Here is my Combofix log:
Benjamin Foote - 06-10-19 8:38:18.48 Service Pack 2
ComboFix 06.10.16 - Running from: "C:\Documents and Settings\Benjamin Foote\Desktop"
(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\WINDOWS\system32\ismini.exe
C:\Program Files\Common Files\{14C7CD76-0745-1033-0915-050915050040}
((((((((((((((((((((((((((((((( Files Created from 2006-09-19 to 2006-10-19 ))))))))))))))))))))))))))))))))))
2006-10-18 21:49 15,360 --a------ C:\WINDOWS\system32\drivers\sshrmd.sys
2006-10-18 21:49 14,848 --a------ C:\WINDOWS\system32\drivers\sskbfd.sys
2006-10-18 21:49 13,824 --a------ C:\WINDOWS\system32\drivers\SSFS0509.sys
2006-10-18 21:49 117,248 --a------ C:\WINDOWS\system32\drivers\ssidrv.sys
2006-10-18 18:32 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-10-18 18:24 76,560 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
2006-10-18 16:53 15,872 --a------ C:\WINDOWS\system32\winmmt32.dll
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2006-10-19 08:39 -------- d-------- C:\Program Files\Common Files
2006-10-18 21:49 -------- d-------- C:\Program Files\Webroot
2006-10-18 21:49 -------- d-------- C:\Documents and Settings\Benjamin Foote\Application Data\Webroot
2006-10-18 20:32 -------- d-------- C:\Program Files\Windows Defender
2006-10-18 18:32 -------- d-------- C:\Program Files\Grisoft
2006-10-18 18:24 -------- d-------- C:\Program Files\Internet Explorer
2006-10-18 16:42 -------- d-------- C:\Program Files\WinZip
2006-10-18 13:41 -------- d-------- C:\Program Files\VideoEgg
2006-10-18 13:41 -------- d-------- C:\Documents and Settings\Benjamin Foote\Application Data\VideoEgg
2006-10-18 13:26 -------- d-------- C:\Program Files\Common Files\Symantec Shared
2006-10-17 12:05 -------- d-------- C:\Program Files\Windows Media Connect 2
2006-10-17 12:02 -------- d-------- C:\Program Files\D-Tools
2006-09-29 16:24 -------- d-------- C:\Program Files\Windows Media Player
2006-09-28 20:02 -------- d-------- C:\Program Files\Maple 9.5
2006-09-27 19:10 -------- d-------- C:\Documents and Settings\Benjamin Foote\Application Data\Adobe
2006-09-23 10:12 -------- d-------- C:\Program Files\DIFX
2006-09-23 10:11 -------- d-------- C:\Program Files\Nokia
2006-09-23 10:11 -------- d-------- C:\Program Files\Common Files\PCSuite
2006-09-23 10:11 -------- d-------- C:\Program Files\Common Files\Nokia
2006-09-15 22:52 91904 --a--c--- C:\WINDOWS\system32\S32EVNT1.DLL
2006-09-15 22:52 124016 --a--c--- C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2006-09-13 18:01 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-09-05 14:16 -------- d-------- C:\Program Files\MSN Messenger
2006-08-26 04:45 617472 --a------ C:\WINDOWS\system32\comctl32.dll
2006-08-24 23:42 8704 --a------ C:\WINDOWS\system32\wdfmgr.exe
2006-08-24 23:42 8704 --a------ C:\WINDOWS\system32\uwdf.exe
2006-08-24 23:30 99840 --a------ C:\WINDOWS\system32\wmpshell.dll
2006-08-24 23:30 990208 --a------ C:\WINDOWS\system32\drmv2clt.dll
2006-08-24 23:30 937984 --a------ C:\WINDOWS\system32\WMNetMgr.dll
2006-08-24 23:30 8337920 --a------ C:\WINDOWS\system32\wmploc.dll
2006-08-24 23:30 790016 --------- C:\WINDOWS\system32\WMVSENCD.dll
2006-08-24 23:30 757248 --a------ C:\WINDOWS\system32\WMADMOD.dll
2006-08-24 23:30 7168 --a------ C:\WINDOWS\system32\asferror.dll
2006-08-24 23:30 656896 --------- C:\WINDOWS\system32\WMVXENCD.dll
2006-08-24 23:30 63488 --a------ C:\WINDOWS\system32\wpdmtpus.dll
2006-08-24 23:30 629760 --a------ C:\WINDOWS\system32\wpd_ci.dll
2006-08-24 23:30 611840 --------- C:\WINDOWS\system32\wmpmde.dll
2006-08-24 23:30 603648 --a------ C:\WINDOWS\system32\WMSPDMOD.dll
2006-08-24 23:30 537600 --a------ C:\WINDOWS\system32\blackbox.dll
2006-08-24 23:30 532992 --------- C:\WINDOWS\system32\wmdrmsdk.dll
2006-08-24 23:30 428032 --a------ C:\WINDOWS\system32\wmdrmdev.dll
2006-08-24 23:30 414208 --a------ C:\WINDOWS\system32\msscp.dll
2006-08-24 23:30 4096 --a------ C:\WINDOWS\system32\wmvdmoe2.dll
2006-08-24 23:30 4096 --a------ C:\WINDOWS\system32\wmvdmod.dll
2006-08-24 23:30 4096 --a------ C:\WINDOWS\system32\WMVADVE.DLL
2006-08-24 23:30 4096 --a------ C:\WINDOWS\system32\WMVADVD.dll
2006-08-24 23:30 4096 --a------ C:\WINDOWS\system32\wmsdmoe2.dll
2006-08-24 23:30 4096 --a------ C:\WINDOWS\system32\wmsdmod.dll
2006-08-24 23:30 4096 --a------ C:\WINDOWS\system32\wdfapi.dll
2006-08-24 23:30 4096 --a------ C:\WINDOWS\system32\MPG4DMOD.dll
2006-08-24 23:30 4096 --a------ C:\WINDOWS\system32\MP4SDMOD.dll
2006-08-24 23:30 4096 --a------ C:\WINDOWS\system32\MP43DMOD.dll
2006-08-24 23:30 37376 --a------ C:\WINDOWS\system32\wmdmps.dll
2006-08-24 23:30 35840 --a------ C:\WINDOWS\system32\wpdconns.dll
2006-08-24 23:30 349184 --a------ C:\WINDOWS\system32\wpdsp.dll
2006-08-24 23:30 347648 --a------ C:\WINDOWS\system32\wmdrmnet.dll
2006-08-24 23:30 33792 --a------ C:\WINDOWS\system32\wmdmlog.dll
2006-08-24 23:30 320512 --a------ C:\WINDOWS\system32\mswmdm.dll
2006-08-24 23:30 316928 --------- C:\WINDOWS\system32\MP4SDECD.dll
2006-08-24 23:30 314368 --a------ C:\WINDOWS\system32\wmpdxm.dll
2006-08-24 23:30 305152 --------- C:\WINDOWS\system32\MSDelta.dll
2006-08-24 23:30 295424 --------- C:\WINDOWS\system32\wmpeffects.dll
2006-08-24 23:30 284160 --------- C:\WINDOWS\system32\PortableDeviceApi.dll
2006-08-24 23:30 276480 --a------ C:\WINDOWS\system32\audiodev.dll
2006-08-24 23:30 27648 --a------ C:\WINDOWS\system32\mspmsnsv.dll
2006-08-24 23:30 259072 --------- C:\WINDOWS\system32\MPG4DECD.dll
2006-08-24 23:30 2589184 --------- C:\WINDOWS\system32\WpdShext.dll
2006-08-24 23:30 258560 --------- C:\WINDOWS\system32\MP43DECD.dll
2006-08-24 23:30 2450944 --a------ C:\WINDOWS\system32\wmvcore.dll
2006-08-24 23:30 242176 --a------ C:\WINDOWS\system32\wmpasf.dll
2006-08-24 23:30 228352 --a------ C:\WINDOWS\system32\cewmdm.dll
2006-08-24 23:30 227328 --a------ C:\WINDOWS\system32\wmerror.dll
2006-08-24 23:30 222208 --a------ C:\WINDOWS\system32\wmasf.dll
2006-08-24 23:30 211968 --------- C:\WINDOWS\system32\MFPLAT.dll
2006-08-24 23:30 210432 --a------ C:\WINDOWS\system32\qasf.dll
2006-08-24 23:30 204800 --a------ C:\WINDOWS\system32\wmpsrcwp.dll
2006-08-24 23:30 198144 --------- C:\WINDOWS\system32\PortableDeviceWMDRM.dll
2006-08-24 23:30 179712 --a------ C:\WINDOWS\system32\msnetobj.dll
2006-08-24 23:30 175104 --a------ C:\WINDOWS\system32\mspmsp.dll
2006-08-24 23:30 166912 --------- C:\WINDOWS\system32\PortableDeviceTypes.dll
2006-08-24 23:30 1660416 --a------ C:\WINDOWS\system32\wmpencen.dll
2006-08-24 23:30 157184 --a------ C:\WINDOWS\system32\wmidx.dll
2006-08-24 23:30 154624 --a------ C:\WINDOWS\system32\wpdmtp.dll
2006-08-24 23:30 1539584 --------- C:\WINDOWS\system32\WMVDECOD.dll
2006-08-24 23:30 1532416 --------- C:\WINDOWS\system32\WMVENCOD.dll
2006-08-24 23:30 1392128 --------- C:\WINDOWS\system32\WMVSDECD.dll
2006-08-24 23:30 133120 --------- C:\WINDOWS\system32\WPDShServiceObj.dll
2006-08-24 23:30 1327616 --a------ C:\WINDOWS\system32\WMSPDMOE.dll
2006-08-24 23:30 132096 --------- C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
2006-08-24 23:30 130048 --------- C:\WINDOWS\system32\wmpps.dll
2006-08-24 23:30 11264 --a------ C:\WINDOWS\system32\LAPRXY.dll
2006-08-24 23:30 1118208 --a------ C:\WINDOWS\system32\WMADMOE.dll
2006-08-24 23:30 101888 --------- C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2006-08-24 21:31 100864 --a------ C:\WINDOWS\system32\logagent.exe
2006-08-24 21:27 249344 --------- C:\WINDOWS\system32\drmupgds.exe
2006-08-24 21:26 95288 --------- C:\WINDOWS\system32\WUDFCoinstaller.dll
2006-08-24 21:26 38656 --a------ C:\WINDOWS\system32\drivers\wpdusb.sys
2006-08-24 21:26 17408 --------- C:\WINDOWS\system32\wpdshextautoplay.exe
2006-08-24 20:22 90112 --------- C:\WINDOWS\system32\drivers\WudfRd.sys
2006-08-24 20:19 316416 --------- C:\WINDOWS\system32\WUDFx.dll
2006-08-24 20:19 145920 --------- C:\WINDOWS\system32\WudfHost.exe
2006-08-24 20:18 84864 --------- C:\WINDOWS\system32\drivers\WudfPf.sys
2006-08-24 20:18 56320 --------- C:\WINDOWS\system32\WudfSvc.dll
2006-08-24 20:18 168448 --------- C:\WINDOWS\system32\WudfPlatform.dll
2006-08-22 01:21 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-08-21 22:14 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-08-21 22:14 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2006-08-17 00:58 100352 --a------ C:\WINDOWS\system32\6to4svc.dll
2006-08-11 21:14 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2006-07-31 15:23 89600 --a------ C:\WINDOWS\system32\SFUninst.exe
2006-07-31 15:23 631808 --a------ C:\WINDOWS\system32\Vorb 2006.scr
2006-07-29 20:32 48936 --a------ C:\WINDOWS\system32\sirenacm.dll
2006-07-28 02:24 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-07-21 21:24 72704 --a------ C:\WINDOWS\system32\hlink.dll
2006-07-14 15:07 892 --a--c--- C:\Documents and Settings\Benjamin Foote\Application Data\Hewlett-PackardHP PSC 1400 series1141530640_UI.log
2006-07-14 15:06 1868 --a--c--- C:\Documents and Settings\Benjamin Foote\Application Data\Hewlett-PackardHP PSC 1400 series1141530640_PROTOCOL.log
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"TOSCDSPD"="\"C:\\Program Files\\TOSHIBA\\TOSCDSPD\\toscdspd.exe\""
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"WMPNSCFG"="\"C:\\Program Files\\Windows Media Player\\WMPNSCFG.exe\""
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"igfxtray"="C:\\WINDOWS\\system32\\igfxtray.exe"
"igfxhkcmd"="C:\\WINDOWS\\system32\\hkcmd.exe"
"igfxpers"="C:\\WINDOWS\\system32\\igfxpers.exe"
"CeEKEY"="\"C:\\Program Files\\TOSHIBA\\E-KEY\\CeEKey.exe\""
@=""
"Apoint"="\"C:\\Program Files\\Apoint2K\\Apoint.exe\""
"TPNF"="\"C:\\Program Files\\TOSHIBA\\TouchPad\\TPTray.exe\""
"NDSTray.exe"="NDSTray.exe"
"dla"="C:\\WINDOWS\\system32\\dla\\tfswctrl.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe\""
"Tvs"="\"C:\\Program Files\\Toshiba\\Tvs\\TvsTray.exe\""
"TPSMain"="TPSMain.exe"
"ZoomingHook"="ZoomingHook.exe"
"SmoothView"="\"C:\\Program Files\\TOSHIBA\\TOSHIBA Zooming Utility\\SmoothView.exe\""
"HWSetup"="\"C:\\Program Files\\TOSHIBA\\TOSHIBA Applet\\HWSetup.exe\" hwSetUP"
"PadTouch"="\"C:\\Program Files\\TOSHIBA\\Touch and Launch\\PadExe.exe\""
"SVPWUTIL"="\"C:\\Program Files\\Toshiba\\Windows Utilities\\SVPWUTIL.exe\" SVPwUTIL"
"AGRSMMSG"="AGRSMMSG.exe"
"TCtryIOHook"="TCtrlIOHook.exe"
"TFncKy"="TFncKy.exe"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"CoolSwitch"="C:\\WINDOWS\\system32\\taskswitch.exe"
"Symantec NetDriver Monitor"="\"C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe\" /Consumer"
"HP Software Update"="\"C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"IntelliPoint"="\"C:\\Program Files\\Microsoft IntelliPoint\\point32.exe\""
"PCSuiteTrayApplication"="\"C:\\PROGRA~1\\Nokia\\NOKIAP~1\\LAUNCH~1.EXE\" -startup"
"SpyHunter"=""
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000005
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,00,01,00,00,00,00,00,00,00,04,00,00,02,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,4b,00,00,00,00,00,00,00,b5,04,00,00,02,03,\
00,00,04,00,00,40
"RestoredStateInfo"=hex:18,00,00,00,4b,00,00,00,00,00,00,00,b5,04,00,00,02,03,\
00,00,01,00,00,00
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
"UPnPMonitor"="{e57ce738-33e8-4c51-8354-bb4de9d215d1}"
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winmmt32
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\WebrootSpySweeperService
Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\Norton AntiVirus - Scan my computer - Benjamin Foote.job
C:\WINDOWS\tasks\wrSpySweeperTrialSweep.job
Completion time: 06-10-19 8:40:04.34
C:\ComboFix.txt ... 06-10-19 08:40
And my latest Jijackthis log:
Logfile of HijackThis v1.99.1
Scan saved at 8:46:47 a.m., on 19/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Toshiba\Tvs\TvsTray.exe
C:\WINDOWS\system32\TPSMain.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\taskswitch.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Downloaded files\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.vorb.org.nz/R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://10.1.1.1/F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [CeEKEY] "C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe"
O4 - HKLM\..\Run: [Apoint] "C:\Program Files\Apoint2K\Apoint.exe"
O4 - HKLM\..\Run: [TPNF] "C:\Program Files\TOSHIBA\TouchPad\TPTray.exe"
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [Tvs] "C:\Program Files\Toshiba\Tvs\TvsTray.exe"
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [ZoomingHook] ZoomingHook.exe
O4 - HKLM\..\Run: [SmoothView] "C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe"
O4 - HKLM\..\Run: [HWSetup] "C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe" hwSetUP
O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
O4 - HKLM\..\Run: [SVPWUTIL] "C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe" SVPwUTIL
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] "C:\PROGRA~1\SYMNET~1\SNDMon.exe" /Consumer
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] "C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE" -startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [TOSCDSPD] "C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe"
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft....k/?LinkID=39204O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://3hondas.space...ad/MsnPUpld.cabO16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} (VideoEgg ActiveX Loader) -
http://update.videoe...ggPublisher.exeO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn...pDownloader.cabO18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winmmt32 - C:\WINDOWS\SYSTEM32\winmmt32.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SX Service (SXServ) - Unknown owner - C:\WINDOWS\system32\sxserv101.exe (file missing)
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe