You need to go to Windows Update to get the Critcal Updates for your system as soon as possible.
Using Task Manager, end the process on these:
wsxsvc.exe
vmss.exe
defragfat32abc.exe
svchostings.exe
qfoqbq.exe
Go to Add/Remove Programs in your Control Panel and remove (if found):
WeatherBug
180solutions
Close all browser windows, scan with HJT, and have it fix the following entries:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - Default URLSearchHook is missing
F1 - win.ini: run=C:\WINNT\..\PROGRA~1\COMMON~1\MICROS~1\MSInfo\msinfo.exe
O4 - HKLM\..\Run: [Dvx] C:\WINNT\System32\wsxsvc\wsxsvc.exe
O4 - HKLM\..\Run: [vmss] C:\WINNT\System32\vmss\vmss.exe
O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINNT\system32\defragfat32abc.exe
O4 - HKLM\..\Run: [Start Upping] svchostings.exe
O4 - HKLM\..\Run: [cXsost0Y2] C:\WINNT\qfoqbq.exe
O4 - HKLM\..\Run: [Tray Temperature] C:\WINNT\iWeatherBug\MiniBug.exe 1
O4 - HKLM\..\Run: [sais] c:\program files\180solutions\sais.exe
O4 - HKLM\..\RunServices: [Start Upping] svchostings.exe
O4 - HKCU\..\Run: [Start Upping] svchostings.exe
O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe (file missing)
O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe (file missing)
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{A58E3176-5A6E-4D54-B3FA-F5A457AE7259}: NameServer = 203.21.66.2,203.21.66.10
O19 - User stylesheet: (file missing)
O23 - Service: ZESOFT - Unknown - C:\WINNT\zeta.exe (file missing)
If you don't wish to have pcworld as your Home Page, have HJT fix these as well:
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pcworld.idg.com.au
O14 - IERESET.INF: START_PAGE_URL=http://pcworld.idg.com.au
Reboot into Safe Mode and go to:
C:\WINNT\System32\wsxsvc and delete wsxsvc.exe
C:\WINNT\System32\vmss and delete vmss.exe
C:\WINNT\system32 and delete defragfat32abc.exe
C:\WINNT and delete qfoqbq.exe
C:\WINNT and delete the iWeatherBug folder
C:\program files and delete the 180solutions folder
Do a search for msinfo.exe, delete it, and let us know where it was located
While still in Safe Mode, go to Start, Run, and type in regedit, click OK and the registry editor will open.
Before you edit the registry, you should make a backup. At the top of the Registry window, click on the Registry menu, click Export Registry File. In the Export range panel, click All, then save your registry as Backup.
(Look in the Name and Data columns for the following and delete any found)
Go to HKEY_LOCAL_MACHINE, SOFTWARE, Microsoft, Windows, CurrentVersion, Run
defragfat32abc.exe,
svchostings.exe
Go to HKEY_LOCAL_MACHINE, SOFTWARE, Microsoft, Windows, CurrentVersion, RunServices
svchostings.exe
HKEY_CURRENT_USER, Software, Microsoft, Windows, CurrentVersion, Run
svchostings.exe
Close the registry editor.
This is not related to your problem, but you probably don't need CTsvcCDA.EXE ( http://www.liutilities.com/products/wintaskspro/processlibrary/ctsvccda/ )
I'm not sure about this one, anyone else know? R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\about.htm
Reboot normally, close all browser windows, scan with HJT, and post a new log please.
