Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

iexplorer problems... HIJackThis Log


  • This topic is locked This topic is locked

#1
Kitten72003

Kitten72003

    Member

  • Member
  • PipPip
  • 11 posts
After running all the virus programs and such everything runs better for awhile but a few days later its back to being tempremental. Internet Explorer wont open or opens extremely slowly or freezes. Also recently my Windows Media Player didnt work. Im really not sure whats wrong, if anyone could help me id greatly appreciate it. Thank you

Logfile of HijackThis v1.99.1
Scan saved at 7:49:39 PM, on 3/14/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Megan A Bonifacino\Desktop\HijackThis.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://one.drexel.edu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: (no name) - {0F28960B-F39A-256B-14E5-8B055568B8C2} - C:\WINDOWS\System32\vjrvcpfo.dll (file missing)
O2 - BHO: (no name) - {29C11DA6-626E-77BE-3DAF-1B133369242C} - C:\WINDOWS\System32\zpuaebdu.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C959489-BED4-E525-8CAA-CDC203EDD8C4} - C:\WINDOWS\System32\nfbycggk.dll (file missing)
O2 - BHO: (no name) - {B4159D06-FF07-A6A0-0D4A-82E55353801F} - C:\WINDOWS\System32\kuglbtra.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174><] c:\WINDOWS\System32\ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A></td>
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKCU\..\Run: [<meta name="description" content="beneditutti.com is under construction. This page is courtesy of directNIC.c] c:\WINDOWS\System32\<meta name="description" content="beneditutti.com is under construction. This page is courtesy of directNIC.com">
O4 - HKCU\..\Run: [<BODY TOPMARGIN="0" LEFTMARGIN="0" MARGINHEIGHT="0" MARGINWIDTH="0" BGCOLOR="#FFFFFF" TEXT="#000000" vLink=#000] c:\WINDOWS\System32\<BODY TOPMARGIN="0" LEFTMARGIN="0" MARGINHEIGHT="0" MARGINWIDTH="0" BGCOLOR="#FFFFFF" TEXT="#000000" vLink=#0000ff>
O4 - HKCU\..\Run: [ <td background="http://parked.direct.../top_bg.gif"><a href="http://directnic.com"><img src="http://parked.direct...mages/dnic.gif" width="372" height="41" border="0"></a><] c:\WINDOWS\System32\ <td background="http://parked.direct.../top_bg.gif"><a href="http://directnic.com"><img src="http://parked.direct...mages/dnic.gif" width="372" height="41" border="0"></a></td>
O4 - HKCU\..\Run: [ <td align="right" background="http://parked.direct...ges/top_bg.gif" class="head">beneditutti.com is under construction.<] c:\WINDOWS\System32\ <td align="right" background="http://parked.direct...ges/top_bg.gif" class="head">beneditutti.com is under construction.</td>
O4 - HKCU\..\Run: [ <td align="left" background="http://parked.direct...ges/btm_bg.gif" class="wtext"><img src="http://parked.direct...ges/btm_lt.gif" width="24" height="25" align="absmiddle"><] c:\WINDOWS\System32\ <td align="left" background="http://parked.direct...ges/btm_bg.gif" class="wtext"><img src="http://parked.direct...ges/btm_lt.gif" width="24" height="25" align="absmiddle"></td>
O4 - HKCU\..\Run: [ <td align="center" class=search>search the web: <input type=text name="Keywords" value="" class="textfie] c:\WINDOWS\System32\ <td align="center" class=search>search the web: <input type=text name="Keywords" value="" class="textfield">
O4 - HKCU\..\Run: [ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Computing</a><] c:\WINDOWS\System32\ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Computing</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct....com&cat=1">Web Hosting</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct....com&cat=1">Web Hosting</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct....com&cat=1">Web Design</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct....com&cat=1">Web Design</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Computer</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...omputer</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...cat=1">Computer Hardware</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...cat=1">Computer Hardware</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Software</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...oftware</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...cat=1">Computer Game</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...cat=1">Computer Game</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Travel</a><] c:\WINDOWS\System32\ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Travel</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Adventure Travel</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...at=1">Adventure Travel</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Vacation</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...acation</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...&cat=1">Airline Ticket</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...&cat=1">Airline Ticket</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...t=1">Hotel</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...">Hotel</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...=1">Travel</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...>Travel</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Map</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...ap</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Hobbies</a><] c:\WINDOWS\System32\ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Hobbies</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...1">Fitness</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...Fitness</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...t=1">Craft</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...">Craft</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...1">Cooking</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...Cooking</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...>Gardening</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...rdening</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Decorating</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Decorating</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...ports</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...ts</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Entertainment</a><] c:\WINDOWS\System32\ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Entertainment</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Gambling</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...ambling</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...t=1">Movie</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...">Movie</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...t=1">Music</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...">Music</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Game</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Game</a><br>
O4 - HKCU\..\Run: [ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Finance</a><] c:\WINDOWS\System32\ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Finance</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Loan</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Loan</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...>Investing</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...vesting</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...>Insurance</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...surance</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...m&cat=1">Credit Card</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...m&cat=1">Credit Card</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...t=1">Stock</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...">Stock</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Real Estate</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Real Estate</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Gifts</a><] c:\WINDOWS\System32\ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Gifts</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Basket</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Basket</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Certificate</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Certificate</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...=1">Flower</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...>Flower</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...&cat=1">Wedding Gift</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...&cat=1">Wedding Gift</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Wine</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Wine</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...welry</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...ry</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Shopping</a><] c:\WINDOWS\System32\ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Shopping</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Gift</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Gift</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...cat=1">Car</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...=1">Car</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Book</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Book</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...lectronics</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...tronics</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Toy</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...oy</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Home</a><] c:\WINDOWS\System32\ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Home</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Loan</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Loan</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Improvement</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Improvement</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Buying</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Buying</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...cat=1">Interior Design</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...cat=1">Interior Design</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Pets</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Pets</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...ening</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...ng</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Health</a><] c:\WINDOWS\System32\ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Health</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Life Insurance</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Life Insurance</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...m&cat=1">Health Insurance</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...m&cat=1">Health Insurance</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...m&cat=1">Weight Loss</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...m&cat=1">Weight Loss</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...>Nutrition</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...trition</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...1">Fitness</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...Fitness</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...m&cat=1">Womens Health</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...m&cat=1">Womens Health</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174><] c:\WINDOWS\System32\ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A></td>
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: D-Link AirPlus G Configuration Utility.lnk = ?
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-bet...all/xscan60.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.web...otoUploader.CAB
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - https://www.stopzill...ller/dwnldr.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: mycxbinmbgmm (MsUpdate6) - Unknown owner - C:\WINDOWS\System32\msupd6.exe (file missing)
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
  • 0

Advertisements


#2
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
Hi Kitten72003,

I'm working on your log now. Give me a few minutes and I'll have a response for you. :tazz:
  • 0

#3
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
Hi Kitten72003,

Eeeeee-yikes! That's an interesting log you got there. ;)

First, go here and reinstall Windows Media Player:
http://www.microsoft...&displaylang=en

That should take care of the Media Player problem.

Next, go to Add/Remove Programs and uninstall Viewpont Manager. It's not needed. :tazz:

Download this file and save it to your desktop:
http://osc.geekstogo...kitten72003.bat

Once downloaded, double click it. Notepad will open with a log in it. Copy the contents of that log and paste it into this thread.

NOTE TO OTHERS READING THIS THREAD - the .bat file in the link posted above was designed specifically for Kitten72003. Please do not download it and try it on your computer. It will not work. ;)
  • 0

#4
Kitten72003

Kitten72003

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
the bat. file didnt work for some reason... when i double clicked on it a black type screen appeared and i recieved this error ::)

Registry Error
Cannot export C:\Documents & Settings\Megan A Bonifacino\Desktop\backups\HKCM.text: Error opening file.
There may be a dsk or file system error.

SO i clicked Ok bc that was the only option and i got This Error ;)

Registry Error
Cannot export C:\Documents & Settings\Megan A Bonifacino\Desktop\backups\HKCO.text: Error opening file.
There may be a dsk or file system error.

So i clicked OK again and notepad opened but it was blank and it had an error too ;)

Notepad
System could not find the path specified.

Im so confused.... :tazz:
  • 0

#5
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
Grrr...grumble....grumble.....grumble :tazz: :mad:

That was my mistake. Please download this file:
http://osc.geekstogo...kitten72003.zip

Save it to your desktop and extract the file to your desktop (replacing the previous one you downloaded). Then double click it. Notepad will open with a log in it. Copy the contents of that log and paste it into this thread.

NOTE TO OTHERS READING THIS THREAD - the .bat file in the link posted above was designed specifically for Kitten72003. Please do not download it and try it on your computer. It will not work.
  • 0

#6
Kitten72003

Kitten72003

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
I got all the same angry errors as before
  • 0

#7
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
This just isn't my day....can you post a new hijackthis log, please???
  • 0

#8
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
Forget that last request Kitten72003. I got it now (haven't we heard that before?).

Please download this file:
http://osc.geekstogo...kitten72003.zip

Save it to your desktop and extract kitten72003.bat to your desktop (replacing the previous ones you downloaded). Then double click it. Notepad will open with a log in it. Copy the contents of that log and paste it into this thread.

NOTE TO OTHERS READING THIS THREAD - the .bat file in the link posted above was designed specifically for Kitten72003. Please do not download it and try it on your computer. It will not work.

Edited by OSC, 15 March 2005 - 08:05 PM.

  • 0

#9
Kitten72003

Kitten72003

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
yea it worked :tazz:


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"<meta name=\"description\" content=\"beneditutti.com is under construction. This page is courtesy of directNIC.c"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,3c,00,6d,00,65,00,74,00,61,00,20,\
00,6e,00,61,00,6d,00,65,00,3d,00,22,00,64,00,65,00,73,00,63,00,72,00,69,00,\
70,00,74,00,69,00,6f,00,6e,00,22,00,20,00,63,00,6f,00,6e,00,74,00,65,00,6e,\
00,74,00,3d,00,22,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,\
74,00,69,00,2e,00,63,00,6f,00,6d,00,20,00,69,00,73,00,20,00,75,00,6e,00,64,\
00,65,00,72,00,20,00,63,00,6f,00,6e,00,73,00,74,00,72,00,75,00,63,00,74,00,\
69,00,6f,00,6e,00,2e,00,20,00,20,00,54,00,68,00,69,00,73,00,20,00,70,00,61,\
00,67,00,65,00,20,00,69,00,73,00,20,00,63,00,6f,00,75,00,72,00,74,00,65,00,\
73,00,79,00,20,00,6f,00,66,00,20,00,64,00,69,00,72,00,65,00,63,00,74,00,4e,\
00,49,00,43,00,2e,00,63,00,6f,00,6d,00,22,00,3e,00,00,00
"<BODY TOPMARGIN=\"0\" LEFTMARGIN=\"0\" MARGINHEIGHT=\"0\" MARGINWIDTH=\"0\" BGCOLOR=\"#FFFFFF\" TEXT=\"#000000\" vLink=#000"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,3c,00,42,00,4f,00,44,00,59,00,20,\
00,54,00,4f,00,50,00,4d,00,41,00,52,00,47,00,49,00,4e,00,3d,00,22,00,30,00,\
22,00,20,00,4c,00,45,00,46,00,54,00,4d,00,41,00,52,00,47,00,49,00,4e,00,3d,\
00,22,00,30,00,22,00,20,00,4d,00,41,00,52,00,47,00,49,00,4e,00,48,00,45,00,\
49,00,47,00,48,00,54,00,3d,00,22,00,30,00,22,00,20,00,4d,00,41,00,52,00,47,\
00,49,00,4e,00,57,00,49,00,44,00,54,00,48,00,3d,00,22,00,30,00,22,00,20,00,\
42,00,47,00,43,00,4f,00,4c,00,4f,00,52,00,3d,00,22,00,23,00,46,00,46,00,46,\
00,46,00,46,00,46,00,22,00,20,00,54,00,45,00,58,00,54,00,3d,00,22,00,23,00,\
30,00,30,00,30,00,30,00,30,00,30,00,22,00,20,00,76,00,4c,00,69,00,6e,00,6b,\
00,3d,00,23,00,30,00,30,00,30,00,30,00,66,00,66,00,3e,00,00,00
" <td background=\"http://parked.directnic.com/images/top_bg.gif\"><a href=\"http://directnic.com\"><img src=\"http://parked.directnic.com/images/dnic.gif\" width=\"372\" height=\"41\" border=\"0\"></a><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,3c,00,74,\
00,64,00,20,00,62,00,61,00,63,00,6b,00,67,00,72,00,6f,00,75,00,6e,00,64,00,\
3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,72,00,6b,\
00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,00,\
2e,00,63,00,6f,00,6d,00,2f,00,69,00,6d,00,61,00,67,00,65,00,73,00,2f,00,74,\
00,6f,00,70,00,5f,00,62,00,67,00,2e,00,67,00,69,00,66,00,22,00,3e,00,3c,00,\
61,00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,\
00,2f,00,2f,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,00,2e,00,\
63,00,6f,00,6d,00,22,00,3e,00,3c,00,69,00,6d,00,67,00,20,00,73,00,72,00,63,\
00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,72,00,\
6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,\
00,2e,00,63,00,6f,00,6d,00,2f,00,69,00,6d,00,61,00,67,00,65,00,73,00,2f,00,\
64,00,6e,00,69,00,63,00,2e,00,67,00,69,00,66,00,22,00,20,00,77,00,69,00,64,\
00,74,00,68,00,3d,00,22,00,33,00,37,00,32,00,22,00,20,00,68,00,65,00,69,00,\
67,00,68,00,74,00,3d,00,22,00,34,00,31,00,22,00,20,00,62,00,6f,00,72,00,64,\
00,65,00,72,00,3d,00,22,00,30,00,22,00,3e,00,3c,00,2f,00,61,00,3e,00,3c,00,\
2f,00,74,00,64,00,3e,00,00,00
" <td align=\"right\" background=\"http://parked.directnic.com/images/top_bg.gif\" class=\"head\">beneditutti.com is under construction.<"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,3c,00,74,\
00,64,00,20,00,61,00,6c,00,69,00,67,00,6e,00,3d,00,22,00,72,00,69,00,67,00,\
68,00,74,00,22,00,20,00,62,00,61,00,63,00,6b,00,67,00,72,00,6f,00,75,00,6e,\
00,64,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,\
72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,\
00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,69,00,6d,00,61,00,67,00,65,00,73,00,\
2f,00,74,00,6f,00,70,00,5f,00,62,00,67,00,2e,00,67,00,69,00,66,00,22,00,20,\
00,63,00,6c,00,61,00,73,00,73,00,3d,00,22,00,68,00,65,00,61,00,64,00,22,00,\
3e,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,\
00,63,00,6f,00,6d,00,20,00,69,00,73,00,20,00,75,00,6e,00,64,00,65,00,72,00,\
20,00,63,00,6f,00,6e,00,73,00,74,00,72,00,75,00,63,00,74,00,69,00,6f,00,6e,\
00,2e,00,3c,00,2f,00,74,00,64,00,3e,00,00,00
" <td align=\"left\" background=\"http://parked.directnic.com/images/btm_bg.gif\" class=\"wtext\"><img src=\"http://parked.directnic.com/images/btm_lt.gif\" width=\"24\" height=\"25\" align=\"absmiddle\"><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,3c,00,74,\
00,64,00,20,00,61,00,6c,00,69,00,67,00,6e,00,3d,00,22,00,6c,00,65,00,66,00,\
74,00,22,00,20,00,62,00,61,00,63,00,6b,00,67,00,72,00,6f,00,75,00,6e,00,64,\
00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,72,00,\
6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,\
00,2e,00,63,00,6f,00,6d,00,2f,00,69,00,6d,00,61,00,67,00,65,00,73,00,2f,00,\
62,00,74,00,6d,00,5f,00,62,00,67,00,2e,00,67,00,69,00,66,00,22,00,20,00,63,\
00,6c,00,61,00,73,00,73,00,3d,00,22,00,77,00,74,00,65,00,78,00,74,00,22,00,\
3e,00,3c,00,69,00,6d,00,67,00,20,00,73,00,72,00,63,00,3d,00,22,00,68,00,74,\
00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,\
64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,\
00,2f,00,69,00,6d,00,61,00,67,00,65,00,73,00,2f,00,62,00,74,00,6d,00,5f,00,\
6c,00,74,00,2e,00,67,00,69,00,66,00,22,00,20,00,77,00,69,00,64,00,74,00,68,\
00,3d,00,22,00,32,00,34,00,22,00,20,00,68,00,65,00,69,00,67,00,68,00,74,00,\
3d,00,22,00,32,00,35,00,22,00,20,00,61,00,6c,00,69,00,67,00,6e,00,3d,00,22,\
00,61,00,62,00,73,00,6d,00,69,00,64,00,64,00,6c,00,65,00,22,00,3e,00,3c,00,\
2f,00,74,00,64,00,3e,00,00,00
" <td align=\"center\" class=search>search the web: <input type=text name=\"Keywords\" value=\"\" class=\"textfie"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,3c,00,74,00,64,00,20,00,61,00,6c,00,69,00,67,00,6e,00,3d,00,22,00,63,00,\
65,00,6e,00,74,00,65,00,72,00,22,00,20,00,63,00,6c,00,61,00,73,00,73,00,3d,\
00,73,00,65,00,61,00,72,00,63,00,68,00,3e,00,73,00,65,00,61,00,72,00,63,00,\
68,00,20,00,74,00,68,00,65,00,20,00,77,00,65,00,62,00,3a,00,20,00,20,00,20,\
00,3c,00,69,00,6e,00,70,00,75,00,74,00,20,00,74,00,79,00,70,00,65,00,3d,00,\
74,00,65,00,78,00,74,00,20,00,6e,00,61,00,6d,00,65,00,3d,00,22,00,4b,00,65,\
00,79,00,77,00,6f,00,72,00,64,00,73,00,22,00,20,00,76,00,61,00,6c,00,75,00,\
65,00,3d,00,22,00,22,00,20,00,63,00,6c,00,61,00,73,00,73,00,3d,00,22,00,74,\
00,65,00,78,00,74,00,66,00,69,00,65,00,6c,00,64,00,22,00,3e,00,00,00
" <td bgcolor=\"#333333\" valign=top height=\"16\"><a href=\"http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&cat=1\" class=\"wheader\">Computing</a><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,3c,00,74,00,\
64,00,20,00,62,00,67,00,63,00,6f,00,6c,00,6f,00,72,00,3d,00,22,00,23,00,33,\
00,33,00,33,00,33,00,33,00,33,00,22,00,20,00,76,00,61,00,6c,00,69,00,67,00,\
6e,00,3d,00,74,00,6f,00,70,00,20,00,68,00,65,00,69,00,67,00,68,00,74,00,3d,\
00,22,00,31,00,36,00,22,00,3e,00,3c,00,61,00,20,00,68,00,72,00,65,00,66,00,\
3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,72,00,6b,\
00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,00,\
2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,6c,00,74,00,2e,00,70,\
00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,00,64,00,73,00,3d,00,\
63,00,6f,00,6d,00,70,00,75,00,74,00,69,00,6e,00,67,00,26,00,68,00,6f,00,73,\
00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,\
69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,20,\
00,63,00,6c,00,61,00,73,00,73,00,3d,00,22,00,77,00,68,00,65,00,61,00,64,00,\
65,00,72,00,22,00,3e,00,43,00,6f,00,6d,00,70,00,75,00,74,00,69,00,6e,00,67,\
00,3c,00,2f,00,61,00,3e,00,3c,00,2f,00,74,00,64,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=web+hosting&host=beneditutti.com&cat=1\">Web Hosting</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,a0,00,a0,00,\
3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,00,20,00,68,\
00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,\
70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,\
00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,\
6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,\
00,64,00,73,00,3d,00,77,00,65,00,62,00,2b,00,68,00,6f,00,73,00,74,00,69,00,\
6e,00,67,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,\
00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,\
61,00,74,00,3d,00,31,00,22,00,3e,00,57,00,65,00,62,00,20,00,48,00,6f,00,73,\
00,74,00,69,00,6e,00,67,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,\
00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=web+design&host=beneditutti.com&cat=1\">Web Design</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,77,00,65,00,62,00,2b,00,64,00,65,00,73,00,\
69,00,67,00,6e,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,\
00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,\
63,00,61,00,74,00,3d,00,31,00,22,00,3e,00,57,00,65,00,62,00,20,00,44,00,65,\
00,73,00,69,00,67,00,6e,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,\
00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=computer&host=beneditutti.com&cat=1\">Computer</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,63,00,6f,00,6d,00,70,00,75,00,74,00,65,00,\
72,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,\
00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,\
74,00,3d,00,31,00,22,00,3e,00,43,00,6f,00,6d,00,70,00,75,00,74,00,65,00,72,\
00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=computer+hardware&host=beneditutti.com&cat=1\">Computer Hardware</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,63,00,6f,00,6d,00,70,00,75,00,74,00,65,00,\
72,00,2b,00,68,00,61,00,72,00,64,00,77,00,61,00,72,00,65,00,26,00,68,00,6f,\
00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,\
74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,\
00,3e,00,43,00,6f,00,6d,00,70,00,75,00,74,00,65,00,72,00,20,00,48,00,61,00,\
72,00,64,00,77,00,61,00,72,00,65,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,\
00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=software&host=beneditutti.com&cat=1\">Software</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,73,00,6f,00,66,00,74,00,77,00,61,00,72,00,\
65,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,\
00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,\
74,00,3d,00,31,00,22,00,3e,00,53,00,6f,00,66,00,74,00,77,00,61,00,72,00,65,\
00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=computer+game&host=beneditutti.com&cat=1\">Computer Game</a><br><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,63,00,6f,00,6d,00,70,00,75,00,74,00,65,00,\
72,00,2b,00,67,00,61,00,6d,00,65,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,\
00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,\
6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,3e,00,43,00,6f,00,6d,\
00,70,00,75,00,74,00,65,00,72,00,20,00,47,00,61,00,6d,00,65,00,3c,00,2f,00,\
61,00,3e,00,3c,00,62,00,72,00,3e,00,3c,00,2f,00,74,00,64,00,3e,00,00,00
" <td bgcolor=\"#99CC66\" valign=top height=\"16\"><a href=\"http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1\" class=\"wheader\">Travel</a><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,3c,00,74,00,\
64,00,20,00,62,00,67,00,63,00,6f,00,6c,00,6f,00,72,00,3d,00,22,00,23,00,39,\
00,39,00,43,00,43,00,36,00,36,00,22,00,20,00,76,00,61,00,6c,00,69,00,67,00,\
6e,00,3d,00,74,00,6f,00,70,00,20,00,68,00,65,00,69,00,67,00,68,00,74,00,3d,\
00,22,00,31,00,36,00,22,00,3e,00,3c,00,61,00,20,00,68,00,72,00,65,00,66,00,\
3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,72,00,6b,\
00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,00,\
2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,6c,00,74,00,2e,00,70,\
00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,00,64,00,73,00,3d,00,\
74,00,72,00,61,00,76,00,65,00,6c,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,\
00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,\
6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,20,00,63,00,6c,00,61,\
00,73,00,73,00,3d,00,22,00,77,00,68,00,65,00,61,00,64,00,65,00,72,00,22,00,\
3e,00,54,00,72,00,61,00,76,00,65,00,6c,00,3c,00,2f,00,61,00,3e,00,3c,00,2f,\
00,74,00,64,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=adventure+travel&host=beneditutti.com&cat=1\">Adventure Travel</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,a0,00,a0,00,\
3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,00,20,00,68,\
00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,\
70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,\
00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,\
6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,\
00,64,00,73,00,3d,00,61,00,64,00,76,00,65,00,6e,00,74,00,75,00,72,00,65,00,\
2b,00,74,00,72,00,61,00,76,00,65,00,6c,00,26,00,68,00,6f,00,73,00,74,00,3d,\
00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,\
63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,3e,00,41,00,64,\
00,76,00,65,00,6e,00,74,00,75,00,72,00,65,00,20,00,54,00,72,00,61,00,76,00,\
65,00,6c,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=vacation&host=beneditutti.com&cat=1\">Vacation</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,76,00,61,00,63,00,61,00,74,00,69,00,6f,00,\
6e,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,\
00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,\
74,00,3d,00,31,00,22,00,3e,00,56,00,61,00,63,00,61,00,74,00,69,00,6f,00,6e,\
00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=airline+ticket&host=beneditutti.com&cat=1\">Airline Ticket</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,61,00,69,00,72,00,6c,00,69,00,6e,00,65,00,\
2b,00,74,00,69,00,63,00,6b,00,65,00,74,00,26,00,68,00,6f,00,73,00,74,00,3d,\
00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,\
63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,3e,00,41,00,69,\
00,72,00,6c,00,69,00,6e,00,65,00,20,00,54,00,69,00,63,00,6b,00,65,00,74,00,\
3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=hotel&host=beneditutti.com&cat=1\">Hotel</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,68,00,6f,00,74,00,65,00,6c,00,26,00,68,00,\
6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,\
00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,\
22,00,3e,00,48,00,6f,00,74,00,65,00,6c,00,3c,00,2f,00,61,00,3e,00,3c,00,62,\
00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1\">Travel</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,74,00,72,00,61,00,76,00,65,00,6c,00,26,00,\
68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,\
00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,\
31,00,22,00,3e,00,54,00,72,00,61,00,76,00,65,00,6c,00,3c,00,2f,00,61,00,3e,\
00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=map&host=beneditutti.com&cat=1\">Map</a><br><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,6d,00,61,00,70,00,26,00,68,00,6f,00,73,00,\
74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,\
00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,3e,00,\
4d,00,61,00,70,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,3c,00,2f,\
00,74,00,64,00,3e,00,00,00
" <td bgcolor=\"#00CC99\" valign=top height=\"16\"><a href=\"http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&cat=1\" class=\"wheader\">Hobbies</a><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,3c,00,74,00,\
64,00,20,00,62,00,67,00,63,00,6f,00,6c,00,6f,00,72,00,3d,00,22,00,23,00,30,\
00,30,00,43,00,43,00,39,00,39,00,22,00,20,00,76,00,61,00,6c,00,69,00,67,00,\
6e,00,3d,00,74,00,6f,00,70,00,20,00,68,00,65,00,69,00,67,00,68,00,74,00,3d,\
00,22,00,31,00,36,00,22,00,3e,00,3c,00,61,00,20,00,68,00,72,00,65,00,66,00,\
3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,72,00,6b,\
00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,00,\
2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,6c,00,74,00,2e,00,70,\
00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,00,64,00,73,00,3d,00,\
68,00,6f,00,62,00,62,00,79,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,\
00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,\
6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,20,00,63,00,6c,00,61,00,73,\
00,73,00,3d,00,22,00,77,00,68,00,65,00,61,00,64,00,65,00,72,00,22,00,3e,00,\
48,00,6f,00,62,00,62,00,69,00,65,00,73,00,3c,00,2f,00,61,00,3e,00,3c,00,2f,\
00,74,00,64,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=fitness&host=beneditutti.com&cat=1\">Fitness</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,a0,00,a0,00,\
3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,00,20,00,68,\
00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,\
70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,\
00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,\
6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,\
00,64,00,73,00,3d,00,66,00,69,00,74,00,6e,00,65,00,73,00,73,00,26,00,68,00,\
6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,\
00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,\
22,00,3e,00,46,00,69,00,74,00,6e,00,65,00,73,00,73,00,3c,00,2f,00,61,00,3e,\
00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=craft&host=beneditutti.com&cat=1\">Craft</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,63,00,72,00,61,00,66,00,74,00,26,00,68,00,\
6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,\
00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,\
22,00,3e,00,43,00,72,00,61,00,66,00,74,00,3c,00,2f,00,61,00,3e,00,3c,00,62,\
00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=cooking&host=beneditutti.com&cat=1\">Cooking</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,63,00,6f,00,6f,00,6b,00,69,00,6e,00,67,00,\
26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,\
00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,\
3d,00,31,00,22,00,3e,00,43,00,6f,00,6f,00,6b,00,69,00,6e,00,67,00,3c,00,2f,\
00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=gardening&host=beneditutti.com&cat=1\">Gardening</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,67,00,61,00,72,00,64,00,65,00,6e,00,69,00,\
6e,00,67,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,\
00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,\
61,00,74,00,3d,00,31,00,22,00,3e,00,47,00,61,00,72,00,64,00,65,00,6e,00,69,\
00,6e,00,67,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=home+decorating&host=beneditutti.com&cat=1\">Home Decorating</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,68,00,6f,00,6d,00,65,00,2b,00,64,00,65,00,\
63,00,6f,00,72,00,61,00,74,00,69,00,6e,00,67,00,26,00,68,00,6f,00,73,00,74,\
00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,\
2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,3e,00,48,\
00,6f,00,6d,00,65,00,20,00,44,00,65,00,63,00,6f,00,72,00,61,00,74,00,69,00,\
6e,00,67,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=sports&host=beneditutti.com&cat=1\">Sports</a><br><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,73,00,70,00,6f,00,72,00,74,00,73,00,26,00,\
68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,\
00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,\
31,00,22,00,3e,00,53,00,70,00,6f,00,72,00,74,00,73,00,3c,00,2f,00,61,00,3e,\
00,3c,00,62,00,72,00,3e,00,3c,00,2f,00,74,00,64,00,3e,00,00,00
" <td bgcolor=\"#999999\" valign=top height=\"16\"><a href=\"http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&cat=1\" class=\"wheader\">Entertainment</a><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,3c,00,74,00,\
64,00,20,00,62,00,67,00,63,00,6f,00,6c,00,6f,00,72,00,3d,00,22,00,23,00,39,\
00,39,00,39,00,39,00,39,00,39,00,22,00,20,00,76,00,61,00,6c,00,69,00,67,00,\
6e,00,3d,00,74,00,6f,00,70,00,20,00,68,00,65,00,69,00,67,00,68,00,74,00,3d,\
00,22,00,31,00,36,00,22,00,3e,00,3c,00,61,00,20,00,68,00,72,00,65,00,66,00,\
3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,72,00,6b,\
00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,00,\
2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,6c,00,74,00,2e,00,70,\
00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,00,64,00,73,00,3d,00,\
65,00,6e,00,74,00,65,00,72,00,74,00,61,00,69,00,6e,00,6d,00,65,00,6e,00,74,\
00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,\
74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,\
00,3d,00,31,00,22,00,20,00,63,00,6c,00,61,00,73,00,73,00,3d,00,22,00,77,00,\
68,00,65,00,61,00,64,00,65,00,72,00,22,00,3e,00,45,00,6e,00,74,00,65,00,72,\
00,74,00,61,00,69,00,6e,00,6d,00,65,00,6e,00,74,00,3c,00,2f,00,61,00,3e,00,\
3c,00,2f,00,74,00,64,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=gambling&host=beneditutti.com&cat=1\">Gambling</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,a0,00,a0,00,\
3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,00,20,00,68,\
00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,\
70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,\
00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,\
6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,\
00,64,00,73,00,3d,00,67,00,61,00,6d,00,62,00,6c,00,69,00,6e,00,67,00,26,00,\
68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,\
00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,\
31,00,22,00,3e,00,47,00,61,00,6d,00,62,00,6c,00,69,00,6e,00,67,00,3c,00,2f,\
00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=movie&host=beneditutti.com&cat=1\">Movie</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,6d,00,6f,00,76,00,69,00,65,00,26,00,68,00,\
6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,\
00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,\
22,00,3e,00,4d,00,6f,00,76,00,69,00,65,00,3c,00,2f,00,61,00,3e,00,3c,00,62,\
00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=music&host=beneditutti.com&cat=1\">Music</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,6d,00,75,00,73,00,69,00,63,00,26,00,68,00,\
6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,\
00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,\
22,00,3e,00,4d,00,75,00,73,00,69,00,63,00,3c,00,2f,00,61,00,3e,00,3c,00,62,\
00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=game&host=beneditutti.com&cat=1\">Game</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,67,00,61,00,6d,00,65,00,26,00,68,00,6f,00,\
73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,\
00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,\
3e,00,47,00,61,00,6d,00,65,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,\
00,00,00
" <td bgcolor=\"#990000\" valign=top height=\"16\"><a href=\"http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&cat=1\" class=\"wheader\">Finance</a><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,3c,00,74,00,\
64,00,20,00,62,00,67,00,63,00,6f,00,6c,00,6f,00,72,00,3d,00,22,00,23,00,39,\
00,39,00,30,00,30,00,30,00,30,00,22,00,20,00,76,00,61,00,6c,00,69,00,67,00,\
6e,00,3d,00,74,00,6f,00,70,00,20,00,68,00,65,00,69,00,67,00,68,00,74,00,3d,\
00,22,00,31,00,36,00,22,00,3e,00,3c,00,61,00,20,00,68,00,72,00,65,00,66,00,\
3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,72,00,6b,\
00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,00,\
2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,6c,00,74,00,2e,00,70,\
00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,00,64,00,73,00,3d,00,\
66,00,69,00,6e,00,61,00,6e,00,63,00,65,00,26,00,68,00,6f,00,73,00,74,00,3d,\
00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,\
63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,20,00,63,00,6c,\
00,61,00,73,00,73,00,3d,00,22,00,77,00,68,00,65,00,61,00,64,00,65,00,72,00,\
22,00,3e,00,46,00,69,00,6e,00,61,00,6e,00,63,00,65,00,3c,00,2f,00,61,00,3e,\
00,3c,00,2f,00,74,00,64,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=loan&host=beneditutti.com&cat=1\">Loan</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,a0,00,a0,00,\
3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,00,20,00,68,\
00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,\
70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,\
00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,\
6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,\
00,64,00,73,00,3d,00,6c,00,6f,00,61,00,6e,00,26,00,68,00,6f,00,73,00,74,00,\
3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,\
00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,3e,00,4c,00,\
6f,00,61,00,6e,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=investing&host=beneditutti.com&cat=1\">Investing</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,69,00,6e,00,76,00,65,00,73,00,74,00,69,00,\
6e,00,67,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,\
00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,\
61,00,74,00,3d,00,31,00,22,00,3e,00,49,00,6e,00,76,00,65,00,73,00,74,00,69,\
00,6e,00,67,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=insurance&host=beneditutti.com&cat=1\">Insurance</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,69,00,6e,00,73,00,75,00,72,00,61,00,6e,00,\
63,00,65,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,\
00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,\
61,00,74,00,3d,00,31,00,22,00,3e,00,49,00,6e,00,73,00,75,00,72,00,61,00,6e,\
00,63,00,65,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=credit+card&host=beneditutti.com&cat=1\">Credit Card</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,63,00,72,00,65,00,64,00,69,00,74,00,2b,00,\
63,00,61,00,72,00,64,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,\
00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,\
26,00,63,00,61,00,74,00,3d,00,31,00,22,00,3e,00,43,00,72,00,65,00,64,00,69,\
00,74,00,20,00,43,00,61,00,72,00,64,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,\
72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=stock&host=beneditutti.com&cat=1\">Stock</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,73,00,74,00,6f,00,63,00,6b,00,26,00,68,00,\
6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,\
00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,\
22,00,3e,00,53,00,74,00,6f,00,63,00,6b,00,3c,00,2f,00,61,00,3e,00,3c,00,62,\
00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=real+estate&host=beneditutti.com&cat=1\">Real Estate</a><br><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,72,00,65,00,61,00,6c,00,2b,00,65,00,73,00,\
74,00,61,00,74,00,65,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,\
00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,\
26,00,63,00,61,00,74,00,3d,00,31,00,22,00,3e,00,52,00,65,00,61,00,6c,00,20,\
00,45,00,73,00,74,00,61,00,74,00,65,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,\
72,00,3e,00,3c,00,2f,00,74,00,64,00,3e,00,00,00
" <td bgcolor=\"#3399FF\" valign=top height=\"16\"><a href=\"http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&cat=1\" class=\"wheader\">Gifts</a><"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,3c,00,74,00,\
64,00,20,00,62,00,67,00,63,00,6f,00,6c,00,6f,00,72,00,3d,00,22,00,23,00,33,\
00,33,00,39,00,39,00,46,00,46,00,22,00,20,00,76,00,61,00,6c,00,69,00,67,00,\
6e,00,3d,00,74,00,6f,00,70,00,20,00,68,00,65,00,69,00,67,00,68,00,74,00,3d,\
00,22,00,31,00,36,00,22,00,3e,00,3c,00,61,00,20,00,68,00,72,00,65,00,66,00,\
3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,70,00,61,00,72,00,6b,\
00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,00,6e,00,69,00,63,00,\
2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,6c,00,74,00,2e,00,70,\
00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,00,64,00,73,00,3d,00,\
67,00,69,00,66,00,74,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,\
00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,\
26,00,63,00,61,00,74,00,3d,00,31,00,22,00,20,00,63,00,6c,00,61,00,73,00,73,\
00,3d,00,22,00,77,00,68,00,65,00,61,00,64,00,65,00,72,00,22,00,3e,00,47,00,\
69,00,66,00,74,00,73,00,3c,00,2f,00,61,00,3e,00,3c,00,2f,00,74,00,64,00,3e,\
00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=gift+basket&host=beneditutti.com&cat=1\">Gift Basket</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,a0,00,a0,00,\
3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,00,20,00,68,\
00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,\
70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,00,63,00,74,\
00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,73,00,75,00,\
6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,00,6f,00,72,\
00,64,00,73,00,3d,00,67,00,69,00,66,00,74,00,2b,00,62,00,61,00,73,00,6b,00,\
65,00,74,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,\
00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,\
61,00,74,00,3d,00,31,00,22,00,3e,00,47,00,69,00,66,00,74,00,20,00,42,00,61,\
00,73,00,6b,00,65,00,74,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,\
00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=gift+certificate&host=beneditutti.com&cat=1\">Gift Certificate</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,67,00,69,00,66,00,74,00,2b,00,63,00,65,00,\
72,00,74,00,69,00,66,00,69,00,63,00,61,00,74,00,65,00,26,00,68,00,6f,00,73,\
00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,\
69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,3e,\
00,47,00,69,00,66,00,74,00,20,00,43,00,65,00,72,00,74,00,69,00,66,00,69,00,\
63,00,61,00,74,00,65,00,3c,00,2f,00,61,00,3e,00,3c,00,62,00,72,00,3e,00,00,\
00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=flower&host=beneditutti.com&cat=1\">Flower</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,66,00,6c,00,6f,00,77,00,65,00,72,00,26,00,\
68,00,6f,00,73,00,74,00,3d,00,62,00,65,00,6e,00,65,00,64,00,69,00,74,00,75,\
00,74,00,74,00,69,00,2e,00,63,00,6f,00,6d,00,26,00,63,00,61,00,74,00,3d,00,\
31,00,22,00,3e,00,46,00,6c,00,6f,00,77,00,65,00,72,00,3c,00,2f,00,61,00,3e,\
00,3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=wedding+gift&host=beneditutti.com&cat=1\">Wedding Gift</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20,00,68,00,72,00,65,00,66,00,3d,00,22,00,68,00,74,00,74,00,70,00,3a,00,\
2f,00,2f,00,70,00,61,00,72,00,6b,00,65,00,64,00,2e,00,64,00,69,00,72,00,65,\
00,63,00,74,00,6e,00,69,00,63,00,2e,00,63,00,6f,00,6d,00,2f,00,72,00,65,00,\
73,00,75,00,6c,00,74,00,2e,00,70,00,68,00,70,00,3f,00,4b,00,65,00,79,00,77,\
00,6f,00,72,00,64,00,73,00,3d,00,77,00,65,00,64,00,64,00,69,00,6e,00,67,00,\
2b,00,67,00,69,00,66,00,74,00,26,00,68,00,6f,00,73,00,74,00,3d,00,62,00,65,\
00,6e,00,65,00,64,00,69,00,74,00,75,00,74,00,74,00,69,00,2e,00,63,00,6f,00,\
6d,00,26,00,63,00,61,00,74,00,3d,00,31,00,22,00,3e,00,57,00,65,00,64,00,64,\
00,69,00,6e,00,67,00,20,00,47,00,69,00,66,00,74,00,3c,00,2f,00,61,00,3e,00,\
3c,00,62,00,72,00,3e,00,00,00
"   <b>·</b> <a href=\"http://parked.directnic.com/result.php?Keywords=wine&host=beneditutti.com&cat=1\">Wine</a>"=hex(2):63,\
00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,53,00,79,00,\
73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,20,00,20,00,20,00,20,00,20,00,20,\
00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,20,00,\
a0,00,a0,00,3c,00,62,00,3e,00,b7,00,3c,00,2f,00,62,00,3e,00,a0,00,3c,00,61,\
00,20
  • 0

#10
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
Hi Kitten72003,

It looks like your post got cut off at then end. Please run that .bat file again and when notepad opens with the log, e-mail it to me at this address. I'll post instructions once I get the file. :tazz:
  • 0

Advertisements


#11
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
Hi Kitten72003,

I received your e-mail. Thanks. :tazz:

Copy the contents of the box below and paste it into a notepad document. Then save it to your desktop as runkey.reg. Close Notepad.

Double click runkey.reg. Click Yes, and then OK to the confirmation messages.

REGEDIT 4

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"AIM"="\"C:\\Program Files\\AIM\\aim.exe\" -cnetwait.odl"
Run hijackthis again, click Scan. Check the boxes next to these entries. Then close all windows except HijackThis. Tell HijackThis to 'Fix checked'.

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: (no name) - {0F28960B-F39A-256B-14E5-8B055568B8C2} - C:\WINDOWS\System32\vjrvcpfo.dll (file missing)
O2 - BHO: (no name) - {29C11DA6-626E-77BE-3DAF-1B133369242C} - C:\WINDOWS\System32\zpuaebdu.dll (file missing)
O2 - BHO: (no name) - {5C959489-BED4-E525-8CAA-CDC203EDD8C4} - C:\WINDOWS\System32\nfbycggk.dll (file missing)
O2 - BHO: (no name) - {B4159D06-FF07-A6A0-0D4A-82E55353801F} - C:\WINDOWS\System32\kuglbtra.dll (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.web...otoUploader.CAB
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - https://www.stopzill...ller/dwnldr.cab
O23 - Service: mycxbinmbgmm (MsUpdate6) - Unknown owner - C:\WINDOWS\System32\msupd6.exe (file missing)


Reboot your computer, run hijackthis again and post a new log.
  • 0

#12
Kitten72003

Kitten72003

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
Logfile of HijackThis v1.99.1
Scan saved at 3:04:52 PM, on 3/17/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Megan A Bonifacino\Desktop\HijackThis.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://one.drexel.edu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: (no name) - {0F28960B-F39A-256B-14E5-8B055568B8C2} - (no file)
O2 - BHO: (no name) - {29C11DA6-626E-77BE-3DAF-1B133369242C} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C959489-BED4-E525-8CAA-CDC203EDD8C4} - (no file)
O2 - BHO: (no name) - {B4159D06-FF07-A6A0-0D4A-82E55353801F} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174><] c:\WINDOWS\System32\ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A></td>
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKCU\..\Run: [<meta name="description" content="beneditutti.com is under construction. This page is courtesy of directNIC.c] c:\WINDOWS\System32\<meta name="description" content="beneditutti.com is under construction. This page is courtesy of directNIC.com">
O4 - HKCU\..\Run: [<BODY TOPMARGIN="0" LEFTMARGIN="0" MARGINHEIGHT="0" MARGINWIDTH="0" BGCOLOR="#FFFFFF" TEXT="#000000" vLink=#000] c:\WINDOWS\System32\<BODY TOPMARGIN="0" LEFTMARGIN="0" MARGINHEIGHT="0" MARGINWIDTH="0" BGCOLOR="#FFFFFF" TEXT="#000000" vLink=#0000ff>
O4 - HKCU\..\Run: [ <td background="http://parked.direct.../top_bg.gif"><a href="http://directnic.com"><img src="http://parked.direct...mages/dnic.gif" width="372" height="41" border="0"></a><] c:\WINDOWS\System32\ <td background="http://parked.direct.../top_bg.gif"><a href="http://directnic.com"><img src="http://parked.direct...mages/dnic.gif" width="372" height="41" border="0"></a></td>
O4 - HKCU\..\Run: [ <td align="right" background="http://parked.direct...ges/top_bg.gif" class="head">beneditutti.com is under construction.<] c:\WINDOWS\System32\ <td align="right" background="http://parked.direct...ges/top_bg.gif" class="head">beneditutti.com is under construction.</td>
O4 - HKCU\..\Run: [ <td align="left" background="http://parked.direct...ges/btm_bg.gif" class="wtext"><img src="http://parked.direct...ges/btm_lt.gif" width="24" height="25" align="absmiddle"><] c:\WINDOWS\System32\ <td align="left" background="http://parked.direct...ges/btm_bg.gif" class="wtext"><img src="http://parked.direct...ges/btm_lt.gif" width="24" height="25" align="absmiddle"></td>
O4 - HKCU\..\Run: [ <td align="center" class=search>search the web: <input type=text name="Keywords" value="" class="textfie] c:\WINDOWS\System32\ <td align="center" class=search>search the web: <input type=text name="Keywords" value="" class="textfield">
O4 - HKCU\..\Run: [ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Computing</a><] c:\WINDOWS\System32\ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Computing</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct....com&cat=1">Web Hosting</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct....com&cat=1">Web Hosting</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct....com&cat=1">Web Design</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct....com&cat=1">Web Design</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Computer</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...omputer</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...cat=1">Computer Hardware</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...cat=1">Computer Hardware</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Software</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...oftware</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...cat=1">Computer Game</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...cat=1">Computer Game</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Travel</a><] c:\WINDOWS\System32\ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Travel</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Adventure Travel</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...at=1">Adventure Travel</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Vacation</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...acation</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...&cat=1">Airline Ticket</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...&cat=1">Airline Ticket</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...t=1">Hotel</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...">Hotel</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...=1">Travel</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...>Travel</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Map</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...ap</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Hobbies</a><] c:\WINDOWS\System32\ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Hobbies</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...1">Fitness</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...Fitness</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...t=1">Craft</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...">Craft</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...1">Cooking</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...Cooking</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...>Gardening</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...rdening</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Decorating</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Decorating</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...ports</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...ts</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Entertainment</a><] c:\WINDOWS\System32\ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Entertainment</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Gambling</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...ambling</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...t=1">Movie</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...">Movie</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...t=1">Music</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...">Music</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Game</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Game</a><br>
O4 - HKCU\..\Run: [ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Finance</a><] c:\WINDOWS\System32\ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Finance</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Loan</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Loan</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...>Investing</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...vesting</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...>Insurance</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...surance</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...m&cat=1">Credit Card</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...m&cat=1">Credit Card</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...t=1">Stock</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...">Stock</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Real Estate</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Real Estate</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Gifts</a><] c:\WINDOWS\System32\ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Gifts</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Basket</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Basket</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Certificate</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Certificate</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...=1">Flower</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...>Flower</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...&cat=1">Wedding Gift</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...&cat=1">Wedding Gift</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Wine</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Wine</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...welry</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...ry</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Shopping</a><] c:\WINDOWS\System32\ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Shopping</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Gift</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Gift</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...cat=1">Car</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...=1">Car</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Book</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Book</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...lectronics</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...tronics</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...">Toy</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...oy</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Home</a><] c:\WINDOWS\System32\ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Home</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Loan</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Loan</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Improvement</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Improvement</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Buying</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Home Buying</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...cat=1">Interior Design</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...cat=1">Interior Design</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...at=1">Pets</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...1">Pets</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...ening</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...ng</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Health</a><] c:\WINDOWS\System32\ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Health</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Life Insurance</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Life Insurance</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...m&cat=1">Health Insurance</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...m&cat=1">Health Insurance</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...m&cat=1">Weight Loss</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...m&cat=1">Weight Loss</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...>Nutrition</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...trition</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...1">Fitness</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...Fitness</a><br>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...m&cat=1">Womens Health</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...m&cat=1">Womens Health</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174><] c:\WINDOWS\System32\ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A></td>
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: D-Link AirPlus G Configuration Utility.lnk = ?
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-bet...all/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....467&clcid=0x409
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: mycxbinmbgmm (MsUpdate6) - Unknown owner - C:\WINDOWS\System32\msupd6.exe (file missing)
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
  • 0

#13
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
Hi Kitten72003,

Boot your computer in safe mode. <---very important!

Run hijackthis again and click the None of the Above, just start the program button, then click the Scan button. Check the boxes next to the entries listed below. Then close all windows except HijackThis.

O2 - BHO: (no name) - {0F28960B-F39A-256B-14E5-8B055568B8C2} - (no file)
O2 - BHO: (no name) - {29C11DA6-626E-77BE-3DAF-1B133369242C} - (no file)
O2 - BHO: (no name) - {5C959489-BED4-E525-8CAA-CDC203EDD8C4} - (no file)
O2 - BHO: (no name) - {B4159D06-FF07-A6A0-0D4A-82E55353801F} - (no file)
O4 - HKLM\..\Run: [ <td bgcolor=#
<---ANY and ALL lines that are O4's and begin with that text.
O4 - HKCU\..\Run: [<meta name="description" content="beneditutti.com is under construction. This page is courtesy of directNIC.c] c:\WINDOWS\System32\<meta name="description" content="beneditutti.com is under construction. This page is courtesy of directNIC.com">
O4 - HKCU\..\Run: [<BODY TOPMARGIN="0" LEFTMARGIN="0" MARGINHEIGHT="0" MARGINWIDTH="0" BGCOLOR="#FFFFFF" TEXT="#000000" vLink=#000] c:\WINDOWS\System32\<BODY TOPMARGIN="0" LEFTMARGIN="0" MARGINHEIGHT="0" MARGINWIDTH="0" BGCOLOR="#FFFFFF" TEXT="#000000" vLink=#0000ff>
O4 - HKCU\..\Run: [ <td background="http://parked.direct.../top_bg.gif"><a href="http://directnic.com"><img src="http://parked.direct...mages/dnic.gif" width="372" height="41" border="0"></a><] c:\WINDOWS\System32\ <td background="http://parked.direct.../top_bg.gif"><a href="http://directnic.com"><img src="http://parked.direct...mages/dnic.gif" width="372" height="41" border="0"></a></td>
O4 - HKCU\..\Run: [ <td align="right" background="http://parked.direct...ges/top_bg.gif" class="head">beneditutti.com is under construction.<] c:\WINDOWS\System32\ <td align="right" background="http://parked.direct...ges/top_bg.gif" class="head">beneditutti.com is under construction.</td>
O4 - HKCU\..\Run: [ <td align="left" background="http://parked.direct...ges/btm_bg.gif" class="wtext"><img src="http://parked.direct...ges/btm_lt.gif" width="24" height="25" align="absmiddle"><] c:\WINDOWS\System32\ <td align="left" background="http://parked.direct...ges/btm_bg.gif" class="wtext"><img src="http://parked.direct...ges/btm_lt.gif" width="24" height="25" align="absmiddle"></td>
O4 - HKCU\..\Run: [ <td align="center" class=search>search the web: <input type=text name="Keywords" value="" class="textfie] c:\WINDOWS\System32\ <td align="center" class=search>search the web: <input type=text name="Keywords" value="" class="textfield">
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct....com&cat=1">Web Hosting</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct....com&cat=1">Web Hosting</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct....com&cat=1">Web Design</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct....com&cat=1">Web Design</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...">Computer</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...omputer</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...cat=1">Computer Hardware</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...cat=1">Computer Hardware</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...">Software</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...oftware</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...cat=1">Computer Game</a><br><] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...cat=1">Computer Game</a><br></td>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...at=1">Adventure Travel</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...at=1">Adventure Travel</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...">Vacation</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...acation</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...&cat=1">Airline Ticket</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...&cat=1">Airline Ticket</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...t=1">Hotel</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...">Hotel</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...=1">Travel</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...>Travel</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...">Map</a><br><] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...ap</a><br></td>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...1">Fitness</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...Fitness</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...t=1">Craft</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...">Craft</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...1">Cooking</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...Cooking</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...>Gardening</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...rdening</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...com&cat=1">Home Decorating</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...com&cat=1">Home Decorating</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...ports</a><br><] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...ts</a><br></td>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...">Gambling</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...ambling</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...t=1">Movie</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...">Movie</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...t=1">Music</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...">Music</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...at=1">Game</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...1">Game</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...at=1">Loan</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...1">Loan</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...>Investing</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...vesting</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...>Insurance</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...surance</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...m&cat=1">Credit Card</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...m&cat=1">Credit Card</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...t=1">Stock</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...">Stock</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...com&cat=1">Real Estate</a><br><] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...com&cat=1">Real Estate</a><br></td>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Basket</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Basket</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Certificate</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...com&cat=1">Gift Certificate</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...=1">Flower</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...>Flower</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...&cat=1">Wedding Gift</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...&cat=1">Wedding Gift</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...at=1">Wine</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...1">Wine</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...welry</a><br><] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...ry</a><br></td>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...at=1">Gift</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...1">Gift</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...cat=1">Car</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...=1">Car</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...at=1">Book</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...1">Book</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...lectronics</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...tronics</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...">Toy</a><br><] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...oy</a><br></td>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...com&cat=1">Home Loan</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...com&cat=1">Home Loan</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...com&cat=1">Home Improvement</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...com&cat=1">Home Improvement</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...com&cat=1">Home Buying</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...com&cat=1">Home Buying</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...cat=1">Interior Design</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...cat=1">Interior Design</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...at=1">Pets</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...1">Pets</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...ening</a><br><] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...ng</a><br></td>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...com&cat=1">Life Insurance</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...com&cat=1">Life Insurance</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...m&cat=1">Health Insurance</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...m&cat=1">Health Insurance</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...m&cat=1">Weight Loss</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...m&cat=1">Weight Loss</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...>Nutrition</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...trition</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...1">Fitness</a>] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...Fitness</a><br>
O4 - HKCU\..\Run: [ <b>·</b> <a href="http://parked.direct...m&cat=1">Womens Health</a><br><] c:\WINDOWS\System32\ <b>·</b> <a href="http://parked.direct...m&cat=1">Womens Health</a><br></td>
O23 - Service: mycxbinmbgmm (MsUpdate6) - Unknown owner - C:\WINDOWS\System32\msupd6.exe (file missing)


Click on the Fix checked button, then click Ok to the next confirmation message.

Reboot your computer, run hijackthis again and post a new log back into this thread.
  • 0

#14
Kitten72003

Kitten72003

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
Logfile of HijackThis v1.99.1
Scan saved at 2:39:33 PM, on 3/19/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Megan A Bonifacino\Desktop\HijackThis.exe
C:\WINDOWS\System32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://one.drexel.edu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: (no name) - {0F28960B-F39A-256B-14E5-8B055568B8C2} - (no file)
O2 - BHO: (no name) - {29C11DA6-626E-77BE-3DAF-1B133369242C} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C959489-BED4-E525-8CAA-CDC203EDD8C4} - (no file)
O2 - BHO: (no name) - {B4159D06-FF07-A6A0-0D4A-82E55353801F} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKCU\..\Run: [ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Computing</a><] c:\WINDOWS\System32\ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Computing</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Travel</a><] c:\WINDOWS\System32\ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Travel</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Hobbies</a><] c:\WINDOWS\System32\ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Hobbies</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Entertainment</a><] c:\WINDOWS\System32\ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Entertainment</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Finance</a><] c:\WINDOWS\System32\ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Finance</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...com&cat=1">Real Estate</a><br><] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...com&cat=1">Real Estate</a><br></td>
O4 - HKCU\..\Run: [ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Gifts</a><] c:\WINDOWS\System32\ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Gifts</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Shopping</a><] c:\WINDOWS\System32\ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Shopping</a></td>
O4 - HKCU\..\Run: [ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Home</a><] c:\WINDOWS\System32\ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Home</a></td>
O4 - HKCU\..\Run: [   <b>·</b> <a href="http://parked.direct...cat=1">Interior Design</a>] c:\WINDOWS\System32\   <b>·</b> <a href="http://parked.direct...cat=1">Interior Design</a><br>
O4 - HKCU\..\Run: [ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Health</a><] c:\WINDOWS\System32\ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.direct...utti.com&cat=1" class="wheader">Health</a></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Finance</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174><] c:\WINDOWS\System32\ <td bgcolor=#D3DBE4><img src="http://parked.direct...ges/spacer.gif" height=1 width=174></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.direct...tti.com&side=1" class="category">Travel</a></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Gifts</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Home</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Health</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Entertainment</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Shopping</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Computing</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.direct...ages/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.direct...tti.com&side=1" class=category>Hobbies</A></td>
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: D-Link AirPlus G Configuration Utility.lnk = ?
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-bet...all/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....467&clcid=0x409
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: mycxbinmbgmm (MsUpdate6) - Unknown owner - C:\WINDOWS\System32\msupd6.exe (file missing)
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
  • 0

#15
OSC

OSC

    Malware Expert

  • Retired Staff
  • 301 posts
Hi Kitten72003,

Hmmmmm. Something's not right. Every single entry is still there. Did you place check marks next to each entry and then click the Fix Checked button while in safe mode?? If I've confused you, please let me know. :tazz:
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP