Logfile of HijackThis v1.99.1
Scan saved at 10:42:45 PM, on 6/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:..WINDOWS..System32..smss.exe
C:..WINDOWS..system32..winlogon.exe
C:..WINDOWS..system32..services.exe
C:..WINDOWS..system32..lsass.exe
C:..WINDOWS..system32..Ati2evxx.exe
C:..WINDOWS..system32..svchost.exe
C:..Program Files..Windows Defender..MsMpEng.exe
C:..WINDOWS..System32..svchost.exe
C:..Program Files..Common Files..Symantec Shared..ccSetMgr.exe
C:..WINDOWS..system32..Ati2evxx.exe
C:..Program Files..Common Files..Symantec Shared..SPBBC..SPBBCSvc.exe
C:..Program Files..Common Files..Symantec Shared..ccEvtMgr.exe
C:..WINDOWS..Explorer.EXE
C:..Program Files..Alwil Software..Avast4..aswUpdSv.exe
C:..Program Files..Alwil Software..Avast4..ashServ.exe
C:..WINDOWS..system32..spoolsv.exe
C:..Program Files..Common Files..Apple..Mobile Device Support..bin..AppleMobileDeviceService.exe
C:..Program Files..Bonjour..mDNSResponder.exe
C:..Program Files..Norton AntiVirus..navapsvc.exe
C:..Program Files..Norton AntiVirus..IWP..NPFMntor.exe
C:..WINDOWS..system32..STacSV.exe
C:..WINDOWS..system32..svchost.exe
C:..Program Files..Viewpoint..Common..ViewpointService.exe
C:..Program Files..Alwil Software..Avast4..ashMaiSv.exe
C:..Program Files..Alwil Software..Avast4..ashWebSv.exe
C:..WINDOWS..system32..wscntfy.exe
C:..WINDOWS..system32..Brightness.exe
C:..WINDOWS..system32..arc.exe
C:..Program Files..ATI Technologies..ATI Control Panel..atiptaxx.exe
C:..Program Files..Apple Keyboard Support..KbdMgr.exe
C:..WINDOWS..system32..rundll32.exe
C:..Program Files..DAP..DAP.EXE
C:..WINDOWS..system32..spool..drivers..w32x86..3..hpztsb07.exe
C:..WINDOWS..system32..hphmon04.exe
C:..Program Files..Java..jre1.6.0_05..bin..jusched.exe
C:..Program Files..Windows Defender..MSASCui.exe
C:..Program Files..Roxio..Easy Media Creator 7..Drag to Disc..DrgToDsc.exe
C:..WINDOWS..SM1BG.EXE
C:..Program Files..QuickTime..qttask.exe
C:..Program Files..iTunes..iTunesHelper.exe
C:..Program Files..Common Files..Symantec Shared..ccApp.exe
C:..PROGRA~1..ALWILS~1..Avast4..ashDisp.exe
C:..Program Files..Windows Live..Messenger..MsnMsgr.Exe
C:..Program Files..AIM6..aim6.exe
C:..Program Files..Messenger..msmsgs.exe
C:..Program Files..iPod..bin..iPodService.exe
C:..Program Files..Google..GoogleToolbarNotifier..GoogleToolbarNotifier.exe
C:..WINDOWS..system32..ctfmon.exe
C:..Program Files..Veoh Networks..Veoh..VeohClient.exe
C:..Program Files..DNA..btdna.exe
C:..Program Files..Spybot - Search & Destroy..TeaTimer.exe
C:..Program Files..Viewpoint..Viewpoint Manager..ViewMgr.exe
C:..Program Files..AIM6..aolsoftware.exe
C:..Program Files..Windows Live..Messenger..usnsvc.exe
C:..Program Files..Alwil Software..Avast4..ashSimpl.exe
C:..WINDOWS..system32..msiexec.exe
C:..Program Files..Mozilla Firefox..firefox.exe
C:..Program Files..HijackThis..HijackThis.exe

R1 - HKLM..Software..Microsoft..Internet Explorer..Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM..Software..Microsoft..Internet Explorer..Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM..Software..Microsoft..Internet Explorer..Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM..Software..Microsoft..Internet Explorer..Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU..Software..Microsoft..Windows..CurrentVersion..Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:..Program Files..Yahoo!..Companion..Installs..cpn..yt.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:..Program Files..Search Settings..kb126..SearchSettings.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:..program files..google..googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:..Program Files..Yahoo!..Companion..Installs..cpn..yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:..Program Files..Veoh Networks..Veoh..Plugins..reg..VeohToolbar.dll
O3 - Toolbar: vrmdtneg - {778DC3F7-1699-4A2F-8D32-143C0D00854C} - C:..WINDOWS..vrmdtneg.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:..Program Files..Norton AntiVirus..NavShExt.dll
O4 - HKLM……Run: [AppleTime] C:..WINDOWS..system32..AppleTime.exe
O4 - HKLM……Run: [Brightness] C:..WINDOWS..system32..Brightness.exe
O4 - HKLM……Run: [arc] C:..WINDOWS..system32..arc.exe
O4 - HKLM……Run: [ATIPTA] "C:..Program Files..ATI Technologies..ATI Control Panel..atiptaxx.exe"
O4 - HKLM……Run: [Apple_KbdMgr] "C:..Program Files..Apple Keyboard Support..KbdMgr.exe"
O4 - HKLM……Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM……Run: [DownloadAccelerator] "C:..Program Files..DAP..DAP.EXE" /STARTUP
O4 - HKLM……Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM……Run: [HPDJ Taskbar Utility] C:..WINDOWS..system32..spool..drivers..w32x86..3..hpztsb07.exe
O4 - HKLM……Run: [HPHmon04] C:..WINDOWS..system32..hphmon04.exe
O4 - HKLM……Run: [HPHUPD04] "C:..Program Files..HP Photosmart 11..hphinstall..UniPatch..hphupd04.exe"
O4 - HKLM……Run: [SunJavaUpdateSched] "C:..Program Files..Java..jre1.6.0_05..bin..jusched.exe"
O4 - HKLM……Run: [Logitech Hardware Abstraction Layer] "C:..Program Files..Common Files..Logitech..khalshared..KHALMNPR.EXE"
O4 - HKLM……Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM……Run: [POINTER] point32.exe
O4 - HKLM……Run: [Windows Defender] "C:..Program Files..Windows Defender..MSASCui.exe" -hide
O4 - HKLM……Run: [KernelFaultCheck] %systemroot%..system32..dumprep 0 -k
O4 - HKLM……Run: [RoxioDragToDisc] "C:..Program Files..Roxio..Easy Media Creator 7..Drag to Disc..DrgToDsc.exe"
O4 - HKLM……Run: [SM1BG] C:..WINDOWS..SM1BG.EXE
O4 - HKLM……Run: [NBKeyScan] "C:..Program Files..Nero..Nero8..Nero BackItUp..NBKeyScan.exe"
O4 - HKLM……Run: [NeroFilterCheck] C:..WINDOWS..system32..NeroCheck.exe
O4 - HKLM……Run: [QuickTime Task] "C:..Program Files..QuickTime..qttask.exe" -atboottime
O4 - HKLM……Run: [iTunesHelper] "C:..Program Files..iTunes..iTunesHelper.exe"
O4 - HKLM……Run: [Antivirus] C:..Program Files..VAV..vav.exe
O4 - HKLM……Run: [SearchSettings] C:..Program Files..Search Settings..SearchSettings.exe
O4 - HKLM……Run: [ccApp] "C:..Program Files..Common Files..Symantec Shared..ccApp.exe"
O4 - HKLM……Run: [antiviirus] C:..Program Files..antiviirus.exe
O4 - HKLM……Run: [Sys97.exe] C:..Sys97.exe
O4 - HKLM……Run: [Sys99.exe] C:..Sys99.exe
O4 - HKLM……Run: [2ce3ff10] rundll32.exe "C:..WINDOWS..system32..sncofyaw.dll",b
O4 - HKLM……Run: [Sys8B.exe] C:..Sys8B.exe
O4 - HKLM……Run: [Sys96.exe] C:..Sys96.exe
O4 - HKLM……Run: [avast!] C:..PROGRA~1..ALWILS~1..Avast4..ashDisp.exe
O4 - HKCU……Run: [MsnMsgr] "C:..Program Files..Windows Live..Messenger..MsnMsgr.Exe" /background
O4 - HKCU……Run: [Aim6] "C:..Program Files..AIM6..aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU……Run: [MSMSGS] "C:..Program Files..Messenger..msmsgs.exe" /background
O4 - HKCU……Run: [EA Core] "C:..Program Files..Electronic Arts..EA Link..Core.exe" -silent
O4 - HKCU……Run: [swg] C:..Program Files..Google..GoogleToolbarNotifier..GoogleToolbarNotifier.exe
O4 - HKCU……Run: [Steam] C:..Program Files..Valve..Steam….Steam.exe -silent
O4 - HKCU……Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:..Program Files..Common Files..Nero..Lib..NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU……Run: [ctfmon.exe] C:..WINDOWS..system32..ctfmon.exe
O4 - HKCU……Run: [Veoh] "C:..Program Files..Veoh Networks..Veoh..VeohClient.exe" /VeohHide
O4 - HKCU……Run: [BitTorrent DNA] "C:..Program Files..DNA..btdna.exe"
O4 - HKCU……Run: [Antivirus] C:..Program Files..VAV..vav.exe
O4 - HKCU……Run: [SpybotSD TeaTimer] C:..Program Files..Spybot - Search & Destroy..TeaTimer.exe
O4 - HKCU……Run: [Sys97.exe] C:..Sys97.exe
O4 - HKCU……Run: [Sys9A.exe] C:..Sys9A.exe
O4 - HKCU……Run: [Sys9B.exe] C:..Sys9B.exe
O4 - HKCU……Run: [Sys90.exe] C:..Sys90.exe
O4 - HKCU……Run: [Sys95.exe] C:..Sys95.exe
O4 - HKCU……Run: [Sys96.exe] C:..Sys96.exe
O4 - Startup: Adobe Gamma.lnk = C:..Program Files..Common Files..Adobe..Calibration..Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:..Program Files..Adobe..Reader 8.0..Reader..reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:..Program Files..Adobe..Reader 8.0..Reader..AdobeCollabSync.exe
O8 - Extra context menu item: &Clean Traces - C:..Program Files..DAP..Privacy Package..dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:..Program Files..DAP..dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:..Program Files..DAP..dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:..PROGRA~1..MICROS~2..OFFICE11..EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:..Program Files..Java..jre1.6.0_05..bin..ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:..Program Files..Java..jre1.6.0_05..bin..ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:..PROGRA~1..MICROS~2..OFFICE11..REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:..PROGRA~1..SPYBOT~1..SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:..PROGRA~1..SPYBOT~1..SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:..Program Files..Messenger..msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:..Program Files..Messenger..msmsgs.exe
O10 - Unknown file in Winsock LSP: c:..program files..bonjour..mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/Facebo…toUploader5.cab
O16 - DPF: {2019DC25-D1C0-11D6-97B3-0008A124F542} (StreamPlug Class) - http://www.streamplug.com/StreamPlug/beta/SP.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {20B845BF-450F-4C1E-AF60-3CC380CDE328} (get_atlcom Class) - http://apps.corel.com/nos_dl_manager/plugi…OpPluginNOSSO.o cx
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by103w.bay103.mail.live.com/mail/re…es/MsnPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/Facebo…toUploader2.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…tsClient.cab312 67.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…tDownloadManage r.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…tsPAClient.cab5 6907.cab
O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/Facebo…Uploader4_5.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab56986.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:..PROGRA~1..WI1F86~1..MESSEN~1..MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:..PROGRA~1..WI1F86~1..MESSEN~1..MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:..WINDOWS..system32..WPDShServiceObj.dll
O21 - SSODL: SunAlrt - {1a0fc860-e88e-4055-81ea-925bb4f45cc5} - C:..WINDOWS..Resources..SunAlrt.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:..Program Files..Common Files..Adobe Systems Shared..Service..Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:..Program Files..Common Files..Apple..Mobile Device Support..bin..AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:..Program Files..Alwil Software..Avast4..aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:..WINDOWS..system32..Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:..WINDOWS..system32..ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:..Program Files..Alwil Software..Avast4..ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:..Program Files..Alwil Software..Avast4..ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:..Program Files..Alwil Software..Avast4..ashWebSv.exe" /service (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:..Program Files..Bonjour..mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:..Program Files..Common Files..Symantec Shared..ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:..Program Files..Common Files..Symantec Shared..ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:..Program Files..Common Files..Symantec Shared..ccSetMgr.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:..Program Files..Google..Common..Google Updater..GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:..Program Files..Common Files..InstallShield..Driver..11..Intel 32..IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:..Program Files..iPod..bin..iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:..Program Files..Norton AntiVirus..navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:..Program Files..Norton AntiVirus..IWP..NPFMntor.exe
O23 - Service: Pml Driver HPH11 - HP - C:..WINDOWS..system32..HPHipm11.exe
O23 - Service: SAVScan - Symantec Corporation - C:..Program Files..Norton AntiVirus..SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:..PROGRA~1..COMMON~1..SYMANT~1..SCRIPT~1..SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:..Program Files..Common Files..Symantec Shared..SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:..Program Files..Common Files..Symantec Shared..SPBBC..SPBBCSvc.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:..WINDOWS..system32..STacSV.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:..Program Files..Viewpoint..Common..ViewpointService.exe

" Ok, I am having a hell of a time right now. First, by no fault other than my own I did not have a antivirus installed. I am currently running Windows XP Pro on an iMac which has Tiger as it's OS so my boot camp is expired, thus preventing me from running the boot camp assistant and deleting the windows partition in order to install a new one. So please, no Mac vs. Windows arguments.

Well, the virus in question I heard is called a Needy virus or something but im not certain. What happens is, this box appears that tries to install "Search Settings 1.1" and I click cancel, and I close it and it continues to do so. Not only that, I am getting messages from Spybot search and destroy that these Sys9X (91, 92 etc…) files are trying to access my registry, which I am denying. Basically it's all a mess.

I have tried to install my Norton, however when I try to activate it, it wont connect to Symantec server.

I have also tried the option of restoring to a previous date, however it's only giving me the option of restoring to Yesterday (June 17th). "

This is my friends box he asked me to post this log file here and asked me to take care of it for him . so with the knowledgeably minds here i hope that we can help my friend out . TIA