hello. i did the first part but cant seem to get the Kaspersky WebScanner to work..error message come up :
starting java applet has failed please go online to use this program.wells heres the contents of main.txt and extra.txt.
Deckard's System Scanner v20071014.68
Run by Soo on 2008-06-19 15:38:54
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- Last 5 Restore Point(s) --
12: 2008-06-18 08:28:03 UTC - RP311 - Windows Defender Checkpoint
11: 2008-06-18 07:25:36 UTC - RP309 - Windows Update
10: 2008-06-17 09:28:17 UTC - RP308 - Scheduled Checkpoint
9: 2008-06-16 11:53:29 UTC - RP307 - Scheduled Checkpoint
8: 2008-06-15 09:55:08 UTC - RP306 - Scheduled Checkpoint
-- First Restore Point --
1: 2008-06-10 07:57:29 UTC - RP299 - Scheduled Checkpoint
Backed up registry hives.
Performed disk cleanup.
-- HijackThis (run as Soo.exe) -------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:40:57, on 19/06/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Windows\system32\AERTSrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Windows\system32\nPStarterSVC.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\system32\npnj5Agent.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\rundll32.exe
C:\Windows\vsnp2std.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\Explorer.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Users\Soo\Downloads\dss.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\conime.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Soo.exe
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [dscactivate] c:\dell\dsca.exe 3
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Korean IME Migration] C:\PROGRA~1\COMMON~1\MICROS~1\IME12\IMEKR\IMKRMIG.EXE
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [tsnp2std] C:\Windows\tsnp2std.exe
O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\Soo\AppData\Local\Temp\geBrpoOe.dll,#1
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\Soo\AppData\Local\Temp\byXRifgF.dll,c
O4 - HKCU\..\Run: [BM45ff321e] Rundll32.exe "C:\Users\Soo\AppData\Local\Temp\nmvigyyd.dll",s
O4 - HKCU\..\Run: [46cc0182] rundll32.exe "C:\Users\Soo\AppData\Local\Temp\dllnpkcx.dll",b
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O15 - ESC Trusted Zone:
http://*.update.microsoft.comO16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://gfx1.hotmail....NPUplden-gb.cabO16 - DPF: {51B1D5ED-67DC-43F0-A3F8-8502F1A5E404} (nPCom2 Control) -
http://update.nprote...d/npstarter.cabO16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) -
http://download.divx...owserPlugin.cabO16 - DPF: {7E9FDB80-5316-11D4-B02C-00C04F0CD404} -
http://download.soft.../xw_install.cabO18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Windows\system32\AERTSrv.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: nProtect Starter (nPStarterSVC) - INCA Internet Co., Ltd. - C:\Windows\system32\nPStarterSVC.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
--
End of file - 8865 bytes
-- File Associations -----------------------------------------------------------
.cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%*.reg - regfile - shell\open\command - regedit.exe "%1" %*.scr - scrfile - shell\open\command - "%1" %*-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
All drivers whitelisted.
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
R2 nPStarterSVC (nProtect Starter) - c:\windows\system32\npstartersvc.exe <Not Verified; INCA Internet Co., Ltd.; nProtect Netizen System Service>
S3 stllssvr - "c:\program files\common files\surething shared\stllssvr.exe" <Not Verified; MicroVision Development, Inc.; SureThing CD Labeler>
-- Device Manager: Disabled ----------------------------------------------------
No disabled devices found.
-- Scheduled Tasks -------------------------------------------------------------
2008-06-19 12:50:35 414 --ah----- C:\Windows\Tasks\User_Feed_Synchronization-{82E3D4F3-D41D-495A-B439-DE56E6FD9389}.job
-- Files created between 2008-05-19 and 2008-06-19 -----------------------------
2008-06-06 16:52:30 0 d--h----- C:\XecureSSL
2008-06-06 16:52:30 0 d--h----- C:\Windows\yessign
2008-06-06 16:52:30 0 d-------- C:\Program Files\NPKI
2008-06-06 16:52:19 4102 --a------ C:\Windows\system32\teexcept.dat
2008-06-06 16:52:18 155723 --a------ C:\Windows\system32\TeCtrl.dll <Not Verified; INCA Internet Co., Ltd.; TeCtrl>
2008-06-06 16:52:18 86016 --a------ C:\Windows\system32\npnuninst.exe <NPNUNI~1.EXE> <Not Verified; INCAInternet; npnuninst>
2008-06-06 16:52:18 2016539 --a------ C:\Windows\system32\npmonz.exe <Not Verified; INCA Internet Co., Ltd; >
2008-06-06 16:52:18 286720 --a------ C:\Windows\system32\npidsx.dll <Not Verified; INCA Internet Co., Ltd.; nProtect IDS Core Driver Management Dll>
2008-06-06 16:52:18 47048 --a------ C:\Windows\system32\npids4.sys <Not Verified; INCA Internet Co., Ltd.; nProtect IDS Core Driver>
2008-06-06 16:52:18 33792 --a------ C:\Windows\system32\npids.sys <Not Verified; INCA Internet Co., Ltd.; nProtect IDS Core Driver>
2008-06-06 16:52:18 270336 --a------ C:\Windows\system32\npids.dll <Not Verified; INCA Internet Co., Ltd.; nProtect IDS Core Driver Management Dll>
2008-06-06 16:52:18 50824 --a------ C:\Windows\system32\npfwflt4.sys <Not Verified; INCA Internet Co., Ltd.; nProtect Firewall Filter Driver>
2008-06-06 16:52:18 31488 --a------ C:\Windows\system32\npfwflt.sys <Not Verified; INCA Internet Co., Ltd.; nProtect Firewall Filter Driver>
2008-06-06 16:52:18 118868 --a------ C:\Windows\system32\npfwflt.dll <Not Verified; INCA Internet Co., Ltd.; nProtect Firewall Filter Driver Management Dll>
2008-06-06 16:52:18 62682 --a------ C:\Windows\system32\Npfw4.sys <Not Verified; INCA Internet Co., Ltd.; nProtect Firewall Core Driver>
2008-06-06 16:52:18 44928 --a------ C:\Windows\system32\Npfw.sys <Not Verified; INCA Internet Co., Ltd.; nProtect Firewall Core Driver>
2008-06-06 16:52:18 118859 --a------ C:\Windows\system32\nPFW.dll <Not Verified; INCA Internet Co., Ltd.; nProtect Firewall Core Driver Management Dll>
2008-06-06 16:50:37 0 d-------- C:\Users\All Users\nprotect
2008-06-06 16:50:29 290816 --a------ C:\Windows\system32\WINHTTP5.DLL <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
2008-06-06 16:50:29 44544 --a------ C:\Windows\system32\msxml4a.dll <Not Verified; Microsoft Corporation; Microsoft® MSXML 4.0 SP1>
2008-06-06 16:50:16 0 d-------- C:\Program Files\Common Files\INCA Shared
2008-06-03 14:31:38 1630208 -ra------ C:\Windows\system32\pdbox28.exe <Not Verified; Nowcom, Co. LTD.; PDBOX File Transfer Manager>
2008-06-03 14:30:38 1540096 -ra------ C:\Windows\system32\clubbox.exe <Not Verified; Nowcom, Co. LTD.; CLUBBOX File Transfer Manager V2>
-- Find3M Report ---------------------------------------------------------------
2008-06-19 09:04:30 0 d-------- C:\Program Files\Spyware Doctor
2008-06-11 18:11:04 0 d-------- C:\Program Files\Windows Mail
2008-06-06 16:50:20 0 d-------- C:\Users\Soo\AppData\Roaming\nprotect
2008-06-06 16:50:16 0 d-------- C:\Program Files\Common Files
2008-05-21 08:00:53 0 d-------- C:\Program Files\Microsoft Silverlight
2008-05-08 22:58:34 0 d-------- C:\Program Files\VideoLAN
2008-05-08 22:58:12 0 d-------- C:\Program Files\Graboid
2008-05-08 16:07:09 0 d-------- C:\Users\Soo\AppData\Roaming\MozillaControl
2008-05-04 21:29:40 0 d-------- C:\Users\Soo\AppData\Roaming\Malwarebytes
2008-05-04 21:29:29 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-05-04 10:10:47 0 d-------- C:\Program Files\Enigma Software Group
2008-05-03 18:18:58 0 d-------- C:\Program Files\Trend Micro
2008-05-03 15:45:25 0 d-------- C:\Users\Soo\AppData\Roaming\Download Manager
2008-05-03 12:50:53 0 d-------- C:\Program Files\Java
2008-04-24 13:18:50 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-04-01 15:06:30 155648 -ra------ C:\Windows\system32\downengine.dll <DOWNEN~1.DLL> <Not Verified; (주)나우콤; ClubBox>
2008-03-26 17:43:56 991232 --a------ C:\Windows\system32\npstarterctrl.dll <NPSTAR~1.DLL> <Not Verified; INCA Internet Co., Ltd.; nProtect Netizen Control>
2008-03-20 00:19:10 174 --ahs---- C:\Program Files\desktop.ini
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [19/01/2008 08:38]
"ECenter"="C:\Dell\E-Center\EULALauncher.exe" [25/05/2007 07:03]
"RtHDVCpl"="RtHDVCpl.exe" [17/01/2008 08:22 C:\Windows\RtHDVCpl.exe]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [03/10/2006 12:37]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [05/11/2006 12:22]
"dscactivate"="c:\dell\dsca.exe" [30/07/2007 20:40]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [10/10/2007 20:51]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [19/10/2007 21:16]
"ClubBox"="" []
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [02/11/2007 19:36]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [16/11/2007 15:00]
"Korean IME Migration"="C:\PROGRA~1\COMMON~1\MICROS~1\IME12\IMEKR\IMKRMIG.EXE" [26/10/2006 15:53]
"SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [02/11/2007 18:24]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [17/09/2007 09:07]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [17/09/2007 09:07]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [17/09/2007 09:07]
"tsnp2std"="C:\Windows\tsnp2std.exe" [07/07/2006 16:04]
"snp2std"="C:\Windows\vsnp2std.exe" [10/07/2006 18:33]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [11/01/2007 19:15 C:\Windows\KHALMNPR.Exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [22/02/2008 04:25]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [18/10/2007 12:34]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [19/01/2008 08:33]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [19/01/2008 08:33]
"Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [30/08/2007 18:43]
"Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [01/04/2008 18:35]
"MSServer"="C:\Users\Soo\AppData\Local\Temp\geBrpoOe.dll,#1" []
"cmds"="C:\Users\Soo\AppData\Local\Temp\byXRifgF.dll,c" []
"BM45ff321e"="C:\Users\Soo\AppData\Local\Temp\nmvigyyd.dll,s" []
"46cc0182"="C:\Users\Soo\AppData\Local\Temp\dllnpkcx.dll,b" []
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"=2 (0x2)
"EnableUIADesktopToggle"=0 (0x0)
"DisableRegistryTools"=0 (0x0)
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=1 (0x1)
"HideStartupScripts"=0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=1 (0x1)
"HideStartupScripts"=0 (0x0)
"DisableRegistryTools"=0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalService nsi lltdsvc SSDPSRV upnphost SCardSvr w32time EventSystem RemoteRegistry WinHttpAutoProxySvc lanmanworkstation TBS SLUINotify THREADORDER fdrespub netprofm fdphost wcncsvc QWAVE Mcx2Svc WebClient SstpSvc
LocalSystemNetworkRestricted hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
C:\Windows\system32\unregmp2.exe /ShowWMP
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
-- End of Deckard's System Scanner: finished at 2008-06-19 15:42:48 ------------
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft® Windows Vista™ Home Premium (build 6001) SP 1.0
Architecture: X86; Language: English
CPU 0: AMD Athlon 64 X2 Dual Core Processor 5600+
Percentage of Memory in Use: 46%
Physical Memory (total/avail): 3069.76 MiB / 1654.53 MiB
Pagefile Memory (total/avail): 8366.8 MiB / 6560.55 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1905.26 MiB
C: is Fixed (NTFS) - 288.04 GiB total, 222.07 GiB free.
D: is Fixed (NTFS) - 10 GiB total, 6.17 GiB free.
E: is CDROM (No Media)
F: is Removable (No Media)
G: is Removable (No Media)
H: is Removable (No Media)
I: is Removable (No Media)
\\.\PHYSICALDRIVE0 - ST332062 0AS SCSI Disk Device - 298.09 GiB - 3 partitions
\PARTITION0 - Unknown - 54.88 MiB
\PARTITION1 - Installable File System - 10 GiB - D:
\PARTITION2 (bootable) - Installable File System - 288.04 GiB - C:
\\.\PHYSICALDRIVE1 - TEAC USB HS-CF Card USB Device
\\.\PHYSICALDRIVE3 - TEAC USB HS-MS Card USB Device
\\.\PHYSICALDRIVE4 - TEAC USB HS-SD Card USB Device
\\.\PHYSICALDRIVE2 - TEAC USB HS-xD/SM USB Device
-- Security Center -------------------------------------------------------------
AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.
AV: Spyware Doctor with AntiVirus v4.3.11 (PC Tools)
AS: Spyware Doctor v5.1.0.273 (PC Tools)
AS: Windows Defender v1.1.1505.0 (Microsoft Corporation)
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
-- Environment Variables -------------------------------------------------------
ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\Soo\AppData\Roaming
CLASSPATH=.;C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=SOO-PC
ComSpec=C:\Windows\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\Soo
LOCALAPPDATA=C:\Users\Soo\AppData\Local
LOGONSERVER=\\SOO-PC
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\Windows\system32;C:\Windows;C:\Windows\system32\wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared;C:\Program Files\Common Files\Roxio Shared\DLLShared;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared;C:\Program Files\QuickTime\QTSystem;C:\Program Files\ESTsoft\ALZip;C:\Program Files\ESTsoft\ALZip\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 67 Stepping 3, AuthenticAMD
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=4303
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
PROMPT=$P$G
PUBLIC=C:\Users\Public
QTJAVA=C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip
RoxioCentral=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\Soo\AppData\Local\Temp
TMP=C:\Users\Soo\AppData\Local\Temp
USERDOMAIN=Soo-PC
USERNAME=Soo
USERPROFILE=C:\Users\Soo
windir=C:\Windows
-- User Profiles ---------------------------------------------------------------
Soo
-- Add/Remove Programs ---------------------------------------------------------
--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-0015-0412-0000-0000000FF1CE} /uninstall {39E88C10-B79B-445C-BD25-1EA6815BFCEE}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-0016-0412-0000-0000000FF1CE} /uninstall {39E88C10-B79B-445C-BD25-1EA6815BFCEE}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-0018-0412-0000-0000000FF1CE} /uninstall {39E88C10-B79B-445C-BD25-1EA6815BFCEE}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-0019-0412-0000-0000000FF1CE} /uninstall {39E88C10-B79B-445C-BD25-1EA6815BFCEE}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-001A-0412-0000-0000000FF1CE} /uninstall {39E88C10-B79B-445C-BD25-1EA6815BFCEE}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-001B-0412-0000-0000000FF1CE} /uninstall {39E88C10-B79B-445C-BD25-1EA6815BFCEE}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-001F-0412-0000-0000000FF1CE} /uninstall {C7466D9B-B03F-4FEE-B7B4-BE8C8DCF5792}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-0028-0412-0000-0000000FF1CE} /uninstall {32F6FF38-FD94-4667-AC0D-DB3F599DCD84}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-0044-0412-0000-0000000FF1CE} /uninstall {39E88C10-B79B-445C-BD25-1EA6815BFCEE}
2007 Microsoft Office Suite Service Pack 1 (SP1) --> msiexec /package {90120000-006E-0412-0000-0000000FF1CE} /uninstall {29704606-37B4-4C6E-A773-B590E5421128}
Adobe Flash Player ActiveX --> C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin --> C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.1 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81000000003}
ALZip --> "C:\Program Files\ESTsoft\ALZip\unins000.exe"
Apple Mobile Device Support --> MsiExec.exe /I{B5C209B1-8DDB-4642-A573-375B951514CB}
Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
ArcSoft VideoImpression 2 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5BD29DC3-EE5C-4E1F-932D-94848CFDD39E}\Setup.exe" -l0x9
CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
Dell System Customization Wizard --> MsiExec.exe /I{13BA7B44-B712-4DEE-A7B8-1DD564F37AE5}
DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Football Manager 2008 --> "C:\Program Files\Sports Interactive\Football Manager 2008\Uninstall_Football Manager 2008\Uninstall Football Manager 2008.exe"
GOM Player --> "C:\Program Files\GRETECH\GomPlayer\Uninstall.exe"
HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
iTunes --> MsiExec.exe /I{E3FEE4E7-4488-4A3F-A6BD-13745936EADB}
Java 6 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Malwarebytes' Anti-Malware --> "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Office Access MUI (Korean) 2007 --> MsiExec.exe /X{90120000-0015-0412-0000-0000000FF1CE}
Microsoft Office Excel MUI (Korean) 2007 --> MsiExec.exe /X{90120000-0016-0412-0000-0000000FF1CE}
Microsoft Office IME (Korean) 2007 --> MsiExec.exe /X{90120000-0028-0412-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Korean) 2007 --> MsiExec.exe /X{90120000-0044-0412-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Korean) 2007 --> MsiExec.exe /X{90120000-001A-0412-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Korean) 2007 --> MsiExec.exe /X{90120000-0018-0412-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007 --> "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007 --> MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007 --> MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (Korean) 2007 --> MsiExec.exe /X{90120000-001F-0412-0000-0000000FF1CE}
Microsoft Office Proofing (Korean) 2007 --> MsiExec.exe /X{90120000-002C-0412-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Korean) 2007 --> MsiExec.exe /X{90120000-0019-0412-0000-0000000FF1CE}
Microsoft Office Shared MUI (Korean) 2007 --> MsiExec.exe /X{90120000-006E-0412-0000-0000000FF1CE}
Microsoft Office Word MUI (Korean) 2007 --> MsiExec.exe /X{90120000-001B-0412-0000-0000000FF1CE}
Microsoft Silverlight --> MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU] --> MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Works --> MsiExec.exe /I{6D52C408-B09A-4520-9B18-475B81D393F1}
Mozilla Firefox (2.0.0.14) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181) --> MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833) --> MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
nProtect Netizen SVC (remove only) --> C:\Windows\system32\npn5uninst.exe
NVIDIA Drivers --> C:\Windows\system32\NVUNINST.EXE UninstallGUI
NVIDIANetworkDiagnostic --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{EFAD4066-CAF3-4B27-9669-12EED352C376}
QuickTime --> MsiExec.exe /I{5B09BD67-4C99-46A1-8161-B7208CE18121}
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver --> RtlUpd.exe -r -m
Roxio Creator Audio --> MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
Roxio Creator BDAV Plugin --> MsiExec.exe /I{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}
Roxio Creator Copy --> MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
Roxio Creator Data --> MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
Roxio Creator DE --> MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
Roxio Creator Tools --> MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
Roxio Express Labeler --> MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio MyDVD DE --> MsiExec.exe /I{D639085F-4B6E-4105-9F37-A0DBB023E2FB}
Roxio Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Security Update for Excel 2007 (KB946974) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {85E83E2E-AF9B-439B-B4F9-EB9B7EF6A00E}
Security Update for Microsoft Office Publisher 2007 (KB950114) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB951808) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {8F375E11-4FD6-4B89-9E2B-A76D48B51E00}
Security Update for Microsoft Office Word 2007 (KB950113) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {AD72BABE-C733-4FCF-9674-4314466191B9}
Security Update for Office 2007 (KB947801) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {02B5A17B-01BE-4BA6-95F1-1CBB46EBC76E}
Security Update for Outlook 2007 (KB946983) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {66B9496E-C0C3-4065-9868-85CCA92126C3}
Security Update for Visio 2007 (KB947590) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
Skype™ 3.6 --> MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic Activation Module --> MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
Spyware Doctor 5.1 --> C:\Program Files\Spyware Doctor\unins000.exe /LOG
Update for Office 2007 (KB946691) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Update for Outlook 2007 Junk Email Filter (kb950378) --> msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F6296086-AED5-4EC0-938B-08EA0254F20E}
USB2.0 PC Camera (SN9C201&202) --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{75438C0E-9925-412E-AD85-D0E71C6CE2ED}\Setup.exe" -l0x12
User's Guides --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}\setup.exe"
VeohTV BETA --> C:\Program Files\InstallShield Installation Information\{0405E51E-9582-4207-8F38-AC44201D3808}\setup.exe -runfromtemp -l0x0409
Windows Live Messenger --> MsiExec.exe /X{508CE775-4BA4-4748-82DF-FE28DA9F03B0}
Yahoo! Messenger --> C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG
-- Application Event Log -------------------------------------------------------
Event Record #/Type19253 / Error
Event Submitted/Written: 06/19/2008 03:35:34 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application firefox.exe, version 1.8.20080.40413, time stamp 0x47f6a3d0, faulting module nmvigyyd.dll_unloaded, version 0.0.0.0, time stamp 0x484fa086, exception code 0xc0000005, fault offset 0x01c9176d,
process id 0x414, application start time 0xfirefox.exe0.
Event Record #/Type19226 / Success
Event Submitted/Written: 06/19/2008 08:41:47 AM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.
Event Record #/Type19219 / Success
Event Submitted/Written: 06/19/2008 08:38:19 AM
Event ID/Source: 5617 / WinMgmt
Event Description:
Event Record #/Type19218 / Success
Event Submitted/Written: 06/19/2008 08:38:17 AM
Event ID/Source: 5615 / WinMgmt
Event Description:
Event Record #/Type19216 / Success
Event Submitted/Written: 06/19/2008 08:38:09 AM
Event ID/Source: 902 / Software Licensing Service
Event Description:
The Software Licensing service has started.
-- Security Event Log ----------------------------------------------------------
No Errors/Warnings found.
-- System Event Log ------------------------------------------------------------
Event Record #/Type57910 / Warning
Event Submitted/Written: 06/19/2008 03:41:09 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%Soo-PC27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %Soo-PC27 can't undo changes that you allow.
For more information please see the following:
%Soo-PC275
Scan ID: {CBAB4176-C774-4730-B841-6552349B9B8C}
User: Soo-PC\Soo
Name: %Soo-PC271
ID: %Soo-PC272
Severity ID: %Soo-PC273
Category ID: %Soo-PC274
Path Found: %Soo-PC276
Alert Type: %Soo-PC278
Detection Type: 1.1.1600.02
Event Record #/Type57909 / Warning
Event Submitted/Written: 06/19/2008 03:41:09 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%Soo-PC27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %Soo-PC27 can't undo changes that you allow.
For more information please see the following:
%Soo-PC275
Scan ID: {8B99E2BB-6C08-44CA-9000-521D9BB54D55}
User: Soo-PC\Soo
Name: %Soo-PC271
ID: %Soo-PC272
Severity ID: %Soo-PC273
Category ID: %Soo-PC274
Path Found: %Soo-PC276
Alert Type: %Soo-PC278
Detection Type: 1.1.1600.02
Event Record #/Type57908 / Warning
Event Submitted/Written: 06/19/2008 03:41:09 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%Soo-PC27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %Soo-PC27 can't undo changes that you allow.
For more information please see the following:
%Soo-PC275
Scan ID: {E80DDEEC-1A95-40E0-82CE-E2115325FB3F}
User: Soo-PC\Soo
Name: %Soo-PC271
ID: %Soo-PC272
Severity ID: %Soo-PC273
Category ID: %Soo-PC274
Path Found: %Soo-PC276
Alert Type: %Soo-PC278
Detection Type: 1.1.1600.02
Event Record #/Type57907 / Warning
Event Submitted/Written: 06/19/2008 03:41:07 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%Soo-PC27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %Soo-PC27 can't undo changes that you allow.
For more information please see the following:
%Soo-PC275
Scan ID: {C71AB46A-8A01-46C3-A2E8-85C05D077C0E}
User: Soo-PC\Soo
Name: %Soo-PC271
ID: %Soo-PC272
Severity ID: %Soo-PC273
Category ID: %Soo-PC274
Path Found: %Soo-PC276
Alert Type: %Soo-PC278
Detection Type: 1.1.1600.02
Event Record #/Type57906 / Warning
Event Submitted/Written: 06/19/2008 03:41:07 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%Soo-PC27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %Soo-PC27 can't undo changes that you allow.
For more information please see the following:
%Soo-PC275
Scan ID: {8D9EE0C0-504A-4078-A98C-48DBC24F61C1}
User: Soo-PC\Soo
Name: %Soo-PC271
ID: %Soo-PC272
Severity ID: %Soo-PC273
Category ID: %Soo-PC274
Path Found: %Soo-PC276
Alert Type: %Soo-PC278
Detection Type: 1.1.1600.02
-- End of Deckard's System Scanner: finished at 2008-06-19 15:42:48 ------------