Hijack log from my Dad's screwed up machine

Somehow, my dad has managed to pollute his machine and I would like some help on how to best clean it up. Here's the log I retrieved off of his machine.

Thanks in advance.

Logfile of HijackThis v1.99.1
Scan saved at 6:37:52 PM, on 10/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Dell\Support\Alert\bin\DAMon.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
C:\WINDOWS\system32\hpoipm07.exe
C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnindex.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOFXM07.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\New Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.coolwwwsearch.com
R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.coolwwwsearch.com
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://4-counter.com/?a=2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.coolwwwsearch.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\nxeae.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\nxeae.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\nxeae.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\nxeae.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\nxeae.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\nxeae.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.searchxp.com/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\nxeae.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://4-counter.com/?a=2
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://4-counter.com/?a=2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = res://mshp.dll/index.html#22776
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = http://www.coolwwwsearch.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://register.hp.com/servlet/WebReg.serv…CH_DT_YEAR=2002
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {006037F9-A004-367C-C7FB-9C0C131CA3DF} - C:\WINDOWS\system32\sdklw.dll
O2 - BHO: Class - {00B7DCF4-9B37-BE2B-F3F7-6C8DFB0597F0} - C:\WINDOWS\mfcmm32.dll (file missing)
O2 - BHO: Class - {01761BE6-257C-4823-20B6-25AAC2D21D2B} - C:\WINDOWS\system32\msej32.dll
O2 - BHO: Class - {01822570-43E7-3BB4-310B-C31D3DD82409} - C:\WINDOWS\system32\d3sc.dll
O2 - BHO: Class - {01F38BF9-C079-27AB-2851-83DB1DC6608D} - C:\WINDOWS\sysfm.dll
O2 - BHO: Class - {01F3905D-2042-3016-19C2-68533992D798} - C:\WINDOWS\applc.dll (file missing)
O2 - BHO: Class - {0375DB0B-A138-898A-8565-1BE75E94375A} - C:\WINDOWS\system32\winxf32.dll
O2 - BHO: Class - {04E07DB4-970C-B6FD-F75A-B78964E091EE} - C:\WINDOWS\d3mb.dll (file missing)
O2 - BHO: Class - {0566E16E-2A99-5084-E121-5895960CC230} - C:\WINDOWS\system32\javayj32.dll (file missing)
O2 - BHO: Class - {05BABD52-18C7-C91F-46EE-6C99426E8823} - C:\WINDOWS\appnh.dll
O2 - BHO: Class - {05DF759A-7AB8-74F8-1007-762880E7156C} - C:\WINDOWS\atlds.dll
O2 - BHO: Class - {0649E404-F195-50E5-2763-BAD0093516E2} - C:\WINDOWS\system32\ntcg.dll
O2 - BHO: Class - {064B1E94-233A-F0CE-2010-BD60FCC5E5E9} - C:\WINDOWS\system32\appki.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {07B26288-C681-0065-E065-8201DD28A761} - C:\WINDOWS\system32\addwi.dll (file missing)
O2 - BHO: Class - {0837F1F9-622B-5659-8A22-FE873401EB7E} - C:\WINDOWS\msab.dll
O2 - BHO: Class - {091233C4-3803-DBCD-4580-0207D9AA1206} - C:\WINDOWS\system32\sdkzc.dll (file missing)
O2 - BHO: Class - {092CC6AA-538B-D8B7-4D6D-94C9785175B6} - C:\WINDOWS\system32\msvl32.dll
O2 - BHO: Class - {093646C5-CDDB-2035-BD50-008A30E3EA96} - C:\WINDOWS\javaez32.dll
O2 - BHO: Class - {0A8E24F7-CE32-202B-2C0C-B9CAC3C8D011} - C:\WINDOWS\system32\addpw32.dll (file missing)
O2 - BHO: Class - {0ABE12D5-39B7-5B3F-FC5E-5F27AA151543} - C:\WINDOWS\system32\crwk32.dll
O2 - BHO: (no name) - {0AD937E7-2F37-4873-A05E-548A67EF1D0E} - (no file)
O2 - BHO: Class - {0B542600-EEB9-32CA-7717-202BF8A261BF} - C:\WINDOWS\sdkxk32.dll
O2 - BHO: Class - {0B8825BD-13B7-8ED8-FF77-5925341EC234} - C:\WINDOWS\system32\atlye32.dll
O2 - BHO: Class - {0BABB5A0-C721-8792-633A-C0AC20646EDE} - C:\WINDOWS\system32\sysrq32.dll
O2 - BHO: Class - {0C3C97D9-21C6-B33B-3429-B59624FD263F} - C:\WINDOWS\system32\msqb32.dll
O2 - BHO: Class - {0D477064-C0A0-92DC-477A-47E26D658ED6} - C:\WINDOWS\system32\javata32.dll
O2 - BHO: Class - {0E0ABE69-7345-8741-938E-5DCCA13C4284} - C:\WINDOWS\system32\d3zr32.dll
O2 - BHO: Class - {0E46226E-58AC-86F9-3C08-F58EAC8AF33D} - C:\WINDOWS\system32\msqn32.dll
O2 - BHO: Class - {10E20286-B1F5-A99E-11C9-404DF4478A40} - C:\WINDOWS\crne32.dll
O2 - BHO: Class - {11BA77F1-683B-FBF7-B61E-4821BC229D98} - C:\WINDOWS\appta.dll
O2 - BHO: Class - {122B5708-D9CA-1F7A-8543-4C9929E7FA20} - C:\WINDOWS\system32\atlmd32.dll
O2 - BHO: Class - {12F72849-7A03-E428-0E12-0915087880FF} - C:\WINDOWS\system32\atlrt32.dll
O2 - BHO: Class - {133CF036-32FB-A97C-47AF-95AF3B4789A9} - C:\WINDOWS\system32\iehe32.dll (file missing)
O2 - BHO: Class - {1393F29F-3AD1-88F1-8182-7EBCC2149DC1} - C:\WINDOWS\mswr.dll
O2 - BHO: Class - {13B86F72-7AF8-F8F0-286D-B850DB32EB1A} - C:\WINDOWS\system32\appgn32.dll
O2 - BHO: Class - {14763206-F6A7-4D6F-D4D5-2E72E367ABB1} - C:\WINDOWS\system32\apisq32.dll
O2 - BHO: Class - {147910CC-E564-44A8-2EDA-3D0FCD283F61} - C:\WINDOWS\apixw32.dll
O2 - BHO: Class - {14882629-ECB5-DB2D-9FF8-D87930DD6A0A} - C:\WINDOWS\iefb32.dll
O2 - BHO: Class - {14913C42-FA8E-DBBC-21EA-6EB6CA2408BD} - C:\WINDOWS\sdkpt32.dll
O2 - BHO: Class - {1492CE6A-29F9-0C0F-D7AF-AA3B90ABB4CC} - C:\WINDOWS\javaol.dll
O2 - BHO: Class - {15F6DF51-80DA-2FBF-3DB3-4BC956825654} - C:\WINDOWS\d3kp32.dll
O2 - BHO: Class - {1680DDAB-2D8D-102E-DCC5-5E6A6CF478B0} - C:\WINDOWS\system32\apiqm32.dll
O2 - BHO: Class - {16A47DFB-0B7B-6D1B-05B7-210FEB83CF1C} - C:\WINDOWS\appck32.dll
O2 - BHO: Class - {16D199C7-F235-942C-E7CD-484759928237} - C:\WINDOWS\d3ht.dll
O2 - BHO: Class - {17286042-5FD2-617F-7359-43F199E3A259} - C:\WINDOWS\netxg32.dll (file missing)
O2 - BHO: Class - {178ED832-5662-AF21-DCB5-9071147C3AF6} - C:\WINDOWS\system32\apitj32.dll
O2 - BHO: Class - {18D7A970-9CE7-1258-A72B-98236D6C7FD4} - C:\WINDOWS\system32\appfw32.dll
O2 - BHO: Class - {18E90283-8D41-E8A3-D91F-233620346597} - C:\WINDOWS\appwk32.dll (file missing)
O2 - BHO: Class - {19619DBD-B4B4-FDF7-102F-F84B25374D57} - C:\WINDOWS\applj.dll (file missing)
O2 - BHO: Class - {1995DD3F-2E2B-50AB-908D-9CDED6E2D0CB} - C:\WINDOWS\ntym.dll
O2 - BHO: Class - {19E67B9F-AA15-C7B4-F1B2-7123D9904006} - C:\WINDOWS\system32\atlcp32.dll (file missing)
O2 - BHO: Class - {1B9B3E63-535E-0E09-D64D-E94D45427DC8} - C:\WINDOWS\system32\atlnd32.dll
O2 - BHO: Class - {1C4EA8D2-2AB1-E54D-DA75-3B904D318D63} - C:\WINDOWS\d3sy32.dll
O2 - BHO: Class - {1D0338D3-94EB-474E-3BC7-CFEC18F8535A} - C:\WINDOWS\msio32.dll
O2 - BHO: Class - {1DFFBD4D-E8D2-D6F9-3733-F3C0A037E369} - C:\WINDOWS\d3zx32.dll (file missing)
O2 - BHO: Class - {1E6232D0-6D88-B285-E180-CDD5A3EB81A2} - C:\WINDOWS\crmt32.dll
O2 - BHO: Class - {1F013F6D-F4B5-29CA-4ECD-D48392AD32E5} - C:\WINDOWS\system32\appqg32.dll
O2 - BHO: Class - {2299D671-FC69-27B9-F4B4-AC5172A9786E} - C:\WINDOWS\system32\netht.dll
O2 - BHO: Class - {2402C3DD-91D9-B6F7-07F1-480D80055DEE} - C:\WINDOWS\msgc32.dll
O2 - BHO: Class - {24EC266E-58F6-C76B-ECDF-18E86769E35F} - C:\WINDOWS\sysnl32.dll
O2 - BHO: Class - {25B8166B-41ED-A81F-2F72-DBFD30EA2369} - C:\WINDOWS\system32\sysnr.dll
O2 - BHO: Class - {286D46CC-47AD-B067-BCF2-A81A4597B5C5} - C:\WINDOWS\system32\sysuw32.dll
O2 - BHO: Class - {28749852-4EA9-0662-286C-D43C4474D30C} - C:\WINDOWS\system32\ipxj.dll
O2 - BHO: Class - {2881C9AB-5FEC-0F19-DD77-C5AF6BA4405C} - C:\WINDOWS\addkh.dll
O2 - BHO: Class - {28FF0DAA-6EDD-259A-83C4-EADDF15D72AD} - C:\WINDOWS\system32\mfcat32.dll
O2 - BHO: Class - {2904C8A0-7E43-DA46-4A69-2C91F33AB52B} - C:\WINDOWS\system32\ipox32.dll
O2 - BHO: Class - {29B4E47E-E6A8-7CE4-67AD-EBB35E41D7C2} - C:\WINDOWS\system32\winab32.dll
O2 - BHO: Class - {29CE7156-29F7-AA3B-E5F1-8C74D009EE43} - C:\WINDOWS\netso.dll
O2 - BHO: Class - {29D85F04-92C0-EE38-6B32-B7DFD60147B3} - C:\WINDOWS\mfcwa32.dll
O2 - BHO: Class - {29FBD99D-346E-B31B-802B-EE460130FD4B} - C:\WINDOWS\sdkqx.dll
O2 - BHO: Class - {2A7363DF-C45A-5954-477D-0C78AF4A207C} - C:\WINDOWS\atlws.dll
O2 - BHO: Class - {2A8ECCE4-89B6-B77F-FFCD-1F38BF90C079} - C:\WINDOWS\system32\sdkbc.dll
O2 - BHO: Class - {2AA0D77D-C8A5-66CE-BC1B-8F3AAE9652B5} - C:\WINDOWS\addfb.dll
O2 - BHO: Class - {2CE963D1-FD1B-D1F3-A21C-F800645351B3} - C:\WINDOWS\system32\addee32.dll
O2 - BHO: Class - {2D171177-BAC9-E83B-13DC-458B4438F632} - C:\WINDOWS\system32\ieaa.dll
O2 - BHO: Class - {2D8F6DAA-6B2C-D070-B2CB-029A9926F9E4} - C:\WINDOWS\mstm32.dll
O2 - BHO: Class - {2E060147-D980-CDD2-64D5-AD18C7E395DE} - C:\WINDOWS\mfcjz32.dll
O2 - BHO: Class - {2E2CE93A-843E-84B0-D9C1-BD30FF3DCB52} - C:\WINDOWS\netqx32.dll
O2 - BHO: Class - {2E5F315B-2BF7-8710-CBFD-C73C5966F9DE} - C:\WINDOWS\ipeh32.dll
O2 - BHO: Class - {2EF3F0B2-A80F-927D-4E42-A7707D6E0C09} - C:\WINDOWS\system32\appxj.dll
O2 - BHO: Class - {2F71C161-9404-0890-EE38-E0DB36A3CA46} - C:\WINDOWS\javava.dll
O2 - BHO: Class - {301755A0-D9D5-A0CE-DB02-2D3AD027AB6D} - C:\WINDOWS\javaba.dll
O2 - BHO: Class - {319F29F9-90F7-A925-38EF-CE40F8C5F1A2} - C:\WINDOWS\ipst.dll
O2 - BHO: Class - {324C7B28-F8EB-05C3-47CF-680DDABE2D8D} - C:\WINDOWS\ipef.dll
O2 - BHO: Class - {32A6B01D-983B-8AF2-A16D-062280B34476} - C:\WINDOWS\system32\iemp32.dll
O2 - BHO: Class - {32B40341-3648-02F0-7D04-5B8F58EEBA63} - C:\WINDOWS\addlh32.dll
O2 - BHO: Class - {32D569A4-C81E-5AD0-D81A-CF8541A388F7} - C:\WINDOWS\javapm.dll
O2 - BHO: Class - {32D819AE-5E1D-5524-783B-C8993083716B} - C:\WINDOWS\wintj.dll
O2 - BHO: Class - {32E37E11-CF60-E146-4938-59E0C449C490} - C:\WINDOWS\system32\appwv.dll
O2 - BHO: Class - {35FD01EC-5FEE-AA3D-945B-C7706321F21D} - C:\WINDOWS\system32\apiji32.dll
O2 - BHO: Class - {36699E38-4D60-4F3A-9603-C8C8F5D83008} - C:\WINDOWS\system32\appze32.dll
O2 - BHO: Class - {373A6C86-54F8-54F9-EFBE-8669AC078452} - C:\WINDOWS\system32\iets32.dll
O2 - BHO: Class - {38D7B7AF-8225-46C7-D3F6-14944118DEB3} - C:\WINDOWS\crpa.dll
O2 - BHO: Class - {391EC5E2-AE56-35F0-4073-D75EB9F1EDFB} - C:\WINDOWS\system32\mszm.dll
O2 - BHO: Class - {39367380-D3EB-FD47-F847-547A8C746346} - C:\WINDOWS\system32\atlrg.dll
O2 - BHO: Class - {39906038-FD4D-5AF3-013B-AA2D3C22CDCA} - C:\WINDOWS\sdkvj32.dll (file missing)
O2 - BHO: Class - {3A0FEB9A-F9A6-BE0C-538C-747C0E518EDF} - C:\WINDOWS\system32\sdkdl32.dll
O2 - BHO: Class - {3D2ACA16-3F1C-BF97-6524-0F7072E1E895} - C:\WINDOWS\netlh32.dll
O2 - BHO: Class - {3DBE3B76-3521-BE11-EDF8-9D6FD61F6027} - C:\WINDOWS\apple32.dll
O2 - BHO: Class - {3E94D258-D83D-C2FC-C50B-C3BD6EF0FC9C} - C:\WINDOWS\system32\sdksv.dll
O2 - BHO: Class - {3F168309-460C-3C13-633D-8B2D81732BD0} - C:\WINDOWS\apifm.dll
O2 - BHO: Class - {3F30D91F-7DBB-7401-5EF9-CE65710FC433} - C:\WINDOWS\system32\appub32.dll
O2 - BHO: Class - {3F508203-C722-9913-5AE6-D4D6D529B196} - C:\WINDOWS\system32\iema32.dll
O2 - BHO: Class - {4054D236-524F-3C5F-6F45-BD878D877CD7} - C:\WINDOWS\system32\d3mt.dll
O2 - BHO: Class - {41EADA53-9855-F5E4-A237-FA8F16993990} - C:\WINDOWS\system32\crwb32.dll
O2 - BHO: Class - {41EC47A7-58EC-65FA-71E8-99027BAC7F2B} - C:\WINDOWS\system32\sysag32.dll
O2 - BHO: Class - {41EE75E8-DF9A-E7DC-52D8-1F0CEABDABFA} - C:\WINDOWS\ipyc32.dll
O2 - BHO: Class - {42B564F0-7ADE-60B1-EF1C-6A894D5FEF56} - C:\WINDOWS\system32\apiyl32.dll (file missing)
O2 - BHO: Class - {43E8A121-AE71-CB7B-0B5A-F99FA66D6EDF} - C:\WINDOWS\system32\ipee32.dll
O2 - BHO: Class - {44BECE92-B7DC-E0A5-2FC8-910FBA5C21AE} - C:\WINDOWS\sdkjk32.dll
O2 - BHO: Class - {453BE369-8D1D-69D7-A6CB-D4BE3C9AC738} - C:\WINDOWS\sdkwi32.dll
O2 - BHO: Class - {456A6CEE-8316-4A72-DFA8-73971797E2FD} - C:\WINDOWS\ippk32.dll
O2 - BHO: Class - {45BF02B3-6F53-F516-CA0B-8B10C0085204} - C:\WINDOWS\apiea32.dll
O2 - BHO: Class - {461EF4B4-D11B-5B7D-49A7-C7710D453C73} - C:\WINDOWS\d3yt.dll
O2 - BHO: Class - {47E7FB99-9433-5DC9-C75A-A370C44C2593} - C:\WINDOWS\ntla32.dll
O2 - BHO: Class - {480B26C9-5493-2FD8-25D1-17A24B1257DA} - C:\WINDOWS\appbr32.dll
O2 - BHO: Class - {4B4A8F65-75F5-BF6A-F510-7AC13C50B331} - C:\WINDOWS\system32\sysmr32.dll
O2 - BHO: Class - {4C57E717-CFF7-3593-E15F-0DB069077A96} - C:\WINDOWS\crtw.dll
O2 - BHO: Class - {4CAAE67A-7A0C-9C0D-D734-A9B58ADA489C} - C:\WINDOWS\ntxw.dll
O2 - BHO: Class - {4CB8455B-D319-EAD4-A22C-23122C3C402C} - C:\WINDOWS\javava32.dll
O2 - BHO: Class - {4CC1461A-CF26-C68C-F544-8A5FF56CE7DD} - C:\WINDOWS\system32\appgx.dll
O2 - BHO: Class - {4CC7119A-4ABC-8D35-FD7C-F27B7C371F4F} - C:\WINDOWS\ipnk32.dll
O2 - BHO: Class - {4CEBAA3A-44D2-D30D-92A7-62004F8D1F39} - C:\WINDOWS\mshf32.dll
O2 - BHO: Class - {4D0ED6BF-D64D-884B-351B-E924C175C0E1} - C:\WINDOWS\atlry32.dll
O2 - BHO: Class - {4D5086C8-1EDA-4232-0DD5-8A2FF9D9C966} - C:\WINDOWS\system32\mszp.dll
O2 - BHO: Class - {4D84A68D-2093-98F0-D350-292ABF94B29E} - C:\WINDOWS\system32\wincv.dll
O2 - BHO: Class - {4FBF9B37-2E69-9598-1E88-4F81BD77AAE8} - C:\WINDOWS\system32\d3xp32.dll
O2 - BHO: Class - {509B1F43-07D9-E337-F3E8-6E13D0066F6C} - C:\WINDOWS\system32\ntcg32.dll
O2 - BHO: Class - {509EE3A1-0DA3-E6F6-847A-4CAFDBB2C0DB} - C:\WINDOWS\d3fk32.dll (file missing)
O2 - BHO: Class - {50B7CF0C-8AE5-BB42-E622-CE649815FF71} - C:\WINDOWS\system32\atluw.dll
O2 - BHO: Class - {514CDFE1-5B4B-0907-2D78-0540364AC64B} - C:\WINDOWS\system32\atlyq32.dll
O2 - BHO: Class - {51E6232D-D6D8-0B28-FE18-2CDD5A3EB81A} - C:\WINDOWS\system32\appcc32.dll
O2 - BHO: Class - {51F3E69F-1686-3512-49E8-49B547E4E169} - C:\WINDOWS\system32\appnq32.dll
O2 - BHO: Class - {524102DB-A22C-9350-6565-DE17AF479294} - C:\WINDOWS\system32\netbu32.dll
O2 - BHO: Class - {52FEDAFD-7116-8034-52FF-C710EA25905B} - C:\WINDOWS\system32\atlmw32.dll
O2 - BHO: Class - {536A43E5-00CF-1DC7-7337-E4DF6100573B} - C:\WINDOWS\system32\d3yv.dll
O2 - BHO: Class - {538C9747-0E51-EDFD-1165-2CF2779ED78D} - C:\WINDOWS\system32\d3cv.dll
O2 - BHO: Class - {539322FC-A50C-270C-A3BD-3515AA26634A} - C:\WINDOWS\nettk.dll
O2 - BHO: Class - {5404BEF1-6D23-261E-D89E-5E7C213EAE7C} - C:\WINDOWS\system32\mfcob32.dll
O2 - BHO: Class - {544B7F26-ABCC-6632-0DB7-C12341FA8D26} - C:\WINDOWS\mfcco32.dll
O2 - BHO: Class - {544F8ECF-7661-CF47-2FD0-EA32255B9B7C} - C:\WINDOWS\system32\apidl.dll
O2 - BHO: Class - {5485EF8B-02AF-D770-F042-41C97146169F} - C:\WINDOWS\system32\ntfz.dll
O2 - BHO: Class - {54F9CEB7-9124-B80D-F0FF-1C372D740541} - C:\WINDOWS\system32\winky.dll
O2 - BHO: Class - {5594286E-2D6D-EE06-1F69-72D3E29EFE21} - C:\WINDOWS\system32\addmx32.dll
O2 - BHO: Class - {55BB1C72-35FF-4882-7685-FF7BB31538C8} - C:\WINDOWS\netxj32.dll
O2 - BHO: Class - {55DEE593-7909-3450-F015-41F3C20541E8} - C:\WINDOWS\ntgv.dll
O2 - BHO: Class - {55E10E2E-7E7D-3929-EE5C-AF9DB4D7AF9F} - C:\WINDOWS\apimh32.dll
O2 - BHO: Class - {55E88D7F-D520-83F4-F3DE-0FC426D01C39} - C:\WINDOWS\sysbu.dll
O2 - BHO: Class - {5658F52F-8D6F-1513-6EDC-56AA6C8F8F76} - C:\WINDOWS\system32\ipmi32.dll
O2 - BHO: Class - {56602600-9335-D10F-A0C5-C6602AA24FD3} - C:\WINDOWS\netdw.dll
O2 - BHO: Class - {58424828-3F1E-F0E7-AA14-833DD569B7CD} - C:\WINDOWS\system32\d3tt.dll
O2 - BHO: Class - {5924C00A-80E3-71E7-FA17-AEE58A1B0A00} - C:\WINDOWS\appha.dll
O2 - BHO: Class - {5932D6CD-5850-EB9A-AF22-5C40F8C3A50A} - C:\WINDOWS\system32\sdkkc32.dll
O2 - BHO: Class - {59651396-0625-EB6F-C7FA-344D74D7AF44} - C:\WINDOWS\winsz.dll (file missing)
O2 - BHO: Class - {5995C47D-F9B6-0A92-9DDA-87369B5A49CE} - C:\WINDOWS\system32\syslm.dll
O2 - BHO: Class - {5ABA4630-77B6-3691-363B-47DBC9FA6B2E} - C:\WINDOWS\system32\javadh.dll
O2 - BHO: Class - {5AEC6D87-81A5-CABA-02D9-FCDF82279EFC} - C:\WINDOWS\system32\mssp32.dll
O2 - BHO: Class - {5B7E29C1-C990-63B4-2875-7DB1F01452E5} - C:\WINDOWS\system32\netkj32.dll
O2 - BHO: Class - {5CD71DC4-F3DB-2684-1DD2-B8F55F150CDE} - C:\WINDOWS\system32\ipmq32.dll
O2 - BHO: Class - {5E4F3BA8-8431-6734-64CD-822C3E86697B} - C:\WINDOWS\crsk32.dll
O2 - BHO: Class - {5E9652E0-BFA3-B81B-DA74-09BF6CC428A7} - C:\WINDOWS\crnr.dll
O2 - BHO: Class - {5F4C15AC-0058-5C3E-822D-742B4125A084} - C:\WINDOWS\apprf32.dll
O2 - BHO: Class - {6005F7C5-A8A0-7CE7-5648-4CAE5894B1C4} - C:\WINDOWS\system32\sdkmy.dll
O2 - BHO: Class - {61962599-064B-C5A8-AF52-14758C8A1676} - C:\WINDOWS\system32\d3ws32.dll
O2 - BHO: Class - {61AF1D4C-8C61-9D8F-CC6D-B83A1702785E} - C:\WINDOWS\mfcbj32.dll (file missing)
O2 - BHO: Class - {62270B63-C419-D349-6785-7CD81C932CAF} - C:\WINDOWS\system32\netcn.dll (file missing)
O2 - BHO: Class - {62350910-D993-5399-34EC-C432D30F02D6} - C:\WINDOWS\javayd32.dll
O2 - BHO: Class - {625A227C-8F17-DBE9-FC96-11C4EB6EC178} - C:\WINDOWS\sdkvn32.dll
O2 - BHO: Class - {63ABAC80-13DC-DEB9-8A3C-00405AA15E8D} - C:\WINDOWS\winrr32.dll
O2 - BHO: Class - {6477E0AE-C44A-D3CD-6823-CC6538DFBFEE} - C:\WINDOWS\iela.dll
O2 - BHO: Class - {64D60651-F042-81BC-FF49-F291F6A8EAF2} - C:\WINDOWS\system32\sdklb.dll
O2 - BHO: Class - {655E410A-DEC2-F00A-61F5-F4B2C0F1BA9B} - C:\WINDOWS\d3kk32.dll
O2 - BHO: Class - {66260056-2148-6DE9-3455-29A729B353AC} - C:\WINDOWS\system32\ntzg.dll
O2 - BHO: Class - {66D794D9-8036-58BC-9B54-5EC422966E07} - C:\WINDOWS\ipeq.dll
O2 - BHO: Class - {675AF256-41F8-4BD4-7DEE-B1C88DEE276E} - C:\WINDOWS\netvm.dll
O2 - BHO: Class - {677086CA-24F5-3690-6102-3E6569E44D23} - C:\WINDOWS\sdkaf32.dll
O2 - BHO: Class - {677F1711-9252-F24B-4D54-8BE119CD9837} - C:\WINDOWS\apigh.dll
O2 - BHO: Class - {67878067-8C35-4F5D-4D85-1A13C5E41DE1} - C:\WINDOWS\system32\ipkx32.dll
O2 - BHO: Class - {6818C993-D3C4-9CB8-5FF2-04EAC7FEB4D4} - C:\WINDOWS\sysqx.dll
O2 - BHO: Class - {6B2B1D4A-827F-5433-DF52-88CA090883DD} - C:\WINDOWS\system32\d3gf32.dll
O2 - BHO: Class - {6B34286B-B67D-090A-9D75-B5711AF1EDC8} - C:\WINDOWS\system32\apinv.dll
O2 - BHO: Class - {6C7405AE-7CE7-A0CE-827C-F77DFA449D8D} - C:\WINDOWS\system32\appua32.dll
O2 - BHO: (no name) - {6CA3DEF1-F477-8CA2-64FD-B558A4257B4A} - (no file)
O2 - BHO: Class - {6CC375DD-7113-96F5-02B0-46C88EF1D0F9} - C:\WINDOWS\d3bn.dll
O2 - BHO: Class - {6E088D4B-521B-1676-CDD6-EC121DD3C210} - C:\WINDOWS\addzk32.dll
O2 - BHO: Class - {6E904118-91B8-3F31-2ED7-1F02C7E6CF6E} - C:\WINDOWS\system32\iplw32.dll
O2 - BHO: Class - {6E90692E-55AC-1995-F69B-76F46F229340} - C:\WINDOWS\javach32.dll
O2 - BHO: Class - {6EEA3F5F-272E-64B0-0D54-07AC8C402BD1} - C:\WINDOWS\mfczq32.dll
O2 - BHO: Class - {7090347C-8C6B-D01E-EF10-8D29EF9542AA} - C:\WINDOWS\system32\mfcdv32.dll (file missing)
O2 - BHO: Class - {710D4788-B064-A3C4-EC29-A9E67ABEF953} - C:\WINDOWS\system32\ipgi32.dll
O2 - BHO: Class - {72064D7B-2B02-5D8E-61BB-3B48F255B6BB} - C:\WINDOWS\appnx32.dll
O2 - BHO: Class - {72A41C97-ED9F-B798-B77B-BBF798A3BC19} - C:\WINDOWS\sysbz32.dll
O2 - BHO: Class - {72A9B624-8C5D-2A66-F77F-2A9004EE69D5} - C:\WINDOWS\system32\addlm.dll
O2 - BHO: Class - {73A6D522-1A82-2562-0934-AC8B9AAFE7CD} - C:\WINDOWS\atllw.dll
O2 - BHO: Class - {74325928-F826-D0FB-6353-6D46D5064E50} - C:\WINDOWS\apipf.dll
O2 - BHO: Class - {744A16C6-2CBC-9842-0B28-DA72A989C3AB} - C:\WINDOWS\system32\sdklm.dll
O2 - BHO: Class - {75877E2E-FCC5-29D8-75DB-DF6BCC96E791} - C:\WINDOWS\system32\appfu32.dll
O2 - BHO: Class - {75C24E0C-0403-C210-CD2D-6A22C0B4D482} - C:\WINDOWS\mfcfw32.dll
O2 - BHO: Class - {75DB1C5D-4338-B2DA-7E2E-486E23737320} - C:\WINDOWS\system32\crmb.dll
O2 - BHO: Class - {7646BE06-290C-EE4C-F003-E41039CFEDB4} - C:\WINDOWS\system32\crzz.dll
O2 - BHO: Class - {7716D7E8-A15F-BA5D-A479-92B3FEBB1DF4} - C:\WINDOWS\javasa32.dll
O2 - BHO: Class - {77CE4EAC-713B-2777-76DD-F824EFF9CC74} - C:\WINDOWS\system32\d3jf.dll
O2 - BHO: Class - {7897E57C-2EB1-E8C5-4D9C-C227B55C1142} - C:\WINDOWS\system32\msig32.dll
O2 - BHO: Class - {78F80350-DF77-499E-4B59-72E1FF551449} - C:\WINDOWS\system32\ieve32.dll
O2 - BHO: Class - {7AADB064-A5E8-89CE-8C2D-97FBBFCEDB99} - C:\WINDOWS\system32\sdkar.dll
O2 - BHO: Class - {7AF455B5-7118-C5BB-0C06-7A7D92C93E2B} - C:\WINDOWS\system32\atlgs.dll
O2 - BHO: Class - {7B79D3C0-5BA6-4760-51E7-D201FEA013C7} - C:\WINDOWS\system32\javaae32.dll
O2 - BHO: Class - {7C25DF9E-175A-AEBC-1715-65139942B8A6} - C:\WINDOWS\msmq.dll
O2 - BHO: Class - {7D492E22-3773-8826-65FC-BCDE3BE460F9} - C:\WINDOWS\system32\sysbj32.dll
O2 - BHO: Class - {7DBD6986-1C5E-5F61-5CDC-F5402DB34848} - C:\WINDOWS\mfcdm32.dll
O2 - BHO: Class - {7E118BD3-544A-455F-07DD-AACFDEAC5940} - C:\WINDOWS\addel.dll
O2 - BHO: Class - {7E519B7D-60F7-36E0-6009-671EAD1F7C44} - C:\WINDOWS\sdkqb.dll
O2 - BHO: Class - {7E7E72F9-7687-73B0-2ABD-EB899CF7791E} - C:\WINDOWS\system32\iesa32.dll
O2 - BHO: Class - {7F1738DF-16B2-2588-2CDC-480A65E50CC6} - C:\WINDOWS\system32\d3bm.dll
O2 - BHO: Class - {7FD19601-50AB-2F2B-5D99-C8FA44F668F7} - C:\WINDOWS\winfj.dll
O2 - BHO: Class - {7FE009E1-5676-A21F-D404-12EFF6027821} - C:\WINDOWS\system32\atlnk32.dll
O2 - BHO: Class - {80C24F71-4497-B288-8A8F-E71543C5213D} - C:\WINDOWS\system32\winvd32.dll
O2 - BHO: Class - {81A766F7-5B7F-5B9C-35A8-F8D0FC44EE64} - C:\WINDOWS\system32\winui.dll
O2 - BHO: Class - {81C4026E-2E5E-88DC-7B26-44B223181EC2} - C:\WINDOWS\ntrm32.dll
O2 - BHO: Class - {823507E9-FEB6-B4CA-3BCA-3BA2CBA8F265} - C:\WINDOWS\d3hh.dll
O2 - BHO: Class - {824CB85E-8849-F5FF-50D8-97E69A69E394} - C:\WINDOWS\addex.dll
O2 - BHO: Class - {8349086E-3F47-DF2F-515E-324A161E8B39} - C:\WINDOWS\apikl32.dll (file missing)
O2 - BHO: Class - {83ADA2D7-30D9-F180-8B07-61C750D80457} - C:\WINDOWS\atlsj.dll
O2 - BHO: Class - {83BA990C-FF7A-EBA6-BCDB-2AA1BE12933A} - C:\WINDOWS\mfcov.dll
O2 - BHO: Class - {84907F00-CC50-DEC5-83AF-69792CE6474B} - C:\WINDOWS\system32\javacc.dll
O2 - BHO: Class - {84908E0A-1A6E-B249-3546-1EF2878BD854} - C:\WINDOWS\system32\ntsm32.dll
O2 - BHO: Class - {8499E75E-1EBB-BCDC-0322-32C871231766} - C:\WINDOWS\msgn.dll
O2 - BHO: Class - {849D9EFE-5985-D9B1-9563-EB64B2A8D533} - C:\WINDOWS\system32\ipfs32.dll
O2 - BHO: Class - {849E652D-E279-49D1-44C6-6C7123362280} - C:\WINDOWS\d3pj32.dll
O2 - BHO: Class - {852FA20A-9E12-6825-3E86-D9C0B1C1184B} - C:\WINDOWS\system32\adduu32.dll
O2 - BHO: Class - {8605E933-BF9A-38BC-F3EC-5B9BFA9CFEB4} - C:\WINDOWS\system32\javaks.dll
O2 - BHO: Class - {871E5A19-66EB-CF29-CC81-77FC95375D97} - C:\WINDOWS\javakx32.dll
O2 - BHO: Class - {87346316-FD54-90B7-9E98-0C1458EE2CCE} - C:\WINDOWS\system32\nthi32.dll
O2 - BHO: Class - {88C6205F-2630-39C2-A423-8DF6C5DBE0B8} - C:\WINDOWS\system32\mfcrd32.dll
O2 - BHO: Class - {8A457F99-ED79-A514-B791-FCEC37E50B28} - C:\WINDOWS\system32\netvo.dll
O2 - BHO: Class - {8A5F61F8-BA5C-CA0A-1516-9ABFBA5DB260} - C:\WINDOWS\iezh.dll
O2 - BHO: Class - {8A681D30-1DC5-A013-89FD-F3EB92CDC86A} - C:\WINDOWS\d3rz.dll
O2 - BHO: Class - {8A983D27-5406-E5E8-A669-1D48F4789630} - C:\WINDOWS\system32\ipmj.dll
O2 - BHO: Class - {8C4D260B-1E41-DA14-F55E-71DD630C18DD} - C:\WINDOWS\addpy32.dll
O2 - BHO: Class - {8C515E10-8EE5-F0DB-2428-05DEDBCC6A67} - C:\WINDOWS\system32\mfcat.dll
O2 - BHO: Class - {8D8816A5-8F3C-8F53-F774-122B510AAF1A} - C:\WINDOWS\system32\crje.dll
O2 - BHO: Class - {8DD0E093-F203-A226-34B6-803644787EFF} - C:\WINDOWS\addyr32.dll
O2 - BHO: Class - {8E722B1A-DD9F-FE3C-D97A-E985E7F1F539} - C:\WINDOWS\system32\ntzj.dll
O2 - BHO: Class - {8E95A0B5-9715-E36B-84D9-2E0BF4227E92} - C:\WINDOWS\system32\apptk.dll
O2 - BHO: Class - {8EDB05B3-5843-24CB-46FB-6FA177E65713} - C:\WINDOWS\ntph32.dll
O2 - BHO: Class - {8F1CBE3D-FED7-E0D7-0684-AA234F6A116D} - C:\WINDOWS\d3mh32.dll
O2 - BHO: Class - {8F3F86E9-61D5-FA76-4B27-E8BB6258BB1C} - C:\WINDOWS\netvk.dll
O2 - BHO: Class - {8F6D58EB-15A7-77E6-8F75-0C0FC6A733D0} - C:\WINDOWS\sysyz32.dll
O2 - BHO: Class - {905D0572-30D8-CE8A-C89C-B2935DF9B94E} - C:\WINDOWS\netsb32.dll
O2 - BHO: Class - {908C94A7-18BA-B64A-8430-A47DE5203985} - C:\WINDOWS\ienb32.dll (file missing)
O2 - BHO: Class - {9101E79D-A1A7-196F-75D9-D469880131A5} - C:\WINDOWS\netjf32.dll
O2 - BHO: Class - {913DFA36-9040-F4DA-2372-454F96C8DF8B} - C:\WINDOWS\system32\winai.dll
O2 - BHO: Class - {91B9DCED-BEFA-589C-FF22-9FED124A44BF} - C:\WINDOWS\system32\mszg.dll
O2 - BHO: Class - {9261C8D3-6127-C95A-7B9B-F9E8EE283C42} - C:\WINDOWS\system32\netnz32.dll
O2 - BHO: Class - {92A646A2-9970-9A9B-8E5A-A960F05DC867} - C:\WINDOWS\system32\appkb32.dll
O2 - BHO: Class - {934022E3-4A67-7059-D032-46007A715210} - C:\WINDOWS\system32\mfces.dll
O2 - BHO: Class - {941F4C1B-94D6-2FA8-C8A4-08A44B60E2C0} - C:\WINDOWS\system32\nton.dll
O2 - BHO: Class - {94DC17FE-C8EB-ED86-AD62-742602CF4E5F} - C:\WINDOWS\system32\applg32.dll
O2 - BHO: Class - {94E2EE2C-7353-1954-E7DE-C8D3E86E1509} - C:\WINDOWS\ntww32.dll
O2 - BHO: Class - {94FBCA21-3E7A-0B62-0589-3697BABFD630} - C:\WINDOWS\system32\winsm.dll
O2 - BHO: Class - {95840D47-27DC-C6CE-C8C8-5A4ABCF3E7B3} - C:\WINDOWS\system32\apils32.dll
O2 - BHO: Class - {9633E7CB-D24D-2353-E8EC-FCF820661F42} - C:\WINDOWS\system32\ieea.dll
O2 - BHO: Class - {96483240-649C-B664-EDB0-AE8BB3236797} - C:\WINDOWS\system32\appzm.dll
O2 - BHO: Class - {964CF794-1C67-D49E-DDAB-F7AF533A370D} - C:\WINDOWS\system32\appln32.dll
O2 - BHO: Class - {97B85424-A22C-7E96-248F-F26E0CF0CBAC} - C:\WINDOWS\javarh32.dll
O2 - BHO: Class - {97D8529E-8426-8A47-0FBD-F6E161E949B6} - C:\WINDOWS\netai32.dll
O2 - BHO: Class - {988F33DF-14DB-9347-ED73-E0CDCC695426} - C:\WINDOWS\system32\appsb.dll
O2 - BHO: Class - {9AC961A7-A241-83F3-5E89-D226FCF7B906} - C:\WINDOWS\system32\winoq32.dll
O2 - BHO: Class - {9B293A2D-7FF9-2CB8-C184-A394A6D55F31} - C:\WINDOWS\system32\netst32.dll (file missing)
O2 - BHO: Class - {9B87744E-58C9-B795-F9B2-61D1E91F8259} - C:\WINDOWS\ieid.dll
O2 - BHO: Class - {9B9F7065-3DBA-97D8-063D-E91E91535C3C} - C:\WINDOWS\sdknf.dll
O2 - BHO: Class - {9CF887C3-763F-C8F6-5A0D-FD3AEC35E6F5} - C:\WINDOWS\mfcyh32.dll
O2 - BHO: Class - {9DCAC14C-5AED-ADB0-13C7-BC0FD19AC9B5} - C:\WINDOWS\system32\iezb32.dll
O2 - BHO: Class - {9DE1152E-E4F7-F166-2287-67A871E4C655} - C:\WINDOWS\sysic.dll
O2 - BHO: Class - {9E1C2098-D595-F524-F176-D0102B012320} - C:\WINDOWS\system32\mfcwe32.dll
O2 - BHO: Class - {9E394F5F-BB60-E2B1-4D4B-08C63F49D782} - C:\WINDOWS\apimc.dll
O2 - BHO: Class - {9E7072FF-CFC6-4623-8D56-A16A3B9CB9FF} - C:\WINDOWS\system32\atluz32.dll (file missing)
O2 - BHO: Class - {9FA24FCA-DF9E-A81C-0C1B-751A6D6EB4BC} - C:\WINDOWS\mfchf32.dll
O2 - BHO: Class - {9FA37FAE-BA76-0AE7-C44F-7E8C68FF3F53} - C:\WINDOWS\mfcvn.dll
O2 - BHO: Class - {9FBD4DA9-288F-1772-3153-38D7C0AB6F80} - C:\WINDOWS\windx.dll
O2 - BHO: Class - {A010DBE2-CC3D-9634-88DD-0AC37058D49B} - C:\WINDOWS\system32\netfq32.dll
O2 - BHO: Class - {A012ED6C-3ADD-6CAA-B9D6-A652CB9CDECF} - C:\WINDOWS\system32\msvw32.dll
O2 - BHO: Class - {A0143008-D257-1264-D990-7C6BFBD3F2AF} - C:\WINDOWS\mfcsh.dll
O2 - BHO: Class - {A0DA9541-3483-B908-8BFB-264C92CDA6FC} - C:\WINDOWS\netsk32.dll
O2 - BHO: Class - {A0FE8830-AF81-1E4D-051B-1A46041255D0} - C:\WINDOWS\system32\sysxk32.dll
O2 - BHO: Class - {A11485E6-E2A9-54F6-CB47-2085DA9C16A5} - C:\WINDOWS\sdkrw32.dll
O2 - BHO: Class - {A1448DC6-7406-B068-210E-D3F294FB1FA8} - C:\WINDOWS\ipmo.dll
O2 - BHO: Class - {A21E60F2-0648-C70B-6954-C8674404125D} - C:\WINDOWS\system32\winze32.dll
O2 - BHO: Class - {A25AC3EE-0FF3-BCF3-C5B5-FB29B4033A43} - C:\WINDOWS\ipnp32.dll
O2 - BHO: Class - {A458D028-4195-94A5-6C71-53D1EAF27E40} - C:\WINDOWS\sdkyv32.dll
O2 - BHO: Class - {A47B3009-DB35-BE2B-D263-A0DEE154022D} - C:\WINDOWS\system32\sysid32.dll
O2 - BHO: Class - {A49D539F-800A-625B-C5CE-D2591D02D833} - C:\WINDOWS\system32\sdkmn.dll
O2 - BHO: Class - {A50865E4-41F3-A6FC-9B1B-A396EC13BEFB} - C:\WINDOWS\sysic32.dll
O2 - BHO: Class - {A5910E94-A676-201D-0838-F81C7746194D} - C:\WINDOWS\atlwe32.dll
O2 - BHO: Class - {A63C74F8-0DBF-3CFE-27F1-83B90588A4CF} - C:\WINDOWS\appaw32.dll
O2 - BHO: Class - {A65F11A0-3D1B-37FD-F86D-9AB8607151F1} - C:\WINDOWS\winzp.dll
O2 - BHO: Class - {A6BCE966-302E-BD8D-25BA-12F8C7148266} - C:\WINDOWS\crwb32.dll
O2 - BHO: Class - {A6D3144C-5461-FC63-0E5D-0B292AB74B2C} - C:\WINDOWS\system32\javavl.dll (file missing)
O2 - BHO: Class - {A71E634B-75F1-24E4-7CC3-007C5CF57056} - C:\WINDOWS\system32\mfcdo32.dll
O2 - BHO: Class - {A72C0FFC-C2D7-47B8-44CD-DA44AC623334} - C:\WINDOWS\apivr32.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O2 - BHO: Class - {A771213E-BCAA-47E6-BF98-36D9049B7ADF} - C:\WINDOWS\iear.dll
O2 - BHO: Class - {A8DBFF81-041C-F290-213E-2D0CB852CF56} - C:\WINDOWS\iphm.dll
O2 - BHO: Class - {AA1830CA-C235-C43E-1196-378BC88F9E50} - C:\WINDOWS\system32\apixq.dll
O2 - BHO: Class - {AA45A478-C680-E0A8-7624-BA5DC8CAD089} - C:\WINDOWS\system32\netiu32.dll
O2 - BHO: Class - {AA53BA3B-9FED-4A5C-2B3E-69B936827B93} - C:\WINDOWS\system32\ipxx32.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Class - {AB05AE41-F1D5-D736-88F2-C487321270C0} - C:\WINDOWS\javasf32.dll
O2 - BHO: Class - {ABB4733C-5C98-847A-13BF-151F1BFB0248} - C:\WINDOWS\system32\sdkic.dll
O2 - BHO: Class - {AC2D8F55-4AC6-20AE-E0C0-B85403479114} - C:\WINDOWS\addzs.dll
O2 - BHO: Class - {AE86CDEC-E5CC-A9C0-3FF8-E29A81F518F3} - C:\WINDOWS\system32\d3hx32.dll
O2 - BHO: Class - {AEC47B7A-3BD5-1DD5-83D5-3166C98819AD} - C:\WINDOWS\crli.dll
O2 - BHO: Class - {AF191AE7-7C17-90DF-C75B-9CF1C956197B} - C:\WINDOWS\system32\javajf32.dll
O2 - BHO: Class - {AF513BCB-FD45-3EB4-7E8C-1DA3EE942C17} - C:\WINDOWS\system32\addef32.dll
O2 - BHO: Class - {AF5FDECD-1ED9-A1EC-D3B8-8211759346FD} - C:\WINDOWS\iern32.dll
O2 - BHO: Class - {B0440870-F319-4E13-4546-004E2FBCBE42} - C:\WINDOWS\netoh.dll
O2 - BHO: Class - {B0AF2369-9339-3CA1-4E3A-EDFA5E8A44A5} - C:\WINDOWS\mfccl.dll
O2 - BHO: Class - {B11BCDC9-1DD6-8BB6-933F-3824A67B8492} - C:\WINDOWS\apphk32.dll
O2 - BHO: Class - {B1B80C24-71F4-97BB-8828-8F5E71543C52} - C:\WINDOWS\msag32.dll
O2 - BHO: Class - {B2824D28-D3DB-8D1C-1BA9-485E5AE68207} - C:\WINDOWS\system32\crfy.dll
O2 - BHO: Class - {B37338CB-DC89-F6A6-BA8B-AEF4D740566E} - C:\WINDOWS\msvi32.dll
O2 - BHO: Class - {B4CC47DF-B9D9-5967-E16B-51A675B6C681} - C:\WINDOWS\addwy.dll
O2 - BHO: Class - {B51D9877-B89F-AF85-6260-D52F509B1F43} - C:\WINDOWS\winiz.dll
O2 - BHO: Class - {B61D1A6F-06D2-A47F-682F-7942AADD6BFE} - C:\WINDOWS\system32\netzo.dll
O2 - BHO: Class - {B7B83230-6E91-B3C1-619A-54550AB911E0} - C:\WINDOWS\system32\atlqg32.dll
O2 - BHO: Class - {B86C3428-381D-2AAC-C8BB-7DB32FA23372} - C:\WINDOWS\crcz.dll
O2 - BHO: Class - {B87618D3-880E-3E5D-C986-8A0E3397D821} - C:\WINDOWS\iemq.dll
O2 - BHO: Class - {B9A894DA-536D-899F-404E-D315F02B92FF} - C:\WINDOWS\system32\atlro.dll
O2 - BHO: Class - {B9CC80FA-3524-AB9A-7661-F6352FD5A3B9} - C:\WINDOWS\system32\syszg32.dll
O2 - BHO: Class - {BAD3F1F7-C3C1-2A5D-58B1-24EE2D8F0DCB} - C:\WINDOWS\apilx.dll
O2 - BHO: Class - {BB1C7E31-AB2A-B10E-AD1C-F84A89B87AC1} - C:\WINDOWS\crpz.dll
O2 - BHO: Class - {BB342936-121D-1767-EE5A-A8D0278457E2} - C:\WINDOWS\system32\atlyg32.dll
O2 - BHO: Class - {BCEB5FA0-2605-5E87-B49D-E1DE122F1C5C} - C:\WINDOWS\system32\apigv.dll
O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O2 - BHO: Class - {BF6B4D62-8D32-92D9-5406-BCE7C016CBE1} - C:\WINDOWS\sysje32.dll
O2 - BHO: Class - {C0B4A97D-E166-016C-9557-B10E1E67B6BD} - C:\WINDOWS\sdkyj.dll
O2 - BHO: Class - {C1A41FA6-75A9-208D-8DC5-1020AE6270B6} - C:\WINDOWS\d3fr.dll
O2 - BHO: Class - {C211B80E-58BE-0087-621D-A487AE79FA25} - C:\WINDOWS\atlut.dll
O2 - BHO: Class - {C47DCE95-4EB7-6D50-3A1A-3FC3A4633F4B} - C:\WINDOWS\sdkyx32.dll
O2 - BHO: Class - {C5E5AAF1-E338-ED8E-4D57-DC8FB2DE04CB} - C:\WINDOWS\netbp32.dll
O2 - BHO: Class - {C7585E5B-0F99-BA93-522E-508509F8DD58} - C:\WINDOWS\system32\ntlx32.dll
O2 - BHO: Class - {C7FBD51E-BEF2-5C0F-8979-E4567626007B} - C:\WINDOWS\system32\sysbk.dll
O2 - BHO: Class - {C85E67A9-989F-04F8-C3A3-71515DABD4E4} - C:\WINDOWS\d3yd32.dll
O2 - BHO: Class - {C8A5070C-8BA7-7132-C8F2-72E213B9FA46} - C:\WINDOWS\apptq32.dll
O2 - BHO: Class - {C8CD041C-091F-DF8F-452B-B10122D789B7} - C:\WINDOWS\system32\atloj.dll
O2 - BHO: Class - {C8EE100B-191A-611C-5766-34F50DE08954} - C:\WINDOWS\addjy32.dll
O2 - BHO: Class - {C9591F47-0E57-8A0E-DF99-903141A2D878} - C:\WINDOWS\atlwv32.dll
O2 - BHO: Class - {CA4A8F73-BA72-D97B-4C7D-0D52B4CF4542} - C:\WINDOWS\system32\winjo32.dll
O2 - BHO: Class - {CDE15148-1931-763A-4302-5413232D3E7F} - C:\WINDOWS\system32\d3rc32.dll
O2 - BHO: Class - {CE7F324C-E742-BF9B-37E5-A16FD8856B2C} - C:\WINDOWS\system32\atlfe32.dll
O2 - BHO: Class - {CE8BF10F-B86B-6B2A-DCC6-B629FA397B4B} - C:\WINDOWS\system32\appan.dll
O2 - BHO: Class - {CF0DB4C8-F2F7-EF01-C711-E29AA80B3432} - C:\WINDOWS\apigb.dll
O2 - BHO: Class - {CF61C703-8551-6D49-A399-05F1680E205B} - C:\WINDOWS\system32\crbf32.dll
O2 - BHO: Class - {D035AEB2-0A64-2FEB-9F1C-4FC9346EC0D8} - C:\WINDOWS\system32\atlvg.dll
O2 - BHO: Class - {D1DC71DB-95AD-1742-1B05-0653ADF80398} - C:\WINDOWS\sdkav.dll
O2 - BHO: Class - {D319ADC9-32F9-B509-BC94-C0B30CFDEB91} - C:\WINDOWS\mspt32.dll
O2 - BHO: Class - {D40716D3-6A48-428B-C2E2-B255F3EB8167} - C:\WINDOWS\system32\d3fy.dll
O2 - BHO: Class - {D4A6B035-FBFF-C0DC-E435-4B89825B905A} - C:\WINDOWS\netki.dll
O2 - BHO: Class - {D4FD337D-EA63-0119-06F4-B90ADB086B39} - C:\WINDOWS\system32\ntqg32.dll
O2 - BHO: Class - {D5070CD8-B904-C451-6A5E-A3F4A72B627C} - C:\WINDOWS\system32\netlx32.dll
O2 - BHO: Class - {D54F6CB9-5429-9A95-7B59-D291228E70B8} - C:\WINDOWS\apiyk.dll
O2 - BHO: Class - {D55EAE87-202A-3F55-F3F4-130CFFA66735} - C:\WINDOWS\system32\d3hl32.dll
O2 - BHO: Class - {D6A3B473-D7BB-A3AE-64E4-E0A97A92906E} - C:\WINDOWS\d3tn32.dll
O2 - BHO: Class - {D7630E68-79D7-6EF3-062A-A8D62572DA69} - C:\WINDOWS\system32\d3jl.dll
O2 - BHO: FlashTEnhancer Ext - {D7E588AB-A5D9-4422-B313-22A3470F9700} - c:\Program Files\Ftk\ftk.dll
O2 - BHO: Class - {DA3AC16D-881C-500D-EEA0-6EE3A2056627} - C:\WINDOWS\system32\sdkps.dll
O2 - BHO: Class - {DA63AADC-263D-5DCD-D789-D029C94F9577} - C:\WINDOWS\atltb32.dll
O2 - BHO: Class - {DA76B253-7C16-F3F6-830C-6EA93171DBCA} - C:\WINDOWS\syszf.dll
O2 - BHO: Class - {DB26F49F-94D2-381B-21DE-2CF4D74E0AC6} - C:\WINDOWS\ntwa32.dll
O2 - BHO: Class - {DB34B7F0-D490-5205-7CAE-49DCC4F42315} - C:\WINDOWS\ntgk32.dll
O2 - BHO: Class - {DBE0B89D-398A-FC9B-86C9-ADD7A232661F} - C:\WINDOWS\netvn.dll
O2 - BHO: Class - {DC869C0C-95DF-C720-46AF-785207DE174E} - C:\WINDOWS\system32\javafu32.dll
O2 - BHO: Class - {DCA47654-4A8F-4E15-3395-EB24B27E676B} - C:\WINDOWS\system32\sysmu32.dll
O2 - BHO: Class - {DD3F3226-DC4D-6D02-9FF9-D05AE7EAF09A} - C:\WINDOWS\system32\sdkrk32.dll
O2 - BHO: Class - {DD7AAD8D-6BF8-1F9C-07FA-6D0FFA385DD4} - C:\WINDOWS\mfckk.dll
O2 - BHO: Class - {DE0BAD64-90AC-210E-E63A-88EAC8F9B7E6} - C:\WINDOWS\atltu.dll
O2 - BHO: Class - {DE9FBD9F-312E-4200-618D-E3C65130FD10} - C:\WINDOWS\msxk.dll
O2 - BHO: Class - {DEC23984-57DA-169D-2ABC-89B52CDC9100} - C:\WINDOWS\mfcxb.dll
O2 - BHO: Class - {DEF18E94-FD1A-FEDD-6228-4316EC0E44CA} - C:\WINDOWS\system32\atlvo32.dll
O2 - BHO: Class - {DF3967B8-175A-2F1E-564B-0B5661F6FE16} - C:\WINDOWS\system32\apihm32.dll
O2 - BHO: Class - {DFE091D2-CAB9-B062-4548-24A5F62AEB7A} - C:\WINDOWS\atloz32.dll
O2 - BHO: Class - {E13962C2-96C6-E39D-08A3-1714DB5A46BC} - C:\WINDOWS\system32\ipvr.dll
O2 - BHO: Class - {E1F1A46E-FC39-10DA-D25A-38ED117064E0} - C:\WINDOWS\crda.dll
O2 - BHO: Class - {E2A72A5A-5904-FEE1-9CF2-43DE47B6318F} - C:\WINDOWS\system32\cryc32.dll
O2 - BHO: Class - {E2FB32C9-6AF0-5A3B-B9D4-A25BA620435F} - C:\WINDOWS\iexz.dll (file missing)
O2 - BHO: Class - {E4BEFDF9-74F5-B18C-CEA3-C73983BCD030} - C:\WINDOWS\addcm32.dll
O2 - BHO: Class - {E4F9FEE9-B60D-49F8-14A6-7B797DCDD6EC} - C:\WINDOWS\system32\addpj.dll
O2 - BHO: Class - {E558C92A-26ED-983A-0F8B-64C91ED05AE9} - C:\WINDOWS\javaek.dll
O2 - BHO: Class - {E5872A98-7703-9F71-70B4-ACA15181A0DB} - C:\WINDOWS\winky32.dll
O2 - BHO: Class - {E5B7DBD6-3CA0-92E2-8A81-039B6316C9C5} - C:\WINDOWS\system32\ipim.dll
O2 - BHO: Class - {E6A8DF75-9B34-005D-4060-2AB82D18D1F5} - C:\WINDOWS\ntmy32.dll
O2 - BHO: Class - {E7D81EED-B541-7599-12F8-80A7D852B313} - C:\WINDOWS\system32\d3jc.dll (file missing)
O2 - BHO: Class - {E7E1386A-12D3-8E93-955B-0A8C7D74C8E0} - C:\WINDOWS\apifh.dll
O2 - BHO: Class - {E7E8AFF4-E4BC-A5DC-C8BD-CC2CAEE96012} - C:\WINDOWS\system32\winge.dll
O2 - BHO: Class - {E8A45FAF-E3A1-7CF3-5D98-DD451512262B} - C:\WINDOWS\javaxz.dll
O2 - BHO: Class - {E8D323FD-1B81-072E-343D-60220ADF9C47} - C:\WINDOWS\sysql32.dll
O2 - BHO: Class - {EA0CB9FE-97B4-B061-6CB7-E205B89CDFA5} - C:\WINDOWS\netdk.dll
O2 - BHO: Class - {ECCFC5E3-D622-3E69-7884-827C0967AE85} - C:\WINDOWS\system32\iesd32.dll
O2 - BHO: Class - {ECDBD93B-30EF-D196-FC96-85492CDB4F6A} - C:\WINDOWS\javaig32.dll
O2 - BHO: Class - {ED81D60C-C426-844A-2785-263DC930B5C4} - C:\WINDOWS\system32\crms32.dll
O2 - BHO: Class - {ED83DE83-1A0E-2A73-D318-B4BD3272FB28} - C:\WINDOWS\system32\d3sj32.dll
O2 - BHO: Class - {EDB351A4-66C4-592C-4D6E-5DA4F46F6A5C} - C:\WINDOWS\atlgz.dll
O2 - BHO: Class - {EDCBB3FD-788F-D69A-C205-FAE58398A2D6} - C:\WINDOWS\ipia32.dll
O2 - BHO: Class - {EE13EB7D-EBCF-F6FC-0596-289AC46D563C} - C:\WINDOWS\system32\wingb32.dll
O2 - BHO: Class - {EF00589F-4853-36A5-3704-A19633EDC95B} - C:\WINDOWS\d3wa32.dll
O2 - BHO: Class - {EF4D6D55-7C19-7352-4266-61ED08A0B794} - C:\WINDOWS\system32\javajl.dll
O2 - BHO: Class - {EFBC97F2-4308-C0B5-9CAA-B092559036A9} - C:\WINDOWS\javano32.dll (file missing)
O2 - BHO: Class - {EFD32CB9-039B-2B11-A357-D6D56A398537} - C:\WINDOWS\apprb32.dll
O2 - BHO: Class - {F0E095A0-3EA9-8479-E393-7CB483F3BC0D} - C:\WINDOWS\system32\apikw.dll
O2 - BHO: Class - {F0FE5597-AC67-144F-6580-291D05E958EF} - C:\WINDOWS\netck.dll
O2 - BHO: Class - {F2257FBF-3A02-F7AF-973C-7C0DC972D230} - C:\WINDOWS\ipva32.dll
O2 - BHO: Class - {F322AB0B-621C-11A3-B1AE-7A7FC2B40350} - C:\WINDOWS\mfcnk.dll
O2 - BHO: Class - {F5432620-8C5D-E85E-7F03-D49E69AA6B34} - C:\WINDOWS\appmu.dll
O2 - BHO: Class - {F55C72C0-13B8-E0AC-E025-78ECF4B088BD} - C:\WINDOWS\system32\crmj.dll
O2 - BHO: Class - {F58F81C3-2AC2-0FE8-BD83-A5E72B3E58A3} - C:\WINDOWS\system32\ipwf.dll (file missing)
O2 - BHO: Class - {F6BF5152-744A-9568-35D0-475B9C0FE7CF} - C:\WINDOWS\crea32.dll
O2 - BHO: Class - {F6D3E9FC-BC7E-C0C3-8BA2-6C69C9FA68C2} - C:\WINDOWS\syslk.dll
O2 - BHO: Class - {F7AACFF8-E2DB-44D8-E2C9-F45FEFF56855} - C:\WINDOWS\system32\sysdb.dll
O2 - BHO: Class - {F8008B13-FD1D-9DAB-25AF-95EAB9FA0AC5} - C:\WINDOWS\javacx.dll
O2 - BHO: Class - {F8F3F015-ABD7-A149-66D2-1C1208C9602A} - C:\WINDOWS\system32\winpn32.dll
O2 - BHO: Class - {FA55FE92-9317-0E72-9BED-1211735C089D} - C:\WINDOWS\system32\appbh32.dll
O2 - BHO: Class - {FB04EF28-D55C-A95A-794F-75DA8F4D83AF} - C:\WINDOWS\system32\crjn32.dll
O2 - BHO: Class - {FCAD8DF8-B294-72DE-A4A9-6C69B0EE4164} - C:\WINDOWS\system32\d3ta32.dll
O2 - BHO: Class - {FD02D80E-B824-8992-2F9B-E9F9A96F5081} - C:\WINDOWS\netnu32.dll
O2 - BHO: Class - {FD291DF6-F430-F8C4-9DA5-F02AEF25DD27} - C:\WINDOWS\system32\atljk32.dll
O2 - BHO: Class - {FE9EE686-307A-32CC-5C50-38A169B88EAA} - C:\WINDOWS\system32\apiop32.dll
O2 - BHO: Class - {FEF28766-EC07-9CC6-3DD6-241C5C156710} - C:\WINDOWS\system32\mfcfe32.dll
O2 - BHO: Class - {FF731508-CD28-E0B0-3E85-0CF55FDE9FBA} - C:\WINDOWS\iemc32.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [AHQInit] C:\Program Files\Creative\SBLive\Program\AHQInit.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Dell|Alert] C:\Program Files\Dell\Support\Alert\bin\DAMon.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [tgcmdprovidersbc] "C:\Program Files\Support.com\bin\tgcmd.exe" /server /startmonitor /deaf /nosystray
O4 - HKLM\..\Run: [UTOEXECA] C:\WINDOWS\System32\UTOEXECA.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] c:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] c:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] c:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ntti.exe] C:\WINDOWS\system32\ntti.exe
O4 - HKLM\..\Run: [ntas32.exe] C:\WINDOWS\ntas32.exe
O4 - HKLM\..\Run: [d3ov.exe] C:\WINDOWS\d3ov.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [apieu.exe] C:\WINDOWS\system32\apieu.exe
O4 - HKLM\..\Run: [netbp32.exe] C:\WINDOWS\system32\netbp32.exe
O4 - HKLM\..\Run: [mswe.exe] C:\WINDOWS\mswe.exe
O4 - HKLM\..\Run: [javajl.exe] C:\WINDOWS\system32\javajl.exe
O4 - HKLM\..\Run: [msxy.exe] C:\WINDOWS\system32\msxy.exe
O4 - HKLM\..\Run: [addab32.exe] C:\WINDOWS\system32\addab32.exe
O4 - HKLM\..\Run: [winsh32.exe] C:\WINDOWS\system32\winsh32.exe
O4 - HKLM\..\Run: [addag32.exe] C:\WINDOWS\addag32.exe
O4 - HKLM\..\Run: [appec.exe] C:\WINDOWS\system32\appec.exe
O4 - HKLM\..\Run: [netmf32.exe] C:\WINDOWS\system32\netmf32.exe
O4 - HKLM\..\Run: [addrc.exe] C:\WINDOWS\system32\addrc.exe
O4 - HKLM\..\Run: [javazt.exe] C:\WINDOWS\system32\javazt.exe
O4 - HKLM\..\RunOnce: [tvs_re] c:\Program Files\Common Files\Java\tvs_re_inst.exe
O4 - HKLM\..\RunOnce: [sdksg.exe] C:\WINDOWS\sdksg.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [RealUpdater] C:\WINDOWS\System32\realupd.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HPAiODevice(hp officejet d series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MSN Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{0D2D447C-810A-4883-AE54-D6ADDF8AA471}: NameServer = 68.94.156.1 68.94.157.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8632866-FC35-4783-BADF-A2763514FBED}: NameServer = 151.164.11.201,151.164.1.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{0D2D447C-810A-4883-AE54-D6ADDF8AA471}: NameServer = 68.94.156.1 68.94.157.1
O19 - User stylesheet: C:\WINDOWS\default.css (file missing)
O19 - User stylesheet: C:\WINDOWS\default.css (file missing) (HKLM)
O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\sdkzd32.exe" /s (file missing)
O23 - Service: .NET Framework Service (.NET Connection Service) - Unknown owner - C:\WINDOWS\svchost.exe (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
O23 - Service: Network Event Provider (WksPatch) - Unknown owner - C:\WINDOWS\System32\drivers\svchost.exe (file missing)

Okay, I finally got the log again. Thanks for your help in this.


Logfile of HijackThis v1.99.1
Scan saved at 12:51:37 PM, on 10/31/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Dell\Support\Alert\bin\DAMon.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\addab32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
C:\WINDOWS\system32\hpoipm07.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOFXM07.exe
C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnindex.exe
C:\Program Files\MSN\MSNCoreFiles\msn6.exe
C:\Program Files\Messenger\msmsgs.exe
C:\New Downloads\HijackThis.exe
C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\MSNGather.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.coolwwwsearch.com
R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.coolwwwsearch.com
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://4-counter.com/?a=2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.coolwwwsearch.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\cerqt.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\cerqt.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\cerqt.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\cerqt.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\cerqt.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\cerqt.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.searchxp.com/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\cerqt.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://4-counter.com/?a=2
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://4-counter.com/?a=2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = res://mshp.dll/index.html#22776
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = http://www.coolwwwsearch.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://register.hp.com/servlet/WebReg.serv…CH_DT_YEAR=2002
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {006037F9-A004-367C-C7FB-9C0C131CA3DF} - C:\WINDOWS\system32\sdklw.dll (file missing)
O2 - BHO: Class - {00B7DCF4-9B37-BE2B-F3F7-6C8DFB0597F0} - C:\WINDOWS\mfcmm32.dll (file missing)
O2 - BHO: Class - {01761BE6-257C-4823-20B6-25AAC2D21D2B} - C:\WINDOWS\system32\msej32.dll
O2 - BHO: Class - {01822570-43E7-3BB4-310B-C31D3DD82409} - C:\WINDOWS\system32\d3sc.dll
O2 - BHO: Class - {01EBCE5B-9CE3-6F54-707D-17AF4A43EA22} - C:\WINDOWS\system32\ipqe32.dll
O2 - BHO: Class - {01F38BF9-C079-27AB-2851-83DB1DC6608D} - C:\WINDOWS\sysfm.dll
O2 - BHO: Class - {01F3905D-2042-3016-19C2-68533992D798} - C:\WINDOWS\applc.dll (file missing)
O2 - BHO: Class - {026DEDBF-DB64-0143-D3F3-260B28824F6B} - C:\WINDOWS\atlxy32.dll
O2 - BHO: Class - {0375DB0B-A138-898A-8565-1BE75E94375A} - C:\WINDOWS\system32\winxf32.dll
O2 - BHO: Class - {04E07DB4-970C-B6FD-F75A-B78964E091EE} - C:\WINDOWS\d3mb.dll (file missing)
O2 - BHO: Class - {0566E16E-2A99-5084-E121-5895960CC230} - C:\WINDOWS\system32\javayj32.dll (file missing)
O2 - BHO: Class - {05BABD52-18C7-C91F-46EE-6C99426E8823} - C:\WINDOWS\appnh.dll
O2 - BHO: Class - {05DF759A-7AB8-74F8-1007-762880E7156C} - C:\WINDOWS\atlds.dll (file missing)
O2 - BHO: Class - {0649E404-F195-50E5-2763-BAD0093516E2} - C:\WINDOWS\system32\ntcg.dll (file missing)
O2 - BHO: Class - {064B1E94-233A-F0CE-2010-BD60FCC5E5E9} - C:\WINDOWS\system32\appki.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {07B26288-C681-0065-E065-8201DD28A761} - C:\WINDOWS\system32\addwi.dll (file missing)
O2 - BHO: Class - {0837F1F9-622B-5659-8A22-FE873401EB7E} - C:\WINDOWS\msab.dll
O2 - BHO: Class - {091233C4-3803-DBCD-4580-0207D9AA1206} - C:\WINDOWS\system32\sdkzc.dll (file missing)
O2 - BHO: Class - {092CC6AA-538B-D8B7-4D6D-94C9785175B6} - C:\WINDOWS\system32\msvl32.dll (file missing)
O2 - BHO: Class - {093646C5-CDDB-2035-BD50-008A30E3EA96} - C:\WINDOWS\javaez32.dll (file missing)
O2 - BHO: Class - {0A8E24F7-CE32-202B-2C0C-B9CAC3C8D011} - C:\WINDOWS\system32\addpw32.dll (file missing)
O2 - BHO: Class - {0ABE12D5-39B7-5B3F-FC5E-5F27AA151543} - C:\WINDOWS\system32\crwk32.dll
O2 - BHO: Class - {0B542600-EEB9-32CA-7717-202BF8A261BF} - C:\WINDOWS\sdkxk32.dll (file missing)
O2 - BHO: Class - {0B8825BD-13B7-8ED8-FF77-5925341EC234} - C:\WINDOWS\system32\atlye32.dll
O2 - BHO: Class - {0BABB5A0-C721-8792-633A-C0AC20646EDE} - C:\WINDOWS\system32\sysrq32.dll
O2 - BHO: Class - {0C3C97D9-21C6-B33B-3429-B59624FD263F} - C:\WINDOWS\system32\msqb32.dll
O2 - BHO: Class - {0D477064-C0A0-92DC-477A-47E26D658ED6} - C:\WINDOWS\system32\javata32.dll
O2 - BHO: Class - {0E0ABE69-7345-8741-938E-5DCCA13C4284} - C:\WINDOWS\system32\d3zr32.dll
O2 - BHO: Class - {0E46226E-58AC-86F9-3C08-F58EAC8AF33D} - C:\WINDOWS\system32\msqn32.dll (file missing)
O2 - BHO: Class - {10E20286-B1F5-A99E-11C9-404DF4478A40} - C:\WINDOWS\crne32.dll
O2 - BHO: Class - {11BA77F1-683B-FBF7-B61E-4821BC229D98} - C:\WINDOWS\appta.dll
O2 - BHO: Class - {122B5708-D9CA-1F7A-8543-4C9929E7FA20} - C:\WINDOWS\system32\atlmd32.dll
O2 - BHO: Class - {12F72849-7A03-E428-0E12-0915087880FF} - C:\WINDOWS\system32\atlrt32.dll
O2 - BHO: Class - {133CF036-32FB-A97C-47AF-95AF3B4789A9} - C:\WINDOWS\system32\iehe32.dll (file missing)
O2 - BHO: Class - {1393F29F-3AD1-88F1-8182-7EBCC2149DC1} - C:\WINDOWS\mswr.dll (file missing)
O2 - BHO: Class - {13B86F72-7AF8-F8F0-286D-B850DB32EB1A} - C:\WINDOWS\system32\appgn32.dll (file missing)
O2 - BHO: Class - {14763206-F6A7-4D6F-D4D5-2E72E367ABB1} - C:\WINDOWS\system32\apisq32.dll
O2 - BHO: Class - {147910CC-E564-44A8-2EDA-3D0FCD283F61} - C:\WINDOWS\apixw32.dll
O2 - BHO: Class - {14882629-ECB5-DB2D-9FF8-D87930DD6A0A} - C:\WINDOWS\iefb32.dll
O2 - BHO: Class - {14913C42-FA8E-DBBC-21EA-6EB6CA2408BD} - C:\WINDOWS\sdkpt32.dll (file missing)
O2 - BHO: Class - {1492CE6A-29F9-0C0F-D7AF-AA3B90ABB4CC} - C:\WINDOWS\javaol.dll
O2 - BHO: Class - {15F6DF51-80DA-2FBF-3DB3-4BC956825654} - C:\WINDOWS\d3kp32.dll
O2 - BHO: Class - {1680DDAB-2D8D-102E-DCC5-5E6A6CF478B0} - C:\WINDOWS\system32\apiqm32.dll (file missing)
O2 - BHO: Class - {16A47DFB-0B7B-6D1B-05B7-210FEB83CF1C} - C:\WINDOWS\appck32.dll
O2 - BHO: Class - {16D199C7-F235-942C-E7CD-484759928237} - C:\WINDOWS\d3ht.dll
O2 - BHO: Class - {17286042-5FD2-617F-7359-43F199E3A259} - C:\WINDOWS\netxg32.dll (file missing)
O2 - BHO: Class - {178ED832-5662-AF21-DCB5-9071147C3AF6} - C:\WINDOWS\system32\apitj32.dll
O2 - BHO: Class - {18D7A970-9CE7-1258-A72B-98236D6C7FD4} - C:\WINDOWS\system32\appfw32.dll
O2 - BHO: Class - {18E90283-8D41-E8A3-D91F-233620346597} - C:\WINDOWS\appwk32.dll (file missing)
O2 - BHO: Class - {19619DBD-B4B4-FDF7-102F-F84B25374D57} - C:\WINDOWS\applj.dll (file missing)
O2 - BHO: Class - {1995DD3F-2E2B-50AB-908D-9CDED6E2D0CB} - C:\WINDOWS\ntym.dll (file missing)
O2 - BHO: Class - {19CF205A-66C8-D11C-227A-DF98204598D7} - C:\WINDOWS\crdn32.dll
O2 - BHO: Class - {19E67B9F-AA15-C7B4-F1B2-7123D9904006} - C:\WINDOWS\system32\atlcp32.dll (file missing)
O2 - BHO: Class - {1B9B3E63-535E-0E09-D64D-E94D45427DC8} - C:\WINDOWS\system32\atlnd32.dll
O2 - BHO: Class - {1C4EA8D2-2AB1-E54D-DA75-3B904D318D63} - C:\WINDOWS\d3sy32.dll
O2 - BHO: Class - {1D0338D3-94EB-474E-3BC7-CFEC18F8535A} - C:\WINDOWS\msio32.dll
O2 - BHO: Class - {1DFFBD4D-E8D2-D6F9-3733-F3C0A037E369} - C:\WINDOWS\d3zx32.dll (file missing)
O2 - BHO: Class - {1E6232D0-6D88-B285-E180-CDD5A3EB81A2} - C:\WINDOWS\crmt32.dll
O2 - BHO: Class - {1F013F6D-F4B5-29CA-4ECD-D48392AD32E5} - C:\WINDOWS\system32\appqg32.dll
O2 - BHO: Class - {2299D671-FC69-27B9-F4B4-AC5172A9786E} - C:\WINDOWS\system32\netht.dll
O2 - BHO: Class - {2402C3DD-91D9-B6F7-07F1-480D80055DEE} - C:\WINDOWS\msgc32.dll
O2 - BHO: Class - {24EC266E-58F6-C76B-ECDF-18E86769E35F} - C:\WINDOWS\sysnl32.dll
O2 - BHO: Class - {25B8166B-41ED-A81F-2F72-DBFD30EA2369} - C:\WINDOWS\system32\sysnr.dll
O2 - BHO: Class - {27CF61EF-9339-4F47-D27B-D56CF2005AF4} - C:\WINDOWS\sysuc32.dll
O2 - BHO: Class - {286D46CC-47AD-B067-BCF2-A81A4597B5C5} - C:\WINDOWS\system32\sysuw32.dll
O2 - BHO: Class - {28749852-4EA9-0662-286C-D43C4474D30C} - C:\WINDOWS\system32\ipxj.dll
O2 - BHO: Class - {2881C9AB-5FEC-0F19-DD77-C5AF6BA4405C} - C:\WINDOWS\addkh.dll
O2 - BHO: Class - {28FF0DAA-6EDD-259A-83C4-EADDF15D72AD} - C:\WINDOWS\system32\mfcat32.dll (file missing)
O2 - BHO: Class - {2904C8A0-7E43-DA46-4A69-2C91F33AB52B} - C:\WINDOWS\system32\ipox32.dll
O2 - BHO: Class - {29B4E47E-E6A8-7CE4-67AD-EBB35E41D7C2} - C:\WINDOWS\system32\winab32.dll (file missing)
O2 - BHO: Class - {29CE7156-29F7-AA3B-E5F1-8C74D009EE43} - C:\WINDOWS\netso.dll
O2 - BHO: Class - {29D85F04-92C0-EE38-6B32-B7DFD60147B3} - C:\WINDOWS\mfcwa32.dll
O2 - BHO: Class - {29FBD99D-346E-B31B-802B-EE460130FD4B} - C:\WINDOWS\sdkqx.dll
O2 - BHO: Class - {2A7363DF-C45A-5954-477D-0C78AF4A207C} - C:\WINDOWS\atlws.dll
O2 - BHO: Class - {2A8ECCE4-89B6-B77F-FFCD-1F38BF90C079} - C:\WINDOWS\system32\sdkbc.dll
O2 - BHO: Class - {2AA0D77D-C8A5-66CE-BC1B-8F3AAE9652B5} - C:\WINDOWS\addfb.dll
O2 - BHO: Class - {2CE963D1-FD1B-D1F3-A21C-F800645351B3} - C:\WINDOWS\system32\addee32.dll
O2 - BHO: Class - {2D171177-BAC9-E83B-13DC-458B4438F632} - C:\WINDOWS\system32\ieaa.dll
O2 - BHO: Class - {2D8F6DAA-6B2C-D070-B2CB-029A9926F9E4} - C:\WINDOWS\mstm32.dll
O2 - BHO: Class - {2E060147-D980-CDD2-64D5-AD18C7E395DE} - C:\WINDOWS\mfcjz32.dll
O2 - BHO: Class - {2E2CE93A-843E-84B0-D9C1-BD30FF3DCB52} - C:\WINDOWS\netqx32.dll (file missing)
O2 - BHO: Class - {2E5F315B-2BF7-8710-CBFD-C73C5966F9DE} - C:\WINDOWS\ipeh32.dll
O2 - BHO: Class - {2EF3F0B2-A80F-927D-4E42-A7707D6E0C09} - C:\WINDOWS\system32\appxj.dll (file missing)
O2 - BHO: Class - {2F71C161-9404-0890-EE38-E0DB36A3CA46} - C:\WINDOWS\javava.dll
O2 - BHO: Class - {301755A0-D9D5-A0CE-DB02-2D3AD027AB6D} - C:\WINDOWS\javaba.dll
O2 - BHO: Class - {319F29F9-90F7-A925-38EF-CE40F8C5F1A2} - C:\WINDOWS\ipst.dll
O2 - BHO: Class - {324C7B28-F8EB-05C3-47CF-680DDABE2D8D} - C:\WINDOWS\ipef.dll
O2 - BHO: Class - {32A6B01D-983B-8AF2-A16D-062280B34476} - C:\WINDOWS\system32\iemp32.dll
O2 - BHO: Class - {32B40341-3648-02F0-7D04-5B8F58EEBA63} - C:\WINDOWS\addlh32.dll
O2 - BHO: Class - {32D569A4-C81E-5AD0-D81A-CF8541A388F7} - C:\WINDOWS\javapm.dll
O2 - BHO: Class - {32D819AE-5E1D-5524-783B-C8993083716B} - C:\WINDOWS\wintj.dll (file missing)
O2 - BHO: Class - {32E37E11-CF60-E146-4938-59E0C449C490} - C:\WINDOWS\system32\appwv.dll
O2 - BHO: Class - {35FD01EC-5FEE-AA3D-945B-C7706321F21D} - C:\WINDOWS\system32\apiji32.dll
O2 - BHO: Class - {36699E38-4D60-4F3A-9603-C8C8F5D83008} - C:\WINDOWS\system32\appze32.dll
O2 - BHO: Class - {373A6C86-54F8-54F9-EFBE-8669AC078452} - C:\WINDOWS\system32\iets32.dll
O2 - BHO: Class - {38D7B7AF-8225-46C7-D3F6-14944118DEB3} - C:\WINDOWS\crpa.dll
O2 - BHO: Class - {391EC5E2-AE56-35F0-4073-D75EB9F1EDFB} - C:\WINDOWS\system32\mszm.dll
O2 - BHO: Class - {39367380-D3EB-FD47-F847-547A8C746346} - C:\WINDOWS\system32\atlrg.dll
O2 - BHO: Class - {39906038-FD4D-5AF3-013B-AA2D3C22CDCA} - C:\WINDOWS\sdkvj32.dll (file missing)
O2 - BHO: Class - {3A0FEB9A-F9A6-BE0C-538C-747C0E518EDF} - C:\WINDOWS\system32\sdkdl32.dll
O2 - BHO: Class - {3D2ACA16-3F1C-BF97-6524-0F7072E1E895} - C:\WINDOWS\netlh32.dll (file missing)
O2 - BHO: Class - {3DBE3B76-3521-BE11-EDF8-9D6FD61F6027} - C:\WINDOWS\apple32.dll
O2 - BHO: Class - {3E94D258-D83D-C2FC-C50B-C3BD6EF0FC9C} - C:\WINDOWS\system32\sdksv.dll
O2 - BHO: Class - {3F168309-460C-3C13-633D-8B2D81732BD0} - C:\WINDOWS\apifm.dll
O2 - BHO: Class - {3F30D91F-7DBB-7401-5EF9-CE65710FC433} - C:\WINDOWS\system32\appub32.dll (file missing)
O2 - BHO: Class - {3F508203-C722-9913-5AE6-D4D6D529B196} - C:\WINDOWS\system32\iema32.dll
O2 - BHO: Class - {4054D236-524F-3C5F-6F45-BD878D877CD7} - C:\WINDOWS\system32\d3mt.dll
O2 - BHO: Class - {41EADA53-9855-F5E4-A237-FA8F16993990} - C:\WINDOWS\system32\crwb32.dll
O2 - BHO: Class - {41EC47A7-58EC-65FA-71E8-99027BAC7F2B} - C:\WINDOWS\system32\sysag32.dll
O2 - BHO: Class - {41EE75E8-DF9A-E7DC-52D8-1F0CEABDABFA} - C:\WINDOWS\ipyc32.dll
O2 - BHO: Class - {42B564F0-7ADE-60B1-EF1C-6A894D5FEF56} - C:\WINDOWS\system32\apiyl32.dll (file missing)
O2 - BHO: Class - {43E8A121-AE71-CB7B-0B5A-F99FA66D6EDF} - C:\WINDOWS\system32\ipee32.dll
O2 - BHO: Class - {44BECE92-B7DC-E0A5-2FC8-910FBA5C21AE} - C:\WINDOWS\sdkjk32.dll
O2 - BHO: Class - {453BE369-8D1D-69D7-A6CB-D4BE3C9AC738} - C:\WINDOWS\sdkwi32.dll
O2 - BHO: Class - {456A6CEE-8316-4A72-DFA8-73971797E2FD} - C:\WINDOWS\ippk32.dll
O2 - BHO: Class - {45BF02B3-6F53-F516-CA0B-8B10C0085204} - C:\WINDOWS\apiea32.dll
O2 - BHO: Class - {461EF4B4-D11B-5B7D-49A7-C7710D453C73} - C:\WINDOWS\d3yt.dll
O2 - BHO: Class - {47E7FB99-9433-5DC9-C75A-A370C44C2593} - C:\WINDOWS\ntla32.dll
O2 - BHO: Class - {480B26C9-5493-2FD8-25D1-17A24B1257DA} - C:\WINDOWS\appbr32.dll
O2 - BHO: Class - {4B4A8F65-75F5-BF6A-F510-7AC13C50B331} - C:\WINDOWS\system32\sysmr32.dll
O2 - BHO: Class - {4C57E717-CFF7-3593-E15F-0DB069077A96} - C:\WINDOWS\crtw.dll
O2 - BHO: Class - {4CAAE67A-7A0C-9C0D-D734-A9B58ADA489C} - C:\WINDOWS\ntxw.dll
O2 - BHO: Class - {4CB8455B-D319-EAD4-A22C-23122C3C402C} - C:\WINDOWS\javava32.dll (file missing)
O2 - BHO: Class - {4CC1461A-CF26-C68C-F544-8A5FF56CE7DD} - C:\WINDOWS\system32\appgx.dll
O2 - BHO: Class - {4CC7119A-4ABC-8D35-FD7C-F27B7C371F4F} - C:\WINDOWS\ipnk32.dll
O2 - BHO: Class - {4CEBAA3A-44D2-D30D-92A7-62004F8D1F39} - C:\WINDOWS\mshf32.dll
O2 - BHO: Class - {4D0ED6BF-D64D-884B-351B-E924C175C0E1} - C:\WINDOWS\atlry32.dll
O2 - BHO: Class - {4D5086C8-1EDA-4232-0DD5-8A2FF9D9C966} - C:\WINDOWS\system32\mszp.dll (file missing)
O2 - BHO: Class - {4D84A68D-2093-98F0-D350-292ABF94B29E} - C:\WINDOWS\system32\wincv.dll
O2 - BHO: Class - {4D879257-AB7C-5850-7092-72B95EAF5750} - C:\WINDOWS\system32\crif.dll
O2 - BHO: Class - {4FBF9B37-2E69-9598-1E88-4F81BD77AAE8} - C:\WINDOWS\system32\d3xp32.dll
O2 - BHO: Class - {509B1F43-07D9-E337-F3E8-6E13D0066F6C} - C:\WINDOWS\system32\ntcg32.dll
O2 - BHO: Class - {509EE3A1-0DA3-E6F6-847A-4CAFDBB2C0DB} - C:\WINDOWS\d3fk32.dll (file missing)
O2 - BHO: Class - {50B7CF0C-8AE5-BB42-E622-CE649815FF71} - C:\WINDOWS\system32\atluw.dll
O2 - BHO: Class - {514CDFE1-5B4B-0907-2D78-0540364AC64B} - C:\WINDOWS\system32\atlyq32.dll
O2 - BHO: Class - {51E6232D-D6D8-0B28-FE18-2CDD5A3EB81A} - C:\WINDOWS\system32\appcc32.dll
O2 - BHO: Class - {51F3E69F-1686-3512-49E8-49B547E4E169} - C:\WINDOWS\system32\appnq32.dll
O2 - BHO: Class - {524102DB-A22C-9350-6565-DE17AF479294} - C:\WINDOWS\system32\netbu32.dll
O2 - BHO: Class - {52FEDAFD-7116-8034-52FF-C710EA25905B} - C:\WINDOWS\system32\atlmw32.dll
O2 - BHO: Class - {536A43E5-00CF-1DC7-7337-E4DF6100573B} - C:\WINDOWS\system32\d3yv.dll
O2 - BHO: Class - {538C9747-0E51-EDFD-1165-2CF2779ED78D} - C:\WINDOWS\system32\d3cv.dll
O2 - BHO: Class - {539322FC-A50C-270C-A3BD-3515AA26634A} - C:\WINDOWS\nettk.dll
O2 - BHO: Class - {5404BEF1-6D23-261E-D89E-5E7C213EAE7C} - C:\WINDOWS\system32\mfcob32.dll
O2 - BHO: Class - {544B7F26-ABCC-6632-0DB7-C12341FA8D26} - C:\WINDOWS\mfcco32.dll
O2 - BHO: Class - {544F8ECF-7661-CF47-2FD0-EA32255B9B7C} - C:\WINDOWS\system32\apidl.dll
O2 - BHO: Class - {5485EF8B-02AF-D770-F042-41C97146169F} - C:\WINDOWS\system32\ntfz.dll
O2 - BHO: Class - {54F9CEB7-9124-B80D-F0FF-1C372D740541} - C:\WINDOWS\system32\winky.dll
O2 - BHO: Class - {5594286E-2D6D-EE06-1F69-72D3E29EFE21} - C:\WINDOWS\system32\addmx32.dll
O2 - BHO: Class - {55BB1C72-35FF-4882-7685-FF7BB31538C8} - C:\WINDOWS\netxj32.dll
O2 - BHO: Class - {55DEE593-7909-3450-F015-41F3C20541E8} - C:\WINDOWS\ntgv.dll
O2 - BHO: Class - {55E10E2E-7E7D-3929-EE5C-AF9DB4D7AF9F} - C:\WINDOWS\apimh32.dll
O2 - BHO: Class - {55E88D7F-D520-83F4-F3DE-0FC426D01C39} - C:\WINDOWS\sysbu.dll
O2 - BHO: Class - {5658F52F-8D6F-1513-6EDC-56AA6C8F8F76} - C:\WINDOWS\system32\ipmi32.dll
O2 - BHO: Class - {56602600-9335-D10F-A0C5-C6602AA24FD3} - C:\WINDOWS\netdw.dll
O2 - BHO: Class - {58424828-3F1E-F0E7-AA14-833DD569B7CD} - C:\WINDOWS\system32\d3tt.dll
O2 - BHO: Class - {5924C00A-80E3-71E7-FA17-AEE58A1B0A00} - C:\WINDOWS\appha.dll
O2 - BHO: Class - {5932D6CD-5850-EB9A-AF22-5C40F8C3A50A} - C:\WINDOWS\system32\sdkkc32.dll
O2 - BHO: Class - {59651396-0625-EB6F-C7FA-344D74D7AF44} - C:\WINDOWS\winsz.dll (file missing)
O2 - BHO: Class - {5995C47D-F9B6-0A92-9DDA-87369B5A49CE} - C:\WINDOWS\system32\syslm.dll
O2 - BHO: Class - {5ABA4630-77B6-3691-363B-47DBC9FA6B2E} - C:\WINDOWS\system32\javadh.dll
O2 - BHO: Class - {5AEC6D87-81A5-CABA-02D9-FCDF82279EFC} - C:\WINDOWS\system32\mssp32.dll
O2 - BHO: Class - {5B7E29C1-C990-63B4-2875-7DB1F01452E5} - C:\WINDOWS\system32\netkj32.dll
O2 - BHO: Class - {5CD71DC4-F3DB-2684-1DD2-B8F55F150CDE} - C:\WINDOWS\system32\ipmq32.dll
O2 - BHO: Class - {5E4F3BA8-8431-6734-64CD-822C3E86697B} - C:\WINDOWS\crsk32.dll
O2 - BHO: Class - {5E9652E0-BFA3-B81B-DA74-09BF6CC428A7} - C:\WINDOWS\crnr.dll
O2 - BHO: Class - {5F4C15AC-0058-5C3E-822D-742B4125A084} - C:\WINDOWS\apprf32.dll
O2 - BHO: Class - {6005F7C5-A8A0-7CE7-5648-4CAE5894B1C4} - C:\WINDOWS\system32\sdkmy.dll
O2 - BHO: Class - {61962599-064B-C5A8-AF52-14758C8A1676} - C:\WINDOWS\system32\d3ws32.dll
O2 - BHO: Class - {61AF1D4C-8C61-9D8F-CC6D-B83A1702785E} - C:\WINDOWS\mfcbj32.dll (file missing)
O2 - BHO: Class - {62270B63-C419-D349-6785-7CD81C932CAF} - C:\WINDOWS\system32\netcn.dll (file missing)
O2 - BHO: Class - {62350910-D993-5399-34EC-C432D30F02D6} - C:\WINDOWS\javayd32.dll
O2 - BHO: Class - {625A227C-8F17-DBE9-FC96-11C4EB6EC178} - C:\WINDOWS\sdkvn32.dll
O2 - BHO: Class - {63ABAC80-13DC-DEB9-8A3C-00405AA15E8D} - C:\WINDOWS\winrr32.dll
O2 - BHO: Class - {6477E0AE-C44A-D3CD-6823-CC6538DFBFEE} - C:\WINDOWS\iela.dll
O2 - BHO: Class - {64D60651-F042-81BC-FF49-F291F6A8EAF2} - C:\WINDOWS\system32\sdklb.dll
O2 - BHO: Class - {655E410A-DEC2-F00A-61F5-F4B2C0F1BA9B} - C:\WINDOWS\d3kk32.dll
O2 - BHO: Class - {66260056-2148-6DE9-3455-29A729B353AC} - C:\WINDOWS\system32\ntzg.dll
O2 - BHO: Class - {66D794D9-8036-58BC-9B54-5EC422966E07} - C:\WINDOWS\ipeq.dll
O2 - BHO: Class - {675AF256-41F8-4BD4-7DEE-B1C88DEE276E} - C:\WINDOWS\netvm.dll (file missing)
O2 - BHO: Class - {677086CA-24F5-3690-6102-3E6569E44D23} - C:\WINDOWS\sdkaf32.dll (file missing)
O2 - BHO: Class - {677F1711-9252-F24B-4D54-8BE119CD9837} - C:\WINDOWS\apigh.dll
O2 - BHO: Class - {67878067-8C35-4F5D-4D85-1A13C5E41DE1} - C:\WINDOWS\system32\ipkx32.dll
O2 - BHO: Class - {6818C993-D3C4-9CB8-5FF2-04EAC7FEB4D4} - C:\WINDOWS\sysqx.dll
O2 - BHO: Class - {6B2B1D4A-827F-5433-DF52-88CA090883DD} - C:\WINDOWS\system32\d3gf32.dll
O2 - BHO: Class - {6B34286B-B67D-090A-9D75-B5711AF1EDC8} - C:\WINDOWS\system32\apinv.dll
O2 - BHO: Class - {6C7405AE-7CE7-A0CE-827C-F77DFA449D8D} - C:\WINDOWS\system32\appua32.dll
O2 - BHO: (no name) - {6CA3DEF1-F477-8CA2-64FD-B558A4257B4A} - (no file)
O2 - BHO: Class - {6CC375DD-7113-96F5-02B0-46C88EF1D0F9} - C:\WINDOWS\d3bn.dll
O2 - BHO: Class - {6E088D4B-521B-1676-CDD6-EC121DD3C210} - C:\WINDOWS\addzk32.dll
O2 - BHO: Class - {6E904118-91B8-3F31-2ED7-1F02C7E6CF6E} - C:\WINDOWS\system32\iplw32.dll
O2 - BHO: Class - {6E90692E-55AC-1995-F69B-76F46F229340} - C:\WINDOWS\javach32.dll
O2 - BHO: Class - {6EEA3F5F-272E-64B0-0D54-07AC8C402BD1} - C:\WINDOWS\mfczq32.dll
O2 - BHO: Class - {7090347C-8C6B-D01E-EF10-8D29EF9542AA} - C:\WINDOWS\system32\mfcdv32.dll (file missing)
O2 - BHO: Class - {710D4788-B064-A3C4-EC29-A9E67ABEF953} - C:\WINDOWS\system32\ipgi32.dll
O2 - BHO: Class - {72064D7B-2B02-5D8E-61BB-3B48F255B6BB} - C:\WINDOWS\appnx32.dll
O2 - BHO: Class - {72A41C97-ED9F-B798-B77B-BBF798A3BC19} - C:\WINDOWS\sysbz32.dll
O2 - BHO: Class - {72A9B624-8C5D-2A66-F77F-2A9004EE69D5} - C:\WINDOWS\system32\addlm.dll
O2 - BHO: Class - {73A6D522-1A82-2562-0934-AC8B9AAFE7CD} - C:\WINDOWS\atllw.dll
O2 - BHO: Class - {74325928-F826-D0FB-6353-6D46D5064E50} - C:\WINDOWS\apipf.dll
O2 - BHO: Class - {744A16C6-2CBC-9842-0B28-DA72A989C3AB} - C:\WINDOWS\system32\sdklm.dll
O2 - BHO: Class - {75877E2E-FCC5-29D8-75DB-DF6BCC96E791} - C:\WINDOWS\system32\appfu32.dll
O2 - BHO: Class - {75C24E0C-0403-C210-CD2D-6A22C0B4D482} - C:\WINDOWS\mfcfw32.dll
O2 - BHO: Class - {75DB1C5D-4338-B2DA-7E2E-486E23737320} - C:\WINDOWS\system32\crmb.dll
O2 - BHO: Class - {7646BE06-290C-EE4C-F003-E41039CFEDB4} - C:\WINDOWS\system32\crzz.dll (file missing)
O2 - BHO: Class - {7716D7E8-A15F-BA5D-A479-92B3FEBB1DF4} - C:\WINDOWS\javasa32.dll
O2 - BHO: Class - {77CE4EAC-713B-2777-76DD-F824EFF9CC74} - C:\WINDOWS\system32\d3jf.dll
O2 - BHO: Class - {7897E57C-2EB1-E8C5-4D9C-C227B55C1142} - C:\WINDOWS\system32\msig32.dll
O2 - BHO: Class - {78F80350-DF77-499E-4B59-72E1FF551449} - C:\WINDOWS\system32\ieve32.dll (file missing)
O2 - BHO: Class - {7AADB064-A5E8-89CE-8C2D-97FBBFCEDB99} - C:\WINDOWS\system32\sdkar.dll
O2 - BHO: Class - {7AF455B5-7118-C5BB-0C06-7A7D92C93E2B} - C:\WINDOWS\system32\atlgs.dll
O2 - BHO: Class - {7B79D3C0-5BA6-4760-51E7-D201FEA013C7} - C:\WINDOWS\system32\javaae32.dll
O2 - BHO: Class - {7C25DF9E-175A-AEBC-1715-65139942B8A6} - C:\WINDOWS\msmq.dll
O2 - BHO: Class - {7D492E22-3773-8826-65FC-BCDE3BE460F9} - C:\WINDOWS\system32\sysbj32.dll
O2 - BHO: Class - {7DBD6986-1C5E-5F61-5CDC-F5402DB34848} - C:\WINDOWS\mfcdm32.dll
O2 - BHO: Class - {7E118BD3-544A-455F-07DD-AACFDEAC5940} - C:\WINDOWS\addel.dll (file missing)
O2 - BHO: Class - {7E519B7D-60F7-36E0-6009-671EAD1F7C44} - C:\WINDOWS\sdkqb.dll
O2 - BHO: Class - {7E7E72F9-7687-73B0-2ABD-EB899CF7791E} - C:\WINDOWS\system32\iesa32.dll
O2 - BHO: Class - {7F1738DF-16B2-2588-2CDC-480A65E50CC6} - C:\WINDOWS\system32\d3bm.dll
O2 - BHO: Class - {7FD19601-50AB-2F2B-5D99-C8FA44F668F7} - C:\WINDOWS\winfj.dll
O2 - BHO: Class - {7FE009E1-5676-A21F-D404-12EFF6027821} - C:\WINDOWS\system32\atlnk32.dll
O2 - BHO: Class - {80C24F71-4497-B288-8A8F-E71543C5213D} - C:\WINDOWS\system32\winvd32.dll
O2 - BHO: Class - {81A766F7-5B7F-5B9C-35A8-F8D0FC44EE64} - C:\WINDOWS\system32\winui.dll
O2 - BHO: Class - {81C4026E-2E5E-88DC-7B26-44B223181EC2} - C:\WINDOWS\ntrm32.dll
O2 - BHO: Class - {823507E9-FEB6-B4CA-3BCA-3BA2CBA8F265} - C:\WINDOWS\d3hh.dll
O2 - BHO: Class - {824CB85E-8849-F5FF-50D8-97E69A69E394} - C:\WINDOWS\addex.dll (file missing)
O2 - BHO: Class - {8349086E-3F47-DF2F-515E-324A161E8B39} - C:\WINDOWS\apikl32.dll (file missing)
O2 - BHO: Class - {83ADA2D7-30D9-F180-8B07-61C750D80457} - C:\WINDOWS\atlsj.dll
O2 - BHO: Class - {83BA990C-FF7A-EBA6-BCDB-2AA1BE12933A} - C:\WINDOWS\mfcov.dll
O2 - BHO: Class - {84907F00-CC50-DEC5-83AF-69792CE6474B} - C:\WINDOWS\system32\javacc.dll
O2 - BHO: Class - {84908E0A-1A6E-B249-3546-1EF2878BD854} - C:\WINDOWS\system32\ntsm32.dll
O2 - BHO: Class - {8499E75E-1EBB-BCDC-0322-32C871231766} - C:\WINDOWS\msgn.dll
O2 - BHO: Class - {849D9EFE-5985-D9B1-9563-EB64B2A8D533} - C:\WINDOWS\system32\ipfs32.dll
O2 - BHO: Class - {849E652D-E279-49D1-44C6-6C7123362280} - C:\WINDOWS\d3pj32.dll
O2 - BHO: Class - {852FA20A-9E12-6825-3E86-D9C0B1C1184B} - C:\WINDOWS\system32\adduu32.dll (file missing)
O2 - BHO: Class - {8605E933-BF9A-38BC-F3EC-5B9BFA9CFEB4} - C:\WINDOWS\system32\javaks.dll
O2 - BHO: Class - {871E5A19-66EB-CF29-CC81-77FC95375D97} - C:\WINDOWS\javakx32.dll (file missing)
O2 - BHO: Class - {87346316-FD54-90B7-9E98-0C1458EE2CCE} - C:\WINDOWS\system32\nthi32.dll
O2 - BHO: Class - {88C6205F-2630-39C2-A423-8DF6C5DBE0B8} - C:\WINDOWS\system32\mfcrd32.dll
O2 - BHO: Class - {8A457F99-ED79-A514-B791-FCEC37E50B28} - C:\WINDOWS\system32\netvo.dll
O2 - BHO: Class - {8A5F61F8-BA5C-CA0A-1516-9ABFBA5DB260} - C:\WINDOWS\iezh.dll
O2 - BHO: Class - {8A681D30-1DC5-A013-89FD-F3EB92CDC86A} - C:\WINDOWS\d3rz.dll
O2 - BHO: Class - {8A983D27-5406-E5E8-A669-1D48F4789630} - C:\WINDOWS\system32\ipmj.dll
O2 - BHO: Class - {8C4D260B-1E41-DA14-F55E-71DD630C18DD} - C:\WINDOWS\addpy32.dll
O2 - BHO: Class - {8C515E10-8EE5-F0DB-2428-05DEDBCC6A67} - C:\WINDOWS\system32\mfcat.dll
O2 - BHO: Class - {8D8816A5-8F3C-8F53-F774-122B510AAF1A} - C:\WINDOWS\system32\crje.dll
O2 - BHO: Class - {8DD0E093-F203-A226-34B6-803644787EFF} - C:\WINDOWS\addyr32.dll
O2 - BHO: Class - {8E722B1A-DD9F-FE3C-D97A-E985E7F1F539} - C:\WINDOWS\system32\ntzj.dll (file missing)
O2 - BHO: Class - {8E95A0B5-9715-E36B-84D9-2E0BF4227E92} - C:\WINDOWS\system32\apptk.dll (file missing)
O2 - BHO: Class - {8EDB05B3-5843-24CB-46FB-6FA177E65713} - C:\WINDOWS\ntph32.dll (file missing)
O2 - BHO: Class - {8F1CBE3D-FED7-E0D7-0684-AA234F6A116D} - C:\WINDOWS\d3mh32.dll
O2 - BHO: Class - {8F3F86E9-61D5-FA76-4B27-E8BB6258BB1C} - C:\WINDOWS\netvk.dll
O2 - BHO: Class - {8F6D58EB-15A7-77E6-8F75-0C0FC6A733D0} - C:\WINDOWS\sysyz32.dll
O2 - BHO: Class - {905D0572-30D8-CE8A-C89C-B2935DF9B94E} - C:\WINDOWS\netsb32.dll
O2 - BHO: Class - {908C94A7-18BA-B64A-8430-A47DE5203985} - C:\WINDOWS\ienb32.dll (file missing)
O2 - BHO: Class - {9101E79D-A1A7-196F-75D9-D469880131A5} - C:\WINDOWS\netjf32.dll
O2 - BHO: Class - {913DFA36-9040-F4DA-2372-454F96C8DF8B} - C:\WINDOWS\system32\winai.dll
O2 - BHO: Class - {91B9DCED-BEFA-589C-FF22-9FED124A44BF} - C:\WINDOWS\system32\mszg.dll
O2 - BHO: Class - {9261C8D3-6127-C95A-7B9B-F9E8EE283C42} - C:\WINDOWS\system32\netnz32.dll
O2 - BHO: Class - {92A646A2-9970-9A9B-8E5A-A960F05DC867} - C:\WINDOWS\system32\appkb32.dll
O2 - BHO: Class - {934022E3-4A67-7059-D032-46007A715210} - C:\WINDOWS\system32\mfces.dll (file missing)
O2 - BHO: Class - {941F4C1B-94D6-2FA8-C8A4-08A44B60E2C0} - C:\WINDOWS\system32\nton.dll
O2 - BHO: Class - {94DC17FE-C8EB-ED86-AD62-742602CF4E5F} - C:\WINDOWS\system32\applg32.dll
O2 - BHO: Class - {94E2EE2C-7353-1954-E7DE-C8D3E86E1509} - C:\WINDOWS\ntww32.dll
O2 - BHO: Class - {94FBCA21-3E7A-0B62-0589-3697BABFD630} - C:\WINDOWS\system32\winsm.dll
O2 - BHO: Class - {9571F3B6-7065-9679-8B28-911A24D61A15} - C:\WINDOWS\javaep32.dll
O2 - BHO: Class - {95840D47-27DC-C6CE-C8C8-5A4ABCF3E7B3} - C:\WINDOWS\system32\apils32.dll (file missing)
O2 - BHO: Class - {9633E7CB-D24D-2353-E8EC-FCF820661F42} - C:\WINDOWS\system32\ieea.dll
O2 - BHO: Class - {96483240-649C-B664-EDB0-AE8BB3236797} - C:\WINDOWS\system32\appzm.dll
O2 - BHO: Class - {964CF794-1C67-D49E-DDAB-F7AF533A370D} - C:\WINDOWS\system32\appln32.dll
O2 - BHO: Class - {97B85424-A22C-7E96-248F-F26E0CF0CBAC} - C:\WINDOWS\javarh32.dll (file missing)
O2 - BHO: Class - {97D8529E-8426-8A47-0FBD-F6E161E949B6} - C:\WINDOWS\netai32.dll
O2 - BHO: Class - {988F33DF-14DB-9347-ED73-E0CDCC695426} - C:\WINDOWS\system32\appsb.dll (file missing)
O2 - BHO: Class - {9AC961A7-A241-83F3-5E89-D226FCF7B906} - C:\WINDOWS\system32\winoq32.dll
O2 - BHO: Class - {9B293A2D-7FF9-2CB8-C184-A394A6D55F31} - C:\WINDOWS\system32\netst32.dll (file missing)
O2 - BHO: Class - {9B87744E-58C9-B795-F9B2-61D1E91F8259} - C:\WINDOWS\ieid.dll (file missing)
O2 - BHO: Class - {9B9F7065-3DBA-97D8-063D-E91E91535C3C} - C:\WINDOWS\sdknf.dll
O2 - BHO: Class - {9CF887C3-763F-C8F6-5A0D-FD3AEC35E6F5} - C:\WINDOWS\mfcyh32.dll (file missing)
O2 - BHO: Class - {9DCAC14C-5AED-ADB0-13C7-BC0FD19AC9B5} - C:\WINDOWS\system32\iezb32.dll
O2 - BHO: Class - {9DE1152E-E4F7-F166-2287-67A871E4C655} - C:\WINDOWS\sysic.dll
O2 - BHO: Class - {9E1C2098-D595-F524-F176-D0102B012320} - C:\WINDOWS\system32\mfcwe32.dll
O2 - BHO: Class - {9E394F5F-BB60-E2B1-4D4B-08C63F49D782} - C:\WINDOWS\apimc.dll
O2 - BHO: Class - {9E7072FF-CFC6-4623-8D56-A16A3B9CB9FF} - C:\WINDOWS\system32\atluz32.dll (file missing)
O2 - BHO: Class - {9FA24FCA-DF9E-A81C-0C1B-751A6D6EB4BC} - C:\WINDOWS\mfchf32.dll
O2 - BHO: Class - {9FA37FAE-BA76-0AE7-C44F-7E8C68FF3F53} - C:\WINDOWS\mfcvn.dll
O2 - BHO: Class - {9FBD4DA9-288F-1772-3153-38D7C0AB6F80} - C:\WINDOWS\windx.dll
O2 - BHO: Class - {A010DBE2-CC3D-9634-88DD-0AC37058D49B} - C:\WINDOWS\system32\netfq32.dll
O2 - BHO: Class - {A012ED6C-3ADD-6CAA-B9D6-A652CB9CDECF} - C:\WINDOWS\system32\msvw32.dll
O2 - BHO: Class - {A0143008-D257-1264-D990-7C6BFBD3F2AF} - C:\WINDOWS\mfcsh.dll
O2 - BHO: Class - {A0DA9541-3483-B908-8BFB-264C92CDA6FC} - C:\WINDOWS\netsk32.dll
O2 - BHO: Class - {A0FE8830-AF81-1E4D-051B-1A46041255D0} - C:\WINDOWS\system32\sysxk32.dll
O2 - BHO: Class - {A11485E6-E2A9-54F6-CB47-2085DA9C16A5} - C:\WINDOWS\sdkrw32.dll
O2 - BHO: Class - {A1448DC6-7406-B068-210E-D3F294FB1FA8} - C:\WINDOWS\ipmo.dll
O2 - BHO: Class - {A21E60F2-0648-C70B-6954-C8674404125D} - C:\WINDOWS\system32\winze32.dll
O2 - BHO: Class - {A25AC3EE-0FF3-BCF3-C5B5-FB29B4033A43} - C:\WINDOWS\ipnp32.dll
O2 - BHO: Class - {A458D028-4195-94A5-6C71-53D1EAF27E40} - C:\WINDOWS\sdkyv32.dll
O2 - BHO: Class - {A47B3009-DB35-BE2B-D263-A0DEE154022D} - C:\WINDOWS\system32\sysid32.dll (file missing)
O2 - BHO: Class - {A49D539F-800A-625B-C5CE-D2591D02D833} - C:\WINDOWS\system32\sdkmn.dll
O2 - BHO: Class - {A50865E4-41F3-A6FC-9B1B-A396EC13BEFB} - C:\WINDOWS\sysic32.dll
O2 - BHO: Class - {A5910E94-A676-201D-0838-F81C7746194D} - C:\WINDOWS\atlwe32.dll
O2 - BHO: Class - {A63C74F8-0DBF-3CFE-27F1-83B90588A4CF} - C:\WINDOWS\appaw32.dll
O2 - BHO: Class - {A65F11A0-3D1B-37FD-F86D-9AB8607151F1} - C:\WINDOWS\winzp.dll
O2 - BHO: Class - {A6BCE966-302E-BD8D-25BA-12F8C7148266} - C:\WINDOWS\crwb32.dll
O2 - BHO: Class - {A6D3144C-5461-FC63-0E5D-0B292AB74B2C} - C:\WINDOWS\system32\javavl.dll (file missing)
O2 - BHO: Class - {A71E634B-75F1-24E4-7CC3-007C5CF57056} - C:\WINDOWS\system32\mfcdo32.dll
O2 - BHO: Class - {A72C0FFC-C2D7-47B8-44CD-DA44AC623334} - C:\WINDOWS\apivr32.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O2 - BHO: Class - {A771213E-BCAA-47E6-BF98-36D9049B7ADF} - C:\WINDOWS\iear.dll
O2 - BHO: Class - {A8DBFF81-041C-F290-213E-2D0CB852CF56} - C:\WINDOWS\iphm.dll
O2 - BHO: Class - {AA1830CA-C235-C43E-1196-378BC88F9E50} - C:\WINDOWS\system32\apixq.dll
O2 - BHO: Class - {AA45A478-C680-E0A8-7624-BA5DC8CAD089} - C:\WINDOWS\system32\netiu32.dll
O2 - BHO: Class - {AA53BA3B-9FED-4A5C-2B3E-69B936827B93} - C:\WINDOWS\system32\ipxx32.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Class - {AB05AE41-F1D5-D736-88F2-C487321270C0} - C:\WINDOWS\javasf32.dll
O2 - BHO: Class - {ABB4733C-5C98-847A-13BF-151F1BFB0248} - C:\WINDOWS\system32\sdkic.dll
O2 - BHO: Class - {AC2D8F55-4AC6-20AE-E0C0-B85403479114} - C:\WINDOWS\addzs.dll
O2 - BHO: Class - {AE86CDEC-E5CC-A9C0-3FF8-E29A81F518F3} - C:\WINDOWS\system32\d3hx32.dll
O2 - BHO: Class - {AEC47B7A-3BD5-1DD5-83D5-3166C98819AD} - C:\WINDOWS\crli.dll
O2 - BHO: Class - {AF191AE7-7C17-90DF-C75B-9CF1C956197B} - C:\WINDOWS\system32\javajf32.dll
O2 - BHO: Class - {AF513BCB-FD45-3EB4-7E8C-1DA3EE942C17} - C:\WINDOWS\system32\addef32.dll
O2 - BHO: Class - {AF5FDECD-1ED9-A1EC-D3B8-8211759346FD} - C:\WINDOWS\iern32.dll
O2 - BHO: Class - {B0440870-F319-4E13-4546-004E2FBCBE42} - C:\WINDOWS\netoh.dll
O2 - BHO: Class - {B0AF2369-9339-3CA1-4E3A-EDFA5E8A44A5} - C:\WINDOWS\mfccl.dll
O2 - BHO: Class - {B11BCDC9-1DD6-8BB6-933F-3824A67B8492} - C:\WINDOWS\apphk32.dll
O2 - BHO: Class - {B1B80C24-71F4-97BB-8828-8F5E71543C52} - C:\WINDOWS\msag32.dll
O2 - BHO: Class - {B2824D28-D3DB-8D1C-1BA9-485E5AE68207} - C:\WINDOWS\system32\crfy.dll
O2 - BHO: Class - {B37338CB-DC89-F6A6-BA8B-AEF4D740566E} - C:\WINDOWS\msvi32.dll
O2 - BHO: Class - {B4CC47DF-B9D9-5967-E16B-51A675B6C681} - C:\WINDOWS\addwy.dll
O2 - BHO: Class - {B51D9877-B89F-AF85-6260-D52F509B1F43} - C:\WINDOWS\winiz.dll
O2 - BHO: Class - {B61D1A6F-06D2-A47F-682F-7942AADD6BFE} - C:\WINDOWS\system32\netzo.dll (file missing)
O2 - BHO: Class - {B7B83230-6E91-B3C1-619A-54550AB911E0} - C:\WINDOWS\system32\atlqg32.dll
O2 - BHO: Class - {B86C3428-381D-2AAC-C8BB-7DB32FA23372} - C:\WINDOWS\crcz.dll
O2 - BHO: Class - {B87618D3-880E-3E5D-C986-8A0E3397D821} - C:\WINDOWS\iemq.dll
O2 - BHO: Class - {B9A894DA-536D-899F-404E-D315F02B92FF} - C:\WINDOWS\system32\atlro.dll
O2 - BHO: Class - {B9CC80FA-3524-AB9A-7661-F6352FD5A3B9} - C:\WINDOWS\system32\syszg32.dll (file missing)
O2 - BHO: Class - {BAD3F1F7-C3C1-2A5D-58B1-24EE2D8F0DCB} - C:\WINDOWS\apilx.dll
O2 - BHO: Class - {BB1C7E31-AB2A-B10E-AD1C-F84A89B87AC1} - C:\WINDOWS\crpz.dll
O2 - BHO: Class - {BB342936-121D-1767-EE5A-A8D0278457E2} - C:\WINDOWS\system32\atlyg32.dll
O2 - BHO: Class - {BCEB5FA0-2605-5E87-B49D-E1DE122F1C5C} - C:\WINDOWS\system32\apigv.dll
O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O2 - BHO: Class - {BF6B4D62-8D32-92D9-5406-BCE7C016CBE1} - C:\WINDOWS\sysje32.dll (file missing)
O2 - BHO: Class - {C01397B5-886F-E2A8-2FDD-7B4758D1AE8E} - C:\WINDOWS\apiwa.dll
O2 - BHO: Class - {C0B4A97D-E166-016C-9557-B10E1E67B6BD} - C:\WINDOWS\sdkyj.dll
O2 - BHO: Class - {C1A41FA6-75A9-208D-8DC5-1020AE6270B6} - C:\WINDOWS\d3fr.dll
O2 - BHO: Class - {C211B80E-58BE-0087-621D-A487AE79FA25} - C:\WINDOWS\atlut.dll
O2 - BHO: Class - {C47DCE95-4EB7-6D50-3A1A-3FC3A4633F4B} - C:\WINDOWS\sdkyx32.dll
O2 - BHO: Class - {C5E5AAF1-E338-ED8E-4D57-DC8FB2DE04CB} - C:\WINDOWS\netbp32.dll
O2 - BHO: Class - {C7585E5B-0F99-BA93-522E-508509F8DD58} - C:\WINDOWS\system32\ntlx32.dll
O2 - BHO: Class - {C7FBD51E-BEF2-5C0F-8979-E4567626007B} - C:\WINDOWS\system32\sysbk.dll
O2 - BHO: Class - {C85E67A9-989F-04F8-C3A3-71515DABD4E4} - C:\WINDOWS\d3yd32.dll (file missing)
O2 - BHO: Class - {C871E993-FDEC-292E-86CE-435FEE5CFF75} - C:\WINDOWS\addrz32.dll
O2 - BHO: Class - {C8A5070C-8BA7-7132-C8F2-72E213B9FA46} - C:\WINDOWS\apptq32.dll
O2 - BHO: Class - {C8CD041C-091F-DF8F-452B-B10122D789B7} - C:\WINDOWS\system32\atloj.dll
O2 - BHO: Class - {C8EE100B-191A-611C-5766-34F50DE08954} - C:\WINDOWS\addjy32.dll
O2 - BHO: Class - {C9591F47-0E57-8A0E-DF99-903141A2D878} - C:\WINDOWS\atlwv32.dll
O2 - BHO: Class - {CA174FF9-A873-F9AD-4D62-A2FCAC3BFD4F} - C:\WINDOWS\d3mb32.dll
O2 - BHO: Class - {CA4A8F73-BA72-D97B-4C7D-0D52B4CF4542} - C:\WINDOWS\system32\winjo32.dll
O2 - BHO: Class - {CDE15148-1931-763A-4302-5413232D3E7F} - C:\WINDOWS\system32\d3rc32.dll
O2 - BHO: Class - {CE7F324C-E742-BF9B-37E5-A16FD8856B2C} - C:\WINDOWS\system32\atlfe32.dll
O2 - BHO: Class - {CE8BF10F-B86B-6B2A-DCC6-B629FA397B4B} - C:\WINDOWS\system32\appan.dll
O2 - BHO: Class - {CF0DB4C8-F2F7-EF01-C711-E29AA80B3432} - C:\WINDOWS\apigb.dll
O2 - BHO: Class - {CF61C703-8551-6D49-A399-05F1680E205B} - C:\WINDOWS\system32\crbf32.dll
O2 - BHO: Class - {D035AEB2-0A64-2FEB-9F1C-4FC9346EC0D8} - C:\WINDOWS\system32\atlvg.dll
O2 - BHO: Class - {D1DC71DB-95AD-1742-1B05-0653ADF80398} - C:\WINDOWS\sdkav.dll
O2 - BHO: Class - {D319ADC9-32F9-B509-BC94-C0B30CFDEB91} - C:\WINDOWS\mspt32.dll
O2 - BHO: Class - {D40716D3-6A48-428B-C2E2-B255F3EB8167} - C:\WINDOWS\system32\d3fy.dll
O2 - BHO: Class - {D4A6B035-FBFF-C0DC-E435-4B89825B905A} - C:\WINDOWS\netki.dll
O2 - BHO: Class - {D4FD337D-EA63-0119-06F4-B90ADB086B39} - C:\WINDOWS\system32\ntqg32.dll
O2 - BHO: Class - {D5070CD8-B904-C451-6A5E-A3F4A72B627C} - C:\WINDOWS\system32\netlx32.dll
O2 - BHO: Class - {D54F6CB9-5429-9A95-7B59-D291228E70B8} - C:\WINDOWS\apiyk.dll
O2 - BHO: Class - {D55EAE87-202A-3F55-F3F4-130CFFA66735} - C:\WINDOWS\system32\d3hl32.dll
O2 - BHO: Class - {D6A3B473-D7BB-A3AE-64E4-E0A97A92906E} - C:\WINDOWS\d3tn32.dll
O2 - BHO: Class - {D7630E68-79D7-6EF3-062A-A8D62572DA69} - C:\WINDOWS\system32\d3jl.dll
O2 - BHO: (no name) - {D7E588AB-A5D9-4422-B313-22A3470F9700} - (no file)
O2 - BHO: Class - {DA3AC16D-881C-500D-EEA0-6EE3A2056627} - C:\WINDOWS\system32\sdkps.dll
O2 - BHO: Class - {DA63AADC-263D-5DCD-D789-D029C94F9577} - C:\WINDOWS\atltb32.dll
O2 - BHO: Class - {DA76B253-7C16-F3F6-830C-6EA93171DBCA} - C:\WINDOWS\syszf.dll
O2 - BHO: Class - {DB26F49F-94D2-381B-21DE-2CF4D74E0AC6} - C:\WINDOWS\ntwa32.dll
O2 - BHO: Class - {DB34B7F0-D490-5205-7CAE-49DCC4F42315} - C:\WINDOWS\ntgk32.dll
O2 - BHO: Class - {DBE0B89D-398A-FC9B-86C9-ADD7A232661F} - C:\WINDOWS\netvn.dll
O2 - BHO: Class - {DC869C0C-95DF-C720-46AF-785207DE174E} - C:\WINDOWS\system32\javafu32.dll
O2 - BHO: Class - {DCA47654-4A8F-4E15-3395-EB24B27E676B} - C:\WINDOWS\system32\sysmu32.dll
O2 - BHO: Class - {DD3F3226-DC4D-6D02-9FF9-D05AE7EAF09A} - C:\WINDOWS\system32\sdkrk32.dll
O2 - BHO: Class - {DD7AAD8D-6BF8-1F9C-07FA-6D0FFA385DD4} - C:\WINDOWS\mfckk.dll
O2 - BHO: Class - {DE0BAD64-90AC-210E-E63A-88EAC8F9B7E6} - C:\WINDOWS\atltu.dll
O2 - BHO: Class - {DE9FBD9F-312E-4200-618D-E3C65130FD10} - C:\WINDOWS\msxk.dll
O2 - BHO: Class - {DEC23984-57DA-169D-2ABC-89B52CDC9100} - C:\WINDOWS\mfcxb.dll
O2 - BHO: Class - {DEF18E94-FD1A-FEDD-6228-4316EC0E44CA} - C:\WINDOWS\system32\atlvo32.dll (file missing)
O2 - BHO: Class - {DF3967B8-175A-2F1E-564B-0B5661F6FE16} - C:\WINDOWS\system32\apihm32.dll
O2 - BHO: Class - {DFE091D2-CAB9-B062-4548-24A5F62AEB7A} - C:\WINDOWS\atloz32.dll (file missing)
O2 - BHO: Class - {E13962C2-96C6-E39D-08A3-1714DB5A46BC} - C:\WINDOWS\system32\ipvr.dll
O2 - BHO: Class - {E1F1A46E-FC39-10DA-D25A-38ED117064E0} - C:\WINDOWS\crda.dll
O2 - BHO: Class - {E2A72A5A-5904-FEE1-9CF2-43DE47B6318F} - C:\WINDOWS\system32\cryc32.dll
O2 - BHO: Class - {E2FB32C9-6AF0-5A3B-B9D4-A25BA620435F} - C:\WINDOWS\iexz.dll (file missing)
O2 - BHO: Class - {E4BEFDF9-74F5-B18C-CEA3-C73983BCD030} - C:\WINDOWS\addcm32.dll
O2 - BHO: Class - {E4F9FEE9-B60D-49F8-14A6-7B797DCDD6EC} - C:\WINDOWS\system32\addpj.dll
O2 - BHO: Class - {E558C92A-26ED-983A-0F8B-64C91ED05AE9} - C:\WINDOWS\javaek.dll
O2 - BHO: Class - {E5872A98-7703-9F71-70B4-ACA15181A0DB} - C:\WINDOWS\winky32.dll
O2 - BHO: Class - {E5B7DBD6-3CA0-92E2-8A81-039B6316C9C5} - C:\WINDOWS\system32\ipim.dll (file missing)
O2 - BHO: Class - {E6A8DF75-9B34-005D-4060-2AB82D18D1F5} - C:\WINDOWS\ntmy32.dll
O2 - BHO: Class - {E6F47311-D791-8542-AC68-11F672B56742} - C:\WINDOWS\atlie32.dll
O2 - BHO: Class - {E7D81EED-B541-7599-12F8-80A7D852B313} - C:\WINDOWS\system32\d3jc.dll (file missing)
O2 - BHO: Class - {E7E1386A-12D3-8E93-955B-0A8C7D74C8E0} - C:\WINDOWS\apifh.dll
O2 - BHO: Class - {E7E8AFF4-E4BC-A5DC-C8BD-CC2CAEE96012} - C:\WINDOWS\system32\winge.dll
O2 - BHO: Class - {E8A45FAF-E3A1-7CF3-5D98-DD451512262B} - C:\WINDOWS\javaxz.dll
O2 - BHO: Class - {E8D323FD-1B81-072E-343D-60220ADF9C47} - C:\WINDOWS\sysql32.dll
O2 - BHO: Class - {EA0CB9FE-97B4-B061-6CB7-E205B89CDFA5} - C:\WINDOWS\netdk.dll
O2 - BHO: Class - {EC1F3079-B552-372A-C22C-02C86B281422} - C:\WINDOWS\ipsf.dll
O2 - BHO: Class - {ECCFC5E3-D622-3E69-7884-827C0967AE85} - C:\WINDOWS\system32\iesd32.dll
O2 - BHO: Class - {ECDBD93B-30EF-D196-FC96-85492CDB4F6A} - C:\WINDOWS\javaig32.dll
O2 - BHO: Class - {ED81D60C-C426-844A-2785-263DC930B5C4} - C:\WINDOWS\system32\crms32.dll
O2 - BHO: Class - {ED83DE83-1A0E-2A73-D318-B4BD3272FB28} - C:\WINDOWS\system32\d3sj32.dll (file missing)
O2 - BHO: Class - {EDB351A4-66C4-592C-4D6E-5DA4F46F6A5C} - C:\WINDOWS\atlgz.dll
O2 - BHO: Class - {EDCBB3FD-788F-D69A-C205-FAE58398A2D6} - C:\WINDOWS\ipia32.dll
O2 - BHO: Class - {EE13EB7D-EBCF-F6FC-0596-289AC46D563C} - C:\WINDOWS\system32\wingb32.dll
O2 - BHO: Class - {EF00589F-4853-36A5-3704-A19633EDC95B} - C:\WINDOWS\d3wa32.dll
O2 - BHO: Class - {EF4D6D55-7C19-7352-4266-61ED08A0B794} - C:\WINDOWS\system32\javajl.dll
O2 - BHO: Class - {EFBC97F2-4308-C0B5-9CAA-B092559036A9} - C:\WINDOWS\javano32.dll (file missing)
O2 - BHO: Class - {EFD32CB9-039B-2B11-A357-D6D56A398537} - C:\WINDOWS\apprb32.dll
O2 - BHO: Class - {F0E095A0-3EA9-8479-E393-7CB483F3BC0D} - C:\WINDOWS\system32\apikw.dll
O2 - BHO: Class - {F0FE5597-AC67-144F-6580-291D05E958EF} - C:\WINDOWS\netck.dll
O2 - BHO: Class - {F2257FBF-3A02-F7AF-973C-7C0DC972D230} - C:\WINDOWS\ipva32.dll (file missing)
O2 - BHO: Class - {F322AB0B-621C-11A3-B1AE-7A7FC2B40350} - C:\WINDOWS\mfcnk.dll
O2 - BHO: Class - {F4991605-C957-0BAE-49B7-A7115B539ABB} - C:\WINDOWS\system32\iexz32.dll
O2 - BHO: Class - {F5432620-8C5D-E85E-7F03-D49E69AA6B34} - C:\WINDOWS\appmu.dll
O2 - BHO: Class - {F55C72C0-13B8-E0AC-E025-78ECF4B088BD} - C:\WINDOWS\system32\crmj.dll
O2 - BHO: Class - {F58F81C3-2AC2-0FE8-BD83-A5E72B3E58A3} - C:\WINDOWS\system32\ipwf.dll (file missing)
O2 - BHO: Class - {F6BF5152-744A-9568-35D0-475B9C0FE7CF} - C:\WINDOWS\crea32.dll (file missing)
O2 - BHO: Class - {F6D3E9FC-BC7E-C0C3-8BA2-6C69C9FA68C2} - C:\WINDOWS\syslk.dll
O2 - BHO: Class - {F7AACFF8-E2DB-44D8-E2C9-F45FEFF56855} - C:\WINDOWS\system32\sysdb.dll (file missing)
O2 - BHO: Class - {F8008B13-FD1D-9DAB-25AF-95EAB9FA0AC5} - C:\WINDOWS\javacx.dll
O2 - BHO: Class - {F8F3F015-ABD7-A149-66D2-1C1208C9602A} - C:\WINDOWS\system32\winpn32.dll
O2 - BHO: Class - {FA55FE92-9317-0E72-9BED-1211735C089D} - C:\WINDOWS\system32\appbh32.dll
O2 - BHO: Class - {FB04EF28-D55C-A95A-794F-75DA8F4D83AF} - C:\WINDOWS\system32\crjn32.dll
O2 - BHO: Class - {FCAD8DF8-B294-72DE-A4A9-6C69B0EE4164} - C:\WINDOWS\system32\d3ta32.dll
O2 - BHO: Class - {FD02D80E-B824-8992-2F9B-E9F9A96F5081} - C:\WINDOWS\netnu32.dll (file missing)
O2 - BHO: Class - {FD291DF6-F430-F8C4-9DA5-F02AEF25DD27} - C:\WINDOWS\system32\atljk32.dll
O2 - BHO: Class - {FE9EE686-307A-32CC-5C50-38A169B88EAA} - C:\WINDOWS\system32\apiop32.dll
O2 - BHO: Class - {FEF28766-EC07-9CC6-3DD6-241C5C156710} - C:\WINDOWS\system32\mfcfe32.dll
O2 - BHO: Class - {FF731508-CD28-E0B0-3E85-0CF55FDE9FBA} - C:\WINDOWS\iemc32.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [AHQInit] C:\Program Files\Creative\SBLive\Program\AHQInit.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Dell|Alert] C:\Program Files\Dell\Support\Alert\bin\DAMon.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [UTOEXECA] C:\WINDOWS\System32\UTOEXECA.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] c:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] c:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] c:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ntti.exe] C:\WINDOWS\system32\ntti.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [msxy.exe] C:\WINDOWS\system32\msxy.exe
O4 - HKLM\..\Run: [addab32.exe] C:\WINDOWS\system32\addab32.exe
O4 - HKLM\..\Run: [addrc.exe] C:\WINDOWS\system32\addrc.exe
O4 - HKLM\..\Run: [mswe.exe] C:\WINDOWS\mswe.exe
O4 - HKLM\..\Run: [ntet32.exe] C:\WINDOWS\system32\ntet32.exe
O4 - HKLM\..\Run: [TVS_B] C:\program files\tvs\tvs_b.exe
O4 - HKLM\..\RunOnce: [tvs_re] c:\Program Files\Common Files\Java\tvs_re_inst.exe
O4 - HKLM\..\RunOnce: [d3uw.exe] C:\WINDOWS\system32\d3uw.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [RealUpdater] C:\WINDOWS\System32\realupd.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HPAiODevice(hp officejet d series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MSN Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8632866-FC35-4783-BADF-A2763514FBED}: NameServer = 151.164.11.201,151.164.1.8
O19 - User stylesheet: C:\WINDOWS\default.css (file missing)
O19 - User stylesheet: C:\WINDOWS\default.css (file missing) (HKLM)
O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\sdkzd32.exe" /s (file missing)
O23 - Service: .NET Framework Service (.NET Connection Service) - Unknown owner - C:\WINDOWS\svchost.exe (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
O23 - Service: Network Event Provider (WksPatch) - Unknown owner - C:\WINDOWS\System32\drivers\svchost.exe (file missing)

ok thanks man, lets get to work then..



The Fix:

Step#1:Getting Ready



Please save these instructions to WordPad so that you have them accessible while following the steps. You also may want to print out these directions as the Internet will not be available.

After downloading the tools, you must disconnect from the internet totally, because staying connected while fixing will prevent the fix from working. Also please keep Internet Explorer and Outlook Express closed throughout as opening either will reinstall the infection.

To replace Internet Explorer to use during this fix, please use Internet Explorer once to download and install FireFox, to be used as your alternate browser throughout this fix.

Close Outlook Express and Internet Explorer for the duration of this fix

Read through all the instructions so that you can ask any questions now, before you disconnect from the Internet.

Please start by downloading the tools you will need to clean this infection, using FireFox. If you have a problem or question with any please continue to follow the list step by step to the end and ask the questions when you are asked to reply. Just be sure to let us know what the problem was when you finally reply.




Step#2:Show All Hidden Files Very Important

Please download and open the following zip file. Double-click on the file inside the zip and when it asks you if you would like to merge the file into your registry, please answer yes. This will make sure all files are visible on your computer.
http://www.davehigham.zen.co.uk/downloads/xphidden.zip




Step#3:Download CWShredder Do Not Use Yet

1. Please Download the most recent version of CWShredder, from HERE

2. Check for Updates but please Do NOT use it yet



Step#4:Download About Buster Do Not Use Yet

1. Please download About:Buster from here: http://www.downloads.subratam.org/AboutBuster.zip.

2. Once it is downloaded extract it to c:\aboutbuster.

3. Check to make sure it is up-to-date. Please Do NOT use it yet



Step#5:Download Registrar Lite Do Not Use Yet

Another program to download is Registrar Lite for use later: Please download Registrar Lite and install it to C:\Program Files\RegLite\ . This is a registry editor that is very easy to use. Caution should be exercised when editing the registry as it is very easy to render a Computer unbootable by deleting the wrong key



Step#6:Download Ewido Security Suite Do Not Use Yet

• Download and install Ewido security suite
• Right Click on the “E” icon in your taskbar and open Ewido Security Suite then click “update” to get the most recent definitions for it to use.
• When it prompts you to update, click the OK button.
• download the updates and when they are finished installing, close the window
• Please Do Not Use It Yet

Step#7:Download A Registry File to Remove Registry Entries Do Not Use Yet

• Please download the following zip file to your desktop:
  HSfix
• Double Click on HSfix.zip and it will unzip to a new folder it makes on your desktop, called HSfix
• Do Not Use It Yet

Please disconnect from the Internet




Step#8:Disable The Bad Service ** Very Important!!**

• Reboot your computer into Safe Mode by tapping F8 while booting up and continue for the rest of the fix in SAFE MODE
  
• Click on start > control panel > administrative programs > services. Look for a service called Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I)). Double click on that service and click stop and then set the startup to disabled.
  
• repeatt the procedure for the following services:
• .NET Framework Service (.NET Connection Service)
• Network Event Provider (WksPatch)

Step#9:Stop The Running Processes

(only for Win2k/XP)

Press control-alt-delete to get into the task manager and end the following processes if they exist:


C:\WINDOWS\system32\addab32.exe


Step#10:Delete About Blank Bad Files

I now need you to delete the following files, if still there, check the file locations carefully as the some of the nasty files mimic legitimate windows files:


C:\WINDOWS\system32\addab32.exe
C:\WINDOWS\system32\sdkzd32.exe
C:\WINDOWS\svchost.exe
C:\WINDOWS\System32\drivers\svchost.exe
C:\WINDOWS\default.css
C:\WINDOWS\system32\d3uw.exe
C:\WINDOWS\system32\ntet32.exe
C:\WINDOWS\mswe.exe
C:\WINDOWS\system32\addrc.exe
C:\WINDOWS\system32\msxy.exe
C:\WINDOWS\system32\ntti.exe
C:\WINDOWS\system32\msej32.dll
C:\WINDOWS\system32\d3sc.dll
C:\WINDOWS\system32\ipqe32.dll
C:\WINDOWS\sysfm.dll
C:\WINDOWS\atlxy32.dll
C:\WINDOWS\system32\winxf32.dll
C:\WINDOWS\appnh.dll
C:\WINDOWS\msab.dll
C:\WINDOWS\system32\crwk32.dll
C:\WINDOWS\sdkxk32.dll
C:\WINDOWS\system32\atlye32.dll
C:\WINDOWS\system32\sysrq32.dll
C:\WINDOWS\system32\msqb32.dll
C:\WINDOWS\system32\javata32.dll
C:\WINDOWS\system32\d3zr32.dll
C:\WINDOWS\crne32.dll
C:\WINDOWS\appta.dll
C:\WINDOWS\system32\atlmd32.dll
C:\WINDOWS\system32\atlrt32.dll
C:\WINDOWS\system32\apisq32.dll
C:\WINDOWS\apixw32.dll
C:\WINDOWS\iefb32.dll
C:\WINDOWS\javaol.dll
C:\WINDOWS\d3kp32.dll
C:\WINDOWS\appck32.dll
C:\WINDOWS\d3ht.dll
C:\WINDOWS\system32\apitj32.dll
C:\WINDOWS\system32\appfw32.dll
C:\WINDOWS\crdn32.dll
C:\WINDOWS\system32\atlnd32.dll
C:\WINDOWS\d3sy32.dll
C:\WINDOWS\msio32.dll
C:\WINDOWS\crmt32.dll
C:\WINDOWS\system32\appqg32.dll
C:\WINDOWS\system32\netht.dll
C:\WINDOWS\msgc32.dll
C:\WINDOWS\sysnl32.dll
C:\WINDOWS\system32\sysnr.dll
C:\WINDOWS\sysuc32.dll
C:\WINDOWS\system32\sysuw32.dll
C:\WINDOWS\system32\ipxj.dll
C:\WINDOWS\addkh.dll
C:\WINDOWS\system32\ipox32.dll
C:\WINDOWS\netso.dll
C:\WINDOWS\mfcwa32.dll
C:\WINDOWS\sdkqx.dll
C:\WINDOWS\atlws.dll
C:\WINDOWS\system32\sdkbc.dll
C:\WINDOWS\addfb.dll
C:\WINDOWS\system32\addee32.dll
C:\WINDOWS\system32\ieaa.dll
C:\WINDOWS\mstm32.dll
C:\WINDOWS\mfcjz32.dll
C:\WINDOWS\ipeh32.dll
C:\WINDOWS\javava.dll
C:\WINDOWS\javaba.dll
C:\WINDOWS\ipst.dll
C:\WINDOWS\ipef.dll
C:\WINDOWS\system32\iemp32.dll
C:\WINDOWS\addlh32.dll
C:\WINDOWS\javapm.dll
C:\WINDOWS\system32\appwv.dll
C:\WINDOWS\system32\apiji32.dll
C:\WINDOWS\system32\appze32.dll
C:\WINDOWS\system32\iets32.dll
C:\WINDOWS\crpa.dll
C:\WINDOWS\system32\mszm.dll
C:\WINDOWS\system32\atlrg.dll
C:\WINDOWS\apple32.dll
C:\WINDOWS\system32\sdksv.dll
C:\WINDOWS\apifm.dll
C:\WINDOWS\system32\iema32.dll
C:\WINDOWS\system32\d3mt.dll
C:\WINDOWS\system32\crwb32.dll
C:\WINDOWS\system32\sysag32.dll
C:\WINDOWS\ipyc32.dll
C:\WINDOWS\system32\ipee32.dll
C:\WINDOWS\sdkjk32.dll
C:\WINDOWS\sdkwi32.dll
C:\WINDOWS\ippk32.dll
C:\WINDOWS\apiea32.dll
C:\WINDOWS\d3yt.dll
C:\WINDOWS\ntla32.dll
C:\WINDOWS\appbr32.dll
C:\WINDOWS\system32\sysmr32.dll
C:\WINDOWS\crtw.dll
C:\WINDOWS\ntxw.dll
C:\WINDOWS\system32\appgx.dll
C:\WINDOWS\ipnk32.dll
C:\WINDOWS\mshf32.dll
C:\WINDOWS\atlry32.dll
C:\WINDOWS\system32\wincv.dll
C:\WINDOWS\system32\crif.dll
C:\WINDOWS\system32\ntcg32.dll
C:\WINDOWS\system32\atluw.dll
C:\WINDOWS\system32\atlyq32.dll
C:\WINDOWS\system32\appcc32.dll
C:\WINDOWS\system32\appnq32.dll
C:\WINDOWS\system32\netbu32.dll
C:\WINDOWS\system32\atlmw32.dll
C:\WINDOWS\system32\d3yv.dll
C:\WINDOWS\system32\d3cv.dll
C:\WINDOWS\nettk.dll
C:\WINDOWS\system32\mfcob32.dll
C:\WINDOWS\mfcco32.dll
C:\WINDOWS\system32\apidl.dll
C:\WINDOWS\system32\ntfz.dll
C:\WINDOWS\system32\winky.dll
C:\WINDOWS\system32\addmx32.dll
C:\WINDOWS\netxj32.dll
C:\WINDOWS\ntgv.dll
C:\WINDOWS\apimh32.dll
C:\WINDOWS\sysbu.dll
C:\WINDOWS\system32\ipmi32.dll
C:\WINDOWS\netdw.dll
C:\WINDOWS\system32\d3tt.dll
C:\WINDOWS\appha.dll
C:\WINDOWS\system32\sdkkc32.dll
C:\WINDOWS\system32\syslm.dll
C:\WINDOWS\system32\javadh.dll
C:\WINDOWS\system32\mssp32.dll
C:\WINDOWS\system32\netkj32.dll
C:\WINDOWS\system32\ipmq32.dll
C:\WINDOWS\crsk32.dll
C:\WINDOWS\crnr.dll
C:\WINDOWS\apprf32.dll
C:\WINDOWS\system32\sdkmy.dll
C:\WINDOWS\system32\d3ws32.dll
C:\WINDOWS\javayd32.dll
C:\WINDOWS\sdkvn32.dll
C:\WINDOWS\winrr32.dll
C:\WINDOWS\iela.dll
C:\WINDOWS\system32\sdklb.dll
C:\WINDOWS\d3kk32.dll
C:\WINDOWS\system32\ntzg.dll
C:\WINDOWS\ipeq.dll
C:\WINDOWS\apigh.dll
C:\WINDOWS\system32\ipkx32.dll
C:\WINDOWS\sysqx.dll
C:\WINDOWS\system32\d3gf32.dll
C:\WINDOWS\system32\apinv.dll
C:\WINDOWS\system32\appua32.dll
C:\WINDOWS\d3bn.dll
C:\WINDOWS\addzk32.dll
C:\WINDOWS\system32\iplw32.dll
C:\WINDOWS\javach32.dll
C:\WINDOWS\mfczq32.dll
C:\WINDOWS\system32\ipgi32.dll
C:\WINDOWS\appnx32.dll
C:\WINDOWS\sysbz32.dll
C:\WINDOWS\system32\addlm.dll
C:\WINDOWS\atllw.dll
C:\WINDOWS\apipf.dll
C:\WINDOWS\system32\sdklm.dll
C:\WINDOWS\system32\appfu32.dll
C:\WINDOWS\mfcfw32.dll
C:\WINDOWS\system32\crmb.dll
C:\WINDOWS\javasa32.dll
C:\WINDOWS\system32\d3jf.dll
C:\WINDOWS\system32\msig32.dll
C:\WINDOWS\system32\sdkar.dll
C:\WINDOWS\system32\atlgs.dll
C:\WINDOWS\system32\javaae32.dll
C:\WINDOWS\msmq.dll
C:\WINDOWS\system32\sysbj32.dll
C:\WINDOWS\mfcdm32.dll
C:\WINDOWS\sdkqb.dll
C:\WINDOWS\system32\iesa32.dll
C:\WINDOWS\system32\d3bm.dll
C:\WINDOWS\winfj.dll
C:\WINDOWS\system32\atlnk32.dll
C:\WINDOWS\system32\winvd32.dll
C:\WINDOWS\system32\winui.dll
C:\WINDOWS\ntrm32.dll
C:\WINDOWS\d3hh.dll
C:\WINDOWS\atlsj.dll
C:\WINDOWS\mfcov.dll
C:\WINDOWS\system32\javacc.dll
C:\WINDOWS\system32\ntsm32.dll
C:\WINDOWS\msgn.dll
C:\WINDOWS\system32\ipfs32.dll
C:\WINDOWS\d3pj32.dll
C:\WINDOWS\system32\javaks.dll
C:\WINDOWS\system32\nthi32.dll
C:\WINDOWS\system32\mfcrd32.dll
C:\WINDOWS\system32\netvo.dll
C:\WINDOWS\iezh.dll
C:\WINDOWS\d3rz.dll
C:\WINDOWS\system32\ipmj.dll
C:\WINDOWS\addpy32.dll
C:\WINDOWS\system32\mfcat.dll
C:\WINDOWS\system32\crje.dll-
C:\WINDOWS\addyr32.dll
C:\WINDOWS\d3mh32.dll
C:\WINDOWS\netvk.dll
C:\WINDOWS\sysyz32.dll
C:\WINDOWS\netsb32.dll
C:\WINDOWS\netjf32.dll
C:\WINDOWS\system32\winai.dll
C:\WINDOWS\system32\mszg.dll
C:\WINDOWS\system32\netnz32.dll
C:\WINDOWS\system32\appkb32.dll
C:\WINDOWS\system32\nton.dll
C:\WINDOWS\system32\applg32.dl
C:\WINDOWS\ntww32.dll
C:\WINDOWS\system32\winsm.dll
C:\WINDOWS\javaep32.dll
C:\WINDOWS\system32\ieea.dll
C:\WINDOWS\system32\appzm.dll
C:\WINDOWS\system32\appln32.dll
C:\WINDOWS\netai32.dll
C:\WINDOWS\system32\winoq32.dll
C:\WINDOWS\sdknf.dll
C:\WINDOWS\system32\iezb32.dll
C:\WINDOWS\sysic.dll
C:\WINDOWS\system32\mfcwe32.dll
C:\WINDOWS\apimc.dll
C:\WINDOWS\mfchf32.dll
C:\WINDOWS\mfcvn.dll
C:\WINDOWS\windx.dll
C:\WINDOWS\system32\netfq32.dll
C:\WINDOWS\system32\msvw32.dll
C:\WINDOWS\mfcsh.dll
C:\WINDOWS\netsk32.dll
C:\WINDOWS\system32\sysxk32.dll
C:\WINDOWS\sdkrw32.dll
C:\WINDOWS\ipmo.dll
C:\WINDOWS\system32\winze32.dll
C:\WINDOWS\ipnp32.dll
C:\WINDOWS\sdkyv32.dll
C:\WINDOWS\system32\sdkmn.dll
C:\WINDOWS\sysic32.dll
C:\WINDOWS\atlwe32.dll
C:\WINDOWS\appaw32.dll
C:\WINDOWS\winzp.dll
C:\WINDOWS\crwb32.dll
C:\WINDOWS\system32\mfcdo32.dll
C:\WINDOWS\apivr32.dll
C:\WINDOWS\iear.dll
C:\WINDOWS\iphm.dll
C:\WINDOWS\system32\apixq.dll
C:\WINDOWS\system32\netiu32.dll
C:\WINDOWS\system32\ipxx32.dll
C:\WINDOWS\javasf32.dll
C:\WINDOWS\system32\sdkic.dll
C:\WINDOWS\addzs.dll
C:\WINDOWS\system32\d3hx32.dll
C:\WINDOWS\crli.dll
C:\WINDOWS\system32\javajf32.dll
C:\WINDOWS\system32\addef32.dll
C:\WINDOWS\iern32.dll
C:\WINDOWS\netoh.dll
C:\WINDOWS\mfccl.dll
C:\WINDOWS\apphk32.dll
C:\WINDOWS\msag32.dll
C:\WINDOWS\system32\crfy.dll
C:\WINDOWS\msvi32.dll
C:\WINDOWS\addwy.dll
C:\WINDOWS\winiz.dll
C:\WINDOWS\system32\atlqg32.dll
C:\WINDOWS\crcz.dll
C:\WINDOWS\iemq.dllC:\WINDOWS\system32\atlro.dll
C:\WINDOWS\apilx.dll
C:\WINDOWS\crpz.dll
C:\WINDOWS\system32\atlyg32.dll
C:\WINDOWS\system32\apigv.dll
C:\WINDOWS\apiwa.dll
C:\WINDOWS\sdkyj.dll
C:\WINDOWS\d3fr.dll
C:\WINDOWS\atlut.dll
C:\WINDOWS\sdkyx32.dll
C:\WINDOWS\netbp32.dll
C:\WINDOWS\system32\ntlx32.dll
C:\WINDOWS\system32\sysbk.dll
C:\WINDOWS\addrz32.dll
C:\WINDOWS\apptq32.dll
C:\WINDOWS\system32\atloj.dll
C:\WINDOWS\addjy32.dll
C:\WINDOWS\atlwv32.dll
C:\WINDOWS\d3mb32.dll
C:\WINDOWS\system32\winjo32.dll
C:\WINDOWS\system32\d3rc32.dll
C:\WINDOWS\system32\atlfe32.dll
C:\WINDOWS\system32\appan.dll
C:\WINDOWS\apigb.dll
C:\WINDOWS\system32\crbf32.dll
C:\WINDOWS\system32\atlvg.dll
C:\WINDOWS\sdkav.dll
C:\WINDOWS\mspt32.dll
C:\WINDOWS\system32\d3fy.dll
C:\WINDOWS\netki.dll
C:\WINDOWS\system32\ntqg32.dll
C:\WINDOWS\system32\netlx32.dll
C:\WINDOWS\apiyk.dll
C:\WINDOWS\system32\d3hl32.dll
C:\WINDOWS\d3tn32.dll
C:\WINDOWS\system32\d3jl.dll
C:\WINDOWS\system32\sdkps.dll
C:\WINDOWS\atltb32.dll
C:\WINDOWS\syszf.dll
C:\WINDOWS\ntwa32.dll
C:\WINDOWS\ntgk32.dll
C:\WINDOWS\netvn.dll
C:\WINDOWS\system32\javafu32.dll
C:\WINDOWS\system32\sysmu32.dll
C:\WINDOWS\system32\sdkrk32.dll
C:\WINDOWS\mfckk.dll
C:\WINDOWS\atltu.dll
C:\WINDOWS\msxk.dll
C:\WINDOWS\mfcxb.dll
C:\WINDOWS\system32\apihm32.dll
C:\WINDOWS\system32\ipvr.dll
C:\WINDOWS\crda.dll
C:\WINDOWS\system32\cryc32.dll
C:\WINDOWS\addcm32.dll
C:\WINDOWS\system32\addpj.dll
C:\WINDOWS\javaek.dll
C:\WINDOWS\winky32.dll
C:\WINDOWS\ntmy32.dll
C:\WINDOWS\atlie32.dll
C:\WINDOWS\apifh.dll
C:\WINDOWS\system32\winge.dll
C:\WINDOWS\javaxz.dll
C:\WINDOWS\sysql32.dll
C:\WINDOWS\netdk.dll
C:\WINDOWS\ipsf.dll
C:\WINDOWS\system32\iesd32.dll
C:\WINDOWS\javaig32.dll
C:\WINDOWS\system32\crms32.dll
C:\WINDOWS\atlgz.dll
C:\WINDOWS\ipia32.dll
C:\WINDOWS\system32\wingb32.dll
C:\WINDOWS\d3wa32.dll
C:\WINDOWS\system32\javajl.dll
C:\WINDOWS\apprb32.dll
C:\WINDOWS\system32\apikw.dll
C:\WINDOWS\netck.dll
C:\WINDOWS\mfcnk.dll
C:\WINDOWS\system32\iexz32.dll
C:\WINDOWS\appmu.dll
C:\WINDOWS\system32\crmj.dll
C:\WINDOWS\syslk.dll
C:\WINDOWS\javacx.dll
C:\WINDOWS\system32\winpn32.dll
C:\WINDOWS\system32\appbh32.dll
C:\WINDOWS\system32\crjn32.dll
C:\WINDOWS\system32\d3ta32.dll
C:\WINDOWS\system32\atljk32.dll
C:\WINDOWS\system32\apiop32.dll
C:\WINDOWS\system32\mfcfe32.dll
C:\WINDOWS\iemc32.dll
C:\WINDOWS\cerqt.dll
C:\program files\tvs\–>>delete this folder
C:\WINDOWS\System32\UTOEXECA.exe



If you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. if it is uncheck it and try again.



Step#11:Cleaning With HijackThis

Then close all programs and windows and run hijackthis. Put a checkmark next to each of these entries and click 'fix checked' button when ready

NORMALLY i would list the bad entries to fix, this time we do it the other way round, i will list the entries to keep, which are listed below. fix everything else but these!!



R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://register.hp.com/servlet/WebReg.serv…CH_DT_YEAR=2002
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [AHQInit] C:\Program Files\Creative\SBLive\Program\AHQInit.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Dell|Alert] C:\Program Files\Dell\Support\Alert\bin\DAMon.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [UTOEXECA] C:\WINDOWS\System32\UTOEXECA.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] c:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] c:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] c:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [RealUpdater] C:\WINDOWS\System32\realupd.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HPAiODevice(hp officejet d series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MSN Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8632866-FC35-4783-BADF-A2763514FBED}: NameServer = 151.164.11.201,151.164.1.8
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe






Step#12: Backup The Registry

In the next step we are going to remove a service that gets installed by this malware.

1. Open Registrar Lite and run it.

2. Copy and paste the bold text below into the address bar of Registrar Lite:(this is making a Registry backup for safety in case of error)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\

Go to File> Export and and save as (in the C:\Program Files\Registrar Lite (Reglite) folder):

1.) Winkey.reg (Save as type: regedit4 .reg type)
2.) Winkey.hiv (Save as type: Scroll to select-regetd32/WinAPI *hiv *dat files)






Step#13: Use the HSfix.reg file

• Navigate to the HSfix folder on your Desktop
• Then double-click on the HSfix.reg file, and when it prompts to merge say yes, and this will clear some registry entries left behind by the process.
• if you have a popup from any of your protection programs asking if you want to make a change to the registry, say Yes or Accept it

Step#14:Fixing With CWShredder

• CLOSE ALL WINDOWS except CWShredder
  
• Run the program by clicking 'fix' and letting it fix all CWS remnants.

Step#15:Fixing With About Buster

This is the step where we will use About:Buster that you had downloaded previously.

• Navigate to the c:\aboutbuster directory
• double-click on aboutbuster.exe
• When the tool opens press the OK button, then Start button, then the OK button
• then finally the Yes button. It will start scanning your computer for files.
• If it asks if you would like to do a second pass, allow it to do so.
• Post the log file in your next reply

Step#16:Scan With Ewido Security Suite

• Launch Ewido again
  
• Click on Scanner>Complete System Scan.
  
• Let the program scan your PC.
  
• When the scan asks to clean files click OK.
  
• When scan is completed, click Save report. to your desktop.
  
• Post the report in your next reply.

Reboot your computer back to normal mode and

Reconnect To The Internet

as the machine is baly infected, i would like you to perform an online virus scan at this stage:

Please do an online scan with Kaspersky WebScanner

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then begin downloading the latest definition files:
• Once the files have been downloaded click on NEXT
  
• Now click on Scan Settings
• In the scan settings make that the following are selected:
  • Scan using the following Anti-Virus database:
  Extended (if available otherwise Standard)
  
  • Scan Options:
  Scan Archives
  Scan Mail Bases
• Click OK
• Now under select a target to scan:Select My Computer
• This will program will start and scan your system.
• The scan will take a while so be patient and let it run.
• Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
• Save the file to your desktop.
• Copy and paste that information in your next post.

Step#17:Scan and Post a New HJT log with other logs

• Scan again with HijackThis.
  
• Post your logs from HijackThis, About Buster, and Ewido Security Suite here in this thread with any questions or problems that you have run into.
  
• There are still some steps that are necessary to clear out all of the malware. There will be necessary files that it has deleted that will need to be replaced.

Good Luck!

Okay, I've gone through all the steps and here are the log files from Hijack and About Buster. I'm not sure if you want me to post the Ewido log as it's rather large (1.5 Meg) - what can I say, there were almost 10K infected objects!

Again, I appreciate the help here. One thing I notice is that the CoolWebSearch REG item is still there. Does this mean I missed something?? Let me know if you want me to do something with the Ewido log.


About Buster:
AboutBuster 5.1, reference file 32
Scan started on [10/31/2005] at [7:10:19 PM]
————————————————
No Ads Found!
————————————————
Removed File! : C:\WINDOWS\dptcs.dat
Removed File! : C:\WINDOWS\dpyhu.dat
Removed File! : C:\WINDOWS\excud.dat
Removed File! : C:\WINDOWS\hubrn.dat
Removed File! : C:\WINDOWS\itlng.dat
Removed File! : C:\WINDOWS\jtuhd.dat
Removed File! : C:\WINDOWS\nllvx.dat
Removed File! : C:\WINDOWS\ofvjy.dat
Removed File! : C:\WINDOWS\ojriq.dat
Removed File! : C:\WINDOWS\pbxix.dat
Removed File! : C:\WINDOWS\pduij.dat
Removed File! : C:\WINDOWS\rgkdv.dat
Removed File! : C:\WINDOWS\veapz.dat
Removed File! : C:\WINDOWS\vtcri.dat
Removed File! : C:\WINDOWS\wgqsl.dat
Removed File! : C:\WINDOWS\xefxg.dat
Removed File! : C:\WINDOWS\xjtju.dat
Removed File! : C:\WINDOWS\system32\alkzd.dat
Removed File! : C:\WINDOWS\system32\cmbvb.dat
Removed File! : C:\WINDOWS\system32\dxqyd.dat
Removed File! : C:\WINDOWS\system32\hiqhb.dat
Removed File! : C:\WINDOWS\system32\itmpd.dat
Removed File! : C:\WINDOWS\system32\jysyz.dat
Removed File! : C:\WINDOWS\system32\lukni.dat
Removed File! : C:\WINDOWS\system32\nnkbr.dat
Removed File! : C:\WINDOWS\system32\ohicb.dat
Removed File! : C:\WINDOWS\system32\oyxvt.dat
Removed File! : C:\WINDOWS\system32\pmsad.dat
Removed File! : C:\WINDOWS\system32\qgosk.dat
Removed File! : C:\WINDOWS\system32\swpqs.dat
Removed File! : C:\WINDOWS\system32\vsega.dat
Removed File! : C:\WINDOWS\system32\vzpsc.dat
Removed File! : C:\WINDOWS\system32\ybave.dat
Removed File! : C:\WINDOWS\system32\zzvus.dat
————————————————
Scan was COMPLETED SUCCESSFULLY at 7:14:10 PM




HiJack Tihs log:
Logfile of HijackThis v1.99.1
Scan saved at 9:15:58 PM, on 10/31/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Dell\Support\Alert\bin\DAMon.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
C:\WINDOWS\system32\hpoipm07.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnindex.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOFXM07.exe
C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\MSNGather.exe
C:\New Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.coolwwwsearch.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.coolwwwsearch.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\cerqt.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\cerqt.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\cerqt.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.searchxp.com/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://4-counter.com/?a=2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = res://mshp.dll/index.html#22776
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = http://www.coolwwwsearch.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://register.hp.com/servlet/WebReg.serv…CH_DT_YEAR=2002
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [AHQInit] C:\Program Files\Creative\SBLive\Program\AHQInit.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Dell|Alert] C:\Program Files\Dell\Support\Alert\bin\DAMon.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [UTOEXECA] C:\WINDOWS\System32\UTOEXECA.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] c:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] c:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] c:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [RealUpdater] C:\WINDOWS\System32\realupd.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HPAiODevice(hp officejet d series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MSN Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.00.0001.1203\en-us\bin\msnlAdmin.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O17 - HKLM\System\CCS\Services\Tcpip\..\{0D2D447C-810A-4883-AE54-D6ADDF8AA471}: NameServer = 68.94.156.1 68.94.157.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8632866-FC35-4783-BADF-A2763514FBED}: NameServer = 151.164.11.201,151.164.1.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{0D2D447C-810A-4883-AE54-D6ADDF8AA471}: NameServer = 68.94.156.1 68.94.157.1
O19 - User stylesheet: C:\WINDOWS\default.css (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe