My hijack this log is as follows:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:17:34 AM, on 8/6/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Quicken 2004\qagent.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ACT\Act for Windows\Act.Outlook.Service.exe
C:\Windows\system32\mrtMngr.EXE
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files\FireTrust\MailWasher\MailWasherPro.exe
C:\Program Files\FireTrust\MailWasher\MailWasherProApp.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Siber Systems\GoodSync\GoodSync.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\tbMyA1.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\tbMyA1.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Act.UI.InternetExplorer.Plugins.AttachFile.CAttachFile - {D5233FCD-D258-4903-89B8-FB1568E7413D} - mscoree.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files\MyAshampoo\tbMyA1.dll
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [QAGENT] C:\Program Files\Quicken 2004\QAGENT.EXE
O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Act.Outlook.Service] "C:\Program Files\ACT\Act for Windows\Act.Outlook.Service.exe"
O4 - HKLM\..\Run: [Act! Preloader] "C:\Program Files\ACT\Act for Windows\ActSage.exe" -preload
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Ron\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" -s
O4 - Startup: MailWasherPro.lnk = C:\Program Files\FireTrust\MailWasher\MailWasherPro.exe
O4 - Startup: Scheduler.lnk = C:\Program Files\3B Software\Common\Scheduler\wcomschd.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\Quicken 2004\QWDLLS.EXE
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Attach Web page to ACT! contact - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing)
O9 - Extra 'Tools' menuitem: Attach Web page to ACT! contact... - {6F431AC3-364A-478b-BBDB-89C7CE1B18F6} - mscoree.dll (file missing)
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {638F11AA-DF27-433b-BA2E-7281CE561D71} - C:\Program Files\Xmarks\IE Extension\xmarkssync.exe (HKCU)
O9 - Extra 'Tools' menuitem: Xmarks for IE... - {638F11AA-DF27-433b-BA2E-7281CE561D71} - C:\Program Files\Xmarks\IE Extension\xmarkssync.exe (HKCU)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: ACT! Scheduler - Sage Software, Inc. - C:\Program Files\ACT\Act for Windows\Act.Scheduler.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: QuickBooks Database Manager Service (QBCFMonitorService) - Intuit - C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - EMC Corporation - C:\Program Files\Retrospect\Retrospect 7.7\retrorun.exe
O23 - Service: Retrospect Helper - EMC Corporation - C:\Program Files\Retrospect\Retrospect 7.7\rthlpsvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe
--
End of file - 11565 bytes
Unistall list:
ACDSee Photo Manager 12 ACD Systems International Inc. 20/4/2010 120.1 MB 12.0.342
ACT! by Sage 2010 Sage Software, Inc. 21/5/2010 112.2 MB 12.0.0.0
Ad-Aware Lavasoft 26/5/2010
Ad-Aware Email Scanner for Outlook Lavasoft 26/5/2010 0.67 MB 1.0.0
Adobe Download Manager NOS Microsystems Ltd. 1/5/2010 1.6.2.63
Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 15/2/2010 10.0.45.2
Adobe Flash Player 10 Plugin Adobe Systems Incorporated 1/5/2010 10.0.45.2
AI RoboForm 14/3/2010
ALTools Update ESTsoft Corp. 16/3/2010
ALZip ESTsoft Corp. 16/3/2010 v7.52
Apple Application Support Apple Inc. 1/4/2010 39.7 MB 1.2.1
Apple Mobile Device Support Apple Inc. 5/5/2010 19.7 MB 3.0.1.3
Apple Software Update Apple Inc. 26/12/2009 2.16 MB 2.1.1.116
Ashampoo Burning Studio 10.0.1 ashampoo GmbH & Co. KG 26/5/2010 197.6 MB 10.0.1
Ashampoo Snap 3.40 ashampoo GmbH & Co. KG 15/4/2010 22.9 MB 3.4.0
AviSynth 2.5 27/12/2009
Bonjour Apple Inc. 27/4/2010 0.76 MB 2.0.1.2
Brava! Reader 3.3 IGC 16/12/2009 3.3
Bulk Rename Utility 2.7.1.1 TGRMN Software 16/12/2009
Canon Inkjet Printer Driver Add-On Module V2.00 16/12/2009
Canon MP Navigator EX 1.0 16/12/2009
Canon Utilities Easy-PhotoPrint EX 16/12/2009
Canon Utilities My Printer 16/12/2009
Canon Utilities Solution Menu 16/12/2009
CanoScan 8800F 16/12/2009
CCleaner Piriform 26/5/2010 2.32
CD-LabelPrint 16/12/2009
Common-Use Signing Interface Commonwealth Government of Australia 10/1/2010
ConvertHelper 2.2 DownloadHelper 7/5/2010
Diskeeper 2010 Diskeeper Corporation 14/5/2010 28.5 MB 14.0.903.32
Dropbox 5/6/2010 0.8.69
DVD-CLONER V7.30 Build 995 OpenCloner Inc. 25/5/2010 25.6 MB 7.30.0.995
EASEUS Partition Master 5.8.1 Home Edition EASEUS 31/5/2010 42.5 MB
Fiesta Download Manager 14/5/2010
GetDiz 4.5 Outertech 15/12/2009 4.5
GoodSync Siber Systems 14/3/2010 9.77 MB 8.1.7.0
HiJackThis Trend Micro 31/5/2010 0.36 MB 1.0.0
iTunes Apple Inc. 5/5/2010 160.0 MB 9.1.1.12
Java(TM) 6 Update 20 Sun Microsystems, Inc. 31/5/2010 94.5 MB 6.0.200
Just Great Software EditPad Lite 6.5.2 Just Great Software 15/12/2009 4.00 MB 6.5.2
jv16 PowerTools 2009 Macecraft Software 16/12/2009
K-Lite Codec Pack 5.9.4 (Full) 7/5/2010 48.5 MB 5.9.4
Link Shell Extension 28/4/2010
Logitech SetPoint 6.0 Logitech 28/2/2010 39.1 MB 6.00.68
MailWasher Pro FireTrust Limited 4/6/2010 27.7 MB
MailWasherPro Firetrust 1/6/2010 15.2 MB 0.95.7
Malwarebytes' Anti-Malware Malwarebytes Corporation 6/5/2010 8.51 MB
Microsoft .NET Framework 1.1 15/12/2009
Microsoft Office Home and Student 2007 Microsoft Corporation 15/12/2009 12.0.6425.1000
Microsoft Office Outlook 2007 Microsoft Corporation 15/12/2009 12.0.6425.1000
Microsoft Silverlight Microsoft Corporation 3/6/2010 48.7 MB 4.0.50524.0
Microsoft SQL Server 2005 Microsoft Corporation 3/1/2010
Microsoft SQL Server Native Client Microsoft Corporation 3/1/2010 2.59 MB 9.00.4035.00
Microsoft SQL Server Setup Support Files (English) Microsoft Corporation 3/1/2010 20.1 MB 9.00.4035.00
Microsoft SQL Server VSS Writer Microsoft Corporation 3/1/2010 0.66 MB 9.00.4035.00
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 16/12/2009 0.25 MB 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 15/12/2009 0.41 MB 8.0.56336
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Corporation 18/12/2009 1.42 MB 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 28/2/2010 0.23 MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 16/12/2009 0.58 MB 9.0.30729.4148
MozBackup 1.4.10 Pavel Cvrcek 22/12/2009
Mozilla Firefox (3.6.3) Mozilla 3/4/2010 3.6.3 (en-GB)
Mozilla Thunderbird (3.0.4) Mozilla 30/3/2010 3.0.4 (en-GB)
Mp3tag v2.46a Florian Heidenreich 14/5/2010 v2.46a
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 16/12/2009 35.00 KB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 16/12/2009 1.33 MB 4.20.9876.0
MyAshampoo Toolbar 26/5/2010
PDFCreator Frank Heindörfer, Philip Chinery 20/1/2010 0.9.9
QuickBooks 2009-10 Service Pack 1 Reckon Ltd 16/12/2009 17.05.0000
QuickBooks Pro 2009-10 15/12/2009
QuickBooks Pro 2010-11 Reckon Ltd 11/5/2010
Quicken 2004 Personal 15/12/2009
QuickTime Apple Inc. 1/4/2010 73.8 MB 7.66.71.0
Real Alternative 2.0.1 Lite 4/1/2010 2.0.1
RealOptimizer Plug-in ACD Systems International 21/4/2010 8.98 MB 1.0.0
Retrospect 7.7 EMC 29/3/2010 54.0 MB 7.70.325
Revo Uninstaller Pro 2.2.0 VS Revo Group, Ltd. 28/4/2010 27.2 MB 2.2.0
Sophos Anti-Rootkit 1.5.0 Sophos Plc 30/5/2010 1.5.0
Spybot - Search & Destroy Safer Networking Limited 30/5/2010 1.6.2
SUPER © Version 2010.bld.38 (May 2, 2010) eRightSoft 7/5/2010 Version 2010.bld.38 (May 2, 2010)
SupportSoft Assisted Service SupportSoft 16/12/2009 3.45 MB 15
Switch Sound File Converter NCH Software 21/4/2010
TomTom HOME 2.7.3.1894 TomTom 4/5/2010 2.7.3.1894
TomTom HOME Visual Studio Merge Modules TomTom International B.V. 4/5/2010 1.88 MB 1.0.2
Unlocker 1.8.8 Cedrick Collomb 7/4/2010 1.8.8
Windows Media Encoder 9 Series 15/4/2010
Windows Media Player Firefox Plugin Microsoft Corp 10/1/2010 0.29 MB 1.0.0.8
WinMend Folder Hidden 1.4.0 WinMend.com 24/4/2010
WinX Free iPhone Video Converter 3.3 Digiarty Software, Inc. 27/12/2009
Xmarks for IE Xmarks 1/1/2010 3.21 MB 127.0.138
ZoneAlarm Security Suite Check Point, Inc 7/4/2010 9.1.507.000
µTorrent 8/1/2010 1.8.5