Possible Hijacking

I have been experiencing some problems with my computer, expecially internet use (slow speed, popups and redirects, downloads, etc.) A friend told me to try Hijackthis and post the results here. ANy help would be appreciated Thanks!

Logfile of HijackThis v1.99.1
Scan saved at 6:17:41 PM, on 3/2/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0600)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\E_S4I2R1.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFTRAY.EXE
C:\WINDOWS\SYSTEM\AP9H4QMO.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\NETGEAR WG311V2 ADAPTER\WLANCFG5.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFAGENT.EXE
C:\WINDOWS\TEMP\CXTPLS_LOADER.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\WAOL.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\SHELLMON.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\AOLTPSPD.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://69.42.87.219/sidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://desktop.presario.net/scripts/redire…&c=2C01&lc=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://69.42.87.219/sidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://69.42.87.219/sidesearch.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/chsi.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://rd.yahoo.com/customize/ymsgr/defaul…://my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://rd.yahoo.com/customize/ymsgr/defaul…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://69.42.87.219/sidesearch.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: CControl Object - {3643ABC2-21BF-46B9-B230-F247DB0C6FD6} - C:\Program Files\E2G\IeBHOs.dll
O2 - BHO: Yahoo! Companion BHO - {02478D28-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_6.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: CAUN Object - {59F12660-2B92-4554-98F9-87295AD8A0CE} - C:\WINDOWS\SYSTEM\AUNBHO.DLL
O2 - BHO: (no name) - {017C20C1-F86F-11D8-9B25-000ACD002AE3} - (no file)
O2 - BHO: (no name) - {00000000-F09C-02B4-6EC2-AD0300000000} - (no file)
O2 - BHO: MSW.cIExplorer - {4B57B77A-B130-4EB8-8CFB-42B880F6D311} - C:\WINDOWS\ALL USERS\APPLICATION DATA\MSW\MSW.DLL
O2 - BHO: SDWin32 Class - {8F15D06B-5E02-4FEF-A32C-CA213D4F185D} - C:\WINDOWS\SYSTEM\KUDPV.DLL
O2 - BHO: (no name) - {C4E33110-C493-4BE4-9883-07EB7995CB9F} - C:\PROGRAM FILES\DEUI69XR\DEUI69XR.dll
O2 - BHO: SDWin32 Class - {D4B97F6F-FBAE-43AC-9EB9-9F9745D53473} - C:\WINDOWS\SYSTEM\UFXEI.DLL
O2 - BHO: ohb Class - {CB5B2BC6-F957-4D8A-BE67-83F3EC58BA01} - C:\WINDOWS\SYSTEM\DSKTRF.DLL
O2 - BHO: (no name) - {6AE00B98-425F-451E-98C5-CA95AE9442F6} - C:\PROGRAM FILES\DEUI69XR\DEUI69XR.dll
O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - C:\PROGRA~1\COMMON~1\WINTOOLS\WTOOLSB.DLL (file missing)
O2 - BHO: RsyncHlpr Class - {16B238D5-80DE-47CE-8F17-B3ECE2C2248D} - C:\WINDOWS\SYSTEM\RSYNCMON.DLL
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_6.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O4 - HKLM\..\Run: [MSConfigReminder] C:\WINDOWS\SYSTEM\msconfig.exe /reminder
O4 - HKLM\..\Run: [EPSON Stylus C86 Seri (Copy 2)] C:\WINDOWS\SYSTEM\E_S4I2R1.EXE /P30 "EPSON Stylus C86 Seri (Copy 2)" /O6 "USB002" /M "Stylus C86"
O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\MCAFEE.COM\AGENT\MCREGWIZ.EXE /autorun
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\MCAFEE.COM\AGENT\McUpdate.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFTRAY.EXE
O4 - HKLM\..\Run: [RSync] C:\WINDOWS\SYSTEM\netsync.exe
O4 - HKLM\..\Run: [ap9h4qmo] C:\WINDOWS\SYSTEM\ap9h4qmo.exe
O4 - HKLM\..\Run: [AutoLoaderAproposClient] "C:\WINDOWS\TEMP\CXTPLS_LOADER.EXE" /HideUninstall /HideDir /PC=CP.DEF2 /ForSupportedBrowsers /ShowLegalNote=nonbranded
O4 - HKLM\..\RunServices: [McVsRte] C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding
O4 - Startup: NETGEAR WG311v2 Smart Configuration.lnk = C:\Program Files\NETGEAR WG311v2 Adapter\wlancfg5.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0322.DLL
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0322.DLL
O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O16 - DPF: {CD17FAAA-17B4-4736-AAEF-436EDC304C8C} (ContentAuditX Control) - http://a840.g.akamai.net/7/840/5805/v1000/…uditControl.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/…ymmapi_0312.dll
O16 - DPF: {FB886BB1-5740-11D3-A017-00600814EFFE} (LibCreate) - https://passkey.epenergy.com/_includes/LibCreate.cab
O16 - DPF: {287D57C6-D009-11D1-A961-00AA00A57C6F} (EL Paso Vision Foundation Class Library 4.1 (Passkey)) - https://passkey.epenergy.com/_includes/vfc41pk.cab
O16 - DPF: {9073C380-FA75-11D1-A97B-00AA00A57C6F} (Vision Orb library 3.3) - https://passkey.epenergy.com/_includes/vbj33.cab
O16 - DPF: {95009054-6B6B-11D2-8F4E-08005A897B0C} (EPJavaClasses) - https://passkey.epenergy.com/_includes/EPJavaClasses.cab
O16 - DPF: {DFC0F178-A3FF-4E10-AB2F-3EA4B642DFFD} (ASIJavaClasses) - https://passkey.epenergy.com/_includes/ASIJavaClasses.cab
O16 - DPF: {2A34B6A0-48F4-11D3-8FA1-08005A897B0C} (ReportViewerBean) - https://passkey.epenergy.com/_includes/ReportViewerBean.cab
O16 - DPF: {EE3D6201-9077-11D3-87F0-0000F6660238} (StackedGrid) - https://passkey.epenergy.com/_includes/StackedGrid.cab
O16 - DPF: {CD7C3290-46CE-11D3-ABB7-7CC95C000000} (EPIDLClasses) - https://passkey.epenergy.com/_includes/EPIDLClasses.cab
O16 - DPF: {5DF32110-AFBE-11D2-8F61-08005A897B0C} (PassKeyWeb) - https://passkey.elpaso.com/PassKeyWeb/PassKeyWeb.cab
O16 - DPF: {E4DF9E01-8D6A-11D4-B6A3-0008C75BB19C} (CIB_AuthToPost) - https://passkey.epenergy.com/CIB_AuthToPost…_AuthToPost.cab
O16 - DPF: {3786AEF1-6BA6-11D3-B268-000629EEA01E} (CIB_ContractualImbalance) - https://passkey.elpaso.com/CIB_ContractualI…alImbalance.cab
O16 - DPF: {38F684F6-50FF-4D2C-B621-0BB1671ED771} (CIB_ImbalTrade) - https://passkey.elpaso.com/CIB_ImbalTrade/CIB_ImbalTrade.cab
O16 - DPF: {4ED6E1D2-8E5B-11D4-B29A-0008C75BBEA7} (CIB_PostedImbDownload) - https://passkey.epenergy.com/CIB_PostedImbD…ImbDownload.cab
O16 - DPF: {8C905C41-1380-11D3-ABEB-00A024FE5D04} (CRS_Award) - https://passkey.epenergy.com/CRS_Award/CRS_Award.cab
O16 - DPF: {D3D0E3A1-29AC-11D3-B269-000629AA9FEA} (CRS_Bid) - https://passkey.epenergy.com/CRS_Bid/CRS_Bid.cab
O16 - DPF: {AC2B57F1-ABE3-11D3-B30A-000629AAC737} (CRS_DesiredCapacity) - https://passkey.epenergy.com/CRS_DesiredCap…redCapacity.cab
O16 - DPF: {81E72841-B853-11D2-9D8B-08005A89C513} (CRS_Offer) - https://passkey.elpaso.com/CRS_Offer/CRS_Offer.cab
O16 - DPF: {D84F6122-3AEF-11D3-B28F-000629AAB8CC} (CMN_Reports) - https://passkey.epenergy.com/CMN_Reports/CMN_Reports.cab
O16 - DPF: {7BF67861-4AA4-11D3-B362-000629EE2AB8} (CMN_ViewAddGrp) - https://passkey.epenergy.com/CMN_ViewAddGrp…_ViewAddGrp.cab
O16 - DPF: {B1D06AC2-ECC1-4A87-B520-C700FE3B37A8} (DSC_DscntViewMaint) - https://passkey.elpaso.com/DSC_DscntViewMai…ntViewMaint.cab
O16 - DPF: {DA290C49-F113-4DBA-B4D7-CE82BAC3E955} (DSC_ViewMtnMtrGrp) - https://passkey.epenergy.com/DSC_ViewMtnMtr…ewMtnMtrGrp.cab
O16 - DPF: {3CC49D52-AE7D-11D3-B466-00A024FE3766} (EBB_ImbalTrade) - https://passkey.epenergy.com/EBB_ImbalTrade…_ImbalTrade.cab
O16 - DPF: {93235E60-E05F-11D2-B242-08005AC19DF1} (EBB_Index_Prices) - https://passkey.epenergy.com/EBB_Index_Pric…ndex_Prices.cab
O16 - DPF: {3D191B70-F1DC-11D2-B267-000629EE28A8} (EBB_Notices_APP) - https://passkey.elpaso.com/EBB_Notices_APP/…Notices_APP.cab
O16 - DPF: {93235E60-E05F-11D2-B242-08005AC19CFF} (EBB_System_Del) - https://passkey.epenergy.com/EBB_System_Del…_System_Del.cab
O16 - DPF: {364CF8F0-E96F-11D3-9DE5-000629AACD30} (KMS_AdrMntn) - https://passkey.epenergy.com/KMS_AdrMntn/KMS_AdrMntn.cab
O16 - DPF: {E5001BC1-032E-11D3-B260-0006296BC777} (KMS_AssignmentLinks) - https://passkey.epenergy.com/KMS_Assignment…gnmentLinks.cab
O16 - DPF: {70B57971-B525-11D2-B254-000629EE8D64} (KMS_BlanketAuthorization) - https://passkey.epenergy.com/KMS_BlanketAut…thorization.cab
O16 - DPF: {3ED1C4C1-C053-11D2-B257-000629EE80C7} (KMS_CreateContract) - https://passkey.epenergy.com/KMS_CreateCont…ateContract.cab
O16 - DPF: {ABE79611-45B9-11D3-B2A8-000629AAC34E} (KMS_HardCopyContract) - https://passkey.epenergy.com/KMS_HardCopyCo…opyContract.cab
O16 - DPF: {3A28867D-34DF-44D0-8779-5FBFD07B0A2E} (KMS_Inquiry) - https://passkey.epenergy.com/KMS_Inquiry/KMS_Inquiry.cab
O16 - DPF: {118A2791-BAE4-11D2-B268-000629EE8D64} (KMS_MaintainContract) - https://passkey.elpaso.com/KMS_MaintainCont…ainContract.cab
O16 - DPF: {FD4EC4EF-C548-4F9E-B497-CE8749BF132E} (KMS_PlanningTq) - https://passkey.epenergy.com/KMS_PlanningTq…_PlanningTq.cab
O16 - DPF: {14B482A2-A1E0-11D3-B2EA-0006296BD87A} (KMS_ReleasorAmnd) - https://passkey.epenergy.com/KMS_ReleasorAm…eleasorAmnd.cab
O16 - DPF: {8D1239C1-566F-11D4-B491-0008C7BB4C5E} (KMS_ReplacerAmend) - https://passkey.epenergy.com/KMS_ReplacerAm…placerAmend.cab
O16 - DPF: {492E18C1-2405-11D3-B256-000629AAB8D9} (KMS_RollupMaint) - https://passkey.elpaso.com/KMS_RollupMaint/…RollupMaint.cab
O16 - DPF: {9BE39741-B640-11D2-B24B-000629EE80C7} (KMS_TableMaintenance) - https://passkey.epenergy.com/KMS_TableMaint…Maintenance.cab
O16 - DPF: {9F6F8A92-5F39-11D3-B279-000629AAB8D9} (KMS_RollupStrgMaint) - https://passkey.elpaso.com/KMS_RollupStrgMa…upStrgMaint.cab
O16 - DPF: {EB1A9480-9F30-11D2-AFE9-08005A888FF4} (NMS_Confirmations) - https://passkey.elpaso.com/NMS_Confirmation…nfirmations.cab
O16 - DPF: {98B4ED71-BBCB-11D2-B234-000629EEAF35} (NMS_Nominations) - https://passkey.elpaso.com/NMS_Nominations/…Nominations.cab
O16 - DPF: {5FCD8201-B09B-11D2-B23C-000629EE1A05} (NMS_PendAprv) - https://passkey.epenergy.com/NMS_PendAprv/NMS_PendAprv.cab
O16 - DPF: {FF312343-C524-11D3-A274-0008C7B9618E} (NMS_RankAC) - https://passkey.elpaso.com/NMS_RankAC/NMS_RankAC.cab
O16 - DPF: {479BBD51-BF00-11D3-9D97-000629AACD30} (NMS_Reports) - https://passkey.epenergy.com/NMS_Reports/NMS_Reports.cab
O16 - DPF: {3CC49D54-AE7D-11D3-B466-00A024FE3766} (EBB_Entity) - https://passkey.epenergy.com/EBB_Entity/EBB_Entity.cab
O16 - DPF: {3CC49D45-AE7D-11D3-B466-00A024FE3766} (EBB_Plant) - https://passkey.epenergy.com/EBB_Plant/EBB_Plant.cab
O16 - DPF: {A33398C2-1D27-11D3-AB1B-726BDB000005} (EBB_Location) - https://passkey.epenergy.com/EBB_Location/EBB_Location.cab
O16 - DPF: {3CC49D47-AE7D-11D3-B466-00A024FE3766} (EBB_OBA) - https://passkey.epenergy.com/EBB_OBA/EBB_OBA.cab
O16 - DPF: {A33398C3-1D27-11D3-AB1B-726BDB000001} (EBB_Rcpt_Region) - https://passkey.epenergy.com/EBB_Rcpt_Regio…Rcpt_Region.cab
O16 - DPF: {B5F32B20-FC52-11D3-A0F1-00600814EFFE} (El Paso SSL Package) - https://passkey3.elpaso.com/PassKey/epssl.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {40846731-4116-4EC0-B457-C7C560802A0F} (Style Report xreport_pro.jar 3.5 Library Classes) - https://passkey3.elpaso.com/passkey/xreport_pro.cab
O16 - DPF: {EEE727C0-5E31-4071-BC6F-221505DD05F7} (Style Report xtools.jar 3.5 Library Classes) - https://passkey3.elpaso.com/passkey/xtools.cab
O16 - DPF: {A1D10DF7-2CA5-46F5-BF7C-F391C75B3A4D} (Style Report/DataSource swingw.jar 3.1.1 Library Classes) - https://passkey.epenergy.com/_includes/swingw.cab
O16 - DPF: {53A71359-A36F-4CDD-9E26-4135806A3249} (Style Report/DataSource Win32Printer.dll 3.1.1 Library Classes) - https://passkey3.elpaso.com/passkey/Win32Printer.cab
O16 - DPF: {FA7A7461-C389-11D3-A0EC-0000F699053D} (VAS_Alloc_Stmt) - https://passkey.epenergy.com/VAS_Alloc_Stmt…_Alloc_Stmt.cab
O16 - DPF: {1CD2FFB1-B3CB-11D3-A0EF-0000F6989708} (VAS_PDA) - https://passkey.epenergy.com/VAS_PDA/VAS_PDA.cab
O16 - DPF: {379BBD11-AD97-11D3-B2AA-000629EE1C68} (TBS_Invoice) - https://passkey.elpaso.com/TBS_Invoice/TBS_Invoice.cab
O16 - DPF: {D3348AD1-0B3B-11D4-99B4-0000F699BCC3} (TBS_Invoice_Internal) - https://passkey.elpaso.com/TBS_Invoice_Inte…ce_Internal.cab
O16 - DPF: {1F58A2D8-A40D-4E21-9E16-6D951D26457C} (TBS_Mail) - https://passkey.epenergy.com/TBS_Mail/TBS_Mail.cab
O16 - DPF: {1095FF62-C928-11D3-BE63-0060942D1160} (VAS_ShipperImbalStmt) - https://passkey.epenergy.com/VAS_ShipperImb…erImbalStmt.cab
O16 - DPF: {04D59351-FB14-46D7-B82A-59F7F2EA8D56} (VAS_SwingAllocation) - https://passkey.epenergy.com/VAS_SwingAlloc…gAllocation.cab
O16 - DPF: {14C72098-FB68-4561-9534-6B8B00000001} (PKJavaClasses) - https://passkey3.elpaso.com/Passkey/PKJavaClasses.cab
O16 - DPF: {AD6DBAD7-7451-403E-BEF9-C480443799A2} (PKASIJavaClasses) - https://passkey3.elpaso.com/Passkey/PKASIJavaClasses.cab
O16 - DPF: {CB69AFF2-EF72-4900-82A9-82D8DB5AA406} (PKStackedGrid) - https://passkey3.elpaso.com/Passkey/PKStackedGrid.cab
O16 - DPF: {58BAC040-5EF6-401B-9669-DB3A657F570D} (PKIDLClasses) - https://passkey3.elpaso.com/Passkey/PKIDLClasses.cab
O16 - DPF: {EEB28F71-3539-11D6-9F5E-009027AEE36E} (PKWeb) - https://passkey3.elpaso.com/PassKey/PKWeb.cab
O16 - DPF: {8C98B2E1-0151-11D7-9FB8-009027AEE36E} (PKDSC_DscntViewMaint) - https://passkey3.elpaso.com/Passkey/PKDSC_DscntViewMaint.cab
O16 - DPF: {7D1E3852-0167-11D7-9FB8-009027AEE36E} (PKDSC_NegRates) - https://passkey3.elpaso.com/Passkey/PKDSC_NegRates.cab
O16 - DPF: {7D1E3855-0167-11D7-9FB8-009027AEE36E} (PKDSC_ViewMtnMtrGrp) - https://passkey3.elpaso.com/Passkey/PKDSC_ViewMtnMtrGrp.cab
O16 - DPF: {A94A0401-061A-11D7-9FB8-009027AEE36E} (PKDSC_OnlineReq) - https://passkey3.elpaso.com/Passkey/PKDSC_OnlineReq.cab
O16 - DPF: {83CEA610-3297-11D6-9F52-009027AEE36E} (PKCIB_AuthToPost) - https://passkey3.elpaso.com/Passkey/PKCIB_AuthToPost.cab
O16 - DPF: {97B93EF2-0CD0-417F-862B-51DB5FDE84F5} (PKCIB_DIC) - https://passkey3.elpaso.com/Passkey/PKCIB_DIC.cab
O16 - DPF: {7FBBB758-9FE3-43F3-95FF-565FA4D68282} (CIB_DIC_getImblDtlByMtr) - https://passkey3.elpaso.com/Passkey/CIB_DIC…mblDtlByMtr.cab
O16 - DPF: {0B5A8195-79B0-47CA-B729-AE3B92D545D5} (PKCIB_ImbalTrade) - https://passkey3.elpaso.com/Passkey/PKCIB_ImbalTrade.cab
O16 - DPF: {83CEA613-3297-11D6-9F52-009027AEE36E} (PKCIB_ContractualImbalance) - https://passkey3.elpaso.com/Passkey/PKCIB_C…alImbalance.cab
O16 - DPF: {8F72DF9D-E77D-4846-9A53-38B21CBD436D} (PKCIB_Oper_NPP) - https://passkey3.elpaso.com/Passkey/PKCIB_Oper_NPP.cab
O16 - DPF: {1AD02705-7F87-49E7-B462-FC5C09BBF8D8} (PKCIB_OTS) - https://passkey3.elpaso.com/Passkey/PKCIB_OTS.cab
O16 - DPF: {83CEA614-3297-11D6-9F52-009027AEE36E} (PKCIB_PostedImbDownload) - https://passkey3.elpaso.com/Passkey/PKCIB_P…ImbDownload.cab
O16 - DPF: {83CEA616-3297-11D6-9F52-009027AEE36E} (PKCMN_MtnAddrGrp) - https://passkey3.elpaso.com/Passkey/PKCMN_MtnAddrGrp.cab
O16 - DPF: {83CEA61A-3297-11D6-9F52-009027AEE36E} (PKCRS_Award) - https://passkey3.elpaso.com/Passkey/PKCRS_Award.cab
O16 - DPF: {83CEA61B-3297-11D6-9F52-009027AEE36E} (PKCRS_Offer) - https://passkey3.elpaso.com/Passkey/PKCRS_Offer.cab
O16 - DPF: {83CEA61C-3297-11D6-9F52-009027AEE36E} (PKCRS_Bid) - https://passkey3.elpaso.com/Passkey/PKCRS_Bid.cab
O16 - DPF: {83CEA61D-3297-11D6-9F52-009027AEE36E} (PKCRS_DesiredCap) - https://passkey3.elpaso.com/Passkey/PKCRS_DesiredCap.cab
O16 - DPF: {83CEA620-3297-11D6-9F52-009027AEE36E} (PKEBB_ImbTrade) - https://passkey3.elpaso.com/Passkey/PKEBB_ImbTrade.cab
O16 - DPF: {807BA8B3-34FA-11D6-9F5E-009027AEE36E} (PKEBB_Index_Prices) - https://passkey3.elpaso.com/Passkey/PKEBB_Index_Prices.cab
O16 - DPF: {83CEA622-3297-11D6-9F52-009027AEE36E} (PKEBB_Notices) - https://passkey3.elpaso.com/Passkey/PKEBB_Notices.cab
O16 - DPF: {83CEA627-3297-11D6-9F52-009027AEE36E} (PKEBB_SysDel) - https://passkey3.elpaso.com/Passkey/PKEBB_SysDel.cab
O16 - DPF: {83CEA628-3297-11D6-9F52-009027AEE36E} (PKKMS_AdrMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_AdrMtn.cab
O16 - DPF: {83CEA629-3297-11D6-9F52-009027AEE36E} (PKKMS_AssigLinks) - https://passkey3.elpaso.com/Passkey/PKKMS_AssigLinks.cab
O16 - DPF: {83CEA62A-3297-11D6-9F52-009027AEE36E} (PKKMS_BlanketAuth) - https://passkey3.elpaso.com/Passkey/PKKMS_BlanketAuth.cab
O16 - DPF: {83CEA62D-3297-11D6-9F52-009027AEE36E} (PKKMS_CreateK) - https://passkey3.elpaso.com/Passkey/PKKMS_CreateK.cab
O16 - DPF: {83CEA62E-3297-11D6-9F52-009027AEE36E} (PKKMS_HardCopyAgency) - https://passkey3.elpaso.com/Passkey/PKKMS_HardCopyAgency.cab
O16 - DPF: {83CEA62F-3297-11D6-9F52-009027AEE36E} (PKKMS_HardCopyK) - https://passkey3.elpaso.com/Passkey/PKKMS_HardCopyK.cab
O16 - DPF: {83CEA630-3297-11D6-9F52-009027AEE36E} (PKKMS_Inq) - https://passkey3.elpaso.com/Passkey/PKKMS_Inq.cab
O16 - DPF: {83CEA631-3297-11D6-9F52-009027AEE36E} (PKKMS_MtnK) - https://passkey3.elpaso.com/Passkey/PKKMS_MtnK.cab
O16 - DPF: {AD87EBE2-31F3-11D6-9F4E-009027AEE36E} (PKKMS_PathTQ) - https://passkey3.elpaso.com/Passkey/PKKMS_PathTQ.cab
O16 - DPF: {D9973D43-32B3-11D6-9F52-009027AEE36E} (PKKMS_ReleasorAmnd) - https://passkey3.elpaso.com/Passkey/PKKMS_ReleasorAmnd.cab
O16 - DPF: {807BA8B2-34FA-11D6-9F5E-009027AEE36E} (PKKMS_ReplacerAmnd) - https://passkey3.elpaso.com/Passkey/PKKMS_ReplacerAmnd.cab
O16 - DPF: {D9973D44-32B3-11D6-9F52-009027AEE36E} (PKKMS_Reports) - https://passkey3.elpaso.com/Passkey/PKKMS_Reports.cab
O16 - DPF: {D9973D45-32B3-11D6-9F52-009027AEE36E} (PKKMS_RollupMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_RollupMtn.cab
O16 - DPF: {D9973D46-32B3-11D6-9F52-009027AEE36E} (PKKMS_RollupStrgMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_RollupStrgMtn.cab
O16 - DPF: {D9973D47-32B3-11D6-9F52-009027AEE36E} (PKKMS_TableMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_TableMtn.cab
O16 - DPF: {7BFBF111-32E2-11D6-B7A8-00D0B7107F04} (PKNMS_Conf) - https://passkey3.elpaso.com/Passkey/PKNMS_Conf.cab
O16 - DPF: {7BFBF113-32E2-11D6-B7A8-00D0B7107F04} (PKNMS_Nomn) - https://passkey3.elpaso.com/Passkey/PKNMS_Nomn.cab
O16 - DPF: {79760E8E-3387-11D6-B7AD-00D0B7107F04} (PKNMS_NPCR) - https://passkey3.elpaso.com/Passkey/PKNMS_NPCR.cab
O16 - DPF: {79760E8F-3387-11D6-B7AD-00D0B7107F04} (PKNMS_PendAprv) - https://passkey3.elpaso.com/Passkey/PKNMS_PendAprv.cab
O16 - DPF: {79760E90-3387-11D6-B7AD-00D0B7107F04} (PKNMS_PendSeal) - https://passkey3.elpaso.com/Passkey/PKNMS_PendSeal.cab
O16 - DPF: {F4C583D1-3825-11D6-9F62-009027AEE36E} (PKNMS_RankAC) - https://passkey3.elpaso.com/Passkey/PKNMS_RankAC.cab
O16 - DPF: {79760E92-3387-11D6-B7AD-00D0B7107F04} (PKNMS_Reports) - https://passkey3.elpaso.com/Passkey/PKNMS_Reports.cab
O16 - DPF: {7BFBF114-32E2-11D6-B7A8-00D0B7107F04} (PKNMS_Shared) - https://passkey3.elpaso.com/Passkey/PKNMS_Shared.cab
O16 - DPF: {79760E85-3387-11D6-B7AD-00D0B7107F04} (PKTBS_Invoice) - https://passkey3.elpaso.com/Passkey/PKTBS_Invoice.cab
O16 - DPF: {79760E86-3387-11D6-B7AD-00D0B7107F04} (PKTBS_InvoiceInt) - https://passkey3.elpaso.com/Passkey/PKTBS_InvoiceInt.cab
O16 - DPF: {79760E84-3387-11D6-B7AD-00D0B7107F04} (PKTBS_Mail) - https://passkey3.elpaso.com/Passkey/PKTBS_Mail.cab
O16 - DPF: {79760E87-3387-11D6-B7AD-00D0B7107F04} (PKVAS_AllocStmt) - https://passkey3.elpaso.com/Passkey/PKVAS_AllocStmt.cab
O16 - DPF: {79760E88-3387-11D6-B7AD-00D0B7107F04} (PKVAS_PDA) - https://passkey3.elpaso.com/Passkey/PKVAS_PDA.cab
O16 - DPF: {79760E89-3387-11D6-B7AD-00D0B7107F04} (PKVAS_ShipperImbStmt) - https://passkey3.elpaso.com/Passkey/PKVAS_ShipperImbStmt.cab
O16 - DPF: {79760E8A-3387-11D6-B7AD-00D0B7107F04} (PKVAS_SwingAlloc) - https://passkey3.elpaso.com/Passkey/PKVAS_SwingAlloc.cab
O16 - DPF: {83CEA61F-3297-11D6-9F52-009027AEE36E} (PKEBB_Entity) - https://passkey3.elpaso.com/Passkey/PKEBB_Entity.cab
O16 - DPF: {83CEA624-3297-11D6-9F52-009027AEE36E} (PKEBB_Plant) - https://passkey3.elpaso.com/Passkey/PKEBB_Plant.cab
O16 - DPF: {83CEA621-3297-11D6-9F52-009027AEE36E} (PKEBB_Location) - https://passkey3.elpaso.com/Passkey/PKEBB_Location.cab
O16 - DPF: {83CEA623-3297-11D6-9F52-009027AEE36E} (PKEBB_OBA) - https://passkey3.elpaso.com/Passkey/PKEBB_OBA.cab
O16 - DPF: {83CEA625-3297-11D6-9F52-009027AEE36E} (PKEBB_RcptRegion) - https://passkey3.elpaso.com/Passkey/PKEBB_RcptRegion.cab
O16 - DPF: DukeULEngineV3Production - http://www.link.duke-energy.com/ULApplet/U…3Production.cab
O16 - DPF: {F7ACA383-18F3-4741-97C0-E271E5A526A8} (PKKMS_ElevTQ) - https://passkey3.elpaso.com/Passkey/PKKMS_ElevTQ.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/7b77298…all/xscan53.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {7DCDE7F4-2FEF-4941-AA93-A155D1757B15} (PKEBB_CustAnlystAssgn) - https://passkey3.elpaso.com/Passkey/PKEBB_C…AnlystAssgn.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.14.48/ttinst.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = aoldsl.net

Here is the latest Hijack this Log after running the other programs
Please let me know what else I need to do…Thanks again!

Logfile of HijackThis v1.99.1
Scan saved at 2:43:30 AM, on 3/3/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0600)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFTRAY.EXE
C:\WINDOWS\SYSTEM\AP9H4QMO.EXE
C:\WINDOWS\SYSTEM\E_S4I2R1.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\NETGEAR WG311V2 ADAPTER\WLANCFG5.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFAGENT.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://69.42.87.219/sidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://desktop.presario.net/scripts/redire…&c=2C01&lc=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://69.42.87.219/sidesearch.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/chsi.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://rd.yahoo.com/customize/ymsgr/defaul…://my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://rd.yahoo.com/customize/ymsgr/defaul…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Yahoo! Companion BHO - {02478D28-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_6.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: CAUN Object - {59F12660-2B92-4554-98F9-87295AD8A0CE} - C:\WINDOWS\SYSTEM\AUNBHO.DLL
O2 - BHO: (no name) - {017C20C1-F86F-11D8-9B25-000ACD002AE3} - (no file)
O2 - BHO: (no name) - {00000000-F09C-02B4-6EC2-AD0300000000} - (no file)
O2 - BHO: MSW.cIExplorer - {4B57B77A-B130-4EB8-8CFB-42B880F6D311} - C:\WINDOWS\ALL USERS\APPLICATION DATA\MSW\MSW.DLL
O2 - BHO: SDWin32 Class - {8F15D06B-5E02-4FEF-A32C-CA213D4F185D} - C:\WINDOWS\SYSTEM\KUDPV.DLL
O2 - BHO: (no name) - {C4E33110-C493-4BE4-9883-07EB7995CB9F} - C:\PROGRAM FILES\DEUI69XR\DEUI69XR.dll
O2 - BHO: SDWin32 Class - {D4B97F6F-FBAE-43AC-9EB9-9F9745D53473} - C:\WINDOWS\SYSTEM\UFXEI.DLL
O2 - BHO: (no name) - {6AE00B98-425F-451E-98C5-CA95AE9442F6} - C:\PROGRAM FILES\DEUI69XR\DEUI69XR.dll
O2 - BHO: RsyncHlpr Class - {16B238D5-80DE-47CE-8F17-B3ECE2C2248D} - C:\WINDOWS\SYSTEM\RSYNCMON.DLL
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_6.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O4 - HKLM\..\Run: [MSConfigReminder] C:\WINDOWS\SYSTEM\msconfig.exe /reminder
O4 - HKLM\..\Run: [EPSON Stylus C86 Seri (Copy 2)] C:\WINDOWS\SYSTEM\E_S4I2R1.EXE /P30 "EPSON Stylus C86 Seri (Copy 2)" /O6 "USB002" /M "Stylus C86"
O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\MCAFEE.COM\AGENT\MCREGWIZ.EXE /autorun
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFTRAY.EXE
O4 - HKLM\..\Run: [RSync] C:\WINDOWS\SYSTEM\netsync.exe
O4 - HKLM\..\Run: [ap9h4qmo] C:\WINDOWS\SYSTEM\ap9h4qmo.exe
O4 - HKLM\..\RunServices: [McVsRte] C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding
O4 - HKCU\..\Run: [EPSON Stylus C86 Seri (Copy 2)] C:\WINDOWS\SYSTEM\E_S4I2R1.EXE /P30 "EPSON Stylus C86 Seri (Copy 2)" /M "Stylus C86" /EF "HKCU"
O4 - Startup: NETGEAR WG311v2 Smart Configuration.lnk = C:\Program Files\NETGEAR WG311v2 Adapter\wlancfg5.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0322.DLL
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0322.DLL
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O16 - DPF: {CD17FAAA-17B4-4736-AAEF-436EDC304C8C} (ContentAuditX Control) - http://a840.g.akamai.net/7/840/5805/v1000/…uditControl.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/…ymmapi_0312.dll
O16 - DPF: {FB886BB1-5740-11D3-A017-00600814EFFE} (LibCreate) - https://passkey.epenergy.com/_includes/LibCreate.cab
O16 - DPF: {287D57C6-D009-11D1-A961-00AA00A57C6F} (EL Paso Vision Foundation Class Library 4.1 (Passkey)) - https://passkey.epenergy.com/_includes/vfc41pk.cab
O16 - DPF: {9073C380-FA75-11D1-A97B-00AA00A57C6F} (Vision Orb library 3.3) - https://passkey.epenergy.com/_includes/vbj33.cab
O16 - DPF: {95009054-6B6B-11D2-8F4E-08005A897B0C} (EPJavaClasses) - https://passkey.epenergy.com/_includes/EPJavaClasses.cab
O16 - DPF: {DFC0F178-A3FF-4E10-AB2F-3EA4B642DFFD} (ASIJavaClasses) - https://passkey.epenergy.com/_includes/ASIJavaClasses.cab
O16 - DPF: {2A34B6A0-48F4-11D3-8FA1-08005A897B0C} (ReportViewerBean) - https://passkey.epenergy.com/_includes/ReportViewerBean.cab
O16 - DPF: {EE3D6201-9077-11D3-87F0-0000F6660238} (StackedGrid) - https://passkey.epenergy.com/_includes/StackedGrid.cab
O16 - DPF: {CD7C3290-46CE-11D3-ABB7-7CC95C000000} (EPIDLClasses) - https://passkey.epenergy.com/_includes/EPIDLClasses.cab
O16 - DPF: {5DF32110-AFBE-11D2-8F61-08005A897B0C} (PassKeyWeb) - https://passkey.elpaso.com/PassKeyWeb/PassKeyWeb.cab
O16 - DPF: {E4DF9E01-8D6A-11D4-B6A3-0008C75BB19C} (CIB_AuthToPost) - https://passkey.epenergy.com/CIB_AuthToPost…_AuthToPost.cab
O16 - DPF: {3786AEF1-6BA6-11D3-B268-000629EEA01E} (CIB_ContractualImbalance) - https://passkey.elpaso.com/CIB_ContractualI…alImbalance.cab
O16 - DPF: {38F684F6-50FF-4D2C-B621-0BB1671ED771} (CIB_ImbalTrade) - https://passkey.elpaso.com/CIB_ImbalTrade/CIB_ImbalTrade.cab
O16 - DPF: {4ED6E1D2-8E5B-11D4-B29A-0008C75BBEA7} (CIB_PostedImbDownload) - https://passkey.epenergy.com/CIB_PostedImbD…ImbDownload.cab
O16 - DPF: {8C905C41-1380-11D3-ABEB-00A024FE5D04} (CRS_Award) - https://passkey.epenergy.com/CRS_Award/CRS_Award.cab
O16 - DPF: {D3D0E3A1-29AC-11D3-B269-000629AA9FEA} (CRS_Bid) - https://passkey.epenergy.com/CRS_Bid/CRS_Bid.cab
O16 - DPF: {AC2B57F1-ABE3-11D3-B30A-000629AAC737} (CRS_DesiredCapacity) - https://passkey.epenergy.com/CRS_DesiredCap…redCapacity.cab
O16 - DPF: {81E72841-B853-11D2-9D8B-08005A89C513} (CRS_Offer) - https://passkey.elpaso.com/CRS_Offer/CRS_Offer.cab
O16 - DPF: {D84F6122-3AEF-11D3-B28F-000629AAB8CC} (CMN_Reports) - https://passkey.epenergy.com/CMN_Reports/CMN_Reports.cab
O16 - DPF: {7BF67861-4AA4-11D3-B362-000629EE2AB8} (CMN_ViewAddGrp) - https://passkey.epenergy.com/CMN_ViewAddGrp…_ViewAddGrp.cab
O16 - DPF: {B1D06AC2-ECC1-4A87-B520-C700FE3B37A8} (DSC_DscntViewMaint) - https://passkey.elpaso.com/DSC_DscntViewMai…ntViewMaint.cab
O16 - DPF: {DA290C49-F113-4DBA-B4D7-CE82BAC3E955} (DSC_ViewMtnMtrGrp) - https://passkey.epenergy.com/DSC_ViewMtnMtr…ewMtnMtrGrp.cab
O16 - DPF: {3CC49D52-AE7D-11D3-B466-00A024FE3766} (EBB_ImbalTrade) - https://passkey.epenergy.com/EBB_ImbalTrade…_ImbalTrade.cab
O16 - DPF: {93235E60-E05F-11D2-B242-08005AC19DF1} (EBB_Index_Prices) - https://passkey.epenergy.com/EBB_Index_Pric…ndex_Prices.cab
O16 - DPF: {3D191B70-F1DC-11D2-B267-000629EE28A8} (EBB_Notices_APP) - https://passkey.elpaso.com/EBB_Notices_APP/…Notices_APP.cab
O16 - DPF: {93235E60-E05F-11D2-B242-08005AC19CFF} (EBB_System_Del) - https://passkey.epenergy.com/EBB_System_Del…_System_Del.cab
O16 - DPF: {364CF8F0-E96F-11D3-9DE5-000629AACD30} (KMS_AdrMntn) - https://passkey.epenergy.com/KMS_AdrMntn/KMS_AdrMntn.cab
O16 - DPF: {E5001BC1-032E-11D3-B260-0006296BC777} (KMS_AssignmentLinks) - https://passkey.epenergy.com/KMS_Assignment…gnmentLinks.cab
O16 - DPF: {70B57971-B525-11D2-B254-000629EE8D64} (KMS_BlanketAuthorization) - https://passkey.epenergy.com/KMS_BlanketAut…thorization.cab
O16 - DPF: {3ED1C4C1-C053-11D2-B257-000629EE80C7} (KMS_CreateContract) - https://passkey.epenergy.com/KMS_CreateCont…ateContract.cab
O16 - DPF: {ABE79611-45B9-11D3-B2A8-000629AAC34E} (KMS_HardCopyContract) - https://passkey.epenergy.com/KMS_HardCopyCo…opyContract.cab
O16 - DPF: {3A28867D-34DF-44D0-8779-5FBFD07B0A2E} (KMS_Inquiry) - https://passkey.epenergy.com/KMS_Inquiry/KMS_Inquiry.cab
O16 - DPF: {118A2791-BAE4-11D2-B268-000629EE8D64} (KMS_MaintainContract) - https://passkey.elpaso.com/KMS_MaintainCont…ainContract.cab
O16 - DPF: {FD4EC4EF-C548-4F9E-B497-CE8749BF132E} (KMS_PlanningTq) - https://passkey.epenergy.com/KMS_PlanningTq…_PlanningTq.cab
O16 - DPF: {14B482A2-A1E0-11D3-B2EA-0006296BD87A} (KMS_ReleasorAmnd) - https://passkey.epenergy.com/KMS_ReleasorAm…eleasorAmnd.cab
O16 - DPF: {8D1239C1-566F-11D4-B491-0008C7BB4C5E} (KMS_ReplacerAmend) - https://passkey.epenergy.com/KMS_ReplacerAm…placerAmend.cab
O16 - DPF: {492E18C1-2405-11D3-B256-000629AAB8D9} (KMS_RollupMaint) - https://passkey.elpaso.com/KMS_RollupMaint/…RollupMaint.cab
O16 - DPF: {9BE39741-B640-11D2-B24B-000629EE80C7} (KMS_TableMaintenance) - https://passkey.epenergy.com/KMS_TableMaint…Maintenance.cab
O16 - DPF: {9F6F8A92-5F39-11D3-B279-000629AAB8D9} (KMS_RollupStrgMaint) - https://passkey.elpaso.com/KMS_RollupStrgMa…upStrgMaint.cab
O16 - DPF: {EB1A9480-9F30-11D2-AFE9-08005A888FF4} (NMS_Confirmations) - https://passkey.elpaso.com/NMS_Confirmation…nfirmations.cab
O16 - DPF: {98B4ED71-BBCB-11D2-B234-000629EEAF35} (NMS_Nominations) - https://passkey.elpaso.com/NMS_Nominations/…Nominations.cab
O16 - DPF: {5FCD8201-B09B-11D2-B23C-000629EE1A05} (NMS_PendAprv) - https://passkey.epenergy.com/NMS_PendAprv/NMS_PendAprv.cab
O16 - DPF: {FF312343-C524-11D3-A274-0008C7B9618E} (NMS_RankAC) - https://passkey.elpaso.com/NMS_RankAC/NMS_RankAC.cab
O16 - DPF: {479BBD51-BF00-11D3-9D97-000629AACD30} (NMS_Reports) - https://passkey.epenergy.com/NMS_Reports/NMS_Reports.cab
O16 - DPF: {3CC49D54-AE7D-11D3-B466-00A024FE3766} (EBB_Entity) - https://passkey.epenergy.com/EBB_Entity/EBB_Entity.cab
O16 - DPF: {3CC49D45-AE7D-11D3-B466-00A024FE3766} (EBB_Plant) - https://passkey.epenergy.com/EBB_Plant/EBB_Plant.cab
O16 - DPF: {A33398C2-1D27-11D3-AB1B-726BDB000005} (EBB_Location) - https://passkey.epenergy.com/EBB_Location/EBB_Location.cab
O16 - DPF: {3CC49D47-AE7D-11D3-B466-00A024FE3766} (EBB_OBA) - https://passkey.epenergy.com/EBB_OBA/EBB_OBA.cab
O16 - DPF: {A33398C3-1D27-11D3-AB1B-726BDB000001} (EBB_Rcpt_Region) - https://passkey.epenergy.com/EBB_Rcpt_Regio…Rcpt_Region.cab
O16 - DPF: {B5F32B20-FC52-11D3-A0F1-00600814EFFE} (El Paso SSL Package) - https://passkey3.elpaso.com/PassKey/epssl.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {40846731-4116-4EC0-B457-C7C560802A0F} (Style Report xreport_pro.jar 3.5 Library Classes) - https://passkey3.elpaso.com/passkey/xreport_pro.cab
O16 - DPF: {EEE727C0-5E31-4071-BC6F-221505DD05F7} (Style Report xtools.jar 3.5 Library Classes) - https://passkey3.elpaso.com/passkey/xtools.cab
O16 - DPF: {A1D10DF7-2CA5-46F5-BF7C-F391C75B3A4D} (Style Report/DataSource swingw.jar 3.1.1 Library Classes) - https://passkey.epenergy.com/_includes/swingw.cab
O16 - DPF: {53A71359-A36F-4CDD-9E26-4135806A3249} (Style Report/DataSource Win32Printer.dll 3.1.1 Library Classes) - https://passkey3.elpaso.com/passkey/Win32Printer.cab
O16 - DPF: {FA7A7461-C389-11D3-A0EC-0000F699053D} (VAS_Alloc_Stmt) - https://passkey.epenergy.com/VAS_Alloc_Stmt…_Alloc_Stmt.cab
O16 - DPF: {1CD2FFB1-B3CB-11D3-A0EF-0000F6989708} (VAS_PDA) - https://passkey.epenergy.com/VAS_PDA/VAS_PDA.cab
O16 - DPF: {379BBD11-AD97-11D3-B2AA-000629EE1C68} (TBS_Invoice) - https://passkey.elpaso.com/TBS_Invoice/TBS_Invoice.cab
O16 - DPF: {D3348AD1-0B3B-11D4-99B4-0000F699BCC3} (TBS_Invoice_Internal) - https://passkey.elpaso.com/TBS_Invoice_Inte…ce_Internal.cab
O16 - DPF: {1F58A2D8-A40D-4E21-9E16-6D951D26457C} (TBS_Mail) - https://passkey.epenergy.com/TBS_Mail/TBS_Mail.cab
O16 - DPF: {1095FF62-C928-11D3-BE63-0060942D1160} (VAS_ShipperImbalStmt) - https://passkey.epenergy.com/VAS_ShipperImb…erImbalStmt.cab
O16 - DPF: {04D59351-FB14-46D7-B82A-59F7F2EA8D56} (VAS_SwingAllocation) - https://passkey.epenergy.com/VAS_SwingAlloc…gAllocation.cab
O16 - DPF: {14C72098-FB68-4561-9534-6B8B00000001} (PKJavaClasses) - https://passkey3.elpaso.com/Passkey/PKJavaClasses.cab
O16 - DPF: {AD6DBAD7-7451-403E-BEF9-C480443799A2} (PKASIJavaClasses) - https://passkey3.elpaso.com/Passkey/PKASIJavaClasses.cab
O16 - DPF: {CB69AFF2-EF72-4900-82A9-82D8DB5AA406} (PKStackedGrid) - https://passkey3.elpaso.com/Passkey/PKStackedGrid.cab
O16 - DPF: {58BAC040-5EF6-401B-9669-DB3A657F570D} (PKIDLClasses) - https://passkey3.elpaso.com/Passkey/PKIDLClasses.cab
O16 - DPF: {EEB28F71-3539-11D6-9F5E-009027AEE36E} (PKWeb) - https://passkey3.elpaso.com/PassKey/PKWeb.cab
O16 - DPF: {8C98B2E1-0151-11D7-9FB8-009027AEE36E} (PKDSC_DscntViewMaint) - https://passkey3.elpaso.com/Passkey/PKDSC_DscntViewMaint.cab
O16 - DPF: {7D1E3852-0167-11D7-9FB8-009027AEE36E} (PKDSC_NegRates) - https://passkey3.elpaso.com/Passkey/PKDSC_NegRates.cab
O16 - DPF: {7D1E3855-0167-11D7-9FB8-009027AEE36E} (PKDSC_ViewMtnMtrGrp) - https://passkey3.elpaso.com/Passkey/PKDSC_ViewMtnMtrGrp.cab
O16 - DPF: {A94A0401-061A-11D7-9FB8-009027AEE36E} (PKDSC_OnlineReq) - https://passkey3.elpaso.com/Passkey/PKDSC_OnlineReq.cab
O16 - DPF: {83CEA610-3297-11D6-9F52-009027AEE36E} (PKCIB_AuthToPost) - https://passkey3.elpaso.com/Passkey/PKCIB_AuthToPost.cab
O16 - DPF: {97B93EF2-0CD0-417F-862B-51DB5FDE84F5} (PKCIB_DIC) - https://passkey3.elpaso.com/Passkey/PKCIB_DIC.cab
O16 - DPF: {7FBBB758-9FE3-43F3-95FF-565FA4D68282} (CIB_DIC_getImblDtlByMtr) - https://passkey3.elpaso.com/Passkey/CIB_DIC…mblDtlByMtr.cab
O16 - DPF: {0B5A8195-79B0-47CA-B729-AE3B92D545D5} (PKCIB_ImbalTrade) - https://passkey3.elpaso.com/Passkey/PKCIB_ImbalTrade.cab
O16 - DPF: {83CEA613-3297-11D6-9F52-009027AEE36E} (PKCIB_ContractualImbalance) - https://passkey3.elpaso.com/Passkey/PKCIB_C…alImbalance.cab
O16 - DPF: {8F72DF9D-E77D-4846-9A53-38B21CBD436D} (PKCIB_Oper_NPP) - https://passkey3.elpaso.com/Passkey/PKCIB_Oper_NPP.cab
O16 - DPF: {1AD02705-7F87-49E7-B462-FC5C09BBF8D8} (PKCIB_OTS) - https://passkey3.elpaso.com/Passkey/PKCIB_OTS.cab
O16 - DPF: {83CEA614-3297-11D6-9F52-009027AEE36E} (PKCIB_PostedImbDownload) - https://passkey3.elpaso.com/Passkey/PKCIB_P…ImbDownload.cab
O16 - DPF: {83CEA616-3297-11D6-9F52-009027AEE36E} (PKCMN_MtnAddrGrp) - https://passkey3.elpaso.com/Passkey/PKCMN_MtnAddrGrp.cab
O16 - DPF: {83CEA61A-3297-11D6-9F52-009027AEE36E} (PKCRS_Award) - https://passkey3.elpaso.com/Passkey/PKCRS_Award.cab
O16 - DPF: {83CEA61B-3297-11D6-9F52-009027AEE36E} (PKCRS_Offer) - https://passkey3.elpaso.com/Passkey/PKCRS_Offer.cab
O16 - DPF: {83CEA61C-3297-11D6-9F52-009027AEE36E} (PKCRS_Bid) - https://passkey3.elpaso.com/Passkey/PKCRS_Bid.cab
O16 - DPF: {83CEA61D-3297-11D6-9F52-009027AEE36E} (PKCRS_DesiredCap) - https://passkey3.elpaso.com/Passkey/PKCRS_DesiredCap.cab
O16 - DPF: {83CEA620-3297-11D6-9F52-009027AEE36E} (PKEBB_ImbTrade) - https://passkey3.elpaso.com/Passkey/PKEBB_ImbTrade.cab
O16 - DPF: {807BA8B3-34FA-11D6-9F5E-009027AEE36E} (PKEBB_Index_Prices) - https://passkey3.elpaso.com/Passkey/PKEBB_Index_Prices.cab
O16 - DPF: {83CEA622-3297-11D6-9F52-009027AEE36E} (PKEBB_Notices) - https://passkey3.elpaso.com/Passkey/PKEBB_Notices.cab
O16 - DPF: {83CEA627-3297-11D6-9F52-009027AEE36E} (PKEBB_SysDel) - https://passkey3.elpaso.com/Passkey/PKEBB_SysDel.cab
O16 - DPF: {83CEA628-3297-11D6-9F52-009027AEE36E} (PKKMS_AdrMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_AdrMtn.cab
O16 - DPF: {83CEA629-3297-11D6-9F52-009027AEE36E} (PKKMS_AssigLinks) - https://passkey3.elpaso.com/Passkey/PKKMS_AssigLinks.cab
O16 - DPF: {83CEA62A-3297-11D6-9F52-009027AEE36E} (PKKMS_BlanketAuth) - https://passkey3.elpaso.com/Passkey/PKKMS_BlanketAuth.cab
O16 - DPF: {83CEA62D-3297-11D6-9F52-009027AEE36E} (PKKMS_CreateK) - https://passkey3.elpaso.com/Passkey/PKKMS_CreateK.cab
O16 - DPF: {83CEA62E-3297-11D6-9F52-009027AEE36E} (PKKMS_HardCopyAgency) - https://passkey3.elpaso.com/Passkey/PKKMS_HardCopyAgency.cab
O16 - DPF: {83CEA62F-3297-11D6-9F52-009027AEE36E} (PKKMS_HardCopyK) - https://passkey3.elpaso.com/Passkey/PKKMS_HardCopyK.cab
O16 - DPF: {83CEA630-3297-11D6-9F52-009027AEE36E} (PKKMS_Inq) - https://passkey3.elpaso.com/Passkey/PKKMS_Inq.cab
O16 - DPF: {83CEA631-3297-11D6-9F52-009027AEE36E} (PKKMS_MtnK) - https://passkey3.elpaso.com/Passkey/PKKMS_MtnK.cab
O16 - DPF: {AD87EBE2-31F3-11D6-9F4E-009027AEE36E} (PKKMS_PathTQ) - https://passkey3.elpaso.com/Passkey/PKKMS_PathTQ.cab
O16 - DPF: {D9973D43-32B3-11D6-9F52-009027AEE36E} (PKKMS_ReleasorAmnd) - https://passkey3.elpaso.com/Passkey/PKKMS_ReleasorAmnd.cab
O16 - DPF: {807BA8B2-34FA-11D6-9F5E-009027AEE36E} (PKKMS_ReplacerAmnd) - https://passkey3.elpaso.com/Passkey/PKKMS_ReplacerAmnd.cab
O16 - DPF: {D9973D44-32B3-11D6-9F52-009027AEE36E} (PKKMS_Reports) - https://passkey3.elpaso.com/Passkey/PKKMS_Reports.cab
O16 - DPF: {D9973D45-32B3-11D6-9F52-009027AEE36E} (PKKMS_RollupMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_RollupMtn.cab
O16 - DPF: {D9973D46-32B3-11D6-9F52-009027AEE36E} (PKKMS_RollupStrgMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_RollupStrgMtn.cab
O16 - DPF: {D9973D47-32B3-11D6-9F52-009027AEE36E} (PKKMS_TableMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_TableMtn.cab
O16 - DPF: {7BFBF111-32E2-11D6-B7A8-00D0B7107F04} (PKNMS_Conf) - https://passkey3.elpaso.com/Passkey/PKNMS_Conf.cab
O16 - DPF: {7BFBF113-32E2-11D6-B7A8-00D0B7107F04} (PKNMS_Nomn) - https://passkey3.elpaso.com/Passkey/PKNMS_Nomn.cab
O16 - DPF: {79760E8E-3387-11D6-B7AD-00D0B7107F04} (PKNMS_NPCR) - https://passkey3.elpaso.com/Passkey/PKNMS_NPCR.cab
O16 - DPF: {79760E8F-3387-11D6-B7AD-00D0B7107F04} (PKNMS_PendAprv) - https://passkey3.elpaso.com/Passkey/PKNMS_PendAprv.cab
O16 - DPF: {79760E90-3387-11D6-B7AD-00D0B7107F04} (PKNMS_PendSeal) - https://passkey3.elpaso.com/Passkey/PKNMS_PendSeal.cab
O16 - DPF: {F4C583D1-3825-11D6-9F62-009027AEE36E} (PKNMS_RankAC) - https://passkey3.elpaso.com/Passkey/PKNMS_RankAC.cab
O16 - DPF: {79760E92-3387-11D6-B7AD-00D0B7107F04} (PKNMS_Reports) - https://passkey3.elpaso.com/Passkey/PKNMS_Reports.cab
O16 - DPF: {7BFBF114-32E2-11D6-B7A8-00D0B7107F04} (PKNMS_Shared) - https://passkey3.elpaso.com/Passkey/PKNMS_Shared.cab
O16 - DPF: {79760E85-3387-11D6-B7AD-00D0B7107F04} (PKTBS_Invoice) - https://passkey3.elpaso.com/Passkey/PKTBS_Invoice.cab
O16 - DPF: {79760E86-3387-11D6-B7AD-00D0B7107F04} (PKTBS_InvoiceInt) - https://passkey3.elpaso.com/Passkey/PKTBS_InvoiceInt.cab
O16 - DPF: {79760E84-3387-11D6-B7AD-00D0B7107F04} (PKTBS_Mail) - https://passkey3.elpaso.com/Passkey/PKTBS_Mail.cab
O16 - DPF: {79760E87-3387-11D6-B7AD-00D0B7107F04} (PKVAS_AllocStmt) - https://passkey3.elpaso.com/Passkey/PKVAS_AllocStmt.cab
O16 - DPF: {79760E88-3387-11D6-B7AD-00D0B7107F04} (PKVAS_PDA) - https://passkey3.elpaso.com/Passkey/PKVAS_PDA.cab
O16 - DPF: {79760E89-3387-11D6-B7AD-00D0B7107F04} (PKVAS_ShipperImbStmt) - https://passkey3.elpaso.com/Passkey/PKVAS_ShipperImbStmt.cab
O16 - DPF: {79760E8A-3387-11D6-B7AD-00D0B7107F04} (PKVAS_SwingAlloc) - https://passkey3.elpaso.com/Passkey/PKVAS_SwingAlloc.cab
O16 - DPF: {83CEA61F-3297-11D6-9F52-009027AEE36E} (PKEBB_Entity) - https://passkey3.elpaso.com/Passkey/PKEBB_Entity.cab
O16 - DPF: {83CEA624-3297-11D6-9F52-009027AEE36E} (PKEBB_Plant) - https://passkey3.elpaso.com/Passkey/PKEBB_Plant.cab
O16 - DPF: {83CEA621-3297-11D6-9F52-009027AEE36E} (PKEBB_Location) - https://passkey3.elpaso.com/Passkey/PKEBB_Location.cab
O16 - DPF: {83CEA623-3297-11D6-9F52-009027AEE36E} (PKEBB_OBA) - https://passkey3.elpaso.com/Passkey/PKEBB_OBA.cab
O16 - DPF: {83CEA625-3297-11D6-9F52-009027AEE36E} (PKEBB_RcptRegion) - https://passkey3.elpaso.com/Passkey/PKEBB_RcptRegion.cab
O16 - DPF: DukeULEngineV3Production - http://www.link.duke-energy.com/ULApplet/U…3Production.cab
O16 - DPF: {F7ACA383-18F3-4741-97C0-E271E5A526A8} (PKKMS_ElevTQ) - https://passkey3.elpaso.com/Passkey/PKKMS_ElevTQ.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/7b77298…all/xscan53.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {7DCDE7F4-2FEF-4941-AA93-A155D1757B15} (PKEBB_CustAnlystAssgn) - https://passkey3.elpaso.com/Passkey/PKEBB_C…AnlystAssgn.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.14.48/ttinst.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-beta.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab

Here is the lastest log. My system seems to be running faster, with internet loading much better than it had…no popups this time around.


I believe most of these:


O16 - DPF: {83CEA622-3297-11D6-9F52-009027AEE36E} (PKEBB_Notices) - https://passkey3.elpaso.com/Passkey/PKEBB_Notices.cab

were work related from when my wife needed to work from home. She has her own laptop now, so is it okay to get rid of these?

Also, I did not find:

C:\Documents and Settings\(EVERY LISTED Profile USER)\Local Settings\Temp

even after showing all hidden files and extensions. Didn't know if this was an issue

Thanks again for all the help! I feel like much progress is being made!


Logfile of HijackThis v1.99.1
Scan saved at 8:16:32 AM, on 3/3/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0600)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFTRAY.EXE
C:\WINDOWS\SYSTEM\E_S4I2R1.EXE
C:\PROGRAM FILES\NETGEAR WG311V2 ADAPTER\WLANCFG5.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFAGENT.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Yahoo! Companion BHO - {02478D28-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_6.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_6.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O4 - HKLM\..\Run: [MSConfigReminder] C:\WINDOWS\SYSTEM\msconfig.exe /reminder
O4 - HKLM\..\Run: [EPSON Stylus C86 Seri (Copy 2)] C:\WINDOWS\SYSTEM\E_S4I2R1.EXE /P30 "EPSON Stylus C86 Seri (Copy 2)" /O6 "USB002" /M "Stylus C86"
O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\MCAFEE.COM\AGENT\MCREGWIZ.EXE /autorun
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFTRAY.EXE
O4 - HKLM\..\RunServices: [McVsRte] C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding
O4 - HKCU\..\Run: [EPSON Stylus C86 Seri (Copy 2)] C:\WINDOWS\SYSTEM\E_S4I2R1.EXE /P30 "EPSON Stylus C86 Seri (Copy 2)" /M "Stylus C86" /EF "HKCU"
O4 - Startup: NETGEAR WG311v2 Smart Configuration.lnk = C:\Program Files\NETGEAR WG311v2 Adapter\wlancfg5.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0322.DLL
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0322.DLL
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O16 - DPF: {CD17FAAA-17B4-4736-AAEF-436EDC304C8C} (ContentAuditX Control) - http://a840.g.akamai.net/7/840/5805/v1000/…uditControl.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/…ymmapi_0312.dll
O16 - DPF: {FB886BB1-5740-11D3-A017-00600814EFFE} (LibCreate) - https://passkey.epenergy.com/_includes/LibCreate.cab
O16 - DPF: {287D57C6-D009-11D1-A961-00AA00A57C6F} (EL Paso Vision Foundation Class Library 4.1 (Passkey)) - https://passkey.epenergy.com/_includes/vfc41pk.cab
O16 - DPF: {9073C380-FA75-11D1-A97B-00AA00A57C6F} (Vision Orb library 3.3) - https://passkey.epenergy.com/_includes/vbj33.cab
O16 - DPF: {95009054-6B6B-11D2-8F4E-08005A897B0C} (EPJavaClasses) - https://passkey.epenergy.com/_includes/EPJavaClasses.cab
O16 - DPF: {DFC0F178-A3FF-4E10-AB2F-3EA4B642DFFD} (ASIJavaClasses) - https://passkey.epenergy.com/_includes/ASIJavaClasses.cab
O16 - DPF: {2A34B6A0-48F4-11D3-8FA1-08005A897B0C} (ReportViewerBean) - https://passkey.epenergy.com/_includes/ReportViewerBean.cab
O16 - DPF: {EE3D6201-9077-11D3-87F0-0000F6660238} (StackedGrid) - https://passkey.epenergy.com/_includes/StackedGrid.cab
O16 - DPF: {CD7C3290-46CE-11D3-ABB7-7CC95C000000} (EPIDLClasses) - https://passkey.epenergy.com/_includes/EPIDLClasses.cab
O16 - DPF: {5DF32110-AFBE-11D2-8F61-08005A897B0C} (PassKeyWeb) - https://passkey.elpaso.com/PassKeyWeb/PassKeyWeb.cab
O16 - DPF: {E4DF9E01-8D6A-11D4-B6A3-0008C75BB19C} (CIB_AuthToPost) - https://passkey.epenergy.com/CIB_AuthToPost…_AuthToPost.cab
O16 - DPF: {3786AEF1-6BA6-11D3-B268-000629EEA01E} (CIB_ContractualImbalance) - https://passkey.elpaso.com/CIB_ContractualI…alImbalance.cab
O16 - DPF: {38F684F6-50FF-4D2C-B621-0BB1671ED771} (CIB_ImbalTrade) - https://passkey.elpaso.com/CIB_ImbalTrade/CIB_ImbalTrade.cab
O16 - DPF: {4ED6E1D2-8E5B-11D4-B29A-0008C75BBEA7} (CIB_PostedImbDownload) - https://passkey.epenergy.com/CIB_PostedImbD…ImbDownload.cab
O16 - DPF: {8C905C41-1380-11D3-ABEB-00A024FE5D04} (CRS_Award) - https://passkey.epenergy.com/CRS_Award/CRS_Award.cab
O16 - DPF: {D3D0E3A1-29AC-11D3-B269-000629AA9FEA} (CRS_Bid) - https://passkey.epenergy.com/CRS_Bid/CRS_Bid.cab
O16 - DPF: {AC2B57F1-ABE3-11D3-B30A-000629AAC737} (CRS_DesiredCapacity) - https://passkey.epenergy.com/CRS_DesiredCap…redCapacity.cab
O16 - DPF: {81E72841-B853-11D2-9D8B-08005A89C513} (CRS_Offer) - https://passkey.elpaso.com/CRS_Offer/CRS_Offer.cab
O16 - DPF: {D84F6122-3AEF-11D3-B28F-000629AAB8CC} (CMN_Reports) - https://passkey.epenergy.com/CMN_Reports/CMN_Reports.cab
O16 - DPF: {7BF67861-4AA4-11D3-B362-000629EE2AB8} (CMN_ViewAddGrp) - https://passkey.epenergy.com/CMN_ViewAddGrp…_ViewAddGrp.cab
O16 - DPF: {B1D06AC2-ECC1-4A87-B520-C700FE3B37A8} (DSC_DscntViewMaint) - https://passkey.elpaso.com/DSC_DscntViewMai…ntViewMaint.cab
O16 - DPF: {DA290C49-F113-4DBA-B4D7-CE82BAC3E955} (DSC_ViewMtnMtrGrp) - https://passkey.epenergy.com/DSC_ViewMtnMtr…ewMtnMtrGrp.cab
O16 - DPF: {3CC49D52-AE7D-11D3-B466-00A024FE3766} (EBB_ImbalTrade) - https://passkey.epenergy.com/EBB_ImbalTrade…_ImbalTrade.cab
O16 - DPF: {93235E60-E05F-11D2-B242-08005AC19DF1} (EBB_Index_Prices) - https://passkey.epenergy.com/EBB_Index_Pric…ndex_Prices.cab
O16 - DPF: {3D191B70-F1DC-11D2-B267-000629EE28A8} (EBB_Notices_APP) - https://passkey.elpaso.com/EBB_Notices_APP/…Notices_APP.cab
O16 - DPF: {93235E60-E05F-11D2-B242-08005AC19CFF} (EBB_System_Del) - https://passkey.epenergy.com/EBB_System_Del…_System_Del.cab
O16 - DPF: {364CF8F0-E96F-11D3-9DE5-000629AACD30} (KMS_AdrMntn) - https://passkey.epenergy.com/KMS_AdrMntn/KMS_AdrMntn.cab
O16 - DPF: {E5001BC1-032E-11D3-B260-0006296BC777} (KMS_AssignmentLinks) - https://passkey.epenergy.com/KMS_Assignment…gnmentLinks.cab
O16 - DPF: {70B57971-B525-11D2-B254-000629EE8D64} (KMS_BlanketAuthorization) - https://passkey.epenergy.com/KMS_BlanketAut…thorization.cab
O16 - DPF: {3ED1C4C1-C053-11D2-B257-000629EE80C7} (KMS_CreateContract) - https://passkey.epenergy.com/KMS_CreateCont…ateContract.cab
O16 - DPF: {ABE79611-45B9-11D3-B2A8-000629AAC34E} (KMS_HardCopyContract) - https://passkey.epenergy.com/KMS_HardCopyCo…opyContract.cab
O16 - DPF: {3A28867D-34DF-44D0-8779-5FBFD07B0A2E} (KMS_Inquiry) - https://passkey.epenergy.com/KMS_Inquiry/KMS_Inquiry.cab
O16 - DPF: {118A2791-BAE4-11D2-B268-000629EE8D64} (KMS_MaintainContract) - https://passkey.elpaso.com/KMS_MaintainCont…ainContract.cab
O16 - DPF: {FD4EC4EF-C548-4F9E-B497-CE8749BF132E} (KMS_PlanningTq) - https://passkey.epenergy.com/KMS_PlanningTq…_PlanningTq.cab
O16 - DPF: {14B482A2-A1E0-11D3-B2EA-0006296BD87A} (KMS_ReleasorAmnd) - https://passkey.epenergy.com/KMS_ReleasorAm…eleasorAmnd.cab
O16 - DPF: {8D1239C1-566F-11D4-B491-0008C7BB4C5E} (KMS_ReplacerAmend) - https://passkey.epenergy.com/KMS_ReplacerAm…placerAmend.cab
O16 - DPF: {492E18C1-2405-11D3-B256-000629AAB8D9} (KMS_RollupMaint) - https://passkey.elpaso.com/KMS_RollupMaint/…RollupMaint.cab
O16 - DPF: {9BE39741-B640-11D2-B24B-000629EE80C7} (KMS_TableMaintenance) - https://passkey.epenergy.com/KMS_TableMaint…Maintenance.cab
O16 - DPF: {9F6F8A92-5F39-11D3-B279-000629AAB8D9} (KMS_RollupStrgMaint) - https://passkey.elpaso.com/KMS_RollupStrgMa…upStrgMaint.cab
O16 - DPF: {EB1A9480-9F30-11D2-AFE9-08005A888FF4} (NMS_Confirmations) - https://passkey.elpaso.com/NMS_Confirmation…nfirmations.cab
O16 - DPF: {98B4ED71-BBCB-11D2-B234-000629EEAF35} (NMS_Nominations) - https://passkey.elpaso.com/NMS_Nominations/…Nominations.cab
O16 - DPF: {5FCD8201-B09B-11D2-B23C-000629EE1A05} (NMS_PendAprv) - https://passkey.epenergy.com/NMS_PendAprv/NMS_PendAprv.cab
O16 - DPF: {FF312343-C524-11D3-A274-0008C7B9618E} (NMS_RankAC) - https://passkey.elpaso.com/NMS_RankAC/NMS_RankAC.cab
O16 - DPF: {479BBD51-BF00-11D3-9D97-000629AACD30} (NMS_Reports) - https://passkey.epenergy.com/NMS_Reports/NMS_Reports.cab
O16 - DPF: {3CC49D54-AE7D-11D3-B466-00A024FE3766} (EBB_Entity) - https://passkey.epenergy.com/EBB_Entity/EBB_Entity.cab
O16 - DPF: {3CC49D45-AE7D-11D3-B466-00A024FE3766} (EBB_Plant) - https://passkey.epenergy.com/EBB_Plant/EBB_Plant.cab
O16 - DPF: {A33398C2-1D27-11D3-AB1B-726BDB000005} (EBB_Location) - https://passkey.epenergy.com/EBB_Location/EBB_Location.cab
O16 - DPF: {3CC49D47-AE7D-11D3-B466-00A024FE3766} (EBB_OBA) - https://passkey.epenergy.com/EBB_OBA/EBB_OBA.cab
O16 - DPF: {A33398C3-1D27-11D3-AB1B-726BDB000001} (EBB_Rcpt_Region) - https://passkey.epenergy.com/EBB_Rcpt_Regio…Rcpt_Region.cab
O16 - DPF: {B5F32B20-FC52-11D3-A0F1-00600814EFFE} (El Paso SSL Package) - https://passkey3.elpaso.com/PassKey/epssl.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {40846731-4116-4EC0-B457-C7C560802A0F} (Style Report xreport_pro.jar 3.5 Library Classes) - https://passkey3.elpaso.com/passkey/xreport_pro.cab
O16 - DPF: {EEE727C0-5E31-4071-BC6F-221505DD05F7} (Style Report xtools.jar 3.5 Library Classes) - https://passkey3.elpaso.com/passkey/xtools.cab
O16 - DPF: {A1D10DF7-2CA5-46F5-BF7C-F391C75B3A4D} (Style Report/DataSource swingw.jar 3.1.1 Library Classes) - https://passkey.epenergy.com/_includes/swingw.cab
O16 - DPF: {53A71359-A36F-4CDD-9E26-4135806A3249} (Style Report/DataSource Win32Printer.dll 3.1.1 Library Classes) - https://passkey3.elpaso.com/passkey/Win32Printer.cab
O16 - DPF: {FA7A7461-C389-11D3-A0EC-0000F699053D} (VAS_Alloc_Stmt) - https://passkey.epenergy.com/VAS_Alloc_Stmt…_Alloc_Stmt.cab
O16 - DPF: {1CD2FFB1-B3CB-11D3-A0EF-0000F6989708} (VAS_PDA) - https://passkey.epenergy.com/VAS_PDA/VAS_PDA.cab
O16 - DPF: {379BBD11-AD97-11D3-B2AA-000629EE1C68} (TBS_Invoice) - https://passkey.elpaso.com/TBS_Invoice/TBS_Invoice.cab
O16 - DPF: {D3348AD1-0B3B-11D4-99B4-0000F699BCC3} (TBS_Invoice_Internal) - https://passkey.elpaso.com/TBS_Invoice_Inte…ce_Internal.cab
O16 - DPF: {1F58A2D8-A40D-4E21-9E16-6D951D26457C} (TBS_Mail) - https://passkey.epenergy.com/TBS_Mail/TBS_Mail.cab
O16 - DPF: {1095FF62-C928-11D3-BE63-0060942D1160} (VAS_ShipperImbalStmt) - https://passkey.epenergy.com/VAS_ShipperImb…erImbalStmt.cab
O16 - DPF: {04D59351-FB14-46D7-B82A-59F7F2EA8D56} (VAS_SwingAllocation) - https://passkey.epenergy.com/VAS_SwingAlloc…gAllocation.cab
O16 - DPF: {14C72098-FB68-4561-9534-6B8B00000001} (PKJavaClasses) - https://passkey3.elpaso.com/Passkey/PKJavaClasses.cab
O16 - DPF: {AD6DBAD7-7451-403E-BEF9-C480443799A2} (PKASIJavaClasses) - https://passkey3.elpaso.com/Passkey/PKASIJavaClasses.cab
O16 - DPF: {CB69AFF2-EF72-4900-82A9-82D8DB5AA406} (PKStackedGrid) - https://passkey3.elpaso.com/Passkey/PKStackedGrid.cab
O16 - DPF: {58BAC040-5EF6-401B-9669-DB3A657F570D} (PKIDLClasses) - https://passkey3.elpaso.com/Passkey/PKIDLClasses.cab
O16 - DPF: {EEB28F71-3539-11D6-9F5E-009027AEE36E} (PKWeb) - https://passkey3.elpaso.com/PassKey/PKWeb.cab
O16 - DPF: {8C98B2E1-0151-11D7-9FB8-009027AEE36E} (PKDSC_DscntViewMaint) - https://passkey3.elpaso.com/Passkey/PKDSC_DscntViewMaint.cab
O16 - DPF: {7D1E3852-0167-11D7-9FB8-009027AEE36E} (PKDSC_NegRates) - https://passkey3.elpaso.com/Passkey/PKDSC_NegRates.cab
O16 - DPF: {7D1E3855-0167-11D7-9FB8-009027AEE36E} (PKDSC_ViewMtnMtrGrp) - https://passkey3.elpaso.com/Passkey/PKDSC_ViewMtnMtrGrp.cab
O16 - DPF: {A94A0401-061A-11D7-9FB8-009027AEE36E} (PKDSC_OnlineReq) - https://passkey3.elpaso.com/Passkey/PKDSC_OnlineReq.cab
O16 - DPF: {83CEA610-3297-11D6-9F52-009027AEE36E} (PKCIB_AuthToPost) - https://passkey3.elpaso.com/Passkey/PKCIB_AuthToPost.cab
O16 - DPF: {97B93EF2-0CD0-417F-862B-51DB5FDE84F5} (PKCIB_DIC) - https://passkey3.elpaso.com/Passkey/PKCIB_DIC.cab
O16 - DPF: {7FBBB758-9FE3-43F3-95FF-565FA4D68282} (CIB_DIC_getImblDtlByMtr) - https://passkey3.elpaso.com/Passkey/CIB_DIC…mblDtlByMtr.cab
O16 - DPF: {0B5A8195-79B0-47CA-B729-AE3B92D545D5} (PKCIB_ImbalTrade) - https://passkey3.elpaso.com/Passkey/PKCIB_ImbalTrade.cab
O16 - DPF: {83CEA613-3297-11D6-9F52-009027AEE36E} (PKCIB_ContractualImbalance) - https://passkey3.elpaso.com/Passkey/PKCIB_C…alImbalance.cab
O16 - DPF: {8F72DF9D-E77D-4846-9A53-38B21CBD436D} (PKCIB_Oper_NPP) - https://passkey3.elpaso.com/Passkey/PKCIB_Oper_NPP.cab
O16 - DPF: {1AD02705-7F87-49E7-B462-FC5C09BBF8D8} (PKCIB_OTS) - https://passkey3.elpaso.com/Passkey/PKCIB_OTS.cab
O16 - DPF: {83CEA614-3297-11D6-9F52-009027AEE36E} (PKCIB_PostedImbDownload) - https://passkey3.elpaso.com/Passkey/PKCIB_P…ImbDownload.cab
O16 - DPF: {83CEA616-3297-11D6-9F52-009027AEE36E} (PKCMN_MtnAddrGrp) - https://passkey3.elpaso.com/Passkey/PKCMN_MtnAddrGrp.cab
O16 - DPF: {83CEA61A-3297-11D6-9F52-009027AEE36E} (PKCRS_Award) - https://passkey3.elpaso.com/Passkey/PKCRS_Award.cab
O16 - DPF: {83CEA61B-3297-11D6-9F52-009027AEE36E} (PKCRS_Offer) - https://passkey3.elpaso.com/Passkey/PKCRS_Offer.cab
O16 - DPF: {83CEA61C-3297-11D6-9F52-009027AEE36E} (PKCRS_Bid) - https://passkey3.elpaso.com/Passkey/PKCRS_Bid.cab
O16 - DPF: {83CEA61D-3297-11D6-9F52-009027AEE36E} (PKCRS_DesiredCap) - https://passkey3.elpaso.com/Passkey/PKCRS_DesiredCap.cab
O16 - DPF: {83CEA620-3297-11D6-9F52-009027AEE36E} (PKEBB_ImbTrade) - https://passkey3.elpaso.com/Passkey/PKEBB_ImbTrade.cab
O16 - DPF: {807BA8B3-34FA-11D6-9F5E-009027AEE36E} (PKEBB_Index_Prices) - https://passkey3.elpaso.com/Passkey/PKEBB_Index_Prices.cab
O16 - DPF: {83CEA622-3297-11D6-9F52-009027AEE36E} (PKEBB_Notices) - https://passkey3.elpaso.com/Passkey/PKEBB_Notices.cab
O16 - DPF: {83CEA627-3297-11D6-9F52-009027AEE36E} (PKEBB_SysDel) - https://passkey3.elpaso.com/Passkey/PKEBB_SysDel.cab
O16 - DPF: {83CEA628-3297-11D6-9F52-009027AEE36E} (PKKMS_AdrMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_AdrMtn.cab
O16 - DPF: {83CEA629-3297-11D6-9F52-009027AEE36E} (PKKMS_AssigLinks) - https://passkey3.elpaso.com/Passkey/PKKMS_AssigLinks.cab
O16 - DPF: {83CEA62A-3297-11D6-9F52-009027AEE36E} (PKKMS_BlanketAuth) - https://passkey3.elpaso.com/Passkey/PKKMS_BlanketAuth.cab
O16 - DPF: {83CEA62D-3297-11D6-9F52-009027AEE36E} (PKKMS_CreateK) - https://passkey3.elpaso.com/Passkey/PKKMS_CreateK.cab
O16 - DPF: {83CEA62E-3297-11D6-9F52-009027AEE36E} (PKKMS_HardCopyAgency) - https://passkey3.elpaso.com/Passkey/PKKMS_HardCopyAgency.cab
O16 - DPF: {83CEA62F-3297-11D6-9F52-009027AEE36E} (PKKMS_HardCopyK) - https://passkey3.elpaso.com/Passkey/PKKMS_HardCopyK.cab
O16 - DPF: {83CEA630-3297-11D6-9F52-009027AEE36E} (PKKMS_Inq) - https://passkey3.elpaso.com/Passkey/PKKMS_Inq.cab
O16 - DPF: {83CEA631-3297-11D6-9F52-009027AEE36E} (PKKMS_MtnK) - https://passkey3.elpaso.com/Passkey/PKKMS_MtnK.cab
O16 - DPF: {AD87EBE2-31F3-11D6-9F4E-009027AEE36E} (PKKMS_PathTQ) - https://passkey3.elpaso.com/Passkey/PKKMS_PathTQ.cab
O16 - DPF: {D9973D43-32B3-11D6-9F52-009027AEE36E} (PKKMS_ReleasorAmnd) - https://passkey3.elpaso.com/Passkey/PKKMS_ReleasorAmnd.cab
O16 - DPF: {807BA8B2-34FA-11D6-9F5E-009027AEE36E} (PKKMS_ReplacerAmnd) - https://passkey3.elpaso.com/Passkey/PKKMS_ReplacerAmnd.cab
O16 - DPF: {D9973D44-32B3-11D6-9F52-009027AEE36E} (PKKMS_Reports) - https://passkey3.elpaso.com/Passkey/PKKMS_Reports.cab
O16 - DPF: {D9973D45-32B3-11D6-9F52-009027AEE36E} (PKKMS_RollupMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_RollupMtn.cab
O16 - DPF: {D9973D46-32B3-11D6-9F52-009027AEE36E} (PKKMS_RollupStrgMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_RollupStrgMtn.cab
O16 - DPF: {D9973D47-32B3-11D6-9F52-009027AEE36E} (PKKMS_TableMtn) - https://passkey3.elpaso.com/Passkey/PKKMS_TableMtn.cab
O16 - DPF: {7BFBF111-32E2-11D6-B7A8-00D0B7107F04} (PKNMS_Conf) - https://passkey3.elpaso.com/Passkey/PKNMS_Conf.cab
O16 - DPF: {7BFBF113-32E2-11D6-B7A8-00D0B7107F04} (PKNMS_Nomn) - https://passkey3.elpaso.com/Passkey/PKNMS_Nomn.cab
O16 - DPF: {79760E8E-3387-11D6-B7AD-00D0B7107F04} (PKNMS_NPCR) - https://passkey3.elpaso.com/Passkey/PKNMS_NPCR.cab
O16 - DPF: {79760E8F-3387-11D6-B7AD-00D0B7107F04} (PKNMS_PendAprv) - https://passkey3.elpaso.com/Passkey/PKNMS_PendAprv.cab
O16 - DPF: {79760E90-3387-11D6-B7AD-00D0B7107F04} (PKNMS_PendSeal) - https://passkey3.elpaso.com/Passkey/PKNMS_PendSeal.cab
O16 - DPF: {F4C583D1-3825-11D6-9F62-009027AEE36E} (PKNMS_RankAC) - https://passkey3.elpaso.com/Passkey/PKNMS_RankAC.cab
O16 - DPF: {79760E92-3387-11D6-B7AD-00D0B7107F04} (PKNMS_Reports) - https://passkey3.elpaso.com/Passkey/PKNMS_Reports.cab
O16 - DPF: {7BFBF114-32E2-11D6-B7A8-00D0B7107F04} (PKNMS_Shared) - https://passkey3.elpaso.com/Passkey/PKNMS_Shared.cab
O16 - DPF: {79760E85-3387-11D6-B7AD-00D0B7107F04} (PKTBS_Invoice) - https://passkey3.elpaso.com/Passkey/PKTBS_Invoice.cab
O16 - DPF: {79760E86-3387-11D6-B7AD-00D0B7107F04} (PKTBS_InvoiceInt) - https://passkey3.elpaso.com/Passkey/PKTBS_InvoiceInt.cab
O16 - DPF: {79760E84-3387-11D6-B7AD-00D0B7107F04} (PKTBS_Mail) - https://passkey3.elpaso.com/Passkey/PKTBS_Mail.cab
O16 - DPF: {79760E87-3387-11D6-B7AD-00D0B7107F04} (PKVAS_AllocStmt) - https://passkey3.elpaso.com/Passkey/PKVAS_AllocStmt.cab
O16 - DPF: {79760E88-3387-11D6-B7AD-00D0B7107F04} (PKVAS_PDA) - https://passkey3.elpaso.com/Passkey/PKVAS_PDA.cab
O16 - DPF: {79760E89-3387-11D6-B7AD-00D0B7107F04} (PKVAS_ShipperImbStmt) - https://passkey3.elpaso.com/Passkey/PKVAS_ShipperImbStmt.cab
O16 - DPF: {79760E8A-3387-11D6-B7AD-00D0B7107F04} (PKVAS_SwingAlloc) - https://passkey3.elpaso.com/Passkey/PKVAS_SwingAlloc.cab
O16 - DPF: {83CEA61F-3297-11D6-9F52-009027AEE36E} (PKEBB_Entity) - https://passkey3.elpaso.com/Passkey/PKEBB_Entity.cab
O16 - DPF: {83CEA624-3297-11D6-9F52-009027AEE36E} (PKEBB_Plant) - https://passkey3.elpaso.com/Passkey/PKEBB_Plant.cab
O16 - DPF: {83CEA621-3297-11D6-9F52-009027AEE36E} (PKEBB_Location) - https://passkey3.elpaso.com/Passkey/PKEBB_Location.cab
O16 - DPF: {83CEA623-3297-11D6-9F52-009027AEE36E} (PKEBB_OBA) - https://passkey3.elpaso.com/Passkey/PKEBB_OBA.cab
O16 - DPF: {83CEA625-3297-11D6-9F52-009027AEE36E} (PKEBB_RcptRegion) - https://passkey3.elpaso.com/Passkey/PKEBB_RcptRegion.cab
O16 - DPF: DukeULEngineV3Production - http://www.link.duke-energy.com/ULApplet/U…3Production.cab
O16 - DPF: {F7ACA383-18F3-4741-97C0-E271E5A526A8} (PKKMS_ElevTQ) - https://passkey3.elpaso.com/Passkey/PKKMS_ElevTQ.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/7b77298…all/xscan53.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {7DCDE7F4-2FEF-4941-AA93-A155D1757B15} (PKEBB_CustAnlystAssgn) - https://passkey3.elpaso.com/Passkey/PKEBB_C…AnlystAssgn.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.14.48/ttinst.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-beta.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab

Here is that list after checking everything in the startup folder:

Logfile of HijackThis v1.99.1
Scan saved at 10:03:06 AM, on 3/3/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0600)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFTRAY.EXE
C:\WINDOWS\SYSTEM\E_S4I2R1.EXE
C:\PROGRAM FILES\NETGEAR WG311V2 ADAPTER\WLANCFG5.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFAGENT.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\TEMP\TD_0001.DIR\HIJACKTHIS.EXE

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Yahoo! Companion BHO - {02478D28-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_6.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_6.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O4 - HKLM\..\Run: [EPSON Stylus C86 Seri (Copy 2)] C:\WINDOWS\SYSTEM\E_S4I2R1.EXE /P30 "EPSON Stylus C86 Seri (Copy 2)" /O6 "USB002" /M "Stylus C86"
O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\MCAFEE.COM\AGENT\MCREGWIZ.EXE /autorun
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFTRAY.EXE
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [WCOLOREAL] C:\Program Files\COMPAQ\COLOREAL\COLOREAL.EXE
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [SideWinderTrayV4] C:\PROGRA~1\MICROS~5\GAMECO~1\COMMON\SWTRAYV4.EXE
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [LifeScape Media Detector] C:\Program Files\Picasa\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe
O4 - HKLM\..\Run: [Digital Dashboard] C:\Program Files\Compaq\Digital Dashboard\CPQMLDET.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [CpqBootPerfDb] C:\Cpqs\Scom\CpqBootPerfDb.exe
O4 - HKLM\..\Run: [PDPServer] CMpdpsrv.exe
O4 - HKLM\..\Run: [CMPDPSRV] C:\WINDOWS\SYSTEM\CMPDPSRV.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [L7RFIFDP9] C:\WINDOWS\TEMP\L7RFIFDP9.EXE
O4 - HKLM\..\Run: [Dpi] C:\PROGRAM FILES\COMMON FILES\DPI\DPI.EXE
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [EPSON Stylus C86 Series] C:\WINDOWS\SYSTEM\E_S4I2R1.EXE /P23 "EPSON Stylus C86 Series" /O5 "LPT1:" /M "Stylus C86"
O4 - HKLM\..\Run: [408809432] C:\PROGRAM FILES\EGAMES\DROP 2\REGISTER\EGAMESREGISTRATION.EXE /r "C:\PROGRAM FILES\EGAMES\DROP 2\REGISTER\EGAMESREGISTRATION.rpd"
O4 - HKLM\..\Run: [winupdtl] C:\WINDOWS\SYSTEM\winupdt.exe
O4 - HKLM\..\Run: [TV Media] C:\PROGRAM FILES\TV MEDIA\Tvm.exe
O4 - HKLM\..\Run: [zpfujj] c:\windows\system\zpfujj.exe
O4 - HKLM\..\Run: [FARMMEXT] C:\WINDOWS\FARMMEXT.exe
O4 - HKLM\..\Run: [kudpvc] C:\WINDOWS\SYSTEM\kudpvc.exe
O4 - HKLM\..\Run: [version] C:\WINDOWS\SYSTEM\DPSFOI.exe
O4 - HKLM\..\Run: [secure] C:\WINDOWS\SYSTEM\CPVMPT.exe
O4 - HKLM\..\Run: [saie] c:\windows\system\saie.exe
O4 - HKLM\..\Run: [DEUI69XR] \Progra~1\DEUI69XR\DEUI69XR.exe
O4 - HKLM\..\Run: [ufxeic] C:\WINDOWS\SYSTEM\ufxeic.exe
O4 - HKLM\..\Run: [App32dll] C:\WINDOWS\SYSTEM\MSNAVC32.EXE lee0105
O4 - HKLM\..\Run: [WebRebates0] "C:\PROGRAM FILES\WEB_REBATES\WebRebates0.exe"
O4 - HKLM\..\Run: [WinTools] C:\PROGRA~1\COMMON~1\WINTOOLS\WTOOLSA.EXE
O4 - HKLM\..\Run: [Uninstall_TBPS] C:\WINDOWS\TEMP\TBUNINST.EXE /remove
O4 - HKLM\..\Run: [RSync] C:\WINDOWS\SYSTEM\netsync.exe
O4 - HKLM\..\Run: [TBPS] C:\PROGRA~1\TOOLBAR\TBPS.exe
O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\SYSTEM\gah95on6.exe
O4 - HKLM\..\RunServices: [McVsRte] C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [ScardSvr] C:\WINDOWS\SYSTEM\ScardSvr.exe
O4 - HKLM\..\RunServices: [Compaq_RBA] C:\PROGRAM FILES\COMPAQ\COMPAQ MESSAGE SCREENER\BIN\COMPAQ-RBA.EXE
O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [AolAcsDaemon1] "C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXE"
O4 - HKLM\..\RunServices: [WinTools] C:\PROGRA~1\COMMON~1\WINTOOLS\WTOOLSA.EXE
O4 - HKCU\..\Run: [EPSON Stylus C86 Seri (Copy 2)] C:\WINDOWS\SYSTEM\E_S4I2R1.EXE /P30 "EPSON Stylus C86 Seri (Copy 2)" /M "Stylus C86" /EF "HKCU"
O4 - HKCU\..\Run: [MoneyStartUp] c:\Program Files\Microsoft Money\System\Money Startup.exe
O4 - HKCU\..\Run: [ccWasher] C:\Program Files\Cookie Washer\aolwasher.exe /0
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [X-Cleaner Freeware] "C:\PROGRA~1\X-CLEA~1\XCLEAN~1.EXE" -turbo -autostart -NOREBOOT
O4 - HKCU\..\Run: [TV Media] C:\PROGRAM FILES\TV MEDIA\Tvm.exe
O4 - HKCU\..\Run: [PRUTQCT] C:\WINDOWS\SYSTEM\PRUTQCT.exe
O4 - Startup: NETGEAR WG311v2 Smart Configuration.lnk = C:\Program Files\NETGEAR WG311v2 Adapter\wlancfg5.exe
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Startup: America Online 6.0 Tray Icon.lnk = C:\America Online 6.0\aoltray.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: DataViz Messenger.lnk = C:\WINDOWS\DvzCommon\DvzMsgr.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Startup: PowerReg Scheduler.exe
O4 - Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: Epson printer Registration.lnk = E:\titles\ereg\EPSONREG.EXE
O4 - Startup: CAMEDIA Master.lnk = C:\Program Files\OLYMPUS\CAMEDIA Master 4.2\CM_camera.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0322.DLL
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0322.DLL
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)

I suggest you do this:

Important: Do this before any fix.

Please put your HijackThis in it's own folder, (I create a new folder in C:\ named HJT).
You can do a Right Click on any open area on the desktop, New> Folder, then rename the folder HJT.

Go to where your HijackThis is and Right Click on HijackThis.exe, select Cut, then open the new folder you just created (HJT) Right Click in the folder and select paste.

The reason we do this is Hijackthis creates backup files just in case you'd need to restore one and we'll be cleaning out the temp files.



After the above:

use Add/Remove Programs and remove:
WINTOOLS


Run HijackThis again and put a check by these.

O4 - HKLM\..\Run: [L7RFIFDP9] C:\WINDOWS\TEMP\L7RFIFDP9.EXE
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [408809432] C:\PROGRAM FILES\EGAMES\DROP 2\REGISTER\EGAMESREGISTRATION.EXE /r "C:\PROGRAM FILES\EGAMES\DROP 2\REGISTER\EGAMESREGISTRATION.rpd"
O4 - HKLM\..\Run: [winupdtl] C:\WINDOWS\SYSTEM\winupdt.exe
O4 - HKLM\..\Run: [TV Media] C:\PROGRAM FILES\TV MEDIA\Tvm.exe
O4 - HKLM\..\Run: [zpfujj] c:\windows\system\zpfujj.exe
O4 - HKLM\..\Run: [FARMMEXT] C:\WINDOWS\FARMMEXT.exe
O4 - HKLM\..\Run: [kudpvc] C:\WINDOWS\SYSTEM\kudpvc.exe
O4 - HKLM\..\Run: [version] C:\WINDOWS\SYSTEM\DPSFOI.exe
O4 - HKLM\..\Run: [secure] C:\WINDOWS\SYSTEM\CPVMPT.exe
O4 - HKLM\..\Run: [saie] c:\windows\system\saie.exe
O4 - HKLM\..\Run: [DEUI69XR] \Progra~1\DEUI69XR\DEUI69XR.exe
O4 - HKLM\..\Run: [ufxeic] C:\WINDOWS\SYSTEM\ufxeic.exe
O4 - HKLM\..\Run: [App32dll] C:\WINDOWS\SYSTEM\MSNAVC32.EXE lee0105
O4 - HKLM\..\Run: [WebRebates0] "C:\PROGRAM FILES\WEB_REBATES\WebRebates0.exe"
O4 - HKLM\..\Run: [WinTools] C:\PROGRA~1\COMMON~1\WINTOOLS\WTOOLSA.EXE
O4 - HKLM\..\Run: [Uninstall_TBPS] C:\WINDOWS\TEMP\TBUNINST.EXE /remove
O4 - HKLM\..\Run: [RSync] C:\WINDOWS\SYSTEM\netsync.exe
O4 - HKLM\..\Run: [TBPS] C:\PROGRA~1\TOOLBAR\TBPS.exe
O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\SYSTEM\gah95on6.exe
O4 - HKLM\..\RunServices: [WinTools] C:\PROGRA~1\COMMON~1\WINTOOLS\WTOOLSA.EXE
O4 - HKCU\..\Run: [X-Cleaner Freeware] "C:\PROGRA~1\X-CLEA~1\XCLEAN~1.EXE" -turbo -autostart -NOREBOOT
O4 - HKCU\..\Run: [TV Media] C:\PROGRAM FILES\TV MEDIA\Tvm.exe
O4 - HKCU\..\Run: [PRUTQCT] C:\WINDOWS\SYSTEM\PRUTQCT.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: PowerReg Scheduler.exe
O4 - Startup: PowerReg Scheduler V3.exe

Close ALL windows and browsers except HijackThis and click "Fix checked"



Restart in Safe Mode:
Restart your computer.

Press F8 after the Power-On Self Test (POST) is done. If the Windows Advanced Options Menu does not appear, try restarting and then pressing F8 several times after the POST screen.
Choose the Safe Mode option from the Windows Advanced Options Menu then press Enter.


Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Clear "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Clear "Hide protected operating system files."
Click Apply, and then click OK.



Search for and delete these folders if listed:
C:\PROGRAM FILES\TV MEDIA
C:\PROGRAM FILES\DEUI69XR
C:\PROGRA~1\COMMON~1\WINTOOLS



Search for and delete these files if listed:
C:\WINDOWS\SYSTEM\winupdt.exe
C:\PROGRAM FILES\TV MEDIA\Tvm.exe
c:\windows\system\zpfujj.exe
C:\WINDOWS\FARMMEXT.exe
C:\WINDOWS\SYSTEM\kudpvc.exe
C:\WINDOWS\SYSTEM\DPSFOI.exe
C:\WINDOWS\SYSTEM\CPVMPT.exe
c:\windows\system\saie.exe
C:\WINDOWS\SYSTEM\ufxeic.exe
C:\WINDOWS\SYSTEM\MSNAVC32.EXE
C:\PROGRAm Files\TOOLBAR\TBPS.exe
C:\WINDOWS\SYSTEM\gah95on6.exe
C:\WINDOWS\SYSTEM\PRUTQCT.exe



1. Open My Computer
2. Right click on your hard drive that you wish to clean (C drive, for example)
3. In the context menu that opens, select properties
4. Under the general tab you should select Disk Cleanup
5. Windows will scan your drive which will take a few seconds/minutes
6. A box will display the various files you can remove.
Check all boxes except compress old files (If listed)
7. Click OK and windows will comply.

Restart your computer.

Reboot and "copy/paste" a new log file into this thread.
Also please describe how your computer behaves at the moment.

Here is the latest Log. I did not find very many of those programs at all when I was running in safe mode. The computer froze once while rebooting, and seemed a little slower than the last few times, but using the internet is still going smoothly.

Logfile of HijackThis v1.99.1
Scan saved at 1:24:17 PM, on 3/3/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0600)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\E_S4I2R1.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFTRAY.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\PCTVOICE.EXE
C:\PROGRAM FILES\COMPAQ\DIGITAL DASHBOARD\CPQMLDET.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\STARTEAK.EXE
C:\COMPAQ\EAKDRV\EAUSBKBD.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\AOL SPYWARE PROTECTION\AOLSP SCHEDULER.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\PROGRAM FILES\NETGEAR WG311V2 ADAPTER\WLANCFG5.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFAGENT.EXE
C:\WINDOWS\DESKTOP\HJT\HIJACKTHIS.EXE

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Yahoo! Companion BHO - {02478D28-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_6.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_6.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O4 - HKLM\..\Run: [EPSON Stylus C86 Seri (Copy 2)] C:\WINDOWS\SYSTEM\E_S4I2R1.EXE /P30 "EPSON Stylus C86 Seri (Copy 2)" /O6 "USB002" /M "Stylus C86"
O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\MCAFEE.COM\AGENT\MCREGWIZ.EXE /autorun
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFTRAY.EXE
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe
O4 - HKLM\..\Run: [Digital Dashboard] C:\Program Files\Compaq\Digital Dashboard\CPQMLDET.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Dpi] C:\PROGRAM FILES\COMMON FILES\DPI\DPI.EXE
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [MSConfigReminder] C:\WINDOWS\SYSTEM\msconfig.exe /reminder
O4 - HKLM\..\RunServices: [McVsRte] C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding
O4 - Startup: NETGEAR WG311v2 Smart Configuration.lnk = C:\Program Files\NETGEAR WG311v2 Adapter\wlancfg5.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0322.DLL
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0322.DLL
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)