Logged onto my online bank main page..there is a tab for ONLINE, which I usually click to access my account...when I clicked it, I get a MALICIOUS WEBPAGE/NO CERTIFICATE ERROR...if I continue, it goes to some other bank log in site? I ran MALWARE BYTES and AVG..showed nothing...Here's a HIJACK THIS LOG..see anything....gotta get back online for my bank pronto..thanks!!!
Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 9:45:38 AM, on 6/30/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Lexar Media Inc\USB Card Reader Driver v2.2(M)\Disk_Monitor.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\JavaMx\javasys.exe
C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
C:\Program Files\ScanSoft\NaturallySpeaking8\Program\natspeak.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O1 - Hosts: 212.95.39.41 signin.ebay.com
O1 - Hosts: 212.95.39.41 chaseonline.chase.com
O1 - Hosts: 212.95.39.41 mfasa.chase.com
O1 - Hosts: 212.95.39.41 discovercard.com
O1 - Hosts: 212.95.39.41 www.discovercard.com
O1 - Hosts: 212.95.39.41 cm.netteller.com
O1 - Hosts: 212.95.39.41 www.cm.netteller.com
O1 - Hosts: 212.95.39.41 online.wellsfargo.com
O1 - Hosts: 212.95.39.41 www.online.wellsfargo.com
O1 - Hosts: 212.95.39.41 sitekey.bankofamerica.com
O1 - Hosts: 212.95.39.41 www.sitekey.bankofamerica.com
O1 - Hosts: 212.95.39.41 online.americanexpress.com
O1 - Hosts: 212.95.39.41 www.online.americanexpress.com
O1 - Hosts: 212.95.39.41 servicing.capitalone.com
O1 - Hosts: 212.95.39.41 www.servicing.capitalone.com
O1 - Hosts: 212.95.39.41 ibsnetaccess.com
O1 - Hosts: 212.95.39.41 www.ibsnetaccess.com
O1 - Hosts: 212.95.39.41 usaa.com
O1 - Hosts: 212.95.39.41 www.usaa.com
O1 - Hosts: 212.95.39.41 paypal.com
O1 - Hosts: 212.95.39.41 www.paypal.com
O1 - Hosts: 212.95.39.41 online.citibank.com
O1 - Hosts: 212.95.39.41 www.online.citibank.com
O1 - Hosts: 212.95.39.41 servicing.capitalone.com
O1 - Hosts: 212.95.39.41 onlinebanking.capitalone.com
O1 - Hosts: 212.95.39.41 towernet.capitalonebank.com
O1 - Hosts: 212.95.39.41 top.capitalonebank.com
O1 - Hosts: 212.95.39.41 sso.americanexpress.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot
O4 - HKLM\..\Run: [DNS7reminder] "C:\Program Files\ScanSoft\NaturallySpeaking8\Program\ereg.exe" -r "C:\Program Files\ScanSoft\NaturallySpeaking8\Program\ereg.ini"
O4 - HKLM\..\Run: [WordPerfect Office 1215] C:\Program Files\WordPerfect Office 12\Programs\Registration.exe /title="WordPerfect Office 12" /date=070510 serial=WO12WRX-0000043-SGJ lang=EN
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Disk Monitor] C:\Program Files\Lexar Media Inc.\USB Card Reader Driver v2.2(M)\Disk_Monitor.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Iprive] C:\Program Files\JavaMx\javasys.exe
O4 - Startup: Dragon NaturallySpeaking.lnk = C:\Program Files\ScanSoft\NaturallySpeaking8\Program\natspeak.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PHOTOfunSTUDIO.lnk = C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Mystery%20Solitaire/Images/stg_drm.ocx
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1214505113419
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Mystery%20Solitaire/Images/armhelper.ocx
O18 - Protocol: bw+0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: offline-8876480 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
--
End of file - 22182 bytes
Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 9:45:38 AM, on 6/30/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Lexar Media Inc\USB Card Reader Driver v2.2(M)\Disk_Monitor.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\JavaMx\javasys.exe
C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
C:\Program Files\ScanSoft\NaturallySpeaking8\Program\natspeak.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O1 - Hosts: 212.95.39.41 signin.ebay.com
O1 - Hosts: 212.95.39.41 chaseonline.chase.com
O1 - Hosts: 212.95.39.41 mfasa.chase.com
O1 - Hosts: 212.95.39.41 discovercard.com
O1 - Hosts: 212.95.39.41 www.discovercard.com
O1 - Hosts: 212.95.39.41 cm.netteller.com
O1 - Hosts: 212.95.39.41 www.cm.netteller.com
O1 - Hosts: 212.95.39.41 online.wellsfargo.com
O1 - Hosts: 212.95.39.41 www.online.wellsfargo.com
O1 - Hosts: 212.95.39.41 sitekey.bankofamerica.com
O1 - Hosts: 212.95.39.41 www.sitekey.bankofamerica.com
O1 - Hosts: 212.95.39.41 online.americanexpress.com
O1 - Hosts: 212.95.39.41 www.online.americanexpress.com
O1 - Hosts: 212.95.39.41 servicing.capitalone.com
O1 - Hosts: 212.95.39.41 www.servicing.capitalone.com
O1 - Hosts: 212.95.39.41 ibsnetaccess.com
O1 - Hosts: 212.95.39.41 www.ibsnetaccess.com
O1 - Hosts: 212.95.39.41 usaa.com
O1 - Hosts: 212.95.39.41 www.usaa.com
O1 - Hosts: 212.95.39.41 paypal.com
O1 - Hosts: 212.95.39.41 www.paypal.com
O1 - Hosts: 212.95.39.41 online.citibank.com
O1 - Hosts: 212.95.39.41 www.online.citibank.com
O1 - Hosts: 212.95.39.41 servicing.capitalone.com
O1 - Hosts: 212.95.39.41 onlinebanking.capitalone.com
O1 - Hosts: 212.95.39.41 towernet.capitalonebank.com
O1 - Hosts: 212.95.39.41 top.capitalonebank.com
O1 - Hosts: 212.95.39.41 sso.americanexpress.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot
O4 - HKLM\..\Run: [DNS7reminder] "C:\Program Files\ScanSoft\NaturallySpeaking8\Program\ereg.exe" -r "C:\Program Files\ScanSoft\NaturallySpeaking8\Program\ereg.ini"
O4 - HKLM\..\Run: [WordPerfect Office 1215] C:\Program Files\WordPerfect Office 12\Programs\Registration.exe /title="WordPerfect Office 12" /date=070510 serial=WO12WRX-0000043-SGJ lang=EN
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Disk Monitor] C:\Program Files\Lexar Media Inc.\USB Card Reader Driver v2.2(M)\Disk_Monitor.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Iprive] C:\Program Files\JavaMx\javasys.exe
O4 - Startup: Dragon NaturallySpeaking.lnk = C:\Program Files\ScanSoft\NaturallySpeaking8\Program\natspeak.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PHOTOfunSTUDIO.lnk = C:\Program Files\Panasonic\PHOTOfunSTUDIO\PhAutoRun.exe
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Mystery%20Solitaire/Images/stg_drm.ocx
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1214505113419
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Mystery%20Solitaire/Images/armhelper.ocx
O18 - Protocol: bw+0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: offline-8876480 - {304761CE-4C52-4407-98DF-1C90A83D7178} - C:\Documents and Settings\Owner\My Documents\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
--
End of file - 22182 bytes