***
An analysis of your HJT log shows the following problems :
We didn't detect any active process of a firewall on your system. Reasons maybe:
(1.) You are using the windows firewall or a hardware firewall.
(2.) You are using a firewall of an unknown vendor.
(3.) You are using a firewall, but for unknown reasons it is disabled
(4.) You don't use any firewall at all.
We recommend you to use a firewall.
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)Unnecessary (deactivated) entry that can be fixed. AcroIEhelper.ocx, AcroIEhelper.dll - Adobe Acrobat reader.
O4 - HKUS\S-1-5-21-1219393502-2404566984-3178860527-1006\..\Run: [ares ultra] "C:\Program Files\Ares Ultra\Ares Ultra.exe" -h (User 'Sarah')While this entry itself is not bad, this is a possible infection point as are all P2P programs.
The below are questionable entries all related to Yahoo components :
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exeUses excessive system and memory resources with no corresponding benefit.
http://www.pcpitstop.com/libraries/process/i/yahooauservice.exe.htmlO2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dllBHO able to monitor Internet browser activity.
http://www.file.net/process/ytsingleinstance.dll.htmlO23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exeUses excessive system and memory resources with no corresponding benefit.
http://www.pcpitstop.com/libraries/process/i/yahooauservice.exe.htmlOverview of running tasks : smss.exe
System task
Session Manager Subsystem
winlogon.exe
System task
Microsoft Windows Logon Process
services.exe
System task
Windows Service Controller
lsass.exe
System task
Local Security Authority Service
svchost.exe
System task
Microsoft Service Host Process
svchost.exe
System task
Microsoft Service Host Process
svchost.exe
System task
Microsoft Service Host Process
aswUpdSv.exe
Virusscan
Avast Anti-Virus Component
Explorer.EXE
System task
Microsoft Windows Explorer
ashServ.exe
Virusscan
Avast
spoolsv.exe
System task
Microsoft Printer Spooler Service
AppleMobileDeviceService.exe
Backgroundtask
Apple Mobile Device Service
mDNSResponder.exe
Backgroundtask
Bonjour for Windows Component
jqs.exe
Backgroundtask
jqs.exe
LSSrvc.exe
Backgroundtask
NERO Light Scribe Module
nvsvc32.exe
Application
NVIDIA Driver Helper Service
svchost.exe
System task
Microsoft Service Host Process
svchost.exe
System task
Microsoft Service Host Process
VongoService.exe
Unknown task (a movie download service for portable devices)
Unknown task
http://www.file.net/process/vongoservice.exe.htmlYahooAUService.exe
Unknown task (Yahoo AutoUpdater for Yahoo Instant Messenger)
Unknown task
http://www.pcpitstop.com/libraries/process/i/yahooauservice.exe.htmlhpqwmiex.exe
Backgroundtask
HP ProtectTools security manager
ashMaiSv.exe
Virusscan
Avast Anti-Virus Component
ashWebSv.exe
Virusscan
avast! Web Scanner
HP Wireless Assistant.exe
Backgroundtask
JHP Wireless Assistant.exe
HPWuSchd2.exe
Backgroundtask
Hewlett Packard Software Update Scheduler
issch.exe
Application
InstallShield Update Service
QTTask.exe
Backgroundtask
Apple QuickTime Tray Icon
iTunesHelper.exe
Application
Apple Itunes
ashDisp.exe
Virusscan
Avast AntiVirus
jusched.exe
Backgroundtask
Sun Java Update Scheduler
ctfmon.exe
System task
Alternative User Input Services
TeaTimer.exe
Application
Spybot S&D Realtime Scanner
mlb-nexdef-autobahn.exe
Unknown task (If you have both Autobahn and MLB NexDef installed, you will run into issues.)
Unknown task
http://www.getautobahn.com/faqs Scroll to bottom of page.
iPodService.exe
Backgroundtask
Apple iTunes
firefox.exe
Application
Mozilla Firefox
winlogon.exe
System task
Microsoft Windows Logon Process
java.exe
Application
Java runtime
HijackThis.exe
Application
Merijn Hijackthis
***