Thanks again !
I downloaded ccleaner and it came up with a lot of things I was not sure of, so I was going to find out from you first if it was ok to clean them . Here is what it found.
ANALYSIS COMPLETE - (17.452 secs)
------------------------------------------------------------------------------------------
13.6MB to be removed. (Approximate size)
------------------------------------------------------------------------------------------
Details of files to be deleted (Note: No files have been deleted yet)
------------------------------------------------------------------------------------------
IE Temporary Internet Files (30 files) 0.13MB
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\desktop.ini 113 bytes
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012006072920060 730\index.dat 48.00KB
Marked for deletion: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Marked for deletion: C:\Documents and Settings\Administrator\Cookies\index.dat
Marked for deletion: C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\DM5QYGE3.htm 0.23MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\H6KHMJP0.htm 0.23MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMTF6F.xml 1.95KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMT4D7.xml 1.95KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMT4D8.xml 426 bytes
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMT4D9.xml 0.67MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMT517.xml 1.95KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMT518.xml 426 bytes
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMT519.xml 0.67MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMT51C.xml 1.95KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMT51D.xml 426 bytes
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMT51E.xml 0.67MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMTF70.xml 426 bytes
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IMTF71.xml 0.67MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1YU3DYMC.htm 0.23MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\4BB23Q91.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\QAZJ7LE8.htm 12.00KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\CAMQY1PH.htm 33.95KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\3V1CWJZU.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\P0ZOYPP5.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\PLX2FRQ1.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\XYDA0NGT.htm 9.63KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\DEUBU9NG.emf 82.63KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\0LTWF28J.htm 12.22KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\7VDI0VIE.htm 34.33KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\5WDBP21Z.htm 9.63KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\HLB4MFPG.emf 82.63KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\V4R3EXAY.htm 12.22KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\C3P1VYPM.htm 34.33KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\CY9EVIFU.htm 34.33KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\QKRNR599.htm 9.63KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\SLTQH585.emf 82.63KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\BFPP3OWX.htm 12.22KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\QRYY6FAF.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\M3SODRT8.htm 0.15MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\0W2MLN0A.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\SCO7ODEV.htm 22.36KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\890QEBLN.htm 9.63KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\34QPNXA2.emf 82.63KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Z7OR8A3Y.htm 12.22KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\4RWDSLYE.htm 34.33KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\A7RXFTDA.htm 12.28KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\WDSVFDVN.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\CUP6DFIR.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AAJ572RQ.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\KOG5QWXL.htm 12.28KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\JUQY6ZIA.htm 12.28KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\HV7GXDOZ.htm 0.23MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\KWS0K17B.htm 22.36KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AUVHEJRC.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\5WVL04J0.htm 22.36KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\W0GVVAW4.htm 12.25KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\5P1ZE20A.htm 34.33KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\7MQOHOP6.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\UHLQPSHJ.htm 12.27KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\V4NC56X6.htm 34.33KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\9067IVWX.htm 12.27KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\EPT11CAK.htm 12.27KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\I7U70I7R.htm 34.33KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\65PGUW0V.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\GE5FDC33.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\82YU1PRD.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\YM47IZUX.htm 12.05KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\0IY8ZIBD.htm 34.33KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\B4K6P06G.htm 35.69KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\REAT1VY9.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\P7BHT43P.htm 12.05KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\CR2YRHEQ.htm 35.69KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\08115BEE.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\6RQMQFCO.htm 12.05KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\JQL8VATP.htm 35.69KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\QHWVXF6R.htm 0.16MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\YEO78694.htm 12.05KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\QZFHW9SW.htm 35.69KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\O7RRRQ69.htm 12.00KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\N0QALF4B.htm 33.95KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\12S9RCFM.htm 12.05KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\S8B2O3UO.htm 35.69KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\FK8JDL5V.htm 12.05KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\U61VY2AL.htm 35.69KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\CHU1DBKR.htm 12.00KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AK1CDEWS.htm 33.95KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\O0FWQC7I.htm 0.23MB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\VQ0IHCHF.htm 12.00KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\BG3E7AFR.htm 33.95KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\M6PW7JMD.htm 12.00KB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\78GT65OB.htm 33.95KB
C:\WINDOWS\system32\wbem\Logs\wbemess.log 26.83KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 737 bytes
C:\WINDOWS\system32\wbem\Logs\FrameWork.log 260 bytes
C:\WINDOWS\0.log 0 bytes
C:\WINDOWS\KB916595.log 22.31KB
C:\WINDOWS\ocgen.log 11.28KB
C:\WINDOWS\FaxSetup.log 13.26KB
C:\WINDOWS\iis6.log 13.14KB
C:\WINDOWS\setupact.log 180 bytes
C:\WINDOWS\setuperr.log 0 bytes
C:\WINDOWS\comsetup.log 4.88KB
C:\WINDOWS\tsoc.log 8.97KB
C:\WINDOWS\msmqinst.log 3.68KB
C:\WINDOWS\ntdtcsetup.log 3.53KB
C:\WINDOWS\msgsocm.log 958 bytes
C:\WINDOWS\tabletoc.log 622 bytes
C:\WINDOWS\MedCtrOC.log 1.40KB
C:\WINDOWS\netfxocm.log 3.11KB
C:\WINDOWS\ocmsn.log 938 bytes
C:\WINDOWS\imsins.log 1.87KB
C:\WINDOWS\Sti_Trace.log 0 bytes
C:\WINDOWS\wiaservc.log 49 bytes
C:\WINDOWS\wiadebug.log 216 bytes
C:\WINDOWS\setupapi.log 13.22KB
C:\WINDOWS\imsins.BAK 1.87KB
C:\WINDOWS\ntbtlog.txt 0.39MB
C:\WINDOWS\Debug\UserMode\userenv.log 69.83KB
C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\sett ings.sol 348 bytes
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Update downloads.log 106 bytes
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Statistics.ini 0 bytes
C:\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref.old 0.69MB
C:\Documents and Settings\Administrator\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-24 17-37-18.txt 8.19KB
C:\Documents and Settings\Administrator\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-24 18-10-11.txt 13.43KB
C:\Documents and Settings\Administrator\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-24 20-11-57.txt 20.42KB
C:\Documents and Settings\All Users\Application Data\Raxco\PerfectDisk\7.0\PerfectDisk.log 3.36KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\Avg7.log 5.29KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\history.log 1.77KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\avginet.log 21.64KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\avg7info.id 26 bytes
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\avginfo.ctf 2.51KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\download.nfo 397 bytes
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\u7avi779u716v.bin 0.37MB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\u7iavi403a.bin 3.29MB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\u7avi781u77583.bin 63.69KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\u7iavi405u40383.bin 3.63KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\u7iavi410u405r7.bin 40.53KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\u7iavi411u410ti.bin 4.89KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\u7avi782u77519.bin 84.84KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\upd7bin\u7iavi412u41119.bin 5.09KB
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7upd\update7.log 0.18MB
------------------------------------------------------------------------------------------
I also ran EWIDO and another hijackthis log , here are there results
---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------
+ Created at: 1:29:16 PM 7/29/2006
+ Scan result:
C:\Documents and Settings\Administrator\Cookies\administrator@247re almedia[2].txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined).
C:\Documents and Settings\Administrator\Cookies\administrator@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
C:\Documents and Settings\Administrator\Cookies\administrator@amazo nsearsca.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
C:\Documents and Settings\Administrator\Cookies\administrator@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined).
C:\Documents and Settings\Administrator\Cookies\administrator@triba lfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
::Report end
Logfile of HijackThis v1.99.1
Scan saved at 1:43:01 PM, on 7/29/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\YAHOO!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\system32\wwSecure.exe
C:\Program Files\Raxco\PerfectDisk\PDSched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://rogers.yahoo.com
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: IYBookmarkHO Class - {8B11A219-80C8-4B42-B558-B8C14D1AA8C4} - C:\Program Files\Yahoo!\browser\ybmho.dll (file missing)
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\YAHOO!\MESSEN~1\ypager.exe" -quiet
O4 - HKCU\..\Run: [Update Manager] "C:\Program Files\Rogers\Update Manager\UpdateManager.exe" /background
O4 - HKCU\..\Run: [SHS] "C:\Program Files\Rogers\SelfHealing\SHS.exe" /background
O4 - HKCU\..\Run: [RHSI SHS] "C:\Program Files\Rogers\SelfHealing\SHS.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: Rogers Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) -
http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) -
http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) -
http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsu...?1121023781766
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) -
http://download.mcafee.com/molbin/is...00/mcfscan.cab
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\system32\wwSecure.exe