Help I think I have a Virus

In Internet explorer, tools, internet option, delete files, Delete all off line content, OK.

Then recheck with your AV program.

If that does not work, please post back with a hijackthis log from the instructions below.
=============================
Use these to remove Malware (Virus, Spyware and Adware).

First :-
Spybot S&D and Ad-aware using the settings and links provided
Here

Failing those solving your problems a post of a hijackthis log for the experts to advise.
HijackThis From Here
or one of these other links:-
http://www.merijn.org/files/hijackthis.zip
http://www.aluriasoftware.com/tools/hijackthis.zip
http://mjc1.com/mirror/hjt/

Important: Create a folder on the C: drive called C:\HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT. Unzip HijackThis into this folder. (See this link for graphical instructions)
Then run, scan, save log, then in notepad copy the FULL log by copy and paste as a reply to this post and an expert with HijackThis Knowldge, will have a go at giving advice. A lot of posters make mistakes here in copying and pasting so reread the left info sidebar called Copy and Paste
Please note the list of experts names below, very few forum regulars here have had this training.

DO NOT FIX ANYTHING WITH HIJACKTHIS WITHOUT EXPERT ADVICE, most of what it finds you need for normal MS Windows tasks.

Known Spyware HijackThis fighters in DellTalk - If you are, and are not on the list please PM Me.

TomCoyote (of http://tomcoyote.org/forums/index.php fame)
YoKenny (Expert at TomCoyotes, Trusted Advisor Spywareinfo)
baskar1234 (Teaching Assistant at TomCoyotes, Trusted Advisor Spywareinfo)
ChrisRLG (Classroom Coordinator at TomCoyotes, Trusted Advisor Spywareinfo)
Tuxedo Jack (Teaching Assistant at TomCoyotes, Trusted Advisor Spywareinfo)
Yellowhammer (Trusted Advisor at Net-Integration, First Responder at Computer Cops)
tashi (Teaching Assistant at TomCoyotes, Trusted Advisor Spywareinfo)
therock247uk (In Training at TomCoyotes and Spywareinfo)
irelynmisses (In Training at TomCoyotes and Spywareinfo)
Texruss (Spyware Fighter at Wildersecurity, In Training at TomCoyotes)
PGPhantom (Trusted Advisor at Spywareinfo)

You could also go to one of the more specalist forums where more experts will be able to help.
http://tomcoyote.com/forums/index.php
http://forums.spywareinfo.com/index.php
http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi (Home of Spybot S&D)
http://boards.cexx.org/index.php
http://www.wilderssecurity.com/index.php
Do read the sites FAQ before posting, and advise your problem and what steps you have already done to try to cure your problem.

I, and the other hijack experts mentioned above, are in all those sites (and more) with the same login names. You might get one of us at those sites also to anwser your log, but other experts will also be available.

PART 2

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.comcast.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://autoproxy.verizon.com/cgi-bin/getproxy
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972}_ - (no file)
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)
O2 - BHO: (no name) - {01F8F602-61B7-B8C8-46DB-F258CBECA71E} - C:\WINNT\system32\qrsxubdf.dll
O2 - BHO: (no name) - {040C9805-4FAA-E41B-3A7C-5C07B14C209C} - C:\WINNT\system32\yabcguaw.dll
O2 - BHO: (no name) - {042B2C52-EB23-4367-2BCA-E5B19E2E5AF1} - C:\WINNT\system32\yfttugvf.dll (file missing)
O2 - BHO: (no name) - {049F8B19-1EE8-9265-5D4C-C7CB2B242ED0} - C:\WINNT\system32\bjpurctx.dll
O2 - BHO: (no name) - {0761A4AD-0B6E-64B3-3CEB-B75293C0BC7E} - C:\WINNT\system32\cdtrurym.dll
O2 - BHO: (no name) - {07FF4C18-E4F1-278C-B530-9DD0C2795D5A} - C:\WINNT\system32\tbthjjut.dll
O2 - BHO: (no name) - {0D926D63-CF34-0D1B-6E67-213F222FD7E3} - C:\WINNT\system32\dmacdfty.dll
O2 - BHO: (no name) - {0E114274-EBE4-6A24-8B8D-CB3672C962B8} - C:\WINNT\system32\kyduorec.dll
O2 - BHO: (no name) - {0E550D14-414F-741F-8A8E-D9517A2F96BF} - C:\WINNT\system32\tccirccj.dll
O2 - BHO: (no name) - {0F85CD97-B407-08F8-6D08-A54D2E3B9E44} - C:\WINNT\system32\bvpyserc.dll
O2 - BHO: (no name) - {0F936208-AADE-953A-7A56-AAF9588859BB} - C:\WINNT\system32\sshdnvam.dll
O2 - BHO: (no name) - {10B15BC7-3FF7-4453-0463-964EA39EAC69} - C:\WINNT\system32\rtxitqak.dll
O2 - BHO: (no name) - {11E7460C-C728-4A4C-BCC6-93BAEF064849} - C:\WINNT\system32\rbfkyqjw.dll
O2 - BHO: (no name) - {12293D33-B1E0-2434-DAF3-98D5DC0B8005} - C:\WINNT\system32\ldpknkrm.dll
O2 - BHO: (no name) - {12489994-BCF8-5B23-B07D-08DAFD360D95} - C:\WINNT\system32\lkariiac.dll
O2 - BHO: (no name) - {1359AD81-04E7-956B-46E0-8D5515DD3EB6} - C:\WINNT\system32\rjzjceiz.dll
O2 - BHO: (no name) - {1407D158-5228-C8FF-DC11-66E23F8C24B4} - C:\WINNT\system32\lgpefmuz.dll
O2 - BHO: (no name) - {14F624A7-8D9C-AD09-B18C-AE61AEB69E2D} - C:\WINNT\system32\yzwazjgi.dll
O2 - BHO: (no name) - {1530EA4B-9A34-F5C5-12BB-1AA714A5ECC5} - C:\WINNT\system32\wzcjemlu.dll
O2 - BHO: (no name) - {164CEA25-721E-0E13-AF12-D6BAC3EBDDFD} - C:\WINNT\system32\qtifyzjp.dll
O2 - BHO: (no name) - {16E18A79-0469-4FAD-3575-35B188C697DC} - C:\WINNT\system32\jbsdndgn.dll
O2 - BHO: (no name) - {1B2BDCD1-F946-4E73-03EF-456F296D562D} - C:\WINNT\system32\kdfcbsws.dll
O2 - BHO: (no name) - {1D957C0A-469D-F76F-4D31-7076C3024E2D} - C:\WINNT\system32\pjthdzbs.dll
O2 - BHO: (no name) - {1DDD4703-3173-B9AA-85BE-EFD6CE44C5FA} - C:\WINNT\system32\ygnuditx.dll
O2 - BHO: (no name) - {1E599798-083A-DADE-AD4F-3ACFF16A9501} - C:\WINNT\system32\ajoazkrn.dll
O2 - BHO: (no name) - {1E641C18-A6ED-9933-6DCD-C6778D25AF41} - C:\WINNT\system32\pjtacxpl.dll
O2 - BHO: (no name) - {1F030898-A530-7933-1772-61A426FBFB81} - C:\WINNT\system32\khkgwact.dll
O2 - BHO: (no name) - {1F852DD2-41F3-4A02-53C8-7989B706F523} - C:\WINNT\system32\wgayipwd.dll
O2 - BHO: (no name) - {1F94446A-DEEC-6A8D-550B-A4558254D714} - C:\WINNT\system32\zplrcrmb.dll
O2 - BHO: (no name) - {2131DF7D-9CA5-9905-5C04-53E4FE95EEED} - C:\WINNT\system32\pybsqtgi.dll
O2 - BHO: (no name) - {21F35F7D-9AD2-49E1-E102-8FEAA6348EE6} - C:\WINNT\system32\uhhdejdl.dll
O2 - BHO: (no name) - {21F40C30-EAF9-C0B7-B307-A757B242D793} - C:\WINNT\system32\nwofzmgx.dll
O2 - BHO: (no name) - {220A1A72-E31B-AC89-4E73-D30868978A29} - C:\WINNT\system32\azatvpdd.dll
O2 - BHO: (no name) - {2211282D-3443-A967-99E0-CDDAA76950D6} - C:\WINNT\system32\xoxchafj.dll
O2 - BHO: (no name) - {22DC3FE9-9757-8522-5F13-735D5B58A6A7} - C:\WINNT\system32\uywxflai.dll
O2 - BHO: (no name) - {23FB9B4B-A26E-BB10-B59C-61617C04B138} - C:\WINNT\system32\ufzdajsy.dll
O2 - BHO: (no name) - {247711D1-CAB8-F24D-288A-B2A07272FBC1} - C:\WINNT\system32\wpqoyhlk.dll
O2 - BHO: (no name) - {24822B67-5BE3-37E8-3732-1B6BC5458C5B} - C:\WINNT\system32\bosjigwr.dll
O2 - BHO: (no name) - {255AAF71-C2B5-605B-B739-2FEE5E855567} - C:\WINNT\system32\ujzfacvm.dll (file missing)
O2 - BHO: (no name) - {2689B983-9359-B242-B8C7-D4758F07E67F} - C:\WINNT\system32\iydoidas.dll
O2 - BHO: (no name) - {277133C5-93B6-A613-EC46-02C8D468AF15} - C:\WINNT\system32\ezmuxqim.dll
O2 - BHO: (no name) - {2791C91A-E784-1227-B644-318CADA8EEC4} - C:\WINNT\system32\sajedeqv.dll
O2 - BHO: (no name) - {279C11E9-F3B4-B036-E648-53CC61686E15} - C:\WINNT\system32\leyugwbw.dll
O2 - BHO: (no name) - {2A8AD15B-AFE9-A0D6-4434-51287D1651E3} - C:\WINNT\system32\mxsqzllm.dll
O2 - BHO: (no name) - {2AB7B07E-540F-F4ED-7B2F-EC9480D1AB4A} - C:\WINNT\system32\swzyucwb.dll
O2 - BHO: (no name) - {2C2A9DEA-01A3-29AC-13CF-B3B860A6494A} - C:\WINNT\system32\xegtpcpx.dll
O2 - BHO: (no name) - {2F461346-A579-4EA7-81A7-A5079E87D05C} - C:\WINNT\system32\jupighwj.dll
O2 - BHO: (no name) - {2F7D7440-05CF-2FEC-1733-7C4A93537392} - C:\WINNT\system32\phccerjp.dll
O2 - BHO: (no name) - {2FB59DE6-E289-A171-C131-21498B69300F} - C:\WINNT\system32\iufrbqyt.dll
O2 - BHO: (no name) - {2FFED416-1DAC-D44C-DC30-B540BA788306} - C:\WINNT\system32\eywyabdc.dll
O2 - BHO: (no name) - {31203B4E-57D6-A355-4E71-733AA7D9CB2A} - C:\WINNT\system32\arcjqppx.dll
O2 - BHO: (no name) - {349F75BC-0A8D-1602-2AB8-C458A46A0D31} - C:\WINNT\system32\hopxgeub.dll
O2 - BHO: (no name) - {34FB4D08-8B64-F7CE-8B6C-39A0598A3A22} - C:\WINNT\system32\mxpfswbq.dll
O2 - BHO: (no name) - {3550C7F5-9346-B59D-A8D6-DAF2097FAF68} - C:\WINNT\system32\pfermpbt.dll
O2 - BHO: (no name) - {38DDFADD-0843-9C0F-A0CF-7E42AE7EDDF1} - C:\WINNT\system32\ehnrjzlz.dll
O2 - BHO: (no name) - {39A72341-C713-CD63-B520-B92795C05348} - C:\WINNT\system32\dpitxepu.dll
O2 - BHO: (no name) - {39F94034-94BE-25B7-12F2-C0FDA3E1095A} - C:\WINNT\system32\qejzyiar.dll
O2 - BHO: (no name) - {3C3E55FC-3E29-0E0B-82BA-BCD87EC6121C} - C:\WINNT\system32\plrspjwj.dll
O2 - BHO: (no name) - {3CBFC8E2-ED96-78C9-8B8E-2468BD0FC305} - C:\WINNT\system32\mpdptklr.dll
O2 - BHO: (no name) - {3F417339-F6DF-96C7-7340-95A2D5D92017} - C:\WINNT\system32\bxvnbjes.dll
O2 - BHO: (no name) - {3FCFB8D2-5A98-3034-3A57-0213AA3175B5} - C:\WINNT\system32\exuqvixn.dll
O2 - BHO: (no name) - {41F2FD91-C012-F2B9-9D43-4AC7568E0E57} - C:\WINNT\system32\thvhqqsn.dll
O2 - BHO: (no name) - {429DCE91-3310-DE81-7990-369520647C10} - C:\WINNT\system32\hsdlhhfw.dll
O2 - BHO: (no name) - {44968875-2153-3131-4CBD-9853FB094EE4} - C:\WINNT\system32\rdzpwqai.dll
O2 - BHO: (no name) - {45239F21-D38E-BE3E-B6B3-E85BB52183E8} - C:\WINNT\system32\czedlwcj.dll
O2 - BHO: (no name) - {45A713E4-85AC-6886-D830-F7D11B4C20FD} - C:\WINNT\system32\iiurgnbs.dll
O2 - BHO: (no name) - {49DC0E35-DAFA-08F9-746A-8B54A08B4811} - C:\WINNT\system32\wfetdcip.dll
O2 - BHO: (no name) - {4A02CB52-B38D-2C9F-1730-45090ADFE176} - C:\WINNT\system32\vhokurhu.dll
O2 - BHO: (no name) - {4A1ADB66-7F54-5AC8-8C23-BC12D19DED2A} - C:\WINNT\system32\idxebrvt.dll
O2 - BHO: (no name) - {4E3EBA11-DDB9-8A2A-9A11-6833ABA773BC} - C:\WINNT\system32\dyhxxmqd.dll

PART 4

O2 - BHO: (no name) - {A070B368-5E56-CA4E-1440-A62FA8FF8494} - C:\WINNT\system32\kmjopbim.dll
O2 - BHO: (no name) - {A0C76F8C-EE75-879B-A29E-2551468593D3} - C:\WINNT\system32\gubotkmg.dll
O2 - BHO: (no name) - {A0F291A6-4EAC-32A4-4613-8246CD5F1173} - C:\WINNT\system32\bfcpunej.dll (file missing)
O2 - BHO: (no name) - {A1813F57-1338-CD9C-7118-3AC8DD3496FB} - C:\WINNT\system32\onnsbpaa.dll (file missing)
O2 - BHO: (no name) - {A1A19BB8-1E4F-848B-4721-284DFE60230B} - C:\WINNT\system32\ouyzdnjq.dll (file missing)
O2 - BHO: (no name) - {A1C916AF-367D-5B18-C61A-95C9661F5AFF} - C:\WINNT\system32\uajlmrdw.dll (file missing)
O2 - BHO: (no name) - {A288CE73-CB2D-49F4-F2AD-F3D2A7F5711F} - C:\WINNT\system32\uwgyjneb.dll (file missing)
O2 - BHO: (no name) - {A293BAB5-24E4-3B75-38F3-75362F4250C1} - C:\WINNT\system32\xeqqohet.dll
O2 - BHO: (no name) - {A2B14969-E3DB-2082-72A5-DFCF0F36A814} - C:\WINNT\system32\bcrcsixh.dll (file missing)
O2 - BHO: (no name) - {A3282AD4-D644-FF63-C8B6-E15748A1FDAF} - C:\WINNT\system32\udjfeknr.dll (file missing)
O2 - BHO: (no name) - {A36F022D-798A-0DDE-9E39-3ED7D08C4033} - C:\WINNT\system32\bqgxpmyn.dll (file missing)
O2 - BHO: (no name) - {A3F2CE91-702E-33B3-F559-FFE0A8A5B1C1} - C:\WINNT\system32\eamxxnyo.dll
O2 - BHO: (no name) - {A3FEAFDD-3E16-A8D6-493E-F55AE061C6BB} - C:\WINNT\system32\oyyavhmd.dll (file missing)
O2 - BHO: (no name) - {A41F0C40-492E-5FC4-9F47-64DF810DD14C} - C:\WINNT\system32\ofkhyfet.dll (file missing)
O2 - BHO: (no name) - {A4478637-615C-3652-1F40-515C694C09BF} - C:\WINNT\system32\vlvlgixz.dll (file missing)
O2 - BHO: (no name) - {A4E5E298-6C74-ED41-F44A-40600A7815CF} - C:\WINNT\system32\vaysbgpp.dll (file missing)
O2 - BHO: (no name) - {A595ECAA-3C17-3F27-F5D8-67673BF827E7} - C:\WINNT\system32\ipcjkzmv.dll (file missing)
O2 - BHO: (no name) - {A6A49B5C-02A3-DA9D-21DC-1EE94BCEAC6F} - C:\WINNT\system32\vwvnycim.dll (file missing)
O2 - BHO: (no name) - {A6EC72B4-25E8-6819-765F-F96A53B9EFF2} - C:\WINNT\system32\cjrxbdtq.dll (file missing)
O2 - BHO: (no name) - {A6F48159-7618-CD87-80B0-6E32751FAB81} - C:\WINNT\system32\xatwsgfn.dll
O2 - BHO: (no name) - {A7543AEF-4B79-4C1F-4A82-7E69601C76A2} - C:\WINNT\system32\wxvchpsz.dll
O2 - BHO: (no name) - {A763531F-97D2-C87B-4D70-7CF10D25448F} - C:\WINNT\system32\vljavxjs.dll (file missing)
O2 - BHO: (no name) - {A7AB2A77-BA19-56F6-A2F2-D7F315108793} - C:\WINNT\system32\cggkyzmn.dll (file missing)
O2 - BHO: (no name) - {A7B86451-E83B-0E2B-7262-A728BAFEDCA5} - C:\WINNT\system32\pwgcnhgo.dll
O2 - BHO: (no name) - {A83F550E-18AF-115A-BFF4-E46259D4702B} - C:\WINNT\system32\xmnjkhcy.dll
O2 - BHO: (no name) - {A98CE81B-68F9-1E86-7125-3B80138C481B} - C:\WINNT\system32\ytbottsn.dll
O2 - BHO: (no name) - {A99D08F3-8396-9F5F-FA8F-F9729521F7B5} - C:\WINNT\system32\urteztqk.dll
O2 - BHO: (no name) - {AA60EB55-6F7A-F6E5-7D1E-FAF4AD517A92} - C:\WINNT\system32\aryrtcom.dll
O2 - BHO: (no name) - {AB037C49-334E-7078-64DE-1B76C821E997} - C:\WINNT\system32\kteugawk.dll
O2 - BHO: (no name) - {AB512F68-4D9D-68E9-B05C-75BDBD398B61} - C:\WINNT\system32\qqxfrknn.dll (file missing)
O2 - BHO: (no name) - {ACB6144E-9E17-FC6E-3B22-BC12B09C5201} - C:\WINNT\system32\mrxrimlu.dll
O2 - BHO: (no name) - {AD8E75C2-31A2-22B0-7555-F8AAC2A1BD79} - C:\WINNT\system32\iuifhahz.dll
O2 - BHO: (no name) - {AD9F3862-07F1-2388-4125-30787B629D99} - C:\WINNT\system32\uexvryre.dll
O2 - BHO: (no name) - {AE12F5D3-D498-EFDB-DF5F-D2AAC3B299E1} - C:\WINNT\system32\yadqcexz.dll
O2 - BHO: (no name) - {AE589F16-4A39-2755-9417-BF2A23A6C2E8} - C:\WINNT\system32\tzujstxv.dll
O2 - BHO: (no name) - {AF64A7F9-B22D-F357-C2BE-4750BC6A42A6} - C:\WINNT\system32\vjkbkida.dll
O2 - BHO: (no name) - {AF9CD0A1-8FE6-65DB-ECBC-EB4E347FFFA2} - C:\WINNT\system32\ponjhpsw.dll
O2 - BHO: (no name) - {AFE975EF-747B-15A6-E2F2-68FE5A1EF65E} - C:\WINNT\system32\yfmzfoxa.dll
O2 - BHO: (no name) - {B11298F9-6ABC-7CF3-9565-45B0954BA570} - C:\WINNT\system32\nojtufil.dll
O2 - BHO: (no name) - {B3E024DF-97FB-9AD1-37DA-DF02BB3F3D9D} - C:\WINNT\system32\ssyhisru.dll
O2 - BHO: (no name) - {B50EBC25-8115-DFBB-51AB-D7475FD05671} - C:\WINNT\system32\jfiietac.dll (file missing)
O2 - BHO: (no name) - {B576E1AC-15FC-B1A1-E3F3-518E95D69D49} - C:\WINNT\system32\mbcpwsrm.dll
O2 - BHO: (no name) - {B6245AB6-7AD7-EC88-4539-1D28BFEFD30F} - C:\WINNT\system32\jnfnxazg.dll
O2 - BHO: (no name) - {B6BDB456-ABE0-B07B-0246-A1394384EA23} - C:\WINNT\system32\qzogpjrt.dll
O2 - BHO: (no name) - {B91DD095-E8EF-66FC-388D-C0F75964ABFD} - C:\WINNT\system32\omxtvdps.dll
O2 - BHO: (no name) - {BA6A0E16-C6BD-E57A-ACCC-7F455268A12D} - C:\WINNT\system32\lmbjycke.dll (file missing)
O2 - BHO: (no name) - {BC965098-C342-640E-5B5A-93C4626A1F1C} - C:\WINNT\system32\aunsiais.dll
O2 - BHO: (no name) - {BD361D3F-B6D3-DE8D-E4F7-6B63BC0A8A38} - C:\WINNT\system32\vpzyyzyr.dll (file missing)
O2 - BHO: (no name) - {BD6E46E6-938E-5112-8FF5-90E2341F47B3} - C:\WINNT\system32\pcdfvgvv.dll (file missing)
O2 - BHO: (no name) - {BE513A49-76FC-B667-1BE4-0BA51E4FD121} - C:\WINNT\system32\vcsiiuqr.dll
O2 - BHO: (no name) - {BE9AA173-CF6E-411B-46D8-EBFA2FF6A52B} - C:\WINNT\system32\drdtturd.dll
O2 - BHO: (no name) - {BEA3A09F-13A9-0BC7-2101-189C3C716DD3} - C:\WINNT\system32\mqennivs.dll (file missing)
O2 - BHO: (no name) - {C0408DF0-93FB-F2E1-9DF7-940A99638C5F} - C:\WINNT\system32\kizfwpfm.dll
O2 - BHO: (no name) - {C075AA3E-B978-EF57-B2C0-7CF70C3CA316} - C:\WINNT\system32\obmjsrhg.dll
O2 - BHO: (no name) - {C1998D95-12EB-11E5-4C92-2409E8CA574B} - C:\WINNT\system32\avrepfyc.dll
O2 - BHO: (no name) - {C4BAF11D-081D-590D-60E9-940B985495DA} - C:\WINNT\system32\vgmcykne.dll
O2 - BHO: (no name) - {C4CA9FCE-CCA8-F304-8B6E-4C8DA82A1B62} - C:\WINNT\system32\ioefefjv.dll
O2 - BHO: (no name) - {C822EDAB-CF46-0A8D-877A-793FFA79398C} - C:\WINNT\system32\cshbgzwd.dll
O2 - BHO: (no name) - {C83493B5-54DC-7BF8-9F9C-33582BBEADBE} - C:\WINNT\system32\aandnfaa.dll
O2 - BHO: (no name) - {CA9B4FCE-2495-EF82-1352-A30DD9B03325} - C:\WINNT\system32\qvhnihtg.dll
O2 - BHO: (no name) - {CB2A106D-407F-FDF4-71E6-E1DB7756652E} - C:\WINNT\system32\jnfcipib.dll
O2 - BHO: (no name) - {CE0C69AD-46A3-4D34-9879-CBDD9A234C60} - C:\WINNT\system32\hgdbxwrf.dll
O2 - BHO: (no name) - {CE5438E2-9023-E66C-5CFB-B647ECE6A36D} - C:\WINNT\system32\enwduinr.dll
O2 - BHO: (no name) - {CFE839C3-85E9-8EF6-1849-D30EF2F0FFC5} - C:\WINNT\system32\efjdlfkn.dll
O2 - BHO: (no name) - {D1043472-1476-AB23-3AF3-A87E8943489D} - C:\WINNT\system32\gvsrbdft.dll
O2 - BHO: (no name) - {D1D66939-344B-573B-B8B9-3641DC64545F} - C:\WINNT\system32\zjyjplkg.dll
O2 - BHO: (no name) - {D20E1C91-806F-351F-8DDE-FFD7E014518C} - C:\WINNT\system32\vslxkkjg.dll
O2 - BHO: (no name) - {D2D9CAA7-083D-15F8-5863-A930252C229D} - C:\WINNT\system32\pakflcdj.dll
O2 - BHO: (no name) - {D2F47B19-82BC-AEAB-6DAB-1BE62FA0459D} - C:\WINNT\system32\euxlzuwi.dll
O2 - BHO: (no name) - {D44505DE-D3BB-0E1C-BF1F-C3729FFB4AC5} - C:\WINNT\system32\goosjgvx.dll
O2 - BHO: (no name) - {D4D18839-5804-3C20-64C2-77AEEC0B6930} - C:\WINNT\system32\wgzpoisl.dll
O2 - BHO: (no name) - {D5713015-3504-79F0-5132-457C987ED543} - C:\WINNT\system32\dhudpnrf.dll
O2 - BHO: (no name) - {D57C9E4C-BB23-323D-077A-C65D0A5F07A4} - C:\WINNT\system32\tlnwbdqn.dll
O2 - BHO: (no name) - {D5BF6DA7-D46F-6033-63BE-EFBC720A3BA2} - C:\WINNT\system32\rpupquyo.dll
O2 - BHO: (no name) - {D649CE94-C831-DD96-304B-E71FFAA08692} - C:\WINNT\system32\ggnfawiy.dll
O2 - BHO: (no name) - {D6571755-1179-B778-E558-31B8B74B4454} - C:\WINNT\system32\dpkmofem.dll
O2 - BHO: (no name) - {D7C4C969-FEA9-D79A-93A9-658F39344586} - C:\WINNT\system32\cfonrekj.dll
O2 - BHO: (no name) - {D7E0269E-DCF2-BEEE-19BA-4CFD99BEFA49} - C:\WINNT\system32\txhdchhf.dll
O2 - BHO: (no name) - {D85021BB-6F88-29A6-E3CE-8CE0ED6E6B4E} - C:\WINNT\system32\uirzvnlr.dll
O2 - BHO: (no name) - {D85DF534-BB80-6505-CF81-47E6EADECDF7} - C:\WINNT\system32\xpemjool.dll
O2 - BHO: (no name) - {D87E4F4D-A6EE-7022-545D-B790AB810B8B} - C:\WINNT\system32\qaqgyihz.dll
O2 - BHO: (no name) - {D996E3F3-11DF-1ED6-312A-216A413E455E} - C:\WINNT\system32\umjrrsxx.dll
O2 - BHO: (no name) - {D9D04F84-F6BE-604C-AC9E-CCB4D21D2597} - C:\WINNT\system32\vbcgaaxj.dll
O2 - BHO: (no name) - {D9F5AC48-D7CD-5637-B8CA-15B020322FE5} - C:\WINNT\system32\fjrfrswe.dll
O2 - BHO: (no name) - {DAAF2902-6F9A-DA36-E045-627F87CEA3A0} - C:\WINNT\system32\ougmesuq.dll
O2 - BHO: (no name) - {DBFC24E8-A085-1634-F6E9-7795BF5DED13} - C:\WINNT\system32\bkntevai.dll
O2 - BHO: (no name) - {DC9BB4E3-C2A6-EBA0-AB29-CEE6079115C5} - C:\WINNT\system32\eixsqknt.dll
O2 - BHO: (no name) - {DEF260F0-02D6-893B-EECF-F063EE38A50E} - C:\WINNT\system32\sbiynicw.dll
O2 - BHO: (no name) - {E09DD32B-C154-471F-4656-0C0899FE3579} - C:\WINNT\system32\kctnqphq.dll (file missing)
O2 - BHO: (no name) - {E0AD81DB-87E0-E116-715B-C38AA9D4BB81} - C:\WINNT\system32\xklqwsvg.dll (file missing)
O2 - BHO: (no name) - {E0E5AA83-649A-549A-1C59-6709A1E9787D} - C:\WINNT\system32\rppgtqkl.dll (file missing)
O2 - BHO: (no name) - {E111A004-9916-B93A-0946-7A17EE0D7691} - C:\WINNT\system32\klushlvm.dll
O2 - BHO: (no name) - {E15C8BEE-5784-347B-72E9-6911DA55CD1A} - C:\WINNT\system32\lzhankav.dll (file missing)
O2 - BHO: (no name) - {E27CE750-629B-EA6A-C873-58957C01D829} - C:\WINNT\system32\lgthiikd.dll (file missing)
O2 - BHO: (no name) - {E2A3A9A4-A2D7-EEF8-44D3-176DDEF46855} - C:\WINNT\system32\hvpnvyop.dll
O2 - BHO: (no name) - {E30C9601-2828-8661-7378-10180D575FB1} - C:\WINNT\system32\yolkwlgc.dll (file missing)
O2 - BHO: (no name) - {E43BA014-F7CB-D847-F406-379E3ED771C9} - C:\WINNT\system32\ldhcfelj.dll (file missing)
O2 - BHO: (no name) - {E43D5EC9-0273-7268-AA3C-E4558EAD564E} - C:\WINNT\system32\upemkiyp.dll
O2 - BHO: (no name) - {E5880788-5386-619B-CB9E-CBA910040EF1} - C:\WINNT\system32\yzpsrdax.dll (file missing)
O2 - BHO: (no name) - {E5B13009-C818-0655-D1D0-15DA9531EAFE} - C:\WINNT\system32\qqiauhoc.dll
O2 - BHO: (no name) - {E5B1817E-6BB4-3829-4B96-392677434565} - C:\WINNT\system32\feawzgul.dll (file missing)
O2 - BHO: (no name) - {E5C02F30-B040-5420-769B-F0A80819CAED} - C:\WINNT\system32\smszgbpc.dll (file missing)
O2 - BHO: (no name) - {E64853CC-6168-6E15-2048-642CB5A7DDAC} - C:\WINNT\system32\mhikosgi.dll
O2 - BHO: (no name) - {E658A86C-635B-29FC-FE8F-142A87BF4C5C} - C:\WINNT\system32\cxrblacu.dll
O2 - BHO: (no name) - {E690A8F2-1FFF-E62E-4A23-4FB5467E455E} - C:\WINNT\system32\deeukfpc.dll
O2 - BHO: (no name) - {E747BE4B-E8B5-4FF8-F731-AAB251DAA511} - C:\WINNT\system32\yvefoytd.dll (file missing)
O2 - BHO: (no name) - {E99B1CAA-A571-7C6B-2671-1B55C3870DCB} - C:\WINNT\system32\vgblmdpm.dll
O2 - BHO: (no name) - {EBD318F5-413F-B50D-7178-2023683EDF0B} - C:\WINNT\system32\uxzmeitf.dll
O2 - BHO: (no name) - {ECBFE994-22F1-76A9-BE56-3306A15A64E5} - C:\WINNT\system32\llvutwlj.dll

Ok I ran the ad-aware and the spybot s&D it cleaned out a bunch of stuff, but I am still having the problem. 

Here is the log from Hijackthis (the first part)  apparently it is to big I will send in separate replies.

Logfile of HijackThis v1.97.7
Scan saved at 8:10:06 PM, on 5/14/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\CTsvcCDA.EXE
C:\PROGRA~1\NavNT\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\Marimba\CASTAN~1\Tuner.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Marimba\CASTAN~1\lib\jre\bin\java.exe
C:\PROGRA~1\NavNT\rtvscan.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\PROGRA~1\symantec\LIVEUP~1\savroam.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\MsPMSPSv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\devldr32.exe
C:\Program Files\Common Files\Adaptec Shared\CreateCD\CreateCD50.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Creative\SBLive2k\Creative Diagnostics 2.0\DIAGENT.EXE
C:\SCANJET\PrecisionScanLT\hppwrsav.exe
C:\PROGRA~1\NavNT\vptray.exe
C:\WINNT\vidzbriy.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\Viewers\WinZip\winzip32.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\HijackThis.exe

MORE TO COME

 

PART 5

O2 - BHO: (no name) - {F11685F9-183B-4FE9-E00D-673C4E740D07} - C:\WINNT\system32\igwcraey.dll
O2 - BHO: (no name) - {F23F4398-6396-1DD7-7551-FF5ABF6FCC95} - C:\WINNT\system32\esucwnec.dll
O2 - BHO: (no name) - {F423B06B-D547-A65A-BCFA-CADB0886D160} - C:\WINNT\system32\qkoubely.dll (file missing)
O2 - BHO: (no name) - {F573FC33-45B7-E21B-C30D-7F52E13B659E} - C:\WINNT\system32\fxbigsry.dll
O2 - BHO: (no name) - {F5F1FE0C-E545-DBC8-45C4-708099B153BC} - C:\WINNT\system32\fauloprr.dll
O2 - BHO: (no name) - {F6710C02-DF9E-60C9-4059-A03782AF7CE6} - C:\WINNT\system32\mkdjozuv.dll
O2 - BHO: (no name) - {F95CAFE6-8F55-06D9-2732-19F105D5E8F1} - C:\WINNT\system32\ubegdobz.dll
O2 - BHO: (no name) - {F9C3B715-76B0-47E5-0B5F-8C67510B71C5} - C:\WINNT\system32\amnofexj.dll
O2 - BHO: (no name) - {FB435C8A-086A-1721-E9CE-4EC8A2D94386} - C:\WINNT\system32\hnkdwxzc.dll
O2 - BHO: (no name) - {FCBE9BC6-4B11-45D2-450D-47D83BF76038} - C:\WINNT\system32\goucxeht.dll
O2 - BHO: (no name) - {FD36DD2E-89ED-9B82-B57A-7D86EEBE3936} - C:\WINNT\system32\uvgjvuqy.dll
O2 - BHO: (no name) - {FDBF3573-41C6-844A-76BE-E95BF83C8B52} - C:\WINNT\system32\jfciuhkh.dll
O2 - BHO: (no name) - {FE3184C9-78ED-E243-6760-736B26A70804} - C:\WINNT\system32\jgnyurud.dll
O2 - BHO: (no name) - {FF0D9AE7-1C81-0D9E-4D57-7E66CA67A87A} - C:\WINNT\system32\wjkyfgze.dll (file missing)
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [CreateCD50] "C:\Program Files\Common Files\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [DIAGENT] C:\Program Files\Creative\SBLive2k\Creative Diagnostics 2.0\DIAGENT.EXE startup
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\Updreg.exe
O4 - HKLM\..\Run: [AHQInit] C:\Program Files\Creative\SBLive2k\Program\AHQInit.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [BearShare] C:\Program Files\BearShare\BearShare.exe /m
O4 - HKLM\..\Run: [hppwrsav] C:\SCANJET\PrecisionScanLT\hppwrsav.exe
O4 - HKLM\..\Run: [Config Loadatiorin] I4Eexplore.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [CharityBuy IE Plugin] C:\charitybuy
O4 - HKLM\..\Run: [rtkhxmj] rundll32 C:\WINNT\system32\rtkhxmj.dll,Init 1
O4 - HKLM\..\Run: [vghbziln] C:\WINNT\bnksdwub.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\NavNT\vptray.exe
O4 - HKLM\..\Run: [MSVersion] C:\WINNT\system32\internetfeatures.exe
O4 - HKLM\..\Run: [] c:\WINNT\System32\
O4 - HKLM\..\Run: [zzb] c:\WINNT\System32\zzb.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [bvllsvz] C:\WINNT\vidzbriy.exe
O4 - HKLM\..\Run: [TV Media] C:\Program Files\TV Media\Tvm.exe
O4 - HKLM\..\Run: [SysUpd] C:\WINNT\sysupd.exe
O4 - HKLM\..\Run: [emsw.exe] C:\WINNT\emsw.exe
O4 - HKLM\..\Run: [webHancer Survey Companion] "C:\Program Files\webHancer\Programs\whSurvey.exe"
O4 - HKLM\..\RunServices: [Config Loadatiorin] I4Eexplore.exe
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [Config Loadatiorin] I4Eexplore.exe
O4 - HKCU\..\Run: [] c:\WINNT\System32\
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: WeatherBug (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: ConferenceRoom Java Client - http://mail.igl.net:8000/java/cr.cab
O16 - DPF: Yahoo! Bingo - http://download.games.yahoo.com/games/clients/y/xt0_x.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: Yahoo! Dice - http://download.games.yahoo.com/games/clients/y/dct2_x.cab
O16 - DPF: Yahoo! Gin - http://download.games.yahoo.com/games/clients/y/nt1_x.cab
O16 - DPF: Yahoo! Pyramids - http://download.games.yahoo.com/games/clients/y/pyt1_x.cab
O16 - DPF: Yahoo! Spades - http://download.games.yahoo.com/games/clients/y/st2_x.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/PopularScreenSaversInitialSetup1.0.0.8.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://download.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab?
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} (Blockwerx Control) - http://mirror.worldwinner.com/games/v42/blockwerx/blockwerx.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {785EA525-5066-495F-ADF6-3B8316515DEF} (Collapse Control) - http://mirror.worldwinner.com/games/v44/collapse/collapse.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://zone.msn.com/binGame/ZAxRcMgr.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37845.8928819444
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yse/ymmapi_416.dll
O16 - DPF: {C8BAC37C-A8D2-425E-B7FC-80B9537FB14A} - http://www.spyblast.com/download/SBFullSInst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/popcap/zuma/popcaploader_v5.cab
O16 - DPF: {E0CE16CB-741C-4B24-8D04-A817856E07F4} - http://cabs.roings.com/cabs/budicon.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/1,5,0,4360/mcfscan.cab
O16 - DPF: {FF65677A-8977-48CA-916A-DFF81B037DF3} (WMService Class) - http://download.overpro.com/WildApp.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = verizon.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = verizon.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = verizon.com

 

PART 3

O2 - BHO: (no name) - {50A1B373-6FB1-C7B6-BDAF-8BD6BB39F81B} - C:\WINNT\system32\gzbkqrfz.dll
O2 - BHO: (no name) - {50BB4785-0504-4BAF-7BEA-258F374EDC03} - C:\WINNT\system32\pjlbunot.dll
O2 - BHO: (no name) - {525B2692-B2F6-1149-928F-53C52071C409} - C:\WINNT\system32\siyflmau.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {53DACD40-7979-1F0A-1EF1-503BF294783D} - C:\WINNT\system32\whwozcyp.dll
O2 - BHO: (no name) - {54C0EDF9-03E1-9DDB-1E1F-CFD2386CD618} - C:\WINNT\system32\rjqtsjxz.dll
O2 - BHO: (no name) - {57C1C6E6-3CA6-4338-1C07-9DC384900704} - C:\WINNT\system32\ksesrqzg.dll
O2 - BHO: (no name) - {58502A86-E1BF-4814-DE2B-DED104E7CC40} - C:\WINNT\system32\ojemothd.dll
O2 - BHO: (no name) - {58991540-99A0-2870-12BC-644099436527} - C:\WINNT\system32\cgiamtwv.dll
O2 - BHO: (no name) - {599870E3-1ED2-E466-1FBF-A5E063938BBE} - C:\WINNT\system32\yslntcdc.dll
O2 - BHO: (no name) - {5A082D94-F026-6EBE-6A08-B0C178B34C16} - C:\WINNT\system32\ewmtmubh.dll
O2 - BHO: (no name) - {5AD422ED-7254-9639-708E-D90DDC65F374} - C:\WINNT\system32\shygvhkb.dll
O2 - BHO: (no name) - {5B4353A1-F1E1-063D-6786-64B4695A14EB} - C:\WINNT\system32\bibtciqg.dll
O2 - BHO: (no name) - {5C9DD715-9A97-7EC6-6F53-A62594434EE9} - C:\WINNT\system32\yjregwbl.dll
O2 - BHO: (no name) - {5DBC7144-088C-3671-4102-C86107DC7B9B} - C:\WINNT\system32\jqpmjgmp.dll
O2 - BHO: (no name) - {5E3D03C4-589C-E25C-5890-6811B520F603} - C:\WINNT\system32\dtrfrkky.dll
O2 - BHO: (no name) - {5F50B464-E4FD-4F0A-85B0-43384B9CB297} - C:\WINNT\system32\lyukenvs.dll
O2 - BHO: (no name) - {5FA73A6E-CCCF-78FB-0638-563BE3DCFB23} - C:\WINNT\system32\ftjyvrtm.dll
O2 - BHO: (no name) - {611CF5EC-D27F-DE47-1484-31707520A999} - C:\WINNT\system32\ujimldls.dll
O2 - BHO: (no name) - {613BBB35-3604-9A4B-41CB-933F4F441093} - C:\WINNT\system32\lamilapp.dll
O2 - BHO: (no name) - {613BFDD1-9CDE-10A9-4BF2-0F94FDFE84DA} - C:\WINNT\system32\udqzxdww.dll
O2 - BHO: (no name) - {6164CC45-75C5-EBC2-6986-8C727D0BEB9D} - C:\WINNT\system32\bweeoxwn.dll
O2 - BHO: (no name) - {61ECF330-D0D9-12EB-9385-9881FA57832B} - C:\WINNT\system32\oxzxkjhk.dll
O2 - BHO: (no name) - {64D71B40-65C9-271C-E00C-2443D05A1453} - C:\WINNT\system32\ilfbxtie.dll
O2 - BHO: (no name) - {65365418-33AE-2D26-37BA-CAC2CF53ECFD} - C:\WINNT\system32\zszapjcs.dll
O2 - BHO: (no name) - {673ED508-603C-AF5A-B40E-B057A7CF8B03} - C:\WINNT\system32\ovntpnrl.dll
O2 - BHO: (no name) - {681B325C-608B-DDC5-2B3F-2C4CC085B068} - C:\WINNT\system32\jnzbtykd.dll
O2 - BHO: (no name) - {69D0B21C-E2C1-1383-42D5-DA3626CAD2B3} - C:\WINNT\system32\yjjbrstk.dll
O2 - BHO: (no name) - {6B3565D2-5BB0-88CB-683F-48F1235B933D} - C:\WINNT\system32\ekwyuabp.dll
O2 - BHO: (no name) - {6EC2D7A9-734B-1916-F9C3-B71576B047E5} - C:\WINNT\system32\hwsmtapu.dll
O2 - BHO: (no name) - {6F1DB2AF-7FE8-D9A4-358D-1BD5BBBA112C} - C:\WINNT\system32\jgjwdnqb.dll
O2 - BHO: (no name) - {6F324441-293A-482F-827C-DC2C1D52E9C5} - C:\WINNT\system32\cigbnqkk.dll
O2 - BHO: (no name) - {6F803CCD-614A-6C59-18FD-1A0FF7B46025} - C:\WINNT\system32\szhwrqlp.dll (file missing)
O2 - BHO: (no name) - {70B4A341-9493-842A-CA86-2E454B3B6EEA} - C:\WINNT\system32\psphfqer.dll
O2 - BHO: (no name) - {71696686-E5B0-4D9B-39A7-2341C713CD63} - C:\WINNT\system32\myoukdgi.dll
O2 - BHO: (no name) - {7356B6CF-121D-4C43-BAD5-7DDD2C52581F} - C:\WINNT\system32\qstemhsn.dll
O2 - BHO: (no name) - {751E4DC5-F8C0-E18B-497B-890426400CBE} - C:\WINNT\system32\weqbaphn.dll
O2 - BHO: (no name) - {786E2F3B-5710-8EDC-054C-0A6205AB0F1D} - C:\WINNT\system32\ajspaaxt.dll
O2 - BHO: (no name) - {79396569-188D-DF7F-8D4B-9238942F4A7C} - C:\WINNT\system32\kbdokcxh.dll
O2 - BHO: (no name) - {79D9BEC4-7915-29CA-4BCC-67872EEF757D} - C:\WINNT\system32\uispxqkg.dll
O2 - BHO: (no name) - {7A94641B-3D25-6A37-7325-BEFC9727E9D9} - C:\WINNT\system32\zqeeqvzs.dll
O2 - BHO: (no name) - {7C466816-E0FA-85CA-5841-7D9AF32DF4AC} - C:\WINNT\system32\xbzgcagv.dll
O2 - BHO: (no name) - {7D52B113-E4F0-588F-3AB6-BDA2F8D42936} - C:\WINNT\system32\s e x s ogng.dll (file missing)
O2 - BHO: (no name) - {80596903-C6C0-6F13-4703-DF79BB3B7255} - C:\WINNT\system32\cxoaqmhz.dll
O2 - BHO: (no name) - {80919233-5D8A-5E0A-AE20-684DE61462DB} - C:\WINNT\system32\fnaujodw.dll
O2 - BHO: (no name) - {8156A892-7E8B-463E-B653-C6C6594B84B6} - C:\WINNT\system32\inyhpsbe.dll
O2 - BHO: (no name) - {84732DDF-7307-305B-B205-2ABCAF76A713} - C:\WINNT\system32\fixvbxez.dll
O2 - BHO: (no name) - {8481C022-92E0-45EC-7144-EDFF04400520} - C:\WINNT\system32\pfzhgvvy.dll
O2 - BHO: (no name) - {8553A692-7E4A-2453-79EE-7EB8F361DA14} - C:\WINNT\system32\arexycxe.dll
O2 - BHO: (no name) - {86247BF9-ED88-40F6-A97C-1847C739F6F8} - C:\WINNT\system32\hghiivhz.dll
O2 - BHO: (no name) - {8709EE98-826E-4ABE-DA98-E124E22FB040} - C:\WINNT\system32\meawlfog.dll
O2 - BHO: (no name) - {89312C33-23C5-3AEF-CB66-DE66EC7184F3} - C:\WINNT\system32\upessjfr.dll
O2 - BHO: (no name) - {89B0833A-32B7-5C1A-C605-D96253BA8012} - C:\WINNT\system32\frgzkrkr.dll
O2 - BHO: (no name) - {8B486398-B0AF-5D9A-7EEA-592E5FD2DBFB} - C:\WINNT\system32\alyvntul.dll
O2 - BHO: (no name) - {8B977431-C059-B6E0-20DE-D045CD81B05F} - C:\WINNT\system32\aboubuwu.dll
O2 - BHO: (no name) - {8C2DDEF7-B29A-6932-8DA1-640283866E11} - C:\WINNT\system32\iskjnpdp.dll
O2 - BHO: (no name) - {8C42E517-3B3B-873D-7EBF-39E8CEAD57D6} - C:\WINNT\system32\frbihzci.dll
O2 - BHO: (no name) - {8CF90FBD-18F4-7AC1-A8BD-5D67C6C21453} - C:\WINNT\system32\yefywxrn.dll
O2 - BHO: (no name) - {8FEC2BE3-BDC7-2FCF-78EA-601C4CB5D6B4} - C:\WINNT\system32\qekgnbhl.dll
O2 - BHO: (no name) - {90A11F80-4EE8-CEDB-0FE9-B4D02AF42C23} - C:\WINNT\system32\qbxunmvy.dll
O2 - BHO: (no name) - {913FD27F-C8B5-B4C0-44C0-EC1DD845DB9B} - C:\WINNT\system32\vphcpeea.dll
O2 - BHO: (no name) - {91B9A633-BD60-05AA-7EF6-C073F381D59C} - C:\WINNT\system32\pmowpsvc.dll
O2 - BHO: (no name) - {9370EBFB-E5BE-6DEF-D2F3-E63319189F0A} - C:\WINNT\system32\pvhjbdoj.dll
O2 - BHO: (no name) - {93AA704A-04ED-6CFC-AE98-948CD2D2FBEA} - C:\WINNT\system32\dpamcozq.dll
O2 - BHO: (no name) - {9443CE36-28C1-2C84-B3AD-E4EB483DE050} - C:\WINNT\system32\fslwlara.dll
O2 - BHO: (no name) - {9453B4F4-1152-049F-B1AE-BA73C850D31D} - C:\WINNT\system32\xftnmbub.dll
O2 - BHO: (no name) - {95781131-46C7-6434-FCCB-2D7428DF9EC4} - C:\WINNT\system32\furzdcyv.dll
O2 - BHO: (no name) - {991414B6-59B6-CBC8-9441-4CFDA428E40C} - C:\WINNT\system32\nmzkfzvf.dll
O2 - BHO: (no name) - {994F23AA-3099-41EC-5E60-72DD342F9BF9} - C:\WINNT\system32\nhrqhdxb.dll
O2 - BHO: (no name) - {99DBEA0F-7CFC-5A45-E944-A7FFAC932811} - C:\WINNT\system32\uzvvqsga.dll
O2 - BHO: (no name) - {9ACF19DA-0520-88C8-63F4-F2131713215D} - C:\WINNT\system32\agmkflxc.dll
O2 - BHO: (no name) - {9BD01986-2904-5684-DFC6-E2A252B53D47} - C:\WINNT\system32\pykcdfzo.dll
O2 - BHO: (no name) - {9BD818F6-A8F9-B314-C315-4795BE934854} - C:\WINNT\system32\hmbwylvf.dll
O2 - BHO: (no name) - {9C41D5DD-C654-341D-9C25-97FF96709EF9} - C:\WINNT\system32\pzwdlfsj.dll
O2 - BHO: (no name) - {9EBBDE65-AC7F-9B1D-1507-F88FFA7D7669} - C:\WINNT\system32\lxiiesto.dll
O2 - BHO: (no name) - {9F1FA275-76FF-9D35-EE93-7B25BA584A14} - C:\WINNT\system32\cyhwikyc.dll
O2 - BHO: (no name) - {9F22DF7B-8B4E-9236-609A-2F2E290895CF} - C:\WINNT\system32\hiivhubs.dll
O2 - BHO: (no name) - {9F471E6C-8E2E-74C1-6E8B-67A122978108} - C:\WINNT\system32\iesargzq.dll

 

wow ! never seen anything like this before

O4 - HKLM\..\Run: [Config Loadatiorin] I4Eexplore.exeO4 - HKLM\..\Run: [CharityBuy IE Plugin] C:\charitybuy
O4 - HKLM\..\Run: [rtkhxmj] rundll32 C:\WINNT\system32\rtkhxmj.dll,Init 1
O4 - HKLM\..\Run: [vghbziln] C:\WINNT\bnksdwub.exe

O4 - HKLM\..\Run: [MSVersion] C:\WINNT\system32\internetfeatures.exe
http://www.pestpatrol.com/pestinfo/p/peopleonpage_apropos.asp

Have your run spybot 1.3?

download spybot
http://kujoe.com/freeware/spybot.php
http://majorgeeks.com/download2471.html

and
cwshredder http://www.spywareinfo.com/~merijn/downloads.html

Chris will get rest.

 

Message Edited by Navin kurian on 05-14-2004 08:43 PM

Yes I have run spybot 1.3 and I just ran cwshredder but that didn't seem to find anything.

Thanks

 

STOP PRESS - this looks like a brand new infection - not seen by the experts at Tomcoyotes or Spywareinfo.

Could you please register at Tomcoyotes site and post the new hijackthis log there please.

To register www.tomcoyote.com/reg/

Reply to the email to activate

then post here www.tomcoyote.com/post/

please try to register using the same name if possible.

Please also try to copy to a zipped (compressed) folder 3 (or more) of these files that start with '02' in the hijackthis log. Such as these :-
O2 - BHO: (no name) - {A83F550E-18AF-115A-BFF4-E46259D4702B} - C:\WINNT\system32\xmnjkhcy.dll
O2 - BHO: (no name) - {A98CE81B-68F9-1E86-7125-3B80138C481B} - C:\WINNT\system32\ytbottsn.dll
O2 - BHO: (no name) - {A99D08F3-8396-9F5F-FA8F-F9729521F7B5} - C:\WINNT\system32\urteztqk.dll
Then email the zipped folder with the three files to submissions please provide a link in the email to this thread so they know where it came from.

Have you also run ad-aware - links and running instructiosn on this website

Spybot S&D and Ad-aware using the settings and links provided
Here

Then post a new hijackthis log - sorry I know it is long.

I registered at Tomcoyotes with the same name Daemon had me run some additional scans and I ran a new Hyjackthis but it is still huge and my computer is still very slow.  But Noton Antivirus has stopped popping up on screen telling me there is a virus.

As far as coping to a zipped compressed folder I am not sure how to do that can you help me.

I really appreciate all the help because I am lost.

Thanks

 

 

We will continue this in tomcoyotes - will post there.

For those following here is the link at Tomcoyotes

http://forums.tomcoyote.com/index.php?showtopic=8082&st=0&#entry36391

 

Take a look at some info which is pretty similar to the one listed here

http://www.sophos.com/support/disinfection/corefloo.html
it drops a DLL to the Windows System folder with a filename consisting of 7 random characters a-z and an extension of DLL.