Hello friends!

I am from Greece and i have a very big problem with something that made my internet explorer not working properly!
It is http://mediasmegaportal.com/phandler.php?s...eplica+handbags

http://trustedantivirus.com/data/index.php...701064c1d007351

<worm.win32netsky> is always in front and when i press to close, opens the explorer at the adress above and many other messages shown on my desktop!
I cant use i explorer at all! Ask me for other details... it is my first time infected!!
Thanks and Sorry for my English...

Thanks again.

The log:

SmitFraudFix v2.258

Scan done at 6:02:48,42, ‰¬¨ 09/12/2007
Run from C:\Documents and Settings\KATERINA\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\VeriSign\NAVI\naviagent.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\atiptaxx.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\X-Lite\X-Lite.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Metacafe\MetacafeAgent.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\OpenOffice.org1.1.4\program\soffice.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

C:\WINDOWS\system32\ncompat.tlb FOUND !
C:\WINDOWS\system32\ot.ico FOUND !
C:\WINDOWS\system32\ts.ico FOUND !
C:\WINDOWS\system32\1024\ FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\KATERINA


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\KATERINA\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\KATERINA\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

C:\Program Files\RichVideoCodec\ FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\PROGRA~1\\Google\\GOOGLE~2\\GOEC62~1.DLL,\"C:\\PROGRA~1\\KASPER~1\\KASPER~1.0\\adialhk.dll\" C:\\PROGRA~1\\Google\\GOOGLE~2\\GOEC62~1.DLL"
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Intel® PRO/1000 MT Network Connection - Packet Scheduler Miniport
DNS Server Search Order: 194.30.220.119
DNS Server Search Order: 194.30.220.110

Description: Crypto F320 ADSL ROUTER Adapter - Packet Scheduler Miniport
DNS Server Search Order: 10.0.0.2

Description: Crypto F320 ADSL ROUTER Adapter - Packet Scheduler Miniport
DNS Server Search Order: 10.0.0.2

HKLM\SYSTEM\CCS\Services\Tcpip\..\{B1209A1A-DBF7-4E9F-A042-23CD607ED0E0}: DhcpNameServer=10.0.0.2
HKLM\SYSTEM\CCS\Services\Tcpip\..\{CFDF7B79-7570-492A-86B5-E2CB66DC059E}: NameServer=194.30.220.119,194.30.220.110
HKLM\SYSTEM\CCS\Services\Tcpip\..\{FF7DCA9B-F410-420C-A6FD-D72CAFF1E447}: DhcpNameServer=10.0.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\..\{B1209A1A-DBF7-4E9F-A042-23CD607ED0E0}: DhcpNameServer=10.0.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\..\{CFDF7B79-7570-492A-86B5-E2CB66DC059E}: NameServer=194.30.220.119,194.30.220.110
HKLM\SYSTEM\CS1\Services\Tcpip\..\{FF7DCA9B-F410-420C-A6FD-D72CAFF1E447}: DhcpNameServer=10.0.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\..\{B1209A1A-DBF7-4E9F-A042-23CD607ED0E0}: DhcpNameServer=10.0.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\..\{CFDF7B79-7570-492A-86B5-E2CB66DC059E}: NameServer=194.30.220.119,194.30.220.110
HKLM\SYSTEM\CS2\Services\Tcpip\..\{FF7DCA9B-F410-420C-A6FD-D72CAFF1E447}: DhcpNameServer=10.0.0.2
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=10.0.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=10.0.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=10.0.0.2


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

This post has been edited by alekosgr: Dec 8 2007, 10:05 PM

Please HELP!!!
This is the log of Deckard's System Scanner

Deckard's System Scanner v20071014.68
Run by KATERINA on 2007-12-09 07:01:30
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------



-- Last 2 Restore Point(s) --
2: 2007-12-09 04:37:53 UTC - RP2 - Deckard's System Scanner Restore Point
1: 2007-12-09 01:02:42 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as KATERINA.exe) --------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:03:25 πμ, on 9/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\VeriSign\NAVI\naviagent.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\X-Lite\X-Lite.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Metacafe\MetacafeAgent.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\OpenOffice.org1.1.4\program\soffice.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Documents and Settings\KATERINA\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\KATERINA.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=...6Ojg5&lid=2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: i-Nav IDN SearchHook - {CE000994-A58C-4441-8938-744CD72AB27F} - C:\Program Files\VeriSign\i-Nav\i-nav_4_2_1.dll
R3 - URLSearchHook: My Poco Toolbar - {d44c9227-30bd-47d4-8137-95d32189d02a} - C:\Program Files\My_Poco\tbMy_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: i-Nav IDN Resolver - {CE000992-A58C-4441-8938-744CD72AB27F} - C:\Program Files\VeriSign\i-Nav\i-nav_4_2_1.dll
O2 - BHO: My Poco Toolbar - {d44c9227-30bd-47d4-8137-95d32189d02a} - C:\Program Files\My_Poco\tbMy_0.dll
O2 - BHO: OFK System - {F08487B1-AFEC-45CF-B2E9-D05DEE137D22} - C:\WINDOWS\blopenvtok.dll
O3 - Toolbar: My Poco Toolbar - {d44c9227-30bd-47d4-8137-95d32189d02a} - C:\Program Files\My_Poco\tbMy_0.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: The retnsrp - {9EF873D0-0259-4D2A-AA60-F61FA5B28FE8} - C:\WINDOWS\retnsrp.dll
O4 - HKLM\..\Run: [Openwares LiveUpdate] C:\Program Files\LiveUpdate\LiveUpdate.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [WebCam Monitor] C:\Program Files\Creative\WebCam Monitor\TrayMon.exe
O4 - HKLM\..\Run: [tfbmwan] c:\windows\system32\tfbmwan.exe tfbmwan
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [XSC SIP Client] "C:\Program Files\X-Lite\X-Lite.exe"
O4 - HKCU\..\Run: [PyroTrans] "C:\Program Files\PyroBatchFTP\pyrobatchftp.exe"
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Policies\Explorer\Run: [wininet.dll] dfrgsrv.exe
O4 - HKLM\..\Policies\Explorer\Run: [nvctrl.exe] nvctrl.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Metacafe.lnk = C:\Program Files\Metacafe\MetacafeAgent.exe
O4 - Startup: OpenOffice.org 1.1.4.lnk = C:\Program Files\OpenOffice.org1.1.4\program\quickstart.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Metacafe.lnk = C:\Program Files\Metacafe\MetacafeAgent.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Έρευνα - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: i-Nav Help - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing)
O9 - Extra 'Tools' menuitem: i-Nav Help - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing)
O9 - Extra button: (no name) - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Program Files\VeriSign\i-Nav\i-nav_4_2_1.dll
O9 - Extra 'Tools' menuitem: i-Nav Options - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Program Files\VeriSign\i-Nav\i-nav_4_2_1.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://sitemaker.services.in.gr
O15 - Trusted Zone: http://*.services.in.gr
O16 - DPF: {0878F049-D33E-45E0-A157-C36A6683CF25} - http://scripts.dlv4.com/binaries/egaccess4...ss4_1063_XP.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/f...tup1.0.0.15.cab
O16 - DPF: {39EA2F6F-3F50-4F58-9C63-4B3D53B0926E} - http://scripts.downloadv3.com/binaries/P2E..._1049_EN_XP.cab
O16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} - http://scripts.downloadv3.com/binaries/IA/...svc32_EN_XP.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1139866015062
O16 - DPF: {8B3B8135-9DAA-40E7-8941-962795F9C1CB} - http://scripts.downloadv3.com/binaries/IA/...svc32_EN_XP.cab
O16 - DPF: {8D8BAF56-B581-4B90-A549-C4AC6B03F1BB} - http://scripts.downloadv3.com/binaries/EGD...ESS_1074_XP.cab
O16 - DPF: {B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} - http://scripts.downloadv3.com/binaries/IA/...svc32_EN_XP.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://cdn.messenger.msn.com/download/MsnM...pDownloader.cab
O16 - DPF: {C2481ED1-9896-4D49-AE90-69858DFDE446} - http://scripts.downloadv3.com/binaries/EGD...ESS_1073_XP.cab
O16 - DPF: {EFB23983-5803-4914-ADA3-C0EA2CFBDC37} - http://scripts.downloadv3.com/binaries/EGD...ESS_1072_XP.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{CFDF7B79-7570-492A-86B5-E2CB66DC059E}: NameServer = 194.30.220.119,194.30.220.110
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,"C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll" C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O21 - SSODL: nopzet - {72A094DD-E1A5-4295-8283-238C098BAAF7} - C:\WINDOWS\nopzet.dll
O21 - SSODL: leorop - {46BD8968-132E-48D6-9232-9246874B6358} - C:\WINDOWS\leorop.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: VeriSign Updater (navi) - VeriSign, Inc. - C:\Program Files\VeriSign\NAVI\naviagent.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 12444 bytes

-- File Associations -----------------------------------------------------------

.js - JSFile - DefaultIcon - "C:\Program Files\Macromedia\Dreamweaver 8\dreamweaver.exe",2


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R0 sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - c:\windows\system32\drivers\sfdrv01.sys <Not Verified; Protection Technology; StarForce Protection System>
R0 sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - c:\windows\system32\drivers\sfhlp02.sys <Not Verified; Protection Technology; StarForce Protection System>
R0 sfvfs02 (StarForce Protection VFS Driver (version 2.x)) - c:\windows\system32\drivers\sfvfs02.sys <Not Verified; Protection Technology; StarForce Protection System>
R1 StarOpen - c:\windows\system32\drivers\staropen.sys
R3 CnxTrLan (Crypto F320 ADSL ROUTER Adapter Driver) - c:\windows\system32\drivers\cnxtrlan.sys <Not Verified; Conexant; Conexant USB Network Device>
R3 CnxTrUsb (Crypto F320 ADSL ROUTER Interface Device Driver) - c:\windows\system32\drivers\cnxtrusb.sys <Not Verified; Conexant; Conexant USB Network Device>
R3 pfc (Padus ASPI Shell) - c:\windows\system32\drivers\pfc.sys <Not Verified; Padus, Inc.; Padus® ASPI Shell>

S3 PID_400C (Video Blaster WebCam 5 (WDM)) - c:\windows\system32\drivers\pd100vid.sys (file missing)
S3 ssm_bus (Samsung Mobile USB Device II 1.0 driver (WDM)) - c:\windows\system32\drivers\ssm_bus.sys <Not Verified; MCCI; Samsung Mobile USB Device II 1.0>
S3 ssm_mdfl (Samsung Mobile USB Modem II 1.0 Filter) - c:\windows\system32\drivers\ssm_mdfl.sys <Not Verified; MCCI; Samsung Mobile USB Modem II 1.0 Filter Driver>
S3 ssm_mdm (Samsung Mobile USB Modem II 1.0 Drivers) - c:\windows\system32\drivers\ssm_mdm.sys <Not Verified; MCCI; Samsung Mobile USB Modem II 1.0>


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 navi (VeriSign Updater) - c:\program files\verisign\navi\naviagent.exe uimode=agentupdate <Not Verified; VeriSign, Inc.; NAVI Agent>

S4 Mouarragavnn -


-- Device Manager: Disabled ----------------------------------------------------

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Hamachi Network Interface
Device ID: ROOT\NET\0000
Manufacturer: LogMeIn, Inc.
Name: Hamachi Network Interface
PNP Device ID: ROOT\NET\0000
Service: hamachi


-- Scheduled Tasks -------------------------------------------------------------

2007-12-09 06:58:54 468 --a------ C:\WINDOWS\Tasks\SDMsgUpdate (TE).job


-- Files created between 2007-11-09 and 2007-12-09 -----------------------------

2007-12-09 06:40:48 0 d-------- C:\Program Files\Trend Micro
2007-12-09 06:02:57 3242 --a------ C:\WINDOWS\system32\tmp.reg
2007-12-09 05:51:11 25600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-12-09 05:51:11 289144 --a------ C:\WINDOWS\system32\VCCLSID.exe <Not Verified; S!Ri; >
2007-12-09 05:51:10 288417 --a------ C:\WINDOWS\system32\SrchSTS.exe <Not Verified; S!Ri; SrchSTS>
2007-12-09 05:51:10 53248 --a------ C:\WINDOWS\system32\Process.exe <Not Verified; http://www.beyondlogic.org; Command Line Process Utility>
2007-12-09 05:51:10 51200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-12-09 05:47:55 0 d-------- C:\VundoFix Backups
2007-12-08 22:22:29 200704 --a------ C:\WINDOWS\retnsrp.dll <Not Verified; ; retnsrp Module>
2007-12-08 22:22:29 192512 --a------ C:\WINDOWS\nopzet.dll <Not Verified; ; nopzet>
2007-12-08 22:22:29 208896 --a------ C:\WINDOWS\leorop.dll
2007-12-08 22:22:29 143360 --a------ C:\WINDOWS\jokvip.exe
2007-12-08 22:22:29 278528 --a------ C:\WINDOWS\blopenvtok.dll <Not Verified; ; blopenvtok>
2007-12-06 05:03:40 0 d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2007-12-06 04:59:21 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller
2007-12-06 04:59:13 0 d-------- C:\Program Files\Windows Live
2007-12-06 04:58:58 0 d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2007-12-03 16:34:56 0 d-------- C:\Documents and Settings\KATERINA\Application Data\Metacafe
2007-12-03 16:34:48 0 d-------- C:\Documents and Settings\All Users\Application Data\Metacafe
2007-12-03 16:34:36 0 d-------- C:\Program Files\Metacafe
2007-12-01 00:38:23 0 d-------- C:\Program Files\GWORD
2007-11-29 04:49:53 0 d-------- C:\Program Files\Easy Photo Recovery
2007-11-29 02:35:26 147085 --a------ C:\WINDOWS\1 Cool Button Tool - Flash Uninstaller.exe
2007-11-29 02:35:18 0 d-------- C:\Program Files\1 Cool Button Tool - Flash 5.0
2007-11-29 02:28:38 0 d-------- C:\Program Files\AAALOGO
2007-11-29 00:36:40 0 d-------- C:\Program Files\FinitySoft BMI Calculator
2007-11-29 00:14:56 0 d-------- C:\Program Files\Easy Watermark Creator 1.7
2007-11-29 00:01:29 0 d-------- C:\Program Files\Visual Watermark
2007-11-28 06:37:10 139264 --a------ C:\WINDOWS\system32\topbanner.scr <Not Verified; ; ScreenSaver>
2007-11-28 05:20:08 565248 --a------ C:\WINDOWS\system32\oigi.scr <Not Verified; ; ScreenSaver>
2007-11-28 04:08:28 425984 --a------ C:\WINDOWS\system32\contact.scr <Not Verified; ; ScreenSaver>
2007-11-27 04:07:15 0 d-------- C:\Documents and Settings\KATERINA\System
2007-11-27 04:07:15 0 d-------- C:\Documents and Settings\KATERINA\Application Data\SmartDraw
2007-11-27 03:55:21 0 d-------- C:\Program Files\SmartDraw 2008
2007-11-27 03:37:17 0 d-------- C:\Documents and Settings\All Users\Application Data\EwisoftWeb
2007-11-27 03:12:06 0 d-------- C:\Program Files\Advanced Website Creator
2007-11-23 23:39:25 13 ---h----- C:\Documents and Settings\All Users\Application Data\ΩέΓΔ3113›.sys
2007-11-23 23:39:13 220160 --a------ C:\WINDOWS\system32\WnASPI32.dll
2007-11-23 23:39:13 1015808 --a------ C:\WINDOWS\system32\vorbisenc.dll
2007-11-23 23:39:13 1163264 --a------ C:\WINDOWS\system32\vorbis.dll
2007-11-23 23:39:13 53248 --a------ C:\WINDOWS\system32\ogg.dll
2007-11-23 23:39:13 36352 --a------ C:\WINDOWS\system32\MP2enc.dll
2007-11-23 23:39:13 61440 --a------ C:\WINDOWS\system32\libfaac.dll
2007-11-23 23:39:13 172032 --a------ C:\WINDOWS\system32\lame_enc.dll
2007-11-23 23:39:13 36864 --a------ C:\WINDOWS\system32\DGRip.dll
2007-11-23 23:37:43 13 ---h----- C:\Documents and Settings\All Users\Application Data\ΠέΓΔ3113›˜.sys
2007-11-23 17:52:32 0 d-------- C:\CtDriverInstTemp
2007-11-23 17:39:13 0 d-------- C:\Program Files\webcamXP
2007-11-23 17:31:21 13 ---h----- C:\Documents and Settings\All Users\Application Data\1ΜΨ13.sys
2007-11-23 17:03:32 0 d-------- C:\Program Files\Flash4D v5 - Home Edition Trial
2007-11-23 17:03:04 749568 --a------ C:\WINDOWS\system32\swfgen.dll <Not Verified; ; SWFGen>
2007-11-23 02:23:41 0 d-------- C:\Program Files\Flash Banner Creator
2007-11-22 00:13:13 0 d-------- C:\Program Files\Wondershare
2007-11-21 03:22:22 339968 --a------ C:\WINDOWS\system32\MP3Enc.dll <Not Verified; http://www.wondershare.com; Wondershare AudioRender>
2007-11-21 03:14:34 0 d-------- C:\Program Files\VeryDOC PowerPoint to Flash Converter v2.0
2007-11-21 01:48:45 72192 --a------ C:\WINDOWS\cadkasdeinst01e.exe
2007-11-16 16:33:15 0 d-------- C:\inbox
2007-11-12 22:47:38 0 d-------- C:\Program Files\Xilisoft
2007-11-12 18:31:21 0 d-------- C:\Program Files\Aglare Video Converter Platinum
2007-11-12 18:23:34 34 --ah----- C:\WINDOWS\system32\VideoConverter_sysquict.dat
2007-11-12 17:48:03 0 d-------- C:\ConverterOutput
2007-11-12 17:47:43 262144 --a------ C:\WINDOWS\system32\TomsMoComp_ff.dll
2007-11-12 17:47:43 395776 --a------ C:\WINDOWS\system32\libmplayer.dll
2007-11-12 17:47:43 112640 --a------ C:\WINDOWS\system32\libmpeg2_ff.dll
2007-11-12 17:47:43 2255360 --a------ C:\WINDOWS\system32\libavcodec.dll
2007-11-12 17:47:43 34820 --a------ C:\WINDOWS\system32\ffdshow.reg
2007-11-12 17:47:39 0 d-------- C:\Program Files\Cucusoft


-- Find3M Report ---------------------------------------------------------------

2007-12-09 07:00:37 0 d-------- C:\Program Files\OpenOffice.org1.1.4
2007-12-08 23:28:13 0 d-------- C:\Program Files\READ RFM
2007-12-08 21:59:47 0 d-------- C:\Program Files\Web Page Maker V2
2007-12-08 02:50:12 0 d-------- C:\Documents and Settings\KATERINA\Application Data\Skype
2007-12-07 13:09:02 0 --a------ C:\WINDOWS\system32\FlashPaper2PrinterPort
2007-12-06 05:07:40 0 d-------- C:\Program Files\Windows Media Connect 2
2007-12-06 04:59:21 0 d-------- C:\Program Files\Common Files
2007-12-05 22:42:44 0 d-------- C:\Documents and Settings\KATERINA\Application Data\Adobe
2007-12-03 14:20:28 0 d-------- C:\Program Files\LiveUpdate
2007-11-29 01:33:26 0 d-------- C:\Program Files\Amara - Flash Slide Show Builder
2007-11-29 01:32:54 0 d-------- C:\Program Files\Amara - Flash Intro and Banner Builder
2007-11-28 04:07:46 425984 --a------ C:\WINDOWS\system32\TestFlashScreenSaver.scr <Not Verified; ; ScreenSaver>
2007-11-25 03:18:27 0 d-------- C:\Program Files\VCOM
2007-11-23 17:03:38 131584 --a------ C:\WINDOWS\system32\SpoonUninstall.exe
2007-11-21 03:01:28 0 d-------- C:\Program Files\Pop-Up No-No
2007-11-21 02:40:18 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-11-21 01:11:53 0 d-------- C:\Documents and Settings\KATERINA\Application Data\Macromedia
2007-11-20 22:32:41 0 d-------- C:\Documents and Settings\KATERINA\Application Data\AdobeUM
2007-11-19 17:12:46 0 d-------- C:\Program Files\eMule
2007-11-13 01:34:48 0 d-------- C:\Program Files\HooTech
2007-11-12 17:47:11 0 d-------- C:\Program Files\Common Files\Download Manager
2007-10-31 02:19:59 0 d-------- C:\Program Files\Easy Graphic Converter
2007-10-31 02:19:12 0 d-------- C:\Program Files\Easy Icon Maker
2007-10-30 22:19:11 0 d-------- C:\Documents and Settings\KATERINA\Application Data\VerticalMoon
2007-10-30 02:13:44 0 d-------- C:\Program Files\Java
2007-10-30 02:11:41 397312 --a------ C:\WINDOWS\iwexec.exe <Not Verified; ; InstallWizard XP Setup Application>
2007-10-28 04:34:48 0 d-------- C:\Documents and Settings\KATERINA\Application Data\Likno
2007-10-28 01:30:20 0 d-------- C:\Program Files\Winamp
2007-10-28 01:27:04 0 d-------- C:\Program Files\Common Files\Macromedia
2007-10-21 19:11:05 0 d-------- C:\Program Files\MSECache
2007-10-17 19:20:14 0 d-------- C:\Program Files\Common Files\Adobe


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{d44c9227-30bd-47d4-8137-95d32189d02a}]
29/11/2007 11:55 ££ 1502232 --a------ C:\Program Files\My_Poco\tbMy_0.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F08487B1-AFEC-45CF-B2E9-D05DEE137D22}]
08/12/2007 05:34 ££ 278528 --a------ C:\WINDOWS\blopenvtok.dll

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{D44C9227-30BD-47D4-8137-95D32189D02A}"= C:\Program Files\My_Poco\tbMy_0.dll [29/11/2007 11:55 ££ 1502232]

[-HKEY_CLASSES_ROOT\CLSID\{D44C9227-30BD-47D4-8137-95D32189D02A}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Openwares LiveUpdate"="C:\Program Files\LiveUpdate\LiveUpdate.exe" [13/12/2003 07:17 ££]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [09/07/2001 11:50 §£]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" []
"WebCam Monitor"="C:\Program Files\Creative\WebCam Monitor\TrayMon.exe" []
"tfbmwan"="c:\windows\system32\tfbmwan.exe" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" [15/12/2006 03:23 §£]
"SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [14/10/2004 09:11 §£]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [06/08/2004 07:27 §£]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [18/04/2006 03:46 ££]
"KernelFaultCheck"="C:\WINDOWS\system32\dumprep 0 -k" []
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd.exe" [04/08/2003 05:28 ££]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [22/12/2003 08:38 §£]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [04/03/2007 04:44 §£]
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" [08/11/2006 05:28 ££]
"AtiPTA"="atiptaxx.exe" [25/07/2002 11:04 §£ C:\WINDOWS\system32\atiptaxx.exe]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [19/01/2007 11:54 §£]
"Magentic"="C:\PROGRA~1\Magentic\bin\Magentic.exe" [11/04/2007 02:39 ££]
"IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [31/10/2006 02:06 ££]
"XSC SIP Client"="C:\Program Files\X-Lite\X-Lite.exe" [01/06/2004 02:58 ££]
"PyroTrans"="C:\Program Files\PyroBatchFTP\pyrobatchftp.exe" []
"NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" [24/09/2004 05:22 ££]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [03/08/2004 11:56 ££]
"ATI Launchpad"="" []

C:\Documents and Settings\KATERINA\Start Menu\Programs\Startup\
Metacafe.lnk - C:\Program Files\Metacafe\MetacafeAgent.exe [4/9/2007 5:04:34 ££]
OpenOffice.org 1.1.4.lnk - C:\Program Files\OpenOffice.org1.1.4\program\quickstart.exe [15/1/2005 1:10:00 §£]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Acrobat Assistant.lnk - C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe [24/10/2003 6:37:56 §£]
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [3/12/2005 8:39:31 ££]
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [23/9/2005 10:05:26 ££]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [16/9/2003 5:19:24 §£]
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe [7/12/2005 3:00:45 §£]
Metacafe.lnk - C:\Program Files\Metacafe\MetacafeAgent.exe [4/9/2007 5:04:34 ££]
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [1/12/2005 2:27:50 §£]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]
"wininet.dll"=dfrgsrv.exe
"nvctrl.exe"=nvctrl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"nopzet"= {72A094DD-E1A5-4295-8283-238C098BAAF7} - C:\WINDOWS\nopzet.dll [08/12/2007 05:34 ££ 192512]
"leorop"= {46BD8968-132E-48D6-9232-9246874B6358} - C:\WINDOWS\leorop.dll [08/12/2007 05:34 ££ 208896]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,"C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll" C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL





-- End of Deckard's System Scanner: finished at 2007-12-09 07:04:40 ------------

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Professional (build 2600) SP 2.0
Architecture: X86; Language: English

CPU 0: Intel® Pentium® 4 CPU 3.00GHz
CPU 1: Intel® Pentium® 4 CPU 3.00GHz
Percentage of Memory in Use: 23%
Physical Memory (total/avail): 2559.23 MiB / 1968.93 MiB
Pagefile Memory (total/avail): 3606.5 MiB / 3220.98 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1935.91 MiB

A: is Removable (No Media)
C: is Fixed (NTFS) - 74.52 GiB total, 36.98 GiB free.
D: is CDROM (No Media)
E: is CDROM (No Media)

\\.\PHYSICALDRIVE0 - WDC WD800JB-00ETA0 - 74.53 GiB - 1 partition
\PARTITION0 (bootable) - Installable File System - 74.52 GiB - C:



-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

FirstRunDisabled is set.
AntivirusOverride is set.

FW: Kaspersky Internet Security v6.0.1.411 (A)
AV: Kaspersky Internet Security v6.0.1.411 (?)

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Paltalk Messenger\\paltalk.exe"="C:\\Program Files\\Paltalk Messenger\\paltalk.exe:*:Enabled:Paltalk Messenger 8.2 beta"
"C:\\Program Files\\X-Lite\\X-Lite.exe"="C:\\Program Files\\X-Lite\\X-Lite.exe:*:Enabled:X-Lite"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\GameHouse\\Wheel of Fortune\\Wheel of Fortune.exe"="C:\\Program Files\\GameHouse\\Wheel of Fortune\\Wheel of Fortune.exe:*:Enabled:Wheel of Fortune"
"C:\\Documents and Settings\\KATERINA\\Local Settings\\Temp\\CRY343D.tmp\\install.exe"="C:\\Documents and Settings\\KATERINA\\Local Settings\\Temp\\CRY343D.tmp\\install.exe:*:Enabled:setup wizard"
"C:\\WINDOWS\\system32\\mshta.exe"="C:\\WINDOWS\\system32\\mshta.exe:*:Enabled:Microsoft ® HTML Application host"
"C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"="C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"C:\\Documents and Settings\\KATERINA\\Desktop\\ALEKOS Documents\\Η ΦΩΝΗ ΤΟΥ ΓΕΡΑΚΑ\\eMule0.47c\\emule.exe"="C:\\Documents and Settings\\KATERINA\\Desktop\\ALEKOS Documents\\Η ΦΩΝΗ ΤΟΥ ΓΕΡΑΚΑ\\eMule0.47c\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\KATERINA\\My Documents\\eMule0.47c\\emule.exe"="C:\\Documents and Settings\\KATERINA\\My Documents\\eMule0.47c\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\KATERINA\\Desktop\\ALEKOS music\\eMule0.47c\\emule.exe"="C:\\Documents and Settings\\KATERINA\\Desktop\\ALEKOS music\\eMule0.47c\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\PyroBatchFTP\\pyrobatchftp.exe"="C:\\Program Files\\PyroBatchFTP\\pyrobatchftp.exe:*:Disabled:pyrobatchftp"
"C:\\Program Files\\Magentic\\bin\\MgImp.exe"="C:\\Program Files\\Magentic\\bin\\MgImp.exe:*:Enabled:Magentic"
"C:\\Program Files\\Magentic\\bin\\Magentic.exe"="C:\\Program Files\\Magentic\\bin\\Magentic.exe:*:Enabled:Magentic"
"C:\\Program Files\\Magentic\\bin\\MgApp.exe"="C:\\Program Files\\Magentic\\bin\\MgApp.exe:*:Enabled:Magentic"
"C:\\Program Files\\IncrediMail\\bin\\ImLc.exe"="C:\\Program Files\\IncrediMail\\bin\\ImLc.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Documents and Settings\\KATERINA\\My Documents\\My Music\\ALEKOS music\\eMule0.47c\\emule.exe"="C:\\Documents and Settings\\KATERINA\\My Documents\\My Music\\ALEKOS music\\eMule0.47c\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="C:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:Orb"
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:OrbTray"
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"C:\\Program Files\\SmartFTP Client 2.0\\SmartFTP.exe"="C:\\Program Files\\SmartFTP Client 2.0\\SmartFTP.exe:*:Enabled:SmartFTP Client 2.0"
"C:\\Program Files\\webcamXP\\webcamXP.exe"="C:\\Program Files\\webcamXP\\webcamXP.exe:*:Enabled:webcamXP 2007"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\KATERINA\Application Data
CLASSPATH=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
CLIENTNAME=Console
COLLECTIONID=COL7300
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=KATERINA-05166A
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HMSERVER=https://vausnzisprob.austin.hp.com/wuss/servlet/WUSSServlet
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\KATERINA
ITEMID=oj-21919-1
LANG=1032
LOGONSERVER=\\KATERINA-05166A
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
OSVER=winXPP
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Intel\DMIX;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Samsung\Samsung PC Studio 3\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 3, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0403
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
SESSIONID=1191375654664g1u0355c.austin.hp.com-28ed1b32:116542adc76:3c09
SESSIONNAME=Console
SWUTVER=1.0.22.20030804
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\KATERINA\LOCALS~1\Temp
TIMEOUT=0
TMP=C:\DOCUME~1\KATERINA\LOCALS~1\Temp
TOOLPATH=/C:/Program%20Files/HP/HP%20Software%20Update/install.htm
UPDATEDIR=C:\DOCUME~1\KATERINA\LOCALS~1\Temp\rad23EC8.tmp
USERDOMAIN=KATERINA-05166A
USERNAME=KATERINA
USERPROFILE=C:\Documents and Settings\KATERINA
VeriSign=C:\Program Files\VeriSign
VeriSignTemp=C:\Program Files\VeriSign\Temp
VERSION=2.1.5
VRSN=C:\Program Files\VeriSign
VRSNTemp=C:\Program Files\VeriSign\Temp
windir=C:\WINDOWS
__COMPAT_LAYER=EnableNXShowUI


-- User Profiles ---------------------------------------------------------------

KATERINA (admin)


-- Add/Remove Programs ---------------------------------------------------------

--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Πακέτο συμβατότητας για το 2007 Microsoft Office system --> MsiExec.exe /X{90120000-0020-0408-0000-0000000FF1CE}
1 Cool Button Tool - Flash --> C:\WINDOWS\1 Cool Button Tool - Flash Uninstaller.exe
123 Flash Menu v3.5.0.1340 --> "C:\Program Files\123 Flash Menu\uninstall.exe"
AAA Logo 1.2 --> "C:\Program Files\AAALOGO\unins000.exe"
Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Acrobat 6.0.1 Professional --> MsiExec.exe /I{AC76BA86-1033-0000-7760-000000000001}
Adobe Acrobat and Reader 6.0.4 Update --> MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000604}
Adobe Acrobat and Reader 6.0.5 Update --> MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000605}
Adobe Acrobat and Reader 6.0.6 Update --> MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000606}
Adobe Atmosphere Player for Acrobat and Adobe Reader --> C:\WINDOWS\atmoUn.exe
Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Photoshop CS --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x9
Adobe Reader 7.0.9 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70900000002}
AllWebMenus PRO v4.2 --> C:\WINDOWS\UNWISE.EXE C:\WINDOWS\INSTALL.LOG
Amara - Flash Intro and Banner Builder --> C:\Program Files\Amara - Flash Intro and Banner Builder\uninstall.exe
Amara - Flash Slide Show Builder --> C:\Program Files\Amara - Flash Slide Show Builder\uninstall.exe
Animated GIF producer 3.3 TRIAL --> "C:\Program Files\Animated GIF producer 3.3 TRIAL\unins000.exe"
Antenna --> C:\Program Files\Antenna\uninstall.exe uninstall
ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Multimedia Center 7.8.0.0 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{844C6FC3-852E-11D6-8D60-00105A22D3D2}\setup.exe"
Audio2SWF 1.007 --> "C:\Program Files\Vertical Moon\Audio2SWF\unins000.exe"
Avanquest update --> C:\Program Files\InstallShield Installation Information\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}\Setup.exe -runfromtemp -l0x0008 -removeonly
Chameleon Gems --> "C:\Program Files\Oberon Media\Chameleon Gems\Uninstall.exe" "C:\Program Files\Oberon Media\Chameleon Gems\install.log"
Crypto F320 ADSL ROUTER Adapter --> "C:\Program Files\Crypto\Crypto F320 ADSL ROUTER\SETUP.EXE" -U -IVID_0572&PID_CB01
Default --> MsiExec.exe /I{EA4E18F0-E334-41F8-9AB6-7C2E2D1F8CF2}
Easy Graphic Converter 3.0 --> "C:\Program Files\Easy Graphic Converter\unins000.exe"
Easy Icon Maker --> C:\PROGRA~1\EASYIC~1\UNWISE.EXE C:\PROGRA~1\EASYIC~1\INSTALL.LOG
Easy Photo Recovery 1.3.1 --> C:\Program Files\Easy Photo Recovery\uninst.exe
Egg Attack --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7C38319E-E1C1-4D43-9472-BAC923E7A8A0}\setup.exe"
eMule --> "C:\Program Files\eMule\Uninstall.exe"
Ewisoft Template Maker 3.0 --> "C:\Program Files\EwisoftTemplate\unins000.exe"
Ewisoft Website Builder (include eCommerce Builder) --> "C:\Program Files\EwisoftWeb\unins000.exe"
FinitySoft BMI Calculator 1.0 --> C:\Program Files\FinitySoft BMI Calculator\uninst.exe
Flash-Creator 1 --> C:\WINDOWS\cadkasdeinst01e.exe "C:\Program Files\Flash-Creator 1\"
Flash Banner Creator 1.10 --> C:\Program Files\Flash Banner Creator\uninst.exe
Flash Designer 5 (5.0.24.2) --> C:\PROGRA~1\Selteco\FLASHD~1\Setup.exe /remove
Flash Slideshow Maker 2.41 --> C:\Program Files\AnvSoft\Flash Slide Show Maker\uninst.exe
Flash Slideshow Maker Pro 4.61 --> C:\Program Files\Flash Slideshow Maker Professional\uninst.exe
Flash4D Bonus Intro --> "C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-Flash4D Bonus Intro.dat
Flash4D v5.1 - Home Edition - Flash Intro Builder Trial --> "C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-Flash4D v5.1 - Home Edition - Flash Intro Builder Trial.dat
FlashPoint --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D7E6CA4D-E79E-41A8-A633-8FB9BE3DB67C}\Setup.exe"
FlashWebKit v2.0 Trial --> "C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-FlashWebKit v2.0 Trial.dat
Gadget & Gadgetinis Screen Saver --> C:\WINDOWS\Gadget & Gadgetinis.scr /u
Google Desktop --> C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Earth --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly
Google Earth Pro --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{48EE6C79-1CE2-4CE8-B511-F2140B6781D6}\setup.exe" -l0x9 -removeonly
Granny In Paradise --> "C:\Program Files\Oberon Media\Granny In Paradise\Uninstall.exe" "C:\Program Files\Oberon Media\Granny In Paradise\install.log"
Hamachi 1.0.1.5 --> C:\Program Files\Hamachi\uninstall.exe
Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Image Zone 3.5 --> C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP PSC & OfficeJet 3.5 --> "C:\Program Files\HP\Digital Imaging\{0FABD3D7-3036-4e78-B29D-58957ADB0A12}\setup\hpzscr01.exe" -datfile hposcr03.dat
HP Software Update --> MsiExec.exe /X{34957B51-9676-41CE-9E52-44AE91B73F1C}
HydraVision --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}\setup.exe"
IIS6 Manager --> MsiExec.exe /X{3FBC5FCA-F989-4D5D-93F6-B185EEE1EC76}
Incrediball --> "C:\Program Files\Oberon Media\Incrediball\Uninstall.exe" "C:\Program Files\Oberon Media\Incrediball\install.log"
IncrediMail Xe --> C:\PROGRA~1\INCRED~1\bin\imsetup.exe /remove /addon:IncrediMail /log:IncMail.log
Intel® PRO Network Connections Software v9.2.4.9 --> C:\Program Files\Intel\DMIX\uninst\DxSetup.exe /x /qr /le C:\DOCUME~1\KATERINA\LOCALS~1\Temp\PROSetDX\DMIX\\DxUninst.log
Intel® PROSafe for Wired Connections --> MsiExec.exe /I{36BD0774-6CD6-4FF9-A148-83CA09AC123E}
Intel® PROSafe for Wired Connections --> MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
InterVideo WinDVD --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C1939820-A945-11D4-86F6-0001031E5712}\setup.exe" REMOVEALL
InterVideo WinDVD Creator --> "C:\Program Files\InstallShield Installation Information\{9933F0EE-DFCD-4829-B979-3C56C367CB1A}\setup.exe" REMOVEALL
iPod for Windows 2006-01-10 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{3D047C15-C859-45F7-81CE-F2681778069B} /l1033
IrfanView (remove only) --> C:\Program Files\IrfanView\iv_uninstall.exe
J2SE Runtime Environment 5.0 Update 11 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
J2SE Runtime Environment 5.0 Update 9 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Java 2 Runtime Environment, SE v1.4.2_13 --> MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142130}
Kaspersky Internet Security 6.0 --> MsiExec.exe /I{D0DCD54F-C829-41A5-AF32-71E632BB0E2C}
Lexus RX400h Screensaver --> C:\WINDOWS\system32\LEXUSR~1.SCR /UNINSTALL "C:\WINDOWS\system32\Lexus RX400h Screensaver.log"
LMSOFT Web Creator Pro 3 --> C:\PROGRA~1\LMSOFT~1\UNWISE.EXE C:\PROGRA~1\LMSOFT~1\INSTALL.LOG
Longtion FlashDemo Pro version 3.0 --> "C:\Program Files\Longtion\FlashDemo Pro\unins000.exe"
Longtion GIF Animator version 3.0 --> "C:\Program Files\Longtion\GIFAnimator\unins000.exe"
LR3_screensaver --> C:\WINDOWS\system32\LR3_screensaver.scr /u
Macromedia Dreamweaver 8 --> MsiExec.exe /I{0837A661-FEC3-48B3-876C-91E7D32048A9}
Macromedia Extension Manager --> MsiExec.exe /I{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}
Macromedia Fireworks 8 --> MsiExec.exe /I{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}
Macromedia Flash 8 --> MsiExec.exe /I{2BD5C305-1B27-4D41-B690-7A61172D2FEB}
Macromedia Flash 8 Video Encoder --> MsiExec.exe /X{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}
Macromedia Flash Player 8 --> MsiExec.exe /X{885A63EA-382B-4DD4-A755-14809B8557D6}
Macromedia Flash Player 8 Plugin --> MsiExec.exe /X{91057632-CA70-413C-B628-2D3CDBBB906B}
Macromedia FlashPaper 2 --> MsiExec.exe /X{F977FD4B-C9A6-4BAA-B4BB-DE3023288253}
Magentic --> C:\PROGRA~1\Magentic\bin\mgsetup.exe /remove /addon:Magentic
MediaGateway --> C:\Program Files\MediaGateway\MediaGateway.exe /Remove
Menu Maker 4.1.4.1 --> C:\PROGRA~1\Selteco\MENUMA~1\Setup.exe /remove
Metacafe --> C:\Program Files\Metacafe\uninstaller.exe
Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office FrontPage 2003 --> MsiExec.exe /I{90170408-6000-11D3-8CFE-0150048383C9}
Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110408-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU] --> MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Motorola Phone Tools --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}\setup.exe" -l0x8 -removeonly
Mozilla Firefox (2.0.0.11) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 to SWF Converter 2.4 build 883 --> C:\Program Files\HooTech\MP32SWF\uninst.exe
My Poco Toolbar --> C:\PROGRA~1\My_Poco\UNWISE.EXE C:\PROGRA~1\My_Poco\INSTALL.LOG
Nero 6 Ultra Edition --> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Obsidian --> C:\Program Files\Obsidian\uninstall.exe
Office.com's Office Oracle --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Office.com\Office.com's Office Oracle\Uninst.isu"
Office.com Basketball --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Office.com\Office.com Basketball\Uninst.isu"
Office.com Darts --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Office.com\Office.com Darts\Uninst.isu"
OfficePoetry --> c:\Program Files\Office.com\OfficePoetry\uninstall.exe
OpenOffice.org 1.1.4 --> C:\Program Files\OpenOffice.org1.1.4\program\setup.exe -deinstall
Opera 9.10 --> MsiExec.exe /X{5D582D33-EB35-4D77-B7AF-403322D947E6}
Paltalk Messenger --> C:\WINDOWS\iun6002.exe "C:\Program Files\Paltalk Messenger\irunin.ini"
Panathinaikos --> C:\WINDOWS\ssunstl.exe "GATE13"
Picture Window 2.5 --> C:\WINDOWS\uninst.exe -f"C:\Program Files\Digital Light & Color\Picture Window 2.5\DeIsL2.isu" -cC:\PROGRA~1\DIGITA~1\PICTUR~1.5\_ISREG32.DLL
PIXresizer 1.0.8 --> "C:\Program Files\PIXresizer\unins000.exe"
QuickTime --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{929408E6-D265-4174-805F-81D1D914E2A4} /l1033
Rich Video

This post has been edited by alekosgr: Dec 8 2007, 11:13 PM