O18 - Filter: text/html - {EE7A946E-61FA-4979-87B8-A6C462E6FA62} - C:\WINDOWS\httpfilter.dll
(X) TROJ_SCAGENT.B
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_SCAGENT.B&VSect=T

O18 - Filter: application/hta - {D962EF38-5FB0-4761-8638-C86F085E25E6} - C:\WINDOWS\chp.dll
(X) CoolWebSearch
http://www.newbie.org/help/messages/31635.html

O18 - Filter hijack: application/octet-stream - {6585E5B4-4D2A-4A1D-A219-4102C64BA999} - C:\WINDOWS\chp.dll
(X) CoolWebSearch
http://www.newbie.org/help/messages/31635.html

O18 - Filter: application/hta - {D962EF38-5FB0-4761-8638-C86F085E25E6} - C:\WINDOWS\MWSHELP.DLL
(X) CoolWebSearch (WARNING!  Do NOT delete MWSHELP.DLL as it's a valid Windows file!)
http://castlecops.com/postp242476.html

O18 - Filter hijack: application/octet-stream - {6585E5B4-4D2A-4A1D-A219-4102C64BA999} - C:\WINDOWS\MWSHELP.DLL 
(X) CoolWebSearch (WARNING!  Do NOT delete MWSHELP.DLL as it's a valid Windows file!)
http://castlecops.com/postp242476.html

O18 - Protocol: icoo - {4A8DADD4-5A25-4D41-8599-CB7458766220} - C:\WINDOWS\msopt.dll
(X) Troj_Winshow
http://de.trendmicro-europe.com/enterprise/security_info/ve_detail.php?VName=TROJ_WINSHOW.AF

O18 - Protocol: about - {53B95211-7D77-11D2-9F80-00104B107C96} - C:\WINDOWS\System32\msxmlpp.dll
(X) Adware.FindemNow 
http://sarc.com/avcenter/venc/data/pf/adware.findemnow.html

O18 - Protocol hijack: about - {53B95211-7D77-11D2-9F81-00104B107C96}
(X) CoolWebSearch
http://www.daniweb.com/techtalkforums/thread7074.html

O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\System32\Mshtml.dll
(X) CoolWebSearch (Mshtml is a legit file - don't delete)
http://forums.spywareinfo.com/index.php?s=6bb455e8d0b1efebdca29d928cd97add&showtopic=10748

O18 - Protocol: start - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\System32\LORUX[^a.dll
(X) CoolWebSearch (Mshtml is a legit file - don't delete) (May disappear after running CWShredder)
http://forums.spywareinfo.com/index.php?s=6bb455e8d0b1efebdca29d928cd97add&showtopic=10748

O18 - Filter: text/html - {63B95211-7D77-11D2-9F80-00104B107C96} - C:\WINNT\System32\LORUX[^a.dll
(X) CoolWebSearch (Mshtml is a legit file - don't delete) (May disappear after running CWShredder)
http://forums.spywareinfo.com/index.php?s=6bb455e8d0b1efebdca29d928cd97add&showtopic=10748

O18 - Filter: text/plain - {63B95211-7D77-11D2-9F80-00104B107C96} - C:\WINNT\System32\LORUX[^a.dll
(X) CoolWebSearch (Mshtml is a legit file - don't delete) (May disappear after running CWShredder)
http://forums.spywareinfo.com/index.php?s=6bb455e8d0b1efebdca29d928cd97add&showtopic=10748

O18 - Filter: text/html - {7C01B72B-B6D9-437F-94B6-5B6E4A352E4F} - C:\WINDOWS\System32\gfjm.dll
(X) CoolWebSearch (filters in pais: you'll see a text/html one and a text/plain one, otherwise identical)
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Filter: plain/html - {7C01B72B-B6D9-437F-94B6-5B6E4A352E4F} - C:\WINDOWS\System32\gfjm.dll
(X) CoolWebSearch (filters in pais: you'll see a text/html one and a text/plain one, otherwise identical)
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Filter: text/html - {CC905FF6-B553-496C-9DFA-CFF65ADCD0FC} - C:\WINDOWS\System32\msdhmd.dll
(X) CoolWebSearch
http://www.eksperten.dk/spm/518760

O18 - Protocol: start - {53B95211-7D77-11D2-9F81-00104B107C96} - C:\WINDOWS\SYSTEM\MSXWORD.DLL
(X) CWS, Smartsearch.  Fix the log line and delete the DLL which may be randomly named
http://forums.spywareinfo.com/index.php?showtopic=10748

O18 - Protocol: start - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\System32\<*>.dll
(X) CWS, Smartsearch.  Fix the log line and delete the DLL which may be randomly named
http://forums.spywareinfo.com/index.php?showtopic=10748

O18 - Protocol: start - {53B95211-7D77-11D2-9F81-00104B107C96} - C:\WINDOWS\<*>.DLL
(X) CWS, Smartsearch.  Fix the log line and delete the DLL which may be randomly named
http://forums.spywareinfo.com/index.php?showtopic=10748

O18 - Protocol: tpro - {FF76A5DA-6158-4439-99FF-EDC1B3FE100C} - C:\PROGRA~1\Toolbar\toolbar.dll
(X) IBIS Toolbar
http://computercops.biz/postp231371.html

O18 - Protocol: relatedlinks - {CD8D1CAA-FE4A-45DF-A06C-028AAF1821DE} - C:\PROGRA~1\COMMON~1\BTLINK\BTLINK.DLL
(X) IBIS Toolbar, Huntbar
http://forums.thatcomputerguy.us/index.php?showtopic=3608

O18 - Protocol: ayb - {07C0D34D-11D7-43F7-832B-C6BB41726F5F}
(X) Lop.com
http://www.wilderssecurity.com/archive/index.php/t-7487

O18 - Protocol: relatedlinks - {5AB65DD4-01FB-44D5-9537-3767AB80F790} - C:\PROGRA~1\COMMON~1\MSIETS\msielink.dll
(X) Huntbar
http://www.doxdesk.com/parasite/HuntBar.html

O18 - Protocol: relatedlinks - {CD8D1CAA-FE4A-45DF-A06C-028AAF1821DE} - (no file)
(X) Huntbar
http://forums.tomcoyote.org/index.php?act=ST&f=27&t=12731

O18 - Filter: text/html - {3846F57F-F837-47D0-A93B-C8FC85A70D70} - C:\Documents and Settings\Mae\Definições locais\Application Data\microsoft\internet explorer\V0.15.dat 
(X) Viral
http://computercops.biz/postt55655.html

O18 - Protocol: pcn - {D540F040-F3D9-11D0-95BE-00C04FD93CA5} - C:\PROGRAM FILES\ENCOMPASS\V1MK.DLL
(L) Encompass Browser (Yahoo)
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: msencarta - {74D92DF3-6D9D-11D1-8B38-006097DBED7A} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\MSREF.DLL
(L) Microsoft Encarta
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: msero - {B0D92A71-886B-453B-A649-1B91F93801E7} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\msero.dll
(L) Microsoft Encarta
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: msref - {74D92DF3-6D9D-11D1-8B38-006097DBED7A} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\MSREF.DLL
(L) Microsoft Encarta
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: df2 - {219A97F3-D661-4766-B658-646A771AE49E} - C:\PROGRA~1\Run-Time\dffav\df2proto.dll
(L) DeltaForce2
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: df23chat - {219A97F3-D661-4766-B658-646A771AE49E} - C:\PROGRA~1\Run-Time\dffav\df2proto.dll
(L) DeltaForce2
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: df3 - {219A97F3-D661-4766-B658-646A771AE49E} - C:\PROGRA~1\Run-Time\dffav\df2proto.dll
(L) DeltaForce2
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: df4 - {219A97F3-D661-4766-B658-646A771AE49E} - C:\PROGRA~1\Run-Time\dffav\df2proto.dll
(L) DeltaForce2
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: df5 - {219A97F3-D661-4766-B658-646A771AE49E} - C:\PROGRA~1\Run-Time\dffav\df2proto.dll
(L) DeltaForce2
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: df5demo - {219A97F3-D661-4766-B658-646A771AE49E} - C:\PROGRA~1\Run-Time\dffav\df2proto.dll
(L) DeltaForce2
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: ofpjoin - {219A97F3-D661-4766-B658-646A771AE49E} - C:\PROGRA~1\Run-Time\dffav\df2proto.dll
(L) DeltaForce2
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: saphtmlp - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - C:\Program Files\SAP\FrontEnd\Controls\saphtmlp.dll
(L) SAP stuff (www.sap.com)
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: sapr3 - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - C:\Program Files\SAP\FrontEnd\Controls\saphtmlp.dll
(L) SAP stuff (www.sap.com)
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: lbxfile - {56831180-F115-11D2-B6AA-00104B2B9943} - C:\Program Files\Libronix DLS\System\FileProt.dll
(L) Libronix Digital Library System
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: lbxres - {24508F1B-9E94-40EE-9759-9AF5795ADF52} - C:\Program Files\Libronix DLS\System\ResProt.dll
(L) Libronix Digital Library System
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: smscrd - {FA3F5003-93D4-11D2-8E48-00A0C98BD8C3} - c:\smsadmin\bin\i386\sms_mcrd.dll
(L) Microsoft Systems Management Server 
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
(L) HP Printer
http://www.bleepingcomputer.com/forums/index.php?showtopic=909

O18 - Protocol: dic - {C21F5C32-F57A-4A0D-8E0A-B672691C52D0} - G:\PROGRA~1\Kingsoft\POWERW~1\XDictExB.dll
(?) Unknown, possibly part of Kingsoft PowerWord Dictionary?
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: bega - {A57721C9-B905-49B3-8BCA-B99FBB8C627E} - C:\Program Files\Common Files\BEGA\DatabaseTools.dll
(?) Unknown
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: dialux - {8352FA4C-39C6-11D3-ADBA-00A0244FB1A2} - C:\Program Files\DIALux 2.6\System\DLXToolBox20.dll 
(?) Unknown
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
(?) Unknown
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: x-excid - {9D6CC632-1337-4A33-9214-2DA092E776F4} - C:\WINDOWS\DOWNLO~1\mimectl.dll
(?) Unknown so-far
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: x-excid - {9D6CC632-1337-4A33-9214-2DA092E776F4} - c:\WINDOWS\Downloaded Program Files\mimectl.dll 
(?) Unknown so-far
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - %SystemRoot%\System32\mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: cdl - {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\WINDOWS\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: dic - {C21F5C32-F57A-4A0D-8E0A-B672691C52D0} - C:\POWERW~1\XDictExB.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\System32\msvidctl.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: file - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: ftp - {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: gopher - {79EAC9E4-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: http - {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: https - {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: ipp - (no CLSID) - (no file)
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - %SystemRoot%\System32\mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: local - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: mailto - {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - %SystemRoot%\System32\mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: mhtml - {05300401-BCBC-11D0-85E3-00C04FD85AB4} - %SystemRoot%\System32\inetcomm.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: mk - {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: msdaipp - (no CLSID) - (no file)
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: OWC11.mso-offdap - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - %SystemRoot%\System32\mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - %SystemRoot%\System32\mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\System32\msvidctl.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - %SystemRoot%\System32\mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\System32\msdxm.ocx
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\System32\wiascr.dll 
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINNT\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINNT\System32\msvidctl.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINNT\System32\itss.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\System32\Mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINNT\System32\msvidctl.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINNT\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\System32\Mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINNT\System32\inetcomm.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINNT\system32\urlmon.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINNT\System32\itss.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\System32\Mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINNT\System32\Mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINNT\System32\msvidctl.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\System32\Mshtml.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINNT\System32\msdxm.ocx
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINNT\System32\wiascr.dll
(L) Legitimate whitelisted item in HijackThis
http://home8.inet.tele.dk/fbj/O18s.htm

END OF O18S