Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 


Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > Virus/Trojan/Spyware Help > Resolved HJT Threads
Reload this Page Channels.aimtoday.com 404 page
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read


Resolved HJT Threads Resolved spyware and popup issues.

 
 
LinkBack Thread Tools
Old 05-14-2005, 11:03 PM   #1 (permalink)
I helped the forums.
 
Join Date: May 2005
Location: east coast US
Posts: 4
OS: WinXP


Channels.aimtoday.com 404 page
Hello
I ran Ad Aware, and the trendMicro scan. I also used HijackThis Analyzer to produce the following new log.
I'm running Win XP. Under my daughter's profile, after she accesses certain sites such as msn.com, she is automatically re-directed to a faux 404 Page Not Found page under the http://Channels.aimtoday.com URL.
Can you please help me stop this channels.aimtoday redirect?
Thanks much.
gbx79

====================================================================
Log was analyzed using KRC HijackThis Analyzer - Updated on 4/1/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of HijackThis v1.99.1
Scan saved at 12:46:51 AM, on 5/15/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\progra~1\scansoft\paperp~1\pptd40nt.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
C:\Program Files\ScanSoft\PaperPort\PopUp\SmartUI.exe
C:\Program Files\Smartek\WordSmart\trayicon.exe
C:\Program Files\ScanSoft\PaperPort\Pplinks.exe
C:\1 Our Stuff\Denny\My SysTools\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:8080;https=localhost:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (file missing)
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [PaperPort PTD] c:\progra~1\scansoft\paperp~1\pptd40nt.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
O4 - Global Startup: Brother SmartUI PopUp.lnk = C:\Program Files\ScanSoft\PaperPort\PopUp\SmartUI.exe
O4 - Global Startup: WordSmart Tray Icon.lnk = C:\Program Files\Smartek\WordSmart\trayicon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: Yahoo! Hearts - http://download.games.yahoo.com/game...ts/y/ht1_x.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by19fd.bay19.hotmail.msn.com/...s/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1095734362421
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://echat.us.dell.com/Media/Visi.../TLIEFlash.CAB
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe


End of KRC HijackThis Analyzer Log.
====================================================================
gbx79 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here

Old 05-15-2005, 09:59 AM   #2 (permalink)
Moderator, Microsoft Support
 
POADB's Avatar
 
Join Date: Jul 2004
Location: United Kingdom
Posts: 6,482
OS: XP SP2


Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that 'Display the contents of system folders' is checked. If you have Windows XP, the search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that 'Search system folders', 'Search hidden files and folders', and 'Search subfolders' are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

Download and install Spybot S&D http://security.kolla.de/. Run Spybot and click on the 'Search for Updates' button. Install any updates that are available.

Now click Mode menu and choose 'Advanced Mode'. Next click on Immunize to your left. Click the Immunize button (green cross) on top to Immunize your computer - you should do this each time there is an update. Now go to Tools->Resident and make sure that TeaTimer is checked. What this will do is monitor any system/registry changes and will ask you for permission to change any of these settings.

Now click on the 'Spybot-S&D' option on the top left to go back to the main screen. Next click on the 'Check for Problems' button. Let it run the scan. If it finds something, check all those in RED and hit the 'Fix Selected Problems' button. Exit Spybot. If you keep getting the DSO Exploit entries, even after you updated Windows and fixed them, then download the Spybot DSO Exploit Fix http://majorgeeks.com/download4392.html and install it over the current Spybot installation.

Reboot into Safe Mode by hitting the F8 key until menu shows up. In some systems, this may be the F5 key, so try that if F8 doesn't work. Make sure to close any open browsers.

Uninstall the following via the Add/Remove Panel (Start->(Settings)->Control Panel->Add/Remove Programs) if they exist:

BearShare.

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cus...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cus...//www.yahoo.com
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB

Delete the following Files/Folders (delete folders if no filename is specified) according to their directory (if none, just do a search for them) and delete them if they exist:

C:\Program Files\BearShare\

Reboot into Normal Mode run a new HijackThis scan. Save the log file and run KRC HijackThis Analyzer http://www.greyknight17.com/spy/KRC%...20Analyzer.zip in the same folder to get the result.txt log. Just post the contents of the result.txt file in your next reply.
__________________
POADB is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 05-19-2005, 12:32 PM   #3 (permalink)
I helped the forums.
 
Join Date: May 2005
Location: east coast US
Posts: 4
OS: WinXP


Problem still occurring.
Thanks for the help so far.
Here is the results.txt file from the analysis of the HijackThis.log file that I created after following your previous instructions.
I was careful to follow all instructions (don't think I missed anything), but when I logged onto my daughter's XP account and went to WWW.MSN.COM, I again was automatically redirected to http://channels.aimtoday.com/errorpages/404.jsp. Pesky little bugger, this one.


====================================================================
Log was analyzed using KRC HijackThis Analyzer - Updated on 4/1/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of HijackThis v1.99.1
Scan saved at 2:12:54 PM, on 5/19/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\progra~1\scansoft\paperp~1\pptd40nt.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
C:\Program Files\ScanSoft\PaperPort\PopUp\SmartUI.exe
C:\Program Files\Smartek\WordSmart\trayicon.exe
C:\Program Files\ScanSoft\PaperPort\Pplinks.exe
C:\1 Our Stuff\Denny\My SysTools\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:8080;https=localhost:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [PaperPort PTD] c:\progra~1\scansoft\paperp~1\pptd40nt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
O4 - Global Startup: Brother SmartUI PopUp.lnk = C:\Program Files\ScanSoft\PaperPort\PopUp\SmartUI.exe
O4 - Global Startup: WordSmart Tray Icon.lnk = C:\Program Files\Smartek\WordSmart\trayicon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: Yahoo! Hearts - http://download.games.yahoo.com/game...ts/y/ht1_x.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by19fd.bay19.hotmail.msn.com/...s/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1095734362421
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://echat.us.dell.com/Media/Visi.../TLIEFlash.CAB
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe


End of KRC HijackThis Analyzer Log.
====================================================================
gbx79 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 05-19-2005, 11:41 PM   #4 (permalink)
Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter
 
MicroBell's Avatar
 
Join Date: Sep 2004
Location: Carmichaels, PA-USA
Posts: 6,963
OS: Windows 7


Send a message via ICQ to MicroBell Send a message via MSN to MicroBell
Are you logged in under your daughter's user when running the hijackthis scan? It looks like your under the user "Denny". I see nothing in the log thats projecting this hijack. Make sure your logged into her account..before produceing the hijackthis log. In the meantime...please give me this log..

Again..make sure your under her account..not yours or the admin.

Download: StartDreck

Unzip to its own folder and start the program:
Press 'Config'
Press 'Mark All'

UN-Check the 'NT-Services & NT-Kernel...' boxes only:
Press 'Ok'

Press 'Save' and select the location to save the log file (default is the same folder as the application)

Post the log in this thread..
__________________
We Are The BORG Spyware KILLER and Adware Destroyer!





Spyware/Adware Removal Tools
Hijackthis
Ad-aware SE
Spybot Search&Destroy
SpywareBlaster
CWShredder
MicroBell is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 05-20-2005, 07:13 PM   #5 (permalink)
I helped the forums.
 
Join Date: May 2005
Location: east coast US
Posts: 4
OS: WinXP


Logs as requested
Thanks for feedback.
Here are two log files. The first is the HijackThis.log that I ran while logged on to my daughter's account. I was unable to run the KRC HijackThis Analyzer (received a "Debug assertion failed" error).

Logfile of HijackThis v1.99.1
Scan saved at 9:02:32 PM, on 5/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\system32\BRMFRSMG.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\progra~1\scansoft\paperp~1\pptd40nt.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\DIGStream\digstream.exe
C:\PROGRA~1\AWS\WEATHE~1\Weather.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\ScanSoft\PaperPort\PopUp\SmartUI.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Smartek\WordSmart\trayicon.exe
C:\Program Files\ScanSoft\PaperPort\Pplinks.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft Money\System\urlmap.exe
C:\1 Our Stuff\Denny\My SysTools\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [PaperPort PTD] c:\progra~1\scansoft\paperp~1\pptd40nt.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WeatherCast] C:\Program Files\WeatherCast\Weather.exe /q
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Brother SmartUI PopUp.lnk = C:\Program Files\ScanSoft\PaperPort\PopUp\SmartUI.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: WordSmart Tray Icon.lnk = C:\Program Files\Smartek\WordSmart\trayicon.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (HKCU)
O16 - DPF: Yahoo! Hearts - http://download.games.yahoo.com/game...ts/y/ht1_x.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by19fd.bay19.hotmail.msn.com/...s/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1095734362421
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://echat.us.dell.com/Media/Visi.../TLIEFlash.CAB
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe

Here is the Startdreck log file:

StartDreck (build 2.1.7 public stable) - 2005-05-20 @ 21:10:48 (GMT -04:00)
Platform: Windows XP (Win NT 5.1.2600 Service Pack 2)
Internet Explorer: 6.0.2900.2180
Logged in as Rachel at DPOWELL

»Registry
»Run Keys
»Current User
»Run
*msnmsgr="C:\Program Files\MSN Messenger\msnmsgr.exe" /background
*WeatherCast=C:\Program Files\WeatherCast\Weather.exe /q
*MoneyAgent="C:\Program Files\Microsoft Money\System\Money Express.exe"
*Weather=C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
*AIM=C:\Program Files\AIM\aim.exe -cnetwait.odl
»RunOnce
»Default User
»Run
*AVG7_Run=C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE
»RunOnce
»Local Machine
»Run
*BCMSMMSG=BCMSMMSG.exe
*MoneyStartUp10.0="C:\Program Files\Microsoft Money\System\Activation.exe"
*DwlClient=C:\Program Files\Common Files\Dell\EUSW\Support.exe
*PaperPort PTD=c:\progra~1\scansoft\paperp~1\pptd40nt.exe
*mmtask=C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
*QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
*SunJavaUpdateSched=C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
*RoxioDragToDisc="C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
*RemoteControl=C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
*AVG7_CC=C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
*AVG7_EMC=C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
*DIGStream=C:\Program Files\DIGStream\digstream.exe
*TkBellExe="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
+OptionalComponents
+MSFS
*Installed=1
+MAPI
*Installed=1
*NoChange=1
+MAPI
*Installed=1
*NoChange=1
»RunOnce
»RunServices
»RunServicesOnce
»RunOnceEx
»RunServicesOnceEx
»File Associations (CR)
+.bat
*batfile="%1" %*
+.com
*comfile="%1" %*
+.disabled
*SpybotSD.DisabledFile="C:\Program Files\Spybot - Search & Destroy\blindman.exe" "%1"
+.exe
*exefile="%1" %*
+.hta
*htafile=C:\WINDOWS\System32\mshta.exe "%1" %*
+.htm
*htmlfile="C:\Program Files\Internet Explorer\iexplore.exe" -nohome
+.html
*htmlfile="C:\Program Files\Internet Explorer\iexplore.exe" -nohome
+.js
*JSFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.jse
*JSEFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.pif
*piffile="%1" %*
+.reg
*regfile=regedit.exe "%1"
+.scr
*scrfile="%1" /S
+.txt
*txtfile=%SystemRoot%\system32\NOTEPAD.EXE %1
+.vbs
*VBSFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.vbe
*VBEFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.wsh
*WSHFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.wsf
*WSFFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.lnk
`lnkfile= [key or value does not exist]
»Active Setup (LM)
+Internet Explorer/>{26923b43-4d38-484f-9b9e-de460746276c}
*StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
+Browser Customizations/>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS
*StubPath=RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
+Outlook Express/>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}
*StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
+Themes Setup/{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
*StubPath=%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
+Microsoft Outlook Express 6/{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
*StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
+NetMeeting 3.01/{44BBA842-CC51-11CF-AAFA-00AA00B6015B}
*StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
+Microsoft Web Publishing Wizard 1.52/{44BBA851-CC51-11CF-AAFA-00AA00B6015C}
*StubPath=rundll32.exe advpack.dll,LaunchINFSection %SystemRoot%\INF\wpie4x86.inf,PerUserStub
+Internet Explorer/{4b218e3e-bc98-4770-93d3-2731b9329278}
*StubPath=%SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection MarketplaceLinkInstall 896 %systemroot%\inf\ie.inf
+Windows Messenger 4.7/{5945c046-1e7d-11d1-bc44-00c04fd912be}
*StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
+Microsoft Windows Media Player/{6BF52A52-394A-11d3-B153-00C04F79FAA6}
*StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub
+Address Book 6/{7790769C-0471-11d2-AF11-00C04FA35D02}
*StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
+Windows Desktop Update/{89820200-ECBD-11cf-8B85-00AA005B4340}
*StubPath=regsvr32.exe /s /n /i:U shell32.dll
+Internet Explorer 6/{89820200-ECBD-11cf-8B85-00AA005B4383}
*StubPath=%SystemRoot%\system32\ie4uinit.exe
+Fax/{8b15971b-5355-4c82-8c07-7e181ea07608}
*StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.Install.PerUser
»Browser Helper Objects (LM)
*YBIOCtrl.CompanionBHO.4/{02478D38-C3F9-4efb-9B51-7695ECA05670}
`InprocServer32=C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
*{53707962-6F74-2D53-2644-206D7942484F}
`InprocServer32=C:\PROGRA~1\SPYBOT~1\SDHelper.dll
*Google Toolbar Helper/{AA58ED58-01DD-4d91-8333-CF10577473F7}
`InprocServer32=c:\program files\google\googletoolbar1.dll
*MoneySide.BrowserHelperObject.10/{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}
`InprocServer32=C:\Program Files\Microsoft Money\System\mnyviewer.dll
»Internet Explorer
»Current User
*Default_Page_URL=http://www.dellnet.com
*Local Page=C:\WINDOWS\system32\blank.htm
*Search Bar=http://www.msn.com
*Search Page=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
*Start Page=http://www.yahoo.com/
+SearchUrl
*provider=yaho
»Default User
*Default_Page_URL=http://www.dellnet.com
*First Home Page=http://www.dellnet.com
*Start Page=http://www.dellnet.com
»Local Machine
*Default_Page_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
*Default_Search_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
*Local Page=%SystemRoot%\system32\blank.htm
*Search Bar=
*Search Page=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
*Start Page=http://www.dellnet.com
*CustomizeSearch=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
*SearchAssistant=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
»ShellServiceObjectDelayLoad (LM)
*PostBootReminder={7849596a-48ea-486e-8937-a2a3009f31a9}
`InprocServer32=%SystemRoot%\system32\SHELL32.dll
*CDBurn={fbeb8a05-beee-4442-804e-409d6c4515e9}
`InprocServer32=%SystemRoot%\system32\SHELL32.dll
*WebCheck={E6FB5E20-DE35-11CF-9C87-00AA005127ED}
`InprocServer32=%SystemRoot%\System32\webcheck.dll
*SysTray={35CEC8A3-2BE6-11D2-8773-92E220524153}
`InprocServer32=C:\WINDOWS\System32\stobject.dll
»Special NT Values
»Current User
*Load=
*Run=
*Programs=com exe bat pif cmd
*SHELL=
»Default User
*Load=
*Run=
*Programs=com exe bat pif cmd
*SHELL=
»Local Machine
*AppInit_DLLs=
*SHELL=Explorer.exe
*Userinit=C:\WINDOWS\system32\userinit.exe,
»Files
»Autostart Folders
»Current User
*C:\Documents and Settings\Rachel\Start Menu\Programs\Startup\DESKTOP.INI
*C:\Documents and Settings\Rachel\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe
»Default User
»Local Machine
*C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Brother SmartUI PopUp.lnk
*C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DESKTOP.INI
*C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk
*C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Quicken Scheduled Updates.lnk
*C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WordSmart Tray Icon.lnk
»INI-Files
»WIN.INI\[windows]
*LOAD=
*RUN=
»SYSTEM.INI\[boot]
*SHELL=Explorer.exe
»Text Files
*C:\msdos.sys
*C:\config.sys
*C:\WINDOWS\system32\config.nt
`dos=high, umb
`device=%SystemRoot%\system32\himem.sys
`files=40
*C:\autoexec.bat
*C:\WINDOWS\system32\autoexec.nt
`@echo off
`lh %SystemRoot%\system32\mscdexnt.exe
`lh %SystemRoot%\system32\redir
`lh %SystemRoot%\system32\dosx
`SET BLASTER=A220 I5 D1 P330 T3
*C:\WINDOWS\wininit.ini
`[Rename]
`NUL=
`NUL=
`NUL=
`NUL=
*C:\WINDOWS\system32\drivers\etc\hosts
`127.0.0.1 localhost
`127.0.0.1 www.doubleclick.net
`127.0.0.1 ad.preferances.com
`127.0.0.1 ad.doubleclick.com
`127.0.0.1 ads.web.aol.com
`127.0.0.1 ad.doubleclick.net
`127.0.0.1 ad.preferences.com
`127.0.0.1 ad.washingtonpost.com
`127.0.0.1 adpick.switchboard.com
`127.0.0.1 ads.doubleclick.com
`127.0.0.1 ads.infospace.com
`127.0.0.1 ads.msn.com
`127.0.0.1 ads.switchboard.com
`127.0.0.1 ads.enliven.com
`127.0.0.1 oz.valueclick.com
`127.0.0.1 doubleclick.net
`127.0.0.1 ads.doubleclick.net
`127.0.0.1 ad2.doubleclick.net
`127.0.0.1 ad3.doubleclick.net
`127.0.0.1 ad4.doubleclick.net
`127.0.0.1 ad5.doubleclick.net
`127.0.0.1 ad6.doubleclick.net
`127.0.0.1 ad7.doubleclick.net
`127.0.0.1 ad8.doubleclick.net
`127.0.0.1 ad9.doubleclick.net
`127.0.0.1 ad10.doubleclick.net
`127.0.0.1 ad11.doubleclick.net
`127.0.0.1 ad12.doubleclick.net
`127.0.0.1 ad13.doubleclick.net
`127.0.0.1 ad14.doubleclick.net
`127.0.0.1 ad15.doubleclick.net
`127.0.0.1 ad16.doubleclick.net
`127.0.0.1 ad17.doubleclick.net
`127.0.0.1 ad18.doubleclick.net
`127.0.0.1 ad19.doubleclick.net
`127.0.0.1 ad20.doubleclick.net
`127.0.0.1 ad.ch.doubleclick.net
`127.0.0.1 ad.linkexchange.com
`127.0.0.1 banner.linkexchange.com
`127.0.0.1 ads*.focalink.com
`127.0.0.1 ads.imdb.com
`127.0.0.1 commonwealth.riddler.com
`127.0.0.1 globaltrak.net
`127.0.0.1 nrsite.com
`127.0.0.1 www.nrsite.com
`127.0.0.1 ad-up.com
`127.0.0.1 ad.adsmart.net
`127.0.0.1 ad.atlas.cz
`127.0.0.1 ad.blm.net
`127.0.0.1 ad.dogpile.com
`127.0.0.1 ad.infoseek.com
`127.0.0.1 ad.net-service.de
`127.0.0.1 ad.preferences.com
`127.0.0.1 ad.vol.at
`127.0.0.1 adbot.com
`127.0.0.1 adbureau.net
`127.0.0.1 adcount.hollywood.com
`127.0.0.1 add.yaho.com
`127.0.0.1 adex3.flycast.com
`127.0.0.1 adforce.adtech.de
`127.0.0.1 adforce.imgis.com
`127.0.0.1 adimage.blm.net
`127.0.0.1 adlink.deh.de
`127.0.0.1 ads.criticalmass.com
`127.0.0.1 ads.csi.emcweb.com
`127.0.0.1 ads.filez.com
`127.0.0.1 ads.imagine-inc.com
`127.0.0.1 ads.imdb.com
`127.0.0.1 ads.infospace.com
`127.0.0.1 ads.jwtt3.com
`127.0.0.1 ads.mirrormedia.co.uk
`127.0.0.1 ads.msn.com
`127.0.0.1 ads.narrowline.com
`127.0.0.1 ads.newcitynet.com
`127.0.0.1 ads.realcities.com
`127.0.0.1 ads.realmedia.com
`127.0.0.1 ads.switchboard.com
`127.0.0.1 ads.tripod.com
`127.0.0.1 ads.usatoday.com
`127.0.0.1 ads.washingtonpost.com
`127.0.0.1 ads.web.de
`127.0.0.1 ads.web21.com
`127.0.0.1 adserv.newcentury.net
`127.0.0.1 adservant.guj.de
`127.0.0.1 adservant.mediapoint.de
`127.0.0.1 adserver-espnet.sportszone.com
`127.0.0.1 advert.heise.de
`127.0.0.1 banners.internetextra.com
`127.0.0.1 bannerswap.com
`127.0.0.1 dino.mainz.ibm.de
`127.0.0.1 ganges.imagine-inc.com
`127.0.0.1 globaltrack.com
`127.0.0.1 207-87-18-203.wsmg.digex.net
`127.0.0.1 garden.ngadcenter.net
`127.0.0.1 ogilvy.ngadcenter.net
`127.0.0.1 responsemedia-ad.flycast.com
`127.0.0.1 suissa-ad.flycast.com
`127.0.0.1 ugo.eu-adcenter.net
`127.0.0.1 vnu.eu-adcenter.net
`127.0.0.1 ad-adex3.flycast.com
`127.0.0.1 ad.adsmart.net
`127.0.0.1 ad.de.doubleclick.net
`127.0.0.1 ad.fr.doubleclick.net
`127.0.0.1 ad.jp.doubleclick.net
`127.0.0.1 ad.linkexchange.com
`127.0.0.1 ad.linksynergy.com
`127.0.0.1 ad.nl.doubleclick.net
`127.0.0.1 ad.no.doubleclick.net
`127.0.0.1 ad.sma.punto.net
`127.0.0.1 ad.webprovider.com
`127.0.0.1 ad08.focalink.com
`127.0.0.1 adcontroller.unicast.com
`127.0.0.1 adcreatives.imaginemedia.com
`127.0.0.1 adforce.ads.imgis.com
`127.0.0.1 adforce.imgis.com
`127.0.0.1 adfu.blockstackers.com
`127.0.0.1 adimages.earthweb.com
`127.0.0.1 adimg.egroups.com
`127.0.0.1 admedia.xoom.com
`127.0.0.1 adremote.pathfinder.com
`127.0.0.1 ads.admaximize.com
`127.0.0.1 ads.bfast.com
`127.0.0.1 ads.clickhouse.com
`127.0.0.1 ads.fairfax.com.au
`127.0.0.1 ads.fool.com
`127.0.0.1 ads.freshmeat.net
`127.0.0.1 ads.hollywood.com
`127.0.0.1 ads.i33.com
`127.0.0.1 ads.infi.net
`127.0.0.1 ads.link4ads.com
`127.0.0.1 ads.lycos.com
`127.0.0.1 ads.madison.com
`127.0.0.1 ads.mediaodyssey.com
`127.0.0.1 ads.msn.com
`127.0.0.1 ads.ninemsn.com.au
`127.0.0.1 ads.seattletimes.com
`127.0.0.1 ads.smartclicks.com
`127.0.0.1 ads.smartclicks.net
`127.0.0.1 ads.sptimes.com
`127.0.0.1 ads.web.aol.com
`127.0.0.1 ads.xtra.co.nz
`127.0.0.1 ads.zdnet.com
`127.0.0.1 ads01.focalink.com
`127.0.0.1 ads02.focalink.com
`127.0.0.1 ads03.focalink.com
`127.0.0.1 ads04.focalink.com
`127.0.0.1 ads05.focalink.com
`127.0.0.1 ads06.focalink.com
`127.0.0.1 ads08.focalink.com
`127.0.0.1 ads09.focalink.com
`127.0.0.1 ads1.activeagent.at
`127.0.0.1 ads10.focalink.com
`127.0.0.1 ads11.focalink.com
`127.0.0.1 ads12.focalink.com
`127.0.0.1 ads14.focalink.com
`127.0.0.1 ads16.focalink.com
`127.0.0.1 ads17.focalink.com
`127.0.0.1 ads18.focalink.com
`127.0.0.1 ads19.focalink.com
`127.0.0.1 ads2.zdnet.com
`127.0.0.1 ads20.focalink.com
`127.0.0.1 ads21.focalink.com
`127.0.0.1 ads22.focalink.com
`127.0.0.1 ads23.focalink.com
`127.0.0.1 ads24.focalink.com
`127.0.0.1 ads25.focalink.com
`127.0.0.1 ads3.zdnet.com
`127.0.0.1 ads5.gamecity.net
`127.0.0.1 adserv.iafrica.com
`127.0.0.1 adserv.quality-channel.de
`127.0.0.1 adserver.dbusiness.com
`127.0.0.1 adserver.garden.com
`127.0.0.1 adserver.janes.com
`127.0.0.1 adserver.merc.com
`127.0.0.1 adserver.monster.com
`127.0.0.1 adserver.track-star.com
`127.0.0.1 adserver1.ogilvy-interactive.de
`127.0.0.1 adtegrity.spinbox.net
`127.0.0.1 antfarm-ad.flycast.com
`127.0.0.1 au.ads.link4ads.com
`127.0.0.1 banner.media-system.de
`127.0.0.1 banner.orb.net
`127.0.0.1 banner.relcom.ru
`127.0.0.1 banners.easydns.com
`127.0.0.1 banners.looksmart.com
`127.0.0.1 banners.wunderground.com
`127.0.0.1 barnesandnoble.bfast.com
`127.0.0.1 beseenad.looksmart.com
`127.0.0.1 bizad.nikkeibp.co.jp
`127.0.0.1 bn.bfast.com
`127.0.0.1 c3.xxxcounter.com
`127.0.0.1 califia.imaginemedia.com
`127.0.0.1 cds.mediaplex.com
`127.0.0.1 click.avenuea.com
`127.0.0.1 click.go2net.com
`127.0.0.1 click.linksynergy.com
`127.0.0.1 cookies.cmpnet.com
`127.0.0.1 cornflakes.pathfinder.com
`127.0.0.1 counter.hitbox.com
`127.0.0.1 crux.songline.com
`127.0.0.1 erie.smartage.com
`127.0.0.1 etad.telegraph.co.uk
`127.0.0.1 fp.valueclick.com
`127.0.0.1 gadgeteer.pdamart.com
`127.0.0.1 gm.preferences.com
`127.0.0.1 gp.dejanews.com
`127.0.0.1 hg1.hitbox.com
`127.0.0.1 image.click2net.com
`127.0.0.1 image.eimg.com
`127.0.0.1 images2.nytimes.com
`127.0.0.1 jobkeys.ngadcenter.net
`127.0.0.1 kansas.valueclick.com
`127.0.0.1 liquidad.narrowcastmedia.com
`127.0.0.1 macaddictads.snv.futurenet.com
`127.0.0.1 maximumpcads.imaginemedia.com
`127.0.0.1 media.preferences.com
`127.0.0.1 mercury.rmuk.co.uk
`127.0.0.1 mojofarm.sjc.mediaplex.com
`127.0.0.1 nbc.adbureau.net
`127.0.0.1 newads.cmpnet.com
`127.0.0.1 ng3.ads.warnerbros.com
`127.0.0.1 ngads.smartage.com
`127.0.0.1 nsads.hotwired.com
`127.0.0.1 ntbanner.digitalriver.com
`127.0.0.1 ph-ad05.focalink.com
`127.0.0.1 ph-ad07.focalink.com
`127.0.0.1 ph-ad16.focalink.com
`127.0.0.1 ph-ad17.focalink.com
`127.0.0.1 ph-ad18.focalink.com
`127.0.0.1 realads.realmedia.com
`127.0.0.1 redherring.ngadcenter.net
`127.0.0.1 redirect.click2net.com
`127.0.0.1 retaildirect.realmedia.com
`127.0.0.1 s2.focalink.com
`127.0.0.1 sh4sure-images.adbureau.net
`127.0.0.1 spin.spinbox.net
`127.0.0.1 static.admaximize.com
`127.0.0.1 stats.superstats.com
`127.0.0.1 sview.avenuea.com
`127.0.0.1 thinknyc.eu-adcenter.net
`127.0.0.1 tracker.clicktrade.com
`127.0.0.1 tsms-ad.tsms.com
`127.0.0.1 v0.extreme-dm.com
`127.0.0.1 v1.extreme-dm.com
`127.0.0.1 van.ads.link4ads.com
`127.0.0.1 view.accendo.com
`127.0.0.1 view.avenuea.com
`127.0.0.1 w113.hitbox.com
`127.0.0.1 w25.hitbox.com
`127.0.0.1 web2.deja.com
`127.0.0.1 webads.bizservers.com
`127.0.0.1 www.postmasterbannernet.com
`127.0.0.1 www.ad-up.com
`127.0.0.1 www.admex.com
`127.0.0.1 www.alladvantage.com
`127.0.0.1 www.burstnet.com
`127.0.0.1 www.commission-junction.com
`127.0.0.1 www.eads.com
`127.0.0.1 www.freestats.com
`127.0.0.1 www.imaginemedia.com
`127.0.0.1 www.netdirect.nl
`127.0.0.1 www.oneandonlynetwork.com
`127.0.0.1 www.targetshop.com
`127.0.0.1 www.teknosurf2.com
`127.0.0.1 www.teknosurf3.com
`127.0.0.1 www.valueclick.com
`127.0.0.1 www.websitefinancing.com
`127.0.0.1 www2.burstnet.com
`127.0.0.1 www4.trix.net
`127.0.0.1 www80.valueclick.com
`127.0.0.1 z.extreme-dm.com
`127.0.0.1 z0.extreme-dm.com
`127.0.0.1 z1.extreme-dm.com
`127.0.0.1 ads.forbes.net
`127.0.0.1 ads.newcity.com
`127.0.0.1 ads.ign.com
`127.0.0.1 adserver.ign.com
`127.0.0.1 ads.scifi.com
`127.0.0.1 adengine.theglobe.com
`127.0.0.1 ads.tucows.com
`127.0.0.1 adcontent.gamespy.com
`127.0.0.1 ads4.advance.net
`127.0.0.1 ads1.advance.net
`127.0.0.1 eur.yimg.com
`127.0.0.1 us.a1.yimg.com
`127.0.0.1 ad.harmony-central.com
`127.0.0.1 sg.yimg.com
`127.0.0.1 adverity.adverity.com
`127.0.0.1 ads.bloomberg.com
`127.0.0.1 mojofarm.mediaplex.com
`127.0.0.1 ads.mysimon.com
`127.0.0.1 ad.img.yahoo.co.kr
`127.0.0.1 adimages.go.com
`127.0.0.1 kr-adimage.lycos.co.kr
`127.0.0.1 ad.kimo.com.tw
`127.0.0.1 ads.paxnet.co.kr
`127.0.0.1 ads.paxnet.com
`127.0.0.1 ads.eu.msn.com
`127.0.0.1 ads.admonitor.net
`127.0.0.1 wwa.hitbox.com
`127.0.0.1 ads.nytimes.com
`127.0.0.1 ads.erotism.com
`127.0.0.1 banner.rootsweb.com
`127.0.0.1 ads.ole.com
`127.0.0.1 adimg1.chosun.com
`127.0.0.1 ss.mtree.com
`127.0.0.1 adpulse.ads.targetnet.com
`127.0.0.1 adserver.ugo.com
`127.0.0.1 ad.sales.olympics.com
`127.0.0.1 ph-ad21.focalink.com
`127.0.0.1 www.datais.com
`127.0.0.1 oas.mmd.ch
`127.0.0.1 pub-g.ifrance.com
`127.0.0.1 ads.bianca.com
`127.0.0.1 wap.adlink.de
`127.0.0.1 click.adlink.de
`127.0.0.1 banner.adlink.de
`127.0.0.1 hurricane.adlink.de
`127.0.0.1 west.adlink.de
`127.0.0.1 scand.adlink.de
`127.0.0.1 regio.adlink.de
`127.0.0.1 direct.adlink.de
`127.0.0.1 classic.adlink.de
`127.0.0.1 adlui001.adlink.de
`127.0.0.1 banner1.adlink.de
`127.0.0.1 click.mp3.com
`127.0.0.1 adcodes.bla-bla.com
`127.0.0.1 icover.realmedia.com
`127.0.0.1 ca.fp.sandpiper.net
`127.0.0.1 adfarm.mediaplex.com
`127.0.0.1 ads.tmcs.net
`127.0.0.1 amedia.techies.com
`127.0.0.1 www.exchange-it.com
`127.0.0.1 www.ad.tomshardware.com
`127.0.0.1 ad.tomshardware.com
`127.0.0.1 ads.currantbun.com
`127.0.0.1 phoenix-adrunner.mycomputer.com
`127.0.0.1 ads15.focalink.com
`127.0.0.1 ads13.focalink.com
`127.0.0.1 adserver.colleges.com
`127.0.0.1 ads.nwsource.com
`127.0.0.1 ads.guardianunlimited.co.uk
`127.0.0.1 ads.newsint.co.uk
`127.0.0.1 ads.starnews.com
`127.0.0.1 www.linksynergy.com
`127.0.0.1 ieee-images.adbureau.net
`127.0.0.1 connect.247media.ads.link4ads.com
`127.0.0.1 ads.newsdigital.net
`127.0.0.1 arc5.msn.com
`127.0.0.1 arc4.msn.com
`127.0.0.1 arc3.msn.com
`127.0.0.1 arc2.msn.com
`127.0.0.1 arc1.msn.com
`127.0.0.1 ads.discovery.com
`127.0.0.1 im.800.com
`127.0.0.1 img.cmpnet.com
`127.0.0.1 ad7.internetadserver.com
`127.0.0.1 ads.dai.net
`127.0.0.1 ads.cbc.ca
`127.0.0.1 www75.valueclick.com
`127.0.0.1 ads.clearbluemedia.com
`127.0.0.1 ti.click2net.com
`127.0.0.1 www.onresponse.com
`127.0.0.1 ads.list-universe.com
`127.0.0.1 advert.bayarea.com
`127.0.0.1 www3.pagecount.com
`127.0.0.1 www.netsponsors.com
`127.0.0.1 adthru.com
`127.0.0.1 ads.newtimes.com
`127.0.0.1 ads.ugo.com
`127.0.0.1 ads.belointeractive.com
`127.0.0.1 wwb.hitbox.com
`127.0.0.1 comtrack.comclick.com
`127.0.0.1 www.24pm-affiliation.com
`127.0.0.1 www.click-fr.com
`127.0.0.1 www.cibleclick.com
`127.0.0.1 reply.mediatris.net
`127.0.0.1 cgi.declicnet.com
`127.0.0.1 pubs.mgn.net
`127.0.0.1 ads.mcafee.com
`127.0.0.1 ads1.ad-flow.com
`127.0.0.1 ad.be.doubleclick.net
`127.0.0.1 ad.adtraq.com
`127.0.0.1 ad.sg.doubleclick.net
`127.0.0.1 adpop.theglobe.com
`127.0.0.1 ads.adflight.com
`127.0.0.1 ads.detelefoongids.nl
`127.0.0.1 ads.ecircles.com
`127.0.0.1 ads.god.co.uk
`127.0.0.1 ads.hyperbanner.net
`127.0.0.1 ads.jpost.com
`127.0.0.1 ads.netmechanic.com
`127.0.0.1 ads.webcash.nl
`127.0.0.1 adserver.netcast.nl
`127.0.0.1 adserver.webads.com
`127.0.0.1 adserver.webads.nl
`127.0.0.1 adserver1.realtracker.com
`127.0.0.1 adserver2.realtracker.com
`127.0.0.1 adserver3.realtracker.com
`127.0.0.1 delivery1.ads.telegraaf.nl
`127.0.0.1 holland.hyperbanner.net
`127.0.0.1 images.webads.nl
`127.0.0.1 sc.clicksupply.com
`127.0.0.1 service.bfast.com
`127.0.0.1 www.ad4ex.com
`127.0.0.1 www.bannercampaign.com
`127.0.0.1 www.cyberbounty.com
`127.0.0.1 www.netvertising.be
`127.0.0.1 www.speedyclick.com
`127.0.0.1 www.webads.nl
`127.0.0.1 ads.snowball.com
`127.0.0.1 ads.amazingmedia.com
`127.0.0.1 www10.valueclick.com
`127.0.0.1 js1.hitbox.com
`127.0.0.1 rd1.hitbox.com
`127.0.0.1 mt37.mtree.com
`127.0.0.1 ads.gameanswers.com
`127.0.0.1 ads7.udc.advance.net
`127.0.0.1 www23.valueclick.com
`127.0.0.1 banners.nextcard.com
`127.0.0.1 ads.iwon.com
`127.0.0.1 www.qksrv.net
`127.0.0.1 clickserve.cc-dt.com
`127.0.0.1 ads-b.focalink.com
`127.0.0.1 ad2.peel.com
`127.0.0.1 ads.floridatoday.com
`127.0.0.1 stats.adultrevenueservice.com
`127.0.0.1 ads18.bpath.com
`127.0.0.1 ph-ad06.focalink.com
`127.0.0.1 global.msads.net
`127.0.0.1 pluto1.iserver.net
`127.0.0.1 ads1.intelliads.com
`127.0.0.1 primetime.ad.asap-asp.net
`127.0.0.1 ads.stileproject.com
`127.0.0.1 di.image.eshop.msn.com
`127.0.0.1 www.blissnet.net
`127.0.0.1 www.consumerinfo.com
`127.0.0.1 ads.rottentomatoes.com
`127.0.0.1 k5ads.osdn.com
`127.0.0.1 actionsplash.com
`127.0.0.1 campaigns.f2.com.au
`127.0.0.1 adserver.news.com.au
`127.0.0.1 servedby.advertising.com
`127.0.0.1 java.yahoo.com
`127.0.0.1 ad.howstuffworks.com
`127.0.0.1 ads.1for1.com
`127.0.0.1 images.ads.fairfax.com.au
`127.0.0.1 ads.devx.com
`127.0.0.1 utils.mediageneral.com
`127.0.0.1 banners.friendfinder.com
`127.0.0.1 adserver.matchcraft.com
`127.0.0.1 www.dnps.com
`127.0.0.1 creative.whi.co.nz
`127.0.0.1 rmedia.boston.com
`127.0.0.1 webaffiliate.covad.com
`127.0.0.1 ad.iwin.com
`127.0.0.1 www.nailitonline2.com
`127.0.0.1 mds.centrport.net
`127.0.0.1 oas.dispatch.com
`127.0.0.1 adserver.ads360.com
`127.0.0.1 banners.adultfriendfinder.com
`127.0.0.1 ads.as4x.tmcs.net
`127.0.0.1 ads.clickagents.com
`127.0.0.1 banners.chek.com
`127.0.0.1 zi.r.tv.com
`127.0.0.1 ph-ad19.focalink.com
`127.0.0.1 ads.greensboro.com
`127.0.0.1 ad2.adcept.net
`127.0.0.1 ads.colo.kiva.net
`127.0.0.1 adsrv.iol.co.za
`127.0.0.1 mjxads.internet.com
`127.0.0.1 adimage.asiaone.com.sg
`127.0.0.1 ads.vnuemedia.com
`127.0.0.1 affiliate.doteasy.com
`127.0.0.1 m.tribalfusion.com
`127.0.0.1 oas.lee.net
`127.0.0.1 www.banneroverdrive.com
`127.0.0.1 ad3.peel.com
`127.0.0.1 ad1.peel.comwww.xbn.ru
`127.0.0.1 adserver.snowball.com
`127.0.0.1 media15.fastclick.net
`127.0.0.1 ads5.advance.net
`127.0.0.1 ads3.advance.net
`127.0.0.1 ads2.advance.net
`127.0.0.1 ads.advance.net
`127.0.0.1 usbytecom.orbitcycle.com
`127.0.0.1 adbanner.sweepsclub.com
`127.0.0.1 oas.villagevoice.com
`127.0.0.1 www.ad-flow.com
`127.0.0.1 ads.guardian.co.uk
`127.0.0.1 ads.hitcents.com
`127.0.0.1 ads.nypost.com
`127.0.0.1 ads.premiumnetwork.com
`127.0.0.1 ads.ad-flow.com
`127.0.0.1 adserver.hispavista.com
`127.0.0.1 ads.musiccity.com
`127.0.0.1 banners.revenuelink.com
`127.0.0.1 ads1.sptimes.com
`127.0.0.1 adserver.bizland-inc.net
`127.0.0.1 ads.adtegrity.net
`127.0.0.1 media13.fastclick.net
`127.0.0.1 adserver.ukplus.co.uk
`127.0.0.1 ads.live365.com
`127.0.0.1 ads.fredericksburg.com
`127.0.0.1 banners.affiliatefuel.com
`127.0.0.1 ar.atwola.com
`127.0.0.1 ads.bigcitytools.com
`127.0.0.1 netshelter.adtrix.com
`127.0.0.1 y.ibsys.com
`127.0.0.1 adserver.nydailynews.com
`127.0.0.1 s0b.bluestreak.com
`127.0.0.1 images.scripps.com
`127.0.0.1 images.cybereps.com
`127.0.0.1 altfarm.mediaplex.com
`127.0.0.1 krd.realcities.com
`127.0.0.1 www3.bannerspace.com
`127.0.0.1 view.atdmt.com
`127.0.0.1 ads7.advance.net
`127.0.0.1 ad.abcnews.com
`127.0.0.1 ads.newsquest.co.uk
`127.0.0.1 secure.webconnect.net
`127.0.0.1 ads.nandomedia.com
`127.0.0.1 banners.babylon-x.com
`127.0.0.1 media17.fastclick.net
`127.0.0.1 techreview-images.adbureau.net
`127.0.0.1 ads.exhedra.com
`127.0.0.1 ad.trafficmp.com
`127.0.0.1 realmedia-a800.d4p.net
`127.0.0.1 banner.northsky.com
`127.0.0.1 ftp.nacorp.com
`127.0.0.1 www.digitalbettingcasinos.com
`127.0.0.1 c1.zedo.com
`127.0.0.1 ads4.condenet.com
`127.0.0.1 www.brilliantdigital.com
`127.0.0.1 desktop.kazaa.com
`127.0.0.1 shop.kazaa.com
`127.0.0.1 www.bonzi.com
`127.0.0.1 www.b3d.com
`127.0.0.1 neighborhood.standard.net
`127.0.0.1 ads.telegraph.co.uk
`127.0.0.1 spinbox.techtracker.com
`127.0.0.1 toads.osdn.com
`127.0.0.1 ads.themes.org
`127.0.0.1 adserver.trb.com
`127.0.0.1 banner.easyspace.com
`127.0.0.1 www.banner2u.com
`127.0.0.1 ads.thestar.com
`127.0.0.1 ads.digitalmedianet.com
`127.0.0.1 www.fineclicks.com
`127.0.0.1 ads.mdchoice.com
`127.0.0.1 ad.horvitznewspapers.net
`127.0.0.1 adtegrity.thruport.com
`127.0.0.1 a.mktw.net
`127.0.0.1 ads.pennyweb.com
`127.0.0.1 www3.ad.tomshardware.com
`127.0.0.1 www4.ad.tomshardware.com
`127.0.0.1 www6.ad.tomshardware.com
`127.0.0.1 www8.ad.tomshardware.com
`127.0.0.1 www15.ad.tomshardware.com
`127.0.0.1 ads.forbes.com
`127.0.0.1 ads.desmoinesregister.com
`127.0.0.1 adserver.tribuneinteractive.com
`127.0.0.1 bannerads.anytimenews.com
`127.0.0.1 ads1.condenet.com
`127.0.0.1 adserver.anm.co.uk
`127.0.0.1 zrap.zdnet.com.com
`127.0.0.1 bidclix.net
`127.0.0.1 coreg.flashtrack.net
`127.0.0.1 rmads.msn.com
`127.0.0.1 ads.icq.com
`127.0.0.1 cb.icq.com
`127.0.0.1 cf.icq.com
`127.0.0.1 www2.newtopsites.com
`127.0.0.1 images.fastclick.net
`127.0.0.1 adserver.securityfocus.com
`127.0.0.1 www.avsads.com
`127.0.0.1 banners.moviegoods.com
`127.0.0.1 ads.bitsonthewire.com
`127.0.0.1 ads.iambic.com
`127.0.0.1 sfads.osdn.com
`127.0.0.1 fl01.ct2.comclick.com
`127.0.0.1 adserver.phillyburbs.com
`127.0.0.1 marketing.nyi.net
`127.0.0.1 www.netflip.com
`127.0.0.1 image.imgfarm.com
`127.0.0.1 ads.viaarena.com
`127.0.0.1 phpads2.cnpapers.com
`127.0.0.1 ads.astalavista.us
`127.0.0.1 banner.coza.com
`127.0.0.1 adcreative.tribuneinteractive.com
`127.0.0.1 ads.democratandchronicle.com
`127.0.0.1 adlog.com.com
`127.0.0.1 adimg.com.com
`127.0.0.1 adimage.bankrate.com
`127.0.0.1 ads.mediadevil.com
`127.0.0.1 imageserv.adtech.de
`127.0.0.1 ad.se.doubleclick.net
`127.0.0.1 ads.cashsurfers.com
`127.0.0.1 z1.adserver.com
`127.0.0.1 images.bizrate.com
`127.0.0.1 q.pni.com
`127.0.0.1 ad01.mediacorpsingapore.com
`127.0.0.1 adimage.asia1.com.sg
`127.0.0.1 images.newsx.cc
`127.0.0.1 www.adireland.com
`127.0.0.1 ads.iafrica.com
`127.0.0.1 ads.nyi.net
`127.0.0.1 geoads.osdn.com
`127.0.0.1 www.crisscross.com
`127.0.0.1 netcomm.spinbox.net
`127.0.0.1 ads.videoaxs.com
`127.0.0.1 mediamgr.ugo.com
`127.0.0.1 adserver.pollstar.com
`127.0.0.1 information.gopher.com
`127.0.0.1 ads.adviva.net
`127.0.0.1 adsrv.bankrate.com
`127.0.0.1 a207.p.f.qz3.net
`127.0.0.1 ehg-bestbuy.hitbox.com
`127.0.0.1 ehg-intel.hitbox.com
`127.0.0.1 ehg-espn.hitbox.com
`127.0.0.1 ehg-macromedia.hitbox.com
`127.0.0.1 ehg-dig.hitbox.com
`127.0.0.1 speed.pointroll.com
`127.0.0.1 amch.questionmarket.com
`127.0.0.1 ads.gamespy.com
`127.0.0.1 spd.atdmt.com
`127.0.0.1 ads.columbian.com
`127.0.0.1 clickit.go2net.com
`127.0.0.1 vpdc.ru4.com
`127.0.0.1 ads.developershed.com
`127.0.0.1 ads.globeandmail.com
`127.0.0.1 ads.nerve.com
`127.0.0.1 ads2.condenet.com
`127.0.0.1 www.burstnet.com
`127.0.0.1 ads5.canoe.ca
`127.0.0.1 askmen.thruport.com
`127.0.0.1 adsrv2.gainesvillesun.com
`127.0.0.1 ads.theolympian.com
`127.0.0.1 ads.courierpostonline.com
`127.0.0.1 i.timeinc.net
`127.0.0.1 oasads.whitepages.com
`127.0.0.1 rad.msn.com
`127.0.0.1 serve.thisbanner.com
`127.0.0.1 images.trafficmp.com
`127.0.0.1 www.kaplanindex.com
`127.0.0.1 kaplanindex.com
`127.0.0.1 1.httpdads.com
`127.0.0.1 spinbox.maccentral.com
`127.0.0.1 akaads-abc.starwave.com
`127.0.0.1 webad.ajeeb.com
`127.0.0.1 ads.granadamedia.com
`127.0.0.1 oas.uniontrib.com
`127.0.0.1 ads.wnd.com
`127.0.0.1 a3.suntimes.com
`127.0.0.1 tmsads.tribune.com
`127.0.0.1 ads.peel.com
`127.0.0.1 ads.mh5.com
`127.0.0.1 ad.usatoday.com
`127.0.0.1 adserver.digitalpartners.com
`127.0.0.1 ads.mediaturf.net
`127.0.0.1 ads4.clearchannel.com
`127.0.0.1 ads.clearchannel.com
`127.0.0.1 ads2.clearchannel.com
`127.0.0.1 ads.jacksonsun.com
`127.0.0.1 servads.aip.org
`127.0.0.1 ad.au.doubleclick.net
`127.0.0.1 adng.ascii24.com
`127.0.0.1 engage.speedera.net
`127.0.0.1 ads.msn-ppe.com
`127.0.0.1 ad.openfind.com.tw
`127.0.0.1 adi.mainichi.co.jp
`127.0.0.1 ads.northjersey.com
`127.0.0.1 ad.moscowtimes.ru
`127.0.0.1 ad1.aaddzz.com
`127.0.0.1 ds.eyeblaster.com
`127.0.0.1 adserver.digitalpartners.com
`127.0.0.1 oas.uniontrib.com
`127.0.0.1 ads.statesmanjournal.com
`127.0.0.1 ads.centralohio.com
»Program Files
*C:\io.sys
*C:\WINDOWS\system32\win.com
*C:\WINDOWS\explorer.exe
»%PATH% Companion Files
+C:\WINDOWS\system32\notepad.exe
*C:\WINDOWS\notepad.exe
+C:\WINDOWS\system32\slrundll.exe
*C:\WINDOWS\slrundll.exe
+C:\WINDOWS\system32\TASKMAN.EXE
*C:\WINDOWS\TASKMAN.EXE
+C:\WINDOWS\system32\WINHLP32.EXE
*C:\WINDOWS\winhlp32.exe
»System/Drivers
»Running Processes
+0=<idle>
+4=<system>
+624=<unkown>
+688=<unkown>
+712=<unkown>
+756=<unkown>
+768=<unkown>
+928=<unkown>
+996=<unkown>
+1088=<unkown>
+1140=<unkown>
+1288=<unkown>
+1448=<unkown>
+1464=<unkown>
+1480=<unkown>
+1976=<unkown>
+2008=<unkown>
+2024=<unkown>
+2040=<unkown>
+208=<unkown>
+308=<unkown>
+532=C:\WINDOWS\system32\BRMFRSMG.EXE
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\SETUPAPI.dll
*C:\WINDOWS\system32\BREVIF.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\BrSerIf.DLL
*C:\WINDOWS\system32\WINTRUST.dll
*C:\WINDOWS\system32\CRYPT32.dll
*C:\WINDOWS\system32\MSASN1.dll
*C:\WINDOWS\system32\IMAGEHLP.dll
+1572=<unkown>
+1304=<unkown>
+1544=C:\WINDOWS\Explorer.EXE
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\BROWSEUI.dll
*C:\WINDOWS\system32\SHDOCVW.dll
*C:\WINDOWS\system32\CRYPT32.dll
*C:\WINDOWS\system32\MSASN1.dll
*C:\WINDOWS\system32\CRYPTUI.dll
*C:\WINDOWS\system32\WINTRUST.dll
*C:\WINDOWS\system32\IMAGEHLP.dll
*C:\WINDOWS\system32\NETAPI32.dll
*C:\WINDOWS\system32\WININET.dll
*C:\WINDOWS\system32\WLDAP32.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\WINDOWS\system32\UxTheme.dll
*C:\WINDOWS\system32\ShimEng.dll
*C:\WINDOWS\AppPatch\AcGenral.DLL
*C:\WINDOWS\system32\WINMM.dll
*C:\WINDOWS\system32\MSACM32.dll
*C:\WINDOWS\system32\USERENV.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\comctl32.dll
*C:\WINDOWS\system32\serwvdrv.dll
*C:\WINDOWS\system32\umdmxfrm.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\WINDOWS\System32\cscui.dll
*C:\WINDOWS\System32\CSCDLL.dll
*C:\WINDOWS\System32\themeui.dll
*C:\WINDOWS\System32\Secur32.dll
*C:\WINDOWS\System32\MSIMG32.dll
*C:\WINDOWS\system32\xpsp2res.dll
*C:\WINDOWS\System32\actxprxy.dll
*C:\WINDOWS\system32\SAMLIB.dll
*C:\WINDOWS\system32\SETUPAPI.dll
*C:\WINDOWS\system32\LINKINFO.dll
*C:\WINDOWS\system32\ntshrui.dll
*C:\WINDOWS\system32\ATL.DLL
*C:\WINDOWS\System32\urlmon.dll
*C:\WINDOWS\system32\NETSHELL.dll
*C:\WINDOWS\system32\rtutils.dll
*C:\WINDOWS\system32\credui.dll
*C:\WINDOWS\system32\WS2_32.dll
*C:\WINDOWS\system32\WS2HELP.dll
*C:\WINDOWS\system32\iphlpapi.dll
*C:\WINDOWS\system32\rsaenh.dll
*C:\WINDOWS\system32\comdlg32.dll
*C:\WINDOWS\system32\msi.dll
*C:\WINDOWS\system32\browselc.dll
*C:\WINDOWS\system32\WINSTA.dll
*C:\WINDOWS\System32\webcheck.dll
*C:\WINDOWS\System32\WSOCK32.dll
*C:\WINDOWS\System32\stobject.dll
*C:\WINDOWS\System32\BatMeter.dll
*C:\WINDOWS\System32\POWRPROF.dll
*C:\WINDOWS\System32\WTSAPI32.dll
*C:\WINDOWS\system32\DUSER.dll
*C:\WINDOWS\system32\wdmaud.drv
*C:\WINDOWS\system32\SXS.DLL
*C:\WINDOWS\system32\shdoclc.dll
*C:\Program Files\Microsoft Money\System\urlmapps.dll
*C:\WINDOWS\system32\msacm32.drv
*C:\WINDOWS\system32\midimap.dll
*C:\WINDOWS\system32\MPR.dll
*C:\WINDOWS\System32\drprov.dll
*C:\WINDOWS\System32\ntlanman.dll
*C:\WINDOWS\System32\NETUI0.dll
*C:\WINDOWS\System32\NETUI1.dll
*C:\WINDOWS\System32\NETRAP.dll
*C:\WINDOWS\System32\davclnt.dll
*C:\WINDOWS\system32\MSGINA.dll
*C:\WINDOWS\system32\ODBC32.dll
*C:\WINDOWS\system32\odbcint.dll
*C:\WINDOWS\System32\sti.dll
*C:\WINDOWS\System32\CFGMGR32.dll
*C:\WINDOWS\system32\fxsst.dll
*C:\WINDOWS\system32\WINSPOOL.DRV
*C:\WINDOWS\system32\FXSAPI.dll
*C:\WINDOWS\system32\NTMARTA.DLL
*C:\WINDOWS\System32\mydocs.dll
*C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\Shellex.dll
*C:\WINDOWS\SYSTEM32\msxml3.dll
*C:\WINDOWS\system32\WINHTTP.dll
*C:\WINDOWS\system32\RASAPI32.DLL
*C:\WINDOWS\system32\rasman.dll
*C:\WINDOWS\system32\TAPI32.dll
*C:\WINDOWS\System32\jscript.dll
*C:\WINDOWS\system32\msv1_0.dll
*C:\WINDOWS\system32\sensapi.dll
*C:\WINDOWS\System32\mswsock.dll
*C:\WINDOWS\system32\DNSAPI.dll
*C:\WINDOWS\system32\rasadhlp.dll
*C:\WINDOWS\system32\hnetcfg.dll
*C:\WINDOWS\System32\wshtcpip.dll
*C:\WINDOWS\system32\MLANG.dll
*C:\WINDOWS\system32\query.dll
*C:\Program Files\Common Files\System\Ole DB\oledb32.dll
*C:\WINDOWS\system32\MSDART.DLL
*C:\Program Files\Common Files\System\Ole DB\OLEDB32R.DLL
*C:\Program Files\Grisoft\AVG Free\avgse.dll
*C:\WINDOWS\system32\MSVCP71.dll
*C:\WINDOWS\system32\MSVCR71.dll
*C:\Program Files\Microsoft Money\System\mnyviewer.dll
*C:\WINDOWS\system32\wiashext.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
*C:\WINDOWS\System32\zipfldr.dll
*C:\PROGRA~1\Yahoo!\Common\ymmapi.dll
+3284=C:\WINDOWS\BCMSMMSG.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\WINMM.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\serwvdrv.dll
*C:\WINDOWS\system32\umdmxfrm.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\ole32.dll
+3280=C:\progra~1\scansoft\paperp~1\pptd40nt.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\progra~1\scansoft\paperp~1\blicectr.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\ole32.dll
+3376=C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\MMVCP70.dll
*C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\MMVCR70.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\xpsp2res.dll
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\WINDOWS\system32\VERSION.dll
+3500=C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\SHFOLDER.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\comdlg32.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\system32\COMCTL32.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\WINSPOOL.DRV
*C:\WINDOWS\system32\oledlg.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\CDRTC.DLL
*C:\WINDOWS\system32\cdral.DLL
*C:\WINDOWS\system32\NTMARTA.DLL
*C:\WINDOWS\system32\WLDAP32.dll
*C:\WINDOWS\system32\SAMLIB.dll
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\WINDOWS\system32\msi.dll
*C:\WINDOWS\system32\SXS.DLL
*C:\Program Files\Common Files\Roxio Shared\DLLShared\apm.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\SETUPAPI.dll
*C:\WINDOWS\system32\LINKINFO.dll
*C:\WINDOWS\system32\ntshrui.dll
*C:\WINDOWS\system32\ATL.DLL
*C:\WINDOWS\system32\NETAPI32.dll
*C:\WINDOWS\system32\USERENV.dll
+2868=C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\comctl32.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\COMRes.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\Program Files\Roxio\Shared Files\CLRCEngine2.dll
*C:\WINDOWS\system32\MFC42.DLL
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
+3524=C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\AvgAbout.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\AvgCtrl.dll
*C:\WINDOWS\system32\MFC71.DLL
*C:\WINDOWS\system32\MSVCR71.dll
*C:\WINDOWS\system32\COMCTL32.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\MSVFW32.dll
*C:\WINDOWS\system32\WINMM.dll
*C:\WINDOWS\system32\MSVCP71.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\WINDOWS\system32\MPR.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\AvgTest.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\AvgTMgr.dll
*C:\WINDOWS\system32\SHFOLDER.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\AvgTRes.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\AvgSet.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\MFC71ENU.DLL
*C:\WINDOWS\system32\serwvdrv.dll
*C:\WINDOWS\system32\umdmxfrm.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\avglog.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\SETUPAPI.dll
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\Program Files\Grisoft\AVG Free\avgcfg.dll
*C:\Program Files\Grisoft\AVG Free\avgklib.dll
*C:\Program Files\Grisoft\AVG Free\avglng.dll
*C:\WINDOWS\system32\xpsp2res.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\Program Files\Grisoft\AVG Free\avgf.dll
*C:\Program Files\Grisoft\AVG Free\AVGRES.DLL
*C:\Program Files\Grisoft\AVG Free\avgcckrn.dll
*C:\Program Files\Grisoft\AVG Free\avgvault.dll
*C:\Program Files\Grisoft\AVG Free\avgscan.dll
*C:\Program Files\Grisoft\AVG Free\avgunarc.dll
*C:\Program Files\Grisoft\AVG Free\avgrep.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\avgemsui.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\avgemcps.dll
+3636=C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\libsasl.dll
*C:\WINDOWS\system32\WSOCK32.dll
*C:\WINDOWS\system32\WS2_32.dll
*C:\WINDOWS\system32\WS2HELP.dll
*C:\WINDOWS\system32\MSVCR71.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\system32\MSVCP71.dll
*C:\WINDOWS\system32\SHFOLDER.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\comctl32.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\Program Files\Grisoft\AVG Free\avgcfg.dll
*C:\Program Files\Grisoft\AVG Free\avgklib.dll
*C:\Program Files\Grisoft\AVG Free\avglng.dll
*C:\Program Files\Grisoft\AVG Free\avgscan.dll
*C:\Program Files\Grisoft\AVG Free\avgunarc.dll
*C:\WINDOWS\system32\MPR.dll
*C:\WINDOWS\system32\RASAPI32.DLL
*C:\WINDOWS\system32\rasman.dll
*C:\WINDOWS\system32\NETAPI32.dll
*C:\WINDOWS\system32\TAPI32.dll
*C:\WINDOWS\system32\rtutils.dll
*C:\WINDOWS\system32\WINMM.dll
*C:\WINDOWS\system32\serwvdrv.dll
*C:\WINDOWS\system32\umdmxfrm.dll
*C:\WINDOWS\system32\SCHANNEL.DLL
*C:\WINDOWS\system32\Secur32.dll
*C:\WINDOWS\system32\MSASN1.dll
*C:\WINDOWS\system32\CRYPT32.dll
*C:\WINDOWS\system32\USERENV.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\saslcrammd5.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\sasldigestmd5.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\sasllogin.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\saslplain.dll
*C:\Program Files\Grisoft\AVG Free\avgmail.dll
*C:\WINDOWS\system32\SensAPI.DLL
*C:\WINDOWS\system32\xpsp2res.dll
*C:\WINDOWS\system32\mswsock.dll
*C:\WINDOWS\system32\hnetcfg.dll
*C:\WINDOWS\System32\wshtcpip.dll
*C:\PROGRA~1\Grisoft\AVGFRE~1\avgemcps.dll
+3640=C:\Program Files\DIGStream\digstream.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\iphlpapi.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\WS2_32.dll
*C:\WINDOWS\system32\WS2HELP.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\WININET.dll
*C:\WINDOWS\system32\CRYPT32.dll
*C:\WINDOWS\system32\MSASN1.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\comctl32.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\Secur32.dll
*C:\WINDOWS\system32\urlmon.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\WINDOWS\system32\wsock32.dll
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\WINDOWS\system32\xpsp2res.dll
*C:\WINDOWS\system32\RASAPI32.DLL
*C:\WINDOWS\system32\rasman.dll
*C:\WINDOWS\system32\NETAPI32.dll
*C:\WINDOWS\system32\TAPI32.dll
*C:\WINDOWS\system32\rtutils.dll
*C:\WINDOWS\system32\WINMM.dll
*C:\WINDOWS\system32\serwvdrv.dll
*C:\WINDOWS\system32\umdmxfrm.dll
*C:\WINDOWS\system32\msv1_0.dll
*C:\WINDOWS\system32\sensapi.dll
*C:\WINDOWS\system32\USERENV.dll
*C:\WINDOWS\System32\mswsock.dll
*C:\WINDOWS\system32\DNSAPI.dll
*C:\WINDOWS\system32\rasadhlp.dll
*C:\WINDOWS\system32\hnetcfg.dll
*C:\WINDOWS\System32\wshtcpip.dll
*C:\WINDOWS\SYSTEM32\msxml3.dll
*C:\WINDOWS\system32\WINHTTP.dll
+3540=C:\PROGRA~1\AWS\WEATHE~1\Weather.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\WINMM.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\PROGRA~1\AWS\WEATHE~1\LTFIL10N.DLL
*C:\PROGRA~1\AWS\WEATHE~1\LTKRN10N.dll
*C:\PROGRA~1\AWS\WEATHE~1\LTDIS10N.dll
*C:\WINDOWS\system32\comdlg32.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\COMCTL32.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\WINSPOOL.DRV
*C:\WINDOWS\system32\oledlg.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\OLEPRO32.DLL
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\WININET.dll
*C:\WINDOWS\system32\CRYPT32.dll
*C:\WINDOWS\system32\MSASN1.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\system32\serwvdrv.dll
*C:\WINDOWS\system32\umdmxfrm.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\WINDOWS\System32\shdocvw.dll
*C:\WINDOWS\system32\CRYPTUI.dll
*C:\WINDOWS\system32\WINTRUST.dll
*C:\WINDOWS\system32\IMAGEHLP.dll
*C:\WINDOWS\system32\NETAPI32.dll
*C:\WINDOWS\system32\WLDAP32.dll
*C:\WINDOWS\system32\Secur32.dll
*C:\WINDOWS\system32\urlmon.dll
*C:\PROGRA~1\AWS\WEATHE~1\LFCMP10N.DLL
*C:\PROGRA~1\AWS\WEATHE~1\LFIMG10N.DLL
*C:\WINDOWS\system32\SXS.DLL
*C:\WINDOWS\system32\wsock32.dll
*C:\WINDOWS\system32\WS2_32.dll
*C:\WINDOWS\system32\WS2HELP.dll
*C:\WINDOWS\system32\RASAPI32.DLL
*C:\WINDOWS\system32\rasman.dll
*C:\WINDOWS\system32\TAPI32.dll
*C:\WINDOWS\system32\rtutils.dll
*C:\WINDOWS\system32\msv1_0.dll
*C:\WINDOWS\system32\iphlpapi.dll
*C:\WINDOWS\system32\SETUPAPI.dll
*C:\WINDOWS\system32\sensapi.dll
*C:\WINDOWS\system32\USERENV.dll
*C:\WINDOWS\System32\mswsock.dll
*C:\WINDOWS\system32\DNSAPI.dll
*C:\WINDOWS\system32\rasadhlp.dll
*C:\WINDOWS\system32\hnetcfg.dll
*C:\WINDOWS\System32\wshtcpip.dll
*C:\WINDOWS\system32\MLANG.dll
*C:\WINDOWS\System32\shdoclc.dll
*C:\WINDOWS\system32\xpsp2res.dll
*C:\WINDOWS\system32\MSRATING.dll
*C:\WINDOWS\system32\msratelc.dll
*C:\WINDOWS\System32\mshtml.dll
*C:\WINDOWS\System32\msls31.dll
*C:\WINDOWS\System32\msimtf.dll
*C:\WINDOWS\System32\MSCTF.dll
+3696=C:\Program Files\AIM\aim.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\Program Files\AIM\AIM_xmlp.dll
*C:\Program Files\AIM\Xprt.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\ole32.dll
*C:\Program Files\AIM\oscore.dll
*C:\Program Files\AIM\Xpcs.dll
*C:\Program Files\AIM\Xptl.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\Program Files\AIM\idlemon.dll
*C:\Program Files\AIM\oscres.dll
*C:\Program Files\AIM\DUNZIP32.dll
*C:\WINDOWS\system32\comdlg32.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\COMCTL32.dll
*C:\WINDOWS\system32\MSVCR71.dll
*C:\Program Files\AIM\ATE32.dll
*C:\WINDOWS\system32\IMM32.dll
*C:\WINDOWS\system32\WINMM.dll
*C:\WINDOWS\system32\WSOCK32.dll
*C:\WINDOWS\system32\WS2_32.dll
*C:\WINDOWS\system32\WS2HELP.dll
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\system32\serwvdrv.dll
*C:\WINDOWS\system32\umdmxfrm.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\WINDOWS\System32\devenum.dll
*C:\WINDOWS\system32\setupapi.dll
*C:\WINDOWS\system32\WINTRUST.dll
*C:\WINDOWS\system32\CRYPT32.dll
*C:\WINDOWS\system32\MSASN1.dll
*C:\WINDOWS\system32\IMAGEHLP.dll
*C:\WINDOWS\system32\msdmo.dll
*C:\WINDOWS\system32\wdmaud.drv
*C:\WINDOWS\system32\msacm32.drv
*C:\WINDOWS\system32\MSACM32.dll
*C:\WINDOWS\system32\midimap.dll
*C:\WINDOWS\system32\dsound.dll
*C:\Program Files\AIM\sb.dll
*C:\Program Files\AIM\xmlparse.dll
*C:\Program Files\AIM\xmltok.dll
*C:\WINDOWS\system32\urlmon.dll
*C:\Program Files\AIM\CoolSocket.dll
*C:\Program Files\AIM\aimres.dll
*C:\Program Files\AIM\CoolBucky.dll
*C:\Program Files\AIM\AimCoreSvcs.dll
*C:\Program Files\AIM\CoolBos.dll
*C:\Program Files\AIM\AimSecondarySvcs.dll
*C:\Program Files\AIM\oscarui.dll
*C:\Program Files\AIM\WNDUTILS.dll
*C:\Program Files\AIM\AIMAX.dll
*C:\Program Files\AIM\proto.ocm
*C:\Program Files\AIM\CoolHttp.dll
*C:\WINDOWS\system32\mswsock.dll
*C:\WINDOWS\system32\hnetcfg.dll
*C:\WINDOWS\System32\wshtcpip.dll
*C:\Program Files\AIM\startup.ocm
*C:\WINDOWS\system32\WTSAPI32.DLL
*C:\WINDOWS\system32\WINSTA.dll
*C:\WINDOWS\system32\NETAPI32.dll
*C:\Program Files\AIM\aimapi.dll
*C:\WINDOWS\system32\WININET.dll
*C:\Program Files\AIM\buddyui.ocm
*C:\Program Files\AIM\icbmui.ocm
*C:\Program Files\AIM\rtvideo.dll
*C:\Program Files\AIM\locateui.ocm
*C:\Program Files\AIM\browse.ocm
*C:\Program Files\AIM\chatui.ocm
*C:\Program Files\AIM\ticker.ocm
*C:\Program Files\AIM\alertui.ocm
*C:\WINDOWS\system32\LINKINFO.dll
*C:\WINDOWS\system32\ntshrui.dll
*C:\WINDOWS\system32\ATL.DLL
*C:\WINDOWS\system32\USERENV.dll
*C:\WINDOWS\system32\RASAPI32.DLL
*C:\WINDOWS\system32\rasman.dll
*C:\WINDOWS\system32\TAPI32.dll
*C:\WINDOWS\system32\rtutils.dll
*C:\WINDOWS\system32\secur32.dll
*C:\WINDOWS\system32\msv1_0.dll
*C:\WINDOWS\system32\iphlpapi.dll
*C:\Program Files\AIM\oscmain.ocm
*C:\Program Files\AIM\miscui.ocm
*C:\WINDOWS\system32\rsaenh.dll
*C:\WINDOWS\system32\xpsp2res.dll
*C:\Program Files\AIM\osclogin.ocm
*C:\Program Files\AIM\stats.ocm
*C:\Program Files\AIM\popup.ocm
*C:\Program Files\AIM\oscsrch.ocm
*C:\Program Files\AIM\rvapps.ocm
*C:\Program Files\AIM\oscmail.ocm
*C:\Program Files\AIM\NTP.ocm
*C:\Program Files\AIM\ateima32.dll
*C:\WINDOWS\System32\quartz.dll
+3716=C:\Program Files\ScanSoft\PaperPort\PopUp\SmartUI.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\Program Files\ScanSoft\PaperPort\PopUp\MSVBVM60.DLL
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\VERSION.DLL
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\WINDOWS\system32\MSCOMCT2.OCX
*C:\WINDOWS\system32\msi.dll
*C:\WINDOWS\System32\MSCOMCTL.OCX
*C:\WINDOWS\system32\comdlg32.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\system32\COMCTL32.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\Program Files\ScanSoft\PaperPort\PopUp\Systray.ocx
*C:\PROGRA~1\ScanSoft\PAPERP~1\PPLINKBR.OCX
*C:\WINDOWS\system32\MFC42.DLL
*C:\WINDOWS\system32\xpsp2res.dll
*C:\PROGRA~1\ScanSoft\PAPERP~1\PopUp\SSAcqDel.ocx
*C:\WINDOWS\system32\WINSPOOL.DRV
*C:\WINDOWS\system32\OLEPRO32.DLL
*C:\WINDOWS\system32\SXS.DLL
*C:\WINDOWS\system32\WINMM.dll
*C:\WINDOWS\system32\serwvdrv.dll
*C:\WINDOWS\system32\umdmxfrm.dll
+3700=C:\Program Files\Digital Line Detect\DLG.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\Program Files\Digital Line Detect\BVRPDIAG.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\comctl32.dll
*C:\Program Files\Digital Line Detect\broadcom.dll
*C:\WINDOWS\system32\bcmdmmoh.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\ole32.dll
+3756=C:\Program Files\Smartek\WordSmart\trayicon.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\MSVBVM60.DLL
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\shell32.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\comctl32.dll
+3884=C:\Program Files\ScanSoft\PaperPort\Pplinks.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\Program Files\ScanSoft\PaperPort\MAXKERNL.dll
*C:\Program Files\ScanSoft\PaperPort\MAXCODEC.dll
*C:\Program Files\ScanSoft\PaperPort\MAXUTIL.dll
*C:\Program Files\ScanSoft\PaperPort\PPERR.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\MSVCRT.dll
*C:\WINDOWS\system32\comdlg32.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\COMCTL32.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\Program Files\ScanSoft\PaperPort\MAXRAST.dll
*C:\WINDOWS\system32\MSVFW32.dll
*C:\WINDOWS\system32\WINMM.dll
*C:\WINDOWS\system32\MFC42.DLL
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\serwvdrv.dll
*C:\WINDOWS\system32\umdmxfrm.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\Program Files\ScanSoft\PaperPort\MAXLINKN.DLL
*C:\WINDOWS\system32\WINSPOOL.DRV
*C:\Program Files\ScanSoft\PaperPort\MAXPREF.DLL
*C:\Program Files\ScanSoft\PaperPort\MAXNMGR.DLL
*C:\Program Files\ScanSoft\PaperPort\EXMAPI.G32
*C:\Program Files\ScanSoft\PaperPort\EZFAX.G32
*C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\brufx01a.dll
*C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\BRLFX01A.DLL
*C:\WINDOWS\system32\Secur32.dll
*C:\Program Files\ScanSoft\PaperPort\EZIMAGE.G32
*C:\Program Files\ScanSoft\PaperPort\EZTEXT.G32
*C:\Program Files\ScanSoft\PaperPort\OCR\TB98Visf.O32
*C:\Program Files\ScanSoft\PaperPort\MAXPRINT.G32
*C:\Program Files\ScanSoft\PaperPort\TRASHCAN.G32
+1812=C:\Program Files\Internet Explorer\iexplore.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\SHLWAPI.dll
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\SHDOCVW.dll
*C:\WINDOWS\system32\CRYPT32.dll
*C:\WINDOWS\system32\MSASN1.dll
*C:\WINDOWS\system32\CRYPTUI.dll
*C:\WINDOWS\system32\WINTRUST.dll
*C:\WINDOWS\system32\IMAGEHLP.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\NETAPI32.dll
*C:\WINDOWS\system32\WININET.dll
*C:\WINDOWS\system32\WLDAP32.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
*C:\WINDOWS\system32\SHELL32.dll
*C:\WINDOWS\system32\comctl32.dll
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\BROWSEUI.dll
*C:\WINDOWS\system32\browselc.dll
*C:\WINDOWS\system32\appHelp.dll
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\urlmon.dll
*C:\WINDOWS\system32\Secur32.dll
*C:\WINDOWS\System32\cscui.dll
*C:\WINDOWS\System32\CSCDLL.dll
*C:\WINDOWS\system32\SETUPAPI.dll
*C:\Program Files\AIM Toolbar\AIMBar.dll
*C:\WINDOWS\system32\WS2_32.dll
*C:\WINDOWS\system32\WS2HELP.dll
*C:\WINDOWS\system32\ATL.DLL
*C:\WINDOWS\system32\asycfilt.dll
*C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
*C:\WINDOWS\system32\WSOCK32.dll
*C:\WINDOWS\system32\WINMM.dll
*C:\WINDOWS\system32\serwvdrv.dll
*C:\WINDOWS\system32\umdmxfrm.dll
*c:\program files\google\googletoolbar1.dll
*C:\WINDOWS\system32\ntshrui.dll
*C:\WINDOWS\system32\USERENV.dll
*C:\WINDOWS\system32\MPR.dll
*C:\WINDOWS\System32\drprov.dll
*C:\WINDOWS\System32\ntlanman.dll
*C:\WINDOWS\System32\NETUI0.dll
*C:\WINDOWS\System32\NETUI1.dll
*C:\WINDOWS\System32\NETRAP.dll
*C:\WINDOWS\System32\SAMLIB.dll
*C:\WINDOWS\System32\davclnt.dll
*C:\WINDOWS\System32\shgina.dll
*C:\WINDOWS\system32\MSGINA.dll
*C:\WINDOWS\system32\WINSTA.dll
*C:\WINDOWS\system32\ODBC32.dll
*C:\WINDOWS\system32\comdlg32.dll
*C:\WINDOWS\system32\odbcint.dll
*C:\WINDOWS\System32\Audiodev.dll
*C:\WINDOWS\System32\WMVCore.DLL
*C:\WINDOWS\System32\WMASF.DLL
*C:\WINDOWS\system32\wiashext.dll
*C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
*C:\WINDOWS\system32\xpsp2res.dll
*C:\WINDOWS\System32\sti.dll
*C:\WINDOWS\System32\CFGMGR32.dll
*C:\WINDOWS\system32\DBGHELP.DLL
*C:\WINDOWS\system32\RASAPI32.DLL
*C:\WINDOWS\system32\rasman.dll
*C:\WINDOWS\system32\TAPI32.dll
*C:\WINDOWS\system32\rtutils.dll
*C:\WINDOWS\system32\msv1_0.dll
*C:\WINDOWS\system32\iphlpapi.dll
*C:\WINDOWS\system32\sensapi.dll
*C:\WINDOWS\system32\msi.dll
*C:\Program Files\Microsoft Money\System\mnyviewer.dll
*C:\WINDOWS\system32\shdoclc.dll
*C:\WINDOWS\system32\MSRATING.dll
*C:\WINDOWS\system32\msratelc.dll
*C:\WINDOWS\system32\mlang.dll
*C:\WINDOWS\system32\mswsock.dll
*C:\WINDOWS\system32\hnetcfg.dll
*C:\WINDOWS\System32\wshtcpip.dll
*C:\WINDOWS\system32\DNSAPI.dll
*C:\WINDOWS\system32\rasadhlp.dll
*C:\WINDOWS\system32\SXS.DLL
*C:\WINDOWS\System32\mshtml.dll
*C:\WINDOWS\System32\msls31.dll
*C:\WINDOWS\System32\msimtf.dll
*C:\WINDOWS\System32\MSCTF.dll
*C:\Program Files\Microsoft Office\Office10\msohev.dll
*C:\WINDOWS\System32\jscript.dll
*C:\WINDOWS\System32\iepeers.dll
*C:\WINDOWS\System32\WINSPOOL.DRV
*C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\pubmod.dll
*C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\YPUBC.dll
*C:\WINDOWS\System32\vbscript.dll
*C:\WINDOWS\System32\MFC42.DLL
*C:\WINDOWS\System32\Macromed\Flash\FLASH.OCX
*C:\WINDOWS\system32\wdmaud.drv
*C:\WINDOWS\system32\msacm32.drv
*C:\WINDOWS\system32\MSACM32.dll
*C:\WINDOWS\system32\midimap.dll
*C:\WINDOWS\System32\ddrawex.dll
*C:\WINDOWS\System32\DDRAW.dll
*C:\WINDOWS\System32\DCIMAN32.dll
*C:\WINDOWS\System32\mshtmled.dll
*C:\Program Files\Microsoft Money\System\urlmapps.dll
*C:\WINDOWS\System32\dxtrans.dll
*C:\WINDOWS\System32\dxtmsft.dll
*C:\WINDOWS\System32\actxprxy.dll
*C:\WINDOWS\system32\plugin.ocx
*C:\WINDOWS\System32\wuapi.dll
*C:\WINDOWS\system32\sfc_os.dll
*C:\WINDOWS\System32\winrnr.dll
*C:\WINDOWS\system32\PSTOREC.DLL
+3468=<unkown>
+3600=<unkown>
+2440=<unkown>
+1748=<unkown>
+3620=<unkown>
+1180=<unkown>
+888=<unkown>
+896=<unkown>
+2060=<unkown>
+1644=<unkown>
+1084=<unkown>
+2276=<unkown>
+2272=<unkown>
+1360=<unkown>
+292=<unkown>
+3348=<unkown>
+3104=<unkown>
+3624=<unkown>
+1828=<unkown>
+3824=<unkown>
+1352=<unkown>
+3256=<unkown>
+3996=<unkown>
+3572=C:\1 Our Stuff\Denny\My SysTools\startdreck\StartDreck.exe
*C:\WINDOWS\system32\ntdll.dll
*C:\WINDOWS\system32\kernel32.dll
*C:\1 Our Stuff\Denny\My SysTools\startdreck\VB40032.DLL
*C:\WINDOWS\system32\ADVAPI32.dll
*C:\WINDOWS\system32\RPCRT4.dll
*C:\WINDOWS\system32\GDI32.dll
*C:\WINDOWS\system32\USER32.dll
*C:\WINDOWS\system32\MSVCRT20.dll
*C:\WINDOWS\system32\ole32.dll
*C:\WINDOWS\system32\msvcrt.dll
*C:\WINDOWS\system32\OLEAUT32.dll
*C:\WINDOWS\system32\OLEPRO32.DLL
*C:\WINDOWS\system32\IMM32.DLL
*C:\WINDOWS\system32\LPK.DLL
*C:\WINDOWS\system32\USP10.dll
*C:\1 Our Stuff\Denny\My SysTools\startdreck\VB4DE32.DLL
*C:\WINDOWS\system32\uxtheme.dll
*C:\WINDOWS\system32\apphelp.dll
*C:\WINDOWS\system32\msctfime.ime
*C:\WINDOWS\system32\CLBCATQ.DLL
*C:\WINDOWS\system32\COMRes.dll
*C:\WINDOWS\system32\VERSION.dll
*C:\1 Our Stuff\Denny\My SysTools\startdreck\PSAPI.DLL
»VMM32Files (LM)
»%System%\VMM32
»%System%\IOSUBSYS
»Application specific
»MS Office 97/8.0 STARTUP-PATH
»Current User
»Default User
»Local Machine
»ICQ NetDetect
»Current User
»Default User
gbx79 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 05-21-2005, 02:20 AM   #6 (permalink)
Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter
 
MicroBell's Avatar
 
Join Date: Sep 2004
Location: Carmichaels, PA-USA
Posts: 6,963
OS: Windows 7


Send a message via ICQ to MicroBell Send a message via MSN to MicroBell
Ok lets try this...

Open add/remove programs and remove the AIM Search toolbar if listed.

Run hijackthis and fix the following....

O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O4 - Startup: PowerReg Scheduler V3.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

C:\Program Files\AIM Toolbar <--delete that folder.

Then let me know the outcome. Is it only on msn.com she's redirected? All the other settings for IE are default and fine. Double check and make sure you have only one hosts file on the PC. I don't see a second in the startdreck log...but search the hard drive for any more that just says hosts.
__________________
We Are The BORG Spyware KILLER and Adware Destroyer!





Spyware/Adware Removal Tools
Hijackthis
Ad-aware SE
Spybot Search&Destroy
SpywareBlaster
CWShredder
MicroBell is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 05-21-2005, 04:57 AM   #7 (permalink)
I helped the forums.
 
Join Date: May 2005
Location: east coast US
Posts: 4
OS: WinXP


Problem solved!
The redirection no longer occurs. (FYI, she was redirected on pages other than just MSN.COM).

THANK YOU!

I do have two hosts files on the PC:
C:\I386\HOSTS
C:\WINDOWS\SYSTEM32\DRIVER\ETC\hosts

regards
gbx79 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 05-21-2005, 09:00 PM   #8 (permalink)
Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter
 
MicroBell's Avatar
 
Join Date: Sep 2004
Location: Carmichaels, PA-USA
Posts: 6,963
OS: Windows 7


Send a message via ICQ to MicroBell Send a message via MSN to MicroBell
Excellent. I do want you to have a peek at this hosts file...

C:\I386\HOSTS <--- open that with wordpad and make sure there are no entrys in it..other then MS Defaults..

Please read through the spyware prevention section on how to protect yourself from spyware/adware Here and use the recommend programs and methods to protect yourself!
__________________
We Are The BORG Spyware KILLER and Adware Destroyer!





Spyware/Adware Removal Tools
Hijackthis
Ad-aware SE
Spybot Search&Destroy
SpywareBlaster
CWShredder
MicroBell is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
 

« Previous Thread | Next Thread »

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT -7. The time now is 04:03 PM.

Contact Us - Tech Support Forum - Archive - Privacy Statement - Top


Copyright 2001 - 2009, Tech Support Forum
Home Tips Plus | Outdoor Basecamp | Automotive Support Forum

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85