Start a Conversation
UNSOLVED

vickster3659

updated

20 years ago

V

vickster3659

95 Posts

0

3564

January 13th, 2006 21:00

VDC HiJack This Log

Hi,
 
On Dec 27, I posted a log and  have not heard from anyone yet.  I understand everyone was very busy over the holidays.  I just wanted to post a reminder message, as I remember something about "14 days..."
 
To find my original post, search by "VDC Hijack This Log" and it should come up.  I tried reposting a new message, but I got the error message "...20000 characters."  I wanted to keep the whole log together.
 
Thanks,
Vickster3659
  • K

    ky331

    5 Journeyman

    •

    15623 Posts

    •

    45050 Points

    365

    0

    Posted January 13th, 2006 21:00

    1)   please generate a brand-new, up-to-date, HJT log.... no point even considering something that's now over 2 weeks old.
     
    2)   if it doesn't fit into a single post, you can split it up into two (or more) posts:   post the first section, REPLY to it, then post the 2nd section [and etc., until the entire log is posted in a single thread].
     
    3)  you had a very nasty, multiple-times-over, WinFixer infection, type CATLEvents [which is the one type of WinFixer i've not been handling].   when you post your log here, i'll try to call-in someone else to tackle it.

    Message Edited by ky331 on 01-13-2006 06:25 PM

  • V

    vickster3659

    95 Posts

    365

    0

    Posted January 13th, 2006 23:00

    Thank you for getting back.  I will post a new log in the morning.

    Vickster3659

  • V

    vickster3659

    95 Posts

    365

    0

    Posted January 14th, 2006 15:00

    As requested, a new log....Part 1

    Logfile of HijackThis v1.99.1
    Scan saved at 11:57:40 AM, on 1/14/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\WINDOWS\system32\drivers\KodakCCS.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\PROGRA~1\LEXMAR~1\ACMonitor_X73.exe
    C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X73.exe
    C:\WINDOWS\System32\hkcmd.exe
    C:\WINDOWS\BCMSMMSG.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\AIM\AIM95_c4\aim.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Dell Support\DSAgnt.exe
    C:\Program Files\Common Files\AOL\1124288267\ee\AOLHostManager.exe
    C:\Program Files\Common Files\AOL\1124288267\ee\AOLServiceHost.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
    C:\Program Files\Common Files\AOL\1124288267\ee\AOLServiceHost.exe
    C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
    C:\Program Files\Microsoft Office\Office\MSOFFICE.EXE
    C:\Program Files\Microsoft Office\Office\OSA.EXE
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\HijackThis\HijackThis.exe
    C:\WINDOWS\system\keyacc.exe
  • V

    vickster3659

    95 Posts

    366

    0

    Posted January 14th, 2006 15:00

    and, Part 3:     .....Thanks, in advance!

    O20 - Winlogon Notify: iismc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cmsii.dat
    O20 - Winlogon Notify: inetfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafteni.dat
    O20 - Winlogon Notify: ipbak - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\kabpi.dat
    O20 - Winlogon Notify: ipcab - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bacpi.dat
    O20 - Winlogon Notify: ipdrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrdpi.dat
    O20 - Winlogon Notify: ipftp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ptfpi.dat
    O20 - Winlogon Notify: ipjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjpi.dat
    O20 - Winlogon Notify: ipweb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bewpi.dat
    O20 - Winlogon Notify: javadvd - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\dvdavaj.dat
    O20 - Winlogon Notify: jpegmp3 - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\3pmgepj.dat
    O20 - Winlogon Notify: jpegun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nugepj.dat
    O20 - Winlogon Notify: keyacc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ccayek.dat
    O20 - Winlogon Notify: logodbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdogol.dat
    O20 - Winlogon Notify: logpc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cpgol.dat
    O20 - Winlogon Notify: mainkb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bkniam.dat
    O20 - Winlogon Notify: mainweb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bewniam.dat
    O20 - Winlogon Notify: mc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cm.dat
    O20 - Winlogon Notify: mfccat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\taccfm.dat
    O20 - Winlogon Notify: mp3ms - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sm3pm.dat
    O20 - Winlogon Notify: mp3reg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ger3pm.dat
    O20 - Winlogon Notify: msvccat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\taccvsm.dat
    O20 - Winlogon Notify: msvcjava - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\avajcvsm.dat
    O20 - Winlogon Notify: mswin - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niwsm.dat
    O20 - Winlogon Notify: netbin - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nibten.dat
    O20 - Winlogon Notify: neteula - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\alueten.dat
    O20 - Winlogon Notify: odbcbas - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sabcbdo.dat
    O20 - Winlogon Notify: olecat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tacelo.dat
    O20 - Winlogon Notify: oleinet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tenielo.dat
    O20 - Winlogon Notify: oletcp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pctelo.dat
    O20 - Winlogon Notify: olevb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bvelo.dat
    O20 - Winlogon Notify: olevss - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ssvelo.dat
    O20 - Winlogon Notify: pcjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjcp.dat
    O20 - Winlogon Notify: playeula - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\alueyalp.dat
    O20 - Winlogon Notify: playkey - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekyalp.dat
    O20 - Winlogon Notify: psac - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\casp.dat
    O20 - Winlogon Notify: pscr - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\rcsp.dat
    O20 - Winlogon Notify: psdb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bdsp.dat
    O20 - Winlogon Notify: rasmain - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niamsar.dat
    O20 - Winlogon Notify: rasnet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tensar.dat
    O20 - Winlogon Notify: rastapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipatsar.dat
    O20 - Winlogon Notify: raswave - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\evawsar.dat
    O20 - Winlogon Notify: runreg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gernur.dat
    O20 - Winlogon Notify: runxml - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lmxnur.dat
    O20 - Winlogon Notify: surl - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lrus.dat
    O20 - Winlogon Notify: svr - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\rvs.dat
    O20 - Winlogon Notify: tapiun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nuipat.dat
    O20 - Winlogon Notify: taskfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafksat.dat
    O20 - Winlogon Notify: taskinet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\teniksat.dat
    O20 - Winlogon Notify: taskmain - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niamksat.dat
    O20 - Winlogon Notify: tcpac - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\capct.dat
    O20 - Winlogon Notify: tcpdb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bdpct.dat
    O20 - Winlogon Notify: tcpdrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrdpct.dat
    O20 - Winlogon Notify: tcpfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafpct.dat
    O20 - Winlogon Notify: tcpkb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bkpct.dat
    O20 - Winlogon Notify: tcps - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\spct.dat
    O20 - Winlogon Notify: tcptapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipatpct.dat
    O20 - Winlogon Notify: unvga - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\agvnu.dat
    O20 - Winlogon Notify: urlbas - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sablru.dat
    O20 - Winlogon Notify: utilsys - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\syslitu.dat
    O20 - Winlogon Notify: utilvss - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ssvlitu.dat
    O20 - Winlogon Notify: vbexp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pxebv.dat
    O20 - Winlogon Notify: vgasys - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sysagv.dat
    O20 - Winlogon Notify: vssun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nussv.dat
    O20 - Winlogon Notify: wavemain - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niamevaw.dat
    O20 - Winlogon Notify: winjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjniw.dat
    O20 - Winlogon Notify: winpc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cpniw.dat
    O20 - Winlogon Notify: winun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nuniw.dat
    O20 - Winlogon Notify: wps - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\spw.dat
    O20 - Winlogon Notify: wwin - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niww.dat
    O20 - Winlogon Notify: xmldll - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lldlmx.dat
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

     

  • K

    ky331

    5 Journeyman

    •

    15623 Posts

    •

    45050 Points

    366

    0

    Posted January 14th, 2006 15:00

    vikster,
     
    i'm gonna try to call this log to the attention of a few of the forum experts.   RKinner works on most of these, but i don't know if he's started his vacation yet... he's scheduled to be away for a week.
     
    i believe i can offer you a "cumbersome" procedure, to manually remove (one by one) most [but not all] of the problem.    but i would hope there's a simpler way.   i'd prefer not to "experiment"....
     
  • V

    vickster3659

    95 Posts

    366

    0

    Posted January 14th, 2006 15:00

    here is part 2:

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.begin2search.com/sidesearch.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.begin2search.com/sidesearch.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.begin2search.com/sidesearch.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.charter.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.begin2search.com/sidesearch.html
    R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
    O2 - BHO: CATLEvents Object - {13589181-4F0D-4553-B9F8-B4B72172C139} - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ccayek.dat
    O2 - BHO: CATLEvents Object - {446CF8A5-617E-4D91-95AE-AE78CE0D06AF} - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\dvdcfm.dat (file missing)
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: CATLEvents Object - {68132581-10F2-416E-B188-4E648075325A} - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekbd.dat
    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
    O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [Lexmark X73 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X73.exe
    O4 - HKLM\..\Run: [Lexmark X73 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X73.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
    O4 - HKLM\..\Run: [*keyacc] C:\WINDOWS\system\keyacc.exe
    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1124288267\ee\AOLHostManager.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\RunOnce: [*keyacc] C:\WINDOWS\system\keyacc.exe rerun
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\AIM95_c4\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
    O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
    O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
    O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
    O4 - Global Startup: Microsoft Office Shortcut Bar.lnk = C:\Program Files\Microsoft Office\Office\MSOFFICE.EXE
    O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
    O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
    O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\AIM95_c4\aim.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
    O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab?
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
    O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} - http://www.tbcode.com/ist/softwares/v4.0/0006_regular.cab
    O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
    O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
    O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
    O20 - Winlogon Notify: abranti - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\itnarba.dat
    O20 - Winlogon Notify: abras - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sarba.dat
    O20 - Winlogon Notify: abrtcp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pctrba.dat
    O20 - Winlogon Notify: accjava - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\avajcca.dat
    O20 - Winlogon Notify: acmfc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cfmca.dat
    O20 - Winlogon Notify: acodbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdoca.dat
    O20 - Winlogon Notify: addb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bdda.dat
    O20 - Winlogon Notify: apcom - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\mocpa.dat
    O20 - Winlogon Notify: apjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjpa.dat
    O20 - Winlogon Notify: aptapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipatpa.dat
    O20 - Winlogon Notify: aptask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatpa.dat
    O20 - Winlogon Notify: apweb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bewpa.dat
    O20 - Winlogon Notify: asdns - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sndsa.dat
    O20 - Winlogon Notify: avap - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pava.dat
    O20 - Winlogon Notify: avkey - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekva.dat
    O20 - Winlogon Notify: bakvga - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\agvkab.dat
    O20 - Winlogon Notify: basimg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gmisab.dat
    O20 - Winlogon Notify: basip - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pisab.dat
    O20 - Winlogon Notify: bassrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrssab.dat
    O20 - Winlogon Notify: basun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nusab.dat
    O20 - Winlogon Notify: bindll - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lldnib.dat
    O20 - Winlogon Notify: cabftp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ptfbac.dat
    O20 - Winlogon Notify: cabinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnibac.dat
    O20 - Winlogon Notify: catnut - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tuntac.dat
    O20 - Winlogon Notify: chard - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\drahc.dat
    O20 - Winlogon Notify: cinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnic.dat
    O20 - Winlogon Notify: cip - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pic.dat
    O20 - Winlogon Notify: cmddos - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\soddmc.dat
    O20 - Winlogon Notify: codbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdoc.dat
    O20 - Winlogon Notify: crinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnirc.dat
    O20 - Winlogon Notify: crlog - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\golrc.dat
    O20 - Winlogon Notify: crms - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\smrc.dat
    O20 - Winlogon Notify: crreg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gerrc.dat
    O20 - Winlogon Notify: crtask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatrc.dat
    O20 - Winlogon Notify: crutil - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\liturc.dat
    O20 - Winlogon Notify: dbfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafbd.dat
    O20 - Winlogon Notify: dbimg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gmibd.dat
    O20 - Winlogon Notify: dbtask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatbd.dat
    O20 - Winlogon Notify: diskbas - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sabksid.dat
    O20 - Winlogon Notify: diskdrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrdksid.dat
    O20 - Winlogon Notify: diskodbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdoksid.dat
    O20 - Winlogon Notify: diskpc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cpksid.dat
    O20 - Winlogon Notify: dllcom - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\moclld.dat
    O20 - Winlogon Notify: dlldoc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\codlld.dat
    O20 - Winlogon Notify: dllmc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cmlld.dat
    O20 - Winlogon Notify: dllrun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nurlld.dat
    O20 - Winlogon Notify: dnssrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrssnd.dat
    O20 - Winlogon Notify: doccr - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\rccod.dat
    O20 - Winlogon Notify: doswave - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\evawsod.dat
    O20 - Winlogon Notify: dvdcom - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\mocdvd.dat
    O20 - Winlogon Notify: dvddns - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\snddvd.dat
    O20 - Winlogon Notify: dvdole - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\elodvd.dat
    O20 - Winlogon Notify: dvdtask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatdvd.dat
    O20 - Winlogon Notify: eulainet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tenialue.dat
    O20 - Winlogon Notify: expcab - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bacpxe.dat
    O20 - Winlogon Notify: expinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnipxe.dat
    O20 - Winlogon Notify: faxkey - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekxaf.dat
    O20 - Winlogon Notify: faxun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nuxaf.dat
    O20 - Winlogon Notify: faxurl - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lruxaf.dat
    O20 - Winlogon Notify: fonttapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipattnof.dat
    O20 - Winlogon Notify: ftpacc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ccaptf.dat
    O20 - Winlogon Notify: ftpmfc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cfmptf.dat
    O20 - Winlogon Notify: hardcat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tacdrah.dat
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll

  • V

    vickster3659

    95 Posts

    366

    0

    Posted January 14th, 2006 18:00

    Very good.  Thanks for letting me know.
  • R

    RKinner

    2 Intern

    •

    5851 Posts

    366

    0

    Posted January 15th, 2006 12:00

    Has to be the worst case of Catlevents infection I have ever seen! 

     

    These are your bad entries:


    O2 - BHO: CATLEvents Object - {13589181-4F0D-4553-B9F8-B4B72172C139} - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ccayek.dat
    O2 - BHO: CATLEvents Object - {446CF8A5-617E-4D91-95AE-AE78CE0D06AF} - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\dvdcfm.dat (file missing)
    O2 - BHO: CATLEvents Object - {68132581-10F2-416E-B188-4E648075325A} - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekbd.dat
    O4 - HKLM\..\Run: [*keyacc] C:\WINDOWS\system\keyacc.exe
    O4 - HKLM\..\RunOnce: [*keyacc] C:\WINDOWS\system\keyacc.exe rerun
    O20 - Winlogon Notify: abranti - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\itnarba.dat
    O20 - Winlogon Notify: abras - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sarba.dat
    O20 - Winlogon Notify: abrtcp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pctrba.dat
    O20 - Winlogon Notify: accjava - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\avajcca.dat
    O20 - Winlogon Notify: acmfc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cfmca.dat
    O20 - Winlogon Notify: acodbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdoca.dat
    O20 - Winlogon Notify: addb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bdda.dat
    O20 - Winlogon Notify: apcom - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\mocpa.dat
    O20 - Winlogon Notify: apjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjpa.dat
    O20 - Winlogon Notify: aptapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipatpa.dat
    O20 - Winlogon Notify: aptask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatpa.dat
    O20 - Winlogon Notify: apweb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bewpa.dat
    O20 - Winlogon Notify: asdns - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sndsa.dat
    O20 - Winlogon Notify: avap - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pava.dat
    O20 - Winlogon Notify: avkey - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekva.dat
    O20 - Winlogon Notify: bakvga - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\agvkab.dat
    O20 - Winlogon Notify: basimg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gmisab.dat
    O20 - Winlogon Notify: basip - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pisab.dat
    O20 - Winlogon Notify: bassrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrssab.dat
    O20 - Winlogon Notify: basun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nusab.dat
    O20 - Winlogon Notify: bindll - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lldnib.dat
    O20 - Winlogon Notify: cabftp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ptfbac.dat
    O20 - Winlogon Notify: cabinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnibac.dat
    O20 - Winlogon Notify: catnut - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tuntac.dat
    O20 - Winlogon Notify: chard - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\drahc.dat
    O20 - Winlogon Notify: cinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnic.dat
    O20 - Winlogon Notify: cip - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pic.dat
    O20 - Winlogon Notify: cmddos - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\soddmc.dat
    O20 - Winlogon Notify: codbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdoc.dat
    O20 - Winlogon Notify: crinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnirc.dat
    O20 - Winlogon Notify: crlog - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\golrc.dat
    O20 - Winlogon Notify: crms - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\smrc.dat
    O20 - Winlogon Notify: crreg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gerrc.dat
    O20 - Winlogon Notify: crtask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatrc.dat
    O20 - Winlogon Notify: crutil - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\liturc.dat
    O20 - Winlogon Notify: dbfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafbd.dat
    O20 - Winlogon Notify: dbimg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gmibd.dat
    O20 - Winlogon Notify: dbtask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatbd.dat
    O20 - Winlogon Notify: diskbas - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sabksid.dat
    O20 - Winlogon Notify: diskdrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrdksid.dat
    O20 - Winlogon Notify: diskodbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdoksid.dat
    O20 - Winlogon Notify: diskpc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cpksid.dat
    O20 - Winlogon Notify: dllcom - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\moclld.dat
    O20 - Winlogon Notify: dlldoc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\codlld.dat
    O20 - Winlogon Notify: dllmc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cmlld.dat
    O20 - Winlogon Notify: dllrun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nurlld.dat
    O20 - Winlogon Notify: dnssrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrssnd.dat
    O20 - Winlogon Notify: doccr - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\rccod.dat
    O20 - Winlogon Notify: doswave - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\evawsod.dat
    O20 - Winlogon Notify: dvdcom - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\mocdvd.dat
    O20 - Winlogon Notify: dvddns - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\snddvd.dat
    O20 - Winlogon Notify: dvdole - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\elodvd.dat
    O20 - Winlogon Notify: dvdtask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatdvd.dat
    O20 - Winlogon Notify: eulainet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tenialue.dat
    O20 - Winlogon Notify: expcab - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bacpxe.dat
    O20 - Winlogon Notify: expinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnipxe.dat
    O20 - Winlogon Notify: faxkey - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekxaf.dat
    O20 - Winlogon Notify: faxun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nuxaf.dat
    O20 - Winlogon Notify: faxurl - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lruxaf.dat
    O20 - Winlogon Notify: fonttapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipattnof.dat
    O20 - Winlogon Notify: ftpacc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ccaptf.dat
    O20 - Winlogon Notify: ftpmfc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cfmptf.dat
    O20 - Winlogon Notify: hardcat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tacdrah.dat
    O20 - Winlogon Notify: iismc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cmsii.dat
    O20 - Winlogon Notify: inetfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafteni.dat
    O20 - Winlogon Notify: ipbak - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\kabpi.dat
    O20 - Winlogon Notify: ipcab - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bacpi.dat
    O20 - Winlogon Notify: ipdrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrdpi.dat
    O20 - Winlogon Notify: ipftp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ptfpi.dat
    O20 - Winlogon Notify: ipjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjpi.dat
    O20 - Winlogon Notify: ipweb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bewpi.dat
    O20 - Winlogon Notify: javadvd - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\dvdavaj.dat
    O20 - Winlogon Notify: jpegmp3 - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\3pmgepj.dat
    O20 - Winlogon Notify: jpegun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nugepj.dat
    O20 - Winlogon Notify: keyacc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ccayek.dat
    O20 - Winlogon Notify: logodbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdogol.dat
    O20 - Winlogon Notify: logpc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cpgol.dat
    O20 - Winlogon Notify: mainkb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bkniam.dat
    O20 - Winlogon Notify: mainweb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bewniam.dat
    O20 - Winlogon Notify: mc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cm.dat
    O20 - Winlogon Notify: mfccat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\taccfm.dat
    O20 - Winlogon Notify: mp3ms - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sm3pm.dat
    O20 - Winlogon Notify: mp3reg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ger3pm.dat
    O20 - Winlogon Notify: msvccat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\taccvsm.dat
    O20 - Winlogon Notify: msvcjava - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\avajcvsm.dat
    O20 - Winlogon Notify: mswin - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niwsm.dat
    O20 - Winlogon Notify: netbin - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nibten.dat
    O20 - Winlogon Notify: neteula - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\alueten.dat
    O20 - Winlogon Notify: odbcbas - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sabcbdo.dat
    O20 - Winlogon Notify: olecat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tacelo.dat
    O20 - Winlogon Notify: oleinet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tenielo.dat
    O20 - Winlogon Notify: oletcp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pctelo.dat
    O20 - Winlogon Notify: olevb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bvelo.dat
    O20 - Winlogon Notify: olevss - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ssvelo.dat
    O20 - Winlogon Notify: pcjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjcp.dat
    O20 - Winlogon Notify: playeula - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\alueyalp.dat
    O20 - Winlogon Notify: playkey - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekyalp.dat
    O20 - Winlogon Notify: psac - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\casp.dat
    O20 - Winlogon Notify: pscr - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\rcsp.dat
    O20 - Winlogon Notify: psdb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bdsp.dat
    O20 - Winlogon Notify: rasmain - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niamsar.dat
    O20 - Winlogon Notify: rasnet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tensar.dat
    O20 - Winlogon Notify: rastapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipatsar.dat
    O20 - Winlogon Notify: raswave - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\evawsar.dat
    O20 - Winlogon Notify: runreg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gernur.dat
    O20 - Winlogon Notify: runxml - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lmxnur.dat
    O20 - Winlogon Notify: surl - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lrus.dat
    O20 - Winlogon Notify: svr - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\rvs.dat
    O20 - Winlogon Notify: tapiun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nuipat.dat
    O20 - Winlogon Notify: taskfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafksat.dat
    O20 - Winlogon Notify: taskinet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\teniksat.dat
    O20 - Winlogon Notify: taskmain - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niamksat.dat
    O20 - Winlogon Notify: tcpac - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\capct.dat
    O20 - Winlogon Notify: tcpdb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bdpct.dat
    O20 - Winlogon Notify: tcpdrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrdpct.dat
    O20 - Winlogon Notify: tcpfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafpct.dat
    O20 - Winlogon Notify: tcpkb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bkpct.dat
    O20 - Winlogon Notify: tcps - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\spct.dat
    O20 - Winlogon Notify: tcptapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipatpct.dat
    O20 - Winlogon Notify: unvga - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\agvnu.dat
    O20 - Winlogon Notify: urlbas - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sablru.dat
    O20 - Winlogon Notify: utilsys - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\syslitu.dat
    O20 - Winlogon Notify: utilvss - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ssvlitu.dat
    O20 - Winlogon Notify: vbexp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pxebv.dat
    O20 - Winlogon Notify: vgasys - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sysagv.dat
    O20 - Winlogon Notify: vssun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nussv.dat
    O20 - Winlogon Notify: wavemain - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niamevaw.dat
    O20 - Winlogon Notify: winjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjniw.dat
    O20 - Winlogon Notify: winpc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cpniw.dat
    O20 - Winlogon Notify: winun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nuniw.dat
    O20 - Winlogon Notify: wps - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\spw.dat
    O20 - Winlogon Notify: wwin - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niww.dat
    O20 - Winlogon Notify: xmldll - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lldlmx.dat

     

    I'd try the procedure at BleepingComputer. 

    http://www.bleepingcomputer.com/forums/topic3494.html

    When you do the Killbox - Delete on Reboot - make sure you add these files to the list:

    c:\windows\system32\bkinst.exe

    c:\windows\system32\host.exe

    c:\windows\system32\hostx.exe

    It may not find all of them but that's OK.

    If you get a message about an external process then it is not going to work.  Come back and we will try something else. Post a new log as a reply when done.

    Ron

     

     

  • V

    vickster3659

    95 Posts

    368

    0

    Posted January 15th, 2006 23:00

    And, Part 3:

    O20 - Winlogon Notify: acmfc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cfmca.dat
    O20 - Winlogon Notify: acodbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdoca.dat (file missing)
    O20 - Winlogon Notify: addb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bdda.dat (file missing)
    O20 - Winlogon Notify: apcom - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\mocpa.dat (file missing)
    O20 - Winlogon Notify: apjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjpa.dat (file missing)
    O20 - Winlogon Notify: aptapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipatpa.dat (file missing)
    O20 - Winlogon Notify: aptask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatpa.dat (file missing)
    O20 - Winlogon Notify: apweb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bewpa.dat (file missing)
    O20 - Winlogon Notify: asdns - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sndsa.dat (file missing)
    O20 - Winlogon Notify: avap - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pava.dat (file missing)
    O20 - Winlogon Notify: avkey - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekva.dat (file missing)
    O20 - Winlogon Notify: bakvga - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\agvkab.dat (file missing)
    O20 - Winlogon Notify: basimg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gmisab.dat (file missing)
    O20 - Winlogon Notify: basip - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pisab.dat (file missing)
    O20 - Winlogon Notify: bassrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrssab.dat (file missing)
    O20 - Winlogon Notify: basun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nusab.dat (file missing)
    O20 - Winlogon Notify: bindll - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lldnib.dat (file missing)
    O20 - Winlogon Notify: cabftp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ptfbac.dat (file missing)
    O20 - Winlogon Notify: cabinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnibac.dat (file missing)
    O20 - Winlogon Notify: catnut - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tuntac.dat (file missing)
    O20 - Winlogon Notify: chard - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\drahc.dat (file missing)
    O20 - Winlogon Notify: cinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnic.dat (file missing)
    O20 - Winlogon Notify: cip - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pic.dat (file missing)
    O20 - Winlogon Notify: cmddos - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\soddmc.dat (file missing)
    O20 - Winlogon Notify: codbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdoc.dat (file missing)
    O20 - Winlogon Notify: crinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnirc.dat (file missing)
    O20 - Winlogon Notify: crlog - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\golrc.dat (file missing)
    O20 - Winlogon Notify: crms - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\smrc.dat (file missing)
    O20 - Winlogon Notify: crreg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gerrc.dat (file missing)
    O20 - Winlogon Notify: crtask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatrc.dat (file missing)
    O20 - Winlogon Notify: crutil - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\liturc.dat
    O20 - Winlogon Notify: dbfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafbd.dat (file missing)
    O20 - Winlogon Notify: dbimg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gmibd.dat (file missing)
    O20 - Winlogon Notify: dbtask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatbd.dat (file missing)
    O20 - Winlogon Notify: diskbas - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sabksid.dat (file missing)
    O20 - Winlogon Notify: diskdrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrdksid.dat (file missing)
    O20 - Winlogon Notify: diskodbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdoksid.dat (file missing)
    O20 - Winlogon Notify: diskpc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cpksid.dat (file missing)
    O20 - Winlogon Notify: dllcom - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\moclld.dat (file missing)
    O20 - Winlogon Notify: dlldoc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\codlld.dat (file missing)
    O20 - Winlogon Notify: dllmc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cmlld.dat
    O20 - Winlogon Notify: dllrun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nurlld.dat (file missing)
    O20 - Winlogon Notify: dnssrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrssnd.dat (file missing)
    O20 - Winlogon Notify: doccr - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\rccod.dat (file missing)
    O20 - Winlogon Notify: doswave - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\evawsod.dat (file missing)
    O20 - Winlogon Notify: dvdcom - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\mocdvd.dat (file missing)
    O20 - Winlogon Notify: dvddns - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\snddvd.dat (file missing)
    O20 - Winlogon Notify: dvdole - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\elodvd.dat (file missing)
    O20 - Winlogon Notify: dvdtask - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ksatdvd.dat (file missing)
    O20 - Winlogon Notify: eulainet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tenialue.dat (file missing)
    O20 - Winlogon Notify: expcab - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bacpxe.dat (file missing)
    O20 - Winlogon Notify: expinfo - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ofnipxe.dat (file missing)
    O20 - Winlogon Notify: faxkey - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekxaf.dat (file missing)
    O20 - Winlogon Notify: faxun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nuxaf.dat (file missing)
    O20 - Winlogon Notify: faxurl - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lruxaf.dat (file missing)
    O20 - Winlogon Notify: fonttapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipattnof.dat (file missing)
    O20 - Winlogon Notify: ftpacc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ccaptf.dat (file missing)
    O20 - Winlogon Notify: ftpmfc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cfmptf.dat (file missing)
    O20 - Winlogon Notify: hardcat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tacdrah.dat (file missing)
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: iismc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cmsii.dat (file missing)
    O20 - Winlogon Notify: inetfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafteni.dat (file missing)
    O20 - Winlogon Notify: ipbak - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\kabpi.dat (file missing)
    O20 - Winlogon Notify: ipcab - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bacpi.dat (file missing)
    O20 - Winlogon Notify: ipdrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrdpi.dat (file missing)
    O20 - Winlogon Notify: ipftp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ptfpi.dat (file missing)
    O20 - Winlogon Notify: ipjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjpi.dat (file missing)
    O20 - Winlogon Notify: ipweb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bewpi.dat (file missing)
    O20 - Winlogon Notify: javadvd - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\dvdavaj.dat (file missing)
    O20 - Winlogon Notify: jpegmp3 - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\3pmgepj.dat (file missing)
    O20 - Winlogon Notify: jpegun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nugepj.dat (file missing)
    O20 - Winlogon Notify: keyacc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ccayek.dat
    O20 - Winlogon Notify: logodbc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cbdogol.dat (file missing)
    O20 - Winlogon Notify: logpc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cpgol.dat (file missing)
    O20 - Winlogon Notify: mainkb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bkniam.dat (file missing)
    O20 - Winlogon Notify: mainweb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bewniam.dat (file missing)
    O20 - Winlogon Notify: mc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cm.dat (file missing)
    O20 - Winlogon Notify: mfccat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\taccfm.dat (file missing)
    O20 - Winlogon Notify: mp3ms - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sm3pm.dat (file missing)
    O20 - Winlogon Notify: mp3reg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ger3pm.dat (file missing)
    O20 - Winlogon Notify: msvccat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\taccvsm.dat (file missing)
    O20 - Winlogon Notify: msvcjava - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\avajcvsm.dat (file missing)
    O20 - Winlogon Notify: mswin - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niwsm.dat (file missing)
    O20 - Winlogon Notify: netbin - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nibten.dat (file missing)
    O20 - Winlogon Notify: neteula - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\alueten.dat (file missing)
    O20 - Winlogon Notify: odbcbas - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sabcbdo.dat (file missing)
    O20 - Winlogon Notify: olecat - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tacelo.dat (file missing)
    O20 - Winlogon Notify: oleinet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tenielo.dat (file missing)
    O20 - Winlogon Notify: oletcp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pctelo.dat (file missing)
    O20 - Winlogon Notify: olevb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bvelo.dat (file missing)
    O20 - Winlogon Notify: olevss - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ssvelo.dat (file missing)
    O20 - Winlogon Notify: pcjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjcp.dat (file missing)
    O20 - Winlogon Notify: playeula - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\alueyalp.dat (file missing)
    O20 - Winlogon Notify: playkey - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekyalp.dat (file missing)
    O20 - Winlogon Notify: psac - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\casp.dat (file missing)
    O20 - Winlogon Notify: pscr - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\rcsp.dat (file missing)
    O20 - Winlogon Notify: psdb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bdsp.dat (file missing)
    O20 - Winlogon Notify: rasmain - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niamsar.dat (file missing)
    O20 - Winlogon Notify: rasnet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\tensar.dat (file missing)
    O20 - Winlogon Notify: rastapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipatsar.dat (file missing)
    O20 - Winlogon Notify: raswave - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\evawsar.dat (file missing)
    O20 - Winlogon Notify: runreg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gernur.dat
    O20 - Winlogon Notify: runxml - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lmxnur.dat (file missing)
    O20 - Winlogon Notify: surl - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lrus.dat (file missing)
    O20 - Winlogon Notify: svr - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\rvs.dat (file missing)
    O20 - Winlogon Notify: tapiun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nuipat.dat (file missing)
    O20 - Winlogon Notify: taskfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafksat.dat (file missing)
    O20 - Winlogon Notify: taskinet - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\teniksat.dat (file missing)
    O20 - Winlogon Notify: taskmain - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niamksat.dat (file missing)
    O20 - Winlogon Notify: tcpac - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\capct.dat (file missing)
    O20 - Winlogon Notify: tcpdb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bdpct.dat (file missing)
    O20 - Winlogon Notify: tcpdrv - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\vrdpct.dat (file missing)
    O20 - Winlogon Notify: tcpfax - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\xafpct.dat (file missing)
    O20 - Winlogon Notify: tcpkb - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\bkpct.dat (file missing)
    O20 - Winlogon Notify: tcps - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\spct.dat (file missing)
    O20 - Winlogon Notify: tcptapi - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ipatpct.dat (file missing)
    O20 - Winlogon Notify: unvga - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\agvnu.dat (file missing)
    O20 - Winlogon Notify: urlbas - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sablru.dat (file missing)
    O20 - Winlogon Notify: utilsys - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\syslitu.dat (file missing)
    O20 - Winlogon Notify: utilvss - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ssvlitu.dat (file missing)
    O20 - Winlogon Notify: vbexp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pxebv.dat (file missing)
    O20 - Winlogon Notify: vgasys - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sysagv.dat (file missing)
    O20 - Winlogon Notify: vssun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nussv.dat (file missing)
    O20 - Winlogon Notify: wavemain - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niamevaw.dat (file missing)
    O20 - Winlogon Notify: winjpeg - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\gepjniw.dat (file missing)
    O20 - Winlogon Notify: winpc - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\cpniw.dat (file missing)
    O20 - Winlogon Notify: winun - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\nuniw.dat (file missing)
    O20 - Winlogon Notify: wps - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\spw.dat (file missing)
    O20 - Winlogon Notify: wwin - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\niww.dat (file missing)
    O20 - Winlogon Notify: xmldll - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\lldlmx.dat (file missing)
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

    Thanks, Vickster3659

  • V

    vickster3659

    95 Posts

    368

    0

    Posted January 15th, 2006 23:00

    Here is Part 2:

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.begin2search.com/sidesearch.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.begin2search.com/sidesearch.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.begin2search.com/sidesearch.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.charter.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.begin2search.com/sidesearch.html
    R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
    O2 - BHO: CATLEvents Object - {13589181-4F0D-4553-B9F8-B4B72172C139} - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\ccayek.dat
    O2 - BHO: CATLEvents Object - {446CF8A5-617E-4D91-95AE-AE78CE0D06AF} - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\dvdcfm.dat (file missing)
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: CATLEvents Object - {68132581-10F2-416E-B188-4E648075325A} - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\yekbd.dat
    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
    O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [Lexmark X73 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X73.exe
    O4 - HKLM\..\Run: [Lexmark X73 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X73.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
    O4 - HKLM\..\Run: [*keyacc] C:\WINDOWS\system\keyacc.exe
    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1124288267\ee\AOLHostManager.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\RunOnce: [*keyacc] C:\WINDOWS\system\keyacc.exe rerun
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\AIM95_c4\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
    O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
    O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
    O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
    O4 - Global Startup: Microsoft Office Shortcut Bar.lnk = C:\Program Files\Microsoft Office\Office\MSOFFICE.EXE
    O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
    O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
    O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\AIM95_c4\aim.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
    O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab?
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
    O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} - http://www.tbcode.com/ist/softwares/v4.0/0006_regular.cab
    O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
    O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
    O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
    O20 - Winlogon Notify: abranti - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\itnarba.dat (file missing)
    O20 - Winlogon Notify: abras - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\sarba.dat (file missing)
    O20 - Winlogon Notify: abrtcp - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\pctrba.dat (file missing)
    O20 - Winlogon Notify: accjava - C:\DOCUME~1\JACKIE~1\LOCALS~1\Temp\avajcca.dat (file missing)

Dell Support Resources

Latest Solutions

View More