[nick_mi]

[quote]Logfile of HijackThis v1.99.1
Scan saved at 10:20:49 PM, on 6/12/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\WINDOWS\System32\keyhook.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe
C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe
C:\WINDOWS\System32\combo.exe
C:\WINDOWS\jxghdll.exe
C:\WINDOWS\miamenc.EXE
C:\WINDOWS\System32\nsvsvc\nsvsvc.exe
C:\WINDOWS\System32\vidctrl\vidctrl.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\BullsEye Network\bin\bargains.exe
C:\WINDOWS\System32\recbvm50.exe
C:\Program Files\WeirdOnTheWeb\WeirdOnTheWeb.exe
C:\WINDOWS\system\okedibornm.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\System32\??plorer.exe
C:\windows\sunkvka.exe
c:\windows\system32\towsfqe.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\wynesvc.exe
C:\Program Files\rdso\eetu.exe
C:\WINDOWS\System32\rdocc.exe
C:\WINDOWS\SYSTEM32\sistray.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Aprps\CxtPls.exe
C:\Program Files\Cas\Client\casclient.exe
C:\Program Files\Toolbar\TBPS.exe
C:\PROGRA~1\Toolbar\PIB.exe
c:\PROGRA~1\Toolbar\radio.exe
c:\PROGRA~1\Toolbar\WSG.exe
C:\PROGRA~1\Toolbar\TBPSSvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Nick\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch...spx?tb_id=50216
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drs...esearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drs...esearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://w-find.com/sp.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drs...esearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Program Files\Aprps\cxtpls.dll
O2 - BHO: Band Class - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: VBRunDLL Class - {197B8CA4-E215-46DD-8F33-E0544A80E5C4} - C:\WINDOWS\System32\vbrundll.dll
O2 - BHO: Loader Class - {2E246FAE-8420-11D9-870D-000C2917DE7F} - C:\WINDOWS\SYSTEM\Loader.dll
O2 - BHO: (no name) - {38911E3B-D0D9-BF41-852C-DA7F1C1DD1BE} - C:\WINDOWS\System32\mkiq.dll
O2 - BHO: inExplorer Search - {4E7BD74F-2B8D-469E-8AA5-A930F887B531} - C:\PROGRA~1\INEXPL~1\INEXPL~1.DLL
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dll
O2 - BHO: ohb - {999A06FF-10EF-4A29-8640-69E99882C26B} - C:\WINDOWS\System32\nsj78.dll
O2 - BHO: ohb - {9ADE0443-2AB2-4B23-A3F8-AC520773DE12} - C:\WINDOWS\System32\nsx4D7.dll
O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\System32\msbe.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1601.0\en-us\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: inExplorer Search - {4E7BD74F-2B8D-469E-8AA5-A930F887B531} - C:\PROGRA~1\INEXPL~1\INEXPL~1.DLL
O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
O3 - Toolbar: &Search Toolbar - {339BB23F-A864-48C0-A59F-29EA915965EC} - C:\PROGRA~1\Toolbar\toolbar.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [WindowsUpdate] C:\RECYCLER\svchost.exe /s
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [combop.exe] combop.exe
O4 - HKLM\..\Run: [combo.exe] combo.exe
O4 - HKLM\..\Run: [PS1] C:\WINDOWS\System32\ps1.exe
O4 - HKLM\..\Run: [regsync] C:\WINDOWS\System32\regsync.exe
O4 - HKLM\..\Run: [jxghdll] C:\WINDOWS\jxghdll.exe
O4 - HKLM\..\Run: [miamenc] C:\WINDOWS\miamenc.EXE
O4 - HKLM\..\Run: [C:\WINDOWS\VCMnet11.exe] C:\WINDOWS\VCMnet11.exe
O4 - HKLM\..\Run: [Win Server Updt] C:\WINDOWS\wupdt.exe
O4 - HKLM\..\Run: [Nsv] C:\WINDOWS\System32\nsvsvc\nsvsvc.exe
O4 - HKLM\..\Run: [vidctrl] C:\WINDOWS\System32\vidctrl\vidctrl.exe
O4 - HKLM\..\Run: [PSof1] C:\WINDOWS\System32\PSof1.exe
O4 - HKLM\..\Run: [AutoLoaderAproposClient] "C:\WINDOWS\System32\cxtpls_loader.exe" /HideUninstall /HideDir /PC=CP.SAV /ShowLegalNote=nonbranded
O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
O4 - HKLM\..\Run: [p7Fj32W] recbvm50.exe
O4 - HKLM\..\Run: [WeirdOnTheWeb] "C:\Program Files\WeirdOnTheWeb\WeirdOnTheWeb.exe"
O4 - HKLM\..\Run: [iwfzuok] c:\windows\system32\towsfqe.exe
O4 - HKLM\..\Run: [TBPS] C:\PROGRA~1\Toolbar\TBPS.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [areslite] "C:\Program Files\Ares Lite Edition\AresLite.exe" -h
O4 - HKCU\..\Run: [Jpo] C:\WINDOWS\System32\??plorer.exe
O4 - HKCU\..\Run: [rnemcub] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [aguovks] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [kumhkqp] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [ftfbnqt] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [txvhigo] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [undqdci] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [klagctr] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [dfhywgf] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [gimwlhf] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [rfqnvfp] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [soesdii] c:\windows\sunkvka.exe
O4 - HKCU\..\Run: [fsxvmla] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [pyradex] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [yfwrlfk] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [gsodofv] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [berhtqh] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [yrkwjci] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [tbasstv] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [qgwrpfx] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [jhefudr] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [hvwrxlj] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [gwivess] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [usgkbyh] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [sflpiaj] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [aqlohmu] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [uqdhiay] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [vpxrphw] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [mtdsbmk] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [deqexlk] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [fvxuxfp] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [iutaoxi] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [ujwsybl] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [dpbxldj] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [qojianu] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [osykydt] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [cblekbj] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [icvpudm] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [emsfbof] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [qdqvqwo] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [xjvdkxc] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [anpplmi] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [ptruiov] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [uesvtsx] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [mgnysce] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [psxmpah] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [xxauxbq] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [nejqptn] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [pdupbrk] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [xfcjise] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [iwfrywj] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [rvwwakj] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [wrnaivt] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [idtlsht] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [mvggyhb] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [wviwnoh] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [euxpthv] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [uitihor] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [tgfxrot] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [kddcnmu] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [iqfselr] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [jermvvy] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [iqcishk] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [rmwrkor] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [tnfcbll] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [bmmtymt] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [htgohbg] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [htauwms] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [osdbtxx] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [goluyde] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [diktuns] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [csjcbah] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [mqfkxan] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [rdmkhmq] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [naborgb] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [pxcdpbf] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [hokkhfu] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [ycgxmhx] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [xmiiwty] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [drbvblh] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [brfodlb] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [iqlanhp] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [lfoxvjj] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [ucvaxad] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [aactjaf] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [eftpacw] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [dlcutgb] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [bufmvkq] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [dgiatii] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [dhnthgg] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [hevsudh] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [lftaxga] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [axrpgcl] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [dlfwpya] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [lceygnt] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [eaxgtsa] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [gdettac] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [ufidlhg] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [sliysnx] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [cnhoqvc] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [lnpxuyf] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [occapwj] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [xahqhqy] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [vlkfvgs] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [qfhiktq] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [tkxribr] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [scluuai] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [jurwtbi] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [hxugldu] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [xjlopog] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [wkhqwyk] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [ovsebav] c:\windows\ghwcawc.exe
O4 - HKCU\..\Run: [pldtxlt] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [xbhlcjq] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [juftouh] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [dnqrqlx] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [rlceroa] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [rhsicoj] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [gfmuddi] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [wqgiytn] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [yibstfd] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [nprygso] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [xhjxuwn] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [qlodjwu] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [rkasniu] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [llmtvxx] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [dhblvhn] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [fejonmu] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [xdydfro] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [hnbxigt] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [ptiuera] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [bxfoohq] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [blacmxr] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [fuewvvd] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [rtqxvde] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [qoegmgs] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [cwguwaf] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [ascbphn] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [nbscjjb] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [thxnnti] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [jrqbeaw] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [qoqogne] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [vhvpjci] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [dksyrtu] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [rdebtqa] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [skeajio] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [ycmkuae] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [tufiaym] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [wrlxhjk] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [tljybgr] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [pmnvogh] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [jbjfidn] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [hcypamk] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [ucivaxw] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [cwyirjw] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [xnqwheu] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [eqtkajt] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [thkligs] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [xgyyeqn] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [vsoyfgc] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [dlqsbro] c:\windows\devtbcy.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares Lite Edition\Ares.exe" -h
O4 - HKCU\..\Run: [fqyeheh] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [ghuulqj] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [hbbgywm] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [ereabby] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [eagrilo] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [nfnvngs] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [bnwgckt] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [pcxhgcc] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [acktocd] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [kmocqeh] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [betoxbd] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [ebpdmpf] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [njreltr] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [ewlpgqh] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [uuynvei] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [xicjvmf] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [mrgacoy] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [mgejyqk] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [mpvwfcn] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [howggfi] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [ygefvxk] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [husqbko] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [dygonwu] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [fxxdqqv] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [nnuaept] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [huxmjor] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [usjxrjb] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [hhgtjbx] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [jhvfclw] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [wrwyqff] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [vtkfaan] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [ebqweva] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [ljqwfok] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [qvayrmv] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [addaqao] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [nejmkvv] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [wuenwdi] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [erkhmyl] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [qbusqyh] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [gyvhixv] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [vomsqiu] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [olrgodi] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [yopxcdi] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [ucjiecc] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [bsrmbht] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [jhqcyri] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [dvowkbk] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [iprekjt] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [qeircbs] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [acbloif] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [lwaamsc] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [rtuouux] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [rqgnjmh] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [skcqfpo] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [plldwko] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [waqrvig] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [cugxehy] c:\windows\hxiiakw.exe
O4 - HKCU\..\Run: [huptwrd] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [ohkhuib] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [brasepn] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [tvjbtjf] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [mshbrim] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [alixnlt] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [rmojoym] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [evrsglh] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [duiwicg] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [bjqlorr] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [pksytlq] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [aiyjols] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [rrodetk] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [sukmepw] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [asgtqst] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [uywxydp] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [quljjpr] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [dxulyxv] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [wsrgfpd] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [uisbdms] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [ermxrnw] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [jjkptut] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [qfrajio] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [llyiqhl] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [rnfseux] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [gclxbms] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [ypbvqfq] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [Aida] C:\Program Files\rdso\eetu.exe
O4 - HKCU\..\Run: [ecyyqlg] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [ronitgd] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [ulsdxns] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [iubnuux] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [ckpvsqq] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [ipwuyxg] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [buconkd] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [sjovqqb] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [oegnlmm] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [fhiqsiy] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [rblfyup] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [kyepomd] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [cixcycd] c:\windows\gbwmrbp.exe
O4 - HKCU\..\Run: [drkmfoq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ifdsjte] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jighqjn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mxogmpt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jqnkotf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dautcaw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vrqemqh] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ifccnhn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [iuowdnn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vofdixr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mbyxnoe] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [orohsrk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kxlaeum] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ubikscl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [iupercs] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [klicjun] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nvohsqc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mpmcyie] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tqsfdci] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mlsomhf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [saallwl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [iyrofji] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dadgvty] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xtirowi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sspnehd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hvnguka] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hmodlgt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nhbhevi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vthsqhh] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qgtcfew] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nkwissy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yviyrkp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mtgjedt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qbcakst] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [eakbmed] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [axiawhn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yobuinl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [gmsjtrl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dfsvarl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [naggwyr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [duvltai] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [pihipvd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vrjvbuv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dygfnfd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [agooqku] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [apelbil] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [spnmifc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [pnxweml] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [pheioer] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mxpvmit] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yyoqdve] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [bsgrnnb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mhsrcyn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [iwxbmji] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [gwelfph] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dhyldni] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qdrkoau] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dmtwhtl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ihidkse] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ygqieuu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vnyvrnc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [brfmpdr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vetfhah] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wcwqccj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qribgge] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vuxhjtc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yexftpv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ykocjcm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ylinvri] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [juntgag] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ytjraff] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [uixicsf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tyqknvm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [janqmwp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cctgvnw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dvxdswr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qyjdmij] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cgsnljq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dyfguux] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [oigjvna] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tjwptbt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xmhdkvb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dpibjfw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jxourjr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hoiyxnr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ifyaiou] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dyopcff] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xbtavco] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fxqqtkm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ewipgfm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sferxdh] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [rtclfah] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [afxfasd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [shueibm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xdstfnq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [phhkgkf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hcijvpi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ecbogrd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [smxudoh] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [aiwsbyv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [pknxxmt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kfblbft] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tsdinqq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fpjaufw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yutptsi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nhgcvxf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dahhmpy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [eggiqwk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [pdbdmuc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vcveimq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ychcfik] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hhlienc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [urkypbv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [gxyxsqc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fjblmbf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [aaicevk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hxaptvw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cfsbeih] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fotinxy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [llvbncv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fsibdeo] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tsomsne] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kdcapks] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [guyymnb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ovlekah] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nelpugv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fngsqqg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ewpyvyx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [elchiwp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [bpwvyhx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kwjbebd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qoxfeca] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [blaklcr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cvfxppp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ailjrmy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vgpbuwm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kxxythg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kvwqqsx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yivcobr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wdvakfn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ctxvmaw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dimugby] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [uifpqfq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xwrltaj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ktpimuf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sxafinw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fcsabis] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [oxdtgbm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [skcykaa] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [labonyi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yajhqgq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sxjitcy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hbloxam] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [gqxmqml] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ktccyme] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ggxdhkj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [smtbrqk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hnbhmyf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [esxrqvf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [phacphg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xjjoytk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sbtcmkl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xdhakwy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ndksykc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [npyhfqx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jvxqjnf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ewykndh] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [urwgsjt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vwxhyhr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ijuhxcu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ouotptt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vjkkhwi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hxhthcq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [udmxohb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ybnkgvu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mmcmjoq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hfeosah] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sfuxgil] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cnjwqyc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qoqebbf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vculsgw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [htvdutk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vowcook] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wxloiqp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [gmtynoo] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ykuoyyk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [oagdphg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hardtrm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sffhtsm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [voltvoe] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fyhgioq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cyrmgxx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ikxddxe] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [pbditvu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [iartmcm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fvxnpcm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hatxcim] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ylbdthe] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qtccfau] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [eiihjem] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xennpjb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qnlbnvv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vgjlhqt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [pxnulbd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [krjdufg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [rrtcvnm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [bltcasb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dnufsrr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dmxlqin] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nkvekuu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [snbdwxx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [uwnmvwv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tylkorn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ktbemac] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jouihil] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yvgoxip] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [rncfhng] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fqotqrb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xqnfesq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ycvgels] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tbaeklj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [alpmjhf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vpuasfs] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qhsxmlu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ccovdcf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yjjotjy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [njpnanj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [gscwicl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mrptvje] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vunvidy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [aflaunp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [aqcxkwl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [lknmber] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [rafxntc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tmjfdqk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [usvkcqd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qdlkupp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qegsmdt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kwlibgn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wmyimai] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [rfpxokh] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ogkvtva] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fxtwidy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qtlxvoq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [udhftps] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [rcnfbaw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [whrpyyv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [deybhrs] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kuecnpy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jbqaqnk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [llylftx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ujbrqsj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [bblembx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qjjxmnv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [oyaqyfq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ksieakp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wabohva] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fpwsmvy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mxdimee] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hqqajme] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jqudkww] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sdgimje] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [pnmujew] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [lbhwnal] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [bcqaqla] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tllvuso] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jinftrh] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yrcnmvr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ggvxekp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ltujyik] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nrcsmuk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wttolah] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qxbwvax] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ciyaiec] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jlnhnlt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tgauffx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cqqfdcl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xxesxdi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ybaorxt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jhrscht] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cvunpmb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sgkjygm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cfoaiiv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ltxsmop] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [uhunvqd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [plrprnq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [thlscym] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [krpxnjd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [lrdeaxw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qmcvvav] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [epeioxq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wpeewja] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dypjndo] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mocbsjf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [abscyht] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nybylef] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mvsbtul] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [gppvjlh] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nnwossd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [stvhupy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [lctbsve] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yrjmsly] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xdfwkwt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fuitghi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tfydvtx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mkxpaqa] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hxkkdwa] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sdxifvx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vostmip] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xmxfoox] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [aeiumpk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [upojcql] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [letiuux] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qahunri] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ttlxbiy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mgfovbu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fujshlu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [rylbjpd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xwqvgyl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tqsxtve] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [lronpbi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [orjwvrp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mdvqvtj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [plipetg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [yshwcfd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [aixllks] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [octlsjl] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jvpvwwn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [lemkqyj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mdbxetg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fwmjqrm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qwtbgcj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jundhbf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cbtoguy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [amjkvxv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wauopjg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qoenvjq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [bdpptav] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vejkrij] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cktranw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [iyuhsoa] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [pxqfmsf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mxfymlw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [opurxjp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ejtlmga] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mxqhhpx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mynkbry] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [lslnyfe] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mrkcrpw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [samrcct] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [oddrmpp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [oyvyllk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [roemjur] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jwcwksg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mhcjvna] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [betnisc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dydaxjk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [bnscdte] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vxcosvy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [bcbiose] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ppsysqf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tqecdmn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [lhitclb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [iymybfb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hjjorgo] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ncydysx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [gdbywhr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [buishvu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dpjafmm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [efmcpdp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [aalktrm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nbffvhe] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sufdpxq] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tmfdcwr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wqcqswi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [rsmljxx] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [aarramr] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [osxufvj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [enwmvjn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ydjtadb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vxexuig] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [puubfgd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [bgjuxif] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wdcshrs] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [uwsxrxi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [jssumwv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cyaqfgg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vqefpiv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [utkdwsi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mkjlhtb] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fveybdp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qdncefw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ttfogli] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [lxkhglc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dmlvqam] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ixsjlej] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kvpsuoe] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [gxvqjli] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ditcrln] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [urcbxgu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [uuljhvu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [dhxyluh] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [tfrmayy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [owxdxgy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ggeqboj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fgpnviw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qpnmjiw] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hiukcyh] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [qofwrgi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fdmkhfp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vhmibgg] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [pjoogup] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mqxrouv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [cnfogjs] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [woywpoi] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [vnpaydv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [neyrvds] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [wxprcyk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hxpolur] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [nvdwhqt] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fdjptmv] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [edrahry] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ffpjtqk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [glfwlxn] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ofsdqcd] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [voenmka] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ghvswgk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [grbkowo] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [xhnxkfy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [auhpxis] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [bkcmhvm] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [faefhdy] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [mucnjbc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [hbjhhty] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [codtyan] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [txoplkp] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ciafvtc] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ulqvhii] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [fecclgs] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kwwhvaj] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [treavfk] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [sssbkms] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [kblbgiu] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [ykrevjf] c:\windows\uqdkknw.exe
O4 - HKCU\..\Run: [rvasten] c:\windows\uqdkknw.exe
O4 - HKCU\..�

[Advertisements]

your log got cut off, could you post the rest for me?

[Avohir]

your log got cut off, could you post the rest for me?

[nick_mi]

O4 - HKCU\..\Run: [gjnuxpd] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [hskqfvj] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [myfapnr] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [lpdugyb] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [ivpkwkx] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [mpvdrlv] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [qtfcdnj] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [yutnxrk] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [cfkpvuf] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [weuptlx] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [oevgrpl] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [dbaphbc] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [spnufho] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [gociadr] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [yimsfcf] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [ifwmfbe] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [kuxflwj] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [sikoukv] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [swimndu] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [hvrjpyb] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [uueuaru] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [tusvgdw] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [xetedyg] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [tmxxmvi] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [cbngoab] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [psmpqmg] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [bxmftns] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [dhqnksh] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [faevdfo] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [akqkfnn] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [clsngut] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [gfpvifw] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [ypllote] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [bjarxnp] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [bilqehh] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [yrjabwc] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [noylfyj] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [puirboy] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [nqmniib] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [axrmfwu] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [yxuqqhi] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [humpwss] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [rmtpsup] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [mklbryl] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [gntgkrh] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [wbthkvw] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [rklpego] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [ohbpolt] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [sgnuqfp] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [fbxfcoq] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [mwfotnv] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [kunineh] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [xsscska] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [vroojej] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [msitvgu] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [nvriugj] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [cojddsr] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [nrbbosw] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [gmxqpaj] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [sgjwqkj] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [yusyvws] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [gvywlqs] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [gwerrci] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [shodgkx] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [pnwuimx] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [oscsxef] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [kiloxrl] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [sdsddld] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [udnxbhh] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [narnsrq] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [vikscns] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [gguvesq] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [asnjgsc] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [ivtpcer] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [rvmsnco] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [svnxbta] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [uusfmib] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [vidnove] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [ovtvuiv] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [ijpuwwq] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [ukmhndq] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [oboamgs] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [krgeltf] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [kutnhqe] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [fsqfweb] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [bkexwbq] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [dmfoqgj] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [kierphr] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [novhoxp] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [tbkeaed] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [gseoxgb] c:\windows\gafsedu.exe
O4 - HKCU\..\Run: [xuxrlke] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [tavuhqc] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [intvqjb] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [prgslyi] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [alcfnng] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [dtkmgcv] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [runogyu] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [uyahlqh] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [hxpknlt] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [dgihqpb] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [hhyxedh] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [kpcuwqi] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [onylnhw] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [ngfuxyk] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [YwwtRSa8g] rdocc.exe
O4 - HKCU\..\Run: [pltygsk] c:\windows\wnadanm.exe
O4 - HKCU\..\Run: [jyrdfvm] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [dknyovf] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [CAS Client] "C:\Program Files\Cas\Client\casclient.exe"
O4 - HKCU\..\Run: [vlticox] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [nxhjgug] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [cnclilp] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [lexoooi] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [kliteun] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [owqvqai] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [emxoklp] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [fvmacrr] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [ipcqdkp] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [kvnowwk] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [ybrrxnp] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [gspvxrp] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [mpmmsdj] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [dxwvcys] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [orgccet] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [aipwubh] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [nmwjggg] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [bdscnyc] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [djxxivm] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [ynutaia] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [lwnkvot] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [mhxkduo] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [kshwthc] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [evmrnou] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [afitdtk] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [voihbuu] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [bdevmpx] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [oosftjs] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [etabllp] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [glnkucp] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [cepqfmh] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [ovlsxcl] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [mavcjkq] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [xwyeyoc] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [lmrrnkh] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [jcfjixm] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [psutevs] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [qrsmmdo] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [kgqoluu] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [kajmwjv] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [qehnfls] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [fmmkgbj] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [ufqyvfn] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [wutnrdg] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [qigcksg] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [tenyhuy] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [tutetor] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [djupfkx] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [dcxfran] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [ksrnkpu] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [yobtcgg] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [yomgxdm] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [iibijuk] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [lvfvpli] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [cefmskq] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [jhaardc] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [tfkfqyd] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [xssolhr] c:\windows\fjpkwrf.exe
O4 - HKCU\..\Run: [jouqgcs] c:\windows\fjpkwrf.exe
O4 - Global Startup: AdwareFilter Background Protection.lnk = C:\Program Files\AdwareFilter\adwarefilter.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\SYSTEM32\sistray.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O10 - Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O15 - Trusted Zone: *.media-motor.net
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.popuppers.com
O15 - Trusted Zone: *.skoobidoo.com
O15 - Trusted Zone: *.slotchbar.com
O15 - Trusted Zone: *.windupdates.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O15 - Trusted Zone: *.skoobidoo.com (HKLM)
O15 - Trusted Zone: *.slotchbar.com (HKLM)
O15 - Trusted Zone: *.windupdates.com (HKLM)
O15 - Trusted IP range: 67.19.178.84
O15 - Trusted IP range: 67.19.178.84 (HKLM)
O16 - DPF: {0878B424-1F95-4E26-B5AB-F0D349D89650} - http://download.barg...MARKETING32.cab
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windup.../bridge-c18.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {5B70108A-D886-1D3F-C0D4-1B3853BA6860} - http://69.50.182.94/1/gdnUS1882.exe
O16 - DPF: {6D9C9773-6838-0A29-D931-23954A38E853} - http://69.50.182.94/1/gdnUS1882.exe
O16 - DPF: {7149E79C-DC19-4C5E-A53C-A54DDF75EEE9} (IObjSafety.DemoCtl) - http://cabs.media-mo...bs/joysaver.cab
O16 - DPF: {79849612-A98F-45B8-95E9-4D13C7B6B35C} (Loader2 Control) - http://static.topcon...vex/website.ocx
O16 - DPF: {87067F04-DE4C-4688-BC3C-4FCF39D609E7} - http://download.webs...12/QDow_AS2.cab
O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} (HbtInstObj) - http://installs.hotb...ams/hbtools.cab
O16 - DPF: {972BB342-14A7-4660-83C1-51DDBEE171DB} - http://www.pacimedia...ll/pcs_0019.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcaf...,21/mcgdmgr.cab
O16 - DPF: {EC51659D-721F-4CBF-9CEA-5E776D89CEA9} - http://www.pacimedia...ll/pcs_0019.exe
O18 - Protocol: tpro - {FF76A5DA-6158-4439-99FF-EDC1B3FE100C} - C:\PROGRA~1\Toolbar\toolbar.dll
O18 - Filter: text/html - {8293D547-38DD-4325-B35A-F1817EDFA5FC} - C:\Program Files\Cas\Client\casmf.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: System Startup Service  (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe
O23 - Service: WebSeach Toolbar support NT service (TBPSSvc) - Unknown owner - C:\PROGRA~1\Toolbar\TBPSSvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Windows VisFx Components - Unknown owner - C:\WINDOWS\wynesvc.exe

Yeah, just picked a random part pretty decently up into that mumbo jumbo. Btw, I figured out how to get into safe mode(gg not being able to do it when RESETTING comp.)

[Avohir]

I'm turning you over to one of the experts here, miekiemoes. She's more familiar with the tools necessary, and is much better at this than I am

[miekiemoes]

Before I start with this one, can you check if there is a C:\windows\explorer.new present?

Make sure your hidden files and folders are shown, as well as your extensions

Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.
Uncheck: Hide file extensions for known file types
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.

Edit: Can you also look if there is a wininit.ini present in your C:\Windows?
If so, doubleclick on it and copy and paste the contents you see in your next reply.

Edited by miekiemoes, 13 June 2005 - 12:35 PM.

[nick_mi]

I'd do it, but I have to go to work like NOW. I'll try to do it tonight. Ask Avohir, I've been working with him for like 2 weeks on and off on my problems.

Btw, I tried to delete IE via control panels add/remove programs because I get all my pop ups in IE, and I use firefox to search the internet, although I think it just deleted new versions and installed old version.

[miekiemoes]

nick_mi, don't perform any other things I didn't ask or you can make things worse.
Can you please just answer my questions above?

Anyway, let's find out later what comes back, but I have a bad feeling about this... I already made your fix, so the removalprocedure is very long.

It's better to print out the next instructions or save it in notepad, because you also have to work in safe mode without networking support, so this page wouldn't be available then.
It is also important you don't miss a step and perform everything in the right order!! Really important!!
If you miss a step or doing something not in the right order, it can cause problems.

Uninstall next programs via add/remove:

AFA Internet Enhancement
WildTangent
BullsEye Network
WeirdOnTheWeb
Websearch Toolbar
WinTools
Apropos Media
vbrundll
Inexplorer Search
AdwareFilter

REBOOT!!

open notepad and copy and paste next bold in it:
(don't forget to copy and paste REGEDIT4)

REGEDIT4

[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HHKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe /background"
"AIM"="C:\\Program Files\\AIM\\aim.exe -cnetwait.odl"
"Yahoo! Pager"="C:\\Program Files\\Yahoo!\\Messenger\\ypager.exe -quiet"

Save this as fix.reg Choose to save as *all files and place it on your desktop.
Don't use it yet!

Please download LSPfix and save it to the Desktop and unzip it.
Run LSPfix and place a check against the I know what I am doing checkbox.

Highlight every instance of the following name and move it from the Keep to the Remove panel. Be sure to move nothing other than the file listed below!

flsmngr.dll

When done, click on Finish to exit the program; do not use the X in the top right-hand corner as nothing will happen!
Please don't forget this step above!!

* Download and install CCleaner
Do not use it yet.

* Download Nail/Aurora Spyware Fix
Unzip/extract it.
Do not use it yet!

* Download ewido security suite here: http://www.ewido.net/en/download/
Install and update it. Don't let it scan yet!!

* Reboot into Safe Mode`:
°To get into the Safe mode as the computer is booting press and hold your "F8 Key". Use your arrow keys to move to "Safe Mode" and press your Enter key.

* Open the nailfix-folder and doubleclick on nailfix.cmd. <== don't forget this step!!
Your taskbar and icons will disappear for a couple of seconds, that is normal.

* Doubleclick on fix.reg you made before and when it asks you if you want to merge the contents to the registry, click yes/ok.

* Using Windows Explorer, locate the following files/folders, and delete them if still present:

C:\WINDOWS\system32\n.dll
C:\WINDOWS\System32\combo.exe
C:\WINDOWS\jxghdll.exe
c:\windows\fjpkwrf.exe
c:\windows\wnadanm.exe
C:\WINDOWS\miamenc.EXE
C:\WINDOWS\System32\nsvsvc <== folder
C:\WINDOWS\System32\vidctrl <== folder
C:\Program Files\BullsEye Network <== folder
C:\WINDOWS\System32\recbvm50.exe
C:\Program Files\WeirdOnTheWeb <== folder
C:\WINDOWS\system\okedibornm.exe
C:\windows\sunkvka.exe
c:\windows\gafsedu.exe
c:\windows\uqdkknw.exe
c:\windows\gbwmrbp.exe
c:\windows\hxiiakw.exe
c:\windows\devtbcy.exe
c:\windows\ghwcawc.exe
c:\windows\system32\towsfqe.exe
C:\Program Files\rdso\eetu.exe
C:\WINDOWS\System32\rdocc.exe
C:\Program Files\Aprps <== folder
C:\WINDOWS\systb.dll
C:\WINDOWS\System32\vbrundll.dll
C:\WINDOWS\SYSTEM\Loader.dll
C:\WINDOWS\System32\mkiq.dll
C:\PROGRAM FILES\INEXPLORER SEARCH <== folder
C:\WINDOWS\System32\ps1.exe
C:\WINDOWS\System32\regsync.exe
C:\WINDOWS\VCMnet11.exe
C:\WINDOWS\wupdt.exe
C:\WINDOWS\System32\PSof1.exe
C:\WINDOWS\System32\cxtpls_loader.exe
C:\Program Files\AdwareFilter <== folder
C:\Program Files\Cas <== folder
C:\PROGRAM FILES\Toolbar <== folder
C:\WINDOWS\wynesvc.exe

* Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch...spx?tb_id=50216
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drs...esearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drs...esearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://w-find.com/sp.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drs...esearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Program Files\Aprps\cxtpls.dll
O2 - BHO: Band Class - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll
O2 - BHO: VBRunDLL Class - {197B8CA4-E215-46DD-8F33-E0544A80E5C4} - C:\WINDOWS\System32\vbrundll.dll
O2 - BHO: Loader Class - {2E246FAE-8420-11D9-870D-000C2917DE7F} - C:\WINDOWS\SYSTEM\Loader.dll
O2 - BHO: (no name) - {38911E3B-D0D9-BF41-852C-DA7F1C1DD1BE} - C:\WINDOWS\System32\mkiq.dll
O2 - BHO: inExplorer Search - {4E7BD74F-2B8D-469E-8AA5-A930F887B531} - C:\PROGRA~1\INEXPL~1\INEXPL~1.DLL
O2 - BHO: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dll
O2 - BHO: ohb - {999A06FF-10EF-4A29-8640-69E99882C26B} - C:\WINDOWS\System32\nsj78.dll
O2 - BHO: ohb - {9ADE0443-2AB2-4B23-A3F8-AC520773DE12} - C:\WINDOWS\System32\nsx4D7.dll
O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\System32\msbe.dll
O3 - Toolbar: inExplorer Search - {4E7BD74F-2B8D-469E-8AA5-A930F887B531} - C:\PROGRA~1\INEXPL~1\INEXPL~1.DLL
O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
O3 - Toolbar: &Search Toolbar - {339BB23F-A864-48C0-A59F-29EA915965EC} - C:\PROGRA~1\Toolbar\toolbar.dll
O4 - HKLM\..\Run: [WindowsUpdate] C:\RECYCLER\svchost.exe /s
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [combop.exe] combop.exe
O4 - HKLM\..\Run: [combo.exe] combo.exe
O4 - HKLM\..\Run: [PS1] C:\WINDOWS\System32\ps1.exe
O4 - HKLM\..\Run: [regsync] C:\WINDOWS\System32\regsync.exe
O4 - HKLM\..\Run: [jxghdll] C:\WINDOWS\jxghdll.exe
O4 - HKLM\..\Run: [miamenc] C:\WINDOWS\miamenc.EXE
O4 - HKLM\..\Run: [C:\WINDOWS\VCMnet11.exe] C:\WINDOWS\VCMnet11.exe
O4 - HKLM\..\Run: [Win Server Updt] C:\WINDOWS\wupdt.exe
O4 - HKLM\..\Run: [Nsv] C:\WINDOWS\System32\nsvsvc\nsvsvc.exe
O4 - HKLM\..\Run: [vidctrl] C:\WINDOWS\System32\vidctrl\vidctrl.exe
O4 - HKLM\..\Run: [PSof1] C:\WINDOWS\System32\PSof1.exe
O4 - HKLM\..\Run: [AutoLoaderAproposClient] "C:\WINDOWS\System32\cxtpls_loader.exe" /HideUninstall /HideDir /PC=CP.SAV /ShowLegalNote=nonbranded
O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
O4 - HKLM\..\Run: [p7Fj32W] recbvm50.exe
O4 - HKLM\..\Run: [WeirdOnTheWeb] "C:\Program Files\WeirdOnTheWeb\WeirdOnTheWeb.exe"
O4 - HKLM\..\Run: [iwfzuok] c:\windows\system32\towsfqe.exe
O4 - HKLM\..\Run: [TBPS] C:\PROGRA~1\Toolbar\TBPS.exe
O4 - Global Startup: AdwareFilter Background Protection.lnk = C:\Program Files\AdwareFilter\adwarefilter.exe
O15 - Trusted Zone: *.media-motor.net
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.popuppers.com
O15 - Trusted Zone: *.skoobidoo.com
O15 - Trusted Zone: *.slotchbar.com
O15 - Trusted Zone: *.windupdates.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O15 - Trusted Zone: *.skoobidoo.com (HKLM)
O15 - Trusted Zone: *.slotchbar.com (HKLM)
O15 - Trusted Zone: *.windupdates.com (HKLM)
O15 - Trusted IP range: 67.19.178.84
O15 - Trusted IP range: 67.19.178.84 (HKLM)
O16 - DPF: {0878B424-1F95-4E26-B5AB-F0D349D89650} - http://download.barg...MARKETING32.cab
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windup.../bridge-c18.cab
O16 - DPF: {5B70108A-D886-1D3F-C0D4-1B3853BA6860} - http://69.50.182.94/1/gdnUS1882.exe
O16 - DPF: {6D9C9773-6838-0A29-D931-23954A38E853} - http://69.50.182.94/1/gdnUS1882.exe
O16 - DPF: {7149E79C-DC19-4C5E-A53C-A54DDF75EEE9} (IObjSafety.DemoCtl) - http://cabs.media-mo...bs/joysaver.cab
O16 - DPF: {79849612-A98F-45B8-95E9-4D13C7B6B35C} (Loader2 Control) - http://static.topcon...vex/website.ocx
O16 - DPF: {87067F04-DE4C-4688-BC3C-4FCF39D609E7} - http://download.webs...12/QDow_AS2.cab
O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} (HbtInstObj) - http://installs.hotb...ams/hbtools.cab
O16 - DPF: {972BB342-14A7-4660-83C1-51DDBEE171DB} - http://www.pacimedia...ll/pcs_0019.exe
O16 - DPF: {EC51659D-721F-4CBF-9CEA-5E776D89CEA9} - http://www.pacimedia...ll/pcs_0019.exe
O18 - Protocol: tpro - {FF76A5DA-6158-4439-99FF-EDC1B3FE100C} - C:\PROGRA~1\Toolbar\toolbar.dll
O18 - Filter: text/html - {8293D547-38DD-4325-B35A-F1817EDFA5FC} - C:\Program Files\Cas\Client\casmf.dll
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe
O23 - Service: WebSeach Toolbar support NT service (TBPSSvc) - Unknown owner - C:\PROGRA~1\Toolbar\TBPSSvc.exe
O23 - Service: Windows VisFx Components - Unknown owner - C:\WINDOWS\wynesvc.exe

* Click on Fix Checked when finished and exit HijackThis.

* Run Ccleaner and click Run Cleaner (bottom right)

* Still in safe mode; Perform a full scan with ewido.
Let it delete everything it is finding.
When finished, you'll get the option to make a log.
Save this log, because I'll need that later.

* Reboot your system back to normal mode.

Download Findit
Unzip it to your desktop. Make sure the FindIt's.bat and XFind.com are together in the same UNZIPPED folder!
Disconnect from the internet, if you use an always on internet connection unplug it.
Let your PC be idle for 15 minutes !!

Doubleclick FindIt's.bat. When the scan is done, it will produce a log.
If you're getting an error while running findit's.bat similar like: ''C:\windows\system32\cmd.exe
C:\windows\system32\autoexec.nt the system file is not suitable for running ms-dos and microsoft windows applications. choose close to terminate the application..", go to next site and download and run the fix for your system:
http://www.tech-foru...opic/29806.html
Try to run findit's again afterwards.
Post that log in your next reply together with a fresh HijackThis log and the log from ewido and I'll take another look.

[miekiemoes]

Nick_mi, If I were you, I wont wait too long for cleaning this up.

[nick_mi]

Believe me, I do not put it off of my own preferance, work>me. I am doing it now however, I am rebooting after deleting the stuff via add/remove(I have 2 computers) Will do the rest and repost a fresh log in a couple mins.(IE Whenever I get it done.)

[miekiemoes]

It will take more than a couple of minutes to perform the rest of my steps though.. let's say at least one hour to perform it exactly as I asked you to.

And don't forget to perform it in safe mode!

Edited by miekiemoes, 15 June 2005 - 01:54 PM.

[nick_mi]

Ok, I am letting my comp idle for 15 mins unconnected. I have some bad news, the ewido things went 96% through, then got an error, so I have no log and I do not have time right now to run it again. >_<

[miekiemoes]

Ok, we'll see afterwards.
By the way, did you already check if C:\Windows\explorer.new is present?

[nick_mi]

Nope, not there, running last scan now, next post will be the log(s). After that I have to pack up and go to my moms so it will be like 20-30 mins before I am back on. Oh crap, I just got an error in the dos prompt, and I already downloaded the fix. >_< Well, gonna switch comps and at least post a HJT.

[miekiemoes]

Ignore the errors in the dosprompt!
Just run that findit's, post the log together with a new hijackthislog.
That's all I need.

[nick_mi]

Logfile of HijackThis v1.99.1
Scan saved at 3:43:22 PM, on 6/15/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\WINDOWS\System32\keyhook.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe
C:\WINDOWS\System32\wpnur.exe
C:\WINDOWS\SYSTEM32\sistray.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Nick\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1601.0\en-us\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [p7Fj32W] wpnur.exe
O4 - HKLM\..\Run: [TBPS] C:\PROGRA~1\Toolbar\TBPS.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\SYSTEM32\sistray.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O15 - Trusted IP range: 67.19.178.84
O15 - Trusted IP range: 67.19.178.84 (HKLM)
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcaf...,21/mcgdmgr.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

Ok, I'll be back on in like 20-30 mins, btw I still can not change my backtop back to what it was. It just stays that same light blue color >_<

It does the error and stops, btw this is a laptop, so I am taking it out to my moms.

Edited by nick_mi, 15 June 2005 - 02:45 PM.