First here is the Ewido report
---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------
+ Created on: 4:49:43 PM, 3/19/2006
+ Report-Checksum: 55FA6654
+ Scan result:
HKLM\SOFTWARE\Classes\SWRT01.RT -> Adware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Classes\SWRT01.RT\Clsid -> Adware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\WhenUSave -> Adware.SaveNow : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\AUI -> Adware.WebSearch : Cleaned with backup
HKU\S-1-5-21-1078081533-630328440-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4DA4616D-7E6E-4FD9-A2D5-B6C535733E22} -> Adware.Generic : Cleaned with backup
:mozilla.27:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.28:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.29:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.31:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.32:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.33:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.34:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.35:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.36:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.37:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.38:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.39:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.40:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.41:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.42:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.43:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.44:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.45:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.46:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.47:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.48:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.49:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.50:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.51:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.52:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.55:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.56:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.57:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.58:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.59:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.60:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.61:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.62:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.63:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.64:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.65:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.66:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.67:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.68:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.69:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.71:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.72:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.73:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Starware : Cleaned with backup
:mozilla.74:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Starware : Cleaned with backup
:mozilla.75:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Starware : Cleaned with backup
:mozilla.76:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Starware : Cleaned with backup
:mozilla.90:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.91:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.92:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.93:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.94:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.95:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.96:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.97:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.98:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.99:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.100:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.101:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.102:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.103:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.104:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.105:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.106:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.108:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.112:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.113:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.114:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.115:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\y2ec5dq7.James\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup
C:\Documents and Settings\James\Cookies\james@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\James\Cookies\james@ads.com[1].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\James\Cookies\james@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned with backup
C:\Documents and Settings\James\Cookies\james@com[2].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\James\Cookies\james@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Cleaned with backup
C:\Documents and Settings\James\Cookies\james@z1.adserver[1].txt -> TrackingCookie.Adserver : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\gsda.dll -> Not-A-Virus.Downloader.Win32.SpyGame : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\YazzleActiveX.ocx -> Adware.MediaTickets : Cleaned with backup
C:\WINDOWS\emsw.exe -> Adware.HelpExpress : Cleaned with backup
C:\WINDOWS\system32\BO2809040510.exe -> Adware.VirtualBouncer : Cleaned with backup
C:\WINDOWS\system32\dfrgsrv.exe -> Downloader.Zlob.in : Cleaned with backup
C:\WINDOWS\system32\in9bjs.dll -> Dropper.Small.abe : Cleaned with backup
C:\WINDOWS\system32\oins.exe -> Downloader.PurityScan.bt : Cleaned with backup
C:\WINDOWS\system32\SplWbr.dll -> Adware.VirtualBouncer : Cleaned with backup
C:\WINDOWS\system32\SWRT01.dll -> Adware.VirtualBouncer : Cleaned with backup
C:\WINDOWS\temp\win1BB.tmp.exe -> Trojan.Dialer.oy : Cleaned with backup
C:\WINDOWS\temp\win1C3.tmp.exe -> Trojan.Dialer.oy : Cleaned with backup
C:\WINDOWS\temp\win1DD.tmp.exe -> Trojan.Dialer.oy : Cleaned with backup
C:\WINDOWS\temp\win201.tmp.exe -> Trojan.Dialer.oy : Cleaned with backup
C:\WINDOWS\temp\win5C8.tmp.exe -> Trojan.Dialer.oy : Cleaned with backup
C:\WINDOWS\temp\win675.tmp.exe -> Trojan.Dialer.oy : Cleaned with backup
C:\WINDOWS\temp\win67C.tmp.exe -> Trojan.Dialer.oy : Cleaned with backup
C:\WINDOWS\temp\win691.tmp.exe -> Trojan.Dialer.oy : Cleaned with backup
C:\WINDOWS\temp\win6C4.tmp.exe -> Trojan.Dialer.oy : Cleaned with backup
C:\WINDOWS\temp\win6DE.tmp.exe -> Trojan.Dialer.oy : Cleaned with backup
C:\WINDOWS\YAXUninst.exe -> Adware.MediaTickets : Cleaned with backup
::Report End
Now the HJT log
Logfile of HijackThis v1.99.1
Scan saved at 4:52:47 PM, on 3/19/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\BearShare\BearShare.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\James\LOCALS~1\Temp\Rar$EX00.047\HijackThis.exe
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll (file missing)
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Cuhxqiy] C:\Documents and Settings\James\My Documents\a?sembly\w?auboot.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Stop popups from this web page - C:\Program Files\GIANT Company Software inc\PopUp Inspector\denysite.htm
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (file missing) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft....467&clcid=0x409
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) -
http://launch.gamesp...nch/alaunch.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) -
http://yax-download.....cab?refid=1123
O20 - Winlogon Notify: winypt32 - C:\WINDOWS\SYSTEM32\winypt32.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe