Logfile of Trend Micro HijackThis v2.  0.  2
Scan saved at 23:54:53, on 12.  6.  2009
Platform: Windows XP SP3, v.  5755 (WinNT 5.  01.  2600)
MSIE: Internet Explorer v7.  00 (7.  00.  6000.  16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.  exe
C:\WINDOWS\system32\winlogon.  exe
C:\WINDOWS\system32\services.  exe
C:\WINDOWS\system32\lsass.  exe
C:\WINDOWS\system32\svchost.  exe
C:\WINDOWS\System32\svchost.  exe
C:\WINDOWS\Explorer.  EXE
C:\WINDOWS\system32\spoolsv.  exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.  exe
C:\Program Files\Java\jre6\bin\jqs.  exe
C:\WINDOWS\msnsgsr.  exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.  exe
C:\WINDOWS\system32\svchost.  exe
C:\WINDOWS\system32\svchost.  exe
C:\WINDOWS\system32\wscntfy.  exe
C:\Program Files\Conexant\Adsl\dslstat.  exe
C:\Program Files\Conexant\Adsl\dslagent.  exe
C:\Program Files\Java\jre6\bin\jusched.  exe
C:\WINDOWS\system32\RunDLL32.  exe
C:\Program Files\Adobe\Reader 9.  0\Reader\Reader_sl.  exe
C:\WINDOWS\system32\ctfmon.  exe
C:\Program Files\Internet Download Manager\IDMan.  exe
C:\Program Files\Messenger\msmsgs.  exe
C:\Program Files\Windows Live\Messenger\msnmsgr.  exe
C:\Program Files\VIA\RAID\raid_tool.  exe
C:\Program Files\Internet Download Manager\IEMonitor.  exe
C:\Program Files\Windows Live\Contacts\wlcomm.  exe
C:\WINDOWS\system32\wuauclt.  exe
C:\Program Files\Mozilla Firefox\firefox.  exe
C:\Documents and Settings\Zlajo\My Documents\Downloads\Programs\HiJackThis.  exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp:|| go.  microsoft.  com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp:|| go.  microsoft.  com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp:|| go.  microsoft.  com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp:|| go.  microsoft.  com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp:|| go.  microsoft.  com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.  dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.  dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.  DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.  dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.  dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.  dll
O4 - HKLM\.  .  \Run: [Cmaudio] RunDll32 cmicnfg.  cpl,CMICtrlWnd
O4 - HKLM\.  .  \Run: [DSLSTATEXE] C:\Program Files\Conexant\Adsl\dslstat.  exe icon
O4 - HKLM\.  .  \Run: [DSLAGENTEXE] C:\Program Files\Conexant\Adsl\dslagent.  exe
O4 - HKLM\.  .  \Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.  exe"
O4 - HKLM\.  .  \Run: [NvCplDaemon] RUNDLL32.  EXE C:\WINDOWS\system32\NvCpl.  dll,NvStartup
O4 - HKLM\.  .  \Run: [nwiz] nwiz.  exe /install
O4 - HKLM\.  .  \Run: [NvMediaCenter] RunDLL32.  exe NvMCTray.  dll,NvTaskbarInit
O4 - HKLM\.  .  \Run: [msnsgsr.  exe] C:\WINDOWS\msnsgsr.  exe
O4 - HKLM\.  .  \Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.  0\Reader\Reader_sl.  exe"
O4 - HKCU\.  .  \Run: [CTFMON.  EXE] C:\WINDOWS\system32\ctfmon.  exe
O4 - HKCU\.  .  \Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.  exe /onboot
O4 - HKCU\.  .  \Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.  exe" /background
O4 - HKCU\.  .  \Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.  exe" /background
O4 - HKUS\S-1-5-19\.  .  \Run: [CTFMON.  EXE] C:\WINDOWS\system32\CTFMON.  EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\.  .  \RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\.  .  \Run: [CTFMON.  EXE] C:\WINDOWS\system32\CTFMON.  EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\.  .  \RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\.  .  \Run: [CTFMON.  EXE] C:\WINDOWS\system32\CTFMON.  EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\.  .  \RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.  DEFAULT\.  .  \Run: [CTFMON.  EXE] C:\WINDOWS\system32\CTFMON.  EXE (User 'Default user')
O4 - HKUS\.  DEFAULT\.  .  \RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: VIA RAID TOOL.  lnk = C:\Program Files\VIA\RAID\raid_tool.  exe
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.  htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.  htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.  htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.  EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.  dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.  dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.  dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.  dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.  DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.  exe
O9 - Extra 'Tools' menuitem: @xpsp3res.  dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.  exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.  exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.  exe
O17 - HKLM\System\CCS\Services\Tcpip\.  .  \{C1F72098-7A06-4AD6-81B6-3226974893BB}: NameServer = 77.  105.  0.  19 77.  105.  0.  18
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.  DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.  exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.  exe
O23 - Service: iPod Service - Apple Inc.   - C:\Program Files\iPod\bin\iPodService.  exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc.   - C:\Program Files\Java\jre6\bin\jqs.  exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.  exe
O23 - Service: Remote Packet Capture Protocol v.  0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.  exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.  exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.  exe
O23 - Service: ThreatFire - PC Tools - C:\Program Files\Spyware Doctor\TFEngine\TFService.  exe