Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTEMIE.EXE
C:\ARQUIVOS DE PROGRAMAS\ASHAMPOO\ASHAMPOO WINOPTIMIZER PLATINUM SUITE\POPUPKILLER.EXE
C:\WINDOWS\01GYTPER.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\DESKTOP\HijackTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50032
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\ARQUIV~1\TOOLBAR\TOOLBAR.DLL/sa
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimtoday.com/search/aimtoolbar.jsp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = https=sas.ne1.attbb.net:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = sas.ne1.attbb.net;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - _{8952A998-1E7E-4716-B23D-3DBE03910972} - (no file)
R3 - URLSearchHook: (no name) - _{707E6F76-9FFB-4920-A976-EA101271BC25} - (no file)
O2 - BHO: (no name) - {7371F073-AC0F-4b80-BB2F-96A488CEFB32} - (no file)
O2 - BHO: (no name) - {665ACD90-4541-4836-9FE4-062386BB8F05} - (no file)
O2 - BHO: CHungryBHO Object - {BCF96FB4-5F1B-497B-AECC-910304A55011} - C:\WINDOWS\NETI.DLL
O2 - BHO: IE PopUp-Killer ; Neikeisoft - {49E0E0F0-5C30-11D4-945D-003} - C:\ARQUIV~1\ASHAMPOO\ASHAMP~1\POPUP.DLL
O2 - BHO: (no name) - {B549456D-F5D0-4641-BCED-8648A0C13D83} - C:\WINDOWS\BrowserHelper.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: (no name) - {339BB23F-A864-48C0-A59F-29EA915965EC} - (no file)
O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file)
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\ARQUIVOS DE PROGRAMAS\AIM TOOLBAR\AIMBAR.DLL
O4 - HKLM\..\Run: [atsh] c:\windows\atsh.exe
O4 - HKLM\..\Run: [msbb] c:\windows\msbb.exe
O4 - HKLM\..\Run: [01GYTPER.EXE] C:\WINDOWS\01GYTPER.EXE /dk
O4 - HKCU\..\Run: [AIM] C:\ARQUIVOS DE PROGRAMAS\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Ashampoo PopUpBlocker] C:\ARQUIVOS DE PROGRAMAS\ASHAMPOO\ASHAMPOO WINOPTIMIZER PLATINUM SUITE\PopUpKiller.exe
O4 - HKCU\..\Run: [01GYTPER.EXE] C:\WINDOWS\01GYTPER.EXE /dk
O4 - HKCU\..\RunServices: [AIM] C:\ARQUIVOS DE PROGRAMAS\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\RunServices: [Ashampoo PopUpBlocker] C:\ARQUIVOS DE PROGRAMAS\ASHAMPOO\ASHAMPOO WINOPTIMIZER PLATINUM SUITE\PopUpKiller.exe
O4 - HKCU\..\RunServices: [01GYTPER.EXE] C:\WINDOWS\01GYTPER.EXE /dk
O4 - Startup: 43WJ0JIR.lnk = C:\WINDOWS\43wj0jir.exe
O4 - Startup: VF8AF5FH.lnk = C:\WINDOWS\vf8af5fh.exe
O4 - Startup: HRIMXCF0.lnk = C:\WINDOWS\hrimxcf0.exe
O4 - Startup: 5MANTYMZ.lnk = C:\WINDOWS\5mantymz.exe
O4 - Startup: D3C0DEV0.lnk = C:\WINDOWS\d3c0dev0.exe
O4 - Startup: ZFOQRMYJ.lnk = C:\WINDOWS\zfoqrmyj.exe
O4 - Startup: MB06LNNP.lnk = C:\WINDOWS\mb06lnnp.exe
O4 - Startup: K23R5C7B.lnk = C:\WINDOWS\k23r5c7b.exe
O4 - Startup: Q4GD18A7.lnk = C:\WINDOWS\q4gd18a7.exe
O4 - Startup: JUNCB664.lnk = C:\WINDOWS\juncb664.exe
O4 - Startup: D5J6AO3U.lnk = C:\WINDOWS\d5j6ao3u.exe
O4 - Startup: RA0MG0H6.lnk = C:\WINDOWS\ra0mg0h6.exe
O4 - Startup: TI0QCQ0B.lnk = C:\WINDOWS\ti0qcq0b.exe
O4 - Startup: TXW6ZPUV.lnk = C:\WINDOWS\txw6zpuv.exe
O4 - Startup: BKGMIEYB.lnk = C:\WINDOWS\bkgmieyb.exe
O4 - Startup: UHXF0H1R.lnk = C:\WINDOWS\uhxf0h1r.exe
O4 - Startup: 0VRY0GXY.lnk = C:\WINDOWS\0vry0gxy.exe
O4 - Startup: MATI5T4N.lnk = C:\WINDOWS\mati5t4n.exe
O4 - Startup: HKIPM4LD.lnk = C:\WINDOWS\hkipm4ld.exe
O4 - Startup: 56EY2AMG.lnk = C:\WINDOWS\56ey2amg.exe
O4 - Startup: 76LIW63V.lnk = C:\WINDOWS\76liw63v.exe
O4 - Startup: P2OF9QG0.lnk = C:\WINDOWS\p2of9qg0.exe
O4 - Startup: HEK35TUC.lnk = C:\WINDOWS\hek35tuc.exe
O4 - Startup: M27AWZO0.lnk = C:\WINDOWS\m27awzo0.exe
O4 - Startup: DEX0LZ4O.lnk = C:\WINDOWS\dex0lz4o.exe
O4 - Startup: 7PJ1Z4A1.lnk = C:\WINDOWS\7pj1z4a1.exe
O4 - Startup: QRMBCW5Z.lnk = C:\WINDOWS\qrmbcw5z.exe
O4 - Startup: 1HPHFRVC.lnk = C:\WINDOWS\1hphfrvc.exe
O4 - Startup: 093VF00N.lnk = C:\WINDOWS\093vf00n.exe
O4 - Startup: 9UBGBQ9I.lnk = C:\WINDOWS\9ubgbq9i.exe
O4 - Startup: Z37C2OAU.lnk = C:\WINDOWS\z37c2oau.exe
O4 - Startup: 062E0KBY.lnk = C:\WINDOWS\062e0kby.exe
O4 - Startup: IXEJ4X3V.lnk = C:\WINDOWS\ixej4x3v.exe
O4 - Startup: WO50KW4I.lnk = C:\WINDOWS\wo50kw4i.exe
O4 - Startup: I0GZTMP6.lnk = C:\WINDOWS\i0gztmp6.exe
O4 - Startup: P7XPXTI6.lnk = C:\WINDOWS\p7xpxti6.exe
O4 - Startup: BHR2T6XJ.lnk = C:\WINDOWS\bhr2t6xj.exe
O4 - Startup: W0Z65T5C.lnk = C:\WINDOWS\w0z65t5c.exe
O4 - Startup: AFNMV559.lnk = C:\WINDOWS\afnmv559.exe
O4 - Startup: JL6Q2XXZ.lnk = C:\WINDOWS\jl6q2xxz.exe
O4 - Startup: C2IPTD0U.lnk = C:\WINDOWS\c2iptd0u.exe
O4 - Startup: 0BEPPRYD.lnk = C:\WINDOWS\0beppryd.exe
O4 - Startup: KJMPALG7.lnk = C:\WINDOWS\kjmpalg7.exe
O4 - Startup: L8PMIGEK.lnk = C:\WINDOWS\l8pmigek.exe
O4 - Startup: A7000UEG.lnk = C:\WINDOWS\a7000ueg.exe
O4 - Startup: FHRLRI5X.lnk = C:\WINDOWS\fhrlri5x.exe
O4 - Startup: 180UFBUF.lnk = C:\WINDOWS\180ufbuf.exe
O4 - Startup: 9MU60213.lnk = C:\WINDOWS\9mu60213.exe
O4 - Startup: JL1TNJ1U.lnk = C:\WINDOWS\jl1tnj1u.exe
O4 - Startup: A2PDI4K0.lnk = C:\WINDOWS\a2pdi4k0.exe
O4 - Startup: VJ3B2EL8.lnk = C:\WINDOWS\vj3b2el8.exe
O4 - Startup: 03W409JK.lnk = C:\WINDOWS\03w409jk.exe
O4 - Startup: L0TYH7TA.lnk = C:\WINDOWS\l0tyh7ta.exe
O4 - Startup: CBVK9UPC.lnk = C:\WINDOWS\cbvk9upc.exe
O4 - Startup: 6WUEYJFN.lnk = C:\WINDOWS\6wueyjfn.exe
O4 - Startup: WKM0JCOO.lnk = C:\WINDOWS\wkm0jcoo.exe
O4 - Startup: POYVWOMZ.lnk = C:\WINDOWS\poyvwomz.exe
O4 - Startup: 5HQ6YQNP.lnk = C:\WINDOWS\5hq6yqnp.exe
O4 - Startup: RM12VKJQ.lnk = C:\WINDOWS\rm12vkjq.exe
O4 - Startup: 1Z1D9TG8.lnk = C:\WINDOWS\1z1d9tg8.exe
O4 - Startup: TYQ4CJXG.lnk = C:\WINDOWS\tyq4cjxg.exe
O4 - Startup: VDZ7RYNV.lnk = C:\WINDOWS\vdz7rynv.exe
O4 - Startup: OPDZ9MYC.lnk = C:\WINDOWS\opdz9myc.exe
O4 - Startup: HY1XZK92.lnk = C:\WINDOWS\hy1xzk92.exe
O4 - Startup: 14M6KNKW.lnk = C:\WINDOWS\14m6knkw.exe
O4 - Startup: YTBBWHZC.lnk = C:\WINDOWS\ytbbwhzc.exe
O4 - Startup: 0WNLDL0H.lnk = C:\WINDOWS\0wnldl0h.exe
O4 - Startup: Y81CIAO0.lnk = C:\WINDOWS\y81ciao0.exe
O4 - Startup: OPHWV40C.lnk = C:\WINDOWS\ophwv40c.exe
O4 - Startup: 90Q0LW0I.lnk = C:\WINDOWS\90q0lw0i.exe
O4 - Startup: CAG6WU62.lnk = C:\WINDOWS\cag6wu62.exe
O4 - Startup: HZ2V38MB.lnk = C:\WINDOWS\hz2v38mb.exe
O4 - Startup: RXI38LH0.lnk = C:\WINDOWS\rxi38lh0.exe
O4 - Startup: L7F5YFQ0.lnk = C:\WINDOWS\l7f5yfq0.exe
O4 - Startup: OQ7PU3UI.lnk = C:\WINDOWS\oq7pu3ui.exe
O4 - Startup: A46PDXE2.lnk = C:\WINDOWS\a46pdxe2.exe
O4 - Startup: T6JNNIMW.lnk = C:\WINDOWS\t6jnnimw.exe
O4 - Startup: IIY38OMM.lnk = C:\WINDOWS\iiy38omm.exe
O4 - Startup: WOWAGH6I.lnk = C:\WINDOWS\wowagh6i.exe
O4 - Startup: X5YXQXA1.lnk = C:\WINDOWS\x5yxqxa1.exe
O4 - Startup: COEQ9MMB.lnk = C:\WINDOWS\coeq9mmb.exe
O4 - Startup: QMUVG9GW.lnk = C:\WINDOWS\qmuvg9gw.exe
O4 - Startup: LBOZCN80.lnk = C:\WINDOWS\lbozcn80.exe
O4 - Startup: WZB1GX2T.lnk = C:\WINDOWS\wzb1gx2t.exe
O4 - Startup: QGT9A0VV.lnk = C:\WINDOWS\qgt9a0vv.exe
O4 - Startup: P0K75TTK.lnk = C:\WINDOWS\p0k75ttk.exe
O4 - Startup: 30YIF95Y.lnk = C:\WINDOWS\30yif95y.exe
O4 - Startup: HGCHC09W.lnk = C:\WINDOWS\hgchc09w.exe
O4 - Startup: XM7RNAED.lnk = C:\WINDOWS\xm7rnaed.exe
O4 - Startup: NIB7UC09.lnk = C:\WINDOWS\nib7uc09.exe
O4 - Startup: ED0RH4QB.lnk = C:\WINDOWS\ed0rh4qb.exe
O4 - Startup: YMW7OFP8.lnk = C:\WINDOWS\ymw7ofp8.exe
O4 - Startup: 43WIMAM1.lnk = C:\WINDOWS\43wimam1.exe
O4 - Startup: PYW404B0.lnk = C:\WINDOWS\pyw404b0.exe
O4 - Startup: QARYCHUH.lnk = C:\WINDOWS\qarychuh.exe
O4 - Startup: UIK59OQ2.lnk = C:\WINDOWS\uik59oq2.exe
O4 - Startup: 3RY0D0KO.lnk = C:\WINDOWS\3ry0d0ko.exe
O4 - Startup: TRLGWNH2.lnk = C:\WINDOWS\trlgwnh2.exe
O4 - Startup: Q7HCXK9C.lnk = C:\WINDOWS\q7hcxk9c.exe
O4 - Startup: 1DY7OH8E.lnk = C:\WINDOWS\1dy7oh8e.exe
O4 - Startup: 624VFJEC.lnk = C:\WINDOWS\624vfjec.exe
O4 - Startup: GQKQ8KA3.lnk = C:\WINDOWS\gqkq8ka3.exe
O4 - Startup: F22HMB6E.lnk = C:\WINDOWS\f22hmb6e.exe
O4 - Startup: F8M0LEN1.lnk = C:\WINDOWS\f8m0len1.exe
O4 - Startup: 0E2U6C70.lnk = C:\WINDOWS\0e2u6c70.exe
O4 - Startup: 0JAMVVJI.lnk = C:\WINDOWS\0jamvvji.exe
O4 - Startup: QC63MU0V.lnk = C:\WINDOWS\qc63mu0v.exe
O4 - Startup: RWY51JV9.lnk = C:\WINDOWS\rwy51jv9.exe
O4 - Startup: 01GYTPER.lnk = C:\WINDOWS\01gytper.exe
O4 - Global Startup: 7319VFEY.lnk = C:\WINDOWS\7319vfey.exe
O4 - Global Startup: HUE8IIT8.lnk = C:\WINDOWS\hue8iit8.exe
O4 - Global Startup: DHUOBWOT.lnk = ?
O4 - Global Startup: G24E6R74.lnk = C:\WINDOWS\g24e6r74.exe
O4 - Global Startup: 44OKRRIF.lnk = C:\WINDOWS\44okrrif.exe
O4 - Global Startup: 612O62RO.lnk = C:\WINDOWS\612o62ro.exe
O4 - Global Startup: U05UYYLJ.lnk = C:\WINDOWS\u05uyylj.exe
O4 - Global Startup: 44HDQZTB.lnk = C:\WINDOWS\44hdqztb.exe
O4 - Global Startup: 3DFNR0OE.lnk = C:\WINDOWS\3dfnr0oe.exe
O4 - Global Startup: MGT44Y6M.lnk = C:\WINDOWS\mgt44y6m.exe
O4 - Global Startup: XRDVT2TC.lnk = C:\WINDOWS\xrdvt2tc.exe
O4 - Global Startup: E28OVFPO.lnk = C:\WINDOWS\e28ovfpo.exe
O4 - Global Startup: WC82N0LA.lnk = C:\WINDOWS\wc82n0la.exe
O4 - Global Startup: JATCWFUQ.lnk = C:\WINDOWS\jatcwfuq.exe
O4 - Global Startup: HRBDMKIO.lnk = C:\WINDOWS\hrbdmkio.exe
O4 - Global Startup: Q5KU0V5R.lnk = C:\WINDOWS\q5ku0v5r.exe
O4 - Global Startup: D19AMLU0.lnk = C:\WINDOWS\d19amlu0.exe
O4 - Global Startup: TGN14UEG.lnk = C:\WINDOWS\tgn14ueg.exe
O4 - Global Startup: F8YT09P3.lnk = C:\WINDOWS\f8yt09p3.exe
O4 - Global Startup: W1QA0CXM.lnk = C:\WINDOWS\w1qa0cxm.exe
O4 - Global Startup: KW9XLMOZ.lnk = C:\WINDOWS\kw9xlmoz.exe
O4 - Global Startup: 7C8N8OYO.lnk = C:\WINDOWS\7c8n8oyo.exe
O4 - Global Startup: 4JUPJ8JM.lnk = C:\WINDOWS\4jupj8jm.exe
O4 - Global Startup: ABB2VTIK.lnk = C:\WINDOWS\abb2vtik.exe
O4 - Global Startup: D8CQHMJ0.lnk = C:\WINDOWS\d8cqhmj0.exe
O4 - Global Startup: PPQ2YT0O.lnk = C:\WINDOWS\ppq2yt0o.exe
O4 - Global Startup: CMZ26WRM.lnk = C:\WINDOWS\cmz26wrm.exe
O4 - Global Startup: D66V58H3.lnk = C:\WINDOWS\d66v58h3.exe
O4 - Global Startup: B7VLK2Z0.lnk = C:\WINDOWS\b7vlk2z0.exe
O4 - Global Startup: YRRZQ2N4.lnk = C:\WINDOWS\yrrzq2n4.exe
O4 - Global Startup: DEK3R6YI.lnk = C:\WINDOWS\dek3r6yi.exe
O4 - Global Startup: FJKIY40J.lnk = C:\WINDOWS\fjkiy40j.exe
O4 - Global Startup: 1FNBG5GK.lnk = C:\WINDOWS\1fnbg5gk.exe
O4 - Global Startup: VLTV7GV1.lnk = C:\WINDOWS\vltv7gv1.exe
O4 - Global Startup: ZI5ECEVF.lnk = C:\WINDOWS\zi5ecevf.exe
O4 - Global Startup: T4FMFAW9.lnk = C:\WINDOWS\t4fmfaw9.exe
O4 - Global Startup: 41AGT5DK.lnk = C:\WINDOWS\41agt5dk.exe
O4 - Global Startup: ME41UL49.lnk = C:\WINDOWS\me41ul49.exe
O4 - Global Startup: KHO4JJWE.lnk = C:\WINDOWS\kho4jjwe.exe
O4 - Global Startup: N2M80H32.lnk = C:\WINDOWS\n2m80h32.exe
O4 - Global Startup: KPUGON0Y.lnk = C:\WINDOWS\kpugon0y.exe
O4 - Global Startup: HNOUG3GR.lnk = C:\WINDOWS\hnoug3gr.exe
O4 - Global Startup: M4A4NAHV.lnk = C:\WINDOWS\m4a4nahv.exe
O4 - Global Startup: 69EZ2LWL.lnk = C:\WINDOWS\69ez2lwl.exe
O4 - Global Startup: MLUQ0T6B.lnk = C:\WINDOWS\mluq0t6b.exe
O4 - Global Startup: 0RDDUIAF.lnk = C:\WINDOWS\0rdduiaf.exe
O4 - Global Startup: ZA4C17QL.lnk = C:\WINDOWS\za4c17ql.exe
O4 - Global Startup: A5C91WM1.lnk = C:\WINDOWS\a5c91wm1.exe
O4 - Global Startup: DMGW9AWQ.lnk = C:\WINDOWS\dmgw9awq.exe
O4 - Global Startup: QO9GOQIY.lnk = C:\WINDOWS\qo9goqiy.exe
O4 - Global Startup: OIEP0EDU.lnk = C:\WINDOWS\oiep0edu.exe
O4 - Global Startup: TF9X8XNZ.lnk = C:\WINDOWS\tf9x8xnz.exe
O4 - Global Startup: QU3A3TOX.lnk = C:\WINDOWS\qu3a3tox.exe
O4 - Global Startup: XB9V4H5V.lnk = C:\WINDOWS\xb9v4h5v.exe
O4 - Global Startup: 8FK9FZXI.lnk = C:\WINDOWS\8fk9fzxi.exe
O4 - Global Startup: VF8AF5FH.lnk = C:\WINDOWS\vf8af5fh.exe
O4 - Global Startup: EM40O89Y.lnk = C:\WINDOWS\em40o89y.exe
O4 - Global Startup: OVWQ08QV.lnk = C:\WINDOWS\ovwq08qv.exe
O4 - Global Startup: 5V4CA5QV.lnk = C:\WINDOWS\5v4ca5qv.exe
O4 - Global Startup: 43WJ0JIR.lnk = C:\WINDOWS\43wj0jir.exe
O4 - Global Startup: 04WWF7NJ.lnk = C:\WINDOWS\04wwf7nj.exe
O4 - Global Startup: 56EY2AMG.lnk = C:\WINDOWS\56ey2amg.exe
O4 - Global Startup: 62XRW1P7.lnk = C:\WINDOWS\62xrw1p7.exe
O4 - Global Startup: Z72PVL5N.lnk = C:\WINDOWS\z72pvl5n.exe
O4 - Global Startup: GXC2H1Q6.lnk = C:\WINDOWS\gxc2h1q6.exe
O4 - Global Startup: HRIMXCF0.lnk = C:\WINDOWS\hrimxcf0.exe
O4 - Global Startup: 5MANTYMZ.lnk = C:\WINDOWS\5mantymz.exe
O4 - Global Startup: D3C0DEV0.lnk = C:\WINDOWS\d3c0dev0.exe
O4 - Global Startup: ZFOQRMYJ.lnk = C:\WINDOWS\zfoqrmyj.exe
O4 - Global Startup: MB06LNNP.lnk = C:\WINDOWS\mb06lnnp.exe
O4 - Global Startup: K23R5C7B.lnk = C:\WINDOWS\k23r5c7b.exe
O4 - Global Startup: MK9IC001.lnk = C:\WINDOWS\mk9ic001.exe
O4 - Global Startup: D5J6AO3U.lnk = C:\WINDOWS\d5j6ao3u.exe
O4 - Global Startup: RA0MG0H6.lnk = C:\WINDOWS\ra0mg0h6.exe
O4 - Global Startup: TI0QCQ0B.lnk = C:\WINDOWS\ti0qcq0b.exe
O4 - Global Startup: TXW6ZPUV.lnk = C:\WINDOWS\txw6zpuv.exe
O4 - Global Startup: BKGMIEYB.lnk = C:\WINDOWS\bkgmieyb.exe
O4 - Global Startup: UHXF0H1R.lnk = C:\WINDOWS\uhxf0h1r.exe
O4 - Global Startup: 0VRY0GXY.lnk = C:\WINDOWS\0vry0gxy.exe
O4 - Global Startup: MATI5T4N.lnk = C:\WINDOWS\mati5t4n.exe
O4 - Global Startup: HKIPM4LD.lnk = C:\WINDOWS\hkipm4ld.exe
O4 - Global Startup: 76LIW63V.lnk = C:\WINDOWS\76liw63v.exe
O4 - Global Startup: P2OF9QG0.lnk = C:\WINDOWS\p2of9qg0.exe
O4 - Global Startup: HEK35TUC.lnk = C:\WINDOWS\hek35tuc.exe
O4 - Global Startup: M27AWZO0.lnk = C:\WINDOWS\m27awzo0.exe
O4 - Global Startup: DEX0LZ4O.lnk = C:\WINDOWS\dex0lz4o.exe
O4 - Global Startup: 7PJ1Z4A1.lnk = C:\WINDOWS\7pj1z4a1.exe
O4 - Global Startup: QRMBCW5Z.lnk = C:\WINDOWS\qrmbcw5z.exe
O4 - Global Startup: 1HPHFRVC.lnk = C:\WINDOWS\1hphfrvc.exe
O4 - Global Startup: 093VF00N.lnk = C:\WINDOWS\093vf00n.exe
O4 - Global Startup: 9UBGBQ9I.lnk = C:\WINDOWS\9ubgbq9i.exe
O4 - Global Startup: Z37C2OAU.lnk = C:\WINDOWS\z37c2oau.exe
O4 - Global Startup: I0GZTMP6.lnk = C:\WINDOWS\i0gztmp6.exe
O4 - Global Startup: IXEJ4X3V.lnk = C:\WINDOWS\ixej4x3v.exe
O4 - Global Startup: P7XPXTI6.lnk = C:\WINDOWS\p7xpxti6.exe
O4 - Global Startup: BHR2T6XJ.lnk = C:\WINDOWS\bhr2t6xj.exe
O4 - Global Startup: W0Z65T5C.lnk = C:\WINDOWS\w0z65t5c.exe
O4 - Global Startup: AFNMV559.lnk = C:\WINDOWS\afnmv559.exe
O4 - Global Startup: JL6Q2XXZ.lnk = C:\WINDOWS\jl6q2xxz.exe
O4 - Global Startup: C2IPTD0U.lnk = C:\WINDOWS\c2iptd0u.exe
O4 - Global Startup: 0BEPPRYD.lnk = C:\WINDOWS\0beppryd.exe
O4 - Global Startup: KJMPALG7.lnk = C:\WINDOWS\kjmpalg7.exe
O4 - Global Startup: L8PMIGEK.lnk = C:\WINDOWS\l8pmigek.exe
O4 - Global Startup: A7000UEG.lnk = C:\WINDOWS\a7000ueg.exe
O4 - Global Startup: FHRLRI5X.lnk = C:\WINDOWS\fhrlri5x.exe
O4 - Global Startup: 180UFBUF.lnk = C:\WINDOWS\180ufbuf.exe
O4 - Global Startup: 9MU60213.lnk = C:\WINDOWS\9mu60213.exe
O4 - Global Startup: JL1TNJ1U.lnk = C:\WINDOWS\jl1tnj1u.exe
O4 - Global Startup: A2PDI4K0.lnk = C:\WINDOWS\a2pdi4k0.exe
O4 - Global Startup: VJ3B2EL8.lnk = C:\WINDOWS\vj3b2el8.exe
O4 - Global Startup: 03W409JK.lnk = C:\WINDOWS\03w409jk.exe
O4 - Global Startup: L0TYH7TA.lnk = C:\WINDOWS\l0tyh7ta.exe
O4 - Global Startup: CBVK9UPC.lnk = C:\WINDOWS\cbvk9upc.exe
O4 - Global Startup: 6WUEYJFN.lnk = C:\WINDOWS\6wueyjfn.exe
O4 - Global Startup: WKM0JCOO.lnk = C:\WINDOWS\wkm0jcoo.exe
O4 - Global Startup: POYVWOMZ.lnk = C:\WINDOWS\poyvwomz.exe
O4 - Global Startup: 5HQ6YQNP.lnk = C:\WINDOWS\5hq6yqnp.exe
O4 - Global Startup: RM12VKJQ.lnk = C:\WINDOWS\rm12vkjq.exe
O4 - Global Startup: H0OAQTPW.lnk = C:\WINDOWS\h0oaqtpw.exe
O4 - Global Startup: 1Z1D9TG8.lnk = C:\WINDOWS\1z1d9tg8.exe
O4 - Global Startup: TYQ4CJXG.lnk = C:\WINDOWS\tyq4cjxg.exe
O4 - Global Startup: VDZ7RYNV.lnk = C:\WINDOWS\vdz7rynv.exe
O4 - Global Startup: OPDZ9MYC.lnk = C:\WINDOWS\opdz9myc.exe
O4 - Global Startup: HY1XZK92.lnk = C:\WINDOWS\hy1xzk92.exe
O4 - Global Startup: 14M6KNKW.lnk = C:\WINDOWS\14m6knkw.exe
O4 - Global Startup: YTBBWHZC.lnk = C:\WINDOWS\ytbbwhzc.exe
O4 - Global Startup: 0WNLDL0H.lnk = C:\WINDOWS\0wnldl0h.exe
O4 - Global Startup: 062E0KBY.lnk = C:\WINDOWS\062e0kby.exe
O4 - Global Startup: Y81CIAO0.lnk = C:\WINDOWS\y81ciao0.exe
O4 - Global Startup: OPHWV40C.lnk = C:\WINDOWS\ophwv40c.exe
O4 - Global Startup: 90Q0LW0I.lnk = C:\WINDOWS\90q0lw0i.exe
O4 - Global Startup: CAG6WU62.lnk = C:\WINDOWS\cag6wu62.exe
O4 - Global Startup: HZ2V38MB.lnk = C:\WINDOWS\hz2v38mb.exe
O4 - Global Startup: RXI38LH0.lnk = C:\WINDOWS\rxi38lh0.exe
O4 - Global Startup: L7F5YFQ0.lnk = C:\WINDOWS\l7f5yfq0.exe
O4 - Global Startup: OQ7PU3UI.lnk = C:\WINDOWS\oq7pu3ui.exe
O4 - Global Startup: A46PDXE2.lnk = C:\WINDOWS\a46pdxe2.exe
O4 - Global Startup: T6JNNIMW.lnk = C:\WINDOWS\t6jnnimw.exe
O4 - Global Startup: IIY38OMM.lnk = C:\WINDOWS\iiy38omm.exe
O4 - Global Startup: WOWAGH6I.lnk = C:\WINDOWS\wowagh6i.exe
O4 - Global Startup: X5YXQXA1.lnk = C:\WINDOWS\x5yxqxa1.exe
O4 - Global Startup: COEQ9MMB.lnk = C:\WINDOWS\coeq9mmb.exe
O4 - Global Startup: QMUVG9GW.lnk = C:\WINDOWS\qmuvg9gw.exe
O4 - Global Startup: LBOZCN80.lnk = C:\WINDOWS\lbozcn80.exe
O4 - Global Startup: WZB1GX2T.lnk = C:\WINDOWS\wzb1gx2t.exe
O4 - Global Startup: QGT9A0VV.lnk = C:\WINDOWS\qgt9a0vv.exe
O4 - Global Startup: P0K75TTK.lnk = C:\WINDOWS\p0k75ttk.exe
O4 - Global Startup: 30YIF95Y.lnk = C:\WINDOWS\30yif95y.exe
O4 - Global Startup: HGCHC09W.lnk = C:\WINDOWS\hgchc09w.exe
O4 - Global Startup: XM7RNAED.lnk = C:\WINDOWS\xm7rnaed.exe
O4 - Global Startup: NIB7UC09.lnk = C:\WINDOWS\nib7uc09.exe
O4 - Global Startup: ED0RH4QB.lnk = C:\WINDOWS\ed0rh4qb.exe
O4 - Global Startup: YMW7OFP8.lnk = C:\WINDOWS\ymw7ofp8.exe
O4 - Global Startup: 43WIMAM1.lnk = C:\WINDOWS\43wimam1.exe
O4 - Global Startup: PYW404B0.lnk = C:\WINDOWS\pyw404b0.exe
O4 - Global Startup: QARYCHUH.lnk = C:\WINDOWS\qarychuh.exe
O4 - Global Startup: UIK59OQ2.lnk = C:\WINDOWS\uik59oq2.exe
O4 - Global Startup: 3RY0D0KO.lnk = C:\WINDOWS\3ry0d0ko.exe
O4 - Global Startup: TRLGWNH2.lnk = C:\WINDOWS\trlgwnh2.exe
O4 - Global Startup: Q7HCXK9C.lnk = C:\WINDOWS\q7hcxk9c.exe
O4 - Global Startup: 1DY7OH8E.lnk = C:\WINDOWS\1dy7oh8e.exe
O4 - Global Startup: 624VFJEC.lnk = C:\WINDOWS\624vfjec.exe
O4 - Global Startup: GQKQ8KA3.lnk = C:\WINDOWS\gqkq8ka3.exe
O4 - Global Startup: F22HMB6E.lnk = C:\WINDOWS\f22hmb6e.exe
O4 - Global Startup: F8M0LEN1.lnk = C:\WINDOWS\f8m0len1.exe
O4 - Global Startup: 0E2U6C70.lnk = C:\WINDOWS\0e2u6c70.exe
O4 - Global Startup: 0JAMVVJI.lnk = C:\WINDOWS\0jamvvji.exe
O4 - Global Startup: QC63MU0V.lnk = C:\WINDOWS\qc63mu0v.exe
O4 - Global Startup: RWY51JV9.lnk = C:\WINDOWS\rwy51jv9.exe
O4 - Global Startup: 01GYTPER.lnk = C:\WINDOWS\01gytper.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZC
O8 - Extra context menu item: Web Rebates - file://C:\ARQUIVOS DE PROGRAMAS\WEB_REBATES\Sy1150\Tp1150\scri1150a.htm
O8 - Extra context menu item: &AIM Search - res://C:\ARQUIVOS DE PROGRAMAS\AIM TOOLBAR\AIMBAR.DLL/aimsearch.htm
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\ARQUIVOS DE PROGRAMAS\AIM\AIM.EXE
O9 - Extra button: Messenger Backup - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\ARQUIVOS DE PROGRAMAS\MESSENGER BACKUP\MESSENGER BACKUP (file missing)
O9 - Extra 'Tools' menuitem: &Messenger Backup - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\ARQUIVOS DE PROGRAMAS\MESSENGER BACKUP\MESSENGER BACKUP (file missing)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Arquivos de programas\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system\lspak.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\lspak.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\lspak.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\lspak.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\lspak.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\lspak.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\cdlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\cdlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\cdlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\cdlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\cdlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\cdlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\cdlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\lspak.dll
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/19c41125418e904fbc18/netzip/RdxIE601.cab
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - https://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
O16 - DPF: {4855C21B-E452-4661-A702-ED3493CE74DF} - http://sp.ask.com/docs/toolbar/download/askbar-inst.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/CursorManiaInitialSetup1.0.0.8.cab
O16 - DPF: {FF65677A-8977-48CA-916A-DFF81B037DF3} (WMService Class) - http://download.overpro.com/WildApp.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yse/ymmapi_416.dll
O16 - DPF: {00000EF1-0786-4633-87C6-1AA7A44296DA} - http://www.addictivetechnologies.net/DM0/cab/1kn0wM.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {07637823-C894-4A52-B3F9-5D777FD8E36A} - http://www.mydailyhoroscope.net/mdh/install.cab
O16 - DPF: {197AB1D7-A7DD-4C86-A938-1FCC0DB21B85} - http://dm.cometsystems.com/dm/dm_286.cab
O16 - DPF: {DDFFA75A-E81D-4454-89FC-B9FD0631E726} - http://www.imbum.com/Imbum_bw.cab
O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} - file://c:\counter.cab
O16 - DPF: {DC187740-46A9-11D5-A815-00B0D0428C0C} - http://ds1.downloadtech.net/cn1060/pcpowerscan.cab
O21 - SSODL: systemie - {07A14F66-CA78-4F9C-91FA-C77C93365632} - sysie.dll (file missing)
O21 - SSODL: systemha - {4396C554-0854-4788-B823-866A1698630B} - systemha.dll (file missing)