Hello, last night i got hit by some sort of evil program that replaced my desktop with a "DANGER your comp might be infected" and a black background that prevents me from accessing desktop setting. After running all my spyware programs and removing the bad programs (which also kept changing my internet preferences and launching comercials), my background remaing white (actually it changes from white to baige) and i can't get rid of it. This is the hijackthis log, can someone help????
Logfile of HijackThis v1.99.1
Scan saved at 7:59:31 PM, on 4/28/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\cmdtel.exe
C:\WINDOWS\System32\ahtun.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\McAfee\McAfee Firewall\CPD.EXE
C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\McAfee VirusScan\Vshwin32.exe
C:\Program Files\McAfee\McAfee Firewall\CPDCLNT.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\windows\glnkhjh.exe
C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\McAfee\McAfee VirusScan\Avconsol.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Verizon Online\SupportCenter\bin\mpbtn.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\David Vera\My Documents\Downloads\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://out.true-counter.com/b/?101 (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://out.true-counter.com/b/?101 (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://abcsearch4u.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://abcsearch4u.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://abcsearch4u.com/index.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://abcsearch4u.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://abcsearch4u.com/index.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = http://www.gaysbase.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: (no name) - _{A045DC85-FC44-45be-8A50-E4F9C62C9A84} - (no file)
F1 - win.ini: run=C:\WINDOWS\..\PROGRA~1\COMMON~1\MICROS~1\MSInfo\msinfo.exe
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Common\ycomp5_1_6_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\ycomp5_1_6_0.dll
O3 - Toolbar: (no name) - {FD7D6851-616E-48DE-AF55-EE2E34F389B0} - (no file)
O3 - Toolbar: (no name) - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - (no file)
O4 - HKLM\..\Run: [tup] C:\WINDOWS\tup.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [iosmvjt] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ihgrtiu] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [rpaduak] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [bvtulyi] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ctdphmd] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [npiuyro] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ackxluc] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [twwbrdi] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [sfxghew] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [pqafqwn] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [afnwtcd] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [huobinx] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ubamkav] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [cepkkmt] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [sowddor] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [pwsxefd] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [hwcohod] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ysjkxad] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vrhoicf] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [skbmcqc] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vqkhppf] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [uxcegyd] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [wwjqekf] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vkppqsy] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [amjsosi] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [wfuvbni] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [fdimhhx] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [lwoqwpg] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [irlhxok] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [osnkrvd] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ibpnokb] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [qoaaurs] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [osmlgmo] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [flxanoq] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [bwovfej] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ftimlpc] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [yctaatv] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [oxxkcfd] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [tkfpbuk] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ypfraar] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [hhmptib] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ylnlcqs] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [muwnpgf] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [rpcmdsy] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [dsmfoue] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [jqlmvnj] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [drwihac] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [pxcoclo] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [yrykvjh] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [rurtjsd] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [qbfeqga] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [iekqvxo] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [phdyvud] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vomxmre] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [icfcpoq] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [gehemqn] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ajwgpjw] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [cvrmedh] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [thhhnbv] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [mgmndba] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vkqphqu] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [eaqepar] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [jdrwjei] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [hxdoheh] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [kpuvjsu] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [imwhjnq] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [gkybcqo] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [fxhdavy] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [xpnstuj] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vyslucd] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [lsvqqoe] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ccriclv] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [sqofylb] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vfysxbp] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [juwleet] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [milbeyl] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [liqejjg] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [scsfwyp] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [sedxhus] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [sorlbvu] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [dpnnjhw] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [jhulwfn] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [sgtggwr] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [dshhuya] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [otjapbb] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [bpuvpdf] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [kexccxk] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [dnnnyod] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ikpiamu] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ynlchwr] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [twfwugh] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [rpvntfq] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [bfmsghq] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [gllswjw] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [xwoiqeg] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [dgkrfrh] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [paakpbm] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [dkdiihi] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [fgurctg] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [qmwukbs] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [grgxldc] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [fdehrxs] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [prkmhxc] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [hbdmqhf] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [velsfou] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [oaivher] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [shcrdey] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [hdvsrqe] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [cejmren] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [bwwxblo] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [boqhisi] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [cngdvge] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [nmeqehw] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [jdrimox] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [cioruhl] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [qjvmfdi] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [anaqsul] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [innecvj] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [tsoesfe] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [sibfvhc] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [rourfcy] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [xecljwd] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [fcpgvdn] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [sfvrbmx] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [emuvrym] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [tnjkbow] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [kvhglem] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [hgmvied] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [wvksjmo] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [aeoykaj] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [aprrutq] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [gthnwog] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [esttafl] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [pytefky] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [tyypfov] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [theunkb] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [kqnuyrk] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ptmpddq] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [nlcddma] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [simqbda] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [grmkltm] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [gpkxwni] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [pnpwmmp] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vnnfgmb] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [xffjrkh] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [ejgegwx] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vmelwrm] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [rijgiuh] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [gwwbdos] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [nvdfnms] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vjhqrdq] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [cfotxtr] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [vqvypek] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [junimhe] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [dydggws] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [gircgfs] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [mpkdmcr] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [pswnrfs] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [kradbws] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [xrcrllc] c:\windows\glnkhjh.exe
O4 - HKCU\..\Run: [jnvwknl] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [wepsowc] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [ybjorqq] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [rselupp] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [fhuhjsg] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [nyjeolk] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [alwvsho] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [bfnvqhy] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [jhgpqii] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [cnkcbxh] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [cjijqwn] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [cvfnxgk] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [kruwwgv] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [hdlkobv] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [vppgecs] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [bvawtsb] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [yyidccx] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [daejmve] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [lumviyq] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [ifubnnp] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [tvfgoqg] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [rcnbonu] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [obfiiul] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [kkbuqdb] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [ksxotsh] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [crjmjbg] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [hppnpqj] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [udfdpyy] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [mplrhxy] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [nbpstvh] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [dnvmsdi] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [daeashx] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [ioqwuyy] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [cfxedlk] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [umqhfyd] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [sfrykxc] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [druhaud] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [usbogim] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [khwmpwa] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [yewasvm] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [tnxwmca] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [mchmcku] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [cqwfjcf] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [vgnvrvl] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [rwhauug] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [rrwgyvx] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [ewykudd] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [glrhvke] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [cnvfhda] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [rjmhjru] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [bruxylb] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [peacmdb] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [nvqpaal] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [kdodwqk] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [cnassdj] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [atfmopg] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [dmjftvc] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [hwyvdpb] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [osheppd] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [bgldjax] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [kfmsyhi] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [jadbslw] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [qtedpik] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [ucxjvxu] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [dhdfprw] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [betdguk] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [hgheklu] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [vuemeuq] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [kncufeb] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [dxcldmt] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [hnwsckw] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [armsywp] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [psphrvl] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [tmkppme] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [yhfjfxo] c:\windows\ytolnaa.exe
O4 - HKCU\..\Run: [eatfbbu] c:\windows\dmnobbp.exe
O4 - HKCU\..\Run: [gvghyvj] c:\windows\dmnobbp.exe
O4 - HKCU\..\Run: [aecanoc] c:\windows\dmnobbp.exe
O4 - HKCU\..\Run: [oonoxdh] c:\windows\dmnobbp.exe
O4 - HKCU\..\Run: [qyferkj] c:\windows\dmnobbp.exe
O4 - HKCU\..\Run: [nrpgwws] c:\windows\dmnobbp.exe
O4 - HKCU\..\Run: [dpdkljd] c:\windows\rghkkcf.exe
O4 - HKCU\..\Run: [sougyvr] c:\windows\rghkkcf.exe
O4 - HKCU\..\Run: [fdoxusf] c:\windows\rghkkcf.exe
O4 - HKCU\..\Run: [uhahpeq] c:\windows\rghkkcf.exe
O4 - HKCU\..\Run: [tqdqdma] c:\windows\tfwurgb.exe
O4 - HKCU\..\Run: [xtumypt] c:\windows\tfwurgb.exe
O4 - HKCU\..\Run: [acowrig] c:\windows\tfwurgb.exe
O4 - HKCU\..\Run: [oxrrnmf] c:\windows\tfwurgb.exe
O4 - HKCU\..\Run: [mjcjesd] c:\windows\tfwurgb.exe
O4 - HKCU\..\Run: [loyywxw] c:\windows\tfwurgb.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Verizon Online Support Center.lnk = C:\Program Files\Verizon Online\SupportCenter\bin\matcli.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: SearchScout Search - res://C:\Program Files\SearchScoutToolbar\SearchScoutToolbar.dll/SEARCHSCOUTMENUSEARCH.HTM
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Researcher - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Common Files\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Microsoft AntiSpyware helper - {EAFCF0C1-101F-4803-853E-E65F1479958A} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {EAFCF0C1-101F-4803-853E-E65F1479958A} - (no file) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O12 - Plugin for .csm: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .csml: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .cub: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .cube: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .dx: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .emb: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .embl: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .gau: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .jdx: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .mol: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .mop: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .pdb: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .rxn: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .scr: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .skc: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .spt: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .tgf: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .xyz: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O16 - DPF: Yahoo! Chess - http://download.game...nts/y/ct1_x.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg...v45/yacscom.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1094956002015
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://us.games2.yim...ctl_0_0_0_1.ocx
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.c.../ymmapi_416.dll
O19 - User stylesheet: C:\WINDOWS\Web\oslogo.bmp
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVSync Manager (AvSynMgr) - Network Associates, Inc. - C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Loading Outpost Connections (KDE) - Unknown owner - C:\WINDOWS\System32\cmdtel.exe
O23 - Service: Debug oupost relations (LAGOS) - Unknown owner - C:\WINDOWS\System32\ahtun.exe
O23 - Service: McAfee Firewall - Unknown owner - C:\Program Files\McAfee\McAfee Firewall\CPD.EXE" /SERVICE (file missing)
O23 - Service: McShield - Unknown owner - C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
Sign In
Create Account
