Need help

Hi,

I real appreciate this site.

I have Windows XP machine that has been infected with sometype of software. From my searching the web I found this place.

Thank you in advance for any support.

Matt

Logfile of HijackThis v1.99.1
Scan saved at 7:26:42 PM, on 5/4/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\GEARSec.exe
C:\WINDOWS\system32\cmdtel.exe
C:\WINDOWS\system32\ahtun.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\ptc\portmap\portmap.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\QuickTime\qttask.exe
C:\windows\ufbytjm.exe
C:\WINDOWS\system32\devldr32.exe
E:\Downloads\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0AD937E7-2F37-4873-A05E-548A67EF1D0E} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DI2] "C:\WINDOWS\TEMP\27.exe\27.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [FlnCPY] "C:\Program Files\Common Files\Java\flncpy.exe"
O4 - HKLM\..\Run: [Disk Keeper] C:\WINDOWS\system32\Services\{DDF5AAB2-B429-4018-BFA4-67F6CCB26189}\SECURITY.EXE
O4 - HKCU\..\Run: [ifivvjp] c:\windows\ufbytjm.exe
O4 - HKCU\..\Run: [alsuiad] c:\windows\qpttldx.exe
O4 - HKCU\..\Run: [iqufmtw] c:\windows\hsmtsod.exe
O4 - HKCU\..\Run: [uraiils] c:\windows\hsmtsod.exe
O4 - HKCU\..\Run: [wenuedg] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [plprikp] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [wallgja] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [xnwkirv] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [idtruuh] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [wrhjdqp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [bpgfsxe] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [jmrtwki] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [kqxuaqm] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [hdddcbt] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [drshyyn] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [repctpo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vyowyvu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [sdfccte] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ddwaoyo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [kvoalix] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [qvuxgif] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yvgspxo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rwufppd] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ahgfuyb] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rfakbfq] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [naoqeai] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [mrbawis] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [mfugyjl] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [evmnrux] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yaaaxah] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ndqlcnn] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ssbfuwu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [uljshbj] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ndvmvmv] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nwwihrg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ujbjitq] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iwpneou] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iuwthcs] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [quiwnoc] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rljaedk] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ylxfcvp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dqfhmjy] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ogthcmu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [jbxyxjh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vurixnm] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [lufxwfy] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [fgfmxjk] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nivjteg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [lnwrykp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dbltqwh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yoqxiah] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [wsljqry] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [cactlvi] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vytryip] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iadcaic] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [obesbxr] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [drimuuh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ldabtis] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dorjvls] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [usooasg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nlkcpke] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [horxhoo] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [vfwhnft] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [bhjiadv] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [wvdnkgl] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [tpvqjhp] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [okqmbqm] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [elhmxpa] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [evnummv] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [ubfpxfw] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [oxnxhfc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [tkggdwq] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [bhtvqnt] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [uekjuca] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [xefuunf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [dacnpsk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ddlomhh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [bmjyilk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [dodlclh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [plthqxs] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [wxqnugu] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [tjkwiqr] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [jlyqgal] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [kcynqor] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ylgcdfi] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [fggrbce] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [rhbhnec] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [fatieao] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ispwgfh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [isfnimc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [eywppnd] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mwjeadh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [scfglmf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [uofuyaj] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [elbvoma] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mxqklai] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [sajrnli] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [lnemtxc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mxuojxf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [txbtixe] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ubwdfpg] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [eivptsk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [morctla] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [yaesljg] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [qiwbqkg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tjiagpy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ieocdqd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yewdjxv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tngilve] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [osnureb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cplojfg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jnypavq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ocgmtjd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [okavoan] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hyrfusf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jykwica] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xduxhuv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kjtdsoi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ommyxbm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ldnaggq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [oonbwwy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ytuvdto] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ndkbggq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xfpfdle] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hhstkfb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rbwmhgt] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cwbmvcb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qnstama] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ogkgtqo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hipfrks] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dbgytay] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [elqncgg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ytdorkv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xjdsesj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sgumknm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kquqhqr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nqylwfy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tvkxlxs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ssowbfl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wmhjmxo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [fkoytop] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kqvnncw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cojteaf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jvooewu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jkudqwg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [iwkseya] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mtscbix] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dounrxs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ecapesv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gembebc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kmerykd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mqlqtlc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cfsnawu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [quwxctb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ahwhwfx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ggibauw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dvuaasc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gyrikto] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hgryuyt] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [aboherm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [pvcaufy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gvhpbcd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ocbudao] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vimctel] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [htqtggd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [axfbxeu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xoctchk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [khpykyl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [aemtrsj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ibephgk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tlgfjfq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tbobirh] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xxrgqtu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wsypdog] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bvosjfw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kaamrut] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [febaabr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vhhjqhb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vgirrpq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dwnmceq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hpkyqrf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bxybuyc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [uyeyoar] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bcstcup] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [iufxvrs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qfncmqx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [maythjo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [isyhlle] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdsgocm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jwkegyn] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ymuctfx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ovlauno] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ieuodao] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [fjurpla] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [atvnsxe] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [crclvlv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [juxkkyx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ntqmjrq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sniaksm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nulnysq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jmcamcg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [udjsjky] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bdmktct] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ghtdqfd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sfstxey] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xpcgnuk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xrlgdsr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sxsvufd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kxrgiyc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [orknqsl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yhhjlyk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bjnsitv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [btdorig] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tgkgpqp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tftrwuq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gktvmuv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [pwohwlm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [halcvfb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mcntdbq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xcmyiid] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdqybxl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bkheycy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cyurvtb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lvwjfnw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ctfacda] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [oyycwjf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xulmidu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [owloddp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [baddbgl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lmqiopf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ejxcnuf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wdvrgku] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xbjhqmi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sfraece] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dmduxft] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bpvogmg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lfueoki] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lxnquds] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vjkepme] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lmgdvmo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gggxbvh] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xgnwqae] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jpmmavd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ojtfetk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hmhbfjd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jubxqja] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kmkpdqn] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hldggbk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hbktnhv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bkjotgi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nflrasc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [prwyknw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bwqvixg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [eeoooli] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [txbphln] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [uxjwsgb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [devldtd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tukomnp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ybsbnyk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bhpjmgu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cihndrb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qumrmev] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hkfvqkc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdhapnq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yjxrqcj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mmxdiew] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ojatmaq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vjviaor] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vybxmcd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jilcyuq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jrfhduq] c:\windows\qfvmnix.exe
O4 - Global Startup: ME101 Configuration Utility.lnk = C:\Program Files\NETGEAR\ME101 Configuration Utility\wlancfg.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Microsoft AntiSpyware helper - {56D18C20-7A0F-403B-A630-158F7504D9E2} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {56D18C20-7A0F-403B-A630-158F7504D9E2} - (no file) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O16 - DPF: {B42B62D9-3522-4BC3-AC37-2A9E13776080} (DrvTst Class) - http://www.binarybiz.com/vlab/drivetest/DriveTester.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Loading Outpost Connections (KDE) - Unknown owner - C:\WINDOWS\system32\cmdtel.exe
O23 - Service: Debug oupost relations (LAGOS) - Unknown owner - C:\WINDOWS\system32\ahtun.exe
O23 - Service: ProPortmap Service - Unknown owner - C:\ptc\portmap\portmap.exe

I have complete all of the step you sugested.

the anti-virus scan found a few things, but it cound not delete a file called thun32.dll

here is the hijacklog.

Logfile of HijackThis v1.99.1
Scan saved at 8:20:41 PM, on 5/6/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\GEARSec.exe
C:\WINDOWS\system32\cmdtel.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\QuickTime\qttask.exe
C:\windows\ufbytjm.exe
C:\WINDOWS\system32\devldr32.exe
E:\Downloads\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0AD937E7-2F37-4873-A05E-548A67EF1D0E} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DI2] "C:\WINDOWS\TEMP\27.exe\27.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [FlnCPY] "C:\Program Files\Common Files\Java\flncpy.exe"
O4 - HKLM\..\Run: [Disk Keeper] C:\WINDOWS\system32\Services\{DDF5AAB2-B429-4018-BFA4-67F6CCB26189}\SECURITY.EXE
O4 - HKCU\..\Run: [ifivvjp] c:\windows\ufbytjm.exe
O4 - HKCU\..\Run: [alsuiad] c:\windows\qpttldx.exe
O4 - HKCU\..\Run: [iqufmtw] c:\windows\hsmtsod.exe
O4 - HKCU\..\Run: [uraiils] c:\windows\hsmtsod.exe
O4 - HKCU\..\Run: [wenuedg] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [plprikp] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [wallgja] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [xnwkirv] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [idtruuh] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [wrhjdqp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [bpgfsxe] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [jmrtwki] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [kqxuaqm] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [hdddcbt] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [drshyyn] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [repctpo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vyowyvu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [sdfccte] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ddwaoyo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [kvoalix] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [qvuxgif] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yvgspxo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rwufppd] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ahgfuyb] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rfakbfq] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [naoqeai] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [mrbawis] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [mfugyjl] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [evmnrux] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yaaaxah] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ndqlcnn] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ssbfuwu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [uljshbj] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ndvmvmv] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nwwihrg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ujbjitq] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iwpneou] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iuwthcs] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [quiwnoc] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rljaedk] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ylxfcvp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dqfhmjy] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ogthcmu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [jbxyxjh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vurixnm] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [lufxwfy] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [fgfmxjk] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nivjteg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [lnwrykp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dbltqwh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yoqxiah] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [wsljqry] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [cactlvi] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vytryip] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iadcaic] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [obesbxr] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [drimuuh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ldabtis] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dorjvls] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [usooasg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nlkcpke] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [horxhoo] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [vfwhnft] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [bhjiadv] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [wvdnkgl] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [tpvqjhp] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [okqmbqm] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [elhmxpa] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [evnummv] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [ubfpxfw] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [oxnxhfc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [tkggdwq] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [bhtvqnt] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [uekjuca] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [xefuunf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [dacnpsk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ddlomhh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [bmjyilk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [dodlclh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [plthqxs] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [wxqnugu] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [tjkwiqr] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [jlyqgal] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [kcynqor] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ylgcdfi] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [fggrbce] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [rhbhnec] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [fatieao] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ispwgfh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [isfnimc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [eywppnd] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mwjeadh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [scfglmf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [uofuyaj] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [elbvoma] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mxqklai] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [sajrnli] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [lnemtxc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mxuojxf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [txbtixe] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ubwdfpg] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [eivptsk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [morctla] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [yaesljg] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [qiwbqkg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tjiagpy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ieocdqd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yewdjxv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tngilve] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [osnureb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cplojfg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jnypavq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ocgmtjd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [okavoan] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hyrfusf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jykwica] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xduxhuv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kjtdsoi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ommyxbm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ldnaggq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [oonbwwy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ytuvdto] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ndkbggq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xfpfdle] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hhstkfb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rbwmhgt] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cwbmvcb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qnstama] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ogkgtqo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hipfrks] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dbgytay] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [elqncgg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ytdorkv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xjdsesj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sgumknm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kquqhqr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nqylwfy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tvkxlxs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ssowbfl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wmhjmxo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [fkoytop] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kqvnncw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cojteaf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jvooewu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jkudqwg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [iwkseya] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mtscbix] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dounrxs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ecapesv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gembebc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kmerykd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mqlqtlc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cfsnawu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [quwxctb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ahwhwfx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ggibauw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dvuaasc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gyrikto] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hgryuyt] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [aboherm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [pvcaufy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gvhpbcd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ocbudao] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vimctel] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [htqtggd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [axfbxeu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xoctchk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [khpykyl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [aemtrsj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ibephgk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tlgfjfq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tbobirh] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xxrgqtu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wsypdog] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bvosjfw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kaamrut] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [febaabr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vhhjqhb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vgirrpq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dwnmceq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hpkyqrf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bxybuyc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [uyeyoar] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bcstcup] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [iufxvrs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qfncmqx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [maythjo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [isyhlle] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdsgocm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jwkegyn] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ymuctfx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ovlauno] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ieuodao] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [fjurpla] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [atvnsxe] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [crclvlv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [juxkkyx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ntqmjrq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sniaksm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nulnysq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jmcamcg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [udjsjky] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bdmktct] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ghtdqfd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sfstxey] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xpcgnuk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xrlgdsr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sxsvufd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kxrgiyc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [orknqsl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yhhjlyk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bjnsitv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [btdorig] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tgkgpqp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tftrwuq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gktvmuv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [pwohwlm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [halcvfb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mcntdbq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xcmyiid] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdqybxl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bkheycy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cyurvtb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lvwjfnw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ctfacda] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [oyycwjf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xulmidu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [owloddp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [baddbgl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lmqiopf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ejxcnuf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wdvrgku] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xbjhqmi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sfraece] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dmduxft] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bpvogmg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lfueoki] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lxnquds] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vjkepme] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lmgdvmo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gggxbvh] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xgnwqae] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jpmmavd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ojtfetk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hmhbfjd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jubxqja] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kmkpdqn] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hldggbk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hbktnhv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bkjotgi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nflrasc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [prwyknw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bwqvixg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [eeoooli] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [txbphln] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [uxjwsgb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [devldtd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tukomnp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ybsbnyk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bhpjmgu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cihndrb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qumrmev] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hkfvqkc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdhapnq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yjxrqcj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mmxdiew] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ojatmaq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vjviaor] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vybxmcd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jilcyuq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jrfhduq] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [smnskqe] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [fnpymex] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [flcoapu] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [uurislt] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [mdhhkmu] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [hftckfu] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [jurcykp] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [hkfegxl] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [iibaaxp] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [phntlfa] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [hsntugf] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [mwtjhek] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [qolnvlk] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [snhbktp] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [sfdtrml] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [npyqncr] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [piubrwn] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [jmbwwok] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [ekoxfis] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [jcoxjao] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [fybxvih] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [adqguxe] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [wcptiye] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [wumrjoo] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [vvvqjoc] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [fbkhrmx] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [cbliyqk] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [dhimdpf] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [pnfqeuc] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [vdscayk] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [dfnrxrc] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [pxjluau] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [hmdlixx] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [iravdgy] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [wkdggis] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [jxwnfuu] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [evpgxfo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [tqiywlj] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [bihtjbb] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ogqxahv] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [sirjdol] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [fccnybg] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ygetika] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [sgpjrrn] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [nprgocx] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [offtauo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [xoetcdx] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [obqjcss] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [bglhpvd] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [gklpajf] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [aawmopo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [jlayhbs] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [vgdtxpg] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [wfmkqtb] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [sgahvqw] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [tfcunyq] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [mskykkx] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [eqhieel] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [egjbjdn] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [imxjciq] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [nnanehs] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [wgqlkko] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [uhqnrxj] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ttkbjbo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [kddjlyn] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [vnqwswy] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [niumlgq] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [uhanpwh] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [idycola] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [vsvdvfb] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [mahxjqv] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [xwyuace] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [kxbeuvc] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [lnccxqg] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ccsedlr] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [puworco] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [kppymah] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [frqhjds] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [tspilde] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ftduygn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [egpuyck] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ehmnhgp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [bdtichq] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [xexntoc] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [oqamsmc] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [vcifcns] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [btgvihf] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [vtblujk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ddudqcw] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [vebxnwp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [abceljx] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [icukpvs] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [peaaolf] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [xbrqrlp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [fdxhjgl] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [clyiody] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [pqcadsk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [pefpnwx] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [rcupsju] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [rhnspmp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [axyecxs] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [kffcyoc] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ibgmtxn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [xfwmklq] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [kxxntxk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [hcgaqsf] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [pkceijm] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [jiopbyn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [roopqtk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [djktdst] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [tbkisgr] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ojgugvb] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [esuinyk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [dgkwlfr] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [lmqttpn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [txsfapi] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [jospemv] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ixppoec] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [bchbmfk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [kmhivnk] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [vdtwcwa] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [ivjiktq] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [awctgfr] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [levqxhu] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [nvbeehh] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [hyynwks] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [bpeamid] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [oqqdbtt] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [moxhpip] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [edwgwtk] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [nsskwhq] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [abdndkb] c:\windows\ymvdfbg.exe
O4 - HKCU\..\Run: [tdrxcsf] c:\windows\ymvdfbg.exe
O4 - HKCU\..\Run: [uutjrbh] c:\windows\ymvdfbg.exe
O4 - HKCU\..\Run: [wtmdant] c:\windows\ymvdfbg.exe
O4 - Global Startup: ME101 Configuration Utility.lnk = C:\Program Files\NETGEAR\ME101 Configuration Utility\wlancfg.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Microsoft AntiSpyware helper - {56D18C20-7A0F-403B-A630-158F7504D9E2} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {56D18C20-7A0F-403B-A630-158F7504D9E2} - (no file) (HKCU)
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {B42B62D9-3522-4BC3-AC37-2A9E13776080} (DrvTst Class) - http://www.binarybiz.com/vlab/drivetest/DriveTester.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Loading Outpost Connections (KDE) - Unknown owner - C:\WINDOWS\system32\cmdtel.exe
O23 - Service: Debug oupost relations (LAGOS) - Unknown owner - C:\WINDOWS\system32\ahtun.exe (file missing)



thanks agin.

Please scan with hijackthis and put a heck beside these lines and choose FIX

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm

O2 - BHO: (no name) - {0AD937E7-2F37-4873-A05E-548A67EF1D0E} - (no file)

O4 - HKLM\..\Run: [FlnCPY] "C:\Program Files\Common Files\Java\flncpy.exe"
O4 - HKLM\..\Run: [Disk Keeper] C:\WINDOWS\system32\Services\{DDF5AAB2-B429-4018-BFA4-67F6CCB26189}\SECURITY.EXE
O4 - HKCU\..\Run: [ifivvjp] c:\windows\ufbytjm.exe
O4 - HKCU\..\Run: [alsuiad] c:\windows\qpttldx.exe
O4 - HKCU\..\Run: [iqufmtw] c:\windows\hsmtsod.exe
O4 - HKCU\..\Run: [uraiils] c:\windows\hsmtsod.exe
O4 - HKCU\..\Run: [wenuedg] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [plprikp] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [wallgja] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [xnwkirv] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [idtruuh] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [wrhjdqp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [bpgfsxe] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [jmrtwki] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [kqxuaqm] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [hdddcbt] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [drshyyn] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [repctpo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vyowyvu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [sdfccte] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ddwaoyo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [kvoalix] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [qvuxgif] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yvgspxo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rwufppd] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ahgfuyb] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rfakbfq] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [naoqeai] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [mrbawis] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [mfugyjl] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [evmnrux] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yaaaxah] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ndqlcnn] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ssbfuwu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [uljshbj] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ndvmvmv] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nwwihrg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ujbjitq] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iwpneou] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iuwthcs] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [quiwnoc] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rljaedk] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ylxfcvp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dqfhmjy] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ogthcmu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [jbxyxjh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vurixnm] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [lufxwfy] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [fgfmxjk] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nivjteg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [lnwrykp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dbltqwh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yoqxiah] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [wsljqry] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [cactlvi] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vytryip] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iadcaic] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [obesbxr] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [drimuuh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ldabtis] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dorjvls] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [usooasg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nlkcpke] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [horxhoo] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [vfwhnft] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [bhjiadv] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [wvdnkgl] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [tpvqjhp] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [okqmbqm] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [elhmxpa] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [evnummv] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [ubfpxfw] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [oxnxhfc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [tkggdwq] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [bhtvqnt] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [uekjuca] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [xefuunf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [dacnpsk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ddlomhh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [bmjyilk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [dodlclh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [plthqxs] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [wxqnugu] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [tjkwiqr] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [jlyqgal] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [kcynqor] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ylgcdfi] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [fggrbce] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [rhbhnec] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [fatieao] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ispwgfh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [isfnimc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [eywppnd] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mwjeadh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [scfglmf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [uofuyaj] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [elbvoma] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mxqklai] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [sajrnli] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [lnemtxc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mxuojxf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [txbtixe] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ubwdfpg] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [eivptsk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [morctla] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [yaesljg] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [qiwbqkg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tjiagpy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ieocdqd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yewdjxv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tngilve] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [osnureb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cplojfg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jnypavq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ocgmtjd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [okavoan] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hyrfusf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jykwica] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xduxhuv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kjtdsoi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ommyxbm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ldnaggq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [oonbwwy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ytuvdto] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ndkbggq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xfpfdle] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hhstkfb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rbwmhgt] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cwbmvcb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qnstama] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ogkgtqo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hipfrks] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dbgytay] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [elqncgg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ytdorkv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xjdsesj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sgumknm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kquqhqr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nqylwfy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tvkxlxs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ssowbfl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wmhjmxo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [fkoytop] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kqvnncw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cojteaf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jvooewu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jkudqwg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [iwkseya] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mtscbix] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dounrxs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ecapesv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gembebc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kmerykd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mqlqtlc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cfsnawu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [quwxctb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ahwhwfx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ggibauw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dvuaasc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gyrikto] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hgryuyt] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [aboherm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [pvcaufy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gvhpbcd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ocbudao] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vimctel] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [htqtggd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [axfbxeu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xoctchk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [khpykyl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [aemtrsj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ibephgk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tlgfjfq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tbobirh] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xxrgqtu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wsypdog] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bvosjfw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kaamrut] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [febaabr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vhhjqhb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vgirrpq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dwnmceq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hpkyqrf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bxybuyc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [uyeyoar] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bcstcup] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [iufxvrs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qfncmqx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [maythjo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [isyhlle] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdsgocm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jwkegyn] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ymuctfx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ovlauno] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ieuodao] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [fjurpla] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [atvnsxe] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [crclvlv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [juxkkyx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ntqmjrq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sniaksm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nulnysq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jmcamcg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [udjsjky] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bdmktct] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ghtdqfd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sfstxey] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xpcgnuk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xrlgdsr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sxsvufd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kxrgiyc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [orknqsl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yhhjlyk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bjnsitv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [btdorig] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tgkgpqp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tftrwuq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gktvmuv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [pwohwlm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [halcvfb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mcntdbq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xcmyiid] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdqybxl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bkheycy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cyurvtb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lvwjfnw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ctfacda] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [oyycwjf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xulmidu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [owloddp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [baddbgl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lmqiopf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ejxcnuf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wdvrgku] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xbjhqmi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sfraece] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dmduxft] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bpvogmg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lfueoki] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lxnquds] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vjkepme] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lmgdvmo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gggxbvh] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xgnwqae] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jpmmavd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ojtfetk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hmhbfjd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jubxqja] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kmkpdqn] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hldggbk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hbktnhv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bkjotgi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nflrasc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [prwyknw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bwqvixg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [eeoooli] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [txbphln] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [uxjwsgb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [devldtd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tukomnp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ybsbnyk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bhpjmgu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cihndrb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qumrmev] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hkfvqkc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdhapnq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yjxrqcj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mmxdiew] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ojatmaq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vjviaor] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vybxmcd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jilcyuq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jrfhduq] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [smnskqe] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [fnpymex] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [flcoapu] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [uurislt] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [mdhhkmu] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [hftckfu] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [jurcykp] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [hkfegxl] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [iibaaxp] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [phntlfa] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [hsntugf] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [mwtjhek] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [qolnvlk] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [snhbktp] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [sfdtrml] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [npyqncr] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [piubrwn] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [jmbwwok] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [ekoxfis] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [jcoxjao] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [fybxvih] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [adqguxe] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [wcptiye] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [wumrjoo] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [vvvqjoc] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [fbkhrmx] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [cbliyqk] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [dhimdpf] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [pnfqeuc] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [vdscayk] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [dfnrxrc] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [pxjluau] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [hmdlixx] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [iravdgy] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [wkdggis] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [jxwnfuu] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [evpgxfo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [tqiywlj] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [bihtjbb] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ogqxahv] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [sirjdol] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [fccnybg] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ygetika] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [sgpjrrn] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [nprgocx] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [offtauo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [xoetcdx] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [obqjcss] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [bglhpvd] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [gklpajf] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [aawmopo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [jlayhbs] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [vgdtxpg] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [wfmkqtb] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [sgahvqw] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [tfcunyq] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [mskykkx] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [eqhieel] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [egjbjdn] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [imxjciq] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [nnanehs] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [wgqlkko] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [uhqnrxj] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ttkbjbo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [kddjlyn] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [vnqwswy] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [niumlgq] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [uhanpwh] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [idycola] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [vsvdvfb] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [mahxjqv] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [xwyuace] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [kxbeuvc] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [lnccxqg] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ccsedlr] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [puworco] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [kppymah] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [frqhjds] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [tspilde] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ftduygn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [egpuyck] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ehmnhgp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [bdtichq] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [xexntoc] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [oqamsmc] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [vcifcns] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [btgvihf] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [vtblujk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ddudqcw] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [vebxnwp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [abceljx] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [icukpvs] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [peaaolf] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [xbrqrlp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [fdxhjgl] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [clyiody] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [pqcadsk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [pefpnwx] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [rcupsju] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [rhnspmp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [axyecxs] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [kffcyoc] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ibgmtxn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [xfwmklq] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [kxxntxk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [hcgaqsf] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [pkceijm] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [jiopbyn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [roopqtk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [djktdst] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [tbkisgr] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ojgugvb] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [esuinyk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [dgkwlfr] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [lmqttpn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [txsfapi] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [jospemv] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ixppoec] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [bchbmfk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [kmhivnk] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [vdtwcwa] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [ivjiktq] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [awctgfr] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [levqxhu] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [nvbeehh] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [hyynwks] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [bpeamid] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [oqqdbtt] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [moxhpip] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [edwgwtk] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [nsskwhq] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [abdndkb] c:\windows\ymvdfbg.exe
O4 - HKCU\..\Run: [tdrxcsf] c:\windows\ymvdfbg.exe
O4 - HKCU\..\Run: [uutjrbh] c:\windows\ymvdfbg.exe
O4 - HKCU\..\Run: [wtmdant] c:\windows\ymvdfbg.exe

O16 - DPF: {B42B62D9-3522-4BC3-AC37-2A9E13776080} (DrvTst Class) - http://www.binarybiz.com/vlab/drivetest/DriveTester.cab

Then reboot to safe mode (tap f8 while bios loads and look for and delete these files/folders if present

O4 - HKLM\..\Run: [Disk Keeper] C:\WINDOWS\system32\Services\{DDF5AAB2-B429-4018-BFA4-67F6CCB26189} <<<
All of these files.

O4 - HKCU\..\Run: [ifivvjp] c:\windows\ufbytjm.exe
O4 - HKCU\..\Run: [alsuiad] c:\windows\qpttldx.exe
O4 - HKCU\..\Run: [iqufmtw] c:\windows\hsmtsod.exe
O4 - HKCU\..\Run: [uraiils] c:\windows\hsmtsod.exe
O4 - HKCU\..\Run: [wenuedg] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [plprikp] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [wallgja] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [xnwkirv] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [idtruuh] c:\windows\urpceog.exe
O4 - HKCU\..\Run: [wrhjdqp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [bpgfsxe] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [jmrtwki] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [kqxuaqm] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [hdddcbt] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [drshyyn] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [repctpo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vyowyvu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [sdfccte] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ddwaoyo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [kvoalix] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [qvuxgif] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yvgspxo] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rwufppd] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ahgfuyb] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rfakbfq] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [naoqeai] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [mrbawis] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [mfugyjl] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [evmnrux] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yaaaxah] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ndqlcnn] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ssbfuwu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [uljshbj] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ndvmvmv] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nwwihrg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ujbjitq] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iwpneou] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iuwthcs] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [quiwnoc] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [rljaedk] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ylxfcvp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dqfhmjy] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ogthcmu] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [jbxyxjh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vurixnm] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [lufxwfy] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [fgfmxjk] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nivjteg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [lnwrykp] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dbltqwh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [yoqxiah] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [wsljqry] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [cactlvi] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [vytryip] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [iadcaic] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [obesbxr] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [drimuuh] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [ldabtis] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [dorjvls] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [usooasg] c:\windows\oebavyj.exe
O4 - HKCU\..\Run: [nlkcpke] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [horxhoo] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [vfwhnft] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [bhjiadv] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [wvdnkgl] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [tpvqjhp] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [okqmbqm] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [elhmxpa] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [evnummv] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [ubfpxfw] c:\windows\wpolouc.exe
O4 - HKCU\..\Run: [oxnxhfc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [tkggdwq] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [bhtvqnt] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [uekjuca] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [xefuunf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [dacnpsk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ddlomhh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [bmjyilk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [dodlclh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [plthqxs] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [wxqnugu] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [tjkwiqr] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [jlyqgal] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [kcynqor] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ylgcdfi] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [fggrbce] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [rhbhnec] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [fatieao] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ispwgfh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [isfnimc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [eywppnd] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mwjeadh] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [scfglmf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [uofuyaj] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [elbvoma] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mxqklai] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [sajrnli] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [lnemtxc] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [mxuojxf] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [txbtixe] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [ubwdfpg] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [eivptsk] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [morctla] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [yaesljg] c:\windows\cpqbaew.exe
O4 - HKCU\..\Run: [qiwbqkg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tjiagpy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ieocdqd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yewdjxv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tngilve] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [osnureb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cplojfg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jnypavq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ocgmtjd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [okavoan] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hyrfusf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jykwica] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xduxhuv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kjtdsoi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ommyxbm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ldnaggq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [oonbwwy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ytuvdto] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ndkbggq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xfpfdle] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hhstkfb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rbwmhgt] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cwbmvcb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qnstama] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ogkgtqo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hipfrks] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dbgytay] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [elqncgg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ytdorkv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xjdsesj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sgumknm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kquqhqr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nqylwfy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tvkxlxs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ssowbfl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wmhjmxo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [fkoytop] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kqvnncw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cojteaf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jvooewu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jkudqwg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [iwkseya] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mtscbix] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dounrxs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ecapesv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gembebc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kmerykd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mqlqtlc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cfsnawu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [quwxctb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ahwhwfx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ggibauw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dvuaasc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gyrikto] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hgryuyt] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [aboherm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [pvcaufy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gvhpbcd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ocbudao] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vimctel] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [htqtggd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [axfbxeu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xoctchk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [khpykyl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [aemtrsj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ibephgk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tlgfjfq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tbobirh] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xxrgqtu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wsypdog] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bvosjfw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kaamrut] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [febaabr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vhhjqhb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vgirrpq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dwnmceq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hpkyqrf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bxybuyc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [uyeyoar] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bcstcup] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [iufxvrs] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qfncmqx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [maythjo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [isyhlle] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdsgocm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jwkegyn] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ymuctfx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ovlauno] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ieuodao] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [fjurpla] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [atvnsxe] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [crclvlv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [juxkkyx] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ntqmjrq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sniaksm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nulnysq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jmcamcg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [udjsjky] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bdmktct] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ghtdqfd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sfstxey] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xpcgnuk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xrlgdsr] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sxsvufd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kxrgiyc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [orknqsl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yhhjlyk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bjnsitv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [btdorig] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tgkgpqp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tftrwuq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gktvmuv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [pwohwlm] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [halcvfb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mcntdbq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xcmyiid] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdqybxl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bkheycy] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cyurvtb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lvwjfnw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ctfacda] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [oyycwjf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xulmidu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [owloddp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [baddbgl] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lmqiopf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ejxcnuf] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [wdvrgku] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xbjhqmi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [sfraece] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [dmduxft] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bpvogmg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lfueoki] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lxnquds] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vjkepme] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [lmgdvmo] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [gggxbvh] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [xgnwqae] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jpmmavd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ojtfetk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hmhbfjd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jubxqja] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [kmkpdqn] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hldggbk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hbktnhv] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bkjotgi] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [nflrasc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [prwyknw] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bwqvixg] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [eeoooli] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [txbphln] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [uxjwsgb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [devldtd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [tukomnp] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ybsbnyk] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [bhpjmgu] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [cihndrb] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [qumrmev] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [hkfvqkc] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [rdhapnq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [yjxrqcj] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [mmxdiew] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [ojatmaq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vjviaor] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [vybxmcd] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jilcyuq] c:\windows\kxgqtpj.exe
O4 - HKCU\..\Run: [jrfhduq] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [smnskqe] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [fnpymex] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [flcoapu] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [uurislt] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [mdhhkmu] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [hftckfu] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [jurcykp] c:\windows\qfvmnix.exe
O4 - HKCU\..\Run: [hkfegxl] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [iibaaxp] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [phntlfa] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [hsntugf] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [mwtjhek] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [qolnvlk] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [snhbktp] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [sfdtrml] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [npyqncr] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [piubrwn] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [jmbwwok] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [ekoxfis] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [jcoxjao] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [fybxvih] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [adqguxe] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [wcptiye] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [wumrjoo] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [vvvqjoc] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [fbkhrmx] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [cbliyqk] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [dhimdpf] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [pnfqeuc] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [vdscayk] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [dfnrxrc] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [pxjluau] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [hmdlixx] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [iravdgy] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [wkdggis] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [jxwnfuu] c:\windows\spmmglf.exe
O4 - HKCU\..\Run: [evpgxfo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [tqiywlj] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [bihtjbb] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ogqxahv] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [sirjdol] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [fccnybg] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ygetika] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [sgpjrrn] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [nprgocx] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [offtauo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [xoetcdx] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [obqjcss] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [bglhpvd] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [gklpajf] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [aawmopo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [jlayhbs] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [vgdtxpg] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [wfmkqtb] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [sgahvqw] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [tfcunyq] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [mskykkx] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [eqhieel] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [egjbjdn] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [imxjciq] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [nnanehs] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [wgqlkko] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [uhqnrxj] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ttkbjbo] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [kddjlyn] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [vnqwswy] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [niumlgq] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [uhanpwh] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [idycola] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [vsvdvfb] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [mahxjqv] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [xwyuace] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [kxbeuvc] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [lnccxqg] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [ccsedlr] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [puworco] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [kppymah] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [frqhjds] c:\windows\ktmvlqe.exe
O4 - HKCU\..\Run: [tspilde] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ftduygn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [egpuyck] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ehmnhgp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [bdtichq] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [xexntoc] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [oqamsmc] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [vcifcns] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [btgvihf] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [vtblujk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ddudqcw] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [vebxnwp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [abceljx] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [icukpvs] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [peaaolf] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [xbrqrlp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [fdxhjgl] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [clyiody] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [pqcadsk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [pefpnwx] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [rcupsju] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [rhnspmp] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [axyecxs] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [kffcyoc] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ibgmtxn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [xfwmklq] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [kxxntxk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [hcgaqsf] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [pkceijm] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [jiopbyn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [roopqtk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [djktdst] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [tbkisgr] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ojgugvb] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [esuinyk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [dgkwlfr] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [lmqttpn] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [txsfapi] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [jospemv] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [ixppoec] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [bchbmfk] c:\windows\ikikvma.exe
O4 - HKCU\..\Run: [kmhivnk] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [vdtwcwa] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [ivjiktq] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [awctgfr] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [levqxhu] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [nvbeehh] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [hyynwks] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [bpeamid] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [oqqdbtt] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [moxhpip] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [edwgwtk] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [nsskwhq] c:\windows\ikglnpp.exe
O4 - HKCU\..\Run: [abdndkb] c:\windows\ymvdfbg.exe
O4 - HKCU\..\Run: [tdrxcsf] c:\windows\ymvdfbg.exe
O4 - HKCU\..\Run: [uutjrbh] c:\windows\ymvdfbg.exe
O4 - HKCU\..\Run: [wtmdant] c:\windows\ymvdfbg.exe

Then reboot to normal mode and post a new hijackthis log please.

Did what you said

here is the post

Logfile of HijackThis v1.99.1
Scan saved at 10:13:45 AM, on 5/7/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\GEARSec.exe
C:\WINDOWS\system32\cmdtel.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\QuickTime\qttask.exe
C:\windows\dpromen.exe
C:\WINDOWS\system32\devldr32.exe
E:\Downloads\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DI2] "C:\WINDOWS\TEMP\27.exe\27.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [igsbucc] c:\windows\dpromen.exe
O4 - HKCU\..\Run: [yoajnok] c:\windows\dpromen.exe
O4 - HKCU\..\Run: [fpdciev] c:\windows\qbhdsxy.exe
O4 - Global Startup: ME101 Configuration Utility.lnk = C:\Program Files\NETGEAR\ME101 Configuration Utility\wlancfg.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Microsoft AntiSpyware helper - {56D18C20-7A0F-403B-A630-158F7504D9E2} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {56D18C20-7A0F-403B-A630-158F7504D9E2} - (no file) (HKCU)
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Loading Outpost Connections (KDE) - Unknown owner - C:\WINDOWS\system32\cmdtel.exe
O23 - Service: Debug oupost relations (LAGOS) - Unknown owner - C:\WINDOWS\system32\ahtun.exe (file missing)

Hi Siggyx,

Thanks for the help

here is the latest log file.

Logfile of HijackThis v1.99.1
Scan saved at 4:54:22 PM, on 5/8/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\GEARSec.exe
C:\WINDOWS\system32\cmdtel.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
E:\Downloads\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - Global Startup: ME101 Configuration Utility.lnk = C:\Program Files\NETGEAR\ME101 Configuration Utility\wlancfg.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Microsoft AntiSpyware helper - {56D18C20-7A0F-403B-A630-158F7504D9E2} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {56D18C20-7A0F-403B-A630-158F7504D9E2} - (no file) (HKCU)
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Loading Outpost Connections (KDE) - Unknown owner - C:\WINDOWS\system32\cmdtel.exe
O23 - Service: Debug oupost relations (LAGOS) - Unknown owner - C:\WINDOWS\system32\ahtun.exe (file missing)

Question What does"C:\WINDOWS\system32\ahtun.exe (file missing)" mean? During the the virus scans, it found the file ahtun.exe the program detected the file as a virus but could not delete the file since it was running. I deleted the file by hand.

Here is my latest post.

Logfile of HijackThis v1.99.1
Scan saved at 7:11:45 PM, on 5/9/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\GEARSec.exe
C:\WINDOWS\system32\cmdtel.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe
C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
C:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe
C:\WINDOWS\system32\devldr32.exe
E:\Downloads\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - Global Startup: ME101 Configuration Utility.lnk = C:\Program Files\NETGEAR\ME101 Configuration Utility\wlancfg.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Loading Outpost Connections (KDE) - Unknown owner - C:\WINDOWS\system32\cmdtel.exe
O23 - Service: Debug oupost relations (LAGOS) - Unknown owner - C:\WINDOWS\system32\ahtun.exe (file missing)
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe


The two entries:
O23 - Service: Loading Outpost Connections (KDE) - Unknown owner - C:\WINDOWS\system32\cmdtel.exe
O23 - Service: Debug oupost relations (LAGOS) - Unknown owner - C:\WINDOWS\system32\ahtun.exe (file missing)

Will not delete when I use the highjackthis fix button. Not sure what that means

Here is my latest post.

Logfile of HijackThis v1.99.1
Scan saved at 7:22:52 PM, on 5/18/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Common Files\Symantec Shared\NMain.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\NORTON~1\NORTON~1\navw32.exe
E:\Downloads\hijackthis\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - Global Startup: ME101 Configuration Utility.lnk = C:\Program Files\NETGEAR\ME101 Configuration Utility\wlancfg.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Debug oupost relations (LAGOS) - Unknown owner - C:\WINDOWS\system32\ahtun.exe (file missing)
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe