Here it is!
————————————————————————————————
Logfile of HijackThis v1.97.7
Scan saved at 3:06:07 PM, on 2/19/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Ray\Desktop\HijackThis.exe
F1 - win.ini: run=c:\windows\system32\flpycntl.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.myfunstart.com/?pc=czhp
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/…://my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://t5044.find-quick.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://t5044.find-quick.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/…://my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.searching.net/
R3 - URLSearchHook: IncrediFindBHO Class - {4FC95EDD-4796-4966-9049-29649C80111D} - C:\PROGRA~1\INCRED~1\BHO\INCFIN~1.DLL
O2 - BHO: NavErrRedir Class - {4FC95EDD-4796-4966-9049-29649C80111D} - C:\PROGRA~1\INCRED~1\BHO\INCFIN~1.DLL
O2 - BHO: (no name) - {5dd31f1b-2165-44a2-85f7-0e0720819549} - C:\DOCUME~1\Ray\APPLIC~1\preathdrbloax.dll
O2 - BHO: (no name) - {701300A6-BF52-F4A8-D0BA-CA4D6BCE451E} - C:\WINDOWS\system32\iqkjjqgd.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: pimdrstcgee - {6a1a3094-fbe7-4f78-a656-d550edb5fb14} - C:\DOCUME~1\Ray\APPLIC~1\preathdrbloax.dll
O3 - Toolbar: Adult Links - {965E6B07-6832-4738-BDBE-25F226BA2AB0} - C:\WINDOWS\Downloaded Program Files\QaBar.dll
O3 - Toolbar: PowerSearch - {4E7BD74F-2B8D-469E-A08D-8F6FA787AD2D} - C:\PROGRA~1\POWERS~1\Toolbar\pwrsc032.dll
O3 - Toolbar: PowerSearch - {4E7BD74F-2B8D-469E-D1F0-E56FA787AD2D} - C:\PROGRA~1\POWERS~1\Toolbar\pwrscznc.dll
O4 - HKLM\..\Run: [ [image unavailable: image]http://image.lop.com/images/new_images/top_left_img.gif" width="172" height="79">[image unavailable: image]http://image.lop.com/images/new_images/header.jpg" width="605" height="79" usemap="#FPMap0"><] c:\WINDOWS\System32\ [image unavailable: image]http://image.lop.com/images/new_images/top_left_img.gif" width="172" height="79">[image unavailable: image]http://image.lop.com/images/new_images/header.jpg" width="605" height="79" usemap="#FPMap0">
O4 - HKLM\..\Run: [ http://image.lop.com/images/new_images/bg_main.g] c:\WINDOWS\System32\ http://image.lop.com/images/new_images/bg_main.gif">
O4 - HKLM\..\Run: [ [image unavailable: image]http://image.lop.com/images/new_images/top_left_img_grey.gif" width="172" height="6">] c:\WINDOWS\System32\ [image unavailable: image]http://image.lop.com/images/new_images/top_left_img_grey.gif" width="172" height="6">
O4 - HKLM\..\Run: [ [image unavailable: image]http://image.lop.com/images/new_images/arr_fav.gif" width="4" height="6">] c:\WINDOWS\System32\ [image unavailable: image]http://image.lop.com/images/new_images/arr_fav.gif" width="4" height="6">
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Online+Casino">Online Casino] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Online+Casino">Online Casino
O4 - HKLM\..\Run: [ [image unavailable: image]http://image.lop.com/images/new_images/dots_fav.gif" width="154" height="1" vspace="2">] c:\WINDOWS\System32\ [image unavailable: image]http://image.lop.com/images/new_images/dots_fav.gif" width="154" height="1" vspace="2">
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Online+Dating">Online Dating ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Online+Dating">Online Dating
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Weight+Loss">Weight Loss ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Weight+Loss">Weight Loss
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Inkjet+Cartridge">Inkjet Cartridge ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Inkjet+Cartridge">Inkjet Cartridge
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Cash+Advance">Cash Advance] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Cash+Advance">Cash Advance
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Business+Opportunity">Business Opportunity ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Business+Opportunity">Business Opportunity
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Domain+Hosting">Domain Hosting ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Domain+Hosting">Domain Hosting
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Credit+Cards">Credit Cards ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Credit+Cards">Credit Cards
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Long+Distance">Long Distance ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Long+Distance">Long Distance
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Discount+Travel">Discount Travel] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Discount+Travel">Discount Travel
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
| http://image.lop.com/images/new_images/bg_leftshad.gif" height="423"> <] c:\WINDOWS\System32\ | http://image.lop.com/images/new_images/bg_leftshad.gif" height="423"> |
O4 - HKLM\..\Run: [ [image unavailable: image]http://image.lop.com/images/new_images/round_search_topl.gif" width="7" height="7"><] c:\WINDOWS\System32\ [image unavailable: image]http://image.lop.com/images/new_images/round_search_topl.gif" width="7" height="7">
O4 - HKLM\..\Run: [ [image unavailable: image]http://image.lop.com/images/new_images/spacer.gif" width="1" height="1"><] c:\WINDOWS\System32\ [image unavailable: image]http://image.lop.com/images/new_images/spacer.gif" width="1" height="1">
O4 - HKLM\..\Run: [ [image unavailable: image]http://image.lop.com/images/new_images/round_search_topr.gif" width="7" height="7"><] c:\WINDOWS\System32\ [image unavailable: image]http://image.lop.com/images/new_images/round_search_topr.gif" width="7" height="7">
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
Search our database of the Internet. Enter your search phrase here:<] c:\WINDOWS\System32\
Search our database of the Internet. Enter your search phrase here:
O4 - HKLM\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [ http://image.lop.com/images/new_images/but_search.gif" width="80" height="22"><] c:\WINDOWS\System32\ http://image.lop.com/images/new_images/but_search.gif" width="80" height="22">
O4 - HKLM\..\Run: [ [image unavailable: image]http://image.lop.com/images/new_images/round_search_botl.gif" width="7" height="7"><] c:\WINDOWS\System32\ [image unavailable: image]http://image.lop.com/images/new_images/round_search_botl.gif" width="7" height="7">
O4 - HKLM\..\Run: [ [image unavailable: image]http://image.lop.com/images/new_images/round_search_botr.gif" width="7" height="7"><] c:\WINDOWS\System32\ [image unavailable: image]http://image.lop.com/images/new_images/round_search_botr.gif" width="7" height="7">
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Entertainment">Entertainment<] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Entertainment">Entertainment
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Computer Games">Computer Gameshttp://search.lop.com/search/search.cgi?src=homepage&s=Computer Games">Computer Games,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Instant+Messaging">Instant MessagingInstant" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Instant+Messaging">Instant Messaging,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Adult+Education">Adult EducationAdult" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Adult+Education">Adult Education,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Printer+Cartridge">Printer Cartridge<] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Printer+Cartridge">Printer Cartridge,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Domain+Hosting">Domain HostingDomain" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Domain+Hosting">Domain Hosting,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Debt+Consolidation">Debt ConsolidationDebt" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Debt+Consolidation">Debt Consolidation,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Home+Business">Home BusinessHome" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Home+Business">Home Business,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Internet+Marketing">Internet MarketingInternet" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Internet+Marketing">Internet Marketing,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Long+Distance">Long DistanceLong" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Long+Distance">Long Distance,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Business+Cards">Business CardsBusiness" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Business+Cards">Business Cards,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Working+From+Home">Work From HomeWork" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Working+From+Home">Work From Home,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Incorporation">Incorporation c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Incorporation">Incorporation,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Business+Opportunity">Business Opp.Business" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Business+Opportunity">Business Opp...
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Web+Site+Design">Web Site DesignWeb" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Web+Site+Design">Web Site Design,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Investing+Money">Investing MoneyInvesting" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Investing+Money">Investing Money,
O4 - HKLM\..\Run: [ [image unavailable: image]http://image.lop.com/images/new_images/dots_main.gif" width="1" height="450"><] c:\WINDOWS\System32\ [image unavailable: image]http://image.lop.com/images/new_images/dots_main.gif" width="1" height="450">
O4 - HKLM\..\Run: [
http://search.lop.com/search/search.cgi?src=homepage&s=Online+Casino">Online Casino<] c:\WINDOWS\System32\
http://search.lop.com/search/search.cgi?src=homepage&s=Online+Casino">Online Casino
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Sports+Betting">Sports BettingSports" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Sports+Betting">Sports Betting,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Online+Casino">Online CasinoOnline" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Online+Casino">Online Casino,
O4 - HKLM\..\Run: [
http://search.lop.com/search/search.cgi?src=homepage&s=Travel">Travel Services<] c:\WINDOWS\System32\
http://search.lop.com/search/search.cgi?src=homepage&s=Travel">Travel Services
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Discount+Travel">Discount TravelDiscount" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Discount+Travel">Discount Travel,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Distance+Learning">Distance LearningDistance" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Distance+Learning">Distance Learning,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Business+Schools">Business SchoolsBusiness" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Business+Schools">Business Schools,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Computer+Training">Computer TrainingComputer" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Computer+Training">Computer Training,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Pharmacy+Online">Pharmacy Online…] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Pharmacy+Online">Pharmacy Online…
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Birthday+Gift">Birthday GiftBirthday" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Birthday+Gift">Birthday Gift,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Home+Improvement">Home ImprovementHome" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Home+Improvement">Home Improvement,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Interior+Design">Interior DesignInterior" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Interior+Design">Interior Design,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Home+Theater">Home theater…] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Home+Theater">Home theater…
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Human+Resource">Human ResourceHuman" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Human+Resource">Human Resource,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Legal+Services">Legal ServicesLegal" rel="nofollow noopener noreferrer">http://search.lop.com/search/search.cgi?src=homepage&s=Legal+Services">Legal Services,
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Online+Advertising">Online Advertising…] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Online+Advertising">Online Advertising…
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [Search the Web!</TI] c:\WINDOWS\System32\<TITLE>Search the Web!
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [ .normaltext_times {font-family: times new roman; font-size: 16px; color: #000000; margin:] c:\WINDOWS\System32\ .normaltext_times {font-family: times new roman; font-size: 16px; color: #000000; margin:0px}
O4 - HKLM\..\Run: [ .normaltext_verdana {font-family: verdana, arial, helvetica, sans-serif; font-size: 11px; color: #363636; margin:] c:\WINDOWS\System32\ .normaltext_verdana {font-family: verdana, arial, helvetica, sans-serif; font-size: 11px; color: #363636; margin:0px}
O4 - HKLM\..\Run: [ .normaltext_arial {font-family: arial, helvetica, sans-serif; font-size: 12px; color: #404040; margin:] c:\WINDOWS\System32\ .normaltext_arial {font-family: arial, helvetica, sans-serif; font-size: 12px; color: #404040; margin:0px}
O4 - HKLM\..\Run: [ .small_arial {font-family: arial, helvetica, sans-serif; font-size: 11px; color: #404040; margin:] c:\WINDOWS\System32\ .small_arial {font-family: arial, helvetica, sans-serif; font-size: 11px; color: #404040; margin:0px}
O4 - HKLM\..\Run: [ .verdana_10 {font-family: verdana, arial, helvetica, sans-serif; font-size: 10px; color: #363636; margin:] c:\WINDOWS\System32\ .verdana_10 {font-family: verdana, arial, helvetica, sans-serif; font-size: 10px; color: #363636; margin:0px}
O4 - HKLM\..\Run: [ .verdana_9 {font-family: verdana, arial; font-size: 9px; color: #545454; font-weight: normal; margin:] c:\WINDOWS\System32\ .verdana_9 {font-family: verdana, arial; font-size: 9px; color: #545454; font-weight: normal; margin:0px}
O4 - HKLM\..\Run: [ .formtext {font-family: courier, monosp] c:\WINDOWS\System32\ .formtext {font-family: courier, monospace}
O4 - HKLM\..\Run: [ h1 {font-family: arial, verdana, helvetica, sans-serif; font-size: 15px; color: #363636; ; margin:] c:\WINDOWS\System32\ h1 {font-family: arial, verdana, helvetica, sans-serif; font-size: 15px; color: #363636; ; margin:0px}
O4 - HKLM\..\Run: [ A:link { color: #0051A4; text-decoration: no] c:\WINDOWS\System32\ A:link { color: #0051A4; text-decoration: none }
O4 - HKLM\..\Run: [ A:hover { color: #ff0000; text-decoration: underli] c:\WINDOWS\System32\ A:hover { color: #ff0000; text-decoration: underline }
O4 - HKLM\..\Run: [ A:visited { color: #0051A4; text-decoration: no] c:\WINDOWS\System32\ A:visited { color: #0051A4; text-decoration: none }
O4 - HKLM\..\Run: [ A:visited:hover { color: #ff0000; text-decoration: underli] c:\WINDOWS\System32\ A:visited:hover { color: #ff0000; text-decoration: underline }
O4 - HKLM\..\Run: [ A:active { color: #ED5400; text-decoration: no] c:\WINDOWS\System32\ A:active { color: #ED5400; text-decoration: none }
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [http://www.lop.com/favicon.i] c:\WINDOWS\System32\http://www.lop.com/favicon.ico">
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [" rel="nofollow noopener noreferrer">http://rub.to/info.js">
O4 - HKLM\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Adult">Ad] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Adult">Adult
O4 - HKLM\..\Run: [ Entertainment] c:\WINDOWS\System32\ Entertainment
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Diet+Pills">D] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Diet+Pills">Diet
O4 - HKLM\..\Run: [ Pills ] c:\WINDOWS\System32\ Pills
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Hosting">Web Hosting] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Hosting">Web Hosting
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Home+Business">H] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Home+Business">Home
O4 - HKLM\..\Run: [ Business ] c:\WINDOWS\System32\ Business
O4 - HKLM\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Antivirus">Antivirus ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Antivirus">Antivirus
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Travel">Travel ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Travel">Travel
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Bingo">Bingo ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Bingo">Bingo
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Hosting">] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Hosting">Web
O4 - HKLM\..\Run: [ Hosting ] c:\WINDOWS\System32\ Hosting
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Home+Loan">H] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Home+Loan">Home
O4 - HKLM\..\Run: [ Loan ] c:\WINDOWS\System32\ Loan
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Jackpot">Jackpot ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Jackpot">Jackpot
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Home">Home] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Home">Home
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Viagra">Viagra ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Viagra">Viagra
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Internet">Internet ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Internet">Internet
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Computers">Computers ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Computers">Computers
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Home+Finance">H] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Home+Finance">Home
O4 - HKLM\..\Run: [ Finance ] c:\WINDOWS\System32\ Finance
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Gifts">Gifts ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Gifts">Gifts
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Mp3">MP3 ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Mp3">MP3
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Business">Business] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Business">Business
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Music">Music ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Music">Music
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Cruises">Cruises ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Cruises">Cruises
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Games">Games] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Games">Games
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Personals">Personals ] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Personals">Personals
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=DVD">DVD] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=DVD">DVD
O4 - HKLM\..\Run: [ http://search.lop.com/search/search.cgi?src=homepage&s=Shopping">Shopping] c:\WINDOWS\System32\ http://search.lop.com/search/search.cgi?src=homepage&s=Shopping">Shopping
O4 - HKLM\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [
Search the Web:<] c:\WINDOWS\System32\
Search the Web:
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [<] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [