Process System No Record
Process smss.exe Session Manager Subsystem
Process csrss.exe Client/Server Runtime Server Subsystem
Process wininit.exe No Record
Process csrss.exe Client/Server Runtime Server Subsystem
Process services.exe Windows Service Controller
Process lsass.exe Local Security Service
Process lsm.exe No Record
Process winlogon.exe Windows Logon Process
Process svchost.exe Service Host Process
Process svchost.exe Service Host Process
Process svchost.exe Service Host Process
Process svchost.exe Service Host Process
Process svchost.exe Service Host Process
Process svchost.exe Service Host Process
Process audiodg.exe No Record
Process svchost.exe Service Host Process
Process SLsvc.exe No Record
Process svchost.exe Service Host Process
Process svchost.exe Service Host Process
Process spoolsv.exe Printer Spooler Service
Process svchost.exe Service Host Process
Process avgwdsvc.exe No Record
Process IAANTmon.exe No Record
Process svchost.exe Service Host Process
Process SeaPort.exe No Record
Process svchost.exe Service Host Process
Process ViewpointService.exe No Record
Process svchost.exe Service Host Process
Process WLIDSVC.EXE No Record
Process SearchIndexer.exe No Record
Process avgemc.exe Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses.
Process SDWinSec.exe No Record
Process avgrsx.exe No Record
Process avgcsrvx.exe No Record
Process taskeng.exe No Record
Process explorer.exe Windows Explorer
Process WLIDSVCM.EXE No Record
Process dwm.exe No Record
Process igfxtray.exe No Record
Process hkcmd.exe Enables the Intel Hotkey command for graphics driver and keyboard.
Process avgtray.exe No Record
Process sidebar.exe No Record
Process ehtray.exe No Record
Process TeaTimer.exe No Record
Process unsecapp.exe No Record
Process WmiPrvSE.exe No Record
Process ehmsas.exe No Record
Process avgui.exe No Record
Process avgcfgex.exe No Record
Process SUPERANTISPYWARE.EXE No Record
Process svchost.exe Service Host Process
Process taskeng.exe No Record
Process MSASCui.exe No Record
Process Defrag.exe No Record
Process DfrgNtfs.exe No Record
Process AWC.exe Advanced WindowsCare
Process chrome.exe No Record
Process Sut_ClonedFilesFinder.exe No Record
Process chrome.exe No Record
Process chrome.exe No Record
Process SearchProtocolHost.exe No Record
Process SearchFilterHost.exe No Record
Services AppleMobileDeviceService.exe Added by iTunes 7.3 to interface with Apple mobile devices. Allows iTunes to interact with iPhone when connected to the computer.
Services avgemc.exe Related to AVG anti-virus
Services avgwdsvc.exe No Record
Services GoogleUpdaterService.exe Related to Google_Updater_Service Note: Located in C:\Program Files\Google\Common\Google Updater\
Services Iaantmon.exe Intel related
Services iPodService.exe Related to Apple iPod.
Services SDWinSec.exe No Record
Services ViewpointService.exe Related to viewpoint which is usually considered foistware, usually installed with AOL
Services wmpnetwk.exe Related to Windows_Media_Player Network Sharing Service. Note: Located in %ProgramFiles%\Windows Media Player\
Start UP autoRun No Record
Start UP ehTray.exe Enables the user to access Windows Messenger from within Windows Media Center Edition
Start UP TeaTimer.exe TeaTimer is a permanent process and registry monitor of the Spybot S&D system protector which perpetually monitors the processes called/initiated. Detects processes wanting to start and gives you options on how to deal with this process in the future
Start UP c No Record
Start UP igfxtray.exe Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel
Start UP hkcmd.exe Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. If the user wishes to have "HotKey" access to Intel's customised graphics properties, it is required, otherwise not. It can be disabled via the Display Properties in the Control Panel
Start UP avgtray.exe No Record
BHO 02478D38-C3F9-4efb-9B51-7695ECA05670 Ycomp*_*_*_*.dll, Ycomp*,*,*,*.dll, yt.dll - Yahoo Companion, http://companion.yahoo.com/
BHO 28AED1AF-B164-44CD-B435-CF04AA955015 No Record
BHO 3CA2F312-6F6E-4B53-A66E-4E65E497C8C0 LinkScannerIE.dll - LinkScanner, http://linkscanner.explabs.com/linkscanner/default.asp
BHO 53707962-6F74-2D53-2644-206D7942484F SDhelper.dll - SpyBot Search&Destroy, http://www.safer-networking.org/index.php
BHO 6EBF7485-159F-4bff-A14F-B9E3AAC4465B No Record
BHO 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 ssv.dll - Related to Sun_Java_software, http://java.com/en/download/index.jsp
BHO 9030D464-4C02-4ABF-8ECC-5164760863C6 WindowsLiveLogin.dll - Microsoft Windows_Live, http://ideas.live.com/
BHO A3BC75A2-1F87-4686-AA43-5347D756017C No Record
BHO AA58ED58-01DD-4d91-8333-CF10577473F7 googletoolbar.dll, googletoolbar*.dll, googlenav.dll, googletoolbar_en_*.**-big.dll, googletoolbar_en_*.*.**-deleon.dll - Google Toolbar, http://toolbar.google.com/
BHO AF69DE43-7D58-4638-B6FA-CE66B5AD205D swg.dll - Google Toolbar Notifier, http://googlesystem.blogspot.com/2006/07/g...ult-search.html
BHO E15A8DC0-8516-42A1-81EA-DC94EC1ACF10 No Record
BHO FDAD4DA1-61A2-4FD8-9C17-86F7AC245081 No Record
Tool Bar 2318C2B1-4965-11d4-9B18-009027A5CD4F googletoolbar.dll, googletoolbar*.dll, googlenav.dll, googletoolbar_en_*.**-big.dll, googletoolbar_en_*.*.**-deleon.dll - Google Toolbar, //toolbar.google.com/
Tool Bar 28AED1AF-B164-44CD-B435-CF04AA955015 No Record
Tool Bar 21FA44EF-376D-4D53-9B0F-8A89D3229068 No Record
Tool Bar CCC7A320-B3CA-4199-B1A6-9F516DD69829 No Record
Button {08B0E5C0-4FCB-11CF-AAA5-00401C608501} No Database
Button {2670000A-7350-4f3c-8081-5663EE0C6C49} No Database
Button {85d1f590-48f4-11d9-9669-0800200c9a66} No Database
Button {92780B25-18CC-41C8-B9BE-3C9C571A8263} No Database
Button {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} No Database
ActiveX 22492231-AEF0-49FC-9180-CE8969AB1273 No Record
ActiveX 3860DD98-0549-4D50-AA72-5D17D200EE10 No Record
ActiveX 5D86DDB5-BDF9-441B-9E9E-D4730F4EE499 oscan8.cab Bitdefender
ActiveX 6CCE3920-3183-4B3D-808A-B12EB769DE12 No Record
ActiveX 8FFBE65D-2C9C-4669-84BD-5829DC0B603C No Record
ActiveX 9191F686-7F0A-441D-8A98-2FE3AC1BD913 No Record
ActiveX BB21F850-63F4-4EC9-BF9D-565BD30C9AE9 axscan.cab WindowSecurity_TrojanScan Licensed from Emsi Software GmbH, A.K.A. a-squared.
ActiveX E6BB2089-163F-466B-812A-748096614DFD No Record
============================================================
While we understand your frustration at having to wait, please note that Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large, as are other comparable sites that help others with malware issues. Athough our HJT Team members work on hundreds of requests each day, they are all volunteers who work logs when they can and are able to do so. No one is paid by Bleeping Computer for their assistance to our members.
Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, you wouldn't want someone to assist you who is not familiar with your issue and attempt to fix it, would you?
Please be patient. It may take a while to get a response but your log will be reviewed and answered as soon as possible.
Thank you for understanding.
Edited by garmanma, 12 December 2009 - 11:00 AM.