Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Vundo-Variant/Resident and other Vundos removal


  • This topic is locked This topic is locked
2 replies to this topic

#1 anil.byalakere

anil.byalakere

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:44 PM

Posted 13 October 2008 - 11:09 AM

Hi,

I am Anil, I am facing a problem where the some dll files will reappear in the Windows/system32/ folder.

Using SuperAntispyware I will scan and remove the dll files and infected files, after restarting the system. The new dll files re-appear in system32 folder.

Because of this the browser will open another window connecting some malicious sites.

I installed the ComboFix.exe and followed all the steps given. Here am pasting the ComboFix Log file contents.

Hope someone will help me to get rid of this problem,

Thanks in Advance,
Anil


ComboFix 08-10-12.01 - eai_adm1 2008-10-13 17:10:39.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.829 [GMT 2:00]
Running from: C:\Documents and Settings\eai_adm1\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
C:\WINDOWS\IE4 Error Log.txt
C:\WINDOWS\jestertb.dll
C:\WINDOWS\system32\cfgidmwm.ini
C:\WINDOWS\system32\edcMUBeg.ini
C:\WINDOWS\system32\edcMUBeg.ini2
C:\WINDOWS\system32\EOWwxyay.ini
C:\WINDOWS\system32\EOWwxyay.ini2
C:\WINDOWS\system32\GQprYcdd.ini
C:\WINDOWS\system32\GQprYcdd.ini2
C:\WINDOWS\system32\KjRCLkkj.ini
C:\WINDOWS\system32\KjRCLkkj.ini2
C:\WINDOWS\system32\kndrglva.ini
C:\WINDOWS\system32\kppkvvjp.ini
C:\WINDOWS\system32\kstpkbwv.ini
C:\WINDOWS\system32\ljJbCuSk.dll
C:\WINDOWS\system32\mwmdigfc.dll
C:\WINDOWS\system32\NnpqAJlm.ini
C:\WINDOWS\system32\NnpqAJlm.ini2
C:\WINDOWS\system32\npdtvyur.ini
C:\WINDOWS\system32\qruFeMoq.ini
C:\WINDOWS\system32\qruFeMoq.ini2
C:\WINDOWS\system32\RuxGNqru.ini
C:\WINDOWS\system32\RuxGNqru.ini2
C:\WINDOWS\system32\udfsdpqu.ini
C:\WINDOWS\system32\urqNGxuR.dll
C:\WINDOWS\system32\xIiRAcfe.ini
C:\WINDOWS\system32\xIiRAcfe.ini2
C:\WINDOWS\system32\yGPXxyxx.ini
C:\WINDOWS\system32\yGPXxyxx.ini2
C:\WINDOWS\Tasks\cqwupxjr.job
C:\WINDOWS\Tasks\dmkhllbd.job
C:\WINDOWS\Tasks\fkmjycxr.job
C:\WINDOWS\Tasks\khkxghzg.job
C:\WINDOWS\Tasks\lrqagwzu.job
C:\WINDOWS\Tasks\xravrpqi.job
C:\WINDOWS\Tasks\xwfcntjt.job
C:\WINDOWS\Tasks\yxzujvvm.job
C:\WINDOWS\Temp\tmp3.tmp

----- BITS: Possible infected sites -----

hxxp://77.74.48.101
.
((((((((((((((((((((((((( Files Created from 2008-09-13 to 2008-10-13 )))))))))))))))))))))))))))))))
.

2008-10-13 14:21 . 2008-10-13 14:21 60,928 --ahs---- C:\WINDOWS\system32\ljJCsqro.dll
2008-10-13 13:55 . 2008-10-13 13:55 60,928 --ahs---- C:\WINDOWS\system32\geBsrRjg.dll
2008-10-13 11:46 . 2008-10-13 11:46 60,928 --ahs---- C:\WINDOWS\system32\pmnnKcCT.dll
2008-10-13 08:58 . 2008-10-13 08:58 60,928 --ahs---- C:\WINDOWS\system32\ssqPhEXr.dll
2008-10-13 00:42 . 2008-10-13 00:42 60,928 --ahs---- C:\WINDOWS\system32\hgGyvvsS.dll
2008-10-12 20:25 . 2008-10-12 20:25 60,928 --ahs---- C:\WINDOWS\system32\wvUmmNFU.dll
2008-10-12 18:29 . 2008-10-12 18:29 6,656 --ahs---- C:\WINDOWS\system32\Thumbs.db
2008-10-12 18:26 . 2008-10-12 18:26 60,928 --ahs---- C:\WINDOWS\system32\pmnlmlki.dll
2008-10-12 13:40 . 2008-10-12 13:40 60,928 --ahs---- C:\WINDOWS\system32\ljJDSJcB.dll
2008-10-10 14:13 . 2008-10-10 14:14 <DIR> d-------- C:\Program Files\QuickTime
2008-10-10 14:13 . 2008-10-10 14:13 <DIR> d-------- C:\Program Files\Common Files\Apple
2008-10-10 14:13 . 2008-10-10 14:13 <DIR> d-------- C:\Program Files\Apple Software Update
2008-10-10 14:13 . 2008-10-10 14:13 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-10-09 09:36 . 2008-10-09 14:58 9,619 --a------ C:\dashboard.html
2008-10-08 19:48 . 2008-10-12 13:32 <DIR> d-------- C:\Program Files\TVUPlayer
2008-10-08 19:48 . 2008-10-08 19:48 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\TVU Networks
2008-10-08 01:24 . 2008-10-08 01:24 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-10-08 01:24 . 2008-10-08 01:24 <DIR> d-------- C:\Documents and Settings\eai_adm1\Application Data\Malwarebytes
2008-10-08 01:24 . 2008-10-08 01:24 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-10-08 01:24 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-08 01:24 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-07 23:59 . 2008-10-07 23:59 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-10-07 23:58 . 2008-10-07 23:58 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2008-10-07 23:58 . 2008-10-07 23:58 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-10-07 23:58 . 2008-10-07 23:58 <DIR> d-------- C:\Documents and Settings\eai_adm1\Application Data\SUPERAntiSpyware.com
2008-10-07 23:03 . 2008-10-13 11:29 <DIR> d-------- C:\Program Files\Enigma Software Group
2008-10-07 21:31 . 2008-10-07 21:31 <DIR> d-------- C:\Program Files\Yahoo!
2008-10-07 21:05 . 2008-10-07 21:05 <DIR> d-------- C:\Program Files\Common Files\xing shared
2008-10-07 21:02 . 2008-10-07 21:02 <DIR> d-------- C:\Program Files\Real
2008-10-07 20:43 . 2004-08-04 07:00 605,696 --a------ C:\WINDOWS\system32\getuname.dll
2008-10-07 18:57 . 2008-10-13 11:29 207 --a------ C:\WINDOWS\wininit.ini
2008-10-07 17:49 . 2008-10-07 17:49 <DIR> d-------- C:\Documents and Settings\eai_adm1\Application Data\Uniblue
2008-10-07 17:17 . 2008-10-13 12:45 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-10-07 14:15 . 2008-10-07 14:15 <DIR> d-------- C:\VundoFix Backups
2008-10-07 14:01 . 2008-10-07 14:04 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-10-07 11:55 . 2008-10-13 12:45 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-10-05 19:56 . 2008-10-05 19:56 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2008-10-05 19:56 . 2004-08-04 07:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-10-05 19:53 . 2008-10-05 19:53 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-10-05 19:53 . 2008-10-05 19:54 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2008-10-03 21:15 . 2008-10-05 19:55 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-10-03 21:15 . 2008-10-03 21:15 1,409 --a------ C:\WINDOWS\QTFont.for
2008-10-02 17:58 . 2008-10-02 17:58 <DIR> d-------- C:\Program Files\Common Files\Quest Shared
2008-10-02 16:45 . 2008-10-02 16:45 <DIR> d-------- C:\oracle

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-13 15:32 --------- d-----w C:\Program Files\C4ebreg
2008-10-13 12:05 --------- d-----w C:\Program Files\WST
2008-10-13 08:49 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-10-13 07:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-10-10 12:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-10-07 19:42 --------- d-----w C:\Documents and Settings\eai_adm1\Application Data\Free Download Manager
2008-10-07 19:31 --------- d-----w C:\Documents and Settings\All Users\Application Data\Yahoo!
2008-10-07 19:04 --------- d-----w C:\Program Files\Common Files\Real
2008-10-02 15:28 --------- d-----w C:\Program Files\MSXML 4.0
2008-10-02 14:48 --------- d-----w C:\Program Files\Oracle
2008-09-17 18:32 --------- d-----w C:\Program Files\InstallShield Installation Information
2008-09-12 14:46 --------- d-----w C:\Documents and Settings\eai_adm1\Application Data\TVU Networks
2008-09-11 22:00 --------- d-----w C:\Documents and Settings\eai_adm1\Application Data\CyberLink
2008-09-11 10:29 --------- d-----w C:\Program Files\Java
2008-09-09 22:30 --------- d-----w C:\Documents and Settings\eai_adm1\Application Data\uTorrent
2008-09-08 14:53 --------- d-----w C:\Documents and Settings\eai_adm1\Application Data\InstallShield
2008-09-04 09:43 --------- d-----w C:\Documents and Settings\eai_adm1\Application Data\Scooter Software
2008-09-03 07:10 --------- d-----w C:\Program Files\IBM
2008-09-03 07:05 --------- d-----w C:\Documents and Settings\eai_adm1\Application Data\Software
2008-09-01 15:07 --------- d-----w C:\Documents and Settings\eai_adm1\Application Data\IBM
2008-09-01 15:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\IBM
2008-08-30 07:52 --------- d-----w C:\Program Files\USRobotics
2008-08-27 06:53 --------- d-----w C:\Documents and Settings\eai_adm1\Application Data\SSH
2008-08-27 06:27 --------- d-----w C:\Program Files\SSH Communications Security
2008-05-29 10:53 52,792 ----a-w C:\Documents and Settings\eai_adm1\Application Data\GDIPFONTCACHEV1.DAT
2004-10-01 09:30 40,960 ----a-w C:\Program Files\Uninstall_CDS.exe
.

((((((((((((((((((((((((((((((((((((((((((((( AWF ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"googletalk"="C:\Program Files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
"NetSP - restore settings on power failure"="C:\Program Files\AT&T Network Client\NetSP.exe" [2006-09-07 24576]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-01 68856]
"Free Uploader Oe Integration"="C:\Program Files\Free Download Manager\FUM\fumoei.exe" [2007-06-10 40960]
"Google Update"="C:\Documents and Settings\eai_adm1\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-09-04 133104]
"Uniblue RegistryBooster 2009"="C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe" [N/A]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-09-03 1576176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"Tpam.exe"="C:\Program Files\IBM\Personal Communications\tpam.exe" [2004-04-27 28672]
"ISAMTray"="C:\Program Files\c4ebreg\isamtray.exe" [2008-05-02 253952]
"stgclean"="c:\sdwork\w32main2.exe" [2008-10-10 272384]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2006-08-11 94208]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2006-08-11 77824]
"Persistence"="C:\WINDOWS\system32\igfxpers.exe" [2006-08-11 114688]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2003-06-24 126976]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2003-06-24 561152]
"TPHOTKEY"="C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe" [2006-08-11 94208]
"PWRMGRTR"="C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2006-03-22 151552]
"BLOG"="C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2006-03-22 208896]
"TPKMAPHELPER"="C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe" [2005-10-28 864256]
"ISSI EZUpdate Service"="c:\sdwork\issimsvc.exe" [2008-10-10 210944]
"PSQLLauncher"="C:\Program Files\Thinkvantage Fingerprint Software\launcher.exe" [N/A]
"C4EBReg"="C:\Program Files\c4ebreg\c4ebreg.exe" [2008-05-02 372736]
"IBMPRC"="C:\IBMTOOLS\UTILS\ibmprc.exe" [N/A]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"pdfFactory Dispatcher v2"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe" [2005-01-31 475136]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2006-07-19 52896]
"vptray"="C:\PROGRA~1\SYMANT~2\SYMANT~2\VPTray.exe" [2006-09-27 125168]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"ApacheTomcatMonitor"="C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin\tomcat6w.exe" [2008-01-29 98304]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe" [2006-05-02 36975]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-10-07 185872]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-09-06 413696]
"TpShocks"="TpShocks.exe" [2005-11-07 C:\WINDOWS\system32\TpShocks.exe]
"TP4EX"="tp4ex.exe" [2005-10-17 C:\WINDOWS\system32\TP4EX.exe]
"defergui"="c:/sdwork/defergui.exe" [2008-03-03 c:\sdwork\defergui.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RealUpgradeHelper"="C:\Program Files\Common Files\Real\Update_OB\upgrdhlp.exe" [2008-10-07 136744]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
default.caa [1998-10-15 1013]
Lotus QuickStart.lnk - C:\lotus\wordpro\ltsstart.exe [2003-04-08 32768]
WebSphere MQ Task Bar.lnk - C:\Program Files\IBM\WebSphere MQ\bin\amqmtbrn.exe [2005-05-18 225280]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDevMgrUpdate"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Program Files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-07-23 16:28 352256 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\atmgrtok]
2004-04-27 11:07 49152 C:\Program Files\IBM\Personal Communications\atmgrtok.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\pcsinst]
2004-04-28 00:02 49152 C:\WINDOWS\system32\pcsinst.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]
2006-08-11 18:47 28672 C:\WINDOWS\system32\notifyf2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]
2006-08-11 18:47 24576 C:\WINDOWS\system32\tphklock.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli pwdmon

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"IBMconfig"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableUnicastResponsesToMulticastBroadcast"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"2799:UDP"= 2799:UDP:Altova License Metering Port (UDP)
"2799:TCP"= 2799:TCP:Altova License Metering Port (TCP)

R0 ANCSQ;ANCSQ;C:\WINDOWS\system32\drivers\ANCSQ.sys [2005-04-27 6912]
R1 TPPWRIF;TPPWRIF;C:\WINDOWS\system32\drivers\Tppwrif.sys [2006-03-22 4442]
R2 agnwifi;AT&T Wi-Fi Support Driver;C:\WINDOWS\system32\DRIVERS\agnwifi.sys [2004-04-29 19328]
R2 AppnApi;AppnApi;C:\WINDOWS\system32\drivers\appnapi.sys [2004-04-27 119136]
R2 artstartsvc;IBM Mobility Client Start Utility;C:\Program Files\IBM\Mobility Client\artstartsvc.exe [2007-03-13 11264]
R2 DB2-0;DB2 - DB2-0;C:\PROGRA~1\IBM\SQLLIB\bin\db2syscs.exe [2004-08-15 102464]
R2 DCDClient-ISSI;IBM DCD Standard Client (DCDClient-ISSI);C:\Program Files\IBM\tivoli\dcd\client\ISSI\cds\CDSWinSrv.exe [2008-07-08 53248]
R2 IBM Rational Agent Controller;IBM Rational Agent Controller;C:\Program Files\IBM\SDP70Shared\AgentController\bin\ACWinService.exe [2007-01-29 69632]
R2 IBM_LLC2;IBM Personal Communications LLC2 Driver;C:\WINDOWS\system32\DRIVERS\llc2.sys [2004-04-27 101408]
R2 ibmfilter;ibmfilter;C:\WINDOWS\system32\drivers\ibmfilter.sys [2005-04-27 63616]
R2 ISAMSvc;IBM Standard Asset Manager Service;C:\Program Files\c4ebreg\c4ebreg.exe [2008-05-02 372736]
R2 MQSeriesServices;IBM MQSeries;C:\Program Files\IBM\WebSphere MQ\bin\amqsvc.exe [2005-05-18 69632]
R2 NsTrcNT;NsTrcNT;C:\WINDOWS\system32\drivers\nstrcnt.sys [2004-04-27 12028]
R2 pdlnctdl;Twinax CUT Adapter;C:\WINDOWS\system32\drivers\pdlnctdl.sys [2004-04-27 12288]
R2 pdlndldl;IBM Enterprise Extender (HPR/IP);C:\WINDOWS\system32\drivers\pdlndldl.sys [2004-04-27 59392]
R3 agnfilt;AGN Filter Interface;C:\WINDOWS\system32\DRIVERS\agnfilt.sys [2006-05-19 180864]
R3 Anydlc;Anydlc;C:\WINDOWS\system32\drivers\anydlc.sys [2004-04-27 38236]
R3 Appn;Appn;C:\WINDOWS\system32\drivers\appn.sys [2004-04-27 1280576]
R3 AppnBase;AppnBase;C:\WINDOWS\system32\drivers\AppnBase.sys [2004-04-27 194752]
R3 Astdi;Astdi;C:\Program Files\Aventail\Connect\asnttdi.sys [2005-05-13 126141]
R3 KLOGNT;KLOGNT;C:\WINDOWS\system32\drivers\klognt.sys [2004-04-27 24588]
R3 pdlnacom;PDLC Adapter -- COM;C:\WINDOWS\system32\drivers\pdlnacom.sys [2004-04-27 74992]
R3 pdlnafac;PDLC Adapter Factory;C:\WINDOWS\system32\drivers\pdlnafac.sys [2004-04-27 36048]
R3 pdlnatcm;Twinax Adapter Common;C:\WINDOWS\system32\drivers\pdlnatcm.sys [2004-04-27 20480]
R3 pdlnatdl;Twinax Adapter;C:\WINDOWS\system32\drivers\pdlnatdl.sys [2004-04-27 18432]
R3 pdlncbas;PDLC CxM Classes;C:\WINDOWS\system32\drivers\pdlncbas.sys [2004-04-27 6784]
R3 pdlncfwk;PDLC Connection Manager;C:\WINDOWS\system32\drivers\pdlncfwk.sys [2004-04-27 160288]
R3 pdlndint;PDLC DLC Classes;C:\WINDOWS\system32\drivers\pdlndint.sys [2004-04-27 12800]
R3 pdlndlpb;PDLC LAPB;C:\WINDOWS\system32\drivers\pdlndlpb.sys [2004-04-27 70144]
R3 pdlndoem;PDLC OEM Interface;C:\WINDOWS\system32\drivers\pdlndoem.sys [2004-04-27 18944]
R3 pdlndqll;PDLC QLLC;C:\WINDOWS\system32\drivers\pdlndqll.sys [2004-04-27 53248]
R3 pdlndsdl;PDLC SDLC;C:\WINDOWS\system32\drivers\pdlndsdl.sys [2004-04-27 67072]
R3 pdlndtdl;Twinax DLC;C:\WINDOWS\system32\drivers\pdlndtdl.sys [2004-04-27 51712]
R3 pdlnebas;PDLC Environment;C:\WINDOWS\system32\drivers\pdlnebas.sys [2004-04-27 8608]
R3 pdlnecfg;PDLC Configuration;C:\WINDOWS\system32\drivers\pdlnecfg.sys [2004-04-27 50336]
R3 pdlnemap;PDLC Mapper;C:\WINDOWS\system32\drivers\pdlnemap.sys [2004-04-27 67184]
R3 pdlnemsg;PDLC Message Driver;C:\WINDOWS\system32\drivers\pdlnemsg.sys [2004-04-27 12768]
R3 pdlnepkt;PDLC Buffer Manager;C:\WINDOWS\system32\drivers\pdlnepkt.sys [2004-04-27 19984]
R3 pdlnshay;PDLC Hayes At signalling;C:\WINDOWS\system32\drivers\pdlnshay.sys [2004-04-27 59504]
R3 pdlnslea;PDLC SDLC Leased;C:\WINDOWS\system32\drivers\pdlnslea.sys [2004-04-27 22384]
R3 pdlnsv25;PDLC V25bis signalling;C:\WINDOWS\system32\drivers\pdlnsv25.sys [2004-04-27 54416]
R3 pdlnsx25;PDLC X.25;C:\WINDOWS\system32\drivers\pdlnsx25.sys [2004-04-27 58432]
R3 portio;TPM Service;C:\WINDOWS\system32\DRIVERS\NscTpmDD.sys [2006-08-11 13757]
S3 Ascrypto;Ascrypto;C:\Program Files\Aventail\Connect\ascrypto.sys [2005-05-13 219299]
S3 avpnnic;AGN Virtual Network Adapter;C:\WINDOWS\system32\DRIVERS\avpnnic.sys [2003-04-04 13952]
S3 gwiopm;gwiopm;C:\Program Files\wst\gwiopm.sys [ ]
S3 MQSeriesBrokerBROKER01;IBM WebSphere Message Broker component BROKER01;C:\Program Files\IBM\MQSI\6.0\bin/bipservice.exe [2006-10-24 28672]
S3 MQSeriesBrokerConfigMgr;IBM WebSphere Message Broker component ConfigMgr;C:\Program Files\IBM\MQSI\6.0\bin/bipservice.exe [2006-10-24 28672]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2004-09-07 17664]
S3 Tomcat6;Apache Tomcat;C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin\tomcat6.exe [2008-01-29 57344]
S3 USRWGU(USR);USRobotics Wireless USB Adapter(USR);C:\WINDOWS\system32\DRIVERS\USRWGU.sys [2005-12-29 408064]
S3 wcndis;Mobility Client Virtual Miniport;C:\WINDOWS\system32\DRIVERS\wcndis.sys [2006-01-30 8704]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{284d45b8-e341-11db-82e0-0016415944cc}]
\Shell\Auto\command - E:\MicrosoftPowerPoint.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL MicrosoftPowerPoint.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{87cb0990-614a-11dd-850d-020255061358}]
\Shell\AutoRun\command - System\DriveGuard\DriveProtect.exe -run 
\Shell\Explore\Command - System\DriveGuard\DriveProtect.exe -run  
\Shell\Open\Command - System\DriveGuard\DriveProtect.exe -run 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{87cb0991-614a-11dd-850d-020255061358}]
\Shell\AutoRun\command - System\DriveGuard\DriveProtect.exe -run 
\Shell\Explore\Command - System\DriveGuard\DriveProtect.exe -run  
\Shell\Open\Command - System\DriveGuard\DriveProtect.exe -run 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b1a1c5be-5488-11dd-84fe-020255061358}]
\Shell\AutoRun\command - System\DriveGuard\DriveProtect.exe -run 
\Shell\Explore\Command - System\DriveGuard\DriveProtect.exe -run  
\Shell\Open\Command - System\DriveGuard\DriveProtect.exe -run 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b54bc416-7589-11dd-8533-020255061358}]
\Shell\AutoRun\command - F:\WD_Windows_Tools\Setup.exe

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5AA214BD-53C5-4474-8386-A8D92581E557}]
C:\WINDOWS\system32\msiexec.exe /qn /fpu {B9342AA7-3B50-4C17-936F-DF175B130C65}
.
Contents of the 'Scheduled Tasks' folder

2008-10-10 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2008-10-13 C:\WINDOWS\Tasks\GoogleUpdateTaskUser.job
- C:\Documents and Settings\eai_adm1\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-04 18:18]

2008-10-13 C:\WINDOWS\Tasks\PMTask.job
- C:\PROGRA~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2006-03-22 21:43]
.
- - - - ORPHANS REMOVED - - - -

BHO-{00091723-505B-47F2-9FEE-2B819DAFF925} - (no file)
BHO-{0052CEB0-7C7C-4FD7-9D1C-59961BF08FAD} - (no file)
BHO-{0089CF04-2617-43FA-B20F-EC99F9DB2F11} - (no file)
BHO-{00B26BC6-C4BC-4E7A-89B8-693F4AAEB37F} - (no file)
BHO-{00FC255C-FDBF-4DCA-92B2-ED0CBD5C54EC} - (no file)
BHO-{017AE381-447C-4E76-B6FF-B07B1E9554BB} - (no file)
BHO-{01B866A3-1DC2-4FDD-B1B7-08743406A13F} - (no file)
BHO-{01C993A7-C5C3-4FE1-823C-A5FB8B50CE6B} - (no file)
BHO-{02EEA565-1FF2-4EEE-A7A1-96869AED0690} - (no file)
BHO-{041B8DA1-8FC7-43FC-B1B9-C6F5613A9D52} - (no file)
BHO-{0518836F-24C4-4955-B9FB-EC5262806E7E} - (no file)
BHO-{052681C5-C6AF-40B7-9C43-C0515959F572} - (no file)
BHO-{053FFF76-5866-454D-8191-25A1268F56DA} - (no file)
BHO-{05C9894F-AA01-487A-921E-88F44E7A3198} - (no file)
BHO-{05FEE83A-F22B-46AC-AFA5-B1521F5A8946} - (no file)
BHO-{05FF87EF-E717-41CE-8072-659AB34646B3} - (no file)
BHO-{06436841-8182-4A6D-AD44-FE50E8DC3AE2} - (no file)
BHO-{07039B8E-2819-40BB-8A27-F17A12650175} - (no file)
BHO-{08246976-9641-4137-BA18-2D97A47B898C} - (no file)
BHO-{08948B39-ED4D-4807-B9A3-63551E6CB723} - (no file)
BHO-{08B789FA-9D28-4423-8FF9-22708F4C97B7} - (no file)
BHO-{08BE4E8C-7968-4391-98C1-C20D188F43D9} - (no file)
BHO-{08DD92A5-685D-4143-8A77-87AC3B68D010} - (no file)
BHO-{0978DFFE-2F55-4FCC-B7FD-57726FBD29EE} - (no file)
BHO-{09853225-D701-4ABF-B7FA-BA5E14E545E0} - (no file)
BHO-{09C0C621-5874-420A-A881-4FA1EB1D8010} - (no file)
BHO-{09F0A047-C820-44F6-9FBF-BF5B8208F1C5} - (no file)
BHO-{0A77EA78-1FC8-4D7D-9313-A396C522DE91} - (no file)
BHO-{0ABA2CF3-0BF2-4A6E-8017-B21CDDF2B8B0} - (no file)
BHO-{0AE13140-379B-4711-B2FB-4D5B839A1010} - (no file)
BHO-{0AEABE4D-EA52-4521-A42D-6EB9FDB0E3A5} - (no file)
BHO-{0AFE0207-A300-43CB-BBBC-9C6D49696503} - (no file)
BHO-{0B6665F8-C78D-4E2F-9E1A-BB5C253F8CE7} - (no file)
BHO-{0B6DED8A-58A9-4EB2-B482-8B2565E5C3DC} - (no file)
BHO-{0C0B59AD-8F6E-404C-948E-8D4B3DDF7649} - (no file)
BHO-{0CCBEF0E-36CB-42BB-9E85-E715EFF396EC} - (no file)
BHO-{0CE0B637-3F27-4871-A7D0-DAE45AAFDE28} - (no file)
BHO-{0DB53165-CEE0-4A63-BE2E-625B740A87B2} - (no file)
BHO-{0DC39C05-D738-4B60-BB7B-EB23DAB33C04} - (no file)
BHO-{0DEF7A5D-1FCF-4DA3-AFC0-6227C09CC367} - (no file)
BHO-{0DF571AE-8A04-4969-8E81-E47D6DD80A55} - (no file)
BHO-{0F1812B4-A54D-46E6-A157-8DC3A452EFDE} - (no file)
BHO-{0F24C4B7-586C-44EE-B7F4-43EC1053E800} - (no file)
BHO-{0F30C71F-5273-4BF1-BA23-1623CB9F292A} - (no file)
BHO-{0FBC89AD-5299-4C5A-A5B0-6B28D16C07C0} - (no file)
BHO-{0FCF0F79-4F99-43A1-9145-C6C926E1CF7B} - (no file)
BHO-{0FDAC37D-C88E-4B45-A37F-1606079D6618} - (no file)
BHO-{1053E769-E94A-45ED-B072-19CAE0C11C5E} - (no file)
BHO-{105837C0-A083-42A0-A201-5786DF3AF9C8} - (no file)
BHO-{10A65908-F98E-4546-8950-41967E89A0C2} - (no file)
BHO-{10B23663-568E-4667-99B7-6807694321C6} - (no file)
BHO-{110E9C33-74FC-48F0-8F17-A0896CBBAD77} - (no file)
BHO-{1118951B-F931-4E16-93E9-7407E7F52431} - (no file)
BHO-{1149FD1B-44D6-4EDE-A9D7-E482CA9F1306} - (no file)
BHO-{116AD66E-4D17-4DCC-98EC-9CE450CE9E69} - (no file)
BHO-{1258777A-0909-4C8F-88B0-F015B01281AF} - (no file)
BHO-{13861335-BADC-4EE4-A555-A10270E86CBC} - (no file)
BHO-{1408AAD3-B967-455F-B445-B91889F453BB} - (no file)
BHO-{1417B4CC-29D4-4D90-96AB-829B363F1D74} - (no file)
BHO-{1499C7BF-5EB3-42CA-B554-2402A6FB51F8} - (no file)
BHO-{1503BF0F-DE4E-41AF-9080-17CD44B5DEA1} - (no file)
BHO-{15146AFA-F568-402C-B202-A3E944C15912} - (no file)
BHO-{15972BAE-C526-4B99-9DAC-E6703EBEF44E} - (no file)
BHO-{1609AFC2-9B59-42F9-8287-13B609CCBC21} - (no file)
BHO-{1620A195-956A-4674-8098-44FC07DF62D0} - (no file)
BHO-{165624D9-6186-468B-B12B-8DD51D528FBF} - (no file)
BHO-{1673C6C0-418F-4CA6-8FA1-260A921567CE} - (no file)
BHO-{16CF0196-C489-4137-A6FC-5A2143E99EC1} - (no file)
BHO-{171C9954-6D9B-4471-9175-26A3CA613F1B} - (no file)
BHO-{171F646C-FDCE-459C-9105-BF7860477942} - (no file)
BHO-{1725A01E-3934-41BB-981B-4548862CFEA8} - (no file)
BHO-{174BF5D1-C1F0-48E9-A209-78BB295B9D96} - (no file)
BHO-{17867216-31A7-4EE2-A48C-2EA68FA10841} - (no file)
BHO-{178EE784-F89A-4B37-AD39-06706822BD7A} - (no file)
BHO-{17DBF904-D755-4268-8A61-4E0035D57429} - (no file)
BHO-{180D032F-8800-4C34-B458-3535951B5586} - (no file)
BHO-{18773EF8-9EDD-40A9-9924-BA1FB64EBD5D} - (no file)
BHO-{18809EE9-5116-4EBF-AD28-B8286326E8E3} - (no file)
BHO-{19406579-4948-445C-8B21-9E793246B836} - (no file)
BHO-{195D6EE2-35A4-40F7-80EA-3687178E6CA8} - (no file)
BHO-{19DFF08D-C5B5-456E-B05F-A6B808858067} - (no file)
BHO-{1A505478-8183-4AFF-90F8-585510123A6A} - (no file)
BHO-{1AB1C8C0-0383-4BA1-8392-2E761C0E7BA2} - (no file)
BHO-{1B19F8B9-9EF1-4A0E-A21C-D084ABC5F3DA} - (no file)
BHO-{1B2C703B-BAE0-4F93-B363-061735C6BE4C} - (no file)
BHO-{1B9285B1-C01B-4A22-A850-5F7341F855DB} - (no file)
BHO-{1BE17761-5D4F-48EF-884E-6D2950D774A0} - (no file)
BHO-{1BE8C669-4855-46FB-A1AB-F932E2F143DB} - (no file)
BHO-{1BFFFF30-8354-4851-B723-86B7C3A0BA5C} - (no file)
BHO-{1C25582B-DCA1-463C-8714-BAEDEC0BDCE0} - (no file)
BHO-{1C6C0D1B-1890-4C20-9FE9-BF72A1AFD3C8} - (no file)
BHO-{1C80576F-C5E1-4A07-9B44-69FA50894613} - (no file)
BHO-{1CFCAF26-4603-4072-B17E-F5636BD8CBDE} - (no file)
BHO-{1D3D6BF3-DBCF-4592-9EFF-D3FBF5900069} - (no file)
BHO-{1DA6C677-12AB-4C17-99DD-E10B7DE4B1B4} - (no file)
BHO-{1E17EDF7-4148-4D1D-A731-FCC5089B1083} - (no file)
BHO-{1E6FF5BF-9170-4431-839F-FC0471ECF184} - (no file)
BHO-{1E7EAE34-F658-47D7-82F7-B361121E0D02} - (no file)
BHO-{1E9B54D5-DE71-4C70-A397-A59522C09E8F} - (no file)
BHO-{1F445F37-7F52-4729-ADCA-11FB0B983DF9} - (no file)
BHO-{1F60E5FE-D407-4995-B676-887243EDA05E} - (no file)
BHO-{1FF2750B-5B4D-4224-843F-6AC556C14B25} - (no file)
BHO-{205BEFBD-BC0D-4ECA-9B37-5DAE7247BAD0} - (no file)
BHO-{20B84E1D-9AF8-47B2-B0E9-845998BC54D8} - (no file)
BHO-{210E0BB5-3874-48B0-9B8F-570290F4303D} - (no file)
BHO-{218DE40E-FD4C-4CDF-887C-43976895FB01} - (no file)
BHO-{21CBAE81-B161-4CB0-9331-51AFCAC56C8D} - (no file)
BHO-{21CC2320-FA3C-4E29-9B34-2244477F94E5} - (no file)
BHO-{21E320B5-186F-4223-99FD-35F7160486BD} - (no file)
BHO-{220C6100-9D32-4AD3-8C8F-9BAC106F2B8F} - (no file)
BHO-{221AEC23-6D99-4627-856A-02D15526B8CD} - (no file)
BHO-{2231F014-035F-4D86-8719-AAEAA7CE215C} - (no file)
BHO-{2242DF48-4D88-4E74-95FE-1A36A83EABC1} - (no file)
BHO-{231F8758-FBC9-49E8-98C3-2F49D3B2D8A6} - (no file)
BHO-{2368F94B-3EE9-40CC-A6B0-CEBC56203910} - (no file)
BHO-{2385941F-6F51-4C97-A6EC-2FD0A22FDBE8} - (no file)
BHO-{23C2421D-74BD-4B2F-9837-3DDA540F7824} - (no file)
BHO-{23DC69AA-5413-4A70-9658-4AF072E78340} - (no file)
BHO-{23E437A1-2BC4-469A-BB5B-F1793894D721} - (no file)
BHO-{244D9B64-0F32-4A78-99A2-35193CFA80E8} - (no file)
BHO-{2453AFE8-55BF-4CCE-8811-B24E2F501CF0} - (no file)
BHO-{24B9AE1F-6D4D-4884-8125-49BC2AA8A07A} - (no file)
BHO-{24C0CF5E-3B99-440B-A75E-59A1AEC9DCC4} - (no file)
BHO-{2571A2BF-FF95-4178-8E38-9DC04515CF81} - (no file)
BHO-{269A0E83-C40C-424D-AA23-3EFA9457CBFA} - (no file)
BHO-{26BABADE-DE37-482B-9ED3-9AF0CC6ABD9C} - (no file)
BHO-{26BB63E2-EFEB-499C-8FF0-BAC2130C9AB5} - (no file)
BHO-{26CB7E25-A0C5-474E-951D-22C25B1207BB} - (no file)
BHO-{2721A0E1-1518-47B4-BE04-F5389F088806} - (no file)
BHO-{277DAFEB-F293-4AEC-9BD2-A37A4C326913} - (no file)
BHO-{27D10813-4EF3-4738-B714-01F9930B7B93} - (no file)
BHO-{281B3FDD-395F-4FFC-887B-737B5DC562C7} - (no file)
BHO-{2862EDEE-AC65-46B3-97F3-3E691AB3EA11} - (no file)
BHO-{289687C1-7284-4516-B659-DB40098F3A3D} - (no file)
BHO-{28BBEEBE-8C4A-4F70-8B7B-3109B566FF25} - (no file)
BHO-{28BE1B08-E91C-47F1-BFEC-E23F22FB5896} - (no file)
BHO-{291B7A89-CAEA-4351-A9C0-7A7197B15189} - (no file)
BHO-{298EB3AE-DB8F-40CB-8528-0F8980557269} - (no file)
BHO-{2A56ADCD-960C-4609-AEC2-D698C01F91AC} - (no file)
BHO-{2A5F6BDB-7C44-4135-9BDA-329AB579D783} - (no file)
BHO-{2A5FC548-028C-4D3C-9370-1F6DCC649CAC} - (no file)
BHO-{2A726C86-019A-46FA-8163-F88EE1E99359} - (no file)
BHO-{2A9204AA-01B0-48D5-B00D-EBB81F4779E3} - (no file)
BHO-{2AA7D274-1555-489B-A071-C615569C288A} - (no file)
BHO-{2AAD2529-9B82-4DB4-9BA3-CF1426DA6505} - (no file)
BHO-{2B0E0EEC-358B-4E31-8455-C98E630D583B} - (no file)
BHO-{2BF0828E-8984-4042-9584-C9FFD912694C} - (no file)
BHO-{2C547903-3C35-440A-B338-FF6C1C41882B} - (no file)
BHO-{2CB81381-7932-47F9-8239-36C120FD8ED0} - (no file)
BHO-{2CC82990-BD48-403B-A6AA-9D1737D386E7} - (no file)
BHO-{2CFC17D0-DD6C-4183-876E-CE459A30F4AD} - (no file)
BHO-{2D000FAC-A653-4BE2-927C-B39EB04D59E9} - (no file)
BHO-{2D119E77-0005-4A9A-81AC-BC68D73A3A47} - (no file)
BHO-{2D4EF013-6032-4BAF-B579-D460CE22889D} - (no file)
BHO-{2D67DA62-C60C-4B7C-92EF-70091FA8B6C7} - (no file)
BHO-{2D74D638-5F52-4536-8647-00B3BAA1B01B} - (no file)
BHO-{2E3D0751-20D5-4F26-9068-0CC244B5D139} - (no file)
BHO-{2E598210-02FF-49CB-AAF7-682E74B9B914} - (no file)
BHO-{2EA33498-67E4-4B9D-AF4B-2B3B40C99E6B} - (no file)
BHO-{2F873EA2-B82D-48EF-9EAC-3F49E966B141} - (no file)
BHO-{2FC39358-8796-4A4B-883E-14B89CFFD436} - (no file)
BHO-{301309E3-6C40-4469-8D2C-49D00309CA09} - (no file)
BHO-{3020ED68-B917-4701-951E-842ADC682867} - (no file)
BHO-{3113826A-6676-4081-9C8C-10ECCABDBF0E} - (no file)
BHO-{31ACE550-53C0-4244-86C8-843F5DACBBF5} - (no file)
BHO-{321DCC89-0786-4FA0-A6D6-D70DFBBE9083} - (no file)
BHO-{322981C5-0D8B-4099-B3F1-6A799D816CC0} - (no file)
BHO-{32B22EE0-13B7-498F-BF5A-35BFAEF39E65} - (no file)
BHO-{32B5EAC2-2A61-4CDF-8ECD-7A1C67A90E2D} - (no file)
BHO-{33265E0E-A790-4F81-AA01-5B517FA3FE35} - (no file)
BHO-{33D5E053-A2B4-49B9-B8B2-E9A506C31CEF} - (no file)
BHO-{34394A5F-3A78-4C4B-A394-902486E56EE2} - (no file)
BHO-{343CDD59-6F62-4F9C-8A7B-487AC76532DE} - (no file)
BHO-{34645E07-C6E1-4208-94AE-DDFEAB782AC8} - (no file)
BHO-{35FA3EE5-7699-406D-903C-2FF47820851A} - (no file)
BHO-{36333D0F-4BA4-4470-9640-66DEF451785E} - (no file)
BHO-{36A4B807-D92B-4BDB-B77B-9589B7B04858} - (no file)
BHO-{36BC3B75-773D-4634-B1FC-2CB32C2AFD45} - (no file)
BHO-{36D6EF48-0C4E-49D0-95D3-D1B91819EF62} - (no file)
BHO-{36DFB901-14E3-4530-A0E3-3CA627FEFB52} - (no file)
BHO-{373B97A8-28BC-4989-8E1C-73356463549B} - (no file)
BHO-{3803BA1E-6003-49FC-817D-008293973827} - (no file)
BHO-{38345FAB-1B9E-4DB5-9BB6-AF608C2FAD64} - (no file)
BHO-{383B4C12-8AA7-4E15-A97A-86E1E409ECA1} - (no file)
BHO-{38900744-07EC-415A-A18B-A8CE6650137F} - (no file)
BHO-{38C54950-B69F-4E1A-BD3B-A8168BC206D6} - (no file)
BHO-{38DF87C1-2514-4DD0-B9BF-4915A4F1036B} - (no file)
BHO-{38DFCDC1-1928-46AB-A2C9-18BF48F6D3F0} - (no file)
BHO-{38F09D29-38C4-40C0-BDCA-9FE95D5F808C} - (no file)
BHO-{394A4422-198D-4BA8-9D29-8D5206095EFA} - (no file)
BHO-{398391DE-B287-457E-A7BC-86FA049E6B9E} - (no file)
BHO-{3A07A9F6-EC67-4DCB-B79E-CA5084F17F91} - (no file)
BHO-{3A130840-C257-4F6E-B9CA-5E0ED58E1E1A} - (no file)
BHO-{3A1A796A-7DBE-4E25-B59E-3E1C99CD5D4E} - (no file)
BHO-{3A4EFEBA-CAF5-423E-B838-10034559D5ED} - (no file)
BHO-{3AC47426-B6C5-4315-A1C6-036B79B2B460} - (no file)
BHO-{3B9397D8-6A27-4F75-9FB2-09DAF189FBF1} - (no file)
BHO-{3BA8078E-B09E-4890-B018-7E5262304529} - (no file)
BHO-{3C34AB41-897C-445A-9131-BE48FB0D894C} - (no file)
BHO-{3C62EA93-F153-483A-8AC7-B4D9A9702E85} - (no file)
BHO-{3CEB8436-F6A5-4C90-9ED2-40DE13324BB9} - (no file)
BHO-{3CECC720-4A93-4DF3-AF29-4697B1CDFCF2} - (no file)
BHO-{3CEE54C9-1049-4AD2-A68D-45B502C2E701} - (no file)
BHO-{3D65BEF5-E54F-4706-94D4-04217AEEB480} - (no file)
BHO-{3DA0C99B-E2CE-4FA1-82CF-CFF0744348B6} - (no file)
BHO-{3E91F7CE-8064-45D7-B7A3-77C65EE67C7D} - (no file)
BHO-{3EB607E2-E739-466D-A255-64B5819EF463} - (no file)
BHO-{3ED04611-95BE-4494-B401-FD8D31A7B35B} - (no file)
BHO-{3EF2077F-3F42-43C3-80D0-F13F5193CD2A} - (no file)
BHO-{3F090439-0133-47D5-B1A8-DB88124FDE6A} - (no file)
BHO-{3F127B9D-21A1-4CC0-8E80-B2A6C15106F8} - (no file)
BHO-{3F1426AF-E8DA-49BD-B296-7AD30FBBF1CD} - (no file)
BHO-{3F4721ED-26D9-4B7A-9766-F5F87732C25D} - (no file)
BHO-{3F4C7892-8780-4BED-8D7C-04F29EB76D9B} - (no file)
BHO-{3F6FE699-D782-4B5C-9A71-69BB39975A4D} - (no file)
BHO-{3F8DF217-0777-42AD-869C-C8FBE1290206} - (no file)
BHO-{3FDDEE18-5DFE-40C5-9FA9-E44E5853D2D3} - (no file)
BHO-{4007DCB6-6B59-4FD5-BAE9-5CC2D4D60E0D} - (no file)
BHO-{402C2E94-F94F-4D09-9595-2FCE670168FE} - (no file)
BHO-{4038A446-97C2-4BDC-BCEC-7A7052809053} - (no file)
BHO-{4053608E-F8E7-4C31-AB63-6F38248A6216} - (no file)
BHO-{4097F699-E91E-48B2-B334-8624327924A8} - (no file)
BHO-{40A3B499-EB3C-4B63-B4D8-A436632398A5} - (no file)
BHO-{40FFEEF5-9010-402D-BA47-D99DD1915769} - (no file)
BHO-{41530C80-372B-42F1-AD72-FAA6224864E5} - (no file)
BHO-{415A81FB-2F07-406B-B6D6-F3AB6536FE08} - (no file)
BHO-{417DA8D2-49F7-40A3-BF5F-D77625F3B333} - (no file)
BHO-{418B062D-4D67-444E-986D-6D23A50395AD} - (no file)
BHO-{4294D294-029E-45DD-9A41-8E144E742741} - (no file)
BHO-{42B2E0F1-10AB-4AF2-BD4E-C8D1E8E09FDB} - (no file)
BHO-{43322865-6756-44DE-99EE-F15A2634A9B7} - (no file)
BHO-{4491CDF0-3DA1-433E-AF21-785482814852} - (no file)
BHO-{44F7894A-ECF6-4D9C-9198-3F79E125A73D} - (no file)
BHO-{450C6732-3A1C-45C6-A164-063E42C2BBB0} - (no file)
BHO-{457C52FD-55AC-49FA-A394-50048830AECD} - (no file)
BHO-{45E5DD6D-9854-413C-9D5A-F807F2693AF5} - (no file)
BHO-{469F5764-0848-4148-B14F-5A2C00CE43F7} - (no file)
BHO-{46A95975-4A23-4F4F-BC77-61B47194FC69} - (no file)
BHO-{46BDD89E-C529-4EEB-A00C-0B94B8C5756E} - (no file)
BHO-{46DA6C1A-8306-4CD7-832C-9505F102F340} - (no file)
BHO-{48885837-6582-4EDB-AF6E-B34E3FD97EFB} - (no file)
BHO-{48B4BF08-A8BB-47E2-AFE0-69AD2A48645D} - (no file)
BHO-{48F004D7-01F7-49B5-BF90-E21E24A18662} - (no file)
BHO-{48FF85D1-3E49-4392-9431-F047735B28E1} - (no file)
BHO-{496BB157-A6DD-4E84-A0D7-29FE057F7028} - (no file)
BHO-{49849F48-89F5-4E8D-B865-4A7B4608C061} - (no file)
BHO-{49B8A84E-ABC5-4A78-B00A-089F2F0D80F9} - (no file)
BHO-{49BE8065-46E3-43FB-8726-44F6C67CA306} - (no file)
BHO-{49CFB210-2649-4A35-80C1-046EAFC3FF37} - (no file)
BHO-{4A3E902C-CF6E-4B04-8F4C-266C64753E97} - (no file)
BHO-{4A861BFF-1E42-42F2-966C-78BC93F9AFC8} - (no file)
BHO-{4A98795C-22F7-4358-8DBB-19D92EA8BA4F} - (no file)
BHO-{4ADCB97A-0302-4F52-89B7-819F7F2265E9} - (no file)
BHO-{4B623741-20DE-4FCE-82F1-584B036FEE8F} - (no file)
BHO-{4BC6EA13-7FBD-400A-97E4-79F41B182D35} - (no file)
BHO-{4C141B28-2D05-4841-98C4-BFA3E537035C} - (no file)
BHO-{4C1AD8A7-9708-472B-897F-E81F7F643081} - (no file)
BHO-{4C369E5B-1506-41A8-A28B-903B5B3E4B38} - (no file)
BHO-{4C3DB19B-C382-4D30-BCF4-0FE0230CC652} - (no file)
BHO-{4D2FE3B5-AEDD-4288-A335-90CA780D713A} - (no file)
BHO-{4DF6961C-6B9C-44D2-AC32-3456FDFF828D} - (no file)
BHO-{4DF89CB2-F480-4BCC-98AB-3479C7174D11} - (no file)
BHO-{4E081A91-2DAC-44F0-BB93-A01A279F2389} - (no file)
BHO-{4E18DA13-1FF5-4579-BD19-69F4C0849E4D} - (no file)
BHO-{4E30B38D-4B64-4DAB-B2D8-B69EA5F52487} - (no file)
BHO-{4E67A232-FC03-40A9-884D-1946B236BEB4} - (no file)
BHO-{4EE34098-7EB5-4100-B2EF-4957811ED3CE} - (no file)
BHO-{4F10E818-D035-4E74-B534-EE7D515E610D} - (no file)
BHO-{4F4A7F4B-FF24-4A2B-985D-F404D6DAC193} - (no file)
BHO-{4F97100C-BE17-421D-ACDD-4627F3039E40} - (no file)
BHO-{4FB9A4DD-BD7D-42B3-8463-AF8DFFB81AB6} - (no file)
BHO-{4FFCEC1B-2D6C-434D-AD5B-2A7E489141BA} - (no file)
BHO-{50C88919-5408-41D8-ABD7-722F0D3C426A} - (no file)
BHO-{5114A99A-569D-431C-BCBE-118696B18253} - (no file)
BHO-{5131BBE5-65A7-4754-9FD5-4EFD6F5FE151} - C:\WINDOWS\system32\urqNGxuR.dll
BHO-{51AFF687-6654-4BC5-8C4B-292C608A346D} - (no file)
BHO-{51C69421-041A-4F74-B7BF-719C51DA4600} - (no file)
BHO-{51D24F09-1EBD-4A5A-BBAA-C0738C194C38} - (no file)
BHO-{522661C7-2C3E-472E-9F76-2E3AD28A626D} - (no file)
BHO-{5237FFA9-35D2-4E22-A815-8F2F8419CD1A} - (no file)
BHO-{527F4EA0-7767-46FE-A1AC-FDEA9C2BCEA5} - (no file)
BHO-{528CD57A-9E4D-4FD5-AD64-7A88DEAD8880} - (no file)
BHO-{529A2A1E-5902-4FAD-9F27-7D137587337F} - (no file)
BHO-{530804F7-F7DB-4C45-995C-403140397F15} - (no file)
BHO-{531C4AAF-1933-4EDC-AC73-A325E03B5F44} - (no file)
BHO-{53369F59-B3A4-4F3F-9151-7C91D7CAD413} - (no file)
BHO-{53803CC6-4B29-4551-A636-5971F8D62251} - (no file)
BHO-{53CE5D8F-02A8-4CA2-975C-A1DE6F8C6018} - (no file)
BHO-{53FCE52F-45FB-4D65-A2AA-835F88F008CA} - (no file)
BHO-{5415193B-481E-4B04-8F26-4C88E28C79EE} - (no file)
BHO-{547CD24A-19C0-4C4C-85B4-CB4C7608B08B} - (no file)
BHO-{54ABC8A2-7E18-4F0A-9FF1-8463419FFCC0} - (no file)
BHO-{54AD4D88-1DD1-435E-BBF1-FDC5BCDA9720} - (no file)
BHO-{54CCD700-675A-4C3C-ACB5-40FE2DC47586} - (no file)
BHO-{54F9C8EA-FDAA-40F1-A7B6-0F41FCB71EA7} - (no file)
BHO-{56442B27-B798-44E1-A177-8E5B33885A6F} - (no file)
BHO-{5678D55A-BC96-4F00-A193-AEE7648647F5} - (no file)
BHO-{56820F56-B09D-44B5-AE26-E29B616FB9E6} - (no file)
BHO-{56A078DD-A46C-4A67-8128-1390CA4A466E} - (no file)
BHO-{56A95C15-5B4C-4323-9C6E-0AC683DD2BDE} - (no file)
BHO-{56C34832-4D29-41FD-9C5E-645E0B05C399} - (no file)
BHO-{56D52233-51CF-46BA-B5B3-3806BEB31229} - (no file)
BHO-{56DF463E-D9DA-4257-BAC6-F487EAF3E31B} - (no file)
BHO-{56F6567E-52B3-43CF-B22E-D5FFC753CF21} - (no file)
BHO-{57092B92-372B-4FA4-95BF-28D756580E74} - (no file)
BHO-{570A716E-6551-4E88-98AA-2A9BBE575390} - (no file)
BHO-{5729ED60-7A7E-4257-ADEA-70DDB1EFE6A7} - (no file)
BHO-{575BB45B-4210-4693-827A-092F39E3AA79} - (no file)
BHO-{5791A74A-5144-40F8-93C2-EC456C605D4B} - (no file)
BHO-{582E8C53-3F4A-49C8-919A-FF3474CBCDE8} - (no file)
BHO-{5849E797-53B5-43E3-B192-F018A0DCE319} - (no file)
BHO-{5892E4B6-7AE8-488A-9845-A7F74F8A101E} - (no file)
BHO-{58DF31F1-331B-4DC3-BBA0-36B6F65AC570} - (no file)
BHO-{597206CF-222F-4E00-976F-71AC39FD45F5} - (no file)
BHO-{5A25F66D-574A-4737-A6EB-3656EB7BDC32} - (no file)
BHO-{5A81E419-6BAA-44E1-802D-C8F7AE8E1A4A} - (no file)
BHO-{5A8C88DA-4F72-46D4-9BAB-8C2AA037DDD7} - (no file)
BHO-{5A995944-DBE0-4004-97B2-32186A6B800F} - (no file)
BHO-{5B0CD4D6-4D91-4DFF-A708-17F8B79CAFF2} - (no file)
BHO-{5B4ACC6A-3077-44F3-9461-7AEFCDF81E29} - (no file)
BHO-{5B5B4588-6D71-4EF5-9792-12EE6B581A2E} - (no file)
BHO-{5B7E47C4-C409-4755-B30C-DD377C02CADF} - (no file)
BHO-{5B81FBA7-21BF-44EC-AE6D-104C282A6C46} - (no file)
BHO-{5C02BAD1-AAF4-4A3D-B979-08A365D871FB} - (no file)
BHO-{5C66DD79-1953-4351-9D42-156C9741AB38} - (no file)
BHO-{5D0D2C88-F29D-4602-80AA-58987B298E0F} - (no file)
BHO-{5D27FC46-9919-4349-A0FD-30AE9EBD6134} - (no file)
BHO-{5D30DBA8-3B84-41A4-B3FA-D3D3A66BB483} - (no file)
BHO-{5D4A5CF2-F47E-485A-B300-E77C66A371CC} - (no file)
BHO-{5D637095-E732-418C-9792-052CF9B49FED} - (no file)
BHO-{5DA10A3C-29BC-48BE-90A3-201EEC87953C} - (no file)
BHO-{5DE288E9-838C-4153-99AF-D268889831DE} - (no file)
BHO-{5E051875-B803-483A-86B9-FDC1A5009745} - (no file)
BHO-{5E060DD8-BF6C-42B1-BAF3-1E7E95193EED} - (no file)
BHO-{5E40DB63-59E3-4650-8713-96FADB6238A9} - (no file)
BHO-{5F98C50D-5458-4873-A9A6-78A0B2BAA8B3} - (no file)
BHO-{5F9D3C48-92CE-4AD3-9D08-318270E1661A} - (no file)
BHO-{5FBFD059-D87D-4812-8C46-4E6617845C69} - (no file)
BHO-{5FC6EF9F-96FB-40DC-B361-ECDE334FE83A} - (no file)
BHO-{5FD10BFD-6699-40A6-86BE-FB7B6D6D82D8} - (no file)
BHO-{6052A86E-7222-41EC-834C-B6FB0AE9B9BC} - (no file)
BHO-{607016D5-0C63-476E-8624-CB293CD20855} - (no file)
BHO-{6099FC2A-2766-481E-8B3A-C93F9DAE7824} - (no file)
BHO-{60A5EA03-4F68-4676-AEF7-C26EF0FD0441} - (no file)
BHO-{611E650C-3D1D-4870-81D8-45491B9DBF1E} - (no file)
BHO-{6154A796-85A7-4C59-9850-CA3D92816050} - C:\WINDOWS\system32\qoMeFurq.dll
BHO-{6185F214-AAFE-4FFD-8933-8D97A4FAC51D} - (no file)
BHO-{61E12A89-9B47-489F-94DC-62646D9422A6} - (no file)
BHO-{61EE5821-13BE-41EE-93EE-806EB3572531} - (no file)
BHO-{625311CC-E24A-4CB4-88DD-69366AB786E9} - (no file)
BHO-{6274B83C-F9F6-4DBA-953A-649297B666E8} - (no file)
BHO-{62957D11-650B-419A-B43B-C9A645FDB446} - (no file)
BHO-{62BEF756-4F74-431B-8942-AEABE174FF88} - (no file)
BHO-{6385B35E-31AC-4A66-AAB2-25FF8AB5C1E8} - (no file)
BHO-{639017C1-022E-4118-89C3-DC44B4A91ECF} - (no file)
BHO-{639BA4EA-CE99-4F97-B368-CA8001DF2F51} - (no file)
BHO-{640E0917-EC2A-4CAD-844D-D83AF583608E} - (no file)
BHO-{64433CB5-A7CC-4B04-BD3B-AF5F2EB5BA15} - (no file)
BHO-{6479A49D-C5A4-4027-8083-3BAD5CE1BD3C} - (no file)
BHO-{64B136CC-300F-4109-B29F-90E7B011C645} - (no file)
BHO-{6564BC00-BB65-4C8C-BC93-F07E08026C56} - (no file)
BHO-{65ACC1BA-80FF-4414-A552-E3A0F60CC03B} - (no file)
BHO-{666C5AF1-C330-41A1-8066-70285E8612FD} - (no file)
BHO-{66FA96FC-5326-49D3-8D59-4B2E87C68234} - (no file)
BHO-{6707C261-3C47-45D1-BE48-EACA143C9931} - (no file)
BHO-{6724DD9D-1E30-4E2C-833A-B6324B8FF29B} - (no file)
BHO-{6729B839-9527-4695-9D74-69E4F2543814} - (no file)
BHO-{67493E8D-A42C-4412-9B8C-CA12F916A953} - (no file)
BHO-{67D6093C-E22A-422E-9681-1A584FB6AE8F} - (no file)
BHO-{6844EBE3-35DB-4E79-B4C5-E2965C9EA277} - (no file)
BHO-{68C7C3E0-D240-4E72-B515-980A4B7FB298} - (no file)
BHO-{696B8831-73D5-4B67-945E-16892343615E} - (no file)
BHO-{69BECD6E-7EA1-471A-95D7-DC12E085AD82} - (no file)
BHO-{6A190E96-5B3F-4963-BB37-4039A3200244} - (no file)
BHO-{6A833C5B-A92F-4A69-B235-93E82A632FFC} - (no file)
BHO-{6A8DF97E-386E-40D7-8824-C64ADD341A17} - (no file)
BHO-{6B55437E-9505-49D6-9664-303EB84399A1} - (no file)
BHO-{6B745B2C-43A1-488F-B470-1E73C9556B51} - (no file)
BHO-{6BEFB61D-029B-4DF9-A061-FACBCA74248E} - (no file)
BHO-{6BF4AD3D-F547-4488-BF09-22F1FF3F42CA} - (no file)
BHO-{6C4FA81B-5111-455F-B8AA-221451F408A6} - (no file)
BHO-{6C9CBFBE-C894-4182-97F8-8E327346DC82} - (no file)
BHO-{6CD0F7DD-AFEF-458E-BF88-3C2071EF8094} - (no file)
BHO-{6CE27669-E4D4-4187-B7BF-FC9784E3AFDE} - (no file)
BHO-{6CF3F5DF-B666-49F9-A868-7557B84035B1} - (no file)
BHO-{6CFB84BD-2DBE-4A85-A3DA-0504D5CB08C9} - (no file)
BHO-{6D684024-0825-4D6B-8986-F189643FE278} - (no file)
BHO-{6D69304C-FB00-467E-A574-B8E8E0C5235D} - (no file)
BHO-{6E6692AE-D6E7-461A-9F53-CB7397911E12} - (no file)
BHO-{6E724606-33EF-4236-82B7-061761358274} - (no file)
BHO-{6EB46CD7-9CD3-41D8-8A13-1D21FDBCE838} - (no file)
BHO-{6F3A5E1B-CD44-44CD-8A85-B70CA2F22802} - (no file)
BHO-{6FCC461D-B390-4841-9F83-8A4D449538A5} - (no file)
BHO-{6FD33154-5CB9-496B-A1CE-F8E52F4EA848} - (no file)
BHO-{6FF428A7-27E0-4D10-9923-D2C8C8EE9B7C} - (no file)
BHO-{70311520-9377-44E6-A8C7-F5D6787C664F} - (no file)
BHO-{70AD4975-B8F3-448A-BD84-A8465F2F630E} - (no file)
BHO-{70C3E891-2C13-4048-8E65-5E0409D48373} - (no file)
BHO-{714EC700-B17A-457D-9F1A-73CD541D4F6D} - (no file)
BHO-{7152D6FF-8C08-4B0E-93A5-7CA4D0D1EDA8} - (no file)
BHO-{71579CD4-68A3-4D1E-A39F-7E870A84B782} - C:\WINDOWS\system32\geBUMcde.dll
BHO-{719EDDAA-A04A-4F40-A1CF-78183F3200EA} - (no file)
BHO-{71C9E49A-7BE3-45AA-A08E-1DE39873B141} - (no file)
BHO-{71E06A68-61BE-4851-B26B-604C4ACC413C} - (no file)
BHO-{71EA595A-53AB-49DC-824E-BB96EE02978D} - (no file)
BHO-{722EC5B7-1B09-4812-B63A-409C6DF0DAEB} - (no file)
BHO-{723A3636-270A-4F24-842A-DE8342E4759E} - (no file)
BHO-{7283FE8E-956A-4C95-9155-FDED3F037DAC} - (no file)
BHO-{728DA1EF-E322-4E08-836F-83C7C7164F42} - (no file)
BHO-{729F676E-AC28-4CC3-A1F0-1FCFF3C960E3} - (no file)
BHO-{72F71D39-02C9-4466-8898-9830F73077B4} - (no file)
BHO-{73017714-D38C-4AD3-9F6D-1622750D2CB7} - (no file)
BHO-{734C3CA6-63A5-46D2-AE5F-E44C09F1D2C0} - (no file)
BHO-{736D6E25-531C-4444-A7C8-5F5649534517} - (no file)
BHO-{739A31E3-29BE-45A6-80E4-50AE2FCC538E} - (no file)
BHO-{742324FF-F254-4674-B63A-1D4B1DB102A7} - (no file)
BHO-{74428332-61B0-4CB6-8376-606B9DA7DDFA} - (no file)
BHO-{74CD57D5-5661-43CA-B24D-F29FF34C99F6} - (no file)
BHO-{750764C2-29E3-45AD-8D38-755DD60E6A1D} - (no file)
BHO-{75309127-12C1-460C-A822-D023DDBE56FB} - (no file)
BHO-{760F4FB5-A62B-47D6-B404-47344DCBCC08} - (no file)
BHO-{7642E2EA-13B8-4067-9F3E-B8970C2E24D4} - (no file)
BHO-{7689AFFF-FF97-4AFD-AE3B-B0D7BD43E4C9} - (no file)
BHO-{76A0D4F9-7986-45BD-BE46-B01193D948EA} - (no file)
BHO-{76E27EEB-22DB-4630-ABDC-DE886EF06051} - (no file)
BHO-{7721C777-918A-4BDD-BF5B-0FA238E8A39A} - (no file)
BHO-{77AF45C7-5A88-4E5C-9212-DDBC4ECB6CA0} - (no file)
BHO-{77BA0091-857B-4573-AFA4-33A852FC0144} - (no file)
BHO-{78638DFE-F44C-4977-90EA-8172106D7332} - (no file)
BHO-{787618E5-D806-490B-B88E-6D7FAB7CDE8D} - (no file)
BHO-{798DA62C-3397-4CAE-91BD-BEEB8A6CEB65} - (no file)
BHO-{7A1A2334-DA0B-473B-A85B-20F0BDBB8177} - (no file)
BHO-{7A1F5841-2BCA-4BD2-ABB0-A9D0A1866F50} - (no file)
BHO-{7A37C25A-E1BF-4768-9873-02F2B0CEF2B6} - (no file)
BHO-{7A403845-99FE-4012-8675-8DAC0BA8AA84} - (no file)
BHO-{7A998F2F-5421-400A-B1A3-802E8702B5A2} - (no file)
BHO-{7AD2124B-AEED-44F5-AD74-CBB0711C62EB} - (no file)
BHO-{7AE6E634-B29F-4F89-9371-F37E8548F580} - (no file)
BHO-{7B28CED1-D574-4B89-9A2D-9F0CF9EF0F0B} - (no file)
BHO-{7B5C0185-DE72-4CB6-A127-5C8DD206E693} - (no file)
BHO-{7B8A7B8C-EF19-4F9C-B754-DF4E142481B6} - (no file)
BHO-{7BB83768-600F-4D20-A491-B85F4594B870} - (no file)
BHO-{7BE28A3E-17E3-4A70-A2EB-5E6C39569744} - (no file)
BHO-{7C5EB2F9-2013-4869-8803-159A90F237B5} - (no file)
BHO-{7CCFF8D5-BD13-4949-A4D9-CA3583110A94} - (no file)
BHO-{7D4A5EF0-8AFB-4B49-A3B0-74DB9B1B4F0F} - (no file)
BHO-{7E432EAC-CC0C-41C1-9437-E77D7E36187A} - (no file)
BHO-{7F68BC4D-05FA-4B52-8BEE-DB43E75857B5} - (no file)
BHO-{7F75D61A-B82B-46A8-8064-497FE0BF288F} - (no file)
BHO-{7FEBC69C-E0AC-458B-880A-ED7E2F4A8C30} - (no file)
BHO-{8016A4FB-169E-4892-BF40-82F710FC3A95} - (no file)
BHO-{806D204B-78C1-4429-BE2A-DC1BAAFBFF39} - (no file)
BHO-{80BA9D67-7D14-4D5E-AEAB-F860E4C49639} - (no file)
BHO-{80CF4DAB-CC1C-45BF-A49D-F6FB9FDD4D63} - (no file)
BHO-{80F7C615-D8FD-46B5-BB10-CC695A062448} - (no file)
BHO-{8102F76B-FEFB-4C51-80D2-49AAA93D165E} - (no file)
BHO-{811C127F-2443-4DA8-94FA-3882AAC30B30} - (no file)
BHO-{812B1E99-A42B-4A65-BFD5-C26CD359B8D4} - (no file)
BHO-{81AFDF52-5470-428D-B79C-06D890FE3D28} - (no file)
BHO-{81C96B63-96CC-45EB-BFF6-512BF01DA6E2} - (no file)
BHO-{8208FE4B-1903-4C06-8060-403AF3EA9597} - (no file)
BHO-{8215A8EB-423F-438C-8957-98E6E8055031} - (no file)
BHO-{82B269E7-2BAC-4E68-8FAC-79870ADD690B} - (no file)
BHO-{82CF3F1B-0618-4C8D-8AAF-EA9089B21683} - (no file)
BHO-{82F38807-761E-45C5-B9C8-8DC09CD28512} - (no file)
BHO-{83AC40FF-4E21-4BA4-969A-4FCC1505CF4A} - (no file)
BHO-{83C34FF5-3D52-42EC-AD48-D48184DBD090} - (no file)
BHO-{841401A5-2E4D-4A74-B512-4677330F5EAE} - (no file)
BHO-{845D506B-DF10-48CE-AF89-C45E3B9BD0C3} - (no file)
BHO-{84E9359E-B0DF-421B-AA20-512A957E2AEE} - (no file)
BHO-{8582C384-6478-462F-8FB4-22F17FAB0E83} - (no file)
BHO-{867F2936-D363-4DA6-83FF-31024B0FDB89} - (no file)
BHO-{8682988C-9D19-4748-B613-C8A5CAD2EB46} - (no file)
BHO-{86E32F5A-E44B-49BC-B9C3-4BDAB5D01893} - (no file)
BHO-{8762DEAC-82DB-4C2C-9441-3D1A1B75D0F2} - (no file)
BHO-{87BAE2E7-9CEF-41F7-9446-DDB4266AC9D7} - (no file)
BHO-{87D181AA-81DE-4F0E-A9E6-F4F415143DF4} - (no file)
BHO-{88B7318E-CED8-4242-BADA-6A1E47E7454D} - (no file)
BHO-{891F127D-A9B0-4ADB-B75C-86A19803A207} - (no file)
BHO-{893B780D-04CD-4C72-B07A-55A15ECCD709} - (no file)
BHO-{8977896D-8B02-4A33-88F0-D85908B8C393} - (no file)
BHO-{89A333C2-F7FA-40EA-92B5-214D0FF785BC} - (no file)
BHO-{89AA9AB1-7B5A-4374-BBAA-620D1C0633BE} - (no file)
BHO-{8A9F207D-A52F-44BA-B30E-A1700A8E5015} - (no file)
BHO-{8ABFC3F3-C880-41B2-B6B5-901C907F3500} - (no file)
BHO-{8AEE7C81-022E-470A-8FC7-082427B552EA} - (no file)
BHO-{8B02411A-460C-419F-9D23-94AFA63269AC} - (no file)
BHO-{8B0E87AA-BA31-47D6-BD63-AEAD4EEDB8AF} - (no file)
BHO-{8B38F0BE-7F8A-43A2-88CD-43F603D05475} - (no file)
BHO-{8C0ECB23-A9EE-4382-8CF1-5AB4C56350B1} - (no file)
BHO-{8C14CDB7-DEB1-4D61-A783-DBCCB7D8E22F} - (no file)
BHO-{8C1F6F5D-2D77-47BE-ADB0-CBE92CC9420D} - (no file)
BHO-{8C6AE22C-DDA0-4F89-8DDE-5212711C3D7E} - (no file)
BHO-{8D0AC979-AC83-4A9F-BC78-B957832C00B4} - (no file)
BHO-{8D470903-26B2-4836-B96F-B4601FBB5DB6} - (no file)
BHO-{8D9A8C1E-9456-47D1-BD00-C3F0CB14098E} - (no file)
BHO-{8DDE2738-5630-4A54-A0B0-DF0059CC7A7C} - (no file)
BHO-{8E24D93B-03C9-4F93-A3CD-B0DD2C2230A7} - (no file)
BHO-{8E41E04B-EC9B-4649-BE31-B321320244CB} - (no file)
BHO-{8F07DE08-F910-4379-90A6-9E1AA2514C50} - (no file)
BHO-{8F0F760E-E97D-4F46-AF90-35256EE17847} - (no file)
BHO-{8F5C42E8-B734-4C07-83E2-E414C57956A3} - (no file)
BHO-{8F8588A1-272B-46E1-A245-3FAD066C44F1} - (no file)
BHO-{8FFC87BC-AE0C-4D5B-B7AC-D87015502897} - (no file)
BHO-{9020BC02-5C1B-4B90-8BF4-820FECF1B49F} - (no file)
BHO-{903B832D-172C-4ACA-B4AC-49DD48EDA3CB} - (no file)
BHO-{90CEFDC4-2832-46B2-8B7D-395D0FC7507E} - (no file)
BHO-{90E0D474-91DE-4699-96EC-2D9F206208D2} - (no file)
BHO-{90F68A85-3AFC-4D41-93A1-7E197BFB1CE6} - (no file)
BHO-{90FC49C2-2368-427D-B7FC-D2A9E2A6E0C0} - (no file)
BHO-{91199904-2D4C-41F4-A6E9-F5B420CB8E2F} - (no file)
BHO-{91ED0ED8-5B33-43D3-84B3-B78C325850A8} - (no file)
BHO-{92084015-9E6E-423D-9E28-BA3FD2637B54} - (no file)
BHO-{93118EAF-0693-40E3-8711-9F7711C42FBF} - (no file)
BHO-{93AD9219-0CAE-41D0-B586-7F9116E9D18A} - (no file)
BHO-{94209FC6-EDAF-448E-9008-57C6D51E8068} - (no file)
BHO-{9470A8BC-D2B2-48C0-B522-BCA198DC9D90} - (no file)
BHO-{9497FE9B-AA10-4546-855A-3F3A17E7DE45} - (no file)
BHO-{94C29250-69E1-4D0F-A3C0-2F184C59FB26} - (no file)
BHO-{94D42AF0-2E74-4F1A-89F4-6D155C7E215A} - (no file)
BHO-{95273CCE-CFAC-4BE6-A7D8-55ECCE95FDDD} - (no file)
BHO-{95755F35-1BCC-45B9-9E5E-FDCC4B9645D5} - (no file)
BHO-{962BBE46-1501-4F60-99A8-1192C6604CF5} - (no file)
BHO-{96CC4B75-D9E4-435E-8802-4A5086750197} - (no file)
BHO-{96F771C8-BCD7-4775-A137-B0F68F170D5A} - (no file)
BHO-{973D4907-39F7-4ACE-8B42-AFE7B382F6F2} - (no file)
BHO-{975B3484-F1F7-4023-BB85-23D65ED9E3C5} - (no file)
BHO-{97A6CEED-4552-436D-8E5E-6C59ED2CDFF8} - (no file)
BHO-{97A8B525-8D7C-4487-B510-E7C90AC26707} - (no file)
BHO-{99094D68-928A-4127-858D-A6E8956BE362} - (no file)
BHO-{99465E2B-17B6-4D90-94E9-8FB6B2EE3C7F} - (no file)
BHO-{99D8720B-550D-4102-853D-8D6BBCC8E39D} - (no file)
BHO-{99F9B4B6-B924-4A82-ABEB-0BCD811B138D} - (no file)
BHO-{9A392FA0-D986-4AB3-8B4D-1393181A2567} - (no file)
BHO-{9A6D1278-2EA2-488A-990D-959208FA7D53} - (no file)
BHO-{9A9AA8E9-BFC6-4C25-BBFC-F67E64F10B98} - (no file)
BHO-{9AB20671-5590-4AF6-9370-DBFDA27F30CD} - (no file)
BHO-{9AD7EAB9-88B9-4281-861E-D83BAB20B46B} - (no file)
BHO-{9B139EFC-0642-4E41-A1F5-5C8CF6834A5E} - (no file)
BHO-{9B2E8328-6CF3-4BB8-83A6-E2C90A5B6092} - (no file)
BHO-{9B826EAB-0717-4733-80FC-A7F14F0C340B} - (no file)
BHO-{9BBB7EE3-8566-46BF-9220-6AE45E42CBAF} - (no file)
BHO-{9C51FEEE-9DCB-46B8-99FD-B0A57D3A800E} - (no file)
BHO-{9C635DF4-7F58-42D5-B822-343CBE5E2FDB} - (no file)
BHO-{9C82CCD8-3D75-442B-835A-F46403A2BDD5} - (no file)
BHO-{9CEA619A-EAA5-4B2B-8353-7ABE62E695D6} - (no file)
BHO-{9D59171B-9F21-4A8A-B6B4-86ED787CB8D2} - (no file)
BHO-{9D5E76AF-757A-4C8D-A9C1-18932ACD5B7E} - (no file)
BHO-{9D7B77ED-7DD9-48BA-8293-9032EDCBA8DE} - (no file)
BHO-{9D7F746C-A343-42D8-8E22-A5BDB509EF7E} - (no file)
BHO-{9D85E483-300F-4256-80AC-40313FEE114D} - (no file)
BHO-{9DC51474-F856-499C-9D06-A0770FA97371} - (no file)
BHO-{9DE54543-7FD4-410E-961D-E7136BB34856} - (no file)
BHO-{9DE547E8-9351-4734-AC2E-2DCA8716893D} - (no file)
BHO-{9E12AC1E-2BA7-4263-A2B2-C6812C4D1CA2} - (no file)
BHO-{9E8970CC-8599-4DD1-AA6D-F949CAB29F64} - (no file)
BHO-{9E91EF7B-6846-45C3-A8AB-67CF7C900783} - C:\WINDOWS\system32\ljJbCuSk.dll
BHO-{9EA5976A-F10D-4BC5-A1E5-5FE62C1A156A} - (no file)
BHO-{9EEEEEB3-1FBD-4724-AB2F-3EC4A9585746} - (no file)
BHO-{9F8F4209-F2B7-4A4B-A6C1-52D64823C6DB} - (no file)
BHO-{9FE1796D-0098-4738-B69C-843E10A01010} - (no file)
BHO-{A00BF3EC-77D1-4E2B-B879-03A5B4A46253} - (no file)
BHO-{A08C12F0-E3FB-4649-B20A-84E71921941F} - (no file)
BHO-{A0CFEAE0-18AC-481D-B5BE-FE25E9EA53DA} - (no file)
BHO-{A169F6A8-31B7-4C8E-9BB3-49AADBA1F4B3} - (no file)
BHO-{A2429483-9FF5-4A00-B399-49CC844469D4} - (no file)
BHO-{A2647248-1F84-416B-80D5-AE0D4BED67C6} - (no file)
BHO-{A27ED670-3B95-47EF-ADD5-9E51EC453B97} - (no file)
BHO-{A2A14B8C-7861-4690-8660-2F59FABF4201} - (no file)
BHO-{A2E99269-DDA6-4B88-BA31-1609C0132E4C} - (no file)
BHO-{A319F080-A004-4576-BE35-FDD64D4C0F83} - (no file)
BHO-{A35C65BA-F61D-411C-A0EC-F0C771CC8335} - (no file)
BHO-{A3DD8934-9F0E-406B-B438-9E2D37CEAE4A} - (no file)
BHO-{A4387078-BCFC-4FAD-AB93-F7739CDF0EE6} - (no file)
BHO-{A49878CE-C099-466D-9629-DFFCB35747B0} - (no file)
BHO-{A49CADA0-2F73-4B6B-BB5C-FE1237623C1F} - (no file)
BHO-{A518A893-45B8-4DB8-B12E-4BD31AD6009A} - (no file)
BHO-{A589E071-9BB7-4D54-B770-9B8C74F3D340} - (no file)
BHO-{A5AADFEE-E7B5-45B9-8DBC-F8690CEE8C48} - (no file)
BHO-{A5FAE013-C384-4548-8ED7-E0387E76BDF1} - (no file)
BHO-{A5FEA7CE-6503-4A1F-B129-3B06C34DE0E9} - (no file)
BHO-{A628EAD4-2E62-4715-98A8-B39924C9BBEE} - (no file)
BHO-{A69C5309-FD9F-40C7-A3D2-1351A3BBE0FB} - (no file)
BHO-{A6A94D24-4F44-4B55-B56B-76BC095512F7} - (no file)
BHO-{A775AC68-AD34-4BD5-877D-8D696BFA6327} - (no file)
BHO-{A78C0A65-42AA-4135-8A27-8C5B2B53E367} - (no file)
BHO-{A7C2891E-6F9C-4744-8617-3DE37E2DA733} - (no file)
BHO-{A7EE7165-7FB2-4978-A0BB-5EA79D300D0F} - (no file)
BHO-{A8AD5D2F-7112-4B18-9525-FDB0F9249270} - (no file)
BHO-{A94446AB-341B-4AEC-BF78-D98AE22892A9} - (no file)
BHO-{A9D44AD3-4C83-435A-8472-882B737DBF29} - (no file)
BHO-{AA089785-222A-4B0C-B5FA-347CC0585300} - (no file)
BHO-{AA17E4AF-5E4A-4EFF-BD1E-BA7F76C0E449} - (no file)
BHO-{AA4E8C52-20C4-4EBF-A1C7-6F85D22947F4} - (no file)
BHO-{AAF3A016-EAC1-4EAD-822D-77AA3532D431} - (no file)
BHO-{AB72EDE2-D144-4D86-87D7-CBF484CE720D} - (no file)
BHO-{AB798E54-2877-4278-B3E7-59DCBB1CC621} - (no file)
BHO-{ABB6DBDB-1507-41D7-96E5-7821689C9911} - (no file)
BHO-{ABD0AB39-B717-41B2-B6F3-E72A1CA2302B} - (no file)
BHO-{AC80686D-BEDD-4BFA-A193-1BD511CE7762} - (no file)
BHO-{ACF49566-B899-41FE-B4A9-6F5187BB3C4C} - (no file)
BHO-{ACFF7A61-2966-4477-9C73-ECA07128F168} - (no file)
BHO-{AD23EDA8-33B7-4959-9061-2D9B57233848} - (no file)
BHO-{ADD74A50-EE50-4309-8B50-236C6136583D} - (no file)
BHO-{ADEF086D-3CB1-4368-83BF-1AA6D72EA0D2} - (no file)
BHO-{AE046088-7FF0-41DD-9D8C-4090EBD7384C} - (no file)
BHO-{AE5613D6-23D0-4942-B24D-AA614D3964B1} - (no file)
BHO-{AE941CCB-112D-4B3A-828C-AD453F0B63A2} - (no file)
BHO-{AECA50F4-77DC-4904-AC3E-F43EED7C42A9} - (no file)
BHO-{B062020A-BF60-42EE-BAEE-F1A13481A936} - (no file)
BHO-{B08B0564-5273-48FA-8CD3-04E9BCCD545E} - (no file)
BHO-{B0BFF480-2CFE-40E6-BD9E-D0732D3BC613} - (no file)
BHO-{B110DC4D-99E9-4C68-BC9F-64C1EC708A2C} - (no file)
BHO-{B155772C-2704-44B4-90F3-25162BD1E898} - (no file)
BHO-{B182422C-C474-4FE9-B036-6FFFA09C6032} - (no file)
BHO-{B2184BCC-84D2-4123-B2A7-0A7C6207B3BF} - (no file)
BHO-{B28759FD-B992-471E-B0BB-C874EDE2D403} - (no file)
BHO-{B2D62E25-0905-4715-8768-2693C97667E3} - (no file)
BHO-{B339870A-F3EC-4BF5-B721-FF882A92E3BC} - (no file)
BHO-{B33F0EB5-1ED7-4BBB-8F8D-A7AE4506446A} - (no file)
BHO-{B34372DB-7083-4082-BF7A-73EF6F5B8F7F} - (no file)
BHO-{B39E935D-09FE-4986-BC3B-2C3A5ECD2A15} - (no file)
BHO-{B3C11E83-B595-4FB2-A452-B58031D7A6F3} - (no file)
BHO-{B4988560-4E3D-412B-8703-14D66CE0EB34} - (no file)
BHO-{B49BF82B-8146-433F-A449-7315CD04C797} - (no file)
BHO-{B4AE8124-470D-4376-A310-9440D0AB2752} - (no file)
BHO-{B4B4BA3E-736F-4D11-9B6A-2361A5C509D7} - (no file)
BHO-{B4B82D85-0357-4394-B5E1-4EA1EC2E4CC4} - (no file)
BHO-{B60AB11F-A201-40C1-ACE6-205967657B8C} - (no file)
BHO-{B6645A0E-B15F-46ED-A0E8-00F2E2B6ABCC} - (no file)
BHO-{B6723524-FC7B-4567-BB2E-F42A114A6A95} - (no file)
BHO-{B6F349A0-CD4D-4EB1-BC62-5F23BB34DFE6} - (no file)
BHO-{B723C336-64DD-47C1-B8E2-8EED6A4F18C9} - (no file)
BHO-{B78FC9E4-0636-4404-81B2-597CCE66CF34} - (no file)
BHO-{B7AF7F87-A965-4B41-B99E-DD3A645FB533} - (no file)
BHO-{B7D4004D-6442-4D8B-B2D3-B0C1BAF1A09C} - (no file)
BHO-{B8154819-EE9E-4BD4-97C4-697CB202A7FC} - (no file)
BHO-{B88168F8-A142-4591-B104-FE398DA8C9F3} - (no file)
BHO-{B8BDDC72-2A3D-449C-A8A3-6CA5D244E205} - (no file)
BHO-{B9344F8A-9577-4DE2-895A-D34BA57A6617} - (no file)
BHO-{B951B6EB-396E-4082-B6D4-16C4939AA781} - (no file)
BHO-{B9B85099-D55A-4E5B-A707-135EB82FBEB8} - (no file)
BHO-{B9CE175B-AAFA-48DC-84C4-B48E4797697F} - (no file)
BHO-{BA063D88-E3D7-4294-8088-5EB365409888} - (no file)
BHO-{BA2B40EC-30B7-4FF6-B628-5A3E73C97B5B} - (no file)
BHO-{BAB86966-264A-41DF-919B-E445AF3B08CC} - (no file)
BHO-{BADCF53D-8374-47CD-BC68-21CEB8F386E7} - (no file)
BHO-{BAF994C5-3BE6-44CD-B7E3-2213DAD6A6D2} - (no file)
BHO-{BB1FB2AC-E94E-4F36-AEF9-6E59DC431E91} - (no file)
BHO-{BB62DA6F-FC71-4128-9388-BD9FE247FCF1} - (no file)
BHO-{BBA79158-C5F5-40CD-B657-9A2E4F79B17B} - (no file)
BHO-{BBC7D0B8-5536-4624-9018-A44408275212} - (no file)
BHO-{BC76F4B3-63B8-408A-8613-7C1611A65B81} - (no file)
BHO-{BCECFD7D-A369-4706-B7B1-ECEB72EB107A} - (no file)
BHO-{BD1F0EC5-8587-47B6-8257-EA94C2562922} - (no file)
BHO-{BD793E3D-EDE3-46E5-97F2-EFF4D9F67476} - (no file)
BHO-{BDA3D655-3B59-4D30-B4E3-D3C47AC74372} - (no file)
BHO-{BDBB362C-E53B-459D-8D58-DC6B480DE64E} - (no file)
BHO-{BDC9837D-A5CC-42C9-A3DD-817EB864FB16} - (no file)
BHO-{BE09381B-12D7-4731-A21F-33E696871A51} - (no file)
BHO-{BE2D2B9D-CEAC-470F-B971-15D60676A69A} - (no file)
BHO-{BE5FCA59-9B4F-40B4-B933-43F1064C8140} - (no file)
BHO-{BEE35A92-18F3-4C28-BDA7-213B2E50EC8F} - (no file)
BHO-{BF202931-0CB1-4E70-8D11-C1EE281BD305} - (no file)
BHO-{BF5D76BB-013D-4D56-B4B9-77089A79E8A1} - (no file)
BHO-{BFA6AC07-F30D-4B9B-B39A-0177DA75F3C3} - (no file)
BHO-{C0468CAA-7056-4ABE-852F-B63B78426396} - (no file)
BHO-{C06B9489-9881-4A36-8843-82F5DFD6BD12} - (no file)
BHO-{C0CD25D9-D48B-4CD3-9945-DE4F6A255D7D} - (no file)
BHO-{C0F3AB3D-764E-46B9-BF09-76A758369597} - (no file)
BHO-{C168D5DC-6764-40D6-887D-0A08D8DAA01D} - (no file)
BHO-{C1D0DCF5-8A43-431A-B008-1A4AAB60A99B} - (no file)
BHO-{C1E184AF-DF74-40BA-98EE-E26D75FB65A7} - (no file)
BHO-{C1E62920-A9DA-4F02-B7F9-7E1C7D35CB86} - (no file)
BHO-{C21BFD33-1277-418D-931A-634A1E7272B2} - (no file)
BHO-{C29A1142-080C-4B89-A864-8D32B94275B2} - (no file)
BHO-{C2ABCFD4-7EB6-4A12-B6C5-6450B57B9990} - (no file)
BHO-{C3F22E2C-165B-4E24-8391-FE9065335247} - (no file)
BHO-{C43667D3-EFE2-4EEE-857D-BCAC8F96AFEA} - (no file)
BHO-{C477DA2C-3C97-4CCB-BFC9-3AA0004FC029} - (no file)
BHO-{C487954B-03A7-449A-A38E-6A4C89384A10} - (no file)
BHO-{C4A4F78D-6423-4239-9228-C932810E4305} - (no file)
BHO-{C6238F17-5A98-4B3D-B199-2DA105C778D5} - (no file)
BHO-{C6714B7A-9764-4529-98FC-3AD9DA4A5DA3} - (no file)
BHO-{C68F1AD3-7D88-437F-9802-0050ABB27143} - (no file)
BHO-{C6AD1780-02F9-4DD3-9BBA-D158A62B87C4} - (no file)
BHO-{C6DFCDED-D2B0-40FD-9E7B-B0ECA0FE6224} - (no file)
BHO-{C6F697D4-9537-4F87-97FA-4584D7369D96} - (no file)
BHO-{C75B2592-3076-4508-97A5-B9DE5D2F51CF} - (no file)
BHO-{C77BC2F3-EC33-4C2A-B31C-F6D24E4ADB78} - (no file)
BHO-{C7832808-33A9-415B-BA0F-C8C42A8BFD14} - (no file)
BHO-{C84FF11A-EC57-4C9A-9C4E-197073E6BC0A} - (no file)
BHO-{C871E406-2CFF-42E0-B313-4C05176E2883} - (no file)
BHO-{C94B1AB4-A32A-47B0-8141-CFA4A81CC7C5} - (no file)
BHO-{C969D0F9-E3D8-47C9-9E6F-B7BC295AFD47} - (no file)
BHO-{C9EE9008-B0AB-4D8B-AD77-9D6907728711} - (no file)
BHO-{CAC3C610-F158-4F79-B696-28CA369A38E0} - (no file)
BHO-{CB30C97A-DBFB-43E7-A8F7-2AC0621D5E6A} - (no file)
BHO-{CB382B37-C9B9-41A3-8A31-1DDB4C01B27D} - (no file)
BHO-{CB3B8FFB-667F-4C43-8FCE-FEC8E12A6A77} - (no file)
BHO-{CB834CBE-72EA-4AFA-8112-E7EBC375DFA6} - (no file)
BHO-{CBDD1EEF-BE28-4169-B712-2B91FF56EAC4} - (no file)
BHO-{CC0786BB-BEE2-4611-B46D-053996285204} - (no file)
BHO-{CC0BB46B-AF9D-45C5-947D-2F48247A9847} - (no file)
BHO-{CC7B0353-F485-46A0-9558-50B7963BCFBD} - (no file)
BHO-{CD26E7B2-B49C-45DD-8327-9DD8003FA536} - (no file)
BHO-{CD346E76-0633-4213-8D1F-755A044F9F55} - (no file)
BHO-{CDD9E3FA-D28E-4CC1-AFFD-A2F4B8D1BEC3} - (no file)
BHO-{CE701BD5-574B-439E-9E54-207A10EC88C8} - (no file)
BHO-{CE9A78E3-F02E-48A2-A6E5-0CFBAE0BCD0D} - (no file)
BHO-{CEACB0E5-ADD2-4679-BB42-0A002884C14B} - (no file)
BHO-{CEB2DD4D-F74A-427A-B2BE-EC7964540797} - (no file)
BHO-{CEE26133-E715-4B31-82FC-ECA30EFF6320} - (no file)
BHO-{CF11E31E-FAE3-464E-B096-72CDA1A9F203} - (no file)
BHO-{CF166E42-85EF-4E0A-AA45-53B5BEC5BA6E} - (no file)
BHO-{CF8757EF-7D0A-42E3-B932-5C4279D3639C} - (no file)
BHO-{CFDE9707-608F-4ECA-82DB-084833B7DA21} - (no file)
BHO-{D058BEBF-D02C-4691-9F0D-A96CF1117827} - (no file)
BHO-{D072793B-0D42-433A-864F-05CA48FBED67} - (no file)
BHO-{D0C56684-75D9-497D-B128-E6CC58F09748} - (no file)
BHO-{D0C6DD0E-A7F7-4506-83EF-111A5CF5FD97} - (no file)
BHO-{D0CAB3CD-CD49-455F-B02D-0F6799BB8C91} - (no file)
BHO-{D0D53462-30DF-4C59-A0A8-EC05B5DCA540} - (no file)
BHO-{D10F4868-71C6-42C1-83C7-F5C589EBFA4C} - (no file)
BHO-{D155D2C6-9D9F-4267-A680-1B6451EC6113} - (no file)
BHO-{D1F274C2-810D-430B-A5E4-AC790A9B5E1E} - (no file)
BHO-{D213CDAF-98AA-4D28-815E-D030D651FE41} - (no file)
BHO-{D21F1370-3958-4E5D-8133-8F3E6B469A62} - (no file)
BHO-{D233559E-32EE-4775-BAC1-928ED0BAA964} - (no file)
BHO-{D233FBF0-1C67-463D-9FDA-786BDE68AE46} - (no file)
BHO-{D28EE266-F94D-478C-B749-584972EBB86B} - (no file)
BHO-{D29BEB15-97E5-45A8-9975-B24425D36F47} - (no file)
BHO-{D2A51942-4637-482A-BF9D-5D1F3299D060} - (no file)
BHO-{D31695D1-1D8B-4C8E-81E4-5152BD1598CF} - (no file)
BHO-{D317D627-DE13-4A62-97B3-EAA01C416F17} - (no file)
BHO-{D345C32B-B8DA-4C6F-940E-8072EEF43BEA} - (no file)
BHO-{D355FB1C-448B-4B96-8170-56392B959839} - (no file)
BHO-{D3637369-5529-4D5B-BA0A-567FEC37DC6C} - (no file)
BHO-{D36F7E0A-0060-4550-BA5D-6BFFD21EA530} - (no file)
BHO-{D3A9615C-EE0F-4573-9275-6EC49BEC7496} - (no file)
BHO-{D3D1B324-801C-465D-A028-E82DE3FE1975} - (no file)
BHO-{D48EDF38-4817-4433-B7E7-6FD4EBD46569} - (no file)
BHO-{D4DEE9BB-FAF0-4A23-BA67-14BF12731941} - (no file)
BHO-{D501ACFA-F077-4B14-A924-BD42D35B3D4E} - (no file)
BHO-{D50E1386-D0F1-4B6D-9AC5-81B75B930A02} - (no file)
BHO-{D5197645-A065-4F75-B6A8-62C7DB371F62} - (no file)
BHO-{D5641CC9-FF99-40D0-A38E-E1B5A980B77E} - (no file)
BHO-{D61DB6AE-83BF-4D5F-A7A5-DAF616AC254A} - (no file)
BHO-{D633C9DB-2E00-48C1-A518-24F789813AAE} - (no file)
BHO-{D65DEE58-578E-4D65-A106-EB68077F8294} - (no file)
BHO-{D6CEFF67-B46E-4D6B-9BA1-A4EAD6F572AA} - (no file)
BHO-{D71D5F4E-232F-49C5-836D-002EDB5F7155} - (no file)
BHO-{D7636A63-18E3-4AEA-987C-7E9B4D06AC43} - (no file)
BHO-{D80FD2FC-9145-4E9A-9D63-32F25D788DA2} - (no file)
BHO-{D8409DDB-D7E4-499F-8AC4-AD7938B16C24} - (no file)
BHO-{D85097A4-929A-4847-BCDF-908694C5B25B} - (no file)
BHO-{D8B9AFAE-3A71-4C50-90CC-997CC9AC6F6C} - (no file)
BHO-{D8D8339F-CCFB-4D82-8496-AAFE9A325336} - (no file)
BHO-{D8F32073-25B7-4032-804C-84797A12A381} - (no file)
BHO-{D8F9AF3C-A5C5-45CC-8D62-5A99F33BF33A} - (no file)
BHO-{D9067232-46C9-49B0-867B-BC46D3975C62} - (no file)
BHO-{D91C318C-E05A-4BB9-9281-843E234DC96D} - (no file)
BHO-{D928B10C-C14D-4208-B16D-207F46509662} - (no file)
BHO-{D9BDDCD9-35A0-46FF-B654-0EDC66B73F10} - (no file)
BHO-{D9C8FF48-2203-4DCE-8ECF-C13EB211E5B8} - (no file)
BHO-{DAD77931-0CAA-4651-8D12-9F148A4DB506} - (no file)
BHO-{DB6B344D-A0CC-4A8E-AF8D-DADB78A00630} - (no file)
BHO-{DB9B804B-AE8E-4D32-9C65-09649B580A29} - (no file)
BHO-{DBF25792-EC80-41B7-B4FC-312DC76B50B6} - (no file)
BHO-{DC976777-7922-4E61-B18C-9492D4127155} - (no file)
BHO-{DCA10E20-707C-4877-AB3E-383425AA4CBD} - (no file)
BHO-{DCA87E6F-3C20-491E-9396-514332ADD023} - (no file)
BHO-{DCD73A03-EA96-43DC-BB57-FDA6EB19FC14} - (no file)
BHO-{DD491BDD-6760-427D-9062-75D438BA1406} - (no file)
BHO-{DDE621C3-D8D1-466C-970E-1730D231B881} - (no file)
BHO-{DE245D05-614A-4AAE-8997-21C54BD334F3} - (no file)
BHO-{DE34F599-9759-45E3-9294-D16F7031FD14} - (no file)
BHO-{DE42C209-A1B6-4025-B212-670EB3043BCA} - (no file)
BHO-{DE6FCB8C-893A-4FAA-8428-F7B13117F973} - (no file)
BHO-{DEE5FEC8-D763-4D29-B658-6CCBCCAE500E} - (no file)
BHO-{DF252F0F-EC33-466B-8A9A-6A9FEF87D56F} - (no file)
BHO-{DF29B6D0-2C27-4879-AA7A-F37F7390793D} - (no file)
BHO-{DF62E52F-FAC1-4E92-ADAD-9680CE2079BA} - (no file)
BHO-{DFD705EF-9FE3-4BD0-AA34-845AEC43F237} - (no file)
BHO-{E006C924-B059-4DB9-99B8-B90A471F7118} - (no file)
BHO-{E00D79CF-0329-4283-96F9-22B589959ED4} - (no file)
BHO-{E090EDA6-14EF-43B0-8450-57648B625F38} - (no file)
BHO-{E0B6A6E8-5238-4898-AA59-2F3803511CBB} - (no file)
BHO-{E1B9289C-66F7-42AA-B680-4B45B3F04C9F} - (no file)
BHO-{E1C06FC7-E67A-402A-9CB1-221145CB287D} - (no file)
BHO-{E1CB2680-98FC-443B-B4AA-6303719A248F} - (no file)
BHO-{E3A94929-2126-4B51-BE5D-2D9A7E5566EC} - (no file)
BHO-{E51D88FF-C766-4853-8C50-3614455E5E08} - (no file)
BHO-{E5621A80-5FC0-455C-BE1F-4AAE55039D46} - (no file)
BHO-{E671C2E8-2DA9-478F-ADBF-6BF616919A3C} - (no file)
BHO-{E695A6AB-27A7-459D-83CA-C79FE5604DC3} - (no file)
BHO-{E6AFF633-E3C0-4BC2-AD1E-330741CC1549} - (no file)
BHO-{E6B51710-D161-4F67-ADF4-0DD3886B2A3D} - (no file)
BHO-{E6CE920D-B88E-4F44-858D-2C8A1CC89598} - (no file)
BHO-{E713B922-4471-4FF1-8A46-8730DB9B4BDA} - (no file)
BHO-{E7733C34-64F8-40BC-B368-0A03E801F186} - (no file)
BHO-{E7B10651-AD6F-449C-8C10-1C851F991ACE} - (no file)
BHO-{E858675F-5E52-4FF1-82D2-97A4C5588558} - (no file)
BHO-{E897F340-613F-493C-AB8C-290F8A988386} - (no file)
BHO-{E8D1345D-4D8D-4D34-86E8-5D5F3DA8BC8B} - (no file)
BHO-{E914BAB8-2F53-4E03-B605-0344C9A153D0} - (no file)
BHO-{E91A37F4-A1A7-46FD-86FD-B7ED43F4045F} - (no file)
BHO-{E92B147C-3535-454D-A637-3CFEC17A292C} - (no file)
BHO-{E9384AA0-C382-4725-B633-851703F2DDDF} - (no file)
BHO-{E9C34110-F9ED-41E4-9EB3-6D73D6E615E9} - (no file)
BHO-{E9EF4104-6E5B-44A7-B0DC-BEC5724DB332} - (no file)
BHO-{E9F9FBB3-F1B7-47D7-8C54-3A8ACC2340D5} - (no file)
BHO-{EA83C179-DC8A-4C42-912B-46DA61F1DAE8} - (no file)
BHO-{EADD4C7B-69CB-4ED1-96EB-95D6D8FDB8BE} - (no file)
BHO-{EADECADB-7594-4D28-ACBD-1063CBD331F4} - (no file)
BHO-{EB30A84A-BBF7-4E7F-86C6-5A8FEAF548AC} - (no file)
BHO-{EB5E7461-E6AD-4323-8AE8-F8A3A2ED4C1A} - (no file)
BHO-{EBA8EAC6-F3C3-4E80-9B83-DC11ADD9E087} - (no file)
BHO-{EBE01E73-00B9-40A9-9B08-DA8BA339B287} - (no file)
BHO-{EC39457D-1CD4-433F-AC93-7E32D74513C5} - (no file)
BHO-{EC7EE12D-DF64-4A3F-ACCF-4BFC107D5FFB} - (no file)
BHO-{EC92F5D0-4D43-49E5-A0B8-157AEC91A744} - (no file)
BHO-{ECD6DDC2-0F90-4D55-8359-042A915FEC96} - (no file)
BHO-{ED30BEE0-89CF-411D-85D0-8C43468DACD8} - (no file)
BHO-{ED8846E3-9665-4929-A384-C8055C11DDA7} - (no file)
BHO-{EE3E5A7B-2549-4F90-94ED-B66FA4AF0CB6} - (no file)
BHO-{EE4021FA-62AB-46F3-9625-C9E03B50FEC9} - (no file)
BHO-{EE6E4FA9-37DE-4943-AC07-981D5FF48B62} - (no file)
BHO-{EE708305-9762-4C23-93C8-8BC6F0327E5C} - (no file)
BHO-{EE7B3578-AE0D-4982-9F63-FE18EB489707} - (no file)
BHO-{EF10AFE5-4051-4CD4-B301-D50C9469B4F5} - (no file)
BHO-{EF4B173A-DF7F-4B34-9B3C-28CA9415566D} - (no file)
BHO-{EF9BA7EF-E1A1-4A43-A05C-F108577DE28E} - (no file)
BHO-{EFAEEDB2-1CEA-450A-84F9-8AB78E692441} - (no file)
BHO-{EFB66F6E-49F9-4343-9247-EC1EB8D91427} - (no file)
BHO-{F01E0508-9E1A-4EE3-972A-0F0065E73633} - (no file)
BHO-{F0C02589-75FE-4639-BD10-D1747ACB1BCC} - (no file)
BHO-{F11E72FD-6485-4A51-B9B2-F11724029F10} - (no file)
BHO-{F14573EA-3599-44E8-B1D7-B2943C990DF1} - (no file)
BHO-{F1BB1C22-9D62-42C5-A485-1F46F46C8860} - (no file)
BHO-{F224D274-078D-49E3-A885-DA600CD46572} - (no file)
BHO-{F22DBB7A-2092-4265-BF80-440B7EE17394} - (no file)
BHO-{F37B8EA3-7C75-431A-B8AD-224AE938DEBB} - (no file)
BHO-{F3AA0AD6-A31F-451B-A59E-D0DEDEF69017} - (no file)
BHO-{F3C24C32-06F8-476C-B4AF-564EEDCB5DAD} - (no file)
BHO-{F416B72A-E557-4C05-BC62-D85060CA27FA} - (no file)
BHO-{F4387A1E-F16C-4830-822C-DAB26997D1B5} - (no file)
BHO-{F54EAD44-C87A-4850-B31A-AAC08673A478} - (no file)
BHO-{F64E8BD6-369C-47BA-A385-7296B21A9A23} - (no file)
BHO-{F719D949-728E-49D8-AE8F-6D0887506F4B} - (no file)
BHO-{F7E48DDA-3F88-49EF-B08B-9D8A77F2BA3C} - (no file)
BHO-{F8055F47-4116-4846-9B5C-0A2138B7C47A} - (no file)
BHO-{F857A155-07DF-4914-B54A-5BA873813DB8} - (no file)
BHO-{F863F19C-B0EF-48BC-BDAE-C75D793E4407} - (no file)
BHO-{F8E2C542-805B-4439-8137-F612A922D736} - (no file)
BHO-{F8F4121C-AA16-40B9-85CC-9FE372701D95} - (no file)
BHO-{F99E838A-F764-467F-BF20-DF54D6049A1A} - (no file)
BHO-{F9B157D6-06D3-441D-B1A0-77EAF65BC0FA} - (no file)
BHO-{FA7FE727-35CE-434E-B2CC-C86127A3A614} - (no file)
BHO-{FA94E2F6-63EF-4F1F-B8D9-A6F8584FF60E} - (no file)
BHO-{FB4B1C80-CDBF-4925-9DDE-7ADBC3615A38} - (no file)
BHO-{FB5CFC2C-DB9F-4884-873C-5987479A462E} - (no file)
BHO-{FB7BCDCA-6C29-4443-9D63-33E1662E153F} - (no file)
BHO-{FB816B0C-6B30-4FB0-A8B6-A95414EDB09A} - (no file)
BHO-{FBB42BF6-8560-484C-A2FD-A56ED40DD9E2} - (no file)
BHO-{FC979164-79C3-416C-97F3-D0A6CB6A1846} - (no file)
BHO-{FCB58321-AD6E-4C80-AFDB-1E49C127AB6D} - (no file)
BHO-{FCC583C8-1F96-449A-81B8-12A1439FEAA4} - (no file)
BHO-{FD2F9B87-6D87-4938-A819-2683DAA91882} - (no file)
BHO-{FD82E325-FD97-4FA1-B665-01898A2B0203} - (no file)
BHO-{FDB7C61E-F2D1-4919-B60C-EE6E3B33187A} - (no file)
BHO-{FDCF1995-DA7A-4CFA-BD93-8407CAB54035} - (no file)
BHO-{FDD279AE-AD0E-4F70-91E7-2702DFCEE72F} - (no file)
BHO-{FDF5D564-17A8-4A35-9962-AF030E5B864D} - (no file)
BHO-{FE4E5F9B-26A4-4433-9ABE-ADBB02F2E145} - (no file)
BHO-{FE77B42F-2408-4BE2-97B9-D1512F960D2C} - (no file)
BHO-{FEE6AAC9-E49D-46EB-B129-2A16CF9AF2C7} - (no file)
BHO-{FEF3FC5F-31D9-4A5C-8DF6-D0F9069AE052} - (no file)
BHO-{FF205210-4504-4A15-A02B-82754CB1D97B} - (no file)
BHO-{FFAD0AAD-9E2E-4FE0-AB56-D07E324CBE63} - (no file)
ShellExecuteHooks-{9E91EF7B-6846-45C3-A8AB-67CF7C900783} - C:\WINDOWS\system32\ljJbCuSk.dll


.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\eai_adm1\Application Data\Mozilla\Firefox\Profiles\62kh83r3.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE -
FF -: plugin - C:\Documents and Settings\eai_adm1\Local Settings\Application Data\Google\Update\1.2.131.11\npGoogleOneClick5.dll
FF -: plugin - C:\Program Files\DivX\DivX Content Uploader\npUpload.dll
FF -: plugin - C:\Program Files\Google\Google Updater\2.2.940.34809\npCIDetect11.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_07\bin\NPJava11.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_07\bin\NPJava12.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_07\bin\NPJava13.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_07\bin\NPJava14.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_07\bin\NPJava32.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_07\bin\NPJPI150_07.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_07\bin\NPOJI610.dll
FF -: plugin - C:\Program Files\Yahoo!\Shared\npYState.dll
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-13 17:34:17
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MQSeriesBrokerBROKER01]
"ImagePath"="C:\Program Files\IBM\MQSI\6.0\bin/bipservice.exe"

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MQSeriesBrokerConfigMgr]
"ImagePath"="C:\Program Files\IBM\MQSI\6.0\bin/bipservice.exe"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\tphklock.dll

PROCESS: C:\WINDOWS\system32\lsass.exe
-> C:\WINDOWS\system32\pwdmon.dll
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ibmpmsvc.exe
C:\Program Files\Aventail\Connect\as32svc.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\drivers\trcboot.exe
C:\Program Files\IBM\Personal Communications\PCS_AGNT.EXE
C:\Program Files\IBM\SQLLIB\BIN\db2dasrrm.exe
C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
C:\Program Files\IBM\SDP70Shared\AgentController\bin\TPTPProcessController.exe
C:\Program Files\IBM\tivoli\dcd\client\ISSI\_jvm\jre\bin\java.exe
C:\notes\ntmulti.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqmsrvn.exe
C:\Program Files\AT&T Network Client\NetCfgSv.EXE
C:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe
C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqzxma0.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqxssvn.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqxssvn.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqxssvn.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqzfuma.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqzmuc0.exe
C:\Program Files\IBM\SQLLIB\BIN\db2govds.exe
C:\Program Files\IBM\SQLLIB\BIN\db2jds.exe
C:\Program Files\IBM\SQLLIB\BIN\db2licd.exe
C:\PROGRA~1\IBM\SQLLIB\BIN\db2fmp.exe
C:\Program Files\IBM\SQLLIB\BIN\db2sec.exe
C:\Program Files\IBM\SQLLIB\BIN\db2rcmd.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqzmur0.exe
C:\WINDOWS\system32\drivers\ldlcserv.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqrrmfa.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqzdmaa.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqzmgr0.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqzlaa0.exe
C:\Program Files\IBM\WebSphere MQ\bin\runmqchi.exe
C:\Program Files\IBM\WebSphere MQ\bin\amqpcsea.exe
C:\Program Files\IBM\WebSphere MQ\bin\runmqlsr.exe
C:\WINDOWS\system32\rundll32.exe
.
**************************************************************************
.
Completion time: 2008-10-13 17:49:32 - machine was rebooted
ComboFix-quarantined-files.txt 2008-10-13 15:49:24

Pre-Run: 6,779,334,656 bytes free
Post-Run: 6,707,728,384 bytes free

1268

BC AdBot (Login to Remove)

 


#2 Tomk_

Tomk_

    Malware Eradicator


  • Malware Response Team
  • 686 posts
  • OFFLINE
  •  
  • Local time:04:44 PM

Posted 24 October 2008 - 12:11 AM

Hi anil.byalakere,

Welcome to Bleeping Computers

My name is Tomk_. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research, so please be patient and I'd be grateful if you would note the following:
  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.
  • Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, feel free to create a new one.
I apologize for the delay in response. We get overwhelmed at times but we are trying our best to keep up.
If you have since resolved the original problem you were having, we would appreciate your letting us know. If not, please post a new HijackThis log so that we can have a look at the current condition of your machine.
Posted Image

#3 Tomk_

Tomk_

    Malware Eradicator


  • Malware Response Team
  • 686 posts
  • OFFLINE
  •  
  • Local time:04:44 PM

Posted 28 October 2008 - 01:26 PM

Due to lack of response, this thread will now be closed.

If you are the topic starter and would like this topic reopened, please PM a staff member with a link to this thread and we will reopen it for you. Anyone else who needs assistance should begin a new topic.
Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users