Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virtumonde Removal


  • This topic is locked This topic is locked
8 replies to this topic

#1 Kitchen Hand

Kitchen Hand

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:38 PM

Posted 24 July 2009 - 04:55 PM

Thanks and stuff.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:53:21 PM, on 7/24/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trillian\trillian.exe
C:\WINDOWS\Integrator.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8081
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;*.local
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe, C:\Program Files\KGB\MPK.exeC:\WINDOWS\system32 \smss.exe,
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\opnkLdEU.dll
O2 - BHO: (no name) - {7b20628d-9eac-48fd-ae23-6059cf2cc251} - C:\WINDOWS\system32\AgCPanelSpanis.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [twan] C:\WINDOWS\system32\inetclnt\twan.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1222973289515
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/static/up...er_4.0.21.0.cab
O20 - Winlogon Notify: opnkLdEU - C:\WINDOWS\SYSTEM32\opnkLdEU.dll
O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Automatic Updates (wuauserv) - Unknown owner - C:\WINDOWS\

--
End of file - 5324 bytes

BC AdBot (Login to Remove)

 


#2 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 25 July 2009 - 11:08 AM

Hello, my name is fenzodahl512 and welcome to Bleeping Computer.. Please do the following....



Please download The Comedian.exe by Rorschach112 to your desktop
  • Please disable all of your antivirus/firewall before doing this step. Please visit HERE if you don't know how..
  • Double click the program to run it. It will only take around several minutes to run.
  • It will do a series of tasks and tell you when each one is finished.
  • You will be prompted to press any key after each step
  • When it is done it will close and exit itself automatically.
  • You can delete The_Comedian.exe once it is finished
STOP! if you can't complete this step.. Tell me more about it..




NEXT


Please download Malwarebytes' Anti-Malware from HERE or HERE

Note: If you already have Malwarebytes' Anti-Malware, just run and update it.. Then do a "Perform Full Scan"

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Full Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.




NEXT


Please download RSIT by random/random and save it to your Desktop.
  • Double click on RSIT.exe to run RSIT
  • Before you click "Continue", make sure you change the List files/folders created or modified in the last 3 months
  • Click Continue at the disclaimer screen.
  • Once it has finished, two logs will open. Please post the contents of both log.txt and info.txt in your next reply.



NEXT


Please download GMER and unzip it to your Desktop. <<mirror>>
Please rename the random filename or GMER into GAMERS
  • Open the renamed program and click on the Rootkit tab.
  • Make sure all the boxes on the right of the screen are checked, EXCEPT for ‘Show All’.
  • Click on Scan.
  • When the scan has run click Copy and paste the results into a Notepad >> save it and attach in this thread.
IMPORTANT: Do NOT run any program while you are doing these scans as it may interfere with the output results



Post me these logs in your next reply.. Post each log in separate post..

1. Malwarebytes'
2. RSIT log.txt
3. RSIT info.txt
4. Attach GAMERS result..

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive


#3 Kitchen Hand

Kitchen Hand
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:38 PM

Posted 25 July 2009 - 02:47 PM

Here's the Malwarebytes' log.

Malwarebytes' Anti-Malware 1.39
Database version: 2500
Windows 5.1.2600 Service Pack 3

7/25/2009 3:46:07 PM
mbam-log-2009-07-25 (15-46-07).txt

Scan type: Full Scan (C:\|)
Objects scanned: 210973
Time elapsed: 55 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 5
Registry Values Infected: 6
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 7

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b20628d-9eac-48fd-ae23-6059cf2cc251} (Trojan.BHO.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{7b20628d-9eac-48fd-ae23-6059cf2cc251} (Trojan.BHO.H) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\instkey (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\WINID (Malware.Trace) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Refog.Keylogger) -> Bad: (c:\windows\system32\userinit.exe, C:\Program Files\KGB\MPK.exeC:\WINDOWS\system32 \smss.exe,) Good: (Userinit.exe) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\AgCPanelSpanis.dll (Trojan.BHO.H) -> Delete on reboot.
c:\documents and settings\owner\local settings\temp\oxciacmo.dat (Rootkit.Agent) -> Delete on reboot.
c:\program files\msn messenger\riched20.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\trend micro\hijackthis\backups\backup-20081211-013914-206.dll (Adware.MyWeb) -> Quarantined and deleted successfully.
c:\program files\trend micro\hijackthis\backups\backup-20081211-013914-586.dll (Adware.MyWeb) -> Quarantined and deleted successfully.
c:\documents and settings\Owner\local settings\temporary internet files\PLauncher.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\install.exe (Trojan.Agent) -> Quarantined and deleted successfully.

#4 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 25 July 2009 - 02:55 PM

Ok, waiting for other logs :thumbup2:

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive


#5 Kitchen Hand

Kitchen Hand
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:38 PM

Posted 25 July 2009 - 03:10 PM

Here's the RSIT log/info..logs.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Owner at 2009-07-25 15:52:49
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 32 GB (42%) free of 76 GB
Total RAM: 1280 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:53:46 PM, on 7/25/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Owner\My Documents\Downloads\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Owner.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;*.local
O2 - BHO: (no name) - {7b20628d-9eac-48fd-ae23-6059cf2cc251} - C:\WINDOWS\system32\AgCPanelSpanis.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKCU\..\Run: [twan] C:\WINDOWS\system32\inetclnt\twan.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - S-1-5-18 Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE (User 'Default user')
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1222973289515
O20 - Winlogon Notify: opnkLdEU - opnkLdEU.dll (file missing)
O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Automatic Updates (wuauserv) - Unknown owner - C:\WINDOWS\

--
End of file - 4720 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b20628d-9eac-48fd-ae23-6059cf2cc251}]
C:\WINDOWS\system32\AgCPanelSpanis.dll [2007-04-20 96256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"twan"=C:\WINDOWS\system32\inetclnt\twan.exe []
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a0mkqwmxfsikko9jus88z1ge6ejr373t]
C:\DOCUME~1\Owner\LOCALS~1\Temp\sz1afc88gvc5.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a1gdoc756jzbhbo42t8q7ewdnzbd]
C:\DOCUME~1\Owner\LOCALS~1\Temp\gi1peu1lk4s7.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a31r6ebckgb7r115lntem5ivw3rfvau4h8n4pqtpbhybje3eap]
C:\DOCUME~1\Owner\LOCALS~1\Temp\j1793o99dgi.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a3aw0fdc6bcg4qh1wpmvr67ndbh47oj0dr2l43tq]
C:\DOCUME~1\Owner\LOCALS~1\Temp\a2sjcau.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a7hw1qehsqhcnhaj3u]
C:\DOCUME~1\Owner\LOCALS~1\Temp\icdo7rmjejwd6.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a971pmkn0qamnpco5fa3jyi2hsvw22641l2j1fsd3s]
C:\DOCUME~1\Owner\LOCALS~1\Temp\v0v1d6kgso0.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a9p3mqzsntrr128tmqio5e39hfph5j4k6t5mhr8fdqrh49]
C:\DOCUME~1\Owner\LOCALS~1\Temp\gt65rd83.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\aa8l5f2w8jbtprylrg5346x74ur1z]
C:\DOCUME~1\Owner\LOCALS~1\Temp\lahb0vtj1.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\abapinx3ifca7u0q1v83e4bhl38mqanajfuvjbdkc1qh36cb5]
C:\DOCUME~1\Owner\LOCALS~1\Temp\zne3te.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\abogm82119yoia36w3172g3mp]
C:\DOCUME~1\Owner\LOCALS~1\Temp\cfovn39.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\af8ooh9pplgko05007uf8ruq9s2bgaerf1dhvlf2wza6o]
C:\DOCUME~1\Owner\LOCALS~1\Temp\lzx18m4noy3q.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ahulnsq0myq5vco0s05]
C:\DOCUME~1\Owner\LOCALS~1\Temp\ytw2eqyt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aim6]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\aj06o0m1l9va]
C:\DOCUME~1\Owner\LOCALS~1\Temp\hl4sah07h7eok.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ak2ym1pwzl8vduhfl9ux9f7lo5576vu09]
C:\DOCUME~1\Owner\LOCALS~1\Temp\uguikrzhnbp2.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\akeup3ojpjj0h9uc2n04t8bt49bi3vwj9bfyjn2bfingxxsu]
C:\DOCUME~1\Owner\LOCALS~1\Temp\qqhqm46.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\akj3ts5g0o9lst7gix8rneookpy]
C:\DOCUME~1\Owner\LOCALS~1\Temp\fymvpsmyz5bl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2009-02-24 203928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\am9y9bypd18xmzklx8ejk13y2bc9xtubdgv2cudt10ohkif]
C:\DOCUME~1\Owner\LOCALS~1\Temp\gzmc9k.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\anvwjasmvf08yr32jn23yvtg36l4og]
C:\DOCUME~1\Owner\LOCALS~1\Temp\ua3st1frdn5h.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLDialer]
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe [2006-10-23 71216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLSPScheduler]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_CC]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\aw3x96h4juhakvwatv4h9u2mgm2y2z5e6c]
C:\DOCUME~1\Owner\LOCALS~1\Temp\yfo3sjkt2q.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ay03sj94lvvyylju3a2ev04i0ihu2b]
C:\DOCUME~1\Owner\LOCALS~1\Temp\qsdpn7px.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\b0os2rkbbgq0o4dwnoqwm6d21d5gpuzqebmnv9gm5sz0t]
C:\DOCUME~1\Owner\LOCALS~1\Temp\q9fqyn.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\b1msuh2fby5ecg88o0992we6i]
C:\DOCUME~1\Owner\LOCALS~1\Temp\awsskk0uq.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\b5lkyf6py4c3ycsg5eh3nva]
C:\DOCUME~1\Owner\LOCALS~1\Temp\wjda5oph8e.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\b5osphdkkljhe5]
C:\DOCUME~1\Owner\LOCALS~1\Temp\pgbum6gpfwl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\b729ry45jih62o70yosasr54l8c5tx22a]
C:\DOCUME~1\Owner\LOCALS~1\Temp\qrrzmfnxphjg1.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\bfbgsodguyyj2sfqb4pr1uinukovv9lbn1puyjynmbnf20]
C:\DOCUME~1\Owner\LOCALS~1\Temp\zxmzfp1szxz6.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\bg6mdzqi1ems7p]
C:\DOCUME~1\Owner\LOCALS~1\Temp\w28rdb1o.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\biq2fijrse]
C:\DOCUME~1\Owner\LOCALS~1\Temp\y4obyc.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\birsj0zsjx4s]
C:\DOCUME~1\Owner\LOCALS~1\Temp\j55newh.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
C:\Program Files\BitTorrent\bittorrent.exe [2008-09-26 634672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA]
C:\Program Files\DNA\btdna.exe [2008-12-16 342848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\bkmk20bffimlpif4]
C:\DOCUME~1\Owner\LOCALS~1\Temp\nv8uvhizzpof.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\bmjyjigp35irn5q37ho30j5sqx8ssk3dpqacth4r9xduq]
C:\DOCUME~1\Owner\LOCALS~1\Temp\h4s75focwresh.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\br6pq3lybreagh3chjrt7h]
C:\DOCUME~1\Owner\LOCALS~1\Temp\ep557mb4l.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\brdvfq56q0vpxtalynl4n]
C:\DOCUME~1\Owner\LOCALS~1\Temp\r7pibdt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\bzzgzg54uxgxvdjezf97yq2l24m9h0k9n7spttqknzag91xbg]
C:\DOCUME~1\Owner\LOCALS~1\Temp\o4k1x4er3eu.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c3f92ydw8obdism0sze2eo]
C:\DOCUME~1\Owner\LOCALS~1\Temp\dr7nbgph.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c745ews8h9sm4t62yzbk5d05x0nq1m4q4pvb9zso7gpibhrw]
C:\DOCUME~1\Owner\LOCALS~1\Temp\pq8y3l.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\caoaghw6l22l]
C:\DOCUME~1\Owner\LOCALS~1\Temp\of8csejrt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cas4ca9vck74uxw]
C:\DOCUME~1\Owner\LOCALS~1\Temp\ip8ytnp.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cc66hsnp8abmr0eh09u]
C:\DOCUME~1\Owner\LOCALS~1\Temp\ztgar48c0i8ny.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cmdcv2mltcd11dhqj2x6e8foz94reb3tkn1u5sa9j]
C:\DOCUME~1\Owner\LOCALS~1\Temp\xuqeexo4jwh3.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cnb3e53ffuvtjvmc77w3rtk4rv02skyu]
C:\DOCUME~1\Owner\LOCALS~1\Temp\cchanay.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cpk2m9h3zq855ffq4g6crsms]
C:\DOCUME~1\Owner\LOCALS~1\Temp\x66wzf3lkf60s.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cqq0mnodeu2jrlqmd5watstn0v2kivkwq6yj7l1ayr0375]
C:\DOCUME~1\Owner\LOCALS~1\Temp\te1ooyyxc.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\crv7nxawc70mkhvuyl]
C:\DOCUME~1\Owner\LOCALS~1\Temp\n5yvlv3e13731.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTHelper]
C:\WINDOWS\CTHELPER.EXE [2006-08-11 17920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTxfiHlp]
C:\WINDOWS\system32\CTXFIHLP.EXE [2006-08-11 18944]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cv15wesl0fhgdbb3hnwffv5srlpcy9ot2t9dzldvnihni61ps]
C:\DOCUME~1\Owner\LOCALS~1\Temp\o34b6te.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cv529ts8br1k2ltwna2bgb4g4au]
C:\DOCUME~1\Owner\LOCALS~1\Temp\yud6kuurtero.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cxevaob2j8kbxptt0nawhlwdabmiguyipuh1y0cuz]
C:\DOCUME~1\Owner\LOCALS~1\Temp\fmd7xwcwjrap.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cye6t3t43]
C:\DOCUME~1\Owner\LOCALS~1\Temp\z5wcrnhdvpl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\d166msgt6z6dqv6o]
C:\DOCUME~1\Owner\LOCALS~1\Temp\lphxrqqxwm.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\d1izu9eoawdwmy37y1]
C:\DOCUME~1\Owner\LOCALS~1\Temp\dm9o93raa38.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\d1wqfvu76v]
C:\DOCUME~1\Owner\LOCALS~1\Temp\w2s4ok.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\d4tcn7u38q]
C:\DOCUME~1\Owner\LOCALS~1\Temp\efjkgqvyy.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
C:\Program Files\DAEMON Tools\daemon.exe [2007-04-03 165784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dbugp57suigte9f9tqrnz5]
C:\DOCUME~1\Owner\LOCALS~1\Temp\h1yn3oil6l.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dcssq2m36jxzurfb1no4gccf9wqz6u9n5mh59eugha]
C:\DOCUME~1\Owner\LOCALS~1\Temp\zuq2ay.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DeadAIM]
C:\Program Files\AIM95\\DeadAIM.ocm,ExportedCheckODLs []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dfrhlmrw75qk226agfr3ewsvmicmptmyrkyp2rguyx1]
C:\DOCUME~1\Owner\LOCALS~1\Temp\wh6be28.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dhua8tu6dhhkfiu447aghhht0dfu58nvri69w7gdlj]
C:\DOCUME~1\Owner\LOCALS~1\Temp\vpa2io4.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dkj3jdmbibube9fmgilww4ocudu8yvm7c6tnpz0sxir]
C:\DOCUME~1\Owner\LOCALS~1\Temp\cwcuxfw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DNA]
C:\Program Files\BitTorrent_DNA\dna.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dpcqp7qf6w8hxwzd6a2l]
C:\DOCUME~1\Owner\LOCALS~1\Temp\znjmsga62l.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dpdhkj6vi0yf7wpdccfsl91hln14t8llq0euj]
C:\DOCUME~1\Owner\LOCALS~1\Temp\kga9om7.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\drns6fd46n0kysiwrqjjf6kmp]
C:\DOCUME~1\Owner\LOCALS~1\Temp\uz1hbdg.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dsmj9scmfwy6bcb8f5uu9fljurwsny1y8kpu7kr5qjeij1fevk]
C:\DOCUME~1\Owner\LOCALS~1\Temp\x16cxfi.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dtib9rhh521lai3rckdvuxt9oevf2bdh5ug7fd8r91eo2j5ji]
C:\DOCUME~1\Owner\LOCALS~1\Temp\g3i515f33.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\du3zp0jthp7jbilkewhnndh8apuc4qazr7uvwfz1djqmqhe8i]
C:\DOCUME~1\Owner\LOCALS~1\Temp\zceszoz5rt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dun9zs69i21j5xcgzv3kcktu0nz4vy]
C:\DOCUME~1\Owner\LOCALS~1\Temp\ssgcjprl9.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\e0udgrk3q79ldch8otga]
C:\DOCUME~1\Owner\LOCALS~1\Temp\oci7t0pbb72b.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\e0x7ogqlekwzu4j7c4nr7q7n3zdqg88fwajzbiwy]
C:\DOCUME~1\Owner\LOCALS~1\Temp\zyxv85nja.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\e1c3ex0knjw]
C:\DOCUME~1\Owner\LOCALS~1\Temp\fmnugtn9vq.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\e4yn8emnj1w25xfuohetw95bt443tarh3mb7]
C:\DOCUME~1\Owner\LOCALS~1\Temp\imycju.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\e5xq2mxkspv8a2lvr64fayf6axr4qk]
C:\DOCUME~1\Owner\LOCALS~1\Temp\gybo38zl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\e6vjwxwdvl7zsp0wul89u3]
C:\DOCUME~1\Owner\LOCALS~1\Temp\o5cp3gsyob.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\e9mmuzq7pmx4e1te91lfbkjyji48rhldx5fmyu3xoei0f4k]
C:\DOCUME~1\Owner\LOCALS~1\Temp\pc5igxvhlpcw.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eel816dl4ka67c57yhnsuanaushlxrti]
C:\DOCUME~1\Owner\LOCALS~1\Temp\pjviu3862bn.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ei85aq1ex3mkfqj26zo2wenkp61vhclmleiq6jrrz21o23rl1d]
C:\DOCUME~1\Owner\LOCALS~1\Temp\u4zzuqvrmti00.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eijpysaw0qmk02r55lcbltb2n7cekg9k4bj77xfp1wn68s0zw]
C:\DOCUME~1\Owner\LOCALS~1\Temp\nk30287yox21.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eup3tg8ixrthc21g26wg7mqbk6wj5i70blayuh9m74qvi]
C:\DOCUME~1\Owner\LOCALS~1\Temp\wc5b7muc2wew.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\evcydnh5kyzm2yx19d]
C:\DOCUME~1\Owner\LOCALS~1\Temp\o4qt1hrnriu.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\evmgpz8v0aeiqv5ynxfdwfp0c1]
C:\DOCUME~1\Owner\LOCALS~1\Temp\dvl27ree7op5.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\exoioh00q6xjjerh0c1jj0waui5o24ww3a90yyn46qhimndj]
C:\DOCUME~1\Owner\LOCALS~1\Temp\xvyki3c.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\f4b8508n63vdzoklozgq5e0bbjo]
C:\DOCUME~1\Owner\LOCALS~1\Temp\rgehz7idnbvk.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\f4n3k35rbfr7]
C:\DOCUME~1\Owner\LOCALS~1\Temp\p94gb520ep.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\f74hp158uvmvq8]
C:\DOCUME~1\Owner\LOCALS~1\Temp\hbj5bj7.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\f7qc2dd67h1avxwaksq]
C:\DOCUME~1\Owner\LOCALS~1\Temp\yix8axes.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\fgu53zwc8msggwsdm25nqxi8ryxojn80opz8ekoaxy4nmo1h]
C:\DOCUME~1\Owner\LOCALS~1\Temp\h1nnu5kk.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\fi7nqsanwuogetde3]
C:\DOCUME~1\Owner\LOCALS~1\Temp\jq2il0x7.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\finz4s80y7scl]
C:\DOCUME~1\Owner\LOCALS~1\Temp\n870k9xujlx.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\fju1nanm1ip95vurr4ms0u7468lv17v9]
C:\DOCUME~1\Owner\LOCALS~1\Temp\n5exagx0x9.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\fpqov6r7q]
C:\DOCUME~1\Owner\LOCALS~1\Temp\fd1wjz.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^TitansLUNA.lnk]
C:\PROGRA~1\TITANS~1\LUNALA~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^twan.exe.lnk]
C:\WINDOWS\system32\inetclnt\twan.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Owner^Start Menu^Programs^Startup^Adobe Gamma.lnk]
C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Owner^Start Menu^Programs^Startup^Xfire.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WUSB54Gv4SVC"=2
"WMPNetworkSvc"=3
"WANMiniportService"=2
"Viewpoint Manager Service"=2
"usnjsvc"=3
"StarWindService"=2
"NVSvc"=2
"MpfService"=2
"McShield"=2
"ITMRTSVC"=2
"iPod Service"=3
"aolavupd"=2
"AOL ACS"=2
"Adobe LM Service"=3

C:\Documents and Settings\Owner\Start Menu\Programs\Startup
ERUNT AutoBackup.lnk - C:\Program Files\ERUNT\AUTOBACK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MCPClient]
C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll [2005-01-31 49152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\opnkLdEU]
opnkLdEU.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC} - C:\PROGRA~1\COMMON~1\Stardock\MCPCore.dll [2005-05-10 86016]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{EF8820EB-F11E-4DD6-BC6C-D99084691C18}"= []
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
C:\WINDOWS\system32\cbXQhIXq

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\winms41.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\winms41.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe"="C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe"="C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\America Online 9.0\waol.exe"="C:\Program Files\America Online 9.0\waol.exe:*:Enabled:America Online 9.0"
"C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe"="C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:*:Enabled:AOL TopSpeed"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\ijji\ENGLISH\Gunz\Gunz.exe"="C:\ijji\ENGLISH\Gunz\Gunz.exe:*:Enabled:Gunz"
"C:\Program Files\Common Files\AOL\Loader\aolload.exe"="C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader"
"C:\Program Files\Common Files\AOL\1161052569\ee\aolsoftware.exe"="C:\Program Files\Common Files\AOL\1161052569\ee\aolsoftware.exe:*:Enabled:AOL Services"
"C:\Program Files\SmartFTP Client 2.0\SmartFTP.exe"="C:\Program Files\SmartFTP Client 2.0\SmartFTP.exe:*:Enabled:SmartFTP Client 2.0"
"C:\Program Files\AIM\aim.exe"="C:\Program Files\AIM\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\StubInstaller.exe"="C:\StubInstaller.exe:*:Enabled:LimeWire swarmed installer"
"C:\ijji\ENGLISH\u_sf\soldierfront.exe"="C:\ijji\ENGLISH\u_sf\soldierfront.exe:*:Enabled:soldierfront"
"C:\Hangame\JAPANESE\j_specialf.exe"="C:\Hangame\JAPANESE\j_specialf.exe:*:Enabled:j_specialf"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\Owner\Desktop\WoW-BurningCrusade-enUS-Installer-downloader.exe"="C:\Documents and Settings\Owner\Desktop\WoW-BurningCrusade-enUS-Installer-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Documents and Settings\Owner\Desktop\wowclient-downloader.exe"="C:\Documents and Settings\Owner\Desktop\wowclient-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\WINDOWS\system32\rtcshare.exe"="C:\WINDOWS\system32\rtcshare.exe:*:Enabled:RTC App Sharing"
"C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe"="C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe:*:Enabled:Nexon Game Manager"
"C:\ijji\ENGLISH\Gunbound Revolution\GunBound.gme"="C:\ijji\ENGLISH\Gunbound Revolution\GunBound.gme:*:Enabled:GunBound"
"C:\Program Files\MAIET\Gunz\GunzLauncher.exe"="C:\Program Files\MAIET\Gunz\GunzLauncher.exe:*:Enabled:GunzLauncher"
"C:\ijji\ENGLISH\Gunbound Revolution\ENGLISH\Gunbound Revolution\GunBound.gme"="C:\ijji\ENGLISH\Gunbound Revolution\ENGLISH\Gunbound Revolution\GunBound.gme:*:Enabled:GunBound"
"C:\Program Files\BitTorrent_DNA\dna.exe"="C:\Program Files\BitTorrent_DNA\dna.exe:*:Enabled:DNA"
"C:\Program Files\AIM95\aim.exe"="C:\Program Files\AIM95\aim.exe:*:Enabled:AOL Instant Messenger (SM)"
"C:\Program Files\LegacyGamers\GunZ Online\LegacyGamers.exe"="C:\Program Files\LegacyGamers\GunZ Online\LegacyGamers.exe:*:Enabled:Gunz"
"C:\Program Files\AIM6\aim6.exe"="C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM"
"C:\ijji\ENGLISH\Gunz\NaGunZFix.exe"="C:\ijji\ENGLISH\Gunz\NaGunZFix.exe:*:Enabled:NaGunZFix"
"C:\Program Files\Daemons Ring\Daemons Ring\DaemonsRing.exe"="C:\Program Files\Daemons Ring\Daemons Ring\DaemonsRing.exe:*:Enabled:DaemonsRing"
"C:\Program Files\THQ\Titan Quest\Titan Quest.exe"="C:\Program Files\THQ\Titan Quest\Titan Quest.exe:*:Enabled:Titan Quest"
"C:\Program Files\Steam\steamapps\markywd\counter-strike source\hl2.exe"="C:\Program Files\Steam\steamapps\markywd\counter-strike source\hl2.exe:*:Enabled:hl2"
"C:\Documents and Settings\Owner\Desktop\The Drought Is Over\wowclient-downloader.exe"="C:\Documents and Settings\Owner\Desktop\The Drought Is Over\wowclient-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Steam\steam.exe"="C:\Program Files\Steam\steam.exe:*:Enabled:Steam"
"C:\Documents and Settings\Owner\My Documents\WoW-BurningCrusade-enUS.exe"="C:\Documents and Settings\Owner\My Documents\WoW-BurningCrusade-enUS.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\LegacyGamers\GunZ Online\GunZLauncher.exe"="C:\Program Files\LegacyGamers\GunZ Online\GunZLauncher.exe:*:Enabled:Gunz"
"C:\Program Files\Steam\steamapps\th0razine\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\th0razine\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Steam\steamapps\markywd\dark messiah might and magic multi-player\mm.exe"="C:\Program Files\Steam\steamapps\markywd\dark messiah might and magic multi-player\mm.exe:*:Enabled:mm"
"C:\Program Files\Diablo II\Diablo II.exe"="C:\Program Files\Diablo II\Diablo II.exe:*:Enabled:Diablo II - Lord of Destruction"
"C:\Program Files\Daemons Ring-Gunz\theduel.exe.exe"="C:\Program Files\Daemons Ring-Gunz\theduel.exe.exe:*:Enabled:Gunz"
"C:\Program Files\AIM95\AIM95_c0\aim.exe"="C:\Program Files\AIM95\AIM95_c0\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\NeverwinterNights\NWN\nwmain.exe"="C:\NeverwinterNights\NWN\nwmain.exe:*:Enabled:Neverwinter Nights"
"C:\Program Files\Daemons Ring-Gunz\client.exe"="C:\Program Files\Daemons Ring-Gunz\client.exe:*:Enabled:Gunz"
"C:\Program Files\Daemons Ring-Gunz\GunZ.exe"="C:\Program Files\Daemons Ring-Gunz\GunZ.exe:*:Enabled:Gunz"
"C:\Program Files\Sony\Station\LaunchPad\LaunchPad.exe"="C:\Program Files\Sony\Station\LaunchPad\LaunchPad.exe:*:Enabled:LaunchPad"
"C:\Program Files\Steam\steamapps\common\silverfall\Silverfall.exe"="C:\Program Files\Steam\steamapps\common\silverfall\Silverfall.exe:*:Enabled:Silverfall"
"C:\Documents and Settings\Owner\Desktop\SNES\zsnesw.exe"="C:\Documents and Settings\Owner\Desktop\SNES\zsnesw.exe:*:Enabled:zsnesw"
"C:\SNES\zsnesw.exe"="C:\SNES\zsnesw.exe:*:Enabled:zsnesw"
"C:\Documents and Settings\Owner\Desktop\pol_6.2\Pokemon Online.exe"="C:\Documents and Settings\Owner\Desktop\pol_6.2\Pokemon Online.exe:*:Enabled:Multimedia Fusion Stand Alone Application"
"C:\Program Files\LegacyGamers\LegacyGamers GunZ Online\LegacyGamers.exe"="C:\Program Files\LegacyGamers\LegacyGamers GunZ Online\LegacyGamers.exe:*:Enabled:Gunz"
"C:\Program Files\Softnyx\WolfTeam\Wolfteam.bin"="C:\Program Files\Softnyx\WolfTeam\Wolfteam.bin:*:Enabled:WolfTeam"
"C:\Program Files\Kazaa\kazaa.exe"="C:\Program Files\Kazaa\kazaa.exe:*:Enabled:Kazaa"
"C:\Program Files\Ankama Games\DofusArenaBeta2\DofusArena.exe"="C:\Program Files\Ankama Games\DofusArenaBeta2\DofusArena.exe:*:Enabled:Dofus Arena Client"
"C:\WINDOWS\system32\java.exe"="C:\WINDOWS\system32\java.exe:*:Enabled:Java™ Platform SE binary"
"C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 7.0.1.321\English\setup.exe"="C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 7.0.1.321\English\setup.exe:*:Enabled:Kaspersky Anti-Virus 7.0 Setup"
"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\Program Files\Turbine\Dungeons & Dragons Online - Stormreach\dndclient.exe"="C:\Program Files\Turbine\Dungeons & Dragons Online - Stormreach\dndclient.exe:*:Enabled:dndclient"
"C:\Program Files\Fury\Binaries\Fury.exe"="C:\Program Files\Fury\Binaries\Fury.exe:*:Enabled:Fury"
"C:\Program Files\Fury\Binaries\DiamondWare\dwTVC.exe"="C:\Program Files\Fury\Binaries\DiamondWare\dwTVC.exe:*:Enabled:Fury VOIP"
"C:\Documents and Settings\Owner\Desktop\ZSNES\zsnesw.exe"="C:\Documents and Settings\Owner\Desktop\ZSNES\zsnesw.exe:*:Enabled:zsnesw"
"C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus"
"C:\Documents and Settings\Owner\My Documents\ePSXe\ePSXe.exe"="C:\Documents and Settings\Owner\My Documents\ePSXe\ePSXe.exe:*:Enabled:ePSXe"
"C:\ijji\ENGLISH\u_goonzu.exe"="C:\ijji\ENGLISH\u_goonzu.exe:*:Enabled:<ijji Downloader>"
"C:\Program Files\Reunion Gunz\gunz.exe"="C:\Program Files\Reunion Gunz\gunz.exe:*:Enabled:Gunz"
"C:\Program Files\Rohan\fairyclient.exe"="C:\Program Files\Rohan\fairyclient.exe:*:Enabled:Rohan Online Game"
"C:\Program Files\GAMENAO\APGunZ\APGunZ.exe"="C:\Program Files\GAMENAO\APGunZ\APGunZ.exe:*:Enabled:AplusGunZ Client"
"C:\Program Files\DRGunZ\DRGunZ.exe"="C:\Program Files\DRGunZ\DRGunZ.exe:*:Enabled:Gunz"
"C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Remote Assistance - Windows Messenger and Voice"
"C:\ijji\ENGLISH\u_gunz.exe"="C:\ijji\ENGLISH\u_gunz.exe:*:Enabled:<ijji Downloader>"
"C:\Program Files\Google\Google Talk\googletalk.exe"="C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"
"C:\Documents and Settings\All Users\Application Data\NexonJP\NGM\NGM.exe"="C:\Documents and Settings\All Users\Application Data\NexonJP\NGM\NGM.exe:*:Enabled:Nexon Game Manager"
"C:\Documents and Settings\All Users\Application Data\NexonJP\Common\NMService.exe"="C:\Documents and Settings\All Users\Application Data\NexonJP\Common\NMService.exe:*:Enabled:Nexon Messenger Core"
"C:\Program Files\att-nap\McciBrowser.exe"="C:\Program Files\att-nap\McciBrowser.exe:*:Enabled:motivebrowser.exe"
"C:\ijji\ENGLISH\u_sf.exe"="C:\ijji\ENGLISH\u_sf.exe:*:Enabled:<ijji Downloader>"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2009\English\setup.exe"="C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2009\English\setup.exe:*:Enabled:Kaspersky Anti-Virus 2009 Setup"
"C:\WINDOWS\Downloaded Program Files\PurpleBean.exe"="C:\WINDOWS\Downloaded Program Files\PurpleBean.exe:*:Enabled:PurpleBean.exe"
"C:\Documents and Settings\Owner\My Documents\ZSNES\zsnesw.exe"="C:\Documents and Settings\Owner\My Documents\ZSNES\zsnesw.exe:*:Enabled:zsnesw"
"C:\Documents and Settings\Owner\Desktop\metfatigue\Mfatigue.exe"="C:\Documents and Settings\Owner\Desktop\metfatigue\Mfatigue.exe:*:Enabled:Mfatigue"
"C:\Nexon\Combat Arms\NMService.exe"="C:\Nexon\Combat Arms\NMService.exe:*:Enabled:Nexon Messenger Core"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\WINDOWS\Downloaded Program Files\PLauncher.exe"="C:\WINDOWS\Downloaded Program Files\PLauncher.exe:*:Enabled:PLauncher Application"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Documents and Settings\Owner\My Documents\uTorrent Downloads\Battlefield.2.All.Cracks.Online.Pack\4 - All Seeing Eye\crack + reg\eye.exe"="C:\Documents and Settings\Owner\My Documents\uTorrent Downloads\Battlefield.2.All.Cracks.Online.Pack\4 - All Seeing Eye\crack + reg\eye.exe:*:Enabled:Yahoo! All-Seeing Eye"
"C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Warlords\Civ4Warlords.exe"="C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Warlords\Civ4Warlords.exe:*:Enabled:Sid Meier's Civilization 4 Warlords"
"C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Warlords\Civ4Warlords_PitBoss.exe"="C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Warlords\Civ4Warlords_PitBoss.exe:*:Enabled:Sid Meier's Civilization 4 Pitboss"
"C:\Program Files\Ventrilo\Ventrilo.exe"="C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\MySpace\IM\MySpaceIM.exe"="C:\Program Files\MySpace\IM\MySpaceIM.exe:*:Enabled:MySpaceIM"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Trinity Entertainment\Trinity Gunz\Gunz.exe"="C:\Program Files\Trinity Entertainment\Trinity Gunz\Gunz.exe:*:Enabled:Gunz"
"C:\Documents and Settings\Owner\Local Settings\Application Data\Dyyno Receiver\DPPM.exe"="C:\Documents and Settings\Owner\Local Settings\Application Data\Dyyno Receiver\DPPM.exe:*:Enabled:Dyyno Plugin Receiver"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe"="C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe"="C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\America Online 9.0\waol.exe"="C:\Program Files\America Online 9.0\waol.exe:*:Enabled:America Online 9.0"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
shell\AutoRun\command - D:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2ca8df7c-6d1d-11de-8670-00004f330cda}]
shell\Autoplay\command - H:\autorun.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL autorun.exe
shell\explore\command - H:\autorun.exe
shell\Open\command - H:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3c6a8bf8-262a-11de-8612-000000060000}]
shell\AutoRun\command - H:\Setup.exe
shell\install\command - H:\rcaeasyrip_setup.exe
shell\open\command - H:\Setup.exe
shell\usermanualEnglish\command - H:\rcaeasyrip_setup.exe /pdf_English
shell\usermanualFrench\command - H:\rcaeasyrip_setup.exe /pdf_French
shell\usermanualSpanish\command - H:\rcaeasyrip_setup.exe /pdf_Spanish

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5d7d3bca-074a-11de-85ed-00064f330cda}]
shell\AutoRun\command - H:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{91af03fc-4d73-11de-8633-00004f330000}]
shell\Autoplay\command - H:\autorun.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL autorun.exe
shell\explore\command - H:\autorun.exe
shell\Open\command - H:\autorun.exe


======List of files/folders created in the last 3 months======

2009-07-25 15:52:49 ----D---- C:\rsit
2009-07-25 15:49:25 ----D---- C:\WINDOWS\ERDNT
2009-07-25 14:42:34 ----D---- C:\Program Files\ERUNT
2009-07-24 05:58:53 ----A---- C:\WINDOWS\patchw32.dll
2009-07-24 05:58:51 ----A---- C:\WINDOWS\patchw.dll
2009-07-24 05:42:20 ----D---- C:\Program Files\Outspark
2009-07-24 04:49:30 ----D---- C:\Program Files\Steam
2009-07-24 03:10:44 ----A---- C:\WINDOWS\system32\d3dx9_38.dll
2009-07-24 02:53:20 ----D---- C:\Program Files\Trine
2009-07-23 23:22:22 ----RHD---- C:\AHCache
2009-07-23 23:21:49 ----D---- C:\b77d9e7f11ce8370201459ffeaf4a586
2009-07-23 19:24:08 ----D---- C:\Program Files\ESET
2009-07-22 23:43:57 ----A---- C:\WINDOWS\system32\un2065.txt
2009-07-22 23:43:57 ----A---- C:\WINDOWS\system32\2065.txt
2009-07-22 23:39:13 ----D---- C:\WINDOWS\system32\logs
2009-07-22 23:37:49 ----D---- C:\Program Files\BitDefender
2009-07-22 23:35:54 ----D---- C:\Program Files\Common Files\BitDefender
2009-07-22 13:33:13 ----A---- C:\WINDOWS\system32\pbsvc.exe
2009-07-22 13:22:38 ----D---- C:\Program Files\EA Games
2009-07-22 12:52:27 ----A---- C:\WINDOWS\GunZ Launcher - New.INI
2009-07-18 04:33:41 ----D---- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2009-07-11 01:50:54 ----D---- C:\WINDOWS\system32\xlive
2009-07-11 01:50:53 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2009-07-10 04:32:19 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-07-10 04:32:19 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-07-10 04:32:18 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-07-10 04:32:17 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-07-10 04:32:17 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-07-10 04:32:16 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-07-10 04:32:01 ----D---- C:\WINDOWS\Logs
2009-06-14 08:32:06 ----D---- C:\Program Files\The KMPlayer1431
2009-06-11 20:43:25 ----D---- C:\Documents and Settings\All Users\Application Data\ijjigame
2009-06-11 20:41:41 ----A---- C:\WINDOWS\system32\ijjiProcessRestarter.exe
2009-06-11 20:41:40 ----D---- C:\Program Files\NHN USA
2009-06-11 20:36:00 ----HDC---- C:\WINDOWS\ie8
2009-06-11 03:06:18 ----D---- C:\Program Files\FriendBlasterPro
2009-06-04 20:16:22 ----D---- C:\Program Files\Activision
2009-05-28 16:18:44 ----D---- C:\Program Files\LegacyGamers
2009-05-27 18:49:00 ----D---- C:\Documents and Settings\Owner\Application Data\Trillian
2009-05-27 18:38:45 ----D---- C:\Documents and Settings\Owner\Application Data\InfraRecorder
2009-05-21 18:59:48 ----D---- C:\Documents and Settings\All Users\Application Data\Soulseek
2009-05-20 12:40:20 ----D---- C:\Program Files\Common Files\Adobe AIR
2009-05-19 11:58:33 ----HDC---- C:\WINDOWS\$NtUninstall_Xbox_360_CC_Driver$
2009-05-19 11:57:51 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-05-19 11:57:50 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-05-19 11:57:50 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-05-19 11:57:49 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-05-19 11:57:49 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-05-19 11:57:49 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-05-19 11:57:48 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-05-19 11:57:47 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-05-19 11:57:47 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-05-19 11:57:46 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2009-05-19 11:57:45 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-05-19 11:57:45 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-05-19 11:57:45 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-05-19 11:57:44 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-05-19 11:57:18 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-05-14 10:38:05 ----D---- C:\Documents and Settings\Owner\Application Data\4Media Software Studio
2009-05-14 10:22:22 ----D---- C:\Program Files\MP4 to MP3 Converter
2009-05-12 04:40:37 ----D---- C:\tmp
2009-05-12 04:37:53 ----D---- C:\Documents and Settings\Owner\Application Data\Blender Foundation
2009-05-08 04:22:35 ----D---- C:\Program Files\Frets on Fire

======List of files/folders modified in the last 3 months======

2009-07-25 15:50:16 ----D---- C:\WINDOWS\Temp
2009-07-25 15:49:25 ----AD---- C:\WINDOWS
2009-07-25 15:47:52 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-25 15:47:38 ----D---- C:\WINDOWS\system32\drivers
2009-07-25 15:46:00 ----D---- C:\Program Files\Mozilla Firefox
2009-07-25 15:16:53 ----D---- C:\Program Files\Trillian
2009-07-25 14:46:08 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-25 14:42:34 ----D---- C:\Program Files
2009-07-25 03:32:45 ----D---- C:\Documents and Settings\All Users\Application Data\PMB Files
2009-07-25 03:28:21 ----HD---- C:\Documents and Settings\Owner\Application Data\ijjigame
2009-07-25 02:51:41 ----SHD---- C:\WINDOWS\Installer
2009-07-25 02:51:40 ----HD---- C:\Config.Msi
2009-07-25 02:47:08 ----D---- C:\WINDOWS\system32
2009-07-25 02:34:34 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-25 01:42:58 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-07-24 21:05:59 ----D---- C:\Documents and Settings\Owner\Application Data\foobar2000
2009-07-24 21:04:36 ----D---- C:\Program Files\VstPlugins
2009-07-24 20:22:44 ----SH---- C:\boot.ini
2009-07-24 20:22:44 ----A---- C:\WINDOWS\win.ini
2009-07-24 20:22:44 ----A---- C:\WINDOWS\system.ini
2009-07-24 19:13:40 ----A---- C:\WINDOWS\wininit.ini
2009-07-24 18:29:17 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-07-24 05:42:12 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-24 02:53:02 ----D---- C:\Documents and Settings\Owner\Application Data\uTorrent
2009-07-24 01:52:02 ----A---- C:\WINDOWS\GunzLauncher.INI
2009-07-24 01:29:02 ----SD---- C:\WINDOWS\Tasks
2009-07-24 01:19:54 ----D---- C:\WINDOWS\Microsoft.NET
2009-07-24 01:19:42 ----RSD---- C:\WINDOWS\assembly
2009-07-24 00:54:57 ----HD---- C:\WINDOWS\inf
2009-07-23 23:44:43 ----D---- C:\WINDOWS\WinSxS
2009-07-23 23:41:04 ----D---- C:\Documents and Settings\Owner\Application Data\DNA
2009-07-23 23:36:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-07-23 23:34:30 ----D---- C:\Program Files\Internet Explorer
2009-07-23 22:40:56 ----D---- C:\Program Files\DNA
2009-07-23 21:40:55 ----D---- C:\Program Files\mIRC
2009-07-23 21:19:30 ----D---- C:\VundoFix Backups
2009-07-23 03:52:57 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2009-07-23 00:51:25 ----ASHD---- C:\WINDOWS\system32 
2009-07-23 00:37:43 ----D---- C:\WINDOWS\system32\inetclnt
2009-07-22 23:35:54 ----D---- C:\Program Files\Common Files
2009-07-22 23:05:29 ----D---- C:\WINDOWS\Debug
2009-07-22 23:05:28 ----D---- C:\WINDOWS\Minidump
2009-07-22 13:33:16 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2009-07-22 12:46:30 ----D---- C:\Program Files\Trinity Entertainment
2009-07-22 03:31:37 ----D---- C:\Program Files\KGB Archiver 2
2009-07-21 12:49:41 ----D---- C:\temp
2009-07-21 12:36:01 ----D---- C:\Documents and Settings\Owner\Application Data\Adobe
2009-07-21 11:51:22 ----D---- C:\Program Files\Diablo II
2009-07-19 23:56:37 ----D---- C:\Documents and Settings\Owner\Application Data\dvdcss
2009-07-18 15:51:06 ----D---- C:\Program Files\ATTToolbar
2009-07-18 04:48:06 ----D---- C:\Program Files\WC3Banlist
2009-07-18 04:42:32 ----D---- C:\Program Files\AIM95
2009-07-18 04:41:24 ----D---- C:\Program Files\Bonjour
2009-07-18 04:40:42 ----D---- C:\Program Files\BearShare Pro
2009-07-18 04:40:00 ----D---- C:\WINDOWS\ShellNew
2009-07-18 04:39:11 ----D---- C:\Program Files\Common Files\AOL
2009-07-18 04:36:56 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-07-18 04:34:12 ----D---- C:\WINDOWS\system32\AGEIA
2009-07-18 04:34:07 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-07-18 04:32:25 ----D---- C:\Program Files\Adobe
2009-07-18 04:31:19 ----D---- C:\Program Files\Common Files\Adobe
2009-07-18 04:26:03 ----D---- C:\Program Files\AC Tool
2009-07-17 23:12:56 ----A---- C:\WINDOWS\NeroDigital.ini
2009-07-11 01:51:25 ----D---- C:\WINDOWS\system32\DirectX
2009-06-14 07:13:00 ----D---- C:\WINDOWS\system
2009-06-12 07:38:42 ----D---- C:\WINDOWS\system32\en-US
2009-06-12 07:38:41 ----D---- C:\WINDOWS\Media
2009-06-12 07:38:40 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-12 07:38:40 ----D---- C:\WINDOWS\Help
2009-06-05 02:00:53 ----RSD---- C:\WINDOWS\Fonts
2009-05-22 22:41:11 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-05-21 12:22:53 ----D---- C:\Program Files\BellSouth
2009-05-19 14:52:01 ----D---- C:\WINDOWS\system32\CatRoot
2009-05-19 11:58:35 ----SD---- C:\WINDOWS\system32\Microsoft
2009-05-14 14:05:55 ----A---- C:\HC4DecommissionScheduler.exe
2009-05-14 10:18:09 ----D---- C:\Program Files\foobar2000
2009-05-13 09:27:20 ----D---- C:\WINDOWS\pss
2009-05-12 20:48:28 ----A---- C:\WINDOWS\system32\ijjiSetup.exe
2009-05-06 05:48:19 ----D---- C:\Program Files\Warcraft III

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 hwinfo32;HWiNFO32 Kernel Driver; \??\C:\Program Files\HWiNFO32\HWiNFO32.SYS []
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 Tcpip6;Microsoft IPv6 Protocol Driver; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-06-20 225856]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.1.6.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2006-10-16 17119]
R2 CSS DVP;Dynamic Virus Protection; C:\WINDOWS\system32\DRIVERS\css-dvp.sys [2007-11-26 835792]
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 ac97intc;Intel® 82801 Audio Driver Install Service (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\system32\drivers\ctac32k.sys [2006-08-11 502272]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2006-08-11 499584]
R3 ctgame;Game Port; C:\WINDOWS\system32\DRIVERS\ctgame.sys [2002-12-30 12160]
R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\system32\drivers\ctprxy2k.sys [2006-08-11 7168]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\drivers\ctsfm2k.sys [2006-08-11 143872]
R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\system32\drivers\emupia2k.sys [2006-08-11 78336]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\system32\drivers\ha10kx2k.sys [2006-08-11 766976]
R3 hap16v2k;Creative P16V HAL Driver; C:\WINDOWS\system32\drivers\hap16v2k.sys [2006-08-11 154112]
R3 ip100xp;ENCORE 10/100Mbps Fast Ethernet PCI Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\ipfnd51.sys [2007-09-04 29824]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-02-18 6308224]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2006-08-11 116224]
R3 SCREAMINGBDRIVER;Screaming Bee Audio; C:\WINDOWS\system32\drivers\ScreamingBAudio.sys [2006-09-28 21920]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 c18a0bd2;c18a0bd2; C:\WINDOWS\System32\drivers\c18a0bd2.sys []
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
S2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys []
S2 CamthWDM;WebcamMax, WDM Video Capture; C:\WINDOWS\system32\DRIVERS\CamthWDM.sys [2006-07-03 242736]
S2 npkcrypt;npkcrypt; \??\C:\Mabinogi\npkcrypt.sys []
S2 RPSKT;Security Services Driver (x86); C:\WINDOWS\system32\DRIVERS\rp_skt32.sys []
S2 zntport;NTPort Library Driver; \??\C:\WINDOWS\system32\zntport.sys []
S3 aa2ievoj;aa2ievoj; C:\WINDOWS\system32\drivers\aa2ievoj.sys []
S3 af75783e;af75783e; C:\WINDOWS\system32\drivers\af75783e.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\system32\drivers\ctdvda2k.sys [2005-11-10 340704]
S3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.sys [2002-11-08 17071]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 ESISTEMA53;ESISTEMA53; \??\C:\Program Files\RuanEngine\sistema32.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-04-14 17480]
S3 hap17v2k;Creative P17V HAL Driver; C:\WINDOWS\system32\drivers\hap17v2k.sys [2006-08-11 180224]
S3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 ip100avista;IC Plus IP100A 10/100 Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\ipfnd51.sys [2007-09-04 29824]
S3 kaspersky1;kaspersky1; \??\C:\Program Files\Kaspersky Engine (GunZ Version)\kaspersky.sys []
S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 neokdss;neokdss; C:\WINDOWS\system32\Drivers\neokdss.sys []
S3 nm;Network Monitor Driver; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2005-08-02 32512]
S3 Profos;Profos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SSKBFD;Webroot Spy Sweeper Keylogger Shield Keyboard Filter; C:\WINDOWS\System32\Drivers\sskbfd.sys [2008-01-04 23920]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 Trufos;Trufos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 USB-100;Realtek RTL8150 USB 10/100 Fast Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\RTL8150.SYS [2002-02-22 26505]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 vaxscsi;vaxscsi; C:\WINDOWS\System32\Drivers\vaxscsi.sys [2009-03-17 223128]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys [2003-01-10 33588]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 WUSB54GPV4SRV;Linksys Home Wireless-G USB Adaptor Driver; C:\WINDOWS\system32\DRIVERS\rt2500usb.sys [2005-01-07 147328]
S3 XDva001;XDva001; \??\C:\WINDOWS\system32\XDva001.sys []
S3 XDva004;XDva004; \??\C:\WINDOWS\system32\XDva004.sys []
S3 XDva007;XDva007; \??\C:\WINDOWS\system32\XDva007.sys []
S3 XDva028;XDva028; \??\C:\WINDOWS\system32\XDva028.sys []
S3 XDva037;XDva037; \??\C:\WINDOWS\system32\XDva037.sys []
S3 XDva039;XDva039; \??\C:\WINDOWS\system32\XDva039.sys []
S3 XDva123;XDva123; \??\C:\WINDOWS\system32\XDva123.sys []
S3 XDva132;XDva132; \??\C:\WINDOWS\system32\XDva132.sys []
S3 XDva134;XDva134; \??\C:\WINDOWS\system32\XDva134.sys []
S3 XDva252;XDva252; \??\C:\WINDOWS\system32\XDva252.sys []
S3 XDva281;XDva281; \??\C:\WINDOWS\system32\XDva281.sys []
S3 XTrapD12;XTrapD12; \??\C:\WINDOWS\system32\XTrapD12.sys []
S3 zenos1;zenos1; \??\C:\Documents and Settings\Owner\Desktop\bugahackinjoy\zenos2[1][1].6\zenosengine2.6\zenos.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;IPv6 Helper Service; C:\WINDOWS\system32\svchost.exe [2009-03-16 14336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2008-01-28 303104]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-07-22 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-07-23 189640]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []
S2 xftay;Xftay; C:\WINDOWS\System32\svchost.exe [2009-03-16 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-05-20 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2009-02-16 2741114]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2005-08-02 86016]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2009-03-16 14336]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2009-03-16 14336]
S4 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2006-10-23 72704]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]
S4 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-02-18 163908]
S4 Viewpoint Manager Service;Viewpoint Manager Service; C:\Program Files\Viewpoint\Common\ViewpointService.exe [2007-01-04 24652]
S4 WUSB54Gv4SVC;WUSB54Gv4SVC; C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe [2004-02-06 41025]

-----------------EOF-----------------



info.txt logfile of random's system information tool 1.06 2009-07-25 15:54:16

======Uninstall list======

-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\mIRC\uninstall.exe _?=C:\Program Files\mIRC
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B9AE66C-2A8F-4FB2-85D7-416AFFAE8408}\setup.exe" -l0x9
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
7-Zip 4.42-->"C:\Program Files\7-Zip\Uninstall.exe"
Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe AIR-->c:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Extra Settings-->MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings-->MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->C:\Program Files\Common Files\Adobe\Installers\2ac78060bc5856b0c1cf873bb919b58\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{0046FA01-C5B9-4985-BACB-398DC480FC05}
Adobe Setup-->MsiExec.exe /I{D1BB4446-AE9C-4256-9A7F-4D46604D2462}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe SVG Viewer 3.0-->C:\Program Files\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Install.log
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
Algebra Equation Solver Ver 7.30-->C:\Program Files\CyberEd\AlgebraEqSolver\Uninst.exe /pid:{A2E501DB-2533-4074-BD1C-F06B211AB8C9} /asd
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
Battlefield Heroes-->"C:\Program Files\EA Games\Battlefield Heroes\uninstaller.exe" "C:\Program Files\EA Games\Battlefield Heroes\Uninstall.xml"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Counter-Strike: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/240
Creative Audio Console-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B9AE66C-2A8F-4FB2-85D7-416AFFAE8408}\setup.exe" -l0x9 /remove
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Download Manager 2.3.6-->C:\Program Files\IGN\Download Manager\uninst.exe
ERUNT 1.1j-->"C:\Program Files\ERUNT\unins000.exe"
FastAccess® DSL Help Center 4.3-->"C:\Program Files\FastAccessDSL\HelpCenter43\unins000.exe"
foobar2000 v0.9.6.5-->"C:\Program Files\foobar2000\uninstall.exe" _?=C:\Program Files\foobar2000
Game Vindicator-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17B4506C-737C-458E-B7D6-5C0ED8221996}\setup.exe" -l0x9 -removeonly
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar.dll"
Hamachi 1.0.1.5-->C:\Program Files\Hamachi\uninstall.exe
Hare 1.5.1-->"C:\Program Files\Dachshund Software\Hare\Uninstall.exe" "C:\Program Files\Dachshund Software\Hare\install.log"
Hero Editor V1.03-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\Hero Editor\ST6UNST.LOG"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
HWiNFO32 Version 2.38-->"C:\Program Files\HWiNFO32\unins000.exe"
IGN Download Manager 2.2.2-->C:\Program Files\IGN\Download Manager\uninst.exe
ijji Auto Installer-->"C:\Program Files\InstallShield Installation Information\{1DCC7418-2089-4BDD-B321-3771956160FC}\setup.exe" -runfromtemp -l0x0009 -removeonly
Java™ 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java™ SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
KEMailKb-->C:\WINDOWS\UnInst32.exe KEMailKb.UNI
Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
Linksys Wireless-G USB Network Adapter-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C7EEF2B9-8C16-4A04-B98D-B1A952A47E55}\Setup.exe" -l0x9
Little Shop - City Lights (remove only)-->C:\Program Files\Yahoo! Games\LittleShopCityLights\Uninstall.exe {444694B8-D2A5-389B-9216-5FC945DAED28}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
MapleStory-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{80EAC1F5-3067-4E57-A09F-3AF728C59FE5}\setup.exe" -l0x9 -removeonly
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4D243BA7-9AC4-46D1-90E5-EEB88974F501}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{90850409-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Windows Journal Viewer-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA8}
Mozilla Firefox (3.5.1)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MySpaceIM-->C:\Program Files\MySpace\IM\Uninstall.exe
Neffy 1,2,0,12-->C:\Program Files\Neffy\uninst.exe
Nero 6 Ultra Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
Oront Burning Kit 2 Premium-->"C:\Documents and Settings\All Users\Application Data\{A9C1DED7-3CAE-45DB-9185-D0F8A96B4C90}\burningkit2_premium.exe" REMOVE=TRUE MODIFY=FALSE
Pando Media Booster-->C:\Program Files\Pando Networks\Media Booster\uninst.exe
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PDFs 2 One 1-->C:\WINDOWS\cadkasdeinst01e.exe "C:\Program Files\PDFs 2 One 1\"
PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Security Update for Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Security Update for Windows Media Player 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Shockwave-->C:\WINDOWS\system32\Macromed\SHOCKW~2\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~2\Install.log
Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
The KMPlayer (remove only)-->"C:\Program Files\The KMPlayer1431\uninstall.exe"
TotalAudioConverter-->"C:\Program Files\TotalAudioConverter\unins000.exe"
Trillian-->C:\Program Files\Trillian\trillian.exe /uninstall
Trinity Gunz 6.18-->C:\Program Files\Trinity Entertainment\Trinity Gunz\Uninstall.exe
Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Ventrilo Client-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F}
Viewpoint Manager (Remove Only)-->C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgrInstaller.exe /u /k
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
VLC media player 0.9.4-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Installer Clean Up-->MsiExec.exe /X{121634B0-2F4B-11D3-ADA3-00C04F52DD52}
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{020D8396-D6D9-4B53-A9A1-83C47E2E27AA}
Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{D9D754A1-EAC5-406C-A28B-C49B1E846711}
Windows Live Messenger-->MsiExec.exe /X{0AAA9C97-74D4-47CE-B089-0B147EF3553C}
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Live Sign-in Assistant-->MsiExec.exe /I{505DF7A3-88D5-4DD6-9AD5-C98C2ED0CEC4}
Windows Live Upload Tool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinPcap 3.1-->C:\Program Files\WinPcap\uninstall.exe
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
Xbox 360 Controller for Windows-->"C:\WINDOWS\$NtUninstall_Xbox_360_CC_Driver$\spuninst\spuninst.exe"
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

=====HijackThis Backups=====

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com [2008-08-01]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/ [2008-08-01]
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file) [2008-08-01]
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-08-01]
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com [2008-08-01]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01 [2008-08-01]
O1 - Hosts: 89.212.75.165 l2patcher.lineage2.com [2008-08-01]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul...rch/search.html [2008-08-01]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = [2008-08-01]
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-08-01]
O2 - BHO: (no name) - {0A94B111-4504-4e26-AB05-E61E474AA38B} - (no file) [2008-08-01]
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - (no file) [2008-08-01]
O1 - Hosts: 89.212.75.165 nProtect.lineage2.com [2008-08-01]
R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL [2008-08-01]
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local [2008-08-01]
O2 - BHO: (no name) - {6440C948-9129-4912-AD77-05197AEEE798} - C:\WINDOWS\system32\cbXQhIXq.dll (file missing) [2008-08-01]
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar.dll [2008-08-01]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = [2008-08-01]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com [2008-08-01]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ [2008-08-01]
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-08-01]
O1 - Hosts: 89.212.75.165 l2authd.lineage2.com [2008-08-01]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2008-08-01]
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm [2008-08-01]
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet [2008-08-01]
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm [2008-08-01]
O2 - BHO: {fc7bca8f-c41a-c738-cba4-11727403c88b} - {b88c3047-2711-4abc-837c-a14cf8acb7cf} - C:\WINDOWS\system32\ixlwmj.dll (file missing) [2008-08-01]
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML [2008-08-01]
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp [2008-08-01]
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install [2008-08-01]
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar.dll [2008-08-01]
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit [2008-08-01]
O4 - HKLM\..\Run: [449fddb0] "rundll32.exe" "C:\WINDOWS\system32\xmqlidph.dll",b [2008-08-01]
O4 - HKCU\..\Run: [igndlm.exe] "C:\Program Files\IGN\Download Manager\DLM.exe" /windowsstart /startifwork [2008-08-01]
O4 - Startup: Hare.lnk = C:\Program Files\Dachshund Software\Hare\Hare.exe [2008-08-01]
O4 - HKCU\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup [2008-08-01]
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-08-01]
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime [2008-08-01]
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized [2008-08-01]
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2008-08-01]
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot [2008-08-01]
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\googletoolbar.dll/cmsimilar.html [2008-08-01]
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\googletoolbar.dll/cmcache.html [2008-08-01]
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - (no file) [2008-08-01]
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-08-01]
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll [2008-08-01]
O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k [2008-08-01]
O4 - HKLM\..\Run: [WebcamMaxMoniter] "C:\Program Files\WebcamMax\CAMTHINS.exe" /m [2008-08-01]
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file) [2008-08-01]
O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL [2008-08-01]
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-08-01]
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-08-01]
O4 - HKLM\..\Run: [BM47acee2c] Rundll32.exe "C:\WINDOWS\system32\suskwfhx.dll",s [2008-08-01]
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm [2008-08-01]
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm [2008-08-01]
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\googletoolbar.dll/cmsearch.html [2008-08-01]
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\googletoolbar.dll/cmtrans.html [2008-08-01]
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll [2008-08-01]
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup [2008-08-01]
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe (file missing) [2008-08-01]
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe [2008-08-01]
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe (file missing) [2008-08-01]
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\googletoolbar.dll/cmbacklinks.html [2008-08-01]
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll [2008-08-01]
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll [2008-08-01]
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll [2008-08-01]
O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} (TTestGenXInstallObject) - http://asp.mathxl.com/wizmodules/testgen/i...GenXInstall.cab [2008-08-01]
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB [2008-08-01]
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab [2008-08-01]
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe [2008-08-01]
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe [2008-08-01]
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab [2008-08-01]
O16 - DPF: {4207C2D0-DABA-445B-B40E-A8E1A072FBE6} (CNeopleInstallAXCtl6 Object) - http://d-fighter.nefficient.co.kr/samsungd...e_installer.cab [2008-08-01]
O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedownlo...Plugin11USA.cab [2008-08-01]
O16 - DPF: {5082D9B5-5538-4C50-BDB1-C5F44BFB98CC} (HgRunPub Class) - http://www.hangame.co.jp/publish/HgRunPub.cab [2008-08-01]
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1160778006718 [2008-08-01]
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab [2008-08-01]
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://messenger.zone.msn.com/EN-US/a-LUXR/mjolauncher.cab [2008-08-01]
O16 - DPF: {95D88B35-A521-472B-A182-BB1A98356421} (Pearson Installation Assistant 2) - http://asp.mathxl.com/books/_Players/PearsonInstallAsst2.cab [2008-08-01]
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab [2008-08-01]
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab [2008-08-01]
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab [2008-08-01]
O16 - DPF: {C044CD87-DFB0-4130-A5E4-49361106FBC8} (HanSetupCtrl1009 Class) - http://cdn.hangame.com/hangame/hansetup/HanSetup1009.cab [2008-08-01]
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedownlo...GPlugin9USA.cab [2008-08-01]
O16 - DPF: {D0FD5E32-CABD-4A6E-BD0F-94ACE89CCE03} (HGPluginJP23 Class) - http://down.hangame.co.jp/jp/dist/hgstart/HGPluginJP23.cab [2008-08-01]
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab57176.cab [2008-08-01]
O16 - DPF: {DD583921-A9E9-4FBF-9266-8DC2AB5EA0AF} (HGPlugin10USA Class) - http://gamedownload.ijjimax.com/gamedownlo...Plugin10USA.cab [2008-08-01]
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab [2008-08-01]
O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) - http://asp.mathxl.com/books/_Players/MathPlayer.cab [2008-08-01]
O18 - Filter hijack: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file) [2008-08-01]
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-08-01]
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2008-08-01]
O23 - Service: npkcmsvc - CACE Technologies - (no file) [2008-08-01]
O17 - HKLM\System\CCS\Services\Tcpip\..\{FFB338B7-82B2-4601-BF47-B74B6BC77369}: NameServer = 192.168.1.10,192.168.1.101 [2008-08-01]
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe [2008-08-01]
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe [2008-08-01]
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab [2008-08-01]
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe [2008-08-01]
O4 - HKLM\..\Run: [BM47acee2c] Rundll32.exe "C:\WINDOWS\system32\suskwfhx.dll",s [2008-08-01]
O4 - HKLM\..\Run: [BM47acee2c] Rundll32.exe "C:\WINDOWS\system32\suskwfhx.dll",s [2008-08-01]
O4 - HKLM\..\Run: [BM47acee2c] Rundll32.exe "C:\WINDOWS\system32\suskwfhx.dll",s [2008-08-02]
O4 - HKLM\..\Run: [BM47acee2c] Rundll32.exe "C:\WINDOWS\system32\suskwfhx.dll",s [2008-08-02]
O18 - Filter hijack: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file) [2008-08-02]
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup [2008-08-02]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2008-08-02]
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot [2008-08-02]
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2008-08-02]
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp [2008-08-02]
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe [2008-08-02]
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2008-08-02]
O18 - Filter hijack: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file) [2008-08-02]
O4 - HKLM\..\Run: [BM47acee2c] Rundll32.exe "C:\WINDOWS\system32\suskwfhx.dll",s [2008-08-02]
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe [2008-08-02]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2008-08-03]
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized [2008-08-03]
O4 - HKLM\..\Run: [BM47acee2c] Rundll32.exe "C:\WINDOWS\system32\suskwfhx.dll",s [2008-08-03]
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp [2008-08-03]
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe [2008-08-03]
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2008-08-03]
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot [2008-08-03]
O18 - Filter hijack: text/html - (no CLSID) - (no file) [2008-08-03]
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\googletoolbar.dll/cmsimilar.html [2008-08-04]
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar.dll [2008-08-04]
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm [2008-08-04]
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-08-04]
O4 - Startup: Hare.lnk = C:\Program Files\Dachshund Software\Hare\Hare.exe [2008-08-04]
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup [2008-08-04]
O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL [2008-08-04]
O4 - HKCU\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup [2008-08-04]
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit [2008-08-04]
O2 - BHO: (no name) - {0A94B111-4504-4e26-AB05-E61E474AA38B} - (no file) [2008-08-04]
O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k [2008-08-04]
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm [2008-08-04]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01 [2008-08-04]
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install [2008-08-04]
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized [2008-08-04]
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet [2008-08-04]
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local [2008-08-04]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = [2008-08-04]
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2008-08-04]
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - (no file) [2008-08-04]
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2008-08-04]
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-08-04]
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-08-04]
O4 - HKCU\..\Run: [igndlm.exe] "C:\Program Files\IGN\Download Manager\DLM.exe" /windowsstart /startifwork [2008-08-04]
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime [2008-08-04]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com [2008-08-04]
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\googletoolbar.dll/cmsearch.html [2008-08-04]
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com [2008-08-04]
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-08-04]
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-08-04]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ [2008-08-04]
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm [2008-08-04]
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\googletoolbar.dll/cmbacklinks.html [2008-08-04]
O2 - BHO: {fc7bca8f-c41a-c738-cba4-11727403c88b} - {b88c3047-2711-4abc-837c-a14cf8acb7cf} - C:\WINDOWS\system32\ixlwmj.dll (file missing) [2008-08-04]
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot [2008-08-04]
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp [2008-08-04]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com [2008-08-04]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = [2008-08-04]
O4 - HKLM\..\Run: [449fddb0] "rundll32.exe" "C:\WINDOWS\system32\xmqlidph.dll",b [2008-08-04]
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML [2008-08-04]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/ [2008-08-04]
O2 - BHO: (no name) - {6440C948-9129-4912-AD77-05197AEEE798} - C:\WINDOWS\system32\cbXQhIXq.dll (file missing) [2008-08-04]
O4 - HKLM\..\Run: [WebcamMaxMoniter] "C:\Program Files\WebcamMax\CAMTHINS.exe" /m [2008-08-04]
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm [2008-08-04]
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\googletoolbar.dll/cmcache.html [2008-08-04]
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file) [2008-08-04]
R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL [2008-08-04]
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\googletoolbar.dll/cmtrans.html [2008-08-04]
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar.dll [2008-08-04]
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - (no file) [2008-08-04]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul...rch/search.html [2008-08-04]
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray [2008-08-04]
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file) [2008-08-04]
O4 - HKLM\..\Run: [BM47acee2c] Rundll32.exe "C:\WINDOWS\system32\suskwfhx.dll",s [2008-08-04]
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-08-04]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2008-08-04]
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll [2008-08-04]
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe (file missing) [2008-08-04]
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll [2008-08-04]
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll [2008-08-04]
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe (file missing) [2008-08-04]
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe [2008-08-04]
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe [2008-08-04]
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll [2008-08-04]
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-08-04]
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe [2008-08-04]
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab [2008-08-04]
O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} (TTestGenXInstallObject) - http://asp.mathxl.com/wizmodules/testgen/i...GenXInstall.cab [2008-08-04]
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB [2008-08-04]
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll [2008-08-04]
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab [2008-08-04]
O16 - DPF: {4207C2D0-DABA-445B-B40E-A8E1A072FBE6} (CNeopleInstallAXCtl6 Object) - http://d-fighter.nefficient.co.kr/samsungd...e_installer.cab [2008-08-04]
O16 - DPF: {5082D9B5-5538-4C50-BDB1-C5F44BFB98CC} (HgRunPub Class) - http://www.hangame.co.jp/publish/HgRunPub.cab [2008-08-04]
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://messenger.zone.msn.com/EN-US/a-LUXR/mjolauncher.cab [2008-08-04]
O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedownlo...Plugin11USA.cab [2008-08-04]
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab [2008-08-04]
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1160778006718 [2008-08-04]
O16 - DPF: {95D88B35-A521-472B-A182-BB1A98356421} (Pearson Installation Assistant 2) - http://asp.mathxl.com/books/_Players/PearsonInstallAsst2.cab [2008-08-04]
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab [2008-08-04]
O16 - DPF: {C044CD87-DFB0-4130-A5E4-49361106FBC8} (HanSetupCtrl1009 Class) - http://cdn.hangame.com/hangame/hansetup/HanSetup1009.cab [2008-08-04]
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab [2008-08-04]
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedownlo...GPlugin9USA.cab [2008-08-04]
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab [2008-08-04]
O16 - DPF: {DD583921-A9E9-4FBF-9266-8DC2AB5EA0AF} (HGPlugin10USA Class) - http://gamedownload.ijjimax.com/gamedownlo...Plugin10USA.cab [2008-08-04]
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab57176.cab [2008-08-04]
O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) - http://asp.mathxl.com/books/_Players/MathPlayer.cab [2008-08-04]
O16 - DPF: {D0FD5E32-CABD-4A6E-BD0F-94ACE89CCE03} (HGPluginJP23 Class) - http://down.hangame.co.jp/jp/dist/hgstart/HGPluginJP23.cab [2008-08-04]
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab [2008-08-04]
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab [2008-08-04]
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2008-08-04]
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe [2008-08-04]
O17 - HKLM\System\CCS\Services\Tcpip\..\{FFB338B7-82B2-4601-BF47-B74B6BC77369}: NameServer = 192.168.1.10,192.168.1.101 [2008-08-04]
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe [2008-08-04]
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe [2008-08-04]
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2008-08-04]
O23 - Service: npkcmsvc - CACE Technologies - (no file) [2008-08-04]
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe [2008-08-04]
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-08-04]
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe [2008-08-04]
O4 - HKLM\..\Run: [BM47acee2c] Rundll32.exe "C:\WINDOWS\system32\suskwfhx.dll",s [2008-08-04]
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2008-08-04]
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe [2008-08-04]
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe [2008-08-04]
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe [2008-08-04]
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe [2008-08-04]
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe [2008-08-04]
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2008-08-04]
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc32.exe (file missing) [2008-08-05]
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2008-08-05]
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe [2008-08-05]
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc32.exe (file missing) [2008-08-05]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2008-08-05]
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp [2008-08-05]
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe [2008-08-05]
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized [2008-08-05]
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2008-08-05]
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot [2008-08-05]
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-09-03]
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-09-03]
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc32.exe (file missing) [2008-09-03]
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe [2008-09-03]
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) [2008-09-03]
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-09-03]
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...html?p=ZCfox000 [2008-12-11]
O4 - HKLM\..\Run: [MSN] C:\Windows\wkssvrv.exe [2008-12-11]
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL [2008-12-11]
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\3.bin\M3PLUGIN.DLL,UPF [2008-12-11]
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe [2008-12-11]
O4 - HKLM\..\Run: [ISW.exe] "C:\Program Files\AT&T\Internet Security Wizard\ISW.exe" /AUTORUN [2008-12-11]
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe [2008-12-11]
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL [2008-12-11]
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL [2008-12-11]
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL [2008-12-11]
O2 - BHO: (no name) - {7b20628d-9eac-48fd-ae23-6059cf2cc251} - C:\WINDOWS\system32\AgCPanelSpanis.dll [2009-07-24]
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) [2009-07-24]
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\opnkLdEU.dll [2009-07-24]
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\opnkLdEU.dll [2009-07-24]
O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) [2009-07-24]
O2 - BHO: (no name) - {7b20628d-9eac-48fd-ae23-6059cf2cc251} - C:\WINDOWS\system32\AgCPanelSpanis.dll [2009-07-24]
O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\WINDOWS\ [2009-07-24]
O8 - Extra context menu item: &Search - ?p=ZCfox000 [2009-07-24]
O20 - Winlogon Notify: opnkLdEU - C:\WINDOWS\SYSTEM32\opnkLdEU.dll [2009-07-24]
O4 - Global Startup: twan.exe.lnk = C:\WINDOWS\system32\actmovie.exe [2009-07-24]
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) [2009-07-24]
O23 - Service: Automatic Updates (wuauserv) - Unknown owner - C:\WINDOWS\ [2009-07-24]
O20 - Winlogon Notify: mljburlf - mlJBuRLF.dll (file missing) [2009-07-24]
O2 - BHO: (no name) - {7b20628d-9eac-48fd-ae23-6059cf2cc251} - C:\WINDOWS\system32\AgCPanelSpanis.dll [2009-07-24]
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\opnkLdEU.dll [2009-07-24]
O16 - DPF: {69ef49e5-fe46-4b92-b5fa-2193ab7a6b8a} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab [2009-07-24]
O2 - BHO: (no name) - {7b20628d-9eac-48fd-ae23-6059cf2cc251} - C:\WINDOWS\system32\AgCPanelSpanis.dll [2009-07-24]
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\opnkLdEU.dll (file missing) [2009-07-25]
O2 - BHO: (no name) - {7b20628d-9eac-48fd-ae23-6059cf2cc251} - C:\WINDOWS\system32\AgCPanelSpanis.dll [2009-07-25]
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/static/up...er_4.0.21.0.cab [2009-07-25]
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8081 [2009-07-25]
O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\WINDOWS\ [2009-07-25]
O23 - Service: Automatic Updates (wuauserv) - Unknown owner - C:\WINDOWS\ [2009-07-25]

======Hosts File======

127.0.0.1 serial.alcohol-soft.com
127.0.0.1 www.alcohol-soft.com
127.0.0.1 images.alcohol-soft.com
127.0.0.1 trial.alcohol-soft.com
127.0.0.1 alcohol-soft.com
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com

======Security center information======

AV: BitDefender Antivirus (disabled)
FW: BitDefender Firewall (disabled)

======System event log======

Computer Name: bleepPROOF
Event Code: 7
Message: The device, \Device\CdRom0, has a bad block.

Record Number: 19500
Source Name: Cdrom
Time Written: 20090708003157.000000-240
Event Type: error
User:

Computer Name: bleepPROOF
Event Code: 7
Message: The device, \Device\CdRom0, has a bad block.

Record Number: 19499
Source Name: Cdrom
Time Written: 20090708003150.000000-240
Event Type: error
User:

Computer Name: bleepPROOF
Event Code: 7
Message: The device, \Device\CdRom0, has a bad block.

Record Number: 19497
Source Name: Cdrom
Time Written: 20090708003129.000000-240
Event Type: error
User:

Computer Name: bleepPROOF
Event Code: 36
Message: The time service has not been able to synchronize the system time
for 49152 seconds because none of the time providers has been able to
provide a usable time stamp. The system clock is unsynchronized.

Record Number: 19479
Source Name: W32Time
Time Written: 20090705041414.000000-240
Event Type: warning
User:

Computer Name: bleepPROOF
Event Code: 7000
Message: The Background Intelligent Transfer Service service failed to start due to the following error:
The system cannot find the file specified.


Record Number: 19475
Source Name: Service Control Manager
Time Written: 20090704143612.000000-240
Event Type: error
User:

=====Application event log=====

Computer Name: bleepPROOF
Event Code: 1000
Message: Faulting application imesh.exe, version 8.1.0.62718, faulting module imesh.exe, version 8.1.0.62718, fault address 0x005a3024.

Record Number: 130
Source Name: Application Error
Time Written: 20090314203623.000000-300
Event Type: error
User:

Computer Name: bleepPROOF
Event Code: 1000
Message: Faulting application gunz.exe, version 0.0.0.0, faulting module aikido.f, version 0.0.0.0, fault address 0x000084ae.

Record Number: 129
Source Name: Application Error
Time Written: 20090314142707.000000-300
Event Type: error
User:

Computer Name: bleepPROOF
Event Code: 1000
Message: Faulting application gunz.exe, version 0.0.0.0, faulting module aikido.f, version 0.0.0.0, fault address 0x000084ae.

Record Number: 121
Source Name: Application Error
Time Written: 20090314024236.000000-300
Event Type: error
User:

Computer Name: bleepPROOF
Event Code: 1000
Message: Faulting application gunz.exe, version 0.0.0.0, faulting module aikido.f, version 0.0.0.0, fault address 0x000084ae.

Record Number: 112
Source Name: Application Error
Time Written: 20090313164120.000000-300
Event Type: error
User:

Computer Name: bleepPROOF
Event Code: 1000
Message: Faulting application firefox.exe, version 1.9.0.3334, faulting module quicktime.qts, version 7.4.1.14, fault address 0x00151354.

Record Number: 111
Source Name: Application Error
Time Written: 20090313143349.000000-300
Event Type: error
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\CA\PPRT\bin;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Common Files\DivX Shared\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0204
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"sourcesdk"=c:\program files\steam\steamapps\markywd\sourcesdk
"VProject"=c:\program files\steam\steamapps\markywd\half-life 2 episode two\ep2
"QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip

-----------------EOF-----------------

#6 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 25 July 2009 - 03:16 PM

And GMER :thumbup2:

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive


#7 Kitchen Hand

Kitchen Hand
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:38 PM

Posted 25 July 2009 - 08:48 PM

I had to step out for some personal stuff after I posted the last log.

Running GMER now. Will post it immediately after it's finished scanning.

#8 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 25 July 2009 - 09:27 PM

Ok, I'll be away for about 48 hrs or so due to outstation job.. :)

Don't forget GMER log :thumbup2:

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive


#9 fenzodahl512

fenzodahl512

  • Members
  • 6,738 posts
  • OFFLINE
  •  
  • Local time:10:38 AM

Posted 05 August 2009 - 12:22 AM

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic

Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson
Posted Image Posted Image
Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users