Is this a Trojan?

have this yellow triangle with an exclamation mark in it that pops up in my system tray that says: system alert; spyware detected then it asks to click the icon for more information and when you do it takes you to spyaxe to get you to download, it is very annoying and i can't get rid of it, can anyone help me with this?????

Frank Mulherin
770-938-4205 (H)
404-822-3876 (C)




Logfile of HijackThis v1.99.1
Scan saved at 4:55:42 PM, on 5/23/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\Ati2evxx.exe
C:\PROGRA~1\NavNT\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\NavNT\rtvscan.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINNT\Explorer.EXE
C:\PROGRA~1\NavNT\vptray.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINNT\system32\atmclk.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Ad-Protect\ad-protect.exe
C:\Program Files\Ad-Protect\ad-protect.exe
C:\WINNT\system32\dcomcfg.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\HJT\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Builders Insurance Group.
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = dynhost.inetcam.com;register.inetcam.com;127.0.0.1
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINNT\system32\Userinit.exe
O2 - BHO: Nothing - {f79fd28e-36ee-4989-aa61-9dd8e30a82fa} - C:\WINNT\system32\hp1027.tmp
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Ad-Protect Toolbar - {EA038DDD-0FE0-41f5-BA60-FC3660529E71} - C:\Program Files\Ad-Protect\ToolBand.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [CreateCD50] "C:\Program Files\Common Files\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Client Access Service] "C:\Program Files\IBM\Client Access\cwbsvstr.exe"
O4 - HKLM\..\Run: [Client Access Help Update] "C:\Program Files\IBM\Client Access\cwbinhlp.exe"
O4 - HKLM\..\Run: [Client Access Check Version] "C:\Program Files\IBM\Client Access\cwbckver.exe" LOGIN
O4 - HKLM\..\Run: [Client Access Express Welcome] "C:\Program Files\IBM\Client Access\cwbwlwiz.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\NavNT\vptray.exe
O4 - HKLM\..\Run: [freesurfer] C:\Program Files\Free Surfer\fs20.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINNT\system32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [SC3300CC] C:\WINNT\twain_32\SiPix\SC-3300\SC3300CC.exe
O4 - HKLM\..\Run: [USBPNP] C:\WINNT\twain_32\SiPix\SC-3300\USBPNP.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Ad-Protect] C:\Program Files\Ad-Protect\ad-protect.exe /s
O4 - HKLM\..\RunOnce: [WMC_0] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\msisam11.dll"
O4 - HKLM\..\RunOnce: [WMC_1] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\mindex.dll"
O4 - HKLM\..\RunOnce: [WMC_2] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmstream.dll"
O4 - HKLM\..\RunOnce: [WMC_3] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmnetmgr.dll"
O4 - HKLM\..\RunOnce: [WMC_4] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmidx.ocx"
O4 - HKLM\..\RunOnce: [WMC_5] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmadmoe.dll"
O4 - HKLM\..\RunOnce: [WMC_6] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmadmod.dll"
O4 - HKLM\..\RunOnce: [WMC_7] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmsdmoe.dll"
O4 - HKLM\..\RunOnce: [WMC_8] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmsdmod.dll"
O4 - HKLM\..\RunOnce: [WMC_9] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmvdmoe.dll"
O4 - HKLM\..\RunOnce: [WMC_10] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmvdmod.dll"
O4 - HKLM\..\RunOnce: [WMC_11] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmv8dmoe.dll"
O4 - HKLM\..\RunOnce: [WMC_12] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmv8dmod.dll"
O4 - HKLM\..\RunOnce: [WMC_13] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\mpg4dmod.dll"
O4 - HKLM\..\RunOnce: [WMC_14] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\laprxy.dll"
O4 - HKLM\..\RunOnce: [WMC_15] C:\WINNT\system32\regsvr32.exe /s "C:\WINNT\system32\wmvcore.dll"
O4 - HKLM\..\RunOnce: [WMC_16] "C:\WINNT\system32\logagent.exe" /RegServer
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [1&1 EasyLogin] "C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exe" HIDE
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - Global Startup: Instant Wireless Configuration Utility.lnk = C:\Program Files\Linksys\WPC11 Config Utility\WPC11Cfg.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office2\Office10\OSA.EXE
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Free Surfer - {AFC3FA82-AD07-45cd-8B57-983435B9899E} - C:\Program Files\Free Surfer\FS20.exe
O9 - Extra 'Tools' menuitem: Free Surfer - {AFC3FA82-AD07-45cd-8B57-983435B9899E} - C:\Program Files\Free Surfer\FS20.exe
O15 - Trusted Zone: *.appserver
O15 - Trusted Zone: *.apu
O15 - Trusted Zone: equotes.bldrs.com
O15 - Trusted Zone: gltest.bldrs.com
O15 - Trusted Zone: glweb.bldrs.com
O15 - Trusted Zone: *.bldrs.com
O15 - Trusted Zone: *.builders-app1
O15 - Trusted Zone: *.builders-dc1
O15 - Trusted Zone: *.builders-dc3
O15 - Trusted Zone: asc.buildersinsurancegroup.com
O15 - Trusted Zone: *.buildersinsurancegroup.com
O15 - Trusted Zone: *.itchy
O15 - Trusted Zone: *.krusty
O15 - Trusted Zone: *.millhouse
O15 - Trusted Zone: *.ned
O15 - Trusted Zone: www.playitalia.com
O15 - Trusted Zone: *.scratchy
O15 - Trusted Zone: *.sideshowbob
O15 - Trusted Zone: *.appserver (HKLM)
O15 - Trusted Zone: *.apu (HKLM)
O15 - Trusted Zone: equotes.bldrs.com (HKLM)
O15 - Trusted Zone: gltest.bldrs.com (HKLM)
O15 - Trusted Zone: glweb.bldrs.com (HKLM)
O15 - Trusted Zone: *.bldrs.com (HKLM)
O15 - Trusted Zone: *.builders-app1 (HKLM)
O15 - Trusted Zone: *.builders-dc1 (HKLM)
O15 - Trusted Zone: *.builders-dc3 (HKLM)
O15 - Trusted Zone: asc.buildersinsurancegroup.com (HKLM)
O15 - Trusted Zone: *.buildersinsurancegroup.com (HKLM)
O15 - Trusted Zone: *.itchy (HKLM)
O15 - Trusted Zone: *.krusty (HKLM)
O15 - Trusted Zone: *.millhouse (HKLM)
O15 - Trusted Zone: *.ned (HKLM)
O15 - Trusted Zone: *.scratchy (HKLM)
O15 - Trusted Zone: *.sideshowbob (HKLM)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} - http://www.streamaudio.com/download/ccpm_0237.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://appldnld.m7z.net/content.info.apple.com/iTunes4/WW/win/019-0312.20050111.MmVrT/iTunesSetup.exe
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - http://scan.safety.live.com/resource/download/scanner/en-us/wlscbase7617.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} - http://download.zonelabs.com/bin/promotions/spywaredetector/WebAAS.cab
O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} - https://livewc01.custhelp.com/7503-b146h/rnl/java/RntX.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = hbagmic.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = hbagmic.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = hbagmic.com
O20 - Winlogon Notify: NavLogon - C:\WINNT\System32\NavLogon.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: Client Access Express Remote Command (Cwbrxd) - IBM Corporation - C:\WINNT\CWBRXD.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\NavNT\DefWatch.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\NavNT\rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINNT\system32\HPHipm11.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe