Antivirus XP 2008 [Archive] - Safer-Networking Forums

heartransp

2008-08-17, 07:24

I got the Antivirus XP 2008 parasite. I searched the web for fixes and one site said download and run Spybot. I did but I must have made a mistake because now I cannot run "restore" and I have lost my internet connection. I have downloaded and ran a scan with HJT.

Also when I start my system up I get these error messages;

The application or DLL C:\WINDOWS\system32\msi.dll is not a valid Windows image.

Runtime error 462: The remote server machine does not exist or is unavailable.

I can no longet acess Sypbot although it says it is there.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:01:31 AM, on 8/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\SYSTEM32\Brmfrmps.exe
C:\CFusionMX7\runtime\bin\jrunsvc.exe
C:\CFusionMX7\verity\k2\_nti40\bin\k2admin.exe
C:\CFusionMX7\runtime\bin\jrun.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\WINDOWS\system32\brss01a.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\Explorer.EXE
C:\Windows\system32\HpSrvUI.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Speeditup Free\SpeedItUp.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\spywarebegone\SpywareBeGone.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe

R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://s-redirect.com/?a=2&b=hc
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;<local>
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {147C3292-7021-4B27-B281-417C070ED4F0} - (no file)
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: Yahoo! IE Suggest - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\Search\YSearchSuggest.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: (no name) - {C4AE573B-8CDB-43F2-892B-3EC2D34C4E6C} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file)
O4 - HKLM\..\Run: [checktime] c:\program files\HPSelect\Frontend\ct.exe
O4 - HKLM\..\Run: [hp Silent Service] C:\Windows\system32\HpSrvUI.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [LexStart] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [PCDRealtime] C:\WINDOWS\realtime.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [cdloader] "C:\Documents and Settings\Owner\Application Data\mjusbsp\cdloader2.exe" MAGICJACK
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpeedItUpEX] C:\Program Files\Speeditup Free\SpeedItUp.exe -MINI
O4 - HKCU\..\Run: [StartPage] C:\WINDOWS\rundll32.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Spyware Begone] "C:\spywarebegone\SpywareBeGone.exe" -FastScan
O4 - HKUS\S-1-5-21-2014835873-2436313513-572454927-1003\..\Run: [cdloader] "C:\Documents and Settings\Owner\Application Data\mjusbsp\cdloader2.exe" MAGICJACK (User '?')
O4 - HKUS\S-1-5-21-2014835873-2436313513-572454927-1003\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-21-2014835873-2436313513-572454927-1003\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User '?')
O4 - HKUS\S-1-5-21-2014835873-2436313513-572454927-1003\..\Run: [SpeedItUpEX] C:\Program Files\Speeditup Free\SpeedItUp.exe -MINI (User '?')
O4 - HKUS\S-1-5-21-2014835873-2436313513-572454927-1003\..\Run: [StartPage] C:\WINDOWS\rundll32.exe (User '?')
O4 - HKUS\S-1-5-21-2014835873-2436313513-572454927-1003\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (User '?')
O4 - HKUS\S-1-5-21-2014835873-2436313513-572454927-1003\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User '?')
O4 - HKUS\S-1-5-21-2014835873-2436313513-572454927-1003\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet (User '?')
O4 - HKUS\S-1-5-21-2014835873-2436313513-572454927-1003\..\Run: [Spyware Begone] "C:\spywarebegone\SpywareBeGone.exe" -FastScan (User '?')
O4 - S-1-5-18 Startup: AutoPlay.exe (User '?')
O4 - .DEFAULT Startup: AutoPlay.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoPlay.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = ?
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZSman000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: MktBrowser - {17A27031-71FC-11d4-815C-005004D0F1FA} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: MarketBrowser - {17A27031-71FC-11d4-815C-005004D0F1FA} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: ComcastHSI - {0318B686-8DDB-466A-AD2C-3960F2D0E7DA} - http://www.comcast.net (file missing) (HKCU)
O9 - Extra button: Support - {08ABD399-6788-403D-9A38-C75DDFD52C93} - http://www.comcastsupport.com (file missing) (HKCU)
O9 - Extra button: Help - {C9D35F78-7C4D-4296-9552-6FB8E398F406} - http://www.comcast.net/memberservices/ (file missing) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: {001F2C48-0B32-0FF5-093A-5C8145EE96ED} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {007E4071-FD38-540E-1119-769769DFBAB1} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {00943FD9-0E84-48D5-ABFB-29043C59819E} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {01326193-E713-6C3C-723B-4BEE1FCEDE51} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {0232CB3C-CCDA-4E7A-E243-11AB2F3AEAB1} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {02B45477-BDA1-6020-0CB4-5C3F60B9B9D5} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {03218AEF-456E-051A-093F-4425242D8324} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {032689E3-3F7F-32A3-22F7-53C2511E0231} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {03632C92-89D1-58D8-076B-5E6F2F963E74} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {03DA1D78-B82D-6DAA-E4E2-34C37551A408} - http://63.219.178.91/1/rdgUS1007.exe
O16 - DPF: {044C84A5-A7F5-159E-3537-3E3E7A5BD2D3} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {0574C649-8407-6ED6-4B3C-09406BACC70C} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {05C682E5-3D09-0D6E-1EAF-44E041AB7FC7} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {05D7E320-27F6-0E70-EDE0-07E66E865090} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {063AACF9-1D50-3C12-24BB-127F0E502BCE} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {0676179C-CC6F-145B-E480-75DD1D779262} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {07FB912E-183B-0EAC-794C-7D5149517641} - http://66.117.42.151/1/gdnUS19.exe
O16 - DPF: {080E2A0E-D638-05A9-FA80-1C5C062CFE2F} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {08490981-78C2-7D6F-7FE6-0DF1320B5957} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {08DC782B-B72D-0F13-B832-1F2F295787FA} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {092CC716-3E5E-0268-8C05-243A44A9B3A9} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {09601D2B-A285-0476-D1D2-7B066E2E04B3} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {096046C4-B721-69B6-5B51-0AE667262B9E} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {097F69BD-6062-2052-25C5-7C45638B155F} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {0B11CAA6-4283-7EE4-7AED-4EE81939BA9D} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {0B50762B-FE86-15CD-370D-229D61ADC3F8} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {0B9CF01B-A902-2D25-A4E4-2DF24346F728} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {0BDC1AA4-FD18-07E9-96FC-3ECC208708C5} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {0C09A923-B3B0-288B-9E96-6BA4527F9F0E} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {0C56F43D-738E-0830-F3FF-69A253BB1076} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {0C7D4590-846C-1269-6876-2CB457383950} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {0C8FCD41-6B2B-5D9D-FCA1-7A3429413D59} - http://63.219.178.91/1/gdnUS1007.exe
O16 - DPF: {0D56BA8D-C53C-599E-8890-26A15C2B04AF} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {0D78B6C5-1EE2-48D7-DAC9-28AC6829806F} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {0DEF70E2-E106-26E2-0B74-4A2A42A20120} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {0E438524-28B0-2371-0D9A-6E4B0127CB06} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {0E751E5C-56AE-36B0-A001-498D29E57C35} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {0E95C872-09C6-6360-E120-44026792FF13} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {0FCE4151-5543-1B64-0565-766866ED5A94} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {10622428-7FBE-779F-D814-26407E36C280} - http://63.219.178.91/1/rdgUS1007.exe
O16 - DPF: {10976ADA-AFBC-3BBC-8083-22737BB9C2AD} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {120A2FF7-9DEC-0650-C6FC-161707764EE9} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {120B8D24-5C2E-70F1-4DDB-4FBB6CA7A75E} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {12299BA7-F098-7BC4-36A8-708F583517F9} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1255A309-2B6E-557C-674C-1C6641618C96} - http://66.117.42.151/1/gdnUS243.exe
O16 - DPF: {1288D34E-CC86-4B59-958E-773859C0AB44} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {12EE183E-E952-64D6-72E1-14CB6B2FB2F3} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {1310750E-AA6D-70E4-EC70-059C4F104FE7} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {13CEDDF0-E0EA-7F81-2720-2160790227E9} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {13E64698-2547-41D2-08AC-13CB1D54BA94} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {140BEA8F-B9A5-2BEA-A9F7-138E2418B331} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {145AA9A4-B0D0-00B4-C297-66EA181F6ECE} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} -
O16 - DPF: {15A2A7A3-9F3B-6907-DFDD-16275B399F1D} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {16003D0C-2DF8-6712-60D7-415265D7EB02} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {164BC6C1-80E4-4FED-BF6E-3AEE1016F9C1} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {169B3AB9-ED1C-72F3-F8F8-433C439CB4F6} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {169C6843-5210-4501-DACB-7E8C4893768D} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {1745FD24-5047-3FCF-85CB-69C334B85893} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1809099D-4BD7-2840-4111-0CEF73442CBD} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {18A56777-744F-2EBB-6A9C-22FE37EB36E7} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {18D03946-415B-24ED-5512-2D277F9D105E} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1A040CE7-9408-7294-0DA6-616943CAE67A} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {1A0E98B9-57C5-2B3F-739A-3E59218EB347} - http://66.117.42.151/1/gdnUS243.exe
O16 - DPF: {1A136DC1-F0BC-2DD3-3F49-16B816B03037} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1ADEAAE7-0986-6BAA-50FF-23853921B6B6} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1AF749C2-9D4D-164F-D22E-548B05FA0C32} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {1B37D8ED-E773-414B-62F8-287430C98105} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {1B783D4C-7706-7D46-E84F-4D1F678255CA} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1B914A05-64BC-31A4-D0E4-593B175B9F78} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1CE25977-8F0D-726D-3116-13FE031D1C10} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1CE8D2B6-4785-5488-9417-4A7515FC1BA2} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1D11085D-B75A-7F59-D6D2-3FC15CA398F1} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1D66E58E-1B82-4F3D-435E-35FF73348E02} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1DB1A99A-FE07-72B2-6162-6F2117C8A103} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {1E266DED-ED82-277F-9E34-042A7019103D} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1E6169A5-9FA9-63DC-69C1-438C6FAF2CF5} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {1E8555DD-AC73-68D0-B571-1D0766FA90CC} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1E956AB4-7699-56C0-A4DD-7420035F2467} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {1EEBE599-5E0E-5D5B-9304-4E4B3D45C159} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {1F25EA8F-DA82-1D3D-428A-1B395EABD978} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1F5604B5-EEBD-4C94-DFDA-5B6E39293919} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {1FD683B5-DE60-3213-AB62-5383314F5B8D} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {20121843-1C26-387B-F0E6-058845346ECF} - http://63.219.178.91/1/rdgUS1007.exe
O16 - DPF: {207CD221-631A-550F-25B2-1B27569D9CC4} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {20ACB1F2-0716-1C20-F0D3-0B5E19410173} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {20B821C6-6617-7125-5A1C-0AE71B50245C} - http://67.19.99.158/1/rdgUS871.exe
O16 - DPF: {2105AFC1-DA15-532A-8F74-652023D9739A} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {213CC2CF-7B9E-72D6-359B-1ACA5A18F545} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {21A1A234-9576-0DED-E85B-5A536421E4D0} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {223A6E71-B523-238E-3BE2-506C17665A24} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {228840BB-D178-3581-628D-7C00612936AB} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {22C0FBC3-667A-44D4-97BD-0E2C33E9E25E} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {22FBDE88-0472-48B1-8A72-2B617416816D} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {2304F0E9-25BE-3F40-27DA-700554F3BE25} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {23055AE3-B4D8-3642-3363-4E27176C16CB} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {230D274D-9906-6B50-4741-238073149A8F} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {232DF5E6-F85A-3628-5BBD-6C3E6822DB73} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2362AE80-75C6-1965-D7E2-58F750D862A9} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {2390821E-C379-48B5-B975-191B5B69C266} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {239F915E-8F59-06B5-E237-096C51BBF5E3} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {23C11673-3C5B-5F34-951A-37283804CE3A} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {23D1C2E8-3352-377D-6D6E-051C7D89600E} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {23DBBEF5-7CF1-195D-3214-245F3C097386} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {242B0EA4-E5BF-3442-C381-609B5CFDF881} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {245AEAD6-1EFC-7E74-E34D-40B94E94A6C7} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {24AB02C0-2BA6-7374-B86E-6EC4178556D0} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {24AC33B2-C5BC-2C97-551D-65922BF79DCF} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {24FAD53D-1B0D-4680-1121-6F9B7E036FC9} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2562A856-5D06-041A-2B17-3CF837F189B7} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {25BF76DA-AF2A-1585-8436-66B267485185} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {26862DE8-09EF-6204-4322-6BA3307C6BE6} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2698136F-9A15-0730-0E0B-638917E9D51E} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {26B208BB-96E0-3F1A-2DA1-251E4E05C60C} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {27CB21EA-6C4D-0834-B576-7C9102ECC425} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {28B0B7CC-595A-658B-50E3-61C3248895B2} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {28CB2DED-3A28-2279-55C9-38B603C42014} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {29D914C1-29F6-1BCF-C01F-0C325CD6F250} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {29EED5E9-1B7E-18EB-8741-6C352AAFBC2E} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2A4FA2B1-2324-2D04-9A5F-15D03C5BBA13} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {2B055C9A-0CF7-0C8F-0A1B-009C2D2BB670} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2BD5361B-35B7-0E6E-49A7-35656D4DCCAD} - http://63.219.178.91/1/rdgUS1007.exe
O16 - DPF: {2C677651-89A4-7670-2523-558D6AEAE4DC} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {2CC0C4F8-E798-517B-B3F0-299441BDF0FB} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {2CC974CC-C5EE-2177-E23E-24425CB75393} - http://66.117.42.151/1/rdgUS19.exe
O16 - DPF: {2DF8C285-E41D-21A3-0D7A-787C43EAE2AC} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2E4A3798-EE85-0789-8B2E-255B104E6EF0} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2EA5C273-7BDF-123A-31B9-0B9A72344F52} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2EB1FA90-BD16-39B6-EA87-72A55A1F37F4} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2F09CF91-7C58-41EC-4149-16442B744D14} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2F820DC7-6D65-407A-0E2F-59E3163B8548} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {2FF83362-CD56-1E12-C1D8-372B79AFD8DD} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {30336E70-3D2C-6712-5777-1FAC014F3E81} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {3052EC81-734A-0C07-45B9-2B0A581FF679} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3098CE23-D061-1824-B4C8-41C3050B7776} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {30E46613-D270-4F03-51E3-6173728EA5C7} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {30FC077B-EA89-6386-BEB6-4E8B3E9F836C} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3188826B-AB68-3FEC-6AAF-0CE322C47389} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {31A763CC-FD03-4E93-C61E-7267030853F4} - http://63.219.178.91/1/gdnUS1007.exe
O16 - DPF: {31CCB863-83DB-04D7-D73B-6D8B68FEF4D9} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3257C863-5B78-7904-5053-243009CB37AB} - http://63.219.178.91/1/gdnUS1007.exe
O16 - DPF: {325E4F6B-C96C-17E1-5A02-48ED184E66C8} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3399ECCE-A305-304E-B333-0F7822ECA3AF} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {33A84537-0BF8-7A6C-398B-7F537D121D07} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3478BC70-22B9-4C66-E533-1892269162C2} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3488B377-3691-1EEE-01A4-33BF12449665} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {34916862-A4BE-3191-F357-58194C91A3DE} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {34BE5C85-17E3-077D-9063-70963CF8160C} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {34C03262-815C-3102-E4FE-47AA38B5EE34} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {361C2D30-C9FA-5C21-7FBD-4CFD06122C87} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3683FF3B-C3B0-2870-2841-6F8B40468D9F} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {37262C3D-5122-1208-A0D6-45D86EFB3122} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {374BA7B4-0667-7D50-7239-3F21480ED5AD} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3780D141-C6EB-345D-7083-51CD6F686BB6} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {37918403-2EC4-7144-0E10-4C4F1457128A} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {39C9B22E-DE68-00BE-803B-60412A2D26FB} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3A129B33-BE97-70BB-768D-52A726956888} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3A3D04F7-9DDE-5B4E-3676-3CE72E2551D6} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3A5E53F4-405D-5764-9343-05941C8F2A74} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3A816AE3-868B-4313-F761-475C5BDBCEA6} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3AB666A5-9330-6777-EBAC-4F4E727ED5AA} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3AC0B631-94F7-1AE6-B4A7-062535288115} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3AC31E66-2779-1557-4B0B-236F1D671A8C} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3BEAFD12-09D1-709D-BFE2-0EB16F83A1C2} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3C45DCC4-B114-20E6-383C-16ED1CCF3AB7} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3CB87552-58D0-1B7F-359B-4DAA703F0ECE} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3DAE5364-66F4-6594-01B7-573C4B552250} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3DBE2516-7E19-06B0-91D2-3F741D204567} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3DF8ACC8-555D-000E-8BEA-1F012B63D76F} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3E0D09FF-03B6-4BA2-91D1-51E9045658AB} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3E1A85B3-458F-5F05-B063-6A4F478FC3AE} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3E6CC979-E5C9-205C-E0D4-22F53BF6BA59} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {3E8E457C-30C1-12E2-3A2E-704912081545} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3F620DAC-E82F-656F-D427-20CD3973A8DB} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {3FFED054-BC8F-1754-F22A-238F395A3DEF} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {402D067A-2703-7B62-C3FA-714C7EE1B291} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {403728A0-244B-0BFA-B10A-721B186FB277} - http://66.117.42.151/1/gdnUS243.exe
O16 - DPF: {408F1E99-DDB5-7DCA-C199-418D32A38D98} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {41103D09-947C-6C2C-292A-715A5FF4B345} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {413311B4-5328-61E1-4A91-1F4F1855F704} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {418D9543-BD2B-33A0-A828-4110484AE845} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {420CBD64-4738-282B-4D20-35E865F7928C} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {423141D7-0DC3-5BFD-2917-0746029C6772} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {42CFC007-E6F7-650B-59AA-28796E935DD6} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {4313707A-E10D-336D-C3D8-038069B020F1} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {43A577FB-1BBB-55AB-C123-6CA615767809} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {44264E9E-CB87-58BF-D2A9-16144B89D6E1} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {44423B79-DE66-28C3-BE4B-1CD47E05C60A} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {4481AF52-893F-3996-0B4C-1BC467D75093} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {448C126F-0F28-6D99-FCF9-5C9C074A491D} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {4520FEF3-976C-6C0E-D9F5-78AD25A77710} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {45A8D159-A723-497B-9F28-78955A9861E9} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {45B4155F-6BCE-4DFA-92A1-5E5C4A4FC1D1} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {46B82F75-FF8A-0C85-6381-09B3709FBF41} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {46F339E6-B63F-41C0-B5A2-4B211D9B4837} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {472CD1F1-4994-4EB4-07E3-34684462906A} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {47658C1A-0525-6206-A74D-07700BA5BC88} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {477AA95F-E5FF-3BED-C160-487810269053} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {477B0DF9-3DD4-194D-1FDD-64CC5E29FF81} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {48224FE4-820E-6027-2A24-7374541A94C8} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {4864BA0E-70D7-6BD1-2EFE-5BA64BC48AD6} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {48A7ED54-446B-651F-2A8F-02751840678B} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {48CEFF1B-EA9C-523C-479C-4D6C6F8111C9} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {48F93236-7F14-41F5-4882-0A923FFA47F0} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {49562DE4-C869-64A6-ECB0-7D894BF517EF} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {4A692793-EFE1-2009-0A3C-7D1D1D12AC13} - http://63.219.178.91/1/rdgUS1007.exe
O16 - DPF: {4AB54B3F-0F1F-5838-2495-4F01630202AD} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {4ABE57BA-E137-2534-A5C1-757C1A8F0405} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {4BF5B9D4-94E4-58B5-63FA-383837CB6DA5} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {4C1CA3E0-6E88-0114-6266-1200180D0246} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {4C5838E0-7AE4-7C10-4DEB-66E922C55BE2} - http://63.219.178.91/1/rdgUS1007.exe
O16 - DPF: {4CB41B08-EF6B-74CF-AF37-31FB2EAF8EEA} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {4CB87FB5-8E1F-76F1-1157-15535B0F097B} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {4D03F55E-CD16-4673-F550-58567EF475AF} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {4D2EDC82-4A98-3478-B896-7A7C6F29D278} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {4D405F35-0309-6D49-CBC2-1AEF7B5ACFE1} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {4D863EB9-BBD1-2E1E-EA4F-1F0E6FE6C0A1} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {4DA1BA11-D82D-2F49-CEF9-042C670649E0} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {4DE169F2-9944-6CE6-7D0C-22917EA30C23} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {4E7E1618-4640-2326-AC60-30C905A18D37} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {4EBC04B3-111B-6FB4-BAF2-1C336FEB0088} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -
O16 - DPF: {4F606A9E-0C08-52B0-F906-626237F16A64} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {4FD63E8D-7893-14E7-9E58-67772925F2AC} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {5012AC46-3779-0EF3-BAE4-70BE209827B3} - http://66.117.42.151/1/rdgUS243.exe
O16 - DPF: {5015E218-6A07-7391-6294-70B63A39B22F} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {50FE6B5C-6237-322A-D5CF-4EDC3443781E} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5106E0B9-D240-1997-2DEE-35D81B3F7941} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {52649B60-2181-6063-3D72-4CF81866318A} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {52953DD1-6DE9-7B55-6D14-24E24BFD40A2} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {52A890F9-352C-5EC1-C71A-1FDD7D20CB7F} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {52DE6B4A-B1BD-63C3-8AE4-5FA052C05B3A} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5414ABC4-31C2-742A-C598-7FBD5F155CDE} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5450E552-E1F7-5B3B-6474-445847B63FF1} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {5488225A-198D-650E-2A4F-14BD7EB11F71} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {54BF524A-821A-4539-6121-6BDC49B1CB8D} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {54ECF403-0EA3-5F65-E64C-187D6B2C1915} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {54EF01E3-8066-34C0-040F-2929301D091F} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {55BD2D7F-AA9F-1031-29DC-52ED1D3FF3D7} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {56969353-53C7-2102-C22C-733B79BC544E} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {56B7B8C1-7435-246B-9212-0C166D726470} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {56C5F496-6E12-0FA4-6733-69153096557B} - http://63.219.178.91/1/gdnUS1007.exe
O16 - DPF: {5726F123-2152-7219-C8BF-07E755961D50} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {57A00B0F-8703-3EE1-C883-7B3D20EC04B5} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {57DCE2D2-E289-1B5B-4147-3CF575BEFCBD} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {57DEDCB4-BC7E-4199-48C0-1407487029E3} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {57EAEDD0-5544-11C5-4BC3-2E1F7ACD4E17} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {58B2FCEE-EF9E-062C-B168-631472A0959E} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {58CB67FF-69FD-02D1-D54D-0C102AFA093D} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {591E23EB-3B2C-22D5-E424-050779F40FE1} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {592E70CA-48E3-5F70-5C04-5EFC772E56FD} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {594CF03D-0ACE-075C-250D-3E771175AA8B} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5A44319B-9ABA-7C6D-EFBE-70D363AF3529} - http://63.219.178.91/1/gdnUS1007.exe
O16 - DPF: {5A80E9CD-C85E-2106-A246-53F23582E027} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5AD659A9-31BC-6C4F-B197-4ADC4D3EB810} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {5BA538EA-2BAB-6865-3FBF-48E658A384A7} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {5BD83E99-D5C5-4C91-982C-716A7BF0F439} - http://66.117.42.151/1/gdnUS19.exe
O16 - DPF: {5C206AD0-2FE3-0BD9-D725-20553995AD00} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5C3B8FAE-A51D-75F2-C41D-4E986285BB55} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5CB1D99E-AC9C-1749-3762-32AD51012849} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5CCFEC0B-772F-560D-4B68-7D7456F355E8} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5D36E7C7-96E3-2105-6CE6-11715E432155} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5D6D3658-0EEB-2C57-F0DF-50973CABE1EB} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {5E425D6A-8E97-6AA7-1B25-2E0D4ED8F472} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {5FDEA53A-C9AD-1974-030F-502B77851B4A} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {60122E11-86F7-7C54-0DEA-1BC672DBC95A} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6064190A-3A45-58A8-BA47-06FD0856B4D0} - http://66.117.42.151/1/gdnUS243.exe
O16 - DPF: {60C65347-C58B-2524-76C2-15FE0F314905} - http://63.219.178.91/1/rdgUS1007.exe
O16 - DPF: {6105B688-8976-4916-EA35-74053EB04C91} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {619D8CBC-C454-7474-E753-0DCB3C18D621} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {61BC2256-CA4F-347F-BFB2-4F233074E96F} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {61D8B077-6AFD-2B13-410A-69AF7642A8B4} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {61E40480-F028-5160-1C28-6E116891424A} - http://63.219.178.91/1/gdnUS1007.exe
O16 - DPF: {62088D17-0D7C-0A4E-2B26-2E3269AED310} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {62560B74-947D-473B-55CA-4E232EA96FF8} - http://63.219.178.91/1/rdgUS1007.exe
O16 - DPF: {626B9FB4-4FFE-7870-09DF-5203522F0B3D} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {62EBAA06-E84F-39E0-2F32-0B381F14A48E} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6409BCE4-2F8F-5FCD-8DD5-3B86178D7EFE} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {641C4D86-5EE2-479F-0D17-2E2A457513CA} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {648A4592-C525-37BE-DFED-4C2C5801D3EE} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {64B7E4B4-B6F8-6154-774F-628962F3CA95} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {64C47C74-4A40-042A-1F86-64EE41DE7481} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {650D7D8C-8F16-308E-582A-7B1E69EA0B98} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {65B3B348-CDC9-7BE4-B636-794464360D78} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {661642FC-0444-7BA2-C0A6-69DE151F51CF} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {663C8FEF-1EF9-11CF-A3DB-080036F12502} - ms-its:mhtml:file://c:\nosuch.mht!http://67.18.129.78/b/bd/1/x.chm::/load.exe
O16 - DPF: {665FA5DB-2859-2E5A-80A8-68CF755482B9} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {66A05FE3-00CA-5A62-886A-36EB44E7A7F1} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {66B73C5F-6FF9-6AD6-A502-71C14FE6B24E} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {66F9A537-7206-6CBF-AD2E-744026064E27} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {673CFFC2-B4F8-0BC6-F060-26507451A97B} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6759601B-6622-0DDF-F023-5A953E523142} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {679B31EC-7EBF-2F2E-8A5F-63F65BB150C2} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {681BE168-A06F-76DA-14D3-53B171E78375} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {68EA1C36-3AB5-54A3-E36A-41485DABAE7D} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {6926066A-5588-5BA5-596B-4D8F00847A3C} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {697B58F7-9E83-60D5-08A8-298760B058CA} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {6A3E375D-16CE-0685-4364-1222738037A0} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {6A518EE6-644C-7AD1-A96B-62DA254D5080} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {6A53A8CC-76F5-3FED-6F12-1706741E8160} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {6A612EFA-284F-6E1B-50CF-3E9F5380723C} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6AA0201C-0467-1A92-AEE8-5F6065E6EAA4} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6AB88577-E79A-3E12-F413-41D32AA94A06} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6AE96699-015A-5FE5-9074-53156299D2DD} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {6B98E6E1-1E40-6DA7-07F1-59E73D9B2CC2} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6B9CC91D-2640-60E3-1F27-0BDD75E25011} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {6C327064-8F30-49F5-CE3B-777346637C05} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6D4E643D-FA8D-5D83-AD49-7D5C1460CE42} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6D726477-8161-7A8A-B54F-3E6A522C1276} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {6E67B763-FA5D-5EE6-F990-01F21574DE3A} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6EEF2FA9-B23A-493A-863C-62AD74CD2F48} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {6F07030B-F076-74DB-B8B7-587400243F21} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6F0F818E-7AEF-4586-5759-27D23C5DDA41} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6F152017-56C4-055F-E05F-27D068D0D84A} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6F371BC0-1CA5-218E-283A-5E6C7A189C32} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {6FAC792D-AF17-4589-0A3B-6F693E331CF2} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {6FF0ABD7-4609-0D0A-3BAE-059338226263} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {70091EA2-AC3B-3EE3-BC82-73A92442C05E} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {71687C91-8331-6375-6102-4D0313968A2D} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {717AF11D-35A1-2233-0412-4E2D682FC14B} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {71FEACCA-DF4A-71EB-813D-29EC6572E188} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {72D78936-82E0-5C66-76B9-217609D82E9B} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {730F5EF8-DA3B-69A9-0519-311574244AB5} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {7353F9C1-ADF4-1A7A-53E7-4D1B2B72B894} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {73A617F7-B99B-5C3D-C540-6136171D8842} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {73ABBEAD-EDB3-1662-9E84-7A3A2B1A2D41} - http://67.19.99.158/1/gdnUS871.exe
O16 - DPF: {73BAAA10-71BA-78C5-9EBD-0F991F27109A} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {73E40747-1122-0395-0CF7-52801E30421F} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {73E64B0C-7ACF-7E66-BAC6-72DC4EF89A2C} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7484ED75-D270-2177-2AD9-648600E340AD} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {7509E15B-73C3-3A0F-7617-10F01688A073} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {756002F1-A003-6C3E-EA98-2E8E0048206C} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {75925E74-A766-76A3-6BD5-586C5D617AFB} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {75B234E0-E58A-5B9F-BBDE-0FDB604C01BB} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {75BDB6D9-C704-48B0-4BC8-45A832B820EE} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {75EB9125-B4E0-1813-5070-6DCB0D747949} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {76856291-C489-54E9-2B78-382A28FD26CA} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {76E945CA-0E67-573C-107C-7CB445D68FE3} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7752AED9-F09C-44E6-BC53-06FA5B97538D} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {780FFBB1-B617-25B4-023F-2B8C688F6D7A} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7881D6E1-CA31-7974-5F95-6E0D296E3A4C} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7894668B-7DC2-6BB8-98A5-73415219D2CD} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {78A11249-CE74-3E2B-F1CA-2E8B5DB95993} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {78A891C8-4A99-4CF5-64C2-27DD22B9F9F8} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {795E6A59-AA5D-67A2-4DDD-6B3C7A3E1026} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {7995C286-3378-6E6B-E46E-4A362E9B05A3} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {7A0224AB-9DE5-6AA7-4097-3A423166EC20} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7A8013D6-A503-7EB0-51A5-6BF23532C685} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {7B1BF8D6-7DC9-4CAB-10B5-67ED3D580EF1} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7BD5C872-D2F2-67BE-2D20-3D1B57230653} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {7C2DBF00-7774-7AFD-D785-091677C4113A} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {7D284B75-82F3-7424-DAF3-5779686FF9C9} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7D8CB0FE-5BF0-35E1-AAEC-3F590950EBA7} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7DC586BB-D2A8-100A-6E8E-758B5372FB55} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7DE815E5-2C32-0D11-44EF-689003BA7354} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7E45C7DF-15CA-3F65-C7B8-607211272913} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {7E496CAB-7870-15E9-A107-4D6D761AAA3D} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {7E803FA5-629D-15F3-C8EE-12265C701264} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {7E99770E-9B29-08FC-E483-229F0A0B6B19} - http://66.117.42.151/1/rdgUS20.exe
O16 - DPF: {7F1604DE-49AD-346C-A9B5-52E61BDF656A} - http://66.117.42.151/1/gdnUS20.exe
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://rtc3.webresponse.one.microsoft.com/media/xp/TLIEFlash.CAB
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://freetrial.webex.com/client/T26L/webex/ieatgpc.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O21 - SSODL: BVuRIWvCWgrV - {20DFE57F-8A75-4FD5-66DF-402E5A05F591} - (no file)
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\SYSTEM32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Computer Browser (Browser) - brother Industries Ltd - (no file)
O23 - Service: ColdFusion MX 7 Application Server - Macromedia Inc. - C:\CFusionMX7\runtime\bin\jrunsvc.exe
O23 - Service: ColdFusion MX 7 Search Server - Verity, Inc. - C:\CFusionMX7\verity\k2\_nti40\bin\k2admin.exe
O23 - Service: Error Reporting Service (ERSvc) - Intel Corporation - (no file)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Help and Support (helpsvc) - Google - (no file)
O23 - Service: HID Input Service (HidServ) - Google - (no file)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: Windows Installer (MSIServer) - Unknown owner - C:\WINDOWS\system32\msiexec.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Secondary Logon (seclogon) - Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. - (no file)
O23 - Service: System Event Notification (SENS) - Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. - (no file)
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Distributed Link Tracking Client (TrkWks) - VIA Technologies, Inc. - (no file)

--
End of file - 45176 bytes