Need help please with this log

Hi,
This log is from our teenagers PC. I've run the recommended programs, Ad-Aware and Spybot. But the PC still seems to be very slow and will not allow Norton firewall or anti-virus to be activated. It's very frustrating, please help. Thank you, gettingolder2

Logfile of HijackThis v1.99.1
Scan saved at 1:56:23 PM, on 7/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Norton Internet Security\ccPxySvc.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\lsass.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\wanmpsvc.exe
C:\WINNT\system32\SK9910DM.EXE
C:\WINNT\GWMDMMSG.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINNT\system32\twhsmpx\tmoqq.exe
C:\WINNT\system32\obnydep\ojnd.exe
C:\WINNT\system32\pkjn\ooiaqs.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\muckh\aspu.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\winnt\system32\lcmxjw.exe
C:\WINNT\system32\eknfg\kebyg.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\WINNT\system32\qydmufxn\wrlkkl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINNT\system32\accwiz.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\DOCUME~1\Owner\APPLIC~1\YSTEM3~1\regedit.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\system32\??crosoft\n?tdde.exe
C:\Program Files\AOL Companion\companion.exe
C:\Program Files\AT&T Plug&Share 54Mbps Wireless PCI Adapter\WLANMON.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\about.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
F1 - win.ini: run=C:\WINNT\..\PROGRA~1\COMMON~1\MICROS~1\MSInfo\
F2 - REG:system.ini: UserInit=C:\WINNT\System32\userinit.exe,C:\WINNT\System32\svcinit.exe
O2 - BHO: (no name) - {3822B470-D2EA-310B-F41D-DB8A1C59B978} - C:\WINNT\system32\hhkxrovg\irdsmoaq.dll (file missing)
O2 - BHO: (no name) - {3F8F7D75-F7E3-CBCC-EF5F-549A97B8F01B} - C:\WINNT\system32\avnxkoex\udtepkwq.dll (file missing)
O2 - BHO: (no name) - {43A41F34-AA8F-A42C-D0EC-F30A007EA69F} - C:\WINNT\system32\jyu.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: (no name) - {72892F45-87BF-941A-FDDE-C02742388BAE} - C:\WINNT\system32\jyu.dll (file missing)
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: (no name) - {B863379B-EC23-CFB3-82DB-003274F5EC92} - C:\WINNT\system32\ejgpbehi\vifewtot.dll (file missing)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {DE546BF1-9DF8-144C-1D65-F80D9CDF7925} - C:\WINNT\system32\tndmwfoi\vxolvjng.dll
O3 - Toolbar: AOLToolBand Class - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Hot Key Kbd 9910 Daemon] SK9910DM.EXE
O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe
O4 - HKLM\..\Run: [Keyboard Preload Check] C:\OEMDRVRS\KEYB\Preload.exe /DEVID: /CLASS:Keyboard /RunValue:"Keyboard Preload Check"
O4 - HKLM\..\Run: [GWMDMpi] C:\WINNT\GWMDMpi.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [tubmwd] C:\WINNT\System32\dpwvy\tubmwd.exe
O4 - HKLM\..\Run: [miqqeuf] C:\WINNT\System32\vqvrkp\miqqeuf.exe
O4 - HKLM\..\Run: [lwxhxwy] C:\WINNT\System32\gskts\lwxhxwy.exe
O4 - HKLM\..\Run: [lvctm] C:\WINNT\System32\uvfg\lvctm.exe
O4 - HKLM\..\Run: [psuhopvo] C:\WINNT\System32\ybkvpr\psuhopvo.exe
O4 - HKLM\..\Run: [falmf] C:\WINNT\System32\jptil\falmf.exe
O4 - HKLM\..\Run: [wjwc] C:\WINNT\System32\assmi\wjwc.exe
O4 - HKLM\..\Run: [rmdqoi] C:\WINNT\System32\fnal\rmdqoi.exe
O4 - HKLM\..\Run: [arxuxyp] C:\WINNT\System32\nqvm\arxuxyp.exe
O4 - HKLM\..\Run: [tjgvwmch] C:\WINNT\System32\qcvyekk\tjgvwmch.exe
O4 - HKLM\..\Run: [xsljcf] C:\WINNT\System32\hlbys\xsljcf.exe
O4 - HKLM\..\Run: [fsanhcqb] C:\WINNT\System32\lfpcrsy\fsanhcqb.exe
O4 - HKLM\..\Run: [mnqcg] C:\WINNT\system32\jklkge\mnqcg.exe
O4 - HKLM\..\Run: [mlwxxcpi] C:\WINNT\system32\qcmwc\mlwxxcpi.exe
O4 - HKLM\..\Run: [j5o] C:\documents and settings\owner\local settings\temp\j5o.exe
O4 - HKLM\..\Run: [BUxmh6] C:\documents and settings\owner\local settings\temp\BUxmh6.exe
O4 - HKLM\..\Run: [eutetn] C:\WINNT\system32\nlte\eutetn.exe
O4 - HKLM\..\Run: [ogrddncg] C:\WINNT\system32\fyfrwj\ogrddncg.exe
O4 - HKLM\..\Run: [hleen] C:\WINNT\system32\acrs\hleen.exe
O4 - HKLM\..\Run: [kfgqp] C:\WINNT\system32\yvskd\kfgqp.exe
O4 - HKLM\..\Run: [fkujemop] C:\WINNT\system32\tdyykkj\fkujemop.exe
O4 - HKLM\..\Run: [mtdwoitp] C:\WINNT\system32\utam\mtdwoitp.exe
O4 - HKLM\..\Run: [vphasbi] C:\WINNT\system32\amslbxxx\vphasbi.exe
O4 - HKLM\..\Run: [cqystxv] C:\WINNT\system32\ifmsxi\cqystxv.exe
O4 - HKLM\..\Run: [tmumt] C:\WINNT\system32\ujcfdp\tmumt.exe
O4 - HKLM\..\Run: [crjhma] C:\WINNT\system32\tpsccd\crjhma.exe
O4 - HKLM\..\Run: [wyddiwr] C:\WINNT\system32\ifqevt\wyddiwr.exe
O4 - HKLM\..\Run: [dteyvpky] C:\WINNT\system32\edjimr\dteyvpky.exe
O4 - HKLM\..\Run: [lvyau] C:\WINNT\system32\jqkua\lvyau.exe
O4 - HKLM\..\Run: [cdny] C:\WINNT\system32\xxgnws\cdny.exe
O4 - HKLM\..\Run: [pgbkdaq] C:\WINNT\system32\pmsgu\pgbkdaq.exe
O4 - HKLM\..\Run: [apqnwd] C:\WINNT\system32\pcithydd\apqnwd.exe
O4 - HKLM\..\Run: [ocwuw] C:\WINNT\system32\fkmcgu\ocwuw.exe
O4 - HKLM\..\Run: [rs3O3qV] ftpowbro.exe
O4 - HKLM\..\Run: [vkduwq] C:\WINNT\system32\qaqs\vkduwq.exe
O4 - HKLM\..\Run: [colbopf] C:\WINNT\system32\gnesbeq\colbopf.exe
O4 - HKLM\..\Run: [lvbqx] C:\WINNT\system32\xrid\lvbqx.exe
O4 - HKLM\..\Run: [jfko] C:\WINNT\system32\pmwyf\jfko.exe
O4 - HKLM\..\Run: [gnecq] C:\WINNT\system32\dnmguva\gnecq.exe
O4 - HKLM\..\Run: [vgoprhrs] C:\WINNT\system32\tmop\vgoprhrs.exe
O4 - HKLM\..\Run: [lwoou] C:\WINNT\system32\emud\lwoou.exe
O4 - HKLM\..\Run: [glby] C:\WINNT\system32\gurwh\glby.exe
O4 - HKLM\..\Run: [vsypkcgs] C:\WINNT\system32\lkfrbh\vsypkcgs.exe
O4 - HKLM\..\Run: [cgxj] C:\WINNT\system32\nvje\cgxj.exe
O4 - HKLM\..\Run: [tcwyqa] C:\WINNT\system32\bnnwmvsr\tcwyqa.exe
O4 - HKLM\..\Run: [vaiss] C:\WINNT\system32\gpdpc\vaiss.exe
O4 - HKLM\..\Run: [jqvqqk] C:\WINNT\system32\vvapkfyk\jqvqqk.exe
O4 - HKLM\..\Run: [dvxi] C:\WINNT\system32\xfuvmajx\dvxi.exe
O4 - HKLM\..\Run: [yqgaved] C:\WINNT\system32\ueooma\yqgaved.exe
O4 - HKLM\..\Run: [jfmn] C:\WINNT\system32\xrwbba\jfmn.exe
O4 - HKLM\..\Run: [ouxxuj] C:\WINNT\system32\pgeshub\ouxxuj.exe
O4 - HKLM\..\Run: [iekmnq] C:\WINNT\system32\rynvtiii\iekmnq.exe
O4 - HKLM\..\Run: [xptrivo] C:\WINNT\system32\ymdyjmu\xptrivo.exe
O4 - HKLM\..\Run: [lcxbgpx] C:\WINNT\system32\xronc\lcxbgpx.exe
O4 - HKLM\..\Run: [waffd] C:\WINNT\system32\bphpd\waffd.exe
O4 - HKLM\..\Run: [glurydo] C:\WINNT\system32\roqn\glurydo.exe
O4 - HKLM\..\Run: [mlvn] C:\WINNT\system32\eoggaq\mlvn.exe
O4 - HKLM\..\Run: [qhlk] C:\WINNT\system32\okypplae\qhlk.exe
O4 - HKLM\..\Run: [otdnabml] C:\WINNT\system32\jkhga\otdnabml.exe
O4 - HKLM\..\Run: [krkyavhs] C:\WINNT\system32\ujsapkwo\krkyavhs.exe
O4 - HKLM\..\Run: [ddblxmm] C:\WINNT\system32\dgrlh\ddblxmm.exe
O4 - HKLM\..\Run: [jvkj] C:\WINNT\system32\bvqmxqr\jvkj.exe
O4 - HKLM\..\Run: [rbneriq] C:\WINNT\system32\xhtbiun\rbneriq.exe
O4 - HKLM\..\Run: [rqem] C:\WINNT\system32\tuxuxjol\rqem.exe
O4 - HKLM\..\Run: [jphobo] C:\WINNT\system32\ifvm\jphobo.exe
O4 - HKLM\..\Run: [dxfv] C:\WINNT\system32\kibr\dxfv.exe
O4 - HKLM\..\Run: [symuswe] C:\WINNT\system32\qkjeb\symuswe.exe
O4 - HKLM\..\Run: [hmcyjucm] C:\WINNT\system32\sxduem\hmcyjucm.exe
O4 - HKLM\..\Run: [ollng] C:\WINNT\system32\gipakui\ollng.exe
O4 - HKLM\..\Run: [lcmxjw] c:\winnt\system32\lcmxjw.exe
O4 - HKLM\..\Run: [aspu] C:\WINNT\system32\muckh\aspu.exe
O4 - HKLM\..\Run: [kebyg] C:\WINNT\system32\eknfg\kebyg.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [wrlkkl] C:\WINNT\system32\qydmufxn\wrlkkl.exe
O4 - HKLM\..\Run: [rmutlimy] C:\WINNT\system32\olbnjl\rmutlimy.exe
O4 - HKLM\..\Run: [bjndb] C:\WINNT\system32\rncqndb\bjndb.exe
O4 - HKLM\..\Run: [dyviyyrr] C:\WINNT\system32\bnqfw\dyviyyrr.exe
O4 - HKLM\..\Run: [wilt] C:\WINNT\system32\aaqtfa\wilt.exe
O4 - HKLM\..\Run: [miamaea] C:\WINNT\system32\dnigxbxe\miamaea.exe
O4 - HKLM\..\Run: [naivo] C:\WINNT\system32\gmenhqeq\naivo.exe
O4 - HKLM\..\Run: [uakxv] C:\WINNT\system32\jupkaw\uakxv.exe
O4 - HKLM\..\Run: [iqrqmdoo] C:\WINNT\system32\mevirdfh\iqrqmdoo.exe
O4 - HKLM\..\Run: [qqvm] C:\WINNT\system32\pspmai\qqvm.exe
O4 - HKLM\..\Run: [uycrwqr] C:\WINNT\system32\jponogro\uycrwqr.exe
O4 - HKLM\..\Run: [vshkm] C:\WINNT\system32\krocq\vshkm.exe
O4 - HKLM\..\Run: [ooiaqs] C:\WINNT\system32\pkjn\ooiaqs.exe
O4 - HKLM\..\Run: [etfcajcu] C:\WINNT\system32\pegca\etfcajcu.exe
O4 - HKLM\..\Run: [ymnd] C:\WINNT\system32\hdndui\ymnd.exe
O4 - HKLM\..\Run: [lsvqy] C:\WINNT\system32\rmfebq\lsvqy.exe
O4 - HKLM\..\Run: [sjeclj] C:\WINNT\system32\slyyl\sjeclj.exe
O4 - HKLM\..\Run: [xsevs] C:\WINNT\system32\eewmd\xsevs.exe
O4 - HKLM\..\Run: [plbxnd] C:\WINNT\system32\fjqx\plbxnd.exe
O4 - HKLM\..\Run: [tmoqq] C:\WINNT\system32\twhsmpx\tmoqq.exe
O4 - HKLM\..\Run: [ojnd] C:\WINNT\system32\obnydep\ojnd.exe
O4 - HKLM\..\Run: [Nsv] C:\WINNT\system32\nsvsvc\nsvsvc.exe
O4 - HKLM\..\Run: [vidctrl] C:\WINNT\system32\vidctrl\vidctrl.exe
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [NAV CfgWiz] C:\PROGRA~1\NORTON~1\Cfgwiz.exe /R
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [aBsERkZER] ennic.exe
O4 - HKCU\..\Run: [rfzm] C:\PROGRA~1\COMMON~1\rfzm\rfzmm.exe
O4 - HKCU\..\Run: [Ltho] "C:\DOCUME~1\Owner\APPLIC~1\YSTEM3~1\regedit.exe" -vt rbnd
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGACCESS4_1058.dll,InstantAccess
O4 - HKCU\..\Run: [Fmrnhhei] C:\WINNT\system32\??crosoft\n?tdde.exe
O4 - Global Startup: America Online Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exe
O4 - Global Startup: AT&T Plug&Share 54Mbps Wireless PCI Adapter Utility.lnk = ?
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Norton Internet Security.lnk = C:\Program Files\Norton Internet Security\IntroWiz.exe
O8 - Extra context menu item: &AOL Toolbar Search - res://c:\program files\aol\aol toolbar 2.0\aoltbhtml.dll/search.html
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: (no name) - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: {07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157} - http://akamai.downloadv3.com/binaries/EGDA…ESS_1063_XP.cab
O16 - DPF: {1CD49DC9-FD88-41FA-B892-47E037267D45} - http://akamai.downloadv3.com/binaries/EGDA…ESS_1059_XP.cab
O16 - DPF: {2A3DFC59-8A87-49A1-85D1-42903410911F} - http://scripts.dlv4.com/binaries/egaccess4…ss4_1058_XP.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1152681476171
O16 - DPF: {82FC4503-8459-4239-9B85-0617BEAA950A} - http://scripts.dlv4.com/binaries/egaccess4…ss4_1061_XP.cab
O18 - Protocol hijack: mhtml -
O19 - User stylesheet: (file missing)
O20 - AppInit_DLLs: mad.dll
O20 - Winlogon Notify: Extensions - C:\WINNT\system32\azaml3f11.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPxySvc.exe
O23 - Service: cgxjnvje - Unknown owner - C:\WINNT\system32\nvje\cgxj.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lqeokaieuof - Unknown owner - C:\WINNT\system32\euof\lqeokai.exe (file missing)
O23 - Service: Local Security Authority Subsystem Service (lsass) - Unknown owner - C:\WINNT\lsass.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Internet Security Accounts Manager (NISUM) - Symantec Corporation - C:\Program Files\Norton Internet Security\NISUM.EXE
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINNT\System32\NMSSvc.exe
O23 - Service: qcdpiwtiewba - Unknown owner - C:\WINNT\system32\iwtiewba\qcdp.exe (file missing)
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINNT\wanmpsvc.exe