Logfile of HijackThis v1.99.1 Scan saved at 9:33:06 AM, on 1/7/2007 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\TEMP\673140825.exe C:\WINDOWS\TEMP\RarSFX0\dr.exe C:\WINDOWS\TEMP\RarSFX0\drweb\drwebwcl.exe (uninstall Dr.WEB first) C:\Documents and Settings\Rick Lambert\Desktop\HijackThis.exe O2 - BHO: (no name) - {371EE1EF-F177-1390-7807-08525DC0E55C} - C:\WINDOWS\System32\nweipeg.dll (Trojan-Downloader.Win32.Busky.gen - http://research.sunbelt-software.com/threatdisplay.aspx?name=Trojan-Downloader.Win32.Busky.gen&threatid=98182) O2 - BHO: (no name) - {665EDBE9-2DB6-48F3-9C1A-A0DF297335AB} - C:\WINDOWS\System32\kbdycc32.dll (file missing) O3 - Toolbar: DVDInfoPro Toolbar - {852AA4EA-68B0-487b-98E7-4F03898CB502} - C:\Program Files\DVDInfoPro Toolbar\v2.0.0.0\DVDInfoPro_Toolbar.dll (file missing) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [{74A06AEC-04E2-1033-0212-030419010001}] "C:\Program Files\Common Files\{74A06AEC-04E2-1033-0212-030419010001}\Update.exe" te-110-12-0000273 O4 - HKLM\..\Run: [hrcopul.dll] C:\WINDOWS\System32\rundll32.exe "C:\Documents and Settings\Rick Lambert\Local Settings\Application Data\hrcopul.dll",vuljcec O4 - HKLM\..\Run: [Ultimate Cleaner] "C:\Program Files\Ultimate Cleaner\App.exe" hide (This process monitors your browsing habits and distributes the data back to the author's servers for analysis) O4 - HKLM\..\Run: [{74A06AEC-04E1-1033-0212-030419010001}] "C:\Program Files\Common Files\{74A06AEC-04E1-1033-0212-030419010001}\Update.exe" te-110-12-0000273 O4 - HKCU\..\Run: [taskdir] C:\WINDOWS\System32\taskdir.exe (Trojan.W32.Abwiz - http://www.processlibrary.com/directory/files/taskdir/ ) O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra button: (no name) - {A4F64D63-3576-4754-8DD5-4D0A49345FD5} - (no file) (HKCU) O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.comcastsupport.com/sdcxuser/asp/tgctlsr.cab O21 - SSODL: DZXhlZNisLdB - {74A06AED-DE0A-C047-284B-906A83E63848} - C:\WINDOWS\System32\esjn.dll (file missing) O23 - Service: COM+ Messages - Unknown owner - C:\WINDOWS\System32\svchosts.exe" -e te-110-12-0000273 (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe