Here is main:
Deckard's System Scanner v20071014.68
Run by Dad on 2008-02-07 19:42:35
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
Successfully created a Deckard's System Scanner Restore Point.
-- Last 3 Restore Point(s) --
3: 2008-02-08 00:42:50 UTC - RP243 - Deckard's System Scanner Restore Point
2: 2008-02-07 04:34:42 UTC - RP242 - Installed J2SE Runtime Environment 5.0 Update 3
1: 2008-02-07 03:37:28 UTC - RP241 - Feb 6 1037
Performed disk cleanup.
Total Physical Memory: 503 MiB (512 MiB recommended).-- HijackThis (run as Dad.exe) -------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 7:43:16 PM, on 2/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MozyHome\mozybackup.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\CE\nmSvc.exe
C:\Program Files\TrojanHunter 4.5\THGuard.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\CE\nmFlt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Gaim\gaim.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe
C:\WINDOWS\system32\DllHost.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MozyHome\mozystat.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\ePlus48U\ScanPanel\ScnPanel.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Dad\Local Settings\Temporary Internet Files\Content.IE5\1QT32EXI\dss[1].exe
C:\WINDOWS\system32\wuauclt.exe
C:\DOWNLO~1\Dad.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: iShield Plug-in - {3050CDCA-E35E-4696-A544-8B0A589CE885} - C:\WINDOWS\system32\ISIEEdit.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [NMSVC] C:\Program Files\CE\nmSvc.exe
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.5\THGuard.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] "C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [RealTray] "C:\Program Files\Real\RealPlayer\RealPlay.exe" SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [QD FastAndSafe] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1149125728\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [CamMonitor] "C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe"
O4 - HKLM\..\Run: [American Airlines DealFinder] "C:\Program Files\American Airlines DealFinder\American_Airlines_DealFinder.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gaim] "C:\Program Files\Gaim\gaim.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [MySpaceIM] "C:\Program Files\MySpace\IM\MySpaceIM.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [DellTransferAgent] "C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe"
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: MozyHome Status.lnk = C:\Program Files\MozyHome\mozystat.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\QUICKEN05\bagent.exe
O4 - Global Startup: ScanPanel.lnk = C:\Program Files\ePlus48U\ScanPanel\ScnPanel.exe
O4 - Global Startup: VersionTrackerPro.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nmnsp.dll
O10 - Broken Internet access because of LSP provider 'cespy.dll' missing
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) -
http://supportcenter...oad/tgctlcm.cabO16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky...can_unicode.cabO16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) -
http://www.musicnote...ad/mnviewer.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft....k/?linkid=39204O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) -
http://disney.go.com...OnlineGames.cabO16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) -
http://picasaweb.goo...8/uploader2.cabO16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) -
http://upload.facebo...toUploader3.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
http://download.bitd...can8/oscan8.cabO16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) -
http://upload.facebo...otoUploader.cabO16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) -
http://www.ca.com/us...nfo/webscan.cabO16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) -
http://javadl-esd.su...indows-i586.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoft...free/asinst.cabO16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) -
http://www.sibelius....tiveXPlugin.cabO20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: bfrgnos - {88B2B69C-C363-410D-9600-0AB02821A8BC} - C:\WINDOWS\bfrgnos.dll (file missing)
O21 - SSODL: afxlspw - {840D1EEA-4927-46F6-85D8-A3865D110930} - C:\WINDOWS\afxlspw.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MozyHome Backup Service (mozybackup) - Unknown owner - C:\Program Files\MozyHome\mozybackup.exe
O23 - Service: MSSQLSERVER - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe (file missing)
O23 - Service: MSSQLServerADHelper - Unknown owner - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: SQLSERVERAGENT - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE (file missing)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Blue Coat K9 Web Protection (WebFilter) - Unknown owner - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
-- HijackThis Fixed Entries (C:\DOWNLO~1\backups\) -----------------------------
backup-20050901-212618-992 O20 - Winlogon Notify: ssqrq - C:\WINDOWS\system32\ssqrq.dll (file missing)
backup-20050901-215410-416 O23 - Service: CWShredder Service - InterMute, Inc. - C:\Documents and Settings\Dad\Local Settings\Temporary Internet Files\Content.IE5\OYQIABU4\CWShredder[1].exe
backup-20051128-151138-285 O3 - Toolbar: Big Fish Games Toolbar - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - C:\PROGRA~1\BFGTOO~1\BFGTOO~1.DLL
backup-20051128-151138-876 O2 - BHO: Big Fish Games Toolbar - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - C:\PROGRA~1\BFGTOO~1\BFGTOO~1.DLL
backup-20070530-202921-138 O4 - HKLM\..\RunServices: [rwkgjnuzroz] C:\WINDOWS\system32\rwkgjnuzroz.exe
backup-20070530-202921-145 O4 - HKLM\..\Run: [nwkum] C:\WINDOWS\system32\nwkum.exe
backup-20070530-202921-220 O4 - HKLM\..\RunServices: [ktt] C:\WINDOWS\system32\ktt.exe
backup-20070530-202921-288 O4 - HKLM\..\RunServices: [prbdteb] C:\WINDOWS\system32\prbdteb.exe
backup-20070530-202921-373 O4 - HKLM\..\RunServices: [rka] C:\WINDOWS\system32\rka.exe
backup-20070530-202921-405 O4 - HKLM\..\RunServices: [gyybe] C:\WINDOWS\system32\gyybe.exe
backup-20070530-202921-473 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\rjtyoewx.exe
backup-20070530-202921-495 O4 - HKLM\..\RunServices: [nwkum] C:\WINDOWS\system32\nwkum.exe
backup-20070530-202921-534 O4 - HKLM\..\RunServices: [reevzr] C:\WINDOWS\system32\reevzr.exe
backup-20070530-202921-540 O4 - HKLM\..\RunServices: [bnptcm] C:\WINDOWS\system32\bnptcm.exe
backup-20070530-202921-548 O4 - HKLM\..\RunServices: [tmywjndm] C:\WINDOWS\system32\tmywjndm.exe
backup-20070530-202921-583 O4 - HKLM\..\RunServices: [waownkwwo] C:\WINDOWS\system32\waownkwwo.exe
backup-20070530-202921-594 O4 - HKLM\..\Run: [rwkgjnuzroz] C:\WINDOWS\system32\rwkgjnuzroz.exe
backup-20070530-202921-672 O4 - HKLM\..\RunServices: [bqw] C:\WINDOWS\system32\bqw.exe
backup-20070530-202921-769 O4 - HKLM\..\RunServices: [yvsaeigbwd] C:\WINDOWS\system32\yvsaeigbwd.exe
backup-20070530-202921-871 O4 - HKLM\..\RunServices: [cqyzzpioow] C:\WINDOWS\system32\cqyzzpioow.exe
backup-20070530-202921-978 O4 - HKLM\..\RunServices: [jnktuifbk] C:\WINDOWS\system32\jnktuifbk.exe
backup-20070601-221909-165 O4 - HKLM\..\Run: [ktt] C:\WINDOWS\system32\ktt.exe
backup-20070601-221909-210 O4 - HKLM\..\Run: [dn] C:\WINDOWS\system32\dn.exe
backup-20070601-221909-257 O4 - HKLM\..\Run: [bqw] C:\WINDOWS\system32\bqw.exe
backup-20070601-221909-366 O4 - HKLM\..\Run: [jnktuifbk] C:\WINDOWS\system32\jnktuifbk.exe
backup-20070601-221909-370 O4 - HKLM\..\RunServices: [ztcveznrtfu] C:\WINDOWS\system32\ztcveznrtfu.exe
backup-20070601-221909-434 O4 - HKLM\..\RunServices: [q] C:\WINDOWS\system32\q.exe
backup-20070601-221909-452 O4 - HKLM\..\Run: [zztkwjmgb] C:\WINDOWS\system32\zztkwjmgb.exe
backup-20070601-221909-513 O4 - HKLM\..\RunServices: [zztkwjmgb] C:\WINDOWS\system32\zztkwjmgb.exe
backup-20070601-221909-520 O4 - HKLM\..\Run: [cqyzzpioow] C:\WINDOWS\system32\cqyzzpioow.exe
backup-20070601-221909-626 O4 - HKLM\..\Run: [yvsaeigbwd] C:\WINDOWS\system32\yvsaeigbwd.exe
backup-20070601-221909-668 O4 - HKLM\..\Run: [tmywjndm] C:\WINDOWS\system32\tmywjndm.exe
backup-20070601-221909-700 O4 - HKLM\..\Run: [reevzr] C:\WINDOWS\system32\reevzr.exe
backup-20070601-221909-705 O4 - HKLM\..\RunServices: [dn] C:\WINDOWS\system32\dn.exe
backup-20070601-221909-727 O4 - HKLM\..\RunServices: [e] C:\WINDOWS\system32\e.exe
backup-20070601-221909-765 O4 - HKLM\..\Run: [gyybe] C:\WINDOWS\system32\gyybe.exe
backup-20070601-221909-780 O4 - HKLM\..\Run: [bnptcm] C:\WINDOWS\system32\bnptcm.exe
backup-20070601-221909-783 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\zztkwjmgb.exe
backup-20070601-221909-877 O4 - HKLM\..\Run: [rka] C:\WINDOWS\system32\rka.exe
backup-20070601-221909-888 O4 - HKLM\..\Run: [waownkwwo] C:\WINDOWS\system32\waownkwwo.exe
backup-20070601-221909-967 O4 - HKLM\..\Run: [prbdteb] C:\WINDOWS\system32\prbdteb.exe
backup-20070602-222407-335 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\ecgkfzccxzj.exe
backup-20070602-222407-555 O4 - HKLM\..\RunServices: [pvzbzhttn] C:\WINDOWS\system32\pvzbzhttn.exe
backup-20070602-222407-700 O4 - HKLM\..\Run: [pvzbzhttn] C:\WINDOWS\system32\pvzbzhttn.exe
backup-20070606-214105-557 O4 - HKLM\..\Run: [bfvm] C:\WINDOWS\system32\bfvm.exe
backup-20070606-214105-815 O4 - HKLM\..\RunServices: [bfvm] C:\WINDOWS\system32\bfvm.exe
backup-20070608-164019-252 O4 - HKLM\..\RunServices: [ufxhba] C:\WINDOWS\system32\ufxhba.exe
backup-20070608-164019-380 O4 - HKLM\..\Run: [jgmwwgg] C:\WINDOWS\system32\jgmwwgg.exe
backup-20070608-164019-431 O4 - HKLM\..\Run: [josijbcbms] C:\WINDOWS\system32\josijbcbms.exe
backup-20070608-164019-544 O4 - HKLM\..\RunServices: [nvztiljx] C:\WINDOWS\system32\nvztiljx.exe
backup-20070608-164019-589 O4 - HKLM\..\Run: [nvztiljx] C:\WINDOWS\system32\nvztiljx.exe
backup-20070608-164019-775 O4 - HKLM\..\Run: [goqr] C:\WINDOWS\system32\goqr.exe
backup-20070608-164019-786 O4 - HKLM\..\RunServices: [josijbcbms] C:\WINDOWS\system32\josijbcbms.exe
backup-20070608-164019-787 O4 - HKLM\..\Run: [ufxhba] C:\WINDOWS\system32\ufxhba.exe
backup-20070608-164019-789 O4 - HKLM\..\RunServices: [goqr] C:\WINDOWS\system32\goqr.exe
backup-20070608-164019-983 O4 - HKLM\..\RunServices: [jgmwwgg] C:\WINDOWS\system32\jgmwwgg.exe
backup-20070608-164952-736 O4 - HKLM\..\Run: [ufxhba] C:\WINDOWS\system32\ufxhba.exe
backup-20070608-164952-906 O4 - HKLM\..\RunServices: [ufxhba] C:\WINDOWS\system32\ufxhba.exe
backup-20070610-154607-121 O4 - HKLM\..\Run: [fkg] C:\WINDOWS\system32\fkg.exe
backup-20070610-154607-473 O4 - HKLM\..\RunServices: [brwfzxgktds] C:\WINDOWS\system32\brwfzxgktds.exe
backup-20070610-154607-565 O4 - HKLM\..\Run: [jndx] C:\WINDOWS\system32\jndx.exe
backup-20070610-154607-712 O4 - HKLM\..\RunServices: [fkg] C:\WINDOWS\system32\fkg.exe
backup-20070610-154607-740 O4 - HKLM\..\RunServices: [jndx] C:\WINDOWS\system32\jndx.exe
backup-20070610-154607-848 O4 - HKLM\..\Run: [brwfzxgktds] C:\WINDOWS\system32\brwfzxgktds.exe
backup-20070610-154607-876 O4 - HKLM\..\RunServices: [zaafvvwecqk] C:\WINDOWS\system32\zaafvvwecqk.exe
backup-20070610-154607-960 O4 - HKLM\..\Run: [zaafvvwecqk] C:\WINDOWS\system32\zaafvvwecqk.exe
backup-20070610-154745-836 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\brwfzxgktds.exe
backup-20070610-162317-116 O4 - HKLM\..\Run: [b] C:\WINDOWS\system32\b.exe
backup-20070610-162317-291 O4 - HKLM\..\RunServices: [b] C:\WINDOWS\system32\b.exe
backup-20070610-162317-896 O4 - HKLM\..\RunServices: [py] C:\WINDOWS\system32\py.exe
backup-20070610-162317-959 O4 - HKLM\..\Run: [py] C:\WINDOWS\system32\py.exe
backup-20070610-163956-109 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\ugecbny.exe
backup-20070610-163956-329 O4 - HKLM\..\RunServices: [ugecbny] C:\WINDOWS\system32\ugecbny.exe
backup-20070610-163956-786 O4 - HKLM\..\Run: [ugecbny] C:\WINDOWS\system32\ugecbny.exe
backup-20070610-174832-176 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\na.exe
backup-20070610-174832-333 O4 - HKLM\..\Run: [vssyrvly] C:\WINDOWS\system32\vssyrvly.exe
backup-20070610-174832-781 O4 - HKLM\..\RunServices: [vssyrvly] C:\WINDOWS\system32\vssyrvly.exe
backup-20070610-175446-962 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\na.exe
backup-20070610-180131-300 O4 - HKLM\..\RunServices: [erowwcrsirb] C:\WINDOWS\system32\erowwcrsirb.exe
backup-20070610-180131-475 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\erowwcrsirb.exe
backup-20070610-180131-632 O4 - HKLM\..\Run: [erowwcrsirb] C:\WINDOWS\system32\erowwcrsirb.exe
backup-20070610-185123-550 O4 - HKLM\..\Run: [wpddrrj] C:\WINDOWS\system32\wpddrrj.exe
backup-20070610-185124-662 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\wpddrrj.exe
backup-20070610-185124-882 O4 - HKLM\..\RunServices: [wpddrrj] C:\WINDOWS\system32\wpddrrj.exe
backup-20070610-200721-365 O4 - HKLM\..\Run: [bmfbrjpoq] C:\WINDOWS\system32\bmfbrjpoq.exe
backup-20070610-200721-531 O4 - HKLM\..\RunServices: [bmfbrjpoq] C:\WINDOWS\system32\bmfbrjpoq.exe
backup-20070610-200722-759 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\bmfbrjpoq.exe
backup-20070610-201811-108 O4 - HKLM\..\RunServices: [y] C:\WINDOWS\system32\y.exe
backup-20070610-201811-316 O4 - HKLM\..\Run: [y] C:\WINDOWS\system32\y.exe
backup-20070610-201811-888 O23 - Service: Print Spooler Service (if4pe0ayubeac5m) - Unknown owner - C:\WINDOWS\system32\y.exe
backup-20070611-185213-405 O23 - Service: AOL Authentication Server (SrV-AOL) - Unknown owner - C:\WINDOWS\Fonts\aolserver.exe (file missing)
backup-20070611-185213-699 O4 - HKLM\..\RunServices: [pifcs] C:\WINDOWS\system32\pifcs.exe
backup-20070611-185213-844 O4 - HKLM\..\RunServices: [yhixjdbn] C:\WINDOWS\system32\yhixjdbn.exe
-- File Associations -----------------------------------------------------------
All associations okay.
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R1 cwmtdi - c:\windows\system32\drivers\cwmtdi.sys
R1 omci (OMCI WDM Device Driver) - c:\windows\system32\drivers\omci.sys <Not Verified; Dell Computer Corporation; OMCI Driver>
R1 SASDIFSV - c:\program files\superantispyware\sasdifsv.sys
R1 SASKUTIL - c:\program files\superantispyware\saskutil.sys
R3 DSproct - c:\program files\dellsupport\gtaction\triggers\dsproct.sys <Not Verified; Gteko Ltd.; processt>
S3 SASENUM - c:\program files\superantispyware\sasenum.sys <Not Verified; SuperAdBlocker, Inc.; SuperAntiSpyware>
S3 wanatw (WAN Miniport (ATW)) - c:\windows\system32\drivers\wanatw4.sys (file missing)
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
R2 Viewpoint Manager Service - "c:\program files\viewpoint\common\viewpointservice.exe" <Not Verified; Viewpoint Corporation; Viewpoint Manager>
R2 WebFilter (Blue Coat K9 Web Protection) - c:\program files\blue coat k9 web protection\k9filter.exe
S2 MSSQLSERVER - c:\program files\microsoft sql server\mssql\binn\sqlservr.exe -smssqlserver (file missing)
S3 MSSQLServerADHelper - c:\program files\microsoft sql server\80\tools\binn\sqladhlp.exe (file missing)
S3 SQLSERVERAGENT - c:\program files\microsoft sql server\mssql\binn\sqlagent.exe -i mssqlserver (file missing)
S4 CWShredder Service - c:\documents and settings\dad\local settings\temporary internet files\content.ie5\oyqiabu4\cwshredder[1].exe service (file missing)
-- Device Manager: Disabled ----------------------------------------------------
No disabled devices found.
-- Scheduled Tasks -------------------------------------------------------------
2008-02-01 23:30:00 346 --a------ C:\WINDOWS\Tasks\McAfee.com Scan for Viruses - My Computer (1) (UPSTAIRS-Dad).job
2008-02-01 19:49:06 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
-- Files created between 2008-01-07 and 2008-02-07 -----------------------------
2008-02-07 06:41:45 51200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-02-06 23:36:27 0 d-------- C:\Documents and Settings\Dad\.housecall6.6
2008-02-06 23:06:44 0 d-------- C:\Documents and Settings\All Users\Application Data\Dell
2008-02-06 22:45:03 0 d-------- C:\WINDOWS\system32\ActiveScan
2008-02-06 21:14:06 691545 --a------ C:\WINDOWS\unins000.exe
2008-02-06 21:14:06 3443 --a------ C:\WINDOWS\unins000.dat
2008-02-05 19:12:31 70656 --a------ C:\WINDOWS\system32\vspell32.dll <Not Verified; Visual Components, Inc.; VisualSpeller™>
2008-02-05 19:12:30 84992 --a------ C:\WINDOWS\system32\Ledit32.dll <Not Verified; AY Software Corporation; >
2008-02-05 19:12:28 503808 --a------ C:\WINDOWS\system32\ChilkatFTPx.dll <Not Verified; Chilkat Software, Inc.; Chilkat FTP ActiveX>
2008-02-05 19:12:27 0 d-------- C:\Program Files\PageBreeze
2008-02-05 18:05:44 4504 --a------ C:\WINDOWS\system32\tmp.reg
2008-02-05 18:03:29 25600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-02-05 18:03:29 289144 --a------ C:\WINDOWS\system32\VCCLSID.exe <Not Verified; S!Ri; >
2008-02-05 18:03:29 85504 --a------ C:\WINDOWS\system32\VACFix.exe <Not Verified; S!Ri.URZ; VACFix>
2008-02-05 18:03:29 288417 --a------ C:\WINDOWS\system32\SrchSTS.exe <Not Verified; S!Ri; SrchSTS>
2008-02-05 18:03:29 53248 --a------ C:\WINDOWS\system32\Process.exe <Not Verified;
http://www.beyondlogic.org; Command Line Process Utility>
2008-02-05 18:03:29 81920 --a------ C:\WINDOWS\system32\IEDFix.exe <Not Verified; S!Ri.URZ; IEDFix>
2008-02-04 21:22:19 0 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-02-04 19:41:06 0 d-------- C:\Documents and Settings\Dad\Application Data\VersionTracker Pro
2008-02-04 19:40:58 0 d-------- C:\Program Files\TechTracker
2008-02-04 19:38:52 0 d-------- C:\Program Files\SmartFTP Client
2008-02-04 19:37:13 0 d-------- C:\Program Files\SmartFTP Client 2.5 Setup Files
2008-02-04 17:15:08 98304 --a------ C:\WINDOWS\frplprg.exe
2008-02-04 17:15:08 217088 --a------ C:\WINDOWS\afxlspw.dll <Not Verified; ; afxlspw>
2008-02-01 12:39:06 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller
2008-02-01 12:38:47 0 d-------- C:\Program Files\Windows Live
2008-02-01 12:38:28 0 d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-01-31 17:49:37 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2008-01-25 13:37:03 0 d-------- C:\WINDOWS\.jagex_cache_32
2008-01-22 11:24:13 0 d-------- C:\Program Files\Disney
-- Find3M Report ---------------------------------------------------------------
2008-02-07 19:40:26 0 d-------- C:\Documents and Settings\Dad\Application Data\CE
2008-02-07 18:27:23 0 d-------- C:\Documents and Settings\Dad\Application Data\.gaim
2008-02-07 06:45:25 0 d-------- C:\Program Files\American Airlines DealFinder
2008-02-06 23:35:25 0 d-------- C:\Program Files\Java
2008-02-06 18:55:55 0 d-------- C:\Documents and Settings\Dad\Application Data\U3
2008-02-04 21:22:48 0 d-------- C:\Program Files\Lavasoft
2008-02-04 21:22:47 0 d-------- C:\Documents and Settings\Dad\Application Data\Lavasoft
2008-02-04 21:21:30 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-02-04 19:45:52 0 d-------- C:\Documents and Settings\Dad\Application Data\SmartFTP
2008-02-01 12:39:06 0 d-------- C:\Program Files\Common Files
2008-01-19 09:09:16 0 d-------- C:\Program Files\Common Files\AnswerWorks 4.0
2007-12-22 13:20:53 0 d-------- C:\Documents and Settings\Dad\Application Data\Adobe
2007-12-16 06:48:07 0 d-------- C:\Program Files\AIM6
2007-11-23 00:23:15 114688 --a------ C:\WINDOWS\system32\nmNsp.dll
2007-11-23 00:23:15 172032 --a------ C:\WINDOWS\system32\CESpy.dll
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UpdateManager"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [01/07/2004 02:01 AM]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [12/04/2007 08:00 AM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [09/25/2007 01:11 AM]
"NMSVC"="C:\Program Files\CE\nmSvc.exe" [11/23/2007 12:23 AM]
"THGuard"="C:\Program Files\TrojanHunter 4.5\THGuard.exe" [04/05/2006 06:58 PM]
"SpySweeper"="C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" [03/01/2007 07:09 PM]
"Share-to-Web Namespace Daemon"="C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" []
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [10/31/2003 06:42 PM]
"RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [05/20/2005 11:13 PM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [10/19/2007 08:16 PM]
"QD FastAndSafe"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" []
"MMTray"="C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe" [03/15/2005 07:58 AM]
"mmtask"="C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe" [03/15/2005 07:58 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [11/02/2007 06:36 PM]
"IPHSend"="C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe" []
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [03/11/2007 08:34 PM]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [12/22/2003 08:38 AM]
"HostManager"="C:\Program Files\Common Files\AOL\1149125728\ee\AOLSoftware.exe" []
"GhostStartTrayApp"="C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe" []
"CamMonitor"="C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe" []
"American Airlines DealFinder"="C:\Program Files\American Airlines DealFinder\American_Airlines_DealFinder.exe" []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 06:00 AM]
"Gaim"="C:\Program Files\Gaim\gaim.exe" [08/19/2006 09:14 PM]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [03/15/2007 10:09 AM]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [06/16/2007 05:17 PM]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [03/30/2006 04:45 PM]
"MySpaceIM"="C:\Program Files\MySpace\IM\MySpaceIM.exe" [03/07/2007 12:06 AM]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 11:24 AM]
"googletalk"="C:\Program Files\Google\Google Talk\googletalk.exe" [01/01/2007 04:22 PM]
"DellTransferAgent"="C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe" [11/13/2007 04:46 PM]
"Creative Detector"="C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" [12/02/2004 06:23 PM]
"Aim6"="" []
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"MySpaceIM"=C:\Program Files\MySpace\IM\MySpaceIM.exe
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Documents and Settings\Dad\Start Menu\Programs\Startup\
DESKTOP.INI [5/17/2002 12:24:40 PM]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [9/23/2005 10:05:26 PM]
DESKTOP.INI [8/10/2004 2:04:12 PM]
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [3/11/2007 8:26:24 PM]
MozyHome Status.lnk - C:\Program Files\MozyHome\mozystat.exe [9/17/2007 6:18:14 PM]
QuickBooks Update Agent.lnk - C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [11/6/2007 7:40:54 PM]
Quicken Scheduled Updates.lnk - C:\Program Files\QUICKEN05\bagent.exe [7/29/2003 8:49:48 PM]
ScanPanel.lnk - C:\Program Files\ePlus48U\ScanPanel\ScnPanel.exe [10/29/2005 11:25:15 PM]
VersionTrackerPro.lnk - C:\WINDOWS\Installer\{C1EDC38F-2760-4A4E-9CED-95B53024134C}\New_Shortcut_S1699_A8EB5A2133B04A97AEEFDFB17E2E701D.exe [2/4/2008 7:41:01 PM]
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [8/3/2007 10:10:00 AM]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [12/20/2006 11:55 AM 77824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"bfrgnos"= {88B2B69C-C363-410D-9600-0AB02821A8BC} - C:\WINDOWS\bfrgnos.dll [ ]
"afxlspw"= {840D1EEA-4927-46F6-85D8-A3865D110930} - C:\WINDOWS\afxlspw.dll [02/04/2008 11:39 AM 217088]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL 05/28/2007 07:24 AM 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\System Kernal Support]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt hpqcxs08 hpqddsvc
-- End of Deckard's System Scanner: finished at 2008-02-07 19:44:04 ------------
Here is Extra:
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: English
CPU 0: Intel® Pentium® 4 CPU 3.00GHz
CPU 1: Intel® Pentium® 4 CPU 3.00GHz
Percentage of Memory in Use: 75%
Physical Memory (total/avail): 502.07 MiB / 121.71 MiB
Pagefile Memory (total/avail): 1227.33 MiB / 710.5 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1916.64 MiB
C: is Fixed (NTFS) - 71.29 GiB total, 14.12 GiB free.
D: is CDROM (No Media)
E: is CDROM (No Media)
\\.\PHYSICALDRIVE0 - WDC WD800JD-75JNA0 - 74.5 GiB - 3 partitions
\PARTITION0 - Unknown - 47.03 MiB
\PARTITION1 (bootable) - Installable File System - 71.29 GiB - C:
\PARTITION2 - Unknown - 3.16 GiB
-- Security Center -------------------------------------------------------------
AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.
FirstRunDisabled is set.
AV: Spy Sweeper with AntiVirus v5.3.2.2361 (Webroot Software Inc)
DisabledAV: avast! antivirus 4.7.1098 [VPS 080207-0] v4.7.1098 (ALWIL Software)
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Microsoft Office\\OFFICE11\\EXCEL.EXE"="C:\\Program Files\\Microsoft Office\\OFFICE11\\EXCEL.EXE:*:Enabled:Microsoft Office Excel"
"C:\\Program Files\\SmartFTP\\SmartFTP.exe"="C:\\Program Files\\SmartFTP\\SmartFTP.exe:*:Enabled:SmartFTP Client"
"C:\\Program Files\\AIM\\aim.exe"="C:\\Program Files\\AIM\\aim.exe:*:Disabled:AOL Instant Messenger"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"="C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe:*:Enabled:AOL Loader"
"C:\\Program Files\\Intuit\\QuickBooks 2006\\QBDBMgrN.exe"="C:\\Program Files\\Intuit\\QuickBooks 2006\\QBDBMgrN.exe:*:Enabled:QuickBooks 2006 Data Manager"
"C:\\Program Files\\SmartFTP Client\\SmartFTP.exe"="C:\\Program Files\\SmartFTP Client\\SmartFTP.exe:*:Enabled:SmartFTP Client 2.5"
"C:\\Program Files\\PageBreeze\\pagebreeze.exe"="C:\\Program Files\\PageBreeze\\pagebreeze.exe:*:Enabled:pagebreeze"
-- Environment Variables -------------------------------------------------------
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Dad\Application Data
ASLOGDIR=C:\Program Files\Intuit\QuickBooks 2006\
CLASSPATH=.;C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=UPSTAIRS
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Dad
LOGONSERVER=\\UPSTAIRS
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Microsoft SQL Server\80\Tools\Binn\;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 3 Stepping 4, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0304
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\Dad\LOCALS~1\Temp
TMP=C:\DOCUME~1\Dad\LOCALS~1\Temp
USERDOMAIN=UPSTAIRS
USERNAME=Dad
USERPROFILE=C:\Documents and Settings\Dad
windir=C:\WINDOWS
-- User Profiles ---------------------------------------------------------------
Dad
(admin)Mom
(admin)Ryan
Nathan
(admin)Jennifer
(admin)Administrator
(admin)-- Add/Remove Programs ---------------------------------------------------------
--> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
--> C:\WINDOWS\system32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
--> C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
--> C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
--> C:\WINDOWS\UNNeroVision.exe /UNINSTALL
--> C:\WINDOWS\UNNMP.exe /UNINSTALL
--> MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
--> MsiExec.exe /I{688A3383-3CE7-4094-9188-9C39D1E4FCB6}
--> MsiExec.exe /I{7091313D-50F2-466A-9DDD-B5EE939867B2}
--> MsiExec.exe /I{F543B12A-13F5-487E-9314-F7D25E1BBE3E}
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AAFE9B0-B60B-4B12-B22D-6B15507502E5}\Setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0B095086-7205-4D48-90DF-DCD16613C6D4}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0B095086-7205-4D48-90DF-DCD16613C6D4}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{103BCDA0-E063-46AC-8028-64E78722ABA7}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{103BCDA0-E063-46AC-8028-64E78722ABA7}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2616B36E-38CE-4357-8AB5-8B3EE9B1C117}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2616B36E-38CE-4357-8AB5-8B3EE9B1C117}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{836612F0-1571-4C65-A4B7-58A39AA578EE}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{836612F0-1571-4C65-A4B7-58A39AA578EE}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9B65F068-5A91-4B41-AE3A-0BCC34DC7904}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9B65F068-5A91-4B41-AE3A-0BCC34DC7904}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9E54F486-CD4A-44A5-B041-16D4E1E56A53}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9E54F486-CD4A-44A5-B041-16D4E1E56A53}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D524239C-FD5C-4183-A49C-7930915A9C0A}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D524239C-FD5C-4183-A49C-7930915A9C0A}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D9A812DA-143D-4780-BEDC-FD6D41386317}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D9A812DA-143D-4780-BEDC-FD6D41386317}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DD2D9012-E5A1-4717-8EE9-8DB3F36E2F8C}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DD2D9012-E5A1-4717-8EE9-8DB3F36E2F8C}\setup.exe" -l0x9 /remove
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware 2007 --> MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 7.0.9 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70900000002}
AIM 6 --> C:\Program Files\AIM6\uninst.exe
AOL Instant Messenger --> C:\Program Files\AIM\uninstll.exe -LOG= C:\Program Files\AIM\install.log -OEM=
Apple Mobile Device Support --> MsiExec.exe /I{B5C209B1-8DDB-4642-A573-375B951514CB}
Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
AudibleManager --> C:\Program Files\Audible\Bin\Upgrade.exe /Uninstall
avast! Antivirus --> rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
AVG Anti-Rootkit Beta --> C:\Program Files\GRISOFT\AVG Anti-Rootkit Beta\Uninstall.exe
AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Ballistik Online --> "C:\WINDOWS\temp\Ballistik Online\unins000.exe"
Banctec Service Agreement --> MsiExec.exe /X{4B9F45E8-E3CE-40B4-9463-80A9B3481DEF}
Blue Coat® K9 Web Protection --> C:\Program Files\Blue Coat K9 Web Protection\uninst.exe
Canon i320 --> C:\WINDOWS\system32\CNMCP47.exe "-PRINTERNAMECanon i320" "-HELPERDLLC:\BJPrinter\CNMWINDOWS\Canon i320 Installer\Inst2\cnmis.dll" "-RCDLLC:\BJPrinter\CNMWINDOWS\Canon i320 Installer\Inst2\cnmi0409.dll"
Canon PhotoRecord --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Canon\PhotoRecord\Uninst.isu" -c"C:\Program Files\Canon\PhotoRecord\Program\uninstdll.dll"
Canon Utilities Easy-PhotoPrint --> C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Canon\Easy-PhotoPrint\Uninst.isu" -c"C:\Program Files\Canon\Easy-PhotoPrint\EZUNINST.DLL"
Canon Utilities PhotoStitch 3.1 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Canon\PhotoStitch\Uninst.isu"
Canon Utilities ZoomBrowser EX --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Canon\ZoomBrowser EX\Uninst.isu" -c"C:\Program Files\Canon\ZoomBrowser EX\Program\uninstallutilities.dll"
CleanUp! --> C:\Program Files\CleanUp!\uninstall.exe
Covenant Eyes --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AC5ED2E-2936-4B54-A429-703F9034938E}\Setup.exe" -l0x9
Creative MediaSource --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E0C1913-886B-4C5C-8DAF-D1E649CE5FCC}\SETUP.EXE" -l0x9 /remove
Creative MuVo NX-TX --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3B124151-B6A0-492C-8838-0854B800535D}\SETUP.EXE" -l0x9 /remove
Creative System Information --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x9 /remove
Dell Digital Jukebox Driver --> C:\Program Files\Dell\Digital Jukebox Drivers\DrvUnins.exe /s
Dell Driver Reset Tool --> MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76}
Dell Picture Studio v3.0 --> MsiExec.exe /I{AF06CAE4-C134-44B1-B699-14FBDB63BD37}
DellSupport --> MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}
Disney Pirates of the Caribbean Online --> C:\
This topic is locked
Sign In
Create Account
