Here is the log from superantispyware:
SUPERAntiSpyware Scan Log
Generated 12/03/2006 at 04:18 PM
Application Version : 3.3.1020
Core Rules Database Version : 3141
Trace Rules Database Version: 1157
Scan type : Complete Scan
Total Scan Time : 01:12:30
Memory items scanned : 668
Memory threats detected : 2
Registry items scanned : 7360
Registry threats detected : 23
File items scanned : 124735
File threats detected : 247
Adware.Sended/Resident
C:\WINDOWS\SYSTEM32\C_1LPQ.DLL
C:\WINDOWS\SYSTEM32\C_1LPQ.DLL
Adware.MyWebSearch
C:\PROGRA~1\MYWEBS~1\BAR\1.BIN\MWSOEMON.EXE
C:\PROGRA~1\MYWEBS~1\BAR\1.BIN\MWSOEMON.EXE
[MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\BAR\1.BIN\MWSOEMON.EXE
[MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\BAR\1.BIN\MWSOEMON.EXE
HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}\InprocServer32
HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}\InprocServer32#ThreadingModel
HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}\Programmable
HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}\TypeLib
HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}\InprocServer32
HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}\InprocServer32#ThreadingModel
HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}\Programmable
HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\InprocServer32
HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\InprocServer32#ThreadingModel
HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\Programmable
HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\TypeLib
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\InprocServer32
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\InprocServer32#ThreadingModel
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\Programmable
C:\PROGRAM FILES\MYWEBSEARCH\BAR\1.BIN\MWSOEMON.EXE
C:\WINDOWS\Prefetch\MWSOEMON.EXE-194861D2.pf
Adware.Tracking Cookie
C:\Documents and Settings\Debbie\Cookies\debbie@partner2profit[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@keywordmax[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@indexstats[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@roiservice[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@exitexchange[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@precisionclick[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@bizrate[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@2o7[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@partypoker[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@88270523[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@92267575[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@kanoodle[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1070254509[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@advertising[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@indextools[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@mb[3].txt
C:\Documents and Settings\Debbie\Cookies\debbie@cpvfeed[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@atdmt[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@atwola[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@drivecleaner[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@burstnet[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@mb[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@indiads[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1070423539[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@revsci[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@tacoda[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@71875316[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@findwhat[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@70406058[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@interclick[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@searchadnetwork[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@enhance[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@nextag[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@bluestreak[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@67631968[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@winantivirus[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@cgi-bin[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@realmedia[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@regalinteractive[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1072562879[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@mediaplex[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@partypoker[3].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1069095226[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@doubleclick[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@optimost[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@entrepreneur[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@23759481[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1065901315[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@elitefind[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1066503975[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@belnk[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1072579198[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@admarketplace[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@dealtime[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@adrevolver[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@23635342[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@webstat[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1070966449[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@adbrite[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@cgi-bin[3].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1072385887[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1070689521[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@leadgenetwork[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@metareward[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@55586945[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@adecn[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@cassava[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@mb[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@888[1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@azjmp[2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][3].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][1].txt
C:\Documents and Settings\Debbie\Cookies\
[email protected][2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@yieldmanager[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1066622017[2].txt
C:\Documents and Settings\Debbie\Cookies\debbie@1071607107[1].txt
C:\Documents and Settings\Debbie\Cookies\debbie@mywebsearch[1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\alex@adbrite[2].txt
C:\Documents and Settings\Alex\Cookies\alex@adecn[2].txt
C:\Documents and Settings\Alex\Cookies\alex@adknowledge[1].txt
C:\Documents and Settings\Alex\Cookies\alex@adlegend[2].txt
C:\Documents and Settings\Alex\Cookies\alex@admarketplace[2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\alex@adrevolver[1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\alex@advertising[2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\alex@atdmt[2].txt
C:\Documents and Settings\Alex\Cookies\alex@atwola[1].txt
C:\Documents and Settings\Alex\Cookies\alex@belnk[1].txt
C:\Documents and Settings\Alex\Cookies\alex@burstnet[2].txt
C:\Documents and Settings\Alex\Cookies\alex@casalemedia[2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\alex@cpvfeed[2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\alex@doubleclick[1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\alex@exitexchange[2].txt
C:\Documents and Settings\Alex\Cookies\alex@fastclick[2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\alex@hitbox[2].txt
C:\Documents and Settings\Alex\Cookies\alex@imrworldwide[2].txt
C:\Documents and Settings\Alex\Cookies\alex@indexstats[2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][4].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\alex@mediaplex[1].txt
C:\Documents and Settings\Alex\Cookies\alex@mywebsearch[2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\alex@precisionclick[1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\alex@questionmarket[2].txt
C:\Documents and Settings\Alex\Cookies\alex@realmedia[1].txt
C:\Documents and Settings\Alex\Cookies\alex@redorbit[1].txt
C:\Documents and Settings\Alex\Cookies\alex@revsci[2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\alex@smileycentral[1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\alex@tacoda[1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\alex@tradedoubler[1].txt
C:\Documents and Settings\Alex\Cookies\alex@trafficmp[1].txt
C:\Documents and Settings\Alex\Cookies\alex@tribalfusion[2].txt
C:\Documents and Settings\Alex\Cookies\alex@winantivirus[2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][1].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\
[email protected][2].txt
C:\Documents and Settings\Alex\Cookies\alex@yieldmanager[1].txt
C:\Documents and Settings\Brook\Cookies\brook@adlegend[1].txt
C:\Documents and Settings\Brook\Cookies\
[email protected][1].txt
C:\Documents and Settings\Brook\Cookies\brook@atwola[1].txt
C:\Documents and Settings\Brook\Cookies\brook@belnk[1].txt
C:\Documents and Settings\Brook\Cookies\
[email protected][2].txt
C:\Documents and Settings\Brook\Cookies\
[email protected][1].txt
C:\Documents and Settings\Brook\Cookies\
[email protected][1].txt
C:\Documents and Settings\Brook\Cookies\
[email protected][2].txt
C:\Documents and Settings\Brook\Cookies\brook@revsci[2].txt
C:\Documents and Settings\Brook\Cookies\
[email protected][2].txt
C:\Documents and Settings\Brook\Cookies\
[email protected][1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\
[email protected][2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\
[email protected][1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@atwola[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\
[email protected][1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\
[email protected][1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\
[email protected][1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\
[email protected][1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\
[email protected][1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@qnsr[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tacoda[1].txt
Unclassified.Unknown Origin
HKCR\CLSID\{013A653B-49A6-4F76-8B68-E4875EA6BA54}
HKCR\CLSID\{013A653B-49A6-4F76-8B68-E4875EA6BA54}\InprocServer32
HKCR\CLSID\{013A653B-49A6-4F76-8B68-E4875EA6BA54}\InprocServer32#ThreadingModel
Adware.MovieLand/MediaPipe
C:\Program Files\moviepass Terms.html
C:\PROGRAM FILES\FSUPPORT\NOTIFIER.EXE
Here is the log from Hijack this:
Logfile of HijackThis v1.99.1
Scan saved at 4:24:44 PM, on 12/3/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Common Files\AOL\1140660821\ee\AOLSoftware.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Messenger\msmsgs.exe
c:\program files\common files\aol\1140660821\ee\services\antiSpywareApp\ver2_0_7\AOLSP Scheduler.exe
C:\WINDOWS\system32\wuauclt.exe
c:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Documents and Settings\Debbie\Desktop\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.rr.com/flash/index.cfmR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft....k/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft....k/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://ie.redirect.h...a...&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://ie.redirect.h...a...&pf=desktopR3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (file missing)
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - (no file)
O2 - BHO: (no name) - {013A653B-49A6-4f76-8B68-E4875EA6BA54} - (no file)
O2 - BHO: (no name) - {023EF8CD-780B-413A-9125-D98333A08D87} - C:\WINDOWS\system32\c_1lpq.dll (file missing)
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (file missing)
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1140660821\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=0
O4 - HKLM\..\RunServices: [mxb2np] kterzx.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: &Search -
http://edits.mywebse...?p=ZNxdm006KFUSO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
http://ak.exe.imgfar...tup1.0.0.15.cabO16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) -
http://photo.walgree...eensActivia.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://by131fd.bay13...es/MsnPUpld.cabO16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.syma...n/bin/cabsa.cabO16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) -
http://photo.walmart...ploadClient.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn...pDownloader.cabO16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) -
http://download.game...inematycoon.cabO16 - DPF: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} (CPlayFirstDinerDashControl Object) -
http://clubgames.pog...sh.1.0.0.80.cabO16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://clubgames.pog...aploader_v6.cabO16 - DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} (Playtime Games Launcher) -
http://clubgames.pog...ameLauncher.cabO18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: c_1lpq - c_1lpq.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: Microsoft DLL Registration Component (DLLReg) - Unknown owner - C:\WINDOWS\regsvr32.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe