Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help Removing Problems On Pc


  • This topic is locked This topic is locked
2 replies to this topic

#1 shortyshorts7

shortyshorts7

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:07:59 PM

Posted 23 July 2008 - 12:06 AM

Hey their. I have had this problem on my Pc were everytime i log onto my computer i have to hit of on all of these Explorer.exe Bad image stuff. i also have to load up task manager and exit out certaint things i dont use so my pc runs a lil faster. Also for some reason i cant the web browser Firefox to look up certaint sites like Myspace, but if i use the web browser Wyso i can look at myspace. And every now and then i get the problem were if i wanna delete somethign from my recyle pin it freezes the bin. this also happens when i want hit properties on a icon, and it will then freeze my whole desktop. this might help also, Ive already uses Spybot Search and Destroy, Ad - Aware, Cleanup, Super Antispyware, Standalone Anti-virus scanner, and Trojan Remover. Hope you guys can respond back to me soon, lookin forward to it and thank you for reading my post




Deckard's System Scanner v20071014.68
Run by Bob Clarke on 2007-01-24 00:12:50
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------



-- Last 5 Restore Point(s) --
95: 2007-01-24 04:53:02 UTC - RP867 - Deckard's System Scanner Restore Point
94: 2007-01-23 15:25:20 UTC - RP866 - Removed BitDefender Total Security 2008
93: 2007-01-23 05:53:43 UTC - RP865 - Spybot-S&D Spyware removal
92: 2007-01-18 05:36:14 UTC - RP864 - System Checkpoint
91: 2007-01-17 05:34:29 UTC - RP863 - System Checkpoint


-- First Restore Point --
1: 2008-02-04 14:16:24 UTC - RP773 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 511 MiB (512 MiB recommended).


-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2007-01-24 00:16:41
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.0.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\SYSTEM32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\SYSTEM32\services.exe
C:\WINDOWS\SYSTEM32\lsass.exe
C:\WINDOWS\SYSTEM32\svchost.exe
C:\WINDOWS\SYSTEM32\svchost.exe
C:\WINDOWS\SYSTEM32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\SYSTEM32\nvsvc32.exe
C:\WINDOWS\SYSTEM32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\SYSTEM32\wscntfy.exe
C:\WINDOWS\SYSTEM32\rundll32.exe
C:\WINDOWS\SYSTEM32\rundll32.exe
C:\WINDOWS\SYSTEM32\rundll32.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\McAfee.com\Agent\mcupdmgr.exe
C:\Program Files\McAfee.com\Agent\mcupdui.exe
C:\Program Files\Wyzo\wyzo.exe
C:\Documents and Settings\Bob Clarke\Desktop\dss.exe
C:\WINDOWS\SYSTEM32\taskmgr.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://internetsearchservice.com
R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://internetsearchservice.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://c:/windows/homepage.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file://c:/windows/homepage.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://internetsearchservice.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/def...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = file://c:/windows/homepage.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = iexplore
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://internetsearchservice.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://c:/windows/homepage.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = file://c:/windows/homepage.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://c:/windows/homepage.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = file://c:/windows/homepage.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://internetsearchservice.com
R3 - URLSearchHook: (no name) - {54EB34EA-E6BE-4CFD-9F4F-C4A0C2EAFA22} - (no file)
O2 - BHO: (no name) - {0B52C7EC-D1A3-4054-923C-DD12567F28B1} - C:\WINDOWS\SYSTEM32\nnnllmm.dll
O2 - BHO: (no name) - {4BC877DD-F557-49DE-A2DD-C59262648A0C} - C:\WINDOWS\SYSTEM32\khfFWoOG.dll
O2 - BHO: {799494be-6a47-6d4a-12a4-f73686d63829} - {92836d68-637f-4a21-a4d6-74a6eb494997} - C:\WINDOWS\SYSTEM32\nuhgdh.dll
O2 - BHO: adssite - {996fa6ef-a66e-2058-7baa-fc6f29110839} - C:\WINDOWS\system32\nsi58A.dll (file missing)
O2 - BHO: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\Bob Clarke\Local Settings\Application Data\CyberDefender\cdmyidd.dll
O2 - BHO: (no name) - {AE9ADA3B-152F-449E-A58F-FAE52CCDFAF9} - C:\WINDOWS\system32\nnnoOhHA.dll (file missing)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: (no name) - {C7BBC1FA-E415-4926-9A47-9AB58D0B3BC8} - C:\WINDOWS\system32\byXNgeCT.dll (file missing)
O2 - BHO: MySidesearch Search Assistant - {DDFA1356-E6ED-42a5-9D62-93211D424A90} - C:\WINDOWS\SYSTEM32\mysidesearch_sidebar.dll
O2 - BHO: rightonadz browser optimizer - {e37212ad-7229-2bd7-ee6b-3768931b9b20} - C:\WINDOWS\SYSTEM32\oiilbseabuastlm.dll
O2 - BHO: (no name) - {E5312CF1-773A-4F09-8709-CB889BB48621} - (no file)
O2 - BHO: Microsoft copyright - {FFFFFFFF-BBBB-4146-86FD-A722E8AB3489} - sockins32.dll (file missing)
O3 - Toolbar: Internet Service - {51D81DD5-55B7-497F-95DB-D356429BB54E} - C:\Program Files\NetProject\wamdl.dll (file missing)
O3 - Toolbar: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\Bob Clarke\Local Settings\Application Data\CyberDefender\cdmyidd.dll
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [nmpohctu] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\nmpohctu.dll"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WMDM PMSP Service] C:\WINDOWS\system32\cssrss.exe
O4 - HKLM\..\Run: [VirusHeat 4.4] "C:\Program Files\VirusHeat 4.4\VirusHeat 4.4.exe" /h
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\McAgent.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [CyberDefender Early Detection Center] "C:\Program Files\CyberDefender\AntiSpyware\ISSIntro.exe"
O4 - HKLM\..\Run: [{e56926a2-5038-b72b-df99-9f31c603143f}] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\oiilbseabuastlm.dll" DllStart
O4 - HKLM\..\Run: [7cabc24c] rundll32.exe "C:\WINDOWS\system32\vxfyydon.dll",b
O4 - HKLM\..\Run: [BM7f98f1d0] Rundll32.exe "C:\WINDOWS\system32\gjqjivys.dll",s
O4 - HKCU\..\Run: [MSI Configuration] msiconf.exe
O4 - HKCU\..\Run: [Aida] "C:\PROGRA~1\COMMON~1\CROSOF~1.NET\logonui.exe" -vt yazb
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [Eroca] C:\Program Files\Eroca\Eroca.exe
O4 - HKCU\..\Run: [A00FC0B30.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00FC0B30.exe
O4 - HKCU\..\Run: [A00F10E7F1.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F10E7F1.exe
O4 - HKCU\..\Run: [A00F1C3D82E.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F1C3D82E.exe
O4 - HKCU\..\Run: [A00F4055B.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F4055B.exe
O4 - HKCU\..\Run: [A00F49EC994.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F49EC994.exe
O4 - HKCU\..\Run: [A00F9BFD4FB.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F9BFD4FB.exe
O4 - HKCU\..\Run: [A00FEE8DEA7.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00FEE8DEA7.exe
O4 - HKCU\..\Run: [A00F506ED4E.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F506ED4E.exe
O4 - HKCU\..\Run: [A00FA459A0A.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00FA459A0A.exe
O4 - HKCU\..\Run: [A00F1603400.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F1603400.exe
O4 - HKCU\..\Run: [A00F688F7A9.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F688F7A9.exe
O4 - HKCU\..\Run: [A00FBB208C7.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00FBB208C7.exe
O4 - HKCU\..\Run: [A00F10DDDC40.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F10DDDC40.exe
O4 - HKCU\..\Run: [A00F16017CAB.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F16017CAB.exe
O4 - HKCU\..\Run: [A00F16EDADA2.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F16EDADA2.exe
O4 - HKCU\..\Run: [A00F1C110EA2.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F1C110EA2.exe
O4 - HKCU\..\Run: [A00F213C0CBA.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F213C0CBA.exe
O4 - HKCU\..\Run: [A00F26626A9F.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F26626A9F.exe
O4 - HKCU\..\Run: [A00F2B85D449.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F2B85D449.exe
O4 - HKCU\..\Run: [A00F30AC0429.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F30AC0429.exe
O4 - HKCU\..\Run: [A00F1F4242.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F1F4242.exe
O4 - HKCU\..\Run: [A00F401371.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F401371.exe
O4 - HKCU\..\Run: [A00F20CD433.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F20CD433.exe
O4 - HKCU\..\Run: [A00F5115A50.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F5115A50.exe
O4 - HKCU\..\Run: [A00F3B3D0.exe] C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F3B3D0.exe
O4 - HKCU\..\Policies\Explorer\Run: [Windows Printing Driver] WinSpooler.exe
O4 - HKCU\..\Policies\Explorer\Run: [NTSpool] NTSpool.exe
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Documents and Settings\Bob Clarke\Desktop\AIM\aim.exe (file missing)
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll (file missing)
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted IP Range: (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwa...dir_Alt_Pub.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} () - http://download.microsoft.com/download/F/6...922/wmv9VCM.CAB
O16 - DPF: {33564D57-9980-0010-8000-00AA00389B71} () - http://codecs.microsoft.com/codecs/i386/wmv9dmo.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flash...t/ultrashim.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shock...ash/swflash.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553542500} () - http://active.macromedia.com/flash2/cabs/swflash.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O18 - Protocol: bw+0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {b3d46edf-0591-4fcc-b098-b3f93ed97aeb} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL
O18 - Protocol: offline-8876480 - {B3D46EDF-0591-4FCC-B098-B3F93ED97AEB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: 4J
O20 - Winlogon Notify: byXNgeCT - C:\WINDOWS\system32\byXNgeCT.dll (file missing)
O20 - Winlogon Notify: nnnllmm - C:\WINDOWS\system32\nnnllmm.dll
O20 - Winlogon Notify: __c00B9EC1 - C:\WINDOWS\SYSTEM32\__c00B9EC1.dat
O21 - SSODL: WebProxy - {66186F05-BBBB-4a39-864F-72D84615C679} - sockins32.dll (file missing)
O22 - SharedTaskScheduler: delayingly - {e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} - C:\WINDOWS\system32\rtmipr.dll (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - C:\Program Files\McAfee.com\VSO\McShield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Networks Associates Technology, Inc - C:\Program Files\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: MsSecurity Updated (MsSecurity1.209.4) - Unknown owner - C:\WINDOWS\b2new.exe service
O23 - Service: NBService - Unknown owner - C:\Program Files\Nero\Nero 7\Nero
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\SYSTEM32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe


--
End of file - 26302 bytes

-- File Associations -----------------------------------------------------------

All associations okay.


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 omci (OMCI WDM Device Driver) - c:\windows\system32\drivers\omci.sys <Not Verified; Dell Computer Corporation; OMCI Driver>
R1 SASDIFSV - c:\documents and settings\bob clarke\desktop\virus removers\superantispyware\sasdifsv.sys <Not Verified; SUPERAdBlocker.com and SUPERAntiSpyware.com; SUPERAntiSpyware>
R1 ts_lb - c:\windows\system32\drivers\ts_lb.sys <Not Verified; TamoSoft; CommView Loopback Driver 2000/XP/2003>
R2 SVKP - c:\windows\system32\svkp.sys <Not Verified; AntiCracking; SVKP driver for NT>

S3 CV2K1 (CommView Network Monitor) - c:\windows\system32\drivers\cv2k1.sys <Not Verified; TamoSoft; CommView Driver>
S3 RT61 (Linksys Wireless-G PCI Adapter Driver(RT61)) - c:\windows\system32\drivers\rt61.sys <Not Verified; Ralink Technology Inc.; Ralink 802.11 Wireless Adapters>
S3 SDDMI2 - c:\windows\system32\ddmi2.sys <Not Verified; Gteko Ltd.; DDMI>
S3 USB-100 (USB 10/100 Ethernet Adapter) - c:\windows\system32\drivers\usbkr100.sys <Not Verified; USB Corporation Reserved.; USB 10/100 Ethernet Adapter>
S3 xbreader (MaxDrive XBox Driver (xbreader.sys)) - c:\windows\system32\drivers\xbreader.sys <Not Verified; Thesycon GmbH, Germany; Universal USB Device Driver>


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 Viewpoint Manager Service - "c:\program files\viewpoint\common\viewpointservice.exe" <Not Verified; Viewpoint Corporation; Viewpoint Manager>

S2 MsSecurity1.209.4 (MsSecurity Updated) - c:\windows\b2new.exe service (file missing)
S2 PREVXAgent -
S3 NBService - c:\program files\nero\nero 7\nero backitup\nbservice.exe


-- Device Manager: Disabled ----------------------------------------------------

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: MAC Bridge Miniport
Device ID: ROOT\MS_BRIDGEMP\0000
Manufacturer: Microsoft
Name: MAC Bridge Miniport
PNP Device ID: ROOT\MS_BRIDGEMP\0000
Service: BridgeMP


-- Scheduled Tasks -------------------------------------------------------------

2008-01-06 11:00:00 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2007-01-24 00:17:00 514 --a------ C:\WINDOWS\Tasks\McAfee.com Update Check (BASEMENT-Brandon Weckerly).job
2007-01-24 00:16:00 520 --a------ C:\WINDOWS\Tasks\McAfee.com Update Check (BASEMENT-Christian Weckerly).job
2007-01-24 00:16:00 504 --a------ C:\WINDOWS\Tasks\McAfee.com Update Check (BASEMENT-Bob Clarke).job
2007-01-24 00:15:14 504 --a------ C:\WINDOWS\Tasks\McAfee.com Update Check (OFFICE-Bob Clarke).job
2007-01-24 00:15:13 492 --a------ C:\WINDOWS\Tasks\McAfee.com Update Check (DC44LL21-Owner).job
2007-01-24 00:13:00 508 --a------ C:\WINDOWS\Tasks\McAfee.com Update Check (BASEMENT-Todd Weckerly).job
2007-01-24 00:13:00 510 --a------ C:\WINDOWS\Tasks\McAfee.com Update Check (BASEMENT-Kyle Weckerly).job
2007-01-24 00:08:54 448 --a------ C:\WINDOWS\Tasks\RegCure Program Check.job
2007-01-24 00:04:35 238 --ah----- C:\WINDOWS\Tasks\AFF92997909ADA9B.job
2007-01-24 00:02:33 278 --ah----- C:\WINDOWS\Tasks\AA56DBE391895083.job
2007-01-23 23:00:00 274 --ah----- C:\WINDOWS\Tasks\B053D8D9992C9D51.job
2007-01-23 15:53:00 382 --a------ C:\WINDOWS\Tasks\WebReg 20030604155305.job
2007-01-18 03:00:00 382 --a------ C:\WINDOWS\Tasks\RegCure.job


-- Files created between 2006-12-24 and 2007-01-24 -----------------------------

2008-07-03 06:42:22 158208 --a------ C:\WINDOWS\system32\oiilbseabuastlm.dll
2008-05-03 11:48:00 270709 --a------ C:\WINDOWS\system32\000060.exe
2008-03-31 16:25:48 823296 --a------ C:\WINDOWS\system32\divx_xx0c.dll <Not Verified; DivX, Inc.; DivX®>
2008-03-31 16:25:48 823296 --a------ C:\WINDOWS\system32\divx_xx07.dll <Not Verified; DivX, Inc.; DivX®>
2008-03-31 16:25:46 802816 --a------ C:\WINDOWS\system32\divx_xx11.dll <Not Verified; DivX, Inc.; DivX?>
2008-03-31 16:25:46 831488 --a------ C:\WINDOWS\system32\divx_xx0a.dll
2008-03-31 16:25:46 682496 --a------ C:\WINDOWS\system32\DivX.dll <Not Verified; DivX, Inc.; DivX®>
2008-03-30 01:15:53 0 d-------- C:\Program Files\nvcoi
2008-03-29 19:29:39 0 d-------- C:\Program Files\Eroca
2008-03-27 15:36:09 2560 --a------ C:\WINDOWS\system32\hevabrxa.exe
2008-03-27 15:30:51 91056 --a------ C:\WINDOWS\system32\yvismoyr.dll
2008-03-26 10:40:32 2624 --a------ C:\WINDOWS\system32\uthnovms.exe
2008-03-26 10:40:27 100736 --a------ C:\WINDOWS\system32\uyudvfbl.dll
2008-03-26 10:38:07 90960 --a------ C:\WINDOWS\system32\rnuhiikp.dll
2008-03-26 10:36:03 90896 --a------ C:\WINDOWS\system32\kfhcomtt.dll
2008-03-26 02:45:38 100672 --a------ C:\WINDOWS\system32\wmupomfj.dll
2008-03-26 02:42:38 83296 --a------ C:\WINDOWS\system32\cbjcidqw.dll
2008-03-26 02:39:37 2624 --a------ C:\WINDOWS\system32\troyqkca.exe
2008-03-26 02:37:23 90960 --a------ C:\WINDOWS\system32\corscqfb.dll
2008-03-25 22:52:21 2624 --a------ C:\WINDOWS\system32\dolvuwmw.exe
2008-03-25 22:49:21 83296 --a------ C:\WINDOWS\system32\sgavjrlq.dll
2008-03-25 22:46:22 100672 --a------ C:\WINDOWS\system32\drmpaamk.dll
2008-03-25 22:43:34 90960 --a------ C:\WINDOWS\system32\sguoelyg.dll
2008-03-25 22:43:10 90960 --a------ C:\WINDOWS\system32\kvppgddo.dll
2008-03-24 22:52:01 2624 --a------ C:\WINDOWS\system32\tupdbjbq.exe
2008-03-24 22:49:02 100688 --a------ C:\WINDOWS\system32\rpultigt.dll
2008-03-24 22:46:02 83344 --a------ C:\WINDOWS\system32\djafwjil.dll
2008-03-24 22:43:02 91024 --a------ C:\WINDOWS\system32\fljqbahk.dll
2008-03-23 22:49:02 83264 --a------ C:\WINDOWS\system32\csnnbftq.dll
2008-03-23 22:46:01 2624 --a------ C:\WINDOWS\system32\vgofcrix.exe
2008-03-23 22:43:02 100672 --a------ C:\WINDOWS\system32\vnhiphst.dll
2008-03-23 22:40:47 91072 --a------ C:\WINDOWS\system32\ojnnubfm.dll
2008-03-23 22:37:44 83264 --a------ C:\WINDOWS\system32\eaijtoqd.dll
2008-03-23 22:37:36 91072 --a------ C:\WINDOWS\system32\jjdoujwy.dll
2008-03-23 22:34:24 2560 --a------ C:\WINDOWS\system32\fbblqspd.exe
2008-03-23 22:32:12 91008 --a------ C:\WINDOWS\system32\amywpbmh.dll
2008-03-23 06:03:21 82560 --a------ C:\WINDOWS\system32\cgfhosfo.dll
2008-03-23 06:01:12 2624 --a------ C:\WINDOWS\system32\ylikeghm.exe
2008-03-23 06:01:05 90288 --a------ C:\WINDOWS\system32\bqgiuqsw.dll
2008-03-22 23:37:15 2560 --a------ C:\WINDOWS\system32\qbpvmqmt.exe
2008-03-22 23:32:05 90224 --a------ C:\WINDOWS\system32\gxakxqwn.dll
2008-03-21 22:41:31 2624 --a------ C:\WINDOWS\system32\ahxrqwye.exe
2008-03-21 22:38:31 82592 --a------ C:\WINDOWS\system32\uxmhvcwl.dll
2008-03-21 22:35:31 100016 --a------ C:\WINDOWS\system32\oytetnch.dll
2008-03-21 22:32:44 90272 --a------ C:\WINDOWS\system32\pemuwuby.dll
2008-03-21 15:30:08 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2008-03-21 15:28:54 196608 --a------ C:\WINDOWS\system32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>
2008-03-21 15:28:54 81920 --a------ C:\WINDOWS\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2008-03-21 15:28:20 12288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll
2008-03-20 22:41:31 2624 --a------ C:\WINDOWS\system32\yesrpqmv.exe
2008-03-20 22:32:31 90272 --a------ C:\WINDOWS\system32\evoiilmh.dll
2008-03-19 22:38:31 2624 --a------ C:\WINDOWS\system32\tcmdknur.exe
2008-03-19 22:35:31 99920 --a------ C:\WINDOWS\system32\utnigghw.dll
2008-03-19 22:32:31 90224 --a------ C:\WINDOWS\system32\oivrytpe.dll
2008-03-19 22:30:23 90224 --a------ C:\WINDOWS\system32\qdwgvgde.dll
2008-03-19 21:01:14 2560 --a------ C:\WINDOWS\system32\ajdfjcxb.exe
2008-03-19 20:56:04 99856 --a------ C:\WINDOWS\system32\ylflcsdq.dll
2008-03-19 20:55:55 90160 --a------ C:\WINDOWS\system32\mlrnxyma.dll
2008-03-19 19:55:08 314432 --a------ C:\WINDOWS\system32\nnnmkIBs.dll
2008-03-19 18:55:08 314432 --a------ C:\WINDOWS\system32\pmnnLDWM.dll
2008-03-19 17:55:08 314432 --a------ C:\WINDOWS\system32\ddcYoOfg.dll
2008-03-18 14:24:30 98944 --a------ C:\WINDOWS\system32\fosqlsjc.dll
2008-03-18 14:22:28 2112 --a------ C:\WINDOWS\system32\nsgrudot.exe
2008-03-18 14:22:18 90336 --a------ C:\WINDOWS\system32\cwthxuky.dll
2008-03-17 16:21:07 2112 --a------ C:\WINDOWS\system32\sqlovbqc.exe
2008-03-17 16:15:07 99024 --a------ C:\WINDOWS\system32\gltnlmfg.dll
2008-03-17 16:12:07 90288 --a------ C:\WINDOWS\system32\xhdfxtyw.dll
2008-03-16 16:19:24 98960 --a------ C:\WINDOWS\system32\tahkkdjw.dll
2008-03-16 16:16:24 83056 --a------ C:\WINDOWS\system32\jjiaewhv.dll
2008-03-16 16:13:24 2112 --a------ C:\WINDOWS\system32\bukcaffd.exe
2008-03-16 16:10:54 90304 --a------ C:\WINDOWS\system32\sutjllbh.dll
2008-03-15 22:30:34 0 d-------- C:\WINDOWS\system32\158117
2008-03-13 15:46:15 99008 --a------ C:\WINDOWS\system32\fgreabqr.dll
2008-03-13 15:43:14 2112 --a------ C:\WINDOWS\system32\xkbabmxa.exe
2008-03-13 15:40:15 83136 --a------ C:\WINDOWS\system32\ethlqocc.dll
2008-03-13 15:38:04 90304 --a------ C:\WINDOWS\system32\phaemmre.dll
2008-03-13 15:37:14 49392 --ahs---- C:\WINDOWS\system32\ybbbcMoq.ini2
2008-03-13 06:19:05 2048 --a------ C:\WINDOWS\system32\wefcwvfy.exe
2008-03-13 06:16:06 98864 --a------ C:\WINDOWS\system32\acpitwcd.dll
2008-03-13 06:13:05 83072 --a------ C:\WINDOWS\system32\mwdciyhp.dll
2008-03-13 06:10:06 90176 --a------ C:\WINDOWS\system32\hinmldox.dll
2008-03-12 06:13:46 83008 --a------ C:\WINDOWS\system32\qifpdioe.dll
2008-03-12 06:10:47 2048 --a------ C:\WINDOWS\system32\vwdetjjc.exe
2008-03-12 06:08:40 98896 --a------ C:\WINDOWS\system32\eryspupj.dll
2008-03-12 06:08:31 90176 --a------ C:\WINDOWS\system32\swkgjgri.dll
2008-03-11 19:17:12 2048 --a------ C:\WINDOWS\system32\sorkkrdt.exe
2008-03-11 19:17:09 83024 --a------ C:\WINDOWS\system32\ctflnhrg.dll
2008-03-11 19:14:09 98912 --a------ C:\WINDOWS\system32\cfivlmdd.dll
2008-03-11 19:11:49 90208 --a------ C:\WINDOWS\system32\qgvlkfgw.dll
2008-03-11 19:11:08 1053224 --ahs---- C:\WINDOWS\system32\AHhOonnn.ini2
2008-03-11 17:15:29 98912 --a------ C:\WINDOWS\system32\fnkplffg.dll
2008-03-11 17:10:03 25728 --a------ C:\WINDOWS\system32\cbXRhfCV.dll
2008-03-11 17:09:56 2048 --a------ C:\WINDOWS\system32\acbrcbek.exe
2008-03-11 17:07:12 90208 --a------ C:\WINDOWS\system32\lwsfnbdn.dll
2008-03-11 17:03:14 98912 --a------ C:\WINDOWS\system32\rivulwxe.dll
2008-03-11 17:03:13 2048 --a------ C:\WINDOWS\system32\aatdpqsn.exe
2008-03-11 17:03:00 90208 --a------ C:\WINDOWS\system32\xbtrvofi.dll
2008-03-11 16:09:22 25728 --a------ C:\WINDOWS\system32\iifcawTk.dll
2008-03-11 15:46:04 83024 --a------ C:\WINDOWS\system32\drvpbyet.dll
2008-03-11 15:43:48 90208 --a------ C:\WINDOWS\system32\ucmodoun.dll
2008-03-11 15:24:21 2048 --a------ C:\WINDOWS\system32\cwguugth.exe
2008-03-11 15:24:15 98912 --a------ C:\WINDOWS\system32\ovhgcate.dll
2008-03-11 15:18:12 83024 --a------ C:\WINDOWS\system32\sajdmbas.dll
2008-03-11 15:18:02 90208 --a------ C:\WINDOWS\system32\crjfjldr.dll
2008-03-11 15:13:35 10240 --a------ C:\WINDOWS\voiceip.dll
2008-03-11 15:13:35 15872 --a------ C:\WINDOWS\cdsm32.dll
2008-03-11 14:41:05 316464 --a------ C:\WINDOWS\system32\cbXOHBQg.dll
2008-03-11 13:41:04 316464 --a------ C:\WINDOWS\system32\efcCuVlk.dll
2008-03-11 11:27:06 2048 --a------ C:\WINDOWS\system32\wpuxgcsj.exe
2008-03-11 11:27:00 98912 --a------ C:\WINDOWS\system32\howwqafq.dll
2008-03-11 11:26:31 25088 --a------ C:\WINDOWS\mspphe.dll
2008-03-11 11:26:30 15104 --a------ C:\WINDOWS\bjam.dll
2008-03-11 11:22:06 90208 --a------ C:\WINDOWS\system32\eonlsjil.dll
2008-03-11 11:21:47 1036101 --ahs---- C:\WINDOWS\system32\iQqBdfhk.ini2
2008-03-11 11:13:58 98912 --a------ C:\WINDOWS\system32\xrnqhwrd.dll
2008-03-11 03:37:20 2048 --a------ C:\WINDOWS\system32\ckllbxio.exe
2008-03-11 03:35:11 90304 --a------ C:\WINDOWS\system32\arywyxwh.dll
2008-03-11 01:59:58 16640 --a------ C:\WINDOWS\swin32.dll
2008-03-11 01:59:57 23296 --a------ C:\WINDOWS\mssvr.exe
2008-03-11 01:59:56 31744 --a------ C:\WINDOWS\2020search2.dll
2008-03-11 01:59:49 31488 --a------ C:\WINDOWS\saiemod.dll
2008-03-11 01:59:47 20736 --a------ C:\WINDOWS\msapasrc.dll
2008-03-11 01:59:46 8192 --a------ C:\WINDOWS\shdocpl.dll
2008-03-11 01:59:46 23296 --a------ C:\WINDOWS\msa64chk.dll
2008-03-11 01:59:45 27392 --a------ C:\WINDOWS\ntnut.exe
2008-03-11 01:59:44 8704 --a------ C:\WINDOWS\shdocpe.dll
2008-03-11 01:59:43 22528 --a------ C:\WINDOWS\winsb.dll
2008-03-11 01:59:43 19712 --a------ C:\WINDOWS\browserad.dll
2008-03-11 01:59:43 26624 --a------ C:\WINDOWS\aviwrap32.dll
2008-03-11 01:59:42 16128 --a------ C:\WINDOWS\avisynthex32.dll
2008-03-11 01:59:42 27904 --a------ C:\WINDOWS\avifile32.dll
2008-03-11 01:59:42 15104 --a------ C:\WINDOWS\autodisc32.dll
2008-03-11 01:59:42 19200 --a------ C:\WINDOWS\audiosrv32.dll
2008-03-11 01:59:41 14848 --a------ C:\WINDOWS\ati2dvag32.dll
2008-03-11 01:59:41 22528 --a------ C:\WINDOWS\ati2dvaa32.dll
2008-03-11 01:59:41 23296 --a------ C:\WINDOWS\athprxy32.dll
2008-03-11 01:59:41 17664 --a------ C:\WINDOWS\asycfilt32.dll
2008-03-11 01:59:41 28416 --a------ C:\WINDOWS\asferror32.dll
2008-03-11 01:59:40 8960 --a------ C:\WINDOWS\changeurl_30.dll
2008-03-11 01:59:40 22272 --a------ C:\WINDOWS\apphelp32.dll
2008-03-11 01:53:51 90304 --a------ C:\WINDOWS\system32\xoukojxw.dll
2008-03-11 01:45:34 0 d-------- C:\Program Files\QdrPack
2008-03-11 01:45:07 91563 --a------ C:\WINDOWS\system32\wmsdkns.exe <Not Verified; Microsoft; XML Media>
2008-03-11 01:45:07 91563 --a------ C:\WINDOWS\lfn.exe <Not Verified; Microsoft; XML Media>
2008-03-05 20:11:22 162304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
2008-03-05 20:11:22 77312 --a------ C:\WINDOWS\system32\ztvunace26.dll
2008-03-05 20:11:22 69632 --a------ C:\WINDOWS\system32\ztvcabinet.dll <Not Verified; Microsoft Corporation; Microsoft® Windows ® 2000 Operating System>
2008-03-05 20:11:22 153088 --a------ C:\WINDOWS\system32\UNRAR3.dll
2008-03-05 20:11:22 75264 --a------ C:\WINDOWS\system32\unacev2.dll
2008-03-05 20:11:20 0 d-------- C:\Program Files\Trojan Remover
2008-03-05 20:11:20 0 d-------- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2008-03-05 20:04:16 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Simply Super Software
2008-03-03 19:14:56 0 d-------- C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com
2008-03-02 01:15:32 36864 --a------ C:\Documents and Settings\Bob Clarke\services.exe
2008-03-02 01:14:36 0 d-------- C:\Documents and Settings\LocalService\Application Data\NetMon
2008-03-01 18:30:14 2732 --ahs---- C:\WINDOWS\system32\vybeg.ini2
2008-03-01 18:26:42 0 d-------- C:\Program Files\RABCO
2008-03-01 18:26:03 134 --a------ C:\n.bat
2008-03-01 18:25:49 0 d-------- C:\Documents and Settings\NetworkService\Application Data\NetMon
2008-03-01 18:25:36 40960 --a------ C:\Documents and Settings\Bob Clarke\f.exe
2008-03-01 18:25:31 11471 --a------ C:\x.dat
2008-03-01 18:25:27 0 d--hs---- C:\WINDOWS\Qm9iIFdlY2tlcmx5
2008-03-01 18:25:25 15265 --a------ C:\z.dat
2008-03-01 18:25:10 23040 --a------ C:\WINDOWS\jd2002.dll
2008-03-01 18:25:04 0 d-------- C:\Program Files\amsys
2008-03-01 18:25:00 0 d-------- C:\WINDOWS\system32\acespy
2008-03-01 18:24:58 20736 --a------ C:\WINDOWS\ngd.dll
2008-03-01 18:24:56 0 d-------- C:\Program Files\p2pnetworks
2008-03-01 18:24:52 0 d-------- C:\WINDOWS\system32\x3
2008-03-01 18:24:52 0 d-------- C:\WINDOWS\system32\s7
2008-03-01 18:24:52 0 d-------- C:\WINDOWS\system32\k8
2008-03-01 18:24:52 0 d-------- C:\WINDOWS\system32\c4
2008-03-01 18:24:52 0 d-------- C:\Program Files\akl
2008-03-01 18:24:51 12288 --a------ C:\WINDOWS\system32\vxddsk.exe
2008-03-01 18:24:49 172032 --a------ C:\winlogon.exe
2008-03-01 18:24:49 18944 --a------ C:\WINDOWS\7search.dll
2008-03-01 18:24:40 35328 --a------ C:\WINDOWS\system32\nnnllmm.dll
2008-03-01 18:24:37 0 d-------- C:\WINDOWS\system32\iDlo18
2008-03-01 18:24:37 0 d-------- C:\Temp
2008-03-01 18:22:32 0 d-------- C:\Documents and Settings\All Users\Application Data\Rabio
2008-03-01 18:17:46 4 --a------ C:\WINDOWS\system32\winfrun32.bin
2008-03-01 16:26:40 105872 --a------ C:\WINDOWS\system32\vnqzrr.dll
2008-03-01 16:26:39 105872 --a------ C:\WINDOWS\system32\aknduxrv.dll
2008-03-01 16:23:41 24576 --a------ C:\WINDOWS\system32\__c001609C.dat
2008-03-01 16:23:39 37888 --a------ C:\WINDOWS\system32\pluvwrsn.exe
2008-03-01 16:17:39 90544 --a------ C:\WINDOWS\system32\rhvbxhjv.dll
2008-02-29 16:26:40 24576 --a------ C:\WINDOWS\system32\__c0036965.dat
2008-02-29 16:26:39 37888 --a------ C:\WINDOWS\system32\wnyvyimu.exe
2008-02-29 16:23:40 105856 --a------ C:\WINDOWS\system32\syiwtb.dll
2008-02-29 16:23:39 105856 --a------ C:\WINDOWS\system32\xpccddit.dll
2008-02-29 16:17:39 90544 --a------ C:\WINDOWS\system32\ofjbgbwi.dll
2008-02-28 20:31:56 0 d-------- C:\Program Files\Nero
2008-02-28 20:07:39 147456 --a------ C:\WINDOWS\system32\vbzip10.dll <Not Verified; Info-ZIP; Info-ZIP's WiZ>
2008-02-28 19:43:24 37888 --a------ C:\WINDOWS\system32\rar.exe <Not Verified; Microsoft Corporation; Microsoft® Windows ® 2000 Operating System>
2008-02-28 16:26:40 105968 --a------ C:\WINDOWS\system32\adgdxa.dll
2008-02-28 16:26:39 105968 --a------ C:\WINDOWS\system32\xyxusklr.dll
2008-02-28 16:20:42 24576 --a------ C:\WINDOWS\system32\__c00286AA.dat
2008-02-28 16:20:39 37888 --a------ C:\WINDOWS\system32\xshqqvwo.exe
2008-02-28 16:17:39 90560 --a------ C:\WINDOWS\system32\cutxckum.dll
2008-02-28 15:43:45 0 d-------- C:\Program Files\NoDNS
2008-02-27 23:57:51 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Simple Star
2008-02-27 16:17:46 105904 --a------ C:\WINDOWS\system32\qhgznx.dll
2008-02-27 16:17:46 105904 --a------ C:\WINDOWS\system32\meborowa.dll
2008-02-27 16:17:44 24576 --a------ C:\WINDOWS\system32\__c0047263.dat
2008-02-27 16:17:41 37888 --a------ C:\WINDOWS\system32\mfxqakmk.exe
2008-02-27 16:17:39 90528 --a------ C:\WINDOWS\system32\boqrqwms.dll
2008-02-27 12:59:38 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Nero
2008-02-27 12:22:49 0 d-------- C:\Documents and Settings\All Users\Application Data\Nero
2008-02-27 12:22:48 0 d-------- C:\Program Files\Common Files\Nero
2008-02-26 16:17:43 107968 --a------ C:\WINDOWS\system32\icfchdys.dll
2008-02-26 16:15:04 84944 --a------ C:\WINDOWS\system32\negbhpud.dll
2008-02-26 16:15:01 37888 --a------ C:\WINDOWS\system32\oejdjmyg.exe
2008-02-26 16:14:53 91568 --a------ C:\WINDOWS\system32\ypvmenew.dll
2008-02-26 12:08:30 0 d-------- C:\Program Files\Windows Media Connect 2
2008-02-26 12:05:44 0 d-------- C:\22a5ae1dac47205f74dd19
2008-02-26 12:03:51 0 d-------- C:\WINDOWS\system32\drivers\UMDF
2008-02-26 12:03:50 0 d-------- C:\WINDOWS\system32\LogFiles
2008-02-26 11:02:20 0 d-------- C:\Program Files\MapEDC
2008-02-26 11:02:19 0 d-------- C:\Program Files\Temporary
2008-02-25 16:41:51 37888 --a------ C:\WINDOWS\system32\kqitkorl.exe
2008-02-25 16:38:51 84880 --a------ C:\WINDOWS\system32\pusyeysl.dll
2008-02-25 16:14:40 91472 --a------ C:\WINDOWS\system32\ebcsfjrw.dll
2008-02-25 09:58:12 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Ahead
2008-02-25 09:51:11 0 d-------- C:\Program Files\Common Files\Ahead
2008-02-25 09:47:42 0 d-------- C:\Program Files\AC3Filter
2008-02-25 08:41:41 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Uniblue
2008-02-24 20:24:56 0 d-------- C:\Program Files\QdrModule
2008-02-24 20:24:54 0 d-------- C:\Program Files\QdrDrive
2008-02-24 20:24:52 0 d-------- C:\Program Files\ISM
2008-02-24 20:24:40 0 d-------- C:\Program Files\Common Files\??crosoft.NET
2008-02-24 16:32:43 0 d-------- C:\Program Files\AC3File
2008-02-24 16:23:43 7680 --a------ C:\WINDOWS\system32\ff_vfw.dll
2008-02-24 16:23:42 60273 --a------ C:\WINDOWS\system32\pthreadGC2.dll <Not Verified; Open Source Software community project; >
2008-02-24 16:18:02 84864 --a------ C:\WINDOWS\system32\vfkjfmaa.dll
2008-02-24 16:16:13 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\ShoppingReport
2008-02-24 16:16:12 0 d-------- C:\Program Files\ShoppingReport
2008-02-24 16:15:15 37888 --a------ C:\WINDOWS\system32\bamowhyt.exe
2008-02-24 16:14:45 101728 --a------ C:\WINDOWS\system32\setyhhmj.dll
2008-02-24 16:14:30 91488 --a------ C:\WINDOWS\system32\kmtxwreq.dll
2008-02-24 16:01:31 0 d-------- C:\Program Files\GPL MPEG Decoder
2008-02-24 15:49:59 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\DivX
2008-02-24 15:38:28 0 d-------- C:\Program Files\DivX
2008-02-23 09:43:26 24576 --a------ C:\WINDOWS\system32\__c007C649.dat
2008-02-23 09:43:18 37888 --a------ C:\WINDOWS\system32\hiwmtrao.exe
2008-02-23 09:40:19 101792 --a------ C:\WINDOWS\system32\jubwgnax.dll
2008-02-23 09:40:18 90464 --a------ C:\WINDOWS\system32\hfojxnxd.dll
2008-02-22 09:43:18 101728 --a------ C:\WINDOWS\system32\yolswujf.dll
2008-02-22 09:40:31 24576 --a------ C:\WINDOWS\system32\__c00DBC59.dat
2008-02-22 09:40:27 37888 --a------ C:\WINDOWS\system32\cogkdbyj.exe
2008-02-22 09:40:18 90464 --a------ C:\WINDOWS\system32\romgyhvm.dll
2008-02-21 21:55:15 87 --a------ C:\WINDOWS\Winsus0.dat
2008-02-21 19:38:19 0 d-------- C:\Program Files\BreakPoint Software
2008-02-21 09:46:19 24576 --a------ C:\WINDOWS\system32\__c00904A2.dat
2008-02-21 09:46:18 37888 --a------ C:\WINDOWS\system32\sbrocpfc.exe
2008-02-21 09:40:18 101728 --a------ C:\WINDOWS\system32\lhxwoaxk.dll
2008-02-21 09:37:32 90464 --a------ C:\WINDOWS\system32\efbyhjoq.dll
2008-02-20 09:37:36 101712 --a------ C:\WINDOWS\system32\gkjhoxfv.dll
2008-02-20 09:37:27 24576 --a------ C:\WINDOWS\system32\__c002531D.dat
2008-02-20 09:37:23 37888 --a------ C:\WINDOWS\system32\fgqevuce.exe
2008-02-20 09:37:20 90320 --a------ C:\WINDOWS\system32\qshvenvu.dll
2008-02-19 22:23:02 0 d-------- C:\WINDOWS\USB-IrDA
2008-02-19 22:18:09 84763 --a------ C:\WINDOWS\system32\mysidesearch_sidebar_uninstall.exe
2008-02-19 22:08:04 0 d-------- C:\Program Files\AIM6
2008-02-19 21:18:40 0 d-------- C:\Documents and Settings\Administrator\Application Data\Macromedia
2008-02-19 21:18:40 0 d-------- C:\Documents and Settings\Administrator\Application Data\Adobe
2008-02-19 21:09:45 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\BitTorrent
2008-02-19 21:09:29 0 d-------- C:\Program Files\DNA
2008-02-19 21:09:29 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\DNA
2008-02-19 20:07:42 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\.BitTornado
2008-02-19 01:33:10 37888 --a------ C:\WINDOWS\system32\sicfmskt.exe
2008-02-19 01:30:10 101712 --a------ C:\WINDOWS\system32\xfsdmtmm.dll
2008-02-19 01:27:56 90368 --a------ C:\WINDOWS\system32\okrexwln.dll
2008-02-19 01:27:10 830601 --ahs---- C:\WINDOWS\system32\GOoWFfhk.ini2
2008-02-19 01:27:05 318304 --a------ C:\WINDOWS\system32\khfFWoOG.dll
2008-02-17 14:05:43 946 --a------ C:\xcrashdump.dat
2008-02-17 13:57:37 84800 --a------ C:\WINDOWS\system32\okjfjioj.dll
2008-02-17 13:54:32 101728 --a------ C:\WINDOWS\system32\iajsnfwu.dll
2008-02-17 13:51:34 24576 --a------ C:\WINDOWS\system32\__c0038B49.dat
2008-02-17 13:51:32 37888 --a------ C:\WINDOWS\system32\lkoacujs.exe
2008-02-17 13:49:13 90464 --a------ C:\WINDOWS\system32\wkewtgib.dll
2008-02-15 14:08:04 0 d-------- C:\Documents and Settings\All Users\Application Data\AOL Downloads
2008-02-15 01:46:25 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\uTorrent
2008-02-14 21:07:38 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\acccore
2008-02-14 21:06:53 0 d-------- C:\Program Files\AIM Search
2008-02-14 21:06:47 0 d-------- C:\Program Files\Viewpoint
2008-02-11 19:28:56 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\SUPERAntiSpyware.com
2008-02-11 19:28:56 0 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-02-11 16:56:07 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-02-11 09:01:40 339968 --a------ C:\WINDOWS\system32\mysidesearch_sidebar.dll
2008-02-10 20:28:35 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Google
2008-02-10 20:23:30 0 d-------- C:\Documents and Settings\All Users\Application Data\Google Updater
2008-02-10 20:23:18 0 d-------- C:\Program Files\Google
2008-02-07 20:49:30 2560 --a------ C:\WINDOWS\system32\jwfshicx.exe
2008-02-07 20:46:30 98544 --a------ C:\WINDOWS\system32\hsjsgswp.dll
2008-02-07 20:43:30 37888 --a------ C:\WINDOWS\system32\ocrwiarp.exe
2008-02-07 20:41:09 90368 --a------ C:\WINDOWS\system32\dvtjphoi.dll
2008-02-06 12:42:38 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Wyzo
2008-02-06 12:42:38 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\.wyzo
2008-02-06 12:40:42 0 d-------- C:\Program Files\Wyzo
2008-01-29 21:57:52 0 d-------- C:\VundoFix Backups
2008-01-29 21:47:32 53248 --a------ C:\WINDOWS\PSEXESVC.EXE <Not Verified; Sysinternals; Sysinternals PsExec>
2008-01-28 15:17:24 0 d-------- C:\Program Files\TrojanHunter 4.2
2008-01-28 15:16:39 0 d-------- C:\Documents and Settings\Administrator\Application Data\Prevx
2008-01-27 22:16:07 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Prevx
2008-01-27 22:08:34 0 d-------- C:\Documents and Settings\All Users\Application Data\Prevx
2008-01-27 22:06:41 0 d-------- C:\bae7368af7dae521884fca
2008-01-21 13:37:02 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Hamachi
2008-01-21 10:59:07 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\U3
2008-01-07 20:46:27 106240 --a------ C:\WINDOWS\system32\pyehgu.dll
2008-01-07 20:46:26 106240 --a------ C:\WINDOWS\system32\omibnjcq.dll
2008-01-07 20:40:28 24576 --a------ C:\WINDOWS\system32\__c006AB30.dat
2008-01-07 20:40:26 37888 --a------ C:\WINDOWS\system32\fpabwifp.exe
2008-01-07 19:58:54 53248 -ra------ C:\WINDOWS\system32\InstMed.exe
2008-01-06 20:43:02 106320 --a------ C:\WINDOWS\system32\hupefr.dll
2008-01-06 20:43:01 106320 --a------ C:\WINDOWS\system32\yfkaegea.dll
2008-01-06 20:40:04 24576 --a------ C:\WINDOWS\system32\__c0058775.dat
2008-01-06 20:40:01 37888 --a------ C:\WINDOWS\system32\fubujyyj.exe
2008-01-05 20:40:11 106240 --a------ C:\WINDOWS\system32\yivzua.dll
2008-01-05 20:40:10 106240 --a------ C:\WINDOWS\system32\cmqrktym.dll
2008-01-05 20:40:07 37888 --a------ C:\WINDOWS\system32\dlfykmoj.exe
2008-01-05 09:52:28 0 d-------- C:\Documents and Settings\All Users\Application Data\AOL OCP
2008-01-05 02:37:49 0 d-------- C:\WINDOWS\musicals
2008-01-05 02:31:45 0 d-------- C:\musicals
2008-01-05 01:46:26 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\FUJIFILM
2008-01-05 01:45:30 274432 --a------ C:\WINDOWS\system32\FFTIFF16.dll <Not Verified; FUJI PHOTO FILM CO., LTD.; FUJIFILM TIFF Image Library>
2008-01-05 01:45:30 155648 --a------ C:\WINDOWS\system32\FFRAFLIB.DLL <Not Verified; FUJI PHOTO FILM CO., LTD.; FUJIFILM CCD-RAW LIBRARY>
2008-01-05 01:45:20 0 d-------- C:\Program Files\FinePixViewer
2008-01-05 01:44:20 45056 --a------ C:\WINDOWS\system32\FINFCOPY.dll <Not Verified; FUJIFILM; FUJIFILM FINFCOPY>
2008-01-05 01:44:20 65536 --a------ C:\WINDOWS\system32\FINFCHECK.dll <Not Verified; FUJIFILM; FUJIFILM FINFCHECK>
2008-01-05 01:44:20 0 d-------- C:\Program Files\REGSHAVE
2008-01-05 01:44:18 69632 --a------ C:\WINDOWS\system32\FREGSHEX.DLL <Not Verified; FUJIFILM; FUJIFILM Fregshave>
2008-01-05 01:44:18 45056 --a------ C:\WINDOWS\system32\FCLKBTN.DLL <Not Verified; FUJIFILM; FUJIFILM FCLKBTN>
2008-01-04 20:46:28 106192 --a------ C:\WINDOWS\system32\kaurmh.dll
2008-01-04 20:46:27 106192 --a------ C:\WINDOWS\system32\vqxsfvgq.dll
2008-01-04 20:43:27 37888 --a------ C:\WINDOWS\system32\vvrdxikk.exe
2008-01-04 20:40:27 85376 --a------ C:\WINDOWS\system32\hkpfgipi.dll
2008-01-03 20:43:28 24576 --a------ C:\WINDOWS\system32\__c0063090.dat
2008-01-03 20:43:27 37888 --a------ C:\WINDOWS\system32\loahunsi.exe
2008-01-03 20:40:28 106272 --a------ C:\WINDOWS\system32\bstxfn.dll
2008-01-03 20:40:27 106272 --a------ C:\WINDOWS\system32\ogoucnbj.dll
2008-01-02 20:37:51 37888 --a------ C:\WINDOWS\system32\pxtubbqy.exe
2008-01-02 20:37:49 106240 --a------ C:\WINDOWS\system32\mmwgaz.dll
2008-01-02 20:37:48 106240 --a------ C:\WINDOWS\system32\fsftixus.dll
2008-01-02 20:37:43 85296 --a------ C:\WINDOWS\system32\tdcylklo.dll
2008-01-02 20:37:42 90960 --a------ C:\WINDOWS\system32\hjooumgf.dll
2008-01-01 21:14:51 5 --a------ C:\WINDOWS\system32\SySvideoconvert.dat
2008-01-01 21:13:26 196608 --a------ C:\WINDOWS\system32\NCTWMVFile.dll <Not Verified; NCT Company Ltd.; NCTWMVFile ActiveX DLL>
2008-01-01 21:13:26 139264 --a------ C:\WINDOWS\system32\NCTVideoFile.dll <Not Verified; NCT Company Ltd.; NCTVideoFile ActiveX DLL>
2008-01-01 21:13:26 356352 --a------ C:\WINDOWS\system32\NCTVideoDxPlayer.dll <Not Verified; NCT Company Ltd.; NCTVideoDxPlayer ActiveX DLL>
2008-01-01 21:13:26 991232 --a------ C:\WINDOWS\system32\NCTVideoCoreM.dll <Not Verified; NCT Company Ltd.; NCTVideoCoreM ActiveX DLL>
2008-01-01 21:13:26 90112 --a------ C:\WINDOWS\system32\NCTAudioFormatSettings3.dll <Not Verified; Online Media Technologies Ltd.; NCTAudioFormatSettings3 Module>
2008-01-01 21:13:25 1245184 --a------ C:\WINDOWS\system32\NCTRMFile.dll <Not Verified; NCT Company Ltd.; NCTRMFile ActiveX DLL>
2008-01-01 21:13:25 282624 --a------ C:\WINDOWS\system32\NCTQuickTimeFile.dll <Not Verified; Online Media Technologies Company Ltd.; NCTQuickTimeFile Module>
2008-01-01 21:13:25 294912 --a------ C:\WINDOWS\system32\NCTAVIFile.dll <Not Verified; NCT Company Ltd.; NCTAVIFile ActiveX DLL>
2008-01-01 21:13:25 2658304 --a------ C:\WINDOWS\system32\NCTAudioCompress3.dll <Not Verified; Online Media Technologies Ltd.; NCTAudioCompress3 Module>
2008-01-01 21:13:25 1810432 --a------ C:\WINDOWS\system32\NCTAudioCompress2.dll <Not Verified; Online Media Technologies Ltd.; NCTAudioCompress2 Module>
2008-01-01 21:13:24 2260992 --a------ C:\WINDOWS\system32\NCTVideoCompress.dll <Not Verified; NCT Company Ltd.; NCTVideoCompress ActiveX DLL>
2008-01-01 21:13:22 0 d-------- C:\WINDOWS\system32\RMBin
2008-01-01 21:13:22 237568 --a------ C:\WINDOWS\system32\lame_enc.dll
2008-01-01 21:13:21 0 d-------- C:\Program Files\Crystalsoftware
2008-01-01 20:47:38 105872 --a------ C:\WINDOWS\system32\ueipavce.dll
2008-01-01 20:47:38 105872 --a------ C:\WINDOWS\system32\qacbre.dll
2008-01-01 20:41:39 24576 --a------ C:\WINDOWS\system32\__c0074C0C.dat
2008-01-01 20:41:38 37888 --a------ C:\WINDOWS\system32\teahqebf.exe
2008-01-01 20:38:38 90544 --a------ C:\WINDOWS\system32\hshwguuc.dll
2007-12-29 03:00:48 0 d-------- C:\Program Files\Windows Live Toolbar
2007-12-21 09:39:14 10752 --a------ C:\WINDOWS\system32\WhoisCL.exe <Not Verified; NirSoft; WhoisCL>
2007-10-11 09:55:10 88576 --a------ C:\WINDOWS\system32\infocardapi.dll <Not Verified; Microsoft Corporation; Microsoft® .NET Framework>
2007-10-09 12:58:20 16896 --a----c- C:\WINDOWS\system32\tswpfwrp.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
2007-08-02 13:33:51 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2007-07-21 18:43:08 1148580 --a------ C:\Install
2007-07-13 14:09:26 0 d-------- C:\cceea93e7f2822f3063526abaa
2007-07-13 13:47:31 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\AntivirusPCSuite
2007-07-12 17:11:54 356096 --a------ C:\WINDOWS\system32\drivers\rt61.sys <Not Verified; Ralink Technology Inc.; Ralink 802.11 Wireless Adapters>
2007-07-10 13:38:14 94208 --a----c- C:\WINDOWS\system32\GTW32N50.dll
2007-07-10 13:38:14 15872 --a----c- C:\WINDOWS\system32\GTNDIS5.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows>
2007-06-17 06:47:44 0 --a----c- C:\Documents and Settings\Administrator\Application Data\wklnhst.dat
2007-05-08 15:03:04 1275392 --a------ C:\WINDOWS\system32\msxml4.dll <Not Verified; Microsoft Corporation; Microsoft® MSXML 4.0 SP 2>
2007-04-06 18:08:40 757760 --a----c- C:\WINDOWS\system32\CDDBUI.dll <Not Verified; Gracenote; CDDBUIControl Module>
2007-04-06 18:08:40 630784 --a----c- C:\WINDOWS\system32\CDDBControl.dll <Not Verified; Gracenote (formerly CDDB, Inc.); CDDBControl Core Module>
2007-04-06 18:08:02 0 d-------- C:\Documents and Settings\All Users\Application Data\Sony Corporation
2007-04-06 18:06:58 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Sony Corporation
2007-04-06 18:06:57 0 d-------- C:\Program Files\Common Files\Sony Shared
2007-03-22 20:25:02 124928 --a------ C:\WINDOWS\system32\prntvpt.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
2007-02-14 18:30:07 1755 --a----c- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
2007-01-23 23:28:23 0 d-------- C:\Program Files\Uniblue
2007-01-23 23:16:19 24576 --a------ C:\WINDOWS\system32\__c00F5E18.dat
2007-01-23 23:16:15 37888 --a------ C:\WINDOWS\system32\aptdybpj.exe
2007-01-23 23:14:46 83328 --a------ C:\WINDOWS\system32\vxfyydon.dll
2007-01-23 23:10:16 105328 --a------ C:\WINDOWS\system32\nuhgdh.dll
2007-01-23 23:10:15 105328 --a------ C:\WINDOWS\system32\hmrdqqdt.dll
2007-01-23 23:10:06 91488 --a------ C:\WINDOWS\system32\gjqjivys.dll
2007-01-23 00:56:09 14080 ---hs---- C:\WINDOWS\system32\mssjfilejf.dll
2007-01-23 00:56:06 20192 ---hs---- C:\WINDOWS\system32\vcrxfileju.dll
2007-01-23 00:55:57 24576 --a------ C:\WINDOWS\system32\__c004F5E1.dat
2007-01-23 00:55:52 37888 --a------ C:\WINDOWS\system32\gqtpnhma.exe
2007-01-22 23:17:24 105280 --a------ C:\WINDOWS\system32\sqbxji.dll
2007-01-22 23:17:23 105280 --a------ C:\WINDOWS\system32\fujpqekt.dll
2007-01-22 23:09:47 91440 --a------ C:\WINDOWS\system32\ioonvbkg.dll
2007-01-15 22:07:37 105264 --a------ C:\WINDOWS\system32\mcxryp.dll
2007-01-15 22:07:36 105264 --a------ C:\WINDOWS\system32\yrpjajvl.dll
2007-01-15 22:01:37 24576 --a------ C:\WINDOWS\system32\__c0016991.dat
2007-01-15 22:01:36 37888 --a------ C:\WINDOWS\system32\jhfypdmr.exe
2007-01-15 21:58:36 90944 --a------ C:\WINDOWS\system32\cxagorql.dll
2007-01-14 22:19:38 64329 --a------ C:\WINDOWS\system32\lgnlzwfzwa.exe
2007-01-14 21:55:53 105296 --a------ C:\WINDOWS\system32\yvwcvv.dll
2007-01-14 21:55:52 105296 --a------ C:\WINDOWS\system32\uagxicyb.dll
2007-01-14 21:55:51 24576 --a------ C:\WINDOWS\system32\__c00B9EC1.dat
2007-01-14 21:55:49 37888 --a------ C:\WINDOWS\system32\pnnkbjaj.exe
2007-01-14 21:55:41 90928 --a------ C:\WINDOWS\system32\cmbgslnq.dll
2007-01-14 21:48:43 1696544 --ahs---- C:\WINDOWS\system32\ousdkyoa.ini2
2007-01-14 21:47:43 81152 --a------ C:\WINDOWS\system32\aoykdsuo.dll
2007-01-14 21:46:50 90928 --a------ C:\WINDOWS\system32\eftpjdll.dll
2007-01-10 22:54:53 81984 --a------ C:\WINDOWS\system32\bdod.bin
2007-01-10 22:15:05 0 d-------- C:\Program Files\Common Files\BitDefender
2007-01-10 22:10:19 81184 -----n--- C:\WINDOWS\system32\nrtkexic.dll
2007-01-10 22:07:20 37888 --a------ C:\WINDOWS\system32\ldesstet.exe
2007-01-10 22:04:29 105152 --a------ C:\WINDOWS\system32\hvcltx.dll
2007-01-10 22:04:28 105152 --a------ C:\WINDOWS\system32\nyqmwwuy.dll
2007-01-10 22:01:20 90816 --a------ C:\WINDOWS\system32\oaxkeeow.dll
2007-01-09 22:10:49 24576 --a------ C:\WINDOWS\system32\__c0095832.dat
2007-01-09 22:10:47 37888 --a------ C:\WINDOWS\system32\addtsdsb.exe
2007-01-09 22:04:47 105296 --a------ C:\WINDOWS\system32\kdplnbix.dll
2007-01-09 22:01:47 90880 --a------ C:\WINDOWS\system32\imjhthkk.dll
2007-01-08 22:04:47 105280 --a------ C:\WINDOWS\system32\idltpx.dll
2007-01-08 22:04:47 24576 --a------ C:\WINDOWS\system32\__c004B2B4.dat
2007-01-08 22:04:46 105280 --a------ C:\WINDOWS\system32\sriwrsvq.dll
2007-01-08 22:04:44 37888 --a------ C:\WINDOWS\system32\rejghibu.exe
2007-01-08 22:01:44 90912 --a------ C:\WINDOWS\system32\yveekdio.dll
2007-01-08 21:59:32 0 --a----c- C:\WINDOWS\NULL
2007-01-06 22:58:10 0 d-------- C:\Program Files\Teamspeak2_RC2
2006-12-25 10:51:30 53248 --a------ C:\WINDOWS\system32\KemXML.dll <Not Verified; Logitech Inc.; Logitech SetPoint>
2006-12-25 10:51:30 110592 --a------ C:\WINDOWS\system32\KemWnd.dll <Not Verified; Logitech Inc.; Logitech SetPoint>
2006-12-25 10:51:30 126976 --a------ C:\WINDOWS\system32\KemUtil.dll <Not Verified; Logitech Inc.; Logitech SetPoint>
2006-12-25 10:51:30 155648 --a------ C:\WINDOWS\system32\kemutb.dll <Not Verified; Logitech Inc.; Logitech SetPoint>


-- Find3M Report ---------------------------------------------------------------

2008-03-25 01:52:55 1324 --a------ C:\WINDOWS\system32\d3d9caps.dat
2008-03-20 14:06:13 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Real
2008-03-17 09:33:16 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-03-11 16:26:50 0 d-------- C:\Program Files\RegCure
2008-03-02 01:45:03 0 d-------- C:\Program Files\Reference Assemblies
2008-02-19 21:41:35 0 d-------- C:\Program Files\Common Files\aol
2008-02-15 14:09:02 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Mozilla
2008-01-28 03:06:58 24 --ah----- C:\WINDOWS\psJ0N
2008-01-27 14:37:54 81920 --a------ C:\WINDOWS\system32\IEDFix.exe <Not Verified; S!Ri.URZ; IEDFix>
2008-01-27 08:43:58 0 d-------- C:\Program Files\Common Files\Blizzard Entertainment
2008-01-26 15:38:40 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Adobe
2008-01-26 13:11:02 0 d-------- C:\Program Files\Common Files\Adobe
2008-01-07 19:56:44 0 d-------- C:\Program Files\Common Files\Logitech
2007-10-03 23:36:46 25600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-09-05 23:22:24 289144 --a------ C:\WINDOWS\system32\VCCLSID.exe <Not Verified; S!Ri; >
2007-03-03 10:30:55 0 d-------- C:\Documents and Settings\Bob Clarke\Application Data\Apple Computer
2007-01-23 23:24:54 0 d-------- C:\Program Files\QuickTime
2007-01-23 01:06:00 0 ---hs---- C:\Program Files\desktoq.ini
2007-01-11 20:31:22 0 d-------- C:\Program Files\Common Files\??crosoft.NET
2007-01-10 22:15:05 0 d-a------ C:\Program Files\Common Files
2007-01-10 08:35:42 3638 --a----c- C:\WINDOWS\mozver.dat
2006-12-17 14:21:46 0 d-------- C:\Program Files\iTunes
2006-12-17 14:21:34 0 d-------- C:\Program Files\iPod
2006-12-17 14:17:54 0 d-------- C:\Program Files\Apple Software Update
2006-11-01 14:54:30 180224 --a------ C:\WINDOWS\system32\xvidvfw.dll
2006-11-01 14:52:38 765952 --a----c- C:\WINDOWS\system32\xvidcore.dll


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B52C7EC-D1A3-4054-923C-DD12567F28B1}]
2008-03-01 18:24 35328 --a------ C:\WINDOWS\system32\nnnllmm.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4BC877DD-F557-49DE-A2DD-C59262648A0C}]
2008-02-19 01:27 318304 --a------ C:\WINDOWS\system32\khfFWoOG.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{92836d68-637f-4a21-a4d6-74a6eb494997}]
2007-01-23 23:10 105328 --a------ C:\WINDOWS\system32\nuhgdh.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{996fa6ef-a66e-2058-7baa-fc6f29110839}]
C:\WINDOWS\system32\nsi58A.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6}]
2007-01-09 20:49 3790152 --a------ C:\Documents and Settings\Bob Clarke\Local Settings\Application Data\CyberDefender\cdmyidd.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AE9ADA3B-152F-449E-A58F-FAE52CCDFAF9}]
C:\WINDOWS\system32\nnnoOhHA.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C7BBC1FA-E415-4926-9A47-9AB58D0B3BC8}]
C:\WINDOWS\system32\byXNgeCT.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{DDFA1356-E6ED-42a5-9D62-93211D424A90}]
2008-02-11 09:01 339968 --a------ C:\WINDOWS\system32\mysidesearch_sidebar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{e37212ad-7229-2bd7-ee6b-3768931b9b20}]
2008-07-03 06:42 158208 --a------ C:\WINDOWS\system32\oiilbseabuastlm.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E5312CF1-773A-4F09-8709-CB889BB48621}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FFFFFFFF-BBBB-4146-86FD-A722E8AB3489}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EM_EXEC"="C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE" [2001-09-19 09:41]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2005-10-19 08:59]
"nmpohctu"="regsvr32 /u C:\Documents and Settings\All Users\Application Data\nmpohctu.dll" []
"nwiz"="nwiz.exe" [2005-11-04 18:03 C:\WINDOWS\SYSTEM32\nwiz.exe]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2006-03-28 17:38 C:\WINDOWS\KHALMNPR.Exe]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-11-04 18:03]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2005-02-11 13:54]
"WMDM PMSP Service"="C:\WINDOWS\system32\cssrss.exe" []
"VirusHeat 4.4"="C:\Program Files\VirusHeat 4.4\VirusHeat 4.4.exe" []
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" []
"MCUpdateExe"="C:\PROGRA~1\mcafee.com\agent\McUpdate.exe" [2003-08-21 18:10]
"MCAgentExe"="c:\PROGRA~1\mcafee.com\agent\McAgent.exe" [2003-08-27 11:00]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 17:32]
"CyberDefender Early Detection Center"="C:\Program Files\CyberDefender\AntiSpyware\ISSIntro.exe" []
"{e56926a2-5038-b72b-df99-9f31c603143f}"="C:\WINDOWS\system32\oiilbseabuastlm.dll" [2008-07-03 06:42]
"7cabc24c"="C:\WINDOWS\system32\vxfyydon.dll" [2007-01-23 23:14]
"BM7f98f1d0"="C:\WINDOWS\system32\gjqjivys.dll" [2007-01-23 23:10]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSI Configuration"="msiconf.exe" []
"Aida"="C:\PROGRA~1\COMMON~1\CROSOF~1.NET\logonui.exe" []
"Aim6"="C:\Program Files\AIM6\aim6.exe" [2008-03-25 15:21]
"Eroca"="C:\Program Files\Eroca\Eroca.exe" [2008-03-29 19:29]
"A00FC0B30.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00FC0B30.exe" []
"A00F10E7F1.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F10E7F1.exe" []
"A00F1C3D82E.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F1C3D82E.exe" []
"A00F4055B.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F4055B.exe" []
"A00F49EC994.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F49EC994.exe" []
"A00F9BFD4FB.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F9BFD4FB.exe" []
"A00FEE8DEA7.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00FEE8DEA7.exe" []
"A00F506ED4E.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F506ED4E.exe" []
"A00FA459A0A.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00FA459A0A.exe" []
"A00F1603400.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F1603400.exe" []
"A00F688F7A9.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F688F7A9.exe" []
"A00FBB208C7.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00FBB208C7.exe" []
"A00F10DDDC40.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F10DDDC40.exe" []
"A00F16017CAB.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F16017CAB.exe" []
"A00F16EDADA2.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F16EDADA2.exe" []
"A00F1C110EA2.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F1C110EA2.exe" []
"A00F213C0CBA.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F213C0CBA.exe" []
"A00F26626A9F.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F26626A9F.exe" []
"A00F2B85D449.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F2B85D449.exe" []
"A00F30AC0429.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F30AC0429.exe" []
"A00F1F4242.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F1F4242.exe" []
"A00F401371.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F401371.exe" []
"A00F20CD433.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F20CD433.exe" []
"A00F5115A50.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F5115A50.exe" []
"A00F3B3D0.exe"="C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\_A00F3B3D0.exe" []

C:\Documents and Settings\Bob Clarke\Start Menu\Programs\Startup\
DESKTOP.INI [2002-09-03 10:00:00]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
DESKTOP.INI [2002-09-03 10:00:00]
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2003-03-19 12:05:54]
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2006-04-30 09:10:44]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"=0 (0x0)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"=0 (0x0)
"DisableRegistryTools"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoActiveDesktop"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]
"Windows Printing Driver"=WinSpooler.exe
"NTSpool"=NTSpool.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{e89fa8e9-5c0b-45f6-a70e-f7b177bcd193}"= C:\WINDOWS\system32\rtmipr.dll [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{0B52C7EC-D1A3-4054-923C-DD12567F28B1}"= C:\WINDOWS\system32\nnnllmm.dll [2008-03-01 18:24 35328]
"{C7BBC1FA-E415-4926-9A47-9AB58D0B3BC8}"= C:\WINDOWS\system32\byXNgeCT.dll [ ]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Documents and Settings\Bob Clarke\Desktop\Virus Removers\SUPERAntiSpyware\SASSEH.DLL [2008-03-23 06:07 77824]
"{00267776-D7A2-456A-AE04-EB9ABF822FE4}"= C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\SETUPow.dll [ ]
"{003D7601-E883-4899-BD2E-1B6F926757E7}"= C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\buindexs.dll [ ]
"{E8606370-4F7A-4C2F-A39C-EDCDCC177924}"= C:\W€ [ ]
"{0033CCF0-40D7-462A-B449-302C887C148F}"= C:\WINDOWS\system32\mssjfilejf.dll [2007-01-23 00:56 14080]
"{C51C4AFB-2A3A-6C2E-BA41-C10F02760731}"= C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp\xpttksylgfile.dll [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"WebProxy"= {66186F05-BBBB-4a39-864F-72D84615C679} - sockins32.dll [ ]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\byXNgeCT]
byXNgeCT.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\nnnllmm]
nnnllmm.dll 2008-03-01 18:24 35328 C:\WINDOWS\SYSTEM32\nnnllmm.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\__c00B9EC1]
C:\WINDOWS\system32\__c00B9EC1.dat 2007-01-23 23:08 24576 C:\WINDOWS\SYSTEM32\__c00B9EC1.dat

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=4J
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\WINDOWS\system32\khfFWoOG

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"
path=
backup=

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Logitech SetPoint.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech SetPoint.lnk
backup=C:\WINDOWS\pss\Logitech SetPoint.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^MyWebSearch Email Plugin.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk
backup=C:\WINDOWS\pss\MyWebSearch Email Plugin.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Bob Clarke^Start Menu^Programs^Startup^Bat - Auto Update.lnk]
path=C:\Documents and Settings\Bob Clarke\Start Menu\Programs\Startup\Bat - Auto Update.lnk
backup=C:\WINDOWS\pss\Bat - Auto Update.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Bob Clarke^Start Menu^Programs^Startup^Yahoo! Widget Engine.lnk]
path=C:\Documents and Settings\Bob Clarke\Start Menu\Programs\Startup\Yahoo! Widget Engine.lnk
backup=C:\WINDOWS\pss\Yahoo! Widget Engine.lnkStartup
??? ? ? ?????
??? ? ? ?????

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdaptecDirectCD]
"C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
"C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeUpdater]
C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AIM]
C:\Program Files\AIM\aim.exe -cnetwait.odl

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aim6]
"C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AltnetPointsManager]
C:\Program Files\Altnet\Points Manager\Points Manager.exe -s

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AltPayments]
"C:\Program Files\AltPayments\AltPayments.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AntispySpider]
C:\Program Files\AntispySpider\antispyspider.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCMSMMSG]
BCMSMMSG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
"C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA]
"C:\Program Files\DNA\btdna.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cnet]
"C:\Program Files\Kontiki\bin\kontiki.exe" -s cnet -q

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ConMgr.exe]
"C:\Program Files\EarthLink 5.0\ConMgr.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupport]
"C:\Program Files\Dell Support\DSAgnt.exe" /startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDSentry]
C:\WINDOWS\System32\DSentry.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Games]
C:\Program Files\Kazaa\My Shared Folder\Games.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\WINDOWS\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KAZAA]
C:\Program Files\Kazaa\kazaa.exe /SYSTRAY

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]
??? ? ? ?????

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MapEDC]
C:\Program Files\MapEDC\MapEDC.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCAgentExe]
C:\PROGRA~1\McAfee.com\Agent\McAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\McRegWiz]
C:\PROGRA~1\mcafee.com\agent\mcregwiz.exe /autorun

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCUpdateExe]
C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaPipe P2P Loader]
"C:\Program Files\p2pnetworks\mpp2pl.exe" /H

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Tray]
C:\Program Files\Kazaa\My Shared Folder\Games.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio]
C:\Program Files\Microsoft Works\WksSb.exe /AllUsers

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]
c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
"C:\Program Files\MSN Messenger\msnmsgr.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin]
C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
"C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroHomeFirstStart]
C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QdrModule13]
"C:\Program Files\QdrModule\QdrModule13.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QdrModule15]
"C:\Program Files\QdrModule\QdrModule15.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QdrPack15]
"C:\Program Files\QdrPack\QdrPack15.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\REGSHAVE]
C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Run]
??? ? ? ?????

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpySweeper]
"C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /1

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner]
C:\Program Files\Trojan Remover\Trjscan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirusScan Online]
"c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VSOCheckTask]
"c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Window Washer]
C:\Program Files\Webroot\Washer\wwDisp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wwDisp]
C:\Program Files\Webroot\Washer\wwDisp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zone Labs Client]
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{75ce52c1-619b-11d7-8608-806d6172696f}]
AutoRun\command- D:\Launcher.exe


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{66186F05-BBBB-4a39-864F-72D84615C679}]
rundll32 sockins32.dll,InitModule



-- End of Deckard's System Scanner: finished at 2007-01-24 00:50:29 ------------


Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: English

CPU 0: Intel® Pentium® 4 CPU 2.00GHz
Percentage of Memory in Use: 54%
Physical Memory (total/avail): 510.48 MiB / 234.41 MiB
Pagefile Memory (total/avail): 865.6 MiB / 629.52 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1930.59 MiB

A: is Removable (No Media)
C: is Fixed (NTFS) - 55.84 GiB total, 15.7 GiB free.
D: is CDROM (CDFS)
E: is CDROM (No Media)
F: is Removable (FAT)

\\.\PHYSICALDRIVE0 - WDC WD600BB-75CAA0 - 55.87 GiB - 2 partitions
\PARTITION0 - Unknown - 31.35 MiB
\PARTITION1 (bootable) - Installable File System - 55.84 GiB - C:

\\.\PHYSICALDRIVE1 - M-SysT5 Dell Memory Key USB Device - 54.91 MiB - 1 partition
\PARTITION0 (bootable) - MS-DOS V4 Huge - 60.47 MiB - F:



-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

FW: Bitdefender Firewall v8.0 (BitDefender)
AV: Bitdefender Antivirus v8.0 (BitDefender)
AV: CyberDefender Internet Security v2007 (CyberDefender)
AV: Prevx 2.0 v1.0.1.33 (Prevx Ltd.) Disabled

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\DNA\\btdna.exe"="C:\\Program Files\\DNA\\btdna.exe:*:Enabled:DNA"
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
"C:\\Documents and Settings\\Bob Clarke\\Local Settings\\Temp\\~os41D.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Bob Clarke\\Local Settings\\Temp\\~os41D.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
"C:\\WINDOWS\\SYSTEM32\\rlvknlg.exe"="C:\\WINDOWS\\SYSTEM32\\rlvknlg.exe:*:Enabled:rlvknlg.exe"
"C:\\Program Files\\Common Files\\aol\\Loader\\aolload.exe"="C:\\Program Files\\Common Files\\aol\\Loader\\aolload.exe:*:Enabled:AOL Loader"
"C:\\Program Files\\AIM6\\aim6.exe"="C:\\Program Files\\AIM6\\aim6.exe:*:Enabled:AIM"
"C:\\Documents and Settings\\Bob Clarke\\Desktop\\utorrent.exe"="C:\\Documents and Settings\\Bob Clarke\\Desktop\\utorrent.exe:*:Enabled:µTorrent"
"C:\\Program Files\\CyberDefender\\AntiSpyware\\cdasc.exe"="C:\\Program Files\\CyberDefender\\AntiSpyware\\cdasc.exe:*:Enabled:CyberDefender Internet Security"
"C:\\Program Files\\Wyzo\\wyzo.exe"="C:\\Program Files\\Wyzo\\wyzo.exe:*:Enabled:Wyzo"
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Bob Clarke\Application Data
CLASSPATH=.;C:\Program Files\Java\jre1.5.0_01\lib\ext\QTJava.zip
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=OFFICE
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Bob Clarke
LOGONSERVER=\\OFFICE
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\Perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Common Files\Adaptec Shared\System;C:\Program Files\Microsoft SQL Server\80\Tools\Binn\;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 7, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0207
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre1.5.0_01\lib\ext\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\BOBCLA~1\LOCALS~1\Temp
USERDOMAIN=OFFICE
USERNAME=Bob Clarke
USERPROFILE=C:\Documents and Settings\Bob Clarke
windir=C:\WINDOWS
__COMPAT_LAYER=DisableNXShowUI


-- User Profiles ---------------------------------------------------------------

Bob Clarke (admin)
Administrator (admin)


-- Add/Remove Programs ---------------------------------------------------------

--> "C:\Program Files\CyberDefender\cdinstx.exe" /u "C:\Program Files\CyberDefender\earlySpam\cdinstx.log" /t "CyberDefender Early Detection Center - AntiSpam"
--> C:\PROGRA~1\ACCELE~1\SYSTEM~1\SYS_AL~1.EXE /uninstall
--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
--> C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
--> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
--> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
--> C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
--> C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
--> C:\WINDOWS\UNNeroVision.exe /UNINSTALL
--> C:\WINDOWS\UNRecode.exe /UNINSTALL
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88E5FCB8-5F25-11D5-B16F-0800460222F0}\setup.exe" -l0x9 UNINSTALL
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D76298C2-E532-4A11-BCFF-76F3F19DA84D}\setup.exe" UNINSTALL
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
#1 Video Converter 4.2.6 --> "C:\Program Files\NO1 Video Converter\unins000.exe"
AC3File (remove only) --> C:\Program Files\AC3File\uninstall.exe
AC3Filter (remove only) --> C:\Program Files\AC3Filter\uninstall.exe
ActivePerl 5.8.8 Build 822 --> MsiExec.exe /I{D0E5A0E6-5947-4F21-B8AE-5129D153083B}
Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin --> C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.1 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81100000003}
AIM 6 --> C:\Program Files\AIM6\uninst.exe
AIM Search --> C:\Program Files\AIM Search\uninstaller.exe AIM Search
AOL Instant Messenger --> C:\Program Files\AIM\uninstll.exe -LOG= C:\Program Files\AIM\install.log -OEM=
Apple Software Update --> MsiExec.exe /I{A50C25D7-62E9-4511-AD70-8E2DA5E79B7D}
BCM V.92 56K Modem --> C:\WINDOWS\BCMSMU.exe quiet
Broadcom Advanced Control Suite --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{468190DA-FB4C-45BA-8E40-4B165FF1A939} /l1033
Browser Optimizer Adssite --> C:\WINDOWS\system32\adssite-remove.exe
Canon PhotoRecord --> MsiExec.exe /X{D958FAC4-BAE0-4B1D-A42E-DE9BFDE7DDEE}
Canon PIXMA iP1500 --> C:\WINDOWS\System32\CNMCP5y.exe "-PRINTERNAMECanon PIXMA iP1500" "-HELPERDLLC:\BJPrinter\CNMWINDOWS\Canon PIXMA iP1500 Installer\Inst2\cnmis.dll" "-RCDLLC:\BJPrinter\CNMWINDOWS\Canon PIXMA iP1500 Installer\Inst2\cnmi0409.dll"
Canon Utilities Easy-PhotoPrint --> C:\Program Files\Canon\Easy-PhotoPrint\uninst.exe C:\Program Files\Canon\Easy-PhotoPrint\uninst.ini
cd1 --> c:\windows\system32\cd1.exe /uninstall
CleanUp! --> C:\Program Files\CleanUp!\uninstall.exe
CNET Download Manager --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0B4686AE-A1A7-4477-B8EA-65033218474E}\Setup.exe" /ku /kp /kc
CommView --> C:\PROGRA~1\CommView\CV.exe /u
CyberDefender Early Detection Center --> C:\Program Files\CyberDefender\cdinstx.exe /u
DataPilot Pix 'n Tunes --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{87B481FA-1E4A-40B0-80C3-157E9770F436} /l1033
Dell Picture Studio - Dell Image Expert --> MsiExec.exe /I{151C555A-A9E7-4A2E-B6D7-165D04A3C956}
Dell Solution Center --> MsiExec.exe /X{11F1920A-56A2-4642-B6E0-3B31A12C9288}
Dell Support 5.0.0 (766) --> rundll32 C:\PROGRA~1\DELLSU~1\AUInst.dll,ExUninstall
Digital Line Detect --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText
DivX Codec --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter --> C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DVDSentry --> MsiExec.exe /I{98DF85D9-96C0-4F57-A92E-C3539477EF5E}
Easy-WebPrint --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"
Easy CD Creator 5 Basic --> MsiExec.exe /I{609F7AC8-C510-11D4-A788-009027ABA5D0}
Easy Video Joiner 5.21 --> "C:\Program Files\Easy Video Joiner\unins000.exe"
Enhancement Browser Tools Rightonadz --> C:\WINDOWS\system32\lgnlzwfzwa.exe
ffdshow [rev 1946] [2008-04-21] --> "C:\Program Files\ffdshow\unins000.exe"
FinePixViewer Ver.4.3 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24ED4D80-8294-11D5-96CD-0040266301AD}\SETUP.EXE"
FUJIFILM USB Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5490882C-6961-11D5-BAE5-00E0188E010B}\SETUP.EXE"
GameBar Toolbar for IE --> C:\Program Files\Internet Explorer\iexplore.exe http://www.gamerival.com/gamebar/uninstall.html
Google Earth --> MsiExec.exe /I{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}
Google Updater --> "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
GPL MPEG-1/2 DirectShow Decoder Filter --> MsiExec.exe /I{870815CA-6B60-47B6-88DD-A67F42D2F03E}
Hex Workshop v4.23 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\BreakPoint Software\Hex Workshop 4.2\hw41unin.isu"
Hex Workshop v5 --> MsiExec.exe /I{26A373DB-162B-4B6E-A488-0BED0F0FB227}
HHD Software Free Hex Editor Neo 4.01 --> "C:\Program Files\HHD Software\Hex Editor Neo\Setup\uninstHEX.exe" -u
HighMAT Extension to Microsoft Windows XP CD Writing Wizard --> MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
HijackThis 2.0.2 --> "C:\Documents and Settings\Bob Clarke\Desktop\HijackThis.exe" /uninstall
honestech DVD Authoring Studio 2.0 Trial --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{682CAD32-104C-4898-AC49-C72B2A8C9761}\Setup.exe" -l0x9
Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
hp instant support --> C:\PROGRA~1\HEWLET~1\HPINST~1\Uninstall.exe CeS
Intel® Extreme Graphics Driver --> RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2562
Internet Service --> "C:\Program Files\NetProject\waun.exe"
Internet Speed Monitor --> C:\Program Files\ISM\Uninstall.exe
iPod for Windows 2005-03-23 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{44A537A5-859C-43A6-8285-C0668142A090} /l1033
iPod for Windows 2005-09-23 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC} /l1033
IrfanView (remove only) --> C:\Program Files\IrfanView\iv_uninstall.exe
iTunes --> MsiExec.exe /I{446DBFFA-4088-48E3-8932-74316BA4CAE4}
J2SE Runtime Environment 5.0 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150010}
JavaCore --> C:\Program Files\JavaCore\UnInstall.exe
KhalSetup --> MsiExec.exe /I{EE7B9A8D-19F0-450D-8E94-3E391E6044CD}
LimeWire PRO 4.12.3 --> "C:\Program Files\LimeWire\uninstall.exe"
LimeWire SpeedUp Pro 4.2.0.0 --> "C:\Program Files\LimeWire SpeedUp Pro\unins000.exe"
Logitech Desktop Messenger --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\SETUP.exe" -l0x9 UNINSTALL -removeonly
Logitech MouseWare 9.41 .1 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5809E7CF-4DCF-11D4-9875-00105ACE7734}\setup.exe" -l0009 UNINSTALL
Logitech Resource Center --> C:\PROGRA~1\Logitech\RESOUR~1\rem\UNWISE.EXE /s C:\PROGRA~1\Logitech\RESOUR~1\rem\INSTALL.LOG
Logitech SetPoint --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x9 -removeonly
Logitech User's Guide --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CBE0FCA1-4E95-11D4-9875-00105ACE7734}\Setup.exe" UNINSTALL
Logitech® Camera Driver --> "C:\Program Files\Common Files\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
MapEDC --> "C:\Program Files\MapEDC\MapEDC.exe" -uninstall
McAfee SecurityCenter --> c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\screm.ui::uninstall.htm
McAfee VirusScan --> c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /interact=1 /script_proactive=1 /start=c:\PROGRA~1\mcafee.com\agent\uninst\vsoremui.dll::uninstall.htm
Microsoft Office XP Professional with FrontPage --> MsiExec.exe /I{90280409-6000-11D3-8CFE-0050048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Works --> MsiExec.exe /I{B9966F27-9678-4620-9579-925E3084647E}
Microsoft Works 2004 Setup Launcher --> C:\Program Files\Microsoft Works Suite 2004\Setup\Launcher.exe /ARP D:\
Mozilla Firefox (2.0.0.14) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 6.0 Parser (KB933579) --> MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
MSXML4 Parser --> MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}
MUSICMATCH® Jukebox --> C:\PROGRA~1\MUSICM~1\MUSICM~1\unmatch.exe
MyIdentityDefender Toolbar (CyberDefender Corporation) --> C:\Documents and Settings\Bob Clarke\Local Settings\Application Data\CyberDefender\cdinstx.exe /u
MySidesearch Search Assistant Adssite --> C:\WINDOWS\system32\mysidesearch_sidebar_uninstall.exe
Need2Find Bar --> rundll32 C:\PROGRA~1\NEED2F~1\bar\2.bin\Nd2fnBar.dll,O
Nero 7 Essentials --> MsiExec.exe /X{2E1A6A90-62A6-4862-9962-81DBFD001033}
neroxml --> MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NoAdware v5.0 --> "C:\Program Files\NoAdware5.0\unins000.exe"
NoDNS --> C:\Program Files\\NoDNS\\UnInstall.exe
nvcoi --> "C:\Program Files\nvcoi\nvcoi.exe" -uninstall
NVIDIA Drivers --> C:\WINDOWS\system32\nvudisp.exe UninstallGUI
OIN --> C:\WINDOWS\System32\shex.exe open http://www.outerinfo.com/questionnaire.php
OpenAL 1.0 Reference --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Creative\OpenAL 1.0 Reference\Uninst.isu"
OpenMG Limited Patch 4.1-05-14-24-01 --> C:\Program Files\Common Files\Sony Shared\OpenMG\HotFixes\HotFix4.1-05-14-24-01\HotFixSetup\setup.exe /u
OpenMG Secure Module 4.1.00 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{2F151B50-B434-4838-B51D-70442EBA093E} UNINSTALL
Prevx 2.0 Agent --> MsiExec.exe /X{259682D2-C528-479C-BEA0-6F793E73B99F}
QuickTime --> MsiExec.exe /I{50D8FFDD-90CD-4859-841F-AA1961C7767A}
RABCO --> "C:\Program Files\RABCO\un_RABCOSetup_16230.exe"
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
RegCure 1.3.0.2 --> C:\Program Files\RegCure\uninst.exe
Secure Browsing --> "C:\Program Files\NetProject\sbun.exe"
Security Update for Step By Step Interactive Training (KB898458) --> "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Security Update for Step By Step Interactive Training (KB923723) --> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Shockwave --> C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\Install.log
ShopperReports --> C:\Program Files\ShoppingReport\Uninst.exe
Spybot - Search & Destroy 1.3 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
TeamSpeak 2 RC2 --> "C:\Program Files\Teamspeak2_RC2\unins000.exe"
Trojan Remover 6.6.9 --> "C:\Program Files\Trojan Remover\unins000.exe"
TrojanHunter 4.2 --> "C:\Program Files\TrojanHunter 4.2\unins000.exe"
Uniblue RegistryBooster 2 --> "C:\Program Files\Uniblue\RegistryBooster 2\unins000.exe"
UnZixWin --> C:\WINDOWS\st6unst.exe -n "C:\Program Files\UnZixWin\ST6UNST.LOG"
USB-IrDA Adapter --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{10F5D9BB-E2F2-4B18-A65D-928B73D22E6F}\SETUP.EXE" -l0x9
VCRedistSetup --> MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
video joiner 1.00 --> "C:\Program Files\Crystalsoftware\video joiner\unins000.exe"
Viewpoint Media Player --> C:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u
Web Application --> "C:\Program Files\NetProject\scu.exe"
Windows Imaging Component --> "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
Wyzo 0.5.3 --> C:\Program Files\Wyzo\uninst.exe
XML Paper Specification Shared Components Pack 1.0 -->
Xvid 1.1.2 final uninstall --> "C:\Program Files\Xvid\unins000.exe"
Yahoo! Widgets --> C:\PROGRA~1\Yahoo!\Widgets\uninstall.exe


-- Application Event Log -------------------------------------------------------

Event Record #/Type375 / Error
Event Submitted/Written: 01/23/2007 00:59:32 AM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application spybotsd.exe, version 1.3.0.12, faulting module spybotsd.exe, version 1.3.0.12, fault address 0x001f47db.
Processing media-specific event for [spybotsd.exe!ws!]

Event Record #/Type374 / Error
Event Submitted/Written: 01/23/2007 00:58:45 AM
Event ID/Source: 1001 / Application Error
Event Description:
Fault bucket 105517969.
The Wep key exchange did not result in a secure connection setup after 802.1x authentication. The current setting has been marked as failed and the Wireless connection will be disconnected.

Event Record #/Type373 / Error
Event Submitted/Written: 01/23/2007 00:58:43 AM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application spybotsd.exe, version 1.3.0.12, faulting module spybotsd.exe, version 1.3.0.12, fault address 0x001f47db.
Processing media-specific event for [spybotsd.exe!ws!]

Event Record #/Type372 / Error
Event Submitted/Written: 01/23/2007 00:58:10 AM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application spybotsd.exe, version 1.3.0.12, faulting module spybotsd.exe, version 1.3.0.12, fault address 0x001f47db.
Processing media-specific event for [spybotsd.exe!ws!]

Event Record #/Type370 / Error
Event Submitted/Written: 01/23/2007 00:03:42 AM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application firefox.exe, version 1.8.20080.40413, hang module hungapp, version 0.0.0.0, hang address 0x00000000.



-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.


-- System Event Log ------------------------------------------------------------

Event Record #/Type3443 / Error
Event Submitted/Written: 01/24/2007 00:06:23 AM
Event ID/Source: 7026 / Service Control Manager
Event Description:
The following boot-start or system-start driver(s) failed to load:
gsjdynca
SASKUTIL

Event Record #/Type3436 / Error
Event Submitted/Written: 01/23/2007 11:57:07 PM
Event ID/Source: 7026 / Service Control Manager
Event Description:
The following boot-start or system-start driver(s) failed to load:
Aspi32
cdudf_xp
Fips
gsjdynca
intelppm
SASDIFSV
SASKUTIL

Event Record #/Type3435 / Error
Event Submitted/Written: 01/23/2007 11:56:35 PM
Event ID/Source: 10005 / DCOM
Event Description:
DCOM got error "%%1084" attempting to start the service EventSystem with arguments ""
in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

Event Record #/Type3413 / Error
Event Submitted/Written: 01/23/2007 11:13:24 PM
Event ID/Source: 7026 / Service Control Manager
Event Description:
The following boot-start or system-start driver(s) failed to load:
gsjdynca
SASKUTIL

Event Record #/Type3395 / Error
Event Submitted/Written: 01/23/2007 10:24:25 AM
Event ID/Source: 10005 / DCOM
Event Description:
DCOM got error "%%1058" attempting to start the service wuauserv with arguments ""
in order to run the server:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}



-- End of Deckard's System Scanner: finished at 2007-01-24 00:50:29 ------------

BC AdBot (Login to Remove)

 


m

#2 SNOWHITE

SNOWHITE

    missy malware magnet


  • Members
  • 2,676 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Bitola, Macedonia
  • Local time:01:59 AM

Posted 07 August 2008 - 12:35 PM

Hello and welcome to BC

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. We aim to provide the valuable service known to come from BC to every member we can, but sometimes it takes just a little longer to get to every request for help.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.

Thanks and again sorry for the delay.

Please download Deckard's System Scanner (DSS) and save to your Desktop.
alternate download site

DSS will do the following:
  • Create a new System Restore point in Windows XP and Vista.
  • Clean your Temporary Files, Downloaded Program Files, Internet Cache Files, and empty the Recycle Bin on all drives.
  • Check some important areas of your system and produce a report for an analyst to review.
  • Automatically run HijackThis. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. So if HijackThis is not installed and DSS prompts you to download it, please answer yes.
You must be logged onto an account with administrator privileges when using.
  • Close all applications and windows.
  • Double-click on dss.exe to run it and follow the prompts.
  • If your anti-virus or firewall complains, please allow this script to run as it is not
    malicious.
  • When the scan is complete, two text files will open in Notepad:
    • main.txt <- this one will be maximized
    • extra.txt <- this one will be minimized
  • If not, they both can be found in the C:\Deckard\System Scanner folder.
  • Please copy (Ctrl+C) and paste (Ctrl+V) the contents of main.txt and extra.txt in your next reply.
-- When running DSS, some firewalls may warn that it is trying to access the Internet especially if your asked to download the most current version of HijackThis. Please ensure that you allow it permission to do so.
-- If you get a warning from your anti-virus while DSS is scanning, please allow DSS to continue as the scan is not harmful.


If you already preformed the steps above We still need to see the current state of the machine fresh scan and logs are still necessary

click on Start, click on Run
copy and paste the following in bold in the open window and then click OK
"%userprofile%\desktop\dss.exe" /config
This will open up DSS configuration
click on Check All
click Scan
DSS will now run again when finished
Please post back both logs that open in notepad
Main txt and extra txt



Next
Please do a scan with Kaspersky Online Scanner

Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

Click on the Accept button and install any components it needs.
  • The program will install and then begin downloading the latest definition files.
  • After the files have been downloaded on the left side of the page in the Scan section select My Computer
  • This will start the program and scan your system.
  • The scan will take a while, so be patient and let it run.
  • Once the scan is complete, click on View scan report
  • Now, click on the Save Report as button.
  • Save the file to your desktop.
  • Copy and paste that information in your next post.
Please post back with dss reports main.txt, extra.txt and Kaspersky report.

Regards
SNOWHITE
Posted Image

#3 SNOWHITE

SNOWHITE

    missy malware magnet


  • Members
  • 2,676 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Bitola, Macedonia
  • Local time:01:59 AM

Posted 16 August 2008 - 06:00 AM

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.

Thank you :thumbsup:
SNOWHITE
Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users