Hi Kristy, and thanks for getting back with me!
Here are the results from TrendMicro Online Scan
Results:
We have detected 28 infected file(s) with 31 virus(es) on your computer. Only 0 out of 0 infected files are displayed: - 0 virus(es) passed, 0 virus(es) no action available
- 0 virus(es) cleaned, 0 virus(es) uncleanable
- 30 virus(es) deleted, 1 virus(es) undeletable
- 0 virus(es) not found, 0 virus(es) unaccessible
Detected File Associated Virus Name Action Taken
C:\Documents and Settings\Tim\Local Settings\Temp\Del39A.tmp TROJ_AGENT.RS Deletion successful
C:\Documents and Settings\Tim\Local Settings\Temp\lgma.exe TROJ_TOPANTSPY.E Deletion successful
C:\Program Files\Kazaa\PerfectNavUninstall.exe TROJ_KEENVAL.E Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\136.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\162.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\18A.tmp W97M_GROOVIE Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\18B.tmp W97M_GROOVIE Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\1D.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\222.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\26.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\2A.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\2FE.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\34.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\3E7.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\492.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\493.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\494.tmp TROJ_REVOP.A Deletion successful
C:\Program Files\Trend Micro\PC-cillin 2000\QUARANTINE\760.tmp
- GetAccess.class JAVA_BYTEVER.A Deletion successful
- InsecureClassLoader.class JAVA_BYTEVER.A Deletion successful
- Dummy.class JAVA_BYTEVER.A Deletion successful
- Installer.class JAVA_BYTEVER.A Deletion successful
C:\WINDOWS\system32\axpatchf.exe TROJ_WINPUP.B Deletion successful
C:\WINDOWS\system32\dwwizh.exe TROJ_WINPUP.B Deletion successful
C:\WINDOWS\system32\hookdump.exe TROJ_TOPANTSPY.E Undeletable
C:\WINDOWS\system32\INTLGNTC.exe TROJ_WINPUP.B Deletion successful
C:\WINDOWS\system32\mdc.exe TROJ_WINPUP.B Deletion successful
C:\WINDOWS\system32\mvdmoew.exe TROJ_WINPUP.B Deletion successful
C:\WINDOWS\system32\nputi.exe TROJ_WINPUP.B Deletion successful
C:\WINDOWS\system32\_936c.exe TROJ_WINPUP.B Deletion successful
C:\WINDOWS\actulice.exe TROJ_WINPUP.B Deletion successful
C:\WINDOWS\bookmarks.exe TROJ_STARTPAG.HW Deletion successful
Trojan/Worm Check 0 worm/Trojan horse deleted
What we checked:
Malicious activity by a Trojan horse program. Although a Trojan seems like a harmless program, it contains malicious code and once installed can cause damage to your computer.
Results:
We have detected 0 Trojan horse program(s) and worm(s) on your computer. Only 0 out of 0 Trojan horse programs and worms are displayed: - 0 worm(s)/Trojan(s) passed, 0 worm(s)/Trojan(s) no action available
- 0 Worm(s)/Trojan(s) deleted, 0 worm(s)/Trojan(s) undeletable
Trojan/Worm Name Trojan/Worm Type Action Taken
Spyware Check 10 spyware programs removed
What we checked:
Whether personal information was tracked and reported by spyware. Spyware is often installed secretly with legitimate programs downloaded from the Internet.
Results:
We have detected 52 spyware(s) on your computer. Only 0 out of 0 spywares are displayed: - 41 spyware(s) passed, 0 spyware(s) no action available
- 10 spyware(s) removed, 1 spyware(s) unremovable
Spyware Name Spyware Type Action Taken
ADW_MIWAY.A Adware Removal successful
COOKIE_45 Cookie Pass
COOKIE_153 Cookie Pass
COOKIE_222 Cookie Pass
COOKIE_281 Cookie Pass
COOKIE_442 Cookie Pass
COOKIE_488 Cookie Pass
COOKIE_611 Cookie Pass
COOKIE_650 Cookie Pass
COOKIE_722 Cookie Pass
COOKIE_756 Cookie Pass
COOKIE_809 Cookie Pass
COOKIE_875 Cookie Pass
COOKIE_878 Cookie Pass
COOKIE_1020 Cookie Pass
COOKIE_1169 Cookie Pass
COOKIE_1198 Cookie Pass
COOKIE_1362 Cookie Pass
COOKIE_1433 Cookie Pass
COOKIE_1564 Cookie Pass
COOKIE_1802 Cookie Pass
COOKIE_2081 Cookie Pass
COOKIE_2095 Cookie Pass
COOKIE_2136 Cookie Pass
COOKIE_2250 Cookie Pass
COOKIE_2281 Cookie Pass
COOKIE_2346 Cookie Pass
COOKIE_2617 Cookie Pass
COOKIE_2817 Cookie Pass
COOKIE_2842 Cookie Pass
COOKIE_2921 Cookie Pass
COOKIE_3009 Cookie Pass
COOKIE_3014 Cookie Pass
COOKIE_3126 Cookie Pass
SPYW_PPNETWORK.A Spyware Removal successful
COOKIE_3186 Cookie Pass
COOKIE_3189 Cookie Pass
COOKIE_3193 Cookie Pass
ADW_BADBITOR.A Adware Removal successful
COOKIE_3201 Cookie Pass
SPYW_PPNETWORK.B Spyware Removal successful
COOKIE_3220 Cookie Pass
COOKIE_6853 Cookie Pass
COOKIE_3235 Cookie Pass
COOKIE_3238 Cookie Pass
ADW_SIDESEARCH.A Adware Removal successful
ADW_WUPD.F Adware Removal successful
SPYW_MORWILBAR.A Spyware Unremovable
ADW_TOPSEARCH.C Adware Removal successful
SPYW_DYFUCA.L Spyware Removal successful
SPYW_MEDACCESS.A Spyware Removal successful
ADW_MEDACCESS.A Adware Removal successful
Microsoft Vulnerability Check 1 vulnerability detected
What we checked:
Microsoft known security vulnerabilities. These are issues Microsoft has identified and released Critical Updates to fix.
Results:
We have detected 1 vulnerability/vulnerabilities on your computer. Only 0 out of 0 vulnerabilities are displayed.
Risk Level Issue How to Fix
Important A vulnerability in ASP.NET allows an attacker to bypass the security of an ASP.NET Web site, and access a machine. The attacker gains unauthorized access to some areas of the said Web site, and is able to control it accordingly. The actions that the attacker could take would depend on the specific content being protected. MS05-004
Here is 1st HJT Log
Logfile of HijackThis v1.99.1
Scan saved at 12:03:26 AM, on 7/29/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\DWRCS.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\PC-cillin 2000\Tmntsrv.exe
C:\Program Files\WZCBDL Service\WZCBDLS.exe
C:\WINDOWS\LTSMMSG.exe
C:\Program Files\DIGStream\digstream.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\D-Link\Air USB Utility\AirCFG.exe
C:\WINDOWS\system32\i117fufe.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\hookdump.exe
C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Trend Micro\PC-cillin 2000\PNTIOMON.exe
C:\Program Files\Sony\VAIO Action Setup\VAServ.exe
C:\Program Files\Trend Micro\PC-cillin 2000\pccntupd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Tim\My Documents\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.insightbb.comR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - _{00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
O1 - Hosts: 213.219.251.78 www.google.com
O1 - Hosts: 213.219.251.78 google.com
O1 - Hosts: 213.219.251.78 www.google.co.uk
O1 - Hosts: 213.219.251.78 google.co.uk
O1 - Hosts: 213.219.251.78 www.google.ca
O1 - Hosts: 213.219.251.78 google.ca
O1 - Hosts: 213.219.251.78 www.google.es
O1 - Hosts: 213.219.251.78 google.es
O1 - Hosts: 213.219.251.78 www.google.de
O1 - Hosts: 213.219.251.78 google.de
O1 - Hosts: 213.219.251.78 www.google.fr
O1 - Hosts: 213.219.251.78 google.fr
O1 - Hosts: 213.219.251.78 www.google.com.au
O1 - Hosts: 213.219.251.78 google.com.au
O1 - Hosts: 213.219.251.79 www.yahoo.com
O1 - Hosts: 213.219.251.79 yahoo.com
O1 - Hosts: 66.218.75.184 mail.yahoo.com
O1 - Hosts: 213.219.251.80 www.msn.com
O1 - Hosts: 213.219.251.80 msn.com
O1 - Hosts: 213.219.251.80 search.msn.com
O1 - Hosts: 213.219.251.80 www.search.msn.com
O1 - Hosts: 213.219.251.80 go.com
O1 - Hosts: 213.219.251.80 www.go.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\adobe\acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: IEHlprObj Class - {08E10F73-B509-495A-9E57-7FDBEAD7664B} - C:\WINDOWS\system32\mo030414s.dll
O2 - BHO: AzEntretien Class - {0d2def3a-f4f1-42ec-ac4f-132e7ba6e292} - %SystemRoot%\azentretien.dll (file missing)
O2 - BHO: ZToolbar Activator Class - {da7ff3f8-08be-4cac-bc00-94d91c6ae7f4} - C:\WINDOWS\system32\azesearch4.ocx (file missing)
O2 - BHO: TChkBHO Class - {DF810380-26BA-47F7-8B29-9FF1D14FAE93} - C:\WINDOWS\system32\pvjimc.dll (file missing)
O3 - Toolbar: AZE Search - {a19ef336-01d4-48e6-926a-fe7e1c747aed} - C:\WINDOWS\system32\azesearch4.ocx (file missing)
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\System32\khooker.exe
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\bin\tgcmd.exe /server
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE"
O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [SAClient] "C:\Program Files\Insight\BBClient\Programs\RegCon.exe" /admincheck
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [D-Link Air USB Utility] C:\Program Files\D-Link\Air USB Utility\AirCFG.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [i117fufe] C:\WINDOWS\system32\i117fufe.exe
O4 - HKLM\..\Run: [axpatchf] C:\WINDOWS\system32\axpatchf.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Intel system tool] C:\WINDOWS\system32\hookdump.exe
O4 - Startup: Gangsters2Setup.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Real-time Monitor.lnk = ?
O4 - Global Startup: VAIO Action Setup (Server).lnk = ?
O8 - Extra context menu item: &Search -
http://bar.mywebsear...?p=ZNxmk134YYUSO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.insightbb.com
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
http://housecall60.t...all/xscan60.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) -
http://messenger.zon...nt.cab31267.cabO16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
http://ak.imgfarm.co...up1.0.0.8-2.cabO16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) -
http://www.installen...gine/isetup.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://messenger.zon...ro.cab32846.cabO16 - DPF: {CE74A05D-ED12-473A-97F8-85FB0E2F479F} (dlControl.UserControl1) -
http://web1.nugs.net/dev/dlControl.CABO16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} -
http://www.azebar.co...l/azesearch.cabO16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) -
http://messenger.zon...oF.cab31267.cabO16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} (IWinAmpActiveX Class) -
http://cdn.digitalci...illama/ampx.cabO23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINDOWS\system32\DWRCS.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2000\Tmntsrv.exe
O23 - Service: WZCBDL Service (WZCBDLService) - D-Link - C:\Program Files\WZCBDL Service\WZCBDLS.exe
and the 2nd...
Ad-Aware SE Personal
Adobe Acrobat 5.0
Adobe Photoshop Elements
Adobe Premiere 6 LE
Air USB Utility
AntsDownloader
AOL Instant Messenger
BitTorrent S-5.8.10 (SHAD0W's Experimental)
Dazzle MovieStar 5
Dazzle Photo Editor
dBpowerAMP FLAC Codec
dBpowerAMP Music Converter
DigitalPrint 1.1
Doyles Room Poker
DVC
DVD Complete
DVDit! LE
DVgate
ESPNMotion
Experience VAIO
GSIM
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
HijackThis 1.99.1
ImageStation
ImageStation Demo
Insight Broadband QIC Service Activator
J2SE Runtime Environment 5.0 Update 1
J2SE Runtime Environment 5.0 Update 2
Java 2 Runtime Environment Standard Edition v1.3.1_04
LimeWire
LimeWire 4.8.1
LogViewer
Lucent Technologies Soft Modem AMR
Microsoft .NET Framework (English)
Microsoft .NET Framework (English) v1.0.3705
Microsoft Data Access Components KB870669
Microsoft Excel 97
Microsoft Network Guide
Microsoft Small Business Financial Manager 98
Microsoft Windows Journal Viewer
Microsoft Word 97
Morpheus 1.9
Motion JPEG Software Decoder
MovieShaker 3.3
MSN Messenger 7.0
Music Visualizer Library
NIOC Service
NVIDIA Windows 2000/XP Display Drivers
OnDVD
OpenMG Secure Module 3.0.03
PC-cillin 2000
PicoPlayer
PicoPlayer Demo
PicoPlayerSplashScreen
PokerStars
PowerDVD
Quicken 2002 New User Edition
QuickTime
QWS3270 PLUS version 3.5.3
RealPlayer Basic
Screenblast ACID 2.0a
Screenblast Sound Forge 1.0b
Screensavers Installer
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB903235)
Select CashBack
Simple DVD Maker 1.2 (with Dolby Digital)
SiS Audio Driver
SiS Compatible VGA V2.07f.01
Smart Capture
Snood for Windows version 3.01-W
SonicStage 1.2.00
SonicStage CD-R Writing Module
Sony Certificate PCH
Sony DV Shared Library
Sony on Yahoo! Essentials
Support Actions Win2K,WinXP
Surf Accuracy
Update for Windows XP (KB898461)
VAIO Action Setup
VAIO Brezza Wallpaper
VAIO Clock Screen Saver
VAIO Edit Components
VAIO Grid Wallpaper
VAIO Help & Support
VAIO Registration
VAIO Serenus Wallpaper
VAIO Support
VAIO System Information
VERITAS RecordNow DX
Viewpoint Media Player
Webcast
Winamp (remove only)
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
WinMX
WordPerfect Office 2002 OEM
WZCBDL Service