hersoldier
Topic Starter
Hi. Recently my computer has begun to not respond to mouse clicks and keystrokes. This happens after it has been on for about an hour or so… it just slows down and stops responding and I can't even shut it down properly and must pull the power cord to reboot. I have exhausted my knowledge and must ask for help.
Thanks, hersoldier
Here is hijack log:
Logfile of HijackThis v1.99.1
Scan saved at 3:59:23 PM, on 11/1/06
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\MouseWare\system\em_exec.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanCU.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Documents and Settings\Marylou Roblin\Desktop\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp_adb…/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp_adb…/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=552…cid={SUB_CLCID}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [LDM] \Program\
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
O4 - Global Startup: Wireless Configuration Utility HW.32.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1111027122515
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1144780567750
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…canner37610.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O18 - Protocol: bw+0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
Thanks, hersoldier
Here is hijack log:
Logfile of HijackThis v1.99.1
Scan saved at 3:59:23 PM, on 11/1/06
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\MouseWare\system\em_exec.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\WlanCU.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Documents and Settings\Marylou Roblin\Desktop\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp_adb…/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp_adb…/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=552…cid={SUB_CLCID}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [LDM] \Program\
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
O4 - Global Startup: Wireless Configuration Utility HW.32.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1111027122515
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1144780567750
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…canner37610.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O18 - Protocol: bw+0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {502D0D36-39A0-4DA3-856C-AB6D8C0E73DE} - C:\Documents and Settings\Marylou Roblin\My Documents\DOWNLOADS\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - C:\Program Files\802.11 Wireless LAN\802.11g Pen Size Wireless USB 2.0 Adapter HW.32 V1.10\SiSWLSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)