Ads.k8l.info And Other Issues

Well I've tried everything I know, so now it's up to the experts (you guys). I've deleted, turned off processes, run virus scanners, and done research, but to no conclusion. I'm having issues with:

Ads.k8l.info - constantly connecting to site

wpajtryf67hazytrd.exe - removed every time restart comp, but always comes back

status bar - constantly removed

bmwebcfg - mixed reviews, possibly a problem? (can't be deleted)

other possiblities?


Here is my HJT log, thanks in advance guys!




Logfile of HijackThis v1.99.1
Scan saved at 9:53:14 PM, on 5/26/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\bmwebcfg.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\NMapWin\bin\nmapserv.exe
C:\Program Files\NavNT\rtvscan.exe
C:\Program Files\Prevx1\PXAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\LogMeIn\LogMeInSystray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Prevx1\PXConsole.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Multimedia\main\ATISched.EXE
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\Google\Google Talk\googletalk.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Belkin\Bluetooth Software\BTTray.exe
C:\Program Files\Launchy\Launchy.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\VundoFix.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,;*.local
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 6\SnagItBHO.dll
O2 - BHO: 0 - {408CB951-CF2C-4ECF-73BF-F9C35124B583} - C:\Program Files\Messenger\rybisol.dll
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 6\SnagItIEAddin.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [Ulead Quick-Drop] "C:\Program Files\Ulead Systems\Ulead DVD MovieFactory 5 Plus\Ulead DVD MovieFactory 5\Quick-Drop.exe" WINDOWCALL
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\LogMeInSystray.exe"
O4 - HKLM\..\Run: [Cingular Communication Manager] C:\Program Files\Cingular\Communication Manager\CingularCCM.exe -a
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PrevxOne] "C:\Program Files\Prevx1\PXConsole.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ATI Scheduler] C:\Program Files\ATI Multimedia\main\ATISched.EXE
O4 - HKCU\..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Picture Package Menu.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device… - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\tv\EXPLBAR.DLL (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {1EF9F042-C2EB-4293-8213-474CAEEF531D} (TmHcmsX Control) - http://www.trendsecure.com/framework/contr…vex/TmHcmsX.CAB
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {2D72C39D-53F6-4AEA-A9DB-1298429DA974} (3DVista Viewer Control) - http://www.3dvista.com/downloads/viewer3dv.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O18 - Protocol: bw+0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: offline-8876480 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O20 - Winlogon Notify: LMIinit - C:\WINDOWS\SYSTEM32\LMIinit.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bytemobile Web Configurator (bmwebcfg) - Bytemobile, Inc. - C:\WINDOWS\system32\bmwebcfg.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMap - Unknown owner - C:\Program Files\NMapWin\bin\nmapserv.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

Logfile of HijackThis v1.99.1
Scan saved at 9:02:57 PM, on 5/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\bmwebcfg.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\ATI Multimedia\main\ATISched.EXE
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Belkin\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
C:\Program Files\NMapWin\bin\nmapserv.exe
C:\Program Files\NavNT\rtvscan.exe
C:\Program Files\Prevx1\PXAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,;*.local
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 6\SnagItBHO.dll
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 6\SnagItIEAddin.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [Ulead Quick-Drop] "C:\Program Files\Ulead Systems\Ulead DVD MovieFactory 5 Plus\Ulead DVD MovieFactory 5\Quick-Drop.exe" WINDOWCALL
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ATI Scheduler] C:\Program Files\ATI Multimedia\main\ATISched.EXE
O4 - HKCU\..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Picture Package Menu.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device… - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\tv\EXPLBAR.DLL (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {1EF9F042-C2EB-4293-8213-474CAEEF531D} (TmHcmsX Control) - http://www.trendsecure.com/framework/contr…vex/TmHcmsX.CAB
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {2D72C39D-53F6-4AEA-A9DB-1298429DA974} (3DVista Viewer Control) - http://www.3dvista.com/downloads/viewer3dv.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: offline-8876480 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O20 - Winlogon Notify: LMIinit - LMIinit.dll (file missing)
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bytemobile Web Configurator (bmwebcfg) - Bytemobile, Inc. - C:\WINDOWS\system32\bmwebcfg.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMap - Unknown owner - C:\Program Files\NMapWin\bin\nmapserv.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe













AVG Anti-Spyware - Scan Report

+ Created at: 6:25:14 PM 5/27/2007

+ Scan result:



C:\Program Files\Donia Software\ShareScan NT - 2000 - XP Evaluation\Patch.exe -> Backdoor.Theef.111 : Cleaned with backup (quarantined).
C:\Program Files\Smoky City Design\The Panorama Factory V4\Panorama_v4.0_Crk.exe -> Downloader.VB.ts : Cleaned with backup (quarantined).
C:\Stuff\The.Panorama.Factory.v4.0.Multilanguage.WinALL.Cracked-ENGiNE.rar/The.Panorama.Factory.v4.0.Multilanguage.WinALL.Cracked-ENGiNE\etpfa402.zip/etpfa4.r00/Crack\Panorama_v4.0_Crk.exe -> Downloader.VB.ts : Cleaned with backup (quarantined).
C:\Stuff\The.Panorama.Factory.v4.0.Multilanguage.WinALL.Cracked-ENGiNE\Crack\Panorama_v4.0_Crk.exe -> Downloader.VB.ts : Cleaned with backup (quarantined).
C:\Documents and Settings\Shaun Michael\Local Settings\Temporary Internet Files\Content.IE5\OHM7WTEN\WpAJTrYf67HazytRD[1].exe -> Hijacker.Small.jf : Cleaned with backup (quarantined).
C:\Program Files\Hijackthis\backups\backup-20070526-215625-412.dll -> Hijacker.StartPage : Cleaned with backup (quarantined).
C:\Program Files\LogMeIn\LMIinit.dll -> Not-A-Virus.RemoteAdmin.Win32.RemotelyAnywhere.a : Cleaned with backup (quarantined).
C:\WINDOWS\system32\LMIinit.dll -> Not-A-Virus.RemoteAdmin.Win32.RemotelyAnywhere.a : Cleaned with backup (quarantined).
[288] C:\WINDOWS\system32\LMIinit.dll -> Not-A-Virus.RemoteAdmin.Win32.RemotelyAnywhere.a : Cleaned with backup (quarantined).
:mozilla.371:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.52:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.53:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.54:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.55:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.56:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.57:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.58:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.59:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.60:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.62:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.63:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.64:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.65:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.73:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.74:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.75:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.76:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.77:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.78:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.166:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.167:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.101:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.102:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.103:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.33:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.34:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.35:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.36:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.37:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.21:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.355:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.149:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.151:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.152:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.107:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Centrport : Cleaned.
:mozilla.108:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Centrport : Cleaned.
:mozilla.343:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.344:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.190:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.350:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.9:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.292:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.303:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.309:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.315:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.320:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.321:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.323:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.351:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.352:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.28:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.14:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.16:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.17:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.20:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.359:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.260:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Information : Cleaned.
:mozilla.311:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Linksynergy : Cleaned.
:mozilla.312:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Linksynergy : Cleaned.
:mozilla.85:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.243:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Msn : Cleaned.
:mozilla.244:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.197:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.109:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.100:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.219:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Pro-market : Cleaned.
:mozilla.220:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Pro-market : Cleaned.
:mozilla.170:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.171:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.38:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.39:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.10:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\9d6d4h2e.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.11:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\9d6d4h2e.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.6:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\9d6d4h2e.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.8:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\9d6d4h2e.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.9:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\9d6d4h2e.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.121:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.82:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.83:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
C:\Documents and Settings\Shaun Michael\Cookies\shaun [removed]-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\Shaun Michael\Cookies\shaun michael@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.97:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.148:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.112:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.273:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.274:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.275:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.276:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.289:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.32:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.271:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.272:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.215:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.216:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.217:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.218:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Webtrendslive : Cleaned.
C:\Documents and Settings\Shaun Michael\Cookies\shaun [removed][1].txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.127:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.128:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.129:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.130:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.131:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.132:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.133:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.134:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.135:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.119:C:\Documents and Settings\Shaun Michael\Application Data\Mozilla\Firefox\Profiles\1eg8s8vh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\Stuff\ipixinteractivestudiov1.0crackshock.zip/crack.zip/shkipix1.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).
C:\Stuff\1-15-06\NeLe 2.1 & 2.3.part5.rar/Trial-Reset.v2.5.exe -> Trojan.LdPinch.abn : Cleaned with backup (quarantined).


::Report end













ComboFix 07-05.27.V - Running from: "C:\"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


"C:\WINDOWS\system32\pthreadVC.dll"
"C:\Program Files\outerinfo\Terms.rtf"
"C:\WINDOWS\system32\vbzip11.dll"
"C:\Program Files\outerinfo"

Purity Folders:

C:\Program Files\FNTS~1
C:\DOCUME~1\SHAUNM~1\APPLIC~1\RACLE~1



((((((((((((((((((((((((((((((( Files Created from 2007-04-27 to 2007-05-27 ))))))))))))))))))))))))))))))))))


2007-05-27 14:58 1,087,736 –a—— C:\ComboFix.exe
2007-05-27 14:52 d——– C:\Ads_k8l_info And Other Issues - TomCoyote_files
2007-05-27 14:11 3,968 –a—— C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-05-27 14:10 11,470,608 –a—— C:\avgas-setup-7.5.0.50.exe
2007-05-27 13:59 d——– C:\Program Files\CCleaner
2007-05-27 13:58 482,064 –a—— C:\ccsetup140_slim.exe
2007-05-26 21:52 488,144 –a—— C:\HJTsetup.exe
2007-05-26 20:33 d——– C:\Documents and Settings\SHAUNM~1\DoctorWeb
2007-05-26 20:33 d——– C:\DOCUME~1\SHAUNM~1\DoctorWeb
2007-05-26 20:28 102,912 –a—— C:\VundoFix.exe
2007-05-26 20:28 d——– C:\VundoFix Backups
2007-05-26 20:01 d——– C:\backups
2007-05-26 19:48 1,308,216 –a—— C:\HiJackThis_v2.exe
2007-05-25 21:35 d——– C:\Poor Performance - Spyware, Adware, Etc_ - Tech Support Guy Forums_files
2007-05-25 21:34 6,414,120 –a—— C:\drweb-cureit.exe
2007-05-25 21:33 720,032 –a—— C:\SDFix.exe
2007-05-25 21:29 76,560 –a—— C:\WINDOWS\system32\drivers\tmcomm.sys
2007-05-25 21:05 d——– C:\!KillBox
2007-05-25 19:52 d——– C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
2007-05-25 18:59 93,696 –a—— C:\KillBox-Beta.exe
2007-05-25 18:51 d——– C:\WINDOWS\system32\ActiveScan
2007-05-25 18:29 50,688 –a—— C:\ATF-Cleaner.exe
2007-05-25 01:08 d——– C:\DOCUME~1\SHAUNM~1\APPLIC~1\Prevx
2007-05-25 00:57 d——– C:\DOCUME~1\ADMINI~1\APPLIC~1\Prevx
2007-05-25 00:56 77,312 –a—— C:\WINDOWS\ua2.dll
2007-05-25 00:56 13,700,728 –a—— C:\SETUP.PREVX1.2.3.1.14.2K2K3XP.x86AMD64.exe
2007-05-25 00:56 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prevx
2007-05-25 00:53 d—s—- C:\DOCUME~1\ADMINI~1\UserData
2007-05-25 00:23 1,389,511 —hs—- C:\WINDOWS\system32\orqss.bak2
2007-05-24 11:56 d——– C:\Tempb9
2007-05-24 11:56 d——– C:\Temp
2007-05-12 19:46 8 –a—— C:\WINDOWS\system32\PowerDimmer.dat
2007-05-12 19:45 7,680 –a—— C:\WINDOWS\system32\PowerDimmer.scr


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-05-27 23:44:14 ——– d—–w C:\DOCUME~1\SHAUNM~1\APPLIC~1\Launchy
2007-05-27 22:24:50 ——– d—–w C:\Program Files\LogMeIn
2007-05-27 19:05:27 ——– d—–w C:\Program Files\Messenger
2007-05-27 00:01:51 ——– d—–w C:\Program Files\DevalVR
2007-05-26 03:20:09 ——– d—–w C:\Program Files\Pryme
2007-05-26 00:25:44 ——– d—–w C:\Program Files\TagRename
2007-05-26 00:05:53 ——– d—–w C:\Program Files\Common Files\Autodesk Shared
2007-05-26 00:04:46 ——– d—–w C:\Program Files\Bonjour
2007-05-25 23:53:17 ——– d—–w C:\Program Files\ATI Multimedia
2007-05-25 23:45:25 ——– d—–w C:\Program Files\7-Zip
2007-05-25 13:44:49 20,156 —-a-w C:\DOCUME~1\SHAUNM~1\APPLIC~1\ViewerApp.dat
2007-05-18 22:49:07 ——– d—–w C:\Program Files\FlashGet
2007-05-13 15:48:10 ——– d—–w C:\DOCUME~1\SHAUNM~1\APPLIC~1\dvdcss
2007-04-27 05:08:47 ——– d—–w C:\DOCUME~1\SHAUNM~1\APPLIC~1\AdobeUM
2007-04-26 01:47:15 ——– d—–w C:\Program Files\Autodesk Architectural Desktop 2007
2007-04-26 00:55:18 ——– d—–w C:\DOCUME~1\SHAUNM~1\APPLIC~1\Autodesk
2007-04-26 00:42:30 ——– d—–w C:\Program Files\Autodesk
2007-04-19 01:14:07 ——– d—–w C:\Program Files\Google
2007-04-15 13:22:44 ——– d—–w C:\Program Files\iTunes
2007-04-15 13:22:35 ——– d—–w C:\Program Files\iPod
2007-04-15 13:16:28 ——– d—–w C:\Program Files\QuickTime
2007-04-15 13:12:58 ——– d—–w C:\Program Files\Apple Software Update
2007-04-15 02:53:51 ——– d—–w C:\Program Files\Free Hide Folder
2007-04-12 19:42:05 ——– d–h–w C:\DOCUME~1\SHAUNM~1\APPLIC~1\Move Networks
2007-04-10 03:52:01 ——– d—–w C:\Program Files\USAPhotoMaps
2007-04-04 16:37:30 ——– d—–w C:\Program Files\Virtual Earth 3D


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{00C6482D-C502-44C8-8409-FCE54AD9C208}=C:\Program Files\TechSmith\SnagIt 6\SnagItBHO.dll [2003-06-25 06:30]
{55EA1964-F5E4-4D6A-B9B2-125B37655FCB}=C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll [2006-01-10 12:09]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll [2006-12-15 04:23]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" [2006-12-15 04:23]
"vptray"="C:\Program Files\NavNT\vptray.exe" [2001-09-24 07:59]
"Ulead Quick-Drop"="C:\Program Files\Ulead Systems\Ulead DVD MovieFactory 5 Plus\Ulead DVD MovieFactory 5\Quick-Drop.exe" [2006-07-20 02:04]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AIM"="C:\Program Files\AIM\aim.exe" [2005-06-02 01:34]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 21:07]
"ATI Scheduler"="C:\Program Files\ATI Multimedia\main\ATISched.EXE" [2005-12-23 01:21]
"ATI DeviceDetect"="C:\Program Files\ATI Multimedia\main\ATIDtct.EXE" [2005-12-23 01:20]
"googletalk"="C:\Program Files\Google\Google Talk\googletalk.exe" [2007-01-01 17:22]
"AnyDVD"="C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe" [2007-01-04 22:07]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2006-09-28 10:13]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
LMIinit.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^AutoCAD Startup Accelerator.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AutoCAD Startup Accelerator.lnk
backup=C:\WINDOWS\pss\AutoCAD Startup Accelerator.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^InterVideo WinCinema Manager.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk
backup=C:\WINDOWS\pss\InterVideo WinCinema Manager.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Launchy.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Launchy.lnk
backup=C:\WINDOWS\pss\Launchy.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Logitech Desktop Messenger.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech Desktop Messenger.lnk
backup=C:\WINDOWS\pss\Logitech Desktop Messenger.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package VCD Maker.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Picture Package VCD Maker.lnk
backup=C:\WINDOWS\pss\Picture Package VCD Maker.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Shaun Michael^Start Menu^Programs^Startup^Adobe Gamma.lnk]
path=C:\Documents and Settings\Shaun Michael\Start Menu\Programs\Startup\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Shaun Michael^Start Menu^Programs^Startup^Stardock ObjectDock.lnk]
path=C:\Documents and Settings\Shaun Michael\Start Menu\Programs\Startup\Stardock ObjectDock.lnk
backup=C:\WINDOWS\pss\Stardock ObjectDock.lnkStartup


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATI Launchpad]


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATI Remote Control]
C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ChrisTV Agent]
"C:\Program Files\ChrisTV Lite\ChrisTV_Agent.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cingular Communication Manager]
C:\Program Files\Cingular\Communication Manager\CingularCCM.exe -a

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ExploreUpdSched]
C:\WINDOWS\system32\qwinpndv.exe CHD003

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileZilla Server Interface]
"C:\Program Files\FileZilla Server\FileZilla Server Interface.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
%systemroot%\system32\dumprep 0 -k

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI]
"C:\Program Files\LogMeIn\LogMeInSystray.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrevxOne]
"C:\Program Files\Prevx1\PXConsole.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VD]
"C:\Program Files\Google\Google Talk\googletalk.exe" /autostart

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ViewMgr]
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\O]
AutoRun\command- O:\LaunchU3.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a3cdd491-4ee2-11db-8cb1-0020ed65785b}]
AutoRun\command- O:\LaunchU3.exe

*Newly Created Service* -PROCEXP90


~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

backup-20070526-215959-213
O23 - Service: Bytemobile Web Configurator (bmwebcfg) - Bytemobile, Inc. - C:\WINDOWS\system32\bmwebcfg.exe

backup-20070526-215746-889
O18 - Protocol: bwz0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-241
O18 - Protocol: bwy0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-679
O18 - Protocol: bwz0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-602
O18 - Protocol: bwx0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-954
O18 - Protocol: bwy0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-528
O18 - Protocol: bww0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-250
O18 - Protocol: bwx0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-629
O18 - Protocol: bwv0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-358
O18 - Protocol: bww0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-825
O18 - Protocol: bwv0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-181
O18 - Protocol: bwu0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-296
O18 - Protocol: bwu0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-320
O18 - Protocol: bwt0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-422
O18 - Protocol: bwt0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-305
O18 - Protocol: bws0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-568
O18 - Protocol: bws0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-345
O18 - Protocol: bwr0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215746-682
O18 - Protocol: bwr0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-395
O18 - Protocol: bwq0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-131
O18 - Protocol: bwq0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-307
O18 - Protocol: bwp0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-164
O18 - Protocol: bwp0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-255
O18 - Protocol: bwo0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-769
O18 - Protocol: bwo0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-415
O18 - Protocol: bwn0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-909
O18 - Protocol: bwn0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-935
O18 - Protocol: bwm0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-502
O18 - Protocol: bwl0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-573
O18 - Protocol: bwm0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-613
O18 - Protocol: bwk0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-599
O18 - Protocol: bwl0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-311
O18 - Protocol: bwk0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-173
O18 - Protocol: bwj0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-963
O18 - Protocol: bwj0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-252
O18 - Protocol: bwi0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-687
O18 - Protocol: bwi0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-719
O18 - Protocol: bwh0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-115
O18 - Protocol: bwh0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-941
O18 - Protocol: bwg0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-176
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

backup-20070526-215745-863
O18 - Protocol: bwg0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-462
O18 - Protocol: bwf0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-245
O18 - Protocol: bwf0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-943
O18 - Protocol: bwe0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-784
O18 - Protocol: bwe0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-884
O18 - Protocol: bwd0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-226
O18 - Protocol: bwd0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-172
O18 - Protocol: bwc0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-737
O18 - Protocol: bwc0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-856
O18 - Protocol: bwb0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-696
O18 - Protocol: bwb0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-290
O18 - Protocol: bwa0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-141
O18 - Protocol: bwa0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-558
O18 - Protocol: bw90s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-492
O18 - Protocol: bw90 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-603
O18 - Protocol: bw80s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-165
O18 - Protocol: bw80 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-529
O18 - Protocol: bw70 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-881
O18 - Protocol: bw70s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-227
O18 - Protocol: bw60 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-177
O18 - Protocol: bw60s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-364
O18 - Protocol: bw50 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-862
O18 - Protocol: bw50s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-752
O18 - Protocol: bw40 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-816
O18 - Protocol: bw40s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-764
O18 - Protocol: bw30s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-489
O18 - Protocol: bw30 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-779
O18 - Protocol: bw20s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-349
O18 - Protocol: bw20 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-232
O18 - Protocol: bw10s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-495
O18 - Protocol: bw10 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-272
O18 - Protocol: bw00s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-278
O18 - Protocol: bw00 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-265
O18 - Protocol: bw-0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-799
O18 - Protocol: bw-0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-694
O18 - Protocol: bw+0 - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215745-508
O18 - Protocol: bw+0s - {892C2046-FF46-40B8-BEC8-6D8FABBBA4C5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

backup-20070526-215626-806
O23 - Service: Bytemobile Web Configurator (bmwebcfg) - Bytemobile, Inc. - C:\WINDOWS\system32\bmwebcfg.exe

backup-20070526-215625-412
O2 - BHO: 0 - {408CB951-CF2C-4ECF-73BF-F9C35124B583} - C:\Program Files\Messenger\rybisol.dll
Contents of the 'Scheduled Tasks' folder
2007-05-14 10:20:02 C:\WINDOWS\tasks\AppleSoftwareUpdate.job
2005-08-31 19:21:28 C:\WINDOWS\tasks\Prison Break the Season.job
2005-09-04 21:00:00 C:\WINDOWS\tasks\Prison Break.job
2005-09-20 03:53:13 C:\WINDOWS\tasks\Record.job
2005-09-09 01:14:37 C:\WINDOWS\tasks\ShowShifter Regular ShowGuide Update.job
2005-09-01 04:00:00 C:\WINDOWS\tasks\The 4400 end.job
2005-09-01 04:00:01 C:\WINDOWS\tasks\The 4400.job

********************************************************************

catchme 0.3.681 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-05-27 20:46:50
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0


********************************************************************

Completion time: 2007-05-27 20:56:48
C:\ComboFix-quarantined-files.txt … 2007-05-27 20:56

— E O F —

Logfile of HijackThis v1.99.1
Scan saved at 9:26:35 AM, on 5/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\bmwebcfg.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\ATI Multimedia\main\ATISched.EXE
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\NMapWin\bin\nmapserv.exe
C:\Program Files\NavNT\rtvscan.exe
C:\Program Files\Prevx1\PXAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Hijackthis\HijackThis.exe
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,;*.local
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 6\SnagItBHO.dll
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 6\SnagItIEAddin.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [Ulead Quick-Drop] "C:\Program Files\Ulead Systems\Ulead DVD MovieFactory 5 Plus\Ulead DVD MovieFactory 5\Quick-Drop.exe" WINDOWCALL
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ATI Scheduler] C:\Program Files\ATI Multimedia\main\ATISched.EXE
O4 - HKCU\..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device… - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\tv\EXPLBAR.DLL (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {1EF9F042-C2EB-4293-8213-474CAEEF531D} (TmHcmsX Control) - http://www.trendsecure.com/framework/contr…vex/TmHcmsX.CAB
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {2D72C39D-53F6-4AEA-A9DB-1298429DA974} (3DVista Viewer Control) - http://www.3dvista.com/downloads/viewer3dv.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O20 - Winlogon Notify: LMIinit - LMIinit.dll (file missing)
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bytemobile Web Configurator (bmwebcfg) - Bytemobile, Inc. - C:\WINDOWS\system32\bmwebcfg.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Belkin\Bluetooth Software\bin\btwdins.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMap - Unknown owner - C:\Program Files\NMapWin\bin\nmapserv.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe










Windows Registry Editor Version 5.00

; Regscan.vbs Version: 1.2 by rand1038
; 5/28/2007 9:12:51 AM
; Search Term(s) Used: "wpajtryf67hazytrd.exe"
; 1 matches were found.
; The search took 2 minutes and 40 seconds.

"C:\\Documents and Settings\\Shaun Michael\\Local Settings\\Temporary Internet Files\\Content.IE5\\S9YBGLQF\\LSPFix[1].exe"="LSPFix[1]"
"C:\\WINDOWS\\WpAJTrYf67HazytRD.exe"="WpAJTrYf67HazytRD"










I haven't had problems with my computer ever before, and when I have I've taken care of myself. The tools you see are from what I've read in the forums and I've tried so that I didn't need to bother anyone. Thank you again for your help.

That folder you specify isn't there, but there is a c:\tempb9 folder with a tmpTF.log file in it (random string of text)