This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Slow PC

41 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

How can I speed up my computer without reformatting my hard drive? Here is my log. thank you
Logfile of HijackThis v1.99.1
Scan saved at 1:11:20 PM, on 7/20/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\RelevantKnowledge\rlvknlg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\system32\hphmon04.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Sierra\Planner\PLNRnote.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\NewDotNet\nnrun.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\HPHipm11.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\NewDotNet\nnrun.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Pat Walgenbach\Local Settings\Temporary Internet Files\Content.IE5\TUVE1T30\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://portal.wowway.net/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: X1IEHook Class - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\Program Files\NetZero\qsacc\X1IEBHO.dll
O2 - BHO: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: (no name) - {D775A8F6-2895-4880-9C5A-C9019C55E331} - C:\WINDOWS\system32\awvvv.dll (file missing)
O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - C:\Program Files\NetZero\Toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\system32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB002" /M "Stylus Photo R220"
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RelevantKnowledge] C:\Program Files\RelevantKnowledge\rlvknlg.exe -boot
O4 - HKLM\..\Run: [SBI] C:\Documents and Settings\Pat Walgenbach\Local Settings\Temporary Internet Files\Content.IE5\9ERPULH2\setup_sbd_en[1].exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [PhotoTransfer] C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Event Planner Reminders.lnk = C:\Program Files\Sierra\Planner\PLNRnote.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/…?p=ZUxdm080YYUS
O8 - Extra context menu item: Display All Images with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/228"
O8 - Extra context menu item: Display Image with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/227"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/f…p1.0.0.15-3.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/Crusher.cab
O20 - AppInit_DLLs: C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program Files\RelevantKnowledge\rlai.dll
O20 - Winlogon Notify: awvvv - C:\WINDOWS\system32\awvvv.dll (file missing)
O20 - Winlogon Notify: nnnopnm - nnnopnm.dll (file missing)
O20 - Winlogon Notify: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlls.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NNServ - Unknown owner - C:\Program Files\NewDotNet\nnrun.exe" "C:\Program Files\NewDotNet\nncore.dll" ServiceStart (file missing)
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\system32\HPHipm11.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
You are running HJT from an unsafe location. An easy way to correct this is to do the following:

Download a copy of HJTInstall.exe from here and save it to your Desktop
  • Double click HJTInstall.exe to begin installation.
  • Accept the installation location, which by default is C:\Program Files\Trend Micro\HijackThis or click the Browse… button if you want to chose somewhere else and then click Install
  • Once HJT has installed, a shortcut will be created on your Desktop and HJT will open automatically.
  • You will need to accept the EULA, if it appears, to be able to use the tool.
  • Close the program as you won't need to use it yet.
Do this BEFORE you proceed! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The following steps will serve as a spring clean for your PC. Not all of them will be of benefit to your PC as this is a general post, but the overall effect should be positive.

1) Go to Start > Control Panel > Add/Remove Programs and remove any programs that you no longer use and then reboot your PC.

2) Download ATF Cleaner by Atribune from here and save it to your Desktop.
Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:
Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
Java Cache

The rest are optional - if you want to remove the lot, check "Select All".
Finally click Empty Selected. When you get the "Done Cleaning" message, click OK.

If you use the Firefox or Opera browsers, you can use this program as a quick way to tidy those up as well.

When you have finished, click on the Exit button in the Main menu.

For Technical Support, double-click the e-mail address located at the bottom of each menu.

Please Note: This program is for Windows XP and Windows 2000 only.

3) Double click My Computer.
Right click the disc drive you wish to check.
Click Properties.
In the Properties dialog box, click the Tools Tab.
Under Error-checking, click the Check Now button.
In the "Check Disc Local Disk (C:)" dialog box, check both Automatically fix file system errors and Scan for and attempt recovery of bad sectors, and then click Start.

This will look for and attempt to repair any errors that your hard drive has.

4) Defragment your hard drive. A tutorial for disc defragmentation is available here.

5) Download and run StartUp Inspector.
This program will help you to decide exactly what programs you disable from running at startup.
The Readme.txt file included has instructions on how to use it.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Download Malwarebytes' Anti-Malware from here and save it to your Desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • Ensure a checkmark is placed next to both Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware and then click Finish.
  • If an update is found, it will download and install the latest version - you'll need to clear it with your firewall.
  • Once the program has loaded, select Perform full scan and then Scan.
  • When the scan has finished, click OK and then Show Results to view the results - no surprise there!
  • If MBAM finds anything, check the box(es) and click Remove Selected.
  • When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt
Let me have the MBAM log, a fresh HJT log (run in Normal Mode) AND a description of how your PC is behaving.

Also, run HJT and click on Open the Misc Tools section.
  • Click Open Uninstall Manager…
  • Click Save list… and save it to your Desktop.
  • Copy and paste the file uninstall_list.txt into your next reply.
Please don't attach logs as I then have to download them to review them and I don't have the hard drive space for all the logs I work. Malwarebytes' Anti-Malware 1.22 Database version: 982 Windows 5.1.2600 Service Pack 2 2:54:48 PM 7/23/2008 mbam-log-7-23-2008 (14-54-48).txt Scan type: Full Scan (C:\|) Objects scanned: 108257 Time elapsed: 24 minute(s), 44 second(s) Memory Processes Infected: 1 Memory Modules Infected: 6 Registry Keys Infected: 178 Registry Values Infected: 8 Registry Data Items Infected: 0 Folders Infected: 61 Files Infected: 170 Memory Processes Infected: C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Unloaded process successfully. Memory Modules Infected: C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Unloaded module successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Unloaded module successfully. C:\Program Files\alot\bin\alot.dll (Adware.BHO) -> Unloaded module successfully. C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Unloaded module successfully. C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Unloaded module successfully. C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (Adware.MyWay) -> Unloaded module successfully. Registry Keys Infected: HKEY_CLASSES_ROOT\TypeLib\{e47caee0-deea-464a-9326-3f2801535a4d} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} (Adware.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} (Adware.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{90b5a95a-afd5-4d11-b9bd-a69d53d22226} (Adware.Hotbar) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\spamblockerconfig.application (Adware.Hotbar) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\spamblockerconfig.application.1 (Adware.Hotbar) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8109fd3d-d891-4f80-8339-50a4913ace6f} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{07b18ea0-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{07b18eaa-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{07b18eac-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{07b18ea3-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{53ced2d0-5e9a-4761-9005-648404e6f7e5} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{8ca01f0e-987c-49c3-b852-2f1ac4a7094c} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{1093995a-ba37-41d2-836e-091067c4ad17} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{120927bf-1700-43bc-810f-fab92549b390} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{991aac62-b100-47ce-8b75-253965244f69} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{0f8ecf4f-3646-4c3a-8881-8e138ffcaf70} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{b813095c-81c0-4e40-aa14-67520372b987} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{c9d7be3e-141a-4c85-8cd6-32461f3df2c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{cff4ce82-3aa2-451f-9b77-7165605fb835} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.datacontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{c8cecde3-1ae1-4c4a-ad82-6d5b00212144} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.datacontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.shellviewcontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{621feacd-8857-43a6-ae26-451d670d5370} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{2763e333-b168-41a0-a112-d35f96f410c0} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.shellviewcontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.htmlmenu (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.2 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.htmlpanel (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{3e720450-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{3e720451-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{3e720453-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.htmlpanel.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{8e6f1830-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{8e6f1832-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{a9571378-68a1-443d-b082-284f960c6d17} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{7473d290-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{84da4fdf-a1cf-4195-8688-3e961f505983} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{938aa51a-996c-4884-98ce-80dd16a5c9da} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{29d67d3c-509a-4544-903f-c8c1b8236554} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.browseroverlayembed (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{98635087-3f5d-418f-990c-b1efe0797a3b} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{38a7c9da-8db7-4d0f-a7b1-c4b1a305bddb} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{8d292ec0-6792-4a38-82ed-73a087e41ba6} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{d778513b-1c40-4819-b0c5-49e40b39afd0} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.browseroverlayembed.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.outlookaddin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{adb01e81-3c79-4272-a0f1-7b2be7a782dc} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.outlookaddin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.browseroverlaybarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\funwebproducts.browseroverlaybarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{d9fffb27-d62a-4d64-8cec-1ff006528805} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{0d26bc71-a633-4e71-ad31-eadc3a1b6a3a} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{e79dfbc0-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{72ee7f04-15bd-4845-a005-d6711144d86a} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{f42228fb-e84e-479e-b922-fbbd096e792c} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{4d25f926-b9fe-4682-bf72-8ab8210d6d75} (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{4d25f920-b9fe-4682-bf72-8ab8210d6d75} (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{4d25f923-b9fe-4682-bf72-8ab8210d6d75} (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{4d25f921-b9fe-4682-bf72-8ab8210d6d75} (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4d25f921-b9fe-4682-bf72-8ab8210d6d75} (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{4d25f924-b9fe-4682-bf72-8ab8210d6d75} (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\alot (Adware.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\alotToolbar (Adware.BHO) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\aldd (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\MS Juan (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\jkwslist (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\SystemErrorFixerDownloader (Rogue.SystemErrorFixer) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Juan (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\The Weather Channel (Adware.Hotbar) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/x-f3embed (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Screensavers.com (Adware.Comet) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mywebsearch email plugin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} (Adware.BHO) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{4d25f926-b9fe-4682-bf72-8ab8210d6d75} (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sbi (Rogue.AntiSpywareSuite) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\ (Adware.Hotbar) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Program Files\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Delete on reboot. C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> Delete on reboot. C:\Program Files\MyWebSearch\bar\1.bin (Adware.MyWebSearch) -> Delete on reboot. C:\Program Files\MyWebSearch\bar\Avatar (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Game (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Message (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\SrchAstt (Adware.MyWebSearch) -> Delete on reboot. C:\Program Files\MyWebSearch\SrchAstt\1.bin (Adware.MyWebSearch) -> Delete on reboot. C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\Shared\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\alot (Adware.BHO) -> Delete on reboot. C:\Program Files\alot\bin (Adware.BHO) -> Delete on reboot. C:\Documents and Settings\Pat Walgenbach\Application Data\SpamBlockerUtility_Icons (Adware.Hotbar) -> Quarantined and deleted successfully. C:\Documents and Settings\Al Walgenbach\Application Data\SpamBlockerUtility_Icons (Adware.Hotbar) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge (Spyware.Marketscore) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_0 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_1 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_10 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_11 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_2 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_3 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_4 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_5 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_6 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_7 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_8 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_9 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\configurator (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\postInstallLayout (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\products (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_0 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_0\images (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_1 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_1\images (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_2 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_2\images (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_3 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_3\images (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_4 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_4\images (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_5 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_5\images (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_6 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_6\images (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_7 (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_7\images (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\TimerManager (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\ToolbarSearch (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Updater (Adware.BHO) -> Quarantined and deleted successfully. Files Infected: C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Delete on reboot. C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Delete on reboot. C:\Documents and Settings\Pat Walgenbach\Local Settings\Application Data\eygsw_navps.dat (Adware.Navipromo) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Local Settings\Application Data\eygsw_nav.dat (Adware.Navipromo) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Local Settings\Application Data\eygsw.dat (Adware.Navipromo) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Local Settings\Application Data\eygsw.exe (Adware.Navipromo) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Local Settings\Application Data\qkvrbsa_navps.dat (Adware.Navipromo) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Local Settings\Application Data\qkvrbsa_nav.dat (Adware.Navipromo) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Local Settings\Application Data\qkvrbsa.dat (Adware.Navipromo) -> Quarantined and deleted successfully. C:\Program Files\alot\bin\alot.dll (Adware.BHO) -> Delete on reboot. C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Delete on reboot. C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Delete on reboot. C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3SHLLVW.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3BROVLY.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (Adware.MyWay) -> Delete on reboot. C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL (Adware.MyWeb.FunWeb) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE (Adware.MyWeb.FunWeb) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\Internet Explorer\msimg32.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP887\A0125999.dll (Adware.BHO) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP887\A0126000.dll (Adware.BHO) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP887\A0126001.dll (Spyware.Marketscore) -> Quarantined and deleted successfully. C:\WINDOWS\system32\ldlnixux.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\f3PSSavr.scr (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\000256D0 (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\0002D680 (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\0005233F (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\00058842 (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\02A34FD2 (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\02A3504F.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\02A3510A.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\02A35233.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\02A352D0.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\030C0230.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\030C0EB3.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\030C0FBD.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\030C101B.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Cache\files.ini (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\History\search2 (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Settings\setting2.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Settings\settings.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\ScreenSaver\Images\0014CB4D.urr (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\alot\alotUninst.exe (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\SpamBlockerUtility_Icons\Registryrepair.ico (Adware.Hotbar) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\SpamBlockerUtility_Icons\Software_Online_8.ico (Adware.Hotbar) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\SpamBlockerUtility_Icons\wallpapere1.ico (Adware.Hotbar) -> Quarantined and deleted successfully. C:\Documents and Settings\Al Walgenbach\Application Data\SpamBlockerUtility_Icons\Registryrepair.ico (Adware.Hotbar) -> Quarantined and deleted successfully. C:\Documents and Settings\Al Walgenbach\Application Data\SpamBlockerUtility_Icons\Software_Online_8.ico (Adware.Hotbar) -> Quarantined and deleted successfully. C:\Documents and Settings\Al Walgenbach\Application Data\SpamBlockerUtility_Icons\wallpapere1.ico (Adware.Hotbar) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk (Spyware.Marketscore) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk (Spyware.Marketscore) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Support.lnk (Spyware.Marketscore) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Uninstall Instructions.lnk (Spyware.Marketscore) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\toolbar.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_0\Button_0.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_0\Button_0.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_1\Button_1.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_1\Button_1.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_10\Button_10.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_10\Button_10.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_11\Button_11.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_11\Button_11.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_2\Button_2.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_2\Button_2.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_3\Button_3.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_3\Button_3.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_4\Button_4.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_4\Button_4.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_5\Button_5.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_5\Button_5.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_6\Button_6.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_6\Button_6.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_7\Button_7.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_7\Button_7.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_8\Button_8.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_8\Button_8.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_9\Button_9.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Button_9\Button_9.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\configurator\configurator.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\configurator\configurator.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\postInstallLayout\postInstallLayout.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\postInstallLayout\postInstallLayout.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\products\products.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\products\products.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_0\images\alot_icon_35x16.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_1\images\alot_search_24x16.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_2\images\default_267_alot_ref_refsearch.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_3\images\default_268_alot_ref_research.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_4\images\default_281_alot_weather_widget.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_4\images\npcloud.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_4\images\pcloud.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_5\images\active_default_417_alot_ref_word.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_5\images\default_417_alot_ref_word.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_6\images\default_319_alot_ref_calculator.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Button_7\images\default_270_alot_ref_mrkt_book.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\domains.dat (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\alot_brand.png (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\spinner.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\widget_bottom.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\widget_btnclose0.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\widget_btnclose1.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\widget_btnmin0.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\widget_btnmin1.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\widget_caption.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\widget_error_bg.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\widget_error_close.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Resources\Shared\images\widget_error_icon.bmp (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\TimerManager\TimerManager.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\TimerManager\TimerManager.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\ToolbarSearch\ToolbarSearch.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Updater\Updater.xml (Adware.BHO) -> Quarantined and deleted successfully. C:\Documents and Settings\Pat Walgenbach\Application Data\alot\Updater\Updater.xml.backup (Adware.BHO) -> Quarantined and deleted successfully. C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully. C:\WINDOWS\BMe39c18df.xml (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\BMe39c18df.txt (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Documents and Settings\Al Walgenbach\Desktop\Free PC Wallpapers.lnk (Rogue.Link) -> Quarantined and deleted successfully. C:\Documents and Settings\Al Walgenbach\Desktop\Find And Fix Errors.lnk (Rogue.Link) -> Quarantined and deleted successfully. C:\Documents and Settings\Al Walgenbach\Desktop\Repair Your Registry.lnk (Rogue.Link) -> Quarantined and deleted successfully.
Adobe AIR Adobe AIR Adobe Flash Player 9 ActiveX Adobe Flash Player ActiveX Adobe Media Player Adobe Media Player Adobe Reader 8.1.1 Adobe® Photoshop® Album Starter Edition 3.0 AOLIcon ATI Control Panel ATI Display Driver Canon Camera Access Library Canon Camera Support Core Library Canon Camera Window DC_DV 5 for ZoomBrowser EX Canon Camera Window DC_DV 6 for ZoomBrowser EX Canon Camera Window MC 6 for ZoomBrowser EX Canon G.726 WMP-Decoder Canon MovieEdit Task for ZoomBrowser EX Canon RAW Image Task for ZoomBrowser EX Canon RemoteCapture Task for ZoomBrowser EX Canon Utilities EOS Utility Canon Utilities PhotoStitch Canon Utilities ZoomBrowser EX Conexant D850 56K V.9x DFVc Modem Creative MediaSource Dell Digital Jukebox Driver Dell Driver Reset Tool Dell Game Console Dell Support Center DellSupport Digital Content Portal Digital Line Detect EarthLink setup files EducateU EPSON ESPR220 Reference Guide EPSON Print CD EPSON Printer Software ESPNMotion Event Planner eyelaceos.exe GemMaster Mystic Get High Speed Internet! Google Toolbar for Internet Explorer Google Toolbar for Internet Explorer High Definition Audio Driver Package - KB835221 HijackThis 2.0.2 Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 10 (KB903157) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB888795) Hotfix for Windows XP (KB891593) Hotfix for Windows XP (KB895961) Hotfix for Windows XP (KB899337) Hotfix for Windows XP (KB899510) Hotfix for Windows XP (KB902841) Hotfix for Windows XP (KB926239) HP Memories Disc HP Photo and Imaging 1.0 - HP Photosmart Printer Series HP Photo and Imaging 2.0 - All-in-One HP Photo and Imaging 2.0 - All-in-One Drivers HP Photo and Imaging 2.0 - hp psc 1200 series hp psc 1200 series hp psc 1200 series Intel Matrix Storage Manager Intel® PRO Network Connections Drivers Intel® PROSet for Wired Connections Internet Explorer Default Page J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 7 Java 2 Runtime Environment, SE v1.4.2_03 Learn2 Player (Uninstall Only) Macromedia Flash Player Macromedia Shockwave Player Malwarebytes' Anti-Malware McAfee Uninstaller MCU Microsoft .NET Framework 1.0 Hotfix (KB887998) Microsoft .NET Framework 1.0 Hotfix (KB930494) Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Digital Image Standard 2006 Microsoft Encarta Encyclopedia Standard 2006 Microsoft Money 2006 Microsoft Office 2000 SR-1 Professional Microsoft Plus! Digital Media Edition Installer Microsoft Plus! Photo Story 2 LE Microsoft Streets & Trips 2006 Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Word 2002 Microsoft Works Microsoft Works Suite 2006 Setup Launcher Microsoft Works Suite Add-in for Microsoft Word Modem Helper mp3-2-wav converter 1.14 MSN MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MyWay Search Assistant NetWaiting NetZero NetZeroInstallers New.net Domains 8.0 build 844 OpenMG Network Walkman(MS) Help OpenMG Secure Module 3.0.03 Otto Photo Viewer V2.08 Photosmart 130,230,7150,7345,7350,7550 (Remove only) PhotoTransfer PowerDVD 5.5 Qualxserve Service Agreement QuickTime RealPlayer Basic RelevantKnowledge Revo Uninstaller 1.60 Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893066) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899589) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901190) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB905915) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB908531) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911567) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912812) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913446) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB916281) Security Update for Windows XP (KB917159) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB918899) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920214) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921398) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB921883) Security Update for Windows XP (KB922616) Security Update for Windows XP (KB922760) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925454) Security Update for Windows XP (KB925486) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928090) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB929969) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931768) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933566) Security Update for Windows XP (KB933729) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB937143) Security Update for Windows XP (KB937894) Security Update for Windows XP (KB938127) Security Update for Windows XP (KB938829) Security Update for Windows XP (KB939653) Security Update for Windows XP (KB941202) Security Update for Windows XP (KB941568) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB941644) Security Update for Windows XP (KB941693) Security Update for Windows XP (KB942615) Security Update for Windows XP (KB943055) Security Update for Windows XP (KB943460) Security Update for Windows XP (KB943485) Security Update for Windows XP (KB944338) Security Update for Windows XP (KB944533) Security Update for Windows XP (KB944653) Security Update for Windows XP (KB945553) Security Update for Windows XP (KB946026) Security Update for Windows XP (KB947864) Security Update for Windows XP (KB948590) Security Update for Windows XP (KB948881) Security Update for Windows XP (KB950749) Security Update for Windows XP (KB950759) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Sonic DLA Sonic Encoders Sonic MyDVD LE Sonic RecordNow Audio Sonic RecordNow Copy Sonic RecordNow Data Sony DVD Architect Studio 3.0 Sony Vegas Movie Studio 6.0 Sound Blaster Audigy 2 ZS The Print Shop® Ulead VideoStudio 8.0 Uninstall Startup Inspector Update for Windows Media Player 10 (KB910393) Update for Windows Media Player 10 (KB913800) Update for Windows Media Player 10 (KB926251) Update for Windows XP (KB894391) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB929338) Update for Windows XP (KB930916) Update for Windows XP (KB931836) Update for Windows XP (KB933360) Update for Windows XP (KB936357) Update for Windows XP (KB938828) Update for Windows XP (KB942763) Update for Windows XP (KB942840) Update for Windows XP (KB946627) Update Rollup 2 for Windows XP Media Center Edition 2005 Viewpoint Media Player WebCyberCoach 3.2 Dell Windows Installer 3.1 (KB893803) Windows Installer Clean Up Windows Media Encoder 9 Series Windows Media Encoder 9 Series Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 10 Windows Media Player 10 Hotfix - KB895316 Windows Media Player 10 Hotfix [See EmeraldQFE2 for more information] Windows Media Player 11 Windows Media Player 11 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB885884 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887742 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB890927 Windows XP Media Center Edition 2005 KB908246 Windows XP Media Center Edition 2005 KB925766
Is this what you need? Adobe AIR Adobe AIR Adobe Flash Player 9 ActiveX Adobe Flash Player ActiveX Adobe Media Player Adobe Media Player Adobe Reader 8.1.1 Adobe® Photoshop® Album Starter Edition 3.0 AOLIcon ATI Control Panel ATI Display Driver Canon Camera Access Library Canon Camera Support Core Library Canon Camera Window DC_DV 5 for ZoomBrowser EX Canon Camera Window DC_DV 6 for ZoomBrowser EX Canon Camera Window MC 6 for ZoomBrowser EX Canon G.726 WMP-Decoder Canon MovieEdit Task for ZoomBrowser EX Canon RAW Image Task for ZoomBrowser EX Canon RemoteCapture Task for ZoomBrowser EX Canon Utilities EOS Utility Canon Utilities PhotoStitch Canon Utilities ZoomBrowser EX Conexant D850 56K V.9x DFVc Modem Creative MediaSource Dell Digital Jukebox Driver Dell Driver Reset Tool Dell Game Console Dell Support Center DellSupport Digital Content Portal Digital Line Detect EarthLink setup files EducateU EPSON ESPR220 Reference Guide EPSON Print CD EPSON Printer Software ESPNMotion Event Planner eyelaceos.exe GemMaster Mystic Get High Speed Internet! Google Toolbar for Internet Explorer Google Toolbar for Internet Explorer High Definition Audio Driver Package - KB835221 HijackThis 2.0.2 Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 10 (KB903157) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB888795) Hotfix for Windows XP (KB891593) Hotfix for Windows XP (KB895961) Hotfix for Windows XP (KB899337) Hotfix for Windows XP (KB899510) Hotfix for Windows XP (KB902841) Hotfix for Windows XP (KB926239) HP Memories Disc HP Photo and Imaging 1.0 - HP Photosmart Printer Series HP Photo and Imaging 2.0 - All-in-One HP Photo and Imaging 2.0 - All-in-One Drivers HP Photo and Imaging 2.0 - hp psc 1200 series hp psc 1200 series hp psc 1200 series Intel Matrix Storage Manager Intel® PRO Network Connections Drivers Intel® PROSet for Wired Connections Internet Explorer Default Page J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 7 Java 2 Runtime Environment, SE v1.4.2_03 Learn2 Player (Uninstall Only) Macromedia Flash Player Macromedia Shockwave Player Malwarebytes' Anti-Malware McAfee Uninstaller MCU Microsoft .NET Framework 1.0 Hotfix (KB887998) Microsoft .NET Framework 1.0 Hotfix (KB930494) Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Digital Image Standard 2006 Microsoft Encarta Encyclopedia Standard 2006 Microsoft Money 2006 Microsoft Office 2000 SR-1 Professional Microsoft Plus! Digital Media Edition Installer Microsoft Plus! Photo Story 2 LE Microsoft Streets & Trips 2006 Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Word 2002 Microsoft Works Microsoft Works Suite 2006 Setup Launcher Microsoft Works Suite Add-in for Microsoft Word Modem Helper mp3-2-wav converter 1.14 MSN MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MyWay Search Assistant NetWaiting NetZero NetZeroInstallers New.net Domains 8.0 build 844 OpenMG Network Walkman(MS) Help OpenMG Secure Module 3.0.03 Otto Photo Viewer V2.08 Photosmart 130,230,7150,7345,7350,7550 (Remove only) PhotoTransfer PowerDVD 5.5 Qualxserve Service Agreement QuickTime RealPlayer Basic RelevantKnowledge Revo Uninstaller 1.60 Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893066) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899589) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901190) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB905915) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB908531) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911567) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912812) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913446) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB916281) Security Update for Windows XP (KB917159) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB918899) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920214) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921398) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB921883) Security Update for Windows XP (KB922616) Security Update for Windows XP (KB922760) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925454) Security Update for Windows XP (KB925486) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928090) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB929969) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931768) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933566) Security Update for Windows XP (KB933729) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB937143) Security Update for Windows XP (KB937894) Security Update for Windows XP (KB938127) Security Update for Windows XP (KB938829) Security Update for Windows XP (KB939653) Security Update for Windows XP (KB941202) Security Update for Windows XP (KB941568) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB941644) Security Update for Windows XP (KB941693) Security Update for Windows XP (KB942615) Security Update for Windows XP (KB943055) Security Update for Windows XP (KB943460) Security Update for Windows XP (KB943485) Security Update for Windows XP (KB944338) Security Update for Windows XP (KB944533) Security Update for Windows XP (KB944653) Security Update for Windows XP (KB945553) Security Update for Windows XP (KB946026) Security Update for Windows XP (KB947864) Security Update for Windows XP (KB948590) Security Update for Windows XP (KB948881) Security Update for Windows XP (KB950749) Security Update for Windows XP (KB950759) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Sonic DLA Sonic Encoders Sonic MyDVD LE Sonic RecordNow Audio Sonic RecordNow Copy Sonic RecordNow Data Sony DVD Architect Studio 3.0 Sony Vegas Movie Studio 6.0 Sound Blaster Audigy 2 ZS The Print Shop® Ulead VideoStudio 8.0 Uninstall Startup Inspector Update for Windows Media Player 10 (KB910393) Update for Windows Media Player 10 (KB913800) Update for Windows Media Player 10 (KB926251) Update for Windows XP (KB894391) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB929338) Update for Windows XP (KB930916) Update for Windows XP (KB931836) Update for Windows XP (KB933360) Update for Windows XP (KB936357) Update for Windows XP (KB938828) Update for Windows XP (KB942763) Update for Windows XP (KB942840) Update for Windows XP (KB946627) Update Rollup 2 for Windows XP Media Center Edition 2005 Viewpoint Media Player WebCyberCoach 3.2 Dell Windows Installer 3.1 (KB893803) Windows Installer Clean Up Windows Media Encoder 9 Series Windows Media Encoder 9 Series Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 10 Windows Media Player 10 Hotfix - KB895316 Windows Media Player 10 Hotfix [See EmeraldQFE2 for more information] Windows Media Player 11 Windows Media Player 11 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB885884 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887742 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB890927 Windows XP Media Center Edition 2005 KB908246 Windows XP Media Center Edition 2005 KB925766

Is this what you need?

Nope, that's the same log as the post above your one. Your very first post contains a HJT log - I want the same thing, but a fresh one and not the old one.
How about this?
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:33:12 PM, on 7/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\NewDotNet\nnrun.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\RelevantKnowledge\rlvknlg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NewDotNet\nnrun.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\system32\hphmon04.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\HPHipm11.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://portal.wowway.net/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: X1IEHook Class - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\Program Files\NetZero\qsacc\X1IEBHO.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: (no name) - {D775A8F6-2895-4880-9C5A-C9019C55E331} - C:\WINDOWS\system32\awvvv.dll (file missing)
O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - C:\Program Files\NetZero\Toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\system32\hphmon04.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB002" /M "Stylus Photo R220"
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [PhotoTransfer] C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [RelevantKnowledge] C:\Program Files\RelevantKnowledge\rlvknlg.exe -boot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Display All Images with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/228"
O8 - Extra context menu item: Display Image with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/227"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/Crusher.cab
O20 - AppInit_DLLs: C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program Files\RelevantKnowledge\rlai.dll
O20 - Winlogon Notify: awvvv - C:\WINDOWS\system32\awvvv.dll (file missing)
O20 - Winlogon Notify: nnnopnm - nnnopnm.dll (file missing)
O20 - Winlogon Notify: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlls.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NNServ - New.net, Inc. - C:\Program Files\NewDotNet\nnrun.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\system32\HPHipm11.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 0: (no name) - http://www.birds.cornell.edu/ivory/images/spotlight.jpg

–
End of file - 9586 bytes
Run HijackThis as you did to generate a log, but this time click on 'Do a system scan only'.
Place a checkmark in the boxes to the left of the following entries, by clicking on them:

R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O2 - BHO: (no name) - {D775A8F6-2895-4880-9C5A-C9019C55E331} - C:\WINDOWS\system32\awvvv.dll (file missing)

O20 - Winlogon Notify: awvvv - C:\WINDOWS\system32\awvvv.dll (file missing)
O20 - Winlogon Notify: nnnopnm - nnnopnm.dll (file missing)


CLOSE ALL OPEN WINDOWS AND BROWSERS - EXCEPT HJT and click on Fix checked

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Download gmer.zip from here and save it to your Desktop.
You will need to unzip it before you run it.

To do this: Right click on the zipped folder and from the menu that appears, click on Extract All…
In the 'Extraction Wizard' window that opens, click on Next> and in the next window that appears, click on Next> again.
In the final window, click on Finish


Double click gmer.exe to begin:
  • If you get a message about "system modification", click Yes and work through the rest of the instructions.
  • Ensure that the Rootkit Tab at the top is selected.
  • Make sure all the boxes on the right of the screen are checked, EXCEPT for ‘Show All’.
  • Click the Scan button on the right.
  • When the scan has completed, (you'll have time for a snack and a cuppa!), click the Copy button underneath - this will save the report to your Clipboard.
  • Paste it into Notepad (Start > All Programs > Accessories > Notepad) and save it somewhere convenient.
  • Click the >>> Tab at the top and select the Autostart Tab.
  • Click the Scan button on the right - this one should only take seconds to complete.
  • Save the log as before.
Copy and paste both reports into your next reply - you may need to post them separately.
The Preview option may show the whole logs being posted, but they sometimes get cut down when the actual post is made, so check the post once it is completed.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Go here and click the Kaspersky Online Scanner button - I.E. is required for this scan.
  • Read the Requirements and limitations before you click Accept.
  • Allow the ActiveX download if necessary.
  • Once the database has downloaded click Next.
  • Click Scan Settings and check the "Scan using the following antivirus database" is set to extended, not standard, and then click OK.
  • Click on "My Computer" and then put the kettle on!
  • When the scan has completed, click Save Report As…
  • Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
  • Click Save - by default the file will be saved to your Desktop, but you can change this if you wish.
Copy and paste the report into your next reply along with a fresh HJT log, run in Normal Mode, and a description of how your PC is behaving.

Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.

You'll probably be better posting this last part as a separate reply given the possible length of the GMER log.
Here is my Gmer 1 file and I will repost with Gmer 2. When I downloaded Kaspersky after the files were downloaded, I did not get an option of "next". When i clicked on settings, there was not option to select Scan sing the following antiviurus database, nor an option for extended or standard. Should I just run the scan anyhow? thanks so much! and you get a cuppa yourself!
GMER 1.0.14.14536 - http://www.gmer.net
Rootkit scan 2008-07-24 17:25:31
Windows 5.1.2600 Service Pack 2


—- User code sections - GMER 1.0.14 —-

.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 10030650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 1002D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 1002F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] WS2_32.dll!connect 71AB406A 5 Bytes JMP 1002EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] WS2_32.dll!send 71AB428A 5 Bytes JMP 1002F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 10030AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] WS2_32.dll!recv 71AB615A 5 Bytes JMP 100301A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 1002FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 1002F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 1002EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 100304C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe[152] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 10030840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 00BA0650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 00B9D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 00B9F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] WS2_32.dll!connect 71AB406A 5 Bytes JMP 00B9EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] WS2_32.dll!send 71AB428A 5 Bytes JMP 00B9F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 00BA0AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] WS2_32.dll!recv 71AB615A 5 Bytes JMP 00BA01A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 00B9FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 00B9F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 00B9EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 00BA04C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\PROGRA~1\mcafee.com\agent\mcagent.exe[184] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 00BA0840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 00D00650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 00CFD600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 00CFF4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] WS2_32.dll!connect 71AB406A 5 Bytes JMP 00CFEC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] WS2_32.dll!send 71AB428A 5 Bytes JMP 00CFF7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 00D00AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] WS2_32.dll!recv 71AB615A 5 Bytes JMP 00D001A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 00CFFD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 00CFF100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 00CFEF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 00D004C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\dla\tfswctrl.exe[192] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 00D00840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 01050650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 0104D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 0104F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] WS2_32.dll!connect 71AB406A 5 Bytes JMP 0104EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] WS2_32.dll!send 71AB428A 5 Bytes JMP 0104F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 01050AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] WS2_32.dll!recv 71AB615A 5 Bytes JMP 010501A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 0104FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 0104F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 0104EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 010504C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\hphmon04.exe[204] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 01050840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 00BF0650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 00BED600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 00BEF4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] WS2_32.dll!connect 71AB406A 5 Bytes JMP 00BEEC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] WS2_32.dll!send 71AB428A 5 Bytes JMP 00BEF7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 00BF0AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] WS2_32.dll!recv 71AB615A 5 Bytes JMP 00BF01A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 00BEFD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 00BEF100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 00BEEF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 00BF04C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe[208] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 00BF0840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 011A0650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 0119D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 0119F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] WS2_32.dll!connect 71AB406A 5 Bytes JMP 0119EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] WS2_32.dll!send 71AB428A 5 Bytes JMP 0119F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 011A0AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] WS2_32.dll!recv 71AB615A 5 Bytes JMP 011A01A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 0119FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 0119F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 0119EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 011A04C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Microsoft IntelliPoint\point32.exe[320] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 011A0840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 3 Bytes JMP 010C0650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] kernel32.dll!GetQueuedCompletionStatus + 4 7C80A721 1 Byte [ 84 ]
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 010BD600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 010BF4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] WS2_32.dll!connect 71AB406A 5 Bytes JMP 010BEC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] WS2_32.dll!send 71AB428A 5 Bytes JMP 010BF7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 010C0AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] WS2_32.dll!recv 71AB615A 5 Bytes JMP 010C01A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 010BFD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 010BF100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 010BEF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 010C04C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe[420] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 010C0840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 04750650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 0474D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 0474F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] WS2_32.dll!connect 71AB406A 5 Bytes JMP 0474EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] WS2_32.dll!send 71AB428A 5 Bytes JMP 0474F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 04750AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] WS2_32.dll!recv 71AB615A 5 Bytes JMP 047501A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 0474FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 0474F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 0474EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 047504C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Dell Support Center\bin\sprtcmd.exe[456] WININET.DLL!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 04750840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 10030650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 1002D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 1002F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] WS2_32.dll!connect 71AB406A 5 Bytes JMP 1002EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] WS2_32.dll!send 71AB428A 5 Bytes JMP 1002F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 10030AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] WS2_32.dll!recv 71AB615A 5 Bytes JMP 100301A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 1002FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 1002F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 1002EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 100304C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Messenger\msmsgs.exe[516] WININET.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 10030840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 01220650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 0121D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 0121F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] WS2_32.dll!connect 71AB406A 5 Bytes JMP 0121EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] WS2_32.dll!send 71AB428A 5 Bytes JMP 0121F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 01220AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] WS2_32.dll!recv 71AB615A 5 Bytes JMP 012201A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 0121FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 0121F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 0121EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 012204C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[560] WININET.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 01220840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] kernel32.dll!ReadFile 7C80180E 7 Bytes JMP 10021B10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10021A00 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] kernel32.dll!CloseHandle 7C809B47 5 Bytes JMP 10021AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 10030650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] kernel32.dll!CreateFileW 7C810760 5 Bytes JMP 10021A60 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] kernel32.dll!WriteFile 7C810D87 7 Bytes JMP 10021B60 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 1002D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 1002F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] WININET.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 10030840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] WS2_32.dll!connect 71AB406A 5 Bytes JMP 1002EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] WS2_32.dll!send 71AB428A 5 Bytes JMP 1002F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 10030AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] WS2_32.dll!recv 71AB615A 5 Bytes JMP 100301A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 1002FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 1002F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 1002EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Internet Explorer\iexplore.exe[872] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 100304C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 10030650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 1002D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 1002F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] WININET.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 10030840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] WS2_32.dll!connect 71AB406A 5 Bytes JMP 1002EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] WS2_32.dll!send 71AB428A 5 Bytes JMP 1002F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 10030AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] WS2_32.dll!recv 71AB615A 5 Bytes JMP 100301A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 1002FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 1002F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 1002EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\Explorer.EXE[1880] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 100304C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 10030650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 1002D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 1002F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] WS2_32.dll!connect 71AB406A 5 Bytes JMP 1002EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] WS2_32.dll!send 71AB428A 5 Bytes JMP 1002F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 10030AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] WS2_32.dll!recv 71AB615A 5 Bytes JMP 100301A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 1002FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 1002F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 1002EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 100304C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\WINDOWS\system32\wuauclt.exe[1980] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 10030840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 00B70650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 00B6D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 00B6F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] WS2_32.dll!connect 71AB406A 5 Bytes JMP 00B6EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] WS2_32.dll!send 71AB428A 5 Bytes JMP 00B6F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 00B70AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] WS2_32.dll!recv 71AB615A 5 Bytes JMP 00B701A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 00B6FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 00B6F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 00B6EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 00B704C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe[2028] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 00B70840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 01010650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 0100D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 0100F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] WS2_32.dll!connect 71AB406A 5 Bytes JMP 0100EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] WS2_32.dll!send 71AB428A 5 Bytes JMP 0100F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 01010AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] WS2_32.dll!recv 71AB615A 5 Bytes JMP 010101A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 0100FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 0100F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 0100EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 010104C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe[2036] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 01010840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 00AF0650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 00AED600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 00AEF4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] WS2_32.dll!connect 71AB406A 5 Bytes JMP 00AEEC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] WS2_32.dll!send 71AB428A 5 Bytes JMP 00AEF7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 00AF0AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] WS2_32.dll!recv 71AB615A 5 Bytes JMP 00AF01A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 00AEFD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 00AEF100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 00AEEF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 00AF04C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE[2044] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 00AF0840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 10030650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 1002D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 1002F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] WININET.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 10030840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] WS2_32.dll!connect 71AB406A 5 Bytes JMP 1002EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] WS2_32.dll!send 71AB428A 5 Bytes JMP 1002F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 10030AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] WS2_32.dll!recv 71AB615A 5 Bytes JMP 100301A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 1002FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 1002F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 1002EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe[2908] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 100304C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] kernel32.dll!GetQueuedCompletionStatus 7C80A71D 5 Bytes JMP 10030650 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] Secur32.dll!EncryptMessage 77FEA5CF 5 Bytes JMP 1002D600 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] Secur32.dll!DecryptMessage 77FEA61E 5 Bytes JMP 1002F4F0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] WS2_32.dll!connect 71AB406A 5 Bytes JMP 1002EC10 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] WS2_32.dll!send 71AB428A 5 Bytes JMP 1002F7B0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] WS2_32.dll!WSARecv 71AB4318 5 Bytes JMP 10030AF0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] WS2_32.dll!recv 71AB615A 5 Bytes JMP 100301A0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] WS2_32.dll!WSASend 71AB6233 5 Bytes JMP 1002FD70 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] WS2_32.dll!closesocket 71AB9639 5 Bytes JMP 1002F100 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] WS2_32.dll!WSAConnect 71AC0C69 5 Bytes JMP 1002EF80 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] WS2_32.dll!WSAGetOverlappedResult 71AC0D03 5 Bytes JMP 100304C0 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)
.text C:\Documents and Settings\Pat Walgenbach\Desktop\gmer\gmer.exe[3636] wininet.dll!UnlockUrlCacheEntryFile 771D7D74 5 Bytes JMP 10030840 C:\Program Files\RelevantKnowledge\rlls.dll (RelevantKnowledge/RelevantKnowledge)

—- Devices - GMER 1.0.14 —-

Device \FileSystem\Fastfat \Fat AED83C8A
Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Cdfs \Cdfs tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)

—- EOF - GMER 1.0.14 —-
utostart scan 2008-07-24 17:29:11 Windows 5.1.2600 Service Pack 2 HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems@Windows = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon@Userinit = C:\WINDOWS\system32\userinit.exe, HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ >>> RelevantKnowledge@DLLName = C:\Program Files\RelevantKnowledge\rlls.dll WgaLogon@DLLName = WgaLogon.dll HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows@AppInit_DLLs = C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program Files\RelevantKnowledge\rlai.dll HKLM\SYSTEM\CurrentControlSet\Services\ >>> Ati HotKey Poller@ = %SystemRoot%\system32\Ati2evxx.exe CCALib8@ = C:\Program Files\Canon\CAL\CALMAIN.exe Creative Service for CDROM Access@ = C:\WINDOWS\system32\CTsvcCDA.EXE ehRecvr@ = C:\WINDOWS\eHome\ehRecvr.exe ehSched@ = C:\WINDOWS\eHome\ehSched.exe Fax@ = %systemroot%\system32\fxssvc.exe IAANTMon@ = C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe McDetect.exe@ = c:\program files\mcafee.com\agent\mcdetect.exe McrdSvc@ = C:\WINDOWS\ehome\mcrdsvc.exe McTskshd.exe@ = c:\PROGRA~1\mcafee.com\agent\mctskshd.exe NNServ@ = "C:\Program Files\NewDotNet\nnrun.exe" "C:\Program Files\NewDotNet\nncore.dll" ServiceStart sprtsvc_dellsupportcenter@ = C:\Program Files\Dell Support Center\bin\sprtsvc.exe /service /p dellsupportcenter /*file not found*/ UleadBurningHelper@ = C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe HKLM\Software\Microsoft\Windows\CurrentVersion\Run >>> @IAAnotifC:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe = C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe @CTSysVolC:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r /*file not found*/ = C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r /*file not found*/ @CTDVDDET"C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE" = "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE" @DVDLauncher"C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" = "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" @dlaC:\WINDOWS\system32\dla\tfswctrl.exe = C:\WINDOWS\system32\dla\tfswctrl.exe @MCAgentExec:\PROGRA~1\mcafee.com\agent\mcagent.exe = c:\PROGRA~1\mcafee.com\agent\mcagent.exe @HPDJ Taskbar UtilityC:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe = C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe @HPHmon04C:\WINDOWS\system32\hphmon04.exe = C:\WINDOWS\system32\hphmon04.exe @EPSON Stylus Photo R220 SeriesC:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB002" /M "Stylus Photo R220" = C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB002" /M "Stylus Photo R220" @MCUpdateExec:\PROGRA~1\mcafee.com\agent\mcupdate.exe = c:\PROGRA~1\mcafee.com\agent\mcupdate.exe @MSKDetectorExeC:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall /*file not found*/ = C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall /*file not found*/ @IntelliPoint"C:\Program Files\Microsoft IntelliPoint\point32.exe" = "C:\Program Files\Microsoft IntelliPoint\point32.exe" @SunJavaUpdateSchedC:\Program Files\Java\jre1.5.0_07\bin\jusched.exe = C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe @dscactivate"C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" = "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" @PhotoTransferC:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe = C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe @DellSupportCenter"C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter = "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter @RelevantKnowledgeC:\Program Files\RelevantKnowledge\rlvknlg.exe -boot /*file not found*/ = C:\Program Files\RelevantKnowledge\rlvknlg.exe -boot /*file not found*/
And last but not leasty my HJT log. I think the pc is running a little faster but my husband does think it is any faster. Very very slow when we boot up each day.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:59:17 PM, on 7/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\RelevantKnowledge\rlvknlg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\system32\hphmon04.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\NewDotNet\nnrun.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\HPHipm11.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\NewDotNet\nnrun.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://portal.wowway.net/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: X1IEHook Class - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\Program Files\NetZero\qsacc\X1IEBHO.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - C:\Program Files\NetZero\Toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\system32\hphmon04.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB002" /M "Stylus Photo R220"
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [PhotoTransfer] C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [RelevantKnowledge] C:\Program Files\RelevantKnowledge\rlvknlg.exe -boot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Display All Images with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/228"
O8 - Extra context menu item: Display Image with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/227"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/Crusher.cab
O20 - AppInit_DLLs: C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program Files\RelevantKnowledge\rlai.dll
O20 - Winlogon Notify: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlls.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NNServ - New.net, Inc. - C:\Program Files\NewDotNet\nnrun.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\system32\HPHipm11.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 0: (no name) - http://www.birds.cornell.edu/ivory/images/spotlight.jpg

–
End of file - 9199 bytes
And last but not leasty my HJT log. I think the pc is running a little faster but my husband does think it is any faster. Very very slow when we boot up each day.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:59:17 PM, on 7/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\RelevantKnowledge\rlvknlg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\system32\hphmon04.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\NewDotNet\nnrun.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\HPHipm11.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\NewDotNet\nnrun.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://portal.wowway.net/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: X1IEHook Class - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\Program Files\NetZero\qsacc\X1IEBHO.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - C:\Program Files\NetZero\Toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\system32\hphmon04.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB002" /M "Stylus Photo R220"
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [PhotoTransfer] C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [RelevantKnowledge] C:\Program Files\RelevantKnowledge\rlvknlg.exe -boot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Display All Images with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/228"
O8 - Extra context menu item: Display Image with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/227"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/Crusher.cab
O20 - AppInit_DLLs: C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program Files\RelevantKnowledge\rlai.dll
O20 - Winlogon Notify: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlls.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NNServ - New.net, Inc. - C:\Program Files\NewDotNet\nnrun.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\system32\HPHipm11.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 0: (no name) - http://www.birds.cornell.edu/ivory/images/spotlight.jpg

–
End of file - 9199 bytes
And last but not leasty my HJT log. I think the pc is running a little faster but my husband does think it is any faster. Very very slow when we boot up each day.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:59:17 PM, on 7/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\RelevantKnowledge\rlvknlg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\system32\hphmon04.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\NewDotNet\nnrun.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\HPHipm11.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\NewDotNet\nnrun.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://portal.wowway.net/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: X1IEHook Class - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\Program Files\NetZero\qsacc\X1IEBHO.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - C:\Program Files\NetZero\Toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\system32\hphmon04.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIA.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB002" /M "Stylus Photo R220"
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [PhotoTransfer] C:\Program Files\Generalplus\PhotoTransfer\PhotoTransfer.exe
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [RelevantKnowledge] C:\Program Files\RelevantKnowledge\rlvknlg.exe -boot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Display All Images with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/228"
O8 - Extra context menu item: Display Image with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/227"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/Crusher.cab
O20 - AppInit_DLLs: C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program,Files\RelevantKnowledge\rlai.dll,C:\Program Files\RelevantKnowledge\rlai.dll
O20 - Winlogon Notify: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlls.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NNServ - New.net, Inc. - C:\Program Files\NewDotNet\nnrun.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\system32\HPHipm11.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 0: (no name) - http://www.birds.cornell.edu/ivory/images/spotlight.jpg

–
End of file - 9199 bytes

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI