Options

Music is Janky on my Laptop

Unknown
edited October 2006 in Spyware & Virus Removal
I haven't done any changes to my laptop recently, but the sound coming out, whether I use the built in speakers or plug in external ones, sometimes starts to skip. Wehen the sound is skipping, it seems like everything else is running normal on my computer and I can run other applications without a hitch. Any clue to what might help would be appreciated.

Dr. Chonky

Comments

  • jmoney3457jmoney3457 Maine
    edited October 2006
    I need to see an HJT log, please do the following: Click here to download HJTsetup.exe
    Save HJTsetup.exe to your desktop.
    • Double click on the HJTsetup.exe icon on your desktop.

    • By default it will install to C:\Program Files\Hijack This.

    • Continue to click Next in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue.

    • Put a check by Create a desktop icon then click Next again.

    • Continue to follow the rest of the prompts from there.

    • At the final dialogue box click Finish and it will launch Hijack This.

    • Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log.

    • Name the log "HJTLog" (or something similar ;)) and save it on your desktop & post that log here
    DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
  • dr.chonky
    edited October 2006
    Here's my HJT log.


    Logfile of HijackThis v1.99.1
    Scan saved at 9:39:30 AM, on 10/23/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
    C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    C:\Program Files\Ares\Ares.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
    C:\Program Files\DesktopEarth\DesktopEarth.exe
    C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
    C:\Program Files\Azureus\Azureus.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Hijackthis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.computers.us.fujitsu.com/
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.computers.us.fujitsu.com/
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
    O4 - HKLM\..\Run: [LoadFujitsuQuickTouch] C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
    O4 - HKLM\..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: DesktopEarth AutoStart.lnk = ?
    O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.computers.us.fujitsu.com/
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
  • jmoney3457jmoney3457 Maine
    edited October 2006
    please go to C:\Program Files\Hijackthis\HijackThis.exe and rename hijackthis.exe to scanner.exe then rescan and post that new HJT log this is due to some malware hiding some entries if it detects hijackthis.exe on the machine
  • dr.chonky
    edited October 2006
    here's my new log


    Logfile of HijackThis v1.99.1
    Scan saved at 10:42:32 AM, on 10/23/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
    C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    C:\Program Files\Ares\Ares.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
    C:\Program Files\DesktopEarth\DesktopEarth.exe
    C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
    C:\Program Files\Azureus\Azureus.exe
    C:\Program Files\Hijackthis\HijackThis.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Hijackthis\scanner.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.computers.us.fujitsu.com/
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.computers.us.fujitsu.com/
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
    O4 - HKLM\..\Run: [LoadFujitsuQuickTouch] C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
    O4 - HKLM\..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: DesktopEarth AutoStart.lnk = ?
    O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.computers.us.fujitsu.com/
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
  • jmoney3457jmoney3457 Maine
    edited October 2006
    Please download AVG Anti-Spyware. Save the install file to your desktop.
    • Install AVG by double clicking the installer.
    • Follow the prompts. Make sure that Launch AVG is checked.
    • On the main screen under Your Computer's security.
      • Click on Change state next to Resident shield. It should now change to inactive.
      • Next to Last Update, click on Update now. (You will need an active internet connection to perform this)
      • Wait until you see the Update succesfull message.
        Note: If the Update now option is grayed out, follow the steps below.
        • Click on Update on the toolbar.
        • Under Manual update, click on the Start Update button.
        • Wait until you see the Update succesfull message.
    • Right-click the AVG Tray Icon and select Exit. Confirm by clicking Yes.
    If you are having problems with the updater, you can use this link to manually update AVG.
    AVG manual updates.
    Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that AVG is closed before installing the update.

    ______________________________

    Reboot your computer in Safe Mode.
    • If the computer is running, shut down Windows, and then turn off the power.
    • Wait 30 seconds, and then turn the computer on.
    • Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
    • Ensure that the Safe Mode option is selected.
    • Press Enter. The computer then begins to start in Safe mode.
    • Login on your usual account.
      ______________________________
      Close ALL open Windows / Programs / Folders. Please start AVG and run a full scan.
      • Click on Scanner on the toolbar.
      • Click on the Settings tab.
        • Under How to act?
          • Click on Recommended Action and choose Quarantine from the popup menu.
        • Under How to scan?
          • All checkboxes should be ticked.
        • Under Possibly unwanted software:
          • All checkboxes should be ticked.
        • Under Reports:
          • Select Automatically generate report after every scan and uncheck Only if threats were found.
        • Under What to scan?
          • Select Scan every file.
      • Click on the Scan tab.
      • Click on Complete System Scan to start the scan process.
      • Let the program scan the machine.
      • When the scan has finished, follow the instructions below.
        IMPORTANT : Don't click on the "Save Scan Report" button before you did hit the "Apply all Actions" button.
        • Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
        • At the bottom of the window click on the Apply all Actions button. (3)
          scanavgjk2.jpg
      • When done, click the Save Scan Report button.(4)
        • Click the Save Report as button.
        • Save the report to your Desktop.
      • Right-click the AVG Tray Icon and select Exit. Confirm by clicking Yes.
      Reboot in Normal Mode.

      Please post the AVG Log, and a fresh Hijack This log in your next reply.
  • dr.chonky
    edited October 2006
    So I did the AVG thing, but my sound is still Janky, here's my log files.
    AVG Anti-Spyware - Scan Report

    + Created at: 10:42:16 PM 10/23/2006

    + Scan result:



    HKU\S-1-5-21-302610280-1631928609-3459542731-500\Software\Classes\CLSID\{8e99f990-b75a-4568-b3c8-24cbc8cbbfc1} -> Adware.SpywareQuake : Cleaned with backup (quarantined).
    HKU\S-1-5-21-302610280-1631928609-3459542731-500\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{8e99f990-b75a-4568-b3c8-24cbc8cbbfc1} -> Adware.SpywareQuake : Cleaned with backup (quarantined).
    HKU\S-1-5-21-302610280-1631928609-3459542731-500_Classes\CLSID\{8e99f990-b75a-4568-b3c8-24cbc8cbbfc1} -> Adware.SpywareQuake : Cleaned with backup (quarantined).
    C:\WINDOWS\Downloaded Program Files\CONFLICT.1\gdnUS2218.exe -> Downloader.Small.czm : Cleaned with backup (quarantined).
    C:\WINDOWS\Downloaded Program Files\CONFLICT.4\gdnUS2218.exe -> Downloader.Small.dag : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\hp100.tmp -> Downloader.Zlob.so : Cleaned with backup (quarantined).
    C:\Documents and Settings\Administrator\Local Settings\Temp\temp.frBBBF -> Not-A-Virus.Hoax.Win32.Renos.db : Cleaned with backup (quarantined).
    C:\Documents and Settings\Administrator\Cookies\administrator@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned.
    :mozilla.118:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.119:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.120:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.121:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.122:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.123:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.124:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.125:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.126:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.127:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.128:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.129:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.130:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.131:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.132:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.133:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.423:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.434:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.576:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.577:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.582:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.594:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.597:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.616:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.640:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@usatoday1.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.170:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.171:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.172:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.179:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@ads.addynamix[1].txt -> TrackingCookie.Addynamix : Cleaned.
    :mozilla.373:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.374:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.842:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.843:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.844:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.845:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.846:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.847:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.203:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
    :mozilla.204:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@z1.adserver[1].txt -> TrackingCookie.Adserver : Cleaned.
    :mozilla.198:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.199:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.200:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.201:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.202:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.30:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
    :mozilla.193:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
    :mozilla.194:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
    :mozilla.195:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
    :mozilla.196:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
    :mozilla.805:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@citi.bridgetrack[1].txt -> TrackingCookie.Bridgetrack : Cleaned.
    :mozilla.896:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : Cleaned.
    :mozilla.414:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.415:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.416:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.897:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.153:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.154:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.155:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.156:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.157:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.158:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.159:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.160:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.425:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Centrport : Cleaned.
    :mozilla.798:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@ad1.clickhype[2].txt -> TrackingCookie.Clickhype : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@cz3.clickzs[1].txt -> TrackingCookie.Clickzs : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@cz9.clickzs[2].txt -> TrackingCookie.Clickzs : Cleaned.
    :mozilla.439:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Com : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@com[1].txt -> TrackingCookie.Com : Cleaned.
    :mozilla.447:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.448:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.449:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.450:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.17:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.367:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.368:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.369:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.370:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.180:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
    :mozilla.392:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
    :mozilla.169:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.173:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.174:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.175:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.176:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.177:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.178:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.252:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.253:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.254:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.255:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.257:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.258:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.334:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.335:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.551:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned.
    :mozilla.837:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned.
    :mozilla.141:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
    :mozilla.278:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
    :mozilla.613:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.619:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@overture[1].txt -> TrackingCookie.Overture : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@paycounter[2].txt -> TrackingCookie.Paycounter : Cleaned.
    :mozilla.234:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.235:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.236:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.237:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.641:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
    :mozilla.642:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
    :mozilla.643:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.644:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.645:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.646:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.866:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.867:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.868:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.869:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.870:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.871:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.872:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.873:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.674:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@ads1.revenue[1].txt -> TrackingCookie.Revenue : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@revenue[1].txt -> TrackingCookie.Revenue : Cleaned.
    :mozilla.483:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.484:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.485:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.486:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.487:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.488:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.489:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.223:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.224:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.225:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.226:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.227:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.228:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.371:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.372:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@adopt.specificclick[1].txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.708:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@www.starware[1].txt -> TrackingCookie.Starware : Cleaned.
    :mozilla.710:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.711:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.712:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.713:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.714:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.715:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.716:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.717:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.718:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.719:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.720:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.337:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.338:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.339:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.340:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.811:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.812:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Cleaned.
    :mozilla.748:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.20:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.21:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.22:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.23:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.24:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.25:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.26:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.27:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.28:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.281:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.282:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.283:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.284:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.285:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.286:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.632:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.633:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.634:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.635:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.667:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.668:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.669:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.670:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.671:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@reduxads.valuead[2].txt -> TrackingCookie.Valuead : Cleaned.
    :mozilla.786:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@yadro[2].txt -> TrackingCookie.Yadro : Cleaned.
    :mozilla.143:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.144:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.145:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.146:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.147:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.241:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    :mozilla.242:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    :mozilla.243:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\lejti39d.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    C:\Documents and Settings\Administrator\Cookies\administrator@zedo[1].txt -> TrackingCookie.Zedo : Cleaned.
    C:\WINDOWS\system32\1024 -> Trojan.Small : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\1024\ld690E.tmp -> Trojan.Small : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\1024\ld6B71.tmp -> Trojan.Small : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\1024\ld7091.tmp -> Trojan.Small : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\1024\ld760A.tmp -> Trojan.Small : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\1024\ld7D4C.tmp -> Trojan.Small : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\1024\ld8EAF.tmp -> Trojan.Small : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\1024\ldA436.tmp -> Trojan.Small : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\1024\ldE10A.tmp -> Trojan.Small : Cleaned with backup (quarantined).
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\\kernel32.dll -> Trojan.Small : Cleaned with backup (quarantined).


    ::Report end




    And here's my newest HJT log

    Logfile of HijackThis v1.99.1
    Scan saved at 10:53:45 PM, on 10/23/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
    C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
    C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    C:\Program Files\Ares\Ares.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
    C:\Program Files\DesktopEarth\DesktopEarth.exe
    C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Hijackthis\scanner.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.computers.us.fujitsu.com/
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.computers.us.fujitsu.com/
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
    O4 - HKLM\..\Run: [LoadFujitsuQuickTouch] C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
    O4 - HKLM\..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: DesktopEarth AutoStart.lnk = ?
    O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.computers.us.fujitsu.com/
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe

    -Dr. Chonky
  • jmoney3457jmoney3457 Maine
    edited October 2006
    malware may not be the cause of that..it could be a hardware/software problem after we get you cleaned up and everything i can move your thread into the windows forum if you'd like as they'd be able to help you more with it if it still continues after we're done..also please do this:Please run the BitDefender online scan from here; http://www.bitdefender.com/scan8/ie.html
    You will need to allow an active x install for the scan to run.
    Leave the scanning options at default and press "click here to scan"
    When finished scanning, click on "click here to export the scan report"
    Save it to your desktop, at "file name" type in "bdscan" then click save.
    Please zip the bdscan.html file then attach the bdscan.html file to your next post along with a new hijackthis log
  • dr.chonky
    edited October 2006
    Heres the BD and HJT log.

    Logfile of HijackThis v1.99.1
    Scan saved at 2:03:56 AM, on 10/24/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
    C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
    C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    C:\Program Files\Ares\Ares.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
    C:\Program Files\DesktopEarth\DesktopEarth.exe
    C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
    C:\Program Files\Azureus\Azureus.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Hijackthis\scanner.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.computers.us.fujitsu.com/
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.computers.us.fujitsu.com/
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
    O4 - HKLM\..\Run: [LoadFujitsuQuickTouch] C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
    O4 - HKLM\..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: DesktopEarth AutoStart.lnk = ?
    O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.computers.us.fujitsu.com/
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
  • jmoney3457jmoney3457 Maine
    edited October 2006
    good job with the BD scan...got a few things, mostly in norton's quarentine however, please purge *delete everything* from Norton quarentine then reboot and post new hjt log..as its looking clean:thumbsup:
Sign In or Register to comment.