This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Here Is My Log

30 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Logfile of HijackThis v1.97.7
Scan saved at 6:10:54 PM, on 12/14/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\APPIR32.EXE
C:\WINDOWS\SYSTEM\MSAS32.EXE
C:\WINDOWS\ADDMI32.EXE
C:\WINDOWS\ATLIR32.EXE
C:\WINDOWS\CRTF32.EXE
C:\WINDOWS\CRTR32.EXE
C:\WINDOWS\IEHI32.EXE
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\IEXO.EXE
C:\WINDOWS\IEAF.EXE
C:\WINDOWS\IPFC.EXE
C:\WINDOWS\JAVAHQ32.EXE
C:\WINDOWS\IPQK.EXE
C:\WINDOWS\MSNN.EXE
C:\WINDOWS\MSEN32.EXE
C:\WINDOWS\NTJB.EXE
C:\WINDOWS\NETTI32.EXE
C:\WINDOWS\NTDS32.EXE
C:\WINDOWS\NTLA.EXE
C:\WINDOWS\SYSTEM\APIGM32.EXE
C:\WINDOWS\SYSTEM\APIXR.EXE
C:\WINDOWS\SYSTEM\APPWH32.EXE
C:\WINDOWS\SYSTEM\ATLDH.EXE
C:\WINDOWS\SYSTEM\ATLTW32.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\CRDV.EXE
C:\WINDOWS\SYSTEM\D3NQ.EXE
C:\WINDOWS\SYSTEM\IEFW32.EXE
C:\WINDOWS\SYSTEM\JAVATG.EXE
C:\WINDOWS\SYSTEM\JAVATS.EXE
C:\WINDOWS\SYSTEM\MFCHO32.EXE
C:\WINDOWS\SYSTEM\JAVAXC.EXE
C:\WINDOWS\SYSTEM\MFCVZ.EXE
C:\WINDOWS\SYSTEM\MFCLP32.EXE
C:\WINDOWS\SYSTEM\MSQU.EXE
C:\WINDOWS\SYSTEM\NETCI32.EXE
C:\WINDOWS\SYSTEM\NETDY.EXE
C:\WINDOWS\SYSTEM\NETKR32.EXE
C:\WINDOWS\SYSTEM\NTYE32.EXE
C:\WINDOWS\SYSTEM\SDKLN32.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\SDKOQ32.EXE
C:\WINDOWS\WINYS.EXE
C:\WINDOWS\SYSTEM\SYSTK.EXE
C:\WINDOWS\SYSIS32.EXE
C:\WINDOWS\WINAD32.EXE
C:\WINDOWS\SDKGC32.EXE
C:\WINDOWS\APPNX32.EXE
C:\WINDOWS\MSMQ.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\NETGUARD.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\ZEROSPYWARE.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\PROGRAM FILES\MSN\MSNCOREFILES\MSN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE
C:\PROGRAM FILES\MSN\MSNIA\MSNIASVC.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\EN-US\MSNTB.DLL
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_5_7_0.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [ConMgr.exe] "C:\PROGRAM FILES\EARTHLINK 5.0\CONMGR.EXE"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Component Manager] "C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE"
O4 - HKLM\..\Run: [devldr16.exe] C:\WINDOWS\SYSTEM\devldr16.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [MSNIA] C:\PROGRA~1\MSN\MSNIA\MSNIASVC.EXE
O4 - HKLM\..\RunServices: [MSAS32.EXE] C:\WINDOWS\SYSTEM\MSAS32.EXE
O4 - HKLM\..\RunServices: [APPIR32.EXE] C:\WINDOWS\APPIR32.EXE
O4 - HKLM\..\RunServices: [JAVAFU.EXE] C:\WINDOWS\JAVAFU.EXE
O4 - HKLM\..\RunServices: [APILW.EXE] C:\WINDOWS\SYSTEM\APILW.EXE
O4 - HKLM\..\RunServices: [IEHI32.EXE] C:\WINDOWS\IEHI32.EXE
O4 - HKLM\..\RunServices: [ADDMI32.EXE] C:\WINDOWS\ADDMI32.EXE
O4 - HKLM\..\RunServices: [APIOL32.EXE] C:\WINDOWS\APIOL32.EXE
O4 - HKLM\..\RunServices: [APPDJ32.EXE] C:\WINDOWS\APPDJ32.EXE
O4 - HKLM\..\RunServices: [APPJQ.EXE] C:\WINDOWS\APPJQ.EXE
O4 - HKLM\..\RunServices: [APPOI.EXE] C:\WINDOWS\APPOI.EXE
O4 - HKLM\..\RunServices: [ATLIR32.EXE] C:\WINDOWS\ATLIR32.EXE
O4 - HKLM\..\RunServices: [ATLUG.EXE] C:\WINDOWS\ATLUG.EXE
O4 - HKLM\..\RunServices: [CRTF32.EXE] C:\WINDOWS\CRTF32.EXE
O4 - HKLM\..\RunServices: [CRTR32.EXE] C:\WINDOWS\CRTR32.EXE
O4 - HKLM\..\RunServices: [CRYW32.EXE] C:\WINDOWS\CRYW32.EXE
O4 - HKLM\..\RunServices: [IEAF.EXE] C:\WINDOWS\IEAF.EXE
O4 - HKLM\..\RunServices: [IEXO.EXE] C:\WINDOWS\IEXO.EXE
O4 - HKLM\..\RunServices: [IPEL.EXE] C:\WINDOWS\IPEL.EXE
O4 - HKLM\..\RunServices: [IPFC.EXE] C:\WINDOWS\IPFC.EXE
O4 - HKLM\..\RunServices: [IPQK.EXE] C:\WINDOWS\IPQK.EXE
O4 - HKLM\..\RunServices: [JAVAHQ32.EXE] C:\WINDOWS\JAVAHQ32.EXE
O4 - HKLM\..\RunServices: [MFCJE32.EXE] C:\WINDOWS\MFCJE32.EXE
O4 - HKLM\..\RunServices: [MSCX.EXE] C:\WINDOWS\MSCX.EXE
O4 - HKLM\..\RunServices: [MSEN32.EXE] C:\WINDOWS\MSEN32.EXE
O4 - HKLM\..\RunServices: [MSNN.EXE] C:\WINDOWS\MSNN.EXE
O4 - HKLM\..\RunServices: [NETTI.EXE] C:\WINDOWS\NETTI.EXE
O4 - HKLM\..\RunServices: [NETTI32.EXE] C:\WINDOWS\NETTI32.EXE
O4 - HKLM\..\RunServices: [NTDS32.EXE] C:\WINDOWS\NTDS32.EXE
O4 - HKLM\..\RunServices: [NTJB.EXE] C:\WINDOWS\NTJB.EXE
O4 - HKLM\..\RunServices: [NTLA.EXE] C:\WINDOWS\NTLA.EXE
O4 - HKLM\..\RunServices: [APIGM32.EXE] C:\WINDOWS\SYSTEM\APIGM32.EXE
O4 - HKLM\..\RunServices: [APIXR.EXE] C:\WINDOWS\SYSTEM\APIXR.EXE
O4 - HKLM\..\RunServices: [APPWH32.EXE] C:\WINDOWS\SYSTEM\APPWH32.EXE
O4 - HKLM\..\RunServices: [ATLDH.EXE] C:\WINDOWS\SYSTEM\ATLDH.EXE
O4 - HKLM\..\RunServices: [ATLTW32.EXE] C:\WINDOWS\SYSTEM\ATLTW32.EXE
O4 - HKLM\..\RunServices: [CRDV.EXE] C:\WINDOWS\SYSTEM\CRDV.EXE
O4 - HKLM\..\RunServices: [D3FR32.EXE] C:\WINDOWS\SYSTEM\D3FR32.EXE
O4 - HKLM\..\RunServices: [D3NQ.EXE] C:\WINDOWS\SYSTEM\D3NQ.EXE
O4 - HKLM\..\RunServices: [IEFW32.EXE] C:\WINDOWS\SYSTEM\IEFW32.EXE
O4 - HKLM\..\RunServices: [IEVK32.EXE] C:\WINDOWS\SYSTEM\IEVK32.EXE
O4 - HKLM\..\RunServices: [JAVATG.EXE] C:\WINDOWS\SYSTEM\JAVATG.EXE
O4 - HKLM\..\RunServices: [JAVATS.EXE] C:\WINDOWS\SYSTEM\JAVATS.EXE
O4 - HKLM\..\RunServices: [JAVAXC.EXE] C:\WINDOWS\SYSTEM\JAVAXC.EXE
O4 - HKLM\..\RunServices: [MFCHO32.EXE] C:\WINDOWS\SYSTEM\MFCHO32.EXE
O4 - HKLM\..\RunServices: [MFCVZ.EXE] C:\WINDOWS\SYSTEM\MFCVZ.EXE
O4 - HKLM\..\RunServices: [MFCLP32.EXE] C:\WINDOWS\SYSTEM\MFCLP32.EXE
O4 - HKLM\..\RunServices: [MSQU.EXE] C:\WINDOWS\SYSTEM\MSQU.EXE
O4 - HKLM\..\RunServices: [NETCI32.EXE] C:\WINDOWS\SYSTEM\NETCI32.EXE
O4 - HKLM\..\RunServices: [NETDY.EXE] C:\WINDOWS\SYSTEM\NETDY.EXE
O4 - HKLM\..\RunServices: [NETKR32.EXE] C:\WINDOWS\SYSTEM\NETKR32.EXE
O4 - HKLM\..\RunServices: [NTYE32.EXE] C:\WINDOWS\SYSTEM\NTYE32.EXE
O4 - HKLM\..\RunServices: [SDKLN32.EXE] C:\WINDOWS\SYSTEM\SDKLN32.EXE
O4 - HKLM\..\RunServices: [SDKOQ32.EXE] C:\WINDOWS\SYSTEM\SDKOQ32.EXE
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [SYSTK.EXE] C:\WINDOWS\SYSTEM\SYSTK.EXE
O4 - HKLM\..\RunServices: [WINYS.EXE] C:\WINDOWS\WINYS.EXE
O4 - HKLM\..\RunServices: [WINAD32.EXE] C:\WINDOWS\WINAD32.EXE
O4 - HKLM\..\RunServices: [SYSYT.EXE] C:\WINDOWS\SYSYT.EXE
O4 - HKLM\..\RunServices: [SYSIS32.EXE] C:\WINDOWS\SYSIS32.EXE
O4 - HKLM\..\RunServices: [SDKGC32.EXE] C:\WINDOWS\SDKGC32.EXE
O4 - HKLM\..\RunServices: [APPNX32.EXE] C:\WINDOWS\APPNX32.EXE
O4 - HKLM\..\RunServices: [MSMQ.EXE] C:\WINDOWS\MSMQ.EXE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NetGuard] "C:\Program Files\FBM Software\ZeroSpyware 2004\NetGuard.exe" -STARTUP
O4 - HKCU\..\Run: [ZeroSpyware] "C:\Program Files\FBM Software\ZeroSpyware 2004\ZeroSpyware.exe" -STARTUP
O4 - HKLM\..\RunOnce: [RemoveFileUAF] "C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\FileDeleter.exe" C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\uaf.dat
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia (HKLM)
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia (HKLM)
O9 - Extra button: Define (HKLM)
O9 - Extra 'Tools' menuitem: Define (HKLM)
O9 - Extra button: Send to PDA… (HKLM)
O9 - Extra 'Tools' menuitem: Send to PDA… (HKLM)
O9 - Extra button: Dell Home (HKCU)
O10 - Broken Internet access because of LSP provider 'fbm.dll' missing
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.dellnet.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shock…ash/swflash.cab
O16 - DPF: {34805D32-AD89-469E-8503-A5666AEE4333} (RdxIE Class) - http://207.188.7.150/0958e73fbfb2e6198005/netzip/RdxIE.cab
O16 - DPF: {F621C77F-126F-4CA5-BC8B-2F64189E93A5} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://office.microsoft.com/productupdates/content/opuc.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/…7599.5865162037
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsc…55/mcinsctl.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…284/mcfscan.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O19 - User stylesheet: (file missing)
Okay, an updated logfile for hijackthis



Logfile of HijackThis v1.98.2
Scan saved at 11:36:03 PM, on 12/14/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\APPIR32.EXE
C:\WINDOWS\SYSTEM\MSAS32.EXE
C:\WINDOWS\IEHI32.EXE
C:\WINDOWS\ADDMI32.EXE
C:\WINDOWS\ATLIR32.EXE
C:\WINDOWS\CRTF32.EXE
C:\WINDOWS\CRTR32.EXE
C:\WINDOWS\IEXO.EXE
C:\WINDOWS\IEAF.EXE
C:\WINDOWS\JAVAHQ32.EXE
C:\WINDOWS\IPQK.EXE
C:\WINDOWS\IPFC.EXE
C:\WINDOWS\MSEN32.EXE
C:\WINDOWS\MSNN.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\NETTI32.EXE
C:\WINDOWS\NTDS32.EXE
C:\WINDOWS\NTJB.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\APIGM32.EXE
C:\WINDOWS\SYSTEM\APIXR.EXE
C:\WINDOWS\NTLA.EXE
C:\WINDOWS\SYSTEM\ATLDH.EXE
C:\WINDOWS\SYSTEM\APPWH32.EXE
C:\WINDOWS\SYSTEM\ATLTW32.EXE
C:\WINDOWS\SYSTEM\CRDV.EXE
C:\WINDOWS\SYSTEM\IEFW32.EXE
C:\WINDOWS\SYSTEM\D3NQ.EXE
C:\WINDOWS\SYSTEM\JAVATG.EXE
C:\WINDOWS\SYSTEM\JAVATS.EXE
C:\WINDOWS\SYSTEM\JAVAXC.EXE
C:\WINDOWS\SYSTEM\MFCHO32.EXE
C:\WINDOWS\SYSTEM\MFCVZ.EXE
C:\WINDOWS\SYSTEM\MSQU.EXE
C:\WINDOWS\SYSTEM\MFCLP32.EXE
C:\WINDOWS\SYSTEM\NETDY.EXE
C:\WINDOWS\SYSTEM\NETKR32.EXE
C:\WINDOWS\SYSTEM\NETCI32.EXE
C:\WINDOWS\SYSTEM\NTYE32.EXE
C:\WINDOWS\SYSTEM\SDKLN32.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\SDKOQ32.EXE
C:\WINDOWS\SYSTEM\SYSTK.EXE
C:\WINDOWS\WINYS.EXE
C:\WINDOWS\WINAD32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSIS32.EXE
C:\WINDOWS\SDKGC32.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\WINDOWS\APPNX32.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\MSMQ.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\MSN\MSNIA\MSNIASVC.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {7C3EAF4B-D99D-9B30-7B6D-B2D78C7E35AC} - C:\WINDOWS\JAVALV.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\EN-US\MSNTB.DLL
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_5_7_0.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [ConMgr.exe] "C:\PROGRAM FILES\EARTHLINK 5.0\CONMGR.EXE"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Component Manager] "C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE"
O4 - HKLM\..\Run: [devldr16.exe] C:\WINDOWS\SYSTEM\devldr16.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [MSNIA] C:\PROGRA~1\MSN\MSNIA\MSNIASVC.EXE
O4 - HKLM\..\RunServices: [MSAS32.EXE] C:\WINDOWS\SYSTEM\MSAS32.EXE
O4 - HKLM\..\RunServices: [APPIR32.EXE] C:\WINDOWS\APPIR32.EXE
O4 - HKLM\..\RunServices: [JAVAFU.EXE] C:\WINDOWS\JAVAFU.EXE
O4 - HKLM\..\RunServices: [APILW.EXE] C:\WINDOWS\SYSTEM\APILW.EXE
O4 - HKLM\..\RunServices: [IEHI32.EXE] C:\WINDOWS\IEHI32.EXE
O4 - HKLM\..\RunServices: [ADDMI32.EXE] C:\WINDOWS\ADDMI32.EXE
O4 - HKLM\..\RunServices: [APIOL32.EXE] C:\WINDOWS\APIOL32.EXE
O4 - HKLM\..\RunServices: [APPDJ32.EXE] C:\WINDOWS\APPDJ32.EXE
O4 - HKLM\..\RunServices: [APPJQ.EXE] C:\WINDOWS\APPJQ.EXE
O4 - HKLM\..\RunServices: [APPOI.EXE] C:\WINDOWS\APPOI.EXE
O4 - HKLM\..\RunServices: [ATLIR32.EXE] C:\WINDOWS\ATLIR32.EXE
O4 - HKLM\..\RunServices: [ATLUG.EXE] C:\WINDOWS\ATLUG.EXE
O4 - HKLM\..\RunServices: [CRTF32.EXE] C:\WINDOWS\CRTF32.EXE
O4 - HKLM\..\RunServices: [CRTR32.EXE] C:\WINDOWS\CRTR32.EXE
O4 - HKLM\..\RunServices: [CRYW32.EXE] C:\WINDOWS\CRYW32.EXE
O4 - HKLM\..\RunServices: [IEAF.EXE] C:\WINDOWS\IEAF.EXE
O4 - HKLM\..\RunServices: [IEXO.EXE] C:\WINDOWS\IEXO.EXE
O4 - HKLM\..\RunServices: [IPEL.EXE] C:\WINDOWS\IPEL.EXE
O4 - HKLM\..\RunServices: [IPFC.EXE] C:\WINDOWS\IPFC.EXE
O4 - HKLM\..\RunServices: [IPQK.EXE] C:\WINDOWS\IPQK.EXE
O4 - HKLM\..\RunServices: [JAVAHQ32.EXE] C:\WINDOWS\JAVAHQ32.EXE
O4 - HKLM\..\RunServices: [MFCJE32.EXE] C:\WINDOWS\MFCJE32.EXE
O4 - HKLM\..\RunServices: [MSCX.EXE] C:\WINDOWS\MSCX.EXE
O4 - HKLM\..\RunServices: [MSEN32.EXE] C:\WINDOWS\MSEN32.EXE
O4 - HKLM\..\RunServices: [MSNN.EXE] C:\WINDOWS\MSNN.EXE
O4 - HKLM\..\RunServices: [NETTI.EXE] C:\WINDOWS\NETTI.EXE
O4 - HKLM\..\RunServices: [NETTI32.EXE] C:\WINDOWS\NETTI32.EXE
O4 - HKLM\..\RunServices: [NTDS32.EXE] C:\WINDOWS\NTDS32.EXE
O4 - HKLM\..\RunServices: [NTJB.EXE] C:\WINDOWS\NTJB.EXE
O4 - HKLM\..\RunServices: [NTLA.EXE] C:\WINDOWS\NTLA.EXE
O4 - HKLM\..\RunServices: [APIGM32.EXE] C:\WINDOWS\SYSTEM\APIGM32.EXE
O4 - HKLM\..\RunServices: [APIXR.EXE] C:\WINDOWS\SYSTEM\APIXR.EXE
O4 - HKLM\..\RunServices: [APPWH32.EXE] C:\WINDOWS\SYSTEM\APPWH32.EXE
O4 - HKLM\..\RunServices: [ATLDH.EXE] C:\WINDOWS\SYSTEM\ATLDH.EXE
O4 - HKLM\..\RunServices: [ATLTW32.EXE] C:\WINDOWS\SYSTEM\ATLTW32.EXE
O4 - HKLM\..\RunServices: [CRDV.EXE] C:\WINDOWS\SYSTEM\CRDV.EXE
O4 - HKLM\..\RunServices: [D3FR32.EXE] C:\WINDOWS\SYSTEM\D3FR32.EXE
O4 - HKLM\..\RunServices: [D3NQ.EXE] C:\WINDOWS\SYSTEM\D3NQ.EXE
O4 - HKLM\..\RunServices: [IEFW32.EXE] C:\WINDOWS\SYSTEM\IEFW32.EXE
O4 - HKLM\..\RunServices: [IEVK32.EXE] C:\WINDOWS\SYSTEM\IEVK32.EXE
O4 - HKLM\..\RunServices: [JAVATG.EXE] C:\WINDOWS\SYSTEM\JAVATG.EXE
O4 - HKLM\..\RunServices: [JAVATS.EXE] C:\WINDOWS\SYSTEM\JAVATS.EXE
O4 - HKLM\..\RunServices: [JAVAXC.EXE] C:\WINDOWS\SYSTEM\JAVAXC.EXE
O4 - HKLM\..\RunServices: [MFCHO32.EXE] C:\WINDOWS\SYSTEM\MFCHO32.EXE
O4 - HKLM\..\RunServices: [MFCVZ.EXE] C:\WINDOWS\SYSTEM\MFCVZ.EXE
O4 - HKLM\..\RunServices: [MFCLP32.EXE] C:\WINDOWS\SYSTEM\MFCLP32.EXE
O4 - HKLM\..\RunServices: [MSQU.EXE] C:\WINDOWS\SYSTEM\MSQU.EXE
O4 - HKLM\..\RunServices: [NETCI32.EXE] C:\WINDOWS\SYSTEM\NETCI32.EXE
O4 - HKLM\..\RunServices: [NETDY.EXE] C:\WINDOWS\SYSTEM\NETDY.EXE
O4 - HKLM\..\RunServices: [NETKR32.EXE] C:\WINDOWS\SYSTEM\NETKR32.EXE
O4 - HKLM\..\RunServices: [NTYE32.EXE] C:\WINDOWS\SYSTEM\NTYE32.EXE
O4 - HKLM\..\RunServices: [SDKLN32.EXE] C:\WINDOWS\SYSTEM\SDKLN32.EXE
O4 - HKLM\..\RunServices: [SDKOQ32.EXE] C:\WINDOWS\SYSTEM\SDKOQ32.EXE
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [SYSTK.EXE] C:\WINDOWS\SYSTEM\SYSTK.EXE
O4 - HKLM\..\RunServices: [WINYS.EXE] C:\WINDOWS\WINYS.EXE
O4 - HKLM\..\RunServices: [WINAD32.EXE] C:\WINDOWS\WINAD32.EXE
O4 - HKLM\..\RunServices: [SYSYT.EXE] C:\WINDOWS\SYSYT.EXE
O4 - HKLM\..\RunServices: [SYSIS32.EXE] C:\WINDOWS\SYSIS32.EXE
O4 - HKLM\..\RunServices: [SDKGC32.EXE] C:\WINDOWS\SDKGC32.EXE
O4 - HKLM\..\RunServices: [APPNX32.EXE] C:\WINDOWS\APPNX32.EXE
O4 - HKLM\..\RunServices: [MSMQ.EXE] C:\WINDOWS\MSMQ.EXE
O4 - HKLM\..\RunOnce: [RemoveFileUAF] "C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\FileDeleter.exe" C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\uaf.dat
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NetGuard] "C:\Program Files\FBM Software\ZeroSpyware 2004\NetGuard.exe" -STARTUP
O4 - HKCU\..\Run: [ZeroSpyware] "C:\Program Files\FBM Software\ZeroSpyware 2004\ZeroSpyware.exe" -STARTUP
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra 'Tools' menuitem: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra button: Dell Home - {08DCFC6C-B6E4-480C-95A4-FC64F37B787E} - http://www.dellnet.com (file missing) (HKCU)
O10 - Broken Internet access because of LSP provider 'fbm.dll' missing
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.dellnet.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {34805D32-AD89-469E-8503-A5666AEE4333} (RdxIE Class) - http://207.188.7.150/0958e73fbfb2e6198005/netzip/RdxIE.cab
O16 - DPF: {F621C77F-126F-4CA5-BC8B-2F64189E93A5} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsc…55/mcinsctl.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…284/mcfscan.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\PROGRAM FILES\HP\HPCORETECH\COMP\HPUIPROT.DLL
O19 - User stylesheet: (file missing)
Here is my most recent scan. My virus program says I have a trojan downloader w32.agent variety of files Please help me.

Logfile of HijackThis v1.99.0
Scan saved at 7:22:03 AM, on 12/18/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\IEHI32.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\APPNX32.EXE
C:\WINDOWS\MSMQ.EXE
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE
C:\PROGRAM FILES\TROJANHUNTER 4.0\THGUARD.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\NETGUARD.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\ZEROSPYWARE.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\MSN\MSNIA\MSNIASVC.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ljmnb.dll/sp.html#37794
R3 - Default URLSearchHook is missing
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\EN-US\MSNTB.DLL
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_5_7_0.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Component Manager] "C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE"
O4 - HKLM\..\Run: [THGuard] "C:\PROGRAM FILES\TROJANHUNTER 4.0\THGUARD.EXE"
O4 - HKLM\..\Run: [devldr16.exe] C:\WINDOWS\SYSTEM\devldr16.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [MSNIA] C:\PROGRA~1\MSN\MSNIA\MSNIASVC.EXE
O4 - HKLM\..\RunServices: [APILW.EXE] C:\WINDOWS\SYSTEM\APILW.EXE
O4 - HKLM\..\RunServices: [IEHI32.EXE] C:\WINDOWS\IEHI32.EXE
O4 - HKLM\..\RunServices: [ADDMI32.EXE] C:\WINDOWS\ADDMI32.EXE
O4 - HKLM\..\RunServices: [APIOL32.EXE] C:\WINDOWS\APIOL32.EXE
O4 - HKLM\..\RunServices: [CRYW32.EXE] C:\WINDOWS\CRYW32.EXE
O4 - HKLM\..\RunServices: [IPEL.EXE] C:\WINDOWS\IPEL.EXE
O4 - HKLM\..\RunServices: [IPQK.EXE] C:\WINDOWS\IPQK.EXE
O4 - HKLM\..\RunServices: [JAVAHQ32.EXE] C:\WINDOWS\JAVAHQ32.EXE
O4 - HKLM\..\RunServices: [MFCJE32.EXE] C:\WINDOWS\MFCJE32.EXE
O4 - HKLM\..\RunServices: [MSEN32.EXE] C:\WINDOWS\MSEN32.EXE
O4 - HKLM\..\RunServices: [NTLA.EXE] C:\WINDOWS\NTLA.EXE
O4 - HKLM\..\RunServices: [CRDV.EXE] C:\WINDOWS\SYSTEM\CRDV.EXE
O4 - HKLM\..\RunServices: [D3FR32.EXE] C:\WINDOWS\SYSTEM\D3FR32.EXE
O4 - HKLM\..\RunServices: [D3NQ.EXE] C:\WINDOWS\SYSTEM\D3NQ.EXE
O4 - HKLM\..\RunServices: [IEFW32.EXE] C:\WINDOWS\SYSTEM\IEFW32.EXE
O4 - HKLM\..\RunServices: [IEVK32.EXE] C:\WINDOWS\SYSTEM\IEVK32.EXE
O4 - HKLM\..\RunServices: [JAVATG.EXE] C:\WINDOWS\SYSTEM\JAVATG.EXE
O4 - HKLM\..\RunServices: [JAVAXC.EXE] C:\WINDOWS\SYSTEM\JAVAXC.EXE
O4 - HKLM\..\RunServices: [MFCVZ.EXE] C:\WINDOWS\SYSTEM\MFCVZ.EXE
O4 - HKLM\..\RunServices: [MFCLP32.EXE] C:\WINDOWS\SYSTEM\MFCLP32.EXE
O4 - HKLM\..\RunServices: [MSQU.EXE] C:\WINDOWS\SYSTEM\MSQU.EXE
O4 - HKLM\..\RunServices: [NETCI32.EXE] C:\WINDOWS\SYSTEM\NETCI32.EXE
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [WINYS.EXE] C:\WINDOWS\WINYS.EXE
O4 - HKLM\..\RunServices: [SYSIS32.EXE] C:\WINDOWS\SYSIS32.EXE
O4 - HKLM\..\RunServices: [SDKGC32.EXE] C:\WINDOWS\SDKGC32.EXE
O4 - HKLM\..\RunServices: [APPNX32.EXE] C:\WINDOWS\APPNX32.EXE
O4 - HKLM\..\RunServices: [MSMQ.EXE] C:\WINDOWS\MSMQ.EXE
O4 - HKLM\..\RunOnce: [RemoveFileUAF] "C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\FileDeleter.exe" C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\uaf.dat
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NetGuard] "C:\Program Files\FBM Software\ZeroSpyware 2004\NetGuard.exe" -STARTUP
O4 - HKCU\..\Run: [ZeroSpyware] "C:\Program Files\FBM Software\ZeroSpyware 2004\ZeroSpyware.exe" -STARTUP
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra 'Tools' menuitem: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra button: Dell Home - {08DCFC6C-B6E4-480C-95A4-FC64F37B787E} - http://www.dellnet.com (file missing) (HKCU)
O10 - Broken Internet access because of LSP provider 'fbm.dll' missing
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.dellnet.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {34805D32-AD89-469E-8503-A5666AEE4333} (RdxIE Class) - http://207.188.7.150/0958e73fbfb2e6198005/netzip/RdxIE.cab
O16 - DPF: {F621C77F-126F-4CA5-BC8B-2F64189E93A5} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsc…55/mcinsctl.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…284/mcfscan.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\PROGRAM FILES\HP\HPCORETECH\COMP\HPUIPROT.DLL
O19 - User stylesheet: (file missing)
Click here to download CWShredder and run it, hit 'fix' as opposed to 'scan only'. Reboot when done.

Click here to download Spybot Search & Destroy - install, update, scan and fix all RED items it finds. Reboot when done.

Click here to download Ad-Aware SE and install. Before scanning click on "check for updates now" to make sure you have the latest reference file. Click "Start", select "Perform Full System scan" and "Next" to start the scan. When the scan is finished, the screen will tell you if anything has been found, click "Next". The bad files will be listed, right click the pane and click "Select all objects" - this will put a check mark in the box at the side, click "Next" again and click "OK" at the prompt "# objects will be removed. Continue?".

Reboot when done. Rescan with HJT and post a new log here so that any remnants can be removed manually.
I have run adaware and cw shredder with nothing found on either scan. Here is my most recent scan. I still have not run SPYBOT. It ran for 6 hours, got thru about half the files and locked up. Any suggestions?

Logfile of HijackThis v1.99.0
Scan saved at 11:03:17 PM, on 12/18/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\IEHI32.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\MSMQ.EXE
C:\WINDOWS\APPNX32.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\NETGUARD.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\ZEROSPYWARE.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\MSN\MSNCOREFILES\MSN.EXE
C:\PROGRAM FILES\MSN\MSNIA\MSNIASVC.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:9022
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\EN-US\MSNTB.DLL
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_5_7_0.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Component Manager] "C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE"
O4 - HKLM\..\Run: [devldr16.exe] C:\WINDOWS\SYSTEM\devldr16.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [MSNIA] C:\PROGRA~1\MSN\MSNIA\MSNIASVC.EXE
O4 - HKLM\..\RunServices: [APILW.EXE] C:\WINDOWS\SYSTEM\APILW.EXE
O4 - HKLM\..\RunServices: [IEHI32.EXE] C:\WINDOWS\IEHI32.EXE
O4 - HKLM\..\RunServices: [ADDMI32.EXE] C:\WINDOWS\ADDMI32.EXE
O4 - HKLM\..\RunServices: [APIOL32.EXE] C:\WINDOWS\APIOL32.EXE
O4 - HKLM\..\RunServices: [CRYW32.EXE] C:\WINDOWS\CRYW32.EXE
O4 - HKLM\..\RunServices: [IPEL.EXE] C:\WINDOWS\IPEL.EXE
O4 - HKLM\..\RunServices: [IPQK.EXE] C:\WINDOWS\IPQK.EXE
O4 - HKLM\..\RunServices: [JAVAHQ32.EXE] C:\WINDOWS\JAVAHQ32.EXE
O4 - HKLM\..\RunServices: [MFCJE32.EXE] C:\WINDOWS\MFCJE32.EXE
O4 - HKLM\..\RunServices: [MSEN32.EXE] C:\WINDOWS\MSEN32.EXE
O4 - HKLM\..\RunServices: [NTLA.EXE] C:\WINDOWS\NTLA.EXE
O4 - HKLM\..\RunServices: [CRDV.EXE] C:\WINDOWS\SYSTEM\CRDV.EXE
O4 - HKLM\..\RunServices: [D3FR32.EXE] C:\WINDOWS\SYSTEM\D3FR32.EXE
O4 - HKLM\..\RunServices: [D3NQ.EXE] C:\WINDOWS\SYSTEM\D3NQ.EXE
O4 - HKLM\..\RunServices: [IEFW32.EXE] C:\WINDOWS\SYSTEM\IEFW32.EXE
O4 - HKLM\..\RunServices: [IEVK32.EXE] C:\WINDOWS\SYSTEM\IEVK32.EXE
O4 - HKLM\..\RunServices: [JAVATG.EXE] C:\WINDOWS\SYSTEM\JAVATG.EXE
O4 - HKLM\..\RunServices: [JAVAXC.EXE] C:\WINDOWS\SYSTEM\JAVAXC.EXE
O4 - HKLM\..\RunServices: [MFCVZ.EXE] C:\WINDOWS\SYSTEM\MFCVZ.EXE
O4 - HKLM\..\RunServices: [MFCLP32.EXE] C:\WINDOWS\SYSTEM\MFCLP32.EXE
O4 - HKLM\..\RunServices: [MSQU.EXE] C:\WINDOWS\SYSTEM\MSQU.EXE
O4 - HKLM\..\RunServices: [NETCI32.EXE] C:\WINDOWS\SYSTEM\NETCI32.EXE
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [WINYS.EXE] C:\WINDOWS\WINYS.EXE
O4 - HKLM\..\RunServices: [SYSIS32.EXE] C:\WINDOWS\SYSIS32.EXE
O4 - HKLM\..\RunServices: [SDKGC32.EXE] C:\WINDOWS\SDKGC32.EXE
O4 - HKLM\..\RunServices: [APPNX32.EXE] C:\WINDOWS\APPNX32.EXE
O4 - HKLM\..\RunServices: [MSMQ.EXE] C:\WINDOWS\MSMQ.EXE
O4 - HKLM\..\RunOnce: [RemoveFileUAF] "C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\FileDeleter.exe" C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\uaf.dat
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NetGuard] "C:\Program Files\FBM Software\ZeroSpyware 2004\NetGuard.exe" -STARTUP
O4 - HKCU\..\Run: [ZeroSpyware] "C:\Program Files\FBM Software\ZeroSpyware 2004\ZeroSpyware.exe" -STARTUP
O4 - HKCU\..\RunServices: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\RunServices: [NetGuard] "C:\Program Files\FBM Software\ZeroSpyware 2004\NetGuard.exe" -STARTUP
O4 - HKCU\..\RunServices: [ZeroSpyware] "C:\Program Files\FBM Software\ZeroSpyware 2004\ZeroSpyware.exe" -STARTUP
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra 'Tools' menuitem: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra button: Dell Home - {08DCFC6C-B6E4-480C-95A4-FC64F37B787E} - http://www.dellnet.com (file missing) (HKCU)
O10 - Broken Internet access because of LSP provider 'fbm.dll' missing
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.dellnet.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {34805D32-AD89-469E-8503-A5666AEE4333} (RdxIE Class) - http://207.188.7.150/0958e73fbfb2e6198005/netzip/RdxIE.cab
O16 - DPF: {F621C77F-126F-4CA5-BC8B-2F64189E93A5} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsc…55/mcinsctl.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…284/mcfscan.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\PROGRAM FILES\HP\HPCORETECH\COMP\HPUIPROT.DLL
O19 - User stylesheet: (file missing)
Create a new folder called C:\HijackThis, move the HijackThis.exe file into the new folder and run it from there. This is necessary to ensure you have backups should anything go wrong.

Make sure that you have no browser windows open as this could prevent the fix from working properly. Open HijackThis, scan and when complete, remove the following entries by checking the box to the left and clicking 'fixed checked':

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
O4 - HKLM\..\RunServices: [APILW.EXE] C:\WINDOWS\SYSTEM\APILW.EXE
O4 - HKLM\..\RunServices: [IEHI32.EXE] C:\WINDOWS\IEHI32.EXE
O4 - HKLM\..\RunServices: [ADDMI32.EXE] C:\WINDOWS\ADDMI32.EXE
O4 - HKLM\..\RunServices: [APIOL32.EXE] C:\WINDOWS\APIOL32.EXE
O4 - HKLM\..\RunServices: [CRYW32.EXE] C:\WINDOWS\CRYW32.EXE
O4 - HKLM\..\RunServices: [IPEL.EXE] C:\WINDOWS\IPEL.EXE
O4 - HKLM\..\RunServices: [IPQK.EXE] C:\WINDOWS\IPQK.EXE
O4 - HKLM\..\RunServices: [JAVAHQ32.EXE] C:\WINDOWS\JAVAHQ32.EXE
O4 - HKLM\..\RunServices: [MFCJE32.EXE] C:\WINDOWS\MFCJE32.EXE
O4 - HKLM\..\RunServices: [MSEN32.EXE] C:\WINDOWS\MSEN32.EXE
O4 - HKLM\..\RunServices: [NTLA.EXE] C:\WINDOWS\NTLA.EXE
O4 - HKLM\..\RunServices: [CRDV.EXE] C:\WINDOWS\SYSTEM\CRDV.EXE
O4 - HKLM\..\RunServices: [D3FR32.EXE] C:\WINDOWS\SYSTEM\D3FR32.EXE
O4 - HKLM\..\RunServices: [D3NQ.EXE] C:\WINDOWS\SYSTEM\D3NQ.EXE
O4 - HKLM\..\RunServices: [IEFW32.EXE] C:\WINDOWS\SYSTEM\IEFW32.EXE
O4 - HKLM\..\RunServices: [IEVK32.EXE] C:\WINDOWS\SYSTEM\IEVK32.EXE
O4 - HKLM\..\RunServices: [JAVATG.EXE] C:\WINDOWS\SYSTEM\JAVATG.EXE
O4 - HKLM\..\RunServices: [JAVAXC.EXE] C:\WINDOWS\SYSTEM\JAVAXC.EXE
O4 - HKLM\..\RunServices: [MFCVZ.EXE] C:\WINDOWS\SYSTEM\MFCVZ.EXE
O4 - HKLM\..\RunServices: [MFCLP32.EXE] C:\WINDOWS\SYSTEM\MFCLP32.EXE
O4 - HKLM\..\RunServices: [MSQU.EXE] C:\WINDOWS\SYSTEM\MSQU.EXE
O4 - HKLM\..\RunServices: [NETCI32.EXE] C:\WINDOWS\SYSTEM\NETCI32.EXE
O4 - HKLM\..\RunServices: [WINYS.EXE] C:\WINDOWS\WINYS.EXE
O4 - HKLM\..\RunServices: [SYSIS32.EXE] C:\WINDOWS\SYSIS32.EXE
O4 - HKLM\..\RunServices: [SDKGC32.EXE] C:\WINDOWS\SDKGC32.EXE
O4 - HKLM\..\RunServices: [APPNX32.EXE] C:\WINDOWS\APPNX32.EXE
O4 - HKLM\..\RunServices: [MSMQ.EXE] C:\WINDOWS\MSMQ.EXE
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {34805D32-AD89-469E-8503-A5666AEE4333} (RdxIE Class) - http://207.188.7.150/0958e73fbfb2e6198005/netzip/RdxIE.cab
O19 - User stylesheet: (file missing)

Click here, for instructions on how to enable hidden files and folders to be visible. After enabling, reboot into safe mode by tapping F8 after the BIOS has loaded, find and delete the following:

C:\WINDOWS\SYSTEM\APILW.EXE
C:\WINDOWS\IEHI32.EXE
C:\WINDOWS\ADDMI32.EXE
C:\WINDOWS\APIOL32.EXE
C:\WINDOWS\CRYW32.EXE
C:\WINDOWS\IPEL.EXE
C:\WINDOWS\IPQK.EXE
C:\WINDOWS\JAVAHQ32.EXE
C:\WINDOWS\MFCJE32.EXE
C:\WINDOWS\MSEN32.EXE
C:\WINDOWS\NTLA.EXE
C:\WINDOWS\SYSTEM\CRDV.EXE
C:\WINDOWS\SYSTEM\D3FR32.EXE
C:\WINDOWS\SYSTEM\D3NQ.EXE
C:\WINDOWS\SYSTEM\IEFW32.EXE
C:\WINDOWS\SYSTEM\IEVK32.EXE
C:\WINDOWS\SYSTEM\JAVATG.EXE
C:\WINDOWS\SYSTEM\JAVAXC.EXE
C:\WINDOWS\SYSTEM\MFCVZ.EXE
C:\WINDOWS\SYSTEM\MFCLP32.EXE
C:\WINDOWS\SYSTEM\MSQU.EXE
C:\WINDOWS\SYSTEM\NETCI32.EXE
C:\WINDOWS\WINYS.EXE
C:\WINDOWS\SYSIS32.EXE
C:\WINDOWS\SDKGC32.EXE
C:\WINDOWS\APPNX32.EXE
C:\WINDOWS\MSMQ.EXE

Reboot when done, rescan with HJT and post a new log here.
Okay, here is the log after I removed what you recommended. Spybot finally did complete running, after 12+ hours. Let me know what else I still need to know or do. I am still having trouble with the computer locking up occasionally.

Thanks

Logfile of HijackThis v1.99.0
Scan saved at 7:57:16 AM, on 12/20/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\NETGUARD.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\ZEROSPYWARE.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\MSN\MSNIA\MSNIASVC.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE

R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\EN-US\MSNTB.DLL
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_5_7_0.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Component Manager] "C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE"
O4 - HKLM\..\Run: [devldr16.exe] C:\WINDOWS\SYSTEM\devldr16.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [MSNIA] C:\PROGRA~1\MSN\MSNIA\MSNIASVC.EXE
O4 - HKLM\..\RunOnce: [RemoveFileUAF] "C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\FileDeleter.exe" C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\uaf.dat
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NetGuard] "C:\Program Files\FBM Software\ZeroSpyware 2004\NetGuard.exe" -STARTUP
O4 - HKCU\..\Run: [ZeroSpyware] "C:\Program Files\FBM Software\ZeroSpyware 2004\ZeroSpyware.exe" -STARTUP
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra 'Tools' menuitem: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra button: Dell Home - {08DCFC6C-B6E4-480C-95A4-FC64F37B787E} - http://www.dellnet.com (file missing) (HKCU)
O10 - Broken Internet access because of LSP provider 'fbm.dll' missing
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.dellnet.com
O16 - DPF: {F621C77F-126F-4CA5-BC8B-2F64189E93A5} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsc…55/mcinsctl.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…284/mcfscan.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\PROGRAM FILES\HP\HPCORETECH\COMP\HPUIPROT.DLL
It actually looks OK now. Click here to download mwavscan. Double-click it to run it, select all local drives, scan all files, press 'scan' and when it is completed, anything found will be displayed in the lower pane. Highlight it, CTRL C and paste it in your next reply.
Okay here is the scan results. I had previously downloaded the virus scan 3 days ago. Is there a way to update it without reloading it? 229 files all with trojan downloader. What next? File C:\WINDOWS\bisuuc.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ieik.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_xjtbdo.dat infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlad32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_uzzhkq.dat infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_luztvq.dat infected by "TrojanDownloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crji.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javaei32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atceao.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlyg.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlim.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apilj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sysmf.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntyk32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ieup.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ieyj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlkc32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkuk.dll infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipce32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iebt.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfckr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apppz.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iesn32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msvd.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcpp32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntet32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlrq.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\tphvmo.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winaz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netqx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlis.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkgr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\jjxgwb.dat infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_pucobw.dat infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlum32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crdl32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ocyohk.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkqx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\syscv.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\cwtybf.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\cvkysy.dat infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\lmslmw.dat infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_gwhome.txt infected by "TrojanDownloader.Win32.Agent.cd" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_pgumti.txt infected by "TrojanDownloader.Win32.Agent.cd" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlym.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlik32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\estdrp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mstn.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crlm.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apptg32.dll infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\pcqvsp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\addgp.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crhj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javaov.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\uapmwo.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apipu32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crst32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\nter32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkua32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\rgayyn.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iiwtyo.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\aoaojp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlnl32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javavq32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winqs.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apiwi.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipbb.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipkt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\xfymiv.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\niuyje.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntbx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crzq32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcnt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apinh32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netdx32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlui.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcwp32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javazg32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winpc32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winzj.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\pidgfe.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcgn32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcwv32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\xxiemx.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apipm32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkou32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\bbsozg.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crrl.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\syset32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\nthk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlwd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\addjv32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msoy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3ft32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netmx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntqz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkrk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crkt.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apinw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crii32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkcq.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winjp.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netct32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlmo32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\addea32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ljmnb.dll infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkdy.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\wqkduw.dat infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ippo32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ieba32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winyy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javabj.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkgx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntoh32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ksarnh.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfclt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appet32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apibs.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlra32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apisj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3ru.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\applw32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\addwp.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sysat.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\igabrh.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crex.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appwz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3wn.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iegk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipph32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winse.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\vnplhz.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apilz.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\auaqpp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcba32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appkd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addue.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crrj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msjr32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javafa32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mfcyq.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msgg.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iphl32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iesc32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javaua32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysud.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addvz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysix.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msxg.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netfv.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addtf.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\nethw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiut.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\winno.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntkn.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\winpe.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mfcne.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addan.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msfk32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javacy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crlh32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiji.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appfr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ipdw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apima32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mfcxz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crsd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appsz.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iphe32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkxm32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\cruv32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkjw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iecf32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apixv32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\winqb.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\systl32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ipco.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javaql.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iexz.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netgh.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iedj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3lj.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysmj.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addzt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netgk32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mfcxc32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msct.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addjd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\winkk32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crvw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mfcaw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3hs.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appwr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netnz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javavm.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\cryk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apihy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netuo.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apivb.dll infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iemg.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3oo32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javati32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlzs32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appuf32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appev32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkbi32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appyt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlau.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apinu32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3lm.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3jl.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appjj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3ou.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlxh.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntoy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addio.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysot.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mfcio32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkkx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3nk32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntpx32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\wingt.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crqd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crdq.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iewr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javawp32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntqh.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crts.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysfu.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
here is the most recent HJT log. I have been unable to run the Housecall Microtrend program. It seems to lock up the computer and go nowhere. I am currently running a mwvascan and and currently up to 220 trojan downloaders of the win32 agent variety. What else can we try?? I will post the scan result when it is done.

Logfile of HijackThis v1.99.0
Scan saved at 1:51:18 PM, on 12/21/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\NETGUARD.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\ZEROSPYWARE.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\MSN\MSNIA\MSNIASVC.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE

R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\EN-US\MSNTB.DLL
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_5_7_0.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Component Manager] "C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE"
O4 - HKLM\..\Run: [devldr16.exe] C:\WINDOWS\SYSTEM\devldr16.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [MSNIA] C:\PROGRA~1\MSN\MSNIA\MSNIASVC.EXE
O4 - HKLM\..\RunOnce: [RemoveFileUAF] "C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\FileDeleter.exe" C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\uaf.dat
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NetGuard] "C:\Program Files\FBM Software\ZeroSpyware 2004\NetGuard.exe" -STARTUP
O4 - HKCU\..\Run: [ZeroSpyware] "C:\Program Files\FBM Software\ZeroSpyware 2004\ZeroSpyware.exe" -STARTUP
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra 'Tools' menuitem: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra button: Dell Home - {08DCFC6C-B6E4-480C-95A4-FC64F37B787E} - http://www.dellnet.com (file missing) (HKCU)
O10 - Broken Internet access because of LSP provider 'fbm.dll' missing
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.dellnet.com
O16 - DPF: {F621C77F-126F-4CA5-BC8B-2F64189E93A5} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsc…55/mcinsctl.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…284/mcfscan.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\PROGRAM FILES\HP\HPCORETECH\COMP\HPUIPROT.DLL
Okay, I am rerunning mwav and will post the results when finished. How about a hint at how we are going to go about this. I am predicting this is going to take a long, tedious time.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI