I woke up this morning to a blue screen with a mouse cursor on my laptop. After a few minutes I noticed the new icon on the desktop for Spyware Guard 2008. I am not computer savvy so I came to the internet and this forum to try and find a fix. I tried to do all the things requested of me in the HJT Post Instructions stickied at the top, but the only thing I could actually do on the infected computer was the HJT log (after renaming the .exe file). I get this error when trying to install Spybot Search and Destroy: http://*.bhicms O15 - Trusted Zone: http://*.bravacel O15 - Trusted Zone: http://*.bravahou O15 - Trusted Zone: http://*.CelleWeb O15 - Trusted Zone: http://*.DMSQUERY O15 - Trusted Zone: http://*.dmsquerycel O15 - Trusted Zone: http://*.dmsquerydev O15 - Trusted Zone: http://*.dmsqueryhou O15 - Trusted Zone: http://*.gt90 O15 - Trusted Zone: http://*.INSOURCECEL O15 - Trusted Zone: http://*.Inview O15 - Trusted Zone: http://*.materials O15 - Trusted Zone: http://*.wrap O15 - Trusted Zone: http://*.wrapAP O15 - Trusted Zone: http://*.wrapAP2 O15 - Trusted Zone: http://*.wrapEARC O15 - Trusted Zone: http://*.wrapEARC2 O15 - Trusted Zone: http://*.wrapLA O15 - Trusted Zone: http://*.wrapME O15 - Trusted Zone: http://*.wrapME2 O15 - Trusted Zone: http://*.wrapNA O15 - Trusted Zone: http://*.wrapteam O15 - Trusted Zone: http://*.wraptest O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://localhost/webbits3/BitRecordLayout/ScriptX.cab O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www1.snapfish.com/SnapfishActivia.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1202317297046 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1202333110828 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ent.bhicorp.com O17 - HKLM\Software\..\Telephony: DomainName = ent.bhicorp.com O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = ent.bhicorp.com O20 - AppInit_DLLs: lngwrv.dll O21 - SSODL: ieModule - {C9C193CA-FC26-469C-98DD-6454290F7307} - D:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\ieModule.dll O21 - SSODL: InternetConnection - {D0C13CD7-FC58-43A0-A866-328E90082CD7} - D:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\DLLs\jbyakuapbv.dll O23 - Service: Extend360 Enforcement Agent (BESClient) - BigFix Inc. - C:\Program Files\BigFix Enterprise\BES Client\BESClient.exe O23 - Service: CA Message Queuing Server (CA-MessageQueuing) - CA, Inc. - C:\Program Files\CA\SharedComponents\CAM\bin\cam.exe O23 - Service: CA DSM r11 Common Application Framework. (caf) - CA - C:\Program Files\CA\DSM\bin\caf.exe O23 - Service: Client32 - NetSupport Ltd - C:\Program Files\PCD32\client32.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\BakerHughes\GlobalConnect\cvpnd.exe O23 - Service: sys host (enstart) - Unknown owner - C:\WINNT\System32\enstart.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: Fiberlinkcomm Wireless Engine - Unknown owner - C:\Program Files\BHI Global Connect\BHI Global Connect\WENGINE2\BWEngine.exe O23 - Service: Fiberlinkcomm WMonitor - Boingo Wireless, Inc. - C:\Program Files\BHI Global Connect\BHI Global Connect\WENGINE2\WMonitor.exe O23 - Service: System Connect Util Service (FLUtilsSvc) - Fiberlink Communications Corp. - C:\Program Files\BHI Global Connect\BHI Global Connect\FLUtilsSvc.exe O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINNT\system32\spool\drivers\w32x86\3\HPBPRO.EXE O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINNT\system32\spool\drivers\w32x86\3\HPBOID.EXE O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - c:\ePOAgent\Common Framework\FrameworkService.exe O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\system32\HPZipm12.exe O23 - Service: Radia Notify Daemon (RADEXECD) - Hewlett-Packard - C:\PROGRA~1\Novadigm\RADEXECD.exe O23 - Service: Radia Scheduler (RADSCHED) - Hewlett-Packard - C:\PROGRA~1\Novadigm\RADSCHED.exe O23 - Service: Radia MSI Redirector (RADSTGMS) - Hewlett-Packard - C:\PROGRA~1\Novadigm\RADSTGMS.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: Extend360 Agent (ServiceMgr) - Fiberlink Communications Corp. - C:\Program Files\BHI Global Connect\BHI Global Connect\ServiceMgr.exe O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\WINNT\system32\StacSV.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe -- End of file - 12421 bytes Not sure what to do next, any help would be appreciated. Thanks
