Can't remove www28.yoog.com [Closed] |
Need a geek? Geeks to Go offers free, quality tech support -- in terms anyone can understand. Volunteers are waiting to help, friendly, technology experts who have knowledge to share, and enjoy helping others. Feel free to browse the site as a guest. However, you must log in to reply to existing topics, or to start a new topic. Other benefits of joining include richer forum features, and removal of all advertising. Learn more in our Welcome Guide Infected? Malware and Spyware Cleaning Guide. What are you waiting for? Click here to join for free today!
  |
 Jun 20 2009, 07:41 PM
Post
#1
|
|
|
Member  Posts: 10 OS: xp  |
Hello, sorry to be a bother. I have run all the scans to remove this Hijacker or whatever this is that is now my default home page in Firefox. Although I should mention that I ran the OTL scan and did my copy/paste of my results in order to clean, but when it completes I get this message all the way through " Error: Unable to interpret" for each entry. If I could get past this I may be able to get this "Yoog " issue resolved. It may have hitched a ride when I updated my Limewire a week ago or so. I have run the malware as well and it comes out clean. Any Ideas would be appreciated.
Thanks, dixie63 |
 |
 
|
|
Jun 21 2009, 05:48 AM
Post
#2
|
|
 GeekU Teacher  Posts: 34,385 From: Dublin OS: XP |
So you tried the guide here ?
http://www.geekstogo.com/forum/How-to-remo...ds-t238947.html
|
|
|
|
|
Jun 21 2009, 08:32 AM
Post
#3
|
|
|
Member Posts: 10 OS: xp |
Ok here is the result of my scan. However, only 1 text opened. See Below:
OTL logfile created on: 6/21/2009 9:23:06 AM - Run 6 OTL by OldTimer - Version 3.0.2.0 Folder = C:\Documents and Settings\Owner\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 959.36 Mb Total Physical Memory | 466.45 Mb Available Physical Memory | 48.62% Memory free 1.73 Gb Paging File | 1.29 Gb Available in Paging File | 74.62% Paging File free Paging file location(s): C:\pagefile.sys 896 1792 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 107.34 Gb Total Space | 84.49 Gb Free Space | 78.71% Space Free | Partition Type: NTFS Drive D: | 4.43 Gb Total Space | 0.69 Gb Free Space | 15.51% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: YOUR-O0KWKW9JWC Current User Name: Owner Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\WINDOWS\System32\brsvc01a.exe (brother Industries Ltd) PRC - C:\WINDOWS\System32\brss01a.exe (brother Industries Ltd) PRC - C:\Program Files\Bonjour\mDNSResponder.exe (Apple Computer, Inc.) PRC - C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.) PRC - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.) PRC - c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.) PRC - c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.) PRC - C:\Program Files\McAfee\VirusScan\McShield.exe (McAfee, Inc.) PRC - C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.) PRC - C:\WINDOWS\System32\nvsvc32.exe (NVIDIA Corporation) PRC - C:\Program Files\Softex\OmniPass\Omniserv.exe () PRC - c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation) PRC - C:\Program Files\Softex\OmniPass\OPXPApp.exe () PRC - c:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.) PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation) PRC - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe () PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) PRC - C:\Program Files\Brother\ControlCenter3\brccMCtl.exe (Brother Industries, Ltd.) PRC - C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe (Brother Industries, Ltd.) PRC - C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.) PRC - C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) PRC - C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) PRC - C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) PRC - C:\Documents and Settings\Owner\Desktop\OTL.exe (OldTimer Tools) ========== Win32 Services (SafeList) ========== SRV - (aspnet_state [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation) SRV - (Bonjour Service [Auto | Running]) -- C:\Program Files\Bonjour\mDNSResponder.exe (Apple Computer, Inc.) SRV - (Brother XP spl Service [Auto | Running]) -- C:\WINDOWS\System32\brsvc01a.exe (brother Industries Ltd) SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (FLEXnet Licensing Service [Disabled | Stopped]) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.) SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) SRV - (helpsvc [Auto | Running]) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation) SRV - (idsvc [Unknown | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation) SRV - (JavaQuickStarterService [Auto | Running]) -- C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.) SRV - (mcmscsvc [Auto | Running]) -- C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.) SRV - (McNASvc [Auto | Running]) -- c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.) SRV - (McODS [On_Demand | Stopped]) -- C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.) SRV - (McProxy [Auto | Running]) -- c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.) SRV - (McShield [Unknown | Running]) -- C:\Program Files\McAfee\VirusScan\McShield.exe (McAfee, Inc.) SRV - (McSysmon [On_Demand | Running]) -- C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.) SRV - (Microsoft Office Groove Audit Service [On_Demand | Stopped]) -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe (Microsoft Corporation) SRV - (MpfService [Auto | Running]) -- C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.) SRV - (NetTcpPortSharing [Disabled | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation) SRV - (NVSvc [Auto | Running]) -- C:\WINDOWS\System32\nvsvc32.exe (NVIDIA Corporation) SRV - (odserv [On_Demand | Stopped]) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation) SRV - (omniserv [Auto | Running]) -- C:\Program Files\Softex\OmniPass\Omniserv.exe () SRV - (ose [On_Demand | Stopped]) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) SRV - (SNDSrvc [On_Demand | Stopped]) -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (Symantec Corporation) SRV - (SQLWriter [Auto | Running]) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation) SRV - (WMPNetworkSvc [On_Demand | Stopped]) -- C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (AFS2K [System | Running]) -- C:\WINDOWS\System32\drivers\AFS2K.SYS (Oak Technology Inc.) DRV - (ALCXSENS [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\ALCXSENS.SYS (Sensaura Ltd) DRV - (ALCXWDM [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.) DRV - (brfilt [On_Demand | Stopped]) -- C:\WINDOWS\System32\Drivers\Brfilt.sys (Brother Industries Ltd.) DRV - (BrScnUsb [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\BrScnUsb.sys (Brother Industries Ltd.) DRV - (BrSerWDM [On_Demand | Stopped]) -- C:\WINDOWS\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.) DRV - (BrUsbMdm [On_Demand | Stopped]) -- C:\WINDOWS\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.) DRV - (BrUsbScn [On_Demand | Stopped]) -- C:\WINDOWS\System32\Drivers\BrUsbScn.sys (Brother Industries Ltd.) DRV - (drvmcdb [Boot | Running]) -- C:\WINDOWS\System32\DRIVERS\drvmcdb.sys (VERITAS Software, Inc.) DRV - (fasttx2k [Boot | Running]) -- C:\WINDOWS\System32\DRIVERS\fasttx2k.sys (Promise Technology, Inc.) DRV - (giveio [On_Demand | Stopped]) -- C:\WINDOWS\System32\giveio.sys () DRV - (ialm [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\ialmnt5.sys (Intel Corporation) DRV - (ltmodem5 [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ltmdmnt.sys (Agere Systems) DRV - (Machnm32 [Auto | Running]) -- C:\WINDOWS\System32\Machnm32.sys () DRV - (mf [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\mf.sys (Microsoft Corporation) DRV - (mfeavfk [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\mfeavfk.sys (McAfee, Inc.) DRV - (mfebopk [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\mfebopk.sys (McAfee, Inc.) DRV - (mfehidk [System | Running]) -- C:\WINDOWS\System32\drivers\mfehidk.sys (McAfee, Inc.) DRV - (mferkdk [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\mferkdk.sys (McAfee, Inc.) DRV - (mfesmfk [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\mfesmfk.sys (McAfee, Inc.) DRV - (MPFP [System | Running]) -- C:\WINDOWS\System32\Drivers\Mpfp.sys (McAfee, Inc.) DRV - (nv [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys (NVIDIA Corporation) DRV - (nvatabus [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\nvatabus.sys (NVIDIA Corporation) DRV - (nvax [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\nvax.sys (NVIDIA Corporation) DRV - (NVENET [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\NVENET.sys (NVIDIA Corporation) DRV - (nvnforce [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\nvapu.sys (NVIDIA Corporation) DRV - (nv_agp [Boot | Running]) -- C:\WINDOWS\System32\DRIVERS\nv_agp.sys (NVIDIA Corporation) DRV - (pfc [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\pfc.sys (Padus, Inc.) DRV - (Ps2 [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\PS2.sys (Hewlett-Packard Company) DRV - (Ptilink [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.) DRV - (PzWDM [Boot | Running]) -- C:\WINDOWS\system32\Drivers\PzWDM.sys (Prassi Technology) DRV - (rtl8139 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\RTL8139.SYS (Realtek Semiconductor Corporation) DRV - (S3Psddr [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\s3gnbm.sys (S3 Graphics, Inc.) DRV - (Secdrv [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) DRV - (SiS315 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\sisgrp.sys (Silicon Integrated Systems Corporation) DRV - (SISAGP [Boot | Running]) -- C:\WINDOWS\System32\DRIVERS\SISAGPX.sys (Silicon Integrated Systems Corporation) DRV - (SymEvent [On_Demand | Running]) -- C:\Program Files\Symantec\SYMEVENT.SYS (Symantec Corporation) DRV - (SYMREDRV [On_Demand | Stopped]) -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation) DRV - (SYMTDI [System | Running]) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation) DRV - (viaagp1 [Boot | Running]) -- C:\WINDOWS\System32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.) DRV - ({6080A529-897E-4629-A488-ABA0C29B635E} [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\ialmsbw.sys (Intel Corporation) DRV - ({D31A0762-0CEB-444e-ACFF-B049A1F6FE91} [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\ialmkchw.sys (Intel Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.comcast.net/home.html IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us8.hpwis.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us8.hpwis.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerm...tf8&oe=utf8 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/home.html IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = cdn;*.local ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Yoog Search" FF - prefs.js..browser.search.defaulturl: "http://www28.yoog.com/search.php?q=" FF - prefs.js..browser.search.order.1: "Fast Browser Search" FF - prefs.js..browser.search.selectedEngine: "Yoog Search" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www28.yoog.com/" FF - prefs.js..extensions.enabledItems: {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}:2.0.9 FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.1.9 FF - prefs.js..extensions.enabledItems: {3112ca9c-de6d-4884-a869-9855de68056c}:3.1.20081127W FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.11 FF - prefs.js..keyword.URL: "http://www28.yoog.com/search.php?q=" FF - user.js..browser.startup.homepage: "http://www28.yoog.com/" FF - user.js..browser.search.selectedEngine: "Yoog Search" FF - user.js..keyword.URL: "http://www28.yoog.com/search.php?q=" FF - user.js..keyword.enabled: true FF - user.js..browser.search.defaultenginename: "Yoog Search" FF - user.js..browser.search.defaulturl: "http://www28.yoog.com/search.php?q=" FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009/06/07 09:42:14 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/06/20 07:11:34 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/06/19 19:26:49 | 00,000,000 | ---D | M] [2009/06/06 12:49:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\mozilla\Extensions [2009/02/16 11:47:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009/06/06 12:49:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\mozilla\Extensions\mozswing@mozswing.org [2009/06/20 20:06:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\mozilla\Firefox\Profiles\dmxgv1zr.default\extensions [2009/06/10 17:46:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\mozilla\Firefox\Profiles\dmxgv1zr.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2009/02/16 11:47:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\mozilla\Firefox\Profiles\dmxgv1zr.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2009/03/31 18:36:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\mozilla\Firefox\Profiles\dmxgv1zr.default\extensions\{C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB} [2009/06/19 19:26:49 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2009/06/19 19:26:49 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2009/06/02 22:00:58 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll [2009/06/02 22:00:59 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll [2009/06/02 22:01:00 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll [2009/06/02 18:18:22 | 00,001,394 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml [2009/06/02 18:18:22 | 00,002,193 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\answers.xml [2009/06/02 18:18:22 | 00,001,534 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml [2009/06/02 18:18:22 | 00,002,343 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml [2009/06/19 19:30:49 | 00,003,700 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fast.png [2009/06/02 18:18:22 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml [2009/06/02 18:18:22 | 00,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml [2009/06/02 18:18:22 | 00,000,792 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.xml O1 HOSTS File: (23 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.) O2 - BHO: (no name) - {D187A56B-A33F-4CBE-9D77-459FC0BAE012} - No CLSID value found. O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (no name) - {4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - No CLSID value found. O3 - HKLM\..\Toolbar: (hp toolkit) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL (Hewlett-Packard Company) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID values found. O3 - HKCU\..\Toolbar\ShellBrowser: (hp toolkit) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL (Hewlett-Packard Company) O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe () O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NVMixerTray] C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe (NVIDIA Corporation) O4 - HKLM..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe (Brother Industories, Ltd.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetHood = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoManageMyComputerVerb = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuPinnedList = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMFUprogramsList = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartmenuLogoff = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCommonGroups = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPrinterTabs = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAddPrinter = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPrinters = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetworkConnections = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRun = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileMenu = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButton = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarCustomize = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeAnimation = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeKeyboardNavigationIndicators = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThemesTab = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoSecCpl = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCpl = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoVisualStyleChoice = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0 O8 - Extra context menu item: Download all by YouTube Robot - Reg Error: Value error. File not found O8 - Extra context menu item: Download by YouTube Robot - Reg Error: Value error. File not found O8 - Extra context menu item: E&xport to Microsoft Excel - Reg Error: Value error. File not found O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O15 - HKLM\..Trusted Domains: musicmatch.com ([online] https in Trusted sites) O15 - HKLM\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/templates/ieawsdc.cab (Microsoft Office Template and Media Control) O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://support.microsoft.com/OAS/ActiveX/MSDcode.cab (Microsoft Data Collection Control) O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash...r/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Java Plug-in 1.5.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_13) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/get/flash...ent/swflash.cab (Shockwave Flash Object) O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java Reg Error: Value error. (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.87.72.134 68.87.77.134 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\avldr: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation) O20 - Winlogon\Notify\OPXPGina: DllName - C:\Program Files\Softex\OmniPass\opxpgina.dll - C:\Program Files\Softex\OmniPass\opxpgina.dll () O20 - Winlogon\Notify\WRNotifier: DllName - WRLogonNTF.dll - File not found O21 - SSODL: kdfaz.dll - {00000000-0000-0000-0000-000000057701} - CLSID or File not found. O24 - Desktop Components:0 () - http://www.hashhu.com/images/misc/vbulletin3_logo_white.gif O24 - Desktop Components:1 () - http://forums.al7bar.tk/images/al7bar.jpg O24 - Desktop Components:2 () - http://www.google.com/images/logo_sm.gif O24 - Desktop Components:3 (My Current Home Page) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007/04/21 08:13:12 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2001/07/28 07:07:38 | 00,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ] O32 - AutoRun File - [2002/09/11 04:02:32 | 00,000,045 | -HS- | M] () - D:\Autorun.inf -- [ FAT32 ] O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\Info.exe -- [2002/09/10 22:54:58 | 00,040,960 | -HS- | M] (XSS) O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found O34 - HKLM BootExecute: (SsiEfr.e) - File not found NetSvcs: 6to4 - NetSvcs: AppMgmt - ValueNotFound NetSvcs: AudioSrv - C:\WINDOWS\System32\audiosrv.dll (Microsoft Corporation) NetSvcs: Browser - C:\WINDOWS\System32\browser.dll (Microsoft Corporation) NetSvcs: CryptSvc - C:\WINDOWS\System32\cryptsvc.dll (Microsoft Corporation) NetSvcs: DMServer - C:\WINDOWS\System32\dmserver.dll (Microsoft Corp.) NetSvcs: DHCP - C:\WINDOWS\System32\dhcpcsvc.dll (Microsoft Corporation) NetSvcs: ERSvc - C:\WINDOWS\System32\ersvc.dll (Microsoft Corporation) NetSvcs: EventSystem - C:\WINDOWS\System32\es.dll (Microsoft Corporation) NetSvcs: FastUserSwitchingCompatibility - C:\WINDOWS\System32\shsvcs.dll (Microsoft Corporation) NetSvcs: HidServ - ValueNotFound NetSvcs: Ias - NetSvcs: Iprip - NetSvcs: Irmon - NetSvcs: LanmanServer - C:\WINDOWS\System32\srvsvc.dll (Microsoft Corporation) NetSvcs: LanmanWorkstation - C:\WINDOWS\System32\wkssvc.dll (Microsoft Corporation) NetSvcs: Messenger - C:\WINDOWS\System32\msgsvc.dll (Microsoft Corporation) NetSvcs: Netman - C:\WINDOWS\System32\netman.dll (Microsoft Corporation) NetSvcs: Nla - C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation) NetSvcs: Ntmssvc - C:\WINDOWS\System32\ntmssvc.dll (Microsoft Corporation) NetSvcs: NWCWorkstation - NetSvcs: Nwsapagent - NetSvcs: Rasauto - C:\WINDOWS\System32\rasauto.dll (Microsoft Corporation) NetSvcs: Rasman - C:\WINDOWS\System32\rasmans.dll (Microsoft Corporation) NetSvcs: Remoteaccess - C:\WINDOWS\System32\mprdim.dll (Microsoft Corporation) NetSvcs: Schedule - C:\WINDOWS\System32\schedsvc.dll (Microsoft Corporation) NetSvcs: Seclogon - C:\WINDOWS\System32\seclogon.dll (Microsoft Corporation) NetSvcs: SENS - C:\WINDOWS\System32\sens.dll (Microsoft Corporation) NetSvcs: Sharedaccess - C:\WINDOWS\System32\ipnathlp.dll (Microsoft Corporation) NetSvcs: SRService - C:\WINDOWS\System32\srsvc.dll (Microsoft Corporation) NetSvcs: Tapisrv - C:\WINDOWS\System32\tapisrv.dll (Microsoft Corporation) NetSvcs: Themes - C:\WINDOWS\System32\shsvcs.dll (Microsoft Corporation) NetSvcs: TrkWks - C:\WINDOWS\System32\trkwks.dll (Microsoft Corporation) NetSvcs: W32Time - C:\WINDOWS\System32\w32time.dll (Microsoft Corporation) NetSvcs: WZCSVC - C:\WINDOWS\System32\wzcsvc.dll (Microsoft Corporation) NetSvcs: Wmi - NetSvcs: WmdmPmSp - NetSvcs: winmgmt - C:\WINDOWS\System32\wbem\WMIsvc.dll (Microsoft Corporation) NetSvcs: TermService - C:\WINDOWS\System32\termsrv.dll (Microsoft Corporation) NetSvcs: wuauserv - C:\WINDOWS\System32\wuauserv.dll (Microsoft Corporation) NetSvcs: BITS - C:\WINDOWS\System32\qmgr.dll (Microsoft Corporation) NetSvcs: ShellHWDetection - C:\WINDOWS\System32\shsvcs.dll (Microsoft Corporation) NetSvcs: helpsvc - C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation) NetSvcs: WmdmPmSN - C:\WINDOWS\System32\MsPMSNSv.dll (Microsoft Corporation) NetSvcs: xmlprov - C:\WINDOWS\System32\xmlprov.dll (Microsoft Corporation) NetSvcs: wscsvc - C:\WINDOWS\System32\wscsvc.dll (Microsoft Corporation) NetSvcs: napagent - C:\WINDOWS\System32\qagentrt.dll (Microsoft Corporation) NetSvcs: hkmsvc - C:\WINDOWS\System32\kmsvc.dll (Microsoft Corporation) MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe - (Adobe Systems Incorporated) MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe - (Adobe Systems Incorporated) MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^MediaChecker.lnk - C:\Program Files\HOTALBUMMyBOX\MediaChecker.exe - (PLANNING Co., Ltd) MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk - Reg Error: Value error. - File not found MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Print!.lnk - Reg Error: Value error. - File not found MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Quicken Scheduled Updates.lnk - C:\Program Files\Quicken\bagent.exe - (Intuit Inc.) MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^SmartUI.lnk - C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe - (Scansoft, Inc.) MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Updates from HP.lnk - Reg Error: Value error. - File not found MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk - C:\WINDOWS\desktop\winexplorer\WZQKPICK.EXE - (WinZip Computing, Inc.) MsConfig - StartUpFolder: C:^Documents and Settings^Owner^Start Menu^Programs^Startup^LimeWire On Startup.lnk - Reg Error: Value error. - File not found MsConfig - StartUpFolder: C:^Documents and Settings^Owner^Start Menu^Programs^Startup^LimeWire Turbo Accelerator.lnk - Reg Error: Value error. - File not found MsConfig - StartUpFolder: C:^Documents and Settings^Owner^Start Menu^Programs^Startup^spamsubtract.lnk - Reg Error: Value error. - File not found MsConfig - StartUpFolder: C:^Documents and Settings^Owner^Start Menu^Programs^Startup^Webshots.lnk - Reg Error: Value error. - File not found MsConfig - StartUpReg: !AVG Anti-Spyware - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: Adobe Photo Downloader - hkey= - key= - C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe (Adobe Systems Incorporated) MsConfig - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig - StartUpReg: AlcxMonitor - hkey= - key= - C:\WINDOWS\ALCXMNTR.EXE (Realtek Semiconductor Corp.) MsConfig - StartUpReg: BCNT - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: Belt - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: CamMonitor - hkey= - key= - c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe () MsConfig - StartUpReg: ccApp - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: ccRegVfy - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: cful - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: CleanUp - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: ctfmon.exe - hkey= - key= - File not found MsConfig - StartUpReg: ffnotoqoyw - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: FreeRAM XP - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: GrooveMonitor - hkey= - key= - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) MsConfig - StartUpReg: HotKeysCmds - hkey= - key= - File not found MsConfig - StartUpReg: IndexSearch - hkey= - key= - C:\Program Files\Scansoft\PaperPort\IndexSearch.exe (ScanSoft, Inc.) MsConfig - StartUpReg: InstaFinderK - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: jmlmbwvimdt - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: JUBMZHR - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: KBD - hkey= - key= - C:\HP\KBD\KBD.EXE (Hewlett-Packard Company) MsConfig - StartUpReg: MBBalloon - hkey= - key= - C:\Program Files\HOTALBUMMyBOX\MBBalloon.exe (PLANNING Co., Ltd.) MsConfig - StartUpReg: MCAgentExe - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: mcagent_exe - hkey= - key= - C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.) MsConfig - StartUpReg: MCUpdateExe - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: MimBoot - hkey= - key= - C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mimboot.exe (Musicmatch, Inc.) MsConfig - StartUpReg: MMTray - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: MSMSGS - hkey= - key= - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) MsConfig - StartUpReg: mspwr - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: NAV CfgWiz - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: NvCplDaemon - hkey= - key= - File not found MsConfig - StartUpReg: NvMediaCenter - hkey= - key= - File not found MsConfig - StartUpReg: nwiz - hkey= - key= - File not found MsConfig - StartUpReg: OASClnt - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: P2P Networking - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: PaperPort PTD - hkey= - key= - C:\Program Files\Scansoft\PaperPort\pptd40nt.exe (ScanSoft, Inc.) MsConfig - StartUpReg: PCDAS - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: Performance Center - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: PS2 - hkey= - key= - File not found MsConfig - StartUpReg: QUAD Scheduler - hkey= - key= - C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe () MsConfig - StartUpReg: QUAD Windows service - hkey= - key= - C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.exe (Interactive Brands Inc.) MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.) MsConfig - StartUpReg: Recguard - hkey= - key= - C:\WINDOWS\SMINST\RECGUARD.EXE () MsConfig - StartUpReg: RegistryMechanic - hkey= - key= - File not found MsConfig - StartUpReg: Reminder - hkey= - key= - C:\Windows\Creator\Remind_XP.exe (SoftThinks) MsConfig - StartUpReg: SetDefPrt - hkey= - key= - C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe (Brother Industories, Ltd.) MsConfig - StartUpReg: Share-to-Web Namespace Daemon - hkey= - key= - c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe (Hewlett-Packard) MsConfig - StartUpReg: SoundMan - hkey= - key= - C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) MsConfig - StartUpReg: SPAMfighter Agent - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: SpySweeper - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: SpywareStop - hkey= - key= - C:\Program Files\SpywareStop\SpywareStop.exe File not found MsConfig - StartUpReg: SSBkgdUpdate - hkey= - key= - C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Scansoft, Inc.) MsConfig - StartUpReg: SunJavaUpdateSched - hkey= - key= - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) MsConfig - StartUpReg: Super Utilities - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: swg - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: Symantec NetDriver Monitor - hkey= - key= - C:\Program Files\SymNetDrv\SNDMon.exe (Symantec Corporation) MsConfig - StartUpReg: tgcmd - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: TkBellExe - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: UserFaultCheck - hkey= - key= - File not found MsConfig - StartUpReg: VirusScan Online - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: VSOCheckTask - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: WebSavingsfromEbates - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: WT GameChannel - hkey= - key= - Reg Error: Value error. File not found MsConfig - StartUpReg: XPRepairPro2007 - hkey= - key= - Reg Error: Value error. File not found MsConfig - State: "system.ini" - 0 MsConfig - State: "win.ini" - 0 MsConfig - State: "bootini" - 0 MsConfig - State: "services" - 0 MsConfig - State: "startup" - 2 SafeBootMin: AppMgmt - C:\WINDOWS\System32\svchost.exe (Microsoft Corporation) SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: CryptSvc - C:\WINDOWS\System32\cryptsvc.dll (Microsoft Corporation) SafeBootMin: DcomLaunch - C:\WINDOWS\System32\rpcss.dll (Microsoft Corporation) SafeBootMin: dmadmin - C:\WINDOWS\System32\dmadmin.exe (Microsoft Corp., Veritas Software) SafeBootMin: dmboot.sys - C:\WINDOWS\System32\drivers\dmboot.sys (Microsoft Corp., Veritas Software) SafeBootMin: dmio.sys - C:\WINDOWS\System32\drivers\dmio.sys (Microsoft Corp., Veritas Software) SafeBootMin: dmload.sys - C:\WINDOWS\System32\drivers\dmload.sys (Microsoft Corp., Veritas Software.) SafeBootMin: dmserver - C:\WINDOWS\System32\dmserver.dll (Microsoft Corp.) SafeBootMin: EventLog - C:\WINDOWS\System32\services.exe (Microsoft Corporation) SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation) SafeBootMin: mcmscsvc - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.) SafeBootMin: MCODS - C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.) SafeBootMin: Netlogon - C:\WINDOWS\System32\lsass.exe (Microsoft Corporation) SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PlugPlay - C:\WINDOWS\System32\services.exe (Microsoft Corporation) SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: RpcSs - C:\WINDOWS\System32\rpcss.dll (Microsoft Corporation) SafeBootMin: SCSI Class - Driver Group SafeBootMin: sermouse.sys - Driver SafeBootMin: sr.sys - C:\WINDOWS\System32\DRIVERS\sr.sys (Microsoft Corporation) SafeBootMin: SRService - C:\WINDOWS\System32\srsvc.dll (Microsoft Corporation) SafeBootMin: svcWRSSSDK - Service SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vds - Service SafeBootMin: vga.sys - Driver SafeBootMin: vgasave.sys - C:\WINDOWS\System32\drivers\vga.sys (Microsoft Corporation) SafeBootMin: WinMgmt - C:\WINDOWS\System32\wbem\WMIsvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: AFD - C:\WINDOWS\System32\drivers\afd.sys (Microsoft Corporation) SafeBootNet: AppMgmt - C:\WINDOWS\System32\svchost.exe (Microsoft Corporation) SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: Browser - C:\WINDOWS\System32\browser.dll (Microsoft Corporation) SafeBootNet: CryptSvc - C:\WINDOWS\System32\cryptsvc.dll (Microsoft Corporation) SafeBootNet: DcomLaunch - C:\WINDOWS\System32\rpcss.dll (Microsoft Corporation) SafeBootNet: Dhcp - C:\WINDOWS\System32\dhcpcsvc.dll (Microsoft Corporation) SafeBootNet: dmadmin - C:\WINDOWS\System32\dmadmin.exe (Microsoft Corp., Veritas Software) SafeBootNet: dmboot.sys - C:\WINDOWS\System32\drivers\dmboot.sys (Microsoft Corp., Veritas Software) SafeBootNet: dmio.sys - C:\WINDOWS\System32\drivers\dmio.sys (Microsoft Corp., Veritas Software) SafeBootNet: dmload.sys - C:\WINDOWS\System32\drivers\dmload.sys (Microsoft Corp., Veritas Software.) SafeBootNet: dmserver - C:\WINDOWS\System32\dmserver.dll (Microsoft Corp.) SafeBootNet: DnsCache - C:\WINDOWS\System32\dnsrslvr.dll (Microsoft Corporation) SafeBootNet: EventLog - C:\WINDOWS\System32\services.exe (Microsoft Corporation) SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation) SafeBootNet: ip6fw.sys - C:\WINDOWS\System32\drivers\ip6fw.sys (Microsoft Corporation) SafeBootNet: ipnat.sys - C:\WINDOWS\System32\DRIVERS\ipnat.sys (Microsoft Corporation) SafeBootNet: LanmanServer - C:\WINDOWS\System32\srvsvc.dll (Microsoft Corporation) SafeBootNet: LanmanWorkstation - C:\WINDOWS\System32\wkssvc.dll (Microsoft Corporation) SafeBootNet: LmHosts - C:\WINDOWS\System32\lmhsvc.dll (Microsoft Corporation) SafeBootNet: mcmscsvc - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.) SafeBootNet: MCODS - C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.) SafeBootNet: Messenger - C:\WINDOWS\System32\msgsvc.dll (Microsoft Corporation) SafeBootNet: MpfService - C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.) SafeBootNet: NDIS - C:\WINDOWS\System32\drivers\ndis.sys (Microsoft Corporation) SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: Ndisuio - C:\WINDOWS\System32\DRIVERS\ndisuio.sys (Microsoft Corporation) SafeBootNet: NetBIOS - C:\WINDOWS\System32\DRIVERS\netbios.sys (Microsoft Corporation) SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetBT - C:\WINDOWS\System32\DRIVERS\netbt.sys (Microsoft Corporation) SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Netlogon - C:\WINDOWS\System32\lsass.exe (Microsoft Corporation) SafeBootNet: NetMan - C:\WINDOWS\System32\netman.dll (Microsoft Corporation) SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NtLmSsp - C:\WINDOWS\System32\lsass.exe (Microsoft Corporation) SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PlugPlay - C:\WINDOWS\System32\services.exe (Microsoft Corporation) SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdpcdd.sys - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys (Microsoft Corporation) SafeBootNet: rdpdd.sys - C:\WINDOWS\System32\rdpdd.dll (Microsoft Corporation) SafeBootNet: rdpwd.sys - C:\WINDOWS\System32\drivers\rdpwd.sys (Microsoft Corporation) SafeBootNet: rdsessmgr - C:\WINDOWS\System32\sessmgr.exe (Microsoft Corporation) SafeBootNet: RpcSs - C:\WINDOWS\System32\rpcss.dll (Microsoft Corporation) SafeBootNet: SCSI Class - Driver Group SafeBootNet: sermouse.sys - Driver SafeBootNet: sharedaccess - C:\WINDOWS\System32\ipnathlp.dll (Microsoft Corporation) SafeBootNet: sr.sys - C:\WINDOWS\System32\DRIVERS\sr.sys (Microsoft Corporation) SafeBootNet: SRService - C:\WINDOWS\System32\srsvc.dll (Microsoft Corporation) SafeBootNet: Streams Drivers - Driver Group SafeBootNet: svcWRSSSDK - Service SafeBootNet: System Bus Extender - Driver Group SafeBootNet: Tcpip - C:\WINDOWS\System32\DRIVERS\tcpip.sys (Microsoft Corporation) SafeBootNet: TDI - Driver Group SafeBootNet: tdpipe.sys - C:\WINDOWS\System32\drivers\tdpipe.sys (Microsoft Corporation) SafeBootNet: tdtcp.sys - C:\WINDOWS\System32\drivers\tdtcp.sys (Microsoft Corporation) SafeBootNet: termservice - C:\WINDOWS\System32\termsrv.dll (Microsoft Corporation) SafeBootNet: UploadMgr - Service SafeBootNet: vga.sys - Driver SafeBootNet: vgasave.sys - C:\WINDOWS\System32\drivers\vga.sys (Microsoft Corporation) SafeBootNet: WinMgmt - C:\WINDOWS\System32\wbem\WMIsvc.dll (Microsoft Corporation) SafeBootNet: WZCSVC - C:\WINDOWS\System32\wzcsvc.dll (Microsoft Corporation) SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608555} - Internet Explorer Classes for Java ActiveX: {0E9A3196-39EA-409D-8EB4-20D7FABC191A} - Microsoft .NET Framework 1.0 Hotfix (KB928367) ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML) ActiveX: {14303301-758B-402B-9A0D-2C6A591680DB} - Microsoft .NET Framework 1.0 Service Pack 3 (KB867461) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow ActiveX: {2298d453-bcae-4519-bf33-1cbf3faf1524} - Q867801 ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4 ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 11.0 ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 11.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {2cc9d512-6db6-4f1c-8979-9a41fae88de0} - Q837009 ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML Data Binding for Java ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Advanced Authoring ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW ActiveX: {5f3c70b3-ac2f-432c-8f9c-1624df61f54f} - Microsoft Data Access Components KB870669 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework ActiveX: {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - Web Folders ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install ActiveX: {78705f0d-e8db-4b2d-8193-982bdda15ecd} - .NET Framework ActiveX: {795d0712-722c-43ec-906a-fc5e678eada9} - Q831167 ActiveX: {81B52903-4C11-11D6-B6E1-00B0D049139F} - Microsoft .NET Framework 1.0 Service Pack 2 (KB867461) ActiveX: {871F8A30-15A2-11D6-8711-0002B3281F8B} - Microsoft .NET Framework 1.0 Service Pack 1 (KB867461) ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install ActiveX: {8b15971b-5355-4c82-8c07-7e181ea07608} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.Install.PerUser ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {94de52c8-2d59-4f1b-883e-79663d2d9a8c} - Fax Provider ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Task Scheduler ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {eddbec60-89cb-44ef-8291-0850fd28ff6a} - Q832894 ActiveX: {f5173cf0-1dfb-4978-8e50-a90169ee7ca9} - Q823353 ActiveX: {F5776D81-AE53-4935-8E84-B0B283D8BCEF} - Q330994 ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE Drivers32: midi - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation) Drivers32: midi1 - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation) Drivers32: midimapper - C:\WINDOWS\System32\midimap.dll (Microsoft Corporation) Drivers32: mixer - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation) Drivers32: mixer1 - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation) Drivers32: msacm.iac2 - C:\WINDOWS\System32\iac25_32.ax (Intel Corporation) Drivers32: msacm.imaadpcm - C:\WINDOWS\System32\imaadp32.acm (Microsoft Corporation) Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/) Drivers32: msacm.msadpcm - C:\WINDOWS\System32\msadp32.acm (Microsoft Corporation) Drivers32: msacm.msaudio1 - C:\WINDOWS\System32\msaud32.acm (Microsoft Corporation) Drivers32: msacm.msg711 - C:\WINDOWS\System32\msg711.acm (Microsoft Corporation) Drivers32: msacm.msg723 - C:\WINDOWS\System32\msg723.acm (Microsoft Corporation) Drivers32: msacm.msgsm610 - C:\WINDOWS\System32\msgsm32.acm (Microsoft Corporation) Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.) Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.) Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.divx - C:\WINDOWS\System32\divx.dll (DivX, Inc.) Drivers32: vidc.I420 - C:\WINDOWS\System32\msh263.drv (Microsoft Corporation) Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll () Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll () Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation) Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation) Drivers32: vidc.iyuv - C:\WINDOWS\System32\iyuv_32.dll (Microsoft Corporation) Drivers32: vidc.LEAD - C:\WINDOWS\System32\LCODCCMP.DLL (LEAD Technologies, Inc.) Drivers32: vidc.M261 - C:\WINDOWS\System32\msh261.drv (Microsoft Corporation) Drivers32: vidc.M263 - C:\WINDOWS\System32\msh263.drv (Microsoft Corporation) Drivers32: vidc.mrle - C:\WINDOWS\System32\msrle32.dll (Microsoft Corporation) Drivers32: vidc.msvc - C:\WINDOWS\System32\msvidc32.dll (Microsoft Corporation) Drivers32: vidc.uyvy - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation) Drivers32: vidc.xvid - C:\WINDOWS\System32\xvidvfw.dll () Drivers32: vidc.yuy2 - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation) Drivers32: vidc.yvu9 - C:\WINDOWS\System32\tsbyuv.dll (Microsoft Corporation) Drivers32: vidc.yvyu - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation) Drivers32: wave - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation) Drivers32: wave1 - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation) Drivers32: wavemapper - C:\WINDOWS\System32\msacm32.drv (Microsoft Corporation) ========== Files/Folders - Created Within 30 Days ========== [2009/06/20 19:24:36 | 03,561,752 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Owner\Desktop\mbam-setup.exe [2009/06/20 19:08:50 | 00,264,704 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\TFC.exe [2009/06/20 18:42:51 | 00,512,512 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.exe [2009/06/20 07:43:21 | 00,000,000 | ---D | C] -- C:\_OTL [2009/06/19 20:50:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Malwarebytes [2009/06/19 20:49:59 | 00,000,707 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2009/06/19 20:49:56 | 00,038,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2009/06/19 20:49:54 | 00,019,096 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2009/06/19 20:49:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2009/06/19 20:49:53 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2009/06/19 20:01:10 | 00,000,350 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\My Documents.lnk [2009/06/19 19:26:52 | 00,001,613 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk [2009/06/19 19:26:47 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2009/06/18 18:19:18 | 00,000,000 | ---D | C] -- C:\UltimateExercis [2009/06/18 18:11:10 | 00,692,224 | ---- | C] (CIA, The Company) -- C:\WINDOWS\System32\ciaResSvr20.dll [2009/06/18 18:11:10 | 00,213,083 | ---- | C] (CIA, The Company) -- C:\WINDOWS\System32\ciaXPButton20.ocx [2009/06/18 18:11:10 | 00,139,264 | ---- | C] (CIA, The Company) -- C:\WINDOWS\System32\ciaXPProgress20.ocx [2009/06/18 18:11:10 | 00,126,976 | ---- | C] (CIA, The Company) -- C:\WINDOWS\System32\ciaXPFrame20.ocx [2009/06/18 18:11:10 | 00,053,248 | ---- | C] (CIA, The Company) -- C:\WINDOWS\System32\ciaXPRegSvr20.DLL [2009/06/18 18:11:10 | 00,040,960 | ---- | C] (CIA, The Company) -- C:\WINDOWS\System32\ciaSubClsSvr.DLL [2009/06/18 18:05:49 | 00,000,721 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Easy DVD Creator.lnk [2009/06/18 17:52:42 | 10,060,30848 | -HS- | C] () -- C:\hiberfil.sys [2009/06/18 14:44:59 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpshims.dll [2009/06/18 14:44:57 | 00,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieproxy.dll [2009/06/18 14:44:53 | 00,000,000 | ---D | C] -- C:\WINDOWS\ie8updates [2009/06/18 14:44:25 | 00,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iecompat.dll [2009/06/18 14:43:15 | 00,000,000 | -H-D | C] -- C:\WINDOWS\ie8 [2009/06/15 15:50:01 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9 Installer [2009/06/15 15:49:36 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR [2009/06/14 14:16:00 | 00,012,383 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\It looks like it may be just coming from Firefox.docx [2009/06/14 10:14:22 | 00,000,000 | ---D | C] -- C:\Program Files\trend micro [2009/06/12 19:04:17 | 00,000,496 | ---- | C] () -- C:\WINDOWS\tasks\SpywareStop Scheduled Scan.job [2009/06/12 19:04:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\SpywareStop [2009/06/12 19:03:05 | 00,000,000 | ---D | C] -- C:\Program Files\SpywareStop [2009/06/12 19:02:26 | 05,330,527 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\setupxv.exe [2009/06/12 18:03:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\You Tube [2009/06/11 15:58:46 | 00,000,000 | ---D | C] -- C:\Program Files\YouTube Downloader [2009/06/10 18:09:41 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\eSellerate [2009/06/10 18:09:35 | 00,000,000 | ---D | C] -- C:\E-Zsoft [2009/06/10 18:08:14 | 00,000,000 | ---D | C] -- C:\Program Files\E-Zsoft [2009/06/10 17:48:47 | 00,000,000 | ---D | C] -- C:\My FLVs [2009/06/10 17:44:23 | 00,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009/06/10 17:44:23 | 00,716,800 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm [2009/06/10 17:44:23 | 00,577,536 | ---- | C] (DivXNetworks, Inc.) -- C:\WINDOWS\System32\divxdec.ax [2009/06/10 17:44:23 | 00,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2009/06/10 17:44:23 | 00,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml [2009/06/10 17:44:22 | 00,593,920 | ---- | C] (DivXNetworks) -- C:\WINDOWS\System32\dpuGUI11.dll [2009/06/10 17:44:22 | 00,574,976 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx.dll [2009/06/10 17:44:22 | 00,294,912 | ---- | C] (DivXNetworks) -- C:\WINDOWS\System32\dpu11.dll [2009/06/10 17:44:22 | 00,200,704 | ---- | C] (DivXNetworks) -- C:\WINDOWS\System32\dtu100.dll [2009/06/10 17:44:22 | 00,086,016 | ---- | C] (DivXNetworks) -- C:\WINDOWS\System32\dpl100.dll [2009/06/10 17:44:22 | 00,057,344 | ---- | C] (DivXNetworks) -- C:\WINDOWS\System32\dpv11.dll [2009/06/10 17:44:21 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2009/06/10 17:44:21 | 01,044,480 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\libdivx.dll [2009/06/10 17:44:21 | 00,200,704 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\ssldivx.dll [2009/06/03 17:19:54 | 00,001,740 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk [2009/06/01 16:11:59 | 00,014,982 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\Mortgage Breakdown 6 1 2009.docx [2009/05/27 14:36:59 | 00,015,875 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\Car Fire May 2009.jpg [2009/05/27 14:36:21 | 00,127,808 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\BA and The Bike T I May 2009.jpg [2009/05/27 06:52:33 | 00,078,408 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\Hoover Dam May 2009.jpg [2009/05/27 06:52:15 | 00,120,824 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\Black Jack2 T I.jpg [2009/05/27 06:51:57 | 00,118,349 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\Black Jack T I.jpg [2009/05/27 06:51:30 | 00,103,133 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\BA Hoover Dam MAY 2009.jpg [2009/04/07 18:02:31 | 00,000,067 | ---- | C] () -- C:\WINDOWS\Easy DVD Creator.INI [2009/04/05 15:55:30 | 00,000,067 | ---- | C] () -- C:\WINDOWS\Easy WMV ASF ASX to DVD Burner.INI [2009/03/09 18:52:58 | 00,005,632 | ---- | C] () -- C:\WINDOWS\System32\Machnm64.sys [2009/03/09 18:52:58 | 00,002,304 | ---- | C] () -- C:\WINDOWS\System32\Machnm32.sys [2008/03/09 10:22:35 | 00,269,824 | ---- | C] () -- C:\WINDOWS\System32\baksm.dll [2008/03/09 10:22:32 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\vbsuct32.dll [2008/03/08 09:29:27 | 00,269,824 | ---- | C] () -- C:\WINDOWS\System32\supermenuhook.dll [2008/03/04 15:44:04 | 00,000,028 | ---- | C] () -- C:\WINDOWS\System32\slootniw01.dll [2008/02/16 08:31:20 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2007/12/11 18:26:52 | 00,000,080 | ---- | C] () -- C:\WINDOWS\SuperUtil.ini [2007/11/23 14:45:21 | 00,782,336 | ---- | C] () -- C:\WINDOWS\System32\IlmImf.dll [2007/11/23 14:45:21 | 00,446,464 | ---- | C] () -- C:\WINDOWS\System32\Photomatix_jpg.dll [2007/11/23 14:45:21 | 00,353,280 | ---- | C] () -- C:\WINDOWS\System32\pmtf2.dll [2007/11/23 14:45:21 | 00,266,240 | ---- | C] () -- C:\WINDOWS\System32\Photomatix25Lib.dll [2007/11/23 14:45:21 | 00,253,952 | ---- | C] () -- C:\WINDOWS\System32\Photomatix25Lib2.dll [2007/11/23 14:45:21 | 00,205,824 | ---- | C] () -- C:\WINDOWS\System32\pmtf1.dll [2007/11/23 14:45:21 | 00,204,288 | ---- | C] () -- C:\WINDOWS\System32\pmtf3.dll [2007/11/23 14:45:21 | 00,095,525 | ---- | C] () -- C:\WINDOWS\System32\Photomatix25Lib3.dll [2007/11/23 14:45:21 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\pmexr.dll [2007/11/23 14:45:21 | 00,011,776 | ---- | C] () -- C:\WINDOWS\System32\pmbm.dll [2007/08/22 17:43:04 | 00,059,392 | R--- | C] () -- C:\WINDOWS\System32\streamhlp.dll [2007/07/30 07:24:33 | 00,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll [2007/07/27 18:45:06 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2007/07/27 17:55:10 | 00,000,091 | ---- | C] () -- C:\WINDOWS\vmreg32.dll [2007/03/26 16:21:51 | 00,010,752 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2006/10/22 12:22:00 | 01,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2006/10/22 12:22:00 | 00,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll [2006/10/22 12:22:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2006/10/22 12:22:00 | 00,212,992 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll [2006/09/15 17:57:34 | 00,000,213 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini [2006/09/15 17:55:44 | 00,027,040 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2005/11/19 16:39:52 | 00,684,032 | ---- | C] () -- C:\WINDOWS\libeay32.dll [2005/11/19 16:39:52 | 00,155,648 | ---- | C] () -- C:\WINDOWS\ssleay32.dll [2005/08/17 17:11:38 | 00,001,049 | ---- | C] () -- C:\WINDOWS\Office Fish-Prefs.ini [2005/06/14 14:36:40 | 00,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys [2005/02/26 13:15:57 | 00,036,968 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll [2004/08/28 14:13:05 | 00,000,045 | ---- | C] () -- C:\WINDOWS\GCHFGHIJ.ini [2004/06/18 15:26:27 | 00,000,037 | ---- | C] () -- C:\WINDOWS\ipixActivex.ini [2004/04/17 21:33:52 | 00,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2004/03/11 19:04:54 | 00,000,040 | ---- | C] () -- C:\WINDOWS\opt_2460.ini [2004/03/11 19:04:12 | 00,000,051 | ---- | C] () -- C:\WINDOWS\brmx2001.ini [2004/03/11 19:00:42 | 00,000,030 | ---- | C] () -- C:\WINDOWS\System32\brss01a.ini [2004/03/11 19:00:13 | 00,002,653 | ---- | C] () -- C:\WINDOWS\BRMFBIDI.INI [2004/03/11 18:56:18 | 00,000,304 | ---- | C] () -- C:\WINDOWS\Brpcfx.ini [2004/03/11 18:56:17 | 00,000,516 | ---- | C] () -- C:\WINDOWS\brwmark.ini [2004/03/11 18:56:17 | 00,000,079 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2004/03/08 17:25:25 | 00,004,436 | ---- | C] () -- C:\WINDOWS\DevMgr.ini [2004/03/08 17:24:14 | 00,000,020 | ---- | C] () -- C:\WINDOWS\Hposcv07.INI [2004/02/23 16:43:00 | 01,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2003/10/07 13:19:16 | 00,282,624 | ---- | C] () -- C:\WINDOWS\System32\PcdrSystemInformation.dll [2003/10/07 13:18:59 | 00,022,396 | ---- | C] () -- C:\WINDOWS\System32\drivers\USBkey.sys [2003/04/10 06:35:00 | 00,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2003/04/10 06:34:24 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\iAlmcoin.dll [2003/04/10 06:21:36 | 00,000,051 | ---- | C] () -- C:\WINDOWS\System32\mshrml.ini [2003/04/10 03:51:07 | 00,000,438 | ---- | C] () -- C:\WINDOWS\System32\1_ssetup.ini [2003/04/10 03:51:07 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\sunistlog.ini [2003/04/10 02:06:10 | 00,167,936 | ---- | C] () -- C:\WINDOWS\System32\PCDrJNI_1_1.dll [2003/04/10 02:03:38 | 00,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll [2003/04/10 02:03:38 | 00,024,576 | ---- | C] () -- C:\WINDOWS\System32\syscontr.dll [2003/04/10 01:57:15 | 00,000,052 | ---- | C] () -- C:\WINDOWS\intuprof.ini [2003/04/10 01:57:04 | 00,000,639 | ---- | C] () -- C:\WINDOWS\QUICKEN.INI [2003/04/10 01:16:44 | 00,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2003/04/10 00:55:02 | 00,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2003/04/10 00:44:58 | 00,299,073 | ---- | C] () -- C:\WINDOWS\System32\PythonCOM22.dll [2003/04/10 00:44:58 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\PyWinTypes22.dll [2003/04/10 00:44:29 | 00,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll [2003/04/10 00:23:21 | 00,000,802 | ---- | C] () -- C:\WINDOWS\orun32.ini [2003/04/10 00:05:48 | 00,000,281 | ---- | C] () -- C:\WINDOWS\System32\BOOTBAK.INI [2003/04/10 00:05:45 | 00,000,659 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2003/04/10 00:05:33 | 00,000,706 | ---- | C] () -- C:\WINDOWS\win.ini [2003/04/10 00:05:31 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2002/08/12 09:19:42 | 00,101,376 | ---- | C] () -- C:\WINDOWS\System32\Welsof32.dll [2002/03/04 10:16:34 | 00,110,592 | R--- | C] () -- C:\WINDOWS\System32\Jpeg32.dll [2001/08/14 20:47:08 | 00,020,480 | ---- | C] () -- C:\WINDOWS\System32\vxpsapi.dll [2001/01/03 08:56:28 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2001/01/03 08:56:26 | 01,470,464 | ---- | C] () -- C:\WINDOWS\System32\nview.dll ========== Files - Modified Within 30 Days ========== [1 C:\Documents and Settings\Owner\My Documents\*.tmp files] [2009/06/21 06:14:16 | 00,088,566 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2009/06/21 06:13:58 | 00,000,438 | ---- | M] () -- C:\WINDOWS\tasks\RegCure Program Check.job [2009/06/21 06:13:54 | 00,000,448 | ---- | M] () -- C:\WINDOWS\tasks\XoftSpySE 2.job [2009/06/21 06:13:51 | 00,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009/06/21 06:13:48 | 00,025,912 | ---- | M] () -- C:\WINDOWS\System32\Config.MPF [2009/06/21 06:12:43 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009/06/21 06:12:28 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009/06/21 06:12:21 | 10,060,30848 | -HS- | M] () -- C:\hiberfil.sys [2009/06/20 19:25:15 | 00,000,707 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2009/06/20 19:24:43 | 03,561,752 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Owner\Desktop\mbam-setup.exe [2009/06/20 19:08:57 | 00,264,704 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\TFC.exe [2009/06/20 18:43:00 | 00,512,512 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.exe [2009/06/20 18:32:44 | 00,000,706 | ---- | M] () -- C:\WINDOWS\win.ini [2009/06/20 18:32:44 | 00,000,264 | -HS- | M] () -- C:\boot.ini [2009/06/20 18:32:44 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2009/06/20 03:00:02 | 00,000,496 | ---- | M] () -- C:\WINDOWS\tasks\SpywareStop Scheduled Scan.job [2009/06/19 20:01:10 | 00,000,350 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\My Documents.lnk [2009/06/19 19:26:52 | 00,001,613 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk [2009/06/19 14:08:50 | 00,000,372 | ---- | M] () -- C:\WINDOWS\tasks\RegCure.job [2009/06/19 14:08:50 | 00,000,362 | ---- | M] () -- C:\WINDOWS\tasks\XoftSpySE.job [2009/06/18 18:44:56 | 00,006,144 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009/06/18 18:05:57 | 00,000,067 | ---- | M] () -- C:\WINDOWS\Easy DVD Creator.INI [2009/06/18 18:05:49 | 00,000,721 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Easy DVD Creator.lnk [2009/06/18 14:44:56 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2009/06/17 11:27:56 | 00,038,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2009/06/17 11:27:44 | 00,019,096 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2009/06/14 14:16:00 | 00,012,383 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\It looks like it may be just coming from Firefox.docx [2009/06/13 10:05:23 | 00,001,740 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk [2009/06/12 19:24:19 | 04,280,276 | -H-- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\IconCache.db [2009/06/12 19:02:29 | 05,330,527 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\setupxv.exe [2009/06/10 17:04:13 | 00,318,904 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Owner\My Documents\wmpfirefoxplugin.exe [2009/06/09 15:10:24 | 01,614,096 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009/06/01 16:12:00 | 00,014,982 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\Mortgage Breakdown 6 1 2009.docx [2009/06/01 11:51:12 | 23,635,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe [2009/05/28 07:00:06 | 00,000,332 | ---- | M] () -- C:\WINDOWS\tasks\McQcTask.job [2009/05/27 14:37:00 | 00,015,875 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\Car Fire May 2009.jpg [2009/05/27 14:36:21 | 00,127,808 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\BA and The Bike T I May 2009.jpg [2009/05/27 06:52:34 | 00,078,408 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\Hoover Dam May 2009.jpg [2009/05/27 06:52:16 | 00,120,824 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\Black Jack2 T I.jpg [2009/05/27 06:51:57 | 00,118,349 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\Black Jack T I.jpg [2009/05/27 06:51:31 | 00,103,133 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\BA Hoover Dam MAY 2009.jpg ========== LOP Check ========== [2009/06/19 20:49:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data [2006/09/15 17:52:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Brother [2008/05/03 11:45:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FLEXnet [2003/04/10 02:12:30 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Motive [2005/04/11 14:31:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Napster [2009/02/18 17:39:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Software [2009/01/05 17:13:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound [2003/04/10 00:24:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SBSI [2006/09/15 17:55:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ScanSoft [2005/09/05 13:06:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SUIIMAGE [2009/06/18 18:36:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP [2008/06/02 18:03:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Walgreens [2008/11/11 09:50:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip [2008/11/11 09:38:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZipSE [2009/06/19 20:50:01 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Owner\Application Data [2004/10/08 19:20:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\ArcSoft [2004/03/12 20:00:20 | 00,000,000 | R--D | M] -- C:\Documents and Settings\Owner\Application Data\Brother [2008/11/16 16:07:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2004/04/02 18:17:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\COREL [2009/02/05 18:15:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\GetRightToGo [2009/03/14 11:00:18 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\IMSI [2005/12/18 12:06:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\interMute [2003/10/07 10:46:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\InterVideo [2009/05/16 07:27:08 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Juniper Networks [2007/10/06 06:10:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Leadertech [2004/03/03 19:13:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Motive [2005/03/28 10:18:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Musicmatch [2009/01/05 17:09:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\NCH Swift Sound [2004/03/11 19:04:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\PPIMAGES [2009/06/10 15:26:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\QUAD Backups [2005/03/28 08:51:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Roxio [2003/04/10 02:04:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\SampleView [2003/04/10 01:27:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Share-to-Web Upload Folder [2006/03/25 10:36:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\shooter31 [2007/09/21 05:59:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Snapfish [2008/02/10 10:00:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\SPAMfighter [2009/06/12 19:04:17 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\SpywareStop [2007/08/22 17:45:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\TrojanHunter [2009/06/10 15:26:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Uniblue [2004/03/03 20:21:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\VERITAS [2008/06/02 18:25:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\W Photo Studio [2008/06/02 18:25:50 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\W Photo Studio Viewer [2008/06/02 18:03:41 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Walgreens [2009/03/09 13:46:28 | 00,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job [2002/08/29 14:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini [2007/09/07 17:51:07 | 00,000,340 | ---- | M] () -- C:\WINDOWS\Tasks\McDefragTask.job [2009/05/28 07:00:06 | 00,000,332 | ---- | M] () -- C:\WINDOWS\Tasks\McQcTask.job [2007/04/20 16:20:55 | 00,000,402 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Quick Scan.job [2009/06/21 06:13:58 | 00,000,438 | ---- | M] () -- C:\WINDOWS\Tasks\RegCure Program Check.job [2009/06/19 14:08:50 | 00,000,372 | ---- | M] () -- C:\WINDOWS\Tasks\RegCure.job [2009/06/21 06:12:43 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT [2009/06/20 03:00:02 | 00,000,496 | ---- | M] () -- C:\WINDOWS\Tasks\SpywareStop Scheduled Scan.job [2009/06/21 06:13:54 | 00,000,448 | ---- | M] () -- C:\WINDOWS\Tasks\XoftSpySE 2.job [2009/06/19 14:08:50 | 00,000,362 | ---- | M] () -- C:\WINDOWS\Tasks\XoftSpySE.job ========== Purity Check ========== ========== Custom Scans ========== < %systemroot%\System32\antiwpa.dll > < %systemroot%\SYSTEM32\wpa.dll > < %systemroot%\setup\scripts\biestart.exe > < %systemroot%\system32\drivers\royal.sys > < %systemroot%\system32\oobe\AntiWPA_Crypt.dll > < %TEMP%\antiwpa_crypt.dll > < %TEMP%\antiwpa.dll /s > < %PROGRAMFILES%\antiwpa.dll /s > < %systemroot%\system32\crypt.dll > < %TEMP%\crypt.dll > < %SYSTEMDRIVE%\*. > [2009/06/20 20:28:21 | 00,000,000 | ---D | M] -- C: [2009/06/20 07:43:21 | 00,000,000 | ---D | M] -- C:\_OTL [2007/03/21 13:22:21 | 00,000,000 | ---D | M] -- C:\21361812dafe70166a68 [2003/04/10 01:08:50 | 00,000,000 | ---D | M] -- C:\6in1ico [2004/03/03 18:44:42 | 00,000,000 | RHSD | M] -- C:\cmdcons [2009/06/16 14:14:55 | 00,000,000 | -H-D | M] -- C:\Config.Msi [2005/02/05 12:52:33 | 00,000,000 | -H-D | M] -- C:\DBBackup [2007/12/11 17:21:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings [2007/04/11 15:30:51 | 00,000,000 | ---D | M] -- C:\Downloads [2009/06/10 18:09:35 | 00,000,000 | ---D | M] -- C:\E-Zsoft [2001/01/03 08:55:39 | 00,000,000 | -H-D | M] -- C:\hp [2001/01/03 08:55:38 | 00,000,000 | ---D | M] -- C:\I386 [2009/03/14 10:19:07 | 00,000,000 | RH-D | M] -- C:\MSOCache [2009/06/10 18:13:55 | 00,000,000 | ---D | M] -- C:\My FLVs [2007/07/27 18:50:33 | 00,000,000 | ---D | M] -- C:\NVIDIA [2009/06/20 19:50:10 | 00,000,000 | R--D | M] -- C:\Program Files [2003/04/10 00:45:09 | 00,000,000 | -H-D | M] -- C:\Python22 [2005/12/28 15:49:16 | 00,000,000 | -HSD | M] -- C:\RECYCLER [2004/03/11 18:50:32 | 00,000,000 | ---D | M] -- C:\SmartuiUpgrade [2007/04/19 19:27:09 | 00,000,000 | -HSD | M] -- C:\System Volume Information [2003/04/10 00:44:29 | 00,000,000 | -H-D | M] -- C:\system.sav [2009/04/03 08:55:10 | 00,000,000 | ---D | M] -- C:\Temp [2006/09/12 18:36:34 | 00,000,000 | ---D | M] -- C:\UK-ENG [2009/06/18 18:19:18 | 00,000,000 | ---D | M] -- C:\UltimateExercis [2009/06/15 16:07:48 | 00,000,000 | ---D | M] -- C:\unzipped [2007/12/08 11:13:06 | 00,000,000 | ---D | M] -- C:\usa [2006/09/12 18:36:33 | 00,000,000 | ---D | M] -- C:\US-ENG [2009/06/20 19:09:46 | 00,000,000 | ---D | M] -- C:\WINDOWS [2004/05/09 09:03:27 | 00,000,000 | ---D | M] -- C:\WUTemp < %SYSTEMDRIVE%\*.* > [2007/07/27 18:14:53 | 00,974,469 | ---- | M] () -- C:\agere wdm modem enumerator, agere wdm modem enumerator.exe [2007/04/21 08:13:12 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2006/09/12 18:36:02 | 11,137,824 | ---- | M] (A.I.SOFT,INC.) -- C:\BMIP_ENG.EXE [2004/03/03 18:40:30 | 00,000,196 | RHS- | M] () -- C:\BOOT.BAK [2009/06/20 18:32:44 | 00,000,264 | -HS- | M] () -- C:\boot.ini [2007/07/27 18:17:55 | 04,137,337 | ---- | M] (A.I.SOFT,INC.) -- C:\brother mfc-240c usb, brother mfc-240c usb, brother mfc-240c usb, brother mfc-240c usb, brother mfc-240c usb printer.EXE [2007/07/30 10:49:26 | 00,000,025 | ---- | M] () -- C:\Brxpinst.log [2007/04/11 15:53:59 | 04,991,776 | ---- | M] (PC Tools ) -- C:\clean registryrminstall.exe [2002/08/29 07:00:00 | 00,245,920 | RHS- | M] () -- C:\cmldr [2006/04/19 23:37:08 | 03,406,868 | ---- | M] (SharpC Solutions Group) -- C:\CMSetup1_11_04.exe [2006/04/25 15:14:25 | 03,385,609 | ---- | M] () -- C:\cmsetup1_11_04.zip [2006/10/30 10:58:38 | 03,722,884 | ---- | M] (SharpC Solutions Group) -- C:\CMSetup1_15_02.exe [2006/11/02 15:25:11 | 03,701,376 | ---- | M] () -- C:\cmsetup1_15_02.zip [2003/04/10 00:19:17 | 00,000,000 | ---- | M] () -- C:\CONFIG.SYS [2005/02/26 13:17:11 | 00,000,812 | ---- | M] () -- C:\DebugLOG.txt [2008/03/08 20:00:28 | 00,000,182 | ---- | M] () -- C:\drwtsn32.log [2005/01/17 09:01:20 | 00,315,624 | ---- | M] (Microsoft Corporation) -- C:\dxwebsetup.exe [2009/06/21 06:12:21 | 10,060,30848 | -HS- | M] () -- C:\hiberfil.sys [2007/03/27 18:32:04 | 15,505,200 | ---- | M] (Microsoft Corporation) -- C:\IE7-WindowsXP-x86-enu.exe [2006/09/09 08:29:54 | 01,134,216 | ---- | M] (Microsoft Corporation) -- C:\install_flash_player_active_x.exe [2003/04/10 00:19:17 | 00,000,000 | RHS- | M] () -- C:\IO.SYS [2005/01/06 04:52:20 | 05,106,957 | ---- | M] () -- C:\java_virtual.zip [2006/07/16 06:59:07 | 04,168,112 | ---- | M] () -- C:\LWIRED_WWW[1].Renegade-Inc.NET.rar [2005/02/05 10:50:38 | 25,390,744 | ---- | M] () -- C:\mmsetup_10002047b_ENU.exe [2003/04/10 00:19:17 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2006/09/09 08:48:31 | 00,300,648 | ---- | M] (McAfee Inc.) -- C:\mvtapp.exe [2006/01/08 13:30:58 | 00,000,992 | ---- | M] () -- C:\net_save.dna [2004/09/06 18:50:29 | 00,047,564 | RHS- | M] () -- C:\NTDETECT.COM [2008/09/02 14:28:17 | 00,250,048 | RHS- | M] () -- C:\ntldr [2007/07/27 18:31:22 | 42,567,136 | ---- | M] (NVIDIA Corporation ) -- C:\nvidia geforce4 mx integrated gpu, nvidia geforce4 mx integrated gpu.exe [2007/07/27 18:01:06 | 28,192,681 | ---- | M] (NVIDIA Corporation) -- C:\nvidia nforce networking controller, nvidia nforce2 agp host to pci bridge, nvidia nforce2 memory controller, nvidia nforce2 memory controller, nvidia nforce2 memory controller, nvidia nforce2 memory controller, nvidia nforce2 memory controller, nvid.exe [2009/06/21 06:12:20 | 93,952,4096 | -HS- | M] () -- C:\pagefile.sys [2008/07/31 17:13:53 | 00,000,186 | ---- | M] () -- C:\picsetup.log [2005/01/17 09:09:11 | 00,180,904 | ---- | M] () -- C:\Q261606_W2K_SP2_x86_en.EXE [2007/07/27 18:20:04 | 18,346,191 | ---- | M] (Realtek Semiconductor Corp.) -- C:\realtek ac'97 audio, realtek ac'97 audio.exe [2004/04/17 07:23:45 | 00,000,666 | ---- | M] () -- C:\remind.log [2005/06/14 14:49:51 | 06,633,240 | ---- | M] (Webroot Software, Inc. ) -- C:\sspsetup1_1022428938.exe [2009/06/18 18:06:19 | 00,046,664 | ---- | M] () -- C:\StarBurn.log [2005/10/31 10:56:00 | 00,700,416 | ---- | M] (LimeWire) -- C:\StubInstaller.exe [2006/07/10 14:15:29 | 00,173,120 | ---- | M] (Yahoo! Inc.) -- C:\yinst_current.exe < %PROGRAMFILES%\*. > [2009/06/20 19:50:10 | 00,000,000 | R--D | M] -- C:\Program Files [2009/06/14 17:36:22 | 00,000,000 | ---D | M] -- C:\Program Files\Adobe [2008/04/16 16:42:52 | 00,000,000 | ---D | M] -- C:\Program Files\Adobe Media Player [2005/08/13 09:55:38 | 00,000,000 | ---D | M] -- C:\Program Files\All-Purpose Legal Documents [2004/03/14 09:58:23 | 00,000,000 | ---D | M] -- C:\Program Files\AOD [2009/03/09 13:46:24 | 00,000,000 | ---D | M] -- C:\Program Files\Apple Software Update [2003/04/10 02:03:59 | 00,000,000 | ---D | M] -- C:\Program Files\BackWeb [2007/12/15 10:08:53 | 00,000,000 | ---D | M] -- C:\Program Files\Bonjour [2007/07/30 10:47:52 | 00,000,000 | ---D | M] -- C:\Program Files\Brother [2008/11/29 22:02:28 | 00,000,000 | ---D | M] -- C:\Program Files\Carnivores [2007/02/24 23:04:42 | 00,000,000 | ---D | M] -- C:\Program Files\Carnivores 2 [2009/05/02 13:52:41 | 00,000,000 | ---D | M] -- C:\Program Files\Carnivores Ice Age [2008/07/31 17:14:04 | 00,000,000 | ---D | M] -- C:\Program Files\CASIO [2009/03/17 19:05:14 | 00,000,000 | ---D | M] -- C:\Program Files\Citrix [2009/06/15 15:49:36 | 00,000,000 | ---D | M] -- C:\Program Files\Common Files [2009/06/15 16:43:37 | 00,000,000 | ---D | M] -- C:\Program Files\Conduit [2003/04/10 01:54:19 | 00,000,000 | ---D | M] -- C:\Program Files\Corel [2009/05/02 12:12:33 | 00,000,000 | ---D | M] -- C:\Program Files\directx [2006/05/29 17:40:53 | 00,000,000 | ---D | M] -- C:\Program Files\DssEvolution.com [2009/04/05 16:02:43 | 00,000,000 | ---D | M] -- C:\Program Files\DVD Decrypter [2009/06/18 18:05:49 | 00,000,000 | ---D | M] -- C:\Program Files\Easy DVD Creator [2004/07/02 15:23:54 | 00,000,000 | ---D | M] -- C:\Program Files\Easy Internet signup [2009/04/05 16:01:00 | 00,000,000 | ---D | M] -- C:\Program Files\Easy WMV ASF ASX to DVD Burner [2009/06/10 18:08:14 | 00,000,000 | ---D | M] -- C:\Program Files\E-Zsoft [2006/02/03 21:27:18 | 00,000,000 | ---D | M] -- C:\Program Files\Free Offers from Freeze.com [2009/04/03 08:41:29 | 00,000,000 | ---D | M] -- C:\Program Files\GetData [2007/04/18 16:05:07 | 00,000,000 | ---D | M] -- C:\Program Files\Godlike Developers [2007/04/07 17:32:45 | 00,000,000 | ---D | M] -- C:\Program Files\Google [2004/03/08 17:23:51 | 00,000,000 | ---D | M] -- C:\Program Files\Hewlett-Packard [2009/04/04 16:26:55 | 00,000,000 | ---D | M] -- C:\Program Files\HOTALBUMMyBOX [2003/04/10 02:12:29 | 00,000,000 | ---D | M] -- C:\Program Files\HP Instant Support [2003/04/10 01:23:02 | 00,000,000 | ---D | M] -- C:\Program Files\HP Photosmart 11 [2009/03/14 10:52:53 | 00,000,000 | ---D | M] -- C:\Program Files\IMSI [2005/05/30 15:30:54 | 00,000,000 | ---D | M] -- C:\Program Files\Incomplete [2009/03/14 06:40:21 | 00,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information [2009/04/03 08:21:22 | 00,000,000 | ---D | M] -- C:\Program Files\IntelliMover Data Transfer Demo [2009/06/18 15:05:58 | 00,000,000 | ---D | M] -- C:\Program Files\Internet Explorer [2003/04/10 01:34:26 | 00,000,000 | ---D | M] -- C:\Program Files\InterVideo [2009/06/07 09:42:05 | 00,000,000 | ---D | M] -- C:\Program Files\Java [2005/02/26 13:15:57 | 00,000,000 | ---D | M] -- C:\Program Files\JavaSoft [2005/11/29 13:09:58 | 00,000,000 | ---D | M] -- C:\Program Files\JSOFT [2009/04/14 17:52:19 | 00,000,000 | ---D | M] -- C:\Program Files\Loader [2009/06/20 19:25:16 | 00,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware [2009/04/17 04:20:14 | 00,000,000 | ---D | M] -- C:\Program Files\McAfee [2007/09/07 17:51:03 | 00,000,000 | ---D | M] -- C:\Program Files\McAfee.com [2008/09/02 14:41:58 | 00,000,000 | ---D | M] -- C:\Program Files\Messenger [2009/01/10 11:12:02 | 00,000,000 | ---D | M] -- C:\Program Files\MFInstall [2009/04/03 08:55:11 | 00,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage [2009/03/14 10:26:34 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Office [2004/03/07 16:36:57 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Script Control [2009/02/05 17:57:17 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server [2009/03/14 10:26:09 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio [2009/03/14 10:21:56 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio 8 [2009/03/14 10:27:17 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Works [2009/03/14 10:24:56 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET [2008/09/02 14:32:44 | 00,000,000 | ---D | M] -- C:\Program Files\Movie Maker [2009/06/20 20:06:40 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox [2009/03/14 10:26:58 | 00,000,000 | ---D | M] -- C:\Program Files\MSBuild [2003/04/10 02:39:46 | 00,000,000 | ---D | M] -- C:\Program Files\MSN [2003/04/10 00:14:54 | 00,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone [2005/05/08 13:16:33 | 00,000,000 | ---D | M] -- C:\Program Files\MsnMusic [2008/11/12 14:56:39 | 00,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0 [2009/02/05 17:50:57 | 00,000,000 | ---D | M] -- C:\Program Files\MSXML 6.0 [2005/02/05 10:52:37 | 00,000,000 | ---D | M] -- C:\Program Files\MUSICMATCH [2009/02/18 17:39:00 | 00,000,000 | ---D | M] -- C:\Program Files\NCH Software [2009/01/05 18:15:35 | 00,000,000 | ---D | M] -- C:\Program Files\NCH Swift Sound [2008/09/02 14:30:20 | 00,000,000 | ---D | M] -- C:\Program Files\NetMeeting [2005/12/14 16:25:35 | 00,000,000 | ---D | M] -- C:\Program Files\Norton AntiVirus [2009/06/15 16:45:30 | 00,000,000 | ---D | M] -- C:\Program Files\NOS [2007/07/27 18:40:08 | 00,000,000 | ---D | M] -- C:\Program Files\NVIDIA Corporation [2006/09/02 12:55:32 | 00,000,000 | ---D | M] -- C:\Program Files\ODSEdit [2004/04/22 16:56:28 | 00,000,000 | ---D | M] -- C:\Program Files\OfficeUpdate11 [2004/03/14 09:58:23 | 00,000,000 | ---D | M] -- C:\Program Files\Online Services [2008/09/02 14:30:15 | 00,000,000 | ---D | M] -- C:\Program Files\Outlook Express [2007/12/15 07:57:12 | 00,000,000 | ---D | M] -- C:\Program Files\Photomatix [2004/09/17 13:05:07 | 00,000,000 | ---D | M] -- C:\Program Files\Popup XP [2009/03/09 18:27:03 | 00,000,000 | ---D | M] -- C:\Program Files\QUAD Utilities [2007/07/30 08:14:24 | 00,000,000 | ---D | M] -- C:\Program Files\Quicken [2009/03/09 13:48:51 | 00,000,000 | ---D | M] -- C:\Program Files\QuickTime [2008/08/24 17:27:45 | 00,000,000 | ---D | M] -- C:\Program Files\Real [2007/07/27 18:45:21 | 00,000,000 | ---D | M] -- C:\Program Files\Realtek AC97 [2009/01/05 17:54:47 | 00,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies [2009/03/06 20:00:42 | 00,000,000 | ---D | M] -- C:\Program Files\RegCure [2009/01/04 09:34:46 | 00,000,000 | ---D | M] -- C:\Program Files\Registry Mechanic [2008/03/09 16:14:35 | 00,000,000 | ---D | M] -- C:\Program Files\RegistryFix [2007/04/18 17:45:16 | 00,000,000 | ---D | M] -- C:\Program Files\SatFinder [2004/03/11 18:50:11 | 00,000,000 | ---D | M] -- C:\Program Files\Scansoft [2006/04/08 11:18:44 | 00,000,000 | ---D | M] -- C:\Program Files\SharpC [2003/04/10 01:49:39 | 00,000,000 | ---D | M] -- C:\Program Files\Simple Backup for My Pictures [2005/04/13 14:02:49 | 00,000,000 | ---D | M] -- C:\Program Files\Softex [2009/06/18 17:55:19 | 00,000,000 | ---D | M] -- C:\Program Files\SpywareStop [2008/03/08 09:29:25 | 00,000,000 | ---D | M] -- C:\Program Files\SuperLogix [2005/12/13 21:16:51 | 00,000,000 | ---D | M] -- C:\Program Files\Symantec [2005/03/04 15:10:14 | 00,000,000 | ---D | M] -- C:\Program Files\SymNetDrv [2007/07/27 17:54:53 | 00,000,000 | ---D | M] -- C:\Program Files\SymplisIT [2009/06/19 17:52:43 | 00,000,000 | ---D | M] -- C:\Program Files\trend micro [2007/02/24 20:12:05 | 00,000,000 | ---D | M] -- C:\Program Files\Trymedia [2004/08/02 14:26:15 | 00,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information [2003/04/10 02:04:00 | 00,000,000 | ---D | M] -- C:\Program Files\Updates from HP [2008/06/02 18:03:35 | 00,000,000 | ---D | M] -- C:\Program Files\Walgreens [2007/04/17 15:27:54 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Live Safety Center [2008/12/19 17:24:31 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Media Connect 2 [2008/12/19 17:25:53 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Media Player [2008/09/02 14:30:16 | 00,000,000 | ---D | M] -- C:\Program Files\Windows NT [2007/09/22 06:32:07 | 00,000,000 | ---D | M] -- C:\Program Files\WinRAR [2009/03/06 19:34:03 | 00,000,000 | ---D | M] -- C:\Program Files\WinZip [2008/11/11 09:38:01 | 00,000,000 | ---D | M] -- C:\Program Files\WinZip Self-Extractor [2003/04/10 00:19:32 | 00,000,000 | ---D | M] -- C:\Program Files\xerox [2009/06/20 19:51:22 | 00,000,000 | ---D | M] -- C:\Program Files\XoftSpySE [2007/02/23 16:05:19 | 00,000,000 | ---D | M] -- C:\Program Files\XP Repair Pro 2007 [2009/02/04 16:42:56 | 00,000,000 | ---D | M] -- C:\Program Files\Yahoo! [2009/06/11 15:58:49 | 00,000,000 | ---D | M] -- C:\Program Files\YouTube Downloader ========== Alternate Data Streams ========== @Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AC6124CA @Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5F33ACA1 < End of report > |
|
|
|
|
Jun 21 2009, 08:42 AM
Post
#4
|
|
|
GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
hi
Run OTL
|
|
|
|
|
Jun 21 2009, 09:08 AM
Post
#5
|
|
|
Member Posts: 10 OS: xp |
OK Here are my Results:
All processes killed Error: Unable to interpret <PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)> in the current context! Error: Unable to interpret <FF - prefs.js..browser.search.defaultenginename: "Yoog Search"> in the current context! Error: Unable to interpret <FF - prefs.js..browser.search.defaulturl: "http://www28.yoog.com/search.php?q="> in the current context! Error: Unable to interpret <FF - prefs.js..browser.startup.homepage: "http://www28.yoog.com/"> in the current context! Error: Unable to interpret <FF - prefs.js..keyword.URL: "http://www28.yoog.com/search.php?q="> in the current context! Error: Unable to interpret <FF - user.js..browser.startup.homepage: "http://www28.yoog.com/"> in the current context! Error: Unable to interpret <FF - user.js..browser.search.selectedEngine: "Yoog Search"> in the current context! Error: Unable to interpret <FF - user.js..keyword.URL: "http://www28.yoog.com/search.php?q="> in the current context! Error: Unable to interpret <FF - user.js..keyword.enabled: true> in the current context! Error: Unable to interpret <FF - user.js..browser.search.defaultenginename: "Yoog Search"> in the current context! Error: Unable to interpret <FF - user.js..browser.search.defaulturl: "http://www28.yoog.com/search.php?q="> in the current context! Error: Unable to interpret <[2009/06/02 22:01:00 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll> in the current context! Error: Unable to interpret <O2 - BHO: (no name) - {D187A56B-A33F-4CBE-9D77-459FC0BAE012} - No CLSID value found.> in the current context! Error: Unable to interpret <O3 - HKLM\..\Toolbar: (no name) - {4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - No CLSID value found.> in the current context! Error: Unable to interpret <O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID values found.> in the current context! Error: Unable to interpret <O21 - SSODL: kdfaz.dll - {00000000-0000-0000-0000-000000057701} - CLSID or File not found.> in the current context! Error: Unable to interpret <O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\Info.exe -- [2002/09/10 22:54:58 | 00,040,960 | -HS- | M] (XSS)> in the current context! Error: Unable to interpret <MsConfig - StartUpReg: Belt - hkey= - key= - Reg Error: Value error. File not found> in the current context! Error: Unable to interpret <MsConfig - StartUpReg: BCNT - hkey= - key= - Reg Error: Value error. File not found> in the current context! Error: Unable to interpret <MsConfig - StartUpReg: ffnotoqoyw - hkey= - key= - Reg Error: Value error. File not found> in the current context! Error: Unable to interpret <MsConfig - StartUpReg: mspwr - hkey= - key= - Reg Error: Value error. File not found> in the current context! Error: Unable to interpret <[2009/06/12 19:02:26 | 05,330,527 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\setupxv.exe> in the current context! Error: Unable to interpret <[2009/06/12 19:04:17 | 00,000,496 | ---- | C] () -- C:\WINDOWS\tasks\SpywareStop Scheduled Scan.job> in the current context! Error: Unable to interpret <[2009/06/12 19:04:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\SpywareStop> in the current context! Error: Unable to interpret <[2009/06/12 19:03:05 | 00,000,000 | ---D | C] -- C:\Program Files\SpywareStop> in the current context! Error: Unable to interpret <[2005/10/31 10:56:00 | 00,700,416 | ---- | M] (LimeWire) -- C:\StubInstaller.exe> in the current context! Error: Unable to interpret <[2006/02/03 21:27:18 | 00,000,000 | ---D | M] -- C:\Program Files\Free Offers from Freeze.com> in the current context! ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Owner ->Temp folder emptied: 321617 bytes ->Temporary Internet Files folder emptied: 17725726 bytes ->Java cache emptied: 7865889 bytes ->FireFox cache emptied: 28225947 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes File delete failed. C:\WINDOWS\temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\History\History.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Cookies\index.dat scheduled to be deleted on reboot. Windows Temp folder emptied: 68728 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 51.73 mb OTL by OldTimer - Version 3.0.2.0 log created on 06212009_100145 Files\Folders moved on Reboot... Registry entries deleted on Reboot... |
|
|
|
|
Jun 21 2009, 09:09 AM
Post
#6
|
|
|
GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
You seem to have done the fix wrong
You need to include everything from :OTL and down |
|
|
|
|
Jun 21 2009, 09:11 AM
Post
#7
|
|
|
Member Posts: 10 OS: xp |
Thanks for all your help with this issue. I still have this Firefox Issue, however I need to step out for a couple of hours. I will resume this upon my return. Thanks, dixie63 |
|
|
|
|
Jun 21 2009, 09:12 AM
Post
#8
|
|
|
GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
no problem
|
|
|
|
|
Jun 21 2009, 09:13 AM
Post
#9
|
|
|
Member Posts: 10 OS: xp |
Thanks I aprreciate your patience. I really hope you can guide me through this. dixie63 |
|
|
|
|
Jun 21 2009, 12:21 PM
Post
#10
|
|
|
Member Posts: 10 OS: xp |
I'm back now. |
|
|
|
|
Jun 21 2009, 12:45 PM
Post
#11
|
|
|
Member Posts: 10 OS: xp |
OK I did the scan again this time including the word OTL. I'm gonna guess that this is not correct either.
All processes killed Error: Unable to interpret <OTL> in the current context! Error: Unable to interpret <PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)> in the current context! Error: Unable to interpret <FF - prefs.js..browser.search.defaultenginename: "Yoog Search"> in the current context! Error: Unable to interpret <FF - prefs.js..browser.search.defaulturl: "http://www28.yoog.com/search.php?q="> in the current context! Error: Unable to interpret <FF - prefs.js..browser.startup.homepage: "http://www28.yoog.com/"> in the current context! Error: Unable to interpret <FF - prefs.js..keyword.URL: "http://www28.yoog.com/search.php?q="> in the current context! Error: Unable to interpret <FF - user.js..browser.startup.homepage: "http://www28.yoog.com/"> in the current context! Error: Unable to interpret <FF - user.js..browser.search.selectedEngine: "Yoog Search"> in the current context! Error: Unable to interpret <FF - user.js..keyword.URL: "http://www28.yoog.com/search.php?q="> in the current context! Error: Unable to interpret <FF - user.js..keyword.enabled: true> in the current context! Error: Unable to interpret <FF - user.js..browser.search.defaultenginename: "Yoog Search"> in the current context! Error: Unable to interpret <FF - user.js..browser.search.defaulturl: "http://www28.yoog.com/search.php?q="> in the current context! Error: Unable to interpret <[2009/06/02 22:01:00 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll> in the current context! Error: Unable to interpret <O2 - BHO: (no name) - {D187A56B-A33F-4CBE-9D77-459FC0BAE012} - No CLSID value found.> in the current context! Error: Unable to interpret <O3 - HKLM\..\Toolbar: (no name) - {4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - No CLSID value found.> in the current context! Error: Unable to interpret <O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID values found.> in the current context! Error: Unable to interpret <O21 - SSODL: kdfaz.dll - {00000000-0000-0000-0000-000000057701} - CLSID or File not found.> in the current context! Error: Unable to interpret <O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\Info.exe -- [2002/09/10 22:54:58 | 00,040,960 | -HS- | M] (XSS)> in the current context! Error: Unable to interpret <MsConfig - StartUpReg: Belt - hkey= - key= - Reg Error: Value error. File not found> in the current context! Error: Unable to interpret <MsConfig - StartUpReg: BCNT - hkey= - key= - Reg Error: Value error. File not found> in the current context! Error: Unable to interpret <MsConfig - StartUpReg: ffnotoqoyw - hkey= - key= - Reg Error: Value error. File not found> in the current context! Error: Unable to interpret <MsConfig - StartUpReg: mspwr - hkey= - key= - Reg Error: Value error. File not found> in the current context! Error: Unable to interpret <[2009/06/12 19:02:26 | 05,330,527 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\setupxv.exe> in the current context! Error: Unable to interpret <[2009/06/12 19:04:17 | 00,000,496 | ---- | C] () -- C:\WINDOWS\tasks\SpywareStop Scheduled Scan.job> in the current context! Error: Unable to interpret <[2009/06/12 19:04:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\SpywareStop> in the current context! Error: Unable to interpret <[2009/06/12 19:03:05 | 00,000,000 | ---D | C] -- C:\Program Files\SpywareStop> in the current context! Error: Unable to interpret <[2005/10/31 10:56:00 | 00,700,416 | ---- | M] (LimeWire) -- C:\StubInstaller.exe> in the current context! Error: Unable to interpret <[2006/02/03 21:27:18 | 00,000,000 | ---D | M] -- C:\Program Files\Free Offers from Freeze.com> in the current context! ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Owner ->Temp folder emptied: 7264 bytes ->Temporary Internet Files folder emptied: 10181627 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 3272782 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes File delete failed. C:\WINDOWS\temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\History\History.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Cookies\index.dat scheduled to be deleted on reboot. Windows Temp folder emptied: 66680 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 12.93 mb OTL by OldTimer - Version 3.0.2.0 log created on 06212009_133841 Files\Folders moved on Reboot... Registry entries deleted on Reboot... |
|
|
|
|
Jun 21 2009, 03:04 PM
Post
#12
|
|
|
GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
Did you include the colon : before OTL ?
It should be this exactly :OTL If you did, then try this Download TFC to your desktop
Please download Malwarebytes' Anti-Malware from Here Double Click mbam-setup.exe to install the application.
Extra Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly. Go to Kaspersky website and perform an online antivirus scan.
|
|
|
|
|
Jun 21 2009, 03:20 PM
Post
#13
|
|
|
Member Posts: 10 OS: xp |
I did Not use the colon but I will now. |
|
|
|
|
Jun 21 2009, 03:25 PM
Post
#14
|
|
|
GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
There we go, thats probably responsible
 Sorry OT lol |
|
|
|
|
Jun 21 2009, 04:09 PM
Post
#15
|
|
|
Member Posts: 10 OS: xp |
OK, well I ask you not to be upset with me however, when I used the colon it takes off like it;s going to work, butr locks up. all my icons disappear and my mouse is disabled. I thought this was supposed to happen but after 30 plus minutes and nothing happening I had to ctrl,alt, del. and even after that I had to manually shut down my system because I still had no icons. I'm open to more suggestions and I will move to the malware idea now. I'm sorry. If you have something else with OTL, let me know. dixie63 |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
Similar Topics
| Topic Title | Replies / Views | Topic Information | |||||
|---|---|---|---|---|---|---|---|
 |
7 / 1,771 | 7th February 2006 - 09:12 AM intsoda started - last by therock247uk |
|||||
|
11 / 3,921 | 14th April 2006 - 05:54 PM roacham started - last by greyknight17 |
|||||
|
 |
2 / 256 | 15th June 2006 - 02:41 PM jeniffer started - last by Armodeluxe |
||||
|
8 / 1,019 | 15th July 2009 - 04:46 PM Athena28 started - last by Rorschach112 |
|||||
|
Time is now: 7th November 2009 - 11:08 PM |
Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks mentioned on this page are the property of their respective owners.
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy | Advertising