fifiyigi.dll is not a valid Windows image. [RESOLVED], Bad Image Errors |
Discover the best free computer help!
Learn more about Geeks to Go by taking the tour. Want to ask a question, reply to a topic, or remove all advertising? It's easy, fast and free. Join today!
Spyware, virus, trojan, fake security or privacy alerts? Please start with our malware cleaning guide.
Learn more about Geeks to Go by taking the tour. Want to ask a question, reply to a topic, or remove all advertising? It's easy, fast and free. Join today!
Spyware, virus, trojan, fake security or privacy alerts? Please start with our malware cleaning guide.
  |
 Nov 12 2008, 04:45 AM
Post
#1
|
|
|
Member  Posts: 11 OS: XP  |
I'm having similar problems to this post: http://www.geekstogo.com/forum/hsaczx-dll-...ge-t216024.html Just like them, a message window pops up every time I run a program/.exe file. Specifically it says the following: "program i'm trying to run".exe - Bad Image The Application or DLL C:\WINDOWS\system32\fifiyigi.dll is not a valid Windows image. Please check this against your installation diskette. Another thing that seems a little odd is that two of these messages occur during startup before I even choose the Administrator log in option. These 2 .exe files are Services.exe and lsass.exe. Can someone please help?! Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 5:23:04 AM, on 11/12/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Norton Internet Security\ISSVC.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\Program Files\Common Files\Command Software\dvpapi.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe c:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Viewpoint\Common\ViewpointService.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe C:\WINDOWS\ehome\ehtray.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\windows\system\hpsysdrv.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\system32\hphmon06.exe C:\HP\KBD\KBD.EXE C:\WINDOWS\eHome\ehmsas.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\ALCWZRD.EXE C:\WINDOWS\ALCMTR.EXE C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Google\Gmail Notifier\gnotify.exe C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Program Files\Verizon\Servicepoint\VerizonServicepoint.exe C:\Program Files\PokerOffice\bin\javaw.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\WALGRE~1\WALGRE~1\data\xtras\mssysmgr.exe C:\Program Files\ComcastUI\Universal Installer\uinstaller.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\InterMute\SpySubtract\SpySub.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Webroot\Spy Sweeper\SSU.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://comcast.net/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\WINDOWS\DOWNLO~1\vzbb.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: (no name) - {ae54c9ef-926d-44c4-8086-9d9e9309ac04} - C:\WINDOWS\system32\ratagasu.dll (file missing) O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\WINDOWS\DOWNLO~1\vzbb.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [HPHUPD06] "c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe" O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Symantec NetDriver Monitor] "C:\PROGRA~1\SYMNET~1\SNDMon.exe" /Consumer O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] "C:\Program Files\Google\Gmail Notifier\gnotify.exe" O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP O4 - HKLM\..\Run: [SpywareBot] C:\Program Files\SpywareBot\SpywareBot.exe -boot O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\Servicepoint\VerizonServicepoint.exe" O4 - HKLM\..\Run: [POEngine] "C:\Program Files\PokerOffice\POEngine.exe" C:\Program Files\PokerOffice O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [IUpd721] "C:\Documents and Settings\HP_Administrator\Application Data\NI.GSCNS\IUpd721.exe" O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Walgreens PhotoShow Media Manager] C:\PROGRA~1\WALGRE~1\WALGRE~1\data\xtras\mssysmgr.exe O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe" O4 - HKCU\..\Run: [Universal Installer] "C:\Program Files\ComcastUI\Universal Installer\uinstaller.exe" /fromrun /starthidden O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Uniblue RegistryBooster 2009] "C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe" /S O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'Default user') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: SpySubtract.lnk = C:\Program Files\InterMute\SpySubtract\sslaunch.exe O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemyfios.verizon.net/sdcCommo...IOS/tgctlcm.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1131208051437 O16 - DPF: {BCBC9371-595D-11D4-A96D-00105A1CEF6C} (View22RTE Class) - http://hgtv.view22.com/view22/app/view22rte.cab O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://webcam.gsu.edu/activex/AMC.cab O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab O20 - AppInit_DLLs: C:\WINDOWS\system32\fifiyigi.dll,C:\WINDOWS\system32\bewisape.dll O20 - Winlogon Notify: yayyYQIA - yayyYQIA.dll (file missing) O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe |
 |
 
|
|
Nov 12 2008, 08:00 AM
Post
#2
|
|
 GeekU Teacher  Posts: 21,845 From: Dublin OS: XP |
Hello
Disable resident protections (Antivirus...); you'll re-enable them after the scan Download Lop S&D < here Double-click Lop S&D.exe Choose the language, then choose Option 1 (Search) Wait till the end of the scan Post the log which is created: (%SystemDrive%\lopR.txt) |
|
|
|
|
Nov 12 2008, 03:16 PM
Post
#3
|
|
|
Member Posts: 11 OS: XP |
Done.
I also had the error message window pop up 3 times or so for every file scanned. Took ~15 mins so wasn't too bad, but maybe there is a better way. --------------------\\ Lop S&D 4.2.4-9c XP/Vista Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.00GHz ) BIOS : BIOS Date: 04/29/05 17:55:16 Ver: 08.00.10 USER : HP_Administrator ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 2005 (Not Activated) Firewall : Norton Internet Security 2005 (Not Activated) C:\ (Local Disk) - NTFS - Total:179 Go (Free:28 Go) D:\ (Local Disk) - FAT32 - Total:6 Go (Free:0 Go) E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go) F:\ (CD or DVD) G:\ (USB) H:\ (USB) I:\ (USB) J:\ (USB) K:\ (USB) "C:\Lop SD" ( MAJ : 01-11-2008|16:30 ) Option : [1] ( Wed 11/12/2008|16:00 ) --------------------\\ Listing folders in APPLIC~1 [04/21/2005|02:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Apple Computer [04/21/2005|02:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Identities [04/21/2005|02:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> InterMute [08/21/2006|08:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Lavasoft [08/22/2006|08:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Microsoft [11/11/2008|05:00] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Mozilla [04/21/2005|02:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Real [04/21/2005|02:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> SampleView [04/21/2005|02:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Sun [04/21/2005|02:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Symantec [08/21/2006|07:58] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Webroot [08/06/2007|03:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Adobe [09/18/2007|05:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple [09/18/2007|05:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple Computer [03/03/2007|09:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> avg7 [11/11/2008|03:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Google Updater [08/22/2006|08:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Grisoft [04/21/2005|02:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Hewlett-Packard [04/21/2005|02:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> InstallShield [03/26/2006|10:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Intuit [10/03/2008|11:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Lavasoft [11/12/2008|12:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Malwarebytes [08/15/2008|05:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Microsoft [04/21/2005|02:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Motive [11/07/2006|12:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> MSN6 [08/27/2005|12:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> QuickTime [04/21/2005|02:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> SBSI [07/10/2007|10:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> ScanSoft [09/24/2008|02:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Soulseek [07/10/2007|11:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> SSScanAppDataDir [07/10/2007|11:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> SSScanWizard [11/05/2005|01:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Symantec [12/29/2006|09:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> TEMP [11/07/2006|01:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Verizon [03/21/2007|11:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Viewpoint [07/13/2006|07:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Webroot [11/05/2005|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Genuine Advantage [08/15/2008|05:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> WLInstaller [09/07/2005|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> yahoo! [04/21/2005|02:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Apple Computer [04/21/2005|02:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Identities [04/21/2005|02:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> InterMute [04/21/2005|02:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Microsoft [04/21/2005|02:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Real [04/21/2005|02:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> SampleView [04/21/2005|02:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Sun [04/21/2005|02:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Symantec [07/21/2008|07:57] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Adobe [08/06/2007|03:25] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> AdobeUM [08/28/2005|05:44] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Aim [01/18/2008|11:36] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Apple Computer [03/07/2006|07:52] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> ArcSoft [11/12/2008|01:35] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> AVG7 [11/03/2008|05:06] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> BitTorrent [07/11/2007|06:29] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Canon [12/25/2006|05:38] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> DivX [09/07/2008|03:40] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> DNA [02/11/2006|08:41] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> G-Force [11/17/2005|07:34] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Google [09/06/2005|10:57] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Help [04/21/2005|02:45] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Identities [04/13/2007|10:22] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> InstallShield [04/21/2005|02:45] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> InterMute [05/20/2006|08:55] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> InterVideo [03/26/2006|10:11] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Intuit [11/10/2008|05:58] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> IUpd721 [09/16/2007|03:49] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Lavasoft [10/15/2005|09:47] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Leadertech [08/10/2005|07:19] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Macromedia [11/12/2008|12:12] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Malwarebytes [08/15/2008|05:24] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Microsoft [02/17/2006|03:11] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Motive [09/01/2008|11:00] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Mozilla [11/07/2006|12:57] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> MSNInstaller [12/29/2006|09:14] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> PC Tools [03/26/2008|06:51] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Real [04/21/2005|02:45] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> SampleView [03/04/2006|01:37] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> ScanSoft [07/15/2007|08:05] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Simple Star [12/14/2007|01:44] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Snapfish [10/15/2005|09:48] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Sonic [04/21/2005|02:45] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Sun [08/11/2005|05:45] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Symantec [11/11/2008|12:20] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Uniblue [10/10/2007|02:09] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> uTorrent [11/07/2006|12:44] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Verizon [03/21/2007|11:37] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Viewpoint [11/08/2008|10:37] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Walgreens [11/19/2005|10:03] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> Webroot [09/07/2005|12:37] C:\DOCUME~1\HP_ADM~1\APPLIC~1\<DIR> yahoo! [11/12/2008|10:48] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> AVG7 [08/22/2006|08:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Microsoft [03/22/2008|08:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Mozilla [11/19/2005|10:03] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Webroot [08/22/2006|08:46] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Microsoft [08/21/2006|07:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Webroot [04/21/2005|02:45] C:\DOCUME~1\temp\APPLIC~1\<DIR> Apple Computer [08/26/2006|03:49] C:\DOCUME~1\temp\APPLIC~1\<DIR> AVG7 [04/21/2005|02:45] C:\DOCUME~1\temp\APPLIC~1\<DIR> Identities [04/21/2005|02:45] C:\DOCUME~1\temp\APPLIC~1\<DIR> InterMute [12/17/2006|09:21] C:\DOCUME~1\temp\APPLIC~1\<DIR> Macromedia [09/06/2006|07:34] C:\DOCUME~1\temp\APPLIC~1\<DIR> Microsoft [05/24/2008|11:37] C:\DOCUME~1\temp\APPLIC~1\<DIR> Mozilla [04/21/2005|02:45] C:\DOCUME~1\temp\APPLIC~1\<DIR> Real [04/21/2005|02:45] C:\DOCUME~1\temp\APPLIC~1\<DIR> SampleView [04/21/2005|02:45] C:\DOCUME~1\temp\APPLIC~1\<DIR> Sun [04/21/2005|02:45] C:\DOCUME~1\temp\APPLIC~1\<DIR> Symantec [12/17/2006|09:11] C:\DOCUME~1\temp\APPLIC~1\<DIR> Verizon [08/26/2006|03:49] C:\DOCUME~1\temp\APPLIC~1\<DIR> Webroot --------------------\\ Scheduled Tasks located in C:\WINDOWS\Tasks [11/12/2008 06:00 AM][--a------] C:\WINDOWS\tasks\qdkjuglh.job [11/08/2008 10:53 PM][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job [11/12/2008 03:58 PM][--a------] C:\WINDOWS\tasks\Symantec NetDetect.job [11/12/2008 02:00 AM][--a------] C:\WINDOWS\tasks\wrSpySweeper20060213233234.job [11/10/2008 02:10 PM][--a------] C:\WINDOWS\tasks\Norton AntiVirus - Scan my computer - HP_Administrator.job [11/12/2008 05:08 AM][--ah-----] C:\WINDOWS\tasks\SA.DAT [08/10/2004 06:00 AM][-rah-----] C:\WINDOWS\tasks\desktop.ini --------------------\\ Listing Folders in C:\Program Files [08/06/2007|03:42] C:\Program Files\<DIR> Adobe [02/23/2006|08:23] C:\Program Files\<DIR> AIM [08/28/2005|05:44] C:\Program Files\<DIR> AOD [08/13/2008|05:01] C:\Program Files\<DIR> Apple Software Update [03/04/2006|01:33] C:\Program Files\<DIR> ArcSoft [11/18/2007|09:57] C:\Program Files\<DIR> Ares Lite Edition [04/23/2006|08:58] C:\Program Files\<DIR> AWS [05/23/2006|08:10] C:\Program Files\<DIR> Axis Communications [04/21/2005|02:47] C:\Program Files\<DIR> BackWeb [07/22/2008|04:10] C:\Program Files\<DIR> BitTorrent [05/20/2006|03:52] C:\Program Files\<DIR> Canon [05/21/2008|01:22] C:\Program Files\<DIR> ComcastUI [11/12/2008|05:10] C:\Program Files\<DIR> Common Files [04/21/2005|02:49] C:\Program Files\<DIR> ComPlus Applications [09/06/2005|06:40] C:\Program Files\<DIR> directx [05/31/2008|11:40] C:\Program Files\<DIR> DivX [08/30/2008|12:47] C:\Program Files\<DIR> DNA [09/09/2005|07:15] C:\Program Files\<DIR> Easy Internet signup [04/21/2005|02:49] C:\Program Files\<DIR> EnglishOtto [11/11/2008|11:51] C:\Program Files\<DIR> ERUNT [04/21/2005|02:49] C:\Program Files\<DIR> GemMaster [08/05/2008|03:22] C:\Program Files\<DIR> Google [08/22/2006|08:47] C:\Program Files\<DIR> Grisoft [04/21/2005|02:49] C:\Program Files\<DIR> Help and Support Additions [04/21/2005|02:49] C:\Program Files\<DIR> Hewlett-Packard [04/21/2005|02:49] C:\Program Files\<DIR> HP [11/07/2006|01:55] C:\Program Files\<DIR> InstallShield Installation Information [04/21/2005|02:51] C:\Program Files\<DIR> IntelliMover Data Transfer Demo [04/21/2005|02:51] C:\Program Files\<DIR> InterMute [10/15/2008|02:11] C:\Program Files\<DIR> Internet Explorer [04/21/2005|02:52] C:\Program Files\<DIR> InterVideo [09/18/2007|05:24] C:\Program Files\<DIR> iPod [05/09/2006|09:14] C:\Program Files\<DIR> IrfanView [09/18/2007|05:24] C:\Program Files\<DIR> iTunes [11/12/2008|01:30] C:\Program Files\<DIR> Java [10/03/2008|11:10] C:\Program Files\<DIR> Lavasoft [04/21/2005|02:53] C:\Program Files\<DIR> Macrovision Corp [11/12/2008|12:12] C:\Program Files\<DIR> Malwarebytes' Anti-Malware [09/10/2008|01:28] C:\Program Files\<DIR> Messenger [04/21/2005|02:53] C:\Program Files\<DIR> Microsoft ActiveSync [05/10/2007|02:05] C:\Program Files\<DIR> Microsoft CAPICOM 2.1.0.2 [04/21/2005|02:53] C:\Program Files\<DIR> microsoft frontpage [09/16/2005|09:07] C:\Program Files\<DIR> Microsoft Office [04/21/2005|02:53] C:\Program Files\<DIR> Microsoft Plus! Dancer LE [04/21/2005|02:53] C:\Program Files\<DIR> Microsoft Plus! Digital Media Edition [04/21/2005|02:53] C:\Program Files\<DIR> Microsoft Plus! Photo Story 2 LE [04/21/2005|02:53] C:\Program Files\<DIR> Microsoft Visual Studio [04/21/2005|02:54] C:\Program Files\<DIR> Microsoft Works [04/21/2005|02:53] C:\Program Files\<DIR> Microsoft.NET [09/10/2008|01:15] C:\Program Files\<DIR> Movie Maker [11/12/2008|03:30] C:\Program Files\<DIR> Mozilla Firefox [08/23/2005|11:39] C:\Program Files\<DIR> MSN [04/21/2005|02:54] C:\Program Files\<DIR> MSN Encarta Standard [04/21/2005|02:54] C:\Program Files\<DIR> MSN Gaming Zone [10/17/2006|02:01] C:\Program Files\<DIR> MSXML 4.0 [04/21/2005|02:54] C:\Program Files\<DIR> muvee Technologies [08/16/2007|09:00] C:\Program Files\<DIR> Netflix [09/10/2008|01:04] C:\Program Files\<DIR> NetMeeting [11/06/2006|07:58] C:\Program Files\<DIR> Norton Internet Security [04/21/2005|02:54] C:\Program Files\<DIR> Online Services [09/10/2008|01:03] C:\Program Files\<DIR> Outlook Express [12/22/2006|09:25] C:\Program Files\<DIR> PartyGaming [04/21/2005|02:56] C:\Program Files\<DIR> PC-Doctor for DOS [04/21/2005|02:55] C:\Program Files\<DIR> PC-Doctor for Windows [09/08/2007|09:03] C:\Program Files\<DIR> PFConfig [11/07/2006|12:45] C:\Program Files\<DIR> PlayLinc [03/30/2007|10:23] C:\Program Files\<DIR> PokerOffice [11/12/2008|03:17] C:\Program Files\<DIR> PokerStars [09/18/2007|05:22] C:\Program Files\<DIR> QuickTime [04/21/2005|02:56] C:\Program Files\<DIR> Real [03/04/2006|01:37] C:\Program Files\<DIR> ScanSoft [04/21/2005|02:56] C:\Program Files\<DIR> Sonic [04/21/2005|02:56] C:\Program Files\<DIR> Sonic RecordNow! [09/24/2008|02:08] C:\Program Files\<DIR> Soulseek [09/24/2008|02:08] C:\Program Files\<DIR> SoulseekNS [02/11/2006|08:40] C:\Program Files\<DIR> SoundSpectrum [12/29/2006|09:38] C:\Program Files\<DIR> Spyware Doctor [11/05/2005|01:35] C:\Program Files\<DIR> Symantec [11/05/2005|01:35] C:\Program Files\<DIR> SymNetDrv [11/12/2008|05:22] C:\Program Files\<DIR> Trend Micro [04/13/2007|10:22] C:\Program Files\<DIR> TurboTax [04/21/2005|02:56] C:\Program Files\<DIR> Uninstall Information [04/21/2005|02:56] C:\Program Files\<DIR> Updates from HP [09/08/2007|08:46] C:\Program Files\<DIR> uTorrent [11/07/2006|01:54] C:\Program Files\<DIR> Verizon [04/30/2007|10:11] C:\Program Files\<DIR> View22 [01/11/2007|11:03] C:\Program Files\<DIR> Viewpoint [11/07/2006|12:44] C:\Program Files\<DIR> VZBB Toolbar [07/13/2007|09:40] C:\Program Files\<DIR> Walgreens [08/22/2006|09:33] C:\Program Files\<DIR> Webroot [12/22/2006|09:23] C:\Program Files\<DIR> WildTangent [08/15/2008|05:22] C:\Program Files\<DIR> Windows Live [09/10/2008|01:03] C:\Program Files\<DIR> Windows Media Player [09/10/2008|01:03] C:\Program Files\<DIR> Windows NT [04/21/2005|02:57] C:\Program Files\<DIR> Windows Plus [04/21/2005|02:57] C:\Program Files\<DIR> WindowsUpdate [04/21/2005|02:57] C:\Program Files\<DIR> xerox --------------------\\ Listing Folders in C:\Program Files\Common Files [08/06/2007|03:43] C:\Program Files\Common Files\<DIR> Adobe [03/26/2006|10:10] C:\Program Files\Common Files\<DIR> AnswerWorks 4.0 [09/23/2005|08:18] C:\Program Files\Common Files\<DIR> AOL [09/18/2007|05:19] C:\Program Files\Common Files\<DIR> Apple [11/07/2006|01:54] C:\Program Files\Common Files\<DIR> Command Software [04/21/2005|02:47] C:\Program Files\Common Files\<DIR> DESIGNER [04/21/2005|02:47] C:\Program Files\Common Files\<DIR> Hewlett-Packard [04/21/2005|02:47] C:\Program Files\Common Files\<DIR> HP [04/21/2005|02:48] C:\Program Files\Common Files\<DIR> InstallShield [04/21/2005|02:48] C:\Program Files\Common Files\<DIR> InterVideo [03/26/2006|10:09] C:\Program Files\Common Files\<DIR> Intuit [04/21/2005|02:48] C:\Program Files\Common Files\<DIR> Java [04/21/2005|02:48] C:\Program Files\Common Files\<DIR> L&H [08/09/2005|09:52] C:\Program Files\Common Files\<DIR> LightScribe [11/12/2008|12:19] C:\Program Files\Common Files\<DIR> Microsoft Shared [04/21/2005|02:48] C:\Program Files\Common Files\<DIR> MSSoap [04/21/2005|02:48] C:\Program Files\Common Files\<DIR> muvee Technologies [09/28/2005|06:24] C:\Program Files\Common Files\<DIR> NSV [09/28/2005|06:23] C:\Program Files\Common Files\<DIR> Nullsoft [04/21/2005|02:48] C:\Program Files\Common Files\<DIR> ODBC [11/07/2006|01:54] C:\Program Files\Common Files\<DIR> PestPatrol [12/11/2005|07:10] C:\Program Files\Common Files\<DIR> Real [03/04/2006|01:37] C:\Program Files\Common Files\<DIR> ScanSoft Shared [04/21/2005|02:49] C:\Program Files\Common Files\<DIR> Services [07/13/2007|09:40] C:\Program Files\Common Files\<DIR> Simple Star Shared [04/21/2005|02:48] C:\Program Files\Common Files\<DIR> SpeechEngines [05/21/2008|01:22] C:\Program Files\Common Files\<DIR> SupportSoft [04/21/2005|02:49] C:\Program Files\Common Files\<DIR> SureThing Shared [12/29/2006|09:11] C:\Program Files\Common Files\<DIR> Symantec Shared [09/10/2008|01:03] C:\Program Files\Common Files\<DIR> System [08/15/2008|05:21] C:\Program Files\Common Files\<DIR> WindowsLiveInstaller [10/03/2008|11:09] C:\Program Files\Common Files\<DIR> Wise Installation Wizard [12/11/2005|07:10] C:\Program Files\Common Files\<DIR> xing shared --------------------\\ Process ( 80 Processes ) ... OK ! --------------------\\ Searching with S_Lop No Lop folder found ! --------------------\\ Searching for Lop Files - Folders C:\DOCUME~1\HP_ADM~1\Cookies\hp_administrator@advertising[1].txt C:\DOCUME~1\HP_ADM~1\Cookies\hp_administrator@adopt.euroclick[2].txt --------------------\\ Searching within the Registry ..... OK ! --------------------\\ Checking the Hosts file Hosts file CLEAN --------------------\\ Searching for hidden files with Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-12 16:06:15 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------\\ Searching for other infections C:\WINDOWS\system32\oqtss.bak2 ==> VUNDO <== --------------------\\ Cracks & Keygens .. C:\DOCUME~1\HP_ADM~1\My Documents\My Music\iTunes\iTunes Music\The Dogs\The Dogs\10 Crack Rock.m4p C:\DOCUME~1\HP_ADM~1\My Documents\My Music\soulseek files\Push Button Objects - 2000 - Dirty Dozen\05 - Chewbacca On Crack.mp3 [F:470][D:73]-> C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp [F:202][D:0]-> C:\DOCUME~1\HP_ADM~1\Cookies [F:32105][D:75]-> C:\DOCUME~1\HP_ADM~1\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - Wed 11/12/2008|16:13 - Option : [1] --------------------\\ Scan completed at 16:13:21 |
|
|
|
|
Nov 12 2008, 03:32 PM
Post
#4
|
|
|
GeekU Teacher Posts: 21,845 From: Dublin OS: XP |
Hello
Please download the OTMoveIt3 by OldTimer or from here.
Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post. Download OTScanIt2.exe to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt2 on your desktop.
Use the Add Reply button and post the information back here in an attachment. I will review it when it comes in. The last line is < End of Report >, so make sure that is the last line in the attached report. Make sure you attach the report in your reply. If it is too big to upload, then zip the text file and upload it that way |
|
|
|
|
Nov 12 2008, 06:12 PM
Post
#5
|
|
|
Member Posts: 11 OS: XP |
========== PROCESSES ==========
Process explorer.exe killed successfully. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== C:\WINDOWS\tasks\qdkjuglh.job moved successfully. C:\WINDOWS\system32\oqtss.bak2 moved successfully. ========== COMMANDS ========== File delete failed. C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hsperfdata_HP_Administrator\2748 scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\etilqs_v3RbfkuX1lPnkPIcnbah scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hpodvd09.log scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\IadHide5.dll scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\JETC665.tmp scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. Windows Temp folder emptied. Java cache emptied. File delete failed. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\Cache\_CACHE_001_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\Cache\_CACHE_002_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\Cache\_CACHE_003_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\urlclassifier3.sqlite scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\XUL.mfl scheduled to be deleted on reboot. FireFox cache emptied. Temp folders emptied. Explorer started successfully OTMoveIt3 by OldTimer - Version 1.0.7.0 log created on 11122008_182147 Files moved on Reboot... File C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hsperfdata_HP_Administrator\2748 not found! File C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\etilqs_v3RbfkuX1lPnkPIcnbah not found! C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hpodvd09.log moved successfully. DllUnregisterServer procedure not found in C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\IadHide5.dll C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\IadHide5.dll NOT unregistered. C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\IadHide5.dll moved successfully. File C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\JETC665.tmp not found! File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot. File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be moved on reboot. File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot. File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\Cache\_CACHE_001_ moved successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\Cache\_CACHE_002_ moved successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\Cache\_CACHE_003_ moved successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\Cache\_CACHE_MAP_ moved successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\urlclassifier3.sqlite moved successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\dj8g4qkz.default\XUL.mfl moved successfully.
Attached File(s)
|
|
|
|
|
Nov 12 2008, 06:37 PM
Post
#6
|
|
|
GeekU Teacher Posts: 21,845 From: Dublin OS: XP |
You have two anti-virus programs, AVG and Norton, you need to remove one of these
Start OTScanIt2. Copy/Paste the information in the quotebox below into the panel where it says "Paste fix here" and then click the Run Fix button. QUOTE [Kill Explorer] [Unregister Dlls] [Processes - Safe List] YN -> aawservice.exe -> %ProgramFiles%\Lavasoft\Ad-Aware\aawservice.exe YN -> spysweeper.exe -> %ProgramFiles%\Webroot\Spy Sweeper\SpySweeper.exe YN -> alcmtr.exe -> %SystemRoot%\ALCMTR.EXE YN -> ssu.exe -> %ProgramFiles%\Webroot\Spy Sweeper\ssu.exe [Registry - Safe List] < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ YN -> {7E853D72-626A-48EC-A868-BA8D5E23E045} [HKLM] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.] YN -> {ae54c9ef-926d-44c4-8086-9d9e9309ac04} [HKLM] -> %SystemRoot%\system32\ratagasu.dll [Reg Error: Value does not exist or could not be read.] < Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar YN -> "" [HKLM] -> Reg Error: Key does not exist or could not be opened. [ScriptInocUI Class] < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run YN -> "Alcmtr" -> %SystemRoot%\ALCMTR.EXE [ALCMTR.EXE] YN -> "ccApp" -> %CommonProgramFiles%\Symantec Shared\ccApp.exe ["C:\Program Files\Common Files\Symantec Shared\ccApp.exe"] YN -> "IUpd721" -> %AppData%\NI.GSCNS\IUpd721.exe ["C:\Documents and Settings\HP_Administrator\Application Data\NI.GSCNS\IUpd721.exe"] YN -> "SpywareBot" -> %ProgramFiles%\SpywareBot\SpywareBot.exe [C:\Program Files\SpywareBot\SpywareBot.exe -boot] < Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run YN -> "Uniblue RegistryBooster 2009" -> %ProgramFiles%\Uniblue\RegistryBooster\RegistryBooster.exe ["C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe" /S] < Internet Explorer Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\ YN -> CmdMapping\\"{2D663D1A-8670-49D9-A1A5-4C56B4E14E84}" [HKLM] -> [Reg Error: Key does not exist or could not be opened.] < AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs *AppInit_DLLs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls YY -> C:\WINDOWS\system32\fifiyigi.dll -> %SystemRoot%\system32\fifiyigi.dll YY -> C:\WINDOWS\system32\bewisape.dll -> %SystemRoot%\system32\bewisape.dll < AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs < Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ YN -> yayyYQIA -> < ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks YN -> "{9F8BEE99-CECA-4E03-8159-1112F26F06DB}" [HKLM] -> %SystemRoot%\system32\yayyYQIA.dll [] YN -> "{FA010552-4A27-4cb1-A1BB-3E2D697F1639}" [HKLM] -> Reg Error: Key does not exist or could not be opened. [SpySubtract Shell Extension] [Files/Folders - Created Within 90 Days] NY -> 1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp NY -> 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp NY -> _OTMoveIt -> %SystemDrive%\_OTMoveIt NY -> OTMoveIt3.exe -> %UserProfile%\Desktop\OTMoveIt3.exe NY -> Lop SD -> %SystemDrive%\Lop SD NY -> LopSD.exe -> %UserProfile%\Desktop\LopSD.exe NY -> HJTInstall.exe -> %UserProfile%\Desktop\HJTInstall.exe NY -> erunt_setup.exe -> %UserProfile%\Desktop\erunt_setup.exe NY -> SysRestorePoint_v13 -> %UserProfile%\Desktop\SysRestorePoint_v13 NY -> SysRestorePoint_v13.zip -> %UserProfile%\Desktop\SysRestorePoint_v13.zip NY -> SDFix -> %SystemDrive%\SDFix NY -> SDFix.exe -> %UserProfile%\Desktop\SDFix.exe NY -> IUpd721 -> %AppData%\IUpd721 NY -> AX5 -> %SystemRoot%\System32\AX5 NY -> uvm -> %SystemRoot%\System32\uvm NY -> db -> %SystemRoot%\System32\db NY -> u2 -> %SystemRoot%\System32\u2 NY -> sX3i19 -> %SystemRoot%\System32\sX3i19 [File - Lop Check] NY -> Viewpoint -> C:\Documents and Settings\All Users\Application Data\Viewpoint [Empty Temp Folders] [Start Explorer] [Reboot] The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here I will review the information when it comes back in. Also post a new HJT log |
|
|
|
|
Nov 12 2008, 07:07 PM
Post
#7
|
|
|
Member Posts: 11 OS: XP |
Which one do you recommend I remove, and how? Can I just disable one? If you don't have a recommendation I would lean towards removing Norton, since it seemed to cause it's own problems w |