Hi!

Thanks for your help.
I have done described procedure, except I didnt find following files on the hard drive :
C:\WINDOWS\System32\wmspfsus.dll
C:\WINDOWS\System32\lprhwmpl.dll
C:\WINDOWS\System32\jy.dll

I also checked an entire hard drive with SEARCH tool and I didnt manage to find this files, but after reboot HIJACKTHIS was still listing them. So I found them and delete them from registry.
It look like things work OK for now, but I am using a PC only about a half an hour after cleaning. Here is a new HIJACKTHIS log file:





Logfile of HijackThis v1.99.0
Scan saved at 10:24:49, on 12.8.2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\aspi76248.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Prevx1\PXAgent.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Prevx1\PXConsole.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\UltimateZip\uzqkst.exe
C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
C:\HIJACK THIS\HijackThis.exe

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRA~1\Softwin\BITDEF~1\bdnagent.exe
O4 - HKLM\..\Run: [PrevxOne] C:\Program Files\Prevx1\PXConsole.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - Startup: UltimateZip Quick Start.lnk = C:\Program Files\UltimateZip\uzqkst.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\Autodesk\MDT6\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\Autodesk\MDT6\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\Autodesk\MDT6\AcPreview.ocx
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = letina.hr
O17 - HKLM\Software\..\Telephony: DomainName = letina.hr
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = letina.hr
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = letina.hr
O23 - Service: Microsoft ASPI Manager - Unknown - C:\WINDOWS\System32\aspi76248.exe
O23 - Service: BitDefender Scan Server - Unknown - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Oraclecli2_homeClientCache - Unknown - c:\client2\BIN\ONRSD.EXE
O23 - Service: OracleClientCache80 - Unknown - C:\ow95\BIN\ONRSD80.EXE
O23 - Service: Oraclecli_homeClientCache - Unknown - c:\client\BIN\ONRSD.EXE (file missing)
O23 - Service: Prevx Agent - Prevx - C:\Program Files\Prevx1\PXAgent.exe
O23 - Service: BitDefender Communicator - Softwin - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe


Thanks again, I will contact you again if problem will occur ...

Best regards!