My computer is still running slower than usual. Kaspersky showed that there were still 12 viruses and 40 affected files. Again, thank you for all of your help.
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, May 07, 2008 4:11:27 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 7/05/2008
Kaspersky Anti-Virus database records: 743585
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
C:\
D:\
Scan Statistics:
Total number of scanned objects: 82423
Number of viruses found: 12
Number of infected objects: 40
Number of suspicious objects: 0
Duration of the scan process: 02:16:28
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\avg8\AvgAm\avgam.lck Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\emc\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgam.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgcore.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\Log\avglng.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgns.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgrs.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgsched.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgsrm.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgui.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgwd.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgwdsvc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-05012008-235509.log Object is locked skipped
C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp Object is locked skipped
C:\Documents and Settings\All Users\DRM\drmstore.hds Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\larry_spencer@ad.yieldmanager[2].txt Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\larry_spencer@adopt.euroclick[2].txt Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\larry_spencer@adrevolver[2].txt Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\larry_spencer@advertising[1].txt Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\larry_spencer@atdmt[2].txt Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\larry_spencer@doubleclick[1].txt Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\larry_spencer@media.adrevolver[1].txt Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\larry_spencer@statcounter[2].txt Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\larry_spencer@trafficmp[1].txt Object is locked skipped
C:\Documents and Settings\Larry Spencer\Cookies\larry_spencer@zedo[1].txt Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{979652AC-729F-41BF-A06A-B61005BFA554} Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\History\History.IE5\MSHist012008050720080508\index.dat Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\Temp\~DF75DD.tmp Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\Temp\~DFE9E6.tmp Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\Temp\~DFEA7B.tmp Object is locked skipped
C:\Documents and Settings\Larry Spencer\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\New Stuff To Keep\Programs\Yahoo-Message-Archive-Decoder-Setup.exe/stream/data0012 Infected: not-a-virus:PSWTool.Win32.Yahoo.c skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\New Stuff To Keep\Programs\Yahoo-Message-Archive-Decoder-Setup.exe/stream Infected: not-a-virus:PSWTool.Win32.Yahoo.c skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\New Stuff To Keep\Programs\Yahoo-Message-Archive-Decoder-Setup.exe NSIS: infected - 2 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\AiRoboForm-cnet3.exe Infected: not-a-virus:AdWare.Win32.WeatherBug.b skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amagent38.exe/Stream/data0003 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.a skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amagent38.exe/Stream/data0005 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.a skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amagent38.exe/Stream/data0006 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.a skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amagent38.exe/Stream/data0007 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amagent38.exe/Stream Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amagent38.exe Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream/data0002 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream/data0003 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream/data0022 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream/data0023 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream/data0024/Stream/data0003 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.a skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream/data0024/Stream/data0005 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.a skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream/data0024/Stream/data0006 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.a skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream/data0024/Stream/data0007 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream/data0024/Stream Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream/data0024 Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe/Stream Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP/amonitor38f.exe Infected: not-a-virus:Monitor.Win32.ActivityMonitor.38 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\ACTIVMON.ZIP ZIP: infected - 18 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\pcspy.exe/file11 Infected: not-a-virus:Monitor.Win32.PCSpy.c skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\pcspy.exe Inno: infected - 1 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\survsystpro42.exe/WISE0004.BIN Infected: not-a-virus:Downloader.Win32.Agent.r skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\survsystpro42.exe WiseSFX: infected - 1 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\wiretappro.exe/Hook.dll Infected: not-a-virus:Monitor.Win32.OverSpy.a skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\wiretappro.exe/ShellExecuteHook.dll Infected: not-a-virus:Monitor.Win32.Wiretap.40 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\wiretappro.exe/scvhost.exe Infected: not-a-virus:Monitor.Win32.Wiretap.40 skipped
C:\Documents and Settings\Larry Spencer\My Documents\Debbie's Stuff\Old Stuff to Move to CD\Disc 6\Programs as of 02-22-08\Misc\Monitoring\wiretappro.exe SetupFactory: infected - 3 skipped
C:\Documents and Settings\Larry Spencer\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Larry Spencer\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
C:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
C:\System Volume Information\catalog.wci\00010007.ci Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
C:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{E50A3772-ADC6-42F8-B62F-FEBA80092159}\RP135\A0029463.exe/file1 Infected: not-a-virus:AdWare.Win32.AskJeeves.a skipped
C:\System Volume Information\_restore{E50A3772-ADC6-42F8-B62F-FEBA80092159}\RP135\A0029463.exe/file2 Infected: not-a-virus:AdWare.Win32.AskJeeves.a skipped
C:\System Volume Information\_restore{E50A3772-ADC6-42F8-B62F-FEBA80092159}\RP135\A0029463.exe Inno: infected - 2 skipped
C:\System Volume Information\_restore{E50A3772-ADC6-42F8-B62F-FEBA80092159}\RP136\A0030424.exe/WISE0014.BIN Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
C:\System Volume Information\_restore{E50A3772-ADC6-42F8-B62F-FEBA80092159}\RP136\A0030424.exe/WISE0015.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
C:\System Volume Information\_restore{E50A3772-ADC6-42F8-B62F-FEBA80092159}\RP136\A0030424.exe/WISE0016.BIN/WISE0001.BIN Infected: not-a-virus:AdWare.Win32.Accoona.b skipped
C:\System Volume Information\_restore{E50A3772-ADC6-42F8-B62F-FEBA80092159}\RP136\A0030424.exe/WISE0016.BIN Infected: not-a-virus:AdWare.Win32.Accoona.b skipped
C:\System Volume Information\_restore{E50A3772-ADC6-42F8-B62F-FEBA80092159}\RP136\A0030424.exe WiseSFX: infected - 4 skipped
C:\System Volume Information\_restore{E50A3772-ADC6-42F8-B62F-FEBA80092159}\RP136\A0030424.exe WiseSFXDropper: infected - 4 skipped
C:\System Volume Information\_restore{E50A3772-ADC6-42F8-B62F-FEBA80092159}\RP162\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log Object is locked skipped
C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\TMP00000043F9955089405FDD85 Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
Scan process completed.
Logfile of HijackThis v1.99.1
Scan saved at 4:14:29 AM, on 5/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\WINDOWS\system32\dla\DLACTRLW.exe
C:\Program Files\Toshiba\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://red.clientapp.../search/ie.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft....k/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://red.clientapp...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://www.toshibadirect.com/dpdstart
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\DLACTRLW.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\Toshiba\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Auto EPSON Stylus Photo R200 Series on VAIO (Copy 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE /P52 "Auto EPSON Stylus Photo R200 Series on VAIO (Copy 1)" /O15 "\\VAIO\EPSONSty" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.toshibadirect.com/dpdstart
O16 - DPF: {01016526-5E80-11D8-9E86-0007E96C65AE} (SmartAccess Ctl Class) -
https://install.char...in/ssctlsma.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) -
http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky...can_unicode.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
http://us.dl1.yimg.c...nst20040510.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://by116fd.bay11...es/MsnPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.mi...b?1192430423142
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) -
http://drmlicense.on...e/en/crlocx.ocx
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) -
http://download.mcaf...246/mcfscan.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
