--------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 12:42:37 AM, 9/16/2005
+ Report-Checksum: 90D29E85
+ Scan result:
[840] C:\WINDOWS\system32\fklemgmt.dll -> Spyware.Look2Me : Error during cleaning
[1712] C:\WINDOWS\system32\kjdsl1.dll -> Spyware.Look2Me : Error during cleaning
[532] C:\WINDOWS\system32\kjdsl1.dll -> Spyware.Look2Me : Error during cleaning
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OXEZ09AR\tb3[1].cab/toolbar.dll -> Spyware.WebSearch : Cleaned with backup
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OXEZ09AR\TBPS[1].cab/TBPS.exe -> Spyware.WebSearch : Cleaned with backup
C:\Documents and Settings\Owner\Cookies\owner@abetterinternet[2].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Owner\Cookies\
[email protected][2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Owner\Cookies\
[email protected][2].txt -> Spyware.Cookie.Goldenpalace : Cleaned with backup
C:\Documents and Settings\Owner\Cookies\owner@goldenpalace[1].txt -> Spyware.Cookie.Goldenpalace : Cleaned with backup
C:\Documents and Settings\Owner\Cookies\owner@yieldmanager[1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Owner\Local Settings\Application Data\Wildtangent\Cdacache\00\00\0D.dat/files\wtvh.dll -> Spyware.WildTangent : Cleaned with backup
C:\Documents and Settings\Owner\Local Settings\Temp\!update.exe -> TrojanDownloader.PurityScan.af : Cleaned with backup
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\09G5IDQR\AppWrap[1].exe -> Spyware.AdURL : Cleaned with backup
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\09G5IDQR\AppWrap[2].exe -> TrojanDropper.Agent.pb : Cleaned with backup
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\09G5IDQR\AppWrap[3].exe -> TrojanDropper.Agent.pb : Cleaned with backup
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\CTO281RA\!update-2595[1].0000 -> TrojanDownloader.PurityScan.af : Cleaned with backup
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\CTO281RA\AppWrap[1].exe -> TrojanDropper.Agent.pb : Cleaned with backup
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\CTO281RA\AppWrap[2].exe -> TrojanDropper.Agent.pb : Cleaned with backup
C:\Program Files\180searchassistant\saap.exe -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Spyware.Wheaterbug : Cleaned with backup
C:\Program Files\CasStub\casstub.exe -> TrojanDownloader.Agent.qg : Cleaned with backup
C:\Program Files\Common Files\rrqu\rrqua.exe -> TrojanDownloader.TSUpdate.l : Cleaned with backup
C:\Program Files\Common Files\rrqu\rrqul.exe -> TrojanDownloader.TSUpdate.j : Cleaned with backup
C:\Program Files\Common Files\rrqu\rrqup.exe -> Spyware.Xupiter : Cleaned with backup
C:\Program Files\Common Files\system32.dll/gui.exe -> TrojanDownloader.Agent.rv : Cleaned with backup
C:\Program Files\DNS\gui.exe -> TrojanDownloader.Agent.rv : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\DeactivatedItems\F60F59F2-F63E-4A96-8102-E9771F.asq -> TrojanDownloader.Qoologic.ac : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\4AC8FD69-968A-4F08-90FA-153DD9\9EFAB53D-2A4C-4617-9D72-56519D -> Spyware.WebSearch : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\4AC8FD69-968A-4F08-90FA-153DD9\D538FFDA-337E-4AB2-A022-3C0490 -> Spyware.WebSearch : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\70A8742F-9BE6-4AED-981D-64B39C\5E109332-052F-4252-BC46-45121B -> Spyware.WebSearch : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\70A8742F-9BE6-4AED-981D-64B39C\9F239712-A921-4495-B2A5-491674 -> Spyware.WebSearch : Cleaned with backup
C:\Program Files\Need2Find -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\1.bin -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\1.bin\N2FFXTBR.JAR -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\1.bin\N2NTSTBR.JAR -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\1.bin\PARTNER.DAT -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\Cache -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\Cache\0194A7AC -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\Cache\0194A943 -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\Cache\01A9E4BF -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\History -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\History\search -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\Settings -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Need2Find\bar\Settings\prevcfg.htm -> Spyware.Need2Find : Cleaned with backup
C:\Program Files\Netscape\Netscape\plugins\npzango.dll -> Spyware.WinAD : Cleaned with backup
C:\Program Files\sf\sf.exe -> TrojanDownloader.Small.hs : Cleaned with backup
C:\WINDOWS\CdmFiles\suvtyaidud.dll -> Spyware.SmartPops : Cleaned with backup
C:\WINDOWS\CdmFiles\suvtyaidud.exe -> Spyware.SmartPops : Cleaned with backup
C:\WINDOWS\cfgmgr52\EECH1.bsx -> Spyware.BookedSpace : Cleaned with backup
C:\WINDOWS\cfgmgr52\SPZ3.bsx -> Spyware.BookedSpace : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\ActiveX.ocx -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\id.exe -> TrojanDownloader.Small.agl : Cleaned with backup
C:\WINDOWS\hetyrxhgkp.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\hosts -> Trojan.Qhost.k : Cleaned with backup
C:\WINDOWS\icont.exe -> Spyware.AdURL : Cleaned with backup
C:\WINDOWS\scvhost.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\sfita.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\swycarld.exe -> Spyware.BookedSpace : Cleaned with backup
C:\WINDOWS\system\UpdInst.exe -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\aesmsext.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ansmsext.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\avdiosrv(3).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\awthz.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\Cache\ven_d1.exe -> TrojanDownloader.IstBar : Cleaned with backup
C:\WINDOWS\system32\Cache\ven_d2.exe -> TrojanDownloader.IstBar : Cleaned with backup
C:\WINDOWS\system32\cemsvcs(4).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\cib.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\cmmqccc.exe -> TrojanDownloader.Qoologic.ac : Cleaned with backup
C:\WINDOWS\system32\cngmgr32(2).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\cWtsrvut(2).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\cyyptext.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\daakd.dll -> TrojanDownloader.Qoologic.ac : Cleaned with backup
C:\WINDOWS\system32\dcrgres.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ddound3d.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dgound.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\djmap.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dkrpsetu.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dkvoice.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dnnput.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dqmclien.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dqwsock.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dtnaddr.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dtvx_xx07.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dun.exe -> Spyware.DealHelper : Cleaned with backup
C:\WINDOWS\system32\dwmodemx.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\eliteabh32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\eliteayb32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\elitebdm32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\eliteewz32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\elitegvw32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\elitelup32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\elitesij32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\elitevmx32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\elitewdz32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\eliteyfu32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\elitezwt32.exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\system32\emozl.dll -> Spyware.Adstart : Cleaned with backup
C:\WINDOWS\system32\emozld.exe -> Spyware.Adstart : Cleaned with backup
C:\WINDOWS\system32\ests.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\fsclient.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\hdpertrm.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\hvpertrm.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\hW23msp.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ifagehlp.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\iffosoft.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\igfosoft.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\iifgnt5.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\iLsads.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\Inases.exe -> Spyware.DealHelper : Cleaned with backup
C:\WINDOWS\system32\irs.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ixfxdev.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\jVvaprxy.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\kddsl1.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\kodfr.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\KpdakOneTouch.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\kqdbe.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\kqymgr.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\lkrt.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\lugif13n.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mcxml4.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\MGRATING.DLL -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mhpmspsv.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\moiavi32.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mpdmo(2).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mpvcrt.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mrls31.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mthgrcoi.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mujter40.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\muvcrt.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mwr.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\naprint.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\nftplwiz.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\nSprint.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\nsptools.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\nvtui2.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ohbctrac.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ohecli32(4).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\oie2.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\okbcbcp.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\owe32(5).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\oybcjt32.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\qkkyq.dat -> TrojanDownloader.Qoologic.ac : Cleaned with backup
C:\WINDOWS\system32\rcutils(3).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\rXsmontr.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\sasvcs(3).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\sgprv.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\sjlunirl.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\SSK39.exe -> TrojanDropper.Small.qn : Cleaned with backup
C:\WINDOWS\system32\SVLFREG.DLL -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\tiddd.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\tpswapi.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\tupelib.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\tUpi.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ufnpui.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\uktfs.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\vehelper.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\vgactl.cpl -> TrojanDownloader.Qoologic.ad : Cleaned with backup
C:\WINDOWS\system32\via.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\Wabrzu.exe -> Spyware.DealHelper : Cleaned with backup
C:\WINDOWS\system32\wevdmoe.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\whhext.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\wlps(2).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\wpcsvc.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\wpock32(3).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\wuauclt.dll -> TrojanDownloader.Small : Cleaned with backup
C:\WINDOWS\system32\wup.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\wvnhttp(2)(2).dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\wwcsvc.dll -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\Temp\b.com -> TrojanDropper.Agent.pb : Error during cleaning
C:\WINDOWS\windbg.exe -> Spyware.Hijacker.Generic : Cleaned with backup
::Report End
Logfile of HijackThis v1.99.1
Scan saved at 4:07:12 PM, on 9/16/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DRIVERS\dcfssvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\etb\pokapoka67.exe
C:\program files\valve\steam\steam.exe
C:\WINDOWS\System32\F?nts\winspool.exe
C:\Program Files\rdso\eetu.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\802.11 Wireless LAN\802.11b Wireless CardBus & PCI Adapter HW.11 V1.10\WlanCU.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Owner\Desktop\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL =
http://www.clicktoma...rch.com/sp2.phpR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
N3 - Netscape 7: user_pref("browser.startup.homepage", "
http://home.netscape.com/"); (C:\Documents and Settings\Owner\Application Data\Mozilla\Profiles\default\d1p1j6ri.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "
http://www.google.com/"); (C:\Documents and Settings\Owner\Application Data\Mozilla\Profiles\default\d1p1j6ri.slt\prefs.js)
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
O4 - HKLM\..\Run: [exp] C:\WINDOWS\System32\exp
O4 - HKLM\..\Run: [zqj] C:\WINDOWS\zqj.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [System service66] C:\WINDOWS\etb\pokapoka66.exe
O4 - HKLM\..\Run: [System service67] C:\WINDOWS\etb\pokapoka67.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [CAS Client] "C:\Program Files\Cas\Client\casclient.exe"
O4 - HKCU\..\Run: [rrqu] C:\PROGRA~1\COMMON~1\rrqu\rrqum.exe
O4 - HKCU\..\Run: [Bivsxb] C:\WINDOWS\System32\F?nts\winspool.exe
O4 - HKCU\..\Run: [services32] C:\Program Files\Common Files\Windows\mc-58-12-0000106.exe
O4 - HKCU\..\Run: [DNS] C:\Program Files\Common Files\mc-58-12-0000106.exe
O4 - HKCU\..\Run: [ZwxpRUG9Q] dsktapi.exe
O4 - HKCU\..\Run: [Aida] C:\Program Files\rdso\eetu.exe
O4 - Global Startup: Wireless Configuration Utility.lnk = C:\Program Files\802.11 Wireless LAN\802.11b Wireless CardBus & PCI Adapter HW.11 V1.10\WlanCU.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
http://housecall60.t...all/xscan60.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft....k/?linkid=39204O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
http://us.dl1.yimg.c...nst20040510.cabO16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} -
http://appldnld.m7z....llInstaller.exeO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://by12fd.bay12....es/MsnPUpld.cabO16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) -
http://photo.walmart...ploadClient.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn...pDownloader.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://zone.msn.com/...ro.cab34246.cabO16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) -
http://fdl.msn.com/z...s/heartbeat.cabO16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -
http://chat.msn.com/bin/msnchat45.cabO16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) -
http://pdl.stream.ao.../ampx_en_dl.cabO18 - Filter: text/html - {3551784B-E99A-474f-B782-3EC814442918} - C:\WINDOWS\System32\qlink32.dll
O20 - Winlogon Notify: ShellServiceObjectDelayLoad - C:\WINDOWS\system32\fklemgmt.dll
O23 - Service: dcfssvc (Dcfssvc) - Eastman Kodak Company - C:\WINDOWS\System32\DRIVERS\dcfssvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)