What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Drivecleaner, sysprotect popups

21 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hi,

I have developed the same nagging problem that seems to be infecting others.

My Hijack This Log follows:

Logfile of HijackThis v1.99.1
Scan saved at 3:51:11 PM, on 8/4/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\LEXBCES.EXE
D:\WINDOWS\system32\LEXPPS.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\ZONELABS\vsmon.exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
D:\Program Files\Logitech\MouseWare\system\em_exec.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
D:\Program Files\Outlook Express\msimn.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Documents and Settings\me\Desktop\virus stuff\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.ce1.attbb.net:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.ce1.attbb.net;localhost
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe,pxtomdm.exe
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunServices: [Keyboard Manager] D:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKCU\..\Run: [LDM] \Program\
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Acrobat Assistant.lnk = D:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Support - {0F2847D2-DAF9-4A84-9F11-F2EF2A4CA6BC} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: Help - {16041FA9-764E-457F-ACEF-9E8BDAA1030E} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: (no name) - {1AA7429D-8F3B-4E04-8D67-4B04B5849C29} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {2B1AA38D-2D12-11D5-AAD0-00C04FA03D78} (LocalExec Control) - http://netdirect.metrostate.edu/nps/portal…t/LocalExec.CAB
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {3DA5D23B-EFE1-4181-ADB7-7D457567AACA} (TGOnlineCtrl Class) - http://zone.msn.com/bingame/pacz/default/pandaonline.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://zone.msn.com/bingame/rtlw/default/R…bGameLoader.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} -
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1123706826290
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {6F74F92E-8DD8-4DDE-8FB8-CBB882A68048} (Microsoft Office XP Professional Step by Step Interactive) - file://D:\Program Files\Microsoft Interactive Training\O10C\mitm0026.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/chnz/default/mjolauncher.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…canner37710.cab
O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames/zpa_dmno.cab42341.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - http://a19.g.akamai.net/7/19/7125/4019/ftp…23/cpbrkpie.cab
O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} (ZPA_HRTZ Object) - http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab37625.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://zone.msn.com/binGame/ZAxRcMgr.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundl…ArcadeRdxIE.cab
O16 - DPF: {CAC181B0-4D70-402D-B571-C596A47D0CE0} (CBankshotZoneCtrl Class) - http://zone.msn.com/bingame/zpagames/zpa_pool.cab42858.cab
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://zone.msn.com/bingame/feed/default/SproutLauncher.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://zone.msn.com/bingame/gold/unskin/gf.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {DAF5D9A2-D982-4671-83E4-0398706A5F6A} (SCEWebLauncherCtl Object) - http://zone.msn.com/bingame/hsol/default/SCEWebLauncher.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} -
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {ED28050F-D713-43BA-A376-DCC5C35407D5} - http://entimg.msn.com/client/msnmusax3606.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…350/mcfscan.cab
O18 - Protocol: bw+0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - D:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZONELABS\vsmon.exe

Please help. Spybot shows everything is clean, but the popups are still there…

Thanks,
Vulture_Culture211
Post #2
Welcome to the forum :wavey:

I don't see anything bad present.

Try this:

Rename:

D:\Documents and Settings\me\Desktop\virus stuff\HijackThis.exe

To:

D:\Documents and Settings\me\Desktop\virus stuff\glass.exe

Reboot.

Run it and post another log into this thread.

Some malware has been known to hide from HijackThis!

This should make it come to light (if present).

If nothing new shows up, there are other avenues we can pursue.
:) :thumbup:
Post #3
My bad!!!

:oops:

Fix this:

F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe,pxtomdm.exe

Reboot and post another log….
Post #5

D:\Documents and Settings\me\Desktop\virus stuff\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.ce1.attbb.net:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.ce1.attbb.net;localhost
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe,pxtomdm.exe
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll

Post #7
New HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 9:50:11 AM, on 8/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\LEXBCES.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\LEXPPS.EXE
D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\Program Files\AnalogX\CookieWall\cookie.exe
D:\Program Files\ewido anti-spyware 4.0\ewido.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\Program Files\Logitech\MouseWare\system\em_exec.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
D:\Program Files\ewido anti-spyware 4.0\guard.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\ZONELABS\vsmon.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Documents and Settings\me\Desktop\virus stuff\glass.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.ce1.attbb.net:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.ce1.attbb.net;localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6853BF99-5053-490F-B167-0D5F1D85CEB5} - D:\WINDOWS\system32\fcyvu.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [CookieWall] D:\Program Files\AnalogX\CookieWall\cookie.exe
O4 - HKLM\..\Run: [!ewido] "D:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\RunServices: [Keyboard Manager] D:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] \Program\
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Support - {0F2847D2-DAF9-4A84-9F11-F2EF2A4CA6BC} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: Help - {16041FA9-764E-457F-ACEF-9E8BDAA1030E} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: (no name) - {1AA7429D-8F3B-4E04-8D67-4B04B5849C29} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {2B1AA38D-2D12-11D5-AAD0-00C04FA03D78} (LocalExec Control) - http://netdirect.metrostate.edu/nps/portal…t/LocalExec.CAB
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {3DA5D23B-EFE1-4181-ADB7-7D457567AACA} (TGOnlineCtrl Class) - http://zone.msn.com/bingame/pacz/default/pandaonline.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://zone.msn.com/bingame/rtlw/default/R…bGameLoader.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} -
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1123706826290
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {6F74F92E-8DD8-4DDE-8FB8-CBB882A68048} (Microsoft Office XP Professional Step by Step Interactive) - file://D:\Program Files\Microsoft Interactive Training\O10C\mitm0026.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/chnz/default/mjolauncher.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…canner37710.cab
O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames/zpa_dmno.cab42341.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - http://a19.g.akamai.net/7/19/7125/4019/ftp…23/cpbrkpie.cab
O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} (ZPA_HRTZ Object) - http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab37625.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://zone.msn.com/binGame/ZAxRcMgr.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundl…ArcadeRdxIE.cab
O16 - DPF: {CAC181B0-4D70-402D-B571-C596A47D0CE0} (CBankshotZoneCtrl Class) - http://zone.msn.com/bingame/zpagames/zpa_pool.cab42858.cab
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://zone.msn.com/bingame/feed/default/SproutLauncher.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://zone.msn.com/bingame/gold/unskin/gf.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {DAF5D9A2-D982-4671-83E4-0398706A5F6A} (SCEWebLauncherCtl Object) - http://zone.msn.com/bingame/hsol/default/SCEWebLauncher.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} -
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {ED28050F-D713-43BA-A376-DCC5C35407D5} -
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…350/mcfscan.cab
O18 - Protocol: bw+0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: fcyvu - D:\WINDOWS\system32\fcyvu.dll
O20 - Winlogon Notify: NavLogon - D:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - D:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - D:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZONELABS\vsmon.exe
Post #8
Please disable Teatimer, it can interfere with the cleaning process:

on the Teatimer icon in the system tray, and "exit".

Then do this:

How to Disable Teatimer

After we have cleaned your system, please be sure to reverse this process, and re-enable Teatimer.

CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!

Run Hijack This!
Click "Do a systen scan only".
Then "check" the box to the left of these item(s):

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm

O2 - BHO: (no name) - {6853BF99-5053-490F-B167-0D5F1D85CEB5} - D:\WINDOWS\system32\fcyvu.dll

O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)

O4 - HKCU\..\Run: [LDM] \Program\

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -

O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - http://a19.g.akamai.net/7/19/7125/4019/ftp…23/cpbrkpie.cab

O20 - Winlogon Notify: fcyvu - D:\WINDOWS\system32\fcyvu.dll

Then click "Fix checked" and close Hijack This!.

Reboot in "safe" mode.

Delete all of the following noted (in red) file(s)/FOLDER(s) you can find:

d:\windows\system32\fcyvu.dll <— file

Some malware files may be "hidden".
Be sure to show hidden files when looking for these file(s) and/or folder(s).

Reboot in normal mode and "copy/paste" a new HijackThis! log file into this thread. :)
Post #9
when in safe mode got this message on deleting the file…

Cannot delete fcyvu. It is being used by another person or program. Close any program that might be using the file and try again.

Latest HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 10:22:58 AM, on 8/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\LEXBCES.EXE
D:\WINDOWS\system32\LEXPPS.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\Program Files\AnalogX\CookieWall\cookie.exe
D:\Program Files\ewido anti-spyware 4.0\ewido.exe
D:\Program Files\Logitech\MouseWare\system\em_exec.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
D:\Program Files\ewido anti-spyware 4.0\guard.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\ZONELABS\vsmon.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Documents and Settings\me\Desktop\virus stuff\glass.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.ce1.attbb.net:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.ce1.attbb.net;localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {57C3FF5B-1948-48FC-82A7-E307ECD31E8A} - D:\WINDOWS\system32\fcyvu.dll
O2 - BHO: (no name) - {6853BF99-5053-490F-B167-0D5F1D85CEB5} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [CookieWall] D:\Program Files\AnalogX\CookieWall\cookie.exe
O4 - HKLM\..\Run: [!ewido] "D:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\RunServices: [Keyboard Manager] D:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] \Program\
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Support - {0F2847D2-DAF9-4A84-9F11-F2EF2A4CA6BC} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: Help - {16041FA9-764E-457F-ACEF-9E8BDAA1030E} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: (no name) - {1AA7429D-8F3B-4E04-8D67-4B04B5849C29} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {2B1AA38D-2D12-11D5-AAD0-00C04FA03D78} (LocalExec Control) - http://netdirect.metrostate.edu/nps/portal…t/LocalExec.CAB
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {3DA5D23B-EFE1-4181-ADB7-7D457567AACA} (TGOnlineCtrl Class) - http://zone.msn.com/bingame/pacz/default/pandaonline.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://zone.msn.com/bingame/rtlw/default/R…bGameLoader.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} -
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1123706826290
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {6F74F92E-8DD8-4DDE-8FB8-CBB882A68048} (Microsoft Office XP Professional Step by Step Interactive) - file://D:\Program Files\Microsoft Interactive Training\O10C\mitm0026.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/chnz/default/mjolauncher.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…canner37710.cab
O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames/zpa_dmno.cab42341.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} -
O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} (ZPA_HRTZ Object) - http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab37625.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://zone.msn.com/binGame/ZAxRcMgr.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundl…ArcadeRdxIE.cab
O16 - DPF: {CAC181B0-4D70-402D-B571-C596A47D0CE0} (CBankshotZoneCtrl Class) - http://zone.msn.com/bingame/zpagames/zpa_pool.cab42858.cab
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://zone.msn.com/bingame/feed/default/SproutLauncher.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://zone.msn.com/bingame/gold/unskin/gf.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {DAF5D9A2-D982-4671-83E4-0398706A5F6A} (SCEWebLauncherCtl Object) - http://zone.msn.com/bingame/hsol/default/SCEWebLauncher.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} -
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {ED28050F-D713-43BA-A376-DCC5C35407D5} -
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…350/mcfscan.cab
O18 - Protocol: bw+0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: fcyvu - D:\WINDOWS\system32\fcyvu.dll
O20 - Winlogon Notify: NavLogon - D:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - D:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - D:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZONELABS\vsmon.exe
Post #10
I figured the odds were 9 to 1 against you being able to delete it…

Download VundoFix.exe to your desktop from here:

VundoFix.exe

CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!

1. Double-click VundoFix.exe to run it.
2. Click the Scan for Vundo button.
3. Once it's done scanning, click the Remove Vundo button.
4. If it doesn't find anything, in the main program window, choose "Add more files?". Type this in the box EXACTLY AS SHOWN:

D:\WINDOWS\system32\fcyvu.dll

Click Close Window, then Remove Vundo.

4. You will receive a prompt asking if you want to remove the files, click YES.
5. Once you click yes, your desktop will go blank as it starts removing Vundo.
6. When completed, it will prompt that it will shutdown your computer, click OK.
7. Turn your computer back on.

Post a new HijackThis! log, along with the contents of this file:

C:\vundofix.txt

into this thread.
:)
Post #11
sorry this took so long… nature called for me and the dog!

HJT file:
Logfile of HijackThis v1.99.1
Scan saved at 11:07:30 AM, on 8/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\LEXBCES.EXE
D:\WINDOWS\system32\LEXPPS.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
D:\Program Files\Logitech\MouseWare\system\em_exec.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\Program Files\AnalogX\CookieWall\cookie.exe
D:\Program Files\ewido anti-spyware 4.0\ewido.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\ZONELABS\vsmon.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Documents and Settings\me\Desktop\virus stuff\glass.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.ce1.attbb.net:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.ce1.attbb.net;localhost
O2 - BHO: (no name) - {047F4207-47B5-4171-8D84-9CC534E9677A} - D:\WINDOWS\system32\fcyvu.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {25736E66-D6C2-4D73-BA6B-64889CAF44DF} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6853BF99-5053-490F-B167-0D5F1D85CEB5} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [CookieWall] D:\Program Files\AnalogX\CookieWall\cookie.exe
O4 - HKLM\..\Run: [!ewido] "D:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\RunServices: [Keyboard Manager] D:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] \Program\
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Support - {0F2847D2-DAF9-4A84-9F11-F2EF2A4CA6BC} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: Help - {16041FA9-764E-457F-ACEF-9E8BDAA1030E} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: (no name) - {1AA7429D-8F3B-4E04-8D67-4B04B5849C29} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {2B1AA38D-2D12-11D5-AAD0-00C04FA03D78} (LocalExec Control) - http://netdirect.metrostate.edu/nps/portal…t/LocalExec.CAB
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {3DA5D23B-EFE1-4181-ADB7-7D457567AACA} (TGOnlineCtrl Class) - http://zone.msn.com/bingame/pacz/default/pandaonline.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://zone.msn.com/bingame/rtlw/default/R…bGameLoader.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} -
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1123706826290
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {6F74F92E-8DD8-4DDE-8FB8-CBB882A68048} (Microsoft Office XP Professional Step by Step Interactive) - file://D:\Program Files\Microsoft Interactive Training\O10C\mitm0026.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/chnz/default/mjolauncher.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…canner37710.cab
O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames/zpa_dmno.cab42341.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} -
O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} (ZPA_HRTZ Object) - http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab37625.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://zone.msn.com/binGame/ZAxRcMgr.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundl…ArcadeRdxIE.cab
O16 - DPF: {CAC181B0-4D70-402D-B571-C596A47D0CE0} (CBankshotZoneCtrl Class) - http://zone.msn.com/bingame/zpagames/zpa_pool.cab42858.cab
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://zone.msn.com/bingame/feed/default/SproutLauncher.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://zone.msn.com/bingame/gold/unskin/gf.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {DAF5D9A2-D982-4671-83E4-0398706A5F6A} (SCEWebLauncherCtl Object) - http://zone.msn.com/bingame/hsol/default/SCEWebLauncher.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} -
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {ED28050F-D713-43BA-A376-DCC5C35407D5} -
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…350/mcfscan.cab
O18 - Protocol: bw+0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: fcyvu - D:\WINDOWS\system32\fcyvu.dll
O20 - Winlogon Notify: NavLogon - D:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - D:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - D:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZONELABS\vsmon.exe

Vundo fix:

VundoFix V4.2.84

Checking Java version…

Java version is 1.5.0.6

Scan started at 6:28:40 AM 6/28/2006

Listing files found while scanning….


D:\WINDOWS\system32\uvycf.bak1
D:\WINDOWS\system32\uvycf.bak2
D:\WINDOWS\system32\uvycf.ini
D:\WINDOWS\system32\fcyvu.dll
Attempting to delete D:\WINDOWS\system32\uvycf.bak1
D:\WINDOWS\system32\uvycf.bak1 Has been deleted!

Attempting to delete D:\WINDOWS\system32\uvycf.bak2
D:\WINDOWS\system32\uvycf.bak2 Has been deleted!

Attempting to delete D:\WINDOWS\system32\uvycf.ini
D:\WINDOWS\system32\uvycf.ini Has been deleted!

Attempting to delete D:\WINDOWS\system32\fcyvu.dll
D:\WINDOWS\system32\fcyvu.dll Could not be deleted.

Performing Repairs to the registry.
Done!

VundoFix V4.2.84

Checking Java version…

Java version is 1.5.0.6

Scan started at 8:25:05 PM 8/3/2006

Listing files found while scanning….


No infected files were found.


VundoFix V5.1.6

Checking Java version…

Java version is 1.5.0.6

Scan started at 10:37:49 AM 8/6/2006

Listing files found while scanning….

No infected files were found.


Beginning removal…

VundoFix V4.2.84

Checking Java version…

Java version is 1.5.0.6

Scan started at 10:45:33 AM 8/6/2006

Listing files found while scanning….


No infected files were found.


VundoFix V5.1.6

Checking Java version…

Java version is 1.5.0.6

Scan started at 10:59:17 AM 8/6/2006

Listing files found while scanning….

No infected files were found.


Beginning removal…

The process smss.exe could not be stopped
Vundofix may not be able to delete some files that were found.

The process winlogon.exe could not be stopped
Vundofix may not be able to delete some files that were found.

The process explorer.exe was successfully stopped

The process iexplore.exe was successfully stopped

The process rundll32.exe was successfully stopped

Attempting to delete D:\WINDOWS\system32\fcyvu.dll
D:\WINDOWS\system32\fcyvu.dll Could not be deleted.

Performing Repairs to the registry.
Done!
Post #12
Stubborn little bugger, ain't it!!!

:rant:

Download combofix.exe from the link below:

Combofix.exe

Save it to your desktop. <— VERY IMPORTANT!!!

Go to Start –> Run and copy/paste in the following:

"%userprofile%\desktop\combofix.exe" /v fcyvu

Then hit or click OK

When finished, it will produce a log for you.

Post that log in your next reply, along with a new HijackThis! log.
:)

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
Post #13
Are we having fun yet??

HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 11:34:36 AM, on 8/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\LEXBCES.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\LEXPPS.EXE
D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
D:\Program Files\ewido anti-spyware 4.0\guard.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
D:\Program Files\Logitech\MouseWare\system\em_exec.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\Program Files\AnalogX\CookieWall\cookie.exe
D:\Program Files\ewido anti-spyware 4.0\ewido.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\WINDOWS\system32\wuauclt.exe
D:\WINDOWS\system32\ZONELABS\vsmon.exe
D:\WINDOWS\system32\NOTEPAD.EXE
D:\Program Files\Internet Explorer\iexplore.exe
D:\Documents and Settings\me\Desktop\virus stuff\glass.exe
D:\Program Files\Symantec\LiveUpdate\AUpdate.exe
D:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.ce1.attbb.net:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.ce1.attbb.net;localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {25736E66-D6C2-4D73-BA6B-64889CAF44DF} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6853BF99-5053-490F-B167-0D5F1D85CEB5} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O2 - BHO: (no name) - {E6E59012-61D2-4E32-B9F1-FE9351FF9828} - D:\WINDOWS\system32\fcyvu.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [CookieWall] D:\Program Files\AnalogX\CookieWall\cookie.exe
O4 - HKLM\..\Run: [!ewido] "D:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\RunServices: [Keyboard Manager] D:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [LDM] \Program\
O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://d:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Support - {0F2847D2-DAF9-4A84-9F11-F2EF2A4CA6BC} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: Help - {16041FA9-764E-457F-ACEF-9E8BDAA1030E} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: (no name) - {1AA7429D-8F3B-4E04-8D67-4B04B5849C29} - D:\WINDOWS\System32\shdocvw.dll (HKCU)
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {2B1AA38D-2D12-11D5-AAD0-00C04FA03D78} (LocalExec Control) - http://netdirect.metrostate.edu/nps/portal…t/LocalExec.CAB
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {3DA5D23B-EFE1-4181-ADB7-7D457567AACA} (TGOnlineCtrl Class) - http://zone.msn.com/bingame/pacz/default/pandaonline.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://zone.msn.com/bingame/rtlw/default/R…bGameLoader.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} -
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1123706826290
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {6F74F92E-8DD8-4DDE-8FB8-CBB882A68048} (Microsoft Office XP Professional Step by Step Interactive) - file://D:\Program Files\Microsoft Interactive Training\O10C\mitm0026.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/chnz/default/mjolauncher.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…canner37710.cab
O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames/zpa_dmno.cab42341.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} -
O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} (ZPA_HRTZ Object) - http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab37625.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://zone.msn.com/binGame/ZAxRcMgr.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundl…ArcadeRdxIE.cab
O16 - DPF: {CAC181B0-4D70-402D-B571-C596A47D0CE0} (CBankshotZoneCtrl Class) - http://zone.msn.com/bingame/zpagames/zpa_pool.cab42858.cab
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} (Java Plug-in) -
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://zone.msn.com/bingame/feed/default/SproutLauncher.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://zone.msn.com/bingame/gold/unskin/gf.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {DAF5D9A2-D982-4671-83E4-0398706A5F6A} (SCEWebLauncherCtl Object) - http://zone.msn.com/bingame/hsol/default/SCEWebLauncher.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} -
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {ED28050F-D713-43BA-A376-DCC5C35407D5} -
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…350/mcfscan.cab
O18 - Protocol: bw+0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {C6956C2C-A850-4F49-8673-7AA505AFFE7F} - D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: fcyvu - D:\WINDOWS\system32\fcyvu.dll
O20 - Winlogon Notify: NavLogon - D:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - D:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - D:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - D:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZONELABS\vsmon.exe

combofix log:

(((((((((((((((((((((((((((((((((((((((((((((((( Vundo Log )))))))))))))))))))))))))))))))))))))))))))))))))))))


D:\WINDOWS\SYSTEM32\FCYVU.DLL
D:\WINDOWS\SYSTEM32\UVYCF.INI


* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *


D:\WINDOWS\SYSTEM32\FCYVU.DLL
D:\WINDOWS\SYSTEM32\UVYCF.INI

11:28:58.10
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-08-05 16:00:56 ( .D… ) "D:\Program Files\ewido anti-spyware 4.0"
2006-08-03 14:45:20 ( .D… ) "D:\Program Files\Alwil Software"
2006-08-02 20:19:02 ( .D… ) "D:\Program Files\ACW"
2006-07-29 14:21:34 ( .D… ) "D:\Program Files\Common Files\Scanner"
2006-07-08 10:38:16 ( .D… ) "D:\Program Files\Trend Micro"
2006-06-27 09:30:04 569396 ( ….. ) "D:\WINDOWS\system32\fcyvu.dll"
2006-06-25 08:29:36 ( .D… ) "D:\Program Files\Codec"
2006-06-24 09:28:48 249856 ( ….. ) "D:\WINDOWS\Setup1.exe"
2006-06-24 09:28:38 73216 ( A…. ) "D:\WINDOWS\ST6UNST.EXE"
2006-06-24 07:51:56 ( .D… ) "D:\Program Files\XP Codec Pack"
2006-06-23 06:34:22 ( .D… ) "D:\Program Files\IrfanView"
2006-06-21 08:03:36 ( .D… ) "D:\Documents and Settings\me\Application Data\AVG7"
2006-06-21 08:02:38 ( .D… ) "D:\Program Files\Grisoft"
2006-06-18 17:54:58 394872 ( A…. ) "D:\WINDOWS\system32\vsdatant.sys"
2006-06-18 17:54:26 83960 ( A…. ) "D:\WINDOWS\system32\zlcomm.dll"
2006-06-18 17:54:26 71672 ( A…. ) "D:\WINDOWS\system32\zlcommdb.dll"
2006-06-18 17:54:24 100344 ( A…. ) "D:\WINDOWS\system32\vsxml.dll"
2006-06-18 17:54:24 59384 ( A…. ) "D:\WINDOWS\system32\vswmi.dll"
2006-06-18 17:54:22 440312 ( A…. ) "D:\WINDOWS\system32\vsutil.dll"
2006-06-18 17:54:22 71672 ( A…. ) "D:\WINDOWS\system32\vsregexp.dll"
2006-06-18 17:54:20 268280 ( A…. ) "D:\WINDOWS\system32\vspubapi.dll"
2006-06-18 17:54:20 157688 ( A…. ) "D:\WINDOWS\system32\vsinit.dll"
2006-06-18 17:54:20 104440 ( A…. ) "D:\WINDOWS\system32\vsmonapi.dll"
2006-06-18 17:54:18 83960 ( A…. ) "D:\WINDOWS\system32\vsdata.dll"
2006-06-18 17:54:08 796584 ( A…. ) "D:\WINDOWS\system32\libeay32_0.9.6l.dll"
2006-06-15 16:55:04 778240 ( A…. ) "D:\WINDOWS\system32\divx_xx0c.dll"
2006-06-15 16:55:04 778240 ( A…. ) "D:\WINDOWS\system32\divx_xx07.dll"
2006-06-15 16:55:04 761856 ( A…. ) "D:\WINDOWS\system32\divx_xx11.dll"
2006-06-15 06:42:18 ( .D… ) "D:\Program Files\ePrompter"
2006-06-14 12:49:08 118784 ( A…. ) "D:\WINDOWS\system32\DivXCodecUpdateChecker.exe"
2006-06-10 14:18:40 ( .D… ) "D:\Program Files\PartyGaming"
2006-06-08 18:49:22 ( .D… ) "D:\Program Files\Common Files\Sandlot Shared"
2006-06-08 18:48:48 ( .D… ) "D:\Program Files\Cake Mania"
2006-05-19 07:59:42 148480 ( A…. ) "D:\WINDOWS\system32\dnsapi.dll"
2006-05-19 07:59:42 111616 ( A…. ) "D:\WINDOWS\system32\dhcpcsvc.dll"
2006-05-19 07:59:42 94720 ( A…. ) "D:\WINDOWS\system32\iphlpapi.dll"
2006-04-09 11:07:52 280 ( A…. ) "D:\Program Files\dates.ini"
2006-04-09 11:07:52 123 ( A…. ) "D:\Program Files\hcow2.urs"
2006-04-09 11:07:52 81 ( A…. ) "D:\Program Files\Hoyle Channel on WON.url"
2006-04-09 11:07:32 2724 ( A…. ) "D:\Program Files\genericmap.ini"
2006-04-09 11:07:20 7025 ( A…. ) "D:\Program Files\thank.you"
2006-04-09 11:07:14 36864 ( A…. ) "D:\Program Files\client.dll"
2006-04-09 11:07:06 188416 ( A…. ) "D:\Program Files\wonauth.dll"
2006-04-09 11:07:06 165376 ( A…. ) "D:\Program Files\maketex.dll"
2006-04-09 11:07:06 32832 ( A…. ) "D:\Program Files\wonplay.dll"
2006-04-09 11:07:06 2011 ( A…. ) "D:\Program Files\eula.abc"
2006-04-09 11:07:04 71680 ( A…. ) "D:\Program Files\ungzip.dll"
2006-02-27 12:40:48 3865 ( A…. ) "D:\Program Files\satsukidecodersettings.ini"
2006-02-27 12:40:44 3436 ( A…. ) "D:\Program Files\mpc7.reg"
2006-02-27 12:40:42 16192 ( A…. ) "D:\Program Files\mpc5.reg"
2006-02-27 12:40:42 15378 ( A…. ) "D:\Program Files\mpc6.reg"
2006-02-27 12:40:40 2910 ( A…. ) "D:\Program Files\mpc3.reg"
2006-02-27 12:40:40 786 ( A…. ) "D:\Program Files\mpc4.reg"
2006-02-27 12:40:38 680 ( A…. ) "D:\Program Files\mpc2.reg"
2006-02-27 12:40:34 596 ( A…. ) "D:\Program Files\mpc1.reg"
2006-02-27 12:40:32 2892 ( A…. ) "D:\Program Files\ffdsvsetts.reg"
2006-02-27 12:40:30 1960 ( A…. ) "D:\Program Files\ffdsasetts.reg"
2006-02-27 12:40:28 4002 ( A…. ) "D:\Program Files\ffdssetts.reg"
2006-01-19 18:42:16 447814 ( A…. ) "D:\Program Files\m3jpegv3.exe"
2006-01-10 08:50:14 409848 ( A…. ) "D:\Program Files\vdg337en.exe"
2005-12-08 15:34:22 1737 ( A…. ) "D:\Program Files\mp3DirectCut.ini"
2005-08-04 08:16:26 3143114 ( A…. ) "D:\Program Files\edonkey.exe"
2004-11-20 11:57:12 2725895 ( ….. ) "D:\Program Files\BricksOfEgyptSetup.exe"
2004-10-19 16:19:44 8444 ( A…. ) "D:\Program Files\Xpcs Registry.dat"
2004-10-19 06:43:04 524 ( A…. ) "D:\Program Files\Uninstall AOL Instant Messenger.lnk"
2004-10-19 06:40:48 4465296 ( A…. ) "D:\Program Files\aim95.exe"
2004-10-18 19:23:16 350 ( A…. ) "D:\Program Files\prfkcx.INI"
2004-10-03 19:19:50 190 ( A…. ) "D:\Program Files\ITECH.CFG"
2004-09-30 23:04:14 230 ( A…. ) "D:\Program Files\regfix.reg"
2004-09-24 22:33:04 169560 ( A…. ) "D:\Program Files\o2ksr1a.exe"
2004-09-18 09:36:52 4354084 ( A…. ) "D:\Program Files\spybotsd13.exe"
2004-09-01 11:26:56 116955 ( A…. ) "D:\Program Files\uninstll.EXE"
2004-09-01 11:26:24 16384 ( A…. ) "D:\Program Files\Admin.ocm"
2004-09-01 11:26:16 19968 ( A…. ) "D:\Program Files\aimtalk.dll"
2004-09-01 11:26:10 155648 ( A…. ) "D:\Program Files\aimauto.exe"
2004-09-01 11:26:06 13824 ( A…. ) "D:\Program Files\osconfig.ocm"
2004-09-01 11:02:32 49152 ( A…. ) "D:\Program Files\chksign.dll"
2004-09-01 11:00:22 2048 ( A…. ) "D:\Program Files\ShareFile.exe"
2004-09-01 11:00:22 2048 ( A…. ) "D:\Program Files\SendFile.exe"
2004-09-01 10:26:48 66672 ( A…. ) "D:\Program Files\aim.exe"
2004-09-01 10:26:42 131072 ( A…. ) "D:\Program Files\ateima32.dll"
2004-09-01 10:26:40 61440 ( A…. ) "D:\Program Files\AlertUI.ocm"
2004-09-01 10:26:40 25088 ( A…. ) "D:\Program Files\browse.ocm"
2004-09-01 10:26:38 217088 ( A…. ) "D:\Program Files\buddyui.ocm"
2004-09-01 10:26:36 233472 ( A…. ) "D:\Program Files\AimSecondarySvcs.dll"
2004-09-01 10:26:34 6656 ( A…. ) "D:\Program Files\stats.ocm"
2004-09-01 10:26:32 1503232 ( A…. ) "D:\Program Files\AimRes.dll"
2004-09-01 10:26:32 98304 ( A…. ) "D:\Program Files\ChatUI.ocm"
2004-09-01 10:26:30 192512 ( A…. ) "D:\Program Files\AimCoreSvcs.dll"
2004-09-01 10:26:28 266240 ( A…. ) "D:\Program Files\icbmui.ocm"
2004-09-01 10:26:26 94208 ( A…. ) "D:\Program Files\ticker.ocm"
2004-09-01 10:26:24 114688 ( A…. ) "D:\Program Files\aimapi.dll"
2004-09-01 10:26:22 147456 ( A…. ) "D:\Program Files\locateui.ocm"
2004-09-01 10:26:22 135168 ( A…. ) "D:\Program Files\miscui.ocm"
2004-09-01 10:26:20 15360 ( A…. ) "D:\Program Files\NTP.ocm"
2004-09-01 10:26:18 77824 ( A…. ) "D:\Program Files\OscMail.ocm"
2004-09-01 10:26:14 69632 ( A…. ) "D:\Program Files\osclogin.ocm"
2004-09-01 10:26:14 9216 ( A…. ) "D:\Program Files\oscmain.ocm"
2004-09-01 10:26:12 39936 ( A…. ) "D:\Program Files\startup.ocm"
2004-09-01 10:26:10 86016 ( A…. ) "D:\Program Files\OscSrch.ocm"
2004-09-01 10:26:06 39936 ( A…. ) "D:\Program Files\rvapps.ocm"
2004-09-01 10:26:02 13312 ( A…. ) "D:\Program Files\popup.ocm"
2004-09-01 10:26:00 225280 ( A…. ) "D:\Program Files\wndutils.dll"
2004-09-01 10:25:30 106496 ( A…. ) "D:\Program Files\aimax.dll"
2004-09-01 10:25:26 151552 ( A…. ) "D:\Program Files\oscarui.dll"
2004-09-01 10:25:24 192512 ( A…. ) "D:\Program Files\oscore.dll"
2004-09-01 10:25:22 192512 ( A…. ) "D:\Program Files\ate32.dll"
2004-09-01 10:25:22 4608 ( A…. ) "D:\Program Files\idlemon.dll"
2004-09-01 09:59:26 180224 ( A…. ) "D:\Program Files\rtvideo.dll"
2004-09-01 09:58:50 229376 ( A…. ) "D:\Program Files\inetsocket.dll"
2004-09-01 09:58:10 34304 ( A…. ) "D:\Program Files\proto.ocm"
2004-09-01 09:57:06 110592 ( A…. ) "D:\Program Files\AIM_xmlp.dll"
2004-09-01 09:57:04 13312 ( A…. ) "D:\Program Files\oscres.dll"
2004-08-31 10:42:32 51435 ( A…. ) "D:\Program Files\licens32.txt"
2004-08-27 17:29:36 1935 ( A…. ) "D:\Program Files\icbmftvc.lst"
2004-08-20 14:16:34 506324 ( A…. ) "D:\Program Files\AIM95.HLP"
2004-08-18 12:56:48 176128 ( A…. ) "D:\Program Files\nssckbi.dll"
2004-08-18 11:56:48 372736 ( A…. ) "D:\Program Files\softokn3.dll"
2004-08-18 11:56:48 110592 ( A…. ) "D:\Program Files\ssl3.dll"
2004-08-18 11:56:48 106496 ( A…. ) "D:\Program Files\smime3.dll"
2004-08-18 11:56:46 348160 ( A…. ) "D:\Program Files\nss3.dll"
2004-08-06 13:04:50 14560 ( A…. ) "D:\Program Files\aim95.CNT"
2004-08-05 23:29:06 10884 ( A…. ) "D:\Program Files\FFF.NFO"
2004-07-29 12:03:08 98304 ( A…. ) "D:\Program Files\sb.dll"
2004-07-22 09:43:54 106496 ( A…. ) "D:\Program Files\CoolPeer.dll"
2004-07-22 09:43:42 3584 ( A…. ) "D:\Program Files\CoolSos.dll"
2004-07-22 08:43:40 184320 ( A…. ) "D:\Program Files\CoolBos.dll"
2004-07-22 08:43:20 114688 ( A…. ) "D:\Program Files\CoolBucky.dll"
2004-07-22 08:43:08 61440 ( A…. ) "D:\Program Files\CoolHttp.dll"
2004-07-22 08:43:00 57344 ( A…. ) "D:\Program Files\CoolSecNss.dll"
2004-07-22 08:42:46 73728 ( A…. ) "D:\Program Files\CoolSocket.dll"
2004-07-22 08:42:00 8192 ( A…. ) "D:\Program Files\Xptl.dll"
2004-07-22 08:41:54 13824 ( A…. ) "D:\Program Files\Xpcs.dll"
2004-07-22 08:41:46 135168 ( A…. ) "D:\Program Files\Xprt.dll"
2004-05-18 15:55:26 81920 ( A…. ) "D:\Program Files\xmltok.dll"
2004-05-18 15:55:26 53248 ( A…. ) "D:\Program Files\xmlparse.dll"
2004-05-08 23:36:06 883467 ( A…. ) "D:\Program Files\FolderShareSetup-3473.exe"
2004-04-16 15:27:56 94208 ( A…. ) "D:\Program Files\jgtktlk.dll"
2004-04-16 15:27:56 45056 ( A…. ) "D:\Program Files\jgsetlk.dll"
2004-04-16 15:27:54 65536 ( A…. ) "D:\Program Files\jgattlk.dll"
2004-04-16 15:27:54 61440 ( A…. ) "D:\Program Files\jgedtlk.dll"
2004-04-16 15:27:54 40960 ( A…. ) "D:\Program Files\jgs6tlk.dll"
2004-04-16 15:27:54 40960 ( A…. ) "D:\Program Files\jgs2tlk.dll"
2004-04-16 15:27:54 36864 ( A…. ) "D:\Program Files\jga1tlk.dll"
2004-04-16 15:27:54 32768 ( A…. ) "D:\Program Files\jgs7tlk.dll"
2004-04-16 15:27:54 32768 ( A…. ) "D:\Program Files\jgs3tlk.dll"
2004-04-16 15:27:52 45056 ( A…. ) "D:\Program Files\jga0tlk.dll"
2004-04-10 20:11:10 5066 ( A…. ) "D:\Program Files\Readme.txt"
2004-03-24 09:22:46 1044168 ( A…. ) "D:\Program Files\VBRun60sp5.exe"
2004-03-22 09:27:52 2372760 ( A…. ) "D:\Program Files\winzip90.exe"
2004-03-13 15:01:56 4859444 ( A…. ) "D:\Program Files\WinTSSetup.exe"
2004-02-23 14:55:08 1082195 ( ….. ) "D:\Program Files\adc_v147.rar"
2004-02-23 13:08:34 1004712 ( A…. ) "D:\Program Files\wrar330.exe"
2004-02-02 14:33:40 26624 ( A…. ) "D:\Program Files\Patcher.exe"
2004-02-02 14:33:28 69632 ( A…. ) "D:\Program Files\Patcher.dll"
2004-01-30 14:54:16 11210 ( A…. ) "D:\Program Files\Version_1_35.txt"
2004-01-30 14:07:38 43552 ( A…. ) "D:\Program Files\mp3DirectCut.exe"
2004-01-30 10:15:14 13789 ( A…. ) "D:\Program Files\FAQ.htm"
2004-01-30 01:09:42 13853 ( A…. ) "D:\Program Files\Manual.htm"
2004-01-26 08:40:04 139785 ( A…. ) "D:\Program Files\maxmemi.exe"
2004-01-09 08:38:16 159744 ( A…. ) "D:\Program Files\nspr4.dll"
2004-01-09 08:38:16 28672 ( A…. ) "D:\Program Files\plc4.dll"
2004-01-09 08:38:16 24576 ( A…. ) "D:\Program Files\plds4.dll"
2003-12-30 11:15:48 9728 ( A.SH. ) "D:\Program Files\Thumbs.db"
2003-12-21 21:37:48 620032 ( A…. ) "D:\Program Files\albumsplit.exe"
2003-12-14 15:34:06 57 ( A…. ) "D:\Program Files\status.js"
2003-12-14 15:32:20 27587 ( A…. ) "D:\Program Files\theUninstallFile.txt"
2003-12-14 15:31:52 38543 ( A…. ) "D:\Program Files\gameart.jpg"
2003-12-14 15:31:52 285 ( A…. ) "D:\Program Files\osd212.osd"
2003-12-14 15:31:50 27957 ( A…. ) "D:\Program Files\readme.html"
2003-12-14 15:31:50 14190 ( A…. ) "D:\Program Files\pregame.htm"
2003-12-14 15:31:50 6561 ( A…. ) "D:\Program Files\racnotinstalled.htm"
2003-12-14 15:31:50 1285 ( A…. ) "D:\Program Files\contentbox_bottom.gif"
2003-12-14 15:31:50 333 ( A…. ) "D:\Program Files\wrapper.ini"
2003-12-14 15:31:50 287 ( A…. ) "D:\Program Files\launch.ini"
2003-12-14 15:31:50 224 ( A…. ) "D:\Program Files\feedback.htm"
2003-12-14 15:31:50 210 ( A…. ) "D:\Program Files\setup.ini"
2003-12-14 15:31:48 1241 ( A…. ) "D:\Program Files\contentbox_top.gif"
2003-12-14 15:31:48 902 ( A…. ) "D:\Program Files\contentbox.gif"
2003-12-14 15:31:48 828 ( A…. ) "D:\Program Files\button_center.gif"
2003-12-14 15:31:48 741 ( A…. ) "D:\Program Files\mainimage_left.gif"
2003-12-14 15:31:48 314 ( A…. ) "D:\Program Files\butt_next_over.gif"
2003-12-14 15:31:48 310 ( A…. ) "D:\Program Files\butt_back_over.gif"
2003-12-14 15:31:48 279 ( A…. ) "D:\Program Files\meter_bottom.gif"
2003-12-14 15:31:48 263 ( A…. ) "D:\Program Files\meter_top.gif"
2003-12-14 15:31:48 218 ( A…. ) "D:\Program Files\butt_next.gif"
2003-12-14 15:31:48 213 ( A…. ) "D:\Program Files\butt_back.gif"
2003-12-14 15:31:48 208 ( A…. ) "D:\Program Files\button_right.gif"
2003-12-14 15:31:48 192 ( A…. ) "D:\Program Files\meter_right.gif"
2003-12-14 15:31:48 191 ( A…. ) "D:\Program Files\meter_left.gif"
2003-12-14 15:31:48 187 ( A…. ) "D:\Program Files\button_left.gif"
2003-12-14 15:31:48 150 ( A…. ) "D:\Program Files\horzline.gif"
2003-12-14 15:31:48 149 ( A…. ) "D:\Program Files\meter_upperleft.gif"
2003-12-14 15:31:48 149 ( A…. ) "D:\Program Files\meter_lowerright.gif"
2003-12-14 15:31:48 147 ( A…. ) "D:\Program Files\meter_upperright.gif"
2003-12-14 15:31:48 146 ( A…. ) "D:\Program Files\meter_lowerleft.gif"
2003-12-14 15:31:48 124 ( A…. ) "D:\Program Files\butt_left.gif"
2003-12-14 15:31:48 123 ( A…. ) "D:\Program Files\butt_right.gif"
2003-12-14 15:31:48 115 ( A…. ) "D:\Program Files\mainimage_right.gif"
2003-12-14 15:31:48 101 ( A…. ) "D:\Program Files\fill.gif"
2003-12-14 15:31:48 95 ( A…. ) "D:\Program Files\mainimage_top.gif"
2003-12-14 15:31:48 91 ( A…. ) "D:\Program Files\mainimage_bottom.gif"
2003-12-14 15:31:48 53 ( A…. ) "D:\Program Files\empty.gif"
2003-12-14 15:31:48 49 ( A…. ) "D:\Program Files\spacer.gif"
2003-12-11 15:38:44 599304 ( A…. ) "D:\Program Files\sevinst.exe"
2003-12-11 14:54:56 2632927 ( A…. ) "D:\Program Files\lv-10viewer.exe"
2003-12-10 16:48:28 11079 ( A..H. ) "D:\Program Files\folder.htt"
2003-12-10 16:48:28 266 ( ..SH. ) "D:\Program Files\desktop.ini"
2003-11-21 15:11:34 49 ( A..H. ) "D:\Program Files\Config.dat"
2003-11-03 12:32:12 129 ( A…. ) "D:\Program Files\serial.txt"
2003-10-14 16:27:50 2670 ( A…. ) "D:\Program Files\aim.odl"
2003-10-14 16:27:50 2486 ( A…. ) "D:\Program Files\netwait.odl"
2003-09-26 18:15:06 12834 ( A…. ) "D:\Program Files\Read Me.txt"
2003-09-10 20:51:38 1626172 ( A…. ) "D:\Program Files\CDex.exe"
2003-09-10 20:50:04 383249 ( A…. ) "D:\Program Files\CDEX.HLP"
2003-09-10 20:49:34 96768 ( A…. ) "D:\Program Files\libsndfile.dll"
2003-09-10 20:49:08 36352 ( A…. ) "D:\Program Files\MP2enc.dll"
2003-09-10 20:48:56 83456 ( A…. ) "D:\Program Files\CDRip.dll"
2003-09-10 20:48:34 21889 ( A…. ) "D:\Program Files\Changes.txt"
2003-09-10 20:23:40 7051 ( A…. ) "D:\Program Files\CDex.cnt"
2003-09-03 14:53:16 5691 ( A…. ) "D:\Program Files\How To Install.html"
2003-09-01 10:42:26 8840 ( A…. ) "D:\Program Files\SuperCat_v4[1].3.zip"
2003-09-01 10:18:04 1550457 ( A…. ) "D:\Program Files\urcat43.zip"
2003-08-15 12:39:34 527 ( A…. ) "D:\Program Files\BL_Games.htm"
2003-08-15 12:34:56 1810 ( A…. ) "D:\Program Files\testgame.htm"
2003-08-01 07:30:00 10752 ( A…. ) "D:\Program Files\advert.ocm"
2003-08-01 07:26:10 7680 ( A…. ) "D:\Program Files\StatsShim.dll"
2003-08-01 07:26:06 7680 ( A…. ) "D:\Program Files\PopupShim.dll"
2003-07-28 19:39:34 648 ( A…. ) "D:\Program Files\mp3DirectCut.exe.manifest"
2003-07-03 12:27:26 57 ( A…. ) "D:\Program Files\Autorun.inf"
2003-03-06 21:50:06 556032 ( A…. ) "D:\Program Files\Mega MP3splitter.exe"
2003-01-24 23:54:30 112914 ( A…. ) "D:\Program Files\Mega MP3splitter.pdf"
2003-01-21 19:26:38 99840 ( A…. ) "D:\Program Files\lame_enc.dll"
2003-01-06 14:41:36 1457 ( A…. ) "D:\Program Files\rvappstm.lst"
2002-12-18 16:46:26 344064 ( A…. ) "D:\Program Files\msvcr70.dll"
2002-12-17 00:00:00 1578978 ( A…. ) "D:\Program Files\setup.exe"
2002-12-17 00:00:00 1657 ( A…. ) "D:\Program Files\order.txt"
2002-12-09 01:42:24 35624 ( A…. ) "D:\Program Files\ManQref.gif"
2002-08-07 22:07:22 71680 ( A…. ) "D:\Program Files\MACDll.dll"
2002-08-05 11:34:56 36864 ( A…. ) "D:\Program Files\ProgressDlg.dll"
2002-08-02 18:40:38 364544 ( A…. ) "D:\Program Files\dBenderC.dll"
2002-07-19 19:26:40 61440 ( A…. ) "D:\Program Files\vorbisenc.dll"
2002-07-18 09:00:02 139264 ( A…. ) "D:\Program Files\dunzip32.dll"
2002-06-09 22:00:54 994505 ( A…. ) "D:\Program Files\mp3splitter.exe"
2002-06-07 17:16:02 999 ( A…. ) "D:\Program Files\Imhotep_FAQ.txt"
2002-05-09 16:22:52 537 ( A…. ) "D:\Program Files\CDex.exe.manifest"
2002-04-20 14:37:28 4794150 ( A…. ) "D:\Program Files\Kyodai Mahjong v18.42 Update.exe"
2002-04-20 13:07:30 69632 ( A…. ) "D:\Program Files\WMA8Connect.dll"
2001-11-22 15:02:32 65024 ( A…. ) "D:\Program Files\mpglib.dll"
2001-10-23 16:44:16 39936 ( A…. ) "D:\Program Files\whatsnew.doc"
2001-09-28 16:00:28 164864 ( A…. ) "D:\Program Files\Unwise32.exe"
2001-07-15 23:14:12 6 ( A…. ) "D:\Program Files\CDex.ini"
2001-07-10 09:20:08 1663 ( A…. ) "D:\Program Files\SETUP.WIS"
2001-07-10 09:20:08 1351 ( A…. ) "D:\Program Files\NAVCE.PDF"
2001-07-10 09:20:06 4182016 ( A…. ) "D:\Program Files\NAVCE.MSI"
2001-07-10 09:20:06 279 ( A…. ) "D:\Program Files\INSTOPTS.INI"
2001-07-10 09:20:04 1489152 ( A…. ) "D:\Program Files\INSTMSIA.EXE"
2001-07-10 09:20:04 35328 ( A…. ) "D:\Program Files\DEC2CAB.DLL"
2001-07-10 09:20:04 1412 ( A…. ) "D:\Program Files\GRC.DAT"
2001-07-10 09:20:02 13943875 ( A…. ) "D:\Program Files\DATA.CAB"
2001-07-10 09:19:56 98304 ( A…. ) "D:\Program Files\_SETUP.EXE"
2001-07-10 09:19:54 1499904 ( A…. ) "D:\Program Files\INSTMSIW.EXE"
2001-05-25 16:07:30 27023 ( A…. ) "D:\Program Files\lgpl.txt"
2001-04-27 16:51:10 131562 ( A…. ) "D:\Program Files\REGISTER.EXE"
2001-04-27 15:04:16 13803 ( A…. ) "D:\Program Files\INDEX.DAT"
2001-04-26 13:15:10 1630208 ( A…. ) "D:\Program Files\TNGENG.EXE"
2001-04-06 12:39:46 687 ( A…. ) "D:\Program Files\START.DAT"
2001-03-14 19:13:24 97565 ( A…. ) "D:\Program Files\splash.gif"
2001-03-14 15:15:18 80 ( A…. ) "D:\Program Files\SN.DAT"
2001-02-06 15:34:58 70656 ( A…. ) "D:\Program Files\jgtkaol.dll"
2001-01-30 16:04:02 1375 ( A…. ) "D:\Program Files\aimalert.gif"
2001-01-30 16:03:42 1370 ( A…. ) "D:\Program Files\stockalert.gif"
2000-12-06 13:08:00 69632 ( A…. ) "D:\Program Files\jgataol.dll"
2000-12-06 13:08:00 61440 ( A…. ) "D:\Program Files\jgedaol.dll"
2000-12-06 13:08:00 45056 ( A…. ) "D:\Program Files\jgseaol.dll"
2000-12-06 13:08:00 40960 ( A…. ) "D:\Program Files\jgs2aol.dll"
2000-12-06 13:08:00 36864 ( A…. ) "D:\Program Files\jga1aol.dll"
2000-12-06 13:08:00 32768 ( A…. ) "D:\Program Files\jgs3aol.dll"
2000-12-06 13:07:58 45056 ( A…. ) "D:\Program Files\jga0aol.dll"
2000-07-28 13:02:08 15820 ( ….. ) "D:\Program Files\HPMMKb2k.cat"
2000-06-29 11:05:04 442368 ( ….. ) "D:\Program Files\hpkbdext.dl_"
2000-06-09 11:49:40 138240 ( ….. ) "D:\Program Files\hpmmKbd.ex_"
2000-06-09 11:47:20 36864 ( ….. ) "D:\Program Files\hpmapild.dl_"
2000-06-09 11:47:14 36864 ( ….. ) "D:\Program Files\hpmsgled.dl_"
2000-02-23 20:33:24 6643 ( ….. ) "D:\Program Files\HPExtKbd.inf"
2000-02-23 20:31:22 3961 ( ….. ) "D:\Program Files\hpkbduni.dat"
2000-02-16 17:39:00 1732 ( A…. ) "D:\Program Files\unwise32.ini"
2000-02-16 16:12:58 50176 ( A…. ) "D:\Program Files\csh.dll"
1999-11-17 16:05:40 132608 ( ….. ) "D:\Program Files\hphlpkbd.ex_"
1999-09-29 10:40:32 15924 ( ….. ) "D:\Program Files\hpmmkbd.sy_"
1999-09-01 15:52:36 1082 ( A…. ) "D:\Program Files\PALETTE.BMP"
1999-06-09 15:22:56 10169 ( ….. ) "D:\Program Files\hpkbdko.hl_"
1999-06-09 15:01:24 10038 ( ….. ) "D:\Program Files\hpkbdja.hl_"
1999-06-09 14:42:20 9874 ( ….. ) "D:\Program Files\hpkbdta.hl_"
1999-06-09 14:22:12 9946 ( ….. ) "D:&#
Post #14
combofix log: the other was cut off… (((((((((((((((((((((((((((((((((((((((((((((((( Vundo Log ))))))))))))))))))))))))))))))))))))))))))))))))))))) D:\WINDOWS\SYSTEM32\FCYVU.DLL D:\WINDOWS\SYSTEM32\UVYCF.INI * * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * D:\WINDOWS\SYSTEM32\FCYVU.DLL D:\WINDOWS\SYSTEM32\UVYCF.INI 11:28:58.10 (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-08-05 16:00:56 ( .D… ) "D:\Program Files\ewido anti-spyware 4.0" 2006-08-03 14:45:20 ( .D… ) "D:\Program Files\Alwil Software" 2006-08-02 20:19:02 ( .D… ) "D:\Program Files\ACW" 2006-07-29 14:21:34 ( .D… ) "D:\Program Files\Common Files\Scanner" 2006-07-08 10:38:16 ( .D… ) "D:\Program Files\Trend Micro" 2006-06-27 09:30:04 569396 ( ….. ) "D:\WINDOWS\system32\fcyvu.dll" 2006-06-25 08:29:36 ( .D… ) "D:\Program Files\Codec" 2006-06-24 09:28:48 249856 ( ….. ) "D:\WINDOWS\Setup1.exe" 2006-06-24 09:28:38 73216 ( A…. ) "D:\WINDOWS\ST6UNST.EXE" 2006-06-24 07:51:56 ( .D… ) "D:\Program Files\XP Codec Pack" 2006-06-23 06:34:22 ( .D… ) "D:\Program Files\IrfanView" 2006-06-21 08:03:36 ( .D… ) "D:\Documents and Settings\me\Application Data\AVG7" 2006-06-21 08:02:38 ( .D… ) "D:\Program Files\Grisoft" 2006-06-18 17:54:58 394872 ( A…. ) "D:\WINDOWS\system32\vsdatant.sys" 2006-06-18 17:54:26 83960 ( A…. ) "D:\WINDOWS\system32\zlcomm.dll" 2006-06-18 17:54:26 71672 ( A…. ) "D:\WINDOWS\system32\zlcommdb.dll" 2006-06-18 17:54:24 100344 ( A…. ) "D:\WINDOWS\system32\vsxml.dll" 2006-06-18 17:54:24 59384 ( A…. ) "D:\WINDOWS\system32\vswmi.dll" 2006-06-18 17:54:22 440312 ( A…. ) "D:\WINDOWS\system32\vsutil.dll" 2006-06-18 17:54:22 71672 ( A…. ) "D:\WINDOWS\system32\vsregexp.dll" 2006-06-18 17:54:20 268280 ( A…. ) "D:\WINDOWS\system32\vspubapi.dll" 2006-06-18 17:54:20 157688 ( A…. ) "D:\WINDOWS\system32\vsinit.dll" 2006-06-18 17:54:20 104440 ( A…. ) "D:\WINDOWS\system32\vsmonapi.dll" 2006-06-18 17:54:18 83960 ( A…. ) "D:\WINDOWS\system32\vsdata.dll" 2006-06-18 17:54:08 796584 ( A…. ) "D:\WINDOWS\system32\libeay32_0.9.6l.dll" 2006-06-15 16:55:04 778240 ( A…. ) "D:\WINDOWS\system32\divx_xx0c.dll" 2006-06-15 16:55:04 778240 ( A…. ) "D:\WINDOWS\system32\divx_xx07.dll" 2006-06-15 16:55:04 761856 ( A…. ) "D:\WINDOWS\system32\divx_xx11.dll" 2006-06-15 06:42:18 ( .D… ) "D:\Program Files\ePrompter" 2006-06-14 12:49:08 118784 ( A…. ) "D:\WINDOWS\system32\DivXCodecUpdateChecker.exe" 2006-06-10 14:18:40 ( .D… ) "D:\Program Files\PartyGaming" 2006-06-08 18:49:22 ( .D… ) "D:\Program Files\Common Files\Sandlot Shared" 2006-06-08 18:48:48 ( .D… ) "D:\Program Files\Cake Mania" 2006-05-19 07:59:42 148480 ( A…. ) "D:\WINDOWS\system32\dnsapi.dll" 2006-05-19 07:59:42 111616 ( A…. ) "D:\WINDOWS\system32\dhcpcsvc.dll" 2006-05-19 07:59:42 94720 ( A…. ) "D:\WINDOWS\system32\iphlpapi.dll" 2006-04-09 11:07:52 280 ( A…. ) "D:\Program Files\dates.ini" 2006-04-09 11:07:52 123 ( A…. ) "D:\Program Files\hcow2.urs" 2006-04-09 11:07:52 81 ( A…. ) "D:\Program Files\Hoyle Channel on WON.url" 2006-04-09 11:07:32 2724 ( A…. ) "D:\Program Files\genericmap.ini" 2006-04-09 11:07:20 7025 ( A…. ) "D:\Program Files\thank.you" 2006-04-09 11:07:14 36864 ( A…. ) "D:\Program Files\client.dll" 2006-04-09 11:07:06 188416 ( A…. ) "D:\Program Files\wonauth.dll" 2006-04-09 11:07:06 165376 ( A…. ) "D:\Program Files\maketex.dll" 2006-04-09 11:07:06 32832 ( A…. ) "D:\Program Files\wonplay.dll" 2006-04-09 11:07:06 2011 ( A…. ) "D:\Program Files\eula.abc" 2006-04-09 11:07:04 71680 ( A…. ) "D:\Program Files\ungzip.dll" 2006-02-27 12:40:48 3865 ( A…. ) "D:\Program Files\satsukidecodersettings.ini" 2006-02-27 12:40:44 3436 ( A…. ) "D:\Program Files\mpc7.reg" 2006-02-27 12:40:42 16192 ( A…. ) "D:\Program Files\mpc5.reg" 2006-02-27 12:40:42 15378 ( A…. ) "D:\Program Files\mpc6.reg" 2006-02-27 12:40:40 2910 ( A…. ) "D:\Program Files\mpc3.reg" 2006-02-27 12:40:40 786 ( A…. ) "D:\Program Files\mpc4.reg" 2006-02-27 12:40:38 680 ( A…. ) "D:\Program Files\mpc2.reg" 2006-02-27 12:40:34 596 ( A…. ) "D:\Program Files\mpc1.reg" 2006-02-27 12:40:32 2892 ( A…. ) "D:\Program Files\ffdsvsetts.reg" 2006-02-27 12:40:30 1960 ( A…. ) "D:\Program Files\ffdsasetts.reg" 2006-02-27 12:40:28 4002 ( A…. ) "D:\Program Files\ffdssetts.reg" 2006-01-19 18:42:16 447814 ( A…. ) "D:\Program Files\m3jpegv3.exe" 2006-01-10 08:50:14 409848 ( A…. ) "D:\Program Files\vdg337en.exe" 2005-12-08 15:34:22 1737 ( A…. ) "D:\Program Files\mp3DirectCut.ini" 2005-08-04 08:16:26 3143114 ( A…. ) "D:\Program Files\edonkey.exe" 2004-11-20 11:57:12 2725895 ( ….. ) "D:\Program Files\BricksOfEgyptSetup.exe" 2004-10-19 16:19:44 8444 ( A…. ) "D:\Program Files\Xpcs Registry.dat" 2004-10-19 06:43:04 524 ( A…. ) "D:\Program Files\Uninstall AOL Instant Messenger.lnk" 2004-10-19 06:40:48 4465296 ( A…. ) "D:\Program Files\aim95.exe" 2004-10-18 19:23:16 350 ( A…. ) "D:\Program Files\prfkcx.INI" 2004-10-03 19:19:50 190 ( A…. ) "D:\Program Files\ITECH.CFG" 2004-09-30 23:04:14 230 ( A…. ) "D:\Program Files\regfix.reg" 2004-09-24 22:33:04 169560 ( A…. ) "D:\Program Files\o2ksr1a.exe" 2004-09-18 09:36:52 4354084 ( A…. ) "D:\Program Files\spybotsd13.exe" 2004-09-01 11:26:56 116955 ( A…. ) "D:\Program Files\uninstll.EXE" 2004-09-01 11:26:24 16384 ( A…. ) "D:\Program Files\Admin.ocm" 2004-09-01 11:26:16 19968 ( A…. ) "D:\Program Files\aimtalk.dll" 2004-09-01 11:26:10 155648 ( A…. ) "D:\Program Files\aimauto.exe" 2004-09-01 11:26:06 13824 ( A…. ) "D:\Program Files\osconfig.ocm" 2004-09-01 11:02:32 49152 ( A…. ) "D:\Program Files\chksign.dll" 2004-09-01 11:00:22 2048 ( A…. ) "D:\Program Files\ShareFile.exe" 2004-09-01 11:00:22 2048 ( A…. ) "D:\Program Files\SendFile.exe" 2004-09-01 10:26:48 66672 ( A…. ) "D:\Program Files\aim.exe" 2004-09-01 10:26:42 131072 ( A…. ) "D:\Program Files\ateima32.dll" 2004-09-01 10:26:40 61440 ( A…. ) "D:\Program Files\AlertUI.ocm" 2004-09-01 10:26:40 25088 ( A…. ) "D:\Program Files\browse.ocm" 2004-09-01 10:26:38 217088 ( A…. ) "D:\Program Files\buddyui.ocm" 2004-09-01 10:26:36 233472 ( A…. ) "D:\Program Files\AimSecondarySvcs.dll" 2004-09-01 10:26:34 6656 ( A…. ) "D:\Program Files\stats.ocm" 2004-09-01 10:26:32 1503232 ( A…. ) "D:\Program Files\AimRes.dll" 2004-09-01 10:26:32 98304 ( A…. ) "D:\Program Files\ChatUI.ocm" 2004-09-01 10:26:30 192512 ( A…. ) "D:\Program Files\AimCoreSvcs.dll" 2004-09-01 10:26:28 266240 ( A…. ) "D:\Program Files\icbmui.ocm" 2004-09-01 10:26:26 94208 ( A…. ) "D:\Program Files\ticker.ocm" 2004-09-01 10:26:24 114688 ( A…. ) "D:\Program Files\aimapi.dll" 2004-09-01 10:26:22 147456 ( A…. ) "D:\Program Files\locateui.ocm" 2004-09-01 10:26:22 135168 ( A…. ) "D:\Program Files\miscui.ocm" 2004-09-01 10:26:20 15360 ( A…. ) "D:\Program Files\NTP.ocm" 2004-09-01 10:26:18 77824 ( A…. ) "D:\Program Files\OscMail.ocm" 2004-09-01 10:26:14 69632 ( A…. ) "D:\Program Files\osclogin.ocm" 2004-09-01 10:26:14 9216 ( A…. ) "D:\Program Files\oscmain.ocm" 2004-09-01 10:26:12 39936 ( A…. ) "D:\Program Files\startup.ocm" 2004-09-01 10:26:10 86016 ( A…. ) "D:\Program Files\OscSrch.ocm" 2004-09-01 10:26:06 39936 ( A…. ) "D:\Program Files\rvapps.ocm" 2004-09-01 10:26:02 13312 ( A…. ) "D:\Program Files\popup.ocm" 2004-09-01 10:26:00 225280 ( A…. ) "D:\Program Files\wndutils.dll" 2004-09-01 10:25:30 106496 ( A…. ) "D:\Program Files\aimax.dll" 2004-09-01 10:25:26 151552 ( A…. ) "D:\Program Files\oscarui.dll" 2004-09-01 10:25:24 192512 ( A…. ) "D:\Program Files\oscore.dll" 2004-09-01 10:25:22 192512 ( A…. ) "D:\Program Files\ate32.dll" 2004-09-01 10:25:22 4608 ( A…. ) "D:\Program Files\idlemon.dll" 2004-09-01 09:59:26 180224 ( A…. ) "D:\Program Files\rtvideo.dll" 2004-09-01 09:58:50 229376 ( A…. ) "D:\Program Files\inetsocket.dll" 2004-09-01 09:58:10 34304 ( A…. ) "D:\Program Files\proto.ocm" 2004-09-01 09:57:06 110592 ( A…. ) "D:\Program Files\AIM_xmlp.dll" 2004-09-01 09:57:04 13312 ( A…. ) "D:\Program Files\oscres.dll" 2004-08-31 10:42:32 51435 ( A…. ) "D:\Program Files\licens32.txt" 2004-08-27 17:29:36 1935 ( A…. ) "D:\Program Files\icbmftvc.lst" 2004-08-20 14:16:34 506324 ( A…. ) "D:\Program Files\AIM95.HLP" 2004-08-18 12:56:48 176128 ( A…. ) "D:\Program Files\nssckbi.dll" 2004-08-18 11:56:48 372736 ( A…. ) "D:\Program Files\softokn3.dll" 2004-08-18 11:56:48 110592 ( A…. ) "D:\Program Files\ssl3.dll" 2004-08-18 11:56:48 106496 ( A…. ) "D:\Program Files\smime3.dll" 2004-08-18 11:56:46 348160 ( A…. ) "D:\Program Files\nss3.dll" 2004-08-06 13:04:50 14560 ( A…. ) "D:\Program Files\aim95.CNT" 2004-08-05 23:29:06 10884 ( A…. ) "D:\Program Files\FFF.NFO" 2004-07-29 12:03:08 98304 ( A…. ) "D:\Program Files\sb.dll" 2004-07-22 09:43:54 106496 ( A…. ) "D:\Program Files\CoolPeer.dll" 2004-07-22 09:43:42 3584 ( A…. ) "D:\Program Files\CoolSos.dll" 2004-07-22 08:43:40 184320 ( A…. ) "D:\Program Files\CoolBos.dll" 2004-07-22 08:43:20 114688 ( A…. ) "D:\Program Files\CoolBucky.dll" 2004-07-22 08:43:08 61440 ( A…. ) "D:\Program Files\CoolHttp.dll" 2004-07-22 08:43:00 57344 ( A…. ) "D:\Program Files\CoolSecNss.dll" 2004-07-22 08:42:46 73728 ( A…. ) "D:\Program Files\CoolSocket.dll" 2004-07-22 08:42:00 8192 ( A…. ) "D:\Program Files\Xptl.dll" 2004-07-22 08:41:54 13824 ( A…. ) "D:\Program Files\Xpcs.dll" 2004-07-22 08:41:46 135168 ( A…. ) "D:\Program Files\Xprt.dll" 2004-05-18 15:55:26 81920 ( A…. ) "D:\Program Files\xmltok.dll" 2004-05-18 15:55:26 53248 ( A…. ) "D:\Program Files\xmlparse.dll" 2004-05-08 23:36:06 883467 ( A…. ) "D:\Program Files\FolderShareSetup-3473.exe" 2004-04-16 15:27:56 94208 ( A…. ) "D:\Program Files\jgtktlk.dll" 2004-04-16 15:27:56 45056 ( A…. ) "D:\Program Files\jgsetlk.dll" 2004-04-16 15:27:54 65536 ( A…. ) "D:\Program Files\jgattlk.dll" 2004-04-16 15:27:54 61440 ( A…. ) "D:\Program Files\jgedtlk.dll" 2004-04-16 15:27:54 40960 ( A…. ) "D:\Program Files\jgs6tlk.dll" 2004-04-16 15:27:54 40960 ( A…. ) "D:\Program Files\jgs2tlk.dll" 2004-04-16 15:27:54 36864 ( A…. ) "D:\Program Files\jga1tlk.dll" 2004-04-16 15:27:54 32768 ( A…. ) "D:\Program Files\jgs7tlk.dll" 2004-04-16 15:27:54 32768 ( A…. ) "D:\Program Files\jgs3tlk.dll" 2004-04-16 15:27:52 45056 ( A…. ) "D:\Program Files\jga0tlk.dll" 2004-04-10 20:11:10 5066 ( A…. ) "D:\Program Files\Readme.txt" 2004-03-24 09:22:46 1044168 ( A…. ) "D:\Program Files\VBRun60sp5.exe" 2004-03-22 09:27:52 2372760 ( A…. ) "D:\Program Files\winzip90.exe" 2004-03-13 15:01:56 4859444 ( A…. ) "D:\Program Files\WinTSSetup.exe" 2004-02-23 14:55:08 1082195 ( ….. ) "D:\Program Files\adc_v147.rar" 2004-02-23 13:08:34 1004712 ( A…. ) "D:\Program Files\wrar330.exe" 2004-02-02 14:33:40 26624 ( A…. ) "D:\Program Files\Patcher.exe" 2004-02-02 14:33:28 69632 ( A…. ) "D:\Program Files\Patcher.dll" 2004-01-30 14:54:16 11210 ( A…. ) "D:\Program Files\Version_1_35.txt" 2004-01-30 14:07:38 43552 ( A…. ) "D:\Program Files\mp3DirectCut.exe" 2004-01-30 10:15:14 13789 ( A…. ) "D:\Program Files\FAQ.htm" 2004-01-30 01:09:42 13853 ( A…. ) "D:\Program Files\Manual.htm" 2004-01-26 08:40:04 139785 ( A…. ) "D:\Program Files\maxmemi.exe" 2004-01-09 08:38:16 159744 ( A…. ) "D:\Program Files\nspr4.dll" 2004-01-09 08:38:16 28672 ( A…. ) "D:\Program Files\plc4.dll" 2004-01-09 08:38:16 24576 ( A…. ) "D:\Program Files\plds4.dll" 2003-12-30 11:15:48 9728 ( A.SH. ) "D:\Program Files\Thumbs.db" 2003-12-21 21:37:48 620032 ( A…. ) "D:\Program Files\albumsplit.exe" 2003-12-14 15:34:06 57 ( A…. ) "D:\Program Files\status.js" 2003-12-14 15:32:20 27587 ( A…. ) "D:\Program Files\theUninstallFile.txt" 2003-12-14 15:31:52 38543 ( A…. ) "D:\Program Files\gameart.jpg" 2003-12-14 15:31:52 285 ( A…. ) "D:\Program Files\osd212.osd" 2003-12-14 15:31:50 27957 ( A…. ) "D:\Program Files\readme.html" 2003-12-14 15:31:50 14190 ( A…. ) "D:\Program Files\pregame.htm" 2003-12-14 15:31:50 6561 ( A…. ) "D:\Program Files\racnotinstalled.htm" 2003-12-14 15:31:50 1285 ( A…. ) "D:\Program Files\contentbox_bottom.gif" 2003-12-14 15:31:50 333 ( A…. ) "D:\Program Files\wrapper.ini" 2003-12-14 15:31:50 287 ( A…. ) "D:\Program Files\launch.ini" 2003-12-14 15:31:50 224 ( A…. ) "D:\Program Files\feedback.htm" 2003-12-14 15:31:50 210 ( A…. ) "D:\Program Files\setup.ini" 2003-12-14 15:31:48 1241 ( A…. ) "D:\Program Files\contentbox_top.gif" 2003-12-14 15:31:48 902 ( A…. ) "D:\Program Files\contentbox.gif" 2003-12-14 15:31:48 828 ( A…. ) "D:\Program Files\button_center.gif" 2003-12-14 15:31:48 741 ( A…. ) "D:\Program Files\mainimage_left.gif" 2003-12-14 15:31:48 314 ( A…. ) "D:\Program Files\butt_next_over.gif" 2003-12-14 15:31:48 310 ( A…. ) "D:\Program Files\butt_back_over.gif" 2003-12-14 15:31:48 279 ( A…. ) "D:\Program Files\meter_bottom.gif" 2003-12-14 15:31:48 263 ( A…. ) "D:\Program Files\meter_top.gif" 2003-12-14 15:31:48 218 ( A…. ) "D:\Program Files\butt_next.gif" 2003-12-14 15:31:48 213 ( A…. ) "D:\Program Files\butt_back.gif" 2003-12-14 15:31:48 208 ( A…. ) "D:\Program Files\button_right.gif" 2003-12-14 15:31:48 192 ( A…. ) "D:\Program Files\meter_right.gif" 2003-12-14 15:31:48 191 ( A…. ) "D:\Program Files\meter_left.gif" 2003-12-14 15:31:48 187 ( A…. ) "D:\Program Files\button_left.gif" 2003-12-14 15:31:48 150 ( A…. ) "D:\Program Files\horzline.gif" 2003-12-14 15:31:48 149 ( A…. ) "D:\Program Files\meter_upperleft.gif" 2003-12-14 15:31:48 149 ( A…. ) "D:\Program Files\meter_lowerright.gif" 2003-12-14 15:31:48 147 ( A…. ) "D:\Program Files\meter_upperright.gif" 2003-12-14 15:31:48 146 ( A…. ) "D:\Program Files\meter_lowerleft.gif" 2003-12-14 15:31:48 124 ( A…. ) "D:\Program Files\butt_left.gif" 2003-12-14 15:31:48 123 ( A…. ) "D:\Program Files\butt_right.gif" 2003-12-14 15:31:48 115 ( A…. ) "D:\Program Files\mainimage_right.gif" 2003-12-14 15:31:48 101 ( A…. ) "D:\Program Files\fill.gif" 2003-12-14 15:31:48 95 ( A…. ) "D:\Program Files\mainimage_top.gif" 2003-12-14 15:31:48 91 ( A…. ) "D:\Program Files\mainimage_bottom.gif" 2003-12-14 15:31:48 53 ( A…. ) "D:\Program Files\empty.gif" 2003-12-14 15:31:48 49 ( A…. ) "D:\Program Files\spacer.gif" 2003-12-11 15:38:44 599304 ( A…. ) "D:\Program Files\sevinst.exe" 2003-12-11 14:54:56 2632927 ( A…. ) "D:\Program Files\lv-10viewer.exe" 2003-12-10 16:48:28 11079 ( A..H. ) "D:\Program Files\folder.htt" 2003-12-10 16:48:28 266 ( ..SH. ) "D:\Program Files\desktop.ini" 2003-11-21 15:11:34 49 ( A..H. ) "D:\Program Files\Config.dat" 2003-11-03 12:32:12 129 ( A…. ) "D:\Program Files\serial.txt" 2003-10-14 16:27:50 2670 ( A…. ) "D:\Program Files\aim.odl" 2003-10-14 16:27:50 2486 ( A…. ) "D:\Program Files\netwait.odl" 2003-09-26 18:15:06 12834 ( A…. ) "D:\Program Files\Read Me.txt" 2003-09-10 20:51:38 1626172 ( A…. ) "D:\Program Files\CDex.exe" 2003-09-10 20:50:04 383249 ( A…. ) "D:\Program Files\CDEX.HLP" 2003-09-10 20:49:34 96768 ( A…. ) "D:\Program Files\libsndfile.dll" 2003-09-10 20:49:08 36352 ( A…. ) "D:\Program Files\MP2enc.dll" 2003-09-10 20:48:56 83456 ( A…. ) "D:\Program Files\CDRip.dll" 2003-09-10 20:48:34 21889 ( A…. ) "D:\Program Files\Changes.txt" 2003-09-10 20:23:40 7051 ( A…. ) "D:\Program Files\CDex.cnt" 2003-09-03 14:53:16 5691 ( A…. ) "D:\Program Files\How To Install.html" 2003-09-01 10:42:26 8840 ( A…. ) "D:\Program Files\SuperCat_v4[1].3.zip" 2003-09-01 10:18:04 1550457 ( A…. ) "D:\Program Files\urcat43.zip" 2003-08-15 12:39:34 527 ( A…. ) "D:\Program Files\BL_Games.htm" 2003-08-15 12:34:56 1810 ( A…. ) "D:\Program Files\testgame.htm" 2003-08-01 07:30:00 10752 ( A…. ) "D:\Program Files\advert.ocm" 2003-08-01 07:26:10 7680 ( A…. ) "D:\Program Files\StatsShim.dll" 2003-08-01 07:26:06 7680 ( A…. ) "D:\Program Files\PopupShim.dll" 2003-07-28 19:39:34 648 ( A…. ) "D:\Program Files\mp3DirectCut.exe.manifest" 2003-07-03 12:27:26 57 ( A…. ) "D:\Program Files\Autorun.inf" 2003-03-06 21:50:06 556032 ( A…. ) "D:\Program Files\Mega MP3splitter.exe" 2003-01-24 23:54:30 112914 ( A…. ) "D:\Program Files\Mega MP3splitter.pdf" 2003-01-21 19:26:38 99840 ( A…. ) "D:\Program Files\lame_enc.dll" 2003-01-06 14:41:36 1457 ( A…. ) "D:\Program Files\rvappstm.lst" 2002-12-18 16:46:26 344064 ( A…. ) "D:\Program Files\msvcr70.dll" 2002-12-17 00:00:00 1578978 ( A…. ) "D:\Program Files\setup.exe" 2002-12-17 00:00:00 1657 ( A…. ) "D:\Program Files\order.txt" 2002-12-09 01:42:24 35624 ( A…. ) "D:\Program Files\ManQref.gif" 2002-08-07 22:07:22 71680 ( A…. ) "D:\Program Files\MACDll.dll" 2002-08-05 11:34:56 36864 ( A…. ) "D:\Program Files\ProgressDlg.dll" 2002-08-02 18:40:38 364544 ( A…. ) "D:\Program Files\dBenderC.dll" 2002-07-19 19:26:40 61440 ( A…. ) "D:\Program Files\vorbisenc.dll" 2002-07-18 09:00:02 139264 ( A…. ) "D:\Program Files\dunzip32.dll" 2002-06-09 22:00:54 994505 ( A…. ) "D:\Program Files\mp3splitter.exe" 2002-06-07 17:16:02 999 ( A…. ) "D:\Program Files\Imhotep_FAQ.txt" 2002-05-09 16:22:52 537 ( A…. ) "D:\Program Files\CDex.exe.manifest" 2002-04-20 14:37:28 4794150 ( A…. ) "D:\Program Files\Kyodai Mahjong v18.42 Update.exe" 2002-04-20 13:07:30 69632 ( A…. ) "D:\Program Files\WMA8Connect.dll" 2001-11-22 15:02:32 65024 ( A…. ) "D:\Program Files\mpglib.dll" 2001-10-23 16:44:16 39936 ( A…. ) "D:\Program Files\whatsnew.doc" 2001-09-28 16:00:28 164864 ( A…. ) "D:\Program Files\Unwise32.exe" 2001-07-15 23:14:12 6 ( A…. ) "D:\Program Files\CDex.ini" 2001-07-10 09:20:08 1663 ( A…. ) "D:\Program Files\SETUP.WIS" 2001-07-10 09:20:08 1351 ( A…. ) "D:\Program Files\NAVCE.PDF" 2001-07-10 09:20:06 4182016 ( A…. ) "D:\Program Files\NAVCE.MSI" 2001-07-10 09:20:06 279 ( A…. ) "D:\Program Files\INSTOPTS.INI" 2001-07-10 09:20:04 1489152 ( A…. ) "D:\Program Files\INSTMSIA.EXE" 2001-07-10 09:20:04 35328 ( A…. ) "D:\Program Files\DEC2CAB.DLL" 2001-07-10 09:20:04 1412 ( A…. ) "D:\Program Files\GRC.DAT" 2001-07-10 09:20:02 13943875 ( A…. ) "D:\Program Files\DATA.CAB" 2001-07-10 09:19:56 98304 ( A…. ) "D:\Program Files\_SETUP.EXE" 2001-07-10 09:19:54 1499904 ( A…. ) "D:\Program Files\INSTMSIW.EXE" 2001-05-25 16:07:30 27023 ( A…. ) "D:\Program Files\lgpl.txt" 2001-04-27 16:51:10 131562 ( A…. ) "D:\Program Files\REGISTER.EXE" 2001-04-27 15:04:16 13803 ( A…. ) "D:\Program Files\INDEX.DAT" 2001-04-26 13:15:10 1630208 ( A…. ) "D:\Program Files\TNGENG.EXE" 2001-04-06 12:39:46 687 ( A…. ) "D:\Program Files\START.DAT" 2001-03-14 19:13:24 97565 ( A…. ) "D:\Program Files\splash.gif" 2001-03-14 15:15:18 80 ( A…. ) "D:\Program Files\SN.DAT" 2001-02-06 15:34:58 70656 ( A…. ) "D:\Program Files\jgtkaol.dll" 2001-01-30 16:04:02 1375 ( A…. ) "D:\Program Files\aimalert.gif" 2001-01-30 16:03:42 1370 ( A…. ) "D:\Program Files\stockalert.gif" 2000-12-06 13:08:00 69632 ( A…. ) "D:\Program Files\jgataol.dll" 2000-12-06 13:08:00 61440 ( A…. ) "D:\Program Files\jgedaol.dll" 2000-12-06 13:08:00 45056 ( A…. ) "D:\Program Files\jgseaol.dll" 2000-12-06 13:08:00 40960 ( A…. ) "D:\Program Files\jgs2aol.dll" 2000-12-06 13:08:00 36864 ( A…. ) "D:\Program Files\jga1aol.dll" 2000-12-06 13:08:00 32768 ( A…. ) "D:\Program Files\jgs3aol.dll" 2000-12-06 13:07:58 45056 ( A…. ) "D:\Program Files\jga0aol.dll" 2000-07-28 13:02:08 15820 ( ….. ) "D:\Program Files\HPMMKb2k.cat" 2000-06-29 11:05:04 442368 ( ….. ) "D:\Program Files\hpkbdext.dl_" 2000-06-09 11:49:40 138240 ( ….. ) "D:\Program Files\hpmmKbd.ex_" 2000-06-09 11:47:20 36864 ( ….. ) "D:\Program Files\hpmapild.dl_" 2000-06-09 11:47:14 36864 ( ….. ) "D:\Program Files\hpmsgled.dl_" 2000-02-23 20:33:24 6643 ( ….. ) "D:\Program Files\HPExtKbd.inf" 2000-02-23 20:31:22 3961 ( ….. ) "D:\Program Files\hpkbduni.dat" 2000-02-16 17:39:00 1732 ( A…. ) "D:\Program Files\unwise32.ini" 2000-02-16 16:12:58 50176 ( A…. ) "D:\Program Files\csh.dll" 1999-11-17 16:05:40 132608 ( ….. ) "D:\Program Files\hphlpkbd.ex_" 1999-09-29 10:40:32 15924 ( ….. ) "D:\Program Files\hpmmkbd.sy_" 1999-09-01 15:52:36 1082 ( A…. ) "D:\Program Files\PALETTE.BMP" 1999-06-09 15:22:56 10169 ( ….. ) "D:\Program Files\hpkbdko.hl_" 1999-06-09 15:01:24 10038 ( ….. ) "D:\Program Files\hpkbdja.hl_" 1999-06-09 14:42:20 9874 ( ….. ) "D:\Program Files\hpkbdta.hl_" 1999-06-09 14:22:12 9946 ( ….. ) "D:\Program Files\hpkbdsw.hl_" 1999-06-09 14:21:56 10137 ( ….. ) "D:\Program Files\hpkbdsp.hl_" 1999-06-09 14:21:48 10645 ( ….. ) "D:\Program Files\hpkbdru.hl_" 1999-06-09 14:21:38 10172 ( ….. ) "D:\Program Files\hpkbdpo.hl_" 1999-06-09 14:11:42 10012 ( ….. ) "D:\Program Files\hpkbdno.hl_" 1999-06-09 14:11:24 10184 ( ….. ) "D:\Program Files\hpkbdit.hl_" 1999-06-09 14:11:12 10269 ( ….. ) "D:\Program Files\hpkbdge.hl_" 1999-06-09 14:06:10 10210 ( ….. ) "D:\Program Files\hpkbdfr.hl_" 1999-06-09 14:05:58 10097 ( ….. ) "D:\Program Files\hpkbdfi.hl_" 1999-06-09 14:05:48 10000 ( ….. ) "D:\Program Files\hpkbden.hl_" 1999-06-09 14:05:36 10131 ( ….. ) "D:\Program Files\hpkbddu.hl_" 1999-06-09 13:57:50 10316 ( ….. ) "D:\Program Files\hpkbdch.hl_" 1999-06-09 13:46:40 9904 ( ….. ) "D:\Program Files\hpkbdda.hl_" 1997-08-08 05:57:54 109056 ( A…. ) "D:\Program Files\SYMMETRY.EXE" 1996-12-27 15:57:56 60112 ( A…. ) "D:\Program Files\UNINST.EXE" 1996-06-08 07:39:42 4308 ( A…. ) "D:\Program Files\BRAIN.SYM" 1996-05-31 12:45:16 515 ( A…. ) "D:\Program Files\TWELVE.SYM" 1996-05-25 11:01:36 1119 ( A…. ) "D:\Program Files\LITTLE.SYM" 1996-03-23 16:16:36 2625 ( A…. ) "D:\Program Files\BARNUM.SYM" 1996-03-18 14:31:44 769 ( A…. ) "D:\Program Files\RINGS.SYM" 1996-03-18 12:06:54 5165 ( A…. ) "D:\Program Files\CRISCROS.SYM" 1996-03-16 11:58:38 1318 ( A…. ) "D:\Program Files\WIRLPOOL.SYM" 1996-03-15 18:17:28 1017 ( A…. ) "D:\Program Files\EIGHTS.SYM" 1996-03-13 11:19:54 295 ( A…. ) "D:\Program Files\FLORET.SYM" 1996-03-11 13:18:16 7595 ( A…. ) "D:\Program Files\SMOOTH.SYM" 1996-03-07 08:49:00 2581 ( A…. ) "D:\Program Files\NESTED.SYM" 1996-03-02 11:12:10 9556 ( A…. ) "D:\Program Files\MANY.SYM" 1996-03-01 11:47:02 1713 ( A…. ) "D:\Program Files\VORTEX.SYM" 1996-03-01 11:29:48 4932 ( A…. ) "D:\Program Files\TILE.SYM" 1996-02-28 20:55:44 3154 ( A…. ) "D:\Program Files\YANTRA.SYM" 1996-02-28 07:38:38 3697 ( A…. ) "D:\Program Files\DEEP.SYM" 1995-08-15 00:00:00 721168 ( A…. ) "D:\Program Files\VB40032.DLL" (((((((((((((((((((((((((((((((((((((( Files Created - Last 30days ))))))))))))))))))))))))))))))))))))))))))) 2006-08-05 15:45 53,248 D:\WINDOWS\system32\Process.exe 2006-08-05 15:45 42,496 D:\WINDOWS\system32\swreg.exe 2006-08-05 15:45 40,960 D:\WINDOWS\system32\swsc.exe 2006-08-05 15:45 288,417 D:\WINDOWS\system32\SrchSTS.exe 2006-07-31 19:34 684,032 D:\WINDOWS\libeay32.dll 2006-07-31 19:34 468,480 D:\WINDOWS\WRUninstall.dll 2006-07-31 19:34 155,648 D:\WINDOWS\ssleay32.dll 2006-06-27 09:29 569,396 D:\WINDOWS\system32\fcyvu.dll 2006-06-24 07:14 774,144 D:\WINDOWS\system32\xvidcore.dll 2006-06-24 07:14 180,224 D:\WINDOWS\system32\xvidvfw.dll 2006-06-22 15:25 83,960 D:\WINDOWS\system32\zlcomm.dll 2006-06-22 15:25 796,584 D:\WINDOWS\system32\libeay32_0.9.6l.dll 2006-06-22 15:25 71,672 D:\WINDOWS\system32\zlcommdb.dll 2006-06-22 15:25 59,384 D:\WINDOWS\system32\vswmi.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "QuickTime Task"="\"D:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "Logitech Utility"="Logi_MwX.Exe" "NeroCheck"="D:\\WINDOWS\\system32\\NeroCheck.exe" "SunJavaUpdateSched"="D:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe" "AVG7_CC"="D:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP" "Zone Labs Client"="\"D:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\"" "CookieWall"="D:\\Program Files\\AnalogX\\CookieWall\\cookie.exe" "!ewido"="\"D:\\Program Files\\ewido anti-spyware 4.0\\ewido.exe\" /minimized" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "SpybotSD TeaTimer"="D:\\Program Files\\Spybot - Search & Destroy\\TeaTimer.exe" "LDM"="\\Program\\" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonceex] "flags"=dword:00000008 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonceex\000] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices] "Keyboard Manager"="D:\\Program Files\\Netropa\\One-touch Multimedia Keyboard\\MMKeybd.exe" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" "Flags"=dword:00000002 "Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,de,02,00,00,00,\ 00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:04,00,00,40 "OriginalStateInfo"=hex:18,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,de,02,\ 00,00,04,00,00,40 "RestoredStateInfo"=hex:18,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,de,02,\ 00,00,01,00,00,00 [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "AVG7_Run"="D:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE" [HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce] "RunNarrator"="" [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "AVG7_Run"="D:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\runonce] "RunNarrator"="" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" "{A213B520-C6C2-11d0-AF9D-008029E1027E}"="" "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\D:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Office.lnk] "path"="D:\\Documents and Settings\\All Users.WINDOWS\\Start Menu\\Programs\\Startup\\Microsoft Office.lnk" "backup"="D:\\WINDOWS\\pss\\Microsoft Office.lnkCommon Startup" "location"="Common Startup" "command"="D:\\PROGRA~1\\MICROS~4\\Office10\\OSA.EXE -b -l" "item"="Microsoft Office" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\D:^Documents and Settings^me^Start Menu^Programs^Startup^PowerReg Scheduler V3.exe] "path"="D:\\Documents and Settings\\me\\Start Menu\\Programs\\Startup\\PowerReg Scheduler V3.exe" "backup"="D:\\WINDOWS\\pss\\PowerReg Scheduler V3.exeStartup" "location"="Startup" "command"="D:\\Documents and Settings\\me\\Start Menu\\Programs\\Startup\\PowerReg Scheduler V3.exe" "item"="PowerReg Scheduler V3" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="" "hkey"="HKCU" "command"="\\Program\\" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "TUWinStylerThemeSvc"=dword:00000003 "NtmsSvc"=dword:00000003 "mnmsrvc"=dword:00000003 "AOL ACS"=dword:00000002 HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system DisableRegistryTools REG_DWORD 0 (0x0) Contents of the 'Scheduled Tasks' folder D:\WINDOWS\tasks\PcbugDoctorme.job D:\WINDOWS\tasks\Disk Cleanup.job D:\WINDOWS\tasks\1-Click Maintenance.job D:\WINDOWS\tasks\Spybot - Search & Destroy - Scheduled Task.job D:\WINDOWS\tasks\çasks D:\WINDOWS\tasks\tASKS Completion time: Sun 08/06/2006 11:30:11.88 ComboFix ver 06.07.15/28 - This logfile is located at D:\ComboFix.txt ComboFix.2006-08-06.112356.txt ComboFix.2006-08-06.112624.txt
Post #15
Try the same fix as before, but boot in "safe mode" first, and be sure you're running from an account with "Administrator" privileges. :) :thumbup:

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI