I am running Dell Precision 370 Workstation, with Windows XP Pro.
Over the course of the last 2 days I have been receiving a block notification from avast reading this:
Object: 91.217.162.176/dm5.exe
Infection: URL:Mal
Action: Blocked
Process: C:\WINDOWS\System32\WScript.exe
This is confusing me a bit, as I am turning up nothing on avast and have cleaned and removed 2 things via a malwarebyte scan, and 1 via superantisyware, yet the problem still continues. Best I can tell it seems to be something masked internally trying to exit the network via WScript.exe? Not sure. On a sidenote, and not sure if it is related (I have a thread in the Networking section regarding this, but will mention in case it is related), I have been having a wierd DNS: Unknown issue via my modem, sometimes in which I will see WScript.exe mentioned. So not sure if this thing is somehow effecting my modem. However my internet connection has been unstable (frequent disconnect/reconnects) over the past month, but I have only seen this particular message for the last couple days.
Here is my log:
OTL logfile created on: 11/30/2010 7:18:36 PM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\Administrator\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 61.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.24 Gb Total Space | 12.76 Gb Free Space | 34.25% Space Free | Partition Type: NTFS
Computer Name: WXP-36WZT61 | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2010/11/30 19:10:43 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\My Documents\Downloads\OTL.exe
PRC - [2010/11/01 16:36:03 | 000,974,904 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2010/10/08 14:00:46 | 022,234,512 | ---- | M] (magicJack L.P.) -- C:\Documents and Settings\Administrator\Application Data\mjusbsp\magicJack.exe
PRC - [2010/09/07 10:12:02 | 002,838,912 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/09/07 10:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/04/16 17:36:42 | 000,026,480 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Contacts\wlcomm.exe
PRC - [2010/03/24 14:42:10 | 000,599,328 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe
PRC - [2010/02/25 16:11:04 | 000,856,064 | ---- | M] () -- C:\Program Files\TVersity\Media Server\MediaServer.exe
PRC - [2010/01/15 18:13:18 | 000,040,960 | ---- | M] (Agere Systems) -- C:\WINDOWS\ltmsg.exe
PRC - [2009/10/24 02:18:54 | 000,360,224 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
PRC - [2009/05/19 10:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/07/17 19:08:45 | 002,094,352 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
PRC - [2007/07/17 18:30:03 | 001,687,824 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
PRC - [2007/07/17 18:29:24 | 000,278,288 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
PRC - [2006/11/02 19:40:12 | 000,174,656 | ---- | M] () -- C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
PRC - [2006/10/26 12:45:04 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WISPTIS.EXE
PRC - [2004/10/14 14:42:54 | 001,404,928 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe
========== Modules (SafeList) ==========
MOD - [2010/11/30 19:10:43 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\My Documents\Downloads\OTL.exe
MOD - [2010/08/23 11:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - [2010/09/07 10:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/09/07 10:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/09/07 10:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/02/25 16:11:04 | 000,856,064 | ---- | M] () [Auto | Running] -- C:\Program Files\TVersity\Media Server\MediaServer.exe -- (TVersityMediaServer)
SRV - [2009/10/24 02:18:54 | 000,360,224 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider)
SRV - [2009/05/19 10:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2006/11/02 19:40:12 | 000,174,656 | ---- | M] () [Auto | Start_Pending] -- C:\Program Files\Common Files\Protexis\License Service\PSIService.exe -- (ProtexisLicensing)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\WPRO_40_1340.sys -- (WPRO_40_1340) WinPcap Packet Driver (WPRO_40_1340)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\windrvr6.sys -- (WinDriver6)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS -- (MRENDIS5)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS -- (MREMPR5)
DRV - File not found [File_System | Boot | Stopped] -- C:\WINDOWS\System32\DRIVERS\Lbd.sys -- (Lbd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\kx.sys -- (kxwdmdrv)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\aeaudio.sys -- (aeaudio)
DRV - [2010/09/07 09:52:25 | 000,046,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010/09/07 09:52:03 | 000,165,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010/09/07 09:47:46 | 000,023,376 | ---- | M] (AVAST Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010/09/07 09:47:19 | 000,100,176 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2010/09/07 09:47:07 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010/09/07 09:46:51 | 000,028,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2010/05/10 13:41:30 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010/03/17 15:53:38 | 000,021,248 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MREMP50.sys -- (MREMP50)
DRV - [2010/03/17 15:53:22 | 000,020,096 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MRESP50.sys -- (MRESP50)
DRV - [2010/02/17 13:25:48 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2010/01/15 18:13:18 | 000,652,689 | ---- | M] (Agere Systems) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ltmdmnt.sys -- (ltmodem5)
DRV - [2010/01/15 18:13:14 | 000,066,056 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmXlCore.sys -- (WmXlCore)
DRV - [2010/01/15 18:13:14 | 000,035,592 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmFilter.sys -- (WmFilter)
DRV - [2010/01/15 18:13:14 | 000,022,792 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2010/01/15 18:11:40 | 000,163,328 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2010/01/15 18:10:51 | 004,477,440 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2009/11/18 18:24:26 | 000,095,232 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2009/07/26 21:43:18 | 000,058,908 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2009/06/23 13:38:26 | 000,189,464 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\haP17v2k.sys -- (hap17v2k)
DRV - [2009/06/23 13:38:16 | 000,162,840 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\haP16v2k.sys -- (hap16v2k)
DRV - [2009/06/23 13:38:06 | 000,798,744 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ha10kx2k.sys -- (ha10kx2k)
DRV - [2009/06/23 13:37:54 | 000,092,696 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia)
DRV - [2009/06/23 13:37:32 | 000,157,208 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2009/06/23 13:37:22 | 000,014,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2009/06/23 13:37:10 | 000,127,512 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2009/06/23 13:36:36 | 000,347,080 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctdvda2k.sys -- (ctdvda2k)
DRV - [2009/06/23 13:36:24 | 000,528,408 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2009/06/23 13:36:14 | 000,511,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2009/06/23 13:35:04 | 000,100,888 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\CTERFXFX.SYS -- (CTERFXFX.SYS)
DRV - [2009/06/23 13:35:04 | 000,100,888 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTERFXFX.sys -- (CTERFXFX)
DRV - [2009/06/23 13:34:52 | 000,566,296 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\CTSBLFX.SYS -- (CTSBLFX.SYS)
DRV - [2009/06/23 13:34:52 | 000,566,296 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTSBLFX.sys -- (CTSBLFX)
DRV - [2009/06/23 13:34:40 | 000,555,032 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\CTAUDFX.SYS -- (CTAUDFX.SYS)
DRV - [2009/06/23 13:34:40 | 000,555,032 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTAUDFX.sys -- (CTAUDFX)
DRV - [2009/06/23 13:34:30 | 000,099,352 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\COMMONFX.SYS -- (COMMONFX.SYS)
DRV - [2009/06/23 13:34:30 | 000,099,352 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COMMONFX.sys -- (COMMONFX)
DRV - [2008/04/13 13:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008/04/13 13:45:12 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2008/04/13 11:36:05 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007/04/09 08:56:22 | 000,021,248 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2007/04/09 08:55:08 | 000,022,912 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2007/04/09 08:53:24 | 000,012,672 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2006/05/11 15:55:34 | 000,093,568 | ---- | M] (LSI Logic) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\symmpi.sys -- (Symmpi)
DRV - [2006/04/18 12:51:50 | 000,017,664 | ---- | M] (LSI Logic Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\megasas.sys -- (megasas)
DRV - [2005/05/17 21:12:40 | 000,204,800 | ---- | M] (Adaptec, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\aarich.sys -- (aarich)
DRV - [2005/02/17 23:05:16 | 000,218,112 | ---- | M] (Adaptec, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\a320raid.sys -- (a320raid)
DRV - [2004/09/17 09:02:54 | 000,732,928 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (senfilt)
DRV - [2004/06/29 09:17:16 | 000,477,952 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\iaStor.sys -- (iaStor)
DRV - [2004/04/14 18:08:00 | 000,005,600 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2004/04/07 17:14:30 | 000,048,140 | ---- | M] (Adaptec, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\aac.sys -- (aac)
DRV - [2004/02/17 15:38:30 | 000,132,608 | ---- | M] (Adaptec, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2003/12/17 07:50:00 | 000,070,801 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFlt2.Sys -- (LMouFlt2)
DRV - [2003/12/17 07:50:00 | 000,051,729 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\L8042pr2.Sys -- (L8042pr2)
DRV - [2003/04/28 11:15:38 | 000,140,544 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\fasttx2k.sys -- (fasttx2k)
DRV - [2003/04/14 23:00:40 | 000,032,512 | ---- | M] (Cypress Semiconductor) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MXOFX.SYS -- (MXOFX) USB Storage Adapter FX (MXO)
DRV - [2003/02/24 13:02:58 | 000,011,029 | ---- | M] (VMware, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\vmscsi.sys -- (vmscsi)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 58 AB AA D8 A5 8D CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:6522
========== FireFox ==========
FF - prefs.js..browser.search.defaultthis.engineName: "Swag Bucks Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.condui...={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "Swag Bucks Customized Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {AE37D527-6604-461c-8102-975CF8053A2F}:0.5.3.1
FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:3.6
FF - prefs.js..extensions.enabledItems: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:2.8.1.0
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6
FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.1
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:2.7.1.3
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.5
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/11/13 14:51:36 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/11/11 22:46:18 | 000,000,000 | ---D | M]
[2008/09/22 19:36:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Extensions
[2010/11/13 15:15:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4q1wkyqn.MW5\extensions
[2010/06/03 19:09:22 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4q1wkyqn.MW5\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/04/17 20:52:44 | 000,000,000 | ---D | M] (Zynga Toolbar) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4q1wkyqn.MW5\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2010/04/17 23:20:43 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4q1wkyqn.MW5\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2010/04/17 20:52:46 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4q1wkyqn.MW5\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/11/13 15:14:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\btkfih6s.MW3\extensions
[2010/11/13 15:04:49 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\btkfih6s.MW3\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/04/17 20:13:01 | 000,000,000 | ---D | M] (Zynga Toolbar) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\btkfih6s.MW3\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2010/04/17 23:18:07 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\btkfih6s.MW3\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2010/04/17 20:13:04 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\btkfih6s.MW3\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/11/28 01:06:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\extensions
[2009/10/28 16:47:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2010/04/27 23:15:28 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/09/11 06:37:14 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010/07/24 14:46:38 | 000,000,000 | ---D | M] (Zynga Toolbar) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2010/11/17 22:34:29 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2010/01/07 18:08:20 | 000,000,000 | ---D | M] (BBCode) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\extensions\{AE37D527-6604-461c-8102-975CF8053A2F}
[2010/09/23 22:05:53 | 000,000,000 | ---D | M] (Easy Youtube Video Downloader) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}
[2010/04/11 09:16:15 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/04/17 14:49:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\extensions\[email protected]
[2010/06/01 20:01:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\irf0yipu.MW2\extensions
[2010/04/17 19:20:36 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\irf0yipu.MW2\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/04/17 19:32:28 | 000,000,000 | ---D | M] (Zynga Toolbar) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\irf0yipu.MW2\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2010/04/17 23:16:18 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\irf0yipu.MW2\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2010/04/17 19:20:37 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\irf0yipu.MW2\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/06/01 21:13:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\sbmlusm3.MW4\extensions
[2010/04/17 20:45:26 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\sbmlusm3.MW4\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/04/17 20:45:26 | 000,000,000 | ---D | M] (Zynga Toolbar) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\sbmlusm3.MW4\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2010/04/17 23:19:17 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\sbmlusm3.MW4\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2010/04/17 20:45:29 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\sbmlusm3.MW4\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/11/13 15:01:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\udz7rftp.MW1\extensions
[2010/04/17 15:19:40 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\udz7rftp.MW1\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/04/17 15:26:34 | 000,000,000 | ---D | M] (Zynga Toolbar) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\udz7rftp.MW1\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2010/04/17 23:15:09 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\udz7rftp.MW1\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2010/04/17 15:19:42 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\udz7rftp.MW1\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2009/11/12 16:37:08 | 000,000,923 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\searchplugins\conduit.xml
[2009/05/29 22:17:28 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fd2gp3da.default\searchplugins\search-the-web.xml
[2010/11/28 01:06:34 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
O1 HOSTS File: ([2004/08/12 08:19:39 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (no name) - {656EC4B7-072B-4698-B504-2A414C1F0037} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Launch LCDMon] C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [Logitech Utility] C:\WINDOWS\Logi_MwX.Exe (Logitech Inc.)
O4 - HKLM..\Run: [LTMSG] C:\WINDOWS\ltmsg.exe (Agere Systems)
O4 - HKLM..\Run: [PMBVolumeWatcher] C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [cdloader] C:\Documents and Settings\Administrator\Application Data\mjusbsp\cdloader2.exe (magicJack L.P.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: microsoft.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoft.com ([]https in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} http://gameadvisor.f...bal/msc3121.cab (Measurement Services Client v.3.12)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creat...15111/CTPID.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/07/28 12:13:37 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{0ec2992b-8a20-11df-a834-001111c4a893}\Shell\AutoRun\command - "" = J:\PMBP_Win.exe -- File not found
O33 - MountPoints2\H\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\autorun.exe -- File not found
O33 - MountPoints2\H\Shell\phone\command - "" = H:\autorun.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKCU\...exe [@ = exefile] -- Reg Error: Key error. File not found
========== Files/Folders - Created Within 30 Days ==========
[2010/11/30 19:00:32 | 000,000,000 | --SD | C] -- C:\ComboFix
[2010/11/30 18:59:55 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/11/30 16:56:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2010/11/30 16:56:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com
[2010/11/30 16:56:44 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2010/11/13 22:35:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2010/11/13 22:32:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Google
[2010/11/13 22:30:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2010/11/13 22:30:33 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2009/06/23 11:49:14 | 000,065,536 | ---- | C] ( ) -- C:\WINDOWS\System32\a3d.dll
========== Files - Modified Within 30 Days ==========
[2010/11/30 18:56:04 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At22.job
[2010/11/30 18:56:02 | 000,008,141 | ---- | M] () -- C:\WINDOWS\System32\5123.js
[2010/11/30 18:45:01 | 000,001,010 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-71574903-185377527-2830766347-500UA.job
[2010/11/30 18:45:01 | 000,000,958 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-71574903-185377527-2830766347-500Core.job
[2010/11/30 18:35:04 | 000,000,900 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/11/30 17:56:02 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2010/11/30 17:34:11 | 000,001,048 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\magicJack.lnk
[2010/11/30 17:33:07 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/11/30 17:32:53 | 000,000,629 | ---- | M] () -- C:\WINDOWS\System32\tversity.cookies
[2010/11/30 17:32:18 | 000,000,236 | ---- | M] () -- C:\WINDOWS\tasks\OGALogon.job
[2010/11/30 17:32:17 | 000,000,896 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/11/30 17:31:54 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/11/30 17:31:43 | 2145,546,240 | -HS- | M] () -- C:\hiberfil.sys
[2010/11/30 16:56:48 | 000,001,678 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/11/30 16:56:02 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At21.job
[2010/11/30 16:49:31 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
[2010/11/30 16:49:31 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2010/11/30 16:49:31 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2010/11/30 15:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At19.job
[2010/11/30 15:49:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010/11/30 14:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At17.job
[2010/11/30 13:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At15.job
[2010/11/30 12:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At13.job
[2010/11/30 11:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At12.job
[2010/11/30 10:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At11.job
[2010/11/30 09:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At10.job
[2010/11/30 09:49:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010/11/30 08:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At9.job
[2010/11/30 07:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
[2010/11/30 05:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At5.job
[2010/11/30 04:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At6.job
[2010/11/30 03:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2010/11/30 03:49:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010/11/30 02:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[2010/11/29 23:56:04 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At24.job
[2010/11/29 22:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At20.job
[2010/11/29 21:56:08 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At18.job
[2010/11/29 21:49:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010/11/29 20:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At16.job
[2010/11/29 19:56:02 | 000,000,424 | ---- | M] () -- C:\WINDOWS\tasks\At14.job
[2010/11/28 21:49:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/11/28 00:26:08 | 000,066,560 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/08 20:04:00 | 000,001,880 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Vz In-Home Agent.lnk
[2010/11/07 20:59:37 | 000,444,202 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/11/07 20:59:36 | 000,072,078 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/11/04 18:45:52 | 000,002,344 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Google Chrome.lnk
[2010/11/04 18:45:52 | 000,002,322 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
========== Files Created - No Company Name ==========
[2010/11/30 16:56:48 | 000,001,678 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/11/29 15:56:01 | 000,008,141 | ---- | C] () -- C:\WINDOWS\System32\5123.js
[2010/11/23 19:22:31 | 2145,546,240 | -HS- | C] () -- C:\hiberfil.sys
[2010/11/23 18:03:31 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At24.job
[2010/11/23 18:03:30 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At23.job
[2010/11/23 18:03:29 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At22.job
[2010/11/23 18:03:27 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At21.job
[2010/11/23 18:03:27 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At20.job
[2010/11/23 18:03:27 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At19.job
[2010/11/23 18:03:27 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At18.job
[2010/11/23 18:03:27 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At17.job
[2010/11/23 18:03:27 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At16.job
[2010/11/23 18:03:26 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At15.job
[2010/11/23 18:03:26 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At14.job
[2010/11/23 18:03:26 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At13.job
[2010/11/23 18:03:26 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At12.job
[2010/11/23 18:03:25 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At9.job
[2010/11/23 18:03:25 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At8.job
[2010/11/23 18:03:25 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At11.job
[2010/11/23 18:03:25 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At10.job
[2010/11/23 18:03:24 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At7.job
[2010/11/23 18:03:24 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At6.job
[2010/11/23 18:03:24 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At5.job
[2010/11/23 18:03:24 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At4.job
[2010/11/23 18:03:22 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At3.job
[2010/11/23 18:03:22 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At2.job
[2010/11/23 18:03:22 | 000,000,424 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2010/11/13 22:30:41 | 000,000,900 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/11/13 22:30:41 | 000,000,896 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/11/08 20:04:00 | 000,001,880 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Vz In-Home Agent.lnk
[2010/08/27 19:25:17 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/08/27 19:25:16 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/01/15 18:37:10 | 018,030,130 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\vlc-1.0.3-win32.exe
[2009/12/19 21:48:58 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\sysprs7.dll
[2009/12/19 21:48:58 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\clauth2.dll
[2009/12/19 21:48:58 | 000,001,025 | ---- | C] () -- C:\WINDOWS\System32\clauth1.dll
[2009/12/19 21:48:58 | 000,000,338 | ---- | C] () -- C:\WINDOWS\System32\lsprst7.dll
[2009/12/19 21:48:58 | 000,000,073 | ---- | C] () -- C:\WINDOWS\System32\ssprs.dll
[2009/12/19 21:38:57 | 000,000,844 | ---- | C] () -- C:\WINDOWS\rprtvwr.ini
[2009/11/21 18:44:01 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/10/10 18:05:36 | 000,000,000 | ---- | C] () -- C:\WINDOWS\RingtoneMaker.INI
[2009/10/10 16:57:06 | 000,002,770 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2009/09/15 21:00:23 | 000,003,088 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2009/09/15 21:00:23 | 000,000,008 | RHS- | C] () -- C:\WINDOWS\System32\326B7643CF.sys
[2009/08/03 15:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2009/06/23 12:29:50 | 000,049,719 | ---- | C] () -- C:\WINDOWS\System32\instwdm.ini
[2009/06/23 12:29:48 | 000,000,054 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2009/06/23 11:51:00 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CTBurst.dll
[2008/09/24 16:26:30 | 000,000,136 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\fusioncache.dat
[2008/09/23 06:30:28 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008/09/23 03:26:22 | 000,066,560 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/09/23 03:21:29 | 000,000,076 | ---- | C] () -- C:\WINDOWS\dellstat.ini
[2008/09/23 03:21:28 | 000,000,100 | ---- | C] () -- C:\WINDOWS\lexstat.ini
[2008/09/23 02:23:42 | 000,000,088 | ---- | C] () -- C:\WINDOWS\VSWizard.ini
[2008/09/22 22:48:09 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\PnkBstrK.sys
[2008/09/22 22:20:15 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008/09/22 22:14:19 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2008/09/22 21:47:33 | 000,000,076 | ---- | C] () -- C:\WINDOWS\QUICKEN.INI
[2008/09/22 17:44:14 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2007/08/13 20:45:02 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\ctmmactl.dll
[2006/11/02 14:15:23 | 000,004,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\WinIo.sys
[2006/11/02 13:53:51 | 000,000,798 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2006/10/02 17:25:18 | 000,000,307 | ---- | C] () -- C:\WINDOWS\System32\kill.ini
[2006/07/28 12:34:06 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\e1000msg.dll
[2006/07/28 05:04:06 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2001/11/19 18:05:18 | 000,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys
========== LOP Check ==========
[2010/08/22 22:35:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Auslogics
[2009/07/24 19:56:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\com.raptr.Raptr.848BBC53270CAC248E8FA0F339176201CDEB525F.1
[2010/01/15 17:48:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\DriverFinder
[2010/04/11 13:13:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Facebook
[2009/06/20 20:15:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\GARMIN
[2008/09/23 02:24:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Leadertech
[2010/01/14 23:40:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\LolClient.F24C99354F615F3BAB18AE7B93E3F9B9E8784FA6.1
[2010/11/30 17:34:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\mjusbsp
[2010/09/02 18:54:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\prankhouse
[2010/05/16 17:13:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Silverlode Interactive
[2009/10/10 18:06:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\The Ringtone Maker Plus
[2010/11/23 20:45:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\uTorrent
[2010/08/25 19:28:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Windows Live Writer
[2009/03/31 07:35:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Windows Search
[2008/12/14 00:19:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\2DBoy
[2010/02/08 19:28:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2009/12/13 15:09:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts
[2009/06/20 20:16:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GARMIN
[2010/08/23 22:07:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\magicJack
[2010/07/21 18:07:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/11/29 21:49:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 1).job
[2010/11/30 03:49:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 2).job
[2010/11/30 09:49:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 3).job
[2010/11/30 15:49:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 4).job
[2010/11/28 21:49:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2010/11/30 16:49:31 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2010/11/30 09:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job
[2010/11/30 10:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job
[2010/11/30 11:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job
[2010/11/30 12:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job
[2010/11/29 19:56:02 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At14.job
[2010/11/30 13:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job
[2010/11/29 20:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job
[2010/11/30 14:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job
[2010/11/29 21:56:08 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job
[2010/11/30 15:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At19.job
[2010/11/30 16:49:31 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2010/11/29 22:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job
[2010/11/30 16:56:02 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job
[2010/11/30 18:56:04 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job
[2010/11/30 17:56:02 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job
[2010/11/29 23:56:04 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At24.job
[2010/11/30 02:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2010/11/30 03:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2010/11/30 05:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job
[2010/11/30 04:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job
[2010/11/30 16:49:31 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job
[2010/11/30 07:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At8.job
[2010/11/30 08:56:01 | 000,000,424 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job
[2010/11/30 17:32:18 | 000,000,236 | ---- | M] () -- C:\WINDOWS\Tasks\OGALogon.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 478 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 178 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:07BF512B
< End of report >
Much appreciative for any help, and thanks in advance!