Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Win32/Tanatos.M and Win32/Heur

Started by twismz44 , Nov 15 2008 01:01 PM

  • Please log in to reply

#1
twismz44
Posted 15 November 2008 - 01:01 PM

twismz44

    Member

  • Member
  • PipPip
  • 11 posts
Hello Geeks to Go!,

I just reinstalled windows xp yesterday because it was a train wreck that met a plane crash. Problem is though, I believe I brought one of my problems with me via my flash drive. I installed AVG, ran a full scan, and I seem to have a lot of Tanatos.M and Heur viruses.

I don't know where to go from here because it seems they have attached themselves to legitimate files and if I delete them, the program will stop working, atleast that's my thinking. I don't know what else you need/want to know, but i'm sure you will tell me.

Thanks in advance for you help.


T.D. Zelenitz
  • 0

Advertisements

#2
kahdah
Posted 15 November 2008 - 08:09 PM

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Hello twismz44

Welcome to G2Go. :)
=====================

  • Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
  • Double click on RSIT.exe to run RSIT.
  • Click Continue at the disclaimer screen.
  • Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

  • 0

#3
twismz44
Posted 15 November 2008 - 10:15 PM

twismz44

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
Here is the Log


Logfile of random's system information tool 1.04 (written by random/random)
Run by Terry D. Zelenitz at 2008-11-15 23:10:28
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 40 GB (78%) free of 51 GB
Total RAM: 2047 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:11:06 PM, on 11/15/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgfws8.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Creative\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\BitTornado\btdownloadgui.exe
C:\Program Files\BitTornado\btdownloadgui.exe
C:\Documents and Settings\Terry D. Zelenitz\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Terry D. Zelenitz.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.espn.go.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.mi...b?1226720573671
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://www.creative....101/CTSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative....15106/CTPID.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgfws8.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 4584 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-11-15 455960]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-09-17 13574144]
"nwiz"=nwiz.exe /install []
"NVMixerTray"=C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe [2004-12-20 131072]
"CTxfiHlp"=C:\WINDOWS\system32\CTXFIHLP.EXE [2007-04-09 19968]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-09-17 86016]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-11-15 1235736]
"CTDVDDET"=C:\Program Files\Creative\DVDAudio\CTDVDDET.EXE [2003-06-18 45056]
"CTHelper"=C:\WINDOWS\system32\CTHELPER.EXE [2008-06-27 19456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTProAgent.exe [2007-09-06 136136]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="avgrsstx.dll"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"G:\epmvha.exe"="G:\epmvha.exe:*:Enabled:ipsec"
"C:\WINDOWS\Explorer.EXE"="C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec"
"C:\WINDOWS\system32\nwiz.exe"="C:\WINDOWS\system32\nwiz.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\userinit.exe"="C:\WINDOWS\system32\userinit.exe:*:Enabled:ipsec"
"C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winiuthqw.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winiuthqw.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\ddlthu.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\ddlthu.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winhxbpw.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winhxbpw.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winvnpqvm.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winvnpqvm.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winuuqw.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winuuqw.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winqjutdq.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winqjutdq.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winkgvopu.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winkgvopu.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\nwpeai.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\nwpeai.exe:*:Enabled:ipsec"
"C:\WINDOWS\SYSTEM32\CTHELPER.EXE"="C:\WINDOWS\system32\CTHELPER.EXE:*:Enabled:ipsec"
"C:\WINDOWS\system32\READREG.exe"="C:\WINDOWS\system32\READREG.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winyees.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winyees.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winjnxkc.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winjnxkc.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winqrpacr.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\winqrpacr.exe:*:Enabled:ipsec"
"C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\windvycv.exe"="C:\DOCUME~1\TERRYD~1.ZEL\LOCALS~1\Temp\windvycv.exe:*:Enabled:ipsec"
"C:\Program Files\AVG\AVG8\avgam.exe"="C:\Program Files\AVG\AVG8\avgam.exe:*:Enabled:avgam.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.scr - open - "%1" %*

======List of files/folders created in the last 1 months======

2008-11-15 23:10:28 ----D---- C:\rsit
2008-11-15 21:02:01 ----D---- C:\Program Files\Alcohol Soft
2008-11-15 20:45:10 ----D---- C:\Program Files\TVAnts
2008-11-15 19:58:01 ----D---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\AdobeUM
2008-11-15 18:34:58 ----D---- C:\Program Files\Common Files\Adobe
2008-11-15 18:34:54 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2008-11-15 18:33:15 ----D---- C:\Program Files\Adobe
2008-11-15 15:37:39 ----D---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\.BitTornado
2008-11-15 15:32:54 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Pro
2008-11-15 15:32:30 ----D---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\DAEMON Tools Pro
2008-11-15 15:28:39 ----D---- C:\Program Files\DAEMON Tools Pro
2008-11-15 15:18:36 ----D---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\WinRAR
2008-11-15 15:18:13 ----D---- C:\Program Files\WinRAR
2008-11-15 15:09:05 ----D---- C:\Program Files\BitTornado
2008-11-15 14:35:47 ----D---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\Mozilla
2008-11-15 14:32:25 ----D---- C:\Program Files\Mozilla Firefox
2008-11-15 13:48:33 ----D---- C:\WINDOWS\pss
2008-11-15 13:47:10 ----D---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\Malwarebytes
2008-11-15 13:47:06 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-11-15 13:47:06 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-11-15 13:44:00 ----D---- C:\WINDOWS\ERDNT
2008-11-15 13:43:16 ----D---- C:\Program Files\ERUNT
2008-11-15 13:34:19 ----D---- C:\Program Files\Trend Micro
2008-11-15 04:18:28 ----A---- C:\WINDOWS\{00000005-00000000-00000007-00001102-00000004-20021102}.BAK
2008-11-15 04:11:20 ----A---- C:\WINDOWS\system32\e10kxwdm.ini
2008-11-15 04:11:19 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2008-11-15 04:11:19 ----A---- C:\WINDOWS\READREG.EXE
2008-11-15 04:11:19 ----A---- C:\WINDOWS\PSCONV.EXE
2008-11-15 04:11:19 ----A---- C:\WINDOWS\MIDIDEF.EXE
2008-11-15 04:11:18 ----A---- C:\WINDOWS\system32\ENSDEF.INI
2008-11-15 04:11:18 ----A---- C:\WINDOWS\system32\ENSDEF.EXE
2008-11-15 04:11:18 ----A---- C:\WINDOWS\system32\CTSBLFX.DLL
2008-11-15 04:11:18 ----A---- C:\WINDOWS\system32\CTAUDFX.DLL
2008-11-15 04:11:18 ----A---- C:\WINDOWS\system32\COMMONFX.DLL
2008-11-15 04:11:18 ----A---- C:\WINDOWS\DEVREG.DLL
2008-11-15 04:09:03 ----D---- C:\Program Files\Xvid
2008-11-15 04:09:03 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2008-11-15 04:09:03 ----A---- C:\WINDOWS\system32\xvidcore.dll
2008-11-15 03:45:11 ----D---- C:\WINDOWS\system32\Defaults
2008-11-15 03:32:56 ----N---- C:\WINDOWS\system32\ctdvda32.dll
2008-11-15 03:30:32 ----N---- C:\WINDOWS\system32\CTSVCCTL.EXE
2008-11-15 03:30:32 ----N---- C:\WINDOWS\system32\CTSVCCDA.EXE
2008-11-15 03:30:17 ----D---- C:\Program Files\Common Files\Creative
2008-11-15 03:30:16 ----HD---- C:\Program Files\Creative Installation Information
2008-11-15 03:08:41 ----A---- C:\CTSUFile.txt
2008-11-15 03:08:28 ----D---- C:\Program Files\Creative
2008-11-15 02:51:46 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2008-11-15 02:48:04 ----HDC---- C:\WINDOWS\$NtUninstallKB902344$
2008-11-15 02:47:54 ----D---- C:\WINDOWS\ie7updates
2008-11-15 02:47:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2008-11-15 02:47:39 ----HDC---- C:\WINDOWS\$NtUninstallKB923689$
2008-11-15 02:46:31 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2008-11-15 02:31:08 ----D---- C:\WINDOWS\Prefetch
2008-11-15 02:23:12 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-11-15 02:23:09 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-11-15 02:23:06 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-11-15 02:23:01 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-11-15 02:22:58 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-11-15 02:22:52 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2008-11-15 02:22:49 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-11-15 02:22:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-11-15 02:22:42 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-11-15 02:22:39 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-11-15 02:22:36 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-11-15 02:22:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-11-15 02:22:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-11-15 02:22:24 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-11-15 02:22:21 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-11-15 02:22:19 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-11-15 02:20:18 ----D---- C:\WINDOWS\system32\scripting
2008-11-15 02:20:17 ----D---- C:\WINDOWS\system32\en
2008-11-15 02:20:17 ----D---- C:\WINDOWS\system32\bits
2008-11-15 02:20:17 ----D---- C:\WINDOWS\l2schemas
2008-11-15 02:18:43 ----D---- C:\WINDOWS\ServicePackFiles
2008-11-15 02:16:58 ----D---- C:\WINDOWS\network diagnostic
2008-11-15 02:07:15 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2008-11-15 02:07:14 ----D---- C:\WINDOWS\EHome
2008-11-15 01:59:43 ----A---- C:\WINDOWS\system32\MSSTDFMT.DLL
2008-11-15 01:59:42 ----D---- C:\Program Files\SpywareBlaster
2008-11-15 01:57:22 ----A---- C:\WINDOWS\choice.exe
2008-11-15 01:56:31 ----D---- C:\ie-spyad
2008-11-15 01:09:02 ----HD---- C:\$AVG8.VAULT$
2008-11-15 00:53:27 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2008-11-15 00:52:28 ----D---- C:\Program Files\AVG
2008-11-15 00:52:28 ----A---- C:\WINDOWS\system32\avgfwdx.dll
2008-11-15 00:52:27 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2008-11-15 00:32:22 ----A---- C:\WINDOWS\system32\msvcr71.dll
2008-11-15 00:32:22 ----A---- C:\WINDOWS\system32\msvcp71.dll
2008-11-15 00:29:57 ----D---- C:\WINDOWS\system32\Adobe
2008-11-15 00:25:13 ----D---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\Macromedia
2008-11-15 00:25:12 ----D---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\Adobe
2008-11-15 00:19:24 ----A---- C:\WINDOWS\system32\muweb.dll
2008-11-15 00:19:24 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2008-11-15 00:19:24 ----A---- C:\WINDOWS\system32\mucltui.dll
2008-11-14 23:56:19 ----D---- C:\Program Files\Microsoft Silverlight
2008-11-14 23:48:25 ----HDC---- C:\WINDOWS\$NtUninstallKB957097_0$
2008-11-14 23:48:08 ----A---- C:\WINDOWS\system32\MRT.INI
2008-11-14 23:47:42 ----A---- C:\WINDOWS\system32\MRT.exe
2008-11-14 23:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2008-11-14 23:47:33 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2008-11-14 23:47:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956390$
2008-11-14 23:47:20 ----HDC---- C:\WINDOWS\$NtUninstallKB957095_0$
2008-11-14 23:47:14 ----HDC---- C:\WINDOWS\$NtUninstallKB956841_0$
2008-11-14 23:47:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2008-11-14 23:47:08 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-11-14 23:47:04 ----HDC---- C:\WINDOWS\$NtUninstallKB954211_0$
2008-11-14 23:46:27 ----D---- C:\Program Files\MSBuild
2008-11-14 23:44:21 ----D---- C:\WINDOWS\system32\XPSViewer
2008-11-14 23:43:53 ----D---- C:\Program Files\Reference Assemblies
2008-11-14 23:42:59 ----N---- C:\WINDOWS\system32\spmsg2.dll
2008-11-14 23:42:54 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2008-11-14 23:42:51 ----D---- C:\6b632ebb58ede45d95ae6323
2008-11-14 23:41:58 ----HDC---- C:\WINDOWS\$NtUninstallKB938464_0$
2008-11-14 23:41:55 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2008-11-14 23:41:51 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-11-14 23:41:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2008-11-14 23:41:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2008-11-14 23:41:42 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2008-11-14 23:41:39 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2008-11-14 23:41:37 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2008-11-14 23:41:33 ----HDC---- C:\WINDOWS\$NtUninstallKB951698_0$
2008-11-14 23:41:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2008-11-14 23:41:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2008-11-14 23:41:17 ----D---- C:\WINDOWS\WBEM
2008-11-14 23:41:16 ----D---- C:\WINDOWS\system32\en-US
2008-11-14 23:40:24 ----HDC---- C:\WINDOWS\ie7
2008-11-14 23:40:18 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2008-11-14 23:40:11 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2008-11-14 23:40:02 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2008-11-14 23:40:01 ----A---- C:\WINDOWS\system32\xmllite.dll
2008-11-14 23:39:04 ----A---- C:\WINDOWS\system32\cttele.dll
2008-11-14 23:38:53 ----D---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\Creative
2008-11-14 23:38:53 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2008-11-14 23:38:35 ----D---- C:\WINDOWS\system32\data
2008-11-14 23:36:24 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2008-11-14 23:36:22 ----HDC---- C:\WINDOWS\$NtUninstallKB891122$
2008-11-14 23:35:58 ----D---- C:\WINDOWS\RegisteredPackages
2008-11-14 23:35:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-11-14 23:35:03 ----RSD---- C:\WINDOWS\assembly
2008-11-14 23:35:03 ----D---- C:\WINDOWS\system32\URTTemp
2008-11-14 23:35:03 ----D---- C:\WINDOWS\Microsoft.NET
2008-11-14 22:45:55 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2008-11-14 22:45:49 ----D---- C:\WINDOWS\system32\PreInstall
2008-11-14 22:45:49 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2008-11-14 22:45:47 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2008-11-14 22:45:47 ----HD---- C:\WINDOWS\$hf_mig$
2008-11-14 22:45:46 ----N---- C:\WINDOWS\system32\spmsg.dll
2008-11-14 22:43:27 ----A---- C:\WINDOWS\system32\wups2.dll
2008-11-14 22:43:27 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2008-11-14 22:43:27 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2008-11-14 22:43:26 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2008-11-14 22:43:26 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2008-11-14 22:39:18 ----A---- C:\WINDOWS\system32\wpa.bak
2008-11-14 20:53:17 ----A---- C:\WINDOWS\system32\CapabilityTable.exe
2008-11-14 20:53:10 ----HD---- C:\Program Files\InstallShield Installation Information
2008-11-14 20:53:10 ----D---- C:\Program Files\NVIDIA Corporation
2008-11-14 20:53:10 ----D---- C:\Program Files\Common Files\NVIDIA Shared
2008-11-14 20:52:49 ----A---- C:\WINDOWS\system32\nvuaudio.exe
2008-11-14 20:52:29 ----A---- C:\WINDOWS\system32\nvunrm.exe
2008-11-14 20:52:28 ----A---- C:\WINDOWS\system32\nvusmb.exe
2008-11-14 20:26:50 ----SHD---- C:\RECYCLER
2008-11-14 20:24:26 ----D---- C:\WINDOWS\nview
2008-11-14 20:24:26 ----A---- C:\WINDOWS\system32\nvudisp.exe
2008-11-14 20:24:18 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2008-11-14 20:24:16 ----D---- C:\Program Files\Common Files\InstallShield
2008-11-14 20:24:10 ----D---- C:\NVIDIA
2008-11-14 19:39:22 ----D---- C:\Program Files\support.com
2008-11-14 19:39:16 ----D---- C:\Program Files\Common Files\SupportSoft
2008-11-14 19:34:31 ----D---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\Identities
2008-11-14 19:34:15 ----ASH---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\desktop.ini
2008-11-14 19:34:14 ----SD---- C:\Documents and Settings\Terry D. Zelenitz\Application Data\Microsoft
2008-11-14 19:33:12 ----D---- C:\WINDOWS\SoftwareDistribution
2008-11-14 19:33:11 ----SD---- C:\WINDOWS\system32\Microsoft
2008-11-14 19:33:11 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-11-14 19:30:12 ----D---- C:\WINDOWS\system32\xircom
2008-11-14 19:30:12 ----D---- C:\Program Files\xerox
2008-11-14 19:30:12 ----D---- C:\Program Files\microsoft frontpage
2008-11-14 19:29:56 ----A---- C:\WINDOWS\control.ini
2008-11-14 19:29:56 ----A---- C:\AUTOEXEC.BAT
2008-11-14 19:29:42 ----A---- C:\WINDOWS\OEWABLog.txt
2008-11-14 19:29:38 ----A---- C:\WINDOWS\system32\mapi32.dll
2008-11-14 19:29:01 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-11-14 19:29:01 ----RD---- C:\WINDOWS\Offline Web Pages
2008-11-14 19:29:01 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2008-11-14 19:28:55 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2008-11-14 19:28:33 ----D---- C:\WINDOWS\system32\DirectX
2008-11-14 19:28:17 ----A---- C:\WINDOWS\system32\atrace.dll
2008-11-14 19:28:15 ----A---- C:\WINDOWS\system32\desktop.ini
2008-11-14 19:28:15 ----A---- C:\WINDOWS\desktop.ini
2008-11-14 19:28:09 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2008-11-14 19:28:08 ----D---- C:\Program Files\Common Files\Services
2008-11-14 19:28:08 ----A---- C:\WINDOWS\system32\acctres.dll
2008-11-14 19:28:06 ----SD---- C:\WINDOWS\Tasks
2008-11-14 19:28:06 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2008-11-14 19:28:05 ----D---- C:\Program Files\Common Files\MSSoap
2008-11-14 19:28:02 ----D---- C:\WINDOWS\srchasst
2008-11-14 19:28:01 ----D---- C:\WINDOWS\system32\Macromed
2008-11-14 19:27:59 ----A---- C:\WINDOWS\system32\wuweb.dll
2008-11-14 19:27:59 ----A---- C:\WINDOWS\system32\wups.dll
2008-11-14 19:27:59 ----A---- C:\WINDOWS\system32\wucltui.dll
2008-11-14 19:27:59 ----A---- C:\WINDOWS\system32\wuauserv.dll
2008-11-14 19:27:59 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2008-11-14 19:27:59 ----A---- C:\WINDOWS\system32\wuaueng.dll
2008-11-14 19:27:59 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2008-11-14 19:27:59 ----A---- C:\WINDOWS\system32\wuauclt.exe
2008-11-14 19:27:59 ----A---- C:\WINDOWS\system32\wuapi.dll
2008-11-14 19:27:58 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2008-11-14 19:27:58 ----A---- C:\WINDOWS\system32\qmgr.dll
2008-11-14 19:27:58 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2008-11-14 19:27:58 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2008-11-14 19:27:55 ----D---- C:\Program Files\Movie Maker
2008-11-14 19:27:52 ----A---- C:\WINDOWS\system32\safrslv.dll
2008-11-14 19:27:52 ----A---- C:\WINDOWS\system32\safrdm.dll
2008-11-14 19:27:52 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2008-11-14 19:27:52 ----A---- C:\WINDOWS\system32\racpldlg.dll
2008-11-14 19:27:50 ----A---- C:\WINDOWS\system32\fltmc.exe
2008-11-14 19:27:50 ----A---- C:\WINDOWS\system32\fltlib.dll
2008-11-14 19:27:49 ----D---- C:\WINDOWS\system32\Restore
2008-11-14 19:27:49 ----A---- C:\WINDOWS\system32\srsvc.dll
2008-11-14 19:27:49 ----A---- C:\WINDOWS\system32\srrstr.dll
2008-11-14 19:27:49 ----A---- C:\WINDOWS\system32\srclient.dll
2008-11-14 19:27:49 ----A---- C:\WINDOWS\system32\mnmdd.dll
2008-11-14 19:27:49 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2008-11-14 19:27:49 ----A---- C:\WINDOWS\system32\ils.dll
2008-11-14 19:27:48 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2008-11-14 19:27:48 ----A---- C:\WINDOWS\system32\msconf.dll
2008-11-14 19:27:48 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2008-11-14 19:27:46 ----D---- C:\Program Files\NetMeeting
2008-11-14 19:27:46 ----A---- C:\WINDOWS\system32\msoert2.dll
2008-11-14 19:27:46 ----A---- C:\WINDOWS\system32\msoeacct.dll
2008-11-14 19:27:45 ----A---- C:\WINDOWS\system32\inetres.dll
2008-11-14 19:27:45 ----A---- C:\WINDOWS\system32\inetcomm.dll
2008-11-14 19:27:44 ----D---- C:\Program Files\Outlook Express
2008-11-14 19:27:44 ----A---- C:\WINDOWS\system32\schedsvc.dll
2008-11-14 19:27:44 ----A---- C:\WINDOWS\system32\mstinit.exe
2008-11-14 19:27:44 ----A---- C:\WINDOWS\system32\mstask.dll
2008-11-14 19:27:43 ----A---- C:\WINDOWS\system32\isign32.dll
2008-11-14 19:27:43 ----A---- C:\WINDOWS\system32\inetcfg.dll
2008-11-14 19:27:43 ----A---- C:\WINDOWS\system32\icwphbk.dll
2008-11-14 19:27:43 ----A---- C:\WINDOWS\system32\icwdial.dll
2008-11-14 19:27:39 ----D---- C:\Program Files\Common Files\System
2008-11-14 19:27:34 ----D---- C:\Program Files\Internet Explorer
2008-11-14 19:27:21 ----A---- C:\WINDOWS\vbaddin.ini
2008-11-14 19:27:21 ----A---- C:\WINDOWS\vb.ini
2008-11-14 19:27:16 ----D---- C:\WINDOWS\Registration
2008-11-14 19:26:54 ----D---- C:\Program Files\Online Services
2008-11-14 19:26:53 ----D---- C:\Program Files\Windows Media Player
2008-11-14 19:26:49 ----D---- C:\Program Files\Messenger
2008-11-14 19:26:45 ----D---- C:\Program Files\MSN Gaming Zone
2008-11-14 19:26:45 ----A---- C:\WINDOWS\system32\write.exe
2008-11-14 19:26:36 ----A---- C:\WINDOWS\system32\sndvol32.exe
2008-11-14 19:26:36 ----A---- C:\WINDOWS\system32\hticons.dll
2008-11-14 19:26:35 ----A---- C:\WINDOWS\system32\avwav.dll
2008-11-14 19:26:35 ----A---- C:\WINDOWS\system32\avtapi.dll
2008-11-14 19:26:35 ----A---- C:\WINDOWS\system32\avmeter.dll
2008-11-14 19:26:34 ----A---- C:\WINDOWS\system32\winchat.exe
2008-11-14 19:26:27 ----A---- C:\WINDOWS\system32\getuname.dll
2008-11-14 19:26:26 ----A---- C:\WINDOWS\system32\charmap.exe
2008-11-14 19:26:26 ----A---- C:\WINDOWS\system32\calc.exe
2008-11-14 19:26:25 ----A---- C:\WINDOWS\system32\winmine.exe
2008-11-14 19:26:25 ----A---- C:\WINDOWS\system32\sol.exe
2008-11-14 19:26:25 ----A---- C:\WINDOWS\system32\mshearts.exe
2008-11-14 19:26:25 ----A---- C:\WINDOWS\system32\freecell.exe
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\tslabels.ini
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\tskill.exe
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\tscon.exe
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\shadow.exe
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\rwinsta.exe
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\reset.exe
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\regini.exe
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2008-11-14 19:26:24 ----A---- C:\WINDOWS\system32\qwinsta.exe
2008-11-14 19:26:23 ----A---- C:\WINDOWS\system32\qappsrv.exe
2008-11-14 19:26:23 ----A---- C:\WINDOWS\system32\msg.exe
2008-11-14 19:26:23 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2008-11-14 19:26:23 ----A---- C:\WINDOWS\system32\logoff.exe
2008-11-14 19:26:23 ----A---- C:\WINDOWS\system32\cdmodem.dll
2008-11-14 19:26:22 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2008-11-14 19:26:22 ----A---- C:\WINDOWS\system32\mtxex.dll
2008-11-14 19:26:22 ----A---- C:\WINDOWS\system32\mtxdm.dll
2008-11-14 19:26:22 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2008-11-14 19:26:21 ----A---- C:\WINDOWS\system32\stclient.dll
2008-11-14 19:26:21 ----A---- C:\WINDOWS\system32\comsnap.dll
2008-11-14 19:26:21 ----A---- C:\WINDOWS\system32\comrepl.dll
2008-11-14 19:26:21 ----A---- C:\WINDOWS\system32\comaddin.dll
2008-11-14 19:26:16 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2008-11-14 19:25:45 ----D---- C:\Program Files\MSN
2008-11-14 19:25:43 ----A---- C:\WINDOWS\system32\accwiz.exe
2008-11-14 19:25:42 ----A---- C:\WINDOWS\system32\sndrec32.exe
2008-11-14 19:25:42 ----A---- C:\WINDOWS\system32\mplay32.exe
2008-11-14 19:25:42 ----A---- C:\WINDOWS\system32\hypertrm.dll
2008-11-14 19:25:41 ----D---- C:\Program Files\Windows NT
2008-11-14 19:25:40 ----A---- C:\WINDOWS\system32\mspaint.exe
2008-11-14 19:25:40 ----A---- C:\WINDOWS\system32\clipbrd.exe
2008-11-14 19:25:39 ----A---- C:\WINDOWS\system32\spider.exe
2008-11-14 19:25:38 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2008-11-14 19:25:37 ----A---- C:\WINDOWS\system32\remotepg.dll
2008-11-14 19:25:37 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2008-11-14 19:25:37 ----A---- C:\WINDOWS\system32\mstscax.dll
2008-11-14 19:25:37 ----A---- C:\WINDOWS\system32\mstsc.exe
2008-11-14 19:25:36 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2008-11-14 19:25:36 ----A---- C:\WINDOWS\system32\sessmgr.exe
2008-11-14 19:25:36 ----A---- C:\WINDOWS\system32\rdshost.exe
2008-11-14 19:25:36 ----A---- C:\WINDOWS\system32\rdchost.dll
2008-11-14 19:25:35 ----A---- C:\WINDOWS\system32\termsrv.dll
2008-11-14 19:25:35 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2008-11-14 19:25:35 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2008-11-14 19:25:35 ----A---- C:\WINDOWS\system32\rdpclip.exe
2008-11-14 19:25:34 ----D---- C:\WINDOWS\system32\MsDtc
2008-11-14 19:25:34 ----A---- C:\WINDOWS\system32\qprocess.exe
2008-11-14 19:25:34 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2008-11-14 19:25:34 ----A---- C:\WINDOWS\system32\icaapi.dll
2008-11-14 19:25:34 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2008-11-14 19:25:33 ----A---- C:\WINDOWS\system32\mtxoci.dll
2008-11-14 19:25:33 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2008-11-14 19:25:32 ----A---- C:\WINDOWS\system32\xolehlp.dll
2008-11-14 19:25:32 ----A---- C:\WINDOWS\system32\msdtctm.dll
2008-11-14 19:25:30 ----A---- C:\WINDOWS\system32\msdtclog.dll
2008-11-14 19:25:30 ----A---- C:\WINDOWS\system32\msdtc.exe
2008-11-14 19:25:28 ----D---- C:\WINDOWS\system32\Com
2008-11-14 19:25:28 ----A---- C:\WINDOWS\system32\colbact.dll
2008-11-14 19:25:28 ----A---- C:\WINDOWS\system32\clbcatex.dll
2008-11-14 19:25:28 ----A---- C:\WINDOWS\system32\catsrvps.dll
2008-11-14 19:25:27 ----A---- C:\WINDOWS\system32\catsrvut.dll
2008-11-14 19:25:27 ----A---- C:\WINDOWS\system32\catsrv.dll
2008-11-14 19:25:26 ----A---- C:\WINDOWS\system32\comsvcs.dll
2008-11-14 19:25:25 ----A---- C:\WINDOWS\system32\comuid.dll
2008-11-14 19:25:24 ----A---- C:\WINDOWS\system32\clbcatq.dll
2008-11-14 19:25:14 ----A---- C:\WINDOWS\system32\servdeps.dll
2008-11-14 19:25:13 ----A---- C:\WINDOWS\system32\mmfutil.dll
2008-11-14 19:25:13 ----A---- C:\WINDOWS\system32\licwmi.dll
2008-11-14 19:25:13 ----A---- C:\WINDOWS\system32\cmprops.dll
2008-11-14 14:23:17 ----A---- C:\WINDOWS\system32\h323log.txt
2008-11-14 14:21:23 ----A---- C:\WINDOWS\system32\hidserv.dll
2008-11-14 14:20:16 ----A---- C:\WINDOWS\system32\ksuser.dll
2008-11-14 14:20:03 ----A---- C:\WINDOWS\system32\usbui.dll
2008-11-14 14:19:02 ----A---- C:\WINDOWS\imsins.BAK
2008-11-14 14:19:00 ----SHD---- C:\WINDOWS\Installer
2008-11-14 14:19:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-11-14 14:18:59 ----A---- C:\WINDOWS\ODBCINST.INI
2008-11-14 14:18:56 ----RD---- C:\Program Files
2008-11-14 14:18:56 ----D---- C:\Program Files\Common Files\SpeechEngines
2008-11-14 14:18:56 ----D---- C:\Program Files\Common Files\Microsoft Shared
2008-11-14 14:18:56 ----D---- C:\Program Files\Common Files
2008-11-14 14:18:54 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2008-11-14 14:18:54 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2008-11-14 14:18:54 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdur.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdru.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2008-11-14 14:18:52 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2008-11-14 14:18:51 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2008-11-14 14:18:51 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2008-11-14 14:18:51 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2008-11-14 14:18:50 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2008-11-14 14:18:50 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2008-11-14 14:18:50 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2008-11-14 14:18:50 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2008-11-14 14:18:49 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2008-11-14 14:18:49 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2008-11-14 14:18:49 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2008-11-14 14:18:49 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2008-11-14 14:18:49 ----RA---- C:\WINDOWS\system32\kbdest.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdro.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2008-11-14 14:18:48 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2008-11-14 14:18:46 ----A---- C:\WINDOWS\system32\spxcoins.dll
2008-11-14 14:18:46 ----A---- C:\WINDOWS\system32\irclass.dll
2008-11-14 14:18:46 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2008-11-14 14:18:46 ----A---- C:\WINDOWS\system32\dgsetup.dll
2008-11-14 14:18:46 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2008-11-14 14:18:44 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2008-11-14 14:18:44 ----A---- C:\WINDOWS\TASKMAN.EXE
2008-11-14 14:18:43 ----A---- C:\WINDOWS\system32\batt.dll
2008-11-14 14:18:43 ----A---- C:\WINDOWS\notepad.exe
2008-11-14 14:18:38 ----A---- C:\WINDOWS\system32\storprop.dll
2008-11-14 14:18:32 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2008-11-14 14:16:51 ----RA---- C:\WINDOWS\SET8.tmp
2008-11-14 14:16:47 ----RA---- C:\WINDOWS\SET4.tmp
2008-11-14 14:16:45 ----RA---- C:\WINDOWS\SET3.tmp
2008-11-14 14:16:40 ----D---- C:\WINDOWS\system32\CatRoot2
2008-11-14 14:16:40 ----D---- C:\WINDOWS\system32\CatRoot
2008-11-14 14:16:34 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-11-14 14:16:13 ----A---- C:\WINDOWS\setuplog.txt
2008-11-14 14:16:09 ----SHD---- C:\System Volume Information
2008-11-14 14:16:09 ----D---- C:\Documents and Settings
2008-11-14 14:14:53 ----SH---- C:\boot.ini
2008-11-14 14:10:39 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-11-14 14:10:39 ----RSD---- C:\WINDOWS\Fonts
2008-11-14 14:10:39 ----RD---- C:\WINDOWS\Web
2008-11-14 14:10:39 ----HD---- C:\WINDOWS\inf
2008-11-14 14:10:39 ----D---- C:\WINDOWS\WinSxS
2008-11-14 14:10:39 ----D---- C:\WINDOWS\twain_32
2008-11-14 14:10:39 ----D---- C:\WINDOWS\Temp
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\wins
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\wbem
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\usmt
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\spool
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\ShellExt
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\Setup
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\ras
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\oobe
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\npp
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\mui
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\inetsrv
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\IME
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\icsxml
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\ias
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\export
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\drivers
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\dhcp
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\config
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\3com_dmi
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\3076
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\2052
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\1054
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\1042
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\1041
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\1037
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\1033
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\1031
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\1028
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32\1025
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system32
2008-11-14 14:10:39 ----D---- C:\WINDOWS\system
2008-11-14 14:10:39 ----D---- C:\WINDOWS\security
2008-11-14 14:10:39 ----D---- C:\WINDOWS\Resources
2008-11-14 14:10:39 ----D---- C:\WINDOWS\repair
2008-11-14 14:10:39 ----D---- C:\WINDOWS\Provisioning
2008-11-14 14:10:39 ----D---- C:\WINDOWS\PeerNet
2008-11-14 14:10:39 ----D---- C:\WINDOWS\pchealth
2008-11-14 14:10:39 ----D---- C:\WINDOWS\mui
2008-11-14 14:10:39 ----D---- C:\WINDOWS\msapps
2008-11-14 14:10:39 ----D---- C:\WINDOWS\msagent
2008-11-14 14:10:39 ----D---- C:\WINDOWS\Media
2008-11-14 14:10:39 ----D---- C:\WINDOWS\java
2008-11-14 14:10:39 ----D---- C:\WINDOWS\ime
2008-11-14 14:10:39 ----D---- C:\WINDOWS\Help
2008-11-14 14:10:39 ----D---- C:\WINDOWS\Driver Cache
2008-11-14 14:10:39 ----D---- C:\WINDOWS\Debug
2008-11-14 14:10:39 ----D---- C:\WINDOWS\Cursors
2008-11-14 14:10:39 ----D---- C:\WINDOWS\Connection Wizard
2008-11-14 14:10:39 ----D---- C:\WINDOWS\Config
2008-11-14 14:10:39 ----D---- C:\WINDOWS\AppPatch
2008-11-14 14:10:39 ----D---- C:\WINDOWS\addins
2008-11-14 14:10:39 ----D---- C:\WINDOWS

======List of files/folders modified in the last 1 months======

2008-11-14 20:27:57 ----A---- C:\WINDOWS\system.ini
2008-11-14 19:29:56 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-11-15 98440]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-11-15 26824]
R1 AvgTdiX;AVG8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2008-11-15 90632]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 Avgfwdx;Avgfwdx; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2008-11-15 29208]
R3 COMMONFX.SYS;COMMONFX.SYS; C:\WINDOWS\System32\drivers\COMMONFX.SYS [2008-06-27 99352]
R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\System32\drivers\ctac32k.sys [2008-07-07 511000]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2008-07-07 532376]
R3 CTAUDFX.SYS;CTAUDFX.SYS; C:\WINDOWS\System32\drivers\CTAUDFX.SYS [2008-06-27 555032]
R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\System32\drivers\ctprxy2k.sys [2008-07-07 14360]
R3 CTSBLFX.SYS;CTSBLFX.SYS; C:\WINDOWS\System32\drivers\CTSBLFX.SYS [2008-06-27 566296]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\System32\drivers\ctsfm2k.sys [2008-07-07 157208]
R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\System32\drivers\emupia2k.sys [2008-07-07 92696]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\System32\drivers\ha10kx2k.sys [2008-07-07 797720]
R3 hap16v2k;Creative P16V HAL Driver; C:\WINDOWS\System32\drivers\hap16v2k.sys [2008-07-07 162840]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-04 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-09-17 6132576]
R3 nvax;Service for NVIDIA® nForce™ Audio Enumerator; C:\WINDOWS\system32\drivers\nvax.sys [2005-07-26 53376]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-04-14 34176]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-04-14 13056]
R3 nvnforce;Service for NVIDIA® nForce™ Audio; C:\WINDOWS\system32\drivers\nvapu.sys [2005-07-26 415360]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2008-07-07 127512]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
S3 abp470n5;abp470n5; \??\C:\WINDOWS\system32\drivers\hghlmn.sys []
S3 afrrnqhb;afrrnqhb; C:\WINDOWS\system32\drivers\afrrnqhb.sys []
S3 Avgfwfd;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2008-11-15 29208]
S3 Bridge;MAC Bridge; C:\WINDOWS\system32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 BridgeMP;MAC Bridge Miniport; C:\WINDOWS\system32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 COMMONFX.DLL;COMMONFX.DLL; C:\WINDOWS\system32\COMMONFX.DLL [2003-10-06 114688]
S3 COMMONFX;COMMONFX; C:\WINDOWS\system32\drivers\COMMONFX.SYS [2008-06-27 99352]
S3 CT20XUT.DLL;CT20XUT.DLL; C:\WINDOWS\system32\CT20XUT.DLL [2007-04-12 164608]
S3 CTAUDFX.DLL;CTAUDFX.DLL; C:\WINDOWS\system32\CTAUDFX.DLL [2003-10-06 581632]
S3 CTAUDFX;CTAUDFX; C:\WINDOWS\system32\drivers\CTAUDFX.SYS [2008-06-27 555032]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\System32\drivers\ctdvda2k.sys [2008-07-07 347080]
S3 CTEAPSFX.DLL;CTEAPSFX.DLL; C:\WINDOWS\system32\CTEAPSFX.DLL [2007-04-12 168192]
S3 CTEDSPFX.DLL;CTEDSPFX.DLL; C:\WINDOWS\system32\CTEDSPFX.DLL [2007-04-12 280320]
S3 CTEDSPIO.DLL;CTEDSPIO.DLL; C:\WINDOWS\system32\CTEDSPIO.DLL [2007-04-12 128768]
S3 CTEDSPSY.DLL;CTEDSPSY.DLL; C:\WINDOWS\system32\CTEDSPSY.DLL [2007-04-12 323328]
S3 CTERFXFX.DLL;CTERFXFX.DLL; C:\WINDOWS\system32\CTERFXFX.DLL []
S3 CTERFXFX.SYS;CTERFXFX.SYS; C:\WINDOWS\System32\drivers\CTERFXFX.SYS [2008-06-27 100888]
S3 CTERFXFX;CTERFXFX; C:\WINDOWS\system32\drivers\CTERFXFX.SYS [2008-06-27 100888]
S3 CTEXFIFX.DLL;CTEXFIFX.DLL; C:\WINDOWS\system32\CTEXFIFX.DLL [2007-04-12 1317632]
S3 CTHWIUT.DLL;CTHWIUT.DLL; C:\WINDOWS\system32\CTHWIUT.DLL [2007-04-12 66816]
S3 CTSBLFX.DLL;CTSBLFX.DLL; C:\WINDOWS\system32\CTSBLFX.DLL [2003-10-06 606208]
S3 CTSBLFX;CTSBLFX; C:\WINDOWS\system32\drivers\CTSBLFX.SYS [2008-06-27 566296]
S3 hap17v2k;Creative P17V HAL Driver; C:\WINDOWS\system32\drivers\hap17v2k.sys [2008-07-07 189464]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 W8335XP;NETGEAR WG311v3 802.11g Wireless PCI Adapter for Windows XP (8335); C:\WINDOWS\system32\DRIVERS\WG311v3XP.sys [2005-08-22 280576]
S3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2007-12-06 285952]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg8emc;AVG8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-11-15 874776]
R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-11-15 231704]
R2 avgfws8;AVG8 Firewall; C:\PROGRA~1\AVG\AVG8\avgfws8.exe [2008-11-15 1212184]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-09-17 163908]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]

-----------------EOF-----------------


Here is the Info

info.txt logfile of random's system information tool 1.04 2008-11-15 23:11:08

======Uninstall list======

-->MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F}
-->"C:\Program Files\Creative Installation Information\CREATIVE_MEDIASOURCE_U\Setup.exe" /remove /nolog/l0x0009
-->"C:\Program Files\Creative Installation Information\E-CENTER_NET_CONTENT_U\Setup.exe" /remove /nolog/l0x0009
-->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_MINIDISC_U\Setup.exe" /remove /nolog/l0x0009
-->"C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_ONLINESTORE_U\Setup.exe" /remove /nolog/l0x0009
-->"C:\Program Files\Creative Installation Information\MEDIASOURCE_PLAYER_SKINPACK_U\Setup.exe" /remove /nolog/l0x0009
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44267176-A318-447F-A62A-0A5FD608C34F}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9 /remove
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B9AE66C-2A8F-4FB2-85D7-416AFFAE8408}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x9
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.0.9-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70900000002}
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
AVG 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
BitTornado 0.3.17-->C:\Program Files\BitTornado\uninst.exe
Creative Audio Console-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B9AE66C-2A8F-4FB2-85D7-416AFFAE8408}\setup.exe" -l0x9 /remove
Creative MediaSource 5-->RunD
  • 0

#4
kahdah
Posted 15 November 2008 - 10:18 PM

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Please download ATF Cleaner by Atribune.
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.
==============================================
Please do a scan with Kaspersky Online Scanner

Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

Click on the Accept button and install any components it needs.
  • The program will install and then begin downloading the latest definition files.
  • After the files have been downloaded on the left side of the page in the Scan section select My Computer
  • This will start the program and scan your system.
  • The scan will take a while, so be patient and let it run.
  • Once the scan is complete, click on View scan report
  • Now, click on the Save Report as button.
  • Save the file to your desktop.
  • Copy and paste that information in your next post.

  • 0

#5
twismz44
Posted 15 November 2008 - 10:22 PM

twismz44

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
Don't know why the last one got cut off, but here is the rest.

It continues beginning with the last line




Creative MediaSource 5-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}\setup.exe" -l0x9 /remove
Creative MediaSource DVD-Audio Player-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44267176-A318-447F-A62A-0A5FD608C34F}\setup.exe" -l0x9 /remove
ERUNT 1.1j-->"C:\Program Files\ERUNT\unins000.exe"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format SDK (KB902344)-->"C:\WINDOWS\$NtUninstallKB902344$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft Base Smart Card Cryptographic Service Provider Package-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 6.0 Parser (KB927977)-->MsiExec.exe /I{5A710547-B58E-488B-828D-CA9A25A0533C}
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
NvMixer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D7A6C517-11F2-419F-B5BB-27772B939698}\Setup.exe" -uninstall
Security Update for Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Security Update for Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Security Update for Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
SpywareBlaster 4.1-->"C:\Program Files\SpywareBlaster\unins000.exe"
TVAnts 1.0-->C:\PROGRA~1\TVAnts\UNWISE.EXE C:\PROGRA~1\TVAnts\INSTALL.LOG
Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format SDK Hotfix - KB891122-->"C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
Windows Media Player 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
Xvid 1.1.3 final uninstall-->"C:\Program Files\Xvid\unins000.exe"

======Hosts File======

127.0.0.1 localhost
127.0.0.1 ad.a8.net
127.0.0.1 asy.a8ww.net
127.0.0.1 a9rhiwa.cn #[Google.Warning]
127.0.0.1 www.a9rhiwa.cn
127.0.0.1 acezip.net #[SiteAdvisor.acezip.net]
127.0.0.1 www.acezip.net #[Win32/Adware.180Solutions]
127.0.0.1 phpadsnew.abac.com
127.0.0.1 a.abnad.net
127.0.0.1 b.abnad.net

======Security center information======

AV: AVG Internet Security
FW: AVG Firewall

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 39 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION"=2701
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------
  • 0

#6
twismz44
Posted 15 November 2008 - 11:47 PM

twismz44

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Sunday, November 16, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Saturday, November 15, 2008 22:50:37
Records in database: 1386277
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\

Scan statistics:
Files scanned: 46220
Threat name: 0
Infected objects: 0
Suspicious objects: 0
Duration of the scan: 00:46:41

No malware has been detected. The scan area is clean.

The selected area was scanned.
  • 0

#7
kahdah
Posted 16 November 2008 - 12:05 AM

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
HI can you tell me where AVg is detecting those threats?
  • 0

#8
twismz44
Posted 16 November 2008 - 02:13 AM

twismz44

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
AVG had detected them in my Nvidia folder where my drivers are and there were hundreds in the system volume information\restore folders. I re-ran avg on the infected folders and it came up with nothing this time. I scanned the entire system and I am clean. I don't know what changed, I had restarted after the first scan and they still existed. I haven't done anything since I was contacted by you.

I am sorry for apparently wasting your time, I appreciate the help you gave, but as far as I can tell I am free of problems. If you want me to do anything "just to be sure" let me know.

And again..Thank you.
  • 0

#9
kahdah
Posted 16 November 2008 - 07:42 AM

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Yes your logs are clean.

Please delete Rsit from off of your desktop and also delete this folder >C:\Rsit
=========
System Restore
Then I will need you to reset your System Restore points.
The link below shows how to create a clean restore point.
How to Turn On and Turn Off System Restore in Windows XP
http://support.micro...kb/310405/en-us

If you are using Vista then see this link > http://www.bleepingc...143.html#manual
=====================================
Your log is clean. :)

The following is a list of tools and utilities that I like to suggest to people.
You do not have to have all or any of them they are only suggestions.
This list is full of great tools and utilities to help you understand how you got infected and how to keep from getting infected again.

Spybot Search & Destroy-Uber powerful tool which can search and annhilate nasties that make it onto your system. Now with an Immunize section that will help prevent future infections.

Spyware Blaster - Great prevention tool to keep nasties from installing on your system.

Spywareguard-Works as a Spyware "Shield" to protect your computer from getting malware in the first place.

Windows Updates - It is very important to make sure that both Internet Explorer and Windows are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.

Prevention article To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections please read the Prevention artice by Miekiemoes.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP