Antirootkit.com

[Arky]

recently seem to have picked up a nasty virus which neither Avast nor spyware detector can kill as it keeps coming back!

I suspect it maybe Backdoor.Hupigon?

Can anyone asisst with how to get rid of this nasty peice of rubbish?

Reading up on previous strings, I spotted most places seem to start with a Hijack This log but just in case it helps, I'm running Windows XP 64 on a quad core processor.

Thanks in advance for any help you might be able to offer.

kind regards,


Logfile of HijackThis v1.99.1
Scan saved at 21:06:09, on 02/03/2008
Platform: Windows 2003 SP2 (WinNT 5.02.3790)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
H:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
H:\Program Files\Alwil Software\Avast4\ashServ.exe
H:\Program Files (x86)\Bonjour\mDNSResponder.exe
H:\WINDOWS\SysWOW64\drivers\CDAC11BA.EXE
H:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe
H:\WINDOWS\SysWOW64\PnkBstrA.exe
H:\Program Files (x86)\SpywareDetector\SDService.exe
H:\Program Files (x86)\Viewpoint\Common\ViewpointService.exe
H:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
H:\Program Files\Alwil Software\Avast4\ashWebSv.exe
H:\WINDOWS\system32\spool\DRIVERS\x64\3\E_FATIABE.EXE
H:\WINDOWS\RTHDCPL.EXE
H:\Program Files (x86)\Viewpoint\Viewpoint Manager\ViewMgr.exe
H:\Program Files (x86)\CyberLink\PowerStarter\PowerBar.exe
H:\Program Files (x86)\MSN Messenger\MsnMsgr.Exe
H:\Program Files (x86)\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
H:\WINDOWS\SysWOW64\ctfmon.exe
H:\Program Files (x86)\SpywareDetector\SDSystemTray.exe
H:\Program Files (x86)\Java\jre1.6.0_03\bin\jusched.exe
H:\Program Files (x86)\QuickTime\qttask.exe
H:\Program Files (x86)\MSN Apps\Updater\01.03.0000.1005\en-gb\msnappau.exe
H:\Program Files (x86)\iTunes\iTunesHelper.exe
H:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
H:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
H:\Program Files (x86)\iPod\bin\iPodService.exe
H:\Program Files (x86)\Gigabyte\Gigabyte WBKG Wireless USB Adapter\Installer\WINX64\GNConfig.exe
H:\Program Files (x86)\SEC\Natural Color\NaturalColorLoad.exe
H:\Program Files (x86)\SetPoint\x86\SetPoint32.exe
H:\Program Files\Alwil Software\Avast4\setup\avast.setup
H:\Program Files (x86)\Internet Explorer\iexplore.exe
H:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
H:\Program Files (x86)\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - H:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files (x86)\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - H:\Program Files (x86)\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - H:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - H:\Program Files (x86)\MSN Apps\MSN Toolbar\01.02.5000.1021\en-gb\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - H:\Program Files (x86)\MSN Apps\MSN Toolbar\01.02.5000.1021\en-gb\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - H:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - H:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [{1290A33C-85F5-4164-A1BE-7DD299D4986A}] "H:\Program Files (x86)\CyberLink\PowerBackup\PBKScheduler.exe"
O4 - HKLM\..\Run: [SystemTraySD] "H:\Program Files (x86)\SpywareDetector\SDSystemTray.exe" -AUTO
O4 - HKLM\..\Run: [SunJavaUpdateSched] "H:\Program Files (x86)\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "H:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [SDAutoLiveupdate] "H:\Program Files (x86)\SpywareDetector\LiveUpdateSD.exe" -AUTO
O4 - HKLM\..\Run: [QuickTime Task] "H:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] H:\WINDOWS\SysWow64\NeroCheck.exe
O4 - HKLM\..\Run: [msnappau] "H:\Program Files (x86)\MSN Apps\Updater\01.03.0000.1005\en-gb\msnappau.exe"
O4 - HKLM\..\Run: [iTunesHelper] "H:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] H:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "H:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "H:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKCU\..\Run: [PowerBar] "H:\Program Files (x86)\CyberLink\PowerStarter\PowerBar.exe" /AtBootTime
O4 - HKCU\..\Run: [MsnMsgr] "H:\Program Files (x86)\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LDM] H:\Program Files (x86)\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Adobe Gamma.lnk = H:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: GN-WBKG Utility.lnk = H:\Program Files (x86)\Gigabyte\Gigabyte WBKG Wireless USB Adapter\Installer\WINX64\GNConfig.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = H:\Program Files (x86)\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: NaturalColorLoad.lnk = ?
O8 - Extra context menu item: Convert link target to Adobe PDF - res://H:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://H:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://H:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://H:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://H:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://H:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://H:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://H:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://H:\PROGRA~2\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files (x86)\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files (x86)\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:\PROGRA~2\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: h:\program files (x86)\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/haphazard/raptisoftgameloader.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - http://www.samsung.com/plugin/vmpinstaller/installer/components/MTSInstallers/MetaStream3.cab?url=http://www.samsung.com/uk/products/television/tftlcd/web3d/le26r73bdxxeu/page_le26r74bd.html
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.miniclip.com/ricochet/ReflexiveWebGameLoader.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1144516595747
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145907674656
O16 - DPF: {78AEEDE8-7345-4FB5-A8FE-4BFF16EF25FC} (McAfee Virtual Technician Control Class) - http://us-download.mcafee.com/products/protected/mvt/mvt.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} (VideoEgg ActiveX Loader) - http://update.videoegg.com/Install/Windows/Initial/VideoEggPublisher.exe
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (***word dissallowed*** Showdown Class) - http://messenger.zone.msn.com/binary/***word dissallowed***.cab31267.cab
O18 - Protocol: bw+0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - H:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - H:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {08BE54E8-C7F9-4ADB-847E-1E8C5A2C9C3A} - H:\Program Files (x86)\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: acaptuser32.dll
O20 - Winlogon Notify: dimsntfy - H:\WINDOWS\SYSTEM32\dimsntfy.dll
O20 - Winlogon Notify: EFS - H:\WINDOWS\SYSTEM32\sclgntfy.dll
O20 - Winlogon Notify: SDNotify - H:\Program Files (x86)\SpywareDetector\SDNotify.dll
O23 - Service: Adobe LM Service - Adobe Systems - H:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - H:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - H:\WINDOWS\system32\Ati2evxx.exe (file missing)
O23 - Service: ATI Smart - Unknown owner - H:\WINDOWS\system32\ati2saag.exe
O23 - Service: avast! Antivirus - ALWIL Software - H:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - H:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - H:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - H:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - H:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - H:\WINDOWS\System32\dmadmin.exe (file missing)
O23 - Service: Event Log (Eventlog) - Unknown owner - H:\WINDOWS\system32\services.exe (file missing)
O23 - Service: Fax - Unknown owner - H:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - H:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - H:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - H:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - H:\WINDOWS\system32\imapi.exe (file missing)
O23 - Service: iPodService - Apple Computer, Inc. - H:\Program Files (x86)\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - H:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - H:\WINDOWS\system32\msdtc.exe (file missing)
O23 - Service: Message Queuing (MSMQ) - Unknown owner - H:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: Net Logon (Netlogon) - Unknown owner - H:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - H:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - H:\WINDOWS\system32\services.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - H:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - H:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - H:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown owner - H:\WINDOWS\system32\sessmgr.exe (file missing)
O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - H:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: SDService - Max Secure Software - H:\Program Files (x86)\SpywareDetector\SDService.exe
O23 - Service: SNMP Trap Service (SNMPTRAP) - Unknown owner - H:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: Virtual Disk Service (vds) - Unknown owner - H:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - H:\Program Files (x86)\Viewpoint\Common\ViewpointService.exe
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - H:\WINDOWS\System32\vssvc.exe (file missing)
O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner - H:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing)