here are hjt and deckard scans:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:25:48 PM, on 8/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
c:\windows\system32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
c:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\MICROS~3\wcescomm.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Microsoft Office\Office12\GROOVE.EXE
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.savannahriverbaptist.org/
R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL
O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [LifeCam] "c:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [f41ccc41] rundll32.exe "C:\WINDOWS\system32\uyudspxc.dll",b
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~3\wcescomm.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DW4] "C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe"
O4 - Startup: Microsoft Office Groove.lnk = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02A2D714-433E-46E4-B217-7C3B3FAF8EAE} (ScrabbleCubes Control) - http://www.worldwinn...rabblecubes.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akama...ex/qtplugin.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {54D53429-945C-4188-B460-C81356541882} (SaveImageFiles Class) - http://photosmart.hp...sLocalPrint.CAB
O16 - DPF: {74C861A1-D548-4916-BC8A-FDE92EDFF62C} - http://mediaplayer.w...ler/install.cab
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinn...ed/wwlaunch.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://aolsvc.aol.co...zylomplayer.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.m...ash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://games.pogo.co...aploader_v5.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{CBF7D055-5ACD-4F44-9225-124503B64169}: NameServer = 208.67.222.222
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) -
Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
--
End of file - 9925 bytes
Deckard's System Scanner v20071014.68
Run by Steve Scudder on 2008-08-11 22:00:28
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
Failed to create restore point; unknown error code 0x0000001F
-- Last 5 Restore Point(s) --
62: 2008-08-11 22:40:28 UTC - RP289 - Last known good configuration
61: 2008-08-11 22:39:56 UTC - RP288 - System Checkpoint
60: 2008-08-11 22:39:55 UTC - RP287 - System Checkpoint
59: 2008-08-11 22:39:55 UTC - RP286 - System Checkpoint
58: 2008-08-11 22:39:54 UTC - RP285 - System Checkpoint
-- First Restore Point --
1: 2008-08-11 22:39:06 UTC - RP228 - Installed Java 6 Update 5
Backed up registry hives.
Performed disk cleanup.
-- HijackThis Clone ------------------------------------------------------------
Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-08-11 22:02:24
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\WLTRYSVC.EXE
C:\WINDOWS\system32\BCMWLTRY.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\searchindexer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WLTRAY.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Microsoft ActiveSync\rapimgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Microsoft Office\Office12\GROOVE.EXE
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\dss.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.savannahriverbaptist.org/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {0A94B111-4504-4e26-AB05-E61E474AA38B} - (no file)
O2 - BHO: (no name) - {0FACEAEE-A039-4C2E-AA79-7B00AEE4CFB1} - C:\WINDOWS\system32\ddcbAsss.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: {ea0aa271-fac4-62ab-8264-7a390c637cad} - {dac736c0-93a7-4628-ba26-4caf172aa0ae} - C:\WINDOWS\system32\ohnjck.dll
O2 - BHO: (no name) - {E482A951-26ED-4898-A1EB-09A942D95A52} - C:\WINDOWS\system32\jkkKbYqR.dll
O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [LifeCam] "c:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [f41ccc41] rundll32.exe "C:\WINDOWS\system32\uyudspxc.dll",b
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~3\wcescomm.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DW4] "C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe"
O4 - Startup: Microsoft Office Groove.lnk = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02A2D714-433E-46E4-B217-7C3B3FAF8EAE} (ScrabbleCubes Control) - http://www.worldwinn...rabblecubes.cab
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} (Microsoft Office Template and Media Control) - http://office.micros...tes/ieawsdc.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} () - http://a1540.g.akama...ex/qtplugin.cab
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.micr.../OGAControl.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macr...director/sw.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {54D53429-945C-4188-B460-C81356541882} (SaveImageFiles Class) - http://photosmart.hp...sLocalPrint.CAB
O16 - DPF: {74C861A1-D548-4916-BC8A-FDE92EDFF62C} () - http://mediaplayer.w...ler/install.cab
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinn...ed/wwlaunch.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.ma...t/ultrashim.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://aolsvc.aol.co...zylomplayer.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.m...ash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://games.pogo.co...aploader_v5.cab
O17 - HKLM\SYSTEM\CCS\Services\Tcpip\..\{CBF7D055-5ACD-4F44-9225-124503B64169}: NameServer = 208.67.222.222
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: jkkKbYqR - C:\WINDOWS\system32\jkkKbYqR.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\system32\WLTRYSVC.EXE
--
End of file - 12284 bytes
-- File Associations -----------------------------------------------------------
All associations okay.
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R1 APPDRV - c:\windows\system32\drivers\appdrv.sys <Not Verified; Dell Inc; Application Driver>
S2 HPFECP12 - c:\windows\system32\drivers\hpfecp12.sys
S3 UIUSys (Conexant Setup API) - c:\windows\system32\drivers\uiusys.sys (file missing)
S3 usbbus (LGE CDMA Composite USB Device) - c:\windows\system32\drivers\lgusbbus.sys (file missing)
S3 UsbDiag (LGE CDMA USB Serial Port) - c:\windows\system32\drivers\lgusbdiag.sys (file missing)
S3 USBModem (LGE CDMA USB Modem) - c:\windows\system32\drivers\lgusbmodem.sys (file missing)
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
-- Device Manager: Disabled ----------------------------------------------------
Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Parallel Device
Device ID: ROOT\LEGACY_HPFECP12\0000
Manufacturer:
Name: Parallel Device
PNP Device ID: ROOT\LEGACY_HPFECP12\0000
Service: HPFECP12
-- Scheduled Tasks -------------------------------------------------------------
2008-08-01 07:04:02 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
-- Files created between 2008-07-11 and 2008-08-11 -----------------------------
2008-08-11 18:41:51 120960 --a------ C:\WINDOWS\system32\ohnjck.dll
2008-08-11 18:41:49 120960 --a------ C:\WINDOWS\system32\sqaskbld.dll
2008-08-11 18:41:21 98688 --a------ C:\WINDOWS\system32\uyudspxc.dll
2008-08-11 18:38:49 3429 --ahs---- C:\WINDOWS\system32\sssAbcdd.ini2
2008-08-11 18:38:35 323328 --a------ C:\WINDOWS\system32\ddcbAsss.dll
2008-08-11 18:33:16 34176 -----n--- C:\WINDOWS\system32\jkkKbYqR.dll
2008-08-11 18:29:17 385024 --a------ C:\WINDOWS\wnlmdakqlag.dll
2008-07-21 10:26:26 0 d-------- C:\Program Files\Apple Software Update
2008-07-15 13:56:59 0 d-------- C:\temp
2008-07-15 13:56:37 0 d-------- C:\Program Files\LG Electronics
2008-07-15 13:54:47 0 d-------- C:\WINDOWS\RegisteredPackages
-- Find3M Report ---------------------------------------------------------------
2008-08-11 21:51:04 0 d-------- C:\Documents and Settings\Steve Scudder\Application Data\Skype
2008-08-04 18:58:58 0 d-------- C:\Documents and Settings\Steve Scudder\Application Data\Yahoo!
2008-08-04 18:58:47 0 d-------- C:\Program Files\Yahoo!
2008-07-26 11:39:52 0 d-------- C:\Documents and Settings\Steve Scudder\Application Data\U3
2008-07-15 13:56:36 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-05-12 21:53:16 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2008-05-12 21:50:16 196608 --a------ C:\WINDOWS\system32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>
2008-05-12 21:50:16 81920 --a------ C:\WINDOWS\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2008-05-12 21:50:08 802816 --a------ C:\WINDOWS\system32\divx_xx11.dll <Not Verified; DivX, Inc.; DivX?>
2008-05-12 21:50:08 823296 --a------ C:\WINDOWS\system32\divx_xx0c.dll <Not Verified; DivX, Inc.; DivX®>
2008-05-12 21:50:08 831488 --a------ C:\WINDOWS\system32\divx_xx0a.dll
2008-05-12 21:50:08 823296 --a------ C:\WINDOWS\system32\divx_xx07.dll <Not Verified; DivX, Inc.; DivX®>
2008-05-12 21:50:06 682496 --a------ C:\WINDOWS\system32\DivX.dll <Not Verified; DivX, Inc.; DivX®>
2008-05-12 21:49:02 12288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0FACEAEE-A039-4C2E-AA79-7B00AEE4CFB1}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{dac736c0-93a7-4628-ba26-4caf172aa0ae}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E482A951-26ED-4898-A1EB-09A942D95A52}]
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce
HKEY_USERS\.default\software\microsoft\windows\currentversion\run
OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [10/26/2006 8:24:54 PM]
Windows Desktop Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe [2/5/2007 3:40:46 PM]
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer
HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer
Written by Bobbi Flekman 2006 ©
GeneralFlags REG_DWORD 0 (0x0)
RestoredStateInfo REG_BINARY 180000006a02000023000000a40000009a00000001000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [02/05/2007 03:39 PM 294400]
"{E482A951-26ED-4898-A1EB-09A942D95A52}"= C:\WINDOWS\system32\jkkKbYqR.dll [08/11/2008 06:33 PM 34176]
REGEDIT4
"AltDefaultDomainName"="SAVANNAH-97ADD7"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\GPExtensions]
"NoGPOListChanges"=dword:00000001
2c,41,70,70,6c,69,63,61,74,69,6f,6e,29,00,00
"ProcessGroupPolicy"="ProcessGroupPolicy"
"NoGPOListChanges"=dword:00000001
"NotifyLinkTransition"=dword:00000001
00
"RequiresSuccessfulRegistry"=dword:00000001
"MaxNoGPOListChangesInterval"=dword:000003c0
00
"RequiresSuccessfulRegistry"=dword:00000001
"RequiresSuccessfulRegistry"=dword:00000001
74,61,6c,6c,65,72,2c,41,70,70,6c,69,63,61,74,69,6f,6e,29,00,00
"NoGPOListChanges"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\Notify]
"Logoff"="ChainWlxLogoffEvent"
"Logoff"="CryptnetWlxLogoffEvent"
"Asynchronous"=dword:00000001
"Unlock"="WinlogonUnlockEvent"
"Logoff"="f"
"Asynchronous"=dword:00000001
"Logoff"="SchedEventLogOff"
"DllName"=hex(2):73,63,6c,67,6e,74,66,79,2e,64,6c,6c,00
"Asynchronous"=dword:00000001
"Disconnect"="TSEventDisconnect"
"EulaAccepted"=dword:00000001
8e,14,00,00,00,3d,72,70,c2,ac,d1,eb,db,3c,ac,1c,50,68,c8,82,68,ad,d9,b2,93
"Asynchronous"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\SpecialAccounts]
"VUSR_"=dword:00010000
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\Credentials]
!d;s/.*t//;s/
[hkey.*/n
Asynchronous REG_DWORD 0 (0x0)
!d;s/.*t//;s/
[hkey.*/n
Asynchronous REG_DWORD 0 (0x0)
!d;s/.*t//;s/
[hkey.*/n
DLLName REG_SZ cscdll.dll
!d;s/.*t//;s/
[hkey.*/n
!d;s/.*t//;s/
[hkey.*/n
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\jkkKbYqR
!d;s/.*t//;s/
[hkey.*/n
DLLName REG_SZ wlnotify.dll
!d;s/.*t//;s/
[hkey.*/n
Asynchronous REG_DWORD 0 (0x0)
!d;s/.*t//;s/
[hkey.*/n
Logoff REG_SZ WLEventLogoff
!d;s/.*t//;s/
[hkey.*/n
DLLName REG_SZ WlNotify.dll
!d;s/.*t//;s/
[hkey.*/n
Asynchronous REG_DWORD 0 (0x0)
!d;s/.*t//;s/
[hkey.*/n
Logon REG_SZ WLEventLogon
!d;s/.*t//;s/
[hkey.*/n
DLLName REG_SZ wlnotify.dll
SteelWerX Registry Console Tool 2.0
Written by Bobbi Flekman 2006 ©
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows
!d;s/ /x22/;s/t.*t/x22=/;s/hkey_.*/[&]/;
appinit_dlls REG_SZ avgrsstx.dll
Written by Bobbi Flekman 2006 ©
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
ApplicationGoo REG_BINARY 140200001002000000020000900434000000560053005f00560045005200530049004f004e005f00
49004e0046004f0000000000bd04effe00000100000007000b000000000007000b0000003f0000000
20000000400010001000000000000000000000000000000440000000100560061007200460069006c
00650049006e0066006f00000000002400040000005400720061006e0073006c006100740069006f0
06e00000000000904e404f0030000010053007400720069006e006700460069006c00650049006e00
66006f000000cc03000001003000340030003900300034004500340000004a001900010043006f006
d006d0065006e007400730000004300720079007300740061006c002000530051004c002000440065
007300690067006e0065007200200037002e0030000000000088003400010043006f006d007000610
06e0079004e0061006d006500000000005300650061006700610074006500200053006f0066007400
7700610072006500200049006e0066006f0072006d006100740069006f006e0020004d0061006e006
100670065006d0065006e0074002000470072006f00750070002c00200049006e0063002e000000ae
00450001004c006500670061006c0043006f007000790072006900670068007400000043006f00700
07900720069006700680074002000280063002900200031003900390031002d003100390039001000
000000000000
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
DisableHeapLookAside REG_SZ 1
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
ApplicationGoo REG_BINARY 5409000054020000000200008c0334000000560053005f00560045005200530049004f004e005f00
49004e0046004f0000000000bd04effe000001000200a8112e0400000200a8112e0400003f0000002
00000000400000001000000000000000000000000000000ec020000010053007400720069006e0067
00460069006c00650049006e0066006f000000c802000001003000300030003000300034006200300
0000038001000010043006f006d006d0065006e007400730000004f007200690067006e0061006c00
2000560065007200730069006f006e00000042001100010043006f006d00700061006e0079004e006
1006d006500000000005300410050002000410047002c002000570061006c006c0064006f00720066
00000000005a0019000100460069006c0065004400650073006300720069007000740069006f006e0
0000000005300410050002000460072006f006e00740065006e006400200066006f00720020005700
69006e0064006f0077007300000000003c000e000100460069006c006500560065007200730069006
f006e000000000034003500320030002e0032002e0030002e00310030003700300000003200090001
0049006e007400650072006e0061006c004e0061006d0065000000460045005700460052004f004e0
05400000000007a002b0001004c006500670061006c0043006f007000790072006900670068000200
000000000000010000004c0000003cfd0600040000000000000065050000020000000300000000000
100530065007200760069006300650020005000610063006b00200033000000230054020000000200
008c0334000000560053005f00560045005200530049004f004e005f0049004e0046004f000000000
0bd04effe0000010003009e112604000003009e11260400003f000000200000000400000001000000
000000000000000000000000ec020000010053007400720069006e006700460069006c00650049006
e0066006f000000c8020000010030003000300030003000340062003000000038001000010043006f
006d006d0065006e007400730000004f007200690067006e0061006c0020005600650072007300690
06f006e00000042001100010043006f006d00700061006e0079004e0061006d006500000000005300
410050002000410047002c002000570061006c006c0064006f0072006600000000005a00190001004
60069006c0065004400650073006300720069007000740069006f006e000000000053004100500020
00460072006f006e00740065006e006400200066006f0072002000570069006e0064006f007700730
0000000003c000e000100460069006c006500560065007200730069006f006e000000000034003500
310030002e0033002e0030002e003100300036003200000032000900010049006e007400650072006
e0061006c004e0061006d0065000000460045005700460052004f004e005400000000007a002b0001
004c006500670061006c0043006f007000790072006900670068000200000000000000010000004c0
000003cfd060004000000000000006505000002000000030000000000010053006500720076006900
6300650020005000610063006b0020003300000023005402000000020000200334000000560053005
f00560045005200530049004f004e005f0049004e0046004f0000000000bd04effe00000100000004
00f003000000000400f00300003f00000000000000040001000100000000000000000000000000000
07e020000010053007400720069006e006700460069006c00650049006e0066006f0000005a020000
01003000340030003900300034004500340000002e000700010043006f006d00700061006e0079004
e0061006d00650000000000530041005000200041004700000000005a0019000100460069006c0065
004400650073006300720069007000740069006f006e00000000005300410050002000460072006f0
06e00740065006e006400200066006f0072002000570069006e0064006f0077007300000000003600
0b000100460069006c006500560065007200730069006f006e000000000034002e0030002e0030002
e003100300030003800000000002c000600010049006e007400650072006e0061006c004e0061006d
0065000000460052004f004e00540000005e001d0001004c006500670061006c0043006f007000790
072006900670068007400000043006f0070007900720069006700680074002000a900200031003900
390033002d0031003900390037002000530041005000200041004700000000002800000001004c006
500670061006c0054007200610064000200000000000000010000004c0000003cfd06000400000000
000000650500000200000003000000000001005300650072007600690063006500200050006100630
06b0020003300000023005402000000020000180334000000560053005f0056004500520053004900
4f004e005f0049004e0046004f0000000000bd04effe0000010000000400dd03000000000400dd030
0003f0000000000000004000100010000000000000000000000000000007802000001005300740072
0069006e006700460069006c00650049006e0066006f0000005402000001003000340030003900300
034004500340000002e000700010043006f006d00700061006e0079004e0061006d00650000000000
530041005000200041004700000000005a0019000100460069006c006500440065007300630072006
9007000740069006f006e00000000005300410050002000460072006f006e00740065006e00640020
0066006f0072002000570069006e0064006f00770073000000000034000a000100460069006c00650
0560065007200730069006f006e000000000034002e0030002e0030002e0039003800390000002c00
0600010049006e007400650072006e0061006c004e0061006d0065000000460052004f004e0054000
0005e001d0001004c006500670061006c0043006f007000790072006900670068007400000043006f
0070007900720069006700680074002000a900200031003900390033002d003100390039003700200
0530041005000200041004700000000002800000001004c006500670061006c005400720061006400
65006d000200000000000000010000004c0000003cfd0600040000000000000065050000020000000
300000000000100530065007200760069006300650020005000610063006b002000330000002300
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
ApplicationGoo REG_BINARY 5802000054020000000200006c0734000000560053005f00560045005200530049004f004e005f00
49004e0046004f0000000000bd04effe00000100050005000700a807050005000700a8073f0000000
00000000400040001000000000000000000000000000000cc060000010053007400720069006e0067
00460069006c00650049006e0066006f0000005403000001003000340030003900300034004200300
0000018000000010043006f006d006d0065006e007400730000004c001600010043006f006d007000
61006e0079004e0061006d006500000000004d006900630072006f0073006f0066007400200043006
f00720070006f0072006100740069006f006e000000680020000100460069006c0065004400650073
006300720069007000740069006f006e00000000004d006900630072006f0073006f0066007400200
0450078006300680061006e0067006500200053006500720076006500720020005300650074007500
7000000036000b000100460069006c006500560065007200730069006f006e000000000035002e003
5002e0031003900360030002e003700000000002c000600010049006e007400650072006e0061006c
004e0061006d00650000005300650074007500700000009c003c0001004c006500670061006c00430
06f007000790072006900670068007400000043006f00700079007200690067006800740020000200
000000000000010000004c0000003cfd0600050000000000000065050000020000000300000002000
000530065007200760069006300650020005000610063006b002000340000002300
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
ApplicationGoo REG_BINARY 580200005402000000020000440234000000560053005f00560045005200530049004f004e005f00
49004e0046004f0000000000bd04effe00000100010001000c000000010001000c000000000000000
00000000400000001000000000000000000000000000000440000000000560061007200460069006c
00650049006e0066006f00000000002400040000005400720061006e0073006c006100740069006f0
06e00000000000904b004a4010000010053007400720069006e006700460069006c00650049006e00
66006f00000080010000010030003400300039003000340042003000000040002000010043006f006
d00700061006e0079004e0061006d00650000000000440065004c006f0072006d00650020004d0061
007000700069006e0067000000440022000100500072006f0064007500630074004e0061006d00650
0000000005200650067002000280044004c0069006200620079005c006d0073006600290000000000
340014000100460069006c006500560065007200730069006f006e000000000031002e00300031002
e0030003000310032000000380014000100500072006f006400750063007400560065007200730069
006f006e00000031002e00300031002e003000300031003200000034001200010049006e007400650
072006e0061006c004e0061006d00650000004d004e00470052004500470033003200000000000200
000000000000010000004c0000003cfd0600040000000000000065050000020000000300000000000
100530065007200760069006300650020005000610063006b002000330000002300
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
GlobalFlag REG_SZ 0x00200000
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
GlobalFlag REG_SZ 0x00200000
DisableHeapLookAside REG_SZ 1
DisableHeapLookAside REG_SZ 1
ApplicationGoo REG_BINARY 140200001002000000020000b40234000000560053005f00560045005200530049004f004e005f00
49004e0046004f0000000000bd04effe00000100350007000000000035000700000000003f0000000
0000000040000000100000000000000000000000000000012020000010053007400720069006e0067
00460069006c00650049006e0066006f000000ee01000001003000340030003900300034006200300
0000042001100010043006f006d00700061006e0079004e0061006d00650000000000500065006f00
70006c00650053006f00660074002c00200049006e0063002e0000000000280000000100460069006
c0065004400650073006300720069007000740069006f006e00000000002a0005000100460069006c
006500560065007200730069006f006e000000000037002e0035003300000000009c003c0001004c0
06500670061006c0043006f007000790072006900670068007400000043006f007000790072006900
6700680074002000a900200031003900380038002d0031003900390038002000500065006f0070006
c00650053006f00660074002c00200049006e0063002e002000200041006c006c0020005200690067
0068007400730020005200650073006500720076006500640000003c000a0001004f0072006900670
069006e0061006c00460069006c0065006e0061006d00650000007000730064006d0074002e001000
000000000000
DisableHeapLookAside REG_SZ 1
DisableHeapLookAside REG_SZ 1
CheckAppHelp REG_DWORD 1 (0x1)
ApplicationGoo REG_BINARY 000700005402000000020000840734000000560053005f00560045005200530049004f004e005f00
49004e0046004f0000000000bd04effe00000100050005000700a807050005000700a8073f0000000
00000000400040001000000000000000000000000000000e4060000010053007400720069006e0067
00460069006c00650049006e0066006f0000006003000001003000340030003900300034004200300
0000018000000010043006f006d006d0065006e007400730000004c001600010043006f006d007000
61006e0079004e0061006d006500000000004d006900630072006f0073006f0066007400200043006
f00720070006f0072006100740069006f006e000000680020000100460069006c0065004400650073
006300720069007000740069006f006e00000000004d006900630072006f0073006f0066007400200
0450078006300680061006e0067006500200053006500720076006500720020005300650074007500
7000000036000b000100460069006c006500560065007200730069006f006e000000000035002e003
5002e0031003900360030002e003700000000002c000600010049006e007400650072006e0061006c
004e0061006d00650000005300650074007500700000009e003d0001004c006500670061006c00430
06f007000790072006900670068007400000043006f00700079007200690067006800740020000200
000000000000010000004c0000003cfd0600050000000000000065050000020000000000000000000
000530065007200760069006300650020005000610063006b00200033000000240054020000000200
00a40834000000560053005f00560045005200530049004f004e005f0049004e0046004f000000000
0bd04effe00000100050005000700a807050005000700a8073f000000000000000400040001000000
00000000000000000000000004080000010053007400720069006e006700460069006c00650049006
e0066006f000000f0030000010030003400300039003000340042003000000018000000010043006f
006d006d0065006e007400730000004c001600010043006f006d00700061006e0079004e0061006d0
06500000000004d006900630072006f0073006f0066007400200043006f00720070006f0072006100
740069006f006e000000680020000100460069006c006500440065007300630072006900700074006
9006f006e00000000004d006900630072006f0073006f00660074002000450078006300680061006e
00670065002000530065007200760065007200200053006500740075007000000036000b000100460
069006c006500560065007200730069006f006e000000000035002e0035002e003100390036003000
2e003700000000002c000600010049006e007400650072006e0061006c004e0061006d00650000005
30065007400750070000000a600410001004c006500670061006c0043006f00700079007200690067
0068007400000043006f00700079007200690067006800740020000200000000000000010000004c0
000003cfd060005000000000000006505000002000000000000000000000053006500720076006900
6300650020005000610063006b0020003300000024005402000000020000180434000000560053005
f00560045005200530049004f004e005f0049004e0046004f0000000000bd04effe00000100050005
000700a807050005000700a8073f00000000000000040004000100000000000000000000000000000
078030000010053007400720069006e006700460069006c00650049006e0066006f00000054030000
010030003400300039003000340042003000000018000000010043006f006d006d0065006e0074007
30000004c001600010043006f006d00700061006e0079004e0061006d006500000000004d00690063
0072006f0073006f0066007400200043006f00720070006f0072006100740069006f006e000000680
020000100460069006c0065004400650073006300720069007000740069006f006e00000000004d00
6900630072006f0073006f00660074002000450078006300680061006e00670065002000530065007
200760065007200200053006500740075007000000036000b000100460069006c0065005600650072
00730069006f006e000000000035002e0035002e0031003900360030002e003700000000002c00060
0010049006e007400650072006e0061006c004e0061006d0065000000530065007400750070000000
9a003b0001004c006500670061006c0043006f007000790072006900670068007400000043006f007
00079007200690067006800740020000200000000000000010000004c0000003cfd06000500000000
000000650500000200000000000000000000005300650072007600690063006500200050006100630
06b002000330000002400
ApplicationGoo REG_BINARY 140200001002000000020000040334000000560053005f00560045005200530049004f004e005f00
49004e0046004f0000000000bd04effe000001001c0008000000000000000800000000003f0000000
0000000040000000100000000000000000000000000000064020000010053007400720069006e0067
00460069006c00650049006e0066006f0000004002000001003000340030003900300034006200300
0000044001200010043006f006d00700061006e0079004e0061006d0065000000000043006f007200
65006c00200043006f00720070006f0072006100740069006f006e0000004e0013000100460069006
c0065004400650073006300720069007000740069006f006e000000000043006f00720065006c0020
00530065007400750070002000570069007a00610072006400000000002c0006000100460069006c0
06500560065007200730069006f006e000000000038002e0030003200380000004600130001004900
6e007400650072006e0061006c004e0061006d006500000043006f00720065006c002000530065007
400750070002000570069007a00610072006400000000006c00240001004c006500670061006c0043
006f007000790072006900670068007400000043006f0070007900720069006700680074002000a90
0200031003900390037002c00200043006f00720065006c00200043006f00720070006f0072000800
000000000000
ApplicationGoo REG_BINARY 140200001002000000020000380334000000560053005f00560045005200530049004f004e005f00
49004e0046004f0000000000bd04effe0000010002000a0001000a0002000a0001000a00000000000
0000000040001000100000000000000000000000000000098020000010053007400720069006e0067
00460069006c00650049006e0066006f0000007402000001003000340030003900300034004500340
000004a001500010043006f006d00700061006e0079004e0061006d00650000000000530079006d00
61006e00740065006300200043006f00720070006f0072006100740069006f006e000000000060001
c000100460069006c0065004400650073006300720069007000740069006f006e0000000000530079
006d0061006e007400650063002000530079006d006500760065006e007400200049006e007300740
061006c006c0065007200000034000a000100460069006c006500560065007200730069006f006e00
00000000310030002e0032002e00310030002e003100000030000800010049006e007400650072006
e0061006c004e0061006d006500000053004500560049004e005300540000007e002d0001004c0065
00670061006c0043006f007000790072006900670068007400000043006f007000790072006900670
06800740020002800430029002000530079006d0061006e00740065006300200043006f0072000100
000000000000
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
DisableHeapLookAside REG_SZ 1
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
CheckAppHelp REG_DWORD 1 (0x1)
DisableHeapLookAside REG_SZ 1
CheckAppHelp REG_DWORD 1 (0x1)
ApplicationGoo REG_BINARY 1402000010020000000200007c0334000000560053005f00560045005200530049004f004e005f00
49004e0046004f0000000000bd04effe00000100000001000900260000000100090026003f0000000
00000000400000001000000000000000000000000000000dc020000010053007400720069006e0067
00460069006c00650049006e0066006f000000b802000001003000340030003900300034006200300
0000066002700010043006f006d006d0065006e0074007300000042007500730069006e0065007300
7300200049006e00740065006c006c006900670065006e006300650020006f006e002000450076006
5007200790020004400650073006b0074006f0070000000000048001400010043006f006d00700061
006e0079004e0061006d0065000000000043006f0067006e006f007300200049006e0063006f00720
070006f0072006100740065006400000060001c000100460069006c00650044006500730063007200
69007000740069006f006e000000000043006f0067006e006f0073002000470065006e00650072006
9006300200049006e007300740061006c006c006100740069006f006e00000038000c000100460069
006c006500560065007200730069006f006e000000000031002c00200030002c002000330038002c0
020003900000030000800010049006e007400650072006e0061006c004e0061006d00650000000100
000000000000
GlobalFlag REG_SZ 0x000010F0
ApplicationGoo REG_BINARY 140200001002000000020000a40234000000560053005f00560045005200530049004f004e005f00
49004e0046004f0000000000bd04effe00000100000001000100000000000100010000003f0000000
0000000010001000100000000000000000000000000000004020000010053007400720069006e0067
00460069006c00650049006e0066006f000000e001000001003000340030003900300034004500340
0000020000000010043006f006d00700061006e0079004e0061006d00650000000000580018000100
460069006c0065004400650073006300720069007000740069006f006e000000000049004e0053005
40041004c004c0020004d004600430020004100700070006c00690063006100740069006f006e0000
00300008000100460069006c006500560065007200730069006f006e000000000031002e0030002e0
0300030003100000030000800010049006e007400650072006e0061006c004e0061006d0065000000
49004e005300540041004c004c0000002400000001004c006500670061006c0043006f00700079007
200690067006800740000002800000001004c006500670061006c00540072006100640065006d0061
0072006b0073000000000040000c0001004f0072006900670069006e0061006c00460069006c00650
06e0061006d006500000049004e005300540041004c004c002e004500580045000000300008000800
000000000000
"Notification Packages scecli
Written by Bobbi Flekman 2006 ©
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state
NextRefreshReason REG_DWORD 0 (0x0)
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\Machine\Extension-List
LoggingStatus REG_DWORD 0 (0x0)
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\Machine\Extension-List\{c6dc5466-785a-11d2-84d0-00c04fb169f7}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\Machine\GPLink-List
SOM REG_SZ Local
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\Machine\GPO-List
WQL-Id REG_SZ
NextRefreshReason REG_DWORD 0 (0x0)
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-527237240-117609710-682003330-1003\Extension-List
LoggingStatus REG_DWORD 0 (0x0)
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-527237240-117609710-682003330-1003\Extension-List\{c6dc5466-785a-11d2-84d0-00c04fb169f7}
HKEY_LOCAL_MACHINE\software\microsoft\windows\curr