... continued ...
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R3 aawservice (Ad-Aware 2007 Service) - "c:\program files\lavasoft\ad-aware 2007\aawservice.exe" <Not Verified; Lavasoft AB; Ad-Aware 2007 Service>
R3 FLEXnet Licensing Service - "c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" <Not Verified; Macrovision Europe Ltd.; FLEXnet Publisher (32 bit)>
S2 LxrSII1s (Lexar Secure II) - lxrsii1s.exe (file missing)
S3 NBService - c:\program files\nero\nero 7\nero backitup\nbservice.exe
S4 _IOMEGA_ACTIVE_DISK_SERVICE_ (Iomega Active Disk) - "c:\program files\iomega\autodisk\adservice.exe" <Not Verified; Iomega Corporation; Iomega Active Disk>
S4 Iomega Activity Disk2 - ""
S4 Iomega App Services - "c:\progra~1\iomega\system32\appservices.exe" <Not Verified; Iomega Corporation; Iomega App Services>
-- Scheduled Tasks -------------------------------------------------------------
2007-07-28 09:52:36 330 --ah----- C:\WINDOWS\Tasks\MP Scheduled Scan.job
-- Files created between 2007-06-28 and 2007-07-28 -----------------------------
2007-07-28 02:57:25 0 d-------- C:\Program Files\Common Files\Java
2007-07-28 01:49:20 0 d-------- C:\WINDOWS\ERUNT
2007-07-26 14:51:15 0 d-------- C:\Program Files\Windows Defender
2007-07-22 17:26:17 0 d-------- C:\Documents and Settings\Stepen\Application Data\Prevx
2007-07-22 17:25:40 0 d-------- C:\Program Files\Prevx2
2007-07-22 17:25:40 0 d-------- C:\Documents and Settings\All Users\Application Data\Prevx
2007-07-22 17:24:16 77312 --a------ C:\WINDOWS\ua2.dll
2007-07-22 01:49:04 0 d-------- C:\Program Files\Lavasoft
2007-07-22 01:49:04 0 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-07-22 00:44:55 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2007-07-22 00:44:50 0 d-------- C:\WINDOWS\system32\Kaspersky Lab
2007-07-16 20:44:30 42535 ---hs---- C:\WINDOWS\system32\ybadd.ini2
2007-07-16 19:12:47 0 d-------- C:\Program Files\Common Files\?ystem32
2007-07-16 19:10:14 0 d-------- C:\Program Files\Norton 360
-- Find3M Report ---------------------------------------------------------------
2007-07-28 21:02:28 0 d-------- C:\Program Files\Common Files\Symantec Shared
2007-07-28 09:48:26 292 --a------ C:\WINDOWS\system32\DVCStateBkp-{00000003-00000000-00000003-00001102-00000004-10021102}.dat
2007-07-28 09:48:26 292 --a------ C:\WINDOWS\system32\DVCState-{00000003-00000000-00000003-00001102-00000004-10021102}.dat
2007-07-28 02:58:06 0 d-------- C:\Program Files\Java
2007-07-28 02:44:18 0 d-------- C:\Documents and Settings\Stepen\Application Data\Juniper Networks
2007-07-26 21:57:52 0 d-------- C:\Documents and Settings\Stepen\Application Data\uTorrent
2007-07-26 17:51:16 0 d-------- C:\Program Files\SpywareBlaster
2007-07-24 23:51:51 0 d-------- C:\Documents and Settings\Stepen\Application Data\Macromedia
2007-07-24 15:23:59 0 d-------- C:\Documents and Settings\Stepen\Application Data\U3
2007-07-22 18:37:19 0 d-------- C:\Documents and Settings\Stepen\Application Data\dvdcss
2007-07-22 01:49:03 0 d-------- C:\Documents and Settings\Stepen\Application Data\Lavasoft
2007-07-22 01:47:44 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-07-17 02:00:27 0 d-------- C:\Documents and Settings\Stepen\Application Data\Symantec
2007-07-16 19:19:00 0 d-------- C:\Program Files\Common Files\?ystem32
2007-07-16 19:12:53 0 d-------- C:\Program Files\Symantec
2007-07-14 22:15:10 0 d-------- C:\Program Files\Picasa2
2007-07-14 22:13:42 0 d-------- C:\Program Files\Google
2007-06-24 15:44:58 46472 -----n--- C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
2007-06-23 12:23:30 0 d-------- C:\Documents and Settings\Stepen\Application Data\Adobe
2007-06-23 12:23:21 0 d-------- C:\Program Files\Common Files\Macrovision Shared
2007-06-23 12:19:21 0 d-------- C:\Program Files\Common Files\Adobe
2007-06-19 22:32:13 0 d-------- C:\Documents and Settings\Stepen\Application Data\Ahead
2007-06-08 18:16:10 0 d-------- C:\Documents and Settings\Stepen\Application Data\AdobeUM
2007-06-04 22:14:23 0 d-------- C:\Program Files\Common Files\Ahead
2007-06-04 22:12:55 0 d-------- C:\Program Files\Nero
-- Registry Dump ---------------------------------------------------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{00C6482D-C502-44C8-8409-FCE54AD9C208} C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
{1E8A6170-7264-4D0F-BEAE-D42A53123C75} C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
{53707962-6F74-2D53-2644-206D7942484F} C:\PROGRA~1\SPYBOT~1\SDHelper.dll
{55EA1964-F5E4-4D6A-B9B2-125B37655FCB} C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SetCacheMode"=hex(2):52,75,6e,64,6c,6c,33,32,2e,65,78,65,20,70,74,69,70,62,6d,\
"AsioReg"="REGSVR32.EXE /S CTASIO.DLL"
"SBDrvDet"="C:\\Program Files\\Creative\\SB Drive Det\\SBDrvDet.exe /r"
"zBrowser Launcher"="C:\\Program Files\\Logitech\\iTouch\\iTouch.exe"
"Logitech Utility"="Logi_MwX.Exe"
"StorageGuard"="\"C:\\Program Files\\VERITAS Software\\Update Manager\\sgtray.exe\" /r"
"Share-to-Web Namespace Daemon"="C:\\Program Files\\Hewlett-Packard\\HP Share-to-Web\\hpgs2wnd.exe"
"nwiz"="nwiz.exe /install"
"Iomega Startup Options"="C:\\Program Files\\Iomega\\Common\\ImgStart.exe"
"Iomega Drive Icons"="C:\\Program Files\\Iomega\\DriveIcons\\ImgIcon.exe"
"Deskup"="C:\\Program Files\\Iomega\\DriveIcons\\deskup.exe"
"CTSysVol"="C:\\Program Files\\Creative\\SBAudigy2\\Surround Mixer\\CTSysVol.exe"
"CTHelper"="CTHELPER.EXE"
"CTDVDDet"="C:\\Program Files\\Creative\\SBAudigy2\\DVDAudio\\CTDVDDet.EXE"
"ADUserMon"="C:\\Program Files\\Iomega\\AutoDisk\\ADUserMon.exe"
"BigPond Toolbar"="\"C:\\Program Files\\Telstra\\Toolbar\\bpumTray.exe\""
"Cmaudio"="RunDll32 cmicnfg.cpl,CMICtrlWnd"
"RemoteCenter"=""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"SSBkgdUpdate"="\"C:\\Program Files\\Common Files\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"
"PaperPort PTD"="C:\\Program Files\\ScanSoft\\PaperPort\\pptd40nt.exe"
"IndexSearch"="C:\\Program Files\\ScanSoft\\PaperPort\\IndexSearch.exe"
"BrMfcWnd"="C:\\Program Files\\Brother\\Brmfcmon\\BrMfcWnd.exe /AUTORUN"
"SetDefPrt"="C:\\Program Files\\Brother\\Brmfl06a\\BrStDvPt.exe"
"ControlCenter3"="C:\\Program Files\\Brother\\ControlCenter3\\brctrcen.exe /autorun"
"NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe"
"Acrobat Assistant 8.0"="\"C:\\Program Files\\Adobe\\Acrobat 8.0\\Acrobat\\Acrotray.exe\""
"Symantec PIF AlertEng"="\"C:\\Program Files\\Common Files\\Symantec Shared\\PIF\\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\\PIFSvc.exe\" /a /m \"C:\\Program Files\\Common Files\\Symantec Shared\\PIF\\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\\AlertEng.dll\""
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"PrevxOne"="\"C:\\Program Files\\Prevx2\\PXConsole.exe\""
"Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_02\\bin\\jusched.exe\""
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"RemoteControl"=""
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\""
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoCDBurning"=dword:00000000
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoViewOnDrive"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{857A461D-8D96-4996-A4A0-AEA0A2535B86}"=""
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages REG_MULTI_SZ scecli\0\0
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0
*newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_COMHOST
-- End of Deckard's System Scanner: finished at 2007-07-28 at 21:03:30 ---------
==================================================
... extras.txt in next 2 posts ...