540.filost.com - Please Help [HJT log]

I've done just about everything I can think to do. Here is the log from Hijack This. Any input would be greatly appreciated. Thanks!

Stephanie
---
Logfile of HijackThis v1.99.0
Scan saved at 11:14:01 AM, on 2/24/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\wanmpsvc.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Real\RealPlayer\RealPlay.exe
F:\Program Files\Common Files\AOL\ACS\AOLDial.exe
F:\Program Files\QuickTime\qttask.exe
F:\Program Files\Visioneer OneTouch\OneTouchMon.exe
F:\Program Files\Messenger\msmsgs.exe
F:\Program Files\Handspring\HOTSYNC.EXE
F:\WINDOWS\System32\wuauclt.exe
F:\Program Files\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.apa.org/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: NavErrRedir Class - {08F46458-D00F-4573-8EB3-A9A9E15503F8} - F:\PROGRA~1\NetGuide\BHO\NETGUI~1.DLL
O2 - BHO: NavErrRedir Class - {0E682909-858C-4eb4-9613-393F979CC518} - F:\PROGRA~1\CURSOR~2\CURSOR~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - f:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - f:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [MSConfig] F:\Program Files\msconfig.exe /auto
O8 - Extra context menu item: &AOL Toolbar search - res://F:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Google Search - res://F:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://F:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://F:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://F:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://F:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: CursorZone - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - F:\PROGRA~1\CURSOR~2\CURSOR~1.DLL
O9 - Extra button: ÃøÖ·´Ã³Ãˆ« - {C18CB140-0BBB-11D4-8FE8-0088CC102438} - http://www.mpsoft.net/wz.htm (file missing)
O9 - Extra 'Tools' menuitem: ÃøÖ·´Ã³Ãˆ« - {C18CB140-0BBB-11D4-8FE8-0088CC102438} - http://www.mpsoft.net/wz.htm (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - F:\WINDOWS\System32\Shdocvw.dll
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - F:\WINDOWS\System32\vbsys2 (file missing)
O23 - Service: AOL Connectivity Service - America Online, Inc. - F:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: AOL Spyware Protection Service - Unknown - F:\Program Files\Common Files\AOL\AOL Spyware Protection\\aolserv.exe (file missing)
O23 - Service: McAfee Personal Firewall Service - McAfee Corporation - F:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: WAN Miniport (ATW) Service - America Online, Inc. - F:\WINDOWS\wanmpsvc.exe

 

Everytime I open _any_ page in IE, a second page with that url opens as well. Page cannot be found error. I used to get the oldgames.se page, and now I get this. I _think_ I eradicated the oldgames.se, but I cannot find anything on my system to get rid of that would cause the 540.filost.com/stop.htm page from opening. Ideas?

 

Thank you! However, when I did that, I got the following. How bad is this? By the way, the same page popped up again when I clicked to reply to this message. Argh!

An unexpected error has occurred at procedure: modBackup_MakeBackup(sItem=O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - F:\WINDOWS\System32\vbsys2 (file missing))
Error #62 - Input past end of file

Please email me at merijn@spywareinfo.com, reporting the following:
* What you were doing when the error occurred
* How you can reproduce the error
* A complete HijackThis scan log, if possible

Windows version: Windows NT 5.01.2600
MSIE version: 6.0.2600.0000
HijackThis version: 1.99.0

This message has been copied to your clipboard.