Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Iworm_attck_v122.02a


  • This topic is locked This topic is locked
37 replies to this topic

#1 broncos

broncos

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Victoria
  • Local time:06:28 AM

Posted 29 June 2006 - 12:22 AM

:thumbsup: Please Help me I am not good on computers and I am frustrated by this I am fully updated with my MacFee Virus scan but this is still here. I get a pop up icons saying that my computer is infected and my home page is always diverted as well I also get pop up ads. I have downloaded HiJackThis and also smitRem. I have also been getting PWS.Banker.gen.l
This is my Log can you help me.
Thanks very much

Logfile of HijackThis v1.99.1
Scan saved at 2:45:36 PM, on 29/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\LxrSII1s.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\cidaemon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Telstra\Toolbar\bpumTray.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\windows\rundll32.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\dcomcfg.exe
C:\WINDOWS\system32\atmclk.exe
C:\Documents and Settings\user\My Documents\HiJackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.optima.com.au
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - blank (file missing)
O2 - BHO: (no name) - {062492AF-392E-479D-BF52-A7A4BCA00307} - C:\WINDOWS\compstuic.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ActivateBand Class - {4C7B6DE1-99A4-4CF1-8B44-68889900E1D0} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O2 - BHO: Nothing - {5f4c3d09-b3b9-4f88-aa82-31332fee1c08} - C:\WINDOWS\system32\hp100.tmp
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: BigPond Toolbar - {7A431EC4-CC21-4DF7-9DB1-A2CF74C4CC98} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O4 - HKLM\..\Run: [foxwjsm5782] C:\WINDOWS\help\vdws3479.exe
O4 - HKLM\..\Run: [foxdfmr7221] C:\WINDOWS\help\vpvj8493.exe
O4 - HKLM\..\Run: [foxijhk5448] C:\WINDOWS\help\xysi5340.exe
O4 - HKLM\..\Run: [foxsine7005] C:\WINDOWS\help\vgdq4375.exe
O4 - HKLM\..\Run: [foxlowt3231] C:\WINDOWS\help\ynji20.exe
O4 - HKLM\..\Run: [foxlfhy1483] C:\WINDOWS\help\ifho2621.exe
O4 - HKLM\..\Run: [foxrrvs3655] C:\WINDOWS\help\vlye4304.exe
O4 - HKLM\..\Run: [foxecse5904] C:\WINDOWS\help\uxjl7369.exe
O4 - HKLM\..\Run: [foxxpde6519] C:\WINDOWS\help\zezk5625.exe
O4 - HKLM\..\Run: [foxnfmp5382] C:\WINDOWS\help\wicu7306.exe
O4 - HKLM\..\Run: [foxvsgk5887] C:\WINDOWS\help\ynji20.exe
O4 - HKLM\..\Run: [foxnhzq845] C:\WINDOWS\help\yduk9297.exe
O4 - HKLM\..\Run: [foxhzte2894] C:\WINDOWS\help\ypnf917.exe
O4 - HKLM\..\Run: [foxkklh7092] C:\WINDOWS\help\xivg397.exe
O4 - HKLM\..\Run: [foxkxfq9910] C:\WINDOWS\help\ifji2592.exe
O4 - HKLM\..\Run: [foxfnlv555] C:\WINDOWS\help\wrtx225.exe
O4 - HKLM\..\Run: [foxvrhn4658] C:\WINDOWS\help\xvqi5470.exe
O4 - HKLM\..\Run: [foxkexf7469] C:\WINDOWS\help\vvfz9230.exe
O4 - HKLM\..\Run: [foxqggy9004] C:\WINDOWS\help\vdwv4534.exe
O4 - HKLM\..\Run: [foxqncx9609] C:\WINDOWS\help\wvtg125.exe
O4 - HKLM\..\Run: [foxhtje987] C:\WINDOWS\help\xlyx2522.exe
O4 - HKLM\..\Run: [foxfkhz2998] C:\WINDOWS\help\uwkp6140.exe
O4 - HKLM\..\Run: [foxysql2630] C:\WINDOWS\help\zonr5148.exe
O4 - HKLM\..\Run: [foxcpyq1284] C:\WINDOWS\help\yufi3965.exe
O4 - HKLM\..\Run: [foxtrii7639] C:\WINDOWS\help\yloo9931.exe
O4 - HKLM\..\Run: [foxkfpd618] C:\WINDOWS\help\yvdo3994.exe
O4 - HKLM\..\Run: [EPSON Stylus CX3100] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P19 "EPSON Stylus CX3100" /O6 "USB001" /M "Stylus CX3100"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BigPond Toolbar] "C:\Program Files\Telstra\Toolbar\bpumTray.exe"
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [rundll32] c:\windows\rundll32.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [foxkyqz9787] C:\WINDOWS\help\lgyz630.exe
O4 - HKLM\..\Run: [foxyrsh6985] C:\WINDOWS\help\nlyd8747.exe
O4 - HKLM\..\Run: [foxrqyf9210] C:\WINDOWS\help\xxuf9696.exe
O4 - HKLM\..\Run: [foxwegr575] C:\WINDOWS\help\uyvv4962.exe
O4 - HKLM\..\Run: [foxsmon9005] C:\WINDOWS\help\qwed1922.exe
O4 - HKLM\..\Run: [foxjily9775] C:\WINDOWS\help\umsg6522.exe
O4 - HKLM\..\Run: [foxnxwe7918] C:\WINDOWS\help\vkip3285.exe
O4 - HKLM\..\Run: [foxwssy2251] C:\WINDOWS\help\teki5138.exe
O4 - HKLM\..\Run: [foxtfxp2444] C:\WINDOWS\help\lgyz630.exe
O4 - HKLM\..\Run: [foxhpld4532] C:\WINDOWS\help\yqmj936.exe
O4 - HKLM\..\Run: [foxocpw630] C:\WINDOWS\help\yqmj936.exe
O4 - HKLM\..\Run: [foxgwxg1123] C:\WINDOWS\help\jrwd1831.exe
O4 - HKLM\..\Run: [foxqvdx6970] C:\WINDOWS\help\nmuu3211.exe
O4 - HKLM\..\Run: [foxteqe8266] C:\WINDOWS\help\knml1626.exe
O4 - HKLM\..\Run: [foxophy9993] C:\WINDOWS\help\vfgw5535.exe
O4 - HKLM\..\Run: [foxjvug9072] C:\WINDOWS\help\upyi864.exe
O4 - HKLM\..\Run: [foxckjl8225] C:\WINDOWS\help\isgx2195.exe
O4 - HKLM\..\Run: [foxdkgl2515] C:\WINDOWS\help\nvkw2704.exe
O4 - HKLM\..\Run: [foxvwvu7726] C:\WINDOWS\help\otpg2616.exe
O4 - HKLM\..\Run: [foxhsgf2992] C:\WINDOWS\help\khgg2069.exe
O4 - HKLM\..\Run: [foxlyei9357] C:\WINDOWS\help\rsni1621.exe
O4 - HKLM\..\Run: [foxogrw500] C:\WINDOWS\help\jrwd1831.exe
O4 - HKLM\..\Run: [foxwjwk8152] C:\WINDOWS\help\oxln6815.exe
O4 - HKLM\..\Run: [foxpnni9905] C:\WINDOWS\help\yqij5226.exe
O4 - HKLM\..\Run: [foxprjp4105] C:\WINDOWS\help\ufps1312.exe
O4 - HKLM\..\Run: [foxinhx4138] C:\WINDOWS\help\poex1212.exe
O4 - HKLM\..\Run: [foxrizz8500] C:\WINDOWS\help\pefv9680.exe
O4 - HKLM\..\Run: [foxrotm5004] C:\WINDOWS\help\ntvo9496.exe
O4 - HKLM\..\Run: [foxxxey2825] C:\WINDOWS\help\puvk7714.exe
O4 - HKLM\..\Run: [foxxjgl3232] C:\WINDOWS\help\rdmj7945.exe
O4 - HKLM\..\Run: [foxytjz4703] C:\WINDOWS\help\lils4922.exe
O4 - HKLM\..\Run: [foxqkyr8664] C:\WINDOWS\help\rfwx1183.exe
O4 - HKLM\..\Run: [foxdfle2692] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxmjsr5347] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxeyyy5970] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxwjpe1282] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxcoih1320] C:\WINDOWS\help\rfwx1183.exe
O4 - HKLM\..\Run: [foxesoe2834] C:\WINDOWS\help\lils4922.exe
O4 - HKLM\..\Run: [foxtwtc8471] C:\WINDOWS\help\ytnw4002.exe
O4 - HKLM\..\Run: [foxxrns6426] C:\WINDOWS\help\pyqd9668.exe
O4 - HKLM\..\Run: [foxqmlh1901] C:\WINDOWS\help\vxpq9137.exe
O4 - HKLM\..\Run: [foxgepl852] C:\WINDOWS\help\jkqm6515.exe
O4 - HKLM\..\Run: [foxtxhv8195] C:\WINDOWS\help\jkqm6515.exe
O4 - HKLM\..\Run: [foxxnmm6527] C:\WINDOWS\help\mdmh4993.exe
O4 - HKLM\..\Run: [foxfoku9509] C:\WINDOWS\help\vtpk9237.exe
O4 - HKLM\..\Run: [foxrsnf6958] C:\WINDOWS\help\yulf4031.exe
O4 - HKLM\..\Run: [foxpwdf8333] C:\WINDOWS\help\iqns9956.exe
O4 - HKLM\..\Run: [foxzdls989] C:\WINDOWS\help\iqns9956.exe
O4 - HKLM\..\Run: [foxrfzm6480] C:\WINDOWS\help\ulem2144.exe
O4 - HKLM\..\Run: [foximog5384] C:\WINDOWS\help\oilp856.exe
O4 - HKLM\..\Run: [foxupxv2745] C:\WINDOWS\help\qwyr751.exe
O4 - HKLM\..\Run: [foxjllu7246] C:\WINDOWS\help\sgkt907.exe
O4 - HKLM\..\Run: [foxdfgj7011] C:\WINDOWS\help\twmu5209.exe
O4 - HKLM\..\Run: [foxgstp5677] C:\WINDOWS\help\iqns9956.exe
O4 - HKLM\..\Run: [foxjdpt3301] C:\WINDOWS\help\rxel3624.exe
O4 - HKLM\..\Run: [foxqsuo1554] C:\WINDOWS\help\znto5214.exe
O4 - HKLM\..\Run: [foxrdht6392] C:\WINDOWS\help\pmtu5824.exe
O4 - HKLM\..\Run: [foxhnlr5443] C:\WINDOWS\help\pywm4264.exe
O4 - HKLM\..\Run: [foxpzjs8144] C:\WINDOWS\help\plek9191.exe
O4 - HKLM\..\Run: [foxwfyp9433] C:\WINDOWS\help\qjjr9103.exe
O4 - HKLM\..\Run: [foxrqwu8040] C:\WINDOWS\help\oilp856.exe
O4 - HKLM\..\Run: [foxgmol7166] C:\WINDOWS\help\wfuj1880.exe
O4 - HKLM\..\Run: [foxhthl5401] C:\WINDOWS\help\qwyr751.exe
O4 - HKLM\..\Run: [foxmjxj9972] C:\WINDOWS\help\phld7371.exe
O4 - HKLM\..\Run: [foxqyjf4661] C:\WINDOWS\help\pqcv9119.exe
O4 - HKLM\..\Run: [foxprqf6426] C:\WINDOWS\help\kpch2683.exe
O4 - HKLM\..\Run: [foxffsj5506] C:\WINDOWS\help\owsd9136.exe
O4 - HKLM\..\Run: [foxxhfu5790] C:\WINDOWS\help\qxkt504.exe
O4 - HKLM\..\Run: [foxjlij5020] C:\WINDOWS\help\krqw9345.exe
O4 - HKLM\..\Run: [foxgqmk3611] C:\WINDOWS\help\irkh7731.exe
O4 - HKLM\..\Run: [foxlloy6635] C:\WINDOWS\help\omnq726.exe
O4 - HKLM\..\Run: [foxpgls8015] C:\WINDOWS\help\vnhs8500.exe
O4 - HKLM\..\Run: [foxrygw1206] C:\WINDOWS\help\jxlv9332.exe
O4 - HKLM\..\Run: [foxitwt5066] C:\WINDOWS\help\pgjt3917.exe
O4 - HKLM\..\Run: [foxktwp3285] C:\WINDOWS\help\wxio2.exe
O4 - HKLM\..\Run: [foxvqjw2498] C:\WINDOWS\help\jcyn5995.exe
O4 - HKLM\..\Run: [foxtrzn913] C:\WINDOWS\help\twmu5209.exe
O4 - HKLM\..\Run: [foxrhgk8422] C:\WINDOWS\help\spyo5985.exe
O4 - HKLM\..\Run: [foxidwu5766] C:\WINDOWS\help\jhhu6608.exe
O4 - HKLM\..\Run: [foxtkse3333] C:\WINDOWS\help\newi8076.exe
O4 - HKLM\..\Run: [foxcqsu7887] C:\WINDOWS\help\jjdi6666.exe
O4 - HKLM\..\Run: [foxpjsm6895] C:\WINDOWS\help\utfq7528.exe
O4 - HKLM\..\Run: [foxmllp8794] C:\WINDOWS\help\ugmj2426.exe
O4 - HKLM\..\Run: [foxuhmc37] C:\WINDOWS\help\pdcq6235.exe
O4 - HKLM\..\Run: [foxovuk5365] C:\WINDOWS\help\tvze7586.exe
O4 - HKLM\..\Run: [foxlzfx3897] C:\WINDOWS\help\spyo5985.exe
O4 - HKLM\..\Run: [foxhgmi3658] C:\WINDOWS\help\kdzu1028.exe
O4 - HKLM\..\Run: [foxldyl3956] C:\WINDOWS\help\squy6043.exe
O4 - HKLM\..\Run: [foxdmnu2307] C:\WINDOWS\help\wvxh3550.exe
O4 - HKLM\..\Run: [foxujwq3274] C:\WINDOWS\help\smpx2748.exe
O4 - HKLM\..\Run: [foxvpwh4876] C:\WINDOWS\help\jtgm1623.exe
O4 - HKLM\..\Run: [foxiqqp7385] C:\WINDOWS\help\krnn1506.exe
O4 - HKLM\..\Run: [foxenxo4315] C:\WINDOWS\help\ondq9518.exe
O4 - HKLM\..\Run: [foxphyt6808] C:\WINDOWS\help\ifqk1727.exe
O4 - HKLM\..\Run: [foxfdgx5628] C:\WINDOWS\help\jrwg9555.exe
O4 - HKLM\..\Run: [foxgkyp2778] C:\WINDOWS\help\qtqg6275.exe
O4 - HKLM\..\Run: [foxqnkd6460] C:\WINDOWS\help\nzly2584.exe
O4 - HKLM\..\Run: [foxnlsu1609] C:\WINDOWS\help\otmy9171.exe
O4 - HKLM\..\Run: [foxmvww8317] C:\WINDOWS\help\mrus4319.exe
O4 - HKLM\..\Run: [foxxiyq4639] C:\WINDOWS\help\mmjp1357.exe
O4 - HKLM\..\Run: [foxrigg9651] C:\WINDOWS\help\zspr5018.exe
O4 - HKLM\..\Run: [foxlnep6627] C:\WINDOWS\help\poie2362.exe
O4 - HKLM\..\Run: [foxinhd1864] C:\WINDOWS\help\kfpm7690.exe
O4 - HKLM\..\Run: [foxlxno4979] C:\WINDOWS\help\kthn9338.exe
O4 - HKLM\..\Run: [foxfutx3721] C:\WINDOWS\help\nptr7351.exe
O4 - HKLM\..\Run: [foxfsdy3603] C:\WINDOWS\help\qriv8777.exe
O4 - HKLM\..\Run: [foxhnuk6823] C:\WINDOWS\help\uklv70.exe
O4 - HKLM\..\Run: [foxweiy7359] C:\WINDOWS\help\trhe3512.exe
O4 - HKLM\..\Run: [foxjntr1558] C:\WINDOWS\help\xiun8141.exe
O4 - HKLM\..\Run: [foxslwp9186] C:\WINDOWS\help\itwo4269.exe
O4 - HKLM\..\Run: [foxygvw8755] C:\WINDOWS\help\qrzn1898.exe
O4 - HKLM\..\Run: [foxslsn5761] C:\WINDOWS\help\xmyu1467.exe
O4 - HKLM\..\Run: [foxmedl4573] C:\WINDOWS\help\rrvl8471.exe
O4 - HKLM\..\Run: [foxvxts8964] C:\WINDOWS\help\lkfi7284.exe
O4 - HKLM\..\Run: [foxxciw391] C:\WINDOWS\help\tgvq1676.exe
O4 - HKLM\..\Run: [foxxpft5435] C:\WINDOWS\help\viku3102.exe
O4 - HKLM\..\Run: [foxevwu8375] C:\WINDOWS\help\tsne9839.exe
O4 - HKLM\..\Run: [foxvmkh7128] C:\WINDOWS\help\vvhr8145.exe
O4 - HKLM\..\Run: [foxpfoc2516] C:\WINDOWS\help\iqtk5627.exe
O4 - HKLM\..\Run: [foxcjph8291] C:\WINDOWS\help\jdvy7099.exe
O4 - HKLM\..\Run: [foxvenq1984] C:\WINDOWS\help\wmkn9517.exe
O4 - HKLM\..\Run: [foxkjmw6007] C:\WINDOWS\help\tkpn4695.exe
O4 - HKLM\..\Run: [foxxghp6806] C:\WINDOWS\help\yprf1002.exe
O4 - HKLM\..\Run: [foxuwjx6956] C:\WINDOWS\help\jppu8718.exe
O4 - HKLM\..\Run: [foxkute4389] C:\WINDOWS\help\lzgl8684.exe
O4 - HKLM\..\Run: [foxxhxc3440] C:\WINDOWS\help\tflv9667.exe
O4 - HKLM\..\Run: [foxrpio7136] C:\WINDOWS\help\wnzx6150.exe
O4 - HKLM\..\Run: [foxwsrh3326] C:\WINDOWS\help\vjlk4301.exe
O4 - HKLM\..\Run: [foxtqxh8504] C:\WINDOWS\help\uyuf6037.exe
O4 - HKLM\..\Run: [foxsnni3565] C:\WINDOWS\help\mruq3264.exe
O4 - HKLM\..\Run: [foxnlss554] C:\WINDOWS\help\swdf1215.exe
O4 - HKLM\..\Run: [foxymle3063] C:\WINDOWS\help\njjs3160.exe
O4 - HKLM\..\Run: [foxneqc1984] C:\WINDOWS\help\mmjp1357.exe
O4 - HKLM\..\Run: [foxsium8261] C:\WINDOWS\help\nsgf9532.exe
O4 - HKLM\..\Run: [foxfkok4254] C:\WINDOWS\help\qowk972.exe
O4 - HKLM\..\Run: [foxrgov4064] C:\WINDOWS\help\wufj8021.exe
O4 - HKLM\..\Run: [foxoueu1007] C:\WINDOWS\help\qmqs6774.exe
O4 - HKLM\..\Run: [foxurjr388] C:\WINDOWS\help\uspv3140.exe
O4 - HKLM\..\Run: [foxfhhh6573] C:\WINDOWS\help\ndgs3717.exe
O4 - HKLM\..\Run: [foxvmmx430] C:\WINDOWS\help\wiim2977.exe
O4 - HKLM\..\Run: [foxvfmu5343] C:\WINDOWS\help\omiu1706.exe
O4 - HKLM\..\Run: [foxqggw8994] C:\WINDOWS\help\injh2237.exe
O4 - HKLM\..\Run: [foxkhhj9525] C:\WINDOWS\help\txlp3098.exe
O4 - HKLM\..\Run: [foxypoh5034] C:\WINDOWS\help\mxip8501.exe
O4 - HKLM\..\Run: [foxnrfr5791] C:\WINDOWS\help\tlos8054.exe
O4 - HKLM\..\Run: [foxplek8923] C:\WINDOWS\help\wvqf7744.exe
O4 - HKLM\..\Run: [foxoqjh5732] C:\WINDOWS\help\lpod6782.exe
O4 - HKLM\..\Run: [foxnjmf4072] C:\WINDOWS\help\orhi1634.exe
O4 - HKLM\..\Run: [foxuzns128] C:\WINDOWS\help\trgk4587.exe
O4 - HKLM\..\Run: [foxxuqu8388] C:\WINDOWS\help\mwle8443.exe
O4 - HKLM\..\Run: [foxlhuw9220] C:\WINDOWS\help\ikke7021.exe
O4 - HKLM\..\Run: [foxdukh9726] C:\WINDOWS\help\jrde5256.exe
O4 - HKLM\..\Run: [foxjeig4310] C:\WINDOWS\help\tpmr4499.exe
O4 - HKLM\..\Run: [foxvjkt1788] C:\WINDOWS\help\wdss1099.exe
O4 - HKLM\..\Run: [foxwqxn6568] C:\WINDOWS\help\zdmf2437.exe
O4 - HKLM\..\Run: [foxulen1876] C:\WINDOWS\help\jnwu1931.exe
O4 - HKLM\..\Run: [foxklyg2545] C:\WINDOWS\help\tipp2839.exe
O4 - HKLM\..\Run: [foxoftr471] C:\WINDOWS\help\vwcl9279.exe
O4 - HKLM\..\Run: [foxsnmn6924] C:\WINDOWS\help\nlvp3181.exe
O4 - HKLM\..\Run: [foxxchf1466] C:\WINDOWS\help\smpv2738.exe
O4 - HKLM\..\Run: [foxugnx28] C:\WINDOWS\help\pokt4607.exe
O4 - HKLM\..\Run: [foxrihv1897] C:\WINDOWS\help\qtol9634.exe
O4 - HKLM\..\Run: [foxxxxx9399] C:\WINDOWS\help\pxce7555.exe
O4 - HKLM\..\Run: [foxzqwp2532] C:\WINDOWS\help\mnpp1014.exe
O4 - HKLM\..\Run: [foxkyoo1938] C:\WINDOWS\help\monu1044.exe
O4 - HKLM\..\Run: [foxjijn1925] C:\WINDOWS\help\slyc7304.exe
O4 - HKLM\..\Run: [foxmgqk27] C:\WINDOWS\help\iyoo9591.exe
O4 - HKLM\..\Run: [foxlvce1762] C:\WINDOWS\help\ytkj5096.exe
O4 - HKLM\..\Run: [foxvzjs4418] C:\WINDOWS\help\ytkj5096.exe
O4 - HKLM\..\Run: [foxqdxs4643] C:\WINDOWS\help\olon4046.exe
O4 - HKLM\..\Run: [foxrrxh4845] C:\WINDOWS\help\pldn2541.exe
O4 - HKLM\..\Run: [foxlukh8613] C:\WINDOWS\help\ikjl4766.exe
O4 - HKLM\..\Run: [foxjehn2055] C:\WINDOWS\help\pxce7555.exe
O4 - HKLM\..\Run: [foxodls6149] C:\WINDOWS\help\uxhw5133.exe
O4 - HKLM\..\Run: [foxrfyp9829] C:\WINDOWS\help\qprn906.exe
O4 - HKLM\..\Run: [foxgjhm7220] C:\WINDOWS\help\mnpp1014.exe
O4 - HKLM\..\Run: [foxxulc2708] C:\WINDOWS\help\jdmf1324.exe
O4 - HKLM\..\Run: [foxeqgz4117] C:\WINDOWS\help\wdnx5418.exe
O4 - HKLM\..\Run: [foxohmr8303] C:\WINDOWS\help\lgyv6234.exe
O4 - HKLM\..\Run: [foxeqfh4146] C:\WINDOWS\help\uyvs567.exe
O4 - HKLM\..\Run: [foxtfve4594] C:\WINDOWS\help\monu1044.exe
O4 - HKLM\..\Run: [foxymjr1883] C:\WINDOWS\help\imkg8896.exe
O4 - HKLM\..\Run: [foxndws7654] C:\WINDOWS\help\imkg8896.exe
O4 - HKLM\..\Run: [foxgtmk2147] C:\WINDOWS\help\inll4636.exe
O4 - HKLM\..\Run: [foxrgos3009] C:\WINDOWS\help\ytkj5096.exe
O4 - HKLM\..\Run: [foxdogz7875] C:\WINDOWS\help\roit9515.exe
O4 - HKLM\..\Run: [foxlmnq3469] C:\WINDOWS\help\iyoo9591.exe
O4 - HKLM\..\Run: [foxdnil2385] C:\WINDOWS\help\jspo6179.exe
O4 - HKLM\..\Run: [foxqoff3054] C:\WINDOWS\help\qmqq5719.exe
O4 - HKLM\..\Run: [foxnrjq8160] C:\WINDOWS\help\ouhd5765.exe
O4 - HKLM\..\Run: [foxvqik1309] C:\WINDOWS\help\nrke2949.exe
O4 - HKLM\..\Run: [foxpfmp1336] C:\WINDOWS\help\lxlo872.exe
O4 - HKLM\..\Run: [foxojuy8085] C:\WINDOWS\help\olon4046.exe
O4 - HKLM\..\Run: [foxihdj6826] C:\WINDOWS\help\npww797.exe
O4 - HKLM\..\Run: [foxwgsv6047] C:\WINDOWS\help\orxs2643.exe
O4 - HKLM\..\Run: [foxsdip6373] C:\WINDOWS\help\jgtf1280.exe
O4 - HKLM\..\Run: [foxegqf9028] C:\WINDOWS\help\jgtf1280.exe
O4 - HKLM\..\Run: [foxxseu641] C:\WINDOWS\help\veuw3498.exe
O4 - HKLM\..\Run: [foxpivg4572] C:\WINDOWS\help\wxhs3352.exe
O4 - HKLM\..\Run: [foxmmdh3163] C:\WINDOWS\help\xgjd4924.exe
O4 - HKLM\..\Run: [foxmmyx9708] C:\WINDOWS\help\ksfe5873.exe
O4 - HKLM\..\Run: [foxsvhs7558] C:\WINDOWS\help\njnq8859.exe
O4 - HKLM\..\Run: [foxhnwd6784] C:\WINDOWS\help\lsdv2419.exe
O4 - HKLM\..\Run: [foxnkex6165] C:\WINDOWS\help\rejp269.exe
O4 - HKLM\..\Run: [foxswdq4133] C:\WINDOWS\help\mqgu8876.exe
O4 - HKLM\..\Run: [foxgrvo6713] C:\WINDOWS\help\refo6843.exe
O4 - HKLM\..\Run: [foxnovs8129] C:\WINDOWS\help\qmkg5499.exe
O4 - HKLM\..\Run: [foxvzzo4227] C:\WINDOWS\help\qmkg5499.exe
O4 - HKLM\..\Run: [foxhhmd4877] C:\WINDOWS\help\lvhp2260.exe
O4 - HKLM\..\Run: [foxhiem1511] C:\WINDOWS\help\qohj98.exe
O4 - HKLM\..\Run: [foxrifl7386] C:\WINDOWS\help\nmrl8700.exe
O4 - HKLM\..\Run: [foxetfc8277] C:\WINDOWS\help\imkg8896.exe
O4 - HKLM\..\Run: [foxifhx4484] C:\WINDOWS\help\tnyi7951.exe
O4 - HKLM\..\Run: [foxniov703] C:\WINDOWS\help\qfek8072.exe
O4 - HKLM\..\Run: [foxvhwk5241] C:\WINDOWS\help\zydn5860.exe
O4 - HKLM\..\Run: [foxiset9527] C:\WINDOWS\help\pfqo8348.exe
O4 - HKLM\..\Run: [foxtujn5244] C:\WINDOWS\help\mort3414.exe
O4 - HKLM\..\Run: [foxhmtd1075] C:\WINDOWS\help\rdll7955.exe
O4 - HKLM\..\Run: [foxtjgv6804] C:\WINDOWS\help\ufzk9352.exe
O4 - HKLM\..\Run: [foxcznt9740] C:\WINDOWS\help\tqgu7763.exe
O4 - HKLM\..\Run: [foxuomi1803] C:\WINDOWS\help\yipr2452.exe
O4 - HKLM\..\Run: [foxvkew5052] C:\WINDOWS\help\vrde6040.exe
O4 - HKLM\..\Run: [foxfddr1138] C:\WINDOWS\help\ttpf4513.exe
O4 - HKLM\..\Run: [foxruyp176] C:\WINDOWS\help\loho4889.exe
O4 - HKLM\..\Run: [foxpphh4398] C:\WINDOWS\help\iund7581.exe
O4 - HKLM\..\Run: [foxserp8410] C:\WINDOWS\help\rhlr7854.exe
O4 - HKLM\..\Run: [foxszjt5144] C:\WINDOWS\help\lxpn3242.exe
O4 - HKLM\..\Run: [foxmieq2179] C:\WINDOWS\help\qktn1121.exe
O4 - HKLM\..\Run: [foxitvu7360] C:\WINDOWS\help\lodm1464.exe
O4 - HKLM\..\Run: [foxmrnp531] C:\WINDOWS\help\roit9515.exe
O4 - HKLM\..\Run: [foxmixo8753] C:\WINDOWS\help\rwod2710.exe
O4 - HKLM\..\Run: [foxsrmf9999] C:\WINDOWS\help\pddn2886.exe
O4 - HKLM\..\Run: [foxrywo6620] C:\WINDOWS\help\nrke2949.exe
O4 - HKLM\..\Run: [foxgeif3981] C:\WINDOWS\help\mxhv2907.exe
O4 - HKLM\..\Run: [foxfwie5863] C:\WINDOWS\help\phym9330.exe
O4 - HKLM\..\Run: [foxnrfx196] C:\WINDOWS\help\kusf7996.exe
O4 - HKLM\..\Run: [foxmoqh5286] C:\WINDOWS\help\qoxi962.exe
O4 - HKLM\..\Run: [foxpmvu9932] C:\WINDOWS\help\rnxt7478.exe
O4 - HKLM\..\Run: [foxdkci5750] C:\WINDOWS\help\jgtf1280.exe
O4 - HKLM\..\Run: [foxjvyn234] C:\WINDOWS\help\oihq7440.exe
O4 - HKLM\..\Run: [foxreyz3006] C:\WINDOWS\help\zqfg8460.exe
O4 - HKLM\..\Run: [foxexjr393] C:\WINDOWS\help\ktei5893.exe
O4 - HKLM\..\Run: [foxqces4729] C:\WINDOWS\help\qkdx5717.exe
O4 - HKLM\..\Run: [foxsgij2789] C:\WINDOWS\help\rkuo8836.exe
O4 - HKLM\..\Run: [foxjplg4871] C:\WINDOWS\help\wvud6775.exe
O4 - HKLM\..\Run: [foxvkvl7116] C:\WINDOWS\help\syoj3357.exe
O4 - HKLM\..\Run: [foxnetf4373] C:\WINDOWS\help\yjdk1120.exe
O4 - HKLM\..\Run: [foxddym8408] C:\WINDOWS\help\uqxj9827.exe
O4 - HKLM\..\Run: [foxdjkt8061] C:\WINDOWS\help\lkvd7083.exe
O4 - HKLM\..\Run: [foxstpi5301] C:\WINDOWS\help\zpmr772.exe
O4 - HKLM\..\Run: [foxgouy318] C:\WINDOWS\help\xfpu8310.exe
O4 - HKLM\..\Run: [foxftwo3672] C:\WINDOWS\help\ktei5893.exe
O4 - HKLM\..\Run: [foxzwnw5600] C:\WINDOWS\help\rcsg8011.exe
O4 - HKLM\..\Run: [foxmnzk3182] C:\WINDOWS\help\vzgk6855.exe
O4 - HKLM\..\Run: [foxxtdn4144] C:\WINDOWS\help\wkuq5119.exe
O4 - HKLM\..\Run: [foxxwdg560] C:\WINDOWS\help\rvnu302.exe
O4 - HKLM\..\Run: [foxiwsg321] C:\WINDOWS\help\oguc4203.exe
O4 - HKLM\..\Run: [foxidfj7042] C:\WINDOWS\help\oguc4203.exe
O4 - HKLM\..\Run: [foxtidv1095] C:\WINDOWS\help\ljdi9280.exe
O4 - HKLM\..\Run: [foxtuzm6109] C:\WINDOWS\help\xdem1773.exe
O4 - HKLM\..\Run: [foxeigi2207] C:\WINDOWS\help\xdem1773.exe
O4 - HKLM\..\Run: [foxxnmp4252] C:\WINDOWS\help\mdij9292.exe
O4 - HKLM\..\Run: [foxndyk6569] C:\WINDOWS\help\zruq5094.exe
O4 - HKLM\..\Run: [foxzuyp9062] C:\WINDOWS\help\ljdi9280.exe
O4 - HKLM\..\Run: [foxtdpv9187] C:\WINDOWS\help\qkwv2292.exe
O4 - HKLM\..\Run: [foxnxxy7898] C:\WINDOWS\help\qjme284.exe
O4 - HKLM\..\Run: [foxfnlz4950] C:\WINDOWS\help\mruw8714.exe
O4 - HKLM\..\Run: [foxvttn5735] C:\WINDOWS\help\tfio5167.exe
O4 - HKLM\..\Run: [foxqqji6061] C:\WINDOWS\help\kvou5790.exe
O4 - HKLM\..\Run: [foxijnu6714] C:\WINDOWS\help\pvmf8772.exe
O4 - HKLM\..\Run: [foxikxv6467] C:\WINDOWS\help\zoqd2988.exe
O4 - HKLM\..\Run: [foxrevm771] C:\WINDOWS\help\xpep7977.exe
O4 - HKLM\..\Run: [foxkptv1160] C:\WINDOWS\help\lcer5384.exe
O4 - HKLM\..\Run: [foxwhgl6989] C:\WINDOWS\help\okun1838.exe
O4 - HKLM\..\Run: [foxgygy3046] C:\WINDOWS\help\rhmx3306.exe
O4 - HKLM\..\Run: [foxdinf278] C:\WINDOWS\help\siqk8433.exe
O4 - HKLM\..\Run: [foxnxtu4464] C:\WINDOWS\help\wruo8094.exe
O4 - HKLM\..\Run: [foxxmsq5384] C:\WINDOWS\help\swyp6685.exe
O4 - HKLM\..\Run: [foxjijg9804] C:\WINDOWS\help\mgws7174.exe
O4 - HKLM\..\Run: [foxkwyq871] C:\WINDOWS\help\weiw7617.exe
O4 - HKLM\..\Run: [foxedmr4639] C:\WINDOWS\help\orci1549.exe
O4 - HKLM\..\Run: [foxjdkz7620] C:\WINDOWS\help\orci1549.exe
O4 - HKLM\..\Run: [foxqvgd3735] C:\WINDOWS\help\sjhd2812.exe
O4 - HKLM\..\Run: [foxeigc3426] C:\WINDOWS\help\xpep7977.exe
O4 - HKLM\..\Run: [foxvzhe8842] C:\WINDOWS\help\xmtt4711.exe
O4 - HKLM\..\Run: [foxyjzs5266] C:\WINDOWS\help\tikz1554.exe
O4 - HKLM\..\Run: [foxfexc7846] C:\WINDOWS\help\pede3050.exe
O4 - HKLM\..\Run: [foxuqyl3945] C:\WINDOWS\help\ixst7412.exe
O4 - HKLM\..\Run: [foxomlj2628] C:\WINDOWS\help\svdj6656.exe
O4 - HKLM\..\Run: [foxhuex3175] C:\WINDOWS\help\tudu3172.exe
O4 - HKLM\..\Run: [foxmtzt2673] C:\WINDOWS\help\wgrw9654.exe
O4 - HKLM\..\Run: [foxperp9126] C:\WINDOWS\help\lcer5384.exe
O4 - HKLM\..\Run: [foxelmf4438] C:\WINDOWS\help\ojfr6404.exe
O4 - HKLM\..\Run: [foxuuwk390] C:\WINDOWS\help\rhmx3306.exe
O4 - HKLM\..\Run: [foxjwmd1176] C:\WINDOWS\help\tcyi3101.exe
O4 - HKLM\..\Run: [foxiptd2941] C:\WINDOWS\help\wvsn4539.exe
O4 - HKLM\..\Run: [foxxfnm6872] C:\WINDOWS\help\ouyl6764.exe
O4 - HKLM\..\Run: [foxgqps4781] C:\WINDOWS\help\ifoy3887.exe
O4 - HKLM\..\Run: [foxrwlm8863] C:\WINDOWS\help\xsgd4363.exe
O4 - HKLM\..\Run: [foxzmeg1653] C:\WINDOWS\help\wlpk9583.exe
O4 - HKLM\..\Run: [foxedsc1519] C:\WINDOWS\help\qfnk1574.exe
O4 - HKLM\..\Run: [foxzkno4990] C:\WINDOWS\help\sers9733.exe
O4 - HKLM\..\Run: [foxctxh3313] C:\WINDOWS\help\xqpl7701.exe
O4 - HKLM\..\Run: [foxyndz2882] C:\WINDOWS\help\jlnv3234.exe
O4 - HKLM\..\Run: [foxznvk8256] C:\WINDOWS\help\yzdf6024.exe
O4 - HKLM\..\Run: [foxstsn8745] C:\WINDOWS\help\xtxh968.exe
O4 - HKLM\..\Run: [foxlgcu5956] C:\WINDOWS\help\rcul1457.exe
O4 - HKLM\..\Run: [foxulip8641] C:\WINDOWS\help\jmfr8667.exe
O4 - HKLM\..\Run: [foxkljk2736] C:\WINDOWS\help\srkn1352.exe
O4 - HKLM\..\Run: [foxftxo8047] C:\WINDOWS\help\irli5447.exe
O4 - HKLM\..\Run: [foxxjll3317] C:\WINDOWS\help\qsce9766.exe
O4 - HKLM\..\Run: [foxmyvx9147] C:\WINDOWS\help\wpnj6028.exe
O4 - HKLM\..\Run: [foxypjh4948] C:\WINDOWS\help\lhxv1858.exe
O4 - HKLM\..\Run: [foxpwgw4964] C:\WINDOWS\help\pvlo4233.exe
O4 - HKLM\..\Run: [foxxvgy4906] C:\WINDOWS\help\xvmf7659.exe
O4 - HKLM\..\Run: [foxgimi6240] C:\WINDOWS\help\jgzu3610.exe
O4 - HKLM\..\Run: [foxplxk8837] C:\WINDOWS\help\weiw7617.exe
O4 - HKLM\..\Run: [foxljij5768] C:\WINDOWS\help\sjhd2812.exe
O4 - HKLM\..\Run: [foxvvek6717] C:\WINDOWS\help\jpkh8478.exe
O4 - HKLM\..\Run: [foxlhrr9105] C:\WINDOWS\help\tehi9427.exe
O4 - HKLM\..\Run: [foxqvyh339] C:\WINDOWS\help\ttmy7738.exe
O4 - HKLM\..\Run: [foxuojd5027] C:\WINDOWS\help\knup1816.exe
O4 - HKLM\..\Run: [foxduhz9611] C:\WINDOWS\help\iwyr8524.exe
O4 - HKLM\..\Run: [foxehiv1113] C:\WINDOWS\help\sdgx7725.exe
O4 - HKLM\..\Run: [foxjxlw2405] C:\WINDOWS\help\ojfr6404.exe
O4 - HKLM\..\Run: [foxpddt3693] C:\WINDOWS\help\vwvl9193.exe
O4 - HKLM\..\Run: [foxjktv757] C:\WINDOWS\help\zhmx2192.exe
O4 - HKLM\..\Run: [foxwtgr920] C:\WINDOWS\help\jkwc7800.exe
O4 - HKLM\..\Run: [foxuvpk8222] C:\WINDOWS\help\xdgc679.exe
O4 - HKLM\..\Run: [foxnpvn7064] C:\WINDOWS\help\sesi934.exe
O4 - HKLM\..\Run: [foxelox4408] C:\WINDOWS\help\mvxl9774.exe
O4 - HKLM\..\Run: [foxhmgq5776] C:\WINDOWS\help\jkrk3175.exe
O4 - HKLM\..\Run: [foxlydp3772] C:\WINDOWS\help\owok1172.exe
O4 - HKLM\..\Run: [foxkfly523] C:\WINDOWS\help\khfn6483.exe
O4 - HKLM\..\Run: [foxfivy4291] C:\WINDOWS\help\jlnv3234.exe
O4 - HKLM\..\Run: [foxpuuw2927] C:\WINDOWS\help\mtlk4312.exe
O4 - HKLM\..\Run: [foxgqni271] C:\WINDOWS\help\mtlk4312.exe
O4 - HKLM\..\Run: [foxrmyu8255] C:\WINDOWS\help\rlgl7524.exe
O4 - HKLM\..\Run: [foxjyyz5583] C:\WINDOWS\help\uhgm2360.exe
O4 - HKLM\..\Run: [foxihty5571] C:\WINDOWS\help\ihdx8294.exe
O4 - HKLM\..\Run: [foxtfeo4814] C:\WINDOWS\help\pjog2673.exe
O4 - HKLM\..\Run: [foxnunq113] C:\WINDOWS\help\pvlo4233.exe
O4 - HKLM\..\Run: [foxrpjq1522] C:\WINDOWS\help\qsdr967.exe
O4 - HKLM\..\Run: [foxyhpy974] C:\WINDOWS\help\sjkl3982.exe
O4 - HKLM\..\Run: [foxjrxw498] C:\WINDOWS\help\rmyq4128.exe
O4 - HKLM\..\Run: [foxxmyx8924] C:\WINDOWS\help\oxhv5520.exe
O4 - HKLM\..\Run: [foxtgvs1418] C:\WINDOWS\help\mcqo2824.exe
O4 - HKLM\..\Run: [foxhpzi8765] C:\WINDOWS\help\wnrw3685.exe
O4 - HKLM\..\Run: [foxtkxs1288] C:\WINDOWS\help\tgth3835.exe
O4 - HKLM\..\Run: [foxsevu6231] C:\WINDOWS\help\jkwc7800.exe
O4 - HKLM\..\Run: [foxketf5089] C:\WINDOWS\help\qxrd4044.exe
O4 - HKLM\..\Run: [foxnnjm1602] C:\WINDOWS\help\qkxs8941.exe
O4 - HKLM\..\Run: [foxigef138] C:\WINDOWS\help\tdue8619.exe
O4 - HKLM\..\Run: [foxnrdj4620] C:\WINDOWS\help\lzdz845.exe
O4 - HKLM\..\Run: [foxfwhh259] C:\WINDOWS\help\mxfh7331.exe
O4 - HKLM\..\Run: [foxqrex2810] C:\WINDOWS\help\ujsl6766.exe
O4 - HKLM\..\Run: [foxwdqn4056] C:\WINDOWS\help\lqmh9096.exe
O4 - HKLM\..\Run: [foxmkkj6385] C:\WINDOWS\help\pljy477.exe
O4 - HKLM\..\Run: [foxntye8133] C:\WINDOWS\help\ssgv356.exe
O4 - HKLM\..\Run: [foxfums190] C:\WINDOWS\help\lsyc5778.exe
O4 - HKLM\..\Run: [foxcpzl3548] C:\WINDOWS\help\sipm5113.exe
O4 - HKLM\..\Run: [foxmvsc5957] C:\WINDOWS\help\mrqv1959.exe
O4 - HKLM\..\Run: [foxqfjp8955] C:\WINDOWS\help\nozr1813.exe
O4 - HKLM\..\Run: [foxkdio3101] C:\WINDOWS\help\zeiy1286.exe
O4 - HKLM\..\Run: [foxqgtj964] C:\WINDOWS\help\jswx4105.exe
O4 - HKLM\..\Run: [foxdvgd8575] C:\WINDOWS\help\edop2901.exe
O4 - HKLM\..\Run: [foxjphf8115] C:\WINDOWS\help\ijkl5811.exe
O4 - HKLM\..\Run: [foxkmuz1395] C:\WINDOWS\help\ivjd826.exe
O4 - HKLM\..\Run: [foxdtoq1943] C:\WINDOWS\help\pmvh3674.exe
O4 - HKLM\..\Run: [foxucno2403] C:\WINDOWS\help\zcqo4653.exe
O4 - HKLM\..\Run: [foxshef4977] C:\WINDOWS\help\vqqj7362.exe
O4 - HKLM\..\Run: [foxxciu3711] C:\WINDOWS\help\sipm5113.exe
O4 - HKLM\..\Run: [foxdhsm5813] C:\WINDOWS\help\mpkg1093.exe
O4 - HKLM\..\Run: [foxwpjp1125] C:\WINDOWS\help\mpkg1093.exe
O4 - HKLM\..\Run: [foxfdek6722] C:\WINDOWS\help\wilr6422.exe
O4 - HKLM\..\Run: [foxyvtk3536] C:\WINDOWS\help\djhi9433.exe
O4 - HKLM\..\Run: [foxnzdh926] C:\WINDOWS\help\xewi6246.exe
O4 - HKLM\..\Run: [foxkoeg122] C:\WINDOWS\help\rgom8871.exe
O4 - HKLM\..\Run: [foxolnx9248] C:\WINDOWS\help\izhz7271.exe
O4 - HKLM\..\Run: [foxktfe4560] C:\WINDOWS\help\mife3636.exe
O4 - HKLM\..\Run: [foxnriw9235] C:\WINDOWS\help\mrqv1959.exe
O4 - HKLM\..\Run: [foxlsyn7650] C:\WINDOWS\help\jxfg332.exe
O4 - HKLM\..\Run: [foxlsci7621] C:\WINDOWS\help\jyhm3787.exe
O4 - HKLM\..\Run: [foxixrl3680] C:\WINDOWS\help\vikp5366.exe
O4 - HKLM\..\Run: [foxpixt9102] C:\WINDOWS\help\lxku1947.exe
O4 - HKLM\..\Run: [foxtxmo6160] C:\WINDOWS\help\hgtj6391.exe
O4 - HKLM\..\Run: [foxhdnk9507] C:\WINDOWS\help\jydl362.exe
O4 - HKLM\..\Run: [foxksep1076] C:\WINDOWS\help\ymgf7630.exe
O4 - HKLM\..\Run: [foxjfdv4388] C:\WINDOWS\help\fjpi2218.exe
O4 - HKLM\..\Run: [foxoplw5693] C:\WINDOWS\help\hlgs7099.exe
O4 - HKLM\..\Run: [foxuslt2777] C:\WINDOWS\help\rgom8871.exe
O4 - HKLM\..\Run: [foxdgei4919] C:\WINDOWS\help\olln1667.exe
O4 - HKLM\..\Run: [foxxzpg8307] C:\WINDOWS\help\nvou8404.exe
O4 - HKLM\..\Run: [foxkjjs5902] C:\WINDOWS\help\shup6254.exe
O4 - HKLM\..\Run: [foxggvg2774] C:\WINDOWS\help\jplq8613.exe
O4 - HKLM\..\Run: [foxuyrr3543] C:\WINDOWS\help\vire1018.exe
O4 - HKLM\..\Run: [foxwyyw9687] C:\WINDOWS\help\hwnn11.exe
O4 - HKLM\..\Run: [foxnoen4855] C:\WINDOWS\help\eufs6424.exe
O4 - HKLM\..\Run: [foxgocu3714] C:\WINDOWS\help\syor5488.exe
O4 - HKLM\..\Run: [foxjvsq167] C:\WINDOWS\help\mtgl7566.exe
O4 - HKLM\..\Run: [foxjqer5889] C:\WINDOWS\help\fmxe5484.exe
O4 - HKLM\..\Run: [foxdwwo2924] C:\WINDOWS\help\ivgp8600.exe
O4 - HKLM\..\Run: [foxgjdi6069] C:\WINDOWS\help\zfym5635.exe
O4 - HKLM\..\Run: [foxzedk9733] C:\WINDOWS\help\fpgf8780.exe
O4 - HKLM\..\Run: [foxmrtk7257] C:\WINDOWS\help\xkgi2444.exe
O4 - HKLM\..\Run: [foxwqei4543] C:\WINDOWS\help\nuqp9420.exe
O4 - HKLM\..\Run: [foxinjf7583] C:\WINDOWS\help\lwvi9967.exe
O4 - HKLM\..\Run: [foxqpqv5053] C:\WINDOWS\help\vqmh3937.exe
O4 - HKLM\..\Run: [foxxkjj1226] C:\WINDOWS\help\drnq344.exe
O4 - HKLM\..\Run: [foxwknl4651] C:\WINDOWS\help\pskw4497.exe
O4 - HKLM\..\Run: [foxverv9804] C:\WINDOWS\help\ieuo2878.exe
O4 - HKLM\..\Run: [foxiqlp7299] C:\WINDOWS\help\tkts2516.exe
O4 - HKLM\..\Run: [foxsmvp1481] C:\WINDOWS\help\qpus4351.exe
O4 - HKLM\..\Run: [foxdrks4376] C:\WINDOWS\help\hwnn11.exe
O4 - HKLM\..\Run: [foxellt7633] C:\WINDOWS\help\vqqj7362.exe
O4 - HKLM\..\Run: [foxrmiz1787] C:\WINDOWS\help\vxor2477.exe
O4 - HKLM\..\Run: [foxsjru1640] C:\WINDOWS\help\pvst7763.exe
O4 - HKLM\..\Run: [foxxdir2656] C:\WINDOWS\help\qjnt5868.exe
O4 - HKLM\..\Run: [foxnjii8381] C:\WINDOWS\help\topx5659.exe
O4 - HKLM\..\Run: [foxvjnd2949] C:\WINDOWS\help\mwfn2782.exe
O4 - HKLM\..\Run: [foxrdlv3158] C:\WINDOWS\help\mpkg1093.exe
O4 - HKLM\..\Run: [foxpoos6709] C:\WINDOWS\help\ywmq7087.exe
O4 - HKLM\..\Run: [foxezqw5789] C:\WINDOWS\help\nuqp9420.exe
O4 - HKLM\..\Run: [foxpclz8269] C:\WINDOWS\help\dist8500.exe
O4 - HKLM\..\Run: [foxrpeq8106] C:\WINDOWS\help\ninx981.exe
O4 - HKLM\..\Run: [foxnpxx8244] C:\WINDOWS\help\wgoo5154.exe
O4 - HKLM\..\Run: [foxruew8005] C:\WINDOWS\help\qvho817.exe
O4 - HKLM\..\Run: [foxwtin900] C:\WINDOWS\help\wgoo5154.exe
O4 - HKLM\..\Run: [foxyxmq2443] C:\WINDOWS\help\pdhu717.exe
O4 - HKLM\..\Run: [foxjncd1778] C:\WINDOWS\help\vzkl3611.exe
O4 - HKLM\..\Run: [foxwxke1970] C:\WINDOWS\help\tjeg4827.exe
O4 - HKLM\..\Run: [foxnvhu5671] C:\WINDOWS\help\reju1335.exe
O4 - HKLM\..\Run: [foxphfx1289] C:\WINDOWS\help\yyfq4920.exe
O4 - HKLM\..\Run: [foxhvrc5308] C:\WINDOWS\help\htfy4489.exe
O4 - HKLM\..\Run: [foxlrew9866] C:\WINDOWS\help\lflx4121.exe
O4 - HKLM\..\Run: [foxmwiz1410] C:\WINDOWS\help\omhu4000.exe
O4 - HKLM\..\Run: [foxcsdt2209] C:\WINDOWS\help\fetx8018.exe
O4 - HKLM\..\Run: [foxgdpn5237] C:\WINDOWS\help\jxgu2578.exe
O4 - HKLM\..\Run: [foxjqgv1619] C:\WINDOWS\help\fjrl7947.exe
O4 - HKLM\..\Run: [foxdlcd3639] C:\WINDOWS\help\zoqe9657.exe
O4 - HKLM\..\Run: [foxvdyj2116] C:\WINDOWS\help\iojv5730.exe
O4 - HKLM\..\Run: [foxding6947] C:\WINDOWS\help\hwit4330.exe
O4 - HKLM\..\Run: [foxjtmk1431] C:\WINDOWS\help\yrey6349.exe
O4 - HKLM\..\Run: [foxdchh8465] C:\WINDOWS\help\ywuq2882.exe
O4 - HKLM\..\Run: [foxnqql2593] C:\WINDOWS\help\tjeg4827.exe
O4 - HKLM\..\Run: [foxsfjj7164] C:\WINDOWS\help\qdyc5036.exe
O4 - HKLM\..\Run: [foxruwe2325] C:\WINDOWS\help\mvtj5304.exe
O4 - HKLM\..\Run: [foxcqst172] C:\WINDOWS\help\hzoi4141.exe
O4 - HKLM\..\Run: [foxsvgw8623] C:\WINDOWS\help\rllh9874.exe
O4 - HKLM\..\Run: [foxmyrw2392] C:\WINDOWS\help\reju1335.exe
O4 - HKLM\..\Run: [foxlnvy4296] C:\WINDOWS\help\ndwo6856.exe
O4 - HKLM\..\Run: [foxwvrh1863] C:\WINDOWS\help\gzde5627.exe
O4 - HKLM\..\Run: [foxxiqj3393] C:\WINDOWS\help\ksim374.exe
O4 - HKLM\..\Run: [foxqeol2352] C:\WINDOWS\help\vdtf4573.exe
O4 - HKLM\..\Run: [foxmmgo7663] C:\WINDOWS\help\okrj5062.exe
O4 - HKLM\..\Run: [foxgtmh4422] C:\WINDOWS\help\wmgk9411.exe
O4 - HKLM\..\Run: [foxygem6701] C:\WINDOWS\help\wosh6104.exe
O4 - HKLM\..\Run: [foxthkj76] C:\WINDOWS\help\svho4476.exe
O4 - HKLM\..\Run: [foxieue5805] C:\WINDOWS\help\sexh1009.exe
O4 - HKLM\..\Run: [foxxroo9737] C:\WINDOWS\help\sexh1009.exe
O4 - HKLM\..\Run: [foxfveh7878] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxdumy3027] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxfnlr6159] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxhphy4436] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxqtpo7092] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxmzqd5741] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxnxtp5683] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxcpxt4633] C:\WINDOWS\help\mphw3262.exe
O4 - HKLM\..\Run: [foxvxow9944] C:\WINDOWS\help\yvcr7343.exe
O4 - HKLM\..\Run: [foxhewm2600] C:\WINDOWS\help\yvcr7343.exe
O4 - HKLM\..\Run: [foxiymj5879] C:\WINDOWS\help\yvcr7343.exe
O4 - HKLM\..\Run: [foxcupw7681] C:\WINDOWS\help\ifng1622.exe
O4 - HKLM\..\Run: [foxgimn3976] C:\WINDOWS\help\qqmg4324.exe
O4 - HKLM\..\Run: [foxuysu4599] C:\WINDOWS\help\qqmg4324.exe
O4 - HKLM\..\Run: [foxnxut1124] C:\WINDOWS\help\rnre8477.exe
O4 - HKLM\..\Run: [foxpnnk961] C:\WINDOWS\help\hryx5867.exe
O4 - HKLM\..\Run: [foxgjgu8304] C:\WINDOWS\help\hryx5867.exe
O4 - HKLM\..\Run: [foxmpgn2860] C:\WINDOWS\help\fpis1016.exe
O4 - HKLM\..\Run: [foxilvc3157] C:\WINDOWS\help\rnre8477.exe
O4 - HKLM\..\Run: [foxeyvu2535] C:\WINDOWS\help\hljy4920.exe
O4 - HKLM\..\Run: [foxjfhd2209] C:\WINDOWS\help\jmey9741.exe
O4 - HKLM\..\Run: [foxlgyd7031] C:\WINDOWS\help\lvil5570.exe
O4 - HKLM\..\Run: [foxnjnt1942] C:\WINDOWS\help\dhxs5246.exe
O4 - HKLM\..\Run: [foxrkle4923] C:\WINDOWS\help\lppr4652.exe
O4 - HKLM\..\Run: [foxnumv3472] C:\WINDOWS\help\qqnz7634.exe
O4 - HKLM\..\Run: [foxplds3338] C:\WINDOWS\help\gsxl4966.exe
O4 - HKLM\..\Run: [foxhmvn2255] C:\WINDOWS\help\mdot6183.exe
O4 - HKLM\..\Run: [foxfwfw2418] C:\WINDOWS\help\orfp6049.exe
O4 - HKLM\..\Run: [foxxwdm6010] C:\WINDOWS\help\vtqw428.exe
O4 - HKLM\..\Run: [foxqunl1661] C:\WINDOWS\help\dfht5129.exe
O4 - HKLM\..\Run: [foxqimn3192] C:\WINDOWS\help\wffk8721.exe
O4 - HKLM\..\Run: [foxxnoy7717] C:\WINDOWS\help\odqj4372.exe
O4 - HKLM\..\Run: [foxkofd6771] C:\WINDOWS\help\dumm3439.exe
O4 - HKLM\..\Run: [foxjids5199] C:\WINDOWS\help\yjdf3385.exe
O4 - HKLM\..\Run: [foxeoko729] C:\WINDOWS\help\popl5902.exe
O4 - HKLM\..\Run: [foxuhgm1046] C:\WINDOWS\help\dmno4840.exe
O4 - HKLM\..\Run: [foxcisr7177] C:\WINDOWS\help\jyih9381.exe
O4 - HKLM\..\Run: [foxheii1706] C:\WINDOWS\help\wnyi1611.exe
O4 - HKLM\..\Run: [foxflyn1723] C:\WINDOWS\help\rell6909.exe
O4 - HKLM\..\Run: [foxwqir3429] C:\WINDOWS\help\wmdg5977.exe
O4 - HKLM\..\Run: [foxrejy5462] C:\WINDOWS\help\pywk9878.exe
O4 - HKLM\..\Run: [foxmxws5788] C:\WINDOWS\help\cwix9121.exe
O4 - HKLM\..\Run: [foxcmyw4868] C:\WINDOWS\help\ukjg1155.exe
O4 - HKLM\..\Run: [foxhgny5913] C:\WINDOWS\help\pedf9719.exe
O4 - HKLM\..\Run: [foxqzec6850] C:\WINDOWS\help\jwsj8314.exe
O4 - HKLM\..\Run: [foxyncc9551] C:\WINDOWS\help\utfq7528.exe
O4 - HKLM\..\Run: [foxhmyz7820] C:\WINDOWS\help\gsdx532.exe
O4 - HKLM\..\Run: [foxlhty9230] C:\WINDOWS\help\gsdx532.exe
O4 - HKLM\..\Run: [foxgsvi1263] C:\WINDOWS\help\xiqd9255.exe
O4 - HKLM\..\Run: [foxrmvm3755] C:\WINDOWS\help\jnww1941.exe
O4 - HKLM\..\Run: [foxlqin7523] C:\WINDOWS\help\ukjg1155.exe
O4 - HKLM\..\Run: [foxvpoe8025] C:\WINDOWS\help\jkts3300.exe
O4 - HKLM\..\Run: [foxeqfc6411] C:\WINDOWS\help\gsdx532.exe
O4 - HKLM\..\Run: [foxhmwh7850] C:\WINDOWS\help\kvlk235.exe
O4 - HKLM\..\Run: [foxsisg8146] C:\WINDOWS\help\lqlr4567.exe
O4 - HKLM\..\Run: [foxoehk7272] C:\WINDOWS\help\rfhc1364.exe
O4 - HKLM\..\Run: [foxswee8652] C:\WINDOWS\help\erde2313.exe
O4 - HKLM\..\Run: [foxflyg9602] C:\WINDOWS\help\skjl2936.exe
O4 - HKLM\..\Run: [foxgdow698] C:\WINDOWS\help\lrhf4625.exe
O4 - HKLM\..\Run: [foxtehn226] C:\WINDOWS\help\ezrk578.exe
O4 - HKLM\..\Run: [foxljml5863] C:\WINDOWS\help\nkji9983.exe
O4 - HKLM\..\Run: [foxwdmp8355] C:\WINDOWS\help\yekn2476.exe
O4 - HKLM\..\Run: [foxgtpm7866] C:\WINDOWS\help\gsyf561.exe
O4 - HKLM\..\Run: [foxdvip9765] C:\WINDOWS\help\jooj8574.exe
O4 - HKLM\..\Run: [foxwqxp6578] C:\WINDOWS\help\mpit9912.exe
O4 - HKLM\..\Run: [foxojfw7201] C:\WINDOWS\help\ucmp6010.exe
O4 - HKLM\..\Run: [foxlwwk4086] C:\WINDOWS\help\vjon1067.exe
O4 - HKLM\..\Run: [foxgtnf4412] C:\WINDOWS\help\nmvq3191.exe
O4 - HKLM\..\Run: [foxwqgy1174] C:\WINDOWS\help\losh7933.exe
O4 - HKLM\..\Run: [foxwtjs3299] C:\WINDOWS\help\jfyi6796.exe
O4 - HKLM\..\Run: [foxfnku2839] C:\WINDOWS\help\fzpd7122.exe
O4 - HKLM\..\Run: [foxegto4575] C:\WINDOWS\help\dtnr5550.exe
O4 - HKLM\..\Run: [foxdziw7380] C:\WINDOWS\help\lxtt7732.exe
O4 - HKLM\..\Run: [foxohlf7113] C:\WINDOWS\help\yqfc4065.exe
O4 - HKLM\..\Run: [foxdkdf1355] C:\WINDOWS\help\dlwm7285.exe
O4 - HKLM\..\Run: [foxveuf7635] C:\WINDOWS\help\uqvw1977.exe
O4 - HKLM\..\Run: [foxqvxh7009] C:\WINDOWS\help\zqyy640.exe
O4 - HKLM\..\Run: [foxdkwd7929] C:\WINDOWS\help\nnnd9824.exe
O4 - HKLM\..\Run: [foxyjyz9681] C:\WINDOWS\help\whol4099.exe
O4 - HKLM\..\Run: [foxyylo1388] C:\WINDOWS\help\pedf9719.exe
O4 - HKLM\..\Run: [foxdwdl5284] C:\WINDOWS\help\rxgf6924.exe
O4 - HKLM\..\Run: [foxkkes1441] C:\WINDOWS\help\ropk5176.exe
O4 - HKLM\..\Run: [foxkqql5603] C:\WINDOWS\help\xpdx2392.exe
O4 - HKLM\..\Run: [foxvndt4817] C:\WINDOWS\help\pihx9560.exe
O4 - HKLM\..\Run: [foxsqpu3291] C:\WINDOWS\help\xtfx2263.exe
O4 - HKLM\..\Run: [foxfghk4299] C:\WINDOWS\help\rwrs6001.exe
O4 - HKLM\..\Run: [foxwedf5008] C:\WINDOWS\help\fyuc539.exe
O4 - HKLM\..\Run: [foxfden4448] C:\WINDOWS\help\dxvy2291.exe
O4 - HKLM\..\Run: [foxizkq2579] C:\WINDOWS\help\dxvy2291.exe
O4 - HKLM\..\Run: [foxwfwc7197] C:\WINDOWS\help\hpin2564.exe
O4 - HKLM\..\Run: [foxszmu7523] C:\WINDOWS\help\kwde8988.exe
O4 - HKLM\..\Run: [foxlssw6365] C:\WINDOWS\help\oeiw8730.exe
O4 - HKLM\..\Run: [foxvves5508] C:\WINDOWS\help\inqo2447.exe
O4 - HKLM\..\Run: [foxdmsk3592] C:\WINDOWS\help\kyuu9076.exe
O4 - HKLM\..\Run: [foxudgu2346] C:\WINDOWS\help\hpin2564.exe
O4 - HKLM\..\Run: [foxcdep1844] C:\WINDOWS\help\vwed4864.exe
O4 - HKLM\..\Run: [foxqwuc9188] C:\WINDOWS\help\oijd8620.exe
O4 - HKLM\..\Run: [foxesty5194] C:\WINDOWS\help\cyvw7905.exe
O4 - HKLM\..\Run: [foxmqyg6277] C:\WINDOWS\help\sjjs5057.exe
O4 - HKLM\..\Run: [foxoefx9422] C:\WINDOWS\help\cyvw7905.exe
O4 - HKLM\..\Run: [foxgiio1606] C:\WINDOWS\help\glxj7595.exe
O4 - HKLM\..\Run: [foxjhnq9736] C:\WINDOWS\help\iyrx7432.exe
O4 - HKLM\..\Run: [foxcckl5240] C:\WINDOWS\help\rguy147.exe
O4 - HKLM\..\Run: [foxjsoc4721] C:\WINDOWS\help\nkhv2134.exe
O4 - HKLM\..\Run: [foxhfvl4885] C:\WINDOWS\help\udgq8218.exe
O4 - HKLM\..\Run: [foxueyy8949] C:\WINDOWS\help\fokm4316.exe
O4 - HKLM\..\Run: [foxsfoi3910] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxyloy8464] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxwqzf2154] C:\WINDOWS\help\yimj7951.exe
O4 - HKLM\..\Run: [foxsxsd7436] C:\WINDOWS\help\skdw1661.exe
O4 - HKLM\..\Run: [foxylmg8493] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxpchf5909] C:\WINDOWS\help\yjgn4555.exe
O4 - HKLM\..\Run: [foxjgrg9677] C:\WINDOWS\help\pfwx1899.exe
O4 - HKLM\..\Run: [foxgktw4813] C:\WINDOWS\help\kqvw477.exe
O4 - HKLM\..\Run: [foxzhmy8594] C:\WINDOWS\help\iltd2389.exe
O4 - HKLM\..\Run: [foxmktz7766] C:\WINDOWS\help\xnow1305.exe
O4 - HKLM\..\Run: [foxdmmc6712] C:\WINDOWS\help\fqwu7524.exe
O4 - HKLM\..\Run: [foxgncy8109] C:\WINDOWS\help\ujxd4722.exe
O4 - HKLM\..\Run: [foxgoxg8138] C:\WINDOWS\help\etfw820.exe
O4 - HKLM\..\Run: [foxymkm8523] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxzwli25] C:\WINDOWS\help\wsnk1234.exe
O4 - HKLM\..\Run: [foxwndd6938] C:\WINDOWS\help\xfng2735.exe
O4 - HKLM\..\Run: [foxiujl6019] C:\WINDOWS\help\opqr8311.exe
O4 - HKLM\..\Run: [foxnjif3986] C:\WINDOWS\help\mpkd6697.exe
O4 - HKLM\..\Run: [foxxnps6642] C:\WINDOWS\help\qhtw1386.exe
O4 - HKLM\..\Run: [foxpjot5601] C:\WINDOWS\help\ndxj168.exe
O4 - HKLM\..\Run: [foxklug2460] C:\WINDOWS\help\tgux6090.exe
O4 - HKLM\..\Run: [foxhyto2740] C:\WINDOWS\help\opqr8311.exe
O4 - HKLM\..\Run: [foxryqy8674] C:\WINDOWS\help\ghvm5451.exe
O4 - HKLM\..\Run: [foxoilr3928] C:\WINDOWS\help\ntqx8211.exe
O4 - HKLM\..\Run: [foxlvye7386] C:\WINDOWS\help\skyh9415.exe
O4 - HKLM\..\Run: [foxhgqi2698] C:\WINDOWS\help\jedc97.exe
O4 - HKLM\..\Run: [foxvxsc3380] C:\WINDOWS\help\mqii6726.exe
O4 - HKLM\..\Run: [foxyhmq9803] C:\WINDOWS\help\tgux6090.exe
O4 - HKLM\..\Run: [foxpdfd7148] C:\WINDOWS\help\cmuq645.exe
O4 - HKLM\..\Run: [foxpnpu5471] C:\WINDOWS\help\eple5526.exe
O4 - HKLM\..\Run: [foxegst7934] C:\WINDOWS\help\kxyn6743.exe
O4 - HKLM\..\Run: [foxpnoc5500] C:\WINDOWS\help\jpim8507.exe
O4 - HKLM\..\Run: [foxmokr7340] C:\WINDOWS\help\otsr8181.exe
O4 - HKLM\..\Run: [foxgjig2815] C:\WINDOWS\help\njhy9858.exe
O4 - HKLM\..\Run: [foxjqdu9239] C:\WINDOWS\help\ntqx8211.exe
O4 - HKLM\..\Run: [foxljgo5797] C:\WINDOWS\help\lump52.exe
O4 - HKLM\..\Run: [foxuewj6704] C:\WINDOWS\help\iwfs1950.exe
O4 - HKLM\..\Run: [foxucir43] C:\WINDOWS\help\jedc97.exe
O4 - HKLM\..\Run: [foxyspt4760] C:\WINDOWS\help\tilp2753.exe
O4 - HKLM\..\Run: [foxmezs8988] C:\WINDOWS\help\mpit3242.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...?p=ZCxdm491YYAU
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context

BC AdBot (Login to Remove)

 


#2 agrarianmonk

agrarianmonk

  • Members
  • 522 posts
  • OFFLINE
  •  
  • Local time:01:28 PM

Posted 29 June 2006 - 02:36 AM

Hi,

Welcome to BleepingComputer. I will be more than happy to help you work on your problems.
Please give me some time to review your log as this can be a lengthy process. As soon as a BleepingComputer Staff Expert reviews my fix, I will post it for you.
In the mean time, if any problems occur. Please let me know.
Please only use this topic to reply to. Do not start another thread.
The fixes we will use are specific to your problems and should only be used for this issue on this machine.
If you’re unsure of anything at all please stop and ask!
agrarianmonk

Posted Image

Requests for help via PM will be ignored. Please post on the forums instead :)
Please be courteous, polite, and say thank you.
Please post the final results, good or bad. We like to know!

#3 broncos

broncos
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Victoria
  • Local time:06:28 AM

Posted 29 June 2006 - 02:51 AM

Thank You
Would this worm also let in other trojans access the computer.
Also does it have an affect on trying to get onto the internet, as I have to sometimes restart the computer.
Thanks

#4 agrarianmonk

agrarianmonk

  • Members
  • 522 posts
  • OFFLINE
  •  
  • Local time:01:28 PM

Posted 29 June 2006 - 04:35 AM

Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm

**************************************************

Open HijackThis, click Config, click Misc Tools
Click "Open Uninstall Manager"
Click "Save List" (generates uninstall_list.txt)
Click Save, copy and paste the results in your next post.

**************************************************

Jotti File Submission:
  • Please go to Jotti's malware scan
  • Copy and paste the following file path into the "File to upload & scan"box on the top of the page:
    • C:\WINDOWS\help\vdws3479.exe
  • Click on the submit button
  • Please post the results in your next reply.
Please repeat the Jotti submission for the following file:

C:\windows\rundll32.exe

**************************************************

Your previous Hijackthis log is incomplete.

In your next post, please post
  • your smitfraudfix log
  • hijackthis log
  • jotti results (for both files)
  • uninstall list
in their entirety. you will need to post the logs in different posts (separate the hijackthis log into different parts as well) to ensure that no logs are cut off.
agrarianmonk

Posted Image

Requests for help via PM will be ignored. Please post on the forums instead :)
Please be courteous, polite, and say thank you.
Please post the final results, good or bad. We like to know!

#5 broncos

broncos
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Victoria
  • Local time:06:28 AM

Posted 29 June 2006 - 08:19 PM

Thanks again I can post all except for the jotti resuts for C:\windows\help\vdws3479.exe as it says file does not exist.

First post is the smitfraudfix log

SmitFraudFix v2.65

Scan done at 10:31:54.56, Fri 30/06/2006
Run from C:\Documents and Settings\user\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix ran in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

C:\WINDOWS\system32\atmclk.exe FOUND !
C:\WINDOWS\system32\dcomcfg.exe FOUND !
C:\WINDOWS\system32\hp???.tmp FOUND !
C:\WINDOWS\system32\hp????.tmp FOUND !
C:\WINDOWS\system32\ld????.tmp FOUND !
C:\WINDOWS\system32\msbe.dll FOUND !
C:\WINDOWS\system32\ot.ico FOUND !
C:\WINDOWS\system32\regperf.exe FOUND !
C:\WINDOWS\system32\simpole.tlb FOUND !
C:\WINDOWS\system32\stdole3.tlb FOUND !
C:\WINDOWS\system32\ts.ico FOUND !
C:\WINDOWS\system32\1024\ FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\user\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\user\FAVORI~1

C:\DOCUME~1\user\FAVORI~1\Antivirus Test Online.url FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» Desktop

C:\DOCUME~1\ALLUSE~1\Desktop\Online Security Guide.url FOUND !
C:\DOCUME~1\ALLUSE~1\Desktop\Security Troubleshooting.url FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="http://www.commbank.com.au/CommonImages/CBA_Logo.gif"
"SubscribedURL"="http://www.commbank.com.au/CommonImages/CBA_Logo.gif"
"FriendlyName"=""

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{259BA022-2005-45E9-A965-10EDB9C00605}"="Windows Updater"

[HKEY_CLASSES_ROOT\CLSID\{259BA022-2005-45E9-A965-10EDB9C00605}\InProcServer32]
@="C:\WINDOWS\g265296.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{259BA022-2005-45E9-A965-10EDB9C00605}\InProcServer32]
@="C:\WINDOWS\g265296.dll"


»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

#6 broncos

broncos
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Victoria
  • Local time:06:28 AM

Posted 29 June 2006 - 08:22 PM

My second post is the hijackthis log Part 1 the 2nd part is on my last post sorry!

Logfile of HijackThis v1.99.1
Scan saved at 10:38:34 AM, on 30/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\LxrSII1s.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\system32\dcomcfg.exe
C:\WINDOWS\system32\atmclk.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Telstra\Toolbar\bpumTray.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\windows\rundll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\WINDOWS\system32\ctfmon.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WINDOWS\System32\cidaemon.exe
C:\Documents and Settings\user\My Documents\HiJackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.optima.com.au
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - blank (file missing)
O2 - BHO: (no name) - {062492AF-392E-479D-BF52-A7A4BCA00307} - C:\WINDOWS\compstuic.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ActivateBand Class - {4C7B6DE1-99A4-4CF1-8B44-68889900E1D0} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O2 - BHO: Nothing - {5f4c3d09-b3b9-4f88-aa82-31332fee1c08} - C:\WINDOWS\system32\hp100.tmp
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: BigPond Toolbar - {7A431EC4-CC21-4DF7-9DB1-A2CF74C4CC98} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O4 - HKLM\..\Run: [foxwjsm5782] C:\WINDOWS\help\vdws3479.exe
O4 - HKLM\..\Run: [foxdfmr7221] C:\WINDOWS\help\vpvj8493.exe
O4 - HKLM\..\Run: [foxijhk5448] C:\WINDOWS\help\xysi5340.exe
O4 - HKLM\..\Run: [foxsine7005] C:\WINDOWS\help\vgdq4375.exe
O4 - HKLM\..\Run: [foxlowt3231] C:\WINDOWS\help\ynji20.exe
O4 - HKLM\..\Run: [foxlfhy1483] C:\WINDOWS\help\ifho2621.exe
O4 - HKLM\..\Run: [foxrrvs3655] C:\WINDOWS\help\vlye4304.exe
O4 - HKLM\..\Run: [foxecse5904] C:\WINDOWS\help\uxjl7369.exe
O4 - HKLM\..\Run: [foxxpde6519] C:\WINDOWS\help\zezk5625.exe
O4 - HKLM\..\Run: [foxnfmp5382] C:\WINDOWS\help\wicu7306.exe
O4 - HKLM\..\Run: [foxvsgk5887] C:\WINDOWS\help\ynji20.exe
O4 - HKLM\..\Run: [foxnhzq845] C:\WINDOWS\help\yduk9297.exe
O4 - HKLM\..\Run: [foxhzte2894] C:\WINDOWS\help\ypnf917.exe
O4 - HKLM\..\Run: [foxkklh7092] C:\WINDOWS\help\xivg397.exe
O4 - HKLM\..\Run: [foxkxfq9910] C:\WINDOWS\help\ifji2592.exe
O4 - HKLM\..\Run: [foxfnlv555] C:\WINDOWS\help\wrtx225.exe
O4 - HKLM\..\Run: [foxvrhn4658] C:\WINDOWS\help\xvqi5470.exe
O4 - HKLM\..\Run: [foxkexf7469] C:\WINDOWS\help\vvfz9230.exe
O4 - HKLM\..\Run: [foxqggy9004] C:\WINDOWS\help\vdwv4534.exe
O4 - HKLM\..\Run: [foxqncx9609] C:\WINDOWS\help\wvtg125.exe
O4 - HKLM\..\Run: [foxhtje987] C:\WINDOWS\help\xlyx2522.exe
O4 - HKLM\..\Run: [foxfkhz2998] C:\WINDOWS\help\uwkp6140.exe
O4 - HKLM\..\Run: [foxysql2630] C:\WINDOWS\help\zonr5148.exe
O4 - HKLM\..\Run: [foxcpyq1284] C:\WINDOWS\help\yufi3965.exe
O4 - HKLM\..\Run: [foxtrii7639] C:\WINDOWS\help\yloo9931.exe
O4 - HKLM\..\Run: [foxkfpd618] C:\WINDOWS\help\yvdo3994.exe
O4 - HKLM\..\Run: [EPSON Stylus CX3100] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P19 "EPSON Stylus CX3100" /O6 "USB001" /M "Stylus CX3100"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BigPond Toolbar] "C:\Program Files\Telstra\Toolbar\bpumTray.exe"
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [rundll32] c:\windows\rundll32.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [foxkyqz9787] C:\WINDOWS\help\lgyz630.exe
O4 - HKLM\..\Run: [foxyrsh6985] C:\WINDOWS\help\nlyd8747.exe
O4 - HKLM\..\Run: [foxrqyf9210] C:\WINDOWS\help\xxuf9696.exe
O4 - HKLM\..\Run: [foxwegr575] C:\WINDOWS\help\uyvv4962.exe
O4 - HKLM\..\Run: [foxsmon9005] C:\WINDOWS\help\qwed1922.exe
O4 - HKLM\..\Run: [foxjily9775] C:\WINDOWS\help\umsg6522.exe
O4 - HKLM\..\Run: [foxnxwe7918] C:\WINDOWS\help\vkip3285.exe
O4 - HKLM\..\Run: [foxwssy2251] C:\WINDOWS\help\teki5138.exe
O4 - HKLM\..\Run: [foxtfxp2444] C:\WINDOWS\help\lgyz630.exe
O4 - HKLM\..\Run: [foxhpld4532] C:\WINDOWS\help\yqmj936.exe
O4 - HKLM\..\Run: [foxocpw630] C:\WINDOWS\help\yqmj936.exe
O4 - HKLM\..\Run: [foxgwxg1123] C:\WINDOWS\help\jrwd1831.exe
O4 - HKLM\..\Run: [foxqvdx6970] C:\WINDOWS\help\nmuu3211.exe
O4 - HKLM\..\Run: [foxteqe8266] C:\WINDOWS\help\knml1626.exe
O4 - HKLM\..\Run: [foxophy9993] C:\WINDOWS\help\vfgw5535.exe
O4 - HKLM\..\Run: [foxjvug9072] C:\WINDOWS\help\upyi864.exe
O4 - HKLM\..\Run: [foxckjl8225] C:\WINDOWS\help\isgx2195.exe
O4 - HKLM\..\Run: [foxdkgl2515] C:\WINDOWS\help\nvkw2704.exe
O4 - HKLM\..\Run: [foxvwvu7726] C:\WINDOWS\help\otpg2616.exe
O4 - HKLM\..\Run: [foxhsgf2992] C:\WINDOWS\help\khgg2069.exe
O4 - HKLM\..\Run: [foxlyei9357] C:\WINDOWS\help\rsni1621.exe
O4 - HKLM\..\Run: [foxogrw500] C:\WINDOWS\help\jrwd1831.exe
O4 - HKLM\..\Run: [foxwjwk8152] C:\WINDOWS\help\oxln6815.exe
O4 - HKLM\..\Run: [foxpnni9905] C:\WINDOWS\help\yqij5226.exe
O4 - HKLM\..\Run: [foxprjp4105] C:\WINDOWS\help\ufps1312.exe
O4 - HKLM\..\Run: [foxinhx4138] C:\WINDOWS\help\poex1212.exe
O4 - HKLM\..\Run: [foxrizz8500] C:\WINDOWS\help\pefv9680.exe
O4 - HKLM\..\Run: [foxrotm5004] C:\WINDOWS\help\ntvo9496.exe
O4 - HKLM\..\Run: [foxxxey2825] C:\WINDOWS\help\puvk7714.exe
O4 - HKLM\..\Run: [foxxjgl3232] C:\WINDOWS\help\rdmj7945.exe
O4 - HKLM\..\Run: [foxytjz4703] C:\WINDOWS\help\lils4922.exe
O4 - HKLM\..\Run: [foxqkyr8664] C:\WINDOWS\help\rfwx1183.exe
O4 - HKLM\..\Run: [foxdfle2692] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxmjsr5347] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxeyyy5970] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxwjpe1282] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxcoih1320] C:\WINDOWS\help\rfwx1183.exe
O4 - HKLM\..\Run: [foxesoe2834] C:\WINDOWS\help\lils4922.exe
O4 - HKLM\..\Run: [foxtwtc8471] C:\WINDOWS\help\ytnw4002.exe
O4 - HKLM\..\Run: [foxxrns6426] C:\WINDOWS\help\pyqd9668.exe
O4 - HKLM\..\Run: [foxqmlh1901] C:\WINDOWS\help\vxpq9137.exe
O4 - HKLM\..\Run: [foxgepl852] C:\WINDOWS\help\jkqm6515.exe
O4 - HKLM\..\Run: [foxtxhv8195] C:\WINDOWS\help\jkqm6515.exe
O4 - HKLM\..\Run: [foxxnmm6527] C:\WINDOWS\help\mdmh4993.exe
O4 - HKLM\..\Run: [foxfoku9509] C:\WINDOWS\help\vtpk9237.exe
O4 - HKLM\..\Run: [foxrsnf6958] C:\WINDOWS\help\yulf4031.exe
O4 - HKLM\..\Run: [foxpwdf8333] C:\WINDOWS\help\iqns9956.exe
O4 - HKLM\..\Run: [foxzdls989] C:\WINDOWS\help\iqns9956.exe
O4 - HKLM\..\Run: [foxrfzm6480] C:\WINDOWS\help\ulem2144.exe
O4 - HKLM\..\Run: [foximog5384] C:\WINDOWS\help\oilp856.exe
O4 - HKLM\..\Run: [foxupxv2745] C:\WINDOWS\help\qwyr751.exe
O4 - HKLM\..\Run: [foxjllu7246] C:\WINDOWS\help\sgkt907.exe
O4 - HKLM\..\Run: [foxdfgj7011] C:\WINDOWS\help\twmu5209.exe
O4 - HKLM\..\Run: [foxgstp5677] C:\WINDOWS\help\iqns9956.exe
O4 - HKLM\..\Run: [foxjdpt3301] C:\WINDOWS\help\rxel3624.exe
O4 - HKLM\..\Run: [foxqsuo1554] C:\WINDOWS\help\znto5214.exe
O4 - HKLM\..\Run: [foxrdht6392] C:\WINDOWS\help\pmtu5824.exe
O4 - HKLM\..\Run: [foxhnlr5443] C:\WINDOWS\help\pywm4264.exe
O4 - HKLM\..\Run: [foxpzjs8144] C:\WINDOWS\help\plek9191.exe
O4 - HKLM\..\Run: [foxwfyp9433] C:\WINDOWS\help\qjjr9103.exe
O4 - HKLM\..\Run: [foxrqwu8040] C:\WINDOWS\help\oilp856.exe
O4 - HKLM\..\Run: [foxgmol7166] C:\WINDOWS\help\wfuj1880.exe
O4 - HKLM\..\Run: [foxhthl5401] C:\WINDOWS\help\qwyr751.exe
O4 - HKLM\..\Run: [foxmjxj9972] C:\WINDOWS\help\phld7371.exe
O4 - HKLM\..\Run: [foxqyjf4661] C:\WINDOWS\help\pqcv9119.exe
O4 - HKLM\..\Run: [foxprqf6426] C:\WINDOWS\help\kpch2683.exe
O4 - HKLM\..\Run: [foxffsj5506] C:\WINDOWS\help\owsd9136.exe
O4 - HKLM\..\Run: [foxxhfu5790] C:\WINDOWS\help\qxkt504.exe
O4 - HKLM\..\Run: [foxjlij5020] C:\WINDOWS\help\krqw9345.exe
O4 - HKLM\..\Run: [foxgqmk3611] C:\WINDOWS\help\irkh7731.exe
O4 - HKLM\..\Run: [foxlloy6635] C:\WINDOWS\help\omnq726.exe
O4 - HKLM\..\Run: [foxpgls8015] C:\WINDOWS\help\vnhs8500.exe
O4 - HKLM\..\Run: [foxrygw1206] C:\WINDOWS\help\jxlv9332.exe
O4 - HKLM\..\Run: [foxitwt5066] C:\WINDOWS\help\pgjt3917.exe
O4 - HKLM\..\Run: [foxktwp3285] C:\WINDOWS\help\wxio2.exe
O4 - HKLM\..\Run: [foxvqjw2498] C:\WINDOWS\help\jcyn5995.exe
O4 - HKLM\..\Run: [foxtrzn913] C:\WINDOWS\help\twmu5209.exe
O4 - HKLM\..\Run: [foxrhgk8422] C:\WINDOWS\help\spyo5985.exe
O4 - HKLM\..\Run: [foxidwu5766] C:\WINDOWS\help\jhhu6608.exe
O4 - HKLM\..\Run: [foxtkse3333] C:\WINDOWS\help\newi8076.exe
O4 - HKLM\..\Run: [foxcqsu7887] C:\WINDOWS\help\jjdi6666.exe
O4 - HKLM\..\Run: [foxpjsm6895] C:\WINDOWS\help\utfq7528.exe
O4 - HKLM\..\Run: [foxmllp8794] C:\WINDOWS\help\ugmj2426.exe
O4 - HKLM\..\Run: [foxuhmc37] C:\WINDOWS\help\pdcq6235.exe
O4 - HKLM\..\Run: [foxovuk5365] C:\WINDOWS\help\tvze7586.exe
O4 - HKLM\..\Run: [foxlzfx3897] C:\WINDOWS\help\spyo5985.exe
O4 - HKLM\..\Run: [foxhgmi3658] C:\WINDOWS\help\kdzu1028.exe
O4 - HKLM\..\Run: [foxldyl3956] C:\WINDOWS\help\squy6043.exe
O4 - HKLM\..\Run: [foxdmnu2307] C:\WINDOWS\help\wvxh3550.exe
O4 - HKLM\..\Run: [foxujwq3274] C:\WINDOWS\help\smpx2748.exe
O4 - HKLM\..\Run: [foxvpwh4876] C:\WINDOWS\help\jtgm1623.exe
O4 - HKLM\..\Run: [foxiqqp7385] C:\WINDOWS\help\krnn1506.exe
O4 - HKLM\..\Run: [foxenxo4315] C:\WINDOWS\help\ondq9518.exe
O4 - HKLM\..\Run: [foxphyt6808] C:\WINDOWS\help\ifqk1727.exe
O4 - HKLM\..\Run: [foxfdgx5628] C:\WINDOWS\help\jrwg9555.exe
O4 - HKLM\..\Run: [foxgkyp2778] C:\WINDOWS\help\qtqg6275.exe
O4 - HKLM\..\Run: [foxqnkd6460] C:\WINDOWS\help\nzly2584.exe
O4 - HKLM\..\Run: [foxnlsu1609] C:\WINDOWS\help\otmy9171.exe
O4 - HKLM\..\Run: [foxmvww8317] C:\WINDOWS\help\mrus4319.exe
O4 - HKLM\..\Run: [foxxiyq4639] C:\WINDOWS\help\mmjp1357.exe
O4 - HKLM\..\Run: [foxrigg9651] C:\WINDOWS\help\zspr5018.exe
O4 - HKLM\..\Run: [foxlnep6627] C:\WINDOWS\help\poie2362.exe
O4 - HKLM\..\Run: [foxinhd1864] C:\WINDOWS\help\kfpm7690.exe
O4 - HKLM\..\Run: [foxlxno4979] C:\WINDOWS\help\kthn9338.exe
O4 - HKLM\..\Run: [foxfutx3721] C:\WINDOWS\help\nptr7351.exe
O4 - HKLM\..\Run: [foxfsdy3603] C:\WINDOWS\help\qriv8777.exe
O4 - HKLM\..\Run: [foxhnuk6823] C:\WINDOWS\help\uklv70.exe
O4 - HKLM\..\Run: [foxweiy7359] C:\WINDOWS\help\trhe3512.exe
O4 - HKLM\..\Run: [foxjntr1558] C:\WINDOWS\help\xiun8141.exe
O4 - HKLM\..\Run: [foxslwp9186] C:\WINDOWS\help\itwo4269.exe
O4 - HKLM\..\Run: [foxygvw8755] C:\WINDOWS\help\qrzn1898.exe
O4 - HKLM\..\Run: [foxslsn5761] C:\WINDOWS\help\xmyu1467.exe
O4 - HKLM\..\Run: [foxmedl4573] C:\WINDOWS\help\rrvl8471.exe
O4 - HKLM\..\Run: [foxvxts8964] C:\WINDOWS\help\lkfi7284.exe
O4 - HKLM\..\Run: [foxxciw391] C:\WINDOWS\help\tgvq1676.exe
O4 - HKLM\..\Run: [foxxpft5435] C:\WINDOWS\help\viku3102.exe
O4 - HKLM\..\Run: [foxevwu8375] C:\WINDOWS\help\tsne9839.exe
O4 - HKLM\..\Run: [foxvmkh7128] C:\WINDOWS\help\vvhr8145.exe
O4 - HKLM\..\Run: [foxpfoc2516] C:\WINDOWS\help\iqtk5627.exe
O4 - HKLM\..\Run: [foxcjph8291] C:\WINDOWS\help\jdvy7099.exe
O4 - HKLM\..\Run: [foxvenq1984] C:\WINDOWS\help\wmkn9517.exe
O4 - HKLM\..\Run: [foxkjmw6007] C:\WINDOWS\help\tkpn4695.exe
O4 - HKLM\..\Run: [foxxghp6806] C:\WINDOWS\help\yprf1002.exe
O4 - HKLM\..\Run: [foxuwjx6956] C:\WINDOWS\help\jppu8718.exe
O4 - HKLM\..\Run: [foxkute4389] C:\WINDOWS\help\lzgl8684.exe
O4 - HKLM\..\Run: [foxxhxc3440] C:\WINDOWS\help\tflv9667.exe
O4 - HKLM\..\Run: [foxrpio7136] C:\WINDOWS\help\wnzx6150.exe
O4 - HKLM\..\Run: [foxwsrh3326] C:\WINDOWS\help\vjlk4301.exe
O4 - HKLM\..\Run: [foxtqxh8504] C:\WINDOWS\help\uyuf6037.exe
O4 - HKLM\..\Run: [foxsnni3565] C:\WINDOWS\help\mruq3264.exe
O4 - HKLM\..\Run: [foxnlss554] C:\WINDOWS\help\swdf1215.exe
O4 - HKLM\..\Run: [foxymle3063] C:\WINDOWS\help\njjs3160.exe
O4 - HKLM\..\Run: [foxneqc1984] C:\WINDOWS\help\mmjp1357.exe
O4 - HKLM\..\Run: [foxsium8261] C:\WINDOWS\help\nsgf9532.exe
O4 - HKLM\..\Run: [foxfkok4254] C:\WINDOWS\help\qowk972.exe
O4 - HKLM\..\Run: [foxrgov4064] C:\WINDOWS\help\wufj8021.exe
O4 - HKLM\..\Run: [foxoueu1007] C:\WINDOWS\help\qmqs6774.exe
O4 - HKLM\..\Run: [foxurjr388] C:\WINDOWS\help\uspv3140.exe
O4 - HKLM\..\Run: [foxfhhh6573] C:\WINDOWS\help\ndgs3717.exe
O4 - HKLM\..\Run: [foxvmmx430] C:\WINDOWS\help\wiim2977.exe
O4 - HKLM\..\Run: [foxvfmu5343] C:\WINDOWS\help\omiu1706.exe
O4 - HKLM\..\Run: [foxqggw8994] C:\WINDOWS\help\injh2237.exe
O4 - HKLM\..\Run: [foxkhhj9525] C:\WINDOWS\help\txlp3098.exe
O4 - HKLM\..\Run: [foxypoh5034] C:\WINDOWS\help\mxip8501.exe
O4 - HKLM\..\Run: [foxnrfr5791] C:\WINDOWS\help\tlos8054.exe
O4 - HKLM\..\Run: [foxplek8923] C:\WINDOWS\help\wvqf7744.exe
O4 - HKLM\..\Run: [foxoqjh5732] C:\WINDOWS\help\lpod6782.exe
O4 - HKLM\..\Run: [foxnjmf4072] C:\WINDOWS\help\orhi1634.exe
O4 - HKLM\..\Run: [foxuzns128] C:\WINDOWS\help\trgk4587.exe
O4 - HKLM\..\Run: [foxxuqu8388] C:\WINDOWS\help\mwle8443.exe
O4 - HKLM\..\Run: [foxlhuw9220] C:\WINDOWS\help\ikke7021.exe
O4 - HKLM\..\Run: [foxdukh9726] C:\WINDOWS\help\jrde5256.exe
O4 - HKLM\..\Run: [foxjeig4310] C:\WINDOWS\help\tpmr4499.exe
O4 - HKLM\..\Run: [foxvjkt1788] C:\WINDOWS\help\wdss1099.exe
O4 - HKLM\..\Run: [foxwqxn6568] C:\WINDOWS\help\zdmf2437.exe
O4 - HKLM\..\Run: [foxulen1876] C:\WINDOWS\help\jnwu1931.exe
O4 - HKLM\..\Run: [foxklyg2545] C:\WINDOWS\help\tipp2839.exe
O4 - HKLM\..\Run: [foxoftr471] C:\WINDOWS\help\vwcl9279.exe
O4 - HKLM\..\Run: [foxsnmn6924] C:\WINDOWS\help\nlvp3181.exe
O4 - HKLM\..\Run: [foxxchf1466] C:\WINDOWS\help\smpv2738.exe
O4 - HKLM\..\Run: [foxugnx28] C:\WINDOWS\help\pokt4607.exe
O4 - HKLM\..\Run: [foxrihv1897] C:\WINDOWS\help\qtol9634.exe
O4 - HKLM\..\Run: [foxxxxx9399] C:\WINDOWS\help\pxce7555.exe
O4 - HKLM\..\Run: [foxzqwp2532] C:\WINDOWS\help\mnpp1014.exe
O4 - HKLM\..\Run: [foxkyoo1938] C:\WINDOWS\help\monu1044.exe
O4 - HKLM\..\Run: [foxjijn1925] C:\WINDOWS\help\slyc7304.exe
O4 - HKLM\..\Run: [foxmgqk27] C:\WINDOWS\help\iyoo9591.exe
O4 - HKLM\..\Run: [foxlvce1762] C:\WINDOWS\help\ytkj5096.exe
O4 - HKLM\..\Run: [foxvzjs4418] C:\WINDOWS\help\ytkj5096.exe
O4 - HKLM\..\Run: [foxqdxs4643] C:\WINDOWS\help\olon4046.exe
O4 - HKLM\..\Run: [foxrrxh4845] C:\WINDOWS\help\pldn2541.exe
O4 - HKLM\..\Run: [foxlukh8613] C:\WINDOWS\help\ikjl4766.exe
O4 - HKLM\..\Run: [foxjehn2055] C:\WINDOWS\help\pxce7555.exe
O4 - HKLM\..\Run: [foxodls6149] C:\WINDOWS\help\uxhw5133.exe
O4 - HKLM\..\Run: [foxrfyp9829] C:\WINDOWS\help\qprn906.exe
O4 - HKLM\..\Run: [foxgjhm7220] C:\WINDOWS\help\mnpp1014.exe
O4 - HKLM\..\Run: [foxxulc2708] C:\WINDOWS\help\jdmf1324.exe
O4 - HKLM\..\Run: [foxeqgz4117] C:\WINDOWS\help\wdnx5418.exe
O4 - HKLM\..\Run: [foxohmr8303] C:\WINDOWS\help\lgyv6234.exe
O4 - HKLM\..\Run: [foxeqfh4146] C:\WINDOWS\help\uyvs567.exe
O4 - HKLM\..\Run: [foxtfve4594] C:\WINDOWS\help\monu1044.exe
O4 - HKLM\..\Run: [foxymjr1883] C:\WINDOWS\help\imkg8896.exe
O4 - HKLM\..\Run: [foxndws7654] C:\WINDOWS\help\imkg8896.exe
O4 - HKLM\..\Run: [foxgtmk2147] C:\WINDOWS\help\inll4636.exe
O4 - HKLM\..\Run: [foxrgos3009] C:\WINDOWS\help\ytkj5096.exe
O4 - HKLM\..\Run: [foxdogz7875] C:\WINDOWS\help\roit9515.exe
O4 - HKLM\..\Run: [foxlmnq3469] C:\WINDOWS\help\iyoo9591.exe
O4 - HKLM\..\Run: [foxdnil2385] C:\WINDOWS\help\jspo6179.exe
O4 - HKLM\..\Run: [foxqoff3054] C:\WINDOWS\help\qmqq5719.exe
O4 - HKLM\..\Run: [foxnrjq8160] C:\WINDOWS\help\ouhd5765.exe
O4 - HKLM\..\Run: [foxvqik1309] C:\WINDOWS\help\nrke2949.exe
O4 - HKLM\..\Run: [foxpfmp1336] C:\WINDOWS\help\lxlo872.exe
O4 - HKLM\..\Run: [foxojuy8085] C:\WINDOWS\help\olon4046.exe
O4 - HKLM\..\Run: [foxihdj6826] C:\WINDOWS\help\npww797.exe
O4 - HKLM\..\Run: [foxwgsv6047] C:\WINDOWS\help\orxs2643.exe
O4 - HKLM\..\Run: [foxsdip6373] C:\WINDOWS\help\jgtf1280.exe
O4 - HKLM\..\Run: [foxegqf9028] C:\WINDOWS\help\jgtf1280.exe
O4 - HKLM\..\Run: [foxxseu641] C:\WINDOWS\help\veuw3498.exe
O4 - HKLM\..\Run: [foxpivg4572] C:\WINDOWS\help\wxhs3352.exe
O4 - HKLM\..\Run: [foxmmdh3163] C:\WINDOWS\help\xgjd4924.exe
O4 - HKLM\..\Run: [foxmmyx9708] C:\WINDOWS\help\ksfe5873.exe
O4 - HKLM\..\Run: [foxsvhs7558] C:\WINDOWS\help\njnq8859.exe
O4 - HKLM\..\Run: [foxhnwd6784] C:\WINDOWS\help\lsdv2419.exe
O4 - HKLM\..\Run: [foxnkex6165] C:\WINDOWS\help\rejp269.exe
O4 - HKLM\..\Run: [foxswdq4133] C:\WINDOWS\help\mqgu8876.exe
O4 - HKLM\..\Run: [foxgrvo6713] C:\WINDOWS\help\refo6843.exe
O4 - HKLM\..\Run: [foxnovs8129] C:\WINDOWS\help\qmkg5499.exe
O4 - HKLM\..\Run: [foxvzzo4227] C:\WINDOWS\help\qmkg5499.exe
O4 - HKLM\..\Run: [foxhhmd4877] C:\WINDOWS\help\lvhp2260.exe
O4 - HKLM\..\Run: [foxhiem1511] C:\WINDOWS\help\qohj98.exe
O4 - HKLM\..\Run: [foxrifl7386] C:\WINDOWS\help\nmrl8700.exe
O4 - HKLM\..\Run: [foxetfc8277] C:\WINDOWS\help\imkg8896.exe
O4 - HKLM\..\Run: [foxifhx4484] C:\WINDOWS\help\tnyi7951.exe
O4 - HKLM\..\Run: [foxniov703] C:\WINDOWS\help\qfek8072.exe
O4 - HKLM\..\Run: [foxvhwk5241] C:\WINDOWS\help\zydn5860.exe
O4 - HKLM\..\Run: [foxiset9527] C:\WINDOWS\help\pfqo8348.exe
O4 - HKLM\..\Run: [foxtujn5244] C:\WINDOWS\help\mort3414.exe
O4 - HKLM\..\Run: [foxhmtd1075] C:\WINDOWS\help\rdll7955.exe
O4 - HKLM\..\Run: [foxtjgv6804] C:\WINDOWS\help\ufzk9352.exe
O4 - HKLM\..\Run: [foxcznt9740] C:\WINDOWS\help\tqgu7763.exe
O4 - HKLM\..\Run: [foxuomi1803] C:\WINDOWS\help\yipr2452.exe
O4 - HKLM\..\Run: [foxvkew5052] C:\WINDOWS\help\vrde6040.exe
O4 - HKLM\..\Run: [foxfddr1138] C:\WINDOWS\help\ttpf4513.exe
O4 - HKLM\..\Run: [foxruyp176] C:\WINDOWS\help\loho4889.exe
O4 - HKLM\..\Run: [foxpphh4398] C:\WINDOWS\help\iund7581.exe
O4 - HKLM\..\Run: [foxserp8410] C:\WINDOWS\help\rhlr7854.exe
O4 - HKLM\..\Run: [foxszjt5144] C:\WINDOWS\help\lxpn3242.exe
O4 - HKLM\..\Run: [foxmieq2179] C:\WINDOWS\help\qktn1121.exe
O4 - HKLM\..\Run: [foxitvu7360] C:\WINDOWS\help\lodm1464.exe
O4 - HKLM\..\Run: [foxmrnp531] C:\WINDOWS\help\roit9515.exe
O4 - HKLM\..\Run: [foxmixo8753] C:\WINDOWS\help\rwod2710.exe
O4 - HKLM\..\Run: [foxsrmf9999] C:\WINDOWS\help\pddn2886.exe
O4 - HKLM\..\Run: [foxrywo6620] C:\WINDOWS\help\nrke2949.exe
O4 - HKLM\..\Run: [foxgeif3981] C:\WINDOWS\help\mxhv2907.exe
O4 - HKLM\..\Run: [foxfwie5863] C:\WINDOWS\help\phym9330.exe
O4 - HKLM\..\Run: [foxnrfx196] C:\WINDOWS\help\kusf7996.exe
O4 - HKLM\..\Run: [foxmoqh5286] C:\WINDOWS\help\qoxi962.exe
O4 - HKLM\..\Run: [foxpmvu9932] C:\WINDOWS\help\rnxt7478.exe
O4 - HKLM\..\Run: [foxdkci5750] C:\WINDOWS\help\jgtf1280.exe
O4 - HKLM\..\Run: [foxjvyn234] C:\WINDOWS\help\oihq7440.exe
O4 - HKLM\..\Run: [foxreyz3006] C:\WINDOWS\help\zqfg8460.exe
O4 - HKLM\..\Run: [foxexjr393] C:\WINDOWS\help\ktei5893.exe
O4 - HKLM\..\Run: [foxqces4729] C:\WINDOWS\help\qkdx5717.exe
O4 - HKLM\..\Run: [foxsgij2789] C:\WINDOWS\help\rkuo8836.exe
O4 - HKLM\..\Run: [foxjplg4871] C:\WINDOWS\help\wvud6775.exe
O4 - HKLM\..\Run: [foxvkvl7116] C:\WINDOWS\help\syoj3357.exe
O4 - HKLM\..\Run: [foxnetf4373] C:\WINDOWS\help\yjdk1120.exe
O4 - HKLM\..\Run: [foxddym8408] C:\WINDOWS\help\uqxj9827.exe
O4 - HKLM\..\Run: [foxdjkt8061] C:\WINDOWS\help\lkvd7083.exe
O4 - HKLM\..\Run: [foxstpi5301] C:\WINDOWS\help\zpmr772.exe
O4 - HKLM\..\Run: [foxgouy318] C:\WINDOWS\help\xfpu8310.exe
O4 - HKLM\..\Run: [foxftwo3672] C:\WINDOWS\help\ktei5893.exe
O4 - HKLM\..\Run: [foxzwnw5600] C:\WINDOWS\help\rcsg8011.exe
O4 - HKLM\..\Run: [foxmnzk3182] C:\WINDOWS\help\vzgk6855.exe
O4 - HKLM\..\Run: [foxxtdn4144] C:\WINDOWS\help\wkuq5119.exe
O4 - HKLM\..\Run: [foxxwdg560] C:\WINDOWS\help\rvnu302.exe
O4 - HKLM\..\Run: [foxiwsg321] C:\WINDOWS\help\oguc4203.exe
O4 - HKLM\..\Run: [foxidfj7042] C:\WINDOWS\help\oguc4203.exe
O4 - HKLM\..\Run: [foxtidv1095] C:\WINDOWS\help\ljdi9280.exe
O4 - HKLM\..\Run: [foxtuzm6109] C:\WINDOWS\help\xdem1773.exe
O4 - HKLM\..\Run: [foxeigi2207] C:\WINDOWS\help\xdem1773.exe
O4 - HKLM\..\Run: [foxxnmp4252] C:\WINDOWS\help\mdij9292.exe
O4 - HKLM\..\Run: [foxndyk6569] C:\WINDOWS\help\zruq5094.exe
O4 - HKLM\..\Run: [foxzuyp9062] C:\WINDOWS\help\ljdi9280.exe
O4 - HKLM\..\Run: [foxtdpv9187] C:\WINDOWS\help\qkwv2292.exe
O4 - HKLM\..\Run: [foxnxxy7898] C:\WINDOWS\help\qjme284.exe
O4 - HKLM\..\Run: [foxfnlz4950] C:\WINDOWS\help\mruw8714.exe
O4 - HKLM\..\Run: [foxvttn5735] C:\WINDOWS\help\tfio5167.exe
O4 - HKLM\..\Run: [foxqqji6061] C:\WINDOWS\help\kvou5790.exe
O4 - HKLM\..\Run: [foxijnu6714] C:\WINDOWS\help\pvmf8772.exe
O4 - HKLM\..\Run: [foxikxv6467] C:\WINDOWS\help\zoqd2988.exe
O4 - HKLM\..\Run: [foxrevm771] C:\WINDOWS\help\xpep7977.exe
O4 - HKLM\..\Run: [foxkptv1160] C:\WINDOWS\help\lcer5384.exe
O4 - HKLM\..\Run: [foxwhgl6989] C:\WINDOWS\help\okun1838.exe
O4 - HKLM\..\Run: [foxgygy3046] C:\WINDOWS\help\rhmx3306.exe
O4 - HKLM\..\Run: [foxdinf278] C:\WINDOWS\help\siqk8433.exe
O4 - HKLM\..\Run: [foxnxtu4464] C:\WINDOWS\help\wruo8094.exe
O4 - HKLM\..\Run: [foxxmsq5384] C:\WINDOWS\help\swyp6685.exe
O4 - HKLM\..\Run: [foxjijg9804] C:\WINDOWS\help\mgws7174.exe
O4 - HKLM\..\Run: [foxkwyq871] C:\WINDOWS\help\weiw7617.exe
O4 - HKLM\..\Run: [foxedmr4639] C:\WINDOWS\help\orci1549.exe
O4 - HKLM\..\Run: [foxjdkz7620] C:\WINDOWS\help\orci1549.exe
O4 - HKLM\..\Run: [foxqvgd3735] C:\WINDOWS\help\sjhd2812.exe
O4 - HKLM\..\Run: [foxeigc3426] C:\WINDOWS\help\xpep7977.exe
O4 - HKLM\..\Run: [foxvzhe8842] C:\WINDOWS\help\xmtt4711.exe
O4 - HKLM\..\Run: [foxyjzs5266] C:\WINDOWS\help\tikz1554.exe
O4 - HKLM\..\Run: [foxfexc7846] C:\WINDOWS\help\pede3050.exe
O4 - HKLM\..\Run: [foxuqyl3945] C:\WINDOWS\help\ixst7412.exe
O4 - HKLM\..\Run: [foxomlj2628] C:\WINDOWS\help\svdj6656.exe
O4 - HKLM\..\Run: [foxhuex3175] C:\WINDOWS\help\tudu3172.exe
O4 - HKLM\..\Run: [foxmtzt2673] C:\WINDOWS\help\wgrw9654.exe
O4 - HKLM\..\Run: [foxperp9126] C:\WINDOWS\help\lcer5384.exe
O4 - HKLM\..\Run: [foxelmf4438] C:\WINDOWS\help\ojfr6404.exe
O4 - HKLM\..\Run: [foxuuwk390] C:\WINDOWS\help\rhmx3306.exe
O4 - HKLM\..\Run: [foxjwmd1176] C:\WINDOWS\help\tcyi3101.exe
O4 - HKLM\..\Run: [foxiptd2941] C:\WINDOWS\help\wvsn4539.exe
O4 - HKLM\..\Run: [foxxfnm6872] C:\WINDOWS\help\ouyl6764.exe
O4 - HKLM\..\Run: [foxgqps4781] C:\WINDOWS\help\ifoy3887.exe
O4 - HKLM\..\Run: [foxrwlm8863] C:\WINDOWS\help\xsgd4363.exe
O4 - HKLM\..\Run: [foxzmeg1653] C:\WINDOWS\help\wlpk9583.exe
O4 - HKLM\..\Run: [foxedsc1519] C:\WINDOWS\help\qfnk1574.exe
O4 - HKLM\..\Run: [foxzkno4990] C:\WINDOWS\help\sers9733.exe
O4 - HKLM\..\Run: [foxctxh3313] C:\WINDOWS\help\xqpl7701.exe
O4 - HKLM\..\Run: [foxyndz2882] C:\WINDOWS\help\jlnv3234.exe
O4 - HKLM\..\Run: [foxznvk8256] C:\WINDOWS\help\yzdf6024.exe
O4 - HKLM\..\Run: [foxstsn8745] C:\WINDOWS\help\xtxh968.exe
O4 - HKLM\..\Run: [foxlgcu5956] C:\WINDOWS\help\rcul1457.exe
O4 - HKLM\..\Run: [foxulip8641] C:\WINDOWS\help\jmfr8667.exe
O4 - HKLM\..\Run: [foxkljk2736] C:\WINDOWS\help\srkn1352.exe
O4 - HKLM\..\Run: [foxftxo8047] C:\WINDOWS\help\irli5447.exe
O4 - HKLM\..\Run: [foxxjll3317] C:\WINDOWS\help\qsce9766.exe
O4 - HKLM\..\Run: [foxmyvx9147] C:\WINDOWS\help\wpnj6028.exe
O4 - HKLM\..\Run: [foxypjh4948] C:\WINDOWS\help\lhxv1858.exe
O4 - HKLM\..\Run: [foxpwgw4964] C:\WINDOWS\help\pvlo4233.exe
O4 - HKLM\..\Run: [foxxvgy4906] C:\WINDOWS\help\xvmf7659.exe
O4 - HKLM\..\Run: [foxgimi6240] C:\WINDOWS\help\jgzu3610.exe
O4 - HKLM\..\Run: [foxplxk8837] C:\WINDOWS\help\weiw7617.exe
O4 - HKLM\..\Run: [foxljij5768] C:\WINDOWS\help\sjhd2812.exe
O4 - HKLM\..\Run: [foxvvek6717] C:\WINDOWS\help\jpkh8478.exe
O4 - HKLM\..\Run: [foxlhrr9105] C:\WINDOWS\help\tehi9427.exe
O4 - HKLM\..\Run: [foxqvyh339] C:\WINDOWS\help\ttmy7738.exe
O4 - HKLM\..\Run: [foxuojd5027] C:\WINDOWS\help\knup1816.exe
O4 - HKLM\..\Run: [foxduhz9611] C:\WINDOWS\help\iwyr8524.exe
O4 - HKLM\..\Run: [foxehiv1113] C:\WINDOWS\help\sdgx7725.exe
O4 - HKLM\..\Run: [foxjxlw2405] C:\WINDOWS\help\ojfr6404.exe
O4 - HKLM\..\Run: [foxpddt3693] C:\WINDOWS\help\vwvl9193.exe
O4 - HKLM\..\Run: [foxjktv757] C:\WINDOWS\help\zhmx2192.exe
O4 - HKLM\..\Run: [foxwtgr920] C:\WINDOWS\help\jkwc7800.exe
O4 - HKLM\..\Run: [foxuvpk8222] C:\WINDOWS\help\xdgc679.exe
O4 - HKLM\..\Run: [foxnpvn7064] C:\WINDOWS\help\sesi934.exe
O4 - HKLM\..\Run: [foxelox4408] C:\WINDOWS\help\mvxl9774.exe
O4 - HKLM\..\Run: [foxhmgq5776] C:\WINDOWS\help\jkrk3175.exe
O4 - HKLM\..\Run: [foxlydp3772] C:\WINDOWS\help\owok1172.exe
O4 - HKLM\..\Run: [foxkfly523] C:\WINDOWS\help\khfn6483.exe
O4 - HKLM\..\Run: [foxfivy4291] C:\WINDOWS\help\jlnv3234.exe
O4 - HKLM\..\Run: [foxpuuw2927] C:\WINDOWS\help\mtlk4312.exe
O4 - HKLM\..\Run: [foxgqni271] C:\WINDOWS\help\mtlk4312.exe
O4 - HKLM\..\Run: [foxrmyu8255] C:\WINDOWS\help\rlgl7524.exe
O4 - HKLM\..\Run: [foxjyyz5583] C:\WINDOWS\help\uhgm2360.exe
O4 - HKLM\..\Run: [foxihty5571] C:\WINDOWS\help\ihdx8294.exe
O4 - HKLM\..\Run: [foxtfeo4814] C:\WINDOWS\help\pjog2673.exe
O4 - HKLM\..\Run: [foxnunq113] C:\WINDOWS\help\pvlo4233.exe
O4 - HKLM\..\Run: [foxrpjq1522] C:\WINDOWS\help\qsdr967.exe
O4 - HKLM\..\Run: [foxyhpy974] C:\WINDOWS\help\sjkl3982.exe
O4 - HKLM\..\Run: [foxjrxw498] C:\WINDOWS\help\rmyq4128.exe
O4 - HKLM\..\Run: [foxxmyx8924] C:\WINDOWS\help\oxhv5520.exe
O4 - HKLM\..\Run: [foxtgvs1418] C:\WINDOWS\help\mcqo2824.exe
O4 - HKLM\..\Run: [foxhpzi8765] C:\WINDOWS\help\wnrw3685.exe
O4 - HKLM\..\Run: [foxtkxs1288] C:\WINDOWS\help\tgth3835.exe
O4 - HKLM\..\Run: [foxsevu6231] C:\WINDOWS\help\jkwc7800.exe
O4 - HKLM\..\Run: [foxketf5089] C:\WINDOWS\help\qxrd4044.exe
O4 - HKLM\..\Run: [foxnnjm1602] C:\WINDOWS\help\qkxs8941.exe
O4 - HKLM\..\Run: [foxigef138] C:\WINDOWS\help\tdue8619.exe
O4 - HKLM\..\Run: [foxnrdj4620] C:\WINDOWS\help\lzdz845.exe
O4 - HKLM\..\Run: [foxfwhh259] C:\WINDOWS\help\mxfh7331.exe
O4 - HKLM\..\Run: [foxqrex2810] C:\WINDOWS\help\ujsl6766.exe
O4 - HKLM\..\Run: [foxwdqn4056] C:\WINDOWS\help\lqmh9096.exe
O4 - HKLM\..\Run: [foxmkkj6385] C:\WINDOWS\help\pljy477.exe
O4 - HKLM\..\Run: [foxntye8133] C:\WINDOWS\help\ssgv356.exe
O4 - HKLM\..\Run: [foxfums190] C:\WINDOWS\help\lsyc5778.exe
O4 - HKLM\..\Run: [foxcpzl3548] C:\WINDOWS\help\sipm5113.exe
O4 - HKLM\..\Run: [foxmvsc5957] C:\WINDOWS\help\mrqv1959.exe
O4 - HKLM\..\Run: [foxqfjp8955] C:\WINDOWS\help\nozr1813.exe
O4 - HKLM\..\Run: [foxkdio3101] C:\WINDOWS\help\zeiy1286.exe
O4 - HKLM\..\Run: [foxqgtj964] C:\WINDOWS\help\jswx4105.exe
O4 - HKLM\..\Run: [foxdvgd8575] C:\WINDOWS\help\edop2901.exe
O4 - HKLM\..\Run: [foxjphf8115] C:\WINDOWS\help\ijkl5811.exe
O4 - HKLM\..\Run: [foxkmuz1395] C:\WINDOWS\help\ivjd826.exe
O4 - HKLM\..\Run: [foxdtoq1943] C:\WINDOWS\help\pmvh3674.exe
O4 - HKLM\..\Run: [foxucno2403] C:\WINDOWS\help\zcqo4653.exe
O4 - HKLM\..\Run: [foxshef4977] C:\WINDOWS\help\vqqj7362.exe
O4 - HKLM\..\Run: [foxxciu3711] C:\WINDOWS\help\sipm5113.exe
O4 - HKLM\..\Run: [foxdhsm5813] C:\WINDOWS\help\mpkg1093.exe
O4 - HKLM\..\Run: [foxwpjp1125] C:\WINDOWS\help\mpkg1093.exe
O4 - HKLM\..\Run: [foxfdek6722] C:\WINDOWS\help\wilr6422.exe
O4 - HKLM\..\Run: [foxyvtk3536] C:\WINDOWS\help\djhi9433.exe
O4 - HKLM\..\Run: [foxnzdh926] C:\WINDOWS\help\xewi6246.exe
O4 - HKLM\..\Run: [foxkoeg122] C:\WINDOWS\help\rgom8871.exe
O4 - HKLM\..\Run: [foxolnx9248] C:\WINDOWS\help\izhz7271.exe
O4 - HKLM\..\Run: [foxktfe4560] C:\WINDOWS\help\mife3636.exe
O4 - HKLM\..\Run: [foxnriw9235] C:\WINDOWS\help\mrqv1959.exe
O4 - HKLM\..\Run: [foxlsyn7650] C:\WINDOWS\help\jxfg332.exe
O4 - HKLM\..\Run: [foxlsci7621] C:\WINDOWS\help\jyhm3787.exe
O4 - HKLM\..\Run: [foxixrl3680] C:\WINDOWS\help\vikp5366.exe
O4 - HKLM\..\Run: [foxpixt9102] C:\WINDOWS\help\lxku1947.exe
O4 - HKLM\..\Run: [foxtxmo6160] C:\WINDOWS\help\hgtj6391.exe
O4 - HKLM\..\Run: [foxhdnk9507] C:\WINDOWS\help\jydl362.exe
O4 - HKLM\..\Run: [foxksep1076] C:\WINDOWS\help\ymgf7630.exe
O4 - HKLM\..\Run: [foxjfdv4388] C:\WINDOWS\help\fjpi2218.exe
O4 - HKLM\..\Run: [foxoplw5693] C:\WINDOWS\help\hlgs7099.exe
O4 - HKLM\..\Run: [foxuslt2777] C:\WINDOWS\help\rgom8871.exe
O4 - HKLM\..\Run: [foxdgei4919] C:\WINDOWS\help\olln1667.exe
O4 - HKLM\..\Run: [foxxzpg8307] C:\WINDOWS\help\nvou8404.exe
O4 - HKLM\..\Run: [foxkjjs5902] C:\WINDOWS\help\shup6254.exe
O4 - HKLM\..\Run: [foxggvg2774] C:\WINDOWS\help\jplq8613.exe
O4 - HKLM\..\Run: [foxuyrr3543] C:\WINDOWS\help\vire1018.exe
O4 - HKLM\..\Run: [foxwyyw9687] C:\WINDOWS\help\hwnn11.exe
O4 - HKLM\..\Run: [foxnoen4855] C:\WINDOWS\help\eufs6424.exe
O4 - HKLM\..\Run: [foxgocu3714] C:\WINDOWS\help\syor5488.exe
O4 - HKLM\..\Run: [foxjvsq167] C:\WINDOWS\help\mtgl7566.exe
O4 - HKLM\..\Run: [foxjqer5889] C:\WINDOWS\help\fmxe5484.exe
O4 - HKLM\..\Run: [foxdwwo2924] C:\WINDOWS\help\ivgp8600.exe
O4 - HKLM\..\Run: [foxgjdi6069] C:\WINDOWS\help\zfym5635.exe
O4 - HKLM\..\Run: [foxzedk9733] C:\WINDOWS\help\fpgf8780.exe
O4 - HKLM\..\Run: [foxmrtk7257] C:\WINDOWS\help\xkgi2444.exe
O4 - HKLM\..\Run: [foxwqei4543] C:\WINDOWS\help\nuqp9420.exe
O4 - HKLM\..\Run: [foxinjf7583] C:\WINDOWS\help\lwvi9967.exe
O4 - HKLM\..\Run: [foxqpqv5053] C:\WINDOWS\help\vqmh3937.exe
O4 - HKLM\..\Run: [foxxkjj1226] C:\WINDOWS\help\drnq344.exe
O4 - HKLM\..\Run: [foxwknl4651] C:\WINDOWS\help\pskw4497.exe
O4 - HKLM\..\Run: [foxverv9804] C:\WINDOWS\help\ieuo2878.exe
O4 - HKLM\..\Run: [foxiqlp7299] C:\WINDOWS\help\tkts2516.exe
O4 - HKLM\..\Run: [foxsmvp1481] C:\WINDOWS\help\qpus4351.exe
O4 - HKLM\..\Run: [foxdrks4376] C:\WINDOWS\help\hwnn11.exe
O4 - HKLM\..\Run: [foxellt7633] C:\WINDOWS\help\vqqj7362.exe
O4 - HKLM\..\Run: [foxrmiz1787] C:\WINDOWS\help\vxor2477.exe
O4 - HKLM\..\Run: [foxsjru1640] C:\WINDOWS\help\pvst7763.exe
O4 - HKLM\..\Run: [foxxdir2656] C:\WINDOWS\help\qjnt5868.exe
O4 - HKLM\..\Run: [foxnjii8381] C:\WINDOWS\help\topx5659.exe
O4 - HKLM\..\Run: [foxvjnd2949] C:\WINDOWS\help\mwfn2782.exe
O4 - HKLM\..\Run: [foxrdlv3158] C:\WINDOWS\help\mpkg1093.exe
O4 - HKLM\..\Run: [foxpoos6709] C:\WINDOWS\help\ywmq7087.exe
O4 - HKLM\..\Run: [foxezqw5789] C:\WINDOWS\help\nuqp9420.exe
O4 - HKLM\..\Run: [foxpclz8269] C:\WINDOWS\help\dist8500.exe
O4 - HKLM\..\Run: [foxrpeq8106] C:\WINDOWS\help\ninx981.exe
O4 - HKLM\..\Run: [foxnpxx8244] C:\WINDOWS\help\wgoo5154.exe
O4 - HKLM\..\Run: [foxruew8005] C:\WINDOWS\help\qvho817.exe
O4 - HKLM\..\Run: [foxwtin900] C:\WINDOWS\help\wgoo5154.exe
O4 - HKLM\..\Run: [foxyxmq2443] C:\WINDOWS\help\pdhu717.exe
O4 - HKLM\..\Run: [foxjncd1778] C:\WINDOWS\help\vzkl3611.exe
O4 - HKLM\..\Run: [foxwxke1970] C:\WINDOWS\help\tjeg4827.exe
O4 - HKLM\..\Run: [foxnvhu5671] C:\WINDOWS\help\reju1335.exe
O4 - HKLM\..\Run: [foxphfx1289] C:\WINDOWS\help\yyfq4920.exe
O4 - HKLM\..\Run: [foxhvrc5308] C:\WINDOWS\help\htfy4489.exe
O4 - HKLM\..\Run: [foxlrew9866] C:\WINDOWS\help\lflx4121.exe
O4 - HKLM\..\Run: [foxmwiz1410] C:\WINDOWS\help\omhu4000.exe
O4 - HKLM\..\Run: [foxcsdt2209] C:\WINDOWS\help\fetx8018.exe
O4 - HKLM\..\Run: [foxgdpn5237] C:\WINDOWS\help\jxgu2578.exe
O4 - HKLM\..\Run: [foxjqgv1619] C:\WINDOWS\help\fjrl7947.exe
O4 - HKLM\..\Run: [foxdlcd3639] C:\WINDOWS\help\zoqe9657.exe
O4 - HKLM\..\Run: [foxvdyj2116] C:\WINDOWS\help\iojv5730.exe
O4 - HKLM\..\Run: [foxding6947] C:\WINDOWS\help\hwit4330.exe
O4 - HKLM\..\Run: [foxjtmk1431] C:\WINDOWS\help\yrey6349.exe
O4 - HKLM\..\Run: [foxdchh8465] C:\WINDOWS\help\ywuq2882.exe
O4 - HKLM\..\Run: [foxnqql2593] C:\WINDOWS\help\tjeg4827.exe
O4 - HKLM\..\Run: [foxsfjj7164] C:\WINDOWS\help\qdyc5036.exe
O4 - HKLM\..\Run: [foxruwe2325] C:\WINDOWS\help\mvtj5304.exe
O4 - HKLM\..\Run: [foxcqst172] C:\WINDOWS\help\hzoi4141.exe
O4 - HKLM\..\Run: [foxsvgw8623] C:\WINDOWS\help\rllh9874.exe
O4 - HKLM\..\Run: [foxmyrw2392] C:\WINDOWS\help\reju1335.exe
O4 - HKLM\..\Run: [foxlnvy4296] C:\WINDOWS\help\ndwo6856.exe
O4 - HKLM\..\Run: [foxwvrh1863] C:\WINDOWS\help\gzde5627.exe
O4 - HKLM\..\Run: [foxxiqj3393] C:\WINDOWS\help\ksim374.exe
O4 - HKLM\..\Run: [foxqeol2352] C:\WINDOWS\help\vdtf4573.exe
O4 - HKLM\..\Run: [foxmmgo7663] C:\WINDOWS\help\okrj5062.exe
O4 - HKLM\..\Run: [foxgtmh4422] C:\WINDOWS\help\wmgk9411.exe
O4 - HKLM\..\Run: [foxygem6701] C:\WINDOWS\help\wosh6104.exe
O4 - HKLM\..\Run: [foxthkj76] C:\WINDOWS\help\svho4476.exe
O4 - HKLM\..\Run: [foxieue5805] C:\WINDOWS\help\sexh1009.exe
O4 - HKLM\..\Run: [foxxroo9737] C:\WINDOWS\help\sexh1009.exe
O4 - HKLM\..\Run: [foxfveh7878] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxdumy3027] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxfnlr6159] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxhphy4436] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxqtpo7092] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxmzqd5741] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxnxtp5683] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxcpxt4633] C:\WINDOWS\help\mphw3262.exe
O4 - HKLM\..\Run: [foxvxow9944] C:\WINDOWS\help\yvcr7343.exe
O4 - HKLM\..\Run: [foxhewm2600] C:\WINDOWS\help\yvcr7343.exe
O4 - HKLM\..\Run: [foxiymj5879] C:\WINDOWS\help\yvcr7343.exe
O4 - HKLM\..\Run: [foxcupw7681] C:\WINDOWS\help\ifng1622.exe
O4 - HKLM\..\Run: [foxgimn3976] C:\WINDOWS\help\qqmg4324.exe
O4 - HKLM\..\Run: [foxuysu4599] C:\WINDOWS\help\qqmg4324.exe
O4 - HKLM\..\Run: [foxnxut1124] C:\WINDOWS\help\rnre8477.exe
O4 - HKLM\..\Run: [foxpnnk961] C:\WINDOWS\help\hryx5867.exe
O4 - HKLM\..\Run: [foxgjgu8304] C:\WINDOWS\help\hryx5867.exe
O4 - HKLM\..\Run: [foxmpgn2860] C:\WINDOWS\help\fpis1016.exe
O4 - HKLM\..\Run: [foxilvc3157] C:\WINDOWS\help\rnre8477.exe
O4 - HKLM\..\Run: [foxeyvu2535] C:\WINDOWS\help\hljy4920.exe
O4 - HKLM\..\Run: [foxjfhd2209] C:\WINDOWS\help\jmey9741.exe
O4 - HKLM\..\Run: [foxlgyd7031] C:\WINDOWS\help\lvil5570.exe
O4 - HKLM\..\Run: [foxnjnt1942] C:\WINDOWS\help\dhxs5246.exe
O4 - HKLM\..\Run: [foxrkle4923] C:\WINDOWS\help\lppr4652.exe
O4 - HKLM\..\Run: [foxnumv3472] C:\WINDOWS\help\qqnz7634.exe
O4 - HKLM\..\Run: [foxplds3338] C:\WINDOWS\help\gsxl4966.exe
O4 - HKLM\..\Run: [foxhmvn2255] C:\WINDOWS\help\mdot6183.exe
O4 - HKLM\..\Run: [foxfwfw2418] C:\WINDOWS\help\orfp6049.exe
O4 - HKLM\..\Run: [foxxwdm6010] C:\WINDOWS\help\vtqw428.exe
O4 - HKLM\..\Run: [foxqunl1661] C:\WINDOWS\help\dfht5129.exe
O4 - HKLM\..\Run: [foxqimn3192] C:\WINDOWS\help\wffk8721.exe
O4 - HKLM\..\Run: [foxxnoy7717] C:\WINDOWS\help\odqj4372.exe
O4 - HKLM\..\Run: [foxkofd6771] C:\WINDOWS\help\dumm3439.exe
O4 - HKLM\..\Run: [foxjids5199] C:\WINDOWS\help\yjdf3385.exe
O4 - HKLM\..\Run: [foxeoko729] C:\WINDOWS\help\popl5902.exe
O4 - HKLM\..\Run: [foxuhgm1046] C:\WINDOWS\help\dmno4840.exe
O4 - HKLM\..\Run: [foxcisr7177] C:\WINDOWS\help\jyih9381.exe
O4 - HKLM\..\Run: [foxheii1706] C:\WINDOWS\help\wnyi1611.exe
O4 - HKLM\..\Run: [foxflyn1723] C:\WINDOWS\help\rell6909.exe
O4 - HKLM\..\Run: [foxwqir3429] C:\WINDOWS\help\wmdg5977.exe
O4 - HKLM\..\Run: [foxrejy5462] C:\WINDOWS\help\pywk9878.exe
O4 - HKLM\..\Run: [foxmxws5788] C:\WINDOWS\help\cwix9121.exe
O4 - HKLM\..\Run: [foxcmyw4868] C:\WINDOWS\help\ukjg1155.exe
O4 - HKLM\..\Run: [foxhgny5913] C:\WINDOWS\help\pedf9719.exe
O4 - HKLM\..\Run: [foxqzec6850] C:\WINDOWS\help\jwsj8314.exe
O4 - HKLM\..\Run: [foxyncc9551] C:\WINDOWS\help\utfq7528.exe
O4 - HKLM\..\Run: [foxhmyz7820] C:\WINDOWS\help\gsdx532.exe
O4 - HKLM\..\Run: [foxlhty9230] C:\WINDOWS\help\gsdx532.exe
O4 - HKLM\..\Run: [foxgsvi1263] C:\WINDOWS\help\xiqd9255.exe
O4 - HKLM\..\Run: [foxrmvm3755] C:\WINDOWS\help\jnww1941.exe
O4 - HKLM\..\Run: [foxlqin7523] C:\WINDOWS\help\ukjg1155.exe
O4 - HKLM\..\Run: [foxvpoe8025] C:\WINDOWS\help\jkts3300.exe
O4 - HKLM\..\Run: [foxeqfc6411] C:\WINDOWS\help\gsdx532.exe
O4 - HKLM\..\Run: [foxhmwh7850] C:\WINDOWS\help\kvlk235.exe
O4 - HKLM\..\Run: [foxsisg8146] C:\WINDOWS\help\lqlr4567.exe
O4 - HKLM\..\Run: [foxoehk7272] C:\WINDOWS\help\rfhc1364.exe
O4 - HKLM\..\Run: [foxswee8652] C:\WINDOWS\help\erde2313.exe
O4 - HKLM\..\Run: [foxflyg9602] C:\WINDOWS\help\skjl2936.exe
O4 - HKLM\..\Run: [foxgdow698] C:\WINDOWS\help\lrhf4625.exe
O4 - HKLM\..\Run: [foxtehn226] C:\WINDOWS\help\ezrk578.exe
O4 - HKLM\..\Run: [foxljml5863] C:\WINDOWS\help\nkji9983.exe
O4 - HKLM\..\Run: [foxwdmp8355] C:\WINDOWS\help\yekn2476.exe
O4 - HKLM\..\Run: [foxgtpm7866] C:\WINDOWS\help\gsyf561.exe
O4 - HKLM\..\Run: [foxdvip9765] C:\WINDOWS\help\jooj8574.exe
O4 - HKLM\..\Run: [foxwqxp6578] C:\WINDOWS\help\mpit9912.exe
O4 - HKLM\..\Run: [foxojfw7201] C:\WINDOWS\help\ucmp6010.exe
O4 - HKLM\..\Run: [foxlwwk4086] C:\WINDOWS\help\vjon1067.exe
O4 - HKLM\..\Run: [foxgtnf4412] C:\WINDOWS\help\nmvq3191.exe
O4 - HKLM\..\Run: [foxwqgy1174] C:\WINDOWS\help\losh7933.exe
O4 - HKLM\..\Run: [foxwtjs3299] C:\WINDOWS\help\jfyi6796.exe
O4 - HKLM\..\Run: [foxfnku2839] C:\WINDOWS\help\fzpd7122.exe
O4 - HKLM\..\Run: [foxegto4575] C:\WINDOWS\help\dtnr5550.exe
O4 - HKLM\..\Run: [foxdziw7380] C:\WINDOWS\help\lxtt7732.exe
O4 - HKLM\..\Run: [foxohlf7113] C:\WINDOWS\help\yqfc4065.exe
O4 - HKLM\..\Run: [foxdkdf1355] C:\WINDOWS\help\dlwm7285.exe
O4 - HKLM\..\Run: [foxveuf7635] C:\WINDOWS\help\uqvw1977.exe
O4 - HKLM\..\Run: [foxqvxh7009] C:\WINDOWS\help\zqyy640.exe
O4 - HKLM\..\Run: [foxdkwd7929] C:\WINDOWS\help\nnnd9824.exe
O4 - HKLM\..\Run: [foxyjyz9681] C:\WINDOWS\help\whol4099.exe
O4 - HKLM\..\Run: [foxyylo1388] C:\WINDOWS\help\pedf9719.exe
O4 - HKLM\..\Run: [foxdwdl5284] C:\WINDOWS\help\rxgf6924.exe
O4 - HKLM\..\Run: [foxkkes1441] C:\WINDOWS\help\ropk5176.exe
O4 - HKLM\..\Run: [foxkqql5603] C:\WINDOWS\help\xpdx2392.exe
O4 - HKLM\..\Run: [foxvndt4817] C:\WINDOWS\help\pihx9560.exe
O4 - HKLM\..\Run: [foxsqpu3291] C:\WINDOWS\help\xtfx2263.exe
O4 - HKLM\..\Run: [foxfghk4299] C:\WINDOWS\help\rwrs6001.exe
O4 - HKLM\..\Run: [foxwedf5008] C:\WINDOWS\help\fyuc539.exe
O4 - HKLM\..\Run: [foxfden4448] C:\WINDOWS\help\dxvy2291.exe
O4 - HKLM\..\Run: [foxizkq2579] C:\WINDOWS\help\dxvy2291.exe
O4 - HKLM\..\Run: [foxwfwc7197] C:\WINDOWS\help\hpin2564.exe
O4 - HKLM\..\Run: [foxszmu7523] C:\WINDOWS\help\kwde8988.exe
O4 - HKLM\..\Run: [foxlssw6365] C:\WINDOWS\help\oeiw8730.exe
O4 - HKLM\..\Run: [foxvves5508] C:\WINDOWS\help\inqo2447.exe
O4 - HKLM\..\Run: [foxdmsk3592] C:\WINDOWS\help\kyuu9076.exe
O4 - HKLM\..\Run: [foxudgu2346] C:\WINDOWS\help\hpin2564.exe
O4 - HKLM\..\Run: [foxcdep1844] C:\WINDOWS\help\vwed4864.exe
O4 - HKLM\..\Run: [foxqwuc9188] C:\WINDOWS\help\oijd8620.exe
O4 - HKLM\..\Run: [foxesty5194] C:\WINDOWS\help\cyvw7905.exe
O4 - HKLM\..\Run: [foxmqyg6277] C:\WINDOWS\help\sjjs5057.exe
O4 - HKLM\..\Run: [foxoefx9422] C:\WINDOWS\help\cyvw7905.exe
O4 - HKLM\..\Run: [foxgiio1606] C:\WINDOWS\help\glxj7595.exe
O4 - HKLM\..\Run: [foxjhnq9736] C:\WINDOWS\help\iyrx7432.exe
O4 - HKLM\..\Run: [foxcckl5240] C:\WINDOWS\help\rguy147.exe
O4 - HKLM\..\Run: [foxjsoc4721] C:\WINDOWS\help\nkhv2134.exe
O4 - HKLM\..\Run: [foxhfvl4885] C:\WINDOWS\help\udgq8218.exe
O4 - HKLM\..\Run: [foxueyy8949] C:\WINDOWS\help\fokm4316.exe
O4 - HKLM\..\Run: [foxsfoi3910] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxyloy8464] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxwqzf2154] C:\WINDOWS\help\yimj7951.exe
O4 - HKLM\..\Run: [foxsxsd7436] C:\WINDOWS\help\skdw1661.exe
O4 - HKLM\..\Run: [foxylmg8493] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxpchf5909] C:\WINDOWS\help\yjgn4555.exe
O4 - HKLM\..\Run: [foxjgrg9677] C:\WINDOWS\help\pfwx1899.exe
O4 - HKLM\..\Run: [foxgktw4813] C:\WINDOWS\help\kqvw477.exe
O4 - HKLM\..\Run: [foxzhmy8594] C:\WINDOWS\help\iltd2389.exe
O4 - HKLM\..\Run: [foxmktz7766] C:\WINDOWS\help\xnow1305.exe
O4 - HKLM\..\Run: [foxdmmc6712] C:\WINDOWS\help\fqwu7524.exe
O4 - HKLM\..\Run: [foxgncy8109] C:\WINDOWS\help\ujxd4722.exe
O4 - HKLM\..\Run: [foxgoxg8138] C:\WINDOWS\help\etfw820.exe
O4 - HKLM\..\Run: [foxymkm8523] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxzwli25] C:\WINDOWS\help\wsnk1234.exe
O4 - HKLM\..\Run: [foxwndd6938] C:\WINDOWS\help\xfng2735.exe
O4 - HKLM\..\Run: [foxiujl6019] C:\WINDOWS\help\opqr8311.exe
O4 - HKLM\..\Run: [foxnjif3986] C:\WINDOWS\help\mpkd6697.exe
O4 - HKLM\..\Run: [foxxnps6642] C:\WINDOWS\help\qhtw1386.exe
O4 - HKLM\..\Run: [foxpjot5601] C:\WINDOWS\help\ndxj168.exe
O4 - HKLM\..\Run: [foxklug2460] C:\WINDOWS\help\tgux6090.exe
O4 - HKLM\..\Run: [foxhyto2740] C:\WINDOWS\help\opqr8311.exe
O4 - HKLM\..\Run: [foxryqy8674] C:\WINDOWS\help\ghvm5451.exe
O4 - HKLM\..\Run: [foxoilr3928] C:\WINDOWS\help\ntqx8211.exe
O4 - HKLM\..\Run: [foxlvye7386] C:\WINDOWS\help\skyh9415.exe
O4 - HKLM\..\Run: [foxhgqi2698] C:\WINDOWS\help\jedc97.exe
O4 - HKLM\..\Run: [foxvxsc3380] C:\WINDOWS\help\mqii6726.exe
O4 - HKLM\..\Run: [foxyhmq9803] C:\WINDOWS\help\tgux6090.exe
O4 - HKLM\..\Run: [foxpdfd7148] C:\WINDOWS\help\cmuq645.exe
O4 - HKLM\..\Run: [foxpnpu5471] C:\WINDOWS\help\eple5526.exe
O4 - HKLM\..\Run: [foxegst7934] C:\WINDOWS\help\kxyn6743.exe
O4 - HKLM\..\Run: [foxpnoc5500] C:\WINDOWS\help\jpim8507.exe
O4 - HKLM\..\Run: [foxmokr7340] C:\WINDOWS\help\otsr8181.exe
O4 - HKLM\..\Run: [foxgjig2815] C:\WINDOWS\help\njhy9858.exe
O4 - HKLM\..\Run: [foxjqdu9239] C:\WINDOWS\help\ntqx8211.exe
O4 - HKLM\..\Run: [foxljgo5797] C:\WINDOWS\help\lump52.exe
O4 - HKLM\..\Run: [foxuewj6704] C:\WINDOWS\help\iwfs1950.exe
O4 - HKLM\..\Run: [foxucir43] C:\WINDOWS\help\jedc97.exe
O4 - HKLM\..\Run: [foxyspt4760] C:\WINDOWS\help\tilp2753.exe
O4 - HKLM\..\Run: [foxmezs8988] C:\WINDOWS\help\mpit3242.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

Edited by broncos, 29 June 2006 - 08:32 PM.


#7 broncos

broncos
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Victoria
  • Local time:06:28 AM

Posted 29 June 2006 - 08:24 PM

the 3rd post is the Hijackthis uninstall_list

Adobe Reader 7.0.8
a-squared Free 1.6.5
BigPond Media Manager
BigPond Toolbar
BitLord 1.1
CardCrazy
EPSON Copy Utility
EPSON Photo Print
EPSON Printer Software
EPSON Smart Panel
EPSON TWAIN 5
G-Force
Google Toolbar for Internet Explorer
HijackThis 1.99.1
IncrediMail Xe
iPod for Windows 2006-01-10
iPod Update 2004-04-28
iTunes
J2SE Runtime Environment 5.0 Update 6
LimeWire PRO 4.9.37
Macromedia Flash Player 8
Macromedia Shockwave Player
McAfee Personal Firewall Plus
McAfee SecurityCenter
McAfee VirusScan
Microsoft Office Professional Edition 2003
MSN Messenger 7.5
MSN Toolbar
MYOB BusinessBasics v1
Nero 7 Demo
OLYMPUS CAMEDIA Master 4.1
QuickTime
RealPlayer
Registry Mechanic 5.2
S3Display
S3Gamma2
S3Info2
S3Overlay
ScanToWeb
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893066)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918439)
Sonic RecordNow DX
Sonic Simple Backup
Sonic Update Manager
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB910437)
VIA Rhine-Family Fast Ethernet Adapter
VideoLAN VLC media player 0.8.4a
WildTangent Web Driver
WinAVI VideoConverter
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player 10
Windows Media Player 9 Hotfix [See KB885492 for more information]
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885626
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows XP Service Pack 2
WinRAR archiver
WinZip
Yahoo! Toolbar

#8 broncos

broncos
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Victoria
  • Local time:06:28 AM

Posted 29 June 2006 - 08:26 PM

my 5th post is the jotti results for the C:\windows\rundll32.exe file

Jotti's malware scan 2.99-TRANSITION_TO_3.00-R1

File to upload & scan:
Service
Service load: 0% 100%

File: rundll32.exe
Status: INFECTED/MALWARE
MD5 c340aa4d133a145dbc3578926906207e
Packers detected: -
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found modification of BackDoor.Generic.1225
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found Trojan-Spy.Win32.VB.hb
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Malware.VB.28 (probable variant)

Powered by

Disclaimer
This service is by no means 100% safe. If this scanner says 'OK', it does not necessarily mean the file is clean. There could be a whole new virus on the loose. NEVER EVER rely on one single product only, not even this service, even though it utilizes several products. Therefore, We cannot and will not be held responsible for any damage caused by results presented by this non-profit online service.

Also, we are aware of the implications of a setup like this. We are sure this whole thing is by no means scientifically correct, since this is a fully automated service (although manual correction is possible). We are aware, in spite of efforts to proactively counter these, false positives might occur, for example. We do not consider this a very big issue, so please do not e-mail us about it. This is a simple online scan service, not the university of Wichita.

Scanning can take a while, since several scanners are being used, plus the fact some scanners use very high levels of (time consuming) heuristics. Scanners used are Linux versions, differences with Windows scanners may or may not occur. Another note: some scanners will only report one virus when scanning archives with multiple pieces of malware.

Virus definitions are updated every hour. There is a 15Mb limit per file. Please refrain from uploading tons of hex-edited or repacked variants of the same sample.

Please do not ask for viruses uploaded here, unless you work for an anti-virus vendor. They are not for trade. This is a legitimate service, not a VX site. Viruses uploaded here will be distributed to antivirus vendors without exception. Read more about this in our privacy policy. If you do not want your files to be distributed, please do not send them at all.

Sponsored by donations (in random order) from: Stormbyte Technologies LLC, The ClamAV project, James Love, Gideon Pertzov, Malcolm Murray, Nigel Thomas, Wendy Dickerson, Anthony Midmore, "ethereal", Mark Rubins, Steve S., Eric Johansen, Eric Schechter, Paul Bokel, Wilders Security, Wilfried Lilie, Prevx, SonicWALL, Lance Mueller, Ewido networks, and some people who prefer to remain anonymous... many thanks to all!

Statistics
Last file scanned at least one scanner reported something about: DT6_-_acdseecrk1.exe, detected by:

Scanner Malware name
AntiVir Trojan/Dldr.INSer.13824
ArcaVir Trojan.Downloader.Inservice.Gen.13667.MX
Avast X
AVG Antivirus Downloader.Small.55.BN
BitDefender Trojan.Downloader.InService.TW
ClamAV X
Dr.Web Trojan.DownLoader.2568
F-Prot Antivirus X
Fortinet W32/Dowins!tr
Kaspersky Anti-Virus Trojan-Downloader.Win32.INService.gen
NOD32 a variant of Win32/TrojanDownloader.INService
Norman Virus Control X
UNA X
VirusBuster Trojan.DL.INService.CK
VBA32 Trojan-Downloader.Win32.INService.gen

#9 broncos

broncos
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Victoria
  • Local time:06:28 AM

Posted 29 June 2006 - 08:35 PM

thanks heaps again please advise me on the jotti file I could not submit.

My last post Hijackthis log Part 2

O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...?p=ZCxdm491YYAU
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.optima.com.au
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1133468422125
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1137202183312
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/bejeweled...aploader_v6.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: cfgmngr32 - C:\WINDOWS\g265296.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winulg32 - C:\WINDOWS\SYSTEM32\winulg32.dll
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lexar Secure II (LxrSII1s) - Unknown owner - C:\WINDOWS\SYSTEM32\LxrSII1s.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe

#10 agrarianmonk

agrarianmonk

  • Members
  • 522 posts
  • OFFLINE
  •  
  • Local time:01:28 PM

Posted 30 June 2006 - 08:59 AM

Hi Broncos,

You have some files that our experts would like to look at.

Please Download this program:

submit files packer

Highlight the files listed below in bold and right-click and selecting copy.


C:\WINDOWS\help\vdws3479.exe
C:\WINDOWS\help\vpvj8493.exe
C:\WINDOWS\help\xysi5340.exe
C:\WINDOWS\help\vgdq4375.exe
C:\WINDOWS\help\ynji20.exe
C:\WINDOWS\help\ifho2621.exe
C:\WINDOWS\help\vlye4304.exe
C:\WINDOWS\help\uxjl7369.exe
C:\windows\rundll32.exe


Then start the file packer program and right click in the white box and select paste to paste the copied file names in the field.

Then press the Continue button.

It will create an archive with these files and a small log on your Desktop that starts with a name like requested-file[date].cab.

Rename this file to Broncos.cab.

Then go to:
http://www.bleepingcomputer.com/submit-malware.php
and fill in the required fields and browse to this file on your desktop. Finally click on the Send File button.

This is the info you should fill in:

Link to topic where this file was requested: http://www.bleepingcomputer.com/forums/top...tml#entry311050

Browse to the file you want to submit: (on your desktop)

Leave any comments, further information about this file, or contact information: fox .exe's and rundll32.exe

=================================

I'll have more instructions for cleaning your computer after analyzing the rest of the logs.

Thanks,
agrarianmonk

Posted Image

Requests for help via PM will be ignored. Please post on the forums instead :)
Please be courteous, polite, and say thank you.
Please post the final results, good or bad. We like to know!

#11 broncos

broncos
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Victoria
  • Local time:06:28 AM

Posted 30 June 2006 - 07:42 PM

Hi Aqrarianmonk

I have submitted the files that you have requested me to do.

Thanks again

#12 agrarianmonk

agrarianmonk

  • Members
  • 522 posts
  • OFFLINE
  •  
  • Local time:01:28 PM

Posted 30 June 2006 - 09:53 PM

Hi Broncos,

Thanks for submitting the files.

As you know, I am working with a staff expert. As soon as he ok's my fix, i will post it for you.

Thanks for your continued patience,
agrarianmonk

Posted Image

Requests for help via PM will be ignored. Please post on the forums instead :)
Please be courteous, polite, and say thank you.
Please post the final results, good or bad. We like to know!

#13 agrarianmonk

agrarianmonk

  • Members
  • 522 posts
  • OFFLINE
  •  
  • Local time:01:28 PM

Posted 01 July 2006 - 10:25 PM

I'm going to ask you to submit some files again, because it seems like the submission process didn't work properly the first time.

(You can skip the download part if you still have the program)
Download this program:

submit files packer

Highlight the files listed below in bold and right-click and selecting copy.


C:\WINDOWS\help\wicu7306.exe
C:\WINDOWS\help\ynji20.exe
C:\WINDOWS\help\yduk9297.exe
C:\WINDOWS\help\ypnf917.exe
C:\WINDOWS\help\xivg397.exe
C:\WINDOWS\help\ifji2592.exe
C:\WINDOWS\help\wrtx225.exe


Then start the file packer program and right click in the white box and select paste to paste the copied file names in the field.

Then press the Continue button.

It will create an archive with these files and a small log on your Desktop that starts with a name like requested-file[date].cab.

Rename this file to Broncos1.cab.

Then go to:
http://www.bleepingcomputer.com/submit-malware.php
and fill in the required fields and browse to this file on your desktop. Finally click on the Send File button.

Link to topic where this file was requested: http://www.bleepingcomputer.com/forums/top...tml#entry311050

Browse to the file you want to submit: (on your desktop)

Leave any comments, further information about this file, or contact information: fox .exe's

========================================


Please remove these entries from Add/Remove Programs in the Control Panel(if present):

CardCrazy

The following are optional; however, any time your are running any type of P2P application, you are FAR more prone to infection by malware. Your current infections are likely due to P2P use.

BitLord 1.1
LimeWire PRO 4.9.37


Please note any other programs that you dont recognize in that list in your next response

Please print out or copy these instructions/tutorial to Notepad as the internet will not be (while in Safe Mode) available to you at certain points of the removal process. Make sure to work through all the Steps in the exact order in which they are listed below. If there's anything that you don't understand, ask your question(s) before moving on with the fixes.

Please download Ewido to your Desktop or to your usual Download Folder.
http://www.ewido.net/en/download/
  • Install Ewido by double clicking the installer.
  • Follow the prompts. Make sure that Launch Ewido is checked.
  • On the main screen under Your Computer's security.
    • Click on Change state next to Resident shield. It should now change to inactive.
    • Next to Last Update, click on Update now. (You will need an active internet connection to perform this)
    • Wait until you see the Update succesfull message.
  • Right-click the Ewido Tray Icon and select Exit. Confirm by clicking Yes.
If you are having problems with the updater, you can use this link to manually update ewido.
Ewido manual updates.
Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that Ewido is closed before installing the update.

Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.

O4 - HKLM\..\Run: [foxwjsm5782] C:\WINDOWS\help\vdws3479.exe
O4 - HKLM\..\Run: [foxdfmr7221] C:\WINDOWS\help\vpvj8493.exe
O4 - HKLM\..\Run: [foxijhk5448] C:\WINDOWS\help\xysi5340.exe
O4 - HKLM\..\Run: [foxsine7005] C:\WINDOWS\help\vgdq4375.exe
O4 - HKLM\..\Run: [foxlowt3231] C:\WINDOWS\help\ynji20.exe
O4 - HKLM\..\Run: [foxlfhy1483] C:\WINDOWS\help\ifho2621.exe
O4 - HKLM\..\Run: [foxrrvs3655] C:\WINDOWS\help\vlye4304.exe
O4 - HKLM\..\Run: [foxecse5904] C:\WINDOWS\help\uxjl7369.exe
O4 - HKLM\..\Run: [foxxpde6519] C:\WINDOWS\help\zezk5625.exe
O4 - HKLM\..\Run: [foxnfmp5382] C:\WINDOWS\help\wicu7306.exe
O4 - HKLM\..\Run: [foxvsgk5887] C:\WINDOWS\help\ynji20.exe
O4 - HKLM\..\Run: [foxnhzq845] C:\WINDOWS\help\yduk9297.exe
O4 - HKLM\..\Run: [foxhzte2894] C:\WINDOWS\help\ypnf917.exe
O4 - HKLM\..\Run: [foxkklh7092] C:\WINDOWS\help\xivg397.exe
O4 - HKLM\..\Run: [foxkxfq9910] C:\WINDOWS\help\ifji2592.exe
O4 - HKLM\..\Run: [foxfnlv555] C:\WINDOWS\help\wrtx225.exe
O4 - HKLM\..\Run: [foxvrhn4658] C:\WINDOWS\help\xvqi5470.exe
O4 - HKLM\..\Run: [foxkexf7469] C:\WINDOWS\help\vvfz9230.exe
O4 - HKLM\..\Run: [foxqggy9004] C:\WINDOWS\help\vdwv4534.exe
O4 - HKLM\..\Run: [foxqncx9609] C:\WINDOWS\help\wvtg125.exe
O4 - HKLM\..\Run: [foxhtje987] C:\WINDOWS\help\xlyx2522.exe
O4 - HKLM\..\Run: [foxfkhz2998] C:\WINDOWS\help\uwkp6140.exe
O4 - HKLM\..\Run: [foxysql2630] C:\WINDOWS\help\zonr5148.exe
O4 - HKLM\..\Run: [foxcpyq1284] C:\WINDOWS\help\yufi3965.exe
O4 - HKLM\..\Run: [foxtrii7639] C:\WINDOWS\help\yloo9931.exe
O4 - HKLM\..\Run: [foxkfpd618] C:\WINDOWS\help\yvdo3994.exe
O4 - HKLM\..\Run: [foxkyqz9787] C:\WINDOWS\help\lgyz630.exe
O4 - HKLM\..\Run: [foxyrsh6985] C:\WINDOWS\help\nlyd8747.exe
O4 - HKLM\..\Run: [foxrqyf9210] C:\WINDOWS\help\xxuf9696.exe
O4 - HKLM\..\Run: [foxwegr575] C:\WINDOWS\help\uyvv4962.exe
O4 - HKLM\..\Run: [foxsmon9005] C:\WINDOWS\help\qwed1922.exe
O4 - HKLM\..\Run: [foxjily9775] C:\WINDOWS\help\umsg6522.exe
O4 - HKLM\..\Run: [foxnxwe7918] C:\WINDOWS\help\vkip3285.exe
O4 - HKLM\..\Run: [foxwssy2251] C:\WINDOWS\help\teki5138.exe
O4 - HKLM\..\Run: [foxtfxp2444] C:\WINDOWS\help\lgyz630.exe
O4 - HKLM\..\Run: [foxhpld4532] C:\WINDOWS\help\yqmj936.exe
O4 - HKLM\..\Run: [foxocpw630] C:\WINDOWS\help\yqmj936.exe
O4 - HKLM\..\Run: [foxgwxg1123] C:\WINDOWS\help\jrwd1831.exe
O4 - HKLM\..\Run: [foxqvdx6970] C:\WINDOWS\help\nmuu3211.exe
O4 - HKLM\..\Run: [foxteqe8266] C:\WINDOWS\help\knml1626.exe
O4 - HKLM\..\Run: [foxophy9993] C:\WINDOWS\help\vfgw5535.exe
O4 - HKLM\..\Run: [foxjvug9072] C:\WINDOWS\help\upyi864.exe
O4 - HKLM\..\Run: [foxckjl8225] C:\WINDOWS\help\isgx2195.exe
O4 - HKLM\..\Run: [foxdkgl2515] C:\WINDOWS\help\nvkw2704.exe
O4 - HKLM\..\Run: [foxvwvu7726] C:\WINDOWS\help\otpg2616.exe
O4 - HKLM\..\Run: [foxhsgf2992] C:\WINDOWS\help\khgg2069.exe
O4 - HKLM\..\Run: [foxlyei9357] C:\WINDOWS\help\rsni1621.exe
O4 - HKLM\..\Run: [foxogrw500] C:\WINDOWS\help\jrwd1831.exe
O4 - HKLM\..\Run: [foxwjwk8152] C:\WINDOWS\help\oxln6815.exe
O4 - HKLM\..\Run: [foxpnni9905] C:\WINDOWS\help\yqij5226.exe
O4 - HKLM\..\Run: [foxprjp4105] C:\WINDOWS\help\ufps1312.exe
O4 - HKLM\..\Run: [foxinhx4138] C:\WINDOWS\help\poex1212.exe
O4 - HKLM\..\Run: [foxrizz8500] C:\WINDOWS\help\pefv9680.exe
O4 - HKLM\..\Run: [foxrotm5004] C:\WINDOWS\help\ntvo9496.exe
O4 - HKLM\..\Run: [foxxxey2825] C:\WINDOWS\help\puvk7714.exe
O4 - HKLM\..\Run: [foxxjgl3232] C:\WINDOWS\help\rdmj7945.exe
O4 - HKLM\..\Run: [foxytjz4703] C:\WINDOWS\help\lils4922.exe
O4 - HKLM\..\Run: [foxqkyr8664] C:\WINDOWS\help\rfwx1183.exe
O4 - HKLM\..\Run: [foxdfle2692] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxmjsr5347] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxeyyy5970] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxwjpe1282] C:\WINDOWS\help\psnf4612.exe
O4 - HKLM\..\Run: [foxcoih1320] C:\WINDOWS\help\rfwx1183.exe
O4 - HKLM\..\Run: [foxesoe2834] C:\WINDOWS\help\lils4922.exe
O4 - HKLM\..\Run: [foxtwtc8471] C:\WINDOWS\help\ytnw4002.exe
O4 - HKLM\..\Run: [foxxrns6426] C:\WINDOWS\help\pyqd9668.exe
O4 - HKLM\..\Run: [foxqmlh1901] C:\WINDOWS\help\vxpq9137.exe
O4 - HKLM\..\Run: [foxgepl852] C:\WINDOWS\help\jkqm6515.exe
O4 - HKLM\..\Run: [foxtxhv8195] C:\WINDOWS\help\jkqm6515.exe
O4 - HKLM\..\Run: [foxxnmm6527] C:\WINDOWS\help\mdmh4993.exe
O4 - HKLM\..\Run: [foxfoku9509] C:\WINDOWS\help\vtpk9237.exe
O4 - HKLM\..\Run: [foxrsnf6958] C:\WINDOWS\help\yulf4031.exe
O4 - HKLM\..\Run: [foxpwdf8333] C:\WINDOWS\help\iqns9956.exe
O4 - HKLM\..\Run: [foxzdls989] C:\WINDOWS\help\iqns9956.exe
O4 - HKLM\..\Run: [foxrfzm6480] C:\WINDOWS\help\ulem2144.exe
O4 - HKLM\..\Run: [foximog5384] C:\WINDOWS\help\oilp856.exe
O4 - HKLM\..\Run: [foxupxv2745] C:\WINDOWS\help\qwyr751.exe
O4 - HKLM\..\Run: [foxjllu7246] C:\WINDOWS\help\sgkt907.exe
O4 - HKLM\..\Run: [foxdfgj7011] C:\WINDOWS\help\twmu5209.exe
O4 - HKLM\..\Run: [foxgstp5677] C:\WINDOWS\help\iqns9956.exe
O4 - HKLM\..\Run: [foxjdpt3301] C:\WINDOWS\help\rxel3624.exe
O4 - HKLM\..\Run: [foxqsuo1554] C:\WINDOWS\help\znto5214.exe
O4 - HKLM\..\Run: [foxrdht6392] C:\WINDOWS\help\pmtu5824.exe
O4 - HKLM\..\Run: [foxhnlr5443] C:\WINDOWS\help\pywm4264.exe
O4 - HKLM\..\Run: [foxpzjs8144] C:\WINDOWS\help\plek9191.exe
O4 - HKLM\..\Run: [foxwfyp9433] C:\WINDOWS\help\qjjr9103.exe
O4 - HKLM\..\Run: [foxrqwu8040] C:\WINDOWS\help\oilp856.exe
O4 - HKLM\..\Run: [foxgmol7166] C:\WINDOWS\help\wfuj1880.exe
O4 - HKLM\..\Run: [foxhthl5401] C:\WINDOWS\help\qwyr751.exe
O4 - HKLM\..\Run: [foxmjxj9972] C:\WINDOWS\help\phld7371.exe
O4 - HKLM\..\Run: [foxqyjf4661] C:\WINDOWS\help\pqcv9119.exe
O4 - HKLM\..\Run: [foxprqf6426] C:\WINDOWS\help\kpch2683.exe
O4 - HKLM\..\Run: [foxffsj5506] C:\WINDOWS\help\owsd9136.exe
O4 - HKLM\..\Run: [foxxhfu5790] C:\WINDOWS\help\qxkt504.exe
O4 - HKLM\..\Run: [foxjlij5020] C:\WINDOWS\help\krqw9345.exe
O4 - HKLM\..\Run: [foxgqmk3611] C:\WINDOWS\help\irkh7731.exe
O4 - HKLM\..\Run: [foxlloy6635] C:\WINDOWS\help\omnq726.exe
O4 - HKLM\..\Run: [foxpgls8015] C:\WINDOWS\help\vnhs8500.exe
O4 - HKLM\..\Run: [foxrygw1206] C:\WINDOWS\help\jxlv9332.exe
O4 - HKLM\..\Run: [foxitwt5066] C:\WINDOWS\help\pgjt3917.exe
O4 - HKLM\..\Run: [foxktwp3285] C:\WINDOWS\help\wxio2.exe
O4 - HKLM\..\Run: [foxvqjw2498] C:\WINDOWS\help\jcyn5995.exe
O4 - HKLM\..\Run: [foxtrzn913] C:\WINDOWS\help\twmu5209.exe
O4 - HKLM\..\Run: [foxrhgk8422] C:\WINDOWS\help\spyo5985.exe
O4 - HKLM\..\Run: [foxidwu5766] C:\WINDOWS\help\jhhu6608.exe
O4 - HKLM\..\Run: [foxtkse3333] C:\WINDOWS\help\newi8076.exe
O4 - HKLM\..\Run: [foxcqsu7887] C:\WINDOWS\help\jjdi6666.exe
O4 - HKLM\..\Run: [foxpjsm6895] C:\WINDOWS\help\utfq7528.exe
O4 - HKLM\..\Run: [foxmllp8794] C:\WINDOWS\help\ugmj2426.exe
O4 - HKLM\..\Run: [foxuhmc37] C:\WINDOWS\help\pdcq6235.exe
O4 - HKLM\..\Run: [foxovuk5365] C:\WINDOWS\help\tvze7586.exe
O4 - HKLM\..\Run: [foxlzfx3897] C:\WINDOWS\help\spyo5985.exe
O4 - HKLM\..\Run: [foxhgmi3658] C:\WINDOWS\help\kdzu1028.exe
O4 - HKLM\..\Run: [foxldyl3956] C:\WINDOWS\help\squy6043.exe
O4 - HKLM\..\Run: [foxdmnu2307] C:\WINDOWS\help\wvxh3550.exe
O4 - HKLM\..\Run: [foxujwq3274] C:\WINDOWS\help\smpx2748.exe
O4 - HKLM\..\Run: [foxvpwh4876] C:\WINDOWS\help\jtgm1623.exe
O4 - HKLM\..\Run: [foxiqqp7385] C:\WINDOWS\help\krnn1506.exe
O4 - HKLM\..\Run: [foxenxo4315] C:\WINDOWS\help\ondq9518.exe
O4 - HKLM\..\Run: [foxphyt6808] C:\WINDOWS\help\ifqk1727.exe
O4 - HKLM\..\Run: [foxfdgx5628] C:\WINDOWS\help\jrwg9555.exe
O4 - HKLM\..\Run: [foxgkyp2778] C:\WINDOWS\help\qtqg6275.exe
O4 - HKLM\..\Run: [foxqnkd6460] C:\WINDOWS\help\nzly2584.exe
O4 - HKLM\..\Run: [foxnlsu1609] C:\WINDOWS\help\otmy9171.exe
O4 - HKLM\..\Run: [foxmvww8317] C:\WINDOWS\help\mrus4319.exe
O4 - HKLM\..\Run: [foxxiyq4639] C:\WINDOWS\help\mmjp1357.exe
O4 - HKLM\..\Run: [foxrigg9651] C:\WINDOWS\help\zspr5018.exe
O4 - HKLM\..\Run: [foxlnep6627] C:\WINDOWS\help\poie2362.exe
O4 - HKLM\..\Run: [foxinhd1864] C:\WINDOWS\help\kfpm7690.exe
O4 - HKLM\..\Run: [foxlxno4979] C:\WINDOWS\help\kthn9338.exe
O4 - HKLM\..\Run: [foxfutx3721] C:\WINDOWS\help\nptr7351.exe
O4 - HKLM\..\Run: [foxfsdy3603] C:\WINDOWS\help\qriv8777.exe
O4 - HKLM\..\Run: [foxhnuk6823] C:\WINDOWS\help\uklv70.exe
O4 - HKLM\..\Run: [foxweiy7359] C:\WINDOWS\help\trhe3512.exe
O4 - HKLM\..\Run: [foxjntr1558] C:\WINDOWS\help\xiun8141.exe
O4 - HKLM\..\Run: [foxslwp9186] C:\WINDOWS\help\itwo4269.exe
O4 - HKLM\..\Run: [foxygvw8755] C:\WINDOWS\help\qrzn1898.exe
O4 - HKLM\..\Run: [foxslsn5761] C:\WINDOWS\help\xmyu1467.exe
O4 - HKLM\..\Run: [foxmedl4573] C:\WINDOWS\help\rrvl8471.exe
O4 - HKLM\..\Run: [foxvxts8964] C:\WINDOWS\help\lkfi7284.exe
O4 - HKLM\..\Run: [foxxciw391] C:\WINDOWS\help\tgvq1676.exe
O4 - HKLM\..\Run: [foxxpft5435] C:\WINDOWS\help\viku3102.exe
O4 - HKLM\..\Run: [foxevwu8375] C:\WINDOWS\help\tsne9839.exe
O4 - HKLM\..\Run: [foxvmkh7128] C:\WINDOWS\help\vvhr8145.exe
O4 - HKLM\..\Run: [foxpfoc2516] C:\WINDOWS\help\iqtk5627.exe
O4 - HKLM\..\Run: [foxcjph8291] C:\WINDOWS\help\jdvy7099.exe
O4 - HKLM\..\Run: [foxvenq1984] C:\WINDOWS\help\wmkn9517.exe
O4 - HKLM\..\Run: [foxkjmw6007] C:\WINDOWS\help\tkpn4695.exe
O4 - HKLM\..\Run: [foxxghp6806] C:\WINDOWS\help\yprf1002.exe
O4 - HKLM\..\Run: [foxuwjx6956] C:\WINDOWS\help\jppu8718.exe
O4 - HKLM\..\Run: [foxkute4389] C:\WINDOWS\help\lzgl8684.exe
O4 - HKLM\..\Run: [foxxhxc3440] C:\WINDOWS\help\tflv9667.exe
O4 - HKLM\..\Run: [foxrpio7136] C:\WINDOWS\help\wnzx6150.exe
O4 - HKLM\..\Run: [foxwsrh3326] C:\WINDOWS\help\vjlk4301.exe
O4 - HKLM\..\Run: [foxtqxh8504] C:\WINDOWS\help\uyuf6037.exe
O4 - HKLM\..\Run: [foxsnni3565] C:\WINDOWS\help\mruq3264.exe
O4 - HKLM\..\Run: [foxnlss554] C:\WINDOWS\help\swdf1215.exe
O4 - HKLM\..\Run: [foxymle3063] C:\WINDOWS\help\njjs3160.exe
O4 - HKLM\..\Run: [foxneqc1984] C:\WINDOWS\help\mmjp1357.exe
O4 - HKLM\..\Run: [foxsium8261] C:\WINDOWS\help\nsgf9532.exe
O4 - HKLM\..\Run: [foxfkok4254] C:\WINDOWS\help\qowk972.exe
O4 - HKLM\..\Run: [foxrgov4064] C:\WINDOWS\help\wufj8021.exe
O4 - HKLM\..\Run: [foxoueu1007] C:\WINDOWS\help\qmqs6774.exe
O4 - HKLM\..\Run: [foxurjr388] C:\WINDOWS\help\uspv3140.exe
O4 - HKLM\..\Run: [foxfhhh6573] C:\WINDOWS\help\ndgs3717.exe
O4 - HKLM\..\Run: [foxvmmx430] C:\WINDOWS\help\wiim2977.exe
O4 - HKLM\..\Run: [foxvfmu5343] C:\WINDOWS\help\omiu1706.exe
O4 - HKLM\..\Run: [foxqggw8994] C:\WINDOWS\help\injh2237.exe
O4 - HKLM\..\Run: [foxkhhj9525] C:\WINDOWS\help\txlp3098.exe
O4 - HKLM\..\Run: [foxypoh5034] C:\WINDOWS\help\mxip8501.exe
O4 - HKLM\..\Run: [foxnrfr5791] C:\WINDOWS\help\tlos8054.exe
O4 - HKLM\..\Run: [foxplek8923] C:\WINDOWS\help\wvqf7744.exe
O4 - HKLM\..\Run: [foxoqjh5732] C:\WINDOWS\help\lpod6782.exe
O4 - HKLM\..\Run: [foxnjmf4072] C:\WINDOWS\help\orhi1634.exe
O4 - HKLM\..\Run: [foxuzns128] C:\WINDOWS\help\trgk4587.exe
O4 - HKLM\..\Run: [foxxuqu8388] C:\WINDOWS\help\mwle8443.exe
O4 - HKLM\..\Run: [foxlhuw9220] C:\WINDOWS\help\ikke7021.exe
O4 - HKLM\..\Run: [foxdukh9726] C:\WINDOWS\help\jrde5256.exe
O4 - HKLM\..\Run: [foxjeig4310] C:\WINDOWS\help\tpmr4499.exe
O4 - HKLM\..\Run: [foxvjkt1788] C:\WINDOWS\help\wdss1099.exe
O4 - HKLM\..\Run: [foxwqxn6568] C:\WINDOWS\help\zdmf2437.exe
O4 - HKLM\..\Run: [foxulen1876] C:\WINDOWS\help\jnwu1931.exe
O4 - HKLM\..\Run: [foxklyg2545] C:\WINDOWS\help\tipp2839.exe
O4 - HKLM\..\Run: [foxoftr471] C:\WINDOWS\help\vwcl9279.exe
O4 - HKLM\..\Run: [foxsnmn6924] C:\WINDOWS\help\nlvp3181.exe
O4 - HKLM\..\Run: [foxxchf1466] C:\WINDOWS\help\smpv2738.exe
O4 - HKLM\..\Run: [foxugnx28] C:\WINDOWS\help\pokt4607.exe
O4 - HKLM\..\Run: [foxrihv1897] C:\WINDOWS\help\qtol9634.exe
O4 - HKLM\..\Run: [foxxxxx9399] C:\WINDOWS\help\pxce7555.exe
O4 - HKLM\..\Run: [foxzqwp2532] C:\WINDOWS\help\mnpp1014.exe
O4 - HKLM\..\Run: [foxkyoo1938] C:\WINDOWS\help\monu1044.exe
O4 - HKLM\..\Run: [foxjijn1925] C:\WINDOWS\help\slyc7304.exe
O4 - HKLM\..\Run: [foxmgqk27] C:\WINDOWS\help\iyoo9591.exe
O4 - HKLM\..\Run: [foxlvce1762] C:\WINDOWS\help\ytkj5096.exe
O4 - HKLM\..\Run: [foxvzjs4418] C:\WINDOWS\help\ytkj5096.exe
O4 - HKLM\..\Run: [foxqdxs4643] C:\WINDOWS\help\olon4046.exe
O4 - HKLM\..\Run: [foxrrxh4845] C:\WINDOWS\help\pldn2541.exe
O4 - HKLM\..\Run: [foxlukh8613] C:\WINDOWS\help\ikjl4766.exe
O4 - HKLM\..\Run: [foxjehn2055] C:\WINDOWS\help\pxce7555.exe
O4 - HKLM\..\Run: [foxodls6149] C:\WINDOWS\help\uxhw5133.exe
O4 - HKLM\..\Run: [foxrfyp9829] C:\WINDOWS\help\qprn906.exe
O4 - HKLM\..\Run: [foxgjhm7220] C:\WINDOWS\help\mnpp1014.exe
O4 - HKLM\..\Run: [foxxulc2708] C:\WINDOWS\help\jdmf1324.exe
O4 - HKLM\..\Run: [foxeqgz4117] C:\WINDOWS\help\wdnx5418.exe
O4 - HKLM\..\Run: [foxohmr8303] C:\WINDOWS\help\lgyv6234.exe
O4 - HKLM\..\Run: [foxeqfh4146] C:\WINDOWS\help\uyvs567.exe
O4 - HKLM\..\Run: [foxtfve4594] C:\WINDOWS\help\monu1044.exe
O4 - HKLM\..\Run: [foxymjr1883] C:\WINDOWS\help\imkg8896.exe
O4 - HKLM\..\Run: [foxndws7654] C:\WINDOWS\help\imkg8896.exe
O4 - HKLM\..\Run: [foxgtmk2147] C:\WINDOWS\help\inll4636.exe
O4 - HKLM\..\Run: [foxrgos3009] C:\WINDOWS\help\ytkj5096.exe
O4 - HKLM\..\Run: [foxdogz7875] C:\WINDOWS\help\roit9515.exe
O4 - HKLM\..\Run: [foxlmnq3469] C:\WINDOWS\help\iyoo9591.exe
O4 - HKLM\..\Run: [foxdnil2385] C:\WINDOWS\help\jspo6179.exe
O4 - HKLM\..\Run: [foxqoff3054] C:\WINDOWS\help\qmqq5719.exe
O4 - HKLM\..\Run: [foxnrjq8160] C:\WINDOWS\help\ouhd5765.exe
O4 - HKLM\..\Run: [foxvqik1309] C:\WINDOWS\help\nrke2949.exe
O4 - HKLM\..\Run: [foxpfmp1336] C:\WINDOWS\help\lxlo872.exe
O4 - HKLM\..\Run: [foxojuy8085] C:\WINDOWS\help\olon4046.exe
O4 - HKLM\..\Run: [foxihdj6826] C:\WINDOWS\help\npww797.exe
O4 - HKLM\..\Run: [foxwgsv6047] C:\WINDOWS\help\orxs2643.exe
O4 - HKLM\..\Run: [foxsdip6373] C:\WINDOWS\help\jgtf1280.exe
O4 - HKLM\..\Run: [foxegqf9028] C:\WINDOWS\help\jgtf1280.exe
O4 - HKLM\..\Run: [foxxseu641] C:\WINDOWS\help\veuw3498.exe
O4 - HKLM\..\Run: [foxpivg4572] C:\WINDOWS\help\wxhs3352.exe
O4 - HKLM\..\Run: [foxmmdh3163] C:\WINDOWS\help\xgjd4924.exe
O4 - HKLM\..\Run: [foxmmyx9708] C:\WINDOWS\help\ksfe5873.exe
O4 - HKLM\..\Run: [foxsvhs7558] C:\WINDOWS\help\njnq8859.exe
O4 - HKLM\..\Run: [foxhnwd6784] C:\WINDOWS\help\lsdv2419.exe
O4 - HKLM\..\Run: [foxnkex6165] C:\WINDOWS\help\rejp269.exe
O4 - HKLM\..\Run: [foxswdq4133] C:\WINDOWS\help\mqgu8876.exe
O4 - HKLM\..\Run: [foxgrvo6713] C:\WINDOWS\help\refo6843.exe
O4 - HKLM\..\Run: [foxnovs8129] C:\WINDOWS\help\qmkg5499.exe
O4 - HKLM\..\Run: [foxvzzo4227] C:\WINDOWS\help\qmkg5499.exe
O4 - HKLM\..\Run: [foxhhmd4877] C:\WINDOWS\help\lvhp2260.exe
O4 - HKLM\..\Run: [foxhiem1511] C:\WINDOWS\help\qohj98.exe
O4 - HKLM\..\Run: [foxrifl7386] C:\WINDOWS\help\nmrl8700.exe
O4 - HKLM\..\Run: [foxetfc8277] C:\WINDOWS\help\imkg8896.exe
O4 - HKLM\..\Run: [foxifhx4484] C:\WINDOWS\help\tnyi7951.exe
O4 - HKLM\..\Run: [foxniov703] C:\WINDOWS\help\qfek8072.exe
O4 - HKLM\..\Run: [foxvhwk5241] C:\WINDOWS\help\zydn5860.exe
O4 - HKLM\..\Run: [foxiset9527] C:\WINDOWS\help\pfqo8348.exe
O4 - HKLM\..\Run: [foxtujn5244] C:\WINDOWS\help\mort3414.exe
O4 - HKLM\..\Run: [foxhmtd1075] C:\WINDOWS\help\rdll7955.exe
O4 - HKLM\..\Run: [foxtjgv6804] C:\WINDOWS\help\ufzk9352.exe
O4 - HKLM\..\Run: [foxcznt9740] C:\WINDOWS\help\tqgu7763.exe
O4 - HKLM\..\Run: [foxuomi1803] C:\WINDOWS\help\yipr2452.exe
O4 - HKLM\..\Run: [foxvkew5052] C:\WINDOWS\help\vrde6040.exe
O4 - HKLM\..\Run: [foxfddr1138] C:\WINDOWS\help\ttpf4513.exe
O4 - HKLM\..\Run: [foxruyp176] C:\WINDOWS\help\loho4889.exe
O4 - HKLM\..\Run: [foxpphh4398] C:\WINDOWS\help\iund7581.exe
O4 - HKLM\..\Run: [foxserp8410] C:\WINDOWS\help\rhlr7854.exe
O4 - HKLM\..\Run: [foxszjt5144] C:\WINDOWS\help\lxpn3242.exe
O4 - HKLM\..\Run: [foxmieq2179] C:\WINDOWS\help\qktn1121.exe
O4 - HKLM\..\Run: [foxitvu7360] C:\WINDOWS\help\lodm1464.exe
O4 - HKLM\..\Run: [foxmrnp531] C:\WINDOWS\help\roit9515.exe
O4 - HKLM\..\Run: [foxmixo8753] C:\WINDOWS\help\rwod2710.exe
O4 - HKLM\..\Run: [foxsrmf9999] C:\WINDOWS\help\pddn2886.exe
O4 - HKLM\..\Run: [foxrywo6620] C:\WINDOWS\help\nrke2949.exe
O4 - HKLM\..\Run: [foxgeif3981] C:\WINDOWS\help\mxhv2907.exe
O4 - HKLM\..\Run: [foxfwie5863] C:\WINDOWS\help\phym9330.exe
O4 - HKLM\..\Run: [foxnrfx196] C:\WINDOWS\help\kusf7996.exe
O4 - HKLM\..\Run: [foxmoqh5286] C:\WINDOWS\help\qoxi962.exe
O4 - HKLM\..\Run: [foxpmvu9932] C:\WINDOWS\help\rnxt7478.exe
O4 - HKLM\..\Run: [foxdkci5750] C:\WINDOWS\help\jgtf1280.exe
O4 - HKLM\..\Run: [foxjvyn234] C:\WINDOWS\help\oihq7440.exe
O4 - HKLM\..\Run: [foxreyz3006] C:\WINDOWS\help\zqfg8460.exe
O4 - HKLM\..\Run: [foxexjr393] C:\WINDOWS\help\ktei5893.exe
O4 - HKLM\..\Run: [foxqces4729] C:\WINDOWS\help\qkdx5717.exe
O4 - HKLM\..\Run: [foxsgij2789] C:\WINDOWS\help\rkuo8836.exe
O4 - HKLM\..\Run: [foxjplg4871] C:\WINDOWS\help\wvud6775.exe
O4 - HKLM\..\Run: [foxvkvl7116] C:\WINDOWS\help\syoj3357.exe
O4 - HKLM\..\Run: [foxnetf4373] C:\WINDOWS\help\yjdk1120.exe
O4 - HKLM\..\Run: [foxddym8408] C:\WINDOWS\help\uqxj9827.exe
O4 - HKLM\..\Run: [foxdjkt8061] C:\WINDOWS\help\lkvd7083.exe
O4 - HKLM\..\Run: [foxstpi5301] C:\WINDOWS\help\zpmr772.exe
O4 - HKLM\..\Run: [foxgouy318] C:\WINDOWS\help\xfpu8310.exe
O4 - HKLM\..\Run: [foxftwo3672] C:\WINDOWS\help\ktei5893.exe
O4 - HKLM\..\Run: [foxzwnw5600] C:\WINDOWS\help\rcsg8011.exe
O4 - HKLM\..\Run: [foxmnzk3182] C:\WINDOWS\help\vzgk6855.exe
O4 - HKLM\..\Run: [foxxtdn4144] C:\WINDOWS\help\wkuq5119.exe
O4 - HKLM\..\Run: [foxxwdg560] C:\WINDOWS\help\rvnu302.exe
O4 - HKLM\..\Run: [foxiwsg321] C:\WINDOWS\help\oguc4203.exe
O4 - HKLM\..\Run: [foxidfj7042] C:\WINDOWS\help\oguc4203.exe
O4 - HKLM\..\Run: [foxtidv1095] C:\WINDOWS\help\ljdi9280.exe
O4 - HKLM\..\Run: [foxtuzm6109] C:\WINDOWS\help\xdem1773.exe
O4 - HKLM\..\Run: [foxeigi2207] C:\WINDOWS\help\xdem1773.exe
O4 - HKLM\..\Run: [foxxnmp4252] C:\WINDOWS\help\mdij9292.exe
O4 - HKLM\..\Run: [foxndyk6569] C:\WINDOWS\help\zruq5094.exe
O4 - HKLM\..\Run: [foxzuyp9062] C:\WINDOWS\help\ljdi9280.exe
O4 - HKLM\..\Run: [foxtdpv9187] C:\WINDOWS\help\qkwv2292.exe
O4 - HKLM\..\Run: [foxnxxy7898] C:\WINDOWS\help\qjme284.exe
O4 - HKLM\..\Run: [foxfnlz4950] C:\WINDOWS\help\mruw8714.exe
O4 - HKLM\..\Run: [foxvttn5735] C:\WINDOWS\help\tfio5167.exe
O4 - HKLM\..\Run: [foxqqji6061] C:\WINDOWS\help\kvou5790.exe
O4 - HKLM\..\Run: [foxijnu6714] C:\WINDOWS\help\pvmf8772.exe
O4 - HKLM\..\Run: [foxikxv6467] C:\WINDOWS\help\zoqd2988.exe
O4 - HKLM\..\Run: [foxrevm771] C:\WINDOWS\help\xpep7977.exe
O4 - HKLM\..\Run: [foxkptv1160] C:\WINDOWS\help\lcer5384.exe
O4 - HKLM\..\Run: [foxwhgl6989] C:\WINDOWS\help\okun1838.exe
O4 - HKLM\..\Run: [foxgygy3046] C:\WINDOWS\help\rhmx3306.exe
O4 - HKLM\..\Run: [foxdinf278] C:\WINDOWS\help\siqk8433.exe
O4 - HKLM\..\Run: [foxnxtu4464] C:\WINDOWS\help\wruo8094.exe
O4 - HKLM\..\Run: [foxxmsq5384] C:\WINDOWS\help\swyp6685.exe
O4 - HKLM\..\Run: [foxjijg9804] C:\WINDOWS\help\mgws7174.exe
O4 - HKLM\..\Run: [foxkwyq871] C:\WINDOWS\help\weiw7617.exe
O4 - HKLM\..\Run: [foxedmr4639] C:\WINDOWS\help\orci1549.exe
O4 - HKLM\..\Run: [foxjdkz7620] C:\WINDOWS\help\orci1549.exe
O4 - HKLM\..\Run: [foxqvgd3735] C:\WINDOWS\help\sjhd2812.exe
O4 - HKLM\..\Run: [foxeigc3426] C:\WINDOWS\help\xpep7977.exe
O4 - HKLM\..\Run: [foxvzhe8842] C:\WINDOWS\help\xmtt4711.exe
O4 - HKLM\..\Run: [foxyjzs5266] C:\WINDOWS\help\tikz1554.exe
O4 - HKLM\..\Run: [foxfexc7846] C:\WINDOWS\help\pede3050.exe
O4 - HKLM\..\Run: [foxuqyl3945] C:\WINDOWS\help\ixst7412.exe
O4 - HKLM\..\Run: [foxomlj2628] C:\WINDOWS\help\svdj6656.exe
O4 - HKLM\..\Run: [foxhuex3175] C:\WINDOWS\help\tudu3172.exe
O4 - HKLM\..\Run: [foxmtzt2673] C:\WINDOWS\help\wgrw9654.exe
O4 - HKLM\..\Run: [foxperp9126] C:\WINDOWS\help\lcer5384.exe
O4 - HKLM\..\Run: [foxelmf4438] C:\WINDOWS\help\ojfr6404.exe
O4 - HKLM\..\Run: [foxuuwk390] C:\WINDOWS\help\rhmx3306.exe
O4 - HKLM\..\Run: [foxjwmd1176] C:\WINDOWS\help\tcyi3101.exe
O4 - HKLM\..\Run: [foxiptd2941] C:\WINDOWS\help\wvsn4539.exe
O4 - HKLM\..\Run: [foxxfnm6872] C:\WINDOWS\help\ouyl6764.exe
O4 - HKLM\..\Run: [foxgqps4781] C:\WINDOWS\help\ifoy3887.exe
O4 - HKLM\..\Run: [foxrwlm8863] C:\WINDOWS\help\xsgd4363.exe
O4 - HKLM\..\Run: [foxzmeg1653] C:\WINDOWS\help\wlpk9583.exe
O4 - HKLM\..\Run: [foxedsc1519] C:\WINDOWS\help\qfnk1574.exe
O4 - HKLM\..\Run: [foxzkno4990] C:\WINDOWS\help\sers9733.exe
O4 - HKLM\..\Run: [foxctxh3313] C:\WINDOWS\help\xqpl7701.exe
O4 - HKLM\..\Run: [foxyndz2882] C:\WINDOWS\help\jlnv3234.exe
O4 - HKLM\..\Run: [foxznvk8256] C:\WINDOWS\help\yzdf6024.exe
O4 - HKLM\..\Run: [foxstsn8745] C:\WINDOWS\help\xtxh968.exe
O4 - HKLM\..\Run: [foxlgcu5956] C:\WINDOWS\help\rcul1457.exe
O4 - HKLM\..\Run: [foxulip8641] C:\WINDOWS\help\jmfr8667.exe
O4 - HKLM\..\Run: [foxkljk2736] C:\WINDOWS\help\srkn1352.exe
O4 - HKLM\..\Run: [foxftxo8047] C:\WINDOWS\help\irli5447.exe
O4 - HKLM\..\Run: [foxxjll3317] C:\WINDOWS\help\qsce9766.exe
O4 - HKLM\..\Run: [foxmyvx9147] C:\WINDOWS\help\wpnj6028.exe
O4 - HKLM\..\Run: [foxypjh4948] C:\WINDOWS\help\lhxv1858.exe
O4 - HKLM\..\Run: [foxpwgw4964] C:\WINDOWS\help\pvlo4233.exe
O4 - HKLM\..\Run: [foxxvgy4906] C:\WINDOWS\help\xvmf7659.exe
O4 - HKLM\..\Run: [foxgimi6240] C:\WINDOWS\help\jgzu3610.exe
O4 - HKLM\..\Run: [foxplxk8837] C:\WINDOWS\help\weiw7617.exe
O4 - HKLM\..\Run: [foxljij5768] C:\WINDOWS\help\sjhd2812.exe
O4 - HKLM\..\Run: [foxvvek6717] C:\WINDOWS\help\jpkh8478.exe
O4 - HKLM\..\Run: [foxlhrr9105] C:\WINDOWS\help\tehi9427.exe
O4 - HKLM\..\Run: [foxqvyh339] C:\WINDOWS\help\ttmy7738.exe
O4 - HKLM\..\Run: [foxuojd5027] C:\WINDOWS\help\knup1816.exe
O4 - HKLM\..\Run: [foxduhz9611] C:\WINDOWS\help\iwyr8524.exe
O4 - HKLM\..\Run: [foxehiv1113] C:\WINDOWS\help\sdgx7725.exe
O4 - HKLM\..\Run: [foxjxlw2405] C:\WINDOWS\help\ojfr6404.exe
O4 - HKLM\..\Run: [foxpddt3693] C:\WINDOWS\help\vwvl9193.exe
O4 - HKLM\..\Run: [foxjktv757] C:\WINDOWS\help\zhmx2192.exe
O4 - HKLM\..\Run: [foxwtgr920] C:\WINDOWS\help\jkwc7800.exe
O4 - HKLM\..\Run: [foxuvpk8222] C:\WINDOWS\help\xdgc679.exe
O4 - HKLM\..\Run: [foxnpvn7064] C:\WINDOWS\help\sesi934.exe
O4 - HKLM\..\Run: [foxelox4408] C:\WINDOWS\help\mvxl9774.exe
O4 - HKLM\..\Run: [foxhmgq5776] C:\WINDOWS\help\jkrk3175.exe
O4 - HKLM\..\Run: [foxlydp3772] C:\WINDOWS\help\owok1172.exe
O4 - HKLM\..\Run: [foxkfly523] C:\WINDOWS\help\khfn6483.exe
O4 - HKLM\..\Run: [foxfivy4291] C:\WINDOWS\help\jlnv3234.exe
O4 - HKLM\..\Run: [foxpuuw2927] C:\WINDOWS\help\mtlk4312.exe
O4 - HKLM\..\Run: [foxgqni271] C:\WINDOWS\help\mtlk4312.exe
O4 - HKLM\..\Run: [foxrmyu8255] C:\WINDOWS\help\rlgl7524.exe
O4 - HKLM\..\Run: [foxjyyz5583] C:\WINDOWS\help\uhgm2360.exe
O4 - HKLM\..\Run: [foxihty5571] C:\WINDOWS\help\ihdx8294.exe
O4 - HKLM\..\Run: [foxtfeo4814] C:\WINDOWS\help\pjog2673.exe
O4 - HKLM\..\Run: [foxnunq113] C:\WINDOWS\help\pvlo4233.exe
O4 - HKLM\..\Run: [foxrpjq1522] C:\WINDOWS\help\qsdr967.exe
O4 - HKLM\..\Run: [foxyhpy974] C:\WINDOWS\help\sjkl3982.exe
O4 - HKLM\..\Run: [foxjrxw498] C:\WINDOWS\help\rmyq4128.exe
O4 - HKLM\..\Run: [foxxmyx8924] C:\WINDOWS\help\oxhv5520.exe
O4 - HKLM\..\Run: [foxtgvs1418] C:\WINDOWS\help\mcqo2824.exe
O4 - HKLM\..\Run: [foxhpzi8765] C:\WINDOWS\help\wnrw3685.exe
O4 - HKLM\..\Run: [foxtkxs1288] C:\WINDOWS\help\tgth3835.exe
O4 - HKLM\..\Run: [foxsevu6231] C:\WINDOWS\help\jkwc7800.exe
O4 - HKLM\..\Run: [foxketf5089] C:\WINDOWS\help\qxrd4044.exe
O4 - HKLM\..\Run: [foxnnjm1602] C:\WINDOWS\help\qkxs8941.exe
O4 - HKLM\..\Run: [foxigef138] C:\WINDOWS\help\tdue8619.exe
O4 - HKLM\..\Run: [foxnrdj4620] C:\WINDOWS\help\lzdz845.exe
O4 - HKLM\..\Run: [foxfwhh259] C:\WINDOWS\help\mxfh7331.exe
O4 - HKLM\..\Run: [foxqrex2810] C:\WINDOWS\help\ujsl6766.exe
O4 - HKLM\..\Run: [foxwdqn4056] C:\WINDOWS\help\lqmh9096.exe
O4 - HKLM\..\Run: [foxmkkj6385] C:\WINDOWS\help\pljy477.exe
O4 - HKLM\..\Run: [foxntye8133] C:\WINDOWS\help\ssgv356.exe
O4 - HKLM\..\Run: [foxfums190] C:\WINDOWS\help\lsyc5778.exe
O4 - HKLM\..\Run: [foxcpzl3548] C:\WINDOWS\help\sipm5113.exe
O4 - HKLM\..\Run: [foxmvsc5957] C:\WINDOWS\help\mrqv1959.exe
O4 - HKLM\..\Run: [foxqfjp8955] C:\WINDOWS\help\nozr1813.exe
O4 - HKLM\..\Run: [foxkdio3101] C:\WINDOWS\help\zeiy1286.exe
O4 - HKLM\..\Run: [foxqgtj964] C:\WINDOWS\help\jswx4105.exe
O4 - HKLM\..\Run: [foxdvgd8575] C:\WINDOWS\help\edop2901.exe
O4 - HKLM\..\Run: [foxjphf8115] C:\WINDOWS\help\ijkl5811.exe
O4 - HKLM\..\Run: [foxkmuz1395] C:\WINDOWS\help\ivjd826.exe
O4 - HKLM\..\Run: [foxdtoq1943] C:\WINDOWS\help\pmvh3674.exe
O4 - HKLM\..\Run: [foxucno2403] C:\WINDOWS\help\zcqo4653.exe
O4 - HKLM\..\Run: [foxshef4977] C:\WINDOWS\help\vqqj7362.exe
O4 - HKLM\..\Run: [foxxciu3711] C:\WINDOWS\help\sipm5113.exe
O4 - HKLM\..\Run: [foxdhsm5813] C:\WINDOWS\help\mpkg1093.exe
O4 - HKLM\..\Run: [foxwpjp1125] C:\WINDOWS\help\mpkg1093.exe
O4 - HKLM\..\Run: [foxfdek6722] C:\WINDOWS\help\wilr6422.exe
O4 - HKLM\..\Run: [foxyvtk3536] C:\WINDOWS\help\djhi9433.exe
O4 - HKLM\..\Run: [foxnzdh926] C:\WINDOWS\help\xewi6246.exe
O4 - HKLM\..\Run: [foxkoeg122] C:\WINDOWS\help\rgom8871.exe
O4 - HKLM\..\Run: [foxolnx9248] C:\WINDOWS\help\izhz7271.exe
O4 - HKLM\..\Run: [foxktfe4560] C:\WINDOWS\help\mife3636.exe
O4 - HKLM\..\Run: [foxnriw9235] C:\WINDOWS\help\mrqv1959.exe
O4 - HKLM\..\Run: [foxlsyn7650] C:\WINDOWS\help\jxfg332.exe
O4 - HKLM\..\Run: [foxlsci7621] C:\WINDOWS\help\jyhm3787.exe
O4 - HKLM\..\Run: [foxixrl3680] C:\WINDOWS\help\vikp5366.exe
O4 - HKLM\..\Run: [foxpixt9102] C:\WINDOWS\help\lxku1947.exe
O4 - HKLM\..\Run: [foxtxmo6160] C:\WINDOWS\help\hgtj6391.exe
O4 - HKLM\..\Run: [foxhdnk9507] C:\WINDOWS\help\jydl362.exe
O4 - HKLM\..\Run: [foxksep1076] C:\WINDOWS\help\ymgf7630.exe
O4 - HKLM\..\Run: [foxjfdv4388] C:\WINDOWS\help\fjpi2218.exe
O4 - HKLM\..\Run: [foxoplw5693] C:\WINDOWS\help\hlgs7099.exe
O4 - HKLM\..\Run: [foxuslt2777] C:\WINDOWS\help\rgom8871.exe
O4 - HKLM\..\Run: [foxdgei4919] C:\WINDOWS\help\olln1667.exe
O4 - HKLM\..\Run: [foxxzpg8307] C:\WINDOWS\help\nvou8404.exe
O4 - HKLM\..\Run: [foxkjjs5902] C:\WINDOWS\help\shup6254.exe
O4 - HKLM\..\Run: [foxggvg2774] C:\WINDOWS\help\jplq8613.exe
O4 - HKLM\..\Run: [foxuyrr3543] C:\WINDOWS\help\vire1018.exe
O4 - HKLM\..\Run: [foxwyyw9687] C:\WINDOWS\help\hwnn11.exe
O4 - HKLM\..\Run: [foxnoen4855] C:\WINDOWS\help\eufs6424.exe
O4 - HKLM\..\Run: [foxgocu3714] C:\WINDOWS\help\syor5488.exe
O4 - HKLM\..\Run: [foxjvsq167] C:\WINDOWS\help\mtgl7566.exe
O4 - HKLM\..\Run: [foxjqer5889] C:\WINDOWS\help\fmxe5484.exe
O4 - HKLM\..\Run: [foxdwwo2924] C:\WINDOWS\help\ivgp8600.exe
O4 - HKLM\..\Run: [foxgjdi6069] C:\WINDOWS\help\zfym5635.exe
O4 - HKLM\..\Run: [foxzedk9733] C:\WINDOWS\help\fpgf8780.exe
O4 - HKLM\..\Run: [foxmrtk7257] C:\WINDOWS\help\xkgi2444.exe
O4 - HKLM\..\Run: [foxwqei4543] C:\WINDOWS\help\nuqp9420.exe
O4 - HKLM\..\Run: [foxinjf7583] C:\WINDOWS\help\lwvi9967.exe
O4 - HKLM\..\Run: [foxqpqv5053] C:\WINDOWS\help\vqmh3937.exe
O4 - HKLM\..\Run: [foxxkjj1226] C:\WINDOWS\help\drnq344.exe
O4 - HKLM\..\Run: [foxwknl4651] C:\WINDOWS\help\pskw4497.exe
O4 - HKLM\..\Run: [foxverv9804] C:\WINDOWS\help\ieuo2878.exe
O4 - HKLM\..\Run: [foxiqlp7299] C:\WINDOWS\help\tkts2516.exe
O4 - HKLM\..\Run: [foxsmvp1481] C:\WINDOWS\help\qpus4351.exe
O4 - HKLM\..\Run: [foxdrks4376] C:\WINDOWS\help\hwnn11.exe
O4 - HKLM\..\Run: [foxellt7633] C:\WINDOWS\help\vqqj7362.exe
O4 - HKLM\..\Run: [foxrmiz1787] C:\WINDOWS\help\vxor2477.exe
O4 - HKLM\..\Run: [foxsjru1640] C:\WINDOWS\help\pvst7763.exe
O4 - HKLM\..\Run: [foxxdir2656] C:\WINDOWS\help\qjnt5868.exe
O4 - HKLM\..\Run: [foxnjii8381] C:\WINDOWS\help\topx5659.exe
O4 - HKLM\..\Run: [foxvjnd2949] C:\WINDOWS\help\mwfn2782.exe
O4 - HKLM\..\Run: [foxrdlv3158] C:\WINDOWS\help\mpkg1093.exe
O4 - HKLM\..\Run: [foxpoos6709] C:\WINDOWS\help\ywmq7087.exe
O4 - HKLM\..\Run: [foxezqw5789] C:\WINDOWS\help\nuqp9420.exe
O4 - HKLM\..\Run: [foxpclz8269] C:\WINDOWS\help\dist8500.exe
O4 - HKLM\..\Run: [foxrpeq8106] C:\WINDOWS\help\ninx981.exe
O4 - HKLM\..\Run: [foxnpxx8244] C:\WINDOWS\help\wgoo5154.exe
O4 - HKLM\..\Run: [foxruew8005] C:\WINDOWS\help\qvho817.exe
O4 - HKLM\..\Run: [foxwtin900] C:\WINDOWS\help\wgoo5154.exe
O4 - HKLM\..\Run: [foxyxmq2443] C:\WINDOWS\help\pdhu717.exe
O4 - HKLM\..\Run: [foxjncd1778] C:\WINDOWS\help\vzkl3611.exe
O4 - HKLM\..\Run: [foxwxke1970] C:\WINDOWS\help\tjeg4827.exe
O4 - HKLM\..\Run: [foxnvhu5671] C:\WINDOWS\help\reju1335.exe
O4 - HKLM\..\Run: [foxphfx1289] C:\WINDOWS\help\yyfq4920.exe
O4 - HKLM\..\Run: [foxhvrc5308] C:\WINDOWS\help\htfy4489.exe
O4 - HKLM\..\Run: [foxlrew9866] C:\WINDOWS\help\lflx4121.exe
O4 - HKLM\..\Run: [foxmwiz1410] C:\WINDOWS\help\omhu4000.exe
O4 - HKLM\..\Run: [foxcsdt2209] C:\WINDOWS\help\fetx8018.exe
O4 - HKLM\..\Run: [foxgdpn5237] C:\WINDOWS\help\jxgu2578.exe
O4 - HKLM\..\Run: [foxjqgv1619] C:\WINDOWS\help\fjrl7947.exe
O4 - HKLM\..\Run: [foxdlcd3639] C:\WINDOWS\help\zoqe9657.exe
O4 - HKLM\..\Run: [foxvdyj2116] C:\WINDOWS\help\iojv5730.exe
O4 - HKLM\..\Run: [foxding6947] C:\WINDOWS\help\hwit4330.exe
O4 - HKLM\..\Run: [foxjtmk1431] C:\WINDOWS\help\yrey6349.exe
O4 - HKLM\..\Run: [foxdchh8465] C:\WINDOWS\help\ywuq2882.exe
O4 - HKLM\..\Run: [foxnqql2593] C:\WINDOWS\help\tjeg4827.exe
O4 - HKLM\..\Run: [foxsfjj7164] C:\WINDOWS\help\qdyc5036.exe
O4 - HKLM\..\Run: [foxruwe2325] C:\WINDOWS\help\mvtj5304.exe
O4 - HKLM\..\Run: [foxcqst172] C:\WINDOWS\help\hzoi4141.exe
O4 - HKLM\..\Run: [foxsvgw8623] C:\WINDOWS\help\rllh9874.exe
O4 - HKLM\..\Run: [foxmyrw2392] C:\WINDOWS\help\reju1335.exe
O4 - HKLM\..\Run: [foxlnvy4296] C:\WINDOWS\help\ndwo6856.exe
O4 - HKLM\..\Run: [foxwvrh1863] C:\WINDOWS\help\gzde5627.exe
O4 - HKLM\..\Run: [foxxiqj3393] C:\WINDOWS\help\ksim374.exe
O4 - HKLM\..\Run: [foxqeol2352] C:\WINDOWS\help\vdtf4573.exe
O4 - HKLM\..\Run: [foxmmgo7663] C:\WINDOWS\help\okrj5062.exe
O4 - HKLM\..\Run: [foxgtmh4422] C:\WINDOWS\help\wmgk9411.exe
O4 - HKLM\..\Run: [foxygem6701] C:\WINDOWS\help\wosh6104.exe
O4 - HKLM\..\Run: [foxthkj76] C:\WINDOWS\help\svho4476.exe
O4 - HKLM\..\Run: [foxieue5805] C:\WINDOWS\help\sexh1009.exe
O4 - HKLM\..\Run: [foxxroo9737] C:\WINDOWS\help\sexh1009.exe
O4 - HKLM\..\Run: [foxfveh7878] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxdumy3027] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxfnlr6159] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxhphy4436] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxqtpo7092] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxmzqd5741] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxnxtp5683] C:\WINDOWS\help\dyry8874.exe
O4 - HKLM\..\Run: [foxcpxt4633] C:\WINDOWS\help\mphw3262.exe
O4 - HKLM\..\Run: [foxvxow9944] C:\WINDOWS\help\yvcr7343.exe
O4 - HKLM\..\Run: [foxhewm2600] C:\WINDOWS\help\yvcr7343.exe
O4 - HKLM\..\Run: [foxiymj5879] C:\WINDOWS\help\yvcr7343.exe
O4 - HKLM\..\Run: [foxcupw7681] C:\WINDOWS\help\ifng1622.exe
O4 - HKLM\..\Run: [foxgimn3976] C:\WINDOWS\help\qqmg4324.exe
O4 - HKLM\..\Run: [foxuysu4599] C:\WINDOWS\help\qqmg4324.exe
O4 - HKLM\..\Run: [foxnxut1124] C:\WINDOWS\help\rnre8477.exe
O4 - HKLM\..\Run: [foxpnnk961] C:\WINDOWS\help\hryx5867.exe
O4 - HKLM\..\Run: [foxgjgu8304] C:\WINDOWS\help\hryx5867.exe
O4 - HKLM\..\Run: [foxmpgn2860] C:\WINDOWS\help\fpis1016.exe
O4 - HKLM\..\Run: [foxilvc3157] C:\WINDOWS\help\rnre8477.exe
O4 - HKLM\..\Run: [foxeyvu2535] C:\WINDOWS\help\hljy4920.exe
O4 - HKLM\..\Run: [foxjfhd2209] C:\WINDOWS\help\jmey9741.exe
O4 - HKLM\..\Run: [foxlgyd7031] C:\WINDOWS\help\lvil5570.exe
O4 - HKLM\..\Run: [foxnjnt1942] C:\WINDOWS\help\dhxs5246.exe
O4 - HKLM\..\Run: [foxrkle4923] C:\WINDOWS\help\lppr4652.exe
O4 - HKLM\..\Run: [foxnumv3472] C:\WINDOWS\help\qqnz7634.exe
O4 - HKLM\..\Run: [foxplds3338] C:\WINDOWS\help\gsxl4966.exe
O4 - HKLM\..\Run: [foxhmvn2255] C:\WINDOWS\help\mdot6183.exe
O4 - HKLM\..\Run: [foxfwfw2418] C:\WINDOWS\help\orfp6049.exe
O4 - HKLM\..\Run: [foxxwdm6010] C:\WINDOWS\help\vtqw428.exe
O4 - HKLM\..\Run: [foxqunl1661] C:\WINDOWS\help\dfht5129.exe
O4 - HKLM\..\Run: [foxqimn3192] C:\WINDOWS\help\wffk8721.exe
O4 - HKLM\..\Run: [foxxnoy7717] C:\WINDOWS\help\odqj4372.exe
O4 - HKLM\..\Run: [foxkofd6771] C:\WINDOWS\help\dumm3439.exe
O4 - HKLM\..\Run: [foxjids5199] C:\WINDOWS\help\yjdf3385.exe
O4 - HKLM\..\Run: [foxeoko729] C:\WINDOWS\help\popl5902.exe
O4 - HKLM\..\Run: [foxuhgm1046] C:\WINDOWS\help\dmno4840.exe
O4 - HKLM\..\Run: [foxcisr7177] C:\WINDOWS\help\jyih9381.exe
O4 - HKLM\..\Run: [foxheii1706] C:\WINDOWS\help\wnyi1611.exe
O4 - HKLM\..\Run: [foxflyn1723] C:\WINDOWS\help\rell6909.exe
O4 - HKLM\..\Run: [foxwqir3429] C:\WINDOWS\help\wmdg5977.exe
O4 - HKLM\..\Run: [foxrejy5462] C:\WINDOWS\help\pywk9878.exe
O4 - HKLM\..\Run: [foxmxws5788] C:\WINDOWS\help\cwix9121.exe
O4 - HKLM\..\Run: [foxcmyw4868] C:\WINDOWS\help\ukjg1155.exe
O4 - HKLM\..\Run: [foxhgny5913] C:\WINDOWS\help\pedf9719.exe
O4 - HKLM\..\Run: [foxqzec6850] C:\WINDOWS\help\jwsj8314.exe
O4 - HKLM\..\Run: [foxyncc9551] C:\WINDOWS\help\utfq7528.exe
O4 - HKLM\..\Run: [foxhmyz7820] C:\WINDOWS\help\gsdx532.exe
O4 - HKLM\..\Run: [foxlhty9230] C:\WINDOWS\help\gsdx532.exe
O4 - HKLM\..\Run: [foxgsvi1263] C:\WINDOWS\help\xiqd9255.exe
O4 - HKLM\..\Run: [foxrmvm3755] C:\WINDOWS\help\jnww1941.exe
O4 - HKLM\..\Run: [foxlqin7523] C:\WINDOWS\help\ukjg1155.exe
O4 - HKLM\..\Run: [foxvpoe8025] C:\WINDOWS\help\jkts3300.exe
O4 - HKLM\..\Run: [foxeqfc6411] C:\WINDOWS\help\gsdx532.exe
O4 - HKLM\..\Run: [foxhmwh7850] C:\WINDOWS\help\kvlk235.exe
O4 - HKLM\..\Run: [foxsisg8146] C:\WINDOWS\help\lqlr4567.exe
O4 - HKLM\..\Run: [foxoehk7272] C:\WINDOWS\help\rfhc1364.exe
O4 - HKLM\..\Run: [foxswee8652] C:\WINDOWS\help\erde2313.exe
O4 - HKLM\..\Run: [foxflyg9602] C:\WINDOWS\help\skjl2936.exe
O4 - HKLM\..\Run: [foxgdow698] C:\WINDOWS\help\lrhf4625.exe
O4 - HKLM\..\Run: [foxtehn226] C:\WINDOWS\help\ezrk578.exe
O4 - HKLM\..\Run: [foxljml5863] C:\WINDOWS\help\nkji9983.exe
O4 - HKLM\..\Run: [foxwdmp8355] C:\WINDOWS\help\yekn2476.exe
O4 - HKLM\..\Run: [foxgtpm7866] C:\WINDOWS\help\gsyf561.exe
O4 - HKLM\..\Run: [foxdvip9765] C:\WINDOWS\help\jooj8574.exe
O4 - HKLM\..\Run: [foxwqxp6578] C:\WINDOWS\help\mpit9912.exe
O4 - HKLM\..\Run: [foxojfw7201] C:\WINDOWS\help\ucmp6010.exe
O4 - HKLM\..\Run: [foxlwwk4086] C:\WINDOWS\help\vjon1067.exe
O4 - HKLM\..\Run: [foxgtnf4412] C:\WINDOWS\help\nmvq3191.exe
O4 - HKLM\..\Run: [foxwqgy1174] C:\WINDOWS\help\losh7933.exe
O4 - HKLM\..\Run: [foxwtjs3299] C:\WINDOWS\help\jfyi6796.exe
O4 - HKLM\..\Run: [foxfnku2839] C:\WINDOWS\help\fzpd7122.exe
O4 - HKLM\..\Run: [foxegto4575] C:\WINDOWS\help\dtnr5550.exe
O4 - HKLM\..\Run: [foxdziw7380] C:\WINDOWS\help\lxtt7732.exe
O4 - HKLM\..\Run: [foxohlf7113] C:\WINDOWS\help\yqfc4065.exe
O4 - HKLM\..\Run: [foxdkdf1355] C:\WINDOWS\help\dlwm7285.exe
O4 - HKLM\..\Run: [foxveuf7635] C:\WINDOWS\help\uqvw1977.exe
O4 - HKLM\..\Run: [foxqvxh7009] C:\WINDOWS\help\zqyy640.exe
O4 - HKLM\..\Run: [foxdkwd7929] C:\WINDOWS\help\nnnd9824.exe
O4 - HKLM\..\Run: [foxyjyz9681] C:\WINDOWS\help\whol4099.exe
O4 - HKLM\..\Run: [foxyylo1388] C:\WINDOWS\help\pedf9719.exe
O4 - HKLM\..\Run: [foxdwdl5284] C:\WINDOWS\help\rxgf6924.exe
O4 - HKLM\..\Run: [foxkkes1441] C:\WINDOWS\help\ropk5176.exe
O4 - HKLM\..\Run: [foxkqql5603] C:\WINDOWS\help\xpdx2392.exe
O4 - HKLM\..\Run: [foxvndt4817] C:\WINDOWS\help\pihx9560.exe
O4 - HKLM\..\Run: [foxsqpu3291] C:\WINDOWS\help\xtfx2263.exe
O4 - HKLM\..\Run: [foxfghk4299] C:\WINDOWS\help\rwrs6001.exe
O4 - HKLM\..\Run: [foxwedf5008] C:\WINDOWS\help\fyuc539.exe
O4 - HKLM\..\Run: [foxfden4448] C:\WINDOWS\help\dxvy2291.exe
O4 - HKLM\..\Run: [foxizkq2579] C:\WINDOWS\help\dxvy2291.exe
O4 - HKLM\..\Run: [foxwfwc7197] C:\WINDOWS\help\hpin2564.exe
O4 - HKLM\..\Run: [foxszmu7523] C:\WINDOWS\help\kwde8988.exe
O4 - HKLM\..\Run: [foxlssw6365] C:\WINDOWS\help\oeiw8730.exe
O4 - HKLM\..\Run: [foxvves5508] C:\WINDOWS\help\inqo2447.exe
O4 - HKLM\..\Run: [foxdmsk3592] C:\WINDOWS\help\kyuu9076.exe
O4 - HKLM\..\Run: [foxudgu2346] C:\WINDOWS\help\hpin2564.exe
O4 - HKLM\..\Run: [foxcdep1844] C:\WINDOWS\help\vwed4864.exe
O4 - HKLM\..\Run: [foxqwuc9188] C:\WINDOWS\help\oijd8620.exe
O4 - HKLM\..\Run: [foxesty5194] C:\WINDOWS\help\cyvw7905.exe
O4 - HKLM\..\Run: [foxmqyg6277] C:\WINDOWS\help\sjjs5057.exe
O4 - HKLM\..\Run: [foxoefx9422] C:\WINDOWS\help\cyvw7905.exe
O4 - HKLM\..\Run: [foxgiio1606] C:\WINDOWS\help\glxj7595.exe
O4 - HKLM\..\Run: [foxjhnq9736] C:\WINDOWS\help\iyrx7432.exe
O4 - HKLM\..\Run: [foxcckl5240] C:\WINDOWS\help\rguy147.exe
O4 - HKLM\..\Run: [foxjsoc4721] C:\WINDOWS\help\nkhv2134.exe
O4 - HKLM\..\Run: [foxhfvl4885] C:\WINDOWS\help\udgq8218.exe
O4 - HKLM\..\Run: [foxueyy8949] C:\WINDOWS\help\fokm4316.exe
O4 - HKLM\..\Run: [foxsfoi3910] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxyloy8464] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxwqzf2154] C:\WINDOWS\help\yimj7951.exe
O4 - HKLM\..\Run: [foxsxsd7436] C:\WINDOWS\help\skdw1661.exe
O4 - HKLM\..\Run: [foxylmg8493] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxpchf5909] C:\WINDOWS\help\yjgn4555.exe
O4 - HKLM\..\Run: [foxjgrg9677] C:\WINDOWS\help\pfwx1899.exe
O4 - HKLM\..\Run: [foxgktw4813] C:\WINDOWS\help\kqvw477.exe
O4 - HKLM\..\Run: [foxzhmy8594] C:\WINDOWS\help\iltd2389.exe
O4 - HKLM\..\Run: [foxmktz7766] C:\WINDOWS\help\xnow1305.exe
O4 - HKLM\..\Run: [foxdmmc6712] C:\WINDOWS\help\fqwu7524.exe
O4 - HKLM\..\Run: [foxgncy8109] C:\WINDOWS\help\ujxd4722.exe
O4 - HKLM\..\Run: [foxgoxg8138] C:\WINDOWS\help\etfw820.exe
O4 - HKLM\..\Run: [foxymkm8523] C:\WINDOWS\help\eude849.exe
O4 - HKLM\..\Run: [foxzwli25] C:\WINDOWS\help\wsnk1234.exe
O4 - HKLM\..\Run: [foxwndd6938] C:\WINDOWS\help\xfng2735.exe
O4 - HKLM\..\Run: [foxiujl6019] C:\WINDOWS\help\opqr8311.exe
O4 - HKLM\..\Run: [foxnjif3986] C:\WINDOWS\help\mpkd6697.exe
O4 - HKLM\..\Run: [foxxnps6642] C:\WINDOWS\help\qhtw1386.exe
O4 - HKLM\..\Run: [foxpjot5601] C:\WINDOWS\help\ndxj168.exe
O4 - HKLM\..\Run: [foxklug2460] C:\WINDOWS\help\tgux6090.exe
O4 - HKLM\..\Run: [foxhyto2740] C:\WINDOWS\help\opqr8311.exe
O4 - HKLM\..\Run: [foxryqy8674] C:\WINDOWS\help\ghvm5451.exe
O4 - HKLM\..\Run: [foxoilr3928] C:\WINDOWS\help\ntqx8211.exe
O4 - HKLM\..\Run: [foxlvye7386] C:\WINDOWS\help\skyh9415.exe
O4 - HKLM\..\Run: [foxhgqi2698] C:\WINDOWS\help\jedc97.exe
O4 - HKLM\..\Run: [foxvxsc3380] C:\WINDOWS\help\mqii6726.exe
O4 - HKLM\..\Run: [foxyhmq9803] C:\WINDOWS\help\tgux6090.exe
O4 - HKLM\..\Run: [foxpdfd7148] C:\WINDOWS\help\cmuq645.exe
O4 - HKLM\..\Run: [foxpnpu5471] C:\WINDOWS\help\eple5526.exe
O4 - HKLM\..\Run: [foxegst7934] C:\WINDOWS\help\kxyn6743.exe
O4 - HKLM\..\Run: [foxpnoc5500] C:\WINDOWS\help\jpim8507.exe
O4 - HKLM\..\Run: [foxmokr7340] C:\WINDOWS\help\otsr8181.exe
O4 - HKLM\..\Run: [foxgjig2815] C:\WINDOWS\help\njhy9858.exe
O4 - HKLM\..\Run: [foxjqdu9239] C:\WINDOWS\help\ntqx8211.exe
O4 - HKLM\..\Run: [foxljgo5797] C:\WINDOWS\help\lump52.exe
O4 - HKLM\..\Run: [foxuewj6704] C:\WINDOWS\help\iwfs1950.exe
O4 - HKLM\..\Run: [foxucir43] C:\WINDOWS\help\jedc97.exe
O4 - HKLM\..\Run: [foxyspt4760] C:\WINDOWS\help\tilp2753.exe
O4 - HKLM\..\Run: [foxmezs8988] C:\WINDOWS\help\mpit3242.exe

Now close all windows other than HiJackThis, then click Fix Checked. close HijackThis.
______________________________

Reboot your computer in Safe Mode.
  • If the computer is running, shut down Windows, and then turn off the power.
  • Wait 30 seconds, and then turn the computer on.
  • Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
  • Ensure that the Safe Mode option is selected.
  • Press Enter. The computer then begins to start in Safe mode.
  • Login on your usual account.
______________________________

Open the SmitfraudFix Folder, then double-click smitfraudfix.cmd file to start the tool.
Select option #2 - Clean by typing 2 and press Enter.
Wait for the tool to complete and disk cleanup to finish.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?" answer Yes by typing Y and hit Enter.
The tool will also check if wininet.dll is infected. If a clean version is found, you will be prompted to replace wininet.dll. Answer Yes to the question "Replace infected file ?" by typing Y and hit Enter.

A reboot may be needed to finish the cleaning process, if you computer does not restart automatically please do it yourself manually. Reboot in Safe Mode.

The tool will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply.
______________________________

Navigate to C:\Windows\Temp
Click Edit, click Select All, press the DELETE key, and then click Yes to confirm that you want to send all the items to the Recycle Bin.

Navigate to C:\Documents and Settings\(EVERY LISTED USER)\Local Settings\Temp
Click Edit, click Select All, press the DELETE key, and then click Yes to confirm that you want to send all the items to the Recycle Bin.

Clean out your Temporary Internet files. Proceed like this:
  • Quit Internet Explorer and quit any instances of Windows Explorer.
  • Click Start, click Control Panel, and then double-click Internet Options.
  • On the General tab, click Delete Files under Temporary Internet Files.
  • In the Delete Files dialog box, tick the Delete all offline content check box , and then click OK.
  • On the General tab, click Delete Cookies under Temporary Internet Files, and then click OK.
  • Click on the Programs tab then click the Reset Web Settings button. Click Apply then OK.
  • Click OK.
Next Click Start, click Control Panel and then double-click Display. Click on the Desktop tab, then click the Customize Desktop button. Click on the Web tab. Under Web Pages you should see a checked entry called Security info or something similar. If it is there, select that entry and click the Delete button. Click Ok then Apply and Ok.

Empty the Recycle Bin by right-clicking the Recycle Bin icon on your Desktop, and then clicking Empty Recycle Bin.
________________
agrarianmonk

Posted Image

Requests for help via PM will be ignored. Please post on the forums instead :)
Please be courteous, polite, and say thank you.
Please post the final results, good or bad. We like to know!

#14 agrarianmonk

agrarianmonk

  • Members
  • 522 posts
  • OFFLINE
  •  
  • Local time:01:28 PM

Posted 01 July 2006 - 10:26 PM

Close ALL open Windows / Programs / Folders. Please start Ewido and run a full scan.
  • Click on Scanner
  • Click on the Settings tab.
    • Under How to act?
      Click on Recommended Action and choose Quarantine from the popup menu.
    • Under How to scan?
      All checkboxes should be ticked.
    • Under Possibly unwanted software:
      All checkboxes should be ticked.
    • Under Reports:
      Select Automatically generate report after every scan and uncheck Only if threats were found.
    • Under What to scan?
      Select Scan every file.
  • Click on the Scan tab.
  • Click on Complete System Scan to start the scan process.
  • Let the program scan the machine.
  • When the scan has finished:
    • Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
    • At the bottom of the window click on the Apply all Actions button. (3)
      Posted Image
  • When done, click the Save Scan Report button.
    • Click the Save Report as button.
    • Save the report to your Desktop.
  • Right-click the Ewido Tray Icon and select Exit. Confirm by clicking Yes.
Reboot in Normal Mode.
______________________________

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #3 - Delete Trusted zone by typing 3 and press Enter.
Answer Yes to the question "Restore Trusted Zone ?" by typing Y and hit Enter.

Note, if you use SpywareBlaster and/or IE-SPYAD, it will be necessary to re-install the protection both afford. For SpywareBlaster, run the program and re-protect all items. For IE-SPYAD, run the batch file and reinstall the protection.
______________________________

Please go HERE to run Panda's ActiveScan
  • Once you are on the Panda site click the Scan your PC button
  • A new window will open...click the Check Now button
  • Enter your Country
  • Enter your State/Province
  • Enter your e-mail address and click send
  • Select either Home User or Company
  • Click the big Scan Now button
  • If it wants to install an ActiveX component allow it
  • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
  • When download is complete, click on My Computer to start the scan
  • When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report
Please post:
  • c:\rapport.txt
  • Ewido log
  • panda log
  • A new HijackThis log
Your may need several replies to post the requested logs, otherwise they might get cut off.
agrarianmonk

Posted Image

Requests for help via PM will be ignored. Please post on the forums instead :)
Please be courteous, polite, and say thank you.
Please post the final results, good or bad. We like to know!

#15 agrarianmonk

agrarianmonk

  • Members
  • 522 posts
  • OFFLINE
  •  
  • Local time:01:28 PM

Posted 01 July 2006 - 10:27 PM

an extremely long set of instructions (2 posts);

I would suggest printing out the instructions or copying them to notepad for your convenience.

Good luck!
agrarianmonk

Posted Image

Requests for help via PM will be ignored. Please post on the forums instead :)
Please be courteous, polite, and say thank you.
Please post the final results, good or bad. We like to know!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users