[jbonello]

Good morning.

Here are the results from MWav (infected list only):

Object "BookmarkExpress Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "BookmarkExpress Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "BookmarkExpress Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Real\GToolbar\BarControl.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\system32\RTCDLL.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\system32\pxwma.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\cmmgr32.exe" refers to invalid object "C:\WINNT\system32\cmmgr32.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\udfrinst.exe" refers to invalid object "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\udfrinst.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\YourApp.exe" refers to invalid object "C:\Program Files\Nvidia Corporation\Nvidia Demos\Dawn\yourapp.Exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Program Files\Dell\OpenManage\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Program Files\Dell\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\Inf\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\Mofs\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Program Files\Intel\ASF Agent\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Program Files\Intel\ASF Agent\Data\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Program Files\Intel\ASF Agent\Resource\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Program Files\Intel\ASF Agent\Providers\". Action Taken: No Action Taken.
Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".ape". Action Taken: No Action Taken.
Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".net". Action Taken: No Action Taken.
Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".php". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "ieupdate". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "InstallShield_{BE20E2F5-1903-4AAE-B1AF-2046E586C925}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB329115". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB824105". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB824146". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB825119". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB826232". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB828028". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB828035". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB828741". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB828749". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB834707-IE6SP1-20040929.091901". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB835732". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB837001". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB839643-DirectX9". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB839645". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB840315". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB840987". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB841356". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB841533". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB841872". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB841873". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB842526". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB889293-IE6SP1-20041111.235619". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "MSMSGS". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "oeupdate". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q828026". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "QuickTime". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "SpyCatcher_is1". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "vgxupdate". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "WinZip". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{00D20920-7E20-11D0-B291-00C04FC31D18}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{00D20921-7E20-11D0-B291-00C04FC31D18}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{00D20923-7E20-11D0-B291-00C04FC31D18}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{01111F00-3E00-11D2-8470-0060089874ED}" refers to invalid object "C:\Program Files\support.com\bin\tgctlins.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{01112B00-3E00-11D2-8470-0060089874ED}" refers to invalid object "C:\Program Files\support.com\bin\tgrc.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{01118c00-3e00-11d2-8470-0060089874ed}" refers to invalid object "E:\install.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{014C82E2-47AB-421A-ACA8-72C7AA4DC43C}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{015BF83E-2A92-444B-B3A7-3D87785A1DBE}" refers to invalid object "C:\Program Files\Intel\NCS\EAL\NE8023PS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{03F35F7C-F704-4055-AF0A-E0D6A94C3404}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{04921709-B159-11d1-9207-0000F8758E66}" refers to invalid object "C:\WINNT\system32\dxtmsft3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0998BB05-DFFD-11CF-927F-00AA00688A38}" refers to invalid object "C:\WINNT\system32\dsctl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0D0012C1-9D78-11D1-B5FE-00A024080301}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPEXPIMP.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0E064AEC-9D99-11D0-ABE5-00AA0064D470}" refers to invalid object "C:\WINNT\system32\cdonts.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0E47C6FC-8D90-4B46-8D40-C8C0240EC6FD}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1101FE09-9117-4B0B-B58D-F1FDB72AB4BF}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\PROSetPS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{119FA07A-79F0-41FC-99F8-B14151E63EDC}" refers to invalid object "C:\PROGRA~1\Intel\NCS\WMIProv\8023\CDM\NcsDiag.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{141DBAF1-55FB-11D1-B83E-00A0C933BE86}" refers to invalid object "C:\WINNT\system32\dxtmsft3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{167701E3-FDCF-11D0-A48E-006097C549FF}" refers to invalid object "C:\WINNT\system32\br549.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{167701E4-FDCF-11D0-A48E-006097C549FF}" refers to invalid object "C:\WINNT\system32\br549.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1AE60860-8297-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1AEB1360-5AFC-11D0-B806-00C04FD706EC}" refers to invalid object "C:\WINNT\system32\thumbvw.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1B09DB64-6967-11D4-99CE-0090278EF9D3}" refers to invalid object "C:\Program Files\support.com\bin\tgctlins.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1B7A3300-3E64-11D1-B5FE-00A024080301}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPEXPIMP.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1C2CDF89-C345-40F1-8246-949E7E98AD7F}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1FB895B8-BC8D-4701-9341-30AE0EC17B64}" refers to invalid object "C:\Program Files\Viewpoint\Viewpoint Toolbar\CameraPlug.exe /WIA". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{201CA712-0688-11D4-9DE6-00C04F1BB2AE}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\dsmbios.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2293C842-B001-11CF-90FA-00AA00A729EA}" refers to invalid object "C:\WINNT\system32\h261_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2293C845-B001-11CF-90FA-00AA00A729EA}" refers to invalid object "C:\WINNT\system32\h263_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2369AFEE-717B-11D1-8355-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\SSDTSRCH.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{24532D00-FCD8-11CF-A7D3-00A0C9056683}" refers to invalid object "C:\WINNT\system32\g723codc.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{24532D01-FCD8-11CF-A7D3-00A0C9056683}" refers to invalid object "C:\WINNT\system32\g723codc.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{25C43385-E21F-43CC-8475-DC7E83153317}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\iANS8023.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{26721E10-390C-11D0-8A22-00A0C90C9156}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{273695A3-C77A-11d1-87F4-00C04FC2C17B}" refers to invalid object "C:\WINNT\system32\DComExt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2C96A89E-DA2E-11D1-BFCD-00C04FB9988E}" refers to invalid object "C:\WINNT\system32\DComExt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2EDF172F-3DBA-41C0-996B-32815E890963}" refers to invalid object "C:\PROGRA~1\Intel\NCS\WMIProv\NcsWmiCo.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{30323449-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINNT\system32\h261_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{31363248-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINNT\system32\h261_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{33363248-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINNT\system32\h263_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{37D8AEF4-0245-4A15-8B03-51F19BE97EEF}" refers to invalid object "C:\Program Files\Intel\NCS\EAL\NE8023.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{399D5C90-74AB-11D0-9CCF-00A0C9081C19}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{399D5C91-74AB-11D0-9CCF-00A0C9081C19}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3D2807C2-43DE-11D2-9900-0000F803FF7A}" refers to invalid object "C:\WINNT\system32\dxtmsft3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3DD700A3-122A-4BB5-AC6A-410452E3335C}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\8023\PCM802_3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3DDDA000-88E4-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3F5803DC-E561-4DF9-AE53-8C64F06DF199}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{402484CE-B4E2-4F20-856C-09D9C33E789E}" refers to invalid object "C:\PROGRA~1\Dell\OPENMA~1\Client\Iap.exe RELEAS~1\Iap.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{40C1D161-52F2-11D0-A874-00AA00B5CA1B}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{46A61E7A-7C92-4A14-8FC1-1B8E521C1A4F}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA8C-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA8D-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA8E-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA8F-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA90-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA91-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA92-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA93-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA94-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA95-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA96-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA97-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA98-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA99-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA9A-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA9B-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA9C-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA9D-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA9E-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4AFBBA9F-FE10-11d0-B607-00C04FB6E866}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4DD359FC-A769-4BD2-8410-86A2DB139092}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\8023\PCM802_3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5246A513-395C-4393-92CA-29BD5F726732}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\8023\PCM802_3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{53937AA0-283B-11D0-8800-444553540000}" refers to invalid object "C:\WINNT\system32\h263_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{53AFFEB1-6FF9-11D5-B4F7-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\Csps.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{541D882C-646A-4F67-894F-8576036FC14B}" refers to invalid object "C:\PROGRA~1\Intel\NCS\WMIProv\8023\NcsWmiIm.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5528B40E-DC1E-46D1-91DB-F93E03F4399C}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{566F8E20-963C-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{566F8E21-963C-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{566F8E23-963C-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{566F8E24-963C-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{59BE5D11-090E-11d5-A9FB-0008C76A0873}" refers to invalid object "C:\Program Files\Intel\ASF Agent\Providers\agent.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5B530C61-B83A-4758-8554-C3D94CCD1B5E}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\iANS8023.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5B730205-C295-47AA-8EAA-07C1CB694543}" refers to invalid object "C:\Program Files\Intel\NCS\RAP\NcsRapPS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5b80820f-4755-11d1-9077-00a0c90ab504}" refers to invalid object "C:\WINNT\system32\faxadmin.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5CD45686-B281-11D1-8C73-00805F011DD6}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPPGCTL.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5CD45687-B281-11D1-8C73-00805F011DD6}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPPGCTL.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{60A0C080-E505-11D1-AA1C-00600895FB99}" refers to invalid object "C:\WINNT\system32\dxtmsft3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6182E342-9C57-11D0-B4A9-00A0C90D63B5}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{63500AE2-0858-11D2-8CE4-00C04F8ECB10}" refers to invalid object "C:\WINNT\system32\dxtmsft3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{68B1DCA5-012D-48A3-95A0-A3D20B87B02E}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\CsEvtps.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{692A8956-1089-11D2-8837-00104B2AFB46}" refers to invalid object "C:\WINNT\system32\logdrive.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6A2DE136-D347-47BC-88E6-AD528B0D4EE9}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\IndiProv.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6BC096B2-0CE6-11D1-BAAE-00C04FC2E20D}" refers to invalid object "C:\WINNT\system32\iaspipe.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6BC096BF-0CE6-11D1-BAAE-00C04FC2E20D}" refers to invalid object "C:\WINNT\system32\iaspipe.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6C5C43A0-9CEA-11CF-90FA-00AA00A729EA}" refers to invalid object "C:\WINNT\system32\h263_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6C5C43A1-9CEA-11CF-90FA-00AA00A729EA}" refers to invalid object "C:\WINNT\system32\h261_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6F49CEB5-63E1-4532-87A4-C13FF9B940C3}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\Paprport.exe /StillImage /StiDevice:%1 /StiEvent:%2". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}" refers to invalid object "C:\WINNT\system32\faxadmin.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{78F30B82-48AA-11D2-9900-0000F803FF7A}" refers to invalid object "C:\WINNT\system32\dxtmsft3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7C3118F4-1435-11D1-8AB0-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPFOLDER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7C311913-1435-11D1-8AB0-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPFLDRVW.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7C311914-1435-11D1-8AB0-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPFLDRVW.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7C84738B-FCD9-4AF9-91FA-4855667F0694}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\dpci.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7D163830-5D67-47FC-84A0-C5CEC1E44A6A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\CsHamps.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7f9609be-af9a-11d1-83e0-00c04fb6e984}" refers to invalid object "%SystemRoot%\system32\faxshell.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7F9E04B5-FF3A-4436-909C-D59D70B20853}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8146B29B-68D4-4ADB-B0AE-482FD95A8007}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\8023\PCM802_3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8241F015-84D3-11d2-97E6-0000F803FF7A}" refers to invalid object "C:\WINNT\system32\dxtmsft3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{84F81687-3D08-4677-B82E-A945971E560D}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\8023\PCM802_3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8740A1CB-F7FA-45BA-BBEC-31ABA30197BC}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\IndiCons.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8A4D3EDC-13A4-11D1-9A22-00C04FC2D6C1}" refers to invalid object "C:\WINNT\system32\thumbvw.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" refers to invalid object "C:\WINNT\system32\thumbvw.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8CADFE05-5468-11D1-8355-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\Paprport.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8FD97770-E379-40D1-B2B9-7F2A12C1DFB9}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{910A5704-0D16-11D1-8AAE-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPFOLDER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{910A5706-0D16-11D1-8AAE-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPFOLDER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{916CD3A6-14CB-11D1-92B7-444553540000}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPLINKBR.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{916CD3A7-14CB-11D1-92B7-444553540000}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPLINKBR.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{93C44600-6BC8-11D1-8355-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\Paprport.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{93C44601-6BC8-11D1-8355-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\Paprport.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{93C44602-6BC8-11D1-8355-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\Paprport.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{93C44603-6BC8-11D1-8355-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\Paprport.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{93D50766-23F1-11D1-8397-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPDESKVW.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{93D50767-23F1-11D1-8397-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPDESKVW.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{945F5842-3A8D-11D1-9037-00C04FD9189D}" refers to invalid object "C:\WINNT\system32\dxtmsft3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{94EBFEE2-B336-40A3-9835-E80789E52FFF}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\8023\PNC802_3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{963A6463-5207-4D06-AD5E-5A900C851735}" refers to invalid object "C:\PROGRA~1\Intel\NCS\WMIProv\NcsWmiCo.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{97AE3620-AA81-495C-8286-5E393BADB32D}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\IndiCons.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9AC11141-60C4-43F7-AED0-B7D022B81F87}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9B27B462-FB5B-11CF-906C-00AA00A59F69}" refers to invalid object "C:\WINNT\system32\h263_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9C472E19-201A-4308-A3E4-B1427AB2003D}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\PCMGen.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9C6E465D-8908-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\Hm8023ps.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9D3C85D1-F877-11D0-B083-00A0C95BED34}" refers to invalid object "C:\WINNT\system32\g723codc.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9D6A5F3C-BAAE-4C50-9B28-686CC2145487}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9E405FDB-1820-459D-8631-EDCFFFF5357F}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\8023\PCM802_3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9EC88934-C774-11d1-87F4-00C04FC2C17B}" refers to invalid object "C:\WINNT\system32\DComExt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9F46D2A6-602E-4093-88C2-81AC988C5183}" refers to invalid object "C:\Program Files\Intel\ASF Agent\ASFAgtps.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A0521BA7-9832-42E0-89CF-8A797A208F76}" refers to invalid object "C:\Program Files\Intel\NCS\RuleSvc\RulesSvc.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A165D499-E715-420A-938D-BE7030C23687}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{a29197b6-5c8d-4278-ae20-e5c14aed1280}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DellWMI.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A9C6B372-8A88-11D5-B506-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\Med8023.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A9C6B37A-8A88-11D5-B506-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\iANS8023.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A9C6B37D-8A88-11D5-B506-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\Dev8023.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A9C6B382-8A88-11D5-B506-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\HamSvc.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A9C6B384-8A88-11D5-B506-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\HamSvc.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A9C6B386-8A88-11D5-B506-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\HamPci.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A9C6B388-8A88-11D5-B506-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\HamPci.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AA701FE3-4B8A-11D1-8355-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPFOLDER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AAEC6A40-8FE6-106A-BCF0-0020AF25B98A}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPPAGEVW.EXE". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AF0EB60E-0775-11D1-A77D-00C04FC2F5B3}" refers to invalid object "C:\WINNT\system32\cdonts.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AFCE3113-B74D-4AA1-A213-627462BEB530}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B0C61A79-0870-4BE4-9153-9CCAF422E31F}" refers to invalid object "C:\PROGRA~1\Dell\OPENMA~1\Client\Iap.exe RELEAS~1\Iap.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B4A7A2CD-BD91-475C-B3F0-A5F8B1ABF6A4}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\8023\PCM802_3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B67F993A-FC9D-11D0-8822-00A0C955FC7E}" refers to invalid object "C:\WINNT\system32\slbkygen.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B8532AA3-4F93-11D1-98A4-00A0C925C2AC}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPOCRMG.EXE". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B9308A0B-F984-47BF-BF94-9F10B0645026}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\8023\PCM802_3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B96A4179-3DAE-4004-91A7-EF08F7FDE563}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B9D87DFA-1A73-11D1-8AB1-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPTHUMB.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B9D87DFB-1A73-11D1-8AB1-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPTHUMB.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BBBE3F40-964D-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BBBE3F41-964D-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BBBE3F43-964D-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BED849C1-890D-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\CsPps.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BED849C2-890D-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\s8023ps.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BED849C5-890D-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\s8023Pps.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C07DBD5C-0722-48E2-9721-8D9EC2124271}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C09433F0-BE2D-4C89-9D57-347324219220}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C2349702-EA0B-11CF-9FEC-00AA00A59F69}" refers to invalid object "C:\WINNT\system32\h261_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{c2bbea20-1f2b-492f-8a06-b1c5ffeace3b}" refers to invalid object "C:\WINNT\system32\scrdenrl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C3228FAC-884F-11D5-B504-000629D0B82A}" refers to invalid object "C:\PROGRA~1\Intel\NCS\Sync\NetSvc.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C3228FBC-884F-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\Med8023.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C3228FDA-884F-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\Dev8023.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C3630036-34C0-40C9-A8C4-2E951BACCC71}" refers to invalid object "C:\Program Files\Intel\ASF Agent\ASFCfgsv.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C3853C22-3F2E-11D2-9900-0000F803FF7A}" refers to invalid object "C:\WINNT\system32\dxtmsft3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C6520AE1-2037-11D0-906C-00AA00A59F69}" refers to invalid object "C:\WINNT\system32\h261_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C6520AE2-2037-11D0-906C-00AA00A59F69}" refers to invalid object "C:\WINNT\system32\h263_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C9076CE1-FB56-11CF-906C-00AA00A59F69}" refers to invalid object "C:\WINNT\system32\h263_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C9076CE2-FB56-11CF-906C-00AA00A59F69}" refers to invalid object "C:\WINNT\system32\h263_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CAC9FCB1-6045-11D1-8355-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\SMPLSRCH.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CCBF8899-640D-4151-8783-5E7A749DF2E2}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\dpccard.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CD7C8DE0-0675-439F-A1FC-049CA9E9BFBF}" refers to invalid object "C:\Program Files\Intel\NCS\EAL\NE8023.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CDA296F7-E065-11D1-BFD3-00C04FB9988E}" refers to invalid object "C:\WINNT\system32\DComExt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CDCDD6A0-C016-11D0-82A4-00AA00B5CA1B}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CEFC65D8-66D8-11D1-8D8C-0000F804B057}" refers to invalid object "C:\WINNT\system32\thumbvw.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D42FEAC0-82A1-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D56F34F2-7E89-11d2-9B4E-00A0C9697CD0}" refers to invalid object "C:\WINNT\system32\dxtmsft3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D5B7FCA3-3040-11D1-92BA-444553540000}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPSCANMG.EXE". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D8DA92F5-5F3A-11D1-8355-080009ACD8A8}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\SSINDEXR.EXE". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}" refers to invalid object "C:\WINNT\system32\routeext.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{DD56EC3D-822F-4DF4-8595-3D164FFD3375}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{DF7EA16F-0253-46CA-B907-62B9BE896A0C}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{DFD842F2-331D-11D4-9E70-00C04F1BB2AE}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\dsysInfo.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E2619909-29C8-11D1-B5FE-00A024080301}" refers to invalid object "C:\PROGRA~1\ScanSoft\PAPERP~1\PPPRINT.EXE". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E3659FC1-EA13-11CF-9FEC-00AA00A59F69}" refers to invalid object "C:\WINNT\system32\h261_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E4E01430-7348-467D-B2B8-170D716EF5C4}" refers to invalid object "C:\PROGRA~1\Intel\NCS\WMIProv\8023\NcsWmiEv.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EC941960-7DF6-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EC941961-7DF6-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{ECB29E60-88ED-11D0-9643-00AA00A89C1D}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EFD08EC1-EA11-11CF-9FEC-00AA00A59F69}" refers to invalid object "C:\WINNT\system32\h261_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F808DF6F-6049-11D1-BA20-006097D2898E}" refers to invalid object ""C:\Program Files\Windows Media Player\laprxy.dll"". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F9DD43D5-6CEE-43B8-A62A-0F7F3D325974}" refers to invalid object "C:\PROGRA~1\Intel\ASFAGE~1\ASFAgent.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FA925E20-323B-11D0-8800-444553540000}" refers to invalid object "C:\WINNT\system32\h263_32.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FC493CE7-1104-4B46-9010-10E0A868FCE6}" refers to invalid object "C:\Program Files\Intel\NCS\RAP\NcsRap.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FDC981C7-8275-42E8-B580-0769483B3C0A}" refers to invalid object "C:\Program Files\Intel\ASF Agent\ASFCfgsv.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FF12FDC1-9A45-11D0-B4A9-00A0C90D63B5}" refers to invalid object "C:\WINNT\system32\dxmrtp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FF2A535E-59AC-4F08-B532-EDE3F1A818B4}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DDisks.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FFEB2A64-F669-411C-AFF9-A6655FAF284F}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{01111f01-3e00-11d2-8470-0060089874ed}" refers to invalid object "C:\Program Files\support.com\bin\tgctlins.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{01112B01-3e00-11d2-8470-0060089874ed}" refers to invalid object "C:\Program Files\support.com\bin\tgrc.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{01118C01-3E00-11D2-8470-0060089874ED}" refers to invalid object "E:\install.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{0835A939-AE31-42C0-BD72-CB92634D598F}" refers to invalid object "C:\Program Files\Intel\NCS\EAL\NE8023.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{09135718-507D-4887-8404-D1E485BEC541}" refers to invalid object "C:\Program Files\Intel\ASF Agent\ASFAgent.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{0998BB00-DFFD-11CF-927F-00AA00688A38}" refers to invalid object "C:\WINNT\system32\dsctl.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{0A09FF7B-2E37-4783-BD4D-2AE9EF5317A5}" refers to invalid object "C:\Program Files\Intel\NCS\WMIProv\8023\NcsWmiIm.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{0E064ADD-9D99-11D0-ABE5-00AA0064D470}" refers to invalid object "C:\WINNT\system32\cdonts.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{107A1361-F441-11D3-9DB8-00C04F1BB2AE}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\dsmbios.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{15C3C77C-1811-4099-917B-5E2AA94DA31C}" refers to invalid object "C:\Program Files\Intel\NCS\WMIProv\8023\CDM\NcsDiag.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{1B7A32F2-3E64-11D1-B5FE-00A024080301}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\PPExpImp.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{20A17A29-8ADD-4A5C-B335-6DA5D21B8B78}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\dpci.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{2369AFE0-717B-11D1-8355-080009ACD8A8}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\SSDTSrch.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{2BAE8FF6-A421-49EE-B43F-7001095AE88E}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\Iap.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{4116AE6F-C376-42E7-9E15-EE109055FC8E}" refers to invalid object "C:\Program Files\Intel\NCS\WMIProv\NcsWmiCo.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{4985BCC9-8C13-4802-A268-DFD1224CCF20}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\dpccard.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{572BA808-2FA7-11D1-9067-00A0C90AB504}" refers to invalid object "C:\WINNT\system32\faxadmin.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{5CD45683-B281-11D1-8C73-00805F011DD6}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\PPPgCtl.ocx". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{5F226421-415D-408D-9A09-0DCD94E25B48}" refers to invalid object "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{609D9C63-2109-4D6A-B580-8850DECCB273}" refers to invalid object "C:\Program Files\Intel\NCS\RuleSvc\RulesSvc.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{616664C4-38E7-11D1-839A-080009ACD8A8}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\PaprPort.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{692A8948-1089-11D2-8837-00104B2AFB46}" refers to invalid object "C:\WINNT\system32\logdrive.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{6BC096B9-0CE6-11D1-BAAE-00C04FC2E20D}" refers to invalid object "C:\WINNT\system32\iaspipe.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{6BC096D4-0CE6-11D1-BAAE-00C04FC2E20D}" refers to invalid object "C:\WINNT\system32\iasuserr.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{6D119ED3-C9AE-45FF-A9CD-EE58AB306CB7}" refers to invalid object "C:\Program Files\Intel\ASF Agent\ASFCfgsv.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{78C277E6-0FBD-43CE-85BC-731C0232C1EE}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DDisks.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{7C311910-1435-11D1-8AB0-080009ACD8A8}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\PPFldrVw.ocx". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{910A56F6-0D16-11D1-8AAE-080009ACD8A8}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\PPFolder.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{916CD3A3-14CB-11D1-92B7-444553540000}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\PPLinkBr.ocx". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{93D50763-23F1-11D1-8397-080009ACD8A8}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\PPDeskVw.ocx". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{9620BB83-0905-11D5-A9FB-0008C76A0873}" refers to invalid object "C:\Program Files\Intel\ASF Agent\Providers\agent.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{9EC88933-C774-11D1-87F4-00C04FC2C17B}" refers to invalid object "C:\WINNT\system32\DComExt.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{A7F33724-809A-4159-AF92-DE049A933A05}" refers to invalid object "C:\WINNT\system32\scrdenrl.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{B2B2187D-3C83-4A99-88B4-F8A992A555D8}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\PCMGen.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{B67F9929-FC9D-11D0-8822-00A0C955FC7E}" refers to invalid object "C:\WINNT\system32\slbkygen.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{B8532AA0-4F93-11D1-98A4-00A0C925C2AC}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\PPOcrMg.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{B9D87DF7-1A73-11D1-8AB1-080009ACD8A8}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\PPThumb.ocx". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{BB68C1B0-8F88-44EE-A955-35295658ACDB}" refers to invalid object "C:\Program Files\Intel\NCS\PROSet\8023\PNC802_3.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{C3228F9F-884F-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\NetSvc.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{C3228FAF-884F-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\Med8023.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{C3228FBD-884F-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\iANS8023.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{C3228FCD-884F-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\Dev8023.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{C3228FDB-884F-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\HamSvc.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{C3228FE7-884F-11D5-B504-000629D0B82A}" refers to invalid object "C:\Program Files\Intel\NCS\Sync\8023\HamPci.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{C8E22D53-EC7E-4596-9EF5-19E1B2B999D7}" refers to invalid object "C:\Program Files\Dell\OpenManage\Client\DEvents.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{CAC9FCA3-6045-11D1-8355-080009ACD8A8}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\SmplSrch.dll". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{D5B7FCA0-3040-11D1-92BA-444553540000}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\PPScanMg.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{D8DA92DF-5F3A-11D1-8355-080009ACD8A8}" refers to invalid object "C:\Program Files\ScanSoft\PaperPort\SSIndexr.exe". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{DAB1A255-4FD7-11D1-842C-00C04FB6C218}" refers to invalid object "C:\WINNT\system32\routeext.dll". Action Taken: No Action T

[Advertisements]

Looks bad but is really GOOD All the entries tagged as "Invalid Objects" refer to orphaned Registry entries. There are registry cleaners available but we don't recommend any because we cannot be 100% sure that there will not be anything harmful done to your system during the process. I use one myself and have had only 1 problem in 3 years. (But what a problem). These entries cannot harm your system.

I do however recommend the following:

1. Download a trial version of SpySweeper

• Install the application
• Update its definitions
• Run the program
• Let it remove everything it wants
• Finally, when it has finished its work, REBOOT your system.

2. Finally, run HijackThis, click SCAN, produce a LOG and POST it in this thread for review.

Regards,

Trevuren

[Trevuren]

Looks bad but is really GOOD All the entries tagged as "Invalid Objects" refer to orphaned Registry entries. There are registry cleaners available but we don't recommend any because we cannot be 100% sure that there will not be anything harmful done to your system during the process. I use one myself and have had only 1 problem in 3 years. (But what a problem). These entries cannot harm your system.

I do however recommend the following:

1. Download a trial version of SpySweeper

• Install the application
• Update its definitions
• Run the program
• Let it remove everything it wants
• Finally, when it has finished its work, REBOOT your system.

2. Finally, run HijackThis, click SCAN, produce a LOG and POST it in this thread for review.

Regards,

Trevuren

[jbonello]

Unfortunatly, I got called into work today, so I won't be able to proceed with Spysweeper until I get home, in approx. 5 hours.

I will post my results ASAP, just wanted to explain the delay.

[Trevuren]

No Problem

Trevuren

[jbonello]

Done! Here is my latest HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 5:18:41 PM, on 9/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINNT\system32\userinit.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\hkcmd.exe
C:\Program Files\Common Files\Adaptec Shared\CreateCD\CreateCD50.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\support.com\bin\tgcmd.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINNT\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hijackthis\HijackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gaiaonlin...c.php?t=7964752
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\ycomp5_5_5_0.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\ycomp5_5_5_0.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exe
O4 - HKLM\..\Run: [CreateCD50] "C:\Program Files\Common Files\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [%%DELETE_VALUE%%] CreateCD50
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [EPSON PictureMate] C:\WINNT\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE /P17 "EPSON PictureMate" /O6 "USB002" /M "PictureMate"
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINNT\system32\ctfmon.exe
O4 - Startup: Scheduler.lnk = C:\Program Files\SpyCatcher\Scheduler daemon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.c...nst20040510.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft...free/asinst.cab
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O23 - Service: ASF Agent (ASFAgent) - Unknown owner - C:\Program Files\Intel\ASF Agent\ASFAgent.exe (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CWShredder Service - Unknown owner - C:\Documents and Settings\Jess\Local Settings\Temporary Internet Files\Content.IE5\1HVN7CJQ\cwshredder[1].exe (file missing)
O23 - Service: Iap - Unknown owner - C:\Program Files\Dell\OpenManage\Client\Iap.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

[Trevuren]

Your log looks good. If you have no more malware-related problems that you are aware of, just give me the OK and we can start the final but essential cleanup procedures.

Trevuren

[jbonello]

As far as I know, I have no more problems.

Edited by jbonello, 21 September 2005 - 06:39 PM.

[Trevuren]

Congratulations, your log shows that your SYSTEM IS CLEAN

There are a few things you must do once you are completely clean:

1. Re-hide your System Files and Folders to prevent any future accidents.

Reconfigure Windows XP to hide hidden files:

• Click Start. Open My Computer.
• Select the Tools menu and click Folder Options. Select the View Tab.
  
• Under the Hidden files and folders heading deselect "Show hidden files and folders".
• Check the "Hide protected operating system files (recommended)" option.
• Click Yes to confirm. Click OK.

2. Reset and Re-enable your System Restore to remove bad files from the backup that Windows makes as no program is able to clean those files:

TO DISABLE SYSTEM RESTORE

• Right-click "My Computer", and then left click "Properties".
• Left click on "System Restore Tab"
• Check box beside "Turn Off System Restore"
• Left click on "Apply"

TO ENABLE SYSTEM RESTORE

• Remove check mark from "Turn Off System Restore"
• Click on "Apply"

Here are some tips to reduce the potential for spyware infection in the future:

Make sure you keep your Windows OS current by visiting Windows update
regularly to download and install any critical updates and service packs. With out these you are leaving the backdoor open.

I strongly recommend installing the following applications:

• Spywareblaster <= SpywareBlaster will prevent spyware from being installed.
• Spywareguard <= SpywareGuard offers realtime protection from spyware installation attempts.
• How to use Ad-Aware to remove Spyware <= If you suspect that you have spyware installed on your computer, here are instructions on how to download, install and then use Ad-Aware.
• How to use Spybot to remove Spyware <= If you suspect that you have spyware installed on your computer, here are instructions on how to download, install and then use Spybot. Similar to Ad-Aware, I strongly recommend both to catch most spyware.

To protect yourself further:

• Spyad <= IE/Spyad places over 4000 websites and domains in the IE Restricted list which will severely impair attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites.
• MVPS Hosts file <= The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your coputer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer
• Google Toolbar <= Get the free google toolbar to help stop pop up windows.

And also see TonyKlein's good advice
So how did I get infected in the first place? (My Favorite)

Regards,

Trevuren

[jbonello]

Thank you so much for the help. I did Steps 1 and 2, and will look into everything else you suggested now.

[Trevuren]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.