Spyware / Malware / Virus Removal

[Resolved] Trojan Virus and Security Options

10 min read

Looking for the outcome? Ask AI

GBeal Topic Starter

Post #1October 8, 2007, 5:50 PM UTC

Boxes for WordPerfect Manager Update & Sonic Manager Update were popping up on Startup and not going away. I removed WordPerfect as I use MS Office and all word docs and excel files changed to wordpad files. I scanned with spywareterminator and found Trojan/W32.Picrate.M(Trojan) and it will not go away on removal by spyware terminator. Meanwhile, Cox Security Suite does not readily start on startup and I have to delete it from applications in Windows Task Manager to have it start. I wonder if this is a conflict between Cox and Spywareterminator. I ran HiJackthis! and got the following log report. Please help with the log and advise on the best security options…e.g. should I use something besides Cox? Thanks!

Logfile of HijackThis v1.99.1
Scan saved at 3:22:48 PM, on 10/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
c:\program files\cox\applications\app\CurtainsSysSvcNt.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\system32\lexpps.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Spyware Terminator\SpywareTerminator.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\PROGRA~1\SPYWAR~1\STServer.Exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://thehungersite.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\AUserInit.exe
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - C:\PROGRA~1\GOODSE~1\GOODSE~2.DLL
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: AuthBHO.cBHO - {A4D90779-6CB2-4752-83C2-A2AB4D9A672D} - C:\Program Files\Cox\Applications\app\AuthBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O3 - Toolbar: AuthBHO.cBlockerBar - {64634180-B0EA-48B6-82B7-9620D33362C1} - C:\Program Files\Cox\Applications\app\AuthBHO.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - C:\PROGRA~1\GOODSE~1\GOODSE~2.DLL
O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: *.stumbleupon.com
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {5DBF08EF-4BDE-11D3-B8E4-0080C84E9C66} (Medi@Show Control) - http://www.unclebilly.com/MediaShow.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1145656660843
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Curtains for Windows System Service (CurtainsSysSvc) - Authentium, Inc. - c:\program files\cox\applications\app\CurtainsSysSvcNt.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

LDTate

Post #2October 12, 2007, 1:03 PM UTC

Hello and welcome to the forum. Sorry about the delay in responding

If you still need help, Scan again with HijackThis, and copy/paste" a new log file into this thread. Also please describe how your computer behaves at the moment.

GBeal

Post #3October 12, 2007, 7:03 PM UTC

HiJackthis! got an error when I did a scan. Having problems at startup - Cox Security won't start up and when I scan with Cox it doesn't find virus - even tho it tells me I have one. Spyware terminator finds virus but won't delete. Could Cox and spywareterminator be interfering with each other? Below is the logfile of the Hijackthis! scan. I still need help. Thanks

Logfile of HijackThis v1.99.1
Scan saved at 11:49:35 AM, on 10/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
c:\program files\cox\applications\app\CurtainsSysSvcNt.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\Cox\Applications\app\Prism.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Hijackthis\HijackThis.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://thehungersite.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\AUserInit.exe
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O2 - BHO: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - C:\PROGRA~1\GOODSE~1\GOODSE~2.DLL
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: AuthBHO.cBHO - {A4D90779-6CB2-4752-83C2-A2AB4D9A672D} - C:\Program Files\Cox\Applications\app\AuthBHO.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O3 - Toolbar: Cox Popup Blocker - {64634180-B0EA-48B6-82B7-9620D33362C1} - C:\Program Files\Cox\Applications\app\AuthBHO.dll
O3 - Toolbar: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - C:\PROGRA~1\GOODSE~1\GOODSE~2.DLL
O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: *.stumbleupon.com
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {5DBF08EF-4BDE-11D3-B8E4-0080C84E9C66} (Medi@Show Control) - http://www.unclebilly.com/MediaShow.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1145656660843
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Curtains for Windows System Service (CurtainsSysSvc) - Authentium, Inc. - c:\program files\cox\applications\app\CurtainsSysSvcNt.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

LDTate

Post #4October 12, 2007, 9:05 PM UTC

You need to update SunJava.
Updating Java:
Download the latest version of Java Runtime Environment (JRE) 6.

Scroll down to where it says Java Runtime Environment (JRE) 6u2
The Java SE Runtime Environment (JRE) allows end-users to run Java applications.

Click the "Download" button to the right.

Check the box that says: "Accept License Agreement".

Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.

Close any programs you may have running - especially your web browser.

Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.

Check any item with Java Runtime Environment (JRE or J2SE) in the name. It should have the [external image: Posted Image] icon next to it.

Click the Remove or Change/Remove button.

Repeat as many times as necessary to remove each Java versions.

Reboot your computer once all Java components are removed.

Then from your desktop double-click on 6-windowsi586-p.exe to install the newest version.

Once installed you can test to see that it is in fact installed
Sun Java Test
http://www.java.com/en/download/installed.jsp

After the above:

Please follow the steps below exactly in the order they are written:

Step #1

1. Please download ATF Cleaner by Atribune.

2. Please download AVG Anti-Spyware to your Desktop or to your usual Download Folder.
http://www.ewido.net/en/download/

Install AVG Anti-Spyware by double clicking the installer.
Follow the prompts. Make sure that Launch AVG Anti-Spyware is checked.
On the main screen under Your Computer's security.
- Click on Change state next to Resident shield. It should now change to inactive.
- Click on Change state next to Automatic updates. It should now change to inactive.
- Next to Last Update, click on Update now. (You will need an active internet connection to perform this)
- Wait until you see the Update succesfull message.
Right-click the AVG Anti-Spyware Tray Icon and uncheck Start with Windows.
Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.

If you are having problems with the updater, you can use this link to manually update ewido.
AVG Anti-Spyware manual updates.
Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that AVG Anti-Spyware is closed before installing the update.

If you are unable to run scan with AVG Anti-Spyware in Safe Mode, Click the next link http://fileserver.ewido.net/public.cgi?id=20990 and download AVG_Anti-Spyware_7.5.1.36_Safe_Mode_Registry_Patch.reg to your desktop. It should look like this -> [external image: Posted Image] double click on it. You will receive a prompt similar to: "Do you wish to merge the information into the registry?".
Answer "Yes" and wait for a message to appear similar to "Merged Successfully".

Reboot your computer in Safe Mode.

If the computer is running, shut down Windows, and then turn off the power.
Wait 30 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

Close ALL open Windows / Programs / Folders. Please start AVG Anti-Spyware and run a full scan.

Click on Scanner on the toolbar.
Click on the Settings tab.
- Under How to act?
  - Click on Recommended Action and choose Quarantine from the popup menu.
- Under How to scan?
  - All checkboxes should be ticked.
- Under Possibly unwanted software:
  - All checkboxes should be ticked.
- Under Reports:
  - Select Automatically generate report after every scan and uncheck Only if threats were found.
- Under What to scan?
  - Select Scan every file.
Click on the Scan tab.
Click on Complete System Scan to start the scan process.
Let the program scan the machine.
When the scan has finished, follow the instructions below.
IMPORTANT : Don't click on the "Save Scan Report" button before you did hit the "Apply all Actions" button.
- Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
- At the bottom of the window click on the Apply all Actions button. (3)
  [external image: Posted Image]
When done, click the Save Scan Report button. (4)
- Click the Save Report as button.
- Save the report to your Desktop.
Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.

Reboot in Normal Mode.

GBeal

Post #5October 16, 2007, 9:39 PM UTC

Thanks so much. I tried your suggestion and it seems that I no longer have the Trojan virus and things are working ok. I have a question - now that I have AVG (again), should I delete or turn off other virus scanners? Thanks G

LDTate

Post #6October 17, 2007, 3:02 AM UTC

Thanks so much. I tried your suggestion and it seems that I no longer have the Trojan virus and things are working ok. I have a question - now that I have AVG (again), should I delete or turn off other virus scanners? Thanks G

That was anti-spyware not a anti-virus program I had you install.

I don't see a anti-virus program running. Get this free one.

Click HERE and Save, Install, Update and run a full scan.

Empty Recycle Bin

Reboot and "copy/paste" a new log file into this thread.
Also please describe how your computer behaves at the moment

LDTate

Post #7October 21, 2007, 1:18 AM UTC

You still ned help?

GBeal

Post #8October 21, 2007, 2:23 AM UTC

Still not sure if virus is gone. Computer seems to be working ok. Sometimes Cox Security doesn't come up on startup. Spyware terminator still shows the Trojan, even after it's been quarantined. AVG shows no virus. I still wonder if so many spyware and virus programs will interfere with each other. Hijackthis! Still gets an error when I run. Below is the latest Spyware Terminator fast scan. Is There any way to retreive docs that were Word and now wordpad? Thanks,

Logfile of Spyware Terminator v2.0.1.224 (db:1.0.979.739)
Scan Time: 10/20/2007 5:53:58 PM length: 455 s
Platform: Windows XP Service Pack 2 (WINNT 5.1.2600)
User: Admin
Boot Mode: Normal
Scan type: Fast_Spyware_Scan
Scanned Objects: 28081 (Critical:3)
Filter: No System items, No Safe items

Running Processes
wltrysvc.exe : C:\WINDOWS\system32\wltrysvc.exe
bcmwltry.exe [Dell Inc] : C:\WINDOWS\system32\bcmwltry.exe
LEXBCES.EXE [Lexmark International, Inc.] : C:\WINDOWS\system32\LEXBCES.EXE
LEXPPS.EXE [Lexmark International, Inc.] : C:\WINDOWS\system32\LEXPPS.EXE
AOLacsd.exe [America Online, Inc.] : C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe
guard.exe [GRISOFT s.r.o.] : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
CurtainsSysSvcNt.exe [Authentium, Inc.] : C:\Program Files\cox\applications\app\CurtainsSysSvcNt.exe
dvpapi.exe [Command Software Systems, Inc.] : C:\Program Files\Common Files\Command Software\dvpapi.exe
sqlservr.exe [Microsoft Corporation] : C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
NICCONFIGSVC.exe [Dell Inc.] : C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
stsystra.exe [SigmaTel, Inc.] : C:\WINDOWS\stsystra.exe
igfxsrvc.exe [Intel Corporation] : C:\WINDOWS\system32\igfxsrvc.exe
WLTRAY.exe [Dell Inc] : C:\WINDOWS\system32\WLTRAY.exe
mm_tray.exe [Musicmatch, Inc.] : C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
ACMonitor_X83.exe [Jetsoft Development Company] : C:\Program Files\LexmarkX83\ACMonitor_X83.exe
MMDiag.exe [Musicmatch, Inc.] : C:\Program Files\MUSICMATCH\Musicmatch Jukebox\MMDiag.exe
AcBtnMgr_X83.exe [Jetsoft Development Company] : C:\Program Files\LexmarkX83\AcBtnMgr_X83.exe
mim.exe [Musicmatch, Inc.] : C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
netWaiting.exe : C:\Program Files\NetWaiting\netWaiting.exe
DSAgnt.exe [Gteko Ltd.] : C:\Program Files\DellSupport\DSAgnt.exe
DLG.exe [BVRP Software] : C:\Program Files\Digital Line Detect\DLG.exe
avgwb.dat [GRISOFT, s.r.o.] : C:\Program Files\Grisoft\AVG7\avgwb.dat
SetPoint.exe [Logitech Inc.] : C:\Program Files\Logitech\SetPoint\SetPoint.exe
NkvMon.exe [Nikon Corporation] : C:\Program Files\Nikon\NkView6\NkvMon.exe
qbupdate.exe [Intuit Inc.] : C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
sqlmangr.exe [Microsoft Corporation] : C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
KHALMNPR.EXE [Logitech Inc.] : C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
wuauclt.exe ( PID=940 )
CnslCnct.exe [Authentium, Inc.] : C:\Program Files\cox\applications\app\CnslCnct.exe
Prism.exe [Cox Communications] : C:\Program Files\Cox\Applications\app\Prism.exe
wmiprvse.exe ( PID=2300 )
igfxsrvc.exe [Intel Corporation] : C:\WINDOWS\system32\igfxsrvc.exe
stsystra.exe [SigmaTel, Inc.] : C:\WINDOWS\stsystra.exe
WLTRAY.exe [Dell Inc] : C:\WINDOWS\system32\WLTRAY.exe
mm_tray.exe [Musicmatch, Inc.] : C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
ACMonitor_X83.exe [Jetsoft Development Company] : C:\Program Files\LexmarkX83\ACMonitor_X83.exe
AcBtnMgr_X83.exe [Jetsoft Development Company] : C:\Program Files\LexmarkX83\AcBtnMgr_X83.exe
netWaiting.exe : C:\Program Files\NetWaiting\netWaiting.exe
DSAgnt.exe [Gteko Ltd.] : C:\Program Files\DellSupport\DSAgnt.exe
DLG.exe [BVRP Software] : C:\Program Files\Digital Line Detect\DLG.exe
SetPoint.exe [Logitech Inc.] : C:\Program Files\Logitech\SetPoint\SetPoint.exe
NkvMon.exe [Nikon Corporation] : C:\Program Files\Nikon\NkView6\NkvMon.exe
qbupdate.exe [Intuit Inc.] : C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
sqlmangr.exe [Microsoft Corporation] : C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
KHALMNPR.EXE [Logitech Inc.] : C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE

Internet Settings
R - HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE
R - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R - HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant = http://www.google.com/ie
R - HKLM\Software\Microsoft\Internet Explorer\Search, CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
R - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters, Domain =
R - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony, DomainName =

BHO
02 - BHO: - {02478D38-C3F9-4efb-9B51-7695ECA05670} - File not found
02 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - File not found
02 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - [stumbleupon.com] : C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
02 - BHO: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - : C:\Program Files\goodsearch\goodsearch1.dll
02 - BHO: AuthBHO.cBHO - {A4D90779-6CB2-4752-83C2-A2AB4D9A672D} - [Authentium, Inc.] : C:\Program Files\Cox\Applications\app\AuthBHO.dll
02 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - File not found
02 - BHO: - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - File not found
02 - BHO: - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - File not found
02 - BHO: - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - File not found
02 - BHO: - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - File not found
02 - BHO: - {e2e2dd38-d088-4134-82b7-f2ba38496583} - File not found
02 - BHO: - {FB5F1910-F110-11d2-BB9E-00C04F795683} - File not found

Toolbars
03 - Toolbar: Cox Popup Blocker - {64634180-B0EA-48B6-82B7-9620D33362C1} - [Authentium, Inc.] : C:\Program Files\Cox\Applications\app\AuthBHO.dll
03 - Toolbar: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - : C:\Program Files\goodsearch\goodsearch1.dll
03 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - [stumbleupon.com] : C:\Program Files\StumbleUpon\StumbleUponIEBar.dll

StartUps
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ModemOnHold : : C:\Program Files\NetWaiting\netWaiting.exe
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DellSupport : [Gteko Ltd.] : C:\Program Files\DellSupport\DSAgnt.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SigmatelSysTrayApp : [SigmaTel, Inc.] : C:\WINDOWS\stsystra.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Dell Wireless Manager UI : [Dell Inc] : C:\WINDOWS\system32\WLTRAY.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MimBoot : [Musicmatch, Inc.] : C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mimboot.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MMTray : [Musicmatch, Inc.] : C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Lexmark X83 Button Monitor : [Jetsoft Development Company] : C:\Program Files\LexmarkX83\ACMonitor_X83.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Lexmark X83 Button Manager : [Jetsoft Development Company] : C:\Program Files\LexmarkX83\AcBtnMgr_X83.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PrinTray : [Lexmark] : C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\printray.exe
04 - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Userinit : [Authentium, Inc.] : C:\WINDOWS\system32\AUserInit.exe
04 - Startup: %START_PROGRAMSALL%\Startup\Digital Line Detect.lnk [BVRP Software] : C:\Program Files\Digital Line Detect\DLG.exe
04 - Startup: %START_PROGRAMSALL%\Startup\Logitech SetPoint.lnk [Logitech Inc.] : C:\Program Files\Logitech\SetPoint\SetPoint.exe
04 - Startup: %START_PROGRAMSALL%\Startup\NkvMon.exe.lnk [Nikon Corporation] : C:\Program Files\Nikon\NkView6\NkvMon.exe
04 - Startup: %START_PROGRAMSALL%\Startup\QuickBooks Update Agent.lnk [Intuit Inc.] : C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
04 - Startup: %START_PROGRAMSALL%\Startup\Service Manager.lnk [Microsoft Corporation] : C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe

Shell Extensions
Display Panning CPL Extension - {42071714-76d4-11d1-8b24-00a0c9068ff3} - : deskpan.dll
- {764BF0E1-F219-11ce-972D-00AA00A14F56} - File not found
- {853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} - File not found
Taskbar and Start Menu - {0DF44EAA-FF21-4412-828E-260A8728E7F1} - File not found
User Accounts - {7A9D77BD-5403-11d2-8785-2E0420524153} - File not found
- {2F603045-309F-11CF-9774-0020AFD0CFF6} - File not found
Microsoft Office Outlook - {00020D75-0000-0000-C000-000000000046} - [Microsoft Corporation] : C:\Program Files\Microsoft Office\OFFICE11\MLSHEXT.DLL
VersionShellExt Class - {7D5C4BDD-B015-4401-8731-1507B87DE297} - [Intuit Inc.] : C:\Program Files\Common Files\Intuit\QuickBooks\QBVersionTool.dll
KbLogiExt Class - {DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C} - [Logitech Inc.] : C:\Program Files\Logitech\SetPoint\kbcplext.dll
LogiExt Class - {B9B9F083-2B04-452A-8691-83694AC1037B} - [Logitech Inc.] : C:\Program Files\Logitech\SetPoint\mcplext.dll
RealOne Player Context Menu Class - {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} - [RealNetworks, Inc.] : C:\Program Files\Real\RealPlayer\rpshell.dll
NikonView Drop Extension - {32A9D769-5B55-4a25-9A62-86B5683FE50A} - [Nikon Corporation] : C:\Program Files\Nikon\NkView6\NkvDropExt.dll

Services
23 - [Meetinghouse Data Communications] : C:\WINDOWS\system32\DRIVERS\AegisP.sys
23 - [America Online, Inc.] : C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe
23 - [Dell Inc] : C:\WINDOWS\system32\DRIVERS\APPDRV.SYS
23 - : C:\Program Files\GRISOFT\AVG ANTI-SPYWARE 7.5\GUARD.SYS
23 - [GRISOFT s.r.o.] : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
23 - [GRISOFT, s.r.o.] : C:\WINDOWS\system32\DRIVERS\AvgAsCln.sys
23 - [Broadcom Corporation] : C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
23 - [Broadcom Corporation] : C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys
23 - [Command Software Systems, Inc.] : C:\WINDOWS\system32\DRIVERS\css-dvp.sys
23 - [Authentium, Inc.] : C:\Program Files\cox\applications\app\CurtainsSysSvcNt.exe
23 - [Sonic Solutions] : C:\WINDOWS\system32\drivers\drvmcdb.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\drivers\drvnddm.sys
23 - [Gteko Ltd.] : C:\WINDOWS\system32\DRIVERS\dsunidrv.sys
23 - [Command Software Systems, Inc.] : C:\Program Files\Common Files\Command Software\dvpapi.exe
23 - [Global RISC] : C:\WINDOWS\system32\Drivers\GRTdiMon.sys
23 - [Conexant Systems, Inc.] : C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
23 - [Conexant Systems, Inc.] : C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
23 - [Intel Corporation] : C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
23 - [Logitech, Inc.] : C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys
23 - [Logitech, Inc.] : C:\WINDOWS\system32\Drivers\LBeepKE.sys
23 - [Lexmark International, Inc.] : C:\WINDOWS\system32\LEXBCES.EXE
23 - [Logitech, Inc.] : C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys
23 - [Logitech, Inc.] : C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys
23 - [Microsoft Corporation] : C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
23 - [Dell Inc.] : C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
23 - [Dell Computer Corporation] : C:\WINDOWS\system32\DRIVERS\omci.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\drivers\sscdbhk5.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\drivers\ssrtln.sys
23 - [SigmaTel, Inc.] : C:\WINDOWS\system32\drivers\sthda.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\dla\tfsnboio.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\dla\tfsncofs.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\dla\tfsndrct.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\dla\tfsndres.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\dla\tfsnifs.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\dla\tfsnopio.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\dla\tfsnpool.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\dla\tfsnudf.sys
23 - [Sonic Solutions] : C:\WINDOWS\system32\dla\tfsnudfa.sys
23 - [America Online, Inc.] : C:\WINDOWS\system32\DRIVERS\wanatw4.sys
23 - [Conexant Systems, Inc.] : C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
23 - : C:\WINDOWS\system32\wltrysvc.exe

Winlogon Notify
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui, DLLName : [Intel Corporation] : C:\WINDOWS\system32\igfxdev.dll

IE URL Search Hooks
- {{4D25F926-B9FE-4682-BF72-8AB8210D6D75}} - : C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll

Threat Files
[Desaware Inc.] : C:\WINDOWS\system32\DWSBC36.OCX
: C:\WINDOWS\system32\bszip.dll

Advanced Files Report
%SYSDIR%\BCMLogon.dll [Broadcom Corporation] [Wireless Network Logon Provider] MD5=FA603A4F945CB3EE00B2342EDCB605DF SIZE=172032
%SYSDIR%\igfxdev.dll [Intel Corporation] [Intel® Common User Interface] MD5=BFC2A40FE739C453F5D02B7EEF41CA28 SIZE=135168
%SYSDIR%\wltrysvc.exe [] MD5=61490BFA6558C8DD3027E130D9A02D4B SIZE=65536
%SYSDIR%\bcmwltry.exe [Dell Inc] [Dell Wireless WLAN Card Wireless Network Controller] MD5=72D58BB02CD83E6B7B9A97E06B3F0F43 SIZE=872556
%SYSDIR%\AegisE5.dll [Meetinghouse Data Communications] [AEGIS Client API] MD5=82519DCB6F4F0C346F393911CF892E16 SIZE=1396831
%SYSDIR%\wltrynt.dll [Broadcom Corporation] [Wireless Notification Provider] MD5=2A5107B2F9D26192319C4515F57CEE19 SIZE=81920
%SYSDIR%\LEXBCES.EXE [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=E19C8550B4C6C67FABFFD998EACF440A SIZE=311296
%SYSDIR%\lexp2p32.dll [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=9F2FD42D010FE6408D202ED4139BCDCB SIZE=201216
%SYSDIR%\lex2kusb.dll [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=F1E07F5BB22E4568B8E2C0159E74EFD5 SIZE=197120
%SYSDIR%\LEXLMPM.DLL [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=C2671D78109644694DEA04B845092727 SIZE=192512
%SYSDIR%\LexBce.dll [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=2FCC7D083C925365C9D6414495F3FC01 SIZE=147456
%SYSDIR%\LXASLMPM.DLL [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=531F77B98839867E4A62C03EC4DEF215 SIZE=190464
%SYSDIR%\lxasbce.dll [] MD5=BE404DED66D3DCC789D12B0C83C86951 SIZE=102400
%SYSDIR%\pdfports.dll [] MD5=451CD1652B590D3EE897971857E788B9 SIZE=16384
%PROGRAMFILES%\Adobe\Acrobat 4.0\Distillr\adistres.dll [] MD5=26B8B178E21F6A2E0A0374CC3B0542D6 SIZE=50176
%SYSDIR%\lxas2kpm.dll [] MD5=EEDA0A841F883F7197401C4618CED2AB SIZE=16812
%SYSDIR%\spool\PRTPROCS\W32X86\DLBCPP5C.dll [] [Inkjet Printer] MD5=C213C40D8E9F2D1AFFBD1262CD23E026 SIZE=78336
%SYSDIR%\spool\PRTPROCS\W32X86\lxaspp.dll [Lexmark International] [Lexmark International lmprint] MD5=CD963E9B1BB15CAB79D83F19BC8B030E SIZE=73728
%SYSDIR%\DLBCpwr.dll [Dell Computer Corporation] [POR Monitor] MD5=894E2E1CCDB024C9B00CCF21794D2F0C SIZE=73728
%SYSDIR%\Lxasmdm.dll [Oasis Semiconductor Inc.] [X83] MD5=318D2C9FE08B61F8C46587F73445FBCF SIZE=81920
%SYSDIR%\spool\DRIVERS\W32X86\3\DLBCUI5C.DLL [] [Dell Photo Printer 720] MD5=2038887E22DD34EB02E212EA09925B65 SIZE=48128
%SYSDIR%\spool\DRIVERS\W32X86\3\DLBCSTRN.DLL [Lexmark International] [Dell Photo Printer 720] MD5=51B09A4E533B6DA7B7295A2F24E0094A SIZE=859136
%SYSDIR%\spool\DRIVERS\W32X86\3\DLBCDR5C.DLL [] [Dell Photo Printer 720] MD5=E324DDB8B3E83139E4769B80321BEC2E SIZE=85504
%SYSDIR%\spool\DRIVERS\W32X86\3\DLBCICUR.DLL [] MD5=7C07DCCB1F354A7E3ACE1F67713C5D1A SIZE=430080
%SYSDIR%\spool\DRIVERS\W32X86\3\dlbcfc5c.dll [] MD5=35C0D1B3DDC290AB7E6466B071281F19 SIZE=198144
%SYSDIR%\LEXPPS.EXE [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=7A48C1D07A4445F622882833CAE9AB32 SIZE=174592
%COMMONFILES%\AOL\ACS\AOLacsd.exe [America Online, Inc.] [AOL Connectivity Service] MD5=8FA646F0E639D9A8C8B98E217D471DC0 SIZE=1135728
%PROGRAMFILES%\Grisoft\AVG Anti-Spyware 7.5\guard.exe [GRISOFT s.r.o.] [AVG Anti-Spyware] MD5=5DCD235C061022BCDA9AA48670B64211 SIZE=312880
%PROGRAMFILES%\Grisoft\AVG Anti-Spyware 7.5\engine.dll [GRISOFT s.r.o.] [AVG Anti-Spyware] MD5=DB265D17B40F4DAE581A9BC9C2D6C6CA SIZE=448048
%PROGRAMFILES%\cox\applications\app\CurtainsSysSvcNt.exe [Authentium, Inc.] [Curtains for Windows] MD5=8DCDA47A041190C013DA9D3C1040C637 SIZE=102400
%PROGRAMFILES%\Cox\Applications\app\CurtainsSysSvc.dll [Authentium, Inc.] [ESP] MD5=3F60C58B8637AB430B81DEB7273E0172 SIZE=528439
%PROGRAMFILES%\Cox\Applications\app\AuthManifest.dll [Authentium, Inc.] [ESP] MD5=EBBCA7BDB6A3B5B5F0658DF68D491C36 SIZE=40960
%PROGRAMFILES%\Cox\Applications\app\AuthResClient.dll [Authentium, Inc.] [ESP] MD5=853958C98C05398F50A5E69C996247B0 SIZE=151552
%COMMONFILES%\Authentium Shared\Common\core01.dll [Authentium, Inc.] [ESP] MD5=F3F76C16AAE95E51ED1C29DEAED4A22A SIZE=258048
%SYSDIR%\AuthCrypt.dll [Authentium, Inc. (see comments for 3rd-party contributions)] [Curtains for Windows®] MD5=C9787B4DABF0A37C63FD6B6497F91C02 SIZE=102400
%PROGRAMFILES%\Cox\Applications\app\XceedZip.dll [Xceed Software Inc [removed] [removed] www.xceedsoft.com] [Xceed Zip Compression Library] MD5=856D3F9EC0BDF6C82535C31DFA3F7298 SIZE=426664
%PROGRAMFILES%\Cox\Applications\app\FlexBag.dll [Spider Eye Studios P/L] [FlexBag ActiveX Objects] MD5=0BD9135E63648D7DBBC7BDF414FD985F SIZE=63488
%PROGRAMFILES%\Cox\Applications\app\IMDBvb.dll [] [IMDBvb Module] MD5=12FDC9F0D986714468AACD4783D5D2CB SIZE=331776
%PROGRAMFILES%\Cox\Applications\app\AuthIoUpdate.dll [Cox Communications] [Curtains™ for Windows®] MD5=D7D24D4EB50586152D56E38ACDECF843 SIZE=413774
%COMMONFILES%\Authentium Shared\Common\PrismCommon.dll [Authentium, Inc.] [ESP] MD5=5B092115ED130F7E579986BDCE2C35C2 SIZE=520244
%PROGRAMFILES%\Cox\Applications\app\ntseccom.dll [Pedestal Software, LLC] [NTSEC COM Object] MD5=A067460E41AEABCEE465D7C10A058B38 SIZE=544768
%PROGRAMFILES%\Cox\Applications\app\AuthIOBHOController.dll [Authentium, Inc.] [ESP] MD5=BB7A514F9128E0DDEBDCEF727B3A9E1B SIZE=131072
%PROGRAMFILES%\Cox\Applications\app\AuthIOFilterTranslator.dll [Authentium, Inc.] [ESP] MD5=48CE3E84F6B7262243122358DA1132E0 SIZE=184320
%PROGRAMFILES%\Cox\Applications\app\AuthIoPolicy.dll [Authentium, Inc.] [ESP] MD5=8862BE2232599C6C2C84594341186638 SIZE=106496
%PROGRAMFILES%\Cox\Applications\app\AuthIoDvp.dll [Cox Communications] [Cox High-Speed Internet security software] MD5=CFC108DAD4A9AAEF623159FC99C7C219 SIZE=86016
%SYSDIR%\dwBkThrd.dll [Desaware Inc.] [SpyWorks] MD5=3D0054D9C62427EAAE0757775CB15117 SIZE=40960
%SYSDIR%\dwSock6.dll [Desaware Inc.] [SpyWorks Professional Edition] MD5=ADE667E433FBEB2FB5E1B54C59C137A7 SIZE=200704
%SYSDIR%\sockintf.dll [Desaware Inc.] [SOCKINTF] MD5=43F7180E7897C3F78CFF29C149B718F2 SIZE=22528
%SYSDIR%\dwspyvb6.dll [Desaware Inc.] [SpyWorks 6.0] MD5=FD342AD8529CDE924B62EC2EDB9BD5F9 SIZE=122880
%PROGRAMFILES%\Cox\Applications\app\AuthIoHttpFilter.dll [Authentium, Inc.] [Curtains™ for Windows®] MD5=33A67D9359FD371234712E82214060A1 SIZE=417792
%SYSDIR%\grfilter.dll [Global RISC] [NSX] MD5=16339194E7222C593EED637FB61B6234 SIZE=331776
%PROGRAMFILES%\Cox\Applications\app\AuthIoHttpUtil.dll [Authentium, Inc.] [ESP] MD5=D64D38E919862B59C203BDD82F3B852A SIZE=385024
%PROGRAMFILES%\Cox\Applications\app\sgRegExp.dll [Stinga] [Stinga SG Tools - ActiveX Components Suite] MD5=D7485F1F2670CA75370E6A04D91E0F97 SIZE=103424
%PROGRAMFILES%\Cox\Applications\app\AuthXmlLogMgr.dll [Authentium, Inc.] [ESP] MD5=07ADE7EFB6EB641E3F83D5E6E7EAD275 SIZE=49152
%SYSDIR%\csdk.dll [PureSight Inc] [PureSight Classification SDK] MD5=3B52BF28421909F28066373906959168 SIZE=1691648
%COMMONFILES%\Command Software\odapi.dll [Command Software Systems, Inc.] [Command AntiVirus for Windows] MD5=C2B69FF8D06B45FBDE726E5861194712 SIZE=310352
%COMMONFILES%\Command Software\dvpapi.exe [Command Software Systems, Inc.] [Command AntiVirus for Windows] MD5=DC2A53F9A8AF8E066857128E76A8C7F5 SIZE=142416
%PROGRAMFILES%\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe [Microsoft Corporation] [Microsoft SQL Server] MD5=751961E128DBCC7A32304339C4BDEFF0 SIZE=9150464
%PROGRAMFILES%\Dell\NICCONFIGSVC\NICCONFIGSVC.exe [Dell Inc.] [NicConfigSvc] MD5=23EEB337BF684589D261F2359E19C72C SIZE=356352
%PROGRAMFILES%\Logitech\SetPoint\lgscroll.dll [Logitech Inc.] [Logitech SetPoint] MD5=9FDA03B009D3F745D09D9F18D1818815 SIZE=44544
%SYSDIR%\dwspy36.DLL [Desaware Inc.] [dwspy36 Module] MD5=9BC7F273049DEEA9F07A6C8A6E4D29FA SIZE=77312
%PROGRAMFILES%\Cox\Applications\app\ctbutton.ocx [Gamesman Inc. / DBI Technologies Inc.] [ctButton ActiveX Control] MD5=28D9F154D5276EFB1BCA4563CF3717B0 SIZE=90112
%PROGRAMFILES%\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [Adobe Systems Incorporated] [AcroIEHelper Library] MD5=4EA3A6CD9D20584FFAFDB1E47DBF0E20 SIZE=59032
%SYSDIR%\tfswapi.dll [Sonic Solutions] MD5=945DD2B6EF30EF4DA0E32A0B7159CBBA SIZE=61500
%SYSDIR%\dla\tfswcres.dll [Sonic Solutions] MD5=996E0F51AC076B2E0D851AF333AD17B9 SIZE=241729
%SYSDIR%\Macromed\Flash\Flash9c.ocx [Adobe Systems, Inc.] [Shockwave Flash] MD5=98976C156497DF3FB8AB307AF22237C2 SIZE=2267368
%PROGRAMFILES%\Dell\QuickSet\dadkeyb.dll [] MD5=6321A216EF0A1CE5A6A588C4E138F9F6 SIZE=69632
%SYSDIR%\hccutils.DLL [Intel Corporation] [Intel® Common User Interface] MD5=3EA40C03BB20A68F5F49798296112EF9 SIZE=73728
%SYSDIR%\igfxsrvc.dll [Intel Corporation] [Intel® Common User Interface] MD5=841A401331B3EC5C5662517FFFD3EA12 SIZE=57344
%SYSDIR%\stacapi.dll [SigmaTel, Inc.] [C-Major Audio] MD5=1EE92A4FA94567BA55549FCC7145043F SIZE=172032
%SYSDIR%\igfxsrvc.exe [Intel Corporation] [Intel® Common User Interface] MD5=476A0876C16D2CC3F5A46697CF37BEE7 SIZE=159744
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\CoreDll.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=6EF7D9A0B55912E81978D30EA3961754 SIZE=404992
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\TrackUtils.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=26D3757ACB7CA676F44456B94AC4D0C7 SIZE=52224
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\Enforce.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=5A63DC65E9B70CDBD4ACFBF0D6011270 SIZE=268928
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\Crypt.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=EDD0C83BAF9002F8C8960CB66EDDAA1E SIZE=770048
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\MMReg.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=546844C66132F91D20C213509AFD4584 SIZE=81408
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\MMHttp.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=FB5E0622DA8B3490433301DFDCA061B1 SIZE=81920
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\ThreadUtils.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=3F8FE237E2BEADEBCB20B1BD3370BDE1 SIZE=25600
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\SkinnedCtrls.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=823736EE0E2E360CDA4475F685F32FD3 SIZE=556544
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\FileAssoc.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=F0CCB23B189D5E03EBE6E60CBC63232D SIZE=65536
%PROGRAMFILES%\MUSICMATCH\Musicmatch Jukebox\MMDiag.exe [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=A37DB9D11C31751B94C15074D0EFF176 SIZE=102400
%PROGRAMFILES%\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdboot.dll [Adobe Systems Incorporated] [Adobe Photoshop Album Starter Edition] MD5=649F399F1E7DE179E1F477C777690C36 SIZE=118784
%PROGRAMFILES%\MUSICMATCH\Musicmatch Jukebox\mim.exe [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=E59868AC18AEB2ED86CD118B4FC39E61 SIZE=481792
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\mimSessionManager.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=99A37D2F2B68672CCFD6C54DAF697E3B SIZE=61440
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\mimDB.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=471511ACCEDDE7142C8509194936FCA1 SIZE=375296
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\AttributeInfo.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=5589BD090A4FC78D5BBCB42550ABA5CE SIZE=24576
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\UsageBracketing.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=6134B9ABF33E4C5541A29D5B4EA3A39A SIZE=34304
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\DeviceManager.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=90A4B5D3549EDF371ADB2B046CEB29EF SIZE=165888
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\EventMgr.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=EB7ED1FF22AB447FC0CEA624ED254A1B SIZE=83968
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\mimJobs.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=05E934211B39AF034E6079582A4D6DDF SIZE=1148416
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\licmgr.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=BD9BD64CACAF180A1DC7A360AED1CCA0 SIZE=77824
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\mmgit.dll [] MD5=7B560E46C30B45A5184966FF603CD27D SIZE=126976
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\mmdrm.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=4940F7F3D1EAB380B6D4D003A968F9AF SIZE=65536
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\YDetectQFE.dll [] MD5=EF677FBD13F79110E153D10F410D8A41 SIZE=81920
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\ObjectManager.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=6F9287AF43516B419BD5C5E948BD0078 SIZE=34304
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\PortalServices2.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=54C59DCD0F513ABBCE1F21084DCABDD2 SIZE=49152
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\FileCacheMgr.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=FA21FB2609E935BBE342B58D42A707A8 SIZE=39424
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\NetUtilsDLL.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=380C6B31AF67A65E12FD141ED0A2EF56 SIZE=92672
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\Portable_Factory.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=BE5874578D95039D8B0C2C29D23FF4BB SIZE=148480
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\LocalDisk_Factory.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=A6EDE4233B0589EBB116E465696F3871 SIZE=119296
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\CdDvd_Factory.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=8F3B3C586AA7A8AF6D8908DD8A05ED66 SIZE=116736
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\CDDVDAccess.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=B3B99CFA034FC5F58EC57164C8B0E22B SIZE=143360
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\PXSDKPLS.dll [Sonic Solutions] [Prassi PrimoSDK] MD5=D22CA9E5BFD8EA54BF0673C331D88A47 SIZE=145064
%SYSDIR%\PX.dll [Sonic Solutions] [Px] MD5=26647354F51F1D53CE7161E33C1BFF9A SIZE=452264
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\TOD_Factory.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=2E51091CB6B423CB23433159E4654F22 SIZE=103936
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\Stream_Factory.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=A38C716CFDC0A5FA6C0ECE375AD302C3 SIZE=103936
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\BasicObjs.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=06A8D30F89BAFE461CC7D46B2D7F9CA3 SIZE=454656
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\GraphicsUtils.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=D912FB975BBE1EB222E97587901D2D81 SIZE=90112
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\MusicNet.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=5512F5B82246DB615F9F01AB7D41CEBD SIZE=139264
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\Stream_DO.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=61F98C9C0B1781AF8C585A1E2D5EE065 SIZE=83456
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\TOD_DO.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=63CAB4A77A8003739BD2340681BD96E2 SIZE=111616
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\FileTagObj.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=17ACD98849BA63B0D421D2D89C7C33BC SIZE=79360
%PROGRAMFILES%\MUSICMATCH\Musicmatch Jukebox\mmlicmgr.dll [MUSICMATCH, Inc.] [Musicmatch® Jukebox] MD5=1E37359479F41ACC436568B3C71E26B0 SIZE=917632
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\WinMsgObject.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=6F4E2A394A82C3576067B7995DCCEC99 SIZE=37376
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\Metadatacache.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=BECB7A62893D3CDB9710BB8FCB6C47A7 SIZE=52736
%SYSDIR%\PXSFS.DLL [Sonic Solutions] [Px Streaming Mastering Engine] MD5=9A4B547675B774B6BFC1C5D3384E0B3F SIZE=1279656
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\AudibleObj.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=8505D8BF5768AC6D140378C7312C7BD5 SIZE=67072
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\AReadyLB.dll [Audible Inc.] [AReadyLB Library] MD5=76E5FDC61DC47B1E964913EF20862BB7 SIZE=471040
%SYSDIR%\PXDRV.DLL [Sonic Solutions] [Px] MD5=150A6A4EC7247F4629D53445D402EDBF SIZE=472744
%SYSDIR%\PXMAS.DLL [Sonic Solutions] [Px Mastering Engine] MD5=E2519672C54018A027887F49798EEE6F SIZE=181928
%SYSDIR%\PXWAVE.DLL [Sonic Solutions] [PxWave] MD5=07D2697433FC8075218D3CE6329280D9 SIZE=345768
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\WavMp3Tag.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=40A02332FE624CE28BA2E62EBF43608F SIZE=181248
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\PortableAgent.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=EF1538B430046A1A95BD44DAA6AABFE5 SIZE=538624
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\PortableDevice2.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=D81B1A86EA7049A2400FF5FFC7ED8D4C SIZE=24064
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\PortableDevice.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=DA9328EA7DB44407365609C6A906E110 SIZE=11776
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\CdDvd_DO.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=FA2881ED93D7D36139B9BF3E82DD44BF SIZE=210944
%SYSDIR%\VXBLOCK.dll [Sonic Solutions] MD5=5BE83540595C8131C3A59A6AA814192D SIZE=38568
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\RBCDRepository.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=F323AAEEB42E288B99BFBAB941C862E7 SIZE=101888
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\DummyTagObj.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=9449D49F702C89D50DB07BCEFACB4EC3 SIZE=34304
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\WmaObj.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=07AE17287FDE2F1883BF1279BBFF7C36 SIZE=199168
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\LocalDisk_DO.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=61943F192BFCCA4A8FDE84CEBE85B3E5 SIZE=208384
%PROGRAMFILES%\Dell\ShareDLL\djbsdk.dll [] [djbsdk Module] MD5=3AB94E842BBD471BCE92168E143302FE SIZE=106496
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\Plugins\Portable2004\WMDM\MDPlugin.dll [Musicmatch, Inc.] [WMDM Plug-in for Musicmatch Jukebox] MD5=55F3CEB239731E1BE10AED2B7684090F SIZE=409600
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\PlaylistFileObj.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=6F3F777821A1BC4A7101BD158A9A0C14 SIZE=54272
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\PlaylistM3UFileObj.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=97B347525CC8F529AFB35FD2A169D68C SIZE=62976
%PROGRAMFILES%\Musicmatch\Musicmatch Jukebox\PlaylistPLSFileObj.dll [Musicmatch, Inc.] [Musicmatch Jukebox] MD5=008D33DEC28C5171B7114DF1CB50A09F SIZE=46080
%PROGRAMFILES%\Grisoft\AVG7\avgxch32.dll [GRISOFT, s.r.o.] [AVG Anti-Virus system] MD5=C7FB48424292D5CC5B8768A244D1F3AC SIZE=122880
%PROGRAMFILES%\NetWaiting\BVRPDIAG.dll [BVRP Software] [BVRP Software BVRPDiag] MD5=131966DA924DDFFBE8AE6AAD0F048630 SIZE=24576
%PROGRAMFILES%\NetWaiting\MODEMMOH.dll [BVRP Software] [NetWaiting] MD5=208E667393822BA7C9349BE19CADBEE8 SIZE=94208
%PROGRAMFILES%\NetWaiting\bvrpctln.dll [BVRP Software] [WinPhone] MD5=8B1DB47AE508698BE86B84DFB4A3526A SIZE=188416
%PROGRAMFILES%\NetWaiting\mohrc.dll [BVRP Software] [MOH Resource] MD5=2F92ED73AC0335C73B07AADC9CA79674 SIZE=57344
%PROGRAMFILES%\DellSupport\GTAgnt.dll [Gteko Ltd.] [Gteko GTAgntDll] MD5=81322F09E392689B2AF50C65714175D6 SIZE=116224
%PROGRAMFILES%\DellSupport\CfgData.DLL [Gteko Ltd.] [CfgData Module] MD5=9A1ED0B28AD9CFB5E506BD51439F3F17 SIZE=211456
%PROGRAMFILES%\DellSupport\ActMgr.dll [Gteko Ltd.] [Gteko ActMgr] MD5=4235107CAA0BCE7E872C4355329FC06E SIZE=150528
%PROGRAMFILES%\DellSupport\GTAction\handlers\brkrsvch.dll [Gteko Ltd.] [Gteko BrkrSvcH] MD5=F2533D0A9C2F344B9DAFEDF9ED3BE754 SIZE=119808
%PROGRAMFILES%\DellSupport\GTAction\handlers\grouph.dll [Gteko Ltd.] [Gtek GroupH] MD5=896F1DAE48558CE96AF012C7E594CCC6 SIZE=145408
%PROGRAMFILES%\DellSupport\GTAction\handlers\pnph.dll [Gteko Ltd.] [Gteko PNPH] MD5=F61EFF66EEDEFEAAD0601EB701CCEA12 SIZE=164864
%PROGRAMFILES%\DellSupport\GTAction\handlers\qdiagh.dll [Gteko Ltd.] [Gteko QDiagH] MD5=A8A5453F6DAA4BCACD02FBF2EF3F7C1F SIZE=120320
%PROGRAMFILES%\DellSupport\GTAction\handlers\trgloadh.dll [Gteko Ltd.] [Gteko TrgLoadH] MD5=755AD13D0042329925E2FAF3D070326D SIZE=250368
%PROGRAMFILES%\DellSupport\GTAction\handlers\trgregh.dll [Gteko Ltd.] [GTek TriggerHandler] MD5=6472D141970830F856778DE71EB93319 SIZE=179200
%PROGRAMFILES%\DellSupport\TrgMgr.DLL [Gteko Ltd.] [TrgMgr Module] MD5=7D1913E59C79AB565A73020F8BD13B40 SIZE=168960
%PROGRAMFILES%\DellSupport\gdql_d.dll [Gteko Ltd.] [QDiagLib Module] MD5=5F616095B1BB1142EDA228E6D8238F24 SIZE=2125312
%PROGRAMFILES%\Digital Line Detect\DLG.exe [BVRP Software] [BVRP Software TestLine] MD5=B66E56733E2CD6A10FDA5919625FBF46 SIZE=24576
%PROGRAMFILES%\Digital Line Detect\BVRPDIAG.dll [BVRP Software] [BVRP Software BVRPDiag] MD5=A476968C08667B1E09F2A95234E8CEEF SIZE=24576
%PROGRAMFILES%\Grisoft\AVG7\avgwb.dat [GRISOFT, s.r.o.] [AVG Anti-Virus system] MD5=ABD66F6AE771F3F2742022A6F3C27BBB SIZE=273920
%PROGRAMFILES%\Logitech\SetPoint\SetPoint.exe [Logitech Inc.] [Logitech SetPoint] MD5=0450EC2579CF6CFD962D49878E0A9378 SIZE=688128
%SYSDIR%\KemUtil.dll [Logitech Inc.] [Logitech SetPoint] MD5=1495D6531182CE95DFE717730627B46B SIZE=135168
%PROGRAMFILES%\Logitech\SetPoint\SetPointCOM.dll [Logitech Inc.] [Logitech SetPoint] MD5=3B59356DF3E34A2CDCD25DA145EE5E31 SIZE=25600
%SYSDIR%\kemutb.dll [Logitech Inc.] [Logitech SetPoint] MD5=9CBD535B5BCD6BB659B5F5300553B8F4 SIZE=163840
%SYSDIR%\KemWnd.dll [Logitech Inc.] [Logitech SetPoint] MD5=6D6E39714AE85EA8C279B0A762DD1CCB SIZE=110592
%SYSDIR%\KemXML.dll [Logitech Inc.] [Logitech SetPoint] MD5=D7A55EAE8DDC13A83C02A6B9CFAB2736 SIZE=69632
%PROGRAMFILES%\Logitech\SetPoint\Macros\MacroCore.dll [Logitech Inc.] [Logitech SetPoint] MD5=C5613AF19DA414C6A6351F54E0D0D2A4 SIZE=929792
%PROGRAMFILES%\Logitech\SetPoint\WebBrowserSupport.dll [Logitech Inc.] [Logitech SetPoint] MD5=541A5BAA9A9E54A1A83B157C1EAA6035 SIZE=151552
%PROGRAMFILES%\Logitech\SetPoint\IMHook.dll [Logitech Inc.] [Logitech SetPoint] MD5=849AB534867A838FF4184035DDEBC5E6 SIZE=10240
%COMMONFILES%\Logitech\khalshared\KhalApi.dll [Logitech Inc.] [Logitech SetPoint] MD5=007BBF9CAA026AB33137AC503D86EFF1 SIZE=401408
%PROGRAMFILES%\Logitech\SetPoint\kgame.dll [Logitech Inc.] [Logitech SetPoint] MD5=11A083A14DF756087D814BBC5CA2C803 SIZE=69632
%PROGRAMFILES%\Logitech\SetPoint\GameHook.dll [Logitech Inc.] [Logitech SetPoint] MD5=FB9924C1C6D9F8DD7A3C388DBA4B04F5 SIZE=57344
%PROGRAMFILES%\Logitech\SetPoint\LCabHandler.dll [Logitech Inc.] [Logitech SetPoint] MD5=7AB94F06E26C393D72F8575CF8CC1A25 SIZE=122880
%PROGRAMFILES%\Logitech\SetPoint\Macros\MacroEmail.dll [Logitech Inc.] [Logitech SetPoint] MD5=0F1E2C4106CB26BCC0C8AB3CBF7350FD SIZE=167936
%PROGRAMFILES%\Logitech\SetPoint\KEMHook.dll [Logitech Inc.] [Logitech SetPoint] MD5=1F3821DFBF9E13E7D771F8A5C811558D SIZE=15360
%PROGRAMFILES%\Logitech\SetPoint\Macros\MacroMedia.dll [Logitech Inc.] [Logitech SetPoint] MD5=2814D6EE8897136809CEF1F1CE5FC96C SIZE=249856
%PROGRAMFILES%\Nikon\NkView6\NkvMon.exe [Nikon Corporation] [Nikon Monitor] MD5=29AB460BB765EE9289407B1B1532B4A6 SIZE=241664
%COMMONFILES%\Intuit\QuickBooks\QBUpdate\qbupdate.exe [Intuit Inc.] [QuickBooks Automatic Update] MD5=4C152D6DCF8B27123E866FAE70A5AC17 SIZE=815104
%COMMONFILES%\Intuit\QuickBooks\QBUpdate\QBUChannel.dll [Intuit Inc.] [QuickBooks] MD5=F4026BD434225E9306E84C03100B92C4 SIZE=44544
%COMMONFILES%\Intuit\QuickBooks\QBUpdate\stlport_vc746.dll [STLport Consulting, Inc.] [STLport Standard ANSI C++ Library] MD5=6BA6B84F0FE21A77BB91C409AE7C9C29 SIZE=552960
%COMMONFILES%\Intuit\QuickBooks\QBUpdate\SendError.dll [Intuit Inc.] [QuickBooks for Windows] MD5=7B6F6A06501115ADFBC39D174F35A7F3 SIZE=360448
%SYSDIR%\InetClnt.dll [Intuit Inc.] [Internet Client] MD5=7EF7D22A23D5E8A20F2361ECAA77A26E SIZE=1716297
%COMMONFILES%\Intuit\QuickBooks\QBUpdate\QBMsgRequestMgr.dll [Intuit Inc.] [QuickBooks] MD5=E11FF4515BDCEA692108AB846EB6A4E9 SIZE=143360
%COMMONFILES%\Intuit\QuickBooks\QBUpdate\QBMsgMgrps.dll [Intuit Inc.] [QuickBooks] MD5=4174E7CD9700B8E6D08ABB4ACD2F29E3 SIZE=8704
%PROGRAMFILES%\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe [Microsoft Corporation] [Microsoft SQL Server] MD5=F45BFC03A06C9DCFA6731E551029B474 SIZE=81920
%COMMONFILES%\Logitech\khalshared\KHALMNPR.EXE [Logitech Inc.] [Logitech SetPoint] MD5=CD746E8C320A2A163589BBA7F4FC570A SIZE=101136
%COMMONFILES%\Logitech\khalshared\KHALITCH.DLL [Logitech Inc.] [Logitech SetPoint] MD5=595614A0876D032E3CB334CF8DC1DF03 SIZE=249856
%COMMONFILES%\Logitech\khalshared\KHALMW.DLL [Logitech Inc.] [Logitech SetPoint] MD5=E014789A230C8F58FC290065F7564772 SIZE=286720
%COMMONFILES%\Logitech\khalshared\KHALHPP.DLL [Logitech Inc.] [Logitech SetPoint] MD5=93AC6891E6E6C23AACC4A8285E965014 SIZE=405504
%COMMONFILES%\Logitech\khalshared\KHALMOU.DLL [Logitech Inc.] [Logitech SetPoint] MD5=6229EA00338F14B44F32AA5F0C709C2C SIZE=344064
%COMMONFILES%\Logitech\khalshared\KHALHID.DLL [Logitech Inc.] [Logitech SetPoint] MD5=F8E3ED4BB899CFBBF7829E1F31FB4AA6 SIZE=315392
%COMMONFILES%\Logitech\khalshared\KHALUSB.DLL [Logitech Inc.] [Logitech SetPoint] MD5=44C94518FC62B22768931368F7E06AC4 SIZE=311296
%PROGRAMFILES%\cox\applications\app\CnslCnct.exe [Authentium, Inc.] [ESP] MD5=ED3F416EA3267943DA3DBB7339B89AAA SIZE=20529
%PROGRAMFILES%\Cox\Applications\app\Prism.exe [Cox Communications] [Cox High-Speed Internet security software] MD5=B98D51FE9A296A2635D117500FD1E094 SIZE=4337735
%PROGRAMFILES%\Cox\Applications\app\AuthAntiVirus.dll [Authentium, Inc.] [ESP] MD5=35EC4B07D77C29BAA88F45B5CFB1CCB8 SIZE=81920
%COMMONFILES%\Command Software\csscan32.dll [Command Software Systems, Inc.] [CSS Core Scan Engine.] MD5=226BE1041D240405B71D75241A09D11B SIZE=683088
%COMMONFILES%\Command Software\css3rde.dll [Command Software Systems, Inc.] [Anti-Virus APIs.] MD5=E0927C547569A34FA923D2242F8C4D3A SIZE=105552
%SYSDIR%\Dwcbk32.ocx [Desaware Inc.] [SpyWorks] MD5=BC714571765BBF8095540F657E43D0DB SIZE=89088
%SYSDIR%\Csmsg32.ocx [Catalyst Development Corporation] [Catalyst SocketTools] MD5=13FA03D200E2E2652CBED44426DC9808 SIZE=99584
%SYSDIR%\Csmtp32.ocx [Catalyst Development Corporation] [Catalyst SocketTools] MD5=861F3CC623B032D7F3C231FE7360B83A SIZE=107816
%PROGRAMFILES%\Cox\Applications\app\AuthHyperLink.ocx [Authentium, Inc.] [ESP] MD5=348D872B191C4CFEF92F35D7D9270EFF SIZE=40960
%PROGRAMFILES%\Cox\Applications\app\DTSToolTip.ocx [Developer Tool Store (VB Pro Ltd)] [DTSToolTips] MD5=D949B5428F25C2AA5997DEAE5E865439 SIZE=57344
%PROGRAMFILES%\Cox\Applications\app\IGThreed40.ocx [Infragistics, Inc.] [UltraToolBars] MD5=FC802FF50E555F628B65E0C3042D7436 SIZE=349968
%PROGRAMFILES%\Cox\Applications\app\ctTray.ocx [Gamesman Inc. / DBI Technologies Inc.] [ctTray ActiveX Control] MD5=150DBA58449F7F4B495388FCFFC17A2A SIZE=45056
%PROGRAMFILES%\DellSupport\GTAction\triggers\filet.dll [Gteko Ltd.] [Gteko FileT] MD5=B303A962E751F50F82E4D183BB90C775 SIZE=131072
%PROGRAMFILES%\DellSupport\GTAction\triggers\timert.dll [Gteko Ltd.] [Gteko TimerT] MD5=02EF2C66653D28D964B03EF44A942BF0 SIZE=136192
%PROGRAMFILES%\DellSupport\GTAction\triggers\DSWnHnt.dll [Gteko Ltd.] [Gteko WinHunT] MD5=3D293E0DFDFD4C17AB7E5D4E6065C0E7 SIZE=199168
%PROGRAMFILES%\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll [GRISOFT s.r.o.] [AVG Anti-Spyware] MD5=3FD0B984601D65C6DA8E891A0D5905D1 SIZE=79408
%SYSDIR%\AUserInit.exe [Authentium, Inc.] [ESP] MD5=4CFCB70380BF3E6B714124FEA9F73D67 SIZE=65536
deskpan.dll []
%PROGRAMFILES%\Microsoft Office\OFFICE11\MLSHEXT.DLL [Microsoft Corporation] [Microsoft Office Outlook] MD5=070D6B5AE4984DC130BED16AE5D20D15 SIZE=30408
%COMMONFILES%\Intuit\QuickBooks\QBVersionTool.dll [Intuit Inc.] [QuickBooks for Windows] MD5=BBBA9A1259C86A0F7F75AE95D437F8F1 SIZE=212992
%PROGRAMFILES%\Logitech\SetPoint\kbcplext.dll [Logitech Inc.] [Logitech SetPoint] MD5=0D1D2F409FCD064B6035778BD0F1D32A SIZE=102400
%PROGRAMFILES%\Logitech\SetPoint\mcplext.dll [Logitech Inc.] [Logitech SetPoint] MD5=168B20323B4B0FC40A2637FA67427ABE SIZE=102400
%PROGRAMFILES%\Real\RealPlayer\rpshell.dll [RealNetworks, Inc.] [RealPlayer] MD5=D6315DC9FCC6C62FD54E02F0907030E3 SIZE=49198
%PROGRAMFILES%\Nikon\NkView6\NkvDropExt.dll [Nikon Corporation] [NkvDropExt DLL] MD5=7044E4C9C24743C55D6B982031E0B3B1 SIZE=53248
%SYSDIR%\DRIVERS\AegisP.sys [Meetinghouse Data Communications] [AEGIS Client 3.2.0.3] MD5=2C5C22990156A1063E19AD162191DC1D SIZE=17801
%SYSDIR%\DRIVERS\APPDRV.SYS [Dell Inc] [Application Driver] MD5=EC94E05B76D033B74394E7B2175103CF SIZE=16128
%PROGRAMFILES%\GRISOFT\AVG ANTI-SPYWARE 7.5\GUARD.SYS [] MD5=D6F4C1450699901048818B0C3AAF7A17 SIZE=11000
%SYSDIR%\DRIVERS\AvgAsCln.sys [GRISOFT, s.r.o.] [AVG7 Clean Driver] MD5=856B0CEE009946BF2D327E6B24FE7E3F SIZE=10872
%SYSDIR%\DRIVERS\bcmwl5.sys [Broadcom Corporation] [Broadcom 802.11 Network Adapter wireless driver] MD5=C3AB2D6954C7B5103770832A3A6A591B SIZE=369024
%SYSDIR%\DRIVERS\bcm4sbxp.sys [Broadcom Corporation] [Broadcom 440x 10/100 Integrated Controller] MD5=C768C8A463D32C219CE291645A0621A4 SIZE=45312
%SYSDIR%\DRIVERS\css-dvp.sys [Command Software Systems, Inc.] [CSAV] MD5=263AD15743A7117A319B9D61778DD40D SIZE=768712
%SYSDIR%\drivers\drvmcdb.sys [Sonic Solutions] MD5=96BC8F872F0270C10EDC3931F1C03776 SIZE=88352
%SYSDIR%\drivers\drvnddm.sys [Sonic Solutions] MD5=5AFBEC7A6AC61B211633DFDB1D9E0C89 SIZE=40544
%SYSDIR%\DRIVERS\dsunidrv.sys [Gteko Ltd.] [Gteko Diagnostics] MD5=DFEABB7CFFFADEA4A912AB95BDC3177A SIZE=5376
%SYSDIR%\Drivers\GRTdiMon.sys [Global RISC] [NSX] MD5=EC62D14BCDD66B5A697B95D38CD04F7A SIZE=32256
%SYSDIR%\DRIVERS\HSFHWAZL.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=1C8CAA80E91FB71864E9426F9EED048D SIZE=201600
%SYSDIR%\DRIVERS\HSF_DPV.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=698204D9C2832E53633E53A30A53FC3D SIZE=1035008
%SYSDIR%\DRIVERS\ialmnt5.sys [Intel Corporation] [Intel Graphics Accelerator Drivers for Windows NT®] MD5=240D0F5D7CAAFD87BD8D801A97BBE041 SIZE=1049180
%SYSDIR%\DRIVERS\L8042Kbd.sys [Logitech, Inc.] [Logitech SetPoint™] MD5=E141AB3701EA166109212DCA4B28CA2C SIZE=13568
%SYSDIR%\Drivers\LBeepKE.sys [Logitech, Inc.] [Logitech SetPoint™] MD5=AC3B39817BFDE9735F5654468DBF7D49 SIZE=3712
%SYSDIR%\DRIVERS\LHidFilt.Sys [Logitech, Inc.] [Logitech SetPoint™] MD5=C91206CA84684057118265E8377C77B6 SIZE=34576
%SYSDIR%\DRIVERS\LMouFilt.Sys [Logitech, Inc.] [Logitech SetPoint™] MD5=9F03720FA5E6D14CD4DFEA610F2C1A7C SIZE=33296
%SYSDIR%\DRIVERS\omci.sys [Dell Computer Corporation] [OMCI Driver] MD5=1D98907D80461371437A7C898C58C8AE SIZE=17153
%SYSDIR%\drivers\sscdbhk5.sys [Sonic Solutions] MD5=98625722AD52B40305E74AAA83C93086 SIZE=5627
%SYSDIR%\drivers\ssrtln.sys [Sonic Solutions] MD5=D79412E3942C8A257253487536D5A994 SIZE=23545
%SYSDIR%\drivers\sthda.sys [SigmaTel, Inc.] [C-Major Audio] MD5=4D8AF5D86A8F7778B93069E0F2E30B33 SIZE=1031720
%SYSDIR%\dla\tfsnboio.sys [Sonic Solutions] MD5=D0177776E11B0B3F272EEBD262A69661 SIZE=25725
%SYSDIR%\dla\tfsncofs.sys [Sonic Solutions] MD5=599804BC938B8305A5422319774DA871 SIZE=34845
%SYSDIR%\dla\tfsndrct.sys [Sonic Solutions] MD5=A1902C00ADC11C4D83F8E3ED947A6A32 SIZE=4125
%SYSDIR%\dla\tfsndres.sys [Sonic Solutions] MD5=D8DDB3F2B1BEF15CFF6728D89C042C61 SIZE=2241
%SYSDIR%\dla\tfsnifs.sys [Sonic Solutions] MD5=C4F2DEA75300971CDAEE311007DE138D SIZE=86876
%SYSDIR%\dla\tfsnopio.sys [Sonic Solutions] MD5=272925BE0EA919F08286D2EE6F102B0F SIZE=15069
%SYSDIR%\dla\tfsnpool.sys [Sonic Solutions] MD5=7B7D955E5CEBC2FB88B03EF875D52A2F SIZE=6365
%SYSDIR%\dla\tfsnudf.sys [Sonic Solutions] MD5=E3D01263109D800C1967C12C10A0B018 SIZE=98716
%SYSDIR%\dla\tfsnudfa.sys [Sonic Solutions] MD5=B9E9C377906E3A65BC74598FFF7F7458 SIZE=100605
%SYSDIR%\DRIVERS\wanatw4.sys [America Online, Inc.] [Wan Miniport (ATW)] MD5=0A716C08CB13C3A8F4F51E882DBF7416 SIZE=33588
%SYSDIR%\DRIVERS\HSF_CNXT.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=74CF3F2E4E40C4A2E18D39D6300A5C24 SIZE=717952
%PROGRAMFILES%\MyWaySA\SrchAsDe\deSrcAs.dll []

End of Report

LDTate

Post #9October 21, 2007, 2:29 AM UTC

Is There any way to retreive docs that were Word and now wordpad?

Can you Right Click on the file and select Open With Word?

Open Notepad, click on Format and uncheck Word Wrap.

Open HijackThis and select: Do a system scan and save a log file.

When the scan is finished, Click Edit> Select All> Edit> Copy> and paste its contents here [Add Reply].

GBeal

Post #10October 21, 2007, 2:45 AM UTC

Thanks - the scan is quick with error. Here's the log

Logfile of HijackThis v1.99.1
Scan saved at 7:42:14 PM, on 10/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
c:\program files\cox\applications\app\CurtainsSysSvcNt.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Spyware Terminator\SpywareTerminator.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://thehungersite.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\AUserInit.exe
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O2 - BHO: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - C:\PROGRA~1\GOODSE~1\GOODSE~2.DLL
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: AuthBHO.cBHO - {A4D90779-6CB2-4752-83C2-A2AB4D9A672D} - C:\Program Files\Cox\Applications\app\AuthBHO.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O3 - Toolbar: Cox Popup Blocker - {64634180-B0EA-48B6-82B7-9620D33362C1} - C:\Program Files\Cox\Applications\app\AuthBHO.dll
O3 - Toolbar: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - C:\PROGRA~1\GOODSE~1\GOODSE~2.DLL
O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: *.stumbleupon.com
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {5DBF08EF-4BDE-11D3-B8E4-0080C84E9C66} (Medi@Show Control) - http://www.unclebilly.com/MediaShow.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1145656660843
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Curtains for Windows System Service (CurtainsSysSvc) - Authentium, Inc. - c:\program files\cox\applications\app\CurtainsSysSvcNt.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

LDTate

Post #11October 21, 2007, 2:58 AM UTC

Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a checkmark/tick in the box on the left side on these:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\AUserInit.exe
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O15 - Trusted Zone: *.stumbleupon.com

Close ALL windows and browsers except HijackThis and click "Fix checked"

Reboot and "copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.

GBeal

Post #12October 21, 2007, 3:36 AM UTC

When I hit None fo the Above I don't see Do a Full System Scan and there are no items to check.

GBeal

Post #13October 21, 2007, 3:53 AM UTC

Followed instructions with a scan - did the fix, rebooted and here's the new report.

Logfile of HijackThis v1.99.1
Scan saved at 8:51:04 PM, on 10/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
c:\program files\cox\applications\app\CurtainsSysSvcNt.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://thehungersite.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O2 - BHO: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - C:\PROGRA~1\GOODSE~1\GOODSE~2.DLL
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: AuthBHO.cBHO - {A4D90779-6CB2-4752-83C2-A2AB4D9A672D} - C:\Program Files\Cox\Applications\app\AuthBHO.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O3 - Toolbar: Cox Popup Blocker - {64634180-B0EA-48B6-82B7-9620D33362C1} - C:\Program Files\Cox\Applications\app\AuthBHO.dll
O3 - Toolbar: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - C:\PROGRA~1\GOODSE~1\GOODSE~2.DLL
O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: *.stumbleupon.com
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {5DBF08EF-4BDE-11D3-B8E4-0080C84E9C66} (Medi@Show Control) - http://www.unclebilly.com/MediaShow.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1145656660843
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Curtains for Windows System Service (CurtainsSysSvc) - Authentium, Inc. - c:\program files\cox\applications\app\CurtainsSysSvcNt.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

LDTate

Post #14October 21, 2007, 10:38 AM UTC

Download: ResetProtocolDefaults.reg
http://www.mvps.org/winhelp2002/ResetProtocolDefaults.reg

Locate "ResetProtocolDefaults.reg"
Right-click and select: Merge (Ok the prompt)

Next:

"copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.

GBeal

Post #15October 21, 2007, 2:37 PM UTC

Computer is ok on startup. Downloaded suggested file without reboot. Still get an error with Hijackthis. Logfile below. Thanks.

Logfile of HijackThis v1.99.1
Scan saved at 7:33:50 AM, on 10/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
c:\program files\cox\applications\app\CurtainsSysSvcNt.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://thehungersite.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O2 - BHO: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - C:\PROGRA~1\GOODSE~1\GOODSE~2.DLL
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: AuthBHO.cBHO - {A4D90779-6CB2-4752-83C2-A2AB4D9A672D} - C:\Program Files\Cox\Applications\app\AuthBHO.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O3 - Toolbar: Cox Popup Blocker - {64634180-B0EA-48B6-82B7-9620D33362C1} - C:\Program Files\Cox\Applications\app\AuthBHO.dll
O3 - Toolbar: goodsearch - {4E7BD74F-2B8D-469E-95BA-ED6DB186BE32} - C:\PROGRA~1\GOODSE~1\GOODSE~2.DLL
O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: *.stumbleupon.com
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {5DBF08EF-4BDE-11D3-B8E4-0080C84E9C66} (Medi@Show Control) - http://www.unclebilly.com/MediaShow.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1145656660843
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Curtains for Windows System Service (CurtainsSysSvc) - Authentium, Inc. - c:\program files\cox\applications\app\CurtainsSysSvcNt.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Resolved] Trojan Virus and Security Options

✨ Ask AI

Ask AI