh64nthh] C:\WINDOWS\system32\hh64nthh.exe
O4 - HKCU\..\Run: [PEms] C:\WINDOWS\PEms.exe
O4 - HKCU\..\Run: [64ms64msnt] C:\WINDOWS\64ms64msnt.exe
O4 - HKCU\..\Run: [64SPms] C:\WINDOWS\64SPms.exe
O4 - HKCU\..\Run: [AB057146] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\e0m6q8jri1.exe
O4 - HKCU\..\Run: [64oror] C:\WINDOWS\system32\64oror.exe
O4 - HKCU\..\Run: [AA2874CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zqtvbpv.exe
O4 - HKCU\..\Run: [sysys-] C:\WINDOWS\sysys-.exe
O4 - HKCU\..\Run: [E9CD158B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\656n.exe
O4 - HKCU\..\Run: [syhhnt] C:\WINDOWS\system32\syhhnt.exe
O4 - HKCU\..\Run: [s-s-or64] C:\WINDOWS\s-s-or64.exe
O4 - HKCU\..\Run: [SPmsmsPE64] C:\WINDOWS\system32\SPmsmsPE64.exe
O4 - HKCU\..\Run: [msorms] C:\WINDOWS\system32\msorms.exe
O4 - HKCU\..\Run: [hh64] C:\WINDOWS\hh64.exe
O4 - HKCU\..\Run: [C1619B66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bdak9zlwoap.exe
O4 - HKCU\..\Run: [sys-s-] C:\WINDOWS\system32\sys-s-.exe
O4 - HKCU\..\Run: [msSPPEPE] C:\WINDOWS\msSPPEPE.exe
O4 - HKCU\..\Run: [or3232] C:\WINDOWS\system32\or3232.exe
O4 - HKCU\..\Run: [804E9C8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lf7m.exe
O4 - HKCU\..\Run: [442A1C8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbx3yhs.exe
O4 - HKCU\..\Run: [D51B3E8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jd8tcd1befj.exe
O4 - HKCU\..\Run: [A4F5FD73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hf06n.exe
O4 - HKCU\..\Run: [87813BCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\t9lu1qfqgk.exe
O4 - HKCU\..\Run: [0CEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dm17.exe
O4 - HKCU\..\Run: [EE46A203] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mzsf.exe
O4 - HKCU\..\Run: [169F8266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\84tj1.exe
O4 - HKCU\..\Run: [A13A16EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\07x0i69.exe
O4 - HKCU\..\Run: [93C50C76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9zs.exe
O4 - HKCU\..\Run: [A3A09A73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wg1ywhl.exe
O4 - HKCU\..\Run: [8173CC06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mbek3k4xx.exe
O4 - HKCU\..\Run: [59E4AB56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y5z7.exe
O4 - HKCU\..\Run: [50254EF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n5dpe92.exe
O4 - HKCU\..\Run: [906264EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zpk.exe
O4 - HKCU\..\Run: [9B9D3756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\13938mmw.exe
O4 - HKCU\..\Run: [FBF2E056] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zlbibv.exe
O4 - HKCU\..\Run: [DAAE11C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ncjq3b3.exe
O4 - HKCU\..\Run: [E8AC0D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f7r7bvlzmcae.exe
O4 - HKCU\..\Run: [AE9C4653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ru811x.exe
O4 - HKCU\..\Run: [D86FB8FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\66oee.exe
O4 - HKCU\..\Run: [BBEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qq5x.exe
O4 - HKCU\..\Run: [E1AC2FCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c9ys2j6.exe
O4 - HKCU\..\Run: [9A23327E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4ow6hwsg.exe
O4 - HKCU\..\Run: [FD5351F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\74j2zq.exe
O4 - HKCU\..\Run: [1F837A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ykp1u.exe
O4 - HKCU\..\Run: [CFBD8BFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\q90sc.exe
O4 - HKCU\..\Run: [8DE549D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gdxl31w4qrke.exe
O4 - HKCU\..\Run: [C7C738E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qhd.exe
O4 - HKCU\..\Run: [EA34AC83] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tx2izb6hk.exe
O4 - HKCU\..\Run: [90DA8DF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jw59gti5.exe
O4 - HKCU\..\Run: [E3EC89F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3crigq904b7u.exe
O4 - HKCU\..\Run: [AE8F337E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4q4ddkt553h.exe
O4 - HKCU\..\Run: [A7FF2F53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c8wfjz6xrjqi.exe
O4 - HKCU\..\Run: [96A24A53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0iyayo8.exe
O4 - HKCU\..\Run: [C6C50873] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7yt.exe
O4 - HKCU\..\Run: [CAC6D586] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gcrl31jj4a.exe
O4 - HKCU\..\Run: [A3A34FF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1t9p3e8.exe
O4 - HKCU\..\Run: [A164586B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dm.exe
O4 - HKCU\..\Run: [09E76206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qccg.exe
O4 - HKCU\..\Run: [D4C520F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\azv.exe
O4 - HKCU\..\Run: [DDE8FA4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jpjipe64rixj.exe
O4 - HKCU\..\Run: [43646A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nc7.exe
O4 - HKCU\..\Run: [C842E356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\b9c9fwkvw.exe
O4 - HKCU\..\Run: [EC230866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s524irh.exe
O4 - HKCU\..\Run: [F6E8500B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4y2jffwuki.exe
O4 - HKCU\..\Run: [94CC6A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s33.exe
O4 - HKCU\..\Run: [E76474F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fdr.exe
O4 - HKCU\..\Run: [BD929086] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9vrnag81.exe
O4 - HKCU\..\Run: [AB8B5A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gykxkga0hi.exe
O4 - HKCU\..\Run: [8D0FCA0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9iusdxq22.exe
O4 - HKCU\..\Run: [836270E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xuf.exe
O4 - HKCU\..\Run: [CD2451DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\acv5oh.exe
O4 - HKCU\..\Run: [5D810CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gym6laf9.exe
O4 - HKCU\..\Run: [11C724E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uig.exe
O4 - HKCU\..\Run: [BB184F0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5fy4w8ezaapb.exe
O4 - HKCU\..\Run: [E0807CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\klk5y.exe
O4 - HKCU\..\Run: [517D8DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\41gfe5jk4pcs.exe
O4 - HKCU\..\Run: [F857FF06] C:\DOCUME~1\CHRISV~

ok, scanned as requested and rebooted. Ran HJT and this is the result.

Logfile of HijackThis v1.98.2
Scan saved at 5:44:36 AM, on 10/20/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Ebates_MoeMoneyMaker\EbatesMoeMoneyMaker0.exe
C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Ebates_MoeMoneyMaker\EbatesMoeMoneyMaker1.exe
C:\Program Files\Logitech\Video\ManifestEngine.exe
C:\WINDOWS\System32\rpcns4.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\CheckIt\86\CheckIt86.exe
C:\Program Files\Common Files\Sonic Shared\cinetray.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\WPC54CFG.exe
C:\Program Files\HIJACK THIS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b=hc
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://s-redirect.com/?b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://s-redirect.com/?a=2&b=hc
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://s-redirect.com/?a=2&b=hc
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://s-redirect.com/?a=2&b=hc
R3 - URLSearchHook: (no name) - {0584C3DE-F864-576F-054B-5D3E7785EC00} - C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O2 - BHO: MyWay Search Assistant BHO - {04079851-5845-4dea-848C-3ECD647AA554} - C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CheckIt 86 - {82DF1118-9B92-45d8-B78F-1737A69A06E1} - C:\Program Files\CheckIt\86\CheckIt86.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O4 - HKLM\..\Run: [WLMonWPC54G] C:\Program Files\Linksys\Wireless-G Notebook Adapter\WLMon.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
O4 - HKLM\..\Run: [EbatesMoeMoneyMaker0] "C:\Program Files\Ebates_MoeMoneyMaker\EbatesMoeMoneyMaker0.exe"
O4 - HKLM\..\Run: [9CD2FBCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3vafz1.exe
O4 - HKLM\..\Run: [9A35A576] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O4 - HKLM\..\Run: [9AA09666] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qsd3gszlmf.exe
O4 - HKLM\..\Run: [4C3CD276] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esel8sj4.exe
O4 - HKLM\..\Run: [92C46CEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mrl.exe
O4 - HKLM\..\Run: [5FE65356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u9d7.exe
O4 - HKLM\..\Run: [FB427DCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\iteqr67oo9z9.exe
O4 - HKLM\..\Run: [88EE14E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fm53t2e.exe
O4 - HKLM\..\Run: [551A7D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zt9jkyink.exe
O4 - HKLM\..\Run: [90CBAB6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeru2vn8e.exe
O4 - HKLM\..\Run: [9C21E7CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jg7pq7uz1.exe
O4 - HKLM\..\Run: [BC200D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7mij1yzxks.exe
O4 - HKLM\..\Run: [E6627CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dvr.exe
O4 - HKLM\..\Run: [F56468EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bcm.exe
O4 - HKLM\..\Run: [ACBDD9DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\noitfy20.exe
O4 - HKLM\..\Run: [90925F5B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jaxkf0.exe
O4 - HKLM\..\Run: [B0FAEEF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vjnx8z.exe
O4 - HKLM\..\Run: [42C0494E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k9xt593.exe
O4 - HKLM\..\Run: [B7C65C7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1ez.exe
O4 - HKLM\..\Run: [F6CA184B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ahq57x.exe
O4 - HKLM\..\Run: [44CC74F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\a4w.exe
O4 - HKLM\..\Run: [BE70D803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O4 - HKLM\..\Run: [E682798B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k3s01hwnw450.exe
O4 - HKLM\..\Run: [ABA0A60B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbrnq4p.exe
O4 - HKLM\..\Run: [DA25388B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vztaby1.exe
O4 - HKLM\..\Run: [B7D5C843] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qf11eg8h.exe
O4 - HKLM\..\Run: [AB58CA5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lkwifiiltj.exe
O4 - HKLM\..\Run: [14C45AEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3t7.exe
O4 - HKLM\..\Run: [C6FECA66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\364eyh50bkma.exe
O4 - HKLM\..\Run: [ABFCFE03] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vqjw8ezv.exe
O4 - HKLM\..\Run: [0B615A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3ngo.exe
O4 - HKLM\..\Run: [4D72DBD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x6memf.exe
O4 - HKLM\..\Run: [DD96ECE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\o7s22.exe
O4 - HKLM\..\Run: [FC16D8D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2qaz2h27.exe
O4 - HKLM\..\Run: [FA46D256] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jrqz.exe
O4 - HKLM\..\Run: [D73B0B4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\09dd6r.exe
O4 - HKLM\..\Run: [DE0B19FB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wl0wg.exe
O4 - HKLM\..\Run: [99601C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tmq.exe
O4 - HKLM\..\Run: [EF6E5303] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\584f.exe
O4 - HKLM\..\Run: [C926577E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6yjah8s37fw.exe
O4 - HKLM\..\Run: [BBEB30D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\92gvhvc.exe
O4 - HKLM\..\Run: [AADA58CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f97kzfapze.exe
O4 - HKLM\..\Run: [CBA1B65E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cp6jmx1.exe
O4 - HKLM\..\Run: [EE852546] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\16xbcdoiwnqy.exe
O4 - HKLM\..\Run: [8B0EECF3] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\n01rgv3oe5.exe
O4 - HKLM\..\Run: [B90E11EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\dg8n9as.exe
O4 - HKLM\..\Run: [F8EFC4DB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\4q9wpbh47pp0.exe
O4 - HKLM\..\Run: [E340D4D6] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6bm8w.exe
O4 - HKLM\..\Run: [ED3B97DE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\z1s257f2b.exe
O4 - HKLM\..\Run: [CFC01E7E] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\5vm.exe
O4 - HKLM\..\Run: [F8BDBE43] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\45808o.exe
O4 - HKLM\..\Run: [E060A24B] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6co53fd8tx8h.exe
O4 - HKLM\..\Run: [406711EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\zu97vt02.exe
O4 - HKLM\..\Run: [F28FEB46] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\ue9da.exe
O4 - HKLM\..\Run: [F0EF91EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\s4iei8xm.exe
O4 - HKLM\..\Run: [CBBC3D86] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\cy24u00.exe
O4 - HKLM\..\Run: [E01804EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\czcjqi6f.exe
O4 - HKLM\..\Run: [5BC51C66] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\twk9.exe
O4 - HKLM\..\Run: [A0C188FB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\3sqwr6h9ecz5.exe
O4 - HKLM\..\Run: [D02261E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wnm9wtkd5g.exe
O4 - HKLM\..\Run: [40D8D7D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pinxodmsn1x.exe
O4 - HKLM\..\Run: [51138C46] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uhezh9rs3.exe
O4 - HKLM\..\Run: [4ECF0D8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ex4vxmwg65i.exe
O4 - HKLM\..\Run: [89460FD3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\g4p5.exe
O4 - HKLM\..\Run: [BD84545B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9et9xbvpyw6.exe
O4 - HKLM\..\Run: [DE41FED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\oze3.exe
O4 - HKLM\..\Run: [880602CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vo3ws0ctfy.exe
O4 - HKLM\..\Run: [5B4E3206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ep7g.exe
O4 - HKLM\..\Run: [D07E3DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ge8dbnje2.exe
O4 - HKLM\..\Run: [8B5C4DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y2nubydg.exe
O4 - HKLM\..\Run: [BE6EA653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9h96.exe
O4 - HKLM\..\Run: [ED73F36E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\khupeji4v4g.exe
O4 - HKLM\..\Run: [95283AFB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x0h9vm6tllz.exe
O4 - HKLM\..\Run: [F2EF1E7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gc2swbcrshh.exe
O4 - HKLM\..\Run: [902C8A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c7f9did.exe
O4 - HKLM\..\Run: [C6494C53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j91x768q13zz.exe
O4 - HKLM\..\Run: [A9E4818B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z5zl.exe
O4 - HKLM\..\Run: [F46B1476] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\28p.exe
O4 - HKLM\..\Run: [8B983C5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n13k873rme.exe
O4 - HKLM\..\Run: [FE3DA04B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\swbc90.exe
O4 - HKLM\..\Run: [AB674B8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\30sl.exe
O4 - HKLM\..\Run: [E5C11706] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yg8irvp6o.exe
O4 - HKLM\..\Run: [AB39A50E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7gkt12lp.exe
O4 - HKLM\..\Run: [876D4CEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrsxq.exe
O4 - HKLM\..\Run: [AD943E76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esr6i.exe
O4 - HKLM\..\Run: [D0D73A76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\d9e7quu4w45.exe
O4 - HKLM\..\Run: [CCE6914B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\beyjkku4m3vb.exe
O4 - HKLM\..\Run: [F8E791D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i7dz.exe
O4 - HKLM\..\Run: [D1CCA20E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9e8k.exe
O4 - HKLM\..\Run: [D94184D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jtk3.exe
O4 - HKLM\..\Run: [CE5FD0F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ndpao.exe
O4 - HKLM\..\Run: [886D0E6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y971g6wqoz.exe
O4 - HKLM\..\Run: [0DB18B5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x4iv6k55.exe
O4 - HKLM\..\Run: [90AE025E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y1846niaxpx.exe
O4 - HKLM\..\Run: [1ABF9AF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i5vll.exe
O4 - HKLM\..\Run: [9D6045F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9ljyvjpri0h.exe
O4 - HKLM\..\Run: [0DAF7566] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\125my.exe
O4 - HKLM\..\Run: [B6204CDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0q2qxja18qrs.exe
O4 - HKLM\..\Run: [8E0791DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7gbnhwui.exe
O4 - HKLM\..\Run: [0C593FE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vn5f5.exe
O4 - HKLM\..\Run: [8C9E4CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9bdhg.exe
O4 - HKLM\..\Run: [F1B85266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zr496omywi.exe
O4 - HKLM\..\Run: [D07CBE6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y75pge86ook.exe
O4 - HKLM\..\Run: [812957E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\w1zn2plux.exe
O4 - HKLM\..\Run: [D1045CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tp46w4.exe
O4 - HKLM\..\Run: [0EC56206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1isg.exe
O4 - HKLM\..\Run: [CEF32F76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lsnutg706.exe
O4 - HKLM\..\Run: [DC14D7E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z7vr7l29.exe
O4 - HKLM\..\Run: [CA0E93EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kt8ufzan2k2.exe
O4 - HKLM\..\Run: [4B734DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\no49rpya.exe
O4 - HKLM\..\Run: [855D625E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5rka64.exe
O4 - HKLM\..\Run: [FD3CD246] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\37qnrruk.exe
O4 - HKLM\..\Run: [DCCC24C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y6sf37.exe
O4 - HKLM\..\Run: [DAA34046] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2mb4mggu.exe
O4 - HKLM\..\Run: [979F4BEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\812hu.exe
O4 - HKLM\..\Run: [A00AF68B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\l7s9apwgrid3.exe
O4 - HKLM\..\Run: [F00F8CE3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5titqj4cou9.exe
O4 - HKLM\..\Run: [E9EC925E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yc48.exe
O4 - HKLM\..\Run: [9BA644EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vnl7svq.exe
O4 - HKLM\..\Run: [E146BE53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4sab85fsxd4.exe
O4 - HKLM\..\Run: [9070456B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gpejii.exe
O4 - HKLM\..\Run: [FA8D80E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ezkry.exe
O4 - HKLM\..\Run: [D0B38B4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\44lqo8t19.exe
O4 - HKLM\..\Run: [AB057146] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\e0m6q8jri1.exe
O4 - HKLM\..\Run: [AA2874CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zqtvbpv.exe
O4 - HKLM\..\Run: [E9CD158B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\656n.exe
O4 - HKLM\..\Run: [C1619B66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bdak9zlwoap.exe
O4 - HKLM\..\Run: [442A1C8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbx3yhs.exe
O4 - HKLM\..\Run: [804E9C8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lf7m.exe
O4 - HKLM\..\Run: [D51B3E8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jd8tcd1befj.exe
O4 - HKLM\..\Run: [A4F5FD73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hf06n.exe
O4 - HKLM\..\Run: [87813BCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\t9lu1qfqgk.exe
O4 - HKLM\..\Run: [0CEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dm17.exe
O4 - HKLM\..\Run: [EE46A203] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mzsf.exe
O4 - HKLM\..\Run: [169F8266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\84tj1.exe
O4 - HKLM\..\Run: [A13A16EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\07x0i69.exe
O4 - HKLM\..\Run: [93C50C76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9zs.exe
O4 - HKLM\..\Run: [A3A09A73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wg1ywhl.exe
O4 - HKLM\..\Run: [8173CC06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mbek3k4xx.exe
O4 - HKLM\..\Run: [59E4AB56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y5z7.exe
O4 - HKLM\..\Run: [50254EF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n5dpe92.exe
O4 - HKLM\..\Run: [906264EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zpk.exe
O4 - HKLM\..\Run: [9B9D3756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\13938mmw.exe
O4 - HKLM\..\Run: [FBF2E056] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zlbibv.exe
O4 - HKLM\..\Run: [DAAE11C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ncjq3b3.exe
O4 - HKLM\..\Run: [E8AC0D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f7r7bvlzmcae.exe
O4 - HKLM\..\Run: [AE9C4653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ru811x.exe
O4 - HKLM\..\Run: [D86FB8FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\66oee.exe
O4 - HKLM\..\Run: [BBEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qq5x.exe
O4 - HKLM\..\Run: [E1AC2FCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c9ys2j6.exe
O4 - HKLM\..\Run: [9A23327E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4ow6hwsg.exe
O4 - HKLM\..\Run: [FD5351F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\74j2zq.exe
O4 - HKLM\..\Run: [1F837A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ykp1u.exe
O4 - HKLM\..\Run: [CFBD8BFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\q90sc.exe
O4 - HKLM\..\Run: [8DE549D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gdxl31w4qrke.exe
O4 - HKLM\..\Run: [C7C738E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qhd.exe
O4 - HKLM\..\Run: [EA34AC83] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tx2izb6hk.exe
O4 - HKLM\..\Run: [90DA8DF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jw59gti5.exe
O4 - HKLM\..\Run: [E3EC89F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3crigq904b7u.exe
O4 - HKLM\..\Run: [AE8F337E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4q4ddkt553h.exe
O4 - HKLM\..\Run: [A7FF2F53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c8wfjz6xrjqi.exe
O4 - HKLM\..\Run: [96A24A53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0iyayo8.exe
O4 - HKLM\..\Run: [C6C50873] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7yt.exe
O4 - HKLM\..\Run: [CAC6D586] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gcrl31jj4a.exe
O4 - HKLM\..\Run: [A3A34FF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1t9p3e8.exe
O4 - HKLM\..\Run: [A164586B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dm.exe
O4 - HKLM\..\Run: [09E76206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qccg.exe
O4 - HKLM\..\Run: [D4C520F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\azv.exe
O4 - HKLM\..\Run: [DDE8FA4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jpjipe64rixj.exe
O4 - HKLM\..\Run: [43646A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nc7.exe
O4 - HKLM\..\Run: [C842E356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\b9c9fwkvw.exe
O4 - HKLM\..\Run: [EC230866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s524irh.exe
O4 - HKLM\..\Run: [F6E8500B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4y2jffwuki.exe
O4 - HKLM\..\Run: [94CC6A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s33.exe
O4 - HKLM\..\Run: [E76474F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fdr.exe
O4 - HKLM\..\Run: [BD929086] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9vrnag81.exe
O4 - HKLM\..\Run: [AB8B5A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gykxkga0hi.exe
O4 - HKLM\..\Run: [8D0FCA0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9iusdxq22.exe
O4 - HKLM\..\Run: [836270E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xuf.exe
O4 - HKLM\..\Run: [CD2451DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\acv5oh.exe
O4 - HKLM\..\Run: [5D810CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gym6laf9.exe
O4 - HKLM\..\Run: [11C724E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uig.exe
O4 - HKLM\..\Run: [BB184F0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5fy4w8ezaapb.exe
O4 - HKLM\..\Run: [E0807CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\klk5y.exe
O4 - HKLM\..\Run: [517D8DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\41gfe5jk4pcs.exe
O4 - HKLM\..\Run: [F857FF06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zngaqyc5kx.exe
O4 - HKLM\..\Run: [CE710A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8d80m0.exe
O4 - HKLM\..\Run: [B940504E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j8u6af8uza.exe
O4 - HKLM\..\Run: [9C423A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4k5elznb.exe
O4 - HKLM\..\Run: [9C54D263] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nvf67.exe
O4 - HKLM\..\Run: [58410ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cvi7.exe
O4 - HKLM\..\Run: [A803048B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pjjcaf0.exe
O4 - HKLM\..\Run: [0EEC88D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni37.exe
O4 - HKLM\..\Run: [51E7DCD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeg7.exe
O4 - HKLM\..\Run: [84CC6CF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s2v.exe
O4 - HKLM\..\Run: [AA9F54F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fknrqz0h.exe
O4 - HKLM\..\Run: [0A9F91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5x8ai.exe
O4 - HKLM\..\Run: [AB465D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\znz5ozat.exe
O4 - HKLM\..\Run: [916530EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tnk.exe
O4 - HKLM\..\Run: [9D2E34DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nxmrn3rhfkkx.exe
O4 - HKLM\..\Run: [9198BFCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8b3o7ji.exe
O4 - HKLM\..\Run: [DE3980F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5m46lafeevx.exe
O4 - HKLM\..\Run: [E1D8C64E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\35rh2ivy.exe
O4 - HKLM\..\Run: [E518D5CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrm9gulnlqt.exe
O4 - HKLM\..\Run: [B49532D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r9fcvy.exe
O4 - HKLM\..\Run: [9AA64C0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xs56cv.exe
O4 - HKLM\..\Run: [48396746] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2hlf15j.exe
O4 - HKLM\..\Run: [BD2E568E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nzq8v5x8aio.exe
O4 - HKLM\..\Run: [D0DCC406] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cei1vogm.exe
O4 - HKLM\..\Run: [E9C5138B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\75qn.exe
O4 - HKLM\..\Run: [C1645863] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dd.exe
O4 - HKLM\..\Run: [AFC9108B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nquczbh.exe
O4 - HKLM\..\Run: [D4C4464B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\osxay7b.exe
O4 - HKLM\..\Run: [0F8E7ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\sg9roteu.exe
O4 - HKLM\..\Run: [C4539F0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0blqc0.exe
O4 - HKLM\..\Run: [E5C730FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cnz.exe
O4 - HKLM\..\Run: [8CB4C9FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u443a.exe
O4 - HKLM\..\Run: [A1E6BCCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yeot.exe
O4 - HKLM\..\Run: [A3C148F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jjm0k.exe
O4 - HKLM\..\Run: [B9460856] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gtsx.exe
O4 - HKLM\..\Run: [F955BE86] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uvsg6x99.exe
O4 - HKLM\..\Run: [AA9A14F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cor6ycc7g.exe
O4 - HKLM\..\Run: [FE4038D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pze2.exe
O4 - HKLM\..\Run: [BBE7FD76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wxq8691cv50.exe
O4 - HKLM\..\Run: [D1C42A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\li3hqo.exe
O4 - HKLM\..\Run: [FD9CFCF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\exruo.exe
O4 - HKLM\..\Run: [97950456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r1e3qz.exe
O4 - HKLM\..\Run: [9815058B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tf6a6w3914.exe
O4 - HKLM\..\Run: [D064766E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zd1.exe
O4 - HKLM\..\Run: [A016C9DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fy3662sb.exe
O4 - HKLM\..\Run: [DD650ACB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u4p787l9ltb4.exe
O4 - HKLM\..\Run: [9DEF65D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\psbuhx5c.exe
O4 - HKLM\..\Run: [B9D4CAF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dul3k.exe
O4 - HKLM\..\Run: [8DB4B8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hthtua2gk3.exe
O4 - HKLM\..\Run: [EE39174E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\64tpr0n47.exe
O4 - HKLM\..\Run: [906A7D6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fw10m8e01y.exe
O4 - HKLM\..\Run: [B46B086E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\29j.exe
O4 - HKLM\..\Run: [FBCD6243] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ouq7i3gj.exe
O4 - HKLM\..\Run: [D8AD98FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7d2kr93.exe
O4 - HKLM\..\Run: [9B680673] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\p6x5k457p0q.exe
O4 - HKLM\..\Run: [DFE67A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wydk.exe
O4 - HKLM\..\Run: [B4335756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\opvw7yoi3q6n.exe
O4 - HKLM\..\Run: [B7C44866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1pb.exe
O4 - HKLM\..\Run: [91D94E8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fr853p1o.exe
O4 - HKLM\..\Run: [B8167253] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5o5b6v6pf3.exe
O4 - HKLM\..\Run: [F76A68F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f3u.exe
O4 - HKLM\..\Run: [B73197CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x9mreo.exe
O4 - HKLM\..\Run: [B4814456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\m6rpvveza8su.exe
O4 - HKLM\..\Run: [A34D82DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8obqu4xxu.exe
O4 - HKLM\..\Run: [E69C0043] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r4k0qno8.exe
O4 - HKLM\..\Run: [9C1B0CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wlgpc.exe
O4 - HKLM\..\Run: [9A589FDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fgkaxpj6t.exe
O4 - HKLM\..\Run: [B7667C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\h0w2o3.exe
O4 - HKLM\..\Run: [5A5B91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vllj43.exe
O4 - HKLM\..\Run: [5DF7C8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6fe0y.exe
O4 - HKLM\..\Run: [BC8B53EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mi4qq.exe
O4 - HKLM\..\Run: [DD0C114E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7bjpodgc1ck.exe
O4 - HKLM\..\Run: [D5C19803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nycd34xzfb.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [rpcns4] C:\WINDOWS\System32\rpcns4.exe
O4 - HKCU\..\Run: [hhornthh] C:\WINDOWS\system32\hhornthh.exe
O4 - HKCU\..\Run: [orhhorors-] C:\WINDOWS\orhhorors-.exe
O4 - HKCU\..\Run: [9CD2FBCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3vafz1.exe
O4 - HKCU\..\Run: [PEsy] C:\WINDOWS\system32\PEsy.exe
O4 - HKCU\..\Run: [oror] C:\WINDOWS\oror.exe
O4 - HKCU\..\Run: [9A35A576] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O4 - HKCU\..\Run: [32SPhh] C:\WINDOWS\system32\32SPhh.exe
O4 - HKCU\..\Run: [9AA09666] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qsd3gszlmf.exe
O4 - HKCU\..\Run: [4C3CD276] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esel8sj4.exe
O4 - HKCU\..\Run: [nt64PE] C:\WINDOWS\system32\nt64PE.exe
O4 - HKCU\..\Run: [PEPEsynt] C:\WINDOWS\PEPEsynt.exe
O4 - HKCU\..\Run: [92C46CEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mrl.exe
O4 - HKCU\..\Run: [5FE65356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u9d7.exe
O4 - HKCU\..\Run: [s-PE] C:\WINDOWS\s-PE.exe
O4 - HKCU\..\Run: [FB427DCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\iteqr67oo9z9.exe
O4 - HKCU\..\Run: [326464PEs-] C:\WINDOWS\326464PEs-.exe
O4 - HKCU\..\Run: [88EE14E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fm53t2e.exe
O4 - HKCU\..\Run: [32PE] C:\WINDOWS\system32\32PE.exe
O4 - HKCU\..\Run: [s-or] C:\WINDOWS\system32\s-or.exe
O4 - HKCU\..\Run: [64ntsy] C:\WINDOWS\system32\64ntsy.exe
O4 - HKCU\..\Run: [syms] C:\WINDOWS\system32\syms.exe
O4 - HKCU\..\Run: [msnt64hh] C:\WINDOWS\system32\msnt64hh.exe
O4 - HKCU\..\Run: [64646464] C:\WINDOWS\system32\64646464.exe
O4 - HKCU\..\Run: [32syhhsy] C:\WINDOWS\system32\32syhhsy.exe
O4 - HKCU\..\Run: [sysy] C:\WINDOWS\system32\sysy.exe
O4 - HKCU\..\Run: [551A7D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zt9jkyink.exe
O4 - HKCU\..\Run: [90CBAB6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeru2vn8e.exe
O4 - HKCU\..\Run: [sySPmssy] C:\WINDOWS\system32\sySPmssy.exe
O4 - HKCU\..\Run: [9C21E7CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jg7pq7uz1.exe
O4 - HKCU\..\Run: [64hhSPmsnt] C:\WINDOWS\64hhSPmsnt.exe
O4 - HKCU\..\Run: [BC200D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7mij1yzxks.exe
O4 - HKCU\..\Run: [64hhPESP32] C:\WINDOWS\64hhPESP32.exe
O4 - HKCU\..\Run: [E6627CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dvr.exe
O4 - HKCU\..\Run: [nt3232msPE] C:\WINDOWS\system32\nt3232msPE.exe
O4 - HKCU\..\Run: [F56468EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bcm.exe
O4 - HKCU\..\Run: [ntsySPhhor] C:\WINDOWS\system32\ntsySPhhor.exe
O4 - HKCU\..\Run: [ACBDD9DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\noitfy20.exe
O4 - HKCU\..\Run: [SPs-64SPhh] C:\WINDOWS\system32\SPs-64SPhh.exe
O4 - HKCU\..\Run: [or64] C:\WINDOWS\or64.exe
O4 - HKCU\..\Run: [sy32PEms] C:\WINDOWS\system32\sy32PEms.exe
O4 - HKCU\..\Run: [nts-SP] C:\WINDOWS\system32\nts-SP.exe
O4 - HKCU\..\Run: [PEmsornt32] C:\WINDOWS\PEmsornt32.exe
O4 - HKCU\..\Run: [nt3232] C:\WINDOWS\system32\nt3232.exe
O4 - HKCU\..\Run: [hh3264] C:\WINDOWS\system32\hh3264.exe
O4 - HKCU\..\Run: [90925F5B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jaxkf0.exe
O4 - HKCU\..\Run: [nts-syorms] C:\WINDOWS\system32\nts-syorms.exe
O4 - HKCU\..\Run: [B0FAEEF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vjnx8z.exe
O4 - HKCU\..\Run: [s-64nts-] C:\WINDOWS\system32\s-64nts-.exe
O4 - HKCU\..\Run: [42C0494E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k9xt593.exe
O4 - HKCU\..\Run: [64syPE] C:\WINDOWS\64syPE.exe
O4 - HKCU\..\Run: [B7C65C7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1ez.exe
O4 - HKCU\..\Run: [s-nt] C:\WINDOWS\s-nt.exe
O4 - HKCU\..\Run: [F6CA184B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ahq57x.exe
O4 - HKCU\..\Run: [PEhhntmsPE] C:\WINDOWS\PEhhntmsPE.exe
O4 - HKCU\..\Run: [hhor64hhsy] C:\WINDOWS\hhor64hhsy.exe
O4 - HKCU\..\Run: [ntPEorhh] C:\WINDOWS\system32\ntPEorhh.exe
O4 - HKCU\..\Run: [hhntPE] C:\WINDOWS\hhntPE.exe
O4 - HKCU\..\Run: [32hhor] C:\WINDOWS\system32\32hhor.exe
O4 - HKCU\..\Run: [64or64PEs-] C:\WINDOWS\system32\64or64PEs-.exe
O4 - HKCU\..\Run: [44CC74F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\a4w.exe
O4 - HKCU\..\Run: [or64hhSP] C:\WINDOWS\or64hhSP.exe
O4 - HKCU\..\Run: [BE70D803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O4 - HKCU\..\Run: [E682798B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k3s01hwnw450.exe
O4 - HKCU\..\Run: [ABA0A60B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbrnq4p.exe
O4 - HKCU\..\Run: [DA25388B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vztaby1.exe
O4 - HKCU\..\Run: [B7D5C843] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qf11eg8h.exe
O4 - HKCU\..\Run: [AB58CA5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lkwifiiltj.exe
O4 - HKCU\..\Run: [14C45AEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3t7.exe
O4 - HKCU\..\Run: [C6FECA66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\364eyh50bkma.exe
O4 - HKCU\..\Run: [ABFCFE03] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vqjw8ezv.exe
O4 - HKCU\..\Run: [0B615A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3ngo.exe
O4 - HKCU\..\Run: [4D72DBD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x6memf.exe
O4 - HKCU\..\Run: [DD96ECE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\o7s22.exe
O4 - HKCU\..\Run: [FC16D8D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2qaz2h27.exe
O4 - HKCU\..\Run: [FA46D256] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jrqz.exe
O4 - HKCU\..\Run: [D73B0B4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\09dd6r.exe
O4 - HKCU\..\Run: [DE0B19FB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wl0wg.exe
O4 - HKCU\..\Run: [99601C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tmq.exe
O4 - HKCU\..\Run: [EF6E5303] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\584f.exe
O4 - HKCU\..\Run: [C926577E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6yjah8s37fw.exe
O4 - HKCU\..\Run: [BBEB30D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\92gvhvc.exe
O4 - HKCU\..\Run: [AADA58CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f97kzfapze.exe
O4 - HKCU\..\Run: [CBA1B65E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cp6jmx1.exe
O4 - HKCU\..\Run: [EE852546] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\16xbcdoiwnqy.exe
O4 - HKCU\..\Run: [D02261E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wnm9wtkd5g.exe
O4 - HKCU\..\Run: [40D8D7D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pinxodmsn1x.exe
O4 - HKCU\..\Run: [51138C46] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uhezh9rs3.exe
O4 - HKCU\..\Run: [4ECF0D8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ex4vxmwg65i.exe
O4 - HKCU\..\Run: [89460FD3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\g4p5.exe
O4 - HKCU\..\Run: [BD84545B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9et9xbvpyw6.exe
O4 - HKCU\..\Run: [DE41FED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\oze3.exe
O4 - HKCU\..\Run: [880602CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vo3ws0ctfy.exe
O4 - HKCU\..\Run: [5B4E3206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ep7g.exe
O4 - HKCU\..\Run: [D07E3DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ge8dbnje2.exe
O4 - HKCU\..\Run: [8B5C4DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y2nubydg.exe
O4 - HKCU\..\Run: [BE6EA653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9h96.exe
O4 - HKCU\..\Run: [ED73F36E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\khupeji4v4g.exe
O4 - HKCU\..\Run: [95283AFB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x0h9vm6tllz.exe
O4 - HKCU\..\Run: [F2EF1E7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gc2swbcrshh.exe
O4 - HKCU\..\Run: [902C8A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c7f9did.exe
O4 - HKCU\..\Run: [A9E4818B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z5zl.exe
O4 - HKCU\..\Run: [C6494C53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j91x768q13zz.exe
O4 - HKCU\..\Run: [F46B1476] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\28p.exe
O4 - HKCU\..\Run: [8B983C5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n13k873rme.exe
O4 - HKCU\..\Run: [FE3DA04B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\swbc90.exe
O4 - HKCU\..\Run: [syor] C:\WINDOWS\system32\syor.exe
O4 - HKCU\..\Run: [AB674B8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\30sl.exe
O4 - HKCU\..\Run: [64PEsyPE] C:\WINDOWS\system32\64PEsyPE.exe
O4 - HKCU\..\Run: [E5C11706] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yg8irvp6o.exe
O4 - HKCU\..\Run: [PEmshh] C:\WINDOWS\system32\PEmshh.exe
O4 - HKCU\..\Run: [AB39A50E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7gkt12lp.exe
O4 - HKCU\..\Run: [3232nts-32] C:\WINDOWS\system32\3232nts-32.exe
O4 - HKCU\..\Run: [s-3264PE] C:\WINDOWS\s-3264PE.exe
O4 - HKCU\..\Run: [ntSPms32hh] C:\WINDOWS\system32\ntSPms32hh.exe
O4 - HKCU\..\Run: [PEhhsy] C:\WINDOWS\PEhhsy.exe
O4 - HKCU\..\Run: [64sy] C:\WINDOWS\system32\64sy.exe
O4 - HKCU\..\Run: [876D4CEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrsxq.exe
O4 - HKCU\..\Run: [hhors-hh] C:\WINDOWS\system32\hhors-hh.exe
O4 - HKCU\..\Run: [AD943E76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esr6i.exe
O4 - HKCU\..\Run: [SPs-] C:\WINDOWS\SPs-.exe
O4 - HKCU\..\Run: [D0D73A76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\d9e7quu4w45.exe
O4 - HKCU\..\Run: [PEs-PESP] C:\WINDOWS\PEs-PESP.exe
O4 - HKCU\..\Run: [SP32nthh] C:\WINDOWS\SP32nthh.exe
O4 - HKCU\..\Run: [6464] C:\WINDOWS\system32\6464.exe
O4 - HKCU\..\Run: [orsyorPE] C:\WINDOWS\system32\orsyorPE.exe
O4 - HKCU\..\Run: [CCE6914B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\beyjkku4m3vb.exe
O4 - HKCU\..\Run: [orsyms32PE] C:\WINDOWS\system32\orsyms32PE.exe
O4 - HKCU\..\Run: [F8E791D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i7dz.exe
O4 - HKCU\..\Run: [syntSPPEor] C:\WINDOWS\syntSPPEor.exe
O4 - HKCU\..\Run: [D1CCA20E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9e8k.exe
O4 - HKCU\..\Run: [ors-] C:\WINDOWS\ors-.exe
O4 - HKCU\..\Run: [64hhSPSPs-] C:\WINDOWS\system32\64hhSPSPs-.exe
O4 - HKCU\..\Run: [s-32] C:\WINDOWS\system32\s-32.exe
O4 - HKCU\..\Run: [PEhh] C:\WINDOWS\PEhh.exe
O4 - HKCU\..\Run: [D94184D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jtk3.exe
O4 - HKCU\..\Run: [msnt] C:\WINDOWS\msnt.exe
O4 - HKCU\..\Run: [CE5FD0F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ndpao.exe
O4 - HKCU\..\Run: [symss-hhhh] C:\WINDOWS\system32\symss-hhhh.exe
O4 - HKCU\..\Run: [886D0E6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y971g6wqoz.exe
O4 - HKCU\..\Run: [ms3264] C:\WINDOWS\system32\ms3264.exe
O4 - HKCU\..\Run: [ntPE64] C:\WINDOWS\ntPE64.exe
O4 - HKCU\..\Run: [0DB18B5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x4iv6k55.exe
O4 - HKCU\..\Run: [90AE025E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y1846niaxpx.exe
O4 - HKCU\..\Run: [SPms] C:\WINDOWS\system32\SPms.exe
O4 - HKCU\..\Run: [1ABF9AF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i5vll.exe
O4 - HKCU\..\Run: [32PESP] C:\WINDOWS\system32\32PESP.exe
O4 - HKCU\..\Run: [9D6045F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9ljyvjpri0h.exe
O4 - HKCU\..\Run: [symsms] C:\WINDOWS\system32\symsms.exe
O4 - HKCU\..\Run: [0DAF7566] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\125my.exe
O4 - HKCU\..\Run: [32s-hhms32] C:\WINDOWS\system32\32s-hhms32.exe
O4 - HKCU\..\Run: [s-SP64] C:\WINDOWS\s-SP64.exe
O4 - HKCU\..\Run: [B6204CDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0q2qxja18qrs.exe
O4 - HKCU\..\Run: [hhs-msmsor] C:\WINDOWS\system32\hhs-msmsor.exe
O4 - HKCU\..\Run: [8E0791DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7gbnhwui.exe
O4 - HKCU\..\Run: [orsys-ms] C:\WINDOWS\system32\orsys-ms.exe
O4 - HKCU\..\Run: [0C593FE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vn5f5.exe
O4 - HKCU\..\Run: [64PEms] C:\WINDOWS\64PEms.exe
O4 - HKCU\..\Run: [8C9E4CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9bdhg.exe
O4 - HKCU\..\Run: [32s-s-SP] C:\WINDOWS\32s-s-SP.exe
O4 - HKCU\..\Run: [F1B85266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zr496omywi.exe
O4 - HKCU\..\Run: [mss-hh32] C:\WINDOWS\system32\mss-hh32.exe
O4 - HKCU\..\Run: [s-32PEPE64] C:\WINDOWS\system32\s-32PEPE64.exe
O4 - HKCU\..\Run: [64ntPE] C:\WINDOWS\64ntPE.exe
O4 - HKCU\..\Run: [PEs-ors-] C:\WINDOWS\system32\PEs-ors-.exe
O4 - HKCU\..\Run: [D07CBE6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y75pge86ook.exe
O4 - HKCU\..\Run: [nts-msor] C:\WINDOWS\nts-msor.exe
O4 - HKCU\..\Run: [812957E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\w1zn2plux.exe
O4 - HKCU\..\Run: [32hhs-nt] C:\WINDOWS\32hhs-nt.exe
O4 - HKCU\..\Run: [D1045CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tp46w4.exe
O4 - HKCU\..\Run: [s-syPE] C:\WINDOWS\system32\s-syPE.exe
O4 - HKCU\..\Run: [0EC56206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1isg.exe
O4 - HKCU\..\Run: [PEmss-ntSP] C:\WINDOWS\system32\PEmss-ntSP.exe
O4 - HKCU\..\Run: [CEF32F76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lsnutg706.exe
O4 - HKCU\..\Run: [sys-PEPE] C:\WINDOWS\system32\sys-PEPE.exe
O4 - HKCU\..\Run: [s-hhhh] C:\WINDOWS\s-hhhh.exe
O4 - HKCU\..\Run: [DC14D7E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z7vr7l29.exe
O4 - HKCU\..\Run: [CA0E93EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kt8ufzan2k2.exe
O4 - HKCU\..\Run: [msSPs-] C:\WINDOWS\msSPs-.exe
O4 - HKCU\..\Run: [4B734DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\no49rpya.exe
O4 - HKCU\..\Run: [s-SP] C:\WINDOWS\s-SP.exe
O4 - HKCU\..\Run: [855D625E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5rka64.exe
O4 - HKCU\..\Run: [sys-] C:\WINDOWS\sys-.exe
O4 - HKCU\..\Run: [hhorSPSP32] C:\WINDOWS\system32\hhorSPSP32.exe
O4 - HKCU\..\Run: [ntntsynt] C:\WINDOWS\ntntsynt.exe
O4 - HKCU\..\Run: [syPE] C:\WINDOWS\syPE.exe
O4 - HKCU\..\Run: [nthhhh] C:\WINDOWS\nthhhh.exe
O4 - HKCU\..\Run: [PEntnt] C:\WINDOWS\system32\PEntnt.exe
O4 - HKCU\..\Run: [6432] C:\WINDOWS\system32\6432.exe
O4 - HKCU\..\Run: [syorPEnt] C:\WINDOWS\system32\syorPEnt.exe
O4 - HKCU\..\Run: [32ms] C:\WINDOWS\32ms.exe
O4 - HKCU\..\Run: [hhSPornt64] C:\WINDOWS\system32\hhSPornt64.exe
O4 - HKCU\..\Run: [sy32] C:\WINDOWS\sy32.exe
O4 - HKCU\..\Run: [SPs-sy] C:\WINDOWS\system32\SPs-sy.exe
O4 - HKCU\..\Run: [FD3CD246] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\37qnrruk.exe
O4 - HKCU\..\Run: [SPms64] C:\WINDOWS\SPms64.exe
O4 - HKCU\..\Run: [PEntorPEnt] C:\WINDOWS\PEntorPEnt.exe
O4 - HKCU\..\Run: [hhs-SPPEnt] C:\WINDOWS\hhs-SPPEnt.exe
O4 - HKCU\..\Run: [DCCC24C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y6sf37.exe
O4 - HKCU\..\Run: [DAA34046] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2mb4mggu.exe
O4 - HKCU\..\Run: [979F4BEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\812hu.exe
O4 - HKCU\..\Run: [SP64] C:\WINDOWS\SP64.exe
O4 - HKCU\..\Run: [A00AF68B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\l7s9apwgrid3.exe
O4 - HKCU\..\Run: [orSPhh3232] C:\WINDOWS\orSPhh3232.exe
O4 - HKCU\..\Run: [F00F8CE3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5titqj4cou9.exe
O4 - HKCU\..\Run: [ntsys-] C:\WINDOWS\system32\ntsys-.exe
O4 - HKCU\..\Run: [E9EC925E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yc48.exe
O4 - HKCU\..\Run: [hhhh32] C:\WINDOWS\hhhh32.exe
O4 - HKCU\..\Run: [9BA644EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vnl7svq.exe
O4 - HKCU\..\Run: [msmsms] C:\WINDOWS\system32\msmsms.exe
O4 - HKCU\..\Run: [SPPEPE] C:\WINDOWS\system32\SPPEPE.exe
O4 - HKCU\..\Run: [hhsyornt] C:\WINDOWS\system32\hhsyornt.exe
O4 - HKCU\..\Run: [hhsy] C:\WINDOWS\hhsy.exe
O4 - HKCU\..\Run: [E146BE53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4sab85fsxd4.exe
O4 - HKCU\..\Run: [64s-nt32or] C:\WINDOWS\64s-nt32or.exe
O4 - HKCU\..\Run: [9070456B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gpejii.exe
O4 - HKCU\..\Run: [hhor64msSP] C:\WINDOWS\hhor64msSP.exe
O4 - HKCU\..\Run: [FA8D80E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ezkry.exe
O4 - HKCU\..\Run: [s-msorhh] C:\WINDOWS\s-msorhh.exe
O4 - HKCU\..\Run: [D0B38B4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\44lqo8t19.exe
O4 - HKCU\..\Run: [syntsys-] C:\WINDOWS\system32\syntsys-.exe
O4 - HKCU\..\Run: [s-msmsntSP] C:\WINDOWS\s-msmsntSP.exe
O4 - HKCU\..\Run: [msSP] C:\WINDOWS\system32\msSP.exe
O4 - HKCU\..\Run: [PEms] C:\WINDOWS\PEms.exe
O4 - HKCU\..\Run: [64ms64msnt] C:\WINDOWS\64ms64msnt.exe
O4 - HKCU\..\Run: [64SPms] C:\WINDOWS\64SPms.exe
O4 - HKCU\..\Run: [AB057146] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\e0m6q8jri1.exe
O4 - HKCU\..\Run: [64oror] C:\WINDOWS\system32\64oror.exe
O4 - HKCU\..\Run: [AA2874CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zqtvbpv.exe
O4 - HKCU\..\Run: [sysys-] C:\WINDOWS\sysys-.exe
O4 - HKCU\..\Run: [E9CD158B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\656n.exe
O4 - HKCU\..\Run: [syhhnt] C:\WINDOWS\system32\syhhnt.exe
O4 - HKCU\..\Run: [s-s-or64] C:\WINDOWS\s-s-or64.exe
O4 - HKCU\..\Run: [SPmsmsPE64] C:\WINDOWS\system32\SPmsmsPE64.exe
O4 - HKCU\..\Run: [msorms] C:\WINDOWS\system32\msorms.exe
O4 - HKCU\..\Run: [hh64] C:\WINDOWS\hh64.exe
O4 - HKCU\..\Run: [C1619B66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bdak9zlwoap.exe
O4 - HKCU\..\Run: [sys-s-] C:\WINDOWS\system32\sys-s-.exe
O4 - HKCU\..\Run: [msSPPEPE] C:\WINDOWS\msSPPEPE.exe
O4 - HKCU\..\Run: [or3232] C:\WINDOWS\system32\or3232.exe
O4 - HKCU\..\Run: [804E9C8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lf7m.exe
O4 - HKCU\..\Run: [442A1C8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbx3yhs.exe
O4 - HKCU\..\Run: [D51B3E8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jd8tcd1befj.exe
O4 - HKCU\..\Run: [A4F5FD73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hf06n.exe
O4 - HKCU\..\Run: [87813BCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\t9lu1qfqgk.exe
O4 - HKCU\..\Run: [0CEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dm17.exe
O4 - HKCU\..\Run: [EE46A203] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mzsf.exe
O4 - HKCU\..\Run: [169F8266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\84tj1.exe
O4 - HKCU\..\Run: [A13A16EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\07x0i69.exe
O4 - HKCU\..\Run: [93C50C76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9zs.exe
O4 - HKCU\..\Run: [A3A09A73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wg1ywhl.exe
O4 - HKCU\..\Run: [8173CC06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mbek3k4xx.exe
O4 - HKCU\..\Run: [59E4AB56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y5z7.exe
O4 - HKCU\..\Run: [50254EF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n5dpe92.exe
O4 - HKCU\..\Run: [906264EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zpk.exe
O4 - HKCU\..\Run: [9B9D3756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\13938mmw.exe
O4 - HKCU\..\Run: [FBF2E056] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zlbibv.exe
O4 - HKCU\..\Run: [DAAE11C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ncjq3b3.exe
O4 - HKCU\..\Run: [E8AC0D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f7r7bvlzmcae.exe
O4 - HKCU\..\Run: [AE9C4653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ru811x.exe
O4 - HKCU\..\Run: [D86FB8FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\66oee.exe
O4 - HKCU\..\Run: [BBEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qq5x.exe
O4 - HKCU\..\Run: [E1AC2FCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c9ys2j6.exe
O4 - HKCU\..\Run: [9A23327E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4ow6hwsg.exe
O4 - HKCU\..\Run: [FD5351F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\74j2zq.exe
O4 - HKCU\..\Run: [1F837A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ykp1u.exe
O4 - HKCU\..\Run: [CFBD8BFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\q90sc.exe
O4 - HKCU\..\Run: [8DE549D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gdxl31w4qrke.exe
O4 - HKCU\..\Run: [C7C738E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qhd.exe
O4 - HKCU\..\Run: [EA34AC83] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tx2izb6hk.exe
O4 - HKCU\..\Run: [90DA8DF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jw59gti5.exe
O4 - HKCU\..\Run: [E3EC89F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3crigq904b7u.exe
O4 - HKCU\..\Run: [AE8F337E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4q4ddkt553h.exe
O4 - HKCU\..\Run: [A7FF2F53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c8wfjz6xrjqi.exe
O4 - HKCU\..\Run: [96A24A53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0iyayo8.exe
O4 - HKCU\..\Run: [C6C50873] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7yt.exe
O4 - HKCU\..\Run: [CAC6D586] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gcrl31jj4a.exe
O4 - HKCU\..\Run: [A3A34FF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1t9p3e8.exe
O4 - HKCU\..\Run: [A164586B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dm.exe
O4 - HKCU\..\Run: [09E76206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qccg.exe
O4 - HKCU\..\Run: [DDE8FA4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jpjipe64rixj.exe
O4 - HKCU\..\Run: [43646A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nc7.exe
O4 - HKCU\..\Run: [C842E356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\b9c9fwkvw.exe
O4 - HKCU\..\Run: [EC230866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s524irh.exe
O4 - HKCU\..\Run: [F6E8500B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4y2jffwuki.exe
O4 - HKCU\..\Run: [94CC6A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s33.exe
O4 - HKCU\..\Run: [E76474F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fdr.exe
O4 - HKCU\..\Run: [BD929086] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9vrnag81.exe
O4 - HKCU\..\Run: [AB8B5A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gykxkga0hi.exe
O4 - HKCU\..\Run: [8D0FCA0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9iusdxq22.exe
O4 - HKCU\..\Run: [836270E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xuf.exe
O4 - HKCU\..\Run: [CD2451DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\acv5oh.exe
O4 - HKCU\..\Run: [5D810CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gym6laf9.exe
O4 - HKCU\..\Run: [11C724E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uig.exe
O4 - HK

OK!, so we still have a slog but it looks like we're gettin' somewhere

This is after running security suite, spybot and ad aware on both users.

Logfile of HijackThis v1.98.2
Scan saved at 5:14:36 AM, on 10/21/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\CheckIt\86\CheckIt86.exe
C:\Program Files\Common Files\Sonic Shared\cinetray.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\WPC54CFG.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HIJACK THIS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b=hc
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://s-redirect.com/?b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://s-redirect.com/?a=2&b=hc
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://s-redirect.com/?a=2&b=hc
R3 - URLSearchHook: (no name) - {0584C3DE-F864-576F-054B-5D3E7785EC00} - C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CheckIt 86 - {82DF1118-9B92-45d8-B78F-1737A69A06E1} - C:\Program Files\CheckIt\86\CheckIt86.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WLMonWPC54G] C:\Program Files\Linksys\Wireless-G Notebook Adapter\WLMon.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
O4 - HKLM\..\Run: [9CD2FBCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3vafz1.exe
O4 - HKLM\..\Run: [9A35A576] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O4 - HKLM\..\Run: [9AA09666] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qsd3gszlmf.exe
O4 - HKLM\..\Run: [4C3CD276] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esel8sj4.exe
O4 - HKLM\..\Run: [92C46CEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mrl.exe
O4 - HKLM\..\Run: [5FE65356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u9d7.exe
O4 - HKLM\..\Run: [FB427DCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\iteqr67oo9z9.exe
O4 - HKLM\..\Run: [88EE14E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fm53t2e.exe
O4 - HKLM\..\Run: [551A7D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zt9jkyink.exe
O4 - HKLM\..\Run: [90CBAB6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeru2vn8e.exe
O4 - HKLM\..\Run: [9C21E7CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jg7pq7uz1.exe
O4 - HKLM\..\Run: [BC200D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7mij1yzxks.exe
O4 - HKLM\..\Run: [E6627CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dvr.exe
O4 - HKLM\..\Run: [F56468EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bcm.exe
O4 - HKLM\..\Run: [ACBDD9DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\noitfy20.exe
O4 - HKLM\..\Run: [90925F5B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jaxkf0.exe
O4 - HKLM\..\Run: [B0FAEEF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vjnx8z.exe
O4 - HKLM\..\Run: [42C0494E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k9xt593.exe
O4 - HKLM\..\Run: [B7C65C7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1ez.exe
O4 - HKLM\..\Run: [F6CA184B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ahq57x.exe
O4 - HKLM\..\Run: [44CC74F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\a4w.exe
O4 - HKLM\..\Run: [BE70D803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O4 - HKLM\..\Run: [E682798B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k3s01hwnw450.exe
O4 - HKLM\..\Run: [ABA0A60B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbrnq4p.exe
O4 - HKLM\..\Run: [DA25388B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vztaby1.exe
O4 - HKLM\..\Run: [B7D5C843] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qf11eg8h.exe
O4 - HKLM\..\Run: [AB58CA5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lkwifiiltj.exe
O4 - HKLM\..\Run: [14C45AEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3t7.exe
O4 - HKLM\..\Run: [C6FECA66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\364eyh50bkma.exe
O4 - HKLM\..\Run: [ABFCFE03] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vqjw8ezv.exe
O4 - HKLM\..\Run: [0B615A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3ngo.exe
O4 - HKLM\..\Run: [4D72DBD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x6memf.exe
O4 - HKLM\..\Run: [DD96ECE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\o7s22.exe
O4 - HKLM\..\Run: [FC16D8D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2qaz2h27.exe
O4 - HKLM\..\Run: [FA46D256] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jrqz.exe
O4 - HKLM\..\Run: [D73B0B4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\09dd6r.exe
O4 - HKLM\..\Run: [DE0B19FB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wl0wg.exe
O4 - HKLM\..\Run: [99601C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tmq.exe
O4 - HKLM\..\Run: [EF6E5303] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\584f.exe
O4 - HKLM\..\Run: [C926577E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6yjah8s37fw.exe
O4 - HKLM\..\Run: [BBEB30D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\92gvhvc.exe
O4 - HKLM\..\Run: [AADA58CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f97kzfapze.exe
O4 - HKLM\..\Run: [CBA1B65E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cp6jmx1.exe
O4 - HKLM\..\Run: [EE852546] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\16xbcdoiwnqy.exe
O4 - HKLM\..\Run: [8B0EECF3] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\n01rgv3oe5.exe
O4 - HKLM\..\Run: [B90E11EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\dg8n9as.exe
O4 - HKLM\..\Run: [F8EFC4DB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\4q9wpbh47pp0.exe
O4 - HKLM\..\Run: [E340D4D6] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6bm8w.exe
O4 - HKLM\..\Run: [ED3B97DE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\z1s257f2b.exe
O4 - HKLM\..\Run: [CFC01E7E] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\5vm.exe
O4 - HKLM\..\Run: [F8BDBE43] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\45808o.exe
O4 - HKLM\..\Run: [E060A24B] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6co53fd8tx8h.exe
O4 - HKLM\..\Run: [406711EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\zu97vt02.exe
O4 - HKLM\..\Run: [F28FEB46] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\ue9da.exe
O4 - HKLM\..\Run: [F0EF91EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\s4iei8xm.exe
O4 - HKLM\..\Run: [CBBC3D86] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\cy24u00.exe
O4 - HKLM\..\Run: [E01804EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\czcjqi6f.exe
O4 - HKLM\..\Run: [5BC51C66] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\twk9.exe
O4 - HKLM\..\Run: [A0C188FB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\3sqwr6h9ecz5.exe
O4 - HKLM\..\Run: [D02261E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wnm9wtkd5g.exe
O4 - HKLM\..\Run: [40D8D7D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pinxodmsn1x.exe
O4 - HKLM\..\Run: [51138C46] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uhezh9rs3.exe
O4 - HKLM\..\Run: [4ECF0D8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ex4vxmwg65i.exe
O4 - HKLM\..\Run: [89460FD3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\g4p5.exe
O4 - HKLM\..\Run: [BD84545B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9et9xbvpyw6.exe
O4 - HKLM\..\Run: [DE41FED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\oze3.exe
O4 - HKLM\..\Run: [880602CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vo3ws0ctfy.exe
O4 - HKLM\..\Run: [5B4E3206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ep7g.exe
O4 - HKLM\..\Run: [D07E3DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ge8dbnje2.exe
O4 - HKLM\..\Run: [8B5C4DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y2nubydg.exe
O4 - HKLM\..\Run: [BE6EA653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9h96.exe
O4 - HKLM\..\Run: [ED73F36E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\khupeji4v4g.exe
O4 - HKLM\..\Run: [95283AFB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x0h9vm6tllz.exe
O4 - HKLM\..\Run: [F2EF1E7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gc2swbcrshh.exe
O4 - HKLM\..\Run: [902C8A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c7f9did.exe
O4 - HKLM\..\Run: [C6494C53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j91x768q13zz.exe
O4 - HKLM\..\Run: [A9E4818B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z5zl.exe
O4 - HKLM\..\Run: [F46B1476] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\28p.exe
O4 - HKLM\..\Run: [8B983C5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n13k873rme.exe
O4 - HKLM\..\Run: [FE3DA04B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\swbc90.exe
O4 - HKLM\..\Run: [AB674B8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\30sl.exe
O4 - HKLM\..\Run: [E5C11706] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yg8irvp6o.exe
O4 - HKLM\..\Run: [AB39A50E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7gkt12lp.exe
O4 - HKLM\..\Run: [876D4CEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrsxq.exe
O4 - HKLM\..\Run: [AD943E76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esr6i.exe
O4 - HKLM\..\Run: [D0D73A76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\d9e7quu4w45.exe
O4 - HKLM\..\Run: [CCE6914B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\beyjkku4m3vb.exe
O4 - HKLM\..\Run: [F8E791D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i7dz.exe
O4 - HKLM\..\Run: [D1CCA20E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9e8k.exe
O4 - HKLM\..\Run: [D94184D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jtk3.exe
O4 - HKLM\..\Run: [CE5FD0F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ndpao.exe
O4 - HKLM\..\Run: [886D0E6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y971g6wqoz.exe
O4 - HKLM\..\Run: [0DB18B5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x4iv6k55.exe
O4 - HKLM\..\Run: [90AE025E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y1846niaxpx.exe
O4 - HKLM\..\Run: [1ABF9AF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i5vll.exe
O4 - HKLM\..\Run: [9D6045F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9ljyvjpri0h.exe
O4 - HKLM\..\Run: [0DAF7566] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\125my.exe
O4 - HKLM\..\Run: [B6204CDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0q2qxja18qrs.exe
O4 - HKLM\..\Run: [8E0791DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7gbnhwui.exe
O4 - HKLM\..\Run: [0C593FE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vn5f5.exe
O4 - HKLM\..\Run: [8C9E4CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9bdhg.exe
O4 - HKLM\..\Run: [F1B85266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zr496omywi.exe
O4 - HKLM\..\Run: [D07CBE6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y75pge86ook.exe
O4 - HKLM\..\Run: [812957E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\w1zn2plux.exe
O4 - HKLM\..\Run: [D1045CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tp46w4.exe
O4 - HKLM\..\Run: [0EC56206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1isg.exe
O4 - HKLM\..\Run: [CEF32F76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lsnutg706.exe
O4 - HKLM\..\Run: [DC14D7E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z7vr7l29.exe
O4 - HKLM\..\Run: [CA0E93EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kt8ufzan2k2.exe
O4 - HKLM\..\Run: [4B734DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\no49rpya.exe
O4 - HKLM\..\Run: [855D625E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5rka64.exe
O4 - HKLM\..\Run: [FD3CD246] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\37qnrruk.exe
O4 - HKLM\..\Run: [DCCC24C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y6sf37.exe
O4 - HKLM\..\Run: [DAA34046] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2mb4mggu.exe
O4 - HKLM\..\Run: [979F4BEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\812hu.exe
O4 - HKLM\..\Run: [A00AF68B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\l7s9apwgrid3.exe
O4 - HKLM\..\Run: [F00F8CE3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5titqj4cou9.exe
O4 - HKLM\..\Run: [E9EC925E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yc48.exe
O4 - HKLM\..\Run: [9BA644EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vnl7svq.exe
O4 - HKLM\..\Run: [E146BE53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4sab85fsxd4.exe
O4 - HKLM\..\Run: [9070456B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gpejii.exe
O4 - HKLM\..\Run: [FA8D80E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ezkry.exe
O4 - HKLM\..\Run: [D0B38B4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\44lqo8t19.exe
O4 - HKLM\..\Run: [AB057146] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\e0m6q8jri1.exe
O4 - HKLM\..\Run: [AA2874CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zqtvbpv.exe
O4 - HKLM\..\Run: [E9CD158B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\656n.exe
O4 - HKLM\..\Run: [C1619B66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bdak9zlwoap.exe
O4 - HKLM\..\Run: [442A1C8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbx3yhs.exe
O4 - HKLM\..\Run: [804E9C8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lf7m.exe
O4 - HKLM\..\Run: [D51B3E8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jd8tcd1befj.exe
O4 - HKLM\..\Run: [A4F5FD73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hf06n.exe
O4 - HKLM\..\Run: [87813BCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\t9lu1qfqgk.exe
O4 - HKLM\..\Run: [0CEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dm17.exe
O4 - HKLM\..\Run: [EE46A203] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mzsf.exe
O4 - HKLM\..\Run: [169F8266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\84tj1.exe
O4 - HKLM\..\Run: [A13A16EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\07x0i69.exe
O4 - HKLM\..\Run: [93C50C76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9zs.exe
O4 - HKLM\..\Run: [A3A09A73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wg1ywhl.exe
O4 - HKLM\..\Run: [8173CC06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mbek3k4xx.exe
O4 - HKLM\..\Run: [59E4AB56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y5z7.exe
O4 - HKLM\..\Run: [50254EF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n5dpe92.exe
O4 - HKLM\..\Run: [906264EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zpk.exe
O4 - HKLM\..\Run: [9B9D3756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\13938mmw.exe
O4 - HKLM\..\Run: [FBF2E056] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zlbibv.exe
O4 - HKLM\..\Run: [DAAE11C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ncjq3b3.exe
O4 - HKLM\..\Run: [E8AC0D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f7r7bvlzmcae.exe
O4 - HKLM\..\Run: [AE9C4653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ru811x.exe
O4 - HKLM\..\Run: [D86FB8FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\66oee.exe
O4 - HKLM\..\Run: [BBEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qq5x.exe
O4 - HKLM\..\Run: [E1AC2FCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c9ys2j6.exe
O4 - HKLM\..\Run: [9A23327E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4ow6hwsg.exe
O4 - HKLM\..\Run: [FD5351F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\74j2zq.exe
O4 - HKLM\..\Run: [1F837A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ykp1u.exe
O4 - HKLM\..\Run: [CFBD8BFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\q90sc.exe
O4 - HKLM\..\Run: [8DE549D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gdxl31w4qrke.exe
O4 - HKLM\..\Run: [C7C738E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qhd.exe
O4 - HKLM\..\Run: [EA34AC83] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tx2izb6hk.exe
O4 - HKLM\..\Run: [90DA8DF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jw59gti5.exe
O4 - HKLM\..\Run: [E3EC89F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3crigq904b7u.exe
O4 - HKLM\..\Run: [AE8F337E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4q4ddkt553h.exe
O4 - HKLM\..\Run: [A7FF2F53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c8wfjz6xrjqi.exe
O4 - HKLM\..\Run: [96A24A53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0iyayo8.exe
O4 - HKLM\..\Run: [C6C50873] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7yt.exe
O4 - HKLM\..\Run: [CAC6D586] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gcrl31jj4a.exe
O4 - HKLM\..\Run: [A3A34FF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1t9p3e8.exe
O4 - HKLM\..\Run: [A164586B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dm.exe
O4 - HKLM\..\Run: [09E76206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qccg.exe
O4 - HKLM\..\Run: [D4C520F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\azv.exe
O4 - HKLM\..\Run: [DDE8FA4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jpjipe64rixj.exe
O4 - HKLM\..\Run: [43646A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nc7.exe
O4 - HKLM\..\Run: [C842E356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\b9c9fwkvw.exe
O4 - HKLM\..\Run: [EC230866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s524irh.exe
O4 - HKLM\..\Run: [F6E8500B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4y2jffwuki.exe
O4 - HKLM\..\Run: [94CC6A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s33.exe
O4 - HKLM\..\Run: [E76474F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fdr.exe
O4 - HKLM\..\Run: [BD929086] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9vrnag81.exe
O4 - HKLM\..\Run: [AB8B5A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gykxkga0hi.exe
O4 - HKLM\..\Run: [8D0FCA0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9iusdxq22.exe
O4 - HKLM\..\Run: [836270E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xuf.exe
O4 - HKLM\..\Run: [CD2451DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\acv5oh.exe
O4 - HKLM\..\Run: [5D810CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gym6laf9.exe
O4 - HKLM\..\Run: [11C724E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uig.exe
O4 - HKLM\..\Run: [BB184F0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5fy4w8ezaapb.exe
O4 - HKLM\..\Run: [E0807CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\klk5y.exe
O4 - HKLM\..\Run: [517D8DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\41gfe5jk4pcs.exe
O4 - HKLM\..\Run: [F857FF06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zngaqyc5kx.exe
O4 - HKLM\..\Run: [CE710A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8d80m0.exe
O4 - HKLM\..\Run: [B940504E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j8u6af8uza.exe
O4 - HKLM\..\Run: [9C423A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4k5elznb.exe
O4 - HKLM\..\Run: [9C54D263] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nvf67.exe
O4 - HKLM\..\Run: [58410ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cvi7.exe
O4 - HKLM\..\Run: [A803048B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pjjcaf0.exe
O4 - HKLM\..\Run: [0EEC88D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni37.exe
O4 - HKLM\..\Run: [51E7DCD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeg7.exe
O4 - HKLM\..\Run: [84CC6CF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s2v.exe
O4 - HKLM\..\Run: [AA9F54F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fknrqz0h.exe
O4 - HKLM\..\Run: [0A9F91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5x8ai.exe
O4 - HKLM\..\Run: [AB465D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\znz5ozat.exe
O4 - HKLM\..\Run: [916530EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tnk.exe
O4 - HKLM\..\Run: [9D2E34DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nxmrn3rhfkkx.exe
O4 - HKLM\..\Run: [9198BFCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8b3o7ji.exe
O4 - HKLM\..\Run: [DE3980F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5m46lafeevx.exe
O4 - HKLM\..\Run: [E1D8C64E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\35rh2ivy.exe
O4 - HKLM\..\Run: [E518D5CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrm9gulnlqt.exe
O4 - HKLM\..\Run: [B49532D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r9fcvy.exe
O4 - HKLM\..\Run: [9AA64C0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xs56cv.exe
O4 - HKLM\..\Run: [48396746] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2hlf15j.exe
O4 - HKLM\..\Run: [BD2E568E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nzq8v5x8aio.exe
O4 - HKLM\..\Run: [D0DCC406] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cei1vogm.exe
O4 - HKLM\..\Run: [E9C5138B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\75qn.exe
O4 - HKLM\..\Run: [C1645863] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dd.exe
O4 - HKLM\..\Run: [AFC9108B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nquczbh.exe
O4 - HKLM\..\Run: [D4C4464B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\osxay7b.exe
O4 - HKLM\..\Run: [0F8E7ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\sg9roteu.exe
O4 - HKLM\..\Run: [C4539F0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0blqc0.exe
O4 - HKLM\..\Run: [E5C730FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cnz.exe
O4 - HKLM\..\Run: [8CB4C9FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u443a.exe
O4 - HKLM\..\Run: [A1E6BCCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yeot.exe
O4 - HKLM\..\Run: [A3C148F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jjm0k.exe
O4 - HKLM\..\Run: [B9460856] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gtsx.exe
O4 - HKLM\..\Run: [F955BE86] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uvsg6x99.exe
O4 - HKLM\..\Run: [AA9A14F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cor6ycc7g.exe
O4 - HKLM\..\Run: [FE4038D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pze2.exe
O4 - HKLM\..\Run: [BBE7FD76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wxq8691cv50.exe
O4 - HKLM\..\Run: [D1C42A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\li3hqo.exe
O4 - HKLM\..\Run: [FD9CFCF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\exruo.exe
O4 - HKLM\..\Run: [97950456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r1e3qz.exe
O4 - HKLM\..\Run: [9815058B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tf6a6w3914.exe
O4 - HKLM\..\Run: [D064766E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zd1.exe
O4 - HKLM\..\Run: [A016C9DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fy3662sb.exe
O4 - HKLM\..\Run: [DD650ACB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u4p787l9ltb4.exe
O4 - HKLM\..\Run: [9DEF65D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\psbuhx5c.exe
O4 - HKLM\..\Run: [B9D4CAF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dul3k.exe
O4 - HKLM\..\Run: [8DB4B8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hthtua2gk3.exe
O4 - HKLM\..\Run: [EE39174E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\64tpr0n47.exe
O4 - HKLM\..\Run: [906A7D6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fw10m8e01y.exe
O4 - HKLM\..\Run: [B46B086E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\29j.exe
O4 - HKLM\..\Run: [FBCD6243] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ouq7i3gj.exe
O4 - HKLM\..\Run: [D8AD98FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7d2kr93.exe
O4 - HKLM\..\Run: [9B680673] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\p6x5k457p0q.exe
O4 - HKLM\..\Run: [DFE67A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wydk.exe
O4 - HKLM\..\Run: [B4335756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\opvw7yoi3q6n.exe
O4 - HKLM\..\Run: [B7C44866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1pb.exe
O4 - HKLM\..\Run: [91D94E8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fr853p1o.exe
O4 - HKLM\..\Run: [B8167253] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5o5b6v6pf3.exe
O4 - HKLM\..\Run: [F76A68F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f3u.exe
O4 - HKLM\..\Run: [B73197CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x9mreo.exe
O4 - HKLM\..\Run: [B4814456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\m6rpvveza8su.exe
O4 - HKLM\..\Run: [A34D82DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8obqu4xxu.exe
O4 - HKLM\..\Run: [E69C0043] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r4k0qno8.exe
O4 - HKLM\..\Run: [9C1B0CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wlgpc.exe
O4 - HKLM\..\Run: [9A589FDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fgkaxpj6t.exe
O4 - HKLM\..\Run: [B7667C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\h0w2o3.exe
O4 - HKLM\..\Run: [5A5B91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vllj43.exe
O4 - HKLM\..\Run: [5DF7C8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6fe0y.exe
O4 - HKLM\..\Run: [BC8B53EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mi4qq.exe
O4 - HKLM\..\Run: [DD0C114E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7bjpodgc1ck.exe
O4 - HKLM\..\Run: [D5C19803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nycd34xzfb.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [BE70D803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O4 - HKCU\..\Run: [9A35A576] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O4 - HKCU\..\Run: [8B0EECF3] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\n01rgv3oe5.exe
O4 - HKCU\..\Run: [B90E11EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\dg8n9as.exe
O4 - HKCU\..\Run: [F8EFC4DB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\4q9wpbh47pp0.exe
O4 - HKCU\..\Run: [E340D4D6] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6bm8w.exe
O4 - HKCU\..\Run: [CFC01E7E] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\5vm.exe
O4 - HKCU\..\Run: [ED3B97DE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\z1s257f2b.exe
O4 - HKCU\..\Run: [F8BDBE43] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\45808o.exe
O4 - HKCU\..\Run: [E060A24B] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6co53fd8tx8h.exe
O4 - HKCU\..\Run: [406711EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\zu97vt02.exe
O4 - HKCU\..\Run: [F28FEB46] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\ue9da.exe
O4 - HKCU\..\Run: [F0EF91EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\s4iei8xm.exe
O4 - HKCU\..\Run: [CBBC3D86] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\cy24u00.exe
O4 - HKCU\..\Run: [E01804EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\czcjqi6f.exe
O4 - HKCU\..\Run: [32PEor] C:\WINDOWS\32PEor.exe
O4 - HKCU\..\Run: [5BC51C66] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\twk9.exe
O4 - HKCU\..\Run: [A0C188FB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\3sqwr6h9ecz5.exe
O4 - HKCU\..\Run: [D07E3DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ge8dbnje2.exe
O4 - HKCU\..\Run: [8B5C4DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y2nubydg.exe
O4 - HKCU\..\Run: [BE6EA653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9h96.exe
O4 - HKCU\..\Run: [ED73F36E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\khupeji4v4g.exe
O4 - HKCU\..\Run: [95283AFB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x0h9vm6tllz.exe
O4 - HKCU\..\Run: [F2EF1E7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gc2swbcrshh.exe
O4 - HKCU\..\Run: [902C8A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c7f9did.exe
O4 - HKCU\..\Run: [C6494C53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j91x768q13zz.exe
O4 - HKCU\..\Run: [A9E4818B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z5zl.exe
O4 - HKCU\..\Run: [F46B1476] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\28p.exe
O4 - HKCU\..\Run: [8B983C5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n13k873rme.exe
O4 - HKCU\..\Run: [FE3DA04B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\swbc90.exe
O4 - HKCU\..\Run: [0DB18B5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x4iv6k55.exe
O4 - HKCU\..\Run: [442A1C8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbx3yhs.exe
O4 - HKCU\..\Run: [804E9C8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lf7m.exe
O4 - HKCU\..\Run: [D51B3E8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jd8tcd1befj.exe
O4 - HKCU\..\Run: [A4F5FD73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hf06n.exe
O4 - HKCU\..\Run: [87813BCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\t9lu1qfqgk.exe
O4 - HKCU\..\Run: [0CEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dm17.exe
O4 - HKCU\..\Run: [EE46A203] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mzsf.exe
O4 - HKCU\..\Run: [93C50C76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9zs.exe
O4 - HKCU\..\Run: [50254EF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n5dpe92.exe
O4 - HKCU\..\Run: [E1AC2FCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c9ys2j6.exe
O4 - HKCU\..\Run: [9A23327E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4ow6hwsg.exe
O4 - HKCU\..\Run: [FD5351F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\74j2zq.exe
O4 - HKCU\..\Run: [1F837A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ykp1u.exe
O4 - HKCU\..\Run: [CFBD8BFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\q90sc.exe
O4 - HKCU\..\Run: [8DE549D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gdxl31w4qrke.exe
O4 - HKCU\..\Run: [C7C738E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qhd.exe
O4 - HKCU\..\Run: [E3EC89F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3crigq904b7u.exe
O4 - HKCU\..\Run: [C6C50873] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7yt.exe
O4 - HKCU\..\Run: [BB184F0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5fy4w8ezaapb.exe
O4 - HKCU\..\Run: [E0807CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\klk5y.exe
O4 - HKCU\..\Run: [F857FF06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zngaqyc5kx.exe
O4 - HKCU\..\Run: [CE710A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8d80m0.exe
O4 - HKCU\..\Run: [B940504E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j8u6af8uza.exe
O4 - HKCU\..\Run: [9C423A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4k5elznb.exe
O4 - HKCU\..\Run: [9C54D263] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nvf67.exe
O4 - HKCU\..\Run: [58410ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cvi7.exe
O4 - HKCU\..\Run: [A803048B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pjjcaf0.exe
O4 - HKCU\..\Run: [0EEC88D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni37.exe
O4 - HKCU\..\Run: [51E7DCD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeg7.exe
O4 - HKCU\..\Run: [84CC6CF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s2v.exe
O4 - HKCU\..\Run: [AA9F54F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fknrqz0h.exe
O4 - HKCU\..\Run: [0A9F91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5x8ai.exe
O4 - HKCU\..\Run: [AB465D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\znz5ozat.exe
O4 - HKCU\..\Run: [916530EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tnk.exe
O4 - HKCU\..\Run: [9D2E34DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nxmrn3rhfkkx.exe
O4 - HKCU\..\Run: [9198BFCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8b3o7ji.exe
O4 - HKCU\..\Run: [DE3980F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5m46lafeevx.exe
O4 - HKCU\..\Run: [E1D8C64E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\35rh2ivy.exe
O4 - HKCU\..\Run: [E518D5CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrm9gulnlqt.exe
O4 - HKCU\..\Run: [B49532D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r9fcvy.exe
O4 - HKCU\..\Run: [9AA64C0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xs56cv.exe
O4 - HKCU\..\Run: [48396746] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2hlf15j.exe
O4 - HKCU\..\Run: [BD2E568E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nzq8v5x8aio.exe
O4 - HKCU\..\Run: [D0DCC406] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cei1vogm.exe
O4 - HKCU\..\Run: [E9C5138B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\75qn.exe
O4 - HKCU\..\Run: [C1645863] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dd.exe
O4 - HKCU\..\Run: [AFC9108B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nquczbh.exe
O4 - HKCU\..\Run: [D4C4464B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\osxay7b.exe
O4 - HKCU\..\Run: [0F8E7ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\sg9roteu.exe
O4 - HKCU\..\Run: [C4539F0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0blqc0.exe
O4 - HKCU\..\Run: [E5C730FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cnz.exe
O4 - HKCU\..\Run: [8CB4C9FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u443a.exe
O4 - HKCU\..\Run: [A1E6BCCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yeot.exe
O4 - HKCU\..\Run: [A3C148F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jjm0k.exe
O4 - HKCU\..\Run: [B9460856] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gtsx.exe
O4 - HKCU\..\Run: [F955BE86] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uvsg6x99.exe
O4 - HKCU\..\Run: [AA9A14F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cor6ycc7g.exe
O4 - HKCU\..\Run: [FE4038D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pze2.exe
O4 - HKCU\..\Run: [BBE7FD76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wxq8691cv50.exe
O4 - HKCU\..\Run: [D1C42A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\li3hqo.exe
O4 - HKCU\..\Run: [FD9CFCF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\exruo.exe
O4 - HKCU\..\Run: [97950456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r1e3qz.exe
O4 - HKCU\..\Run: [9815058B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tf6a6w3914.exe
O4 - HKCU\..\Run: [FBCD6243] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ouq7i3gj.exe
O4 - HKCU\..\Run: [D8AD98FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7d2kr93.exe
O4 - HKCU\..\Run: [B4335756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\opvw7yoi3q6n.exe
O4 - HKCU\..\Run: [B7C44866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1pb.exe
O4 - HKCU\..\Run: [91D94E8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fr853p1o.exe
O4 - HKCU\..\Run: [B8167253] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5o5b6v6pf3.exe
O4 - HKCU\..\Run: [F76A68F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f3u.exe
O4 - HKCU\..\Run: [B73197CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x9mreo.exe
O4 - HKCU\..\Run: [B4814456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\m6rpvveza8su.exe
O4 - HKCU\..\Run: [A34D82DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8obqu4xxu.exe
O4 - HKCU\..\Run: [E69C0043] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r4k0qno8.exe
O4 - HKCU\..\Run: [9C1B0CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wlgpc.exe
O4 - HKCU\..\Run: [9A589FDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fgkaxpj6t.exe
O4 - HKCU\..\Run: [B7667C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\h0w2o3.exe
O4 - HKCU\..\Run: [5A5B91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vllj43.exe
O4 - HKCU\..\Run: [5DF7C8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6fe0y.exe
O4 - HKCU\..\Run: [BC8B53EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mi4qq.exe
O4 - HKCU\..\Run: [DD0C114E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7bjpodgc1ck.exe
O4 - HKCU\..\Run: [D5C19803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nycd34xzfb.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: CheckIt 86.lnk = C:\Program Files\CheckIt\86\CheckIt86.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Sonic CinePlayer Quick Launch.lnk = ?
O4 - Global Startup: Wireless-G Notebook Adapter Utility.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\WPC54CFG.exe
O8 - Extra context menu item: Add To CheckIt &86 Trust List - C:\PROGRA~1\CheckIt\86\AddToTrustList.js
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: (no name) - {2887F316-8C6C-47ae-A462-D2C9739D2C3D} - C:\PROGRA~1\CheckIt\86\CheckIt86.exe
O9 - Extra 'Tools' menuitem: CheckIt &86 - {2887F316-8C6C-47ae-A462-D2C9739D2C3D} - C:\PROGRA~1\CheckIt\86\CheckIt86.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1098065218746
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {A49F0247-A542-4820-A6B2-C90FCDE28109} (VIM_remote.VIMREMOTE) - http://intouchvideo.com/download/VIM_remote.CAB
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/…utocomplete.cab
O16 - DPF: {B94B4225-E02E-4D3F-BADB-026F1E2F3AD7} (HttpDownloader Control) - file://C:\WINDOWS\SexDownloader.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab

As always, your valuable help is greatly appreciated.

OK, I'm puzzled.

I delted as you said and the temp directories for both CHRISV~1 and JAYVOG~1 are empty. Then ran HJT and the same log is generated !!!!


Now What?

Logfile of HijackThis v1.98.2
Scan saved at 8:16:48 PM, on 10/21/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\CheckIt\86\CheckIt86.exe
C:\Program Files\Common Files\Sonic Shared\cinetray.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\WPC54CFG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HIJACK THIS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b;=hc
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b;=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://s-redirect.com/?a=2&b;=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b;=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://s-redirect.com/?a=2&b;=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b;=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://s-redirect.com/?a=2&b;=hc
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://s-redirect.com/?a=2&b;=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://s-redirect.com/?a=2&b;=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://s-redirect.com/?a=2&b;=hc
R3 - URLSearchHook: (no name) - {0584C3DE-F864-576F-054B-5D3E7785EC00} - C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CheckIt 86 - {82DF1118-9B92-45d8-B78F-1737A69A06E1} - C:\Program Files\CheckIt\86\CheckIt86.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WLMonWPC54G] C:\Program Files\Linksys\Wireless-G Notebook Adapter\WLMon.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
O4 - HKLM\..\Run: [9CD2FBCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3vafz1.exe
O4 - HKLM\..\Run: [9A35A576] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O4 - HKLM\..\Run: [9AA09666] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qsd3gszlmf.exe
O4 - HKLM\..\Run: [4C3CD276] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esel8sj4.exe
O4 - HKLM\..\Run: [92C46CEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mrl.exe
O4 - HKLM\..\Run: [5FE65356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u9d7.exe
O4 - HKLM\..\Run: [FB427DCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\iteqr67oo9z9.exe
O4 - HKLM\..\Run: [88EE14E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fm53t2e.exe
O4 - HKLM\..\Run: [551A7D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zt9jkyink.exe
O4 - HKLM\..\Run: [90CBAB6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeru2vn8e.exe
O4 - HKLM\..\Run: [9C21E7CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jg7pq7uz1.exe
O4 - HKLM\..\Run: [BC200D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7mij1yzxks.exe
O4 - HKLM\..\Run: [E6627CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dvr.exe
O4 - HKLM\..\Run: [F56468EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bcm.exe
O4 - HKLM\..\Run: [ACBDD9DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\noitfy20.exe
O4 - HKLM\..\Run: [90925F5B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jaxkf0.exe
O4 - HKLM\..\Run: [B0FAEEF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vjnx8z.exe
O4 - HKLM\..\Run: [42C0494E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k9xt593.exe
O4 - HKLM\..\Run: [B7C65C7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1ez.exe
O4 - HKLM\..\Run: [F6CA184B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ahq57x.exe
O4 - HKLM\..\Run: [44CC74F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\a4w.exe
O4 - HKLM\..\Run: [BE70D803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O4 - HKLM\..\Run: [E682798B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k3s01hwnw450.exe
O4 - HKLM\..\Run: [ABA0A60B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbrnq4p.exe
O4 - HKLM\..\Run: [DA25388B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vztaby1.exe
O4 - HKLM\..\Run: [B7D5C843] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qf11eg8h.exe
O4 - HKLM\..\Run: [AB58CA5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lkwifiiltj.exe
O4 - HKLM\..\Run: [14C45AEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3t7.exe
O4 - HKLM\..\Run: [C6FECA66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\364eyh50bkma.exe
O4 - HKLM\..\Run: [ABFCFE03] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vqjw8ezv.exe
O4 - HKLM\..\Run: [0B615A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3ngo.exe
O4 - HKLM\..\Run: [4D72DBD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x6memf.exe
O4 - HKLM\..\Run: [DD96ECE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\o7s22.exe
O4 - HKLM\..\Run: [FC16D8D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2qaz2h27.exe
O4 - HKLM\..\Run: [FA46D256] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jrqz.exe
O4 - HKLM\..\Run: [D73B0B4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\09dd6r.exe
O4 - HKLM\..\Run: [DE0B19FB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wl0wg.exe
O4 - HKLM\..\Run: [99601C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tmq.exe
O4 - HKLM\..\Run: [EF6E5303] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\584f.exe
O4 - HKLM\..\Run: [C926577E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6yjah8s37fw.exe
O4 - HKLM\..\Run: [BBEB30D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\92gvhvc.exe
O4 - HKLM\..\Run: [AADA58CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f97kzfapze.exe
O4 - HKLM\..\Run: [CBA1B65E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cp6jmx1.exe
O4 - HKLM\..\Run: [EE852546] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\16xbcdoiwnqy.exe
O4 - HKLM\..\Run: [8B0EECF3] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\n01rgv3oe5.exe
O4 - HKLM\..\Run: [B90E11EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\dg8n9as.exe
O4 - HKLM\..\Run: [F8EFC4DB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\4q9wpbh47pp0.exe
O4 - HKLM\..\Run: [E340D4D6] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6bm8w.exe
O4 - HKLM\..\Run: [ED3B97DE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\z1s257f2b.exe
O4 - HKLM\..\Run: [CFC01E7E] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\5vm.exe
O4 - HKLM\..\Run: [F8BDBE43] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\45808o.exe
O4 - HKLM\..\Run: [E060A24B] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6co53fd8tx8h.exe
O4 - HKLM\..\Run: [406711EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\zu97vt02.exe
O4 - HKLM\..\Run: [F28FEB46] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\ue9da.exe
O4 - HKLM\..\Run: [F0EF91EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\s4iei8xm.exe
O4 - HKLM\..\Run: [CBBC3D86] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\cy24u00.exe
O4 - HKLM\..\Run: [E01804EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\czcjqi6f.exe
O4 - HKLM\..\Run: [5BC51C66] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\twk9.exe
O4 - HKLM\..\Run: [A0C188FB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\3sqwr6h9ecz5.exe
O4 - HKLM\..\Run: [D02261E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wnm9wtkd5g.exe
O4 - HKLM\..\Run: [40D8D7D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pinxodmsn1x.exe
O4 - HKLM\..\Run: [51138C46] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uhezh9rs3.exe
O4 - HKLM\..\Run: [4ECF0D8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ex4vxmwg65i.exe
O4 - HKLM\..\Run: [89460FD3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\g4p5.exe
O4 - HKLM\..\Run: [BD84545B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9et9xbvpyw6.exe
O4 - HKLM\..\Run: [DE41FED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\oze3.exe
O4 - HKLM\..\Run: [880602CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vo3ws0ctfy.exe
O4 - HKLM\..\Run: [5B4E3206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ep7g.exe
O4 - HKLM\..\Run: [D07E3DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ge8dbnje2.exe
O4 - HKLM\..\Run: [8B5C4DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y2nubydg.exe
O4 - HKLM\..\Run: [BE6EA653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9h96.exe
O4 - HKLM\..\Run: [ED73F36E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\khupeji4v4g.exe
O4 - HKLM\..\Run: [95283AFB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x0h9vm6tllz.exe
O4 - HKLM\..\Run: [F2EF1E7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gc2swbcrshh.exe
O4 - HKLM\..\Run: [902C8A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c7f9did.exe
O4 - HKLM\..\Run: [C6494C53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j91x768q13zz.exe
O4 - HKLM\..\Run: [A9E4818B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z5zl.exe
O4 - HKLM\..\Run: [F46B1476] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\28p.exe
O4 - HKLM\..\Run: [8B983C5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n13k873rme.exe
O4 - HKLM\..\Run: [FE3DA04B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\swbc90.exe
O4 - HKLM\..\Run: [AB674B8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\30sl.exe
O4 - HKLM\..\Run: [E5C11706] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yg8irvp6o.exe
O4 - HKLM\..\Run: [AB39A50E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7gkt12lp.exe
O4 - HKLM\..\Run: [876D4CEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrsxq.exe
O4 - HKLM\..\Run: [AD943E76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esr6i.exe
O4 - HKLM\..\Run: [D0D73A76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\d9e7quu4w45.exe
O4 - HKLM\..\Run: [CCE6914B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\beyjkku4m3vb.exe
O4 - HKLM\..\Run: [F8E791D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i7dz.exe
O4 - HKLM\..\Run: [D1CCA20E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9e8k.exe
O4 - HKLM\..\Run: [D94184D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jtk3.exe
O4 - HKLM\..\Run: [CE5FD0F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ndpao.exe
O4 - HKLM\..\Run: [886D0E6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y971g6wqoz.exe
O4 - HKLM\..\Run: [0DB18B5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x4iv6k55.exe
O4 - HKLM\..\Run: [90AE025E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y1846niaxpx.exe
O4 - HKLM\..\Run: [1ABF9AF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i5vll.exe
O4 - HKLM\..\Run: [9D6045F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9ljyvjpri0h.exe
O4 - HKLM\..\Run: [0DAF7566] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\125my.exe
O4 - HKLM\..\Run: [B6204CDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0q2qxja18qrs.exe
O4 - HKLM\..\Run: [8E0791DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7gbnhwui.exe
O4 - HKLM\..\Run: [0C593FE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vn5f5.exe
O4 - HKLM\..\Run: [8C9E4CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9bdhg.exe
O4 - HKLM\..\Run: [F1B85266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zr496omywi.exe
O4 - HKLM\..\Run: [D07CBE6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y75pge86ook.exe
O4 - HKLM\..\Run: [812957E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\w1zn2plux.exe
O4 - HKLM\..\Run: [D1045CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tp46w4.exe
O4 - HKLM\..\Run: [0EC56206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1isg.exe
O4 - HKLM\..\Run: [CEF32F76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lsnutg706.exe
O4 - HKLM\..\Run: [DC14D7E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z7vr7l29.exe
O4 - HKLM\..\Run: [CA0E93EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kt8ufzan2k2.exe
O4 - HKLM\..\Run: [4B734DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\no49rpya.exe
O4 - HKLM\..\Run: [855D625E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5rka64.exe
O4 - HKLM\..\Run: [FD3CD246] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\37qnrruk.exe
O4 - HKLM\..\Run: [DCCC24C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y6sf37.exe
O4 - HKLM\..\Run: [DAA34046] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2mb4mggu.exe
O4 - HKLM\..\Run: [979F4BEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\812hu.exe
O4 - HKLM\..\Run: [A00AF68B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\l7s9apwgrid3.exe
O4 - HKLM\..\Run: [F00F8CE3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5titqj4cou9.exe
O4 - HKLM\..\Run: [E9EC925E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yc48.exe
O4 - HKLM\..\Run: [9BA644EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vnl7svq.exe
O4 - HKLM\..\Run: [E146BE53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4sab85fsxd4.exe
O4 - HKLM\..\Run: [9070456B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gpejii.exe
O4 - HKLM\..\Run: [FA8D80E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ezkry.exe
O4 - HKLM\..\Run: [D0B38B4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\44lqo8t19.exe
O4 - HKLM\..\Run: [AB057146] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\e0m6q8jri1.exe
O4 - HKLM\..\Run: [AA2874CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zqtvbpv.exe
O4 - HKLM\..\Run: [E9CD158B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\656n.exe
O4 - HKLM\..\Run: [C1619B66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bdak9zlwoap.exe
O4 - HKLM\..\Run: [442A1C8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbx3yhs.exe
O4 - HKLM\..\Run: [804E9C8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lf7m.exe
O4 - HKLM\..\Run: [D51B3E8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jd8tcd1befj.exe
O4 - HKLM\..\Run: [A4F5FD73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hf06n.exe
O4 - HKLM\..\Run: [87813BCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\t9lu1qfqgk.exe
O4 - HKLM\..\Run: [0CEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dm17.exe
O4 - HKLM\..\Run: [EE46A203] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mzsf.exe
O4 - HKLM\..\Run: [169F8266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\84tj1.exe
O4 - HKLM\..\Run: [A13A16EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\07x0i69.exe
O4 - HKLM\..\Run: [93C50C76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9zs.exe
O4 - HKLM\..\Run: [A3A09A73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wg1ywhl.exe
O4 - HKLM\..\Run: [8173CC06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mbek3k4xx.exe
O4 - HKLM\..\Run: [59E4AB56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y5z7.exe
O4 - HKLM\..\Run: [50254EF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n5dpe92.exe
O4 - HKLM\..\Run: [906264EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zpk.exe
O4 - HKLM\..\Run: [9B9D3756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\13938mmw.exe
O4 - HKLM\..\Run: [FBF2E056] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zlbibv.exe
O4 - HKLM\..\Run: [DAAE11C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ncjq3b3.exe
O4 - HKLM\..\Run: [E8AC0D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f7r7bvlzmcae.exe
O4 - HKLM\..\Run: [AE9C4653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ru811x.exe
O4 - HKLM\..\Run: [D86FB8FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\66oee.exe
O4 - HKLM\..\Run: [BBEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qq5x.exe
O4 - HKLM\..\Run: [E1AC2FCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c9ys2j6.exe
O4 - HKLM\..\Run: [9A23327E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4ow6hwsg.exe
O4 - HKLM\..\Run: [FD5351F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\74j2zq.exe
O4 - HKLM\..\Run: [1F837A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ykp1u.exe
O4 - HKLM\..\Run: [CFBD8BFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\q90sc.exe
O4 - HKLM\..\Run: [8DE549D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gdxl31w4qrke.exe
O4 - HKLM\..\Run: [C7C738E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qhd.exe
O4 - HKLM\..\Run: [EA34AC83] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tx2izb6hk.exe
O4 - HKLM\..\Run: [90DA8DF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jw59gti5.exe
O4 - HKLM\..\Run: [E3EC89F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3crigq904b7u.exe
O4 - HKLM\..\Run: [AE8F337E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4q4ddkt553h.exe
O4 - HKLM\..\Run: [A7FF2F53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c8wfjz6xrjqi.exe
O4 - HKLM\..\Run: [96A24A53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0iyayo8.exe
O4 - HKLM\..\Run: [C6C50873] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7yt.exe
O4 - HKLM\..\Run: [CAC6D586] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gcrl31jj4a.exe
O4 - HKLM\..\Run: [A3A34FF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1t9p3e8.exe
O4 - HKLM\..\Run: [A164586B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dm.exe
O4 - HKLM\..\Run: [09E76206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qccg.exe
O4 - HKLM\..\Run: [D4C520F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\azv.exe
O4 - HKLM\..\Run: [DDE8FA4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jpjipe64rixj.exe
O4 - HKLM\..\Run: [43646A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nc7.exe
O4 - HKLM\..\Run: [C842E356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\b9c9fwkvw.exe
O4 - HKLM\..\Run: [EC230866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s524irh.exe
O4 - HKLM\..\Run: [F6E8500B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4y2jffwuki.exe
O4 - HKLM\..\Run: [94CC6A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s33.exe
O4 - HKLM\..\Run: [E76474F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fdr.exe
O4 - HKLM\..\Run: [BD929086] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9vrnag81.exe
O4 - HKLM\..\Run: [AB8B5A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gykxkga0hi.exe
O4 - HKLM\..\Run: [8D0FCA0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9iusdxq22.exe
O4 - HKLM\..\Run: [836270E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xuf.exe
O4 - HKLM\..\Run: [CD2451DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\acv5oh.exe
O4 - HKLM\..\Run: [5D810CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gym6laf9.exe
O4 - HKLM\..\Run: [11C724E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uig.exe
O4 - HKLM\..\Run: [BB184F0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5fy4w8ezaapb.exe
O4 - HKLM\..\Run: [E0807CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\klk5y.exe
O4 - HKLM\..\Run: [517D8DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\41gfe5jk4pcs.exe
O4 - HKLM\..\Run: [F857FF06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zngaqyc5kx.exe
O4 - HKLM\..\Run: [CE710A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8d80m0.exe
O4 - HKLM\..\Run: [B940504E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j8u6af8uza.exe
O4 - HKLM\..\Run: [9C423A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4k5elznb.exe
O4 - HKLM\..\Run: [9C54D263] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nvf67.exe
O4 - HKLM\..\Run: [58410ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cvi7.exe
O4 - HKLM\..\Run: [A803048B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pjjcaf0.exe
O4 - HKLM\..\Run: [0EEC88D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni37.exe
O4 - HKLM\..\Run: [51E7DCD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeg7.exe
O4 - HKLM\..\Run: [84CC6CF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s2v.exe
O4 - HKLM\..\Run: [AA9F54F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fknrqz0h.exe
O4 - HKLM\..\Run: [0A9F91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5x8ai.exe
O4 - HKLM\..\Run: [AB465D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\znz5ozat.exe
O4 - HKLM\..\Run: [916530EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tnk.exe
O4 - HKLM\..\Run: [9D2E34DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nxmrn3rhfkkx.exe
O4 - HKLM\..\Run: [9198BFCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8b3o7ji.exe
O4 - HKLM\..\Run: [DE3980F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5m46lafeevx.exe
O4 - HKLM\..\Run: [E1D8C64E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\35rh2ivy.exe
O4 - HKLM\..\Run: [E518D5CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrm9gulnlqt.exe
O4 - HKLM\..\Run: [B49532D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r9fcvy.exe
O4 - HKLM\..\Run: [9AA64C0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xs56cv.exe
O4 - HKLM\..\Run: [48396746] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2hlf15j.exe
O4 - HKLM\..\Run: [BD2E568E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nzq8v5x8aio.exe
O4 - HKLM\..\Run: [D0DCC406] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cei1vogm.exe
O4 - HKLM\..\Run: [E9C5138B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\75qn.exe
O4 - HKLM\..\Run: [C1645863] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dd.exe
O4 - HKLM\..\Run: [AFC9108B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nquczbh.exe
O4 - HKLM\..\Run: [D4C4464B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\osxay7b.exe
O4 - HKLM\..\Run: [0F8E7ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\sg9roteu.exe
O4 - HKLM\..\Run: [C4539F0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0blqc0.exe
O4 - HKLM\..\Run: [E5C730FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cnz.exe
O4 - HKLM\..\Run: [8CB4C9FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u443a.exe
O4 - HKLM\..\Run: [A1E6BCCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yeot.exe
O4 - HKLM\..\Run: [A3C148F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jjm0k.exe
O4 - HKLM\..\Run: [B9460856] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gtsx.exe
O4 - HKLM\..\Run: [F955BE86] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uvsg6x99.exe
O4 - HKLM\..\Run: [AA9A14F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cor6ycc7g.exe
O4 - HKLM\..\Run: [FE4038D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pze2.exe
O4 - HKLM\..\Run: [BBE7FD76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wxq8691cv50.exe
O4 - HKLM\..\Run: [D1C42A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\li3hqo.exe
O4 - HKLM\..\Run: [FD9CFCF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\exruo.exe
O4 - HKLM\..\Run: [97950456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r1e3qz.exe
O4 - HKLM\..\Run: [9815058B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tf6a6w3914.exe
O4 - HKLM\..\Run: [D064766E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zd1.exe
O4 - HKLM\..\Run: [A016C9DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fy3662sb.exe
O4 - HKLM\..\Run: [DD650ACB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u4p787l9ltb4.exe
O4 - HKLM\..\Run: [9DEF65D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\psbuhx5c.exe
O4 - HKLM\..\Run: [B9D4CAF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dul3k.exe
O4 - HKLM\..\Run: [8DB4B8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hthtua2gk3.exe
O4 - HKLM\..\Run: [EE39174E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\64tpr0n47.exe
O4 - HKLM\..\Run: [906A7D6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fw10m8e01y.exe
O4 - HKLM\..\Run: [B46B086E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\29j.exe
O4 - HKLM\..\Run: [FBCD6243] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ouq7i3gj.exe
O4 - HKLM\..\Run: [D8AD98FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7d2kr93.exe
O4 - HKLM\..\Run: [9B680673] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\p6x5k457p0q.exe
O4 - HKLM\..\Run: [DFE67A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wydk.exe
O4 - HKLM\..\Run: [B4335756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\opvw7yoi3q6n.exe
O4 - HKLM\..\Run: [B7C44866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1pb.exe
O4 - HKLM\..\Run: [91D94E8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fr853p1o.exe
O4 - HKLM\..\Run: [B8167253] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5o5b6v6pf3.exe
O4 - HKLM\..\Run: [F76A68F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f3u.exe
O4 - HKLM\..\Run: [B73197CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x9mreo.exe
O4 - HKLM\..\Run: [B4814456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\m6rpvveza8su.exe
O4 - HKLM\..\Run: [A34D82DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8obqu4xxu.exe
O4 - HKLM\..\Run: [E69C0043] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r4k0qno8.exe
O4 - HKLM\..\Run: [9C1B0CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wlgpc.exe
O4 - HKLM\..\Run: [9A589FDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fgkaxpj6t.exe
O4 - HKLM\..\Run: [B7667C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\h0w2o3.exe
O4 - HKLM\..\Run: [5A5B91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vllj43.exe
O4 - HKLM\..\Run: [5DF7C8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6fe0y.exe
O4 - HKLM\..\Run: [BC8B53EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mi4qq.exe
O4 - HKLM\..\Run: [DD0C114E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7bjpodgc1ck.exe
O4 - HKLM\..\Run: [D5C19803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nycd34xzfb.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [BE70D803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O4 - HKCU\..\Run: [9A35A576] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O4 - HKCU\..\Run: [8B0EECF3] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\n01rgv3oe5.exe
O4 - HKCU\..\Run: [B90E11EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\dg8n9as.exe
O4 - HKCU\..\Run: [F8EFC4DB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\4q9wpbh47pp0.exe
O4 - HKCU\..\Run: [E340D4D6] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6bm8w.exe
O4 - HKCU\..\Run: [CFC01E7E] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\5vm.exe
O4 - HKCU\..\Run: [ED3B97DE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\z1s257f2b.exe
O4 - HKCU\..\Run: [F8BDBE43] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\45808o.exe
O4 - HKCU\..\Run: [E060A24B] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6co53fd8tx8h.exe
O4 - HKCU\..\Run: [406711EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\zu97vt02.exe
O4 - HKCU\..\Run: [F28FEB46] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\ue9da.exe
O4 - HKCU\..\Run: [F0EF91EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\s4iei8xm.exe
O4 - HKCU\..\Run: [CBBC3D86] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\cy24u00.exe
O4 - HKCU\..\Run: [E01804EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\czcjqi6f.exe
O4 - HKCU\..\Run: [32PEor] C:\WINDOWS\32PEor.exe
O4 - HKCU\..\Run: [5BC51C66] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\twk9.exe
O4 - HKCU\..\Run: [A0C188FB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\3sqwr6h9ecz5.exe
O4 - HKCU\..\Run: [D07E3DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ge8dbnje2.exe
O4 - HKCU\..\Run: [8B5C4DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y2nubydg.exe
O4 - HKCU\..\Run: [BE6EA653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9h96.exe
O4 - HKCU\..\Run: [ED73F36E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\khupeji4v4g.exe
O4 - HKCU\..\Run: [95283AFB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x0h9vm6tllz.exe
O4 - HKCU\..\Run: [F2EF1E7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gc2swbcrshh.exe
O4 - HKCU\..\Run: [902C8A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c7f9did.exe
O4 - HKCU\..\Run: [C6494C53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j91x768q13zz.exe
O4 - HKCU\..\Run: [A9E4818B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z5zl.exe
O4 - HKCU\..\Run: [F46B1476] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\28p.exe
O4 - HKCU\..\Run: [8B983C5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n13k873rme.exe
O4 - HKCU\..\Run: [FE3DA04B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\swbc90.exe
O4 - HKCU\..\Run: [0DB18B5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x4iv6k55.exe
O4 - HKCU\..\Run: [442A1C8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbx3yhs.exe
O4 - HKCU\..\Run: [804E9C8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lf7m.exe
O4 - HKCU\..\Run: [D51B3E8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jd8tcd1befj.exe
O4 - HKCU\..\Run: [A4F5FD73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hf06n.exe
O4 - HKCU\..\Run: [87813BCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\t9lu1qfqgk.exe
O4 - HKCU\..\Run: [0CEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dm17.exe
O4 - HKCU\..\Run: [EE46A203] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mzsf.exe
O4 - HKCU\..\Run: [93C50C76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9zs.exe
O4 - HKCU\..\Run: [50254EF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n5dpe92.exe
O4 - HKCU\..\Run: [E1AC2FCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c9ys2j6.exe
O4 - HKCU\..\Run: [9A23327E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4ow6hwsg.exe
O4 - HKCU\..\Run: [FD5351F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\74j2zq.exe
O4 - HKCU\..\Run: [1F837A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ykp1u.exe
O4 - HKCU\..\Run: [CFBD8BFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\q90sc.exe
O4 - HKCU\..\Run: [8DE549D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gdxl31w4qrke.exe
O4 - HKCU\..\Run: [C7C738E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qhd.exe
O4 - HKCU\..\Run: [E3EC89F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3crigq904b7u.exe
O4 - HKCU\..\Run: [C6C50873] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7yt.exe
O4 - HKCU\..\Run: [BB184F0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5fy4w8ezaapb.exe
O4 - HKCU\..\Run: [E0807CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\klk5y.exe
O4 - HKCU\..\Run: [F857FF06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zngaqyc5kx.exe
O4 - HKCU\..\Run: [CE710A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8d80m0.exe
O4 - HKCU\..\Run: [B940504E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j8u6af8uza.exe
O4 - HKCU\..\Run: [9C423A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4k5elznb.exe
O4 - HKCU\..\Run: [9C54D263] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nvf67.exe
O4 - HKCU\..\Run: [58410ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cvi7.exe
O4 - HKCU\..\Run: [A803048B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pjjcaf0.exe
O4 - HKCU\..\Run: [0EEC88D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni37.exe
O4 - HKCU\..\Run: [51E7DCD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeg7.exe
O4 - HKCU\..\Run: [84CC6CF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s2v.exe
O4 - HKCU\..\Run: [AA9F54F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fknrqz0h.exe
O4 - HKCU\..\Run: [0A9F91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5x8ai.exe
O4 - HKCU\..\Run: [AB465D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\znz5ozat.exe
O4 - HKCU\..\Run: [916530EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tnk.exe
O4 - HKCU\..\Run: [9D2E34DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nxmrn3rhfkkx.exe
O4 - HKCU\..\Run: [9198BFCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8b3o7ji.exe
O4 - HKCU\..\Run: [DE3980F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5m46lafeevx.exe
O4 - HKCU\..\Run: [E1D8C64E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\35rh2ivy.exe
O4 - HKCU\..\Run: [E518D5CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrm9gulnlqt.exe
O4 - HKCU\..\Run: [B49532D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r9fcvy.exe
O4 - HKCU\..\Run: [9AA64C0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xs56cv.exe
O4 - HKCU\..\Run: [48396746] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2hlf15j.exe
O4 - HKCU\..\Run: [BD2E568E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nzq8v5x8aio.exe
O4 - HKCU\..\Run: [D0DCC406] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cei1vogm.exe
O4 - HKCU\..\Run: [E9C5138B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\75qn.exe
O4 - HKCU\..\Run: [C1645863] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dd.exe
O4 - HKCU\..\Run: [AFC9108B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nquczbh.exe
O4 - HKCU\..\Run: [D4C4464B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\osxay7b.exe
O4 - HKCU\..\Run: [0F8E7ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\sg9roteu.exe
O4 - HKCU\..\Run: [C4539F0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0blqc0.exe
O4 - HKCU\..\Run: [E5C730FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cnz.exe
O4 - HKCU\..\Run: [8CB4C9FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u443a.exe
O4 - HKCU\..\Run: [A1E6BCCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yeot.exe
O4 - HKCU\..\Run: [A3C148F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jjm0k.exe
O4 - HKCU\..\Run: [B9460856] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gtsx.exe
O4 - HKCU\..\Run: [F955BE86] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uvsg6x99.exe
O4 - HKCU\..\Run: [AA9A14F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cor6ycc7g.exe
O4 - HKCU\..\Run: [FE4038D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pze2.exe
O4 - HKCU\..\Run: [BBE7FD76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wxq8691cv50.exe
O4 - HKCU\..\Run: [D1C42A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\li3hqo.exe
O4 - HKCU\..\Run: [FD9CFCF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\exruo.exe
O4 - HKCU\..\Run: [97950456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r1e3qz.exe
O4 - HKCU\..\Run: [9815058B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tf6a6w3914.exe
O4 - HKCU\..\Run: [FBCD6243] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ouq7i3gj.exe
O4 - HKCU\..\Run: [D8AD98FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7d2kr93.exe
O4 - HKCU\..\Run: [B4335756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\opvw7yoi3q6n.exe
O4 - HKCU\..\Run: [B7C44866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1pb.exe
O4 - HKCU\..\Run: [91D94E8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fr853p1o.exe
O4 - HKCU\..\Run: [B8167253] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5o5b6v6pf3.exe
O4 - HKCU\..\Run: [F76A68F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f3u.exe
O4 - HKCU\..\Run: [B73197CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x9mreo.exe
O4 - HKCU\..\Run: [B4814456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\m6rpvveza8su.exe
O4 - HKCU\..\Run: [A34D82DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8obqu4xxu.exe
O4 - HKCU\..\Run: [E69C0043] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r4k0qno8.exe
O4 - HKCU\..\Run: [9C1B0CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wlgpc.exe
O4 - HKCU\..\Run: [9A589FDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fgkaxpj6t.exe
O4 - HKCU\..\Run: [B7667C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\h0w2o3.exe
O4 - HKCU\..\Run: [5A5B91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vllj43.exe
O4 - HKCU\..\Run: [5DF7C8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6fe0y.exe
O4 - HKCU\..\Run: [BC8B53EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mi4qq.exe
O4 - HKCU\..\Run: [DD0C114E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7bjpodgc1ck.exe
O4 - HKCU\..\Run: [D5C19803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nycd34xzfb.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: CheckIt 86.lnk = C:\Program Files\CheckIt\86\CheckIt86.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Sonic CinePlayer Quick Launch.lnk = ?
O4 - Global Startup: Wireless-G Notebook Adapter Utility.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\WPC54CFG.exe
O8 - Extra context menu item: Add To CheckIt &86 Trust List - C:\PROGRA~1\CheckIt\86\AddToTrustList.js
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: (no name) - {2887F316-8C6C-47ae-A462-D2C9739D2C3D} - C:\PROGRA~1\CheckIt\86\CheckIt86.exe
O9 - Extra 'Tools' menuitem: CheckIt &86 - {2887F316-8C6C-47ae-A462-D2C9739D2C3D} - C:\PROGRA~1\CheckIt\86\CheckIt86.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1098065218746
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {A49F0247-A542-4820-A6B2-C90FCDE28109} (VIM_remote.VIMREMOTE) - http://intouchvideo.com/download/VIM_remote.CAB
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/…utocomplete.cab
O16 - DPF: {B94B4225-E02E-4D3F-BADB-026F1E2F3AD7} (HttpDownloader Control) - file://C:\WINDOWS\SexDownloader.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab




Robert

That's OK you have just confirmed they are orphan entries.

Create a new folder called C:\HijackThis, move the HijackThis.exe file into the new folder and run it from there. This is necessary to ensure you have backups should anything go wrong.

Make sure that you have no browser windows open as this could prevent the fix from working properly. Open HijackThis, scan and when complete, remove the following entries by checking the box to the left and clicking 'fixed checked':

O4 - HKLM\..\Run: [9CD2FBCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3vafz1.exe
O4 - HKLM\..\Run: [9A35A576] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O4 - HKLM\..\Run: [9AA09666] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qsd3gszlmf.exe
O4 - HKLM\..\Run: [4C3CD276] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esel8sj4.exe
O4 - HKLM\..\Run: [92C46CEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mrl.exe
O4 - HKLM\..\Run: [5FE65356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u9d7.exe
O4 - HKLM\..\Run: [FB427DCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\iteqr67oo9z9.exe
O4 - HKLM\..\Run: [88EE14E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fm53t2e.exe
O4 - HKLM\..\Run: [551A7D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zt9jkyink.exe
O4 - HKLM\..\Run: [90CBAB6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeru2vn8e.exe
O4 - HKLM\..\Run: [9C21E7CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jg7pq7uz1.exe
O4 - HKLM\..\Run: [BC200D56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7mij1yzxks.exe
O4 - HKLM\..\Run: [E6627CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dvr.exe
O4 - HKLM\..\Run: [F56468EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bcm.exe
O4 - HKLM\..\Run: [ACBDD9DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\noitfy20.exe
O4 - HKLM\..\Run: [90925F5B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jaxkf0.exe
O4 - HKLM\..\Run: [B0FAEEF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vjnx8z.exe
O4 - HKLM\..\Run: [42C0494E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k9xt593.exe
O4 - HKLM\..\Run: [B7C65C7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1ez.exe
O4 - HKLM\..\Run: [F6CA184B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ahq57x.exe
O4 - HKLM\..\Run: [44CC74F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\a4w.exe
O4 - HKLM\..\Run: [BE70D803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O4 - HKLM\..\Run: [E682798B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\k3s01hwnw450.exe
O4 - HKLM\..\Run: [ABA0A60B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbrnq4p.exe
O4 - HKLM\..\Run: [DA25388B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vztaby1.exe
O4 - HKLM\..\Run: [B7D5C843] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qf11eg8h.exe
O4 - HKLM\..\Run: [AB58CA5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lkwifiiltj.exe
O4 - HKLM\..\Run: [14C45AEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3t7.exe
O4 - HKLM\..\Run: [C6FECA66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\364eyh50bkma.exe
O4 - HKLM\..\Run: [ABFCFE03] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vqjw8ezv.exe
O4 - HKLM\..\Run: [0B615A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3ngo.exe
O4 - HKLM\..\Run: [4D72DBD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x6memf.exe
O4 - HKLM\..\Run: [DD96ECE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\o7s22.exe
O4 - HKLM\..\Run: [FC16D8D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2qaz2h27.exe
O4 - HKLM\..\Run: [FA46D256] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jrqz.exe
O4 - HKLM\..\Run: [D73B0B4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\09dd6r.exe
O4 - HKLM\..\Run: [DE0B19FB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wl0wg.exe
O4 - HKLM\..\Run: [99601C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tmq.exe
O4 - HKLM\..\Run: [EF6E5303] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\584f.exe
O4 - HKLM\..\Run: [C926577E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6yjah8s37fw.exe
O4 - HKLM\..\Run: [BBEB30D3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\92gvhvc.exe
O4 - HKLM\..\Run: [AADA58CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f97kzfapze.exe
O4 - HKLM\..\Run: [CBA1B65E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cp6jmx1.exe
O4 - HKLM\..\Run: [EE852546] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\16xbcdoiwnqy.exe
O4 - HKLM\..\Run: [8B0EECF3] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\n01rgv3oe5.exe
O4 - HKLM\..\Run: [B90E11EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\dg8n9as.exe
O4 - HKLM\..\Run: [F8EFC4DB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\4q9wpbh47pp0.exe
O4 - HKLM\..\Run: [E340D4D6] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6bm8w.exe
O4 - HKLM\..\Run: [ED3B97DE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\z1s257f2b.exe
O4 - HKLM\..\Run: [CFC01E7E] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\5vm.exe
O4 - HKLM\..\Run: [F8BDBE43] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\45808o.exe
O4 - HKLM\..\Run: [E060A24B] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6co53fd8tx8h.exe
O4 - HKLM\..\Run: [406711EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\zu97vt02.exe
O4 - HKLM\..\Run: [F28FEB46] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\ue9da.exe
O4 - HKLM\..\Run: [F0EF91EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\s4iei8xm.exe
O4 - HKLM\..\Run: [CBBC3D86] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\cy24u00.exe
O4 - HKLM\..\Run: [E01804EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\czcjqi6f.exe
O4 - HKLM\..\Run: [5BC51C66] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\twk9.exe
O4 - HKLM\..\Run: [A0C188FB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\3sqwr6h9ecz5.exe
O4 - HKLM\..\Run: [D02261E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wnm9wtkd5g.exe
O4 - HKLM\..\Run: [40D8D7D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pinxodmsn1x.exe
O4 - HKLM\..\Run: [51138C46] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uhezh9rs3.exe
O4 - HKLM\..\Run: [4ECF0D8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ex4vxmwg65i.exe
O4 - HKLM\..\Run: [89460FD3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\g4p5.exe
O4 - HKLM\..\Run: [BD84545B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9et9xbvpyw6.exe
O4 - HKLM\..\Run: [DE41FED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\oze3.exe
O4 - HKLM\..\Run: [880602CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vo3ws0ctfy.exe
O4 - HKLM\..\Run: [5B4E3206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ep7g.exe
O4 - HKLM\..\Run: [D07E3DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ge8dbnje2.exe
O4 - HKLM\..\Run: [8B5C4DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y2nubydg.exe
O4 - HKLM\..\Run: [BE6EA653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9h96.exe
O4 - HKLM\..\Run: [ED73F36E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\khupeji4v4g.exe
O4 - HKLM\..\Run: [95283AFB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x0h9vm6tllz.exe
O4 - HKLM\..\Run: [F2EF1E7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gc2swbcrshh.exe
O4 - HKLM\..\Run: [902C8A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c7f9did.exe
O4 - HKLM\..\Run: [C6494C53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j91x768q13zz.exe
O4 - HKLM\..\Run: [A9E4818B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z5zl.exe
O4 - HKLM\..\Run: [F46B1476] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\28p.exe
O4 - HKLM\..\Run: [8B983C5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n13k873rme.exe
O4 - HKLM\..\Run: [FE3DA04B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\swbc90.exe
O4 - HKLM\..\Run: [AB674B8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\30sl.exe
O4 - HKLM\..\Run: [E5C11706] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yg8irvp6o.exe
O4 - HKLM\..\Run: [AB39A50E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7gkt12lp.exe
O4 - HKLM\..\Run: [876D4CEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrsxq.exe
O4 - HKLM\..\Run: [AD943E76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\esr6i.exe
O4 - HKLM\..\Run: [D0D73A76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\d9e7quu4w45.exe
O4 - HKLM\..\Run: [CCE6914B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\beyjkku4m3vb.exe
O4 - HKLM\..\Run: [F8E791D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i7dz.exe
O4 - HKLM\..\Run: [D1CCA20E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9e8k.exe
O4 - HKLM\..\Run: [D94184D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jtk3.exe
O4 - HKLM\..\Run: [CE5FD0F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ndpao.exe
O4 - HKLM\..\Run: [886D0E6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y971g6wqoz.exe
O4 - HKLM\..\Run: [0DB18B5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x4iv6k55.exe
O4 - HKLM\..\Run: [90AE025E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y1846niaxpx.exe
O4 - HKLM\..\Run: [1ABF9AF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\i5vll.exe
O4 - HKLM\..\Run: [9D6045F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9ljyvjpri0h.exe
O4 - HKLM\..\Run: [0DAF7566] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\125my.exe
O4 - HKLM\..\Run: [B6204CDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0q2qxja18qrs.exe
O4 - HKLM\..\Run: [8E0791DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s7gbnhwui.exe
O4 - HKLM\..\Run: [0C593FE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vn5f5.exe
O4 - HKLM\..\Run: [8C9E4CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9bdhg.exe
O4 - HKLM\..\Run: [F1B85266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zr496omywi.exe
O4 - HKLM\..\Run: [D07CBE6B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y75pge86ook.exe
O4 - HKLM\..\Run: [812957E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\w1zn2plux.exe
O4 - HKLM\..\Run: [D1045CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tp46w4.exe
O4 - HKLM\..\Run: [0EC56206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1isg.exe
O4 - HKLM\..\Run: [CEF32F76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lsnutg706.exe
O4 - HKLM\..\Run: [DC14D7E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z7vr7l29.exe
O4 - HKLM\..\Run: [CA0E93EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kt8ufzan2k2.exe
O4 - HKLM\..\Run: [4B734DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\no49rpya.exe
O4 - HKLM\..\Run: [855D625E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5rka64.exe
O4 - HKLM\..\Run: [FD3CD246] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\37qnrruk.exe
O4 - HKLM\..\Run: [DCCC24C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y6sf37.exe
O4 - HKLM\..\Run: [DAA34046] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2mb4mggu.exe
O4 - HKLM\..\Run: [979F4BEE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\812hu.exe
O4 - HKLM\..\Run: [A00AF68B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\l7s9apwgrid3.exe
O4 - HKLM\..\Run: [F00F8CE3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5titqj4cou9.exe
O4 - HKLM\..\Run: [E9EC925E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yc48.exe
O4 - HKLM\..\Run: [9BA644EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vnl7svq.exe
O4 - HKLM\..\Run: [E146BE53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4sab85fsxd4.exe
O4 - HKLM\..\Run: [9070456B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gpejii.exe
O4 - HKLM\..\Run: [FA8D80E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ezkry.exe
O4 - HKLM\..\Run: [D0B38B4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\44lqo8t19.exe
O4 - HKLM\..\Run: [AB057146] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\e0m6q8jri1.exe
O4 - HKLM\..\Run: [AA2874CE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zqtvbpv.exe
O4 - HKLM\..\Run: [E9CD158B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\656n.exe
O4 - HKLM\..\Run: [C1619B66] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\bdak9zlwoap.exe
O4 - HKLM\..\Run: [442A1C8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbx3yhs.exe
O4 - HKLM\..\Run: [804E9C8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lf7m.exe
O4 - HKLM\..\Run: [D51B3E8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jd8tcd1befj.exe
O4 - HKLM\..\Run: [A4F5FD73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hf06n.exe
O4 - HKLM\..\Run: [87813BCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\t9lu1qfqgk.exe
O4 - HKLM\..\Run: [0CEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dm17.exe
O4 - HKLM\..\Run: [EE46A203] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mzsf.exe
O4 - HKLM\..\Run: [169F8266] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\84tj1.exe
O4 - HKLM\..\Run: [A13A16EB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\07x0i69.exe
O4 - HKLM\..\Run: [93C50C76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9zs.exe
O4 - HKLM\..\Run: [A3A09A73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wg1ywhl.exe
O4 - HKLM\..\Run: [8173CC06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mbek3k4xx.exe
O4 - HKLM\..\Run: [59E4AB56] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y5z7.exe
O4 - HKLM\..\Run: [50254EF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n5dpe92.exe
O4 - HKLM\..\Run: [906264EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zpk.exe
O4 - HKLM\..\Run: [9B9D3756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\13938mmw.exe
O4 - HKLM\..\Run: [FBF2E056] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zlbibv.exe
O4 - HKLM\..\Run: [DAAE11C3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ncjq3b3.exe
O4 - HKLM\..\Run: [E8AC0D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f7r7bvlzmcae.exe
O4 - HKLM\..\Run: [AE9C4653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ru811x.exe
O4 - HKLM\..\Run: [D86FB8FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\66oee.exe
O4 - HKLM\..\Run: [BBEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qq5x.exe
O4 - HKLM\..\Run: [E1AC2FCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c9ys2j6.exe
O4 - HKLM\..\Run: [9A23327E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4ow6hwsg.exe
O4 - HKLM\..\Run: [FD5351F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\74j2zq.exe
O4 - HKLM\..\Run: [1F837A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ykp1u.exe
O4 - HKLM\..\Run: [CFBD8BFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\q90sc.exe
O4 - HKLM\..\Run: [8DE549D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gdxl31w4qrke.exe
O4 - HKLM\..\Run: [C7C738E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qhd.exe
O4 - HKLM\..\Run: [EA34AC83] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tx2izb6hk.exe
O4 - HKLM\..\Run: [90DA8DF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jw59gti5.exe
O4 - HKLM\..\Run: [E3EC89F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3crigq904b7u.exe
O4 - HKLM\..\Run: [AE8F337E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4q4ddkt553h.exe
O4 - HKLM\..\Run: [A7FF2F53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c8wfjz6xrjqi.exe
O4 - HKLM\..\Run: [96A24A53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0iyayo8.exe
O4 - HKLM\..\Run: [C6C50873] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7yt.exe
O4 - HKLM\..\Run: [CAC6D586] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gcrl31jj4a.exe
O4 - HKLM\..\Run: [A3A34FF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1t9p3e8.exe
O4 - HKLM\..\Run: [A164586B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dm.exe
O4 - HKLM\..\Run: [09E76206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qccg.exe
O4 - HKLM\..\Run: [D4C520F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\azv.exe
O4 - HKLM\..\Run: [DDE8FA4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jpjipe64rixj.exe
O4 - HKLM\..\Run: [43646A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nc7.exe
O4 - HKLM\..\Run: [C842E356] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\b9c9fwkvw.exe
O4 - HKLM\..\Run: [EC230866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s524irh.exe
O4 - HKLM\..\Run: [F6E8500B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4y2jffwuki.exe
O4 - HKLM\..\Run: [94CC6A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s33.exe
O4 - HKLM\..\Run: [E76474F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fdr.exe
O4 - HKLM\..\Run: [BD929086] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9vrnag81.exe
O4 - HKLM\..\Run: [AB8B5A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gykxkga0hi.exe
O4 - HKLM\..\Run: [8D0FCA0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9iusdxq22.exe
O4 - HKLM\..\Run: [836270E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xuf.exe
O4 - HKLM\..\Run: [CD2451DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\acv5oh.exe
O4 - HKLM\..\Run: [5D810CF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gym6laf9.exe
O4 - HKLM\..\Run: [11C724E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uig.exe
O4 - HKLM\..\Run: [BB184F0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5fy4w8ezaapb.exe
O4 - HKLM\..\Run: [E0807CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\klk5y.exe
O4 - HKLM\..\Run: [517D8DE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\41gfe5jk4pcs.exe
O4 - HKLM\..\Run: [F857FF06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zngaqyc5kx.exe
O4 - HKLM\..\Run: [CE710A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8d80m0.exe
O4 - HKLM\..\Run: [B940504E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j8u6af8uza.exe
O4 - HKLM\..\Run: [9C423A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4k5elznb.exe
O4 - HKLM\..\Run: [9C54D263] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nvf67.exe
O4 - HKLM\..\Run: [58410ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cvi7.exe
O4 - HKLM\..\Run: [A803048B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pjjcaf0.exe
O4 - HKLM\..\Run: [0EEC88D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni37.exe
O4 - HKLM\..\Run: [51E7DCD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeg7.exe
O4 - HKLM\..\Run: [84CC6CF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s2v.exe
O4 - HKLM\..\Run: [AA9F54F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fknrqz0h.exe
O4 - HKLM\..\Run: [0A9F91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5x8ai.exe
O4 - HKLM\..\Run: [AB465D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\znz5ozat.exe
O4 - HKLM\..\Run: [916530EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tnk.exe
O4 - HKLM\..\Run: [9D2E34DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nxmrn3rhfkkx.exe
O4 - HKLM\..\Run: [9198BFCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8b3o7ji.exe
O4 - HKLM\..\Run: [DE3980F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5m46lafeevx.exe
O4 - HKLM\..\Run: [E1D8C64E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\35rh2ivy.exe
O4 - HKLM\..\Run: [E518D5CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrm9gulnlqt.exe
O4 - HKLM\..\Run: [B49532D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r9fcvy.exe
O4 - HKLM\..\Run: [9AA64C0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xs56cv.exe
O4 - HKLM\..\Run: [48396746] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2hlf15j.exe
O4 - HKLM\..\Run: [BD2E568E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nzq8v5x8aio.exe
O4 - HKLM\..\Run: [D0DCC406] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cei1vogm.exe
O4 - HKLM\..\Run: [E9C5138B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\75qn.exe
O4 - HKLM\..\Run: [C1645863] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dd.exe
O4 - HKLM\..\Run: [AFC9108B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nquczbh.exe
O4 - HKLM\..\Run: [D4C4464B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\osxay7b.exe
O4 - HKLM\..\Run: [0F8E7ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\sg9roteu.exe
O4 - HKLM\..\Run: [C4539F0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0blqc0.exe
O4 - HKLM\..\Run: [E5C730FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cnz.exe
O4 - HKLM\..\Run: [8CB4C9FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u443a.exe
O4 - HKLM\..\Run: [A1E6BCCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yeot.exe
O4 - HKLM\..\Run: [A3C148F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jjm0k.exe
O4 - HKLM\..\Run: [B9460856] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gtsx.exe
O4 - HKLM\..\Run: [F955BE86] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uvsg6x99.exe
O4 - HKLM\..\Run: [AA9A14F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cor6ycc7g.exe
O4 - HKLM\..\Run: [FE4038D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pze2.exe
O4 - HKLM\..\Run: [BBE7FD76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wxq8691cv50.exe
O4 - HKLM\..\Run: [D1C42A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\li3hqo.exe
O4 - HKLM\..\Run: [FD9CFCF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\exruo.exe
O4 - HKLM\..\Run: [97950456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r1e3qz.exe
O4 - HKLM\..\Run: [9815058B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tf6a6w3914.exe
O4 - HKLM\..\Run: [D064766E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zd1.exe
O4 - HKLM\..\Run: [A016C9DB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fy3662sb.exe
O4 - HKLM\..\Run: [DD650ACB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u4p787l9ltb4.exe
O4 - HKLM\..\Run: [9DEF65D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\psbuhx5c.exe
O4 - HKLM\..\Run: [B9D4CAF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dul3k.exe
O4 - HKLM\..\Run: [8DB4B8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hthtua2gk3.exe
O4 - HKLM\..\Run: [EE39174E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\64tpr0n47.exe
O4 - HKLM\..\Run: [906A7D6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fw10m8e01y.exe
O4 - HKLM\..\Run: [B46B086E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\29j.exe
O4 - HKLM\..\Run: [FBCD6243] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ouq7i3gj.exe
O4 - HKLM\..\Run: [D8AD98FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7d2kr93.exe
O4 - HKLM\..\Run: [9B680673] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\p6x5k457p0q.exe
O4 - HKLM\..\Run: [DFE67A8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wydk.exe
O4 - HKLM\..\Run: [B4335756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\opvw7yoi3q6n.exe
O4 - HKLM\..\Run: [B7C44866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1pb.exe
O4 - HKLM\..\Run: [91D94E8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fr853p1o.exe
O4 - HKLM\..\Run: [B8167253] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5o5b6v6pf3.exe
O4 - HKLM\..\Run: [F76A68F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f3u.exe
O4 - HKLM\..\Run: [B73197CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x9mreo.exe
O4 - HKLM\..\Run: [B4814456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\m6rpvveza8su.exe
O4 - HKLM\..\Run: [A34D82DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8obqu4xxu.exe
O4 - HKLM\..\Run: [E69C0043] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r4k0qno8.exe
O4 - HKLM\..\Run: [9C1B0CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wlgpc.exe
O4 - HKLM\..\Run: [9A589FDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fgkaxpj6t.exe
O4 - HKLM\..\Run: [B7667C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\h0w2o3.exe
O4 - HKLM\..\Run: [5A5B91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vllj43.exe
O4 - HKLM\..\Run: [5DF7C8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6fe0y.exe
O4 - HKLM\..\Run: [BC8B53EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mi4qq.exe
O4 - HKLM\..\Run: [DD0C114E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7bjpodgc1ck.exe
O4 - HKLM\..\Run: [D5C19803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nycd34xzfb.exe
O4 - HKCU\..\Run: [BE70D803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dmxhe8g4cj.exe
O4 - HKCU\..\Run: [9A35A576] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe
O4 - HKCU\..\Run: [8B0EECF3] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\n01rgv3oe5.exe
O4 - HKCU\..\Run: [B90E11EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\dg8n9as.exe
O4 - HKCU\..\Run: [F8EFC4DB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\4q9wpbh47pp0.exe
O4 - HKCU\..\Run: [E340D4D6] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6bm8w.exe
O4 - HKCU\..\Run: [CFC01E7E] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\5vm.exe
O4 - HKCU\..\Run: [ED3B97DE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\z1s257f2b.exe
O4 - HKCU\..\Run: [F8BDBE43] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\45808o.exe
O4 - HKCU\..\Run: [E060A24B] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\6co53fd8tx8h.exe
O4 - HKCU\..\Run: [406711EE] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\zu97vt02.exe
O4 - HKCU\..\Run: [F28FEB46] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\ue9da.exe
O4 - HKCU\..\Run: [F0EF91EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\s4iei8xm.exe
O4 - HKCU\..\Run: [CBBC3D86] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\cy24u00.exe
O4 - HKCU\..\Run: [E01804EB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\czcjqi6f.exe
O4 - HKCU\..\Run: [32PEor] C:\WINDOWS\32PEor.exe
O4 - HKCU\..\Run: [5BC51C66] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\twk9.exe
O4 - HKCU\..\Run: [A0C188FB] C:\DOCUME~1\JAYVOG~1\LOCALS~1\Temp\3sqwr6h9ecz5.exe
O4 - HKCU\..\Run: [D07E3DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ge8dbnje2.exe
O4 - HKCU\..\Run: [8B5C4DEB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\y2nubydg.exe
O4 - HKCU\..\Run: [BE6EA653] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9h96.exe
O4 - HKCU\..\Run: [ED73F36E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\khupeji4v4g.exe
O4 - HKCU\..\Run: [95283AFB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x0h9vm6tllz.exe
O4 - HKCU\..\Run: [F2EF1E7E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gc2swbcrshh.exe
O4 - HKCU\..\Run: [902C8A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c7f9did.exe
O4 - HKCU\..\Run: [C6494C53] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j91x768q13zz.exe
O4 - HKCU\..\Run: [A9E4818B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\z5zl.exe
O4 - HKCU\..\Run: [F46B1476] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\28p.exe
O4 - HKCU\..\Run: [8B983C5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n13k873rme.exe
O4 - HKCU\..\Run: [FE3DA04B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\swbc90.exe
O4 - HKCU\..\Run: [0DB18B5E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x4iv6k55.exe
O4 - HKCU\..\Run: [442A1C8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\kbx3yhs.exe
O4 - HKCU\..\Run: [804E9C8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\lf7m.exe
O4 - HKCU\..\Run: [D51B3E8B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jd8tcd1befj.exe
O4 - HKCU\..\Run: [A4F5FD73] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\hf06n.exe
O4 - HKCU\..\Run: [87813BCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\t9lu1qfqgk.exe
O4 - HKCU\..\Run: [0CEC14D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\dm17.exe
O4 - HKCU\..\Run: [EE46A203] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mzsf.exe
O4 - HKCU\..\Run: [93C50C76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\9zs.exe
O4 - HKCU\..\Run: [50254EF6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\n5dpe92.exe
O4 - HKCU\..\Run: [E1AC2FCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\c9ys2j6.exe
O4 - HKCU\..\Run: [9A23327E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4ow6hwsg.exe
O4 - HKCU\..\Run: [FD5351F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\74j2zq.exe
O4 - HKCU\..\Run: [1F837A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ykp1u.exe
O4 - HKCU\..\Run: [CFBD8BFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\q90sc.exe
O4 - HKCU\..\Run: [8DE549D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gdxl31w4qrke.exe
O4 - HKCU\..\Run: [C7C738E3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\qhd.exe
O4 - HKCU\..\Run: [E3EC89F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3crigq904b7u.exe
O4 - HKCU\..\Run: [C6C50873] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7yt.exe
O4 - HKCU\..\Run: [BB184F0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5fy4w8ezaapb.exe
O4 - HKCU\..\Run: [E0807CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\klk5y.exe
O4 - HKCU\..\Run: [F857FF06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\zngaqyc5kx.exe
O4 - HKCU\..\Run: [CE710A4B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8d80m0.exe
O4 - HKCU\..\Run: [B940504E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\j8u6af8uza.exe
O4 - HKCU\..\Run: [9C423A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4k5elznb.exe
O4 - HKCU\..\Run: [9C54D263] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nvf67.exe
O4 - HKCU\..\Run: [58410ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cvi7.exe
O4 - HKCU\..\Run: [A803048B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pjjcaf0.exe
O4 - HKCU\..\Run: [0EEC88D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni37.exe
O4 - HKCU\..\Run: [51E7DCD6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xeg7.exe
O4 - HKCU\..\Run: [84CC6CF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\s2v.exe
O4 - HKCU\..\Run: [AA9F54F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fknrqz0h.exe
O4 - HKCU\..\Run: [0A9F91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5x8ai.exe
O4 - HKCU\..\Run: [AB465D06] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\znz5ozat.exe
O4 - HKCU\..\Run: [916530EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tnk.exe
O4 - HKCU\..\Run: [9D2E34DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nxmrn3rhfkkx.exe
O4 - HKCU\..\Run: [9198BFCE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8b3o7ji.exe
O4 - HKCU\..\Run: [DE3980F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5m46lafeevx.exe
O4 - HKCU\..\Run: [E1D8C64E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\35rh2ivy.exe
O4 - HKCU\..\Run: [E518D5CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\rrm9gulnlqt.exe
O4 - HKCU\..\Run: [B49532D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r9fcvy.exe
O4 - HKCU\..\Run: [9AA64C0E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\xs56cv.exe
O4 - HKCU\..\Run: [48396746] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\2hlf15j.exe
O4 - HKCU\..\Run: [BD2E568E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nzq8v5x8aio.exe
O4 - HKCU\..\Run: [D0DCC406] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cei1vogm.exe
O4 - HKCU\..\Run: [E9C5138B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\75qn.exe
O4 - HKCU\..\Run: [C1645863] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\4dd.exe
O4 - HKCU\..\Run: [AFC9108B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nquczbh.exe
O4 - HKCU\..\Run: [D4C4464B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\osxay7b.exe
O4 - HKCU\..\Run: [0F8E7ED6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\sg9roteu.exe
O4 - HKCU\..\Run: [C4539F0B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\0blqc0.exe
O4 - HKCU\..\Run: [E5C730FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cnz.exe
O4 - HKCU\..\Run: [8CB4C9FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\u443a.exe
O4 - HKCU\..\Run: [A1E6BCCB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\yeot.exe
O4 - HKCU\..\Run: [A3C148F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\jjm0k.exe
O4 - HKCU\..\Run: [B9460856] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\gtsx.exe
O4 - HKCU\..\Run: [F955BE86] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\uvsg6x99.exe
O4 - HKCU\..\Run: [AA9A14F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\cor6ycc7g.exe
O4 - HKCU\..\Run: [FE4038D6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\pze2.exe
O4 - HKCU\..\Run: [BBE7FD76] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wxq8691cv50.exe
O4 - HKCU\..\Run: [D1C42A6E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\li3hqo.exe
O4 - HKCU\..\Run: [FD9CFCF3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\exruo.exe
O4 - HKCU\..\Run: [97950456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r1e3qz.exe
O4 - HKCU\..\Run: [9815058B] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\3tf6a6w3914.exe
O4 - HKCU\..\Run: [FBCD6243] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ouq7i3gj.exe
O4 - HKCU\..\Run: [D8AD98FE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7d2kr93.exe
O4 - HKCU\..\Run: [B4335756] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\opvw7yoi3q6n.exe
O4 - HKCU\..\Run: [B7C44866] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1pb.exe
O4 - HKCU\..\Run: [91D94E8E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fr853p1o.exe
O4 - HKCU\..\Run: [B8167253] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\5o5b6v6pf3.exe
O4 - HKCU\..\Run: [F76A68F3] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\f3u.exe
O4 - HKCU\..\Run: [B73197CB] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\x9mreo.exe
O4 - HKCU\..\Run: [B4814456] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\m6rpvveza8su.exe
O4 - HKCU\..\Run: [A34D82DE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\8obqu4xxu.exe
O4 - HKCU\..\Run: [E69C0043] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\r4k0qno8.exe
O4 - HKCU\..\Run: [9C1B0CFE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\wlgpc.exe
O4 - HKCU\..\Run: [9A589FDE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\fgkaxpj6t.exe
O4 - HKCU\..\Run: [B7667C4E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\h0w2o3.exe
O4 - HKCU\..\Run: [5A5B91F6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\vllj43.exe
O4 - HKCU\..\Run: [5DF7C8E6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\6fe0y.exe
O4 - HKCU\..\Run: [BC8B53EE] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\mi4qq.exe
O4 - HKCU\..\Run: [DD0C114E] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\7bjpodgc1ck.exe
O4 - HKCU\..\Run: [D5C19803] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\nycd34xzfb.exe

Reboot when done, rescan with HJT and post a new log here and we'll get rid of the stragglers.

OK, my friend, the list grows shorter. If I were a betting man, I would guess the entries labeled R1, R0 and R3 are next. The "Hijacked by New.net" are also suspect in my book, But I defer to your expertise. I am not sure about Checkit86, I searched around and saw it is a spyware blocker, but is it a wolf in sheeps clothing?



Logfile of HijackThis v1.98.2
Scan saved at 7:29:00 AM, on 10/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\AIM\aim.exe
C:\Program Files\CheckIt\86\CheckIt86.exe
C:\Program Files\Common Files\Sonic Shared\cinetray.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\WPC54CFG.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\HIJACK THIS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://s-redirect.com/?a=2&b=hc
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://s-redirect.com/?a=2&b=hc
R3 - URLSearchHook: (no name) - {0584C3DE-F864-576F-054B-5D3E7785EC00} - C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\ni6d4fyb.exe (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CheckIt 86 - {82DF1118-9B92-45d8-B78F-1737A69A06E1} - C:\Program Files\CheckIt\86\CheckIt86.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WLMonWPC54G] C:\Program Files\Linksys\Wireless-G Notebook Adapter\WLMon.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: CheckIt 86.lnk = C:\Program Files\CheckIt\86\CheckIt86.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Sonic CinePlayer Quick Launch.lnk = ?
O4 - Global Startup: Wireless-G Notebook Adapter Utility.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\WPC54CFG.exe
O8 - Extra context menu item: Add To CheckIt &86 Trust List - C:\PROGRA~1\CheckIt\86\AddToTrustList.js
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: (no name) - {2887F316-8C6C-47ae-A462-D2C9739D2C3D} - C:\PROGRA~1\CheckIt\86\CheckIt86.exe
O9 - Extra 'Tools' menuitem: CheckIt &86 - {2887F316-8C6C-47ae-A462-D2C9739D2C3D} - C:\PROGRA~1\CheckIt\86\CheckIt86.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1098065218746
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {A49F0247-A542-4820-A6B2-C90FCDE28109} (VIM_remote.VIMREMOTE) - http://intouchvideo.com/download/VIM_remote.CAB
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/…utocomplete.cab
O16 - DPF: {B94B4225-E02E-4D3F-BADB-026F1E2F3AD7} (HttpDownloader Control) - file://C:\WINDOWS\SexDownloader.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab

OK. I did as you said and ran it for user chris vog and found many of the .exe files from the TEMP directory that we killed. So I removed them and rebooted and ran HJT and was loeft with this:

Logfile of HijackThis v1.98.2
Scan saved at 3:23:52 PM, on 10/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\WINDOWS\System32\rpcns4.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\HIJACK THIS\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CheckIt 86 - {82DF1118-9B92-45d8-B78F-1737A69A06E1} - C:\Program Files\CheckIt\86\CheckIt86.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WLMonWPC54G] C:\Program Files\Linksys\Wireless-G Notebook Adapter\WLMon.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [rpcns4] C:\WINDOWS\System32\rpcns4.exe
O4 - HKCU\..\Run: [D1045CE6] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\tp46w4.exe
O4 - HKCU\..\Run: [0EC56206] C:\DOCUME~1\CHRISV~1\LOCALS~1\Temp\1isg.exe
O4 - HKCU\..\Run: [PEntnt] C:\WINDOWS\system32\PEntnt.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: (no name) - {2887F316-8C6C-47ae-A462-D2C9739D2C3D} - C:\PROGRA~1\CheckIt\86\CheckIt86.exe
O9 - Extra 'Tools' menuitem: CheckIt &86 - {2887F316-8C6C-47ae-A462-D2C9739D2C3D} - C:\PROGRA~1\CheckIt\86\CheckIt86.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1098065218746
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {A49F0247-A542-4820-A6B2-C90FCDE28109} (VIM_remote.VIMREMOTE) - http://intouchvideo.com/download/VIM_remote.CAB
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/…utocomplete.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab

I am going to run HJT on user jayvog and post that log in the next post.

And this is the log for user jayvog

Logfile of HijackThis v1.98.2
Scan saved at 3:30:58 PM, on 10/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\HIJACK THIS\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CheckIt 86 - {82DF1118-9B92-45d8-B78F-1737A69A06E1} - C:\Program Files\CheckIt\86\CheckIt86.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WLMonWPC54G] C:\Program Files\Linksys\Wireless-G Notebook Adapter\WLMon.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - Startup: PowerReg Scheduler V3.exe
O8 - Extra context menu item: Add To CheckIt &86 Trust List - C:\PROGRA~1\CheckIt\86\AddToTrustList.js
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: (no name) - {2887F316-8C6C-47ae-A462-D2C9739D2C3D} - C:\PROGRA~1\CheckIt\86\CheckIt86.exe
O9 - Extra 'Tools' menuitem: CheckIt &86 - {2887F316-8C6C-47ae-A462-D2C9739D2C3D} - C:\PROGRA~1\CheckIt\86\CheckIt86.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} - http://supportsoft.adelphia.net/sdccommon/…ad/tgctlins.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1098065218746
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {A49F0247-A542-4820-A6B2-C90FCDE28109} (VIM_remote.VIMREMOTE) - http://intouchvideo.com/download/VIM_remote.CAB
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/…utocomplete.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab

Ta' mate