Well, to start, my system is a Dell Inspiron 8200 Notebook with a Pentium 4 Mobile CPU - 1.5Ghz and 512MB-RAMM, Windows XP Home.

The story as I can tell so far:
For about 4 months:
--The system runs terribly slow, even when only a folder or two is open
--many extra programs at startup
--IE homepage is automatically set to:
res://C:\WINDOWS\pxfxz.dll/index.html#12802

--No matter what I use for searching, another search engine is automatically...consulted?..or something
--Porn sites are automatically added to my favorites list, along with a mass of folders full of links, deleting any of which is futile, they just come back.
--Programs seem to crash at random, most often is explorer itself, but I also find it difficult sometimes to even type in wordpad or open my documents.
--Two programs crash before explorer even fully loads:
appk32.exe
winas.exe

Now for the Hijack This Log:


Logfile of HijackThis v1.98.2
Scan saved at 11:58:18 PM, on 8/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\ipjx32.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\SYSTEM32\Drivers\dadapp.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\RVP\bpc.exe
C:\Program Files\Winamp5\winampa.exe
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
C:\Program Files\Common files\updmgr\updmgr.exe
C:\program files\altnet\points manager\points manager.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\WINDOWS\system32\appeo32.exe
C:\Program Files\NaviSearch\bin\nls.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\System32\rundll32.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\winlogon.exe
C:\PROGRA~1\Altnet\DOWNLO~1\asm.exe
C:\Program Files\Hijack This\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\system32\search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = C:\WINDOWS\system32\searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.search-exe.com/nph-sea...=sbar1_srchbtn
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.search-exe.com/nph-sea...ook=stmpl1&fw=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.myhandysearch.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://C:\WINDOWS\pxfxz.dll/index.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.search-exe.com/nph-sea...ook=stmpl1&fw=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.search-exe.com/nph-sea...=sbar1_srchbtn
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.search-exe.com/nph-sea...ook=stmpl1&fw=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = res://C:\WINDOWS\pxfxz.dll/index.html#12802
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.search-exe.com/nph-sea...ook=stmpl1&fw=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.search-exe.com/nph-sea...ook=stmpl1&fw=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.search-exe.com/nph-sea...ook=stmpl1&fw=
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.search-exe.com/nph-sea...ook=stmpl1&fw=
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {32A6CEC2-152D-9C47-1D16-97AAFF45661E} - C:\WINDOWS\msej32.dll
O2 - BHO: (no name) - {34794103-B86E-82C7-B7C0-2D802B322604} - C:\WINDOWS\apirr.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_ 12_0.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [DadApp] C:\WINDOWS\SYSTEM32\Drivers\dadapp.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [RVP] "C:\Program Files\RVP\bpc.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp5\winampa.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [updmgr] C:\Program Files\Common files\updmgr\updmgr.exe
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [appeo32.exe] C:\WINDOWS\system32\appeo32.exe
O4 - HKLM\..\Run: [appff.exe] C:\WINDOWS\system32\appff.exe
O4 - HKLM\..\Run: [Search-Exe] "C:\Program Files\se\v11\se.EXE" /H
O4 - HKLM\..\Run: [NaviSearch] C:\Program Files\NaviSearch\bin\nls.exe
O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
O4 - HKLM\..\Run: [sdkyq32.exe] C:\WINDOWS\system32\sdkyq32.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [sdkhh.exe] C:\WINDOWS\system32\sdkhh.exe
O4 - HKLM\..\Run: [mfcuw32.exe] C:\WINDOWS\system32\mfcuw32.exe
O4 - HKLM\..\Run: [winul32.exe] C:\WINDOWS\system32\winul32.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaE ngineMain
O4 - HKLM\..\Run: [ntla.exe] C:\WINDOWS\system32\ntla.exe
O4 - HKLM\..\RunOnce: [iekh32.exe] C:\WINDOWS\system32\iekh32.exe
O4 - HKLM\..\RunOnce: [netpk.exe] C:\WINDOWS\system32\netpk.exe
O4 - HKLM\..\RunOnce: [sdkqk32.exe] C:\WINDOWS\system32\sdkqk32.exe
O4 - HKLM\..\RunOnce: [apiuq32.exe] C:\WINDOWS\system32\apiuq32.exe
O4 - HKLM\..\RunOnce: [addrs.exe] C:\WINDOWS\addrs.exe
O4 - HKLM\..\RunOnce: [ipfe32.exe] C:\WINDOWS\system32\ipfe32.exe
O4 - HKLM\..\RunOnce: [ienb32.exe] C:\WINDOWS\system32\ienb32.exe
O4 - HKLM\..\RunOnce: [winhk32.exe] C:\WINDOWS\system32\winhk32.exe
O4 - HKLM\..\RunOnce: [sysbp.exe] C:\WINDOWS\system32\sysbp.exe
O4 - HKLM\..\RunOnce: [winfk32.exe] C:\WINDOWS\winfk32.exe
O4 - HKLM\..\RunOnce: [addqa.exe] C:\WINDOWS\system32\addqa.exe
O4 - HKLM\..\RunOnce: [sdkbg.exe] C:\WINDOWS\sdkbg.exe
O4 - HKLM\..\RunOnce: [netph.exe] C:\WINDOWS\system32\netph.exe
O4 - HKLM\..\RunOnce: [appts.exe] C:\WINDOWS\system32\appts.exe
O4 - HKLM\..\RunOnce: [javanf.exe] C:\WINDOWS\system32\javanf.exe
O4 - HKLM\..\RunOnce: [mspa32.exe] C:\WINDOWS\mspa32.exe
O4 - HKLM\..\RunOnce: [sysne.exe] C:\WINDOWS\system32\sysne.exe
O4 - HKLM\..\RunOnce: [mfctp.exe] C:\WINDOWS\mfctp.exe
O4 - HKLM\..\RunOnce: [javasy.exe] C:\WINDOWS\system32\javasy.exe
O4 - HKLM\..\RunOnce: [apinz.exe] C:\WINDOWS\system32\apinz.exe
O4 - HKLM\..\RunOnce: [ntbr32.exe] C:\WINDOWS\system32\ntbr32.exe
O4 - HKLM\..\RunOnce: [appkk32.exe] C:\WINDOWS\appkk32.exe
O4 - HKLM\..\RunOnce: [addzf.exe] C:\WINDOWS\system32\addzf.exe
O4 - HKLM\..\RunOnce: [netfi.exe] C:\WINDOWS\system32\netfi.exe
O4 - HKLM\..\RunOnce: [mfcii32.exe] C:\WINDOWS\system32\mfcii32.exe
O4 - HKLM\..\RunOnce: [systf32.exe] C:\WINDOWS\system32\systf32.exe
O4 - HKLM\..\RunOnce: [sysdc.exe] C:\WINDOWS\system32\sysdc.exe
O4 - HKLM\..\RunOnce: [sysug32.exe] C:\WINDOWS\system32\sysug32.exe
O4 - HKLM\..\RunOnce: [addyd.exe] C:\WINDOWS\system32\addyd.exe
O4 - HKLM\..\RunOnce: [crjw32.exe] C:\WINDOWS\crjw32.exe
O4 - HKLM\..\RunOnce: [mfcxl32.exe] C:\WINDOWS\mfcxl32.exe
O4 - HKLM\..\RunOnce: [apptz32.exe] C:\WINDOWS\apptz32.exe
O4 - HKLM\..\RunOnce: [addii32.exe] C:\WINDOWS\addii32.exe
O4 - HKLM\..\RunOnce: [appnb32.exe] C:\WINDOWS\appnb32.exe
O4 - HKLM\..\RunOnce: [sdkfr.exe] C:\WINDOWS\sdkfr.exe
O4 - HKLM\..\RunOnce: [d3ud32.exe] C:\WINDOWS\d3ud32.exe
O4 - HKLM\..\RunOnce: [msbv32.exe] C:\WINDOWS\msbv32.exe
O4 - HKLM\..\RunOnce: [apisk.exe] C:\WINDOWS\system32\apisk.exe
O4 - HKLM\..\RunOnce: [ntjx32.exe] C:\WINDOWS\ntjx32.exe
O4 - HKLM\..\RunOnce: [mfcno.exe] C:\WINDOWS\mfcno.exe
O4 - HKLM\..\RunOnce: [iemc32.exe] C:\WINDOWS\system32\iemc32.exe
O4 - HKLM\..\RunOnce: [appaw.exe] C:\WINDOWS\system32\appaw.exe
O4 - HKLM\..\RunOnce: [netzq.exe] C:\WINDOWS\system32\netzq.exe
O4 - HKLM\..\RunOnce: [winas.exe] C:\WINDOWS\system32\winas.exe
O4 - HKLM\..\RunOnce: [d3rm32.exe] C:\WINDOWS\d3rm32.exe
O4 - HKLM\..\RunOnce: [winzs32.exe] C:\WINDOWS\system32\winzs32.exe
O4 - HKLM\..\RunOnce: [ieas32.exe] C:\WINDOWS\system32\ieas32.exe
O4 - HKLM\..\RunOnce: [ntfh32.exe] C:\WINDOWS\ntfh32.exe
O4 - HKLM\..\RunOnce: [sdkar.exe] C:\WINDOWS\sdkar.exe
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: PalNetaware.lnk = C:\Program Files\Paltalk\pnetaware.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: RealDownload.lnk = C:\Program Files\Real\RealDownload\Realdownload.exe
O4 - Global Startup: winlogon.exe
O8 - Extra context menu item: &iSearch The Web - res://C:\WINDOWS\System32\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Web Savings - file://C:\Program Files\WebSavingsfromEbates\System\Temp\ebateswebsa vings_script0.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Sidesearch - {000007C6-17DF-4438-92A4-DE5537471BA3} - C:\Program Files\Lycos\Sidesearch\sidesearch1311.dll (file missing)
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll (file missing)
O9 - Extra button: (no name) - {A80F2DB2-80A9-4834-8F5A-4AB70F4EF4C3} - (no file)
O9 - Extra 'Tools' menuitem: IMI - {A80F2DB2-80A9-4834-8F5A-4AB70F4EF4C3} - (no file)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: DigiChat Applet - http://host8.digichat.com/DigiChat/D.../Client_IE.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {1C78AB3F-A857-482E-80C0-3A1E5238A565} - file://C:\install.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com...45/yacscom.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} (PopCapLoaderCtrl Class) - http://zone.msn.com/bingame/rock/def...caploader1.cab
O16 - DPF: {666DDE35-E955-11D0-A707-000000521958} - http://69.56.176.227/webplugin.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yaho...tocomplete.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v5.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX/download/kdx.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab

First of all, read the information here and run the appropriate programs. Then post a fresh log.

Thank you for your help, here is the updated log:

Logfile of HijackThis v1.98.2
Scan saved at 11:07:32 PM, on 8/12/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\appff.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\SYSTEM32\Drivers\dadapp.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
C:\Program Files\NaviSearch\bin\nls.exe
C:\PROGRA~1\Altnet\DOWNLO~1\asm.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\Soap Bubbles.bmp:xrhwp
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijack This\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\system32\search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = C:\WINDOWS\system32\searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\fkzyl.dll/sp.html#12802
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\fkzyl.dll/sp.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\fkzyl.dll/sp.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\fkzyl.dll/sp.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\fkzyl.dll/sp.html#12802
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\fkzyl.dll/sp.html#12802
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\fkzyl.dll/sp.html#12802
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {D31CBD91-5B80-AB86-0559-F9D9CBB187FD} - C:\WINDOWS\apikd.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_ 12_0.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [DadApp] C:\WINDOWS\SYSTEM32\Drivers\dadapp.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp5\winampa.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [updmgr] C:\Program Files\Common files\updmgr\updmgr.exe
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [appeo32.exe] C:\WINDOWS\system32\appeo32.exe
O4 - HKLM\..\Run: [appff.exe] C:\WINDOWS\system32\appff.exe
O4 - HKLM\..\Run: [NaviSearch] C:\Program Files\NaviSearch\bin\nls.exe
O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
O4 - HKLM\..\Run: [sdkyq32.exe] C:\WINDOWS\system32\sdkyq32.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [mfcuw32.exe] C:\WINDOWS\system32\mfcuw32.exe
O4 - HKLM\..\Run: [winul32.exe] C:\WINDOWS\system32\winul32.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaE ngineMain
O4 - HKLM\..\Run: [ntla.exe] C:\WINDOWS\system32\ntla.exe
O4 - HKLM\..\Run: [javaim32.exe] C:\WINDOWS\system32\javaim32.exe
O4 - HKLM\..\Run: [d3ve.exe] C:\WINDOWS\system32\d3ve.exe
O4 - HKLM\..\RunOnce: [apiuq32.exe] C:\WINDOWS\system32\apiuq32.exe
O4 - HKLM\..\RunOnce: [addrs.exe] C:\WINDOWS\addrs.exe
O4 - HKLM\..\RunOnce: [ipfe32.exe] C:\WINDOWS\system32\ipfe32.exe
O4 - HKLM\..\RunOnce: [ienb32.exe] C:\WINDOWS\system32\ienb32.exe
O4 - HKLM\..\RunOnce: [winhk32.exe] C:\WINDOWS\system32\winhk32.exe
O4 - HKLM\..\RunOnce: [sysbp.exe] C:\WINDOWS\system32\sysbp.exe
O4 - HKLM\..\RunOnce: [winfk32.exe] C:\WINDOWS\winfk32.exe
O4 - HKLM\..\RunOnce: [addqa.exe] C:\WINDOWS\system32\addqa.exe
O4 - HKLM\..\RunOnce: [sdkbg.exe] C:\WINDOWS\sdkbg.exe
O4 - HKLM\..\RunOnce: [netph.exe] C:\WINDOWS\system32\netph.exe
O4 - HKLM\..\RunOnce: [appts.exe] C:\WINDOWS\system32\appts.exe
O4 - HKLM\..\RunOnce: [javanf.exe] C:\WINDOWS\system32\javanf.exe
O4 - HKLM\..\RunOnce: [mspa32.exe] C:\WINDOWS\mspa32.exe
O4 - HKLM\..\RunOnce: [sysne.exe] C:\WINDOWS\system32\sysne.exe
O4 - HKLM\..\RunOnce: [mfctp.exe] C:\WINDOWS\mfctp.exe
O4 - HKLM\..\RunOnce: [javasy.exe] C:\WINDOWS\system32\javasy.exe
O4 - HKLM\..\RunOnce: [apinz.exe] C:\WINDOWS\system32\apinz.exe
O4 - HKLM\..\RunOnce: [ntbr32.exe] C:\WINDOWS\system32\ntbr32.exe
O4 - HKLM\..\RunOnce: [appkk32.exe] C:\WINDOWS\appkk32.exe
O4 - HKLM\..\RunOnce: [addzf.exe] C:\WINDOWS\system32\addzf.exe
O4 - HKLM\..\RunOnce: [netfi.exe] C:\WINDOWS\system32\netfi.exe
O4 - HKLM\..\RunOnce: [mfcii32.exe] C:\WINDOWS\system32\mfcii32.exe
O4 - HKLM\..\RunOnce: [systf32.exe] C:\WINDOWS\system32\systf32.exe
O4 - HKLM\..\RunOnce: [sysdc.exe] C:\WINDOWS\system32\sysdc.exe
O4 - HKLM\..\RunOnce: [sysug32.exe] C:\WINDOWS\system32\sysug32.exe
O4 - HKLM\..\RunOnce: [addyd.exe] C:\WINDOWS\system32\addyd.exe
O4 - HKLM\..\RunOnce: [crjw32.exe] C:\WINDOWS\crjw32.exe
O4 - HKLM\..\RunOnce: [mfcxl32.exe] C:\WINDOWS\mfcxl32.exe
O4 - HKLM\..\RunOnce: [apptz32.exe] C:\WINDOWS\apptz32.exe
O4 - HKLM\..\RunOnce: [addii32.exe] C:\WINDOWS\addii32.exe
O4 - HKLM\..\RunOnce: [appnb32.exe] C:\WINDOWS\appnb32.exe
O4 - HKLM\..\RunOnce: [sdkfr.exe] C:\WINDOWS\sdkfr.exe
O4 - HKLM\..\RunOnce: [d3ud32.exe] C:\WINDOWS\d3ud32.exe
O4 - HKLM\..\RunOnce: [msbv32.exe] C:\WINDOWS\msbv32.exe
O4 - HKLM\..\RunOnce: [apisk.exe] C:\WINDOWS\system32\apisk.exe
O4 - HKLM\..\RunOnce: [ntjx32.exe] C:\WINDOWS\ntjx32.exe
O4 - HKLM\..\RunOnce: [mfcno.exe] C:\WINDOWS\mfcno.exe
O4 - HKLM\..\RunOnce: [iekh32.exe] C:\WINDOWS\system32\iekh32.exe
O4 - HKLM\..\RunOnce: [appaw.exe] C:\WINDOWS\system32\appaw.exe
O4 - HKLM\..\RunOnce: [netzq.exe] C:\WINDOWS\system32\netzq.exe
O4 - HKLM\..\RunOnce: [winas.exe] C:\WINDOWS\system32\winas.exe
O4 - HKLM\..\RunOnce: [d3rm32.exe] C:\WINDOWS\d3rm32.exe
O4 - HKLM\..\RunOnce: [winzs32.exe] C:\WINDOWS\system32\winzs32.exe
O4 - HKLM\..\RunOnce: [ieas32.exe] C:\WINDOWS\system32\ieas32.exe
O4 - HKLM\..\RunOnce: [ntfh32.exe] C:\WINDOWS\ntfh32.exe
O4 - HKLM\..\RunOnce: [sdkar.exe] C:\WINDOWS\sdkar.exe
O4 - HKLM\..\RunOnce: [xrhwp] C:\WINDOWS\Soap Bubbles.bmp:xrhwp
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: PalNetaware.lnk = C:\Program Files\Paltalk\pnetaware.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: RealDownload.lnk = C:\Program Files\Real\RealDownload\Realdownload.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: DigiChat Applet - http://host8.digichat.com/DigiChat/D.../Client_IE.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {1C78AB3F-A857-482E-80C0-3A1E5238A565} - file://C:\install.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com...45/yacscom.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} (PopCapLoaderCtrl Class) - http://zone.msn.com/bingame/rock/def...caploader1.cab
O16 - DPF: {666DDE35-E955-11D0-A707-000000521958} - http://69.56.176.227/webplugin.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yaho...tocomplete.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v5.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX/download/kdx.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab

Close all browser windows, restart Hijack This and put a checkmark next to the following entries:

R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {D31CBD91-5B80-AB86-0559-F9D9CBB187FD} - C:\WINDOWS\apikd.dll
O4 - HKLM\..\RunOnce: [apiuq32.exe] C:\WINDOWS\system32\apiuq32.exe
O4 - HKLM\..\RunOnce: [addrs.exe] C:\WINDOWS\addrs.exe
O4 - HKLM\..\RunOnce: [ipfe32.exe] C:\WINDOWS\system32\ipfe32.exe
O4 - HKLM\..\RunOnce: [ienb32.exe] C:\WINDOWS\system32\ienb32.exe
O4 - HKLM\..\RunOnce: [winhk32.exe] C:\WINDOWS\system32\winhk32.exe
O4 - HKLM\..\RunOnce: [sysbp.exe] C:\WINDOWS\system32\sysbp.exe
O4 - HKLM\..\RunOnce: [winfk32.exe] C:\WINDOWS\winfk32.exe
O4 - HKLM\..\RunOnce: [addqa.exe] C:\WINDOWS\system32\addqa.exe
O4 - HKLM\..\RunOnce: [sdkbg.exe] C:\WINDOWS\sdkbg.exe
O4 - HKLM\..\RunOnce: [netph.exe] C:\WINDOWS\system32\netph.exe
O4 - HKLM\..\RunOnce: [appts.exe] C:\WINDOWS\system32\appts.exe
O4 - HKLM\..\RunOnce: [javanf.exe] C:\WINDOWS\system32\javanf.exe
O4 - HKLM\..\RunOnce: [mspa32.exe] C:\WINDOWS\mspa32.exe
O4 - HKLM\..\RunOnce: [sysne.exe] C:\WINDOWS\system32\sysne.exe
O4 - HKLM\..\RunOnce: [mfctp.exe] C:\WINDOWS\mfctp.exe
O4 - HKLM\..\RunOnce: [javasy.exe] C:\WINDOWS\system32\javasy.exe
O4 - HKLM\..\RunOnce: [apinz.exe] C:\WINDOWS\system32\apinz.exe
O4 - HKLM\..\RunOnce: [ntbr32.exe] C:\WINDOWS\system32\ntbr32.exe
O4 - HKLM\..\RunOnce: [appkk32.exe] C:\WINDOWS\appkk32.exe
O4 - HKLM\..\RunOnce: [addzf.exe] C:\WINDOWS\system32\addzf.exe
O4 - HKLM\..\RunOnce: [netfi.exe] C:\WINDOWS\system32\netfi.exe
O4 - HKLM\..\RunOnce: [mfcii32.exe] C:\WINDOWS\system32\mfcii32.exe
O4 - HKLM\..\RunOnce: [systf32.exe] C:\WINDOWS\system32\systf32.exe
O4 - HKLM\..\RunOnce: [sysdc.exe] C:\WINDOWS\system32\sysdc.exe
O4 - HKLM\..\RunOnce: [sysug32.exe] C:\WINDOWS\system32\sysug32.exe
O4 - HKLM\..\RunOnce: [addyd.exe] C:\WINDOWS\system32\addyd.exe
O4 - HKLM\..\RunOnce: [crjw32.exe] C:\WINDOWS\crjw32.exe
O4 - HKLM\..\RunOnce: [mfcxl32.exe] C:\WINDOWS\mfcxl32.exe
O4 - HKLM\..\RunOnce: [apptz32.exe] C:\WINDOWS\apptz32.exe
O4 - HKLM\..\RunOnce: [addii32.exe] C:\WINDOWS\addii32.exe
O4 - HKLM\..\RunOnce: [appnb32.exe] C:\WINDOWS\appnb32.exe
O4 - HKLM\..\RunOnce: [sdkfr.exe] C:\WINDOWS\sdkfr.exe
O4 - HKLM\..\RunOnce: [d3ud32.exe] C:\WINDOWS\d3ud32.exe
O4 - HKLM\..\RunOnce: [msbv32.exe] C:\WINDOWS\msbv32.exe
O4 - HKLM\..\RunOnce: [apisk.exe] C:\WINDOWS\system32\apisk.exe
O4 - HKLM\..\RunOnce: [ntjx32.exe] C:\WINDOWS\ntjx32.exe
O4 - HKLM\..\RunOnce: [mfcno.exe] C:\WINDOWS\mfcno.exe
O4 - HKLM\..\RunOnce: [iekh32.exe] C:\WINDOWS\system32\iekh32.exe
O4 - HKLM\..\RunOnce: [appaw.exe] C:\WINDOWS\system32\appaw.exe
O4 - HKLM\..\RunOnce: [netzq.exe] C:\WINDOWS\system32\netzq.exe
O4 - HKLM\..\RunOnce: [winas.exe] C:\WINDOWS\system32\winas.exe
O4 - HKLM\..\RunOnce: [d3rm32.exe] C:\WINDOWS\d3rm32.exe
O4 - HKLM\..\RunOnce: [winzs32.exe] C:\WINDOWS\system32\winzs32.exe
O4 - HKLM\..\RunOnce: [ieas32.exe] C:\WINDOWS\system32\ieas32.exe
O4 - HKLM\..\RunOnce: [ntfh32.exe] C:\WINDOWS\ntfh32.exe
O4 - HKLM\..\RunOnce: [sdkar.exe] C:\WINDOWS\sdkar.exe
O4 - HKLM\..\RunOnce: [xrhwp] C:\WINDOWS\Soap Bubbles.bmp:xrhwp

Click Fix Checked

Then please download About:Buster and unzip it to your desktop. Then boot into safe mode (Instructions here). Start it, hit Ok, Start, And Ok again to start the scan. It will generate a log. Reboot into Normal Mode then Post that log along with a new Hijack this log here.

Logfile of HijackThis v1.98.2
Scan saved at 5:29:22 PM, on 8/17/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\BOOTSTAT.DAT:bnzda
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\SYSTEM32\Drivers\dadapp.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Winamp5\winampa.exe
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
C:\program files\altnet\points manager\points manager.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\WINDOWS\system32\appeo32.exe
C:\Program Files\NaviSearch\bin\nls.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\PROGRA~1\Altnet\DOWNLO~1\asm.exe
C:\Program Files\Hijack This\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\system32\search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = C:\WINDOWS\system32\searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://C:\WINDOWS\dsbre.dll/index.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://C:\WINDOWS\dsbre.dll/index.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = res://C:\WINDOWS\dsbre.dll/index.html#12802
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {5AE85150-CC38-B626-9067-463150E44F68} - C:\WINDOWS\system32\netnn.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_ 12_0.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [DadApp] C:\WINDOWS\SYSTEM32\Drivers\dadapp.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp5\winampa.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [updmgr] C:\Program Files\Common files\updmgr\updmgr.exe
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [appeo32.exe] C:\WINDOWS\system32\appeo32.exe
O4 - HKLM\..\Run: [appff.exe] C:\WINDOWS\system32\appff.exe
O4 - HKLM\..\Run: [NaviSearch] C:\Program Files\NaviSearch\bin\nls.exe
O4 - HKLM\..\Run: [BullsEye Network] C:\Program Files\BullsEye Network\bin\bargains.exe
O4 - HKLM\..\Run: [sdkyq32.exe] C:\WINDOWS\system32\sdkyq32.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [mfcuw32.exe] C:\WINDOWS\system32\mfcuw32.exe
O4 - HKLM\..\Run: [winul32.exe] C:\WINDOWS\system32\winul32.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaE ngineMain
O4 - HKLM\..\Run: [ntla.exe] C:\WINDOWS\system32\ntla.exe
O4 - HKLM\..\Run: [javaim32.exe] C:\WINDOWS\system32\javaim32.exe
O4 - HKLM\..\Run: [d3ve.exe] C:\WINDOWS\system32\d3ve.exe
O4 - HKLM\..\Run: [apizs32.exe] C:\WINDOWS\system32\apizs32.exe
O4 - HKLM\..\RunOnce: [netzq.exe] C:\WINDOWS\system32\netzq.exe
O4 - HKLM\..\RunOnce: [apiuq32.exe] C:\WINDOWS\system32\apiuq32.exe
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: PalNetaware.lnk = C:\Program Files\Paltalk\pnetaware.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: RealDownload.lnk = C:\Program Files\Real\RealDownload\Realdownload.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: DigiChat Applet - http://host8.digichat.com/DigiChat/D.../Client_IE.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {1C78AB3F-A857-482E-80C0-3A1E5238A565} - file://C:\install.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com...45/yacscom.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} (PopCapLoaderCtrl Class) - http://zone.msn.com/bingame/rock/def...caploader1.cab
O16 - DPF: {666DDE35-E955-11D0-A707-000000521958} - http://69.56.176.227/webplugin.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yaho...tocomplete.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v5.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX/download/kdx.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab

Scanned at: 5:53:20 PM on: 8/17/2004


-- Scan 1 ---------------------------
About:Buster Version 3.0
Reference List : 15

No ADS found on system
Removed 4 Random Key Entries
Deleted 1 Service Keys Successfully!
Removed! : C:\WINDOWS\acdzn.dat
Removed! : C:\WINDOWS\acyyl.dat
Removed! : C:\WINDOWS\added.exe
Removed! : C:\WINDOWS\addpx.exe
Removed! : C:\WINDOWS\addrs.exe
Removed! : C:\WINDOWS\aeiba.dat
Removed! : C:\WINDOWS\afbey.dat
Removed! : C:\WINDOWS\afwex.dat
Removed! : C:\WINDOWS\ahgos.dat
Removed! : C:\WINDOWS\aibtc.dat
Removed! : C:\WINDOWS\akrrq.dat
Removed! : C:\WINDOWS\aksjr.dat
Removed! : C:\WINDOWS\anhqv.dat
Removed! : C:\WINDOWS\anwzi.dat
Removed! : C:\WINDOWS\apiff32.dll
Removed! : C:\WINDOWS\apimq.exe.bak
Removed! : C:\WINDOWS\apine.exe
Removed! : C:\WINDOWS\apitn.exe
Removed! : C:\WINDOWS\appkk32.exe
Removed! : C:\WINDOWS\apptt32.exe
Removed! : C:\WINDOWS\apptz32.exe
Removed! : C:\WINDOWS\appwl32.exe
Removed! : C:\WINDOWS\appxo.exe
Removed! : C:\WINDOWS\atjlj.dat
Removed! : C:\WINDOWS\atlal32.exe
Removed! : C:\WINDOWS\atlmp32.exe
Removed! : C:\WINDOWS\axmcb.dat
Removed! : C:\WINDOWS\aybqp.dat
Removed! : C:\WINDOWS\aymjl.dat
Removed! : C:\WINDOWS\azuqr.dat
Removed! : C:\WINDOWS\bayfuk.dat
Removed! : C:\WINDOWS\bbytt.dat
Removed! : C:\WINDOWS\bfbxt.dat
Removed! : C:\WINDOWS\bfvqi.dat
Removed! : C:\WINDOWS\bgirq.dat
Removed! : C:\WINDOWS\bgqzh.dat
Removed! : C:\WINDOWS\bhdhw.dat
Removed! : C:\WINDOWS\bondl.dat
Removed! : C:\WINDOWS\bowyt.dat
Removed! : C:\WINDOWS\bpbyu.dat
Removed! : C:\WINDOWS\byorv.dat
Removed! : C:\WINDOWS\caxsc.dat
Removed! : C:\WINDOWS\cecur.dat
Removed! : C:\WINDOWS\chhjk.dat
Removed! : C:\WINDOWS\chtcv.dat
Removed! : C:\WINDOWS\cjoas.dat
Removed! : C:\WINDOWS\ckpvp.dat
Removed! : C:\WINDOWS\cnknk.dat
Removed! : C:\WINDOWS\cnqua.dat
Removed! : C:\WINDOWS\cocmh.dat
Removed! : C:\WINDOWS\crak32.exe
Removed! : C:\WINDOWS\crbu.exe
Removed! : C:\WINDOWS\crlv.exe
Removed! : C:\WINDOWS\crpk.exe
Removed! : C:\WINDOWS\crrxs.dat
Removed! : C:\WINDOWS\crzn32.exe
Removed! : C:\WINDOWS\csinb.dat
Removed! : C:\WINDOWS\cszkc.dat
Removed! : C:\WINDOWS\cszkf.dat
Removed! : C:\WINDOWS\cyuiz.dat
Removed! : C:\WINDOWS\d3bn.exe
Removed! : C:\WINDOWS\d3gp.exe
Removed! : C:\WINDOWS\d3rm32.exe
Removed! : C:\WINDOWS\d3te32.exe
Removed! : C:\WINDOWS\d3ud32.exe
Removed! : C:\WINDOWS\d3yn.exe
Removed! : C:\WINDOWS\dacdm.dat
Removed! : C:\WINDOWS\dbzkh.dat
Removed! : C:\WINDOWS\dgppn.dat
Removed! : C:\WINDOWS\diupn.dat
Removed! : C:\WINDOWS\djsgd.dat
Removed! : C:\WINDOWS\dsbre.dll
Removed! : C:\WINDOWS\dsgwg.dat
Removed! : C:\WINDOWS\dsudv.dat
Removed! : C:\WINDOWS\dsxpc.dat
Removed! : C:\WINDOWS\dvkgw.dat
Removed! : C:\WINDOWS\dxdlz.dat
Removed! : C:\WINDOWS\dxppt.dat
Removed! : C:\WINDOWS\egnxw.dat
Removed! : C:\WINDOWS\ehbmn.dat
Removed! : C:\WINDOWS\ehktg.dat
Removed! : C:\WINDOWS\eizlg.dat
Removed! : C:\WINDOWS\emtkq.dat
Removed! : C:\WINDOWS\eqodk.dat
Removed! : C:\WINDOWS\eskpm.dat
Removed! : C:\WINDOWS\euoqj.dat
Removed! : C:\WINDOWS\evgix.dat
Removed! : C:\WINDOWS\ewaeh.dat
Removed! : C:\WINDOWS\exrjb.dat
Removed! : C:\WINDOWS\faqep.dat
Removed! : C:\WINDOWS\fbkod.dat
Removed! : C:\WINDOWS\fielw.dat
Removed! : C:\WINDOWS\fojad.dat
Removed! : C:\WINDOWS\fphaz.dat
Removed! : C:\WINDOWS\fqynb.dat
Removed! : C:\WINDOWS\fqyop.dat
Removed! : C:\WINDOWS\fsrug.dat
Removed! : C:\WINDOWS\fuodj.dat
Removed! : C:\WINDOWS\fvqlx.dat
Removed! : C:\WINDOWS\fvviz.dat
Removed! : C:\WINDOWS\fwlst.dat
Removed! : C:\WINDOWS\fxbza.dat
Removed! : C:\WINDOWS\fyndy.dat
Removed! : C:\WINDOWS\fyqat.dat
Removed! : C:\WINDOWS\fzrdl.dat
Removed! : C:\WINDOWS\gaoxd.dat
Removed! : C:\WINDOWS\gbode.dat
Removed! : C:\WINDOWS\gferd.dat
Removed! : C:\WINDOWS\grjrx.dat
Removed! : C:\WINDOWS\gtjkn.dat
Removed! : C:\WINDOWS\gtwkd.dat
Removed! : C:\WINDOWS\guixz.dat
Removed! : C:\WINDOWS\gvccj.dat
Removed! : C:\WINDOWS\heyty.dat
Removed! : C:\WINDOWS\hirfj.dat
Removed! : C:\WINDOWS\hirin.dat
Removed! : C:\WINDOWS\hkmdj.dat
Removed! : C:\WINDOWS\hkpfc.dat
Removed! : C:\WINDOWS\hkucp.dat
Removed! : C:\WINDOWS\hnnkl.dat
Removed! : C:\WINDOWS\hriqy.dat
Removed! : C:\WINDOWS\hrlas.dat
Removed! : C:\WINDOWS\hsnus.dat
Removed! : C:\WINDOWS\htzte.dat
Removed! : C:\WINDOWS\huozr.dat
Removed! : C:\WINDOWS\hvptj.dat
Removed! : C:\WINDOWS\hwphy.dat
Removed! : C:\WINDOWS\iddhn.dat
Removed! : C:\WINDOWS\iect.exe
Removed! : C:\WINDOWS\iedx.exe
Removed! : C:\WINDOWS\iepo.exe
Removed! : C:\WINDOWS\ihmvj.dat
Removed! : C:\WINDOWS\iievu.dat
Removed! : C:\WINDOWS\ilvhy.dat
Removed! : C:\WINDOWS\inwzw.dat
Removed! : C:\WINDOWS\ipbt.exe
Removed! : C:\WINDOWS\ipij.exe
Removed! : C:\WINDOWS\ipli32.exe
Removed! : C:\WINDOWS\ippl32.exe
Removed! : C:\WINDOWS\ipvv.exe
Removed! : C:\WINDOWS\ipxvw.dat
Removed! : C:\WINDOWS\irgrs.dat
Removed! : C:\WINDOWS\isfkq.dat
Removed! : C:\WINDOWS\isllu.dat
Removed! : C:\WINDOWS\ivwhl.dat
Removed! : C:\WINDOWS\ixpgd.dat
Removed! : C:\WINDOWS\iyawq.dat
Removed! : C:\WINDOWS\javako32.exe
Removed! : C:\WINDOWS\javalq32.exe
Removed! : C:\WINDOWS\javapj.exe
Removed! : C:\WINDOWS\javavn.exe
Removed! : C:\WINDOWS\jbsye.dat
Removed! : C:\WINDOWS\jdehv.dat
Removed! : C:\WINDOWS\jdrje.dat
Removed! : C:\WINDOWS\jepdg.dat
Removed! : C:\WINDOWS\jgprq.dat
Removed! : C:\WINDOWS\jgstm.dat
Removed! : C:\WINDOWS\jjvvn.dat
Removed! : C:\WINDOWS\jlnyl.dat
Removed! : C:\WINDOWS\jpwht.dat
Removed! : C:\WINDOWS\juewn.dat
Removed! : C:\WINDOWS\jxblp.dat
Removed! : C:\WINDOWS\jxexh.dat
Removed! : C:\WINDOWS\jymhd.dat
Removed! : C:\WINDOWS\jyxgy.dat
Removed! : C:\WINDOWS\kdblz.dat
Removed! : C:\WINDOWS\kdphl.dat
Removed! : C:\WINDOWS\kemew.dat
Removed! : C:\WINDOWS\kfnud.dat
Removed! : C:\WINDOWS\kjglq.dat
Removed! : C:\WINDOWS\kkhag.dat
Removed! : C:\WINDOWS\klmui.dat
Removed! : C:\WINDOWS\kojcr.dat
Removed! : C:\WINDOWS\koxuy.dat
Removed! : C:\WINDOWS\kpfna.dat
Removed! : C:\WINDOWS\kruge.dat
Removed! : C:\WINDOWS\ksbft.dat
Removed! : C:\WINDOWS\ksvqo.dat
Removed! : C:\WINDOWS\kuart.dat
Removed! : C:\WINDOWS\kunts.dat
Removed! : C:\WINDOWS\kwlwe.dat
Removed! : C:\WINDOWS\larfy.dat
Removed! : C:\WINDOWS\lbfey.dat
Removed! : C:\WINDOWS\ldaiz.dat
Removed! : C:\WINDOWS\lfaos.dat
Removed! : C:\WINDOWS\lixzd.dat
Removed! : C:\WINDOWS\lkwts.dat
Removed! : C:\WINDOWS\lmhcr.dat
Removed! : C:\WINDOWS\lprei.dat
Removed! : C:\WINDOWS\ltxqo.dat
Removed! : C:\WINDOWS\luidf.dat
Removed! : C:\WINDOWS\lwmap.dat
Removed! : C:\WINDOWS\lwtdj.dat
Removed! : C:\WINDOWS\lzqmm.dat
Removed! : C:\WINDOWS\lztgi.dat
Removed! : C:\WINDOWS\mabnb.dat
Removed! : C:\WINDOWS\mayhk.dat
Removed! : C:\WINDOWS\mfcrm32.exe
Removed! : C:\WINDOWS\mfctp.exe
Removed! : C:\WINDOWS\mfcvz.exe
Removed! : C:\WINDOWS\mfcxl32.exe
Removed! : C:\WINDOWS\mgcpt.dat
Removed! : C:\WINDOWS\mhegt.dat
Removed! : C:\WINDOWS\mmyhd.dat
Removed! : C:\WINDOWS\mnsxb.dat
Removed! : C:\WINDOWS\mnyva.dat
Removed! : C:\WINDOWS\moafh.dat
Removed! : C:\WINDOWS\morwc.dat
Removed! : C:\WINDOWS\mpefw.dat
Removed! : C:\WINDOWS\mpowh.dat
Removed! : C:\WINDOWS\mrgsp.dat
Removed! : C:\WINDOWS\msac.exe
Removed! : C:\WINDOWS\msix32.exe
Removed! : C:\WINDOWS\mspa32.exe
Removed! : C:\WINDOWS\msxr32.exe
Removed! : C:\WINDOWS\mverv.dat
Removed! : C:\WINDOWS\mwnkb.dat
Removed! : C:\WINDOWS\mxmpj.dat
Removed! : C:\WINDOWS\mzeae.dat
Removed! : C:\WINDOWS\naion.dat
Removed! : C:\WINDOWS\nawmw.dat
Removed! : C:\WINDOWS\nazac.dat
Removed! : C:\WINDOWS\neejo.dat
Removed! : C:\WINDOWS\netfz32.exe
Removed! : C:\WINDOWS\netvj32.exe
Removed! : C:\WINDOWS\nifto.dat
Removed! : C:\WINDOWS\nnomm.dat
Removed! : C:\WINDOWS\nsffj.dat
Removed! : C:\WINDOWS\ntfh32.exe
Removed! : C:\WINDOWS\nthm32.exe
Removed! : C:\WINDOWS\ntjx32.exe
Removed! : C:\WINDOWS\nuyck.dat
Removed! : C:\WINDOWS\nyjch.dat
Removed! : C:\WINDOWS\nzxbs.dat
Removed! : C:\WINDOWS\odlil.dat
Removed! : C:\WINDOWS\oexqt.dat
Removed! : C:\WINDOWS\ofpol.dat
Removed! : C:\WINDOWS\ohoxv.dat
Removed! : C:\WINDOWS\oodgf.dat
Removed! : C:\WINDOWS\ooyul.dat
Removed! : C:\WINDOWS\ordvc.dat
Removed! : C:\WINDOWS\oszsr.dat
Removed! : C:\WINDOWS\oukxy.dat
Removed! : C:\WINDOWS\ouvpd.dat
Removed! : C:\WINDOWS\oxryf.dat
Removed! : C:\WINDOWS\oxtgz.dat
Removed! : C:\WINDOWS\oypnh.dat
Removed! : C:\WINDOWS\pcnkc.dat
Removed! : C:\WINDOWS\peaej.dat
Removed! : C:\WINDOWS\pfxaa.dat
Removed! : C:\WINDOWS\phmbq.dat
Removed! : C:\WINDOWS\pjsax.dat
Removed! : C:\WINDOWS\pllor.dat
Removed! : C:\WINDOWS\pnffq.dat
Removed! : C:\WINDOWS\ppsvi.dat
Removed! : C:\WINDOWS\qazhc.dat
Removed! : C:\WINDOWS\qboks.dat
Removed! : C:\WINDOWS\qfgjj.dat
Removed! : C:\WINDOWS\qhste.dat
Removed! : C:\WINDOWS\qionz.dat
Removed! : C:\WINDOWS\qjeca.dat
Removed! : C:\WINDOWS\qmzig.dat
Removed! : C:\WINDOWS\qowro.dat
Removed! : C:\WINDOWS\qqwvp.dat
Removed! : C:\WINDOWS\qzumg.dat
Removed! : C:\WINDOWS\rayvh.dat
Removed! : C:\WINDOWS\remme.dat
Removed! : C:\WINDOWS\rgnce.dat
Removed! : C:\WINDOWS\rjwcf.dat
Removed! : C:\WINDOWS\rxmrv.dat
Removed! : C:\WINDOWS\ryhaw.dat
Removed! : C:\WINDOWS\sdkar.exe
Removed! : C:\WINDOWS\sdkbf.exe
Removed! : C:\WINDOWS\sdkbg.exe
Removed! : C:\WINDOWS\sdkjx.exe
Removed! : C:\WINDOWS\sdkkr.exe
Removed! : C:\WINDOWS\sdkns32.exe
Removed! : C:\WINDOWS\sdkpt.exe
Removed! : C:\WINDOWS\sizlg.dat
Removed! : C:\WINDOWS\sjiky.dat
Removed! : C:\WINDOWS\sjmai.dat
Removed! : C:\WINDOWS\skptg.dat
Removed! : C:\WINDOWS\snnxh.dat
Removed! : C:\WINDOWS\snuxw.dat
Removed! : C:\WINDOWS\sokxu.dat
Removed! : C:\WINDOWS\spxdc.dat
Removed! : C:\WINDOWS\sqowy.dat
Removed! : C:\WINDOWS\srawg.dat
Removed! : C:\WINDOWS\suskd.dat
Removed! : C:\WINDOWS\syuic.dat
Removed! : C:\WINDOWS\tario.dat
Removed! : C:\WINDOWS\tcabo.dat
Removed! : C:\WINDOWS\tkmwk.dat
Removed! : C:\WINDOWS\trrzk.dat
Removed! : C:\WINDOWS\trvzu.dat
Removed! : C:\WINDOWS\tuvkk.dat
Removed! : C:\WINDOWS\udgwh.dat
Removed! : C:\WINDOWS\udzwk.dat
Removed! : C:\WINDOWS\ukkfw.dat
Removed! : C:\WINDOWS\ulyhy.dat
Removed! : C:\WINDOWS\uqftc.dat
Removed! : C:\WINDOWS\usuuo.dat
Removed! : C:\WINDOWS\uuryv.dat
Removed! : C:\WINDOWS\uusyz.dat
Removed! : C:\WINDOWS\uwzog.dat
Removed! : C:\WINDOWS\uxdig.dat
Removed! : C:\WINDOWS\uxxdy.dat
Removed! : C:\WINDOWS\uyftr.dat
Removed! : C:\WINDOWS\vcalc.dat
Removed! : C:\WINDOWS\vcfir.dat
Removed! : C:\WINDOWS\vcjno.dat
Removed! : C:\WINDOWS\vckch.dat
Removed! : C:\WINDOWS\veiqf.dat
Removed! : C:\WINDOWS\vfkni.dat
Removed! : C:\WINDOWS\vfkqf.dat
Removed! : C:\WINDOWS\vjsnp.dat
Removed! : C:\WINDOWS\vlofn.dat
Removed! : C:\WINDOWS\vmqmb.dat
Removed! : C:\WINDOWS\vmszk.dat
Removed! : C:\WINDOWS\vomow.dat
Removed! : C:\WINDOWS\vtufl.dat
Removed! : C:\WINDOWS\vunoe.dat
Removed! : C:\WINDOWS\vyqsl.dat
Removed! : C:\WINDOWS\wcucy.dat
Removed! : C:\WINDOWS\wgivu.dat
Removed! : C:\WINDOWS\whskj.dat
Removed! : C:\WINDOWS\wiiat.dat
Removed! : C:\WINDOWS\wincq32.exe
Removed! : C:\WINDOWS\winfk32.exe
Removed! : C:\WINDOWS\winoo.exe
Removed! : C:\WINDOWS\winuw32.exe
Removed! : C:\WINDOWS\winzh.exe
Removed! : C:\WINDOWS\wjitm.dat
Removed! : C:\WINDOWS\wogca.dat
Removed! : C:\WINDOWS\wpshz.dat
Removed! : C:\WINDOWS\wtjnx.dat
Removed! : C:\WINDOWS\wtkzw.dat
Removed! : C:\WINDOWS\wzskt.dat
Removed! : C:\WINDOWS\xhfbq.dat
Removed! : C:\WINDOWS\xiqph.dat
Removed! : C:\WINDOWS\xixnu.dat
Removed! : C:\WINDOWS\xmddf.dat
Removed! : C:\WINDOWS\xqrts.dat
Removed! : C:\WINDOWS\xrfpz.dat
Removed! : C:\WINDOWS\xsxnd.dat
Removed! : C:\WINDOWS\xxykz.dat
Removed! : C:\WINDOWS\xyiaq.dat
Removed! : C:\WINDOWS\yextk.dat
Removed! : C:\WINDOWS\yjszo.dat
Removed! : C:\WINDOWS\ylqxw.dat
Removed! : C:\WINDOWS\ytldm.dat
Removed! : C:\WINDOWS\yuncw.dat
Removed! : C:\WINDOWS\ywyrx.dat
Removed! : C:\WINDOWS\zcomh.dat
Removed! : C:\WINDOWS\zddcg.dat
Removed! : C:\WINDOWS\zeukq.dat
Removed! : C:\WINDOWS\zgfrv.dat
Removed! : C:\WINDOWS\zkyiw.dat
Removed! : C:\WINDOWS\zmwey.dat
Removed! : C:\WINDOWS\zsnpg.dat
Removed! : C:\WINDOWS\ztgrn.dat
Removed! : C:\WINDOWS\zwama.dat

(cont.)

Removed! : C:\WINDOWS\System32\abppa.dat
Removed! : C:\WINDOWS\System32\addyd.exe
Removed! : C:\WINDOWS\System32\addzf.exe
Removed! : C:\WINDOWS\System32\adxdb.dat
Removed! : C:\WINDOWS\System32\amaxt.dat
Removed! : C:\WINDOWS\System32\anqjv.dat
Removed! : C:\WINDOWS\System32\apijm.exe
Removed! : C:\WINDOWS\System32\apinz.exe
Removed! : C:\WINDOWS\System32\apiqy32.exe
Removed! : C:\WINDOWS\System32\apitc32.exe
Removed! : C:\WINDOWS\System32\apiuq32.exe
Removed! : C:\WINDOWS\System32\appaw.exe
Removed! : C:\WINDOWS\System32\appbc32.exe
Removed! : C:\WINDOWS\System32\applo32.exe
Removed! : C:\WINDOWS\System32\appts.exe
Removed! : C:\WINDOWS\System32\appwo32.exe
Removed! : C:\WINDOWS\System32\aqlty.dat
Removed! : C:\WINDOWS\System32\atlix.exe
Removed! : C:\WINDOWS\System32\atlwq32.exe
Removed! : C:\WINDOWS\System32\atlwu.exe
Removed! : C:\WINDOWS\System32\axpde.dat
Removed! : C:\WINDOWS\System32\ayffy.dat
Removed! : C:\WINDOWS\System32\baliu.dat
Removed! : C:\WINDOWS\System32\bcfed.dat
Removed! : C:\WINDOWS\System32\bjqni.dat
Removed! : C:\WINDOWS\System32\bkpzz.dat
Removed! : C:\WINDOWS\System32\bmeav.dat
Removed! : C:\WINDOWS\System32\brcbe.dat
Removed! : C:\WINDOWS\System32\brnsz.dat
Removed! : C:\WINDOWS\System32\bvish.dat
Removed! : C:\WINDOWS\System32\bwqnu.dat
Removed! : C:\WINDOWS\System32\byede.dat
Removed! : C:\WINDOWS\System32\ccaub.dat
Removed! : C:\WINDOWS\System32\cceem.dat
Removed! : C:\WINDOWS\System32\cgdwk.dat
Removed! : C:\WINDOWS\System32\chtyw.dat
Removed! : C:\WINDOWS\System32\ciutg.dat
Removed! : C:\WINDOWS\System32\cixyw.dat
Removed! : C:\WINDOWS\System32\cjwac.dat
Removed! : C:\WINDOWS\System32\cpoat.dat
Removed! : C:\WINDOWS\System32\cqnls.dat
Removed! : C:\WINDOWS\System32\cqpvd.dat
Removed! : C:\WINDOWS\System32\crak32.exe
Removed! : C:\WINDOWS\System32\craw.exe
Removed! : C:\WINDOWS\System32\crbm.exe
Removed! : C:\WINDOWS\System32\cwhzv.dat
Removed! : C:\WINDOWS\System32\d3hw32.exe
Removed! : C:\WINDOWS\System32\d3rw32.exe
Removed! : C:\WINDOWS\System32\d3ve.exe
Removed! : C:\WINDOWS\System32\dbtop.dat
Removed! : C:\WINDOWS\System32\dcope.dat
Removed! : C:\WINDOWS\System32\deaeh.dat
Removed! : C:\WINDOWS\System32\devkx.dat
Removed! : C:\WINDOWS\System32\dipik.dat
Removed! : C:\WINDOWS\System32\djlic.dat
Removed! : C:\WINDOWS\System32\dlnwj.dat
Removed! : C:\WINDOWS\System32\drvit.dat
Removed! : C:\WINDOWS\System32\dslmf.dat
Removed! : C:\WINDOWS\System32\dsndr.dat
Removed! : C:\WINDOWS\System32\dtmuh.dat
Removed! : C:\WINDOWS\System32\dvivl.dat
Removed! : C:\WINDOWS\System32\dzawq.dat
Removed! : C:\WINDOWS\System32\dzevc.dat
Removed! : C:\WINDOWS\System32\ecajy.dat
Removed! : C:\WINDOWS\System32\edgyj.dat
Removed! : C:\WINDOWS\System32\edkrm.dat
Removed! : C:\WINDOWS\System32\eemhq.dat
Removed! : C:\WINDOWS\System32\eikac.dat
Removed! : C:\WINDOWS\System32\ejffl.dat
Removed! : C:\WINDOWS\System32\ekpua.dat
Removed! : C:\WINDOWS\System32\epujv.dat
Removed! : C:\WINDOWS\System32\eqjgc.dat
Removed! : C:\WINDOWS\System32\erfqt.dat
Removed! : C:\WINDOWS\System32\eufnj.dat
Removed! : C:\WINDOWS\System32\exmzh.dat
Removed! : C:\WINDOWS\System32\fayce.dat
Removed! : C:\WINDOWS\System32\fbdia.dat
Removed! : C:\WINDOWS\System32\fbrng.dat
Removed! : C:\WINDOWS\System32\fclvr.dat
Removed! : C:\WINDOWS\System32\ffigw.dat
Removed! : C:\WINDOWS\System32\ffyma.dat
Removed! : C:\WINDOWS\System32\fhtbs.dat
Removed! : C:\WINDOWS\System32\fkuia.dat
Removed! : C:\WINDOWS\System32\fmbst.dat
Removed! : C:\WINDOWS\System32\fmpap.dat
Removed! : C:\WINDOWS\System32\fnsht.dat
Removed! : C:\WINDOWS\System32\fomch.dat
Removed! : C:\WINDOWS\System32\fqkkf.dat
Removed! : C:\WINDOWS\System32\fqwdl.dat
Removed! : C:\WINDOWS\System32\ftexy.dat
Removed! : C:\WINDOWS\System32\fvcmz.dat
Removed! : C:\WINDOWS\System32\fwzrn.dat
Removed! : C:\WINDOWS\System32\fxkdd.dat
Removed! : C:\WINDOWS\System32\fyklq.dat
Removed! : C:\WINDOWS\System32\gaawu.dat
Removed! : C:\WINDOWS\System32\***dc.dat
Removed! : C:\WINDOWS\System32\gbaxo.dat
Removed! : C:\WINDOWS\System32\gckzg.dat
Removed! : C:\WINDOWS\System32\gfheu.dat
Removed! : C:\WINDOWS\System32\ggcyw.dat
Removed! : C:\WINDOWS\System32\ginuj.dat
Removed! : C:\WINDOWS\System32\gjors.dat
Removed! : C:\WINDOWS\System32\gmmci.dat
Removed! : C:\WINDOWS\System32\gqixi.dat
Removed! : C:\WINDOWS\System32\gqpnt.dat
Removed! : C:\WINDOWS\System32\gxhmw.dat
Removed! : C:\WINDOWS\System32\hatki.dat
Removed! : C:\WINDOWS\System32\hdcmn.dat
Removed! : C:\WINDOWS\System32\hfstu.dat
Removed! : C:\WINDOWS\System32\hmnvr.dat
Removed! : C:\WINDOWS\System32\hqgby.dat
Removed! : C:\WINDOWS\System32\hufkq.dat
Removed! : C:\WINDOWS\System32\huibg.dat
Removed! : C:\WINDOWS\System32\hxzbz.dat
Removed! : C:\WINDOWS\System32\hydon.dat
Removed! : C:\WINDOWS\System32\hyjlo.dat
Removed! : C:\WINDOWS\System32\hynyw.dat
Removed! : C:\WINDOWS\System32\ibwht.dat
Removed! : C:\WINDOWS\System32\ieas32.exe
Removed! : C:\WINDOWS\System32\ienb32.exe
Removed! : C:\WINDOWS\System32\iepv.exe
Removed! : C:\WINDOWS\System32\ierqb.dat
Removed! : C:\WINDOWS\System32\ieuk.exe
Removed! : C:\WINDOWS\System32\igrej.dat
Removed! : C:\WINDOWS\System32\igsen.dat
Removed! : C:\WINDOWS\System32\ihbit.dat
Removed! : C:\WINDOWS\System32\ikbwc.dat
Removed! : C:\WINDOWS\System32\ikqfw.dat
Removed! : C:\WINDOWS\System32\ipbl32.exe
Removed! : C:\WINDOWS\System32\ipel.exe
Removed! : C:\WINDOWS\System32\ipfe32.exe
Removed! : C:\WINDOWS\System32\ipkv32.exe
Removed! : C:\WINDOWS\System32\ipzo.exe
Removed! : C:\WINDOWS\System32\isiwb.dat
Removed! : C:\WINDOWS\System32\iwmva.dat
Removed! : C:\WINDOWS\System32\jaodu.dat
Removed! : C:\WINDOWS\System32\javaaq.exe
Removed! : C:\WINDOWS\System32\javafg32.exe
Removed! : C:\WINDOWS\System32\javajh32.exe
Removed! : C:\WINDOWS\System32\javalf.exe
Removed! : C:\WINDOWS\System32\javamz.exe
Removed! : C:\WINDOWS\System32\javanf.exe
Removed! : C:\WINDOWS\System32\javasy.exe
Removed! : C:\WINDOWS\System32\jcllc.dat
Removed! : C:\WINDOWS\System32\jeecr.dat
Removed! : C:\WINDOWS\System32\jfthh.dat
Removed! : C:\WINDOWS\System32\jjboo.dat
Removed! : C:\WINDOWS\System32\jkgiv.dat
Removed! : C:\WINDOWS\System32\jmore.dat
Removed! : C:\WINDOWS\System32\jnjqq.dat
Removed! : C:\WINDOWS\System32\jpdio.dat
Removed! : C:\WINDOWS\System32\jpgre.dat
Removed! : C:\WINDOWS\System32\jpijh.dat
Removed! : C:\WINDOWS\System32\jpjzk.dat
Removed! : C:\WINDOWS\System32\jvnzc.dat
Removed! : C:\WINDOWS\System32\jvuuy.dat
Removed! : C:\WINDOWS\System32\jwxkw.dat
Removed! : C:\WINDOWS\System32\kdfly.dat
Removed! : C:\WINDOWS\System32\kdrxt.dat
Removed! : C:\WINDOWS\System32\kggey.dat
Removed! : C:\WINDOWS\System32\kjuxr.dat
Removed! : C:\WINDOWS\System32\kmhyr.dat
Removed! : C:\WINDOWS\System32\kmiab.dat
Removed! : C:\WINDOWS\System32\knlfi.dat
Removed! : C:\WINDOWS\System32\knsnd.dat
Removed! : C:\WINDOWS\System32\kojgq.dat
Removed! : C:\WINDOWS\System32\kpgjs.dat
Removed! : C:\WINDOWS\System32\krsky.dat
Removed! : C:\WINDOWS\System32\kvelo.dat
Removed! : C:\WINDOWS\System32\kvjjg.dat
Removed! : C:\WINDOWS\System32\kyneu.dll
Removed! : C:\WINDOWS\System32\kzjjv.dat
Removed! : C:\WINDOWS\System32\lajap.dat
Removed! : C:\WINDOWS\System32\lcknv.dat
Removed! : C:\WINDOWS\System32\lcwqz.dat
Removed! : C:\WINDOWS\System32\lhshc.dat
Removed! : C:\WINDOWS\System32\liniw.dat
Removed! : C:\WINDOWS\System32\llgae.dat
Removed! : C:\WINDOWS\System32\llvmd.dat
Removed! : C:\WINDOWS\System32\llvop.dat
Removed! : C:\WINDOWS\System32\lnpnb.dat
Removed! : C:\WINDOWS\System32\lowkd.dat
Removed! : C:\WINDOWS\System32\lpqzo.dat
Removed! : C:\WINDOWS\System32\lpysb.dat
Removed! : C:\WINDOWS\System32\lqssv.dat
Removed! : C:\WINDOWS\System32\lrofy.dat
Removed! : C:\WINDOWS\System32\lsoeg.dat
Removed! : C:\WINDOWS\System32\lurcd.dat
Removed! : C:\WINDOWS\System32\mfcbi.exe
Removed! : C:\WINDOWS\System32\mfcdq.exe
Removed! : C:\WINDOWS\System32\mfcjt32.exe
Removed! : C:\WINDOWS\System32\mfcme.exe
Removed! : C:\WINDOWS\System32\mfcrv32.exe
Removed! : C:\WINDOWS\System32\mfoxp.dat
Removed! : C:\WINDOWS\System32\mfsno.dat
Removed! : C:\WINDOWS\System32\mfvxb.dat
Removed! : C:\WINDOWS\System32\mhady.dat
Removed! : C:\WINDOWS\System32\mkbwy.dat
Removed! : C:\WINDOWS\System32\mkehj.dat
Removed! : C:\WINDOWS\System32\mleep.dat
Removed! : C:\WINDOWS\System32\mnewo.dat
Removed! : C:\WINDOWS\System32\mogiq.dat
Removed! : C:\WINDOWS\System32\msdbv.dat
Removed! : C:\WINDOWS\System32\msgg32.exe
Removed! : C:\WINDOWS\System32\mslj.exe
Removed! : C:\WINDOWS\System32\msms32.exe
Removed! : C:\WINDOWS\System32\mtkgi.dat
Removed! : C:\WINDOWS\System32\mugfi.dat
Removed! : C:\WINDOWS\System32\mvmbr.dat
Removed! : C:\WINDOWS\System32\mxacx.dat
Removed! : C:\WINDOWS\System32\myzcw.dat
Removed! : C:\WINDOWS\System32\mzghr.dat
Removed! : C:\WINDOWS\System32\ncpvs.dat
Removed! : C:\WINDOWS\System32\netfi.exe
Removed! : C:\WINDOWS\System32\netgn.exe
Removed! : C:\WINDOWS\System32\netix.exe
Removed! : C:\WINDOWS\System32\netln.exe
Removed! : C:\WINDOWS\System32\netph.exe
Removed! : C:\WINDOWS\System32\netpk.exe
Removed! : C:\WINDOWS\System32\netsy.exe
Removed! : C:\WINDOWS\System32\netuv.exe
Removed! : C:\WINDOWS\System32\netvw.exe
Removed! : C:\WINDOWS\System32\netzq.exe
Removed! : C:\WINDOWS\System32\nfgeo.dat
Removed! : C:\WINDOWS\System32\ngtca.dat
Removed! : C:\WINDOWS\System32\ngujp.dat
Removed! : C:\WINDOWS\System32\nioxr.dat
Removed! : C:\WINDOWS\System32\nkquo.dat
Removed! : C:\WINDOWS\System32\nlgoa.dat
Removed! : C:\WINDOWS\System32\nluhh.dat
Removed! : C:\WINDOWS\System32\nmlht.dat
Removed! : C:\WINDOWS\System32\noxem.dat
Removed! : C:\WINDOWS\System32\ntbr32.exe
Removed! : C:\WINDOWS\System32\ntgu.exe
Removed! : C:\WINDOWS\System32\ntla.exe
Removed! : C:\WINDOWS\System32\ntrl32.exe
Removed! : C:\WINDOWS\System32\nttm32.exe
Removed! : C:\WINDOWS\System32\ojgbo.dat
Removed! : C:\WINDOWS\System32\okaoz.dat
Removed! : C:\WINDOWS\System32\okiqa.dat
Removed! : C:\WINDOWS\System32\okwry.dat
Removed! : C:\WINDOWS\System32\omkui.dat
Removed! : C:\WINDOWS\System32\opgzn.dat
Removed! : C:\WINDOWS\System32\oqfyu.dat
Removed! : C:\WINDOWS\System32\orybz.dat
Removed! : C:\WINDOWS\System32\osfum.dat
Removed! : C:\WINDOWS\System32\osgug.dat
Removed! : C:\WINDOWS\System32\otkgg.dat
Removed! : C:\WINDOWS\System32\otysu.dat
Removed! : C:\WINDOWS\System32\owwxp.dat
Removed! : C:\WINDOWS\System32\oyugw.dat
Removed! : C:\WINDOWS\System32\paeul.dat
Removed! : C:\WINDOWS\System32\pcldr.dat
Removed! : C:\WINDOWS\System32\pcqxf.dat
Removed! : C:\WINDOWS\System32\pdkwp.dat
Removed! : C:\WINDOWS\System32\pdqbv.dat
Removed! : C:\WINDOWS\System32\pflzc.dat
Removed! : C:\WINDOWS\System32\pgnvf.dat
Removed! : C:\WINDOWS\System32\pgotl.dat
Removed! : C:\WINDOWS\System32\pleub.dat
Removed! : C:\WINDOWS\System32\pnirj.dat
Removed! : C:\WINDOWS\System32\puitv.dat
Removed! : C:\WINDOWS\System32\pumbn.dat
Removed! : C:\WINDOWS\System32\pxcld.dat
Removed! : C:\WINDOWS\System32\pxvor.dat
Removed! : C:\WINDOWS\System32\qbbhj.dat
Removed! : C:\WINDOWS\System32\qcpnf.dat
Removed! : C:\WINDOWS\System32\qdaww.dat
Removed! : C:\WINDOWS\System32\qekyg.dat
Removed! : C:\WINDOWS\System32\qfhnb.dat
Removed! : C:\WINDOWS\System32\qiikg.dat
Removed! : C:\WINDOWS\System32\qjxeg.dat
Removed! : C:\WINDOWS\System32\qmcti.dat
Removed! : C:\WINDOWS\System32\qmdws.dat
Removed! : C:\WINDOWS\System32\qnamn.dat
Removed! : C:\WINDOWS\System32\qqjau.dat
Removed! : C:\WINDOWS\System32\qrqix.dat
Removed! : C:\WINDOWS\System32\qruwf.dat
Removed! : C:\WINDOWS\System32\qsnpl.dat
Removed! : C:\WINDOWS\System32\qycul.dat
Removed! : C:\WINDOWS\System32\ravhq.dat
Removed! : C:\WINDOWS\System32\rbbyz.dat
Removed! : C:\WINDOWS\System32\rlteu.dat
Removed! : C:\WINDOWS\System32\rmurf.dat
Removed! : C:\WINDOWS\System32\rofqg.dat
Removed! : C:\WINDOWS\System32\rohzt.dat
Removed! : C:\WINDOWS\System32\rrzoq.dat
Removed! : C:\WINDOWS\System32\ruhuf.dat
Removed! : C:\WINDOWS\System32\rujek.dat
Removed! : C:\WINDOWS\System32\rxsba.dat
Removed! : C:\WINDOWS\System32\ryqbd.dat
Removed! : C:\WINDOWS\System32\sdkal.exe
Removed! : C:\WINDOWS\System32\sdkbm32.exe
Removed! : C:\WINDOWS\System32\sdkin32.exe
Removed! : C:\WINDOWS\System32\sdklk.exe
Removed! : C:\WINDOWS\System32\sdkme.exe
Removed! : C:\WINDOWS\System32\sdkqk32.exe
Removed! : C:\WINDOWS\System32\sdkth.dat
Removed! : C:\WINDOWS\System32\sdqru.dat
Removed! : C:\WINDOWS\System32\sgmfa.dat
Removed! : C:\WINDOWS\System32\skyne.dat
Removed! : C:\WINDOWS\System32\sogrm.dat
Removed! : C:\WINDOWS\System32\srggq.dat
Removed! : C:\WINDOWS\System32\sysca32.exe
Removed! : C:\WINDOWS\System32\sysgb.exe
Removed! : C:\WINDOWS\System32\sysne.exe
Removed! : C:\WINDOWS\System32\sysnt32.exe
Removed! : C:\WINDOWS\System32\sysug32.exe
Removed! : C:\WINDOWS\System32\sysva.exe
Removed! : C:\WINDOWS\System32\tafni.dat
Removed! : C:\WINDOWS\System32\tccoq.dat
Removed! : C:\WINDOWS\System32\tcnei.dat
Removed! : C:\WINDOWS\System32\tcneo.dat
Removed! : C:\WINDOWS\System32\teygv.dat
Removed! : C:\WINDOWS\System32\tfarg.dat
Removed! : C:\WINDOWS\System32\tfjcg.dat
Removed! : C:\WINDOWS\System32\tpkto.dat
Removed! : C:\WINDOWS\System32\trgsa.dat
Removed! : C:\WINDOWS\System32\tsqzx.dat
Removed! : C:\WINDOWS\System32\tzpre.dat
Removed! : C:\WINDOWS\System32\tzsfv.dat
Removed! : C:\WINDOWS\System32\ulbrj.dat
Removed! : C:\WINDOWS\System32\umaev.dat
Removed! : C:\WINDOWS\System32\umgpg.dat
Removed! : C:\WINDOWS\System32\umwwv.dat
Removed! : C:\WINDOWS\System32\urmle.dat
Removed! : C:\WINDOWS\System32\uufwq.dat
Removed! : C:\WINDOWS\System32\uwtfb.dat
Removed! : C:\WINDOWS\System32\uyowj.dat
Removed! : C:\WINDOWS\System32\uzjzx.dat
Removed! : C:\WINDOWS\System32\vawes.dat
Removed! : C:\WINDOWS\System32\vcjyt.dat
Removed! : C:\WINDOWS\System32\vcpzz.dat
Removed! : C:\WINDOWS\System32\vdtix.dat
Removed! : C:\WINDOWS\System32\vehtl.dat
Removed! : C:\WINDOWS\System32\vkoch.dat
Removed! : C:\WINDOWS\System32\vonpg.dat
Removed! : C:\WINDOWS\System32\vpbdd.dat
Removed! : C:\WINDOWS\System32\vpdgi.dat
Removed! : C:\WINDOWS\System32\vrctq.dat
Removed! : C:\WINDOWS\System32\vsbmy.dat
Removed! : C:\WINDOWS\System32\vvdec.dat
Removed! : C:\WINDOWS\System32\vwdbi.dat
Removed! : C:\WINDOWS\System32\wbajt.dat
Removed! : C:\WINDOWS\System32\wbztd.dat
Removed! : C:\WINDOWS\System32\weted.dat
Removed! : C:\WINDOWS\System32\wfdgo.dat
Removed! : C:\WINDOWS\System32\wgobp.dat
Removed! : C:\WINDOWS\System32\wgutw.dat
Removed! : C:\WINDOWS\System32\wimhj.dat
Removed! : C:\WINDOWS\System32\winas.exe
Removed! : C:\WINDOWS\System32\wincu32.exe
Removed! : C:\WINDOWS\System32\winhk32.exe
Removed! : C:\WINDOWS\System32\winht32.exe
Removed! : C:\WINDOWS\System32\winme32.exe
Removed! : C:\WINDOWS\System32\winmf.exe
Removed! : C:\WINDOWS\System32\winvu32.exe
Removed! : C:\WINDOWS\System32\winzs32.exe
Removed! : C:\WINDOWS\System32\wlizv.dat
Removed! : C:\WINDOWS\System32\wmhwp.dat
Removed! : C:\WINDOWS\System32\wrfrs.dat
Removed! : C:\WINDOWS\System32\wtfbq.dll
Removed! : C:\WINDOWS\System32\wvqes.dat
Removed! : C:\WINDOWS\System32\wxytv.dat
Removed! : C:\WINDOWS\System32\xbzim.dat
Removed! : C:\WINDOWS\System32\xdlpn.dat
Removed! : C:\WINDOWS\System32\xdnzh.dat
Removed! : C:\WINDOWS\System32\xqbva.dat
Removed! : C:\WINDOWS\System32\xrxmt.dat
Removed! : C:\WINDOWS\System32\xvzqu.dat
Removed! : C:\WINDOWS\System32\xvzwi.dat
Removed! : C:\WINDOWS\System32\xyamp.dat
Removed! : C:\WINDOWS\System32\xztbu.dat
Removed! : C:\WINDOWS\System32\ybkjb.dat
Removed! : C:\WINDOWS\System32\ybwds.dat
Removed! : C:\WINDOWS\System32\ylnpo.dat
Removed! : C:\WINDOWS\System32\ymaph.dat
Removed! : C:\WINDOWS\System32\yuqil.dat
Removed! : C:\WINDOWS\System32\yxqxh.dat
Removed! : C:\WINDOWS\System32\zbybr.dat
Removed! : C:\WINDOWS\System32\zccok.dat
Removed! : C:\WINDOWS\System32\zdkxi.dat
Removed! : C:\WINDOWS\System32\zfxzj.dat
Removed! : C:\WINDOWS\System32\zkyxd.dat
Removed! : C:\WINDOWS\System32\zmvcn.dat
Removed! : C:\WINDOWS\System32\zoddz.dat
Removed! : C:\WINDOWS\System32\ztuvr.dat
Removed! : C:\WINDOWS\System32\zultv.dat
Removed! : C:\WINDOWS\System32\zuths.dat
Removed! : C:\WINDOWS\System32\zwcwv.dat
Removed! : C:\WINDOWS\System32\zxpvu.dat
Removed! : C:\WINDOWS\System32\zyksv.dat
Removed! : C:\WINDOWS\System32\zzjnk.dat
Attempted Clean Of Temp folder.
Removed Uninstall Key (HSA)
Removed Uninstall Key (SE)
Removed Uninstall Key (SW)
Pages Reset... Done!

-- Scan 2 ---------------------------
About:Buster Version 3.0
Reference List : 15

No ADS found on system
Removed 4 Random Key Entries
Attempted Clean Of Temp folder.
Pages Reset... Done!

Right, this fix that I've been through with you has not worked and usually doesn't so please follow these instructions which nearly always remove About:Blank.

1. Download AboutBuster http://www.downloads.subratam.org/AboutBuster.zip

Unzip it to your desktop but don't run it yet.

2. Download Ad-aware from here. Open the Ad-aware program and near the bottom click the Check For Updates link. This will open the update manager. Follow the prompts to update your Ad-aware Reference File. Close Ad-aware for now, we will use it later.

3. You may want to print out these instructions for further reference when completing the following steps.

4. Make sure your PC is configured to show hidden files

Open Windows Explorer & Go to Tools > Folder Options. Click on the View tab and make sure that "Show hidden files and folders" is checked. Also uncheck "Hide protected operating system files" and untick "hide extensions for known file types" . Now click "Apply to all folders"
Click "Apply" then "OK"

5. Next, go to Start->Run and type "Services.msc" (without quotes) then hit Ok

Scroll down and find the service called "Network Security Service". When you find it, double-click on it. In the next window that opens, click the Stop button, then click on properties and under the General Tab, change the Startup Type to Disabled. Now hit Apply and then Ok and close any open windows.

6. Then reboot your PC into Safe Mode. If you don't know how to do this, see here for further instructions.

7. Restart Hijack This and put a checkmark next to the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\WINDOWS\system32\search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = C:\WINDOWS\system32\searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://C:\WINDOWS\dsbre.dll/index.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://C:\WINDOWS\dsbre.dll/index.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = res://C:\WINDOWS\dsbre.dll/index.html#12802
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\dsbre.dll/sp.html#12802
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [appeo32.exe] C:\WINDOWS\system32\appeo32.exe
O4 - HKLM\..\Run: [appff.exe] C:\WINDOWS\system32\appff.exe
O4 - HKLM\..\Run: [sdkyq32.exe] C:\WINDOWS\system32\sdkyq32.exe
O4 - HKLM\..\Run: [mfcuw32.exe] C:\WINDOWS\system32\mfcuw32.exe
O4 - HKLM\..\Run: [winul32.exe] C:\WINDOWS\system32\winul32.exe
O4 - HKLM\..\Run: [ntla.exe] C:\WINDOWS\system32\ntla.exe
O4 - HKLM\..\Run: [javaim32.exe] C:\WINDOWS\system32\javaim32.exe
O4 - HKLM\..\Run: [d3ve.exe] C:\WINDOWS\system32\d3ve.exe
O4 - HKLM\..\Run: [apizs32.exe] C:\WINDOWS\system32\apizs32.exe
O4 - HKLM\..\RunOnce: [netzq.exe] C:\WINDOWS\system32\netzq.exe
O4 - HKLM\..\RunOnce: [apiuq32.exe] C:\WINDOWS\system32\apiuq32.exe

Then delete the following files and folders:

C:\WINDOWS\system32\appeo32.exe
C:\WINDOWS\system32\appff.exe
C:\WINDOWS\system32\sdkyq32.exe
C:\WINDOWS\system32\mfcuw32.exe
C:\WINDOWS\system32\winul32.exe
C:\WINDOWS\system32\ntla.exe
C:\WINDOWS\system32\javaim32.exe
C:\WINDOWS\system32\d3ve.exe
C:\WINDOWS\system32\apizs32.exe
C:\WINDOWS\system32\netzq.exe
C:\WINDOWS\system32\apiuq32.exe

8. Double click AboutBuster.exe that you downloaded earlier. Click OK, click Start, then click OK. This will scan your computer for the bad files and delete them. Save the report (copy and paste into notepad or wordpad and save as a .txt file) and post a copy back here when you are done with all the steps.

9. Scan with Adaware and let it remove any bad files found.

10. Clean out temporary and TIF files. Go to Start > Run and type in the box: cleanmgr. Let it scan your system for files to remove. Make sure that Temporary Files, Temporary Internet Files and Recycle Bin

11. Reboot to normal mode

12. Finally, pay a visit to Housecall. Scan for and remove any infected files found on your system.

Post a fresh HijackThis log and the AboutBuster report back here please.

Logfile of HijackThis v1.98.2
Scan saved at 10:58:38 PM, on 8/27/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\NaviSearch\bin\nls.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\WINDOWS\system32\mfcuw32.exe
C:\WINDOWS\SYSTEM32\Drivers\dadapp.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\n_ssbulx.dat:utvyo
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijack This\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\gnswy.dll/sp.html#12802
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\gnswy.dll/sp.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\gnswy.dll/sp.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\gnswy.dll/sp.html#12802
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\gnswy.dll/sp.html#12802
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\gnswy.dll/sp.html#12802
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\gnswy.dll/sp.html#12802
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {825BF029-3C62-6A52-430D-BA42846F1741} - C:\WINDOWS\atlcp32.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_ 12_0.dll (file missing)
O4 - HKLM\..\Run: [winul32.exe] C:\WINDOWS\system32\winul32.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp5\winampa.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaE ngineMain
O4 - HKLM\..\Run: [sdkyq32.exe] C:\WINDOWS\system32\sdkyq32.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NaviSearch] C:\Program Files\NaviSearch\bin\nls.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [mfcuw32.exe] C:\WINDOWS\system32\mfcuw32.exe
O4 - HKLM\..\Run: [javaim32.exe] C:\WINDOWS\system32\javaim32.exe
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [DadApp] C:\WINDOWS\SYSTEM32\Drivers\dadapp.exe
O4 - HKLM\..\Run: [appff.exe] C:\WINDOWS\system32\appff.exe
O4 - HKLM\..\Run: [appeo32.exe] C:\WINDOWS\system32\appeo32.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [apizs32.exe] C:\WINDOWS\system32\apizs32.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [ipcg.exe] C:\WINDOWS\system32\ipcg.exe
O4 - HKLM\..\Run: [ipwa32.exe] C:\WINDOWS\system32\ipwa32.exe
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - Startup: PalNetaware.lnk = C:\Program Files\Paltalk\pnetaware.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: RealDownload.lnk = C:\Program Files\Real\RealDownload\Realdownload.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: DigiChat Applet - http://host8.digichat.com/DigiChat/D.../Client_IE.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {1C78AB3F-A857-482E-80C0-3A1E5238A565} - file://C:\install.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com...45/yacscom.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} (PopCapLoaderCtrl Class) - http://zone.msn.com/bingame/rock/def...caploader1.cab
O16 - DPF: {666DDE35-E955-11D0-A707-000000521958} - http://69.56.176.227/webplugin.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yaho...tocomplete.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v5.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX/download/kdx.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab