Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Having some trouble but unsure of what


  • This topic is locked This topic is locked
4 replies to this topic

#1 jmjames

jmjames

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:06 AM

Posted 22 February 2010 - 02:10 PM

Asa Lama Lakum and Hello to all! New here and I've never had any problems with any type of spyware or malware.. I honestly have no idea what the second one even is but now when I log into Windows XP I get two pop up alerts telling me 1) Windows cannot find 'C:\windows\system32\ddcyx.exe' and then 2) Windows caanot load or run 'C:\windows\system32\ddcyx.exe' and then once everything finishes loading up i receive a third pop up alert, a RUNDLL window pops up with 3) error loading C:\windows\system32\burolage.dll

I have no idea what any of this means and last night windows just stopped working completely, gave me a blank black screen in the middle of reading my article for class. When I restarted, I ran every scan my McAfee Security Center had and it's helped but not much, let me know that Windows recovered from a serious error. The computer is still running slow, programs that have always worked either don't load at all when i click them or take more than 10 mins to load. A friend told me to try Avira AntiVirus, which I've downloaded and installed but not run, after I run HijackThis for the log because she claims this is what fixed her computer but I'd like a few opinions before I go running things I know nothing about. I did however run HiJackThis since I have before used this program; here's the log:

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 12:10:34 PM, on 02/22/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Smith Micro\StuffIt\ArcNameService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jazmin\My Documents\Downloads\avira_antivir_personal_en.exe
C:\Documents and Settings\Jazmin\My Documents\Downloads\avira_antivir_personal_en.exe
C:\Documents and Settings\Jazmin\My Documents\Downloads\avira_antivir_personal_en.exe
C:\DOCUME~1\Jazmin\LOCALS~1\Temp\RarSFX0\basic\presetup.exe
C:\DOCUME~1\Jazmin\LOCALS~1\Temp\RarSFX1\basic\presetup.exe
C:\DOCUME~1\Jazmin\LOCALS~1\Temp\RarSFX2\basic\presetup.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\msiexec.exe
C:\DOCUME~1\Jazmin\LOCALS~1\Temp\RarSFX0\basic\setup.exe
C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe
C:\DOCUME~1\Jazmin\LOCALS~1\Temp\RarSFX2\basic\setup.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/.../search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.notepad.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/.../search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://aimtoday.aol.com/_ads/adsPopup2.htm?0
R3 - URLSearchHook: (no name) - _{4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
R3 - URLSearchHook: (no name) - _{EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
F3 - REG:win.ini: load=C:\WINDOWS\system32\ddcyx.exe
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: TTB000000 Class - {62960D20-6D0D-1AB4-4BF1-95B0B5B8783A} - C:\WINDOWS\COUPON~1.DLL
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\iifcbaa.dll (file missing)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: (no name) - {BC6087DC-87EB-4124-8877-5561F3BA6B0C} - C:\WINDOWS\system32\ddcyx.dll (file missing)
O2 - BHO: (no name) - {C5AF2622-8C75-4dfb-9693-23AB7686A456} - C:\WINDOWS\DH.dll (file missing)
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: CouponBar - {5BED3930-2E9E-76D8-BACC-80DF2188D455} - C:\WINDOWS\CouponBarIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: (no name) - {5617ECA9-488D-4BA2-8562-9710B9AB78D2} - (no file)
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\Program Files\SBC Yahoo!\Connection Manager\IP InSight\IPMon32.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPSON Stylus C84 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P23 "EPSON Stylus C84 Series" /O6 "USB002" /M "Stylus C84"
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu72.exe 61A847B5BBF72815308B2B27128065E9C084320161C4661227A755E9C2933154389A
O4 - HKLM\..\Run: [LexPPS.exe] C:\WINDOWS\system32\lexpps.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [net] "C:\DOCUME~1\Jazmin\LOCALS~1\Temp\xsownceram.tmp"
O4 - HKLM\..\Run: [smss32.exe] C:\WINDOWS\system32\smss32.exe
O4 - HKLM\..\Run: [fahedulev] Rundll32.exe "c:\windows\system32\burolage.dll",a
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MSKAGENTEXE] c:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe
O4 - HKCU\..\Run: [CU1] C:\Program Files\Common Files\VCClient\VCClient.exe
O4 - HKCU\..\Run: [CU2] C:\Program Files\Common Files\VCClient\VCMain.exe
O4 - HKCU\..\Run: [DellTransferAgent] "C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe"
O4 - HKCU\..\Run: [Sen] "C:\DOCUME~1\Jazmin\APPLIC~1\RACLE~1\ati2evxx.exe" -vt yazb
O4 - HKCU\..\Run: [QdrModule12] "C:\Program Files\QdrModule\QdrModule12.exe"
O4 - HKCU\..\Run: [QdrPack12] "C:\Program Files\QdrPack\QdrPack12.exe"
O4 - HKCU\..\Run: [Xmrqnkzj] C:\WINDOWS\SYSTEM32\T?sks\d?dplay.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [smss32.exe] C:\WINDOWS\system32\smss32.exe
O4 - HKCU\..\Run: [TOY5KNQ8OC] C:\DOCUME~1\Jazmin\LOCALS~1\Temp\Fvj.exe
O4 - HKUS\S-1-5-21-3472921738-3116946356-619881995-1006\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup (User 'Gina')
O4 - HKUS\S-1-5-21-3472921738-3116946356-619881995-1006\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 (User 'Gina')
O4 - HKUS\S-1-5-21-3472921738-3116946356-619881995-1006\..\Run: [DellTransferAgent] "C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe" (User 'Gina')
O4 - S-1-5-18 Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: dlbcserv.lnk = C:\Program Files\Dell Photo Printer 720\dlbcserv.exe
O4 - Global Startup: HOTSYNCSHORTCUTNAME.lnk = C:\Program Files\Handspring\Hotsync.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.74\AMVConverter\grab.html
O8 - Extra context menu item: Add to Media Manager... - C:\Program Files\MP3 Player Utilities 3.74\MediaManager\grab.html
O9 - Extra button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\common\yiesrvc.dll
O9 - Extra button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.buy-internetsecurity10.com
O15 - Trusted Zone: http://*.buy-is2010.com
O15 - Trusted Zone: http://*.is-software-download.com
O15 - Trusted Zone: http://*.is-software-download25.com
O15 - Trusted Zone: http://*.is10-soft-download.com
O15 - Trusted Zone: http://*.buy-internetsecurity10.com (HKLM)
O15 - Trusted Zone: http://*.buy-is2010.com (HKLM)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O17 - HKLM\System\CCS\Services\Tcpip\..\{8967C074-20E8-45AD-B850-729997C5EC48}: NameServer = 68.94.156.1 151.164.8.201
O17 - HKLM\System\CCS\Services\Tcpip\..\{E4FFCE73-1484-43D4-B234-74C4E2E6B2E0}: NameServer = 83.149.115.157,4.2.2.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 93.188.164.62,93.188.161.17
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 93.188.164.62,93.188.161.17
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - AppInit_DLLs: c:\windows\system32\tudoraku.dll lepujeji.dll c:\windows\system32\gurabimi.dll c:\windows\system32\burolage.dll
O20 - Winlogon Notify: iifcbaa - iifcbaa.dll (file missing)
O21 - SSODL: sepunesuk - {d324d673-6e8d-4b7f-af13-e6c6812e7f83} - c:\windows\system32\tudoraku.dll (file missing)
O21 - SSODL: kanupupil - {9d978417-b70c-41b2-aead-667454e58017} - c:\windows\system32\burolage.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: mujuzedij - {d324d673-6e8d-4b7f-af13-e6c6812e7f83} - c:\windows\system32\tudoraku.dll (file missing)
O22 - SharedTaskScheduler: tokatiluy - {9d978417-b70c-41b2-aead-667454e58017} - c:\windows\system32\burolage.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Stuffit Archive Name Service - Smith Micro Software, Inc. - C:\Program Files\Smith Micro\StuffIt\ArcNameService.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\SYSTEM32\YPCSER~1.EXE

--
End of file - 16081 bytes

Thankful for any help, especially fast help! Need this fixed ASAP. I'm an art student that spends tons of time in Photoshop & Illustrator and a slow computer means being at the computer hrs and hrs more than necessary.

-jmjames

Edited by Orange Blossom, 22 February 2010 - 02:36 PM.
Move to log forum. ~ OB


BC AdBot (Login to Remove)

 


#2 syler

syler

  • Malware Response Team
  • 8,150 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Warrington, UK
  • Local time:06:06 PM

Posted 24 February 2010 - 07:18 PM

Hello,

My name is Syler and I will be helping you to solve your Malware issues.

Please download Malwarebytes' Anti-Malware from Here

Note: If you already have Malwarebytes' Anti-Malware, just update then run it.
  • Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan (the scan may take some time to finish, so please be patient).
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy and Paste the entire report in your next reply .
Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.


  • Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
  • Double click on RSIT.exe to run RSIT.
  • Click Continue at the disclaimer screen.
  • Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)


Then please post back here with the following:
  • MBAM log
  • log.txt
  • info.txt

Thanks

unite.jpg


#3 jmjames

jmjames
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:06 AM

Posted 28 February 2010 - 02:30 AM

Hello Syler and thank you for taking the time (: Already this computer is working amazingly better than before! My mother says thank you, thank you! She has no idea what she tried to download but she's so gracious it could be fixed. Here are the logs you asked for

1.) Mbam

Malwarebytes' Anti-Malware 1.44
Database version: 3805
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

02/28/2010 1:12:26 AM
mbam-log-2010-02-28 (01-12-26).txt

Scan type: Quick Scan
Objects scanned: 139308
Time elapsed: 32 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 2
Registry Keys Infected: 63
Registry Values Infected: 12
Registry Data Items Infected: 16
Folders Infected: 65
Files Infected: 311

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\WINDOWS\SYSTEM32\lepujeji.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\SYSTEM32\tijojepe.dll (Trojan.Vundo.H) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\iifcbaa (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mediagateway.installer.1 (Adware.MediaAccess) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{04a38f6b-006f-4247-ba4c-02a139d5531c} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{480098c6-f6ad-4c61-9b5c-2bae228a34d1} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{4937d5d1-2039-409a-bd83-fec9b39b2356} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{610e0e95-8f2f-4b71-966e-f91701d4dc2c} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6160f76a-1992-4b17-a32d-0c706d159105} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{67a89831-6bc7-4cc0-a2c3-560f9a581e64} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{877f3eab-4462-44df-8475-6064eafd7fbf} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{caf9d798-c659-4b9b-8e19-ee27c3d04ee7} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{dd469a88-316c-441d-b712-783d9b9a6707} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{d28cd14c-50be-4cfa-951e-b37f25da3472} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c5af2622-8c75-4dfb-9693-23ab7686a456} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{91e523db-2a1c-4231-bb06-9be27c28739a} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{25b8d58c-b0cb-46b0-ba64-05b3804e4e86} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{35b8d58c-b0cb-46b0-ba64-05b3804e4e86} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{cdbfb47b-58a8-4111-bf95-06178dce326d} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5af2622-8c75-4dfb-9693-23ab7686a456} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{fbe58cc0-d14b-45fe-a717-57bb8247f652} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c5af2622-8c75-4dfb-9693-23ab7686a456} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ism (Adware.ISM) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\LoaderX.exe (Adware.Winad) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\WR (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\aldd (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Bind (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MS Juan (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\QdrDrive (Adware.ISM) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\QdrModule (Adware.ISM) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\QdrPack (Adware.ISM) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Trymedia Systems (Adware.TryMedia) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\jkwslist (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Juan (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{16b6279b-9ff5-41fb-8bf9-404324f5dd1f}}_is1 (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1fb52ab3-5987-45a2-85e0-f3ec30dddc29}}_is1 (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{c5096216-7703-409e-b85a-8a6ee7395128}}_is1 (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Outerinfo (Adware.PurityScan) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Screensavers.com (Adware.Comet) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Funband Serach (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Funband Serach (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\ROUA3O12PW (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\TOY5KNQ8OC (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\fahedulev (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{86227d9c-0efe-4f8a-aa55-30386a3f5686} (Adware.ISTBar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{4d25f926-b9fe-4682-bf72-8ab8210d6d75} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Mozilla\Firefox\Extensions\{59a40ac9-e67d-4155-b31d-4b7330fcd2d6} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{0ba0192d-94a5-45e3-b2b8-3ec5a1a0b5ec} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{2224e955-00e9-4613-a844-ce69fccaae91} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\smss32.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\smss32.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\toy5knq8oc (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: tijojepe.dll -> Delete on reboot.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buy-is2010.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buy-is2010.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\is10-soft-download.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buy-Internetsecurity10.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buy-Internetsecurity10.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\is-software-download.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\is-software-download25.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\activedesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 93.188.164.62,93.188.161.17 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{e4ffce73-1484-43d4-b234-74c4e2e6b2e0}\NameServer (Trojan.DNSChanger) -> Data: 83.149.115.157,4.2.2.1 -> Quarantined and deleted successfully.

Folders Infected:
C:\Program Files\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\DoubleD\JuicyAccess Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\chrome (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\chrome\content (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\components (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\ISM (Adware.ISM) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF\chrome (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF\chrome\content (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF\components (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\MyWaySA (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWaySA\SrchAsDe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWaySA\SrchAsDe\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\Outerinfo (Adware.PurityScan) -> Quarantined and deleted successfully.
C:\Program Files\Outerinfo\FF (Adware.PurityScan) -> Quarantined and deleted successfully.
C:\Program Files\Outerinfo\FF\components (Adware.PurityScan) -> Quarantined and deleted successfully.
C:\Program Files\QdrDrive (Adware.SearchAid) -> Quarantined and deleted successfully.
C:\Program Files\QdrModule (Adware.ISM) -> Quarantined and deleted successfully.
C:\Program Files\QdrPack (Adware.ISM) -> Quarantined and deleted successfully.
C:\Program Files\SideFind (Adware.ISTBar) -> Quarantined and deleted successfully.
C:\Program Files\SideFind\update (Adware.ISTBar) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\YourSiteBar (Adware.ISTBar) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Start Menu\Programs\Internet Speed Monitor (Adware.AdSponsor) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Start Menu\Programs\Outerinfo (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Cache (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Cache\?? (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Data\?? (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Icons (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Icons\?? (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Skins (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Skins\?? (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Cache (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Cache\?? (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Data\?? (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Icons (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Icons\?? (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Skins (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\DoubleD\JuicyAccess Toolbar\0.0.0.0\Skins\?? (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache (AdWare.Cydoor) -> Quarantined and deleted successfully.

Files Infected:
C:\WINDOWS\system32\iifcbaa.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\lepujeji.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\lulapifi.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\roloropo.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\tijojepe.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\wejuwava.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yitefuko.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\21.tmp (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\22.tmp (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\50.tmp (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Temporary Internet Files\Content.IE5\W9Y7WPM3\avplus[1].dll (Rogue.AntivirusPlus) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\unins000.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\unins000.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\Data\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\chrome.manifest (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\install.rdf (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\chrome\NPAddOn.jar (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\chrome\content\NPAddOn.js (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\chrome\content\NPAddOn.xul (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\components\NPFFAddOn.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\components\NPFFAddOn.xpt (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Internet Saving Optimizer\3.4.0.4340\FF\components\NPFFHelperComponent.js (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\ISM\Uninstall.exe (Adware.ISM) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\hppx.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\MAHelper.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\unins000.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\unins000.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\Data\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF\chrome.manifest (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF\install.rdf (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF\chrome\HPAddOn.jar (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF\chrome\content\HPAddOn.js (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF\chrome\content\HPAddOn.xul (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF\components\HPFFAddOn.xpt (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Media Access Startup\1.5.0.850\FF\components\HPFFHelperComponent.js (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\Outerinfo\Terms.rtf (Adware.PurityScan) -> Quarantined and deleted successfully.
C:\Program Files\Outerinfo\FF\chrome.manifest (Adware.PurityScan) -> Quarantined and deleted successfully.
C:\Program Files\Outerinfo\FF\install.rdf (Adware.PurityScan) -> Quarantined and deleted successfully.
C:\Program Files\Outerinfo\FF\components\OuterinfoAds.xpt (Adware.PurityScan) -> Quarantined and deleted successfully.
C:\Program Files\QdrDrive\qdrloader.exe (Adware.SearchAid) -> Quarantined and deleted successfully.
C:\Program Files\QdrModule\dic.gz (Adware.ISM) -> Quarantined and deleted successfully.
C:\Program Files\QdrModule\kwd.gz (Adware.ISM) -> Quarantined and deleted successfully.
C:\Program Files\QdrPack\dicts.gz (Adware.ISM) -> Quarantined and deleted successfully.
C:\Program Files\QdrPack\trgts.gz (Adware.ISM) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\unins000.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\unins000.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\Data\eacore.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\Data\URLDynamic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\System Search Dispatcher\1.3.0.840\Data\URLStatic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files\YourSiteBar\imagemap_normal.bmp (Adware.ISTBar) -> Quarantined and deleted successfully.
C:\Program Files\YourSiteBar\version.txt (Adware.ISTBar) -> Quarantined and deleted successfully.
C:\Program Files\YourSiteBar\yoursitebar.xml (Adware.ISTBar) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Start Menu\Programs\Internet Speed Monitor\Uninstall.lnk (Adware.AdSponsor) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Start Menu\Programs\Outerinfo\Terms.lnk (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-224442.500.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-224500.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-224607.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-224614.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090818-212749.599.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090818-214813.459.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090818-223319.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090818-223336.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090818-223626.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090818-223648.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090818-223815.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090818-224500.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090818-224950.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090929-223028.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091001-223328.921.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091001-223433.484.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091001-223615.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091001-223616.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091001-223847.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091001-230021.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091001-231216.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091009-224716.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091010-233032.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091010-233037.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091011-000404.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091011-190248.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091019-220449.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091019-222655.484.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091019-222720.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091019-223127.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091021-182331.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091022-213657.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091022-213745.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091022-213824.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091022-214006.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091022-214202.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091022-215023.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091023-230407.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091024-190225.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091024-190504.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20091024-200131.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\rstatus.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090717-013906.937.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090718-015331.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090718-175246.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090718-175248.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090720-142439.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090722-151036.734.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090722-151105.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090722-151128.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090722-182751.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090723-131527.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090723-131544.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090723-131553.093.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090723-131610.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090723-131632.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090723-131849.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090724-075503.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090724-204047.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090726-175354.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090727-122233.156.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090727-150741.834.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090728-140657.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-003918.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-004340.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-004438.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-004440.843.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-024634.156.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-024636.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-130012.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090730-122728.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090731-115815.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090731-172634.636.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-115423.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090808-152625.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-105504.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-161032.921.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\rstatus.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-224500.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-224607.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090818-212749.209.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090818-214813.412.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090818-223319.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090818-223336.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090818-223626.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090818-223648.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090818-223815.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090818-224500.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090818-224950.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090929-223028.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091001-223328.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091001-223433.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091001-223615.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091001-223616.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091001-223847.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091001-230021.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091001-231216.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091009-224716.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091010-233032.171.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091010-233037.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091011-000404.171.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091011-190248.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091019-220449.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091019-222655.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091019-222720.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091019-223127.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091021-182331.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091022-213657.156.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091022-213745.500.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091022-213824.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091022-214006.484.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091022-214201.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091022-215023.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091023-230407.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091024-190224.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091024-190504.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091024-200131.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091025-191401.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091025-191419.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091025-191434.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091025-191455.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091025-191512.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091025-191550.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091026-220148.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091026-220207.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091026-220208.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091026-225501.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-091116.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-095321.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-095524.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-095550.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-101949.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-102018.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-102147.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-102220.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-102230.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-102356.984.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-104504.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-213549.734.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-213640.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-214944.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-215142.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-221528.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-222101.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091029-222616.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091101-161205.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-000526.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-000635.734.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-000638.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-000641.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-000948.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-000953.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-000957.171.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-001018.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-001022.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-001023.921.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-001025.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-001026.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-001027.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-001034.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-144109.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-144124.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-144127.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-144131.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-144141.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-150238.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-150251.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-150254.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-150256.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-150258.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-150301.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-150733.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-150739.078.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-153705.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-153922.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-153925.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-154608.265.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-154610.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-154612.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-154618.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-154619.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-154620.843.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-154621.984.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091104-154927.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091119-201330.718.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091119-203859.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091119-204925.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091119-205418.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091119-210309.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091119-210320.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091119-210442.984.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20091119-210610.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20100122-134446.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20100221-113755.884.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20100221-113953.509.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Gina\Local Settings\Application Data\Media Access Startup\1.5.0.850\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-002045.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-013905.203.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090718-015330.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090718-175245.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090718-175248.718.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090720-142437.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090722-151035.625.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090722-151105.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090722-151128.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090722-182751.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-131527.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-131544.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-131553.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-131610.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-131632.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-131849.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-075503.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-204047.171.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090726-175354.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090727-122233.062.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090727-150741.771.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090728-140657.921.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-004438.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-004440.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-024633.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-024636.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-130010.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090730-122727.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090731-115812.484.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090731-172634.307.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-115422.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090808-152624.625.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-105504.265.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-161032.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jazmin\Local Settings\Application Data\Media Access Startup\1.5.0.850\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_0_0_106800.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_0_0_107400.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_1_0_449200.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_1_0_449600.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_1_0_454300.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_2_0_105300.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_2_0_106800.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_2_0_107400.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_3_0_106800.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_3_0_107400.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_4_0_111600.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\AdCache\B_329_4_0_155300.htm (AdWare.Cydoor) -> Quarantined and deleted successfully.
C:\WINDOWS\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\mcrh.tmp (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\xycdd.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\BM33c6b49e.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BM33c6b49e.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\pskt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> Quarantined and deleted successfully.


2.) log.txt

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jazmin at 2010-02-28 01:22:26
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 381 MB (1%) free of 72 GB
Total RAM: 1278 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:22:47 AM, on 02/28/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Smith Micro\StuffIt\ArcNameService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jazmin\My Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\Jazmin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/.../search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.notepad.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/.../search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://aimtoday.aol.com/_ads/adsPopup2.htm?0
R3 - URLSearchHook: (no name) - _{4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
R3 - URLSearchHook: (no name) - _{EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
F3 - REG:win.ini: load=C:\WINDOWS\system32\ddcyx.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: TTB000000 Class - {62960D20-6D0D-1AB4-4BF1-95B0B5B8783A} - C:\WINDOWS\COUPON~1.DLL (file missing)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: (no name) - {BC6087DC-87EB-4124-8877-5561F3BA6B0C} - C:\WINDOWS\system32\ddcyx.dll (file missing)
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: CouponBar - {5BED3930-2E9E-76D8-BACC-80DF2188D455} - C:\WINDOWS\CouponBarIE.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\Program Files\SBC Yahoo!\Connection Manager\IP InSight\IPMon32.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPSON Stylus C84 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P23 "EPSON Stylus C84 Series" /O6 "USB002" /M "Stylus C84"
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu72.exe 61A847B5BBF72815308B2B27128065E9C084320161C4661227A755E9C2933154389A
O4 - HKLM\..\Run: [LexPPS.exe] C:\WINDOWS\system32\lexpps.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [net] "C:\DOCUME~1\Jazmin\LOCALS~1\Temp\xsownceram.tmp"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MSKAGENTEXE] c:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe
O4 - HKCU\..\Run: [CU1] C:\Program Files\Common Files\VCClient\VCClient.exe
O4 - HKCU\..\Run: [CU2] C:\Program Files\Common Files\VCClient\VCMain.exe
O4 - HKCU\..\Run: [DellTransferAgent] "C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe"
O4 - HKCU\..\Run: [Sen] "C:\DOCUME~1\Jazmin\APPLIC~1\RACLE~1\ati2evxx.exe" -vt yazb
O4 - HKCU\..\Run: [QdrModule12] "C:\Program Files\QdrModule\QdrModule12.exe"
O4 - HKCU\..\Run: [QdrPack12] "C:\Program Files\QdrPack\QdrPack12.exe"
O4 - HKCU\..\Run: [Xmrqnkzj] C:\WINDOWS\SYSTEM32\T?sks\d?dplay.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - S-1-5-18 Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: dlbcserv.lnk = C:\Program Files\Dell Photo Printer 720\dlbcserv.exe
O4 - Global Startup: HOTSYNCSHORTCUTNAME.lnk = C:\Program Files\Handspring\Hotsync.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.74\AMVConverter\grab.html
O8 - Extra context menu item: Add to Media Manager... - C:\Program Files\MP3 Player Utilities 3.74\MediaManager\grab.html
O9 - Extra button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\common\yiesrvc.dll
O9 - Extra button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O17 - HKLM\System\CCS\Services\Tcpip\..\{8967C074-20E8-45AD-B850-729997C5EC48}: NameServer = 68.94.156.1 151.164.8.201
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - AppInit_DLLs: c:\windows\system32\tudoraku.dll lepujeji.dll c:\windows\system32\gurabimi.dll c:\windows\system32\burolage.dll c:\windows\system32\vovuhinu.dll
O21 - SSODL: sepunesuk - {d324d673-6e8d-4b7f-af13-e6c6812e7f83} - c:\windows\system32\tudoraku.dll (file missing)
O21 - SSODL: kanupupil - {9d978417-b70c-41b2-aead-667454e58017} - c:\windows\system32\burolage.dll (file missing)
O21 - SSODL: debupitud - {9798593a-192b-41f4-b9b3-dbc42eb56d6b} - c:\windows\system32\vovuhinu.dll (file missing)
O22 - SharedTaskScheduler: mujuzedij - {d324d673-6e8d-4b7f-af13-e6c6812e7f83} - c:\windows\system32\tudoraku.dll (file missing)
O22 - SharedTaskScheduler: tokatiluy - {9d978417-b70c-41b2-aead-667454e58017} - c:\windows\system32\burolage.dll (file missing)
O22 - SharedTaskScheduler: mujuzedij - {9798593a-192b-41f4-b9b3-dbc42eb56d6b} - c:\windows\system32\vovuhinu.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Stuffit Archive Name Service - Smith Micro Software, Inc. - C:\Program Files\Smith Micro\StuffIt\ArcNameService.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\SYSTEM32\YPCSER~1.EXE

--
End of file - 14008 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\ffnxgjmf.job
C:\WINDOWS\tasks\McAfee.com Scan for Viruses - My Computer (DF9QDH71-Gina).job
C:\WINDOWS\tasks\McDefragTask.job
C:\WINDOWS\tasks\McQcTask.job
C:\WINDOWS\tasks\ssbgpyaj.job
C:\WINDOWS\tasks\vvjsubtk.job
C:\WINDOWS\tasks\xxijzncm.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll [2007-03-02 1298024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\mskapbho.dll [2009-07-08 246800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}]
Yahoo! IE Services Button - C:\PROGRA~1\Yahoo!\common\yiesrvc.dll [2007-12-12 222448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2004-12-06 118842]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{62960D20-6D0D-1AB4-4BF1-95B0B5B8783A}]
TTB000000 Class - C:\WINDOWS\COUPON~1.DLL []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files\McAfee\VirusScan\scriptsn.dll [2009-09-16 62784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BC6087DC-87EB-4124-8877-5561F3BA6B0C}]
C:\WINDOWS\system32\ddcyx.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java™ Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-31 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-08-31 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5BED3930-2E9E-76D8-BACC-80DF2188D455} - CouponBar - C:\WINDOWS\CouponBarIE.dll []
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll [2006-10-26 440384]
{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - Veoh Web Player Video Finder - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll [2009-05-19 429816]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe []
"IntelMeM"=C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe []
"DVDLauncher"=C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe []
"UpdateManager"=C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe /r []
"dla"=C:\WINDOWS\system32\dla\tfswctrl.exe []
"IPInSightMonitor 01"=C:\Program Files\SBC Yahoo!\Connection Manager\IP InSight\IPMon32.exe []
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe -start []
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe []
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe []
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe []
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe -atboottime []
"EPSON Stylus C84 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P23 EPSON Stylus C84 Series /O6 USB002 /M Stylus C84 []
"runner1"=C:\WINDOWS\mrofinu72.exe 61A847B5BBF72815308B2B27128065E9C084320161C4661227A755E9C2933154389A []
"LexPPS.exe"=C:\WINDOWS\system32\lexpps.exe []
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2006-10-30 256576]
"mcagent_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2009-10-29 1218008]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-31 149280]
"SMSTray"=C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe [2007-12-14 132624]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"net"=C:\DOCUME~1\Jazmin\LOCALS~1\Temp\xsownceram.tmp []
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"=C:\Program Files\DellSupport\DSAgnt.exe /startup []
"Yahoo! Pager"=C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet []
"MSKAGENTEXE"=c:\PROGRA~1\mcafee\SPAMKI~1\mskagent.exe []
"CU1"=C:\Program Files\Common Files\VCClient\VCClient.exe []
"CU2"=C:\Program Files\Common Files\VCClient\VCMain.exe []
"DellTransferAgent"=C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe []
"Sen"=C:\DOCUME~1\Jazmin\APPLIC~1\RACLE~1\ati2evxx.exe -vt yazb []
"QdrModule12"=C:\Program Files\QdrModule\QdrModule12.exe []
"QdrPack12"=C:\Program Files\QdrPack\QdrPack12.exe []
"Xmrqnkzj"=C:\WINDOWS\SYSTEM32\T?sks\d?dplay.exe []
"Aim6"=C:\Program Files\AIM6\aim6.exe [2009-05-18 49968]
"VeohPlugin"=C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [2009-05-19 3561720]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
dlbcserv.lnk - C:\Program Files\Dell Photo Printer 720\dlbcserv.exe
HOTSYNCSHORTCUTNAME.lnk - C:\Program Files\Handspring\Hotsync.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

C:\Documents and Settings\Jazmin\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="c:\windows\system32\tudoraku.dll lepujeji.dll c:\windows\system32\gurabimi.dll c:\windows\system32\burolage.dll c:\windows\system32\vovuhinu.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-09-20 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
sepunesuk - {d324d673-6e8d-4b7f-af13-e6c6812e7f83} - c:\windows\system32\tudoraku.dll []
kanupupil - {9d978417-b70c-41b2-aead-667454e58017} - c:\windows\system32\burolage.dll []
debupitud - {9798593a-192b-41f4-b9b3-dbc42eb56d6b} - c:\windows\system32\vovuhinu.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
mujuzedij - {d324d673-6e8d-4b7f-af13-e6c6812e7f83} - c:\windows\system32\tudoraku.dll []
tokatiluy - {9d978417-b70c-41b2-aead-667454e58017} - c:\windows\system32\burolage.dll []
mujuzedij - {9798593a-192b-41f4-b9b3-dbc42eb56d6b} - c:\windows\system32\vovuhinu.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
C:\WINDOWS\system32\ddcyx
"notification packages"=scecli
muHESRY.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe"="C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe"="C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\America Online 9.0\waol.exe"="C:\Program Files\America Online 9.0\waol.exe:*:Enabled:AOL"
"C:\Program Files\Yahoo!\Messenger\YPAGER.EXE"="C:\Program Files\Yahoo!\Messenger\YPAGER.EXE:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Yahoo!\Messenger\yserver.exe"="C:\Program Files\Yahoo!\Messenger\yserver.exe:*:Enabled:Yahoo! FT Server"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\iMesh\iMesh5\iMesh.exe"="C:\Program Files\iMesh\iMesh5\iMesh.exe:*:Enabled:iMesh 5"
"C:\Program Files\Kazaa\kazaa.exe"="C:\Program Files\Kazaa\kazaa.exe:*:Enabled:Kazaa"
"C:\Program Files\AIM\aim.exe"="C:\Program Files\AIM\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\Program Files\Gizmo Project\mDNSResponder.exe"="C:\Program Files\Gizmo Project\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Gizmo Project\Gizmo.exe"="C:\Program Files\Gizmo Project\Gizmo.exe:*:Enabled:Gizmo Project"
"C:\Program Files\Common Files\AOL\Loader\aolload.exe"="C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader"
"C:\Program Files\Common Files\AOL\1153334981\ee\aolsoftware.exe"="C:\Program Files\Common Files\AOL\1153334981\ee\aolsoftware.exe:*:Enabled:AOL Services"
"C:\Program Files\Common Files\AOL\1153334981\ee\aim6.exe"="C:\Program Files\Common Files\AOL\1153334981\ee\aim6.exe:*:Enabled:AIM"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe"="C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe:*:Enabled:Kodak Software Updater"
"C:\Program Files\AIM6\aim6.exe"="C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"="C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:*:Enabled:Veoh Web Player "
"C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe"="C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:*:Enabled:McAfee Network Agent"
"C:\WINDOWS\SYSTEM32\muzapp.exe"="C:\WINDOWS\SYSTEM32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Explorer"
"C:\WINDOWS\SYSTEM32\LOGONUI.EXE"="C:\WINDOWS\SYSTEM32\LOGONUI.EXE:*:Enabled:logonui"
"C:\WINDOWS\SYSTEM32\WINLOGON.EXE"="C:\WINDOWS\SYSTEM32\WINLOGON.EXE:*:Enabled:winlogon"
"C:\Program Files\McAfee\VirusScan\mcvsmap.exe"="C:\Program Files\McAfee\VirusScan\mcvsmap.exe:*:Enabled:mcvsmap"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe"="C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe"="C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\America Online 9.0\waol.exe"="C:\Program Files\America Online 9.0\waol.exe:*:Enabled:AOL"
"C:\Program Files\AIM\aim.exe"="C:\Program Files\AIM\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2010-02-28 01:22:27 ----D---- C:\Program Files\trend micro
2010-02-28 01:22:26 ----D---- C:\rsit
2010-02-28 00:23:08 ----D---- C:\Documents and Settings\Jazmin\Application Data\Malwarebytes
2010-02-28 00:08:27 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-02-27 21:36:01 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-02-22 12:57:56 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2010-02-22 12:57:53 ----D---- C:\Program Files\Avira
2010-02-22 12:06:33 ----D---- C:\Program Files\TrendMicro
2010-02-21 03:21:15 ----D---- C:\WINDOWS\Minidump

======List of files/folders modified in the last 1 months======

2010-02-28 01:22:33 ----D---- C:\WINDOWS\Temp
2010-02-28 01:22:27 ----D---- C:\Program Files
2010-02-28 01:21:08 ----D---- C:\Program Files\Mozilla Firefox
2010-02-28 01:19:53 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-28 01:19:47 ----A---- C:\WINDOWS\ModemLog_Intel® 537EP V9x DF PCI Modem.txt
2010-02-28 01:16:48 ----D---- C:\WINDOWS\SYSTEM32
2010-02-28 01:16:47 ----D---- C:\WINDOWS\system32\DRIVERS
2010-02-28 01:16:18 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-28 01:14:22 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-02-28 01:12:20 ----SD---- C:\WINDOWS\Tasks
2010-02-28 01:12:20 ----D---- C:\WINDOWS
2010-02-26 22:24:29 ----AC---- C:\WINDOWS\IE4 Error Log.txt
2010-02-26 21:36:04 ----HD---- C:\WINDOWS\INF
2010-02-26 21:32:31 ----RSHD---- C:\WINDOWS\system32\DLLCACHE
2010-02-26 21:27:50 ----D---- C:\WINDOWS\Prefetch
2010-02-22 12:06:33 ----SHD---- C:\WINDOWS\Installer
2010-02-22 12:06:33 ----HD---- C:\Config.Msi
2010-02-22 12:04:30 ----D---- C:\WINDOWS\WinSxS
2010-02-22 12:04:28 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-02-21 16:04:27 ----D---- C:\Program Files\Last.fm
2010-02-20 02:32:42 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-02-20 02:32:04 ----D---- C:\Documents and Settings\All Users\Application Data\Viewpoint
2010-02-20 02:28:38 ----D---- C:\Program Files\Common Files
2010-01-31 18:35:10 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-01-31 17:26:08 ----D---- C:\Program Files\Common Files\Adobe
2010-01-31 17:25:50 ----D---- C:\Program Files\Adobe
2010-01-31 02:01:24 ----D---- C:\Documents and Settings\Jazmin\Application Data\CVS

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 36096]
R1 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2009-09-16 214664]
R1 MPFP;MPFP; C:\WINDOWS\System32\Drivers\Mpfp.sys [2009-07-16 120136]
R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2004-07-14 5627]
R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2004-07-14 23545]
R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2004-11-23 40480]
R2 dsunidrv;DellSupport UniDriver; C:\WINDOWS\system32\DRIVERS\dsunidrv.sys [2007-02-25 5376]
R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2004-12-06 25883]
R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2004-12-06 34843]
R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2004-12-06 4123]
R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2004-12-06 2239]
R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2004-12-06 86586]
R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2004-12-06 15227]
R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2004-12-06 6363]
R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2004-12-06 98714]
R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2004-12-06 100603]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir Desktop\avgntflt.sys []
R3 E100B;Intel® PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-02-10 154112]
R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-09-20 1302332]
R3 IntelC51;IntelC51; C:\WINDOWS\system32\DRIVERS\IntelC51.sys [2004-03-05 1233525]
R3 IntelC52;IntelC52; C:\WINDOWS\system32\DRIVERS\IntelC52.sys [2004-03-05 647929]
R3 IntelC53;IntelC53; C:\WINDOWS\system32\DRIVERS\IntelC53.sys [2004-06-15 61157]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\WINDOWS\system32\drivers\mfeavfk.sys [2009-09-16 79816]
R3 mfebopk;McAfee Inc. mfebopk; C:\WINDOWS\system32\drivers\mfebopk.sys [2009-09-16 35272]
R3 mfesmfk;McAfee Inc. mfesmfk; C:\WINDOWS\system32\drivers\mfesmfk.sys [2009-09-16 40552]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mohfilt;mohfilt; C:\WINDOWS\system32\DRIVERS\mohfilt.sys [2004-03-05 37048]
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2004-09-17 732928]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-01-27 260352]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys []
S3 CA561;Micro Webcam; C:\WINDOWS\System32\Drivers\SPCA561.SYS []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 DSproct;DSproct; \??\C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys []
S3 mferkdk;McAfee Inc. mferkdk; C:\WINDOWS\system32\drivers\mferkdk.sys [2009-09-16 34248]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 PalmUSBD;PalmUSBD; C:\WINDOWS\system32\drivers\PalmUSBD.sys [2007-05-23 16694]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-08-31 153376]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2004-03-04 311296]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [2009-12-08 93320]
R2 mcmscsvc;McAfee Services; C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe [2009-07-09 865832]
R2 McNASvc;McAfee Network Agent; c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe [2009-07-07 2482848]
R2 McProxy;McAfee Proxy Service; c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe [2009-07-08 359952]
R2 McShield;McAfee Real-time Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [2009-09-16 144704]
R2 MpfService;McAfee Personal Firewall Service; C:\Program Files\McAfee\MPF\MPFSrv.exe [2009-10-27 895696]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\McAfee\MSK\MskSrver.exe [2009-07-08 26640]
R2 Stuffit Archive Name Service;Stuffit Archive Name Service; C:\Program Files\Smith Micro\StuffIt\ArcNameService.exe [2008-01-31 157016]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2006-10-30 492608]
R3 McSysmon;McAfee SystemGuards; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [2009-09-16 606736]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-04 267776]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2005-12-28 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 DSBrokerService;DSBrokerService; C:\Program Files\DellSupport\brkrsvc.exe [2007-03-07 76848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McODS;McAfee Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe [2009-09-16 365072]
S3 NetSvc;Intel NCS NetService; C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe [2003-12-17 143360]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
S3 YPCService;YPCService; C:\WINDOWS\SYSTEM32\YPCSER~1.EXE [2003-05-19 86016]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

3.) info.txt

info.txt logfile of random's system information tool 1.06 2010-02-28 01:22:51

======Uninstall list======

-->"C:\Program Files\SBC Yahoo!\umuninst.exe" /S
-->C:\PROGRA~1\Yahoo!\common\unybase.exe
-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
3DVIA player 4.1-->MsiExec.exe /X{4E868D3D-6EEB-4273-926C-2287236B5B79}
Acrobat.com-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe -uninstall com.adobe.mauby 4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
Acrobat.com-->MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07}
Adobe AIR-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-1033-0000-0000-000000000001}
Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5B39}
Adobe Download Manager 2.0 (Remove Only)-->"C:\Program Files\Common Files\Adobe\ESD\uninst.exe"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001}
Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D}
Adobe Reader 9.3-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A93000000001}
Adobe Shockwave Player-->C:\WINDOWS\SYSTEM32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\SYSTEM32\Adobe\SHOCKW~1\Install.log
Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-1033-0000-B58E-000000000001}
AIM 6-->C:\Program Files\AIM6\uninst.exe
AOL Uninstaller (Choose which Products to Remove)-->C:\Program Files\Common Files\AOL\uninstaller.exe
Apple Software Update-->MsiExec.exe /I{A50C25D7-62E9-4511-AD70-8E2DA5E79B7D}
AT&T Yahoo! Applications-->C:\PROGRA~1\Yahoo!\common\uninstall.exe
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Consumer Complete Care Services Agreement-->MsiExec.exe /X{E8C06CB3-5DB2-4689-B1DC-4A0220DEA96C}
Contextual Tool-->C:\WINDOWS\z00096.exe /uninstall
Costco Photo Organizer-->MsiExec.exe /X{788B97E8-D825-419A-8558-1C0B344C5371}
Coupon Printer for Windows-->"C:\Program Files\Coupons\uninstall.exe" "/U:C:\Program Files\Coupons\Uninstall\uninstall.xml"
CouponBar-->regsvr32 /u /s "C:\WINDOWS\CouponBarIE.dll"
Critical Update for Windows Media Player 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Dell Driver Reset Tool-->MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76}
Dell Photo Printer 720 Logger-->C:\Program Files\Dell Photo Printer 720\dlbcunst.exe
Dell Photo Printer 720-->C:\WINDOWS\system32\spool\drivers\w32x86\3\DLBCUN5C.EXE -dDell Photo Printer 720
DellSupport-->MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}
DH-->"C:\WINDOWS\DHU.exe"
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DivX-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
EPSON Printer Software-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
HiJackThis-->MsiExec.exe /X{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
HP Customer Participation Program 9.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Deskjet Printer Driver Software 9.0-->C:\Program Files\HP\Digital Imaging\{03E66394-42F0-4745-85F7-0A2F8F35C09F}\setup\hpzscr01.exe -datfile hphscr15.dat -showdisconnect -forcereboot
HP Imaging Device Functions 9.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Essential 2.01-->C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
HP Smart Web Printing-->MsiExec.exe /X{415CDA53-9100-476F-A7B2-476691E117C7}
HP Solution Center 9.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HP Update-->MsiExec.exe /X{818ABC3C-635C-4651-8183-D0E9640B7DD1}
HPSSupply-->MsiExec.exe /X{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}
Intel® 537EP V9x DF PCI Modem-->rundll32 IntelCci.dll,iSMUninstallation "Intel® 537EP V9x DF PCI Modem"
Intel® Extreme Graphics 2 Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2572
Intel® PRO Network Adapters and Drivers-->Prounstl.exe
Intel® PROSet for Wired Connections-->MsiExec.exe /I{17334AAF-C9E7-483B-9F45-E3FCAF07FFA7}
Internet Explorer Default Page-->MsiExec.exe /I{35BDEFF1-A610-4956-A00D-15453C116395}
iTunes-->MsiExec.exe /I{446DBFFA-4088-48E3-8932-74316BA4CAE4}
Java 2 Runtime Environment, SE v1.4.2_03-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}
Java™ 6 Update 16-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
jscrob2 iTunes Plug-in-->"C:\Program Files\iTunes\js2uninst.exe"
Last.fm 1.5.4.24567-->"C:\Program Files\Last.fm\unins000.exe"
LimeWire 4.16.7-->"C:\Program Files\LimeWire\uninstall.exe"
Macromedia Flash Player-->MsiExec.exe /X{0456ebd7-5f67-4ab6-852e-63781e3f389c}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
McAfee SecurityCenter-->C:\Program Files\McAfee\MSC\mcuninst.exe
McAfee Virtual Technician-->MsiExec.exe /I{FCC07EEA-FA18-4A21-9105-9666603C6885}
MediaGateway-->C:\Program Files\MediaGateway\MediaGateway.exe /Remove
Micro WebCam-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EA3BE0DB-52FD-40D1-96FB-88112518EC06}\Setup.exe" -l0x9
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Encarta Encyclopedia Standard 2005-->MsiExec.exe /I{05410044-64A6-4248-A026-9745C1E9E159}
Microsoft Money 2005-->C:\Program Files\Microsoft Money 2005\MNYCoreFiles\Setup\uninst.exe /s:120
Microsoft Plus! Digital Media Edition Installer-->MsiExec.exe /X{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}
Microsoft Plus! Photo Story 2 LE-->MsiExec.exe /X{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}
Microsoft Streets and Trips 2005-->MsiExec.exe /I{67E4EE98-59F4-4210-89A6-A20AF5BEC689}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft VC9 runtime libraries-->MsiExec.exe /I{C4124E95-5061-4776-8D5D-E3D931C778E1}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Word 2002-->MsiExec.exe /I{911B0409-6000-11D3-8CFE-0050048383C9}
Microsoft Works 2005 Setup Launcher-->C:\Program Files\Microsoft Works Suite 2005\Setup\Launcher.exe /ARP D:\
Microsoft Works Suite Add-in for Microsoft Word-->MsiExec.exe /I{CB54ABA8-D67F-47AD-A76C-2631BADA9FE5}
Microsoft Works-->MsiExec.exe /I{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}
Modem Event Monitor-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A0EFAFB-AC4B-4B88-8C6B-6731BE88DB68}\setup.exe" -l0x9
Modem Helper-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanel
Modem On Hold-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText
Mozilla Firefox (3.5.8)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 Player Utilities 3.74-->MsiExec.exe /I{7784A172-61F1-445E-8368-601607E0DD22}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6 Service Pack 2 (KB973686)-->MsiExec.exe /I{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
OTOY-->RunDll32 C:\WINDOWS\DOWNLO~1\OTOYAX.dll,_RemoveGroove@16
Palm-->MsiExec.exe /X{0C0BF96E-05A1-41CA-8F9B-796904BD3C7A}
Photo Click-->MsiExec.exe /I{6E179C77-7335-458D-9537-4F4EAC0181ED}
PowerDVD 5.3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
QuickTime-->MsiExec.exe /I{50D8FFDD-90CD-4859-841F-AA1961C7767A}
RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Samsung Media Studio 5-->"C:\Program Files\InstallShield Installation Information\{C20CE592-B0F8-4D20-BF31-0151CA6331A6}\Setup.exe" -runfromtemp -l0x0009 -removeonly
SBC Yahoo! DSL Activation-->C:\PROGRA~1\Yahoo!\common\undsldlk.exe
Screensavers Installer-->"C:\Program Files\Screensavers.com\Installer\bin\siuninst.exe"
Security Update for Step By Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Security Update for Step By Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"
Security Update for Windows Media Player 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Security Update for Windows Media Player 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Security Update for Windows Media Player 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Security Update for Windows XP (KB883939)-->"C:\WINDOWS\$NtUninstallKB883939$\spuninst\spuninst.exe"
Security Update for Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Security Update for Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896422)-->"C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896688)-->"C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe"
Security Update for Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Security Update for Windows XP (KB899588)-->"C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe"
Security Update for Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Security Update for Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Security Update for Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Security Update for Windows XP (KB901190)-->"C:\WINDOWS\$NtUninstallKB901190$\spuninst\spuninst.exe"
Security Update for Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Security Update for Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Security Update for Windows XP (KB903235)-->"C:\WINDOWS\$NtUninstallKB903235$\spuninst\spuninst.exe"
Security Update for Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Security Update for Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Security Update for Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Security Update for Windows XP (KB905915)-->"C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe"
Security Update for Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Security Update for Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Security Update for Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Security Update for Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Security Update for Windows XP (KB911567)-->"C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
Security Update for Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Security Update for Windows XP (KB912812)-->"C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"
Security Update for Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
Security Update for Windows XP (KB913446)-->"C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
Security Update for Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Security Update for Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Security Update for Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Security Update for Windows XP (KB916281)-->"C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"
Security Update for Windows XP (KB917159)-->"C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
Security Update for Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Security Update for Windows XP (KB917422)-->"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
Security Update for Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Security Update for Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Security Update for Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Security Update for Windows XP (KB918899)-->"C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
Security Update for Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920214)-->"C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Security Update for Windows XP (KB921398)-->"C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
Security Update for Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
Security Update for Windows XP (KB921883)-->"C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
Security Update for Windows XP (KB922616)-->"C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
Security Update for Windows XP (KB922760)-->"C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe"
Security Update for Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923694)-->"C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924191)-->"C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Security Update for Windows XP (KB925454)-->"C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe"
Security Update for Windows XP (KB925486)-->"C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe"
Security Update for Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Security Update for Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Security Update for Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Security Update for Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Security Update for Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Security Update for Windows XP (KB928090)-->"C:\WINDOWS\$NtUninstallKB928090$\spuninst\spuninst.exe"
Security Update for Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Security Update for Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Security Update for Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Security Update for Windows XP (KB929969)-->"C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.exe"
Security Update for Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Security Update for Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Security Update for Windows XP (KB931768)-->"C:\WINDOWS\$NtUninstallKB931768$\spuninst\spuninst.exe"
Security Update for Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Security Update for Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Security Update for Windows XP (KB933566)-->"C:\WINDOWS\$NtUninstallKB933566$\spuninst\spuninst.exe"
Security Update for Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Security Update for Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Security Update for Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Security Update for Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Security Update for Windows XP (KB937143)-->"C:\WINDOWS\$NtUninstallKB937143$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938127)-->"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
Security Update for Windows XP (KB939653)-->"C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Security Update for Windows XP (KB942615)-->"C:\WINDOWS\$NtUninstallKB942615$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Security Update for Windows XP (KB944338)-->"C:\WINDOWS\$NtUninstallKB944338$\spuninst\spuninst.exe"
Security Update for Windows XP (KB944533)-->"C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.exe"
Security Update for Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Security Update for Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB947864)-->"C:\WINDOWS\$NtUninstallKB947864$\spuninst\spuninst.exe"
Security Update for Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Security Update for Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Security Update for Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958470)-->"C:\WINDOWS\$NtUninstallKB958470$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961371-v2)-->"C:\WINDOWS\$NtUninstallKB961371-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Security Update for Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Security Update for Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Shockwave-->C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\Install.log
Sonic DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Sonic Update Manager-->MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
StuffIt 12-->MsiExec.exe /X{9ED3C484-D002-4D4D-9BF3-C3DF9048EE7D}
The Sims™ 2 Double Deluxe-->C:\Program Files\EA GAMES\The Sims 2 Double Deluxe\EAUninstall.exe
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Update for Windows XP (KB896727)-->"C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe"
Update for Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Update for Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Update for Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Update for Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Update for Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Update for Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Update for Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Update for Windows XP (KB929338)-->"C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe"
Update for Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Update for Windows XP (KB931836)-->"C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe"
Update for Windows XP (KB933360)-->"C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"
Update for Windows XP (KB936357)-->"C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
Update for Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Update for Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Update for Windows XP (KB942840)-->"C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.exe"
Update for Windows XP (KB946627)-->"C:\WINDOWS\$NtUninstallKB946627$\spuninst\spuninst.exe"
Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Update for Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Update for Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Update for Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Update for Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Update for Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Veoh Web Player-->"C:\Program Files\Veoh Networks\VeohWebPlayer\uninst.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 10-->MsiExec.exe /I{33BB4982-DC52-4886-A03B-F4C5C80BEE89}
Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Hotfix - KB867282-->C:\WINDOWS\$NtUninstallKB867282$\spuninst\spuninst.exe
Windows XP Hotfix - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
Windows XP Hotfix - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Windows XP Hotfix - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Windows XP Hotfix - KB885884-->C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe
Windows XP Hotfix - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Windows XP Hotfix - KB887742-->C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
Windows XP Hotfix - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Windows XP Hotfix - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Windows XP Hotfix - KB890923-->"C:\WINDOWS\$NtUninstallKB890923$\spuninst\spuninst.exe"
Windows XP Hotfix - KB893066-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
Windows XP Hotfix - KB893086-->"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"

======Security center information======

AV: AntiVir Desktop (disabled) (outdated)
AV: McAfee VirusScan
FW: McAfee Personal Firewall

======System event log======

Computer Name: DF9QDH71
Event Code: 17
Message: Time Provider NtpClient: An error occurred during DNS lookup of the manually
configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15
minutes.
The error was: A socket operation was attempted to an unreachable host. (0x80072751)

Record Number: 7
Source Name: W32Time
Time Written: 20091213011654.000000-360
Event Type: error
User:

Computer Name: DF9QDH71
Event Code: 29
Message: The time provider NtpClient is configured to acquire time from one or more
time sources, however none of the sources are currently accessible.
No attempt to contact a source will be made for 14 minutes.
NtpClient has no source of accurate time.

Record Number: 6
Source Name: W32Time
Time Written: 20091213011653.000000-360
Event Type: error
User:

Computer Name: DF9QDH71
Event Code: 17
Message: Time Provider NtpClient: An error occurred during DNS lookup of the manually
configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15
minutes.
The error was: A socket operation was attempted to an unreachable host. (0x80072751)

Record Number: 5
Source Name: W32Time
Time Written: 20091213011653.000000-360
Event Type: error
User:

Computer Name: DF9QDH71
Event Code: 1007
Message: Your computer has automatically configured the IP address for the Network
Card with network address 001320074424. The IP address being used is 169.254.181.191.

Record Number: 4
Source Name: Dhcp
Time Written: 20091213011635.000000-360
Event Type: warning
User:

Computer Name: DF9QDH71
Event Code: 8
Message: Adapter Intel® PRO/100 VE Network Connection: Did not receive auto-negotiation advertisement from link partner. A full duplex connection may be available

Record Number: 3
Source Name: E100B
Time Written: 20091213011551.000000-360
Event Type: warning
User:

=====Application event log=====

Computer Name: DF9QDH71
Event Code: 1004
Message: Detection of product '{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}', feature 'SolutionCenter', component '{C8AA5B6D-C6A6-487D-B2AD-B6C2DC258E47}' failed. The resource 'C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx' does not exist.

Record Number: 4592
Source Name: MsiInstaller
Time Written: 20090909002330.000000-300
Event Type: warning
User: DF9QDH71\Jazmin

Computer Name: DF9QDH71
Event Code: 1001
Message: Detection of product '{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}', feature 'SolutionCenter' failed during request for component '{5FD5BEDB-A426-4F68-BA15-037E44388CE8}'

Record Number: 4590
Source Name: MsiInstaller
Time Written: 20090909002329.000000-300
Event Type: warning
User: DF9QDH71\Jazmin

Computer Name: DF9QDH71
Event Code: 1004
Message: Detection of product '{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}', feature 'SolutionCenter', component '{C8AA5B6D-C6A6-487D-B2AD-B6C2DC258E47}' failed. The resource 'C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx' does not exist.

Record Number: 4589
Source Name: MsiInstaller
Time Written: 20090909002329.000000-300
Event Type: warning
User: DF9QDH71\Jazmin

Computer Name: DF9QDH71
Event Code: 1001
Message: Detection of product '{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}', feature 'SolutionCenter' failed during request for component '{5FD5BEDB-A426-4F68-BA15-037E44388CE8}'

Record Number: 4587
Source Name: MsiInstaller
Time Written: 20090909002324.000000-300
Event Type: warning
User: DF9QDH71\Jazmin

Computer Name: DF9QDH71
Event Code: 1004
Message: Detection of product '{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}', feature 'SolutionCenter', component '{C8AA5B6D-C6A6-487D-B2AD-B6C2DC258E47}' failed. The resource 'C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx' does not exist.

Record Number: 4586
Source Name: MsiInstaller
Time Written: 20090909002324.000000-300
Event Type: warning
User: DF9QDH71\Jazmin

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Adobe\AGL;C:\Program Files\QuickTime\QTSystem\;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0401
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\j2re1.4.2_03\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\j2re1.4.2_03\lib\ext\QTJava.zip

-----------------EOF-----------------


#4 syler

syler

  • Malware Response Team
  • 8,150 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Warrington, UK
  • Local time:06:06 PM

Posted 01 March 2010 - 01:44 AM

Hi jmjames,

Looks like MBAM clean out a fair bit, you still have a fair bit we need to remove though.

I do not recommend that you have more than one anti virus product installed and running on your computer at a time. The reason for this is that if both products have their automatic (Real-Time) protection switched on, then those products which do not encrypt the virus strings within them can cause other anti virus products to cause "false alarms". It can also lead to a clash as both products fight for access to files which are opened again this is the resident/automatic protection. In general terms, the two programs may conflict and cause:
1) False Alarms: When the anti virus software tells you that your PC has a virus when it actually doesn't.
2) System Performance Problems: Your system may lock up due to both products attempting to access the same file at the same time.
Therefore please go to add/remove in the control panel and remove either McAfee or Avira.



Please download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed, click on Yes, to continue scanning for malware.

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply.

This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper


If you need help, see this link:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

unite.jpg


#5 syler

syler

  • Malware Response Team
  • 8,150 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Warrington, UK
  • Local time:06:06 PM

Posted 06 March 2010 - 08:38 AM

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending me a PM
with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.

unite.jpg





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users