Tech Support Forum - View Single Post

eddmead · 02-24-2006, 06:32 PM

OK all done. you have the vundo log. here are the rest.

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 7:25:41 PM, 2/24/2006
+ Report-Checksum: 11B0AB8A

+ Scan result:

HKLM\SOFTWARE\Classes\CLSID\{01EB5130-FC0C-4d75-B9CE-4801B1B854F5} -> Adware.Begin2Search : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{2178F3FB-2560-458f-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{39C78B50-7E98-4aa0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{39C78B50-7E98-4AA0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup
HKLM\SOFTWARE\Classes\WhIeHelperObj.WhIeHelperObj -> Adware.WebHancer : Error during cleaning
HKLM\SOFTWARE\Classes\WhIeHelperObj.WhIeHelperObj.1 -> Adware.WebHancer : Error during cleaning
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39C78B50-7E98-4aa0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01EB5130-FC0C-4D75-B9CE-4801B1B854F5} -> Adware.Begin2Search : Cleaned with backup
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{39C78B50-7E98-4AA0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8B6DA27E-7F64-4694-8F8F-DC87AB8C6B22} -> Adware.LinkMaker : Cleaned with backup
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9ADE0443-2AB2-4B23-A3F8-AC520773DE12} -> Adware.Begin2Search : Cleaned with backup
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5AF2622-8C75-4DFB-9693-23AB7686A456} -> Adware.Generic : Cleaned with backup
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01EB5130-FC0C-4D75-B9CE-4801B1B854F5} -> Adware.Begin2Search : Cleaned with backup
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{39C78B50-7E98-4AA0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8B6DA27E-7F64-4694-8F8F-DC87AB8C6B22} -> Adware.LinkMaker : Cleaned with backup
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9ADE0443-2AB2-4B23-A3F8-AC520773DE12} -> Adware.Begin2Search : Cleaned with backup
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5AF2622-8C75-4DFB-9693-23AB7686A456} -> Adware.Generic : Cleaned with backup
C:\Documents and Settings\Matthew Deaton\Start Menu\Programs\SpySheriff -> Adware.SpySheriff : Cleaned with backup
C:\Documents and Settings\Matthew Deaton\Start Menu\Programs\SpySheriff\SpySheriff.lnk -> Adware.SpySheriff : Cleaned with backup
C:\fran-forever.exe -> Adware.EZula : Cleaned with backup
C:\NNSCAA638.EXE -> Adware.NewDotNet : Cleaned with backup
C:\Program Files\Jalmp\jalmp.dll -> Adware.Suggestor : Cleaned with backup
C:\Program Files\Jalmp\uninstall.exe -> Adware.Suggestor : Cleaned with backup
C:\Program Files\Network\ipnetwork.exe -> Adware.Maxifiles : Cleaned with backup
C:\Program Files\Network Monitor\netmon.exe -> Not-A-Virus.Monitor.Win32.NetMon.a : Cleaned with backup
C:\WINDOWS\mtuninst.exe -> Adware.MediaTickets : Cleaned with backup
C:\WINDOWS\NDNuninstall6_38.exe -> Adware.NewDotNet : Cleaned with backup
C:\WINDOWS\NDNuninstall7_14.exe -> Adware.NewDotNet : Cleaned with backup
C:\WINDOWS\NDNuninstall7_22.exe -> Adware.NewDotNet : Cleaned with backup
C:\WINDOWS\system32\azamlil118q.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\blowk.dll -> Adware.PurityScan : Cleaned with backup
C:\WINDOWS\system32\ccetcfg.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\cymuid.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\d2j00c1mef.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dmsenh.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dn2401fqe.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dn2u01f9e.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dqcprop.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dtdskres.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\dwdsregt.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\dzspex.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\e0202afmgd2a2.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\e0jmla111d.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\eg68l1ju1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\en68l1ju1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\enp8l17u1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\fpp0037me.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\g4400ehmeh4a0.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\g640lghm164a.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\gp2ol3f31.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\gp80l3lm1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\gpr0l39m1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\h4l2le3o1h.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\h82o0if3e82.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\hpsw.exe -> Adware.Suggestor : Cleaned with backup
C:\WINDOWS\system32\hr2205foe.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\hr6s05j7e.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\hrl2053oe.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\hrps0577e.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\hrr2059oe.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ietelmoh.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ijrnonce.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\inrtprio.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ipagehlp.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ipfxdgps.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ir28l5fu1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ir64l5jq1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ir8ul5l91.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\irismon.dll -> Adware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\irj0l51m1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\irlsl5371.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\irn6l55s1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\irnml5511.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\irr0l59m1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\irssyncd.exe -> Adware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\j6l4lg3q16.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\jkhfc.dll -> Adware.Virtumonde : Cleaned with backup
C:\WINDOWS\system32\jtno0753e.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\kodur.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\kt22l7fo1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\kt4sl7h71.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\kt86l7ls1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ktjsl7171.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\l0j80a1ued.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\l88mlil118q.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\lv8q09l5e.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\lvju0919e.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\lvp6097se.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\lx32.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\m4po0e73eh.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\m4pole731h.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\m664lgjq16oe.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\m8640ijqe8oe0.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\m8ju0i19e8.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mac71u.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\MJCTFP.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mutime.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mv04l9dq1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mv40l9hm1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\mv42l9ho1.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\n02ulaf91d2.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\n46q0ej5eho.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\n64s0gh7e64.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\nsg3177.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nsi3128.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\o6pq0g75e6.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\o8pqli7518.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\oIpqli7518.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\onbcp32r.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\owinosap.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\p26slcj71fo.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\p8r40i9qe8.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\putorsvc.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\pxotowiz.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\rndsregk.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\scdll.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\skndmail.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\sulgntfy.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\wcasf.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\whCC-CLICK.exe/whAgent.exe -> Adware.WebHancer : Cleaned with backup
C:\WINDOWS\system32\wradefui.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\wTvemsp.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\WZDMPS.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\xwsp3res.dll -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\ѕνchost.exe -> Adware.PurityScan : Cleaned with backup
C:\ZICORN001.exe -> Adware.ZenoSearch : Cleaned with backup

::Report End

Incident Status Location

Spyware:spyware/surfsidekick Not disinfected C:\Documents and Settings\Lori Deaton\Application Data\Sskcwrd.dll
Adware:adware/cws.yexe Not disinfected C:\messanger.ini
Adware:adware/dollarrevenue Not disinfected C:\WINDOWS\drsmartload.dat
Adware:adware/commad Not disinfected C:\WINDOWS\uninstall_nmon.vbs
Adware:adware/cws.searchmeup Not disinfected C:\WINDOWS\uniq
Potentially unwanted tool:application/funweb Not disinfected C:\PROGRAM FILES\FunWebProducts
Potentially unwanted tool:application/mywebsearch Not disinfected C:\PROGRAM FILES\MyWebSearch
Potentially unwanted tool:application/regclean32 Not disinfected C:\PROGRAM FILES\Registry Cleaner Trial
Potentially unwanted tool:application/winantivirus2006 Not disinfected C:\PROGRAM FILES\WinAntiVirus Pro 2006
Adware:adware/mediatickets Not disinfected Windows Registry
Potentially unwanted tool:application/myway Not disinfected HKEY_CLASSES_ROOT\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Adware:adware/spysheriff Not disinfected Windows Registry
Virus:Exploit/ByteVerify Not disinfected C:\Documents and Settings\Dustin Brown\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\jar.jar-29d43e43-40ec3f00.zip[Gummy.class]
Potentially unwanted tool:Application/FunWeb Not disinfected C:\Documents and Settings\Lori Deaton\Desktop\hijackthis\backups\backup-20060224-193610-696.inf
Potentially unwanted tool:Application/Winantivirus2006 Not disinfected C:\Program Files\Common Files\Companion Wizard\compwiz.exe
Potentially unwanted tool:Application/Winantivirus2006 Not disinfected C:\Program Files\Common Files\Companion Wizard\WapCHK.dll
Potentially unwanted tool:Application/Winantivirus2006 Not disinfected C:\Program Files\Common Files\WinAntiVirus Pro 2006\WapCHK.dll
Adware:Adware/PurityScan Not disinfected C:\Program Files\Yazzle Sudoku\uninstaller.exe
Adware:Adware/SearchAid Not disinfected C:\WINDOWS\uninstall_nmon.vbs

Logfile of HijackThis v1.99.1
Scan saved at 8:23:34 PM, on 2/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe
C:\Program Files\Lexmark 2200 Series\lxbvbmon.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Documents and Settings\Lori Deaton\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)
O2 - BHO: IE PopUp-Killer ; Neikeisoft - {49E0E0F0-5C30-11D4-945D-000000000003} - C:\PROGRA~1\DEFEND~1\DEFEND~1\PopUp.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Lexmark 2200 Series] "C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe
O4 - Startup: Zeno.lnk = C:\WINDOWS\system32\owinosai.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Thanks again for the help.

02-24-2006, 06:32 PM	#6 (permalink)
eddmead Registered User Join Date: Jul 2005 Posts: 38 OS: xp pro	OK all done. you have the vundo log. here are the rest. --------------------------------------------------------- ewido anti-malware - Scan report --------------------------------------------------------- + Created on: 7:25:41 PM, 2/24/2006 + Report-Checksum: 11B0AB8A + Scan result: HKLM\SOFTWARE\Classes\CLSID\{01EB5130-FC0C-4d75-B9CE-4801B1B854F5} -> Adware.Begin2Search : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{2178F3FB-2560-458f-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{39C78B50-7E98-4aa0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup HKLM\SOFTWARE\Classes\Interface\{39C78B50-7E98-4AA0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup HKLM\SOFTWARE\Classes\WhIeHelperObj.WhIeHelperObj -> Adware.WebHancer : Error during cleaning HKLM\SOFTWARE\Classes\WhIeHelperObj.WhIeHelperObj.1 -> Adware.WebHancer : Error during cleaning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39C78B50-7E98-4aa0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01EB5130-FC0C-4D75-B9CE-4801B1B854F5} -> Adware.Begin2Search : Cleaned with backup HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{39C78B50-7E98-4AA0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8B6DA27E-7F64-4694-8F8F-DC87AB8C6B22} -> Adware.LinkMaker : Cleaned with backup HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9ADE0443-2AB2-4B23-A3F8-AC520773DE12} -> Adware.Begin2Search : Cleaned with backup HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5AF2622-8C75-4DFB-9693-23AB7686A456} -> Adware.Generic : Cleaned with backup HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01EB5130-FC0C-4D75-B9CE-4801B1B854F5} -> Adware.Begin2Search : Cleaned with backup HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{39C78B50-7E98-4AA0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8B6DA27E-7F64-4694-8F8F-DC87AB8C6B22} -> Adware.LinkMaker : Cleaned with backup HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9ADE0443-2AB2-4B23-A3F8-AC520773DE12} -> Adware.Begin2Search : Cleaned with backup HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5AF2622-8C75-4DFB-9693-23AB7686A456} -> Adware.Generic : Cleaned with backup C:\Documents and Settings\Matthew Deaton\Start Menu\Programs\SpySheriff -> Adware.SpySheriff : Cleaned with backup C:\Documents and Settings\Matthew Deaton\Start Menu\Programs\SpySheriff\SpySheriff.lnk -> Adware.SpySheriff : Cleaned with backup C:\fran-forever.exe -> Adware.EZula : Cleaned with backup C:\NNSCAA638.EXE -> Adware.NewDotNet : Cleaned with backup C:\Program Files\Jalmp\jalmp.dll -> Adware.Suggestor : Cleaned with backup C:\Program Files\Jalmp\uninstall.exe -> Adware.Suggestor : Cleaned with backup C:\Program Files\Network\ipnetwork.exe -> Adware.Maxifiles : Cleaned with backup C:\Program Files\Network Monitor\netmon.exe -> Not-A-Virus.Monitor.Win32.NetMon.a : Cleaned with backup C:\WINDOWS\mtuninst.exe -> Adware.MediaTickets : Cleaned with backup C:\WINDOWS\NDNuninstall6_38.exe -> Adware.NewDotNet : Cleaned with backup C:\WINDOWS\NDNuninstall7_14.exe -> Adware.NewDotNet : Cleaned with backup C:\WINDOWS\NDNuninstall7_22.exe -> Adware.NewDotNet : Cleaned with backup C:\WINDOWS\system32\azamlil118q.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\blowk.dll -> Adware.PurityScan : Cleaned with backup C:\WINDOWS\system32\ccetcfg.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\cymuid.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\d2j00c1mef.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\dmsenh.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\dn2401fqe.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\dn2u01f9e.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\dqcprop.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\dtdskres.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\dwdsregt.exe -> Adware.ZenoSearch : Cleaned with backup C:\WINDOWS\system32\dzspex.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\e0202afmgd2a2.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\e0jmla111d.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\eg68l1ju1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\en68l1ju1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\enp8l17u1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\fpp0037me.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\g4400ehmeh4a0.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\g640lghm164a.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\gp2ol3f31.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\gp80l3lm1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\gpr0l39m1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\h4l2le3o1h.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\h82o0if3e82.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\hpsw.exe -> Adware.Suggestor : Cleaned with backup C:\WINDOWS\system32\hr2205foe.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\hr6s05j7e.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\hrl2053oe.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\hrps0577e.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\hrr2059oe.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\ietelmoh.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\ijrnonce.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\inrtprio.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\ipagehlp.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\ipfxdgps.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\ir28l5fu1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\ir64l5jq1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\ir8ul5l91.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\irismon.dll -> Adware.SafeSurfing : Cleaned with backup C:\WINDOWS\system32\irj0l51m1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\irlsl5371.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\irn6l55s1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\irnml5511.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\irr0l59m1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\irssyncd.exe -> Adware.SafeSurfing : Cleaned with backup C:\WINDOWS\system32\j6l4lg3q16.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\jkhfc.dll -> Adware.Virtumonde : Cleaned with backup C:\WINDOWS\system32\jtno0753e.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\kodur.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\kt22l7fo1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\kt4sl7h71.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\kt86l7ls1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\ktjsl7171.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\l0j80a1ued.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\l88mlil118q.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\lv8q09l5e.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\lvju0919e.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\lvp6097se.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\lx32.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\m4po0e73eh.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\m4pole731h.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\m664lgjq16oe.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\m8640ijqe8oe0.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\m8ju0i19e8.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\mac71u.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\MJCTFP.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\mutime.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\mv04l9dq1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\mv40l9hm1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\mv42l9ho1.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\n02ulaf91d2.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\n46q0ej5eho.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\n64s0gh7e64.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\nsg3177.dll -> Adware.EZula : Cleaned with backup C:\WINDOWS\system32\nsi3128.dll -> Adware.EZula : Cleaned with backup C:\WINDOWS\system32\o6pq0g75e6.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\o8pqli7518.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\oIpqli7518.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\onbcp32r.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\owinosap.exe -> Adware.ZenoSearch : Cleaned with backup C:\WINDOWS\system32\p26slcj71fo.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\p8r40i9qe8.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\putorsvc.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\pxotowiz.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\rndsregk.exe -> Adware.ZenoSearch : Cleaned with backup C:\WINDOWS\system32\scdll.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\skndmail.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\sulgntfy.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\wcasf.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\whCC-CLICK.exe/whAgent.exe -> Adware.WebHancer : Cleaned with backup C:\WINDOWS\system32\wradefui.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\wTvemsp.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\WZDMPS.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\xwsp3res.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\ѕνchost.exe -> Adware.PurityScan : Cleaned with backup C:\ZICORN001.exe -> Adware.ZenoSearch : Cleaned with backup ::Report End Incident Status Location Spyware:spyware/surfsidekick Not disinfected C:\Documents and Settings\Lori Deaton\Application Data\Sskcwrd.dll Adware:adware/cws.yexe Not disinfected C:\messanger.ini Adware:adware/dollarrevenue Not disinfected C:\WINDOWS\drsmartload.dat Adware:adware/commad Not disinfected C:\WINDOWS\uninstall_nmon.vbs Adware:adware/cws.searchmeup Not disinfected C:\WINDOWS\uniq Potentially unwanted tool:application/funweb Not disinfected C:\PROGRAM FILES\FunWebProducts Potentially unwanted tool:application/mywebsearch Not disinfected C:\PROGRAM FILES\MyWebSearch Potentially unwanted tool:application/regclean32 Not disinfected C:\PROGRAM FILES\Registry Cleaner Trial Potentially unwanted tool:application/winantivirus2006 Not disinfected C:\PROGRAM FILES\WinAntiVirus Pro 2006 Adware:adware/mediatickets Not disinfected Windows Registry Potentially unwanted tool:application/myway Not disinfected HKEY_CLASSES_ROOT\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179} Adware:adware/spysheriff Not disinfected Windows Registry Virus:Exploit/ByteVerify Not disinfected C:\Documents and Settings\Dustin Brown\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\jar.jar-29d43e43-40ec3f00.zip[Gummy.class] Potentially unwanted tool:Application/FunWeb Not disinfected C:\Documents and Settings\Lori Deaton\Desktop\hijackthis\backups\backup-20060224-193610-696.inf Potentially unwanted tool:Application/Winantivirus2006 Not disinfected C:\Program Files\Common Files\Companion Wizard\compwiz.exe Potentially unwanted tool:Application/Winantivirus2006 Not disinfected C:\Program Files\Common Files\Companion Wizard\WapCHK.dll Potentially unwanted tool:Application/Winantivirus2006 Not disinfected C:\Program Files\Common Files\WinAntiVirus Pro 2006\WapCHK.dll Adware:Adware/PurityScan Not disinfected C:\Program Files\Yazzle Sudoku\uninstaller.exe Adware:Adware/SearchAid Not disinfected C:\WINDOWS\uninstall_nmon.vbs Logfile of HijackThis v1.99.1 Scan saved at 8:23:34 PM, on 2/24/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe C:\Program Files\Dell\Media Experience\PCMService.exe C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe C:\Program Files\Lexmark 2200 Series\lxbvbmon.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Program Files\Dell Support\DSAgnt.exe C:\Documents and Settings\Lori Deaton\Desktop\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file) O2 - BHO: IE PopUp-Killer ; Neikeisoft - {49E0E0F0-5C30-11D4-945D-000000000003} - C:\PROGRA~1\DEFEND~1\DEFEND~1\PopUp.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe" O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [Lexmark 2200 Series] "C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe" O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe O4 - Startup: Zeno.lnk = C:\WINDOWS\system32\owinosai.exe O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe Thanks again for the help.