Logfile of HijackThis v1.99.1
Scan saved at 7:20:42 PM, on 5/28/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\kernels32.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\windows\bjmppse.exe
C:\WINDOWS\System32\devldr32.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\ZipGenius 6\zipgenius.exe
C:\Documents and Settings\Wil Smedley\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://abcsearch4u.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://abcsearch4u.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://abcsearch4u.com/index.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://abcsearch4u.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://abcsearch4u.com/index.htm
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\System32\kernels32.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [System] C:\WINDOWS\System32\kernels32.exe
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\launchPd.EXE"
O4 - HKCU\..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
O4 - HKCU\..\Run: [xqsggjm] c:\windows\bjmppse.exe
O4 - HKCU\..\Run: [dpatpwe] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [yhtyjgw] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [naktjyc] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [dalyyka] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [yhkwman] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [ewpsfuy] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [gelitqh] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [kkmoaec] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [rkuefgr] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [uckasfj] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [abtgwki] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [fgtjamt] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [svvinro] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [wwqpcak] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [irofxet] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [ornkkas] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [ockwhlp] c:\windows\dvgheaf.exe
O4 - HKCU\..\Run: [tikvnsa] c:\windows\qrvqrxw.exe
O4 - HKCU\..\Run: [mnkagrl] c:\windows\qrvqrxw.exe
O4 - HKCU\..\Run: [xvvoyuk] c:\windows\qrvqrxw.exe
O4 - HKCU\..\Run: [vvsbcmc] c:\windows\qrvqrxw.exe
O4 - HKCU\..\Run: [bljjvxt] c:\windows\qrvqrxw.exe
O4 - HKCU\..\Run: [unwejgs] c:\windows\qrvqrxw.exe
O4 - HKCU\..\Run: [ccflwxf] c:\windows\qrvqrxw.exe
O4 - HKCU\..\Run: [hlurwcu] c:\windows\qrvqrxw.exe
O4 - HKCU\..\Run: [gurgqvy] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [puhenvv] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [hbdbimn] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [uclxton] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [hhwhkrq] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [fyexrth] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [lnroexv] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [damkqvf] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [lpaumpj] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [neatgop] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [ixqqofs] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [ynwtivp] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [wnmokff] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [qaigxut] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [yiltwwn] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [huvsmds] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [othbmql] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [jvuustw] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [luokdps] c:\windows\hhbrwdv.exe
O4 - HKCU\..\Run: [eeypkpm] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [seinwgk] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [lowoywq] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tnoornd] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [rwkasbp] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bgyguyw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [pjysoua] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [racmiwj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [lipcvnp] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [wiwowgd] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bfnchcg] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vwhhiao] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [wcxhrja] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [wcmmkci] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [uadeeby] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [sgyjvyb] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ppfbsiy] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [mnlbxnm] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [qnoswua] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [paoabxs] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [rfiiajj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gvkusmd] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [jinisfa] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bpurfua] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [qvbense] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ximiusf] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [uqkrbwg] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tdfpclk] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [sjmwgxh] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [riendul] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [glwghcg] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [eeaayje] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [fccsjlf] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gdvdsai] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [lhqjeqj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ftttswc] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [jyaflxs] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [fbpdcip] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tfdyaxs] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tkyqkvc] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vmamuxo] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [aeviegb] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [rucastp] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tvwxyta] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [umdyibe] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [knympye] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ncjqdjl] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [mfcqund] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ahfrbqf] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [krfcxav] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [chryfhg] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ntegqpa] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [dnuncxn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ndbqvjx] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [mdahbkk] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [dxoucuf] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [watcxvn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [cseygjg] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [njqphsk] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [mfcrlft] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [fvuqpad] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [icawlrv] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vcobdmm] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [pertegc] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [mflaush] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [mgkpned] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ejjipxh] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [uhdavmn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [rjlqftu] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [eqlxhuc] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [hjtbvjo] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [uaqvqpd] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [roshokw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [kcbapum] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [nflkacy] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tnrqfki] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [fcviykw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [xsooogb] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [sypktgm] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [sxpebrn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [fauguva] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [jyqkpjn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [mmrihvl] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [pvfxqew] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bgtaida] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [fjvxvdg] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [jmfhnsa] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [msqrrla] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [onqrowv] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [jpgjbnt] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ekdmkhu] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tnxvebp] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ketpoyk] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [cjhlagn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vixvwtv] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [hsuysce] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [dfsaoic] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [dkiqrss] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bwyhiuy] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [qgfepnq] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ihykhxr] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ekkthav] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bijgprr] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ilemdve] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bklcatv] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tvvhqvi] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bjoefeu] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vbhlpft] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [qfijuux] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [sdbvfmk] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gdgtoie] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [yapksdy] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [inshtuq] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [dgdpjpo] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gbppdpg] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ylhbqto] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bqkvbis] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [qapvpjo] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [yxnnrtw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [pscrdnf] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vdjnfun] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [otcfqfs] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [dswbksb] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [qgjaydf] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [aootjey] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [glxhryx] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [dolucnj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [slmcuqe] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [hwrgjcy] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [amyxpqe] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ntlbila] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ssqeshq] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [wytnwte] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [nsgvajh] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ypiwupd] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [xjpacjx] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bsvjuxv] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [yknwqkp] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [oilbheu] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bnffwjo] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vateepf] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [cahnkcr] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [adtybgp] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tbftarf] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [oorjqjn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [njalosw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tbkoure] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [npylgsg] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vyxbkxl] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ajfqalh] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ewnjcee] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ambiprl] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [wnqepkw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [kdafkkb] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vhwejcr] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [fmxckss] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [rikejxr] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [btsqkjm] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [qkpjglf] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [matnpqu] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [cyaibxe] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vjqerxj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ybtkqxy] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [cwaauyu] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [brbcjsd] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [naujjjx] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [xqegyqa] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bjbvpxc] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [xfrttrd] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ronlblh] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [oabvifn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [kbbvrfw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ksjsjfn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [fucvbpj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [xjqktov] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [psmqcbw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [avibhky] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ifomprl] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ljybgdv] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [knwdffd] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bkoruhc] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [qvmkayw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vxocenw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gpoagtl] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vogeoog] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [sojbuct] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [rcbpgnj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [jigbfbk] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bqoyuri] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vpmrawr] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [fguswdj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [byusfus] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [selsiqd] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [mvsahph] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ssvfhkm] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [suwnmvg] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [lqbcybj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [jnylfne] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [uairpmj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gbqlwfk] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [sqrtqad] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tfbrfah] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [jlhjiin] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [xsliqwy] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [arifoxs] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [lvhwcnx] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [wliifyy] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bpmnayt] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [velvkuh] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gpfnxog] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [rdivoev] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ogoacnl] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [hfmvlsk] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vugkljw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [xlfbnlf] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [utscely] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vwucvfy] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gwlidgu] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [beifdeq] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gwvtakk] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tufcwtt] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [vlcokcy] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [tqohnea] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [yxpctxs] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [hgqcaed] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [qwmdwqw] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [htrfgad] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [rpurmeg] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [sdyqyfs] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ksoimhm] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [odglhrj] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [abkeayn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [runyhqe] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [xfnfoap] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [kqdlisl] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [qsxokry] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gcxoefq] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [bntxjiu] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [utgaxbd] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [ojjtafn] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [gfrkuku] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [clgewge] c:\windows\nmfoovv.exe
O4 - HKCU\..\Run: [wltdqsu] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [xhnijvr] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [luqgopn] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [ibfphkk] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [qnrvrnm] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [dcfawxp] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [juumvpd] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [mxhrtai] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [lexjxrl] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [uqytvwd] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [kfrhfya] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [putffea] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [pryfxnp] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [gdbusej] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [kxowxol] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [tcosfdx] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [dmvcinv] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [vgieaes] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [hdtxgbp] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [tjhklei] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [yhipopv] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [mljhnhs] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [blvkvck] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [smgrhpy] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [rioceey] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [deluxdb] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [paeifjm] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [lyjdddk] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [sngbfik] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [avjihtj] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [vudhcdf] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [wvbxxyo] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [yslcrgu] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [khlugtk] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [jtyfxvk] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [oegpnxw] c:\windows\fneyhuo.exe
O4 - HKCU\..\Run: [tnyjric] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [hecfsar] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [aqbffux] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [bsaunqx] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [cxscxvg] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [nvsmcud] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [dhurdlx] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [gontfft] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [plucqft] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [ehvbicc] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [ilhkrff] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [ubuumpx] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [mmpvgdp] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [wrewhpf] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [wuerjfq] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [bhntnvj] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [yjimlqb] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [cnvuxdj] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [obrvymq] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [feivfrb] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [kinfkga] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [aokoqkj] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [vrlkuxu] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [kgjbmcr] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [pkusarc] c:\windows\nrahabo.exe
O4 - HKCU\..\Run: [qgqjaqk] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [xwkhnre] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [tncmhel] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [ougggib] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [dumshda] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [qheaqtg] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [dypohpk] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [iyoceir] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [lmnydmp] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [spysron] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [eotpjyv] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [lvygpgu] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [ihcicvr] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [ornumdx] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [sneisel] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [skowwbp] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [wqduhkp] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [qewglyj] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [okskeme] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [aahllfa] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [onspqem] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [mnedpim] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [nenultc] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [kejicsl] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [phbmabp] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [dyefxsj] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [tfhjkbx] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [ltbgxbs] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [bmrelvm] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [xkcfmfa] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [teghdsq] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [ktloybl] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [bbpxiag] c:\windows\vsallfj.exe
O4 - HKCU\..\Run: [eihioej] c:\windows\vsallfj.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: + &Download Express: download this file - C:\Program Files\Download Express\Add_Url.htm
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\tv\EXPLBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{AFC6472E-8E72-4B70-B97B-18EFAADC9351}: NameServer = 216.220.160.7 216.220.160.8
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe