K-Lite Codec Tweak Tool | Log file | Generated at 2008-04-10 20:53:28
##### System Information #####
KLCP: 385 full
OS: Microsoft Windows XP Service Pack 2 (5.01.2600)
DirectX: 9.0c
CPU name: Intel® Pentium® III Mobile CPU 933MHz
CPU speed: 929MHz
Memory: 512MB
Screen size: 1024x768 (32bits)
Video card: Trident Video Accelerator CyberBlade XP Ai1 v6.4022-016L.22ICD, 16MB
Audio card: ALi Audio Wave
##### DirectShow Filters #####
Description: VP6 Decompressor
File name: c:\program files\k-lite codec pack\filters\vp6dec.ax
File version: 6.4.2.0
File size: 327680 bytes
File MD5: 55ca1bff59bded14d855aaa5c5c0a6c1
CLSID: {01CFC007-C263-420A-80DC-2988DA4C6105}
Merit: 00800000 = MERIT_PREFERRED
Description: ffdshow Video Decoder
File name: c:\program files\k-lite codec pack\ffdshow\ffdshow.ax
File version: 1.0.5.1905
File size: 2486272 bytes
File MD5: 4e8e56392622f825da1b1e824df127eb
CLSID: {04FE9017-F873-410E-871E-AB91661A4EF7}
Merit: FF800001
Description: CoreVorbis Audio Decoder
File name: c:\program files\k-lite codec pack\filters\corevorbis.ax
File version: 1.1.0.79
File size: 348160 bytes
File MD5: 734c8cbaf43180a90d28cb650b2d4c67
CLSID: {0835DC4B-AA01-48C3-A42D-FD62C530A3E1}
Merit: 00800000 = MERIT_PREFERRED
Description: ffdshow raw video filter
File name: c:\program files\k-lite codec pack\ffdshow\ffdshow.ax
File version: 1.0.5.1905
File size: 2486272 bytes
File MD5: 4e8e56392622f825da1b1e824df127eb
CLSID: {0B390488-D80F-4A68-8408-48DC199F0E97}
Merit: 00200000 = MERIT_DO_NOT_USE
Description: ffdshow Audio Decoder
File name: c:\program files\k-lite codec pack\ffdshow\ffdshow.ax
File version: 1.0.5.1905
File size: 2486272 bytes
File MD5: 4e8e56392622f825da1b1e824df127eb
CLSID: {0F40E1E5-4F79-4988-B1A9-CC98794E6B55}
Merit: 3FFFFFFF
Description: Mpeg Source
File name: c:\program files\k-lite codec pack\filters\mpegsplitter.ax
File version: 1.0.0.5
File size: 376832 bytes
File MD5: 227ef955cf9baeb6681e4b613d6b0dbb
CLSID: {1365BE7A-C86A-473C-9A41-C0A6E82C9FA3}
Merit: 00200000 = MERIT_DO_NOT_USE
Description: MONOGRAM AMR Splitter
File name: c:\program files\k-lite codec pack\filters\mmamr.ax
File version: 1.0.1.0
File size: 688128 bytes
File MD5: a2680035053554d8a893e806fda79049
CLSID: {24FA7933-FE18-46A9-914A-C2AA0DBACE93}
Merit: 00600000 = MERIT_NORMAL
Description: MP4 Source
File name: c:\program files\k-lite codec pack\filters\mp4splitter.ax
File version: 1.0.0.4
File size: 516096 bytes
File MD5: b4b2261516bc66c0dd8e67d247aba7f3
CLSID: {3CCC052E-BDEE-408A-BEA7-90914EF2964B}
Merit: 00600000 = MERIT_NORMAL
Description: MP4 decoder for player by LG
File name: c:\program files\lg pc suite\lg phone manager\mp4video.ax
File size: 458752 bytes
File MD5: 316933d2b74c227caae54f758bee44c6
CLSID: {3F9491F6-6195-405C-BD50-01CBBBAF8F70}
Merit: 00200000 = MERIT_DO_NOT_USE
Description: FLV Splitter
File name: c:\program files\k-lite codec pack\filters\flvsplitter.ax
File version: 1.0.0.4
File size: 413696 bytes
File MD5: a141df36db114d20546d7e5bb3156cb7
CLSID: {47E792CF-0BBE-4F7A-859C-194B0768650A}
Merit: 00800001 = MERIT_PREFERRED + 1
Description: WavPack Audio Decoder
File name: c:\program files\k-lite codec pack\filters\wavpackdsdecoder.ax
File version: 1.1.0.484
File size: 147456 bytes
File MD5: 7fba60e461326274ff354f7537481027
CLSID: {4B420C26-B393-48B3-8A84-BC60827689E8}
Merit: 00600000 = MERIT_NORMAL
Description: MONOGRAM AMR Decoder
File name: c:\program files\k-lite codec pack\filters\mmamr.ax
File version: 1.0.1.0
File size: 688128 bytes
File MD5: a2680035053554d8a893e806fda79049
CLSID: {50DDA33E-C529-4343-9689-338ADC793BB5}
Merit: 00600000 = MERIT_NORMAL
Description: MONOGRAM Musepack Decoder
File name: c:\program files\k-lite codec pack\filters\mmmpcdec.ax
File version: 0.9.1.2
File size: 315392 bytes
File MD5: 5e301f2da16a47b410739b5a8d848716
CLSID: {555C4774-101E-49D7-8EEC-B9B87F8E1905}
Merit: 00600000 = MERIT_NORMAL
Description: Haali Media Splitter
File name: c:\program files\k-lite codec pack\filters\haali\splitter.ax
File version: 1.7.401.3
File size: 536576 bytes
File MD5: bd84220868b0f11ab817a324ac736a29
CLSID: {55DA30FC-F16B-49FC-BAA5-AE59FC65F82D}
Merit: 00800001 = MERIT_PREFERRED + 1
Description: Haali Media Splitter (AR)
File name: c:\program files\k-lite codec pack\filters\haali\splitter.ax
File version: 1.7.401.3
File size: 536576 bytes
File MD5: bd84220868b0f11ab817a324ac736a29
CLSID: {564FD788-86C9-4444-971E-CC4A243DA150}
Merit: 00400000 = MERIT_UNLIKELY
Description: MP4 Splitter
File name: c:\program files\k-lite codec pack\filters\mp4splitter.ax
File version: 1.0.0.4
File size: 516096 bytes
File MD5: b4b2261516bc66c0dd8e67d247aba7f3
CLSID: {61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
Merit: 00600001 = MERIT_NORMAL + 1
Description: File Source (Monkey Audio)
File name: c:\program files\k-lite codec pack\filters\monkeysource.ax
File size: 177152 bytes
File MD5: e14a141f614303c331cbdf38fc15b6cf
CLSID: {66EA14E6-E2B3-433D-923E-EE401CADBBD9}
Merit: 00400000 = MERIT_UNLIKELY
Description: madFlac Decoder
File name: c:\program files\k-lite codec pack\filters\madflac.ax
File version: 1.7.0.0
File size: 490496 bytes
File MD5: f2cdb3997f49c4b141fc4143dc0732d0
CLSID: {6B257121-CBB6-46B3-ABFA-B14DFA98C4A6}
Merit: 00600000 = MERIT_NORMAL
Description: Haali Video Renderer
File name: c:\program files\k-lite codec pack\filters\haali\dxr.dll
File size: 245248 bytes
File MD5: 0eaa89fd72f5cf8f1c9c3839c9848b8e
CLSID: {760A8F35-97E7-479D-AAF5-DA9EFF95D751}
Merit: 00200000 = MERIT_DO_NOT_USE
Description: DivX Decoder Filter
File name: c:\program files\k-lite codec pack\filters\divxdec.ax
File version: 6.8.0.0
File size: 630784 bytes
File MD5: c743c68de5fe23876ee601e1e1c5a637
CLSID: {78766964-0000-0010-8000-00AA00389B71}
Merit: FF800000
Description: FLV4 Video Decoder
File name: c:\program files\k-lite codec pack\filters\flvsplitter.ax
File version: 1.0.0.4
File size: 413696 bytes
File MD5: a141df36db114d20546d7e5bb3156cb7
CLSID: {7CEEEECF-3FEE-4548-B529-C254CAF4D182}
Merit: 00400000 = MERIT_UNLIKELY
Description: CyberLink Video/SP Decoder (PDVD7)
File name: c:\program files\k-lite codec pack\filters\clvsd.ax
File version: 8.1.0.1317
File size: 877960 bytes
File MD5: 0fa24611fd0ce613d3ab2aa46132f93d
CLSID: {8ACD52ED-9C2D-4008-9129-DCE955D86065}
Merit: 00602000
Description: Haali Simple Media Splitter
File name: c:\program files\k-lite codec pack\filters\haali\splitter.ax
File version: 1.7.401.3
File size: 536576 bytes
File MD5: bd84220868b0f11ab817a324ac736a29
CLSID: {8F43B7D9-9D6B-4F48-BE18-4D787C795EEA}
Merit: 00200000 = MERIT_DO_NOT_USE
Description: DirectVobSub
File name: c:\program files\k-lite codec pack\filters\vsfilter.dll
File version: 1.0.1.4
File size: 962560 bytes
File MD5: 37f04f8fcd329a132bfbf146842fa056
CLSID: {93A22E7A-5091-45EF-BA61-6DA26156A5D0}
Merit: 00200000 = MERIT_DO_NOT_USE
Description: Avi Splitter
File name: c:\program files\k-lite codec pack\filters\avisplitter.ax
File version: 1.0.0.9
File size: 380928 bytes
File MD5: 531c2b0f8688b2173baf3c980a1af022
CLSID: {9736D831-9D6C-4E72-B6E7-560EF9181001}
Merit: 00600001 = MERIT_NORMAL + 1
Description: DirectVobSub (auto-loading version)
File name: c:\program files\k-lite codec pack\filters\vsfilter.dll
File version: 1.0.1.4
File size: 962560 bytes
File MD5: 37f04f8fcd329a132bfbf146842fa056
CLSID: {9852A670-F845-491B-9BE6-EBD841B8A613}
Merit: 00800002 = MERIT_PREFERRED + 2
Description: MONOGRAM AMR Encoder
File name: c:\program files\k-lite codec pack\filters\mmamr.ax
File version: 1.0.1.0
File size: 688128 bytes
File MD5: a2680035053554d8a893e806fda79049
CLSID: {99735894-CAF4-488B-8275-B8CB1998216E}
Merit: 00600000 = MERIT_NORMAL
Description: Fraunhofer Audio Decoder
File name: c:\windows\system32\dvdaudio.ax
File version: 1.0.0.0
File size: 65536 bytes
File MD5: 17b00f8763005491968cee615a91f957
CLSID: {9BC1B780-85E3-11D2-98D0-0080C84E9C39}
Merit: 00601000
Description: Fraunhofer Video Decoder
File name: c:\windows\system32\dvdvideo.ax
File version: 2.0.0.0
File size: 86528 bytes
File MD5: 6603d23d14d736141bc56b58b7b3cb8a
CLSID: {9BC1B781-85E3-11D2-98D0-0080C84E9C39}
Merit: 005FF000
Description: Haali Matroska Muxer
File name: c:\program files\k-lite codec pack\filters\haali\splitter.ax
File version: 1.7.401.3
File size: 536576 bytes
File MD5: bd84220868b0f11ab817a324ac736a29
CLSID: {A28F324B-DDC5-4999-AA25-D3A7E25EF7A8}
Merit: 00200000 = MERIT_DO_NOT_USE
Description: AC3Filter
File name: c:\program files\k-lite codec pack\filters\ac3filter.ax
File version: 1.3.1.0
File size: 577536 bytes
File MD5: 53edf42c1cd35c364084878f2639063a
CLSID: {A753A1EC-973E-4718-AF8E-A3F554D45C44}
Merit: 40000000
Description: MONOGRAM AMR Mux
File name: c:\program files\k-lite codec pack\filters\mmamr.ax
File version: 1.0.1.0
File size: 688128 bytes
File MD5: a2680035053554d8a893e806fda79049
CLSID: {AAA4AACD-FD95-4240-9C45-9EB98E5DAC52}
Merit: 00600000 = MERIT_NORMAL
Description: DC-Bass Source
File name: c:\program files\k-lite codec pack\filters\dcbasssource.ax
File version: 1.1.1.0
File size: 245760 bytes
File MD5: 157967583347549671ef8ee77a469890
CLSID: {ABE7B1D9-4B3E-4ACD-A0D1-92611D3A4492}
Merit: 00400000 = MERIT_UNLIKELY
Description: ffdshow Audio Processor
File name: c:\program files\k-lite codec pack\ffdshow\ffdshow.ax
File version: 1.0.5.1905
File size: 2486272 bytes
File MD5: 4e8e56392622f825da1b1e824df127eb
CLSID: {B86F6BEE-E7C0-4D03-8D52-5B4430CF6C88}
Merit: 00200000 = MERIT_DO_NOT_USE
Description: VP7 Decompressor
File name: c:\program files\k-lite codec pack\filters\vp7dec.ax
File version: 7.0.10.0
File size: 237568 bytes
File MD5: 085574f70323b1842f076e6de899a78b
CLSID: {C204438D-6E1A-4309-B09C-0C0F749863AF}
Merit: 00800000 = MERIT_PREFERRED
Description: MONOGRAM Musepack Splitter
File name: c:\program files\k-lite codec pack\filters\mmmpcdmx.ax
File version: 0.3.1.2
File size: 315392 bytes
File MD5: cfd49fa8862fe327e1e3e79de3fbd6a7
CLSID: {C3E2E983-0198-4F73-9E5C-8365BB4C4131}
Merit: 00600000 = MERIT_NORMAL
Description: madFlac Source
File name: c:\program files\k-lite codec pack\filters\madflac.ax
File version: 1.7.0.0
File size: 490496 bytes
File MD5: f2cdb3997f49c4b141fc4143dc0732d0
CLSID: {C52908F0-1C06-4C0D-A4CD-3D10EA51C757}
Merit: 00600000 = MERIT_NORMAL
Description: FLV Source
File name: c:\program files\k-lite codec pack\filters\flvsplitter.ax
File version: 1.0.0.4
File size: 413696 bytes
File MD5: a141df36db114d20546d7e5bb3156cb7
CLSID: {C9ECE7B3-1D8E-41F5-9F24-B255DF16C087}
Merit: 00600001 = MERIT_NORMAL + 1
Description: Avi Source
File name: c:\program files\k-lite codec pack\filters\avisplitter.ax
File version: 1.0.0.9
File size: 380928 bytes
File MD5: 531c2b0f8688b2173baf3c980a1af022
CLSID: {CEA8DEFF-0AF7-4DB9-9A38-FB3C3AEFC0DE}
Merit: 00600001 = MERIT_NORMAL + 1
Description: MPEG4 Video Splitter
File name: c:\program files\k-lite codec pack\filters\mp4splitter.ax
File version: 1.0.0.4
File size: 516096 bytes
File MD5: b4b2261516bc66c0dd8e67d247aba7f3
CLSID: {D3D9D58B-45B5-48AB-B199-B8C40560AEC7}
Merit: 00600000 = MERIT_NORMAL
Description: WavPack Audio Splitter
File name: c:\program files\k-lite codec pack\filters\wavpackdssplitter.ax
File version: 1.1.0.323
File size: 86016 bytes
File MD5: 45135399339a0792a7d2b005f3495d81
CLSID: {D8CF6A42-3E09-4922-A452-21DFF10BEEBA}
Merit: 00600000 = MERIT_NORMAL
Description: ffdshow subtitles filter
File name: c:\program files\k-lite codec pack\ffdshow\ffdshow.ax
File version: 1.0.5.1905
File size: 2486272 bytes
File MD5: 4e8e56392622f825da1b1e824df127eb
CLSID: {DBF9000E-F08C-4858-B769-C914A0FBB1D7}
Merit: 00200000 = MERIT_DO_NOT_USE
Description: Mpeg Splitter
File name: c:\program files\k-lite codec pack\filters\mpegsplitter.ax
File version: 1.0.0.5
File size: 376832 bytes
File MD5: 227ef955cf9baeb6681e4b613d6b0dbb
CLSID: {DC257063-045F-4BE2-BD5B-E12279C464F0}
Merit: 00400001 = MERIT_UNLIKELY + 1
Description: MPEG4 Video Source
File name: c:\program files\k-lite codec pack\filters\mp4splitter.ax
File version: 1.0.0.4
File size: 516096 bytes
File MD5: b4b2261516bc66c0dd8e67d247aba7f3
CLSID: {E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
Merit: 00600000 = MERIT_NORMAL
Description: Haali Video Sink
File name: c:\program files\k-lite codec pack\filters\haali\splitter.ax
File version: 1.7.401.3
File size: 536576 bytes
File MD5: bd84220868b0f11ab817a324ac736a29
CLSID: {F13D3732-96BD-4108-AFEB-E85F68FF64DC}
Merit: 00200000 = MERIT_DO_NOT_USE
Description: AC3File
File name: c:\program files\k-lite codec pack\filters\ac3file.ax
File size: 77824 bytes
File MD5: 617d8088a67f8a1ab391e42b870d1b54
CLSID: {F7380D4C-DE45-4F03-9209-15EBA8552463}
Merit: 00600000 = MERIT_NORMAL
(A total of 150 filters, 46 shown, 104 hidden)
##### Default source filters #####
.3gp {55DA30FC-F16B-49FC-BAA5-AE59FC65F82D} Haali Media Splitter
.aac {ABE7B1D9-4B3E-4ACD-A0D1-92611D3A4492} DC-Bass Source
.ac3 {F7380D4C-DE45-4F03-9209-15EBA8552463} AC3File
.alac {ABE7B1D9-4B3E-4ACD-A0D1-92611D3A4492} DC-Bass Source
.ape {66EA14E6-E2B3-433D-923E-EE401CADBBD9} File Source (Monkey Audio)
.apl {66EA14E6-E2B3-433D-923E-EE401CADBBD9} File Source (Monkey Audio)
.bmp {7DF62B50-6843-11D2-9EEB-006008039E37} Generate Still Video
.dib {7DF62B50-6843-11D2-9EEB-006008039E37} Generate Still Video
.dts {F7380D4C-DE45-4F03-9209-15EBA8552463} AC3File
.dvr-ms {C9F5FE02-F851-4eb5-99EE-AD602AF1E619} StreamBufferSource
.flac {C52908F0-1C06-4C0D-A4CD-3D10EA51C757} madFlac Source
.flv {C9ECE7B3-1D8E-41F5-9F24-B255DF16C087} FLV Source
.gif {7DF62B50-6843-11D2-9EEB-006008039E37} Generate Still Video
.hdmov {55DA30FC-F16B-49FC-BAA5-AE59FC65F82D} Haali Media Splitter
.jfif {7DF62B50-6843-11D2-9EEB-006008039E37} Generate Still Video
.jpe {7DF62B50-6843-11D2-9EEB-006008039E37} Generate Still Video
.jpeg {7DF62B50-6843-11D2-9EEB-006008039E37} Generate Still Video
.jpg {7DF62B50-6843-11D2-9EEB-006008039E37} Generate Still Video
.m3u {e436ebb5-524f-11ce-9f53-0020af0ba770} File Source (Async.)
.m4a {ABE7B1D9-4B3E-4ACD-A0D1-92611D3A4492} DC-Bass Source
.mka {55DA30FC-F16B-49FC-BAA5-AE59FC65F82D} Haali Media Splitter
.mks {55DA30FC-F16B-49FC-BAA5-AE59FC65F82D} Haali Media Splitter
.mkv {55DA30FC-F16B-49FC-BAA5-AE59FC65F82D} Haali Media Splitter
.mov {3CCC052E-BDEE-408A-BEA7-90914EF2964B} MP4 Source
.mp3 {E436EBB5-524F-11CE-9F53-0020AF0BA770} File Source (Async.)
.mp4 {55DA30FC-F16B-49FC-BAA5-AE59FC65F82D} Haali Media Splitter
.ogg {55DA30FC-F16B-49FC-BAA5-AE59FC65F82D} Haali Media Splitter
.ogm {55DA30FC-F16B-49FC-BAA5-AE59FC65F82D} Haali Media Splitter
.tga {7DF62B50-6843-11D2-9EEB-006008039E37} Generate Still Video
.tta {ABE7B1D9-4B3E-4ACD-A0D1-92611D3A4492} DC-Bass Source
.wv {E436EBB5-524F-11CE-9F53-0020AF0BA770} File Source (Async.)
.wvc {E436EBB5-524F-11CE-9F53-0020AF0BA770} File Source (Async.)
##### ICM Class Manager #####
Description: ffdshow video encoder
File name: c:\program files\k-lite codec pack\ffdshow\ffdshow.ax
File version: 1.0.5.1905
File size: 2486272 bytes
File MD5: 4e8e56392622f825da1b1e824df127eb
CLSID: {4DB2B5D9-4556-4340-B189-AD20110D953F} (ffdshow video encoder)
Merit: 00100000 = MERIT_SW_COMPRESSOR
(A total of 4 filters, 1 shown, 3 hidden)
##### ACM and VFW Codecs #####
Description: DivX Pro 6.8.0
ID: VIDC.DIVX
File name: C:\WINDOWS\system32\divx.dll
File version: 6.8.0.14
File size: 682496 bytes
File MD5: 5e1e3db1e221217a9d8741df89b739a1
Description: Xvid MPEG-4 Video Codec v1.2-dev
ID: VIDC.XVID
File name: C:\WINDOWS\system32\xvidvfw.dll
File size: 159839 bytes
File MD5: 8e2eefe8b9de358055ce19318e622148
Description: <none>
ID: VIDC.YV12
File name: C:\WINDOWS\system32\yv12vfw.dll
File version: 1.2.0.0
File size: 217088 bytes
File MD5: dd602c1fba3a3e962627569c9e10af7c
Description: AC-3 ACM Codec
ID: msacm.ac3acm
File name: C:\WINDOWS\system32\ac3acm.acm
File version: 1.40.0.0
File size: 118784 bytes
File MD5: d95393b383fb3db265836c84b53892a3
Description: Lame ACM MP3 CODEC v3.97b2
ID: msacm.lameacm
File name: C:\WINDOWS\system32\lameacm.acm
File version: 0.9.1.0
File size: 389120 bytes
File MD5: 5c7769b696513302c31253c7e3f001c4
Description: ffdshow video encoder
ID: VIDC.FFDS
File name: C:\WINDOWS\system32\ff_vfw.dll
File size: 7680 bytes
File MD5: f7827b011e09385d854c4a467d5d696d
(A total of 30 codecs, 6 shown, 24 hidden)
##### DirectShow Media Objects #####
(A total of 31 DMO, 0 shown, 31 hidden)
Deckard's System Scanner v20071014.68
Run by Owner on 2008-04-11 20:31:47
Computer is in Normal Mode.
--------------------------------------------------------------------------------
Percentage of Memory in Use: 77% (more than 75%).
Total Physical Memory: 495 MiB (512 MiB recommended).
-- HijackThis (run as Owner.exe) -----------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:32:15 PM, on 11/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe
C:\Program Files\Maxtor\Utils\SyncServices.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\D-Link\DSL-200\dslstat.exe
C:\Program Files\D-Link\DSL-200\dslagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\Power DVD Player\PowerDVDPlayer.exe
C:\WINDOWS\system32\msfeedssync.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\DECCHECK\DECCHECK.exe
C:\Documents and Settings\Owner\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Owner.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.defaulthomepage.info
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.defaulthomepage.info
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: WinWSD Toolbar Helper - {AFC482CE-DC40-497A-AE10-681C072F6F6A} - C:\Program Files\WinWSD Toolbar\v3.2.0.0\WinWSD_Toolbar.dll
O3 - Toolbar: WinWSD Toolbar - {F1273B21-0B77-4481-BFB9-0A3C399BE3FE} - C:\Program Files\WinWSD Toolbar\v3.2.0.0\WinWSD_Toolbar.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [DSLSTATEXE] C:\Program Files\D-Link\DSL-200\dslstat.exe icon
O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\D-Link\DSL-200\dslagent.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Power DVD Player] "C:\Program Files\Power DVD Player\PowerDVDPlayer.exe" hmw
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: AutorunsDisabled
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: AutorunsDisabled
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{23988DD8-994F-47E0-ABC1-EA1130D8936D}: Domain = 0
O17 - HKLM\System\CCS\Services\Tcpip\..\{E5F23AA7-B1CF-4F35-818A-E0072C90180A}: NameServer = 123.2.6.197 122.148.1.5
O17 - HKLM\System\CS1\Services\Tcpip\..\{23988DD8-994F-47E0-ABC1-EA1130D8936D}: Domain = 0
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O20 - Winlogon Notify: AutorunsDisabled - C:\WINDOWS\
O23 - Service: AVG Anti-Spyware Guard - Unknown owner - C:\Downloads\AVG Anti-Spyware 7.5\guard.exe (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MaxBackServiceInt - Unknown owner - C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe
O23 - Service: MaxSyncService (NTService1) - - C:\Program Files\Maxtor\Utils\SyncServices.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
--
End of file - 6745 bytes
-- Files created between 2008-03-11 and 2008-04-11 -----------------------------
2008-04-11 17:24:09 0 d-------- C:\Program Files\Crawler
2008-04-10 22:18:42 0 d-------- C:\Program Files\ReClock
2008-04-10 22:02:40 0 d-------- C:\Program Files\Power DVD Player
2008-04-10 01:05:51 0 d-------- C:\symbols
2008-04-10 00:44:51 164352 --a------ C:\WINDOWS\system32\unrar.dll
2008-04-10 00:44:44 217088 --a------ C:\WINDOWS\system32\yv12vfw.dll <Not Verified; www.helixcommunity.org; Helix YV12 YUV Codec>
2008-04-10 00:44:44 755027 --a------ C:\WINDOWS\system32\xvidcore.dll
2008-04-10 00:44:43 159839 --a------ C:\WINDOWS\system32\xvidvfw.dll
2008-04-10 00:44:42 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2008-04-10 00:44:42 81920 --a------ C:\WINDOWS\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2008-04-10 00:44:40 682496 --a------ C:\WINDOWS\system32\divx.dll <Not Verified; DivX, Inc.; DivX®>
2008-04-10 00:44:38 7680 --a------ C:\WINDOWS\system32\ff_vfw.dll
2008-04-10 00:44:33 0 d-------- C:\Program Files\K-Lite Codec Pack
2008-04-09 20:39:00 0 d-------- C:\Program Files\DECCHECK
2008-04-09 13:29:54 0 d-------- C:\WINDOWS\Sun
2008-04-09 13:29:53 0 d-------- C:\Documents and Settings\Owner\Application Data\Sun
2008-04-09 04:36:24 0 d-------- C:\Downloads
2008-04-07 00:10:49 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-04-07 00:10:21 50688 --a------ C:\WINDOWS\system32\wbhelp2.dll <Not Verified; Stardock.Net, Inc; WindowBlinds for Win32 x86 machines>
2008-04-07 00:10:16 0 d-------- C:\Program Files\DAP
2008-04-07 00:08:55 0 d-------- C:\Program Files\DFX
2008-04-06 18:34:14 0 dr------- C:\Program Files\Winamp
2008-04-06 18:34:14 0 d-------- C:\Documents and Settings\Owner\Application Data\Winamp
2008-03-30 16:14:33 0 d-------- C:\Program Files\Windows Media Connect 2
2008-03-30 16:09:54 0 d-------- C:\WINDOWS\system32\drivers\UMDF
2008-03-30 13:44:40 0 dr------- C:\Program Files\InterActual
2008-03-29 17:55:36 0 d-------- C:\Documents and Settings\Owner\.gimp-2.2
2008-03-19 21:10:13 947270 --a------ C:\Program Files\flybu.exe <Not Verified; FileSubmit; flybu>
2008-03-19 17:53:14 0 d-------- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2008-03-18 23:36:13 0 dr------- C:\Program Files\Autoruns
2008-03-18 21:22:47 0 d-------- C:\Documents and Settings\Owner\Application Data\WebStripper
2008-03-18 21:22:40 0 dr------- C:\Program Files\Solent
2008-03-18 20:11:32 0 dr------- C:\Program Files\ProcessExplorer
2008-03-16 20:34:06 0 d-------- C:\Program1
2008-03-16 17:37:56 0 d-------- C:\Documents and Settings\Owner\Application Data\Ethereal
2008-03-16 13:25:30 0 d-------- C:\Program Files\Ethereal
2008-03-16 13:22:06 0 d-------- C:\Program Files\WinPcap
2008-03-16 13:21:49 0 d-------- C:\Program Files\AirSnare
2008-03-16 13:04:33 0 d-------- C:\Program Files\Java
2008-03-16 12:58:49 0 d-------- C:\Program Files\Common Files\Java
2008-03-16 11:47:29 0 d-------- C:\Documents and Settings\Owner\Application Data\Skype
2008-03-16 11:17:13 0 dr------- C:\Program Files\Skype
2008-03-16 11:17:12 0 d-------- C:\Program Files\Common Files\Skype
2008-03-16 11:16:53 0 d-------- C:\Documents and Settings\All Users\Application Data\Skype
2008-03-14 05:21:31 0 d-------- C:\Documents and Settings\Owner\Application Data\Sereniti
2008-03-14 01:34:04 227052 --a------ C:\WINDOWS\WinWSD_Toolbar_Uninstaller_4725.exe <Not Verified; Attila Keszi; WinWSD>
2008-03-14 01:34:03 0 d-------- C:\Program Files\WinWSD Toolbar
2008-03-14 01:33:58 0 d-------- C:\Program Files\WebSite Downloader for Windows
2008-03-13 12:21:00 0 d-------- C:\Documents and Settings\Owner\Application Data\Talkback
2008-03-13 02:38:14 0 d-------- C:\Program Files\Inquisitor
-- Find3M Report ---------------------------------------------------------------
2008-04-11 17:22:29 0 d-------- C:\Documents and Settings\Owner\Application Data\AVG7
2008-04-10 03:47:09 0 d-------- C:\Program Files\Common Files
2008-04-10 03:47:09 0 d-------- C:\Program Files\Common Files\InstallShield
2008-04-10 02:35:53 0 d-------- C:\Program Files\Setups (Various Progs)
2008-04-10 01:46:43 0 dr------- C:\Program Files\SpywareBlaster
2008-04-10 01:15:58 0 dr------- C:\Program Files\AVG Anti-Spyware 7.5
2008-03-30 22:34:21 0 d-------- C:\Documents and Settings\Owner\Application Data\IcoFX
2008-03-26 23:21:49 0 d-------- C:\Program Files\SUPERAntiSpyware
2008-03-25 23:50:03 0 dr------- C:\Program Files\QuickTime
2008-03-25 23:49:04 0 dr------- C:\Program Files\SIM editor
2008-03-25 23:48:03 0 dr------- C:\Program Files\Recuva
2008-03-25 23:43:05 0 dr------- C:\Program Files\CCleaner
2008-03-25 23:42:24 0 dr------- C:\Program Files\Folder Icon Changer
2008-03-25 23:41:19 0 dr------- C:\Program Files\IrfanView
2008-03-25 23:36:51 0 dr------- C:\Program Files\GIMP-2.0
2008-03-25 23:36:08 0 dr------- C:\Program Files\GIMPshop
2008-03-25 23:31:17 0 dr------- C:\Program Files\IcoFX 1.5
2008-03-22 16:48:37 0 dr------- C:\Program Files\Maxtor
2008-03-22 16:29:57 0 d---s---- C:\Program Files\Paint Shop Pro 6
2008-03-20 18:23:09 0 dr------- C:\Program Files\CursorXP
2008-03-18 12:32:51 41083 --a------ C:\Program Files\mozillahistoryview1.zip
2008-03-07 19:18:25 0 d-------- C:\Program Files\RecvMngr
2008-03-07 11:37:25 0 d-------- C:\Program Files\MyPlayCity Data Recovery
2008-03-07 11:34:38 0 d-------- C:\Program Files\WinHTTrack
2008-02-28 23:00:10 0 d-------- C:\Program Files\.gimp-2.2
2008-02-27 04:09:27 817 --a------ C:\WINDOWS\system32\unins000.dat
2008-02-27 04:08:57 0 d-------- C:\Program Files\WallpaperToy
2008-02-27 02:58:38 0 d-------- C:\Program Files\RegCure
2008-02-19 01:46:54 0 d-------- C:\Program Files\LG PC Suite
2008-02-19 01:06:46 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-02-15 19:46:46 0 d-------- C:\Documents and Settings\Owner\Application Data\Help
2008-02-15 19:01:14 0 d-------- C:\Program Files\Inkscape
2008-02-15 14:28:47 0 d-------- C:\Documents and Settings\Owner\Application Data\TrueCrypt
2008-02-15 04:22:34 0 d-------- C:\Program Files\TrueCrypt
2008-02-15 01:47:21 0 d-------- C:\Program Files\Foxit Software
2008-02-15 00:53:52 0 d-------- C:\Documents and Settings\Owner\Application Data\Inkscape
2008-02-14 17:57:57 0 d-------- C:\Program Files\Common Files\GTK
2008-02-13 05:42:02 0 d-------- C:\Documents and Settings\Owner\Application Data\LG Electronics
2008-02-11 03:01:02 0 d-------- C:\Documents and Settings\Owner\Application Data\OpenOffice.org2
2008-02-11 01:27:01 0 d-------- C:\Program Files\Deckard
2008-02-08 21:20:00 234048 --a------ C:\WINDOWS\Harry Potter Castle Screen Save.scr <Not Verified; MacSourcery; ScreenTime for Flash>
2008-02-08 21:20:00 482772 --a------ C:\WINDOWS\Harry Potter Castle Screen Save.exe <Not Verified; Macromedia, Inc.; Flash 5.0>
2008-02-08 21:20:00 40960 --a------ C:\WINDOWS\Harry Potter Castle Screen Save.dll <Not Verified; MacSourcery; Saver DLL>
2008-02-08 21:20:00 18192 --a------ C:\WINDOWS\Harry Potter Castle Screen Save.dat <Not Verified; Microsoft Corporation; Microsoft® Windows NT Operating System>
2008-02-08 20:39:02 1158 --a------ C:\WINDOWS\mozver.dat
2008-01-30 11:29:01 0 --a------ C:\WINDOWS\nsreg.dat
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AFC482CE-DC40-497A-AE10-681C072F6F6A}]
14/03/2008 01:34 AM 798720 --a------ C:\Program Files\WinWSD Toolbar\v3.2.0.0\WinWSD_Toolbar.dll
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{F1273B21-0B77-4481-BFB9-0A3C399BE3FE}"= C:\Program Files\WinWSD Toolbar\v3.2.0.0\WinWSD_Toolbar.dll [14/03/2008 01:34 AM 798720]
[-HKEY_CLASSES_ROOT\CLSID\{F1273B21-0B77-4481-BFB9-0A3C399BE3FE}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [22/01/2008 11:57 AM]
"DSLSTATEXE"="C:\Program Files\D-Link\DSL-200\dslstat.exe" [12/12/2005 05:44 PM]
"DSLAGENTEXE"="C:\Program Files\D-Link\DSL-200\dslagent.exe" [25/08/2005 07:47 PM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [04/08/2004 10:00 PM]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" []
"Power DVD Player"="C:\Program Files\Power DVD Player\PowerDVDPlayer.exe" [06/09/2007 05:28 PM]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce]
"DDP"=
C:\Documents and Settings\Owner\Start Menu\Programs\Startup\
ERUNT AutoBackup.lnk - C:\Program Files\ERUNT\AUTOBACK.EXE [20/10/2005 12:04:08 PM]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [23/10/2006 12:01:50 AM]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [20/12/2006 01:55 PM 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AutorunsDisabled]
wlnotify.dll 04/08/2004 10:00 PM 92672 C:\WINDOWS\system32\wlnotify.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 nwprovau
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5aa75321-d140-11dc-b9f6-00179a300101}]
AutoRun\command- F:\LaunchU3.exe -a
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{907c9640-a6ec-11dc-b9b1-00022d36625d}]
play\Command- "C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a87d5011-0e40-11dc-8add-806d6172696f}]
AutoRun\command- D:\setup.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e1bef371-f23f-11da-919d-806d6172696f}]
AutoRun\command- D:\setup.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f0ceee00-a4a2-11dc-b9a6-00022d36625d}]
AutoRun\command- F:\setupSNK.exe
-- End of Deckard's System Scanner: finished at 2008-04-11 20:32:56 ------------