johndude
Topic Starter
Logfile of HijackThis v1.99.1
Scan saved at 8:27:32 AM, on 12/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
C:\WINDOWS\MXOaldr.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files\PhatNoise Media Manager\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O1 - Hosts: 69.93.229.151 www.allonlinecoupons.com
O1 - Hosts: 69.93.229.151 www.allonlinecoupons.com
O1 - Hosts: 209.197.98.50 www.yesterland.com
O1 - Hosts: 199.181.132.174 abclocal.go.com
O1 - Hosts: 70.85.60.100 dvdxcopy.afterdawn.com
O1 - Hosts: 67.15.80.76 www.ambushhotel.com
O1 - Hosts: 64.86.106.143 quake.usgs.gov
O1 - Hosts: 69.16.243.21 sanfrancisco.apartmenttherapy.com
O1 - Hosts: 194.242.43.137 web.artprice.com
O1 - Hosts: 65.212.180.185 www.mesart.com
O1 - Hosts: 66.35.240.8 www.sfgate.com
O1 - Hosts: 66.147.225.180 www.bewellvitamins.com
O1 - Hosts: 209.197.121.1 www.tomshardware.com
O1 - Hosts: 216.39.58.163 www.bradysclockrepair.com
O1 - Hosts: 216.39.58.163 www.bradysclockrepair.com
O1 - Hosts: 203.26.51.42 www.theage.com.au
O1 - Hosts: 209.247.184.164 www.comedyschoolforless.com
O1 - Hosts: 129.41.69.150 dealnews.com
O1 - Hosts: 216.113.183.151 cgi.ebay.com
O1 - Hosts: 199.75.209.126 www.ewg.org
O1 - Hosts: 199.75.209.126 www.ewg.org
O1 - Hosts: 68.142.212.43 exquisiteandrare.com
O1 - Hosts: 66.135.192.87 pages.ebay.com
O1 - Hosts: 68.142.214.24 www.flickr.com
O1 - Hosts: 198.78.132.165 flight001.com
O1 - Hosts: 198.78.132.165 flight001.com
O1 - Hosts: 65.208.172.71 www.nascigs.com
O1 - Hosts: 198.65.115.241 www.auctionbytes.com
O1 - Hosts: 72.14.219.191 fpiarticle.blogspot.com
O1 - Hosts: 195.58.170.6 www.dvdmarkt.at
O1 - Hosts: 66.160.181.132 www.projectghb.org
O1 - Hosts: 4.79.142.202 www.grc.com
O1 - Hosts: 64.70.136.98 www.guspresents.com
O1 - Hosts: 4.79.142.202 www.grc.com
O1 - Hosts: 63.240.208.227 www.cms.hhs.gov
O1 - Hosts: 149.99.58.196 www.sidefx.com
O1 - Hosts: 209.197.82.28 www.tomsnetworking.com
O1 - Hosts: 66.175.27.150 astro-mate.org
O1 - Hosts: 207.171.166.57 maps.a9.com
O1 - Hosts: 63.208.196.109 hypercube.is.dreaming.org
O1 - Hosts: 206.225.87.181 www.infomercialscams.com
O1 - Hosts: 208.109.49.163 www.selfdefenseproducts.com
O1 - Hosts: 66.151.248.213 www.jesuscampthemovie.com
O1 - Hosts: 85.17.11.27 www.juicygoo.com
O1 - Hosts: 216.104.187.28 spellmaker.com
O1 - Hosts: 64.154.20.29 www.maletreasures.com
O1 - Hosts: 207.155.248.122 www.microsoftcalsettlement.com
O1 - Hosts: 68.142.205.137 webtronics.stores.yahoo.net
O1 - Hosts: 209.232.226.110 www.mbayaq.org
O1 - Hosts: 63.211.141.52 nakedsword.com
O1 - Hosts: 207.178.135.200 www.onenotguilty.com
O1 - Hosts: 149.99.58.196 www.sidefx.com
O1 - Hosts: 66.90.101.64 www.pentagonstrike.co.uk
O1 - Hosts: 72.3.253.107 www.photo-accessories.com.au
O1 - Hosts: 216.104.71.5 www.portforward.com
O1 - Hosts: 207.58.145.9 www.powersellersunite.com
O1 - Hosts: 66.225.239.127 primaljaimal.com
O1 - Hosts: 216.93.251.17 www.purevolume.com
O1 - Hosts: 216.105.61.225 www.rainbowdepot.com
O1 - Hosts: 207.178.253.12 www.rushtrafficschool.com
O1 - Hosts: 216.103.100.55 www.sfgov.org
O1 - Hosts: 67.19.224.132 www.sandrabernhard.com
O1 - Hosts: 204.127.198.25 mywebpages.comcast.net
O1 - Hosts: 216.103.100.55 www.sfgov.org
O1 - Hosts: 68.142.205.137 www.waterproducts.com
O1 - Hosts: 209.11.51.41 www.gizmodo.com
O1 - Hosts: 68.142.214.24 www.flickr.com
O1 - Hosts: 69.156.240.29 svat.com
O1 - Hosts: 81.187.187.112 hot-on-the-trail-at.blog-city.com
O1 - Hosts: 64.202.189.186 www.irisvista.com
O1 - Hosts: 68.142.205.137 www.spytown.com
O1 - Hosts: 204.127.195.15 www.comcast.net
O1 - Hosts: 66.228.122.12 www.zombietime.com
O1 - Hosts: 212.44.68.7 users.gazinter.net
O1 - Hosts: 66.228.122.12 www.zombietime.com
O1 - Hosts: 209.126.151.229 www.allvideotrafficschool.com
O1 - Hosts: 216.133.229.130 www.trafficschool.com
O1 - Hosts: 209.126.151.229 www.allvideotrafficschool.com
O1 - Hosts: 64.94.178.89 www.dealtime.co.uk
O1 - Hosts: 129.41.69.158 dealcoupon.com
O1 - Hosts: 66.184.245.100 www.vzwshop.com
O1 - Hosts: 162.115.227.100 www.verizonwireless.com
O1 - Hosts: 72.3.138.22 www.videoegg.com
O1 - Hosts: 74.52.135.146 www.videohelp.com
O1 - Hosts: 216.218.218.27 vax.hanford.org
O1 - Hosts: 81.187.187.112 hot-on-the-trail-at.blog-city.com
O1 - Hosts: 62.214.98.28 www.sorrygottago.com
O1 - Hosts: 64.73.155.29 www.sears.com
O1 - Hosts: 69.61.15.150 www.whosarat.com
O1 - Hosts: 66.150.161.133 www.avalonepicure.com
O1 - Hosts: 216.52.81.211 zabasearch.com
O1 - Hosts: 66.151.238.124 www.zipcar.com
O1 - Hosts: 64.86.106.145 www.zappos.com
O1 - Hosts: 63.240.117.53 www.kennethcole.com
O1 - Hosts: 64.86.106.145 www.zappos.com
O1 - Hosts: 66.218.77.68 www.geocities.com
O1 - Hosts: 207.46.248.248 support.microsoft.com
O1 - Hosts: 64.85.14.90 pubs.logicalexpressions.com
O1 - Hosts: 66.218.77.68 www.geocities.com
O1 - Hosts: 65.19.174.45 www.primedius.com
O1 - Hosts: 207.188.5.44 www.real.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [IMONTRAY] C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOaldr.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .efp: C:\Program Files\Internet Explorer\Plugins\NPEFPrn.dll
O12 - Plugin for .efv: C:\Program Files\Internet Explorer\Plugins\NPEFV.dll
O12 - Plugin for .fmp: C:\Program Files\Internet Explorer\Plugins\NPFMP.dll
O12 - Plugin for .fmr: C:\Program Files\Internet Explorer\Plugins\NPFME.dll
O12 - Plugin for .ifx: C:\Program Files\Internet Explorer\Plugins\NPWebPrn.dll
O12 - Plugin for .lfx: C:\Program Files\Internet Explorer\Plugins\NPLaunch.dll
O12 - Plugin for .mwp: C:\Program Files\Internet Explorer\Plugins\NPMWPrn.dll
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1152647794359
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1153525397531
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel® Active Monitor (imonNT) - Intel Corp. - C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: V2i Protector - PowerQuest Corporation - C:\Program Files\PowerQuest\Drive Image 7.0\Agent\PQV2iSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Scan saved at 8:27:32 AM, on 12/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
C:\WINDOWS\MXOaldr.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files\PhatNoise Media Manager\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O1 - Hosts: 69.93.229.151 www.allonlinecoupons.com
O1 - Hosts: 69.93.229.151 www.allonlinecoupons.com
O1 - Hosts: 209.197.98.50 www.yesterland.com
O1 - Hosts: 199.181.132.174 abclocal.go.com
O1 - Hosts: 70.85.60.100 dvdxcopy.afterdawn.com
O1 - Hosts: 67.15.80.76 www.ambushhotel.com
O1 - Hosts: 64.86.106.143 quake.usgs.gov
O1 - Hosts: 69.16.243.21 sanfrancisco.apartmenttherapy.com
O1 - Hosts: 194.242.43.137 web.artprice.com
O1 - Hosts: 65.212.180.185 www.mesart.com
O1 - Hosts: 66.35.240.8 www.sfgate.com
O1 - Hosts: 66.147.225.180 www.bewellvitamins.com
O1 - Hosts: 209.197.121.1 www.tomshardware.com
O1 - Hosts: 216.39.58.163 www.bradysclockrepair.com
O1 - Hosts: 216.39.58.163 www.bradysclockrepair.com
O1 - Hosts: 203.26.51.42 www.theage.com.au
O1 - Hosts: 209.247.184.164 www.comedyschoolforless.com
O1 - Hosts: 129.41.69.150 dealnews.com
O1 - Hosts: 216.113.183.151 cgi.ebay.com
O1 - Hosts: 199.75.209.126 www.ewg.org
O1 - Hosts: 199.75.209.126 www.ewg.org
O1 - Hosts: 68.142.212.43 exquisiteandrare.com
O1 - Hosts: 66.135.192.87 pages.ebay.com
O1 - Hosts: 68.142.214.24 www.flickr.com
O1 - Hosts: 198.78.132.165 flight001.com
O1 - Hosts: 198.78.132.165 flight001.com
O1 - Hosts: 65.208.172.71 www.nascigs.com
O1 - Hosts: 198.65.115.241 www.auctionbytes.com
O1 - Hosts: 72.14.219.191 fpiarticle.blogspot.com
O1 - Hosts: 195.58.170.6 www.dvdmarkt.at
O1 - Hosts: 66.160.181.132 www.projectghb.org
O1 - Hosts: 4.79.142.202 www.grc.com
O1 - Hosts: 64.70.136.98 www.guspresents.com
O1 - Hosts: 4.79.142.202 www.grc.com
O1 - Hosts: 63.240.208.227 www.cms.hhs.gov
O1 - Hosts: 149.99.58.196 www.sidefx.com
O1 - Hosts: 209.197.82.28 www.tomsnetworking.com
O1 - Hosts: 66.175.27.150 astro-mate.org
O1 - Hosts: 207.171.166.57 maps.a9.com
O1 - Hosts: 63.208.196.109 hypercube.is.dreaming.org
O1 - Hosts: 206.225.87.181 www.infomercialscams.com
O1 - Hosts: 208.109.49.163 www.selfdefenseproducts.com
O1 - Hosts: 66.151.248.213 www.jesuscampthemovie.com
O1 - Hosts: 85.17.11.27 www.juicygoo.com
O1 - Hosts: 216.104.187.28 spellmaker.com
O1 - Hosts: 64.154.20.29 www.maletreasures.com
O1 - Hosts: 207.155.248.122 www.microsoftcalsettlement.com
O1 - Hosts: 68.142.205.137 webtronics.stores.yahoo.net
O1 - Hosts: 209.232.226.110 www.mbayaq.org
O1 - Hosts: 63.211.141.52 nakedsword.com
O1 - Hosts: 207.178.135.200 www.onenotguilty.com
O1 - Hosts: 149.99.58.196 www.sidefx.com
O1 - Hosts: 66.90.101.64 www.pentagonstrike.co.uk
O1 - Hosts: 72.3.253.107 www.photo-accessories.com.au
O1 - Hosts: 216.104.71.5 www.portforward.com
O1 - Hosts: 207.58.145.9 www.powersellersunite.com
O1 - Hosts: 66.225.239.127 primaljaimal.com
O1 - Hosts: 216.93.251.17 www.purevolume.com
O1 - Hosts: 216.105.61.225 www.rainbowdepot.com
O1 - Hosts: 207.178.253.12 www.rushtrafficschool.com
O1 - Hosts: 216.103.100.55 www.sfgov.org
O1 - Hosts: 67.19.224.132 www.sandrabernhard.com
O1 - Hosts: 204.127.198.25 mywebpages.comcast.net
O1 - Hosts: 216.103.100.55 www.sfgov.org
O1 - Hosts: 68.142.205.137 www.waterproducts.com
O1 - Hosts: 209.11.51.41 www.gizmodo.com
O1 - Hosts: 68.142.214.24 www.flickr.com
O1 - Hosts: 69.156.240.29 svat.com
O1 - Hosts: 81.187.187.112 hot-on-the-trail-at.blog-city.com
O1 - Hosts: 64.202.189.186 www.irisvista.com
O1 - Hosts: 68.142.205.137 www.spytown.com
O1 - Hosts: 204.127.195.15 www.comcast.net
O1 - Hosts: 66.228.122.12 www.zombietime.com
O1 - Hosts: 212.44.68.7 users.gazinter.net
O1 - Hosts: 66.228.122.12 www.zombietime.com
O1 - Hosts: 209.126.151.229 www.allvideotrafficschool.com
O1 - Hosts: 216.133.229.130 www.trafficschool.com
O1 - Hosts: 209.126.151.229 www.allvideotrafficschool.com
O1 - Hosts: 64.94.178.89 www.dealtime.co.uk
O1 - Hosts: 129.41.69.158 dealcoupon.com
O1 - Hosts: 66.184.245.100 www.vzwshop.com
O1 - Hosts: 162.115.227.100 www.verizonwireless.com
O1 - Hosts: 72.3.138.22 www.videoegg.com
O1 - Hosts: 74.52.135.146 www.videohelp.com
O1 - Hosts: 216.218.218.27 vax.hanford.org
O1 - Hosts: 81.187.187.112 hot-on-the-trail-at.blog-city.com
O1 - Hosts: 62.214.98.28 www.sorrygottago.com
O1 - Hosts: 64.73.155.29 www.sears.com
O1 - Hosts: 69.61.15.150 www.whosarat.com
O1 - Hosts: 66.150.161.133 www.avalonepicure.com
O1 - Hosts: 216.52.81.211 zabasearch.com
O1 - Hosts: 66.151.238.124 www.zipcar.com
O1 - Hosts: 64.86.106.145 www.zappos.com
O1 - Hosts: 63.240.117.53 www.kennethcole.com
O1 - Hosts: 64.86.106.145 www.zappos.com
O1 - Hosts: 66.218.77.68 www.geocities.com
O1 - Hosts: 207.46.248.248 support.microsoft.com
O1 - Hosts: 64.85.14.90 pubs.logicalexpressions.com
O1 - Hosts: 66.218.77.68 www.geocities.com
O1 - Hosts: 65.19.174.45 www.primedius.com
O1 - Hosts: 207.188.5.44 www.real.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [IMONTRAY] C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOaldr.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .efp: C:\Program Files\Internet Explorer\Plugins\NPEFPrn.dll
O12 - Plugin for .efv: C:\Program Files\Internet Explorer\Plugins\NPEFV.dll
O12 - Plugin for .fmp: C:\Program Files\Internet Explorer\Plugins\NPFMP.dll
O12 - Plugin for .fmr: C:\Program Files\Internet Explorer\Plugins\NPFME.dll
O12 - Plugin for .ifx: C:\Program Files\Internet Explorer\Plugins\NPWebPrn.dll
O12 - Plugin for .lfx: C:\Program Files\Internet Explorer\Plugins\NPLaunch.dll
O12 - Plugin for .mwp: C:\Program Files\Internet Explorer\Plugins\NPMWPrn.dll
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1152647794359
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1153525397531
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel® Active Monitor (imonNT) - Intel Corp. - C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: V2i Protector - PowerQuest Corporation - C:\Program Files\PowerQuest\Drive Image 7.0\Agent\PQV2iSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe