Baseline

saucy1naz Your not being a pest. I feel my beer may be at risk if I don't get this fixed I need to check on a couple of things and I will reply tomorrow thanks bamajim

Hey…where did you go?

Thanks…will try that…

You aren't done helping me yet are you? ;-)

Webmaster's post removed- tashi

saucy1naz Haven't forget you, still looking for the best plan of attack. Please be patient for a little while longer thanks bamajim

saucy1naz

Sorry for the delay

1. Download this file - combofix.exe
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log in your next reply

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Thanks bamajim

saucy1naz

Not the results I was looking for, it should have produced a log let's do this:

Go HERE and Download System Repair Engine by smallfrogsSave it to your Desktop
Rt Click sreng2.zip->>Extract all->>Extract it to your desktop
Open the sreng folder
Double click SREng->>Click Run
At the main Window, in the left Pane,Select Smart Scan
At the next window make sure all of the boxes are checked and Select Scan
When the scan is complete Select Save reports
Save it to your desktop and Close the tool
Double Click SREngLog.txt copy and paste that log as a reply to this thread
Do not run any other options with this tool unless instructed to do so.

Thanks bamajim

Hope you had a great Thanksgiving…here's more work for 'ya ;-) ———————————————– 2006-11-24,20:20:30 System Repair Engineer 2.2.6.605 Smallfrogs (http://www.KZTechs.com) Windows XP Home Edition Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been choosed: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Runing Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <"C:\Program Files\Webroot\Washer\wwDisp.exe"> [Webroot Software] <"C:\Program Files\Messenger\msmsgs.exe" /background> [(Verified)Microsoft Corporation] <"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet> [(Verified)Yahoo! Inc.] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] [N/A] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Intel Corporation] <"C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"> [Sun Microsystems, Inc.] <"C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"> [Hewlett-Packard Company] <"C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe"> [Microsoft® Corporation] <%systemroot%\system32\dumprep 0 -k> [N/A] <"C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"> [Hewlett-Packard Co.] <"C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r> [Sonic Solutions] <"C:\Program Files\HP DVD\Umbrella\DVDTray.exe"> [N/A] <"C:\Program Files\HP DVD\Umbrella\DVDBitSet.exe" /NOUI> [N/A] [(Verified)Logitech Inc.] [(Verified)Intel Corporation] <"C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP> [GRISOFT, s.r.o.] <"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [Anti-Malware Development a.s.] <"C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray> [Webroot Software, Inc.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Corporation] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}> [Anti-Malware Development a.s.] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WRNotifier] [Webroot Software, Inc.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <3s3f3mO><; pcdaze.exe> [N/A] <; "C:\Program Files\Gateway\GWCares\GWCares.exe"> [N/A] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <; notseq.exe> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <; C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe> [Musicmatch, Inc.] <; C:\WINNT\System32\NeroCheck.exe> [Ahead Software Gmbh] <; rundll32
,ClientStartup -s> [N/A] <; "C:\Program Files\Picasa2\PicasaMediaDetector.exe"> [Google Inc.] <; "C:\Program Files\QuickTime\qttask.exe" -atboottime> [Apple Computer, Inc.] <; C:\WINNT\SM1BG.EXE> [Cypress Semiconductor] <; C:\Program Files\SurfSideKick 2\Ssk.exe> [N/A] <; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <; "RUNDLL32.exe" "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain> [N/A] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <; "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet> [(Verified)Yahoo! Inc.] ================================== Startup Folders [Adobe Reader Speed Launch] C:\PROGRA~1\Adobe\ACROBA~2.0\Reader\READER~1.EXE [Adobe Systems Incorporated]> [HP Digital Imaging Monitor] C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [Hewlett-Packard Co.]> [Logitech SetPoint] C:\PROGRA~1\Logitech\SetPoint\SetPoint.exe [Logitech Inc.]> [ymetray] C:\PROGRA~1\Yahoo!\YAHOO!~1\ymetray.exe [N/A]> ================================== Services [Application Management / AppMgmt] %SystemRoot%\System32\appmgmts.dll> [ASP.NET State Service / aspnet_state] [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard] [AVG7 Alert Manager Server / Avg7Alrt] [AVG7 Update Service / Avg7UpdSvc] [AVG E-mail Scanner / AVGEMS] [Human Interface Device Access / HidServ] %SystemRoot%\System32\hidserv.dll> [LightScribeService Direct Disc Labeling Service / LightScribeService] <"C:\Program Files\Common Files\LightScribe\LSSrvc.exe"><> [Intel NCS NetService / NetSvc] [Pml Driver HPZ12 / Pml Driver HPZ12] [Webroot Spy Sweeper Engine / WebrootSpySweeperService] [Washer Security Access / wwSecSvc] ================================== Drivers [Intel® 82801 Audio Driver Install Service (WDM) / ac97intc] [adpu160m / adpu160m] <\SystemRoot\System32\DRIVERS\adpu160m.sys> [AFS2K / AFS2K] [Service for Realtek AC97 Audio (WDM) / ALCXWDM] [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver] <\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys> [AVG7 Kernel / Avg7Core] <\SystemRoot\System32\Drivers\avg7core.sys> [AVG7 Wrap Driver / Avg7RsW] <\SystemRoot\System32\Drivers\avg7rsw.sys> [AVG7 Resident Driver XP / Avg7RsXP] <\SystemRoot\System32\Drivers\avg7rsxp.sys> [AVG Anti-Spyware Clean Driver / AvgAsCln] [AVG7 Clean Driver / AvgClean] <\SystemRoot\System32\Drivers\avgclean.sys> [AVG Network Redirector / AvgTdi] <\SystemRoot\System32\Drivers\avgtdi.sys> [Cdr4_xp / Cdr4_xp] [Cdralw2k / Cdralw2k] [Intel® PRO Adapter Driver / E100B] [IEEE-1284.4 Driver HPZid412 / HPZid412] [Print Class Driver for IEEE-1284.4 HPZipr12 / HPZipr12] [USB to IEEE-1284.4 Translation Driver HPZius12 / HPZius12] [ialm / ialm] [Intel Integrated RAID / iaStor] <\SystemRoot\System32\DRIVERS\iaStor.sys> [IntelC51 / IntelC51] [IntelC52 / IntelC52] [IntelC53 / IntelC53] [Logitech SetPoint PS/2 Mouse Filter Driver / L8042mou] [Logitech SetPoint HID Mouse Filter Driver / LHidKe] [Logitech SetPoint USB Receiver device driver / LHidUsbK] [Logitech SetPoint Mouse Filter Driver / LMouKE] [mohfilt / mohfilt] [nv / nv] [Padus ASPI Shell / pfc] [Direct Parallel Link Driver / Ptilink] [PxHelp20 / PxHelp20] <\SystemRoot\system32\DRIVERS\PxHelp20.sys> [Secdrv / Secdrv] [Spy Sweeper File System Filer Driver: 0509 / SSFS0509] <\SystemRoot\SYSTEM32\Drivers\SSFS0509.SYS> [Spy Sweeper Hookrack MiniDriver / SSHRMD] <\SystemRoot\SYSTEM32\Drivers\SSHRMD.SYS> [Spy Sweeper Interdiction Driver / SSIDRV] <\SystemRoot\SYSTEM32\Drivers\SSIDRV.SYS> [Webroot Spy Sweeper Keylogger Shield Keyboard Filter / SSKBFD] [ultra / ultra] <\SystemRoot\System32\DRIVERS\ultra.sys> [ViaIde / ViaIde] <\SystemRoot\System32\DRIVERS\viaide.sys> [WAN Miniport (ATW) / wanatw] [Intel® Graphics Platform (SoftBIOS) Driver / {6080A529-897E-4629-A488-ABA0C29B635E}] ================================== Browser Add-ons [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Java Plug-in 1.5.0_09] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} [CKAVWebScan Object] {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} [Java Plug-in 1.5.0_09] {8AD9C840-044E-11D1-B3E9-00805F499D93} [Get_ActiveX Control] {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} [Java Plug-in 1.5.0_04] {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} [Java Plug-in 1.5.0_09] {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} [Java Plug-in 1.5.0_09] {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [Yahoo! Toolbar Helper] {02478D38-C3F9-4EFB-9B51-7695ECA05670} <, N/A> [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [CKAVWebScan Object] {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} [] {5E05D214-DD15-47CD-B5BC-65FAC825D3D0} [CKAVReportCtrl Object] {6117669B-8C2D-41FA-A6D9-9E484B999CF0} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Microsoft Web Browser] {8856F961-340A-11D0-A96B-00C04FD705A2} [YMailAttach Class] {AA218328-0EA8-4D70-8972-E987A9190FF4} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [MessengerChecker Class] {DA4F543C-C8A9-4E88-9A79-548CBB46F18F} > [Yahoo! Toolbar] {EF99BD32-C1FB-11D2-892F-0090271D4F88} <, N/A> [&Yahoo! Search] [Yahoo! &Dictionary] [Yahoo! &Maps] [Yahoo! &SMS] ================================== Running Processes [PID: 568][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 640][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 664][\??\C:\WINNT\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINNT\system32\WRLogonNTF.dll] [Webroot Software, Inc., 3,2,3,2125] [C:\WINNT\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.2331] [C:\WINNT\system32\hccutils.DLL] [Intel Corporation, 3.0.0.2331] [PID: 708][C:\WINNT\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 720][C:\WINNT\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 872][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 948][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1044][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1100][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1176][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1544][C:\WINNT\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Yahoo!\Messenger\idle.dll] [Yahoo! Inc., 1, 0, 0, 2] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [C:\PROGRA~1\Webroot\SPYSWE~1\SSCtxMnu.dll] [Webroot Software, Inc., 5,2,3,2125] [C:\PROGRA~1\Yahoo!\Common\ymmapi20041123.dll] [Yahoo! Inc., 2004, 11, 23, 1] [C:\PROGRA~1\COMMON~1\WEBROO~1\SHELLW~1.DLL] [Webroot Software, 6.0.1.409] [C:\Program Files\Grisoft\AVG Free\avgse.dll] [GRISOFT, s.r.o., 7.5.0.409] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll] [Anti-Malware Development a.s., 7, 5, 0, 49] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [Anti-Malware Development a.s., 7, 5, 0, 47] [PID: 1572][C:\WINNT\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINNT\system32\hpzsnt09.dll] [HP, 2.240.0.0] [C:\WINNT\System32\spool\DRIVERS\W32X86\3\hpzpm309.dll] [HP, 2.240.0.0] [C:\WINNT\System32\spool\DRIVERS\W32X86\3\hpz2ku09.dll] [HP, 2.240.0.0] [PID: 1840][C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe] [Sun Microsystems, Inc., 5.0.90.3] [PID: 1848][C:\Program Files\HP\hpcoretech\hpcmpmgr.exe] [Hewlett-Packard Company, 2.1.1.0] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [PID: 1856][C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe] [Microsoft® Corporation, 9.00.0912.0] [PID: 1868][C:\Program Files\HP\HP Software Update\HPWuSchd2.exe] [Hewlett-Packard Co., 50.0.146.000] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [PID: 1892][C:\WINNT\System32\hkcmd.exe] [Intel Corporation, 3.0.0.2331] [C:\WINNT\System32\hccutils.DLL] [Intel Corporation, 3.0.0.2331] [C:\WINNT\System32\igfxdev.dll] [Intel Corporation, 3.0.0.2331] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\WINNT\System32\igfxsrvc.dll] [Intel Corporation, 3.0.0.2331] [C:\WINNT\System32\igfxhk.dll] [Intel Corporation, 3.0.0.2331] [C:\WINNT\System32\igfxres.dll] [Intel Corporation, 3.0.0.2331] [PID: 1900][C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe] [GRISOFT, s.r.o., 7.5.0.418] [C:\PROGRA~1\Grisoft\AVGFRE~1\AvgTMgr.dll] [GRISOFT, s.r.o., 7.5.0.430] [C:\PROGRA~1\Grisoft\AVGFRE~1\AvgCtrl.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\PROGRA~1\Grisoft\AVGFRE~1\AvgAbout.dll] [GRISOFT, s.r.o., 7.5.0.428] [C:\PROGRA~1\Grisoft\AVGFRE~1\AvgTest.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\PROGRA~1\Grisoft\AVGFRE~1\AvgTRes.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\PROGRA~1\Grisoft\AVGFRE~1\AvgSet.dll] [N/A, N/A] [C:\PROGRA~1\Grisoft\AVGFRE~1\avglog.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgcfg.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgklib.dll] [GRISOFT, s.r.o., 7.5.0.424] [C:\Program Files\Grisoft\AVG Free\avglng.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Grisoft\AVG Free\avgf.dll] [N/A, N/A] [C:\Program Files\Grisoft\AVG Free\AVGRES.DLL] [N/A, N/A] [C:\Program Files\Grisoft\AVG Free\avgcckrn.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgvault.dll] [GRISOFT, s.r.o., 7.5.0.420] [C:\Program Files\Grisoft\AVG Free\avgrep.dll] [GRISOFT, s.r.o., 7.5.0.407] [C:\Program Files\Grisoft\AVG Free\avgunarc.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\PROGRA~1\Grisoft\AVGFRE~1\avgemsui.dll] [GRISOFT, s.r.o., 7.5.0.420] [C:\PROGRA~1\Grisoft\AVGFRE~1\avgemcps.dll] [GRISOFT, s.r.o., 7.5.0.420] [C:\Program Files\Yahoo!\Messenger\idle.dll] [Yahoo! Inc., 1, 0, 0, 2] [C:\Program Files\Grisoft\AVG Free\avgamsps.dll] [GRISOFT, s.r.o., 7.5.0.407] [PID: 1912][C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe] [Anti-Malware Development a.s., 7, 5, 0, 50] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\engine.dll] [Anti-Malware Development a.s., 4, 2, 0, 15] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Yahoo!\Messenger\idle.dll] [Yahoo! Inc., 1, 0, 0, 2] [PID: 1920][C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe] [Webroot Software, Inc., 5,2,3,2125] [C:\Program Files\Webroot\Spy Sweeper\wrid.dll] [N/A, N/A] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Webroot\Spy Sweeper\language.dll] [Webroot Software, Inc., 5,2,3,2125] [C:\Program Files\Yahoo!\Messenger\idle.dll] [Yahoo! Inc., 1, 0, 0, 2] [PID: 1944][C:\Program Files\Webroot\Washer\wwDisp.exe] [Webroot Software, 6.0.2.466] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Webroot\Washer\Languages\English.dll] [N/A, N/A] [PID: 1960][C:\Program Files\Messenger\msmsgs.exe] [Microsoft Corporation, 4.7.3001] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [PID: 1968][C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe] [Yahoo! Inc., 8,0,0,716] [C:\Program Files\Yahoo!\Messenger\idle.dll] [Yahoo! Inc., 1, 0, 0, 2] [C:\Program Files\Yahoo!\Messenger\pcre.dll] [Pcre, 3.9] [C:\Program Files\Yahoo!\Messenger\YML.dll] [N/A, 3, 0, 0, 2] [C:\Program Files\Yahoo!\Messenger\YImage.dll] [Yahoo! Inc., 1, 0, 0, 1] [C:\Program Files\Yahoo!\Messenger\xmlparse.dll] [N/A, N/A] [C:\Program Files\Yahoo!\Messenger\xmltok.dll] [N/A, N/A] [C:\Program Files\Yahoo!\Messenger\yvoiceui.dll] [Yahoo! inc, 1, 0, 0, 1] [C:\Program Files\Yahoo!\Messenger\yaudiomgr.dll] [N/A, 1, 0, 200, 1] [C:\Program Files\Yahoo!\Messenger\GIPSVoiceEngineDLL.dll] [Global IP Sound, 2, 0, 4, 0] [C:\Program Files\Yahoo!\Messenger\id3lib.dll] [http://www.id3lib.org/, 3.8.3] [C:\Program Files\Yahoo!\Messenger\YIniDom.dll] [N/A, 0, 1, 0, 0] [C:\Program Files\Yahoo!\Messenger\YCPFoundation.dll] [N/A, 1, 0, 0, 0] [C:\Program Files\Yahoo!\Messenger\nspr4.dll] [Netscape Communications Corporation, 4.6.1] [C:\Program Files\Yahoo!\Messenger\YPluginRegistry.dll] [N/A, 1, 0, 0, 0] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Yahoo!\Messenger\ft60.dll] [Yahoo! Inc., 1.0.0.4] [C:\Program Files\Yahoo!\Messenger\res_msgr.dll] [Yahoo! Inc., 6, 0, 0, 1610] [C:\Program Files\Yahoo!\Shared\YbSkin2.dll] [Yahoo! Inc., 2006, 7, 25, 1] [C:\Program Files\Yahoo!\Messenger\MyYahoo.dll] [Yahoo! Inc., 8, 0, 0, 1] [C:\Program Files\Yahoo!\Messenger\D32-FW.DLL] [Distinct Corporation, 3.4.6] [C:\WINNT\system32\icm32.dll] [Microsoft Corporation, 5.1.2600.2709 (xpsp_sp2_gdr.050628-1518)] [C:\WINNT\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0] [C:\Program Files\Yahoo!\Shared\YAlertCenter.dll] [Yahoo! Inc., 2006, 7, 17, 1] [C:\Program Files\Yahoo!\Messenger\ypagerps1.DLL] [N/A, 1, 0, 0, 1] [C:\Program Files\Yahoo!\Messenger\yvoicesm.dll] [N/A, 1, 0, 201, 1] [C:\Program Files\Yahoo!\Messenger\rvsip.dll] [RADVISION, 3.1.1.30] [C:\Program Files\Yahoo!\Messenger\rvcommon.dll] [RADVISION, 1.0.18] [C:\Program Files\Yahoo!\Messenger\rvads.dll] [RADVISION, 3.1.1.30] [C:\Program Files\Yahoo!\Messenger\rvsdp.dll] [RADVISION, ] [C:\Program Files\Yahoo!\Messenger\P2PCE.dll] [N/A, 1, 0, 0, 0] [C:\Program Files\Yahoo!\Messenger\yv_res.dll] [Yahoo! Inc, 1, 0, 0, 1] [PID: 2020][C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe] [Hewlett-Packard Co., 5.35.0.035] [C:\Program Files\HP\Digital Imaging\bin\hpqcxm08.dll] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll] [Hewlett-Packard Co., 5.35.0.035] [C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc] [Hewlett-Packard Co., 5.35.0.035] [C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll] [Hewlett-Packard Co., 5.35.0.035] [C:\Program Files\HP\Digital Imaging\bin\hpotra08.dll] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hpotra08.rsc] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hpodio08.dll] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hpodvd08.dll] [Hewlett-Packard, 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hpoSTD08.dll] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hpqtap08.dll] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hpoSTD08.rsc] [Hewlett-Packard Co., 40.0.105.000] [C:\WINNT\system32\hpzidr12.dll] [HP, 7, 0, 0, 0] [C:\WINNT\system32\hpzipr12.dll] [HP, 7, 0, 0, 0] [C:\Program Files\HP\Digital Imaging\bin\hpodev08.dll] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hpqcob08.dll] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hpodeb08.dll] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hposcn08.dll] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hpoSCN08.rsc] [Hewlett-Packard Co., 40.0.105.000] [C:\Program Files\HP\Digital Imaging\bin\hpocxi08.dll] [Hewlett-Packard Co., 40.0.105.000] [PID: 2028][C:\Program Files\Logitech\SetPoint\SetPoint.exe] [Logitech Inc., 2.40.849] [C:\Program Files\Logitech\SetPoint\KemUtil.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Logitech\SetPoint\SetPointCOM.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Logitech\SetPoint\kemutb.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Logitech\SetPoint\KGame.dll] [TODO: , 1.0.0.1] [C:\Program Files\Logitech\SetPoint\KemWnd.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Logitech\SetPoint\GameHook.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Logitech\SetPoint\KemXML.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Common Files\Logitech\KHAL\KhalApi.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Logitech\SetPoint\LCabHandler.dll] [Logitech Inc., 2.40.849] [PID: 212][C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE] [Logitech Inc., 2.40.840] [C:\Program Files\Common Files\Logitech\KHAL\KHALAPI.DLL] [Logitech Inc., 2.40.849] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Common Files\Logitech\KHAL\KHALITCH.DLL] [Logitech Inc., 2.40.849] [C:\Program Files\Common Files\Logitech\KHAL\KHALMW.DLL] [Logitech Inc., 2.40.849] [C:\Program Files\Common Files\Logitech\KHAL\KHALHPP.DLL] [Logitech Inc., 2.40.849] [PID: 328][C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe] [Anti-Malware Development a.s., 7, 5, 0, 47] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\engine.dll] [Anti-Malware Development a.s., 4, 2, 0, 15] [PID: 344][C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe] [GRISOFT, s.r.o., 7.5.0.420] [C:\PROGRA~1\Grisoft\AVGFRE~1\avglog.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgcfg.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgklib.dll] [GRISOFT, s.r.o., 7.5.0.424] [C:\Program Files\Grisoft\AVG Free\avglng.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgamint.dll] [GRISOFT, s.r.o., 7.5.0.420] [C:\Program Files\Grisoft\AVG Free\avgamsps.dll] [GRISOFT, s.r.o., 7.5.0.407] [PID: 440][C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe] [GRISOFT, s.r.o., 7.5.0.420] [C:\Program Files\Grisoft\AVG Free\avgupd.dll] [GRISOFT, s.r.o., 7.5.0.420] [C:\Program Files\Grisoft\AVG Free\avgcfg.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgklib.dll] [GRISOFT, s.r.o., 7.5.0.424] [C:\PROGRA~1\Grisoft\AVGFRE~1\avglog.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgupsvc.dll] [GRISOFT, s.r.o., 7.5.0.420] [C:\Program Files\Grisoft\AVG Free\avgamsps.dll] [GRISOFT, s.r.o., 7.5.0.407] [PID: 476][C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe] [GRISOFT, s.r.o., 7.5.0.429] [C:\PROGRA~1\Grisoft\AVGFRE~1\libsasl.dll] [GRISOFT, s.r.o., 7.5.0.407] [C:\Program Files\Grisoft\AVG Free\avgcfg.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgklib.dll] [GRISOFT, s.r.o., 7.5.0.424] [C:\PROGRA~1\Grisoft\AVGFRE~1\avglog.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avglng.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgscan.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\Program Files\Grisoft\AVG Free\avgunarc.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\PROGRA~1\Grisoft\AVGFRE~1\saslcrammd5.dll] [GRISOFT, s.r.o., 7.5.0.407] [C:\PROGRA~1\Grisoft\AVGFRE~1\sasldigestmd5.dll] [GRISOFT, s.r.o., 7.5.0.407] [C:\PROGRA~1\Grisoft\AVGFRE~1\sasllogin.dll] [GRISOFT, s.r.o., 7.5.0.407] [C:\PROGRA~1\Grisoft\AVGFRE~1\saslplain.dll] [GRISOFT, s.r.o., 7.5.0.407] [C:\Program Files\Grisoft\AVG Free\avgmail.dll] [GRISOFT, s.r.o., 7.5.0.429] [C:\PROGRA~1\Grisoft\AVGFRE~1\avgemcps.dll] [GRISOFT, s.r.o., 7.5.0.420] [PID: 636][C:\Program Files\Common Files\LightScribe\LSSrvc.exe] [, 1.0.13.1] [PID: 764][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINNT\System32\hpgwiamd.dll] [Hewlett-Packard, 3.2.2.553] [C:\WINNT\System32\hpotscl.dll] [, 1, 0, 0,553] [PID: 1348][C:\WINNT\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [PID: 1452][C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe] [Webroot Software, Inc., 3,2,3,2125] [C:\Program Files\Webroot\Spy Sweeper\pcre.dll] [RenatoMancuso.com, 6.1.0.0] [C:\Program Files\Webroot\Spy Sweeper\ztvunrar3.dll] [N/A, N/A] [PID: 1728][C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe] [Hewlett-Packard Company, 2.1.6.2] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\HP\hpcoretech\HPCmpMgr.dll] [Hewlett-Packard Company, 2.1.6.2] [C:\Program Files\HP\hpcoretech\comp\hpschedr.dll] [Hewlett-Packard Company, 2.1.6.2] [PID: 2160][C:\WINNT\system32\wwSecure.exe] [Webroot Software, Inc., 6.0.1.10] [PID: 2684][C:\WINNT\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3780][C:\Program Files\MSN\MSNCoreFiles\MSN.EXE] [Microsoft Corporation, 9.50.0034.2000] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Yahoo!\Messenger\idle.dll] [Yahoo! Inc., 1, 0, 0, 2] [C:\WINNT\System32\spool\DRIVERS\W32X86\3\hpzpm309.dll] [HP, 2.240.0.0] [C:\WINNT\System32\spool\DRIVERS\W32X86\3\hpz2ku09.dll] [HP, 2.240.0.0] [C:\WINNT\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroPDF.dll] [Adobe Systems, Inc., 7.0.0.0] [PID: 3952][C:\Program Files\MSN Messenger\msnmsgr.exe] [Microsoft Corporation, 7.5.0311] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\WINNT\System32\devenum.dll] [N/A, N/A] [C:\WINNT\system32\msdmo.dll] [N/A, N/A] [C:\Program Files\Yahoo!\Messenger\idle.dll] [Yahoo! Inc., 1, 0, 0, 2] [PID: 2664][C:\WINNT\System32\HPZipm12.exe] [HP, 7, 0, 0, 0] [C:\WINNT\System32\HPZidr12.dll] [HP, 7, 0, 0, 0] [PID: 2960][C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe] [N/A, N/A] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [PID: 3664][C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe] [Adobe Systems Incorporated, 7.0.0.0] [C:\Program Files\Adobe\Acrobat 7.0\Reader\BIB.dll] [Adobe Systems Incorporated, 1.1.17] [C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.dll] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\AGM.dll] [Adobe Systems Incorporated, 4.14.36] [C:\Program Files\Adobe\Acrobat 7.0\Reader\CoolType.dll] [Adobe Systems Incorporated, 5.01.39] [C:\Program Files\Adobe\Acrobat 7.0\Reader\ACE.dll] [Adobe Systems Incorporated, 2.07.27] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Accessibility.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\AcroForm.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annots.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Checkers.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\DigSig.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\eBook.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\EScript.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\EWH32.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\HLS.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\IA32.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer.API] [Adobe Systems Inc., 7.0.0.41005] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\LegalPDF.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\MakeAccessible.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PDDom.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PPKLite.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\reflow.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\SaveAsRTF.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Search.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Search5.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\SendMail.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Soap.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Spelling.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Updater.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\weblink.api] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\Program Files\Adobe\Acrobat 7.0\Reader\epic_eula.dll] [Adobe Systems Incorporated, 1.0.0.15] [C:\Program Files\Adobe\Acrobat 7.0\Reader\eularesen_US.dll] [Adobe Systems Incorporated, 1, 0, 0, 0] [C:\Program Files\Yahoo!\Messenger\idle.dll] [Yahoo! Inc., 1, 0, 0, 2] [PID: 5536][C:\Program Files\Webroot\Spy Sweeper\SSU.EXE] [N/A, N/A] [PID: 1480][C:\Documents and Settings\Owner\Desktop\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605] [C:\Program Files\Logitech\SetPoint\lgscroll.dll] [Logitech Inc., 2.40.849] [C:\Program Files\Yahoo!\Messenger\idle.dll] [Yahoo! Inc., 1, 0, 0, 2] [PID: 3116][C:\WINNT\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)] ================================== File Associations .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINNT\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock Provider N/A ================================== Autorun.Inf N/A ================================== HOSTS File N/A ==================================

saucy1naz

Yes I did, Hope yours was good as well

Found Some junk we need to do away with

We need to make sure we can see hidden files and foldersClick Start.
Click My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab.
Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Uncheck the Hide file extensions for known file types.
Click OK.
First Please download hosterAnd Save it to your Desktop
Rt Click Hoster.zip->>Extract all->>Extract it to your Desktop
Open The Hoster folder->>Double Click Hoster.exe (It will look like a yeild sign with a stop light in the center)
When the program Opens Click The "Restore Original Hosts" Button

Close the Hoster program when complete
Next Rerun SRE2In the Left Pane Select "Boot Items"
In the Right Pane under the Registry tab, locate under the Name column3s3f3mO
IBspRginU
New.net Startup
SurfSideKick 2
WildTangent CDA
Highlite the entries one at a time, Select "Delete"
Then Yes to confirm
Close SRE2

Next Using Windows Search (Click Start->>Search) And making sure your search includes looking in hidden files and folders
Locate and Delete the following folders (if found)C:\Program Files\SurfSideKick 2
C:\Program Files\WildTangent
Locate and Delete the following files (if found)pcdaze.exe
notseq.exe
Close Windows Search->>Reboot your PC->>Rerun Hijackthis and post a fresh Hijackthis log

Thanks bamajim

saucy1naz

Any problems locating or deleting the items listed?

Now Rerun Hijackthis (scan only) and place checks beside the following entriesR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
Close all other open windows except Hijackthis and Select "Fix checked"

Reboot your PC->>Rerun Hijackthis and post a fresh log

Thanks bamajim

saucy1naz

Strange to sat the least. Let's do some this

Make Sure Spy is turned off as instructed in previous post

First Go to Add/Remove Programs (CLick Start->>Control Panel->>Add/Remove Programs)
And uninstallYahoo! Browser Services
Close Add/Remove Programs

Next

Reset the Internet Explorer home page.a) Start Microsoft Internet Explorer.
b ) Connect to the Internet, and then go to the page that you want to set as your home page. (Even if you have to type it in)
c) Click Tools > Internet Options.
d) In the Home page section of the General tab, click Use Current > OK.
Reset the Internet Explorer Search Pagea. start internet explorer
b. click the search button on the toolbar
c. click Change Preferences
d. click change internet search behaviour
e. click the top radio button
f. in the lower window Select a default search engine
Reboot your PC->>Rerun Hijackthis and see if you can remove those 2 lines in Hijackthis

thanks bamajim

saucy1naz

This is odd, I've never seen these lines give so much trouble

First Please download F-Secure Blacklight (blbeta.exe) and Save to your Desktop
Double click the file to run it
It will create the "fsbl-xxxxxxx.log" on your desktop.
The log will have a list of all items found. Do not choose to rename any yet! I want to see the log first because legitimate items can also be present…like "wbemtest.exe".
Exit Blacklight and post the contents of the log in your next reply.
Next Please RIGHT-CLICK HERE and Save As (in IE it's "Save Target As") to download Silent Runners.

• Save it to the desktop.
• Run Silent Runner's by doubleclicking the "Silent Runners" icon on your desktop.
• You will see a text file appear on the desktop - it's not done, let it run (it won't appear to be doing anything!)
• Once you receive the prompt "All Done!", double-click the new text file on the desktop, copy that entire log, and paste it here.

*NOTE* If you receive any warning message about scripts, please choose to allow the script to run.

thanks bamajim