No problem, thank you very much for helping me.
System seems to be running fine now I ran combofix and smitfraudfix again and with crossed fingers i been bee boppin along;)
Here is what you asked for....
Deckard's System Scanner v20071014.68
Run by jd on 2008-04-16 01:44:05
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- HijackThis (run as jd.exe) --------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:44:07 AM, on 4/16/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\WINDOWS\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\PixArt\Pac207\Monitor.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\vVX3000.exe
C:\WINDOWS\System32\wpcumi.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\igfxpers.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\jd\AppData\Roaming\MySpace\IM\bin\MySpaceIM.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Citrix\GoToMeeting\198\g2mstart.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Windows\system32\igfxsrvc.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Citrix\GoToMeeting\198\g2mcomm.exe
C:\Program Files\Citrix\GoToMeeting\198\g2mlauncher.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Windows\System32\mobsync.exe
C:\Users\jd\AppData\Roaming\MySpace\IM\bin\MySpaceIM.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\AOL\Loader\aolload.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Users\jd\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\jd.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft....k/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft....k/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - (no file)
O2 - BHO: (no name) - {8388F272-9EDA-4F4E-88FD-4711CBA4BA2B} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {60570909-486A-4609-B7AE-CBCAA3831168} - (no file)
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe" -delete
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [DT HPW] C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe -HPW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\Windows\vVX3000.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [GoToMeeting] C:\Program Files\Citrix\GoToMeeting\198\g2mstart.exe "/Trigger RunAtLogon"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: AIM Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - (no file)
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) -
http://ipgweb.cce.hp...oads/msxml4.cabO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\dtsrvc.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP1a\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP1a\RpcSandraSrv.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 8935 bytes
-- Files created between 2008-03-16 and 2008-04-16 -----------------------------
2008-04-12 08:32:34 0 d-------- C:\Users\All Users\WinZip
2008-04-11 01:11:49 0 d-------- C:\Program Files\Citrix
2008-04-10 23:28:56 68096 --a------ C:\Windows\zip.exe
2008-04-10 23:28:56 49152 --a------ C:\Windows\VFind.exe
2008-04-10 23:28:56 212480 --a------ C:\Windows\swxcacls.exe <Not Verified; SteelWerX; SteelWerX Extended Configurator ACLists>
2008-04-10 23:28:56 136704 --a------ C:\Windows\swsc.exe <Not Verified; SteelWerX; SteelWerX Service Controller>
2008-04-10 23:28:56 161792 --a------ C:\Windows\swreg.exe <Not Verified; SteelWerX; SteelWerX Registry Editor>
2008-04-10 23:28:56 98816 --a------ C:\Windows\sed.exe
2008-04-10 23:28:56 80412 --a------ C:\Windows\grep.exe
2008-04-10 23:28:56 73728 --a------ C:\Windows\fdsv.exe <Not Verified; Smallfrogs Studio; >
2008-04-10 23:00:48 0 d-------- C:\Program Files\Panda Security
2008-04-10 22:46:12 0 d-------- C:\Program Files\CCleaner
2008-04-10 03:02:02 0 d-------- C:\Program Files\Wisdom-soft AutoScreenRecorder 3 Pro
2008-04-09 15:42:23 0 d-------- C:\Program Files\Microsoft Silverlight
2008-03-31 14:25:48 823296 --a------ C:\Windows\system32\divx_xx0c.dll <Not Verified; DivX, Inc.; DivX®>
2008-03-31 14:25:48 823296 --a------ C:\Windows\system32\divx_xx07.dll <Not Verified; DivX, Inc.; DivX®>
2008-03-31 14:25:46 802816 --a------ C:\Windows\system32\divx_xx11.dll <Not Verified; DivX, Inc.; DivX?>
2008-03-31 14:25:46 831488 --a------ C:\Windows\system32\divx_xx0a.dll
2008-03-31 14:25:46 682496 --a------ C:\Windows\system32\DivX.dll <Not Verified; DivX, Inc.; DivX®>
2008-03-30 13:38:35 0 dr------- C:\Users\taraandmichelle\Searches
2008-03-30 13:38:29 0 dr------- C:\Users\taraandmichelle\Contacts
2008-03-30 13:38:21 0 dr------- C:\Users\taraandmichelle\Videos
2008-03-30 13:38:21 0 d--hs---- C:\Users\taraandmichelle\Templates
2008-03-30 13:38:21 0 d--hs---- C:\Users\taraandmichelle\Start Menu
2008-03-30 13:38:21 0 d--hs---- C:\Users\taraandmichelle\SendTo
2008-03-30 13:38:21 0 dr------- C:\Users\taraandmichelle\Saved Games
2008-03-30 13:38:21 0 d--hs---- C:\Users\taraandmichelle\Recent
2008-03-30 13:38:21 0 d--hs---- C:\Users\taraandmichelle\PrintHood
2008-03-30 13:38:21 0 dr------- C:\Users\taraandmichelle\Pictures
2008-03-30 13:38:21 786432 --ahs---- C:\Users\taraandmichelle\NTUSER.DAT
2008-03-30 13:38:21 0 d--hs---- C:\Users\taraandmichelle\NetHood
2008-03-30 13:38:21 0 d--hs---- C:\Users\taraandmichelle\My Documents
2008-03-30 13:38:21 0 dr------- C:\Users\taraandmichelle\Music
2008-03-30 13:38:21 0 d--hs---- C:\Users\taraandmichelle\Local Settings
2008-03-30 13:38:21 0 dr------- C:\Users\taraandmichelle\Links
2008-03-30 13:38:21 0 dr------- C:\Users\taraandmichelle\Favorites
2008-03-30 13:38:21 0 dr------- C:\Users\taraandmichelle\Downloads
2008-03-30 13:38:21 0 dr------- C:\Users\taraandmichelle\Documents
2008-03-30 13:38:21 0 dr------- C:\Users\taraandmichelle\Desktop
2008-03-30 13:38:21 0 d--hs---- C:\Users\taraandmichelle\Cookies
2008-03-30 13:38:21 0 d--hs---- C:\Users\taraandmichelle\Application Data
2008-03-30 13:38:21 0 d--h----- C:\Users\taraandmichelle\AppData
2008-03-23 00:13:54 0 d-------- C:\Program Files\Tasker
2008-03-21 13:30:08 3596288 --a------ C:\Windows\system32\qt-dx331.dll
2008-03-21 13:28:54 196608 --a------ C:\Windows\system32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>
2008-03-21 13:28:54 81920 --a------ C:\Windows\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2008-03-21 13:28:20 12288 --a------ C:\Windows\system32\DivXWMPExtType.dll
2008-03-20 17:47:10 0 d-------- C:\Program Files\Common Files\PX Storage Engine
2008-03-20 17:47:01 0 d-------- C:\Program Files\DivX
2008-03-20 17:40:32 0 d-------- C:\Program Files\IrfanView
2008-03-20 17:19:39 203776 --a------ C:\Windows\system32\clrviddc.dll <Not Verified; Iterated Systems, Inc.; ClearVideo Decoder DLL>
2008-03-20 16:59:30 0 d-------- C:\Program Files\Common Files\xing shared
2008-03-20 16:59:17 0 d-------- C:\Program Files\Real
2008-03-20 16:59:13 0 d-------- C:\Program Files\Common Files\Real
2008-03-20 16:54:22 0 d-------- C:\Program Files\FLV to AVI MPEG WMV 3GP MP4 iPod Converter
2008-03-20 16:38:17 0 d-------- C:\Program Files\GustoSoft
-- Find3M Report ---------------------------------------------------------------
2008-04-14 00:59:57 0 d-------- C:\Program Files\WinAce
2008-04-10 22:34:05 3900 --a------ C:\Windows\system32\tmp.reg
2008-04-10 22:28:54 35 --a------ C:\Users\jd\AppData\Roaming\SetValue.bat
2008-04-10 22:28:54 691 --a------ C:\Users\jd\AppData\Roaming\GetValue.vbs
2008-04-09 22:48:40 0 d-------- C:\Program Files\Windows Mail
2008-03-20 17:47:44 0 d-------- C:\Users\jd\AppData\Roaming\DivX
2008-03-20 17:47:10 0 d-------- C:\Program Files\Common Files
2008-03-20 17:08:09 0 d-------- C:\Users\jd\AppData\Roaming\Real
2008-03-20 16:52:25 0 d-------- C:\Users\jd\AppData\Roaming\Download Manager
2008-03-20 16:21:22 0 d-------- C:\Program Files\Yahoo!
2008-03-20 16:21:08 0 d-------- C:\Program Files\The Weather Channel FW
2008-03-19 02:59:07 0 d-------- C:\Program Files\Java
2008-03-14 13:10:25 0 d-------- C:\Program Files\FLVPlayer4Free
2008-03-14 13:06:43 49 --a------ C:\amp.bat
2008-03-12 16:13:29 0 d-------- C:\Program Files\Microsoft LifeCam
2008-03-12 15:08:40 0 d-------- C:\Users\jd\AppData\Roaming\Adobe
2008-03-10 18:16:01 0 d-------- C:\Users\jd\AppData\Roaming\PlayFirst
2008-03-10 18:15:11 0 d-------- C:\Program Files\HP Games
2008-03-03 02:16:32 0 d-------- C:\Users\jd\AppData\Roaming\Macromedia
2008-03-01 23:00:00 0 d-------- C:\Program Files\Common Files\PocketSoft
2008-03-01 22:59:57 0 d-------- C:\Program Files\RedlightCenter
2008-03-01 22:59:54 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-02-29 11:07:53 0 d-------- C:\Users\jd\AppData\Roaming\Home Sweet Home
2008-02-28 20:14:38 0 d-------- C:\Users\jd\AppData\Roaming\funkitron
2008-02-28 02:40:25 31028 --a------ C:\Users\jd\AppData\Roaming\UserTile.png
2008-02-28 02:40:24 0 d-------- C:\Users\jd\AppData\Roaming\PeerNetworking
2008-02-27 00:01:13 0 d-------- C:\Program Files\Microsoft IntelliPoint
2008-02-25 19:57:51 28 --a------ C:\Windows\cecea310h.dat
2008-02-25 19:57:18 0 d-------- C:\Program Files\MMD
2008-02-25 19:46:42 0 d-------- C:\Program Files\Cambrosia Webcam Viewer
2008-02-25 19:01:03 0 d-------- C:\Program Files\Loveline Video Personals
2008-02-25 17:49:30 0 -rahs---- C:\MSDOS.SYS
2008-02-25 17:49:30 0 -rahs---- C:\IO.SYS
2008-02-25 03:58:34 0 d-------- C:\Program Files\Camfrog
2008-02-24 23:35:43 0 d-------- C:\Users\jd\AppData\Roaming\SUPERAntiSpyware.com
2008-02-24 23:35:42 0 d-------- C:\Program Files\SUPERAntiSpyware
2008-02-23 00:21:31 0 d-------- C:\Users\jd\AppData\Roaming\MySpace
2008-02-19 23:33:42 0 d-------- C:\Users\jd\AppData\Roaming\acccore
2008-02-19 08:04:35 0 d-------- C:\Program Files\AIM6
2008-02-19 08:03:17 0 d-------- C:\Program Files\Common Files\AOL
2008-02-19 07:23:34 0 d-------- C:\Users\jd\AppData\Roaming\ArcSoft
2008-02-19 07:19:24 0 d-------- C:\Program Files\ArcSoft
2008-02-19 04:58:16 0 d-------- C:\Program Files\Common Files\ArcSoft
2008-02-19 04:56:21 0 d-------- C:\Program Files\CIF USB Camera
2008-02-18 14:28:34 0 d-------- C:\Users\jd\AppData\Roaming\Mozilla
2008-02-18 14:28:04 0 --a------ C:\Windows\nsreg.dat
2008-02-18 14:18:39 0 d-------- C:\Program Files\Common Files\Java
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8388F272-9EDA-4F4E-88FD-4711CBA4BA2B}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [04/18/2007 08:01 AM]
"KBD"="C:\HP\KBD\KbdStub.EXE" [12/08/2006 09:16 AM]
"OsdMaestro"="C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [02/15/2007 04:59 AM]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [07/12/2007 05:36 PM]
"RtHDVCpl"="RtHDVCpl.exe" [10/25/2007 06:52 AM C:\WINDOWS\RtHDVCpl.exe]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [05/11/2007 04:06 AM]
"SunJavaUpdateReg"="C:\Windows\system32\jureg.exe" [04/07/2007 03:56 AM]
"HP Software Update"="c:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [05/08/2007 05:24 PM]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [03/29/2008 11:37 AM]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [06/11/2007 02:25 AM]
"DT HPW"="C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe" [09/28/2007 03:52 PM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [02/22/2008 04:25 AM]
"Monitor"="C:\Windows\PixArt\PAC207\Monitor.exe" [11/03/2006 11:01 AM]
"IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\ipoint.exe" [11/21/2006 06:09 PM]
"LifeCam"="C:\Program Files\Microsoft LifeCam\LifeExp.exe" [05/17/2007 02:45 PM]
"VX3000"="C:\Windows\vVX3000.exe" [04/10/2007 02:46 PM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [03/20/2008 04:59 PM]
"WPCUMI"="C:\Windows\system32\WpcUmi.exe" [11/02/2006 05:35 AM]
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [03/25/2008 05:07 PM]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [03/25/2008 05:07 PM]
"Persistence"="C:\Windows\system32\igfxpers.exe" [03/25/2008 05:07 PM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [10/18/2007 11:34 AM]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [11/02/2006 05:35 AM]
"Aim6"="" []
"GoToMeeting"="C:\Program Files\Citrix\GoToMeeting\198\g2mstart.exe" [04/11/2008 01:11 AM]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [4/3/2008 11:20:00 AM]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"=2 (0x2)
"DisableRegistryTools"=0 (0x0)
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=1 (0x1)
"HideStartupScripts"=0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"=2 (0x2)
"DontDisplayLogonHoursWarnings"=1 (0x1)
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=1 (0x1)
"HideStartupScripts"=0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalSystemNetworkRestricted hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
C:\Windows\system32\unregmp2.exe /ShowWMP
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
-- End of Deckard's System Scanner: finished at 2008-04-16 01:44:45 ------------