Computer running really slow

[hboyette]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:20:13 AM, on 11/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: Yahoo! IE Suggest - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\SearchSuggest\YSearchSuggest.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: ATLDistrib Object - {78653A3E-A63F-42A9-A6FE-7524F4058767} - C:\WINDOWS\System32\awtqr.dll (file missing)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: (no name) - {CC149546-C2E2-43BA-B280-468115A165D2} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: (no name) - {81587163-443D-4331-925A-49CF6716F9FE} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [NI.UWA6P_0001_N56M1001] "C:\Documents and Settings\Mike\Local Settings\Temporary Internet Files\Content.IE5\7IHKM4K8\WinAntiVirusPro2006Installer[1].exe" -nag
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130245470937
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: awtqr - C:\WINDOWS\System32\awtqr.dll (file missing)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

--
End of file - 6796 bytes

[Shaba]

Hi hboyette

Download random's system information tool (RSIT) by random/random from here (http://images.malwareremoval.com/random/RSIT.exe) and save it to your desktop.
Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

[hboyette]

Thank you for your reply. Here are the logs you asked for however there were too many characters so I have broken it up in two posts.


Logfile of random's system information tool 1.04 (written by random/random)
Run by Mike at 2008-11-27 09:15:17
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 21 GB (56%) free of 38 GB
Total RAM: 254 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:15:55 AM, on 11/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Documents and Settings\Mike\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Mike.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: Yahoo! IE Suggest - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\SearchSuggest\YSearchSuggest.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: ATLDistrib Object - {78653A3E-A63F-42A9-A6FE-7524F4058767} - C:\WINDOWS\System32\awtqr.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: (no name) - {CC149546-C2E2-43BA-B280-468115A165D2} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: (no name) - {81587163-443D-4331-925A-49CF6716F9FE} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [NI.UWA6P_0001_N56M1001] "C:\Documents and Settings\Mike\Local Settings\Temporary Internet Files\Content.IE5\7IHKM4K8\WinAntiVirusPro2006Installer[1].exe" -nag
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130245470937
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: awtqr - C:\WINDOWS\System32\awtqr.dll (file missing)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

--
End of file - 7886 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Symantec NetDetect.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll [2007-09-05 816400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 54248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-11-22 455960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{549B5CA7-4A86-11D7-A4DF-000874180BB3}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5A263CF7-56A6-4D68-A8CF-345BE45BC911}]
Yahoo! IE Suggest - C:\Program Files\Yahoo!\SearchSuggest\YSearchSuggest.dll [2008-01-14 233472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2004-03-15 118836]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78653A3E-A63F-42A9-A6FE-7524F4058767}]
ATLDistrib Object - C:\WINDOWS\System32\awtqr.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2008-11-24 2403392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC149546-C2E2-43BA-B280-468115A165D2}
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll [2007-09-05 816400]
{81587163-443D-4331-925A-49CF6716F9FE}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2008-11-24 2403392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\System32\igfxtray.exe [2003-04-06 155648]
"HotKeysCmds"=C:\WINDOWS\System32\hkcmd.exe [2003-04-06 114688]
"NI.UWA6P_0001_N56M1001"=C:\Documents and Settings\Mike\Local Settings\Temporary Internet Files\Content.IE5\7IHKM4K8\WinAntiVirusPro2006Installer[1].exe -nag []
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-11-27 1261336]
"UpdateManager"=C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe [2003-08-19 110592]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe [2008-11-24 171448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BJCFD]
C:\Program Files\BroadJump\Client Foundation\CFD.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell AIO Printer A920]
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe [2003-05-02 270336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupport]
C:\Program Files\DellSupport\DSAgnt.exe [2007-03-15 460784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellTransferAgent]
C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe [2007-11-13 135168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
C:\WINDOWS\system32\dla\tfswctrl.exe [2004-03-15 122933]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DllRunning]
C:\WINDOWS\System32\ggtquoko.dll []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDSentry]
C:\WINDOWS\System32\DSentry.exe [2003-08-13 28672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelMeM]
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe [2003-09-03 221184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MimBoot]
C:\PROGRA~1\MUSICM~1\MUSICM~2\mimboot.exe [2006-01-19 11776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray]
C:\PROGRA~1\MUSICM~1\MUSICM~2\mm_tray.exe [2006-01-19 110592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService]
C:\Program Files\Dell\Media Experience\PCMService.exe [2003-08-26 204800]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
C:\Program Files\Real\RealPlayer\RealPlay.exe [2004-06-22 26112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\REGSHAVE]
C:\Program Files\REGSHAVE\REGSHAVE.EXE [2002-02-04 53248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\saap]
c:\program files\n-case\saap.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SOProc_RegSoAlertWxLiteNnAj]
rundll32 shell32.dll []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor]
C:\PROGRA~1\SYMNET~1\SNDMon.exe [2006-01-06 95960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\awtqr]
C:\WINDOWS\System32\awtqr.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2003-04-06 315392]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
scecli
scecli

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\SYSTEM32\LEXPPS.EXE"="C:\WINDOWS\SYSTEM32\LEXPPS.EXE:*:Disabled:LEXPPS.EXE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2008-11-27 09:15:17 ----D---- C:\rsit
2008-11-24 17:14:46 ----D---- C:\Documents and Settings\Mike\Application Data\Google
2008-11-24 17:13:00 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2008-11-24 17:12:33 ----D---- C:\Program Files\Google
2008-11-23 12:47:24 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
2008-11-23 11:23:25 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2008-11-23 10:49:49 ----D---- C:\Program Files\iPod
2008-11-23 10:49:38 ----D---- C:\Program Files\iTunes
2008-11-23 10:49:38 ----D---- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-11-23 10:48:08 ----D---- C:\Program Files\Bonjour
2008-11-23 10:44:47 ----D---- C:\Program Files\Apple Software Update
2008-11-23 10:44:25 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-11-23 10:43:59 ----D---- C:\Program Files\Common Files\Apple
2008-11-23 10:43:59 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2008-11-23 09:19:24 ----D---- C:\Program Files\Trend Micro
2008-11-23 08:51:16 ----HDC---- C:\WINDOWS\$NtUninstallKB927779$
2008-11-23 08:51:03 ----HDC---- C:\WINDOWS\$NtUninstallKB927802$
2008-11-23 08:50:45 ----HDC---- C:\WINDOWS\$NtUninstallKB943460$
2008-11-23 08:50:30 ----HDC---- C:\WINDOWS\$NtUninstallKB928255$
2008-11-23 08:50:18 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2008-11-23 08:50:06 ----HDC---- C:\WINDOWS\$NtUninstallKB933729$
2008-11-23 08:49:56 ----HDC---- C:\WINDOWS\$NtUninstallKB920685$
2008-11-23 08:49:45 ----HDC---- C:\WINDOWS\$NtUninstallKB923980$
2008-11-23 08:49:33 ----HDC---- C:\WINDOWS\$NtUninstallKB911280$
2008-11-23 08:49:21 ----HDC---- C:\WINDOWS\$NtUninstallKB911562$
2008-11-23 08:49:09 ----HDC---- C:\WINDOWS\$NtUninstallKB938828$
2008-11-23 08:48:54 ----HDC---- C:\WINDOWS\$NtUninstallKB924667$
2008-11-23 08:48:45 ----HDC---- C:\WINDOWS\$NtUninstallKB900485$
2008-11-23 08:48:29 ----HDC---- C:\WINDOWS\$NtUninstallKB924270$
2008-11-23 08:48:17 ----HDC---- C:\WINDOWS\$NtUninstallKB931261$
2008-11-23 08:47:52 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP9$
2008-11-23 08:47:04 ----HDC---- C:\WINDOWS\$NtUninstallKB927891$
2008-11-23 08:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB936357$
2008-11-23 08:46:43 ----HDC---- C:\WINDOWS\$NtUninstallKB887472$
2008-11-23 08:46:30 ----HDC---- C:\WINDOWS\$NtUninstallKB946026$
2008-11-23 08:46:08 ----HDC---- C:\WINDOWS\$NtUninstallKB925398_WMP64$
2008-11-23 08:45:19 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2008-11-23 08:44:47 ----HDC---- C:\WINDOWS\$NtUninstallKB911564$
2008-11-23 08:43:40 ----HDC---- C:\WINDOWS\$NtUninstallKB925902$
2008-11-23 08:43:24 ----HDC---- C:\WINDOWS\$NtUninstallKB929123$
2008-11-23 08:43:10 ----HDC---- C:\WINDOWS\$NtUninstallKB920670$
2008-11-23 08:43:01 ----HDC---- C:\WINDOWS\$NtUninstallKB918439$
2008-11-23 08:42:50 ----HDC---- C:\WINDOWS\$NtUninstallKB890046$
2008-11-23 08:42:40 ----HDC---- C:\WINDOWS\$NtUninstallKB926436$
2008-11-23 08:42:30 ----HDC---- C:\WINDOWS\$NtUninstallKB920872$
2008-11-23 08:42:11 ----HDC---- C:\WINDOWS\$NtUninstallKB930178$
2008-11-23 08:42:00 ----HDC---- C:\WINDOWS\$NtUninstallKB914388$
2008-11-23 08:41:37 ----HDC---- C:\WINDOWS\$NtUninstallKB932168$
2008-11-23 08:41:23 ----HDC---- C:\WINDOWS\$NtUninstallKB923191$
2008-11-23 08:41:12 ----HDC---- C:\WINDOWS\$NtUninstallKB922582$
2008-11-23 08:40:58 ----HDC---- C:\WINDOWS\$NtUninstallKB918118$
2008-11-23 08:40:47 ----HDC---- C:\WINDOWS\$NtUninstallKB926255$
2008-11-23 08:40:36 ----HDC---- C:\WINDOWS\$NtUninstallKB948590$
2008-11-23 08:40:27 ----HDC---- C:\WINDOWS\$NtUninstallKB920213$
2008-11-23 08:40:14 ----HDC---- C:\WINDOWS\$NtUninstallKB935840$
2008-11-23 08:40:04 ----HDC---- C:\WINDOWS\$NtUninstallKB943485$
2008-11-23 08:39:54 ----HDC---- C:\WINDOWS\$NtUninstallKB945553$
2008-11-23 08:39:43 ----HDC---- C:\WINDOWS\$NtUninstallKB886185$
2008-11-23 08:39:33 ----HDC---- C:\WINDOWS\$NtUninstallKB916595$
2008-11-23 08:39:23 ----HDC---- C:\WINDOWS\$NtUninstallKB930916$
2008-11-23 08:39:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-11-23 08:38:43 ----HDC---- C:\WINDOWS\$NtUninstallKB950749$
2008-11-23 08:38:13 ----HDC---- C:\WINDOWS\$NtUninstallKB908531$
2008-11-23 08:37:42 ----HDC---- C:\WINDOWS\$NtUninstallKB913580$
2008-11-23 08:37:23 ----HDC---- C:\WINDOWS\$NtUninstallKB935839$
2008-11-23 08:37:10 ----HDC---- C:\WINDOWS\$NtUninstallKB943055$
2008-11-23 08:36:55 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2008-11-23 08:36:39 ----HDC---- C:\WINDOWS\$NtUninstallKB920683$
2008-11-23 08:36:27 ----HDC---- C:\WINDOWS\$NtUninstallKB914389$
2008-11-23 08:36:14 ----HDC---- C:\WINDOWS\$NtUninstallKB944653$
2008-11-23 08:35:48 ----HDC---- C:\WINDOWS\$NtUninstallKB928843$
2008-11-23 08:14:19 ----D---- C:\Documents and Settings\Mike\Application Data\Yahoo!
2008-11-22 23:16:32 ----D---- C:\WINDOWS\Prefetch
2008-11-22 22:23:45 ----A---- C:\WINDOWS\system32\qmgr.dll
2008-11-22 22:23:37 ----A---- C:\WINDOWS\system32\xpsp2res.dll
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\comctl32.dll
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\cmd.exe
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\cacls.exe
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\autoconv.exe
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\autochk.exe
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\advapi32.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\locator.exe
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\localspl.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\lmhsvc.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\kernel32.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\imagehlp.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\ftp.exe
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\format.com
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\csrsrv.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\comdlg32.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\nwprovau.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\ntvdm.exe
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\ntprint.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\ntlsapi.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\ntdll.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\nslookup.exe
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\msv1_0.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\msgsvc.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\mgmtapi.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\lsasrv.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\samsrv.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\samlib.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rshx32.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rastapi.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rasman.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rasdlg.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rasauto.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rasapi32.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\printui.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\perfctrs.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\olecnv32.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\oleaut32.dll
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\srvsvc.dll
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\smss.exe
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\setupapi.dll
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\sessmgr.exe
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\services.exe
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\schannel.dll
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\scardsvr.exe
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\savedump.exe
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\wkssvc.dll
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\win32spl.dll
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\userinit.exe
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\untfs.dll
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\ulib.dll
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\tcpmonui.dll
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\syssetup.dll
2008-11-22 22:21:49 ----A---- C:\WINDOWS\system32\hal.dll
2008-11-22 22:21:48 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2008-11-22 22:21:48 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2008-11-22 21:51:58 ----D---- C:\WINDOWS\ie7updates
2008-11-22 21:49:41 ----HD---- C:\WINDOWS\msdownld.tmp
2008-11-22 21:49:06 ----D---- C:\WINDOWS\WBEM
2008-11-22 21:47:32 ----HDC---- C:\WINDOWS\ie7
2008-11-22 21:46:49 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2008-11-22 21:45:53 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2008-11-22 21:44:20 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2008-11-22 21:44:03 ----A---- C:\WINDOWS\system32\xmllite.dll
2008-11-22 21:40:07 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
2008-11-22 21:39:45 ----HDC---- C:\WINDOWS\$NtUninstallKB904942$
2008-11-22 20:19:27 ----HD---- C:\$AVG8.VAULT$
2008-11-22 19:50:19 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2008-11-22 19:49:31 ----D---- C:\Program Files\AVG
2008-11-22 19:49:30 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2008-11-22 19:48:40 ----D---- C:\WINDOWS\system32\en-us
2008-11-22 19:48:38 ----D---- C:\WINDOWS\system32\scripting
2008-11-22 19:48:36 ----D---- C:\WINDOWS\l2schemas
2008-11-22 19:48:35 ----D---- C:\WINDOWS\system32\en
2008-11-22 19:43:03 ----D---- C:\WINDOWS\network diagnostic
2008-11-22 19:38:02 ----N---- C:\WINDOWS\system32\_003267_.tmp.dll
2008-11-22 19:37:33 ----N---- C:\WINDOWS\system32\_003266_.tmp.dll
2008-11-22 19:33:53 ----N---- C:\WINDOWS\system32\_003264_.tmp.dll
2008-11-22 19:33:52 ----N---- C:\WINDOWS\system32\_003259_.tmp.dll
2008-11-22 19:33:51 ----N---- C:\WINDOWS\system32\_003258_.tmp.dll
2008-11-22 19:33:51 ----N---- C:\WINDOWS\system32\_003257_.tmp.dll
2008-11-22 19:33:51 ----N---- C:\WINDOWS\system32\_003256_.tmp.dll
2008-11-22 19:33:51 ----N---- C:\WINDOWS\system32\_003255_.tmp.dll
2008-11-22 19:33:50 ----N---- C:\WINDOWS\system32\_003252_.tmp.dll
2008-11-22 19:33:49 ----N---- C:\WINDOWS\system32\_003251_.tmp.dll
2008-11-22 19:33:49 ----N---- C:\WINDOWS\system32\_003250_.tmp.dll
2008-11-22 19:33:49 ----N---- C:\WINDOWS\system32\_003249_.tmp.dll
2008-11-22 19:33:49 ----N---- C:\WINDOWS\system32\_003247_.tmp.dll
2008-11-22 19:33:49 ----N---- C:\WINDOWS\system32\_003244_.tmp.dll
2008-11-22 19:33:49 ----N---- C:\WINDOWS\system32\_003242_.tmp.dll
2008-11-22 19:33:48 ----N---- C:\WINDOWS\system32\_003241_.tmp.dll
2008-11-22 19:33:48 ----N---- C:\WINDOWS\system32\_003237_.tmp.dll
2008-11-22 19:33:48 ----N---- C:\WINDOWS\system32\_003236_.tmp.dll
2008-11-22 19:33:48 ----N---- C:\WINDOWS\system32\_003233_.tmp.dll
2008-11-22 19:33:48 ----N---- C:\WINDOWS\system32\_003231_.tmp.dll
2008-11-22 19:33:48 ----N---- C:\WINDOWS\system32\_003230_.tmp.dll
2008-11-22 19:33:48 ----N---- C:\WINDOWS\system32\_003229_.tmp.dll
2008-11-22 19:33:48 ----N---- C:\WINDOWS\system32\_003227_.tmp.dll
2008-11-22 19:33:48 ----N---- C:\WINDOWS\system32\_003226_.tmp.dll
2008-11-22 19:33:47 ----N---- C:\WINDOWS\system32\_003223_.tmp.dll
2008-11-22 19:33:47 ----N---- C:\WINDOWS\system32\_003222_.tmp.dll
2008-11-22 19:33:46 ----N---- C:\WINDOWS\system32\_003220_.tmp.dll
2008-11-22 19:33:46 ----N---- C:\WINDOWS\system32\_003219_.tmp.dll
2008-11-22 19:33:46 ----N---- C:\WINDOWS\system32\_003218_.tmp.dll
2008-11-22 19:33:44 ----N---- C:\WINDOWS\system32\_003211_.tmp.dll
2008-11-22 19:33:43 ----N---- C:\WINDOWS\system32\_003210_.tmp.dll
2008-11-22 19:33:43 ----N---- C:\WINDOWS\system32\_003209_.tmp.dll
2008-11-22 19:33:43 ----N---- C:\WINDOWS\system32\_003208_.tmp.dll
2008-11-22 19:12:31 ----D---- C:\Program Files\MSXML 4.0
2008-11-22 18:55:57 ----A---- C:\WINDOWS\atmoUn.exe
2008-11-22 18:39:05 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-11-22 18:37:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-11-22 18:36:54 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-11-22 18:35:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-11-22 18:34:48 ----HDC---- C:\WINDOWS\$NtUninstallKB923723$
2008-11-22 18:33:06 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-11-22 18:31:59 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-11-22 18:30:53 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-11-22 18:29:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-11-22 18:28:06 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-11-22 18:27:05 ----A---- C:\WINDOWS\system32\MRT.INI
2008-11-22 18:25:45 ----A---- C:\WINDOWS\system32\MRT.exe
2008-11-22 18:24:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-11-22 18:23:18 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2008-11-22 18:22:02 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-11-22 18:21:00 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-11-22 18:19:58 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-11-22 18:18:52 ----HDC---- C:\WINDOWS\$NtUninstallKB923689$
2008-11-22 18:17:31 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-11-22 18:16:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-11-22 18:15:21 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-11-22 18:13:21 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-11-22 18:12:16 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2008-11-22 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956390$
2008-11-22 18:09:05 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2008-11-22 17:41:41 ----A---- C:\WINDOWS\system32\SETF63.tmp
2008-11-22 17:41:41 ----A---- C:\WINDOWS\system32\SETEA3.tmp
2008-11-22 17:41:41 ----A---- C:\WINDOWS\system32\SET129.tmp
2008-11-22 17:41:41 ----A---- C:\WINDOWS\system32\SET127.tmp
2008-11-22 17:41:41 ----A---- C:\WINDOWS\system32\SET122.tmp
2008-11-22 17:41:41 ----A---- C:\WINDOWS\system32\SET121.tmp
2008-11-22 17:41:40 ----A---- C:\WINDOWS\system32\SET131.tmp
2008-11-22 17:41:40 ----A---- C:\WINDOWS\system32\SET12D.tmp
2008-11-22 17:41:40 ----A---- C:\WINDOWS\system32\SET12B.tmp
2008-11-22 17:41:40 ----A---- C:\WINDOWS\system32\SET128.tmp
2008-11-22 17:41:40 ----A---- C:\WINDOWS\system32\SET126.tmp
2008-11-22 17:41:40 ----A---- C:\WINDOWS\system32\SET124.tmp
2008-11-22 17:41:39 ----N---- C:\WINDOWS\system32\SETEA7.tmp
2008-11-22 17:41:39 ----N---- C:\WINDOWS\system32\SETEA6.tmp
2008-11-22 17:41:39 ----A---- C:\WINDOWS\system32\SETF66.tmp
2008-11-22 17:41:39 ----A---- C:\WINDOWS\system32\SET13A.tmp
2008-11-22 17:41:39 ----A---- C:\WINDOWS\system32\SET139.tmp
2008-11-22 17:41:39 ----A---- C:\WINDOWS\system32\SET130.tmp
2008-11-22 17:41:39 ----A---- C:\WINDOWS\system32\SET12F.tmp
2008-11-22 17:41:38 ----A---- C:\WINDOWS\system32\SET13D.tmp
2008-11-22 17:41:38 ----A---- C:\WINDOWS\system32\SET133.tmp
2008-11-22 17:41:32 ----A---- C:\WINDOWS\system32\SET15A.tmp
2008-11-22 17:41:32 ----A---- C:\WINDOWS\system32\SET159.tmp
2008-11-22 17:41:32 ----A---- C:\WINDOWS\system32\SET13F.tmp
2008-11-22 17:41:32 ----A---- C:\WINDOWS\system32\SET13E.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET166.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET163.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET162.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET161.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET160.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET15C.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET146.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET145.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET144.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET143.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET142.tmp
2008-11-22 17:41:31 ----A---- C:\WINDOWS\system32\SET140.tmp
2008-11-22 17:41:30 ----A---- C:\WINDOWS\system32\SETF6B.tmp
2008-11-22 17:41:30 ----A---- C:\WINDOWS\system32\SETEAB.tmp
2008-11-22 17:41:30 ----A---- C:\WINDOWS\system32\SET16F.tmp
2008-11-22 17:41:30 ----A---- C:\WINDOWS\system32\SET16E.tmp
2008-11-22 17:41:30 ----A---- C:\WINDOWS\system32\SET16A.tmp
2008-11-22 17:41:30 ----A---- C:\WINDOWS\system32\SET14B.tmp
2008-11-22 17:41:30 ----A---- C:\WINDOWS\system32\SET14A.tmp
2008-11-22 17:41:30 ----A---- C:\WINDOWS\system32\SET149.tmp
2008-11-22 17:41:30 ----A---- C:\WINDOWS\system32\SET148.tmp
2008-11-22 17:41:29 ----A---- C:\WINDOWS\system32\SET172.tmp
2008-11-22 17:41:29 ----A---- C:\WINDOWS\system32\SET14E.tmp
2008-11-22 17:41:28 ----A---- C:\WINDOWS\system32\SET180.tmp
2008-11-22 17:41:28 ----A---- C:\WINDOWS\system32\SET17F.tmp
2008-11-22 17:41:28 ----A---- C:\WINDOWS\system32\SET17E.tmp
2008-11-22 17:41:28 ----A---- C:\WINDOWS\system32\SET158.tmp
2008-11-22 17:41:28 ----A---- C:\WINDOWS\system32\SET157.tmp
2008-11-22 17:41:28 ----A---- C:\WINDOWS\system32\SET156.tmp
2008-11-22 17:41:28 ----A---- C:\WINDOWS\system32\SET155.tmp
2008-11-22 17:41:26 ----A---- C:\WINDOWS\system32\SET188.tmp
2008-11-22 17:41:26 ----A---- C:\WINDOWS\system32\SET185.tmp
2008-11-22 17:41:26 ----A---- C:\WINDOWS\system32\SET15D.tmp
2008-11-22 17:41:26 ----A---- C:\WINDOWS\system32\SET15B.tmp
2008-11-22 17:41:25 ----A---- C:\WINDOWS\system32\SET18B.tmp
2008-11-22 17:41:25 ----A---- C:\WINDOWS\system32\SET15E.tmp
2008-11-22 17:41:24 ----A---- C:\WINDOWS\system32\SET194.tmp
2008-11-22 17:41:24 ----A---- C:\WINDOWS\system32\SET165.tmp
2008-11-22 17:41:24 ----A---- C:\WINDOWS\system32\SET164.tmp
2008-11-22 17:41:23 ----A---- C:\WINDOWS\system32\SET19B.tmp
2008-11-22 17:41:23 ----A---- C:\WINDOWS\system32\SET199.tmp
2008-11-22 17:41:23 ----A---- C:\WINDOWS\system32\SET198.tmp
2008-11-22 17:41:23 ----A---- C:\WINDOWS\system32\SET16B.tmp
2008-11-22 17:41:23 ----A---- C:\WINDOWS\system32\SET169.tmp
2008-11-22 17:41:23 ----A---- C:\WINDOWS\system32\SET168.tmp
2008-11-22 17:41:22 ----A---- C:\WINDOWS\system32\SET16D.tmp
2008-11-22 17:41:22 ----A---- C:\WINDOWS\system32\SET16C.tmp
2008-11-22 17:41:20 ----A---- C:\WINDOWS\system32\SET1A3.tmp
2008-11-22 17:41:20 ----A---- C:\WINDOWS\system32\SET1A2.tmp
2008-11-22 17:41:20 ----A---- C:\WINDOWS\system32\SET1A1.tmp
2008-11-22 17:41:20 ----A---- C:\WINDOWS\system32\SET175.tmp
2008-11-22 17:41:20 ----A---- C:\WINDOWS\system32\SET174.tmp
2008-11-22 17:41:20 ----A---- C:\WINDOWS\system32\SET173.tmp
2008-11-22 17:41:19 ----A---- C:\WINDOWS\system32\SET1A4.tmp
2008-11-22 17:41:19 ----A---- C:\WINDOWS\system32\SET176.tmp
2008-11-22 17:41:18 ----A---- C:\WINDOWS\system32\SET1B1.tmp
2008-11-22 17:41:18 ----A---- C:\WINDOWS\system32\SET17C.tmp
2008-11-22 17:41:17 ----A---- C:\WINDOWS\system32\SET1BA.tmp
2008-11-22 17:41:17 ----A---- C:\WINDOWS\system32\SET1B7.tmp
2008-11-22 17:41:17 ----A---- C:\WINDOWS\system32\SET1B6.tmp
2008-11-22 17:41:17 ----A---- C:\WINDOWS\system32\SET186.tmp
2008-11-22 17:41:17 ----A---- C:\WINDOWS\system32\SET182.tmp
2008-11-22 17:41:17 ----A---- C:\WINDOWS\system32\SET181.tmp
2008-11-22 17:41:16 ----A---- C:\WINDOWS\system32\SET1BF.tmp
2008-11-22 17:41:16 ----A---- C:\WINDOWS\system32\SET1BE.tmp
2008-11-22 17:41:16 ----A---- C:\WINDOWS\system32\SET18A.tmp
2008-11-22 17:41:16 ----A---- C:\WINDOWS\system32\SET189.tmp
2008-11-22 17:41:14 ----A---- C:\WINDOWS\system32\SET1CE.tmp
2008-11-22 17:41:14 ----A---- C:\WINDOWS\system32\SET1CD.tmp
2008-11-22 17:41:14 ----A---- C:\WINDOWS\system32\SET192.tmp
2008-11-22 17:41:14 ----A---- C:\WINDOWS\system32\SET191.tmp
2008-11-22 17:41:13 ----A---- C:\WINDOWS\system32\SET1D2.tmp
2008-11-22 17:41:13 ----A---- C:\WINDOWS\system32\SET195.tmp
2008-11-22 17:41:12 ----A---- C:\WINDOWS\system32\SET1EB.tmp
2008-11-22 17:41:12 ----A---- C:\WINDOWS\system32\SET1E9.tmp
2008-11-22 17:41:12 ----A---- C:\WINDOWS\system32\SET1A8.tmp
2008-11-22 17:41:12 ----A---- C:\WINDOWS\system32\SET1A6.tmp
2008-11-22 17:41:11 ----A---- C:\WINDOWS\system32\SET1F3.tmp
2008-11-22 17:41:11 ----A---- C:\WINDOWS\system32\SET1F2.tmp
2008-11-22 17:41:11 ----A---- C:\WINDOWS\system32\SET1F0.tmp
2008-11-22 17:41:11 ----A---- C:\WINDOWS\system32\SET1AB.tmp
2008-11-22 17:41:11 ----A---- C:\WINDOWS\system32\SET1AA.tmp
2008-11-22 17:41:11 ----A---- C:\WINDOWS\system32\SET1A9.tmp
2008-11-22 17:41:10 ----A---- C:\WINDOWS\system32\SET1F4.tmp
2008-11-22 17:41:10 ----A---- C:\WINDOWS\system32\SET1AC.tmp
2008-11-22 17:41:09 ----A---- C:\WINDOWS\system32\SET1F5.tmp
2008-11-22 17:41:09 ----A---- C:\WINDOWS\system32\SET1AD.tmp
2008-11-22 17:41:06 ----A---- C:\WINDOWS\system32\SET20B.tmp
2008-11-22 17:41:06 ----A---- C:\WINDOWS\system32\SET1BD.tmp
2008-11-22 17:41:05 ----A---- C:\WINDOWS\system32\SET210.tmp
2008-11-22 17:41:05 ----A---- C:\WINDOWS\system32\SET1C2.tmp
2008-11-22 17:41:04 ----A---- C:\WINDOWS\system32\SET212.tmp
2008-11-22 17:41:04 ----A---- C:\WINDOWS\system32\SET1C4.tmp
2008-11-22 17:41:03 ----A---- C:\WINDOWS\system32\SET21A.tmp
2008-11-22 17:41:03 ----A---- C:\WINDOWS\system32\SET217.tmp
2008-11-22 17:41:03 ----A---- C:\WINDOWS\system32\SET216.tmp
2008-11-22 17:41:03 ----A---- C:\WINDOWS\system32\SET215.tmp
2008-11-22 17:41:03 ----A---- C:\WINDOWS\system32\SET1C9.tmp
2008-11-22 17:41:03 ----A---- C:\WINDOWS\system32\SET1C8.tmp
2008-11-22 17:41:03 ----A---- C:\WINDOWS\system32\SET1C7.tmp
2008-11-22 17:41:02 ----A---- C:\WINDOWS\system32\SET21F.tmp
2008-11-22 17:41:02 ----A---- C:\WINDOWS\system32\SET21D.tmp
2008-11-22 17:41:02 ----A---- C:\WINDOWS\system32\SET1CC.tmp
2008-11-22 17:41:02 ----A---- C:\WINDOWS\system32\SET1CB.tmp
2008-11-22 17:41:01 ----A---- C:\WINDOWS\system32\SET22A.tmp
2008-11-22 17:41:01 ----A---- C:\WINDOWS\system32\SET229.tmp
2008-11-22 17:41:01 ----A---- C:\WINDOWS\system32\SET225.tmp
2008-11-22 17:41:01 ----A---- C:\WINDOWS\system32\SET224.tmp
2008-11-22 17:41:01 ----A---- C:\WINDOWS\system32\SET1D6.tmp
2008-11-22 17:41:01 ----A---- C:\WINDOWS\system32\SET1D5.tmp
2008-11-22 17:41:01 ----A---- C:\WINDOWS\system32\SET1D1.tmp
2008-11-22 17:41:00 ----A---- C:\WINDOWS\system32\SET236.tmp
2008-11-22 17:41:00 ----A---- C:\WINDOWS\system32\SET232.tmp
2008-11-22 17:41:00 ----A---- C:\WINDOWS\system32\SET230.tmp
2008-11-22 17:41:00 ----A---- C:\WINDOWS\system32\SET1DE.tmp
2008-11-22 17:41:00 ----A---- C:\WINDOWS\system32\SET1DD.tmp
2008-11-22 17:41:00 ----A---- C:\WINDOWS\system32\SET1DC.tmp
2008-11-22 17:40:58 ----A---- C:\WINDOWS\system32\SET253.tmp
2008-11-22 17:40:58 ----A---- C:\WINDOWS\system32\SET245.tmp
2008-11-22 17:40:58 ----A---- C:\WINDOWS\system32\SET1EC.tmp
2008-11-22 17:40:58 ----A---- C:\WINDOWS\system32\SET1E6.tmp
2008-11-22 17:40:57 ----A---- C:\WINDOWS\system32\SET256.tmp
2008-11-22 17:40:57 ----A---- C:\WINDOWS\system32\SET255.tmp
2008-11-22 17:40:57 ----A---- C:\WINDOWS\system32\SET254.tmp
2008-11-22 17:40:57 ----A---- C:\WINDOWS\system32\SET1EF.tmp
2008-11-22 17:40:57 ----A---- C:\WINDOWS\system32\SET1EE.tmp
2008-11-22 17:40:57 ----A---- C:\WINDOWS\system32\SET1ED.tmp
2008-11-22 17:40:56 ----A---- C:\WINDOWS\system32\SET266.tmp
2008-11-22 17:40:56 ----A---- C:\WINDOWS\system32\SET25B.tmp
2008-11-22 17:40:56 ----A---- C:\WINDOWS\system32\SET1F7.tmp
2008-11-22 17:40:56 ----A---- C:\WINDOWS\system32\SET1F1.tmp
2008-11-22 17:40:54 ----A---- C:\WINDOWS\system32\SET27E.tmp
2008-11-22 17:40:54 ----A---- C:\WINDOWS\system32\SET27C.tmp
2008-11-22 17:40:54 ----A---- C:\WINDOWS\system32\SET279.tmp
2008-11-22 17:40:54 ----A---- C:\WINDOWS\system32\SET207.tmp
2008-11-22 17:40:54 ----A---- C:\WINDOWS\system32\SET205.tmp
2008-11-22 17:40:54 ----A---- C:\WINDOWS\system32\SET203.tmp
2008-11-22 17:40:53 ----A---- C:\WINDOWS\system32\SET281.tmp
2008-11-22 17:40:53 ----A---- C:\WINDOWS\system32\SET208.tmp
2008-11-22 17:40:52 ----A---- C:\WINDOWS\system32\SET282.tmp
2008-11-22 17:40:52 ----A---- C:\WINDOWS\system32\SET209.tmp
2008-11-22 17:40:50 ----A---- C:\WINDOWS\system32\SET295.tmp
2008-11-22 17:40:50 ----A---- C:\WINDOWS\system32\SET294.tmp
2008-11-22 17:40:50 ----A---- C:\WINDOWS\system32\SET290.tmp
2008-11-22 17:40:50 ----A---- C:\WINDOWS\system32\SET219.tmp
2008-11-22 17:40:50 ----A---- C:\WINDOWS\system32\SET218.tmp
2008-11-22 17:40:50 ----A---- C:\WINDOWS\system32\SET214.tmp
2008-11-22 17:40:49 ----A---- C:\WINDOWS\system32\SET29E.tmp
2008-11-22 17:40:49 ----A---- C:\WINDOWS\system32\SET299.tmp
2008-11-22 17:40:49 ----A---- C:\WINDOWS\system32\SET21E.tmp
2008-11-22 17:40:49 ----A---- C:\WINDOWS\system32\SET21C.tmp
2008-11-22 17:40:48 ----A---- C:\WINDOWS\system32\SET2A1.tmp
2008-11-22 17:40:48 ----A---- C:\WINDOWS\system32\SET222.tmp
2008-11-22 17:40:44 ----A---- C:\WINDOWS\system32\SET2C1.tmp
2008-11-22 17:40:44 ----A---- C:\WINDOWS\system32\SET234.tmp
2008-11-22 17:40:44 ----A---- C:\WINDOWS\system32\SET233.tmp
2008-11-22 17:40:44 ----A---- C:\WINDOWS\system32\SET231.tmp
2008-11-22 17:40:43 ----A---- C:\WINDOWS\system32\SET2CD.tmp
2008-11-22 17:40:43 ----A---- C:\WINDOWS\system32\SET2C2.tmp
2008-11-22 17:40:43 ----A---- C:\WINDOWS\system32\SET23C.tmp
2008-11-22 17:40:43 ----A---- C:\WINDOWS\system32\SET235.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET2E0.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET2DE.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET2DC.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET2DB.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET2D9.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET2D8.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET2D7.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET2D4.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET2D2.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET2CF.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET24A.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET248.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET247.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET246.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET244.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET243.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET242.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET241.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET240.tmp
2008-11-22 17:40:42 ----A---- C:\WINDOWS\system32\SET23D.tmp
2008-11-22 17:40:41 ----A---- C:\WINDOWS\system32\SET2E2.tmp
2008-11-22 17:40:41 ----A---- C:\WINDOWS\system32\SET2E1.tmp
2008-11-22 17:40:41 ----A---- C:\WINDOWS\system32\SET24C.tmp
2008-11-22 17:40:41 ----A---- C:\WINDOWS\system32\SET24B.tmp
2008-11-22 17:40:40 ----A---- C:\WINDOWS\system32\SET2E4.tmp
2008-11-22 17:40:40 ----A---- C:\WINDOWS\system32\SET24F.tmp
2008-11-22 17:40:39 ----A---- C:\WINDOWS\system32\SET2E7.tmp
2008-11-22 17:40:39 ----A---- C:\WINDOWS\system32\SET252.tmp
2008-11-22 17:40:37 ----A---- C:\WINDOWS\system32\SET2F2.tmp
2008-11-22 17:40:37 ----A---- C:\WINDOWS\system32\SET2F0.tmp
2008-11-22 17:40:37 ----A---- C:\WINDOWS\system32\SET258.tmp
2008-11-22 17:40:37 ----A---- C:\WINDOWS\system32\SET257.tmp
2008-11-22 17:40:36 ----A---- C:\WINDOWS\system32\SET2F3.tmp
2008-11-22 17:40:36 ----A---- C:\WINDOWS\system32\SET259.tmp
2008-11-22 17:40:33 ----A---- C:\WINDOWS\system32\SET2FD.tmp
2008-11-22 17:40:33 ----A---- C:\WINDOWS\system32\SET2FB.tmp
2008-11-22 17:40:33 ----A---- C:\WINDOWS\system32\SET2FA.tmp
2008-11-22 17:40:33 ----A---- C:\WINDOWS\system32\SET2F8.tmp
2008-11-22 17:40:33 ----A---- C:\WINDOWS\system32\SET262.tmp
2008-11-22 17:40:33 ----A---- C:\WINDOWS\system32\SET260.tmp
2008-11-22 17:40:33 ----A---- C:\WINDOWS\system32\SET25F.tmp
2008-11-22 17:40:33 ----A---- C:\WINDOWS\system32\SET25E.tmp
2008-11-22 17:40:32 ----A---- C:\WINDOWS\system32\SET308.tmp
2008-11-22 17:40:32 ----A---- C:\WINDOWS\system32\SET305.tmp
2008-11-22 17:40:32 ----A---- C:\WINDOWS\system32\SET304.tmp
2008-11-22 17:40:32 ----A---- C:\WINDOWS\system32\SET301.tmp
2008-11-22 17:40:32 ----A---- C:\WINDOWS\system32\SET26B.tmp
2008-11-22 17:40:32 ----A---- C:\WINDOWS\system32\SET268.tmp
2008-11-22 17:40:32 ----A---- C:\WINDOWS\system32\SET267.tmp
2008-11-22 17:40:32 ----A---- C:\WINDOWS\system32\SET265.tmp
2008-11-22 17:40:31 ----A---- C:\WINDOWS\system32\SET312.tmp
2008-11-22 17:40:31 ----A---- C:\WINDOWS\system32\SET311.tmp
2008-11-22 17:40:31 ----A---- C:\WINDOWS\system32\SET30D.tmp
2008-11-22 17:40:31 ----A---- C:\WINDOWS\system32\SET309.tmp
2008-11-22 17:40:31 ----A---- C:\WINDOWS\system32\SET273.tmp
2008-11-22 17:40:31 ----A---- C:\WINDOWS\system32\SET272.tmp
2008-11-22 17:40:31 ----A---- C:\WINDOWS\system32\SET26F.tmp
2008-11-22 17:40:31 ----A---- C:\WINDOWS\system32\SET26C.tmp
2008-11-22 17:40:29 ----A---- C:\WINDOWS\system32\SET319.tmp
2008-11-22 17:40:29 ----A---- C:\WINDOWS\system32\SET27A.tmp
2008-11-22 17:40:28 ----A---- C:\WINDOWS\system32\SET31F.tmp
2008-11-22 17:40:28 ----A---- C:\WINDOWS\system32\SET280.tmp
2008-11-22 17:40:28 ----A---- C:\WINDOWS\system32\SET27F.tmp
2008-11-22 17:40:27 ----A---- C:\WINDOWS\system32\SET32B.tmp
2008-11-22 17:40:27 ----A---- C:\WINDOWS\system32\SET329.tmp
2008-11-22 17:40:27 ----A---- C:\WINDOWS\system32\SET325.tmp
2008-11-22 17:40:27 ----A---- C:\WINDOWS\system32\SET288.tmp
2008-11-22 17:40:27 ----A---- C:\WINDOWS\system32\SET287.tmp
2008-11-22 17:40:26 ----A---- C:\WINDOWS\system32\SET32F.tmp
2008-11-22 17:40:26 ----A---- C:\WINDOWS\system32\SET28C.tmp
2008-11-22 17:40:24 ----A---- C:\WINDOWS\system32\SET340.tmp
2008-11-22 17:40:24 ----A---- C:\WINDOWS\system32\SET33F.tmp
2008-11-22 17:40:24 ----A---- C:\WINDOWS\system32\SET33D.tmp
2008-11-22 17:40:24 ----A---- C:\WINDOWS\system32\SET33B.tmp
2008-11-22 17:40:24 ----A---- C:\WINDOWS\system32\SET29D.tmp
2008-11-22 17:40:24 ----A---- C:\WINDOWS\system32\SET29C.tmp
2008-11-22 17:40:24 ----A---- C:\WINDOWS\system32\SET29A.tmp
2008-11-22 17:40:24 ----A---- C:\WINDOWS\system32\SET298.tmp
2008-11-22 17:40:19 ----A---- C:\WINDOWS\system32\SET2A6.tmp
2008-11-22 17:40:19 ----A---- C:\WINDOWS\system32\SET2A5.tmp
2008-11-22 17:40:19 ----A---- C:\WINDOWS\system32\SET2A4.tmp
2008-11-22 17:40:19 ----A---- C:\WINDOWS\system32\SET2A3.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET354.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET351.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET350.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET34F.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET34E.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET34B.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET2AF.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET2AD.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET2AC.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET2AB.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET2AA.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET2A8.tmp
2008-11-22 17:40:18 ----A---- C:\WINDOWS\system32\SET2A7.tmp
2008-11-22 17:40:17 ----A---- C:\WINDOWS\system32\SET358.tmp
2008-11-22 17:40:17 ----A---- C:\WINDOWS\system32\SET2B5.tmp
2008-11-22 17:40:17 ----A---- C:\WINDOWS\system32\SET2B1.tmp
2008-11-22 17:40:15 ----A---- C:\WINDOWS\system32\SET35B.tmp
2008-11-22 17:40:15 ----A---- C:\WINDOWS\system32\SET2B9.tmp
2008-11-22 17:40:13 ----A---- C:\WINDOWS\system32\SET36D.tmp
2008-11-22 17:40:13 ----A---- C:\WINDOWS\system32\SET2C6.tmp
2008-11-22 17:40:12 ----A---- C:\WINDOWS\system32\SETF9E.tmp
2008-11-22 17:40:12 ----A---- C:\WINDOWS\system32\SET376.tmp
2008-11-22 17:40:12 ----A---- C:\WINDOWS\system32\SET374.tmp
2008-11-22 17:40:12 ----A---- C:\WINDOWS\system32\SET371.tmp
2008-11-22 17:40:12 ----A---- C:\WINDOWS\system32\SET370.tmp
2008-11-22 17:40:12 ----A---- C:\WINDOWS\system32\SET2CE.tmp
2008-11-22 17:40:12 ----A---- C:\WINDOWS\system32\SET2CC.tmp
2008-11-22 17:40:12 ----A---- C:\WINDOWS\system32\SET2CA.tmp
2008-11-22 17:40:12 ----A---- C:\WINDOWS\system32\SET2C9.tmp
2008-11-22 17:40:10 ----A---- C:\WINDOWS\system32\SET37B.tmp
2008-11-22 17:40:10 ----A---- C:\WINDOWS\system32\SET2D3.tmp
2008-11-22 17:40:09 ----A---- C:\WINDOWS\system32\SET37E.tmp
2008-11-22 17:40:09 ----A---- C:\WINDOWS\system32\SET37D.tmp
2008-11-22 17:40:09 ----A---- C:\WINDOWS\system32\SET2D6.tmp
2008-11-22 17:40:09 ----A---- C:\WINDOWS\system32\SET2D5.tmp
2008-11-22 17:40:07 ----A---- C:\WINDOWS\system32\SET38A.tmp
2008-11-22 17:40:07 ----A---- C:\WINDOWS\system32\SET2DD.tmp
2008-11-22 17:40:05 ----A---- C:\WINDOWS\system32\SET2E8.tmp
2008-11-22 17:40:04 ----A---- C:\WINDOWS\system32\SET39B.tmp
2008-11-22 17:40:04 ----A---- C:\WINDOWS\system32\SET39A.tmp
2008-11-22 17:40:04 ----A---- C:\WINDOWS\system32\SET399.tmp
2008-11-22 17:40:04 ----A---- C:\WINDOWS\system32\SET2ED.tmp
2008-11-22 17:40:04 ----A---- C:\WINDOWS\system32\SET2EC.tmp
2008-11-22 17:40:04 ----A---- C:\WINDOWS\system32\SET2EB.tmp
2008-11-22 17:40:03 ----A---- C:\WINDOWS\system32\SET3A0.tmp
2008-11-22 17:40:03 ----A---- C:\WINDOWS\system32\SET2F1.tmp
2008-11-22 17:40:01 ----A---- C:\WINDOWS\system32\SET3A8.tmp
2008-11-22 17:40:01 ----A---- C:\WINDOWS\system32\SET2F9.tmp
2008-11-22 17:40:00 ----A---- C:\WINDOWS\system32\SET3B3.tmp
2008-11-22 17:40:00 ----A---- C:\WINDOWS\system32\SET3B1.tmp
2008-11-22 17:40:00 ----A---- C:\WINDOWS\system32\SET302.tmp
2008-11-22 17:40:00 ----A---- C:\WINDOWS\system32\SET300.tmp
2008-11-22 17:39:50 ----A---- C:\WINDOWS\system32\SET3BE.tmp
2008-11-22 17:39:50 ----A---- C:\WINDOWS\system32\SET3BC.tmp
2008-11-22 17:39:50 ----A---- C:\WINDOWS\system32\SET30E.tmp
2008-11-22 17:39:50 ----A---- C:\WINDOWS\system32\SET30C.tmp
2008-11-22 17:39:45 ----A---- C:\WINDOWS\system32\SET3D1.tmp
2008-11-22 17:39:45 ----A---- C:\WINDOWS\system32\SET322.tmp
2008-11-22 17:39:44 ----A---- C:\WINDOWS\system32\SET3D9.tmp
2008-11-22 17:39:44 ----A---- C:\WINDOWS\system32\SET3D7.tmp
2008-11-22 17:39:44 ----A---- C:\WINDOWS\system32\SET3D5.tmp
2008-11-22 17:39:44 ----A---- C:\WINDOWS\system32\SET32A.tmp
2008-11-22 17:39:44 ----A---- C:\WINDOWS\system32\SET328.tmp
2008-11-22 17:39:44 ----A---- C:\WINDOWS\system32\SET326.tmp
2008-11-22 17:39:43 ----A---- C:\WINDOWS\system32\SET3E0.tmp
2008-11-22 17:39:43 ----A---- C:\WINDOWS\system32\SET331.tmp
2008-11-22 17:39:42 ----A---- C:\WINDOWS\system32\SET3E9.tmp
2008-11-22 17:39:42 ----A---- C:\WINDOWS\system32\SET336.tmp
2008-11-22 17:39:39 ----A---- C:\WINDOWS\system32\SET3FF.tmp
2008-11-22 17:39:39 ----A---- C:\WINDOWS\system32\SET34C.tmp
2008-11-22 17:39:34 ----A---- C:\WINDOWS\system32\SET40B.tmp
2008-11-22 17:39:34 ----A---- C:\WINDOWS\system32\SET40A.tmp
2008-11-22 17:39:34 ----A---- C:\WINDOWS\system32\SET407.tmp
2008-11-22 17:39:34 ----A---- C:\WINDOWS\system32\SET356.tmp
2008-11-22 17:39:34 ----A---- C:\WINDOWS\system32\SET355.tmp
2008-11-22 17:39:34 ----A---- C:\WINDOWS\system32\SET353.tmp
2008-11-22 17:39:32 ----A---- C:\WINDOWS\system32\SET413.tmp
2008-11-22 17:39:32 ----A---- C:\WINDOWS\system32\SET35C.tmp
2008-11-22 17:39:31 ----A---- C:\WINDOWS\system32\SET42C.tmp
2008-11-22 17:39:31 ----A---- C:\WINDOWS\system32\SET42A.tmp
2008-11-22 17:39:31 ----A---- C:\WINDOWS\system32\SET425.tmp
2008-11-22 17:39:31 ----A---- C:\WINDOWS\system32\SET419.tmp
2008-11-22 17:39:31 ----A---- C:\WINDOWS\system32\SET36C.tmp
2008-11-22 17:39:31 ----A---- C:\WINDOWS\system32\SET36A.tmp
2008-11-22 17:39:31 ----A---- C:\WINDOWS\system32\SET367.tmp
2008-11-22 17:39:31 ----A---- C:\WINDOWS\system32\SET360.tmp
2008-11-22 17:39:30 ----A---- C:\WINDOWS\system32\SET433.tmp
2008-11-22 17:39:30 ----A---- C:\WINDOWS\system32\SET372.tmp
2008-11-22 17:39:27 ----A---- C:\WINDOWS\005123_.tmp
2008-11-22 17:39:27 ----A---- C:\WINDOWS\002958_.tmp
2008-11-22 17:39:26 ----A---- C:\WINDOWS\system32\SET447.tmp
2008-11-22 17:39:26 ----A---- C:\WINDOWS\system32\SET380.tmp
2008-11-22 17:39:26 ----A---- C:\WINDOWS\system32\SET37F.tmp
2008-11-22 17:39:26 ----A---- C:\WINDOWS\SET52F.tmp
2008-11-22 17:39:26 ----A---- C:\WINDOWS\SET46C.tmp
2008-11-22 17:39:25 ----A---- C:\WINDOWS\system32\SET44B.tmp
2008-11-22 17:39:25 ----A---- C:\WINDOWS\system32\SET44A.tmp
2008-11-22 17:39:25 ----A---- C:\WINDOWS\system32\SET449.tmp
2008-11-22 17:39:25 ----A---- C:\WINDOWS\system32\SET384.tmp
2008-11-22 17:39:25 ----A---- C:\WINDOWS\system32\SET383.tmp
2008-11-22 17:39:25 ----A---- C:\WINDOWS\system32\SET382.tmp
2008-11-22 17:39:21 ----A---- C:\WINDOWS\system32\SET457.tmp
2008-11-22 17:39:21 ----A---- C:\WINDOWS\system32\SET392.tmp
2008-11-22 17:39:20 ----A---- C:\WINDOWS\system32\SET462.tmp
2008-11-22 17:39:20 ----A---- C:\WINDOWS\system32\SET39D.tmp
2008-11-22 17:39:19 ----A---- C:\WINDOWS\system32\SET473.tmp
2008-11-22 17:39:19 ----A---- C:\WINDOWS\system32\SET472.tmp
2008-11-22 17:39:19 ----A---- C:\WINDOWS\system32\SET3AE.tmp
2008-11-22 17:39:19 ----A---- C:\WINDOWS\system32\SET3AD.tmp
2008-11-22 17:39:13 ----A---- C:\WINDOWS\system32\SET49F.tmp
2008-11-22 17:39:13 ----A---- C:\WINDOWS\system32\SET3DA.tmp
2008-11-22 17:39:12 ----A---- C:\WINDOWS\system32\SET4A8.tmp
2008-11-22 17:39:12 ----A---- C:\WINDOWS\system32\SET4A7.tmp
2008-11-22 17:39:12 ----A---- C:\WINDOWS\system32\SET3E3.tmp
2008-11-22 17:39:12 ----A---- C:\WINDOWS\system32\SET3E2.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET4B2.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET4B1.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET4AF.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET4AC.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET4AB.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET4AA.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET3ED.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET3EC.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET3EA.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET3E7.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET3E6.tmp
2008-11-22 17:39:11 ----A---- C:\WINDOWS\system32\SET3E5.tmp
2008-11-22 17:39:10 ----A---- C:\WINDOWS\system32\SET4B7.tmp
2008-11-22 17:39:10 ----A---- C:\WINDOWS\system32\SET4B4.tmp
2008-11-22 17:39:10 ----A---- C:\WINDOWS\system32\SET3F2.tmp
2008-11-22 17:39:10 ----A---- C:\WINDOWS\system32\SET3EF.tmp
2008-11-22 17:39:09 ----A---- C:\WINDOWS\system32\SET4B9.tmp
2008-11-22 17:39:09 ----A---- C:\WINDOWS\system32\SET3F4.tmp
2008-11-22 17:39:08 ----A---- C:\WINDOWS\system32\SET4BF.tmp
2008-11-22 17:39:08 ----A---- C:\WINDOWS\system32\SET4BE.tmp
2008-11-22 17:39:08 ----A---- C:\WINDOWS\system32\SET3FA.tmp
2008-11-22 17:39:08 ----A---- C:\WINDOWS\system32\SET3F9.tmp
2008-11-22 17:39:07 ----A---- C:\WINDOWS\system32\SET4C7.tmp
2008-11-22 17:39:07 ----A---- C:\WINDOWS\system32\SET402.tmp
2008-11-22 17:39:06 ----A---- C:\WINDOWS\system32\SET4CE.tmp
2008-11-22 17:39:06 ----A---- C:\WINDOWS\system32\SET409.tmp
2008-11-22 17:39:05 ----A---- C:\WINDOWS\system32\SET4D6.tmp
2008-11-22 17:39:05 ----A---- C:\WINDOWS\system32\SET4D3.tmp
2008-11-22 17:39:05 ----A---- C:\WINDOWS\system32\SET411.tmp
2008-11-22 17:39:05 ----A---- C:\WINDOWS\system32\SET40E.tmp
2008-11-22 17:39:04 ----A---- C:\WINDOWS\system32\SET4DB.tmp
2008-11-22 17:39:04 ----A---- C:\WINDOWS\system32\SET4D9.tmp
2008-11-22 17:39:04 ----A---- C:\WINDOWS\system32\SET416.tmp
2008-11-22 17:39:04 ----A---- C:\WINDOWS\system32\SET414.tmp
2008-11-22 17:39:03 ----A---- C:\WINDOWS\system32\SET4DF.tmp
2008-11-22 17:39:03 ----A---- C:\WINDOWS\system32\SET41A.tmp
2008-11-22 17:39:02 ----A---- C:\WINDOWS\system32\SET4E7.tmp
2008-11-22 17:39:02 ----A---- C:\WINDOWS\system32\SET4E2.tmp
2008-11-22 17:39:02 ----A---- C:\WINDOWS\system32\SET4E1.tmp
2008-11-22 17:39:02 ----A---- C:\WINDOWS\system32\SET422.tmp
2008-11-22 17:39:02 ----A---- C:\WINDOWS\system32\SET41D.tmp
2008-11-22 17:39:02 ----A---- C:\WINDOWS\system32\SET41C.tmp
2008-11-22 17:39:01 ----A---- C:\WINDOWS\system32\SET4E8.tmp
2008-11-22 17:39:01 ----A---- C:\WINDOWS\system32\SET423.tmp
2008-11-22 17:38:59 ----A---- C:\WINDOWS\system32\SET4ED.tmp
2008-11-22 17:38:59 ----A---- C:\WINDOWS\system32\SET4EC.tmp
2008-11-22 17:38:59 ----A---- C:\WINDOWS\system32\SET428.tmp
2008-11-22 17:38:59 ----A---- C:\WINDOWS\system32\SET427.tmp
2008-11-22 17:38:58 ----A---- C:\WINDOWS\system32\SET4F2.tmp
2008-11-22 17:38:58 ----A---- C:\WINDOWS\system32\SET42D.tmp
2008-11-22 17:38:52 ----A---- C:\WINDOWS\system32\SET4FC.tmp
2008-11-22 17:38:52 ----A---- C:\WINDOWS\system32\SET4F9.tmp
2008-11-22 17:38:52 ----A---- C:\WINDOWS\system32\SET437.tmp
2008-11-22 17:38:52 ----A---- C:\WINDOWS\system32\SET434.tmp
2008-11-22 17:38:50 ----A---- C:\WINDOWS\system32\SET500.tmp
2008-11-22 17:38:50 ----A---- C:\WINDOWS\system32\SET43C.tmp
2008-11-22 17:38:50 ----A---- C:\WINDOWS\system32\SET439.tmp
2008-11-22 17:38:49 ----A---- C:\WINDOWS\system32\SET504.tmp
2008-11-22 17:38:49 ----A---- C:\WINDOWS\system32\SET502.tmp
2008-11-22 17:38:49 ----A---- C:\WINDOWS\system32\SET441.tmp
2008-11-22 17:38:49 ----A---- C:\WINDOWS\system32\SET43F.tmp
2008-11-22 17:09:47 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2008-11-22 17:06:56 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$
2008-11-22 17:04:58 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2008-11-22 17:02:27 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2008-11-22 17:02:08 ----D---- C:\WINDOWS\system32\CatRoot_bak
2008-11-22 17:00:44 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$
2008-11-22 16:59:06 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$
2008-11-22 16:57:06 ----HDC---- C:\WINDOWS\$NtUninstallKB896428$
2008-11-22 16:55:27 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$
2008-11-22 16:53:26 ----HDC---- C:\WINDOWS\$NtUninstallKB896422$
2008-11-22 16:51:03 ----HDC---- C:\WINDOWS\$NtUninstallKB896358$
2008-11-22 16:49:15 ----HDC---- C:\WINDOWS\$NtUninstallKB893756$
2008-11-22 16:47:56 ----HDC---- C:\WINDOWS\$NtUninstallKB893066$
2008-11-22 16:46:57 ----HDC---- C:\WINDOWS\$NtUninstallKB891781$
2008-11-22 16:45:44 ----HDC---- C:\WINDOWS\$NtUninstallKB890859$
2008-11-22 16:44:34 ----HDC---- C:\WINDOWS\$NtUninstallKB888302$
2008-11-22 16:42:56 ----HDC---- C:\WINDOWS\$NtUninstallKB888113$
2008-11-22 16:41:56 ----HDC---- C:\WINDOWS\$NtUninstallKB885836$
2008-11-22 16:40:54 ----HDC---- C:\WINDOWS\$NtUninstallKB885835$
2008-11-22 16:39:48 ----HDC---- C:\WINDOWS\$NtUninstallKB873339$
2008-11-22 16:35:50 ----A---- C:\WINDOWS\system32\wmpns.dll
2008-11-22 16:32:08 ----D---- C:\WINDOWS\peernet
2008-11-22 16:32:07 ----D---- C:\WINDOWS\provisioning
2008-11-22 16:28:50 ----D---- C:\WINDOWS\ServicePackFiles
2008-11-22 16:19:25 ----D---- C:\WINDOWS\EHome
2008-11-22 15:26:33 ----HDC---- C:\WINDOWS\$NtUninstallKB899587_0$
2008-11-22 15:26:03 ----HDC---- C:\WINDOWS\$NtUninstallKB896422_0$
2008-11-22 15:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB885835_0$
2008-11-22 15:24:58 ----HDC---- C:\WINDOWS\$NtUninstallKB885836_0$
2008-11-22 15:24:28 ----HDC---- C:\WINDOWS\$NtUninstallKB901017_0$
2008-11-22 15:24:00 ----HDC---- C:\WINDOWS\$NtUninstallKB899591_0$
2008-11-22 15:23:30 ----HDC---- C:\WINDOWS\$NtUninstallKB893756_0$
2008-11-22 15:23:00 ----HDC---- C:\WINDOWS\$NtUninstallKB896423_0$
2008-11-22 15:22:33 ----HDC---- C:\WINDOWS\$NtUninstallKB873339_0$
2008-11-22 15:21:56 ----HDC---- C:\WINDOWS\$NtUninstallKB888113_0$
2008-11-22 15:21:15 ----HDC---- C:\WINDOWS\$NtUninstallKB896688-IE6SP1-20051004.130236$
2008-11-22 15:20:54 ----HDC---- C:\WINDOWS\$NtUninstallKB896358_0$
2008-11-22 15:20:35 ----HDC---- C:\WINDOWS\$NtUninstallKB898458$
2008-11-22 15:20:18 ----HDC---- C:\WINDOWS\$NtUninstallKB905495$
2008-11-22 15:19:25 ----HDC---- C:\WINDOWS\$NtUninstallKB902400_0$
2008-11-22 15:19:03 ----HDC---- C:\WINDOWS\$NtUninstallKB891781_0$
2008-11-22 15:18:44 ----HDC---- C:\WINDOWS\$NtUninstallKB893066_0$
2008-11-22 15:18:19 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2008-11-22 15:17:40 ----HDC---- C:\WINDOWS\$NtUninstallKB905414_0$
2008-11-22 15:17:23 ----HDC---- C:\WINDOWS\$NtUninstallKB901214_0$
2008-11-22 15:17:07 ----HDC---- C:\WINDOWS\$NtUninstallKB888302_0$
2008-11-22 15:16:36 ----HDC---- C:\WINDOWS\$NtUninstallKB900725_0$
2008-11-22 15:16:20 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2008-11-22 15:16:06 ----HDC---- C:\WINDOWS\$NtUninstallKB896428_0$
2008-11-22 15:14:46 ----HDC---- C:\WINDOWS\$NtUninstallKB890859_0$
2008-11-22 14:14:30 ----A---- C:\WINDOWS\system32\spnpinst.exe
2008-11-22 11:39:19 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2008-11-22 11:39:19 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2008-11-22 11:39:19 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2008-11-22 11:34:39 ----D---- C:\Program Files\Spybot - Search & Destroy
2008-11-22 11:34:39 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-11-22 11:33:08 ----A---- C:\WINDOWS\system32\javaws.exe
2008-11-22 11:33:08 ----A---- C:\WINDOWS\system32\javaw.exe
2008-11-22 11:33:07 ----A---- C:\WINDOWS\system32\java.exe
2008-11-22 10:24:31 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-11-22 10:22:51 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2008-11-22 10:18:21 ----D---- C:\Mike
2008-11-22 10:00:44 ----D---- C:\WINDOWS\pss
2008-11-22 09:43:31 ----D---- C:\Program Files\DellSupport

[hboyette]

======List of files/folders modified in the last 1 months======

2008-11-27 09:15:54 ----D---- C:\WINDOWS\Temp
2008-11-27 09:09:10 ----A---- C:\WINDOWS\ModemLog_Intel(R) 537EP V9x DF PCI Modem.txt
2008-11-26 16:47:35 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-11-25 22:27:43 ----D---- C:\WINDOWS\system32\CatRoot2
2008-11-24 22:53:45 ----D---- C:\WINDOWS
2008-11-24 22:50:53 ----D---- C:\WINDOWS\system32\Macromed
2008-11-24 17:16:55 ----D---- C:\Documents and Settings\Mike\Application Data\Adobe
2008-11-24 17:13:03 ----SHD---- C:\WINDOWS\Installer
2008-11-24 17:12:33 ----AD---- C:\Program Files
2008-11-24 17:11:32 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-11-24 17:11:21 ----HD---- C:\WINDOWS\INF
2008-11-23 13:38:42 ----D---- C:\WINDOWS\SYSTEM32
2008-11-23 12:59:48 ----RSHD---- C:\WINDOWS\system32\DLLCACHE
2008-11-23 12:59:05 ----HD---- C:\WINDOWS\$hf_mig$
2008-11-23 12:50:33 ----A---- C:\WINDOWS\imsins.BAK
2008-11-23 11:36:11 ----D---- C:\Documents and Settings
2008-11-23 10:53:59 ----RASH---- C:\BOOT.INI
2008-11-23 10:53:59 ----A---- C:\WINDOWS\WIN.INI
2008-11-23 10:53:59 ----A---- C:\WINDOWS\SYSTEM.INI
2008-11-23 10:51:32 ----D---- C:\WINDOWS\system32\DRIVERS
2008-11-23 10:47:27 ----D---- C:\Program Files\QuickTime
2008-11-23 10:46:56 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-11-23 10:45:11 ----SD---- C:\WINDOWS\Tasks
2008-11-23 10:43:59 ----D---- C:\Program Files\Common Files
2008-11-23 09:12:08 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-11-23 09:05:56 ----AD---- C:\WINDOWS\MSAGENT
2008-11-23 09:05:28 ----D---- C:\WINDOWS\SECURITY
2008-11-23 08:48:56 ----D---- C:\WINDOWS\WinSxS
2008-11-23 08:46:46 ----D---- C:\Program Files\Messenger
2008-11-23 08:44:51 ----D---- C:\Program Files\Windows Media Player
2008-11-23 08:43:27 ----D---- C:\Program Files\Outlook Express
2008-11-23 08:43:27 ----D---- C:\Program Files\Common Files\System
2008-11-23 08:41:51 ----D---- C:\WINDOWS\system32\CatRoot
2008-11-23 08:14:19 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-11-22 23:15:27 ----D---- C:\WINDOWS\system32\WBEM
2008-11-22 23:15:27 ----D---- C:\WINDOWS\AppPatch
2008-11-22 23:15:26 ----D---- C:\WINDOWS\system32\Setup
2008-11-22 23:15:16 ----RSD---- C:\WINDOWS\Fonts
2008-11-22 22:52:51 ----D---- C:\WINDOWS\system32\bits
2008-11-22 22:52:27 ----AD---- C:\WINDOWS\system32\USMT
2008-11-22 22:52:21 ----D---- C:\WINDOWS\system32\Restore
2008-11-22 22:52:20 ----D---- C:\WINDOWS\system32\OOBE
2008-11-22 22:52:19 ----AD---- C:\WINDOWS\system32\NPP
2008-11-22 22:52:13 ----D---- C:\WINDOWS\system32\Com
2008-11-22 22:50:04 ----AD---- C:\WINDOWS\SYSTEM
2008-11-22 22:50:04 ----AD---- C:\WINDOWS\SRCHASST
2008-11-22 22:46:52 ----AD---- C:\WINDOWS\IME
2008-11-22 22:46:51 ----D---- C:\WINDOWS\Help
2008-11-22 22:46:42 ----D---- C:\Program Files\Windows NT
2008-11-22 22:46:38 ----D---- C:\Program Files\NetMeeting
2008-11-22 22:46:36 ----D---- C:\Program Files\Movie Maker
2008-11-22 22:26:42 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-11-22 21:56:17 ----D---- C:\Program Files\Internet Explorer
2008-11-22 21:50:26 ----D---- C:\Program Files\Yahoo!
2008-11-22 21:49:13 ----AD---- C:\WINDOWS\system32\CONFIG
2008-11-22 21:48:56 ----D---- C:\WINDOWS\Media
2008-11-22 20:19:33 ----D---- C:\do_work
2008-11-22 19:49:25 ----D---- C:\Program Files\Common Files\Microsoft Shared
2008-11-22 19:38:21 ----SD---- C:\Documents and Settings\Mike\Application Data\Microsoft
2008-11-22 19:14:42 ----D---- C:\WINDOWS\Registration
2008-11-22 19:03:05 ----D---- C:\Program Files\Common Files\Symantec Shared
2008-11-22 19:00:32 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2008-11-22 18:56:09 ----D---- C:\Program Files\Common Files\Adobe
2008-11-22 18:56:01 ----D---- C:\Documents and Settings\Mike\Application Data\AdobeUM
2008-11-22 18:55:56 ----D---- C:\Program Files\Viewpoint
2008-11-22 18:55:50 ----D---- C:\Documents and Settings\All Users\Application Data\Viewpoint
2008-11-22 18:55:28 ----D---- C:\Program Files\Adobe
2008-11-22 18:48:35 ----D---- C:\WINDOWS\Debug
2008-11-22 18:42:51 ----A---- C:\WINDOWS\SETUPLOG.TXT
2008-11-22 18:42:01 ----SHD---- C:\System Volume Information
2008-11-22 18:27:39 ----A---- C:\WINDOWS\OEWABLog.txt
2008-11-22 18:26:54 ----SH---- C:\WINDOWS\system32\rqtwa.ini2
2008-11-22 16:35:19 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-11-22 16:32:43 ----AD---- C:\WINDOWS\system32\MUI
2008-11-22 16:25:19 ----RD---- C:\WINDOWS\Web
2008-11-22 16:24:49 ----RASH---- C:\NTDETECT.COM
2008-11-22 15:22:18 ----HD---- C:\Program Files\Uninstall Information
2008-11-22 11:39:46 ----D---- C:\WINDOWS\SoftwareDistribution
2008-11-22 11:33:03 ----D---- C:\Program Files\Java
2008-11-22 11:21:36 ----HD---- C:\Program Files\InstallShield Installation Information
2008-11-22 11:15:12 ----D---- C:\Program Files\Rio
2008-11-22 11:13:04 ----D---- C:\Program Files\BroadJump
2008-11-22 11:03:41 ----D---- C:\Program Files\SoftwareOnline
2008-11-22 11:03:35 ----D---- C:\Program Files\_SUPERBAR
2008-11-22 10:25:26 ----D---- C:\Program Files\Lavasoft
2008-11-22 10:25:24 ----D---- C:\Documents and Settings\Mike\Application Data\Lavasoft
2008-11-22 09:57:55 ----D---- C:\WINDOWS\system32\FxsTmp
2008-11-22 09:55:33 ----SH---- C:\WINDOWS\system32\okouqtgg.ini
2008-11-22 09:46:30 ----D---- C:\Documents and Settings\All Users\Application Data\Dell
2008-11-22 09:46:26 ----SD---- C:\WINDOWS\system32\Microsoft
2008-11-22 09:46:22 ----HD---- C:\Documents and Settings\Mike\Application Data\GTek
2008-11-22 09:43:22 ----AD---- C:\DELL

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-11-22 97928]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-11-22 26824]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2004-08-03 36096]
R1 omci;OMCI WDM Device Driver; C:\WINDOWS\System32\DRIVERS\omci.sys [2002-11-08 17217]
R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2004-01-14 5621]
R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2004-01-14 23219]
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2005-01-21 267384]
R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2004-06-22 8552]
R2 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2008-11-22 76040]
R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2004-02-27 40480]
R2 dsunidrv;DellSupport UniDriver; C:\WINDOWS\System32\DRIVERS\dsunidrv.sys [2007-02-25 5376]
R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2004-03-15 25685]
R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2004-03-15 34837]
R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2004-03-15 4117]
R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2004-03-15 2233]
R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2004-03-15 85972]
R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2004-03-15 14229]
R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2004-03-15 6357]
R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2004-03-15 98580]
R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2004-03-15 100597]
R3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2003-04-15 113504]
R3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2003-04-15 78752]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys [2003-05-23 43136]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 ialm;ialm; C:\WINDOWS\System32\DRIVERS\ialmnt5.sys [2003-04-15 90907]
R3 IntelC51;IntelC51; C:\WINDOWS\System32\DRIVERS\IntelC51.sys [2004-03-05 1233525]
R3 IntelC52;IntelC52; C:\WINDOWS\System32\DRIVERS\IntelC52.sys [2004-03-05 647929]
R3 IntelC53;IntelC53; C:\WINDOWS\System32\DRIVERS\IntelC53.sys [2004-03-05 60949]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mohfilt;mohfilt; C:\WINDOWS\System32\DRIVERS\mohfilt.sys [2004-03-05 37048]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-11-18 591808]
R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-04 20480]
S1 P3;Intel PentiumIII Processor Driver; C:\WINDOWS\System32\DRIVERS\p3.sys [2004-08-03 42496]
S3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2004-08-03 701440]
S3 DSproct;DSproct; \??\C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys []
S3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\System32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
S3 i81x;i81x; C:\WINDOWS\System32\DRIVERS\i81xnt5.sys [2004-08-03 161020]
S3 iAimFP0;iAimFP0; C:\WINDOWS\System32\DRIVERS\wADV01nt.sys [2004-08-03 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\System32\DRIVERS\wADV02NT.sys [2004-08-03 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\System32\DRIVERS\wADV05NT.sys [2004-08-03 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys [2004-08-03 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys [2004-08-03 19455]
S3 iAimTV0;iAimTV0; C:\WINDOWS\System32\DRIVERS\wATV01nt.sys [2004-08-03 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\System32\DRIVERS\wATV02NT.sys [2004-08-03 19551]
S3 iAimTV2;iAimTV2; C:\WINDOWS\System32\DRIVERS\wATV03nt.sys []
S3 iAimTV3;iAimTV3; C:\WINDOWS\System32\DRIVERS\wATV04nt.sys [2004-08-03 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615]
S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2005-01-21 11544]
S3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2005-01-21 172216]
S3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2005-01-21 35000]
S3 SYMIDSCO;SYMIDSCO; C:\WINDOWS\System32\Drivers\SYMIDSCO.SYS [2004-06-29 170208]
S3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2005-01-21 46808]
S3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2005-01-21 26424]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys []
S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\agp440.sys [2004-08-04 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\agpCPQ.sys [2004-08-04 44928]
S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\alim1541.sys [2004-08-04 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\System32\DRIVERS\amdagp.sys [2004-08-04 43008]
S4 cbidf;cbidf; C:\WINDOWS\System32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\System32\DRIVERS\intelide.sys [2004-08-03 5504]
S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2004-08-04 41088]
S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\viaagp.sys [2004-08-04 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-11-22 611664]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-11-22 875288]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-11-22 231704]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2003-05-02 303104]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\System32\wdfmgr.exe [2005-01-28 38912]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-04 267776]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 DSBrokerService;DSBrokerService; C:\Program Files\DellSupport\brkrsvc.exe [2007-03-07 76848]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-24 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
S3 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe [2005-01-21 206552]

-----------------EOF-----------------





info.txt logfile of random's system information tool 1.04 2008-11-27 09:16:04

======Uninstall list======

-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\System32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
-->C:\WINDOWS\System32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\System32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
ABBYY FineReader 5.0 Sprint-->MsiExec.exe /X{D1696920-9794-4BBC-8A30-7A88763DE5A2}
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Acrobat - Reader 6.0.2 Update-->MsiExec.exe /I{AC76BA86-0000-0000-0000-6028747ADE01}
Adobe Acrobat and Reader 6.0.3 Update-->MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000603}
Adobe Acrobat and Reader 6.0.4 Update-->MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000604}
Adobe Acrobat and Reader 6.0.5 Update-->MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000605}
Adobe Acrobat and Reader 6.0.6 Update-->MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000606}
Adobe Atmosphere Player for Acrobat and Adobe Reader-->C:\WINDOWS\atmoUn.exe
Adobe Reader 6.0.1-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A00000000001}
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
Broadcom Management Programs-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{89EE857B-8970-4F9F-AB58-A1C873AC72B3} /l1033
DA920EN-->MsiExec.exe /X{C1E5DF32-8248-4347-908C-E030EDAE4368}
Dell AIO Printer A920-->C:\WINDOWS\System32\spool\drivers\w32x86\3\DLBKUN5C.EXE -dDell AIO Printer A920
Dell Digital Jukebox Driver-->C:\Program Files\Dell\Digital Jukebox Drivers\DrvUnins.exe /s
Dell Media Experience-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
Dell Solution Center-->MsiExec.exe /X{11F1920A-56A2-4642-B6E0-3B31A12C9288}
DellSupport-->MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}
DVDSentry-->MsiExec.exe /I{98DF85D9-96C0-4F57-A92E-C3539477EF5E}
FinePixViewer Ver.4.3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24ED4D80-8294-11D5-96CD-0040266301AD}\SETUP.EXE"
FUJIFILM USB Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5490882C-6961-11D5-BAE5-00E0188E010B}\SETUP.EXE"
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Intel(R) 537EP V9x DF PCI Modem-->rundll32 IntelCci.dll,iSMUninstallation "Intel(R) 537EP V9x DF PCI Modem"
Intel(R) Extreme Graphics Driver-->RUNDLL32.EXE C:\WINDOWS\System32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2562
Internet Explorer Default Page-->MsiExec.exe /I{35BDEFF1-A610-4956-A00D-15453C116395}
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
Jasc Paint Shop Photo Album-->MsiExec.exe /I{CC000127-5E5D-4A1C-90CB-EEAAAC1E3AC0}
Jasc Paint Shop Pro 8 Dell Edition-->MsiExec.exe /I{81A34902-9D0B-4920-A25C-4CDC5D14B328}
Java 2 Runtime Environment, SE v1.4.2-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142000}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
LimeWire 4.10.9-->"C:\Program Files\LimeWire\uninstall.exe"
LiveUpdate 1.90 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
Memorex Audio Player-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D8EAB3D2-94D5-4526-A4C1-DD32701B66D8}\setup.exe" -l0x9
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Encarta Encyclopedia Standard 2004-->MsiExec.exe /I{04410044-9149-45C6-A806-F2BF9CFCE762}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Money 2004 System Pack-->MsiExec.exe /I{8C64E145-54BA-11D6-91B1-00500462BE80}
Microsoft Money 2004-->MsiExec.exe /I{1D643CD7-4DD6-11D7-A4E0-000874180BB3}
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Modem Event Monitor-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A0EFAFB-AC4B-4B88-8C6B-6731BE88DB68}\setup.exe" -l0x9
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Musicmatch® Jukebox-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85D3CC30-8859-481A-9654-FD9B74310BEF}\setup.exe" -l0x9 -uninst
PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
Professional Resumes Quick & Easy-->C:\PROGRA~1\RESUME~1\UNWISE.EXE C:\PROGRA~1\RESUME~1\INSTALL.LOG
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
RAW FILE CONVERTER LE-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D680C913-5955-469D-9D88-C1940F7506D6}\SETUP.EXE" -l0x9
RealPlayer Basic-->C:\Program Files\Common Files\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0
Security Update for Step By Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Security Update for Step By Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Security Update for Windows Media Player 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Security Update for Windows Media Player 9 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe"
Security Update for Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Security Update for Windows XP (KB893066)-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896422)-->"C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Security Update for Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Security Update for Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Security Update for Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Security Update for Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Security Update for Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Security Update for Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Security Update for Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Security Update for Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Security Update for Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Security Update for Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Security Update for Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Security Update for Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Security Update for Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Security Update for Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Security Update for Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Security Update for Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Security Update for Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Security Update for Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Security Update for Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Security Update for Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Security Update for Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Security Update for Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Security Update for Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Security Update for Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Security Update for Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Security Update for Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Security Update for Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Security Update for Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Security Update for Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Security Update for Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Security Update for Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Security Update for Windows XP (KB944338-v2)-->"C:\WINDOWS\$NtUninstallKB944338-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Security Update for Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Shockwave-->C:\WINDOWS\SYSTEM32\MACROMED\SHOCKW~1\UNWISE.EXE C:\WINDOWS\SYSTEM32\MACROMED\SHOCKW~1\Install.log
Sonic DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Sonic Update Manager-->MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Update for Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Update for Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Update for Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Update for Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Update for Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Update for Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Update for Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Update for Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Update for Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Update for Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Update for Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Update for Windows XP (KB932823-v3)-->"C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
Update for Windows XP (KB936357)-->"C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
Update for Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Hotfix - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Windows XP Hotfix - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Windows XP Hotfix - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Windows XP Hotfix - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Windows XP Hotfix - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Windows XP Hotfix - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Windows XP Hotfix - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Windows XP Hotfix - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Windows XP Hotfix - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
WordPerfect Office 11-->MsiExec.exe /I{54F90B55-BEB3-4F0D-8802-228822FA5921}
Yahoo! Anti-Spy-->C:\PROGRA~1\Yahoo!\Common\unypsr.exe
Yahoo! Search Suggest Add-on for IE7-->C:\PROGRA~1\Yahoo!\SEARCH~1\UNINST~1.EXE
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: AVG Anti-Virus Free

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0209
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

[Shaba]

IMPORTANT I notice there are signs of one or more P2P (Peer to Peer) File Sharing Programs on your computer.

LimeWire 4.10.9

I'd like you to read the this thread (http://forums.spybot.info/showthread.php?t=282).

Please go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red).

Delete info.txt from c:\rsit folder.

Please run a new RSIT scan when finished and post the a fresh info.txt back here.

[hboyette]

info.txt logfile of random's system information tool 1.04 2008-11-27 09:47:45

======Uninstall list======

-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\System32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
-->C:\WINDOWS\System32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\System32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
ABBYY FineReader 5.0 Sprint-->MsiExec.exe /X{D1696920-9794-4BBC-8A30-7A88763DE5A2}
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Acrobat - Reader 6.0.2 Update-->MsiExec.exe /I{AC76BA86-0000-0000-0000-6028747ADE01}
Adobe Acrobat and Reader 6.0.3 Update-->MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000603}
Adobe Acrobat and Reader 6.0.4 Update-->MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000604}
Adobe Acrobat and Reader 6.0.5 Update-->MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000605}
Adobe Acrobat and Reader 6.0.6 Update-->MsiExec.exe /I{AC76BA86-0000-7EC8-7489-000000000606}
Adobe Atmosphere Player for Acrobat and Adobe Reader-->C:\WINDOWS\atmoUn.exe
Adobe Reader 6.0.1-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A00000000001}
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
Broadcom Management Programs-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{89EE857B-8970-4F9F-AB58-A1C873AC72B3} /l1033
DA920EN-->MsiExec.exe /X{C1E5DF32-8248-4347-908C-E030EDAE4368}
Dell AIO Printer A920-->C:\WINDOWS\System32\spool\drivers\w32x86\3\DLBKUN5C.EXE -dDell AIO Printer A920
Dell Digital Jukebox Driver-->C:\Program Files\Dell\Digital Jukebox Drivers\DrvUnins.exe /s
Dell Media Experience-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
Dell Solution Center-->MsiExec.exe /X{11F1920A-56A2-4642-B6E0-3B31A12C9288}
DellSupport-->MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}
DVDSentry-->MsiExec.exe /I{98DF85D9-96C0-4F57-A92E-C3539477EF5E}
FinePixViewer Ver.4.3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24ED4D80-8294-11D5-96CD-0040266301AD}\SETUP.EXE"
FUJIFILM USB Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5490882C-6961-11D5-BAE5-00E0188E010B}\SETUP.EXE"
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Intel(R) 537EP V9x DF PCI Modem-->rundll32 IntelCci.dll,iSMUninstallation "Intel(R) 537EP V9x DF PCI Modem"
Intel(R) Extreme Graphics Driver-->RUNDLL32.EXE C:\WINDOWS\System32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2562
Internet Explorer Default Page-->MsiExec.exe /I{35BDEFF1-A610-4956-A00D-15453C116395}
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
Jasc Paint Shop Photo Album-->MsiExec.exe /I{CC000127-5E5D-4A1C-90CB-EEAAAC1E3AC0}
Jasc Paint Shop Pro 8 Dell Edition-->MsiExec.exe /I{81A34902-9D0B-4920-A25C-4CDC5D14B328}
Java 2 Runtime Environment, SE v1.4.2-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142000}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
LiveUpdate 1.90 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
Memorex Audio Player-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D8EAB3D2-94D5-4526-A4C1-DD32701B66D8}\setup.exe" -l0x9
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Encarta Encyclopedia Standard 2004-->MsiExec.exe /I{04410044-9149-45C6-A806-F2BF9CFCE762}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Money 2004 System Pack-->MsiExec.exe /I{8C64E145-54BA-11D6-91B1-00500462BE80}
Microsoft Money 2004-->MsiExec.exe /I{1D643CD7-4DD6-11D7-A4E0-000874180BB3}
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Modem Event Monitor-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A0EFAFB-AC4B-4B88-8C6B-6731BE88DB68}\setup.exe" -l0x9
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Musicmatch® Jukebox-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85D3CC30-8859-481A-9654-FD9B74310BEF}\setup.exe" -l0x9 -uninst
PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
Professional Resumes Quick & Easy-->C:\PROGRA~1\RESUME~1\UNWISE.EXE C:\PROGRA~1\RESUME~1\INSTALL.LOG
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
RAW FILE CONVERTER LE-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D680C913-5955-469D-9D88-C1940F7506D6}\SETUP.EXE" -l0x9
RealPlayer Basic-->C:\Program Files\Common Files\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0
Security Update for Step By Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Security Update for Step By Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Security Update for Windows Media Player 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Security Update for Windows Media Player 9 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe"
Security Update for Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Security Update for Windows XP (KB893066)-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896422)-->"C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Security Update for Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Security Update for Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Security Update for Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Security Update for Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Security Update for Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Security Update for Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Security Update for Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Security Update for Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Security Update for Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Security Update for Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Security Update for Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Security Update for Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Security Update for Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Security Update for Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Security Update for Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Security Update for Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Security Update for Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Security Update for Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Security Update for Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Security Update for Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Security Update for Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Security Update for Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Security Update for Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Security Update for Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Security Update for Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Security Update for Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Security Update for Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Security Update for Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Security Update for Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Security Update for Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Security Update for Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Security Update for Windows XP (KB944338-v2)-->"C:\WINDOWS\$NtUninstallKB944338-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Security Update for Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Shockwave-->C:\WINDOWS\SYSTEM32\MACROMED\SHOCKW~1\UNWISE.EXE C:\WINDOWS\SYSTEM32\MACROMED\SHOCKW~1\Install.log
Sonic DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Sonic Update Manager-->MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Update for Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Update for Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Update for Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Update for Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Update for Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Update for Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Update for Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Update for Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Update for Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Update for Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Update for Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Update for Windows XP (KB932823-v3)-->"C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
Update for Windows XP (KB936357)-->"C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
Update for Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Hotfix - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Windows XP Hotfix - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Windows XP Hotfix - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Windows XP Hotfix - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Windows XP Hotfix - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Windows XP Hotfix - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Windows XP Hotfix - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Windows XP Hotfix - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Windows XP Hotfix - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
WordPerfect Office 11-->MsiExec.exe /I{54F90B55-BEB3-4F0D-8802-228822FA5921}
Yahoo! Anti-Spy-->C:\PROGRA~1\Yahoo!\Common\unypsr.exe
Yahoo! Search Suggest Add-on for IE7-->C:\PROGRA~1\Yahoo!\SEARCH~1\UNINST~1.EXE
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: AVG Anti-Virus Free

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0209
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

[Shaba]

Sorry for delay, I got no email notification.

Reason for slowness is here:

Total RAM: 254 MB (28% free)

You have very little RAM. I suggest that you at least double it.

However, there are some leftovers which need to go:

Please download the OTMoveIt3 by OldTimer (http://oldtimer.geekstogo.com/OTMoveIt3.exe).

Save it to your desktop.
Please double-click OTMoveIt3.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):



:files
C:\WINDOWS\system32\_00????_.tmp.dll
C:\WINDOWS\system32\SET???.tmp
C:\WINDOWS\00????_.tmp

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78653A3E-A63F-42A9-A6FE-7524F4058767}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NI.UWA6P_0001_N56M1001"=-

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DllRunning]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\awtqr]

:commands
[EmptyTemp]
[reboot]


Return to OTMoveIt3, right click in the "Paste List of Files/Folders to Move" window (under the yellow bar) and choose Paste.

Click the red Moveit! button.
Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
Close OTMoveIt3

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.

Re-run rsit.

Post:

- a fresh rsit log (only log.txt will appear)
- otmoveit3 log

[hboyette]

Thank you and no problem. I have been away from the computer for a few days. Here is the rsit log...


Logfile of random's system information tool 1.04 (written by random/random)
Run by Mike at 2008-11-30 17:01:46
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 21 GB (56%) free of 38 GB
Total RAM: 254 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:02:38 PM, on 11/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\SYSTEM32\notepad.exe
C:\Documents and Settings\Mike\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Mike.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: Yahoo! IE Suggest - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\SearchSuggest\YSearchSuggest.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {CC149546-C2E2-43BA-B280-468115A165D2} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: (no name) - {81587163-443D-4331-925A-49CF6716F9FE} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130245470937
O16 - DPF: {8FA2192F-B95D-40E3-898F-8D7ABB8E00D0} (SpinTop Games Launcher) - http://www.gamehouse.com/games/SpinTopGamesLauncher.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

--
End of file - 7572 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Symantec NetDetect.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll [2007-09-05 816400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 54248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-11-22 455960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{549B5CA7-4A86-11D7-A4DF-000874180BB3}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5A263CF7-56A6-4D68-A8CF-345BE45BC911}]
Yahoo! IE Suggest - C:\Program Files\Yahoo!\SearchSuggest\YSearchSuggest.dll [2008-01-14 233472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2004-03-15 118836]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2008-11-24 2403392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC149546-C2E2-43BA-B280-468115A165D2}
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll [2007-09-05 816400]
{81587163-443D-4331-925A-49CF6716F9FE}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2008-11-24 2403392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\System32\igfxtray.exe [2003-04-06 155648]
"HotKeysCmds"=C:\WINDOWS\System32\hkcmd.exe [2003-04-06 114688]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-11-27 1261336]
"UpdateManager"=C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe [2003-08-19 110592]
"Dell AIO Printer A920"=C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe [2003-05-02 270336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BJCFD]
C:\Program Files\BroadJump\Client Foundation\CFD.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupport]
C:\Program Files\DellSupport\DSAgnt.exe [2007-03-15 460784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellTransferAgent]
C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe [2007-11-13 135168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
C:\WINDOWS\system32\dla\tfswctrl.exe [2004-03-15 122933]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDSentry]
C:\WINDOWS\System32\DSentry.exe [2003-08-13 28672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelMeM]
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe [2003-09-03 221184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MimBoot]
C:\PROGRA~1\MUSICM~1\MUSICM~2\mimboot.exe [2006-01-19 11776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray]
C:\PROGRA~1\MUSICM~1\MUSICM~2\mm_tray.exe [2006-01-19 110592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService]
C:\Program Files\Dell\Media Experience\PCMService.exe [2003-08-26 204800]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
C:\Program Files\Real\RealPlayer\RealPlay.exe [2004-06-22 26112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\REGSHAVE]
C:\Program Files\REGSHAVE\REGSHAVE.EXE [2002-02-04 53248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\saap]
c:\program files\n-case\saap.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SOProc_RegSoAlertWxLiteNnAj]
rundll32 shell32.dll []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe [2008-11-24 171448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor]
C:\PROGRA~1\SYMNET~1\SNDMon.exe [2006-01-06 95960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2003-04-06 315392]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
scecli
scecli

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\SYSTEM32\LEXPPS.EXE"="C:\WINDOWS\SYSTEM32\LEXPPS.EXE:*:Disabled:LEXPPS.EXE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2008-11-30 16:30:11 ----D---- C:\_OTMoveIt
2008-11-27 22:09:38 ----D---- C:\Documents and Settings\All Users\Application Data\SpinTop Games
2008-11-27 09:15:17 ----D---- C:\rsit
2008-11-24 17:14:46 ----D---- C:\Documents and Settings\Mike\Application Data\Google
2008-11-24 17:13:00 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2008-11-24 17:12:33 ----D---- C:\Program Files\Google
2008-11-23 12:47:24 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
2008-11-23 11:23:25 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2008-11-23 10:49:49 ----D---- C:\Program Files\iPod
2008-11-23 10:49:38 ----D---- C:\Program Files\iTunes
2008-11-23 10:49:38 ----D---- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-11-23 10:48:08 ----D---- C:\Program Files\Bonjour
2008-11-23 10:44:47 ----D---- C:\Program Files\Apple Software Update
2008-11-23 10:44:25 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-11-23 10:43:59 ----D---- C:\Program Files\Common Files\Apple
2008-11-23 10:43:59 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2008-11-23 09:19:24 ----D---- C:\Program Files\Trend Micro
2008-11-23 08:51:16 ----HDC---- C:\WINDOWS\$NtUninstallKB927779$
2008-11-23 08:51:03 ----HDC---- C:\WINDOWS\$NtUninstallKB927802$
2008-11-23 08:50:45 ----HDC---- C:\WINDOWS\$NtUninstallKB943460$
2008-11-23 08:50:30 ----HDC---- C:\WINDOWS\$NtUninstallKB928255$
2008-11-23 08:50:18 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2008-11-23 08:50:06 ----HDC---- C:\WINDOWS\$NtUninstallKB933729$
2008-11-23 08:49:56 ----HDC---- C:\WINDOWS\$NtUninstallKB920685$
2008-11-23 08:49:45 ----HDC---- C:\WINDOWS\$NtUninstallKB923980$
2008-11-23 08:49:33 ----HDC---- C:\WINDOWS\$NtUninstallKB911280$
2008-11-23 08:49:21 ----HDC---- C:\WINDOWS\$NtUninstallKB911562$
2008-11-23 08:49:09 ----HDC---- C:\WINDOWS\$NtUninstallKB938828$
2008-11-23 08:48:54 ----HDC---- C:\WINDOWS\$NtUninstallKB924667$
2008-11-23 08:48:45 ----HDC---- C:\WINDOWS\$NtUninstallKB900485$
2008-11-23 08:48:29 ----HDC---- C:\WINDOWS\$NtUninstallKB924270$
2008-11-23 08:48:17 ----HDC---- C:\WINDOWS\$NtUninstallKB931261$
2008-11-23 08:47:52 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP9$
2008-11-23 08:47:04 ----HDC---- C:\WINDOWS\$NtUninstallKB927891$
2008-11-23 08:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB936357$
2008-11-23 08:46:43 ----HDC---- C:\WINDOWS\$NtUninstallKB887472$
2008-11-23 08:46:30 ----HDC---- C:\WINDOWS\$NtUninstallKB946026$
2008-11-23 08:46:08 ----HDC---- C:\WINDOWS\$NtUninstallKB925398_WMP64$
2008-11-23 08:45:19 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2008-11-23 08:44:47 ----HDC---- C:\WINDOWS\$NtUninstallKB911564$
2008-11-23 08:43:40 ----HDC---- C:\WINDOWS\$NtUninstallKB925902$
2008-11-23 08:43:24 ----HDC---- C:\WINDOWS\$NtUninstallKB929123$
2008-11-23 08:43:10 ----HDC---- C:\WINDOWS\$NtUninstallKB920670$
2008-11-23 08:43:01 ----HDC---- C:\WINDOWS\$NtUninstallKB918439$
2008-11-23 08:42:50 ----HDC---- C:\WINDOWS\$NtUninstallKB890046$
2008-11-23 08:42:40 ----HDC---- C:\WINDOWS\$NtUninstallKB926436$
2008-11-23 08:42:30 ----HDC---- C:\WINDOWS\$NtUninstallKB920872$
2008-11-23 08:42:11 ----HDC---- C:\WINDOWS\$NtUninstallKB930178$
2008-11-23 08:42:00 ----HDC---- C:\WINDOWS\$NtUninstallKB914388$
2008-11-23 08:41:37 ----HDC---- C:\WINDOWS\$NtUninstallKB932168$
2008-11-23 08:41:23 ----HDC---- C:\WINDOWS\$NtUninstallKB923191$
2008-11-23 08:41:12 ----HDC---- C:\WINDOWS\$NtUninstallKB922582$
2008-11-23 08:40:58 ----HDC---- C:\WINDOWS\$NtUninstallKB918118$
2008-11-23 08:40:47 ----HDC---- C:\WINDOWS\$NtUninstallKB926255$
2008-11-23 08:40:36 ----HDC---- C:\WINDOWS\$NtUninstallKB948590$
2008-11-23 08:40:27 ----HDC---- C:\WINDOWS\$NtUninstallKB920213$
2008-11-23 08:40:14 ----HDC---- C:\WINDOWS\$NtUninstallKB935840$
2008-11-23 08:40:04 ----HDC---- C:\WINDOWS\$NtUninstallKB943485$
2008-11-23 08:39:54 ----HDC---- C:\WINDOWS\$NtUninstallKB945553$
2008-11-23 08:39:43 ----HDC---- C:\WINDOWS\$NtUninstallKB886185$
2008-11-23 08:39:33 ----HDC---- C:\WINDOWS\$NtUninstallKB916595$
2008-11-23 08:39:23 ----HDC---- C:\WINDOWS\$NtUninstallKB930916$
2008-11-23 08:39:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-11-23 08:38:43 ----HDC---- C:\WINDOWS\$NtUninstallKB950749$
2008-11-23 08:38:13 ----HDC---- C:\WINDOWS\$NtUninstallKB908531$
2008-11-23 08:37:42 ----HDC---- C:\WINDOWS\$NtUninstallKB913580$
2008-11-23 08:37:23 ----HDC---- C:\WINDOWS\$NtUninstallKB935839$
2008-11-23 08:37:10 ----HDC---- C:\WINDOWS\$NtUninstallKB943055$
2008-11-23 08:36:55 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2008-11-23 08:36:39 ----HDC---- C:\WINDOWS\$NtUninstallKB920683$
2008-11-23 08:36:27 ----HDC---- C:\WINDOWS\$NtUninstallKB914389$
2008-11-23 08:36:14 ----HDC---- C:\WINDOWS\$NtUninstallKB944653$
2008-11-23 08:35:48 ----HDC---- C:\WINDOWS\$NtUninstallKB928843$
2008-11-23 08:14:19 ----D---- C:\Documents and Settings\Mike\Application Data\Yahoo!
2008-11-22 23:16:32 ----D---- C:\WINDOWS\Prefetch
2008-11-22 22:23:45 ----A---- C:\WINDOWS\system32\qmgr.dll
2008-11-22 22:23:37 ----A---- C:\WINDOWS\system32\xpsp2res.dll
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\comctl32.dll
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\cmd.exe
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\cacls.exe
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\autoconv.exe
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\autochk.exe
2008-11-22 22:22:03 ----A---- C:\WINDOWS\system32\advapi32.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\locator.exe
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\localspl.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\lmhsvc.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\kernel32.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\imagehlp.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\ftp.exe
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\format.com
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\csrsrv.dll
2008-11-22 22:22:02 ----A---- C:\WINDOWS\system32\comdlg32.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\nwprovau.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\ntvdm.exe
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\ntprint.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\ntlsapi.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\ntdll.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\nslookup.exe
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\msv1_0.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\msgsvc.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\mgmtapi.dll
2008-11-22 22:22:01 ----A---- C:\WINDOWS\system32\lsasrv.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\samsrv.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\samlib.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rshx32.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rastapi.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rasman.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rasdlg.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rasauto.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\rasapi32.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\printui.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\perfctrs.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\olecnv32.dll
2008-11-22 22:22:00 ----A---- C:\WINDOWS\system32\oleaut32.dll
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\srvsvc.dll
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\smss.exe
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\setupapi.dll
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\sessmgr.exe
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\services.exe
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\schannel.dll
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\scardsvr.exe
2008-11-22 22:21:59 ----A---- C:\WINDOWS\system32\savedump.exe
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\wkssvc.dll
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\win32spl.dll
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\userinit.exe
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\untfs.dll
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\ulib.dll
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\tcpmonui.dll
2008-11-22 22:21:58 ----A---- C:\WINDOWS\system32\syssetup.dll
2008-11-22 22:21:49 ----A---- C:\WINDOWS\system32\hal.dll
2008-11-22 22:21:48 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2008-11-22 22:21:48 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2008-11-22 21:51:58 ----D---- C:\WINDOWS\ie7updates
2008-11-22 21:49:41 ----HD---- C:\WINDOWS\msdownld.tmp
2008-11-22 21:49:06 ----D---- C:\WINDOWS\WBEM
2008-11-22 21:47:32 ----HDC---- C:\WINDOWS\ie7
2008-11-22 21:46:49 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2008-11-22 21:45:53 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2008-11-22 21:44:20 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2008-11-22 21:44:03 ----A---- C:\WINDOWS\system32\xmllite.dll
2008-11-22 21:40:07 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
2008-11-22 21:39:45 ----HDC---- C:\WINDOWS\$NtUninstallKB904942$
2008-11-22 20:19:27 ----HD---- C:\$AVG8.VAULT$
2008-11-22 19:50:19 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2008-11-22 19:49:31 ----D---- C:\Program Files\AVG
2008-11-22 19:49:30 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2008-11-22 19:48:40 ----D---- C:\WINDOWS\system32\en-us
2008-11-22 19:48:38 ----D---- C:\WINDOWS\system32\scripting
2008-11-22 19:48:36 ----D---- C:\WINDOWS\l2schemas
2008-11-22 19:48:35 ----D---- C:\WINDOWS\system32\en
2008-11-22 19:43:03 ----D---- C:\WINDOWS\network diagnostic
2008-11-22 19:12:31 ----D---- C:\Program Files\MSXML 4.0
2008-11-22 18:55:57 ----A---- C:\WINDOWS\atmoUn.exe
2008-11-22 18:39:05 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-11-22 18:37:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-11-22 18:36:54 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-11-22 18:35:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-11-22 18:34:48 ----HDC---- C:\WINDOWS\$NtUninstallKB923723$
2008-11-22 18:33:06 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-11-22 18:31:59 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-11-22 18:30:53 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-11-22 18:29:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-11-22 18:28:06 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-11-22 18:27:05 ----A---- C:\WINDOWS\system32\MRT.INI
2008-11-22 18:25:45 ----A---- C:\WINDOWS\system32\MRT.exe
2008-11-22 18:24:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-11-22 18:23:18 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2008-11-22 18:22:02 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-11-22 18:21:00 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-11-22 18:19:58 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-11-22 18:18:52 ----HDC---- C:\WINDOWS\$NtUninstallKB923689$
2008-11-22 18:17:31 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-11-22 18:16:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-11-22 18:15:21 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-11-22 18:13:21 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-11-22 18:12:16 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2008-11-22 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956390$
2008-11-22 18:09:05 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2008-11-22 17:39:26 ----A---- C:\WINDOWS\SET52F.tmp
2008-11-22 17:39:26 ----A---- C:\WINDOWS\SET46C.tmp
2008-11-22 17:09:47 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2008-11-22 17:06:56 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$
2008-11-22 17:04:58 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2008-11-22 17:02:27 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2008-11-22 17:02:08 ----D---- C:\WINDOWS\system32\CatRoot_bak
2008-11-22 17:00:44 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$
2008-11-22 16:59:06 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$
2008-11-22 16:57:06 ----HDC---- C:\WINDOWS\$NtUninstallKB896428$
2008-11-22 16:55:27 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$
2008-11-22 16:53:26 ----HDC---- C:\WINDOWS\$NtUninstallKB896422$
2008-11-22 16:51:03 ----HDC---- C:\WINDOWS\$NtUninstallKB896358$
2008-11-22 16:49:15 ----HDC---- C:\WINDOWS\$NtUninstallKB893756$
2008-11-22 16:47:56 ----HDC---- C:\WINDOWS\$NtUninstallKB893066$
2008-11-22 16:46:57 ----HDC---- C:\WINDOWS\$NtUninstallKB891781$
2008-11-22 16:45:44 ----HDC---- C:\WINDOWS\$NtUninstallKB890859$
2008-11-22 16:44:34 ----HDC---- C:\WINDOWS\$NtUninstallKB888302$
2008-11-22 16:42:56 ----HDC---- C:\WINDOWS\$NtUninstallKB888113$
2008-11-22 16:41:56 ----HDC---- C:\WINDOWS\$NtUninstallKB885836$
2008-11-22 16:40:54 ----HDC---- C:\WINDOWS\$NtUninstallKB885835$
2008-11-22 16:39:48 ----HDC---- C:\WINDOWS\$NtUninstallKB873339$
2008-11-22 16:35:50 ----A---- C:\WINDOWS\system32\wmpns.dll
2008-11-22 16:32:08 ----D---- C:\WINDOWS\peernet
2008-11-22 16:32:07 ----D---- C:\WINDOWS\provisioning
2008-11-22 16:28:50 ----D---- C:\WINDOWS\ServicePackFiles
2008-11-22 16:19:25 ----D---- C:\WINDOWS\EHome
2008-11-22 15:26:33 ----HDC---- C:\WINDOWS\$NtUninstallKB899587_0$
2008-11-22 15:26:03 ----HDC---- C:\WINDOWS\$NtUninstallKB896422_0$
2008-11-22 15:25:28 ----HDC---- C:\WINDOWS\$NtUninstallKB885835_0$
2008-11-22 15:24:58 ----HDC---- C:\WINDOWS\$NtUninstallKB885836_0$
2008-11-22 15:24:28 ----HDC---- C:\WINDOWS\$NtUninstallKB901017_0$
2008-11-22 15:24:00 ----HDC---- C:\WINDOWS\$NtUninstallKB899591_0$
2008-11-22 15:23:30 ----HDC---- C:\WINDOWS\$NtUninstallKB893756_0$
2008-11-22 15:23:00 ----HDC---- C:\WINDOWS\$NtUninstallKB896423_0$
2008-11-22 15:22:33 ----HDC---- C:\WINDOWS\$NtUninstallKB873339_0$
2008-11-22 15:21:56 ----HDC---- C:\WINDOWS\$NtUninstallKB888113_0$
2008-11-22 15:21:15 ----HDC---- C:\WINDOWS\$NtUninstallKB896688-IE6SP1-20051004.130236$
2008-11-22 15:20:54 ----HDC---- C:\WINDOWS\$NtUninstallKB896358_0$
2008-11-22 15:20:35 ----HDC---- C:\WINDOWS\$NtUninstallKB898458$
2008-11-22 15:20:18 ----HDC---- C:\WINDOWS\$NtUninstallKB905495$
2008-11-22 15:19:25 ----HDC---- C:\WINDOWS\$NtUninstallKB902400_0$
2008-11-22 15:19:03 ----HDC---- C:\WINDOWS\$NtUninstallKB891781_0$
2008-11-22 15:18:44 ----HDC---- C:\WINDOWS\$NtUninstallKB893066_0$
2008-11-22 15:18:19 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2008-11-22 15:17:40 ----HDC---- C:\WINDOWS\$NtUninstallKB905414_0$
2008-11-22 15:17:23 ----HDC---- C:\WINDOWS\$NtUninstallKB901214_0$
2008-11-22 15:17:07 ----HDC---- C:\WINDOWS\$NtUninstallKB888302_0$
2008-11-22 15:16:36 ----HDC---- C:\WINDOWS\$NtUninstallKB900725_0$
2008-11-22 15:16:20 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2008-11-22 15:16:06 ----HDC---- C:\WINDOWS\$NtUninstallKB896428_0$
2008-11-22 15:14:46 ----HDC---- C:\WINDOWS\$NtUninstallKB890859_0$
2008-11-22 14:14:30 ----A---- C:\WINDOWS\system32\spnpinst.exe
2008-11-22 11:39:19 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2008-11-22 11:39:19 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2008-11-22 11:39:19 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2008-11-22 11:34:39 ----D---- C:\Program Files\Spybot - Search & Destroy
2008-11-22 11:34:39 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-11-22 11:33:08 ----A---- C:\WINDOWS\system32\javaws.exe
2008-11-22 11:33:08 ----A---- C:\WINDOWS\system32\javaw.exe
2008-11-22 11:33:07 ----A---- C:\WINDOWS\system32\java.exe
2008-11-22 10:24:31 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-11-22 10:22:51 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2008-11-22 10:18:21 ----D---- C:\Mike
2008-11-22 10:00:44 ----D---- C:\WINDOWS\pss
2008-11-22 09:43:31 ----D---- C:\Program Files\DellSupport

======List of files/folders modified in the last 1 months======

2008-11-30 17:02:38 ----D---- C:\WINDOWS\Temp
2008-11-30 16:54:29 ----A---- C:\WINDOWS\ModemLog_Intel(R) 537EP V9x DF PCI Modem.txt
2008-11-30 16:52:02 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-11-30 16:49:50 ----D---- C:\WINDOWS\SYSTEM32
2008-11-30 16:49:50 ----D---- C:\WINDOWS
2008-11-28 19:23:54 ----D---- C:\WINDOWS\system32\CatRoot2
2008-11-27 23:07:54 ----RASH---- C:\BOOT.INI
2008-11-27 23:07:54 ----A---- C:\WINDOWS\WIN.INI
2008-11-27 23:07:54 ----A---- C:\WINDOWS\SYSTEM.INI
2008-11-27 22:09:38 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-11-27 20:32:29 ----D---- C:\Documents and Settings\Mike\Application Data\Apple Computer
2008-11-27 09:34:09 ----AD---- C:\Program Files
2008-11-24 22:50:53 ----D---- C:\WINDOWS\system32\Macromed
2008-11-24 17:16:55 ----D---- C:\Documents and Settings\Mike\Application Data\Adobe
2008-11-24 17:13:03 ----SHD---- C:\WINDOWS\Installer
2008-11-24 17:11:21 ----HD---- C:\WINDOWS\INF
2008-11-23 12:59:48 ----RSHD---- C:\WINDOWS\system32\DLLCACHE
2008-11-23 12:59:05 ----HD---- C:\WINDOWS\$hf_mig$
2008-11-23 12:50:33 ----A---- C:\WINDOWS\imsins.BAK
2008-11-23 11:36:11 ----D---- C:\Documents and Settings
2008-11-23 10:51:32 ----D---- C:\WINDOWS\system32\DRIVERS
2008-11-23 10:47:27 ----D---- C:\Program Files\QuickTime
2008-11-23 10:46:56 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-11-23 10:45:11 ----SD---- C:\WINDOWS\Tasks
2008-11-23 10:43:59 ----D---- C:\Program Files\Common Files
2008-11-23 09:12:08 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-11-23 09:05:56 ----AD---- C:\WINDOWS\MSAGENT
2008-11-23 09:05:28 ----D---- C:\WINDOWS\SECURITY
2008-11-23 08:48:56 ----D---- C:\WINDOWS\WinSxS
2008-11-23 08:46:46 ----D---- C:\Program Files\Messenger
2008-11-23 08:44:51 ----D---- C:\Program Files\Windows Media Player
2008-11-23 08:43:27 ----D---- C:\Program Files\Outlook Express
2008-11-23 08:43:27 ----D---- C:\Program Files\Common Files\System
2008-11-23 08:41:51 ----D---- C:\WINDOWS\system32\CatRoot
2008-11-23 08:14:19 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-11-22 23:15:27 ----D---- C:\WINDOWS\system32\WBEM
2008-11-22 23:15:27 ----D---- C:\WINDOWS\AppPatch
2008-11-22 23:15:26 ----D---- C:\WINDOWS\system32\Setup
2008-11-22 23:15:16 ----RSD---- C:\WINDOWS\Fonts
2008-11-22 22:52:51 ----D---- C:\WINDOWS\system32\bits
2008-11-22 22:52:27 ----AD---- C:\WINDOWS\system32\USMT
2008-11-22 22:52:21 ----D---- C:\WINDOWS\system32\Restore
2008-11-22 22:52:20 ----D---- C:\WINDOWS\system32\OOBE
2008-11-22 22:52:19 ----AD---- C:\WINDOWS\system32\NPP
2008-11-22 22:52:13 ----D---- C:\WINDOWS\system32\Com
2008-11-22 22:50:04 ----AD---- C:\WINDOWS\SYSTEM
2008-11-22 22:50:04 ----AD---- C:\WINDOWS\SRCHASST
2008-11-22 22:46:52 ----AD---- C:\WINDOWS\IME
2008-11-22 22:46:51 ----D---- C:\WINDOWS\Help
2008-11-22 22:46:42 ----D---- C:\Program Files\Windows NT
2008-11-22 22:46:38 ----D---- C:\Program Files\NetMeeting
2008-11-22 22:46:36 ----D---- C:\Program Files\Movie Maker
2008-11-22 22:26:42 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-11-22 21:56:17 ----D---- C:\Program Files\Internet Explorer
2008-11-22 21:50:26 ----D---- C:\Program Files\Yahoo!
2008-11-22 21:49:13 ----AD---- C:\WINDOWS\system32\CONFIG
2008-11-22 21:48:56 ----D---- C:\WINDOWS\Media
2008-11-22 20:19:33 ----D---- C:\do_work
2008-11-22 19:49:25 ----D---- C:\Program Files\Common Files\Microsoft Shared
2008-11-22 19:38:21 ----SD---- C:\Documents and Settings\Mike\Application Data\Microsoft
2008-11-22 19:14:42 ----D---- C:\WINDOWS\Registration
2008-11-22 19:03:05 ----D---- C:\Program Files\Common Files\Symantec Shared
2008-11-22 19:00:32 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2008-11-22 18:56:09 ----D---- C:\Program Files\Common Files\Adobe
2008-11-22 18:56:01 ----D---- C:\Documents and Settings\Mike\Application Data\AdobeUM
2008-11-22 18:55:56 ----D---- C:\Program Files\Viewpoint
2008-11-22 18:55:50 ----D---- C:\Documents and Settings\All Users\Application Data\Viewpoint
2008-11-22 18:55:28 ----D---- C:\Program Files\Adobe
2008-11-22 18:48:35 ----D---- C:\WINDOWS\Debug
2008-11-22 18:42:51 ----A---- C:\WINDOWS\SETUPLOG.TXT
2008-11-22 18:42:01 ----SHD---- C:\System Volume Information
2008-11-22 18:27:39 ----A---- C:\WINDOWS\OEWABLog.txt
2008-11-22 18:26:54 ----SH---- C:\WINDOWS\system32\rqtwa.ini2
2008-11-22 16:35:19 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-11-22 16:32:43 ----AD---- C:\WINDOWS\system32\MUI
2008-11-22 16:25:19 ----RD---- C:\WINDOWS\Web
2008-11-22 16:24:49 ----RASH---- C:\NTDETECT.COM
2008-11-22 15:22:18 ----HD---- C:\Program Files\Uninstall Information
2008-11-22 11:39:46 ----D---- C:\WINDOWS\SoftwareDistribution
2008-11-22 11:33:03 ----D---- C:\Program Files\Java
2008-11-22 11:21:36 ----HD---- C:\Program Files\InstallShield Installation Information
2008-11-22 11:15:12 ----D---- C:\Program Files\Rio
2008-11-22 11:13:04 ----D---- C:\Program Files\BroadJump
2008-11-22 11:03:41 ----D---- C:\Program Files\SoftwareOnline
2008-11-22 11:03:35 ----D---- C:\Program Files\_SUPERBAR
2008-11-22 10:25:26 ----D---- C:\Program Files\Lavasoft
2008-11-22 10:25:24 ----D---- C:\Documents and Settings\Mike\Application Data\Lavasoft
2008-11-22 09:57:55 ----D---- C:\WINDOWS\system32\FxsTmp
2008-11-22 09:55:33 ----SH---- C:\WINDOWS\system32\okouqtgg.ini
2008-11-22 09:46:30 ----D---- C:\Documents and Settings\All Users\Application Data\Dell
2008-11-22 09:46:26 ----SD---- C:\WINDOWS\system32\Microsoft
2008-11-22 09:46:22 ----HD---- C:\Documents and Settings\Mike\Application Data\GTek
2008-11-22 09:43:22 ----AD---- C:\DELL

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-11-22 97928]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-11-22 26824]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2004-08-03 36096]
R1 omci;OMCI WDM Device Driver; C:\WINDOWS\System32\DRIVERS\omci.sys [2002-11-08 17217]
R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2004-01-14 5621]
R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2004-01-14 23219]
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2005-01-21 267384]
R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2004-06-22 8552]
R2 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2008-11-22 76040]
R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2004-02-27 40480]
R2 dsunidrv;DellSupport UniDriver; C:\WINDOWS\System32\DRIVERS\dsunidrv.sys [2007-02-25 5376]
R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2004-03-15 25685]
R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2004-03-15 34837]
R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2004-03-15 4117]
R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2004-03-15 2233]
R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2004-03-15 85972]
R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2004-03-15 14229]
R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2004-03-15 6357]
R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2004-03-15 98580]
R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2004-03-15 100597]
R3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2003-04-15 113504]
R3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2003-04-15 78752]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys [2003-05-23 43136]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 ialm;ialm; C:\WINDOWS\System32\DRIVERS\ialmnt5.sys [2003-04-15 90907]
R3 IntelC51;IntelC51; C:\WINDOWS\System32\DRIVERS\IntelC51.sys [2004-03-05 1233525]
R3 IntelC52;IntelC52; C:\WINDOWS\System32\DRIVERS\IntelC52.sys [2004-03-05 647929]
R3 IntelC53;IntelC53; C:\WINDOWS\System32\DRIVERS\IntelC53.sys [2004-03-05 60949]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mohfilt;mohfilt; C:\WINDOWS\System32\DRIVERS\mohfilt.sys [2004-03-05 37048]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-11-18 591808]
R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-04 20480]
S1 P3;Intel PentiumIII Processor Driver; C:\WINDOWS\System32\DRIVERS\p3.sys [2004-08-03 42496]
S3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2004-08-03 701440]
S3 DSproct;DSproct; \??\C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys []
S3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\System32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
S3 i81x;i81x; C:\WINDOWS\System32\DRIVERS\i81xnt5.sys [2004-08-03 161020]
S3 iAimFP0;iAimFP0; C:\WINDOWS\System32\DRIVERS\wADV01nt.sys [2004-08-03 12415]
S3 iAimFP1;iAimFP1; C:\WINDOWS\System32\DRIVERS\wADV02NT.sys [2004-08-03 12127]
S3 iAimFP2;iAimFP2; C:\WINDOWS\System32\DRIVERS\wADV05NT.sys [2004-08-03 11775]
S3 iAimFP3;iAimFP3; C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys [2004-08-03 12063]
S3 iAimFP4;iAimFP4; C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys [2004-08-03 19455]
S3 iAimTV0;iAimTV0; C:\WINDOWS\System32\DRIVERS\wATV01nt.sys [2004-08-03 29311]
S3 iAimTV1;iAimTV1; C:\WINDOWS\System32\DRIVERS\wATV02NT.sys [2004-08-03 19551]
S3 iAimTV2;iAimTV2; C:\WINDOWS\System32\DRIVERS\wATV03nt.sys []
S3 iAimTV3;iAimTV3; C:\WINDOWS\System32\DRIVERS\wATV04nt.sys [2004-08-03 33599]
S3 iAimTV4;iAimTV4; C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys [2004-08-03 23615]
S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2005-01-21 11544]
S3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2005-01-21 172216]
S3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2005-01-21 35000]
S3 SYMIDSCO;SYMIDSCO; C:\WINDOWS\System32\Drivers\SYMIDSCO.SYS [2004-06-29 170208]
S3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2005-01-21 46808]
S3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2005-01-21 26424]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys []
S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\agp440.sys [2004-08-04 42368]
S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\agpCPQ.sys [2004-08-04 44928]
S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\alim1541.sys [2004-08-04 42752]
S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\System32\DRIVERS\amdagp.sys [2004-08-04 43008]
S4 cbidf;cbidf; C:\WINDOWS\System32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 IntelIde;IntelIde; C:\WINDOWS\System32\DRIVERS\intelide.sys [2004-08-03 5504]
S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2004-08-04 41088]
S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\viaagp.sys [2004-08-04 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-11-22 611664]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-11-22 875288]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-11-22 231704]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2003-05-02 303104]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\System32\wdfmgr.exe [2005-01-28 38912]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-04 267776]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 DSBrokerService;DSBrokerService; C:\Program Files\DellSupport\brkrsvc.exe [2007-03-07 76848]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-24 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
S3 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe [2005-01-21 206552]

-----------------EOF-----------------

[hboyette]

And the OTMoveit log...



========== FILES ==========
DllUnregisterServer procedure not found in C:\WINDOWS\system32\_005438_.tmp.dll
C:\WINDOWS\system32\_005438_.tmp.dll NOT unregistered.
C:\WINDOWS\system32\_005438_.tmp.dll moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\_005443_.tmp.dll
C:\WINDOWS\system32\_005443_.tmp.dll NOT unregistered.
C:\WINDOWS\system32\_005443_.tmp.dll moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\_005445_.tmp.dll
C:\WINDOWS\system32\_005445_.tmp.dll NOT unregistered.
C:\WINDOWS\system32\_005445_.tmp.dll moved successfully.
C:\WINDOWS\system32\SET121.tmp moved successfully.
C:\WINDOWS\system32\SET122.tmp moved successfully.
C:\WINDOWS\system32\SET124.tmp moved successfully.
C:\WINDOWS\system32\SET126.tmp moved successfully.
C:\WINDOWS\system32\SET127.tmp moved successfully.
C:\WINDOWS\system32\SET128.tmp moved successfully.
C:\WINDOWS\system32\SET129.tmp moved successfully.
C:\WINDOWS\system32\SET12B.tmp moved successfully.
C:\WINDOWS\system32\SET12D.tmp moved successfully.
C:\WINDOWS\system32\SET12F.tmp moved successfully.
C:\WINDOWS\system32\SET130.tmp moved successfully.
C:\WINDOWS\system32\SET131.tmp moved successfully.
C:\WINDOWS\system32\SET133.tmp moved successfully.
C:\WINDOWS\system32\SET139.tmp moved successfully.
C:\WINDOWS\system32\SET13A.tmp moved successfully.
C:\WINDOWS\system32\SET13D.tmp moved successfully.
C:\WINDOWS\system32\SET13E.tmp moved successfully.
C:\WINDOWS\system32\SET13F.tmp moved successfully.
C:\WINDOWS\system32\SET140.tmp moved successfully.
C:\WINDOWS\system32\SET142.tmp moved successfully.
C:\WINDOWS\system32\SET143.tmp moved successfully.
C:\WINDOWS\system32\SET144.tmp moved successfully.
C:\WINDOWS\system32\SET145.tmp moved successfully.
C:\WINDOWS\system32\SET146.tmp moved successfully.
C:\WINDOWS\system32\SET148.tmp moved successfully.
C:\WINDOWS\system32\SET149.tmp moved successfully.
C:\WINDOWS\system32\SET14A.tmp moved successfully.
C:\WINDOWS\system32\SET14B.tmp moved successfully.
C:\WINDOWS\system32\SET14E.tmp moved successfully.
C:\WINDOWS\system32\SET155.tmp moved successfully.
C:\WINDOWS\system32\SET156.tmp moved successfully.
C:\WINDOWS\system32\SET157.tmp moved successfully.
C:\WINDOWS\system32\SET158.tmp moved successfully.
C:\WINDOWS\system32\SET159.tmp moved successfully.
C:\WINDOWS\system32\SET15A.tmp moved successfully.
C:\WINDOWS\system32\SET15B.tmp moved successfully.
C:\WINDOWS\system32\SET15C.tmp moved successfully.
C:\WINDOWS\system32\SET15D.tmp moved successfully.
C:\WINDOWS\system32\SET15E.tmp moved successfully.
C:\WINDOWS\system32\SET160.tmp moved successfully.
C:\WINDOWS\system32\SET161.tmp moved successfully.
C:\WINDOWS\system32\SET162.tmp moved successfully.
C:\WINDOWS\system32\SET163.tmp moved successfully.
C:\WINDOWS\system32\SET164.tmp moved successfully.
C:\WINDOWS\system32\SET165.tmp moved successfully.
C:\WINDOWS\system32\SET166.tmp moved successfully.
C:\WINDOWS\system32\SET168.tmp moved successfully.
C:\WINDOWS\system32\SET169.tmp moved successfully.
C:\WINDOWS\system32\SET16A.tmp moved successfully.
C:\WINDOWS\system32\SET16B.tmp moved successfully.
C:\WINDOWS\system32\SET16C.tmp moved successfully.
C:\WINDOWS\system32\SET16D.tmp moved successfully.
C:\WINDOWS\system32\SET16E.tmp moved successfully.
C:\WINDOWS\system32\SET16F.tmp moved successfully.
C:\WINDOWS\system32\SET172.tmp moved successfully.
C:\WINDOWS\system32\SET173.tmp moved successfully.
C:\WINDOWS\system32\SET174.tmp moved successfully.
C:\WINDOWS\system32\SET175.tmp moved successfully.
C:\WINDOWS\system32\SET176.tmp moved successfully.
C:\WINDOWS\system32\SET17C.tmp moved successfully.
C:\WINDOWS\system32\SET17E.tmp moved successfully.
C:\WINDOWS\system32\SET17F.tmp moved successfully.
C:\WINDOWS\system32\SET180.tmp moved successfully.
C:\WINDOWS\system32\SET181.tmp moved successfully.
C:\WINDOWS\system32\SET182.tmp moved successfully.
C:\WINDOWS\system32\SET185.tmp moved successfully.
C:\WINDOWS\system32\SET186.tmp moved successfully.
C:\WINDOWS\system32\SET188.tmp moved successfully.
C:\WINDOWS\system32\SET189.tmp moved successfully.
C:\WINDOWS\system32\SET18A.tmp moved successfully.
C:\WINDOWS\system32\SET18B.tmp moved successfully.
C:\WINDOWS\system32\SET191.tmp moved successfully.
C:\WINDOWS\system32\SET192.tmp moved successfully.
C:\WINDOWS\system32\SET194.tmp moved successfully.
C:\WINDOWS\system32\SET195.tmp moved successfully.
C:\WINDOWS\system32\SET198.tmp moved successfully.
C:\WINDOWS\system32\SET199.tmp moved successfully.
C:\WINDOWS\system32\SET19B.tmp moved successfully.
C:\WINDOWS\system32\SET1A1.tmp moved successfully.
C:\WINDOWS\system32\SET1A2.tmp moved successfully.
C:\WINDOWS\system32\SET1A3.tmp moved successfully.
C:\WINDOWS\system32\SET1A4.tmp moved successfully.
C:\WINDOWS\system32\SET1A6.tmp moved successfully.
C:\WINDOWS\system32\SET1A8.tmp moved successfully.
C:\WINDOWS\system32\SET1A9.tmp moved successfully.
C:\WINDOWS\system32\SET1AA.tmp moved successfully.
C:\WINDOWS\system32\SET1AB.tmp moved successfully.
C:\WINDOWS\system32\SET1AC.tmp moved successfully.
C:\WINDOWS\system32\SET1AD.tmp moved successfully.
C:\WINDOWS\system32\SET1B1.tmp moved successfully.
C:\WINDOWS\system32\SET1B6.tmp moved successfully.
C:\WINDOWS\system32\SET1B7.tmp moved successfully.
C:\WINDOWS\system32\SET1BA.tmp moved successfully.
C:\WINDOWS\system32\SET1BD.tmp moved successfully.
C:\WINDOWS\system32\SET1BE.tmp moved successfully.
C:\WINDOWS\system32\SET1BF.tmp moved successfully.
C:\WINDOWS\system32\SET1C2.tmp moved successfully.
C:\WINDOWS\system32\SET1C4.tmp moved successfully.
C:\WINDOWS\system32\SET1C7.tmp moved successfully.
C:\WINDOWS\system32\SET1C8.tmp moved successfully.
C:\WINDOWS\system32\SET1C9.tmp moved successfully.
C:\WINDOWS\system32\SET1CB.tmp moved successfully.
C:\WINDOWS\system32\SET1CC.tmp moved successfully.
C:\WINDOWS\system32\SET1CD.tmp moved successfully.
C:\WINDOWS\system32\SET1CE.tmp moved successfully.
C:\WINDOWS\system32\SET1D1.tmp moved successfully.
C:\WINDOWS\system32\SET1D2.tmp moved successfully.
C:\WINDOWS\system32\SET1D5.tmp moved successfully.
C:\WINDOWS\system32\SET1D6.tmp moved successfully.
C:\WINDOWS\system32\SET1DC.tmp moved successfully.
C:\WINDOWS\system32\SET1DD.tmp moved successfully.
C:\WINDOWS\system32\SET1DE.tmp moved successfully.
C:\WINDOWS\system32\SET1E6.tmp moved successfully.
C:\WINDOWS\system32\SET1E9.tmp moved successfully.
C:\WINDOWS\system32\SET1EB.tmp moved successfully.
C:\WINDOWS\system32\SET1EC.tmp moved successfully.
C:\WINDOWS\system32\SET1ED.tmp moved successfully.
C:\WINDOWS\system32\SET1EE.tmp moved successfully.
C:\WINDOWS\system32\SET1EF.tmp moved successfully.
C:\WINDOWS\system32\SET1F0.tmp moved successfully.
C:\WINDOWS\system32\SET1F1.tmp moved successfully.
C:\WINDOWS\system32\SET1F2.tmp moved successfully.
C:\WINDOWS\system32\SET1F3.tmp moved successfully.
C:\WINDOWS\system32\SET1F4.tmp moved successfully.
C:\WINDOWS\system32\SET1F5.tmp moved successfully.
C:\WINDOWS\system32\SET1F7.tmp moved successfully.
C:\WINDOWS\system32\SET203.tmp moved successfully.
C:\WINDOWS\system32\SET205.tmp moved successfully.
C:\WINDOWS\system32\SET207.tmp moved successfully.
C:\WINDOWS\system32\SET208.tmp moved successfully.
C:\WINDOWS\system32\SET209.tmp moved successfully.
C:\WINDOWS\system32\SET20B.tmp moved successfully.
C:\WINDOWS\system32\SET210.tmp moved successfully.
C:\WINDOWS\system32\SET212.tmp moved successfully.
C:\WINDOWS\system32\SET214.tmp moved successfully.
C:\WINDOWS\system32\SET215.tmp moved successfully.
C:\WINDOWS\system32\SET216.tmp moved successfully.
C:\WINDOWS\system32\SET217.tmp moved successfully.
C:\WINDOWS\system32\SET218.tmp moved successfully.
C:\WINDOWS\system32\SET219.tmp moved successfully.
C:\WINDOWS\system32\SET21A.tmp moved successfully.
C:\WINDOWS\system32\SET21C.tmp moved successfully.
C:\WINDOWS\system32\SET21D.tmp moved successfully.
C:\WINDOWS\system32\SET21E.tmp moved successfully.
C:\WINDOWS\system32\SET21F.tmp moved successfully.
C:\WINDOWS\system32\SET222.tmp moved successfully.
C:\WINDOWS\system32\SET224.tmp moved successfully.
C:\WINDOWS\system32\SET225.tmp moved successfully.
C:\WINDOWS\system32\SET229.tmp moved successfully.
C:\WINDOWS\system32\SET22A.tmp moved successfully.
C:\WINDOWS\system32\SET230.tmp moved successfully.
C:\WINDOWS\system32\SET231.tmp moved successfully.
C:\WINDOWS\system32\SET232.tmp moved successfully.
C:\WINDOWS\system32\SET233.tmp moved successfully.
C:\WINDOWS\system32\SET234.tmp moved successfully.
C:\WINDOWS\system32\SET235.tmp moved successfully.
C:\WINDOWS\system32\SET236.tmp moved successfully.
C:\WINDOWS\system32\SET23C.tmp moved successfully.
C:\WINDOWS\system32\SET23D.tmp moved successfully.
C:\WINDOWS\system32\SET240.tmp moved successfully.
C:\WINDOWS\system32\SET241.tmp moved successfully.
C:\WINDOWS\system32\SET242.tmp moved successfully.
C:\WINDOWS\system32\SET243.tmp moved successfully.
C:\WINDOWS\system32\SET244.tmp moved successfully.
C:\WINDOWS\system32\SET245.tmp moved successfully.
C:\WINDOWS\system32\SET246.tmp moved successfully.
C:\WINDOWS\system32\SET247.tmp moved successfully.
C:\WINDOWS\system32\SET248.tmp moved successfully.
C:\WINDOWS\system32\SET24A.tmp moved successfully.
C:\WINDOWS\system32\SET24B.tmp moved successfully.
C:\WINDOWS\system32\SET24C.tmp moved successfully.
C:\WINDOWS\system32\SET24F.tmp moved successfully.
C:\WINDOWS\system32\SET252.tmp moved successfully.
C:\WINDOWS\system32\SET253.tmp moved successfully.
C:\WINDOWS\system32\SET254.tmp moved successfully.
C:\WINDOWS\system32\SET255.tmp moved successfully.
C:\WINDOWS\system32\SET256.tmp moved successfully.
C:\WINDOWS\system32\SET257.tmp moved successfully.
C:\WINDOWS\system32\SET258.tmp moved successfully.
C:\WINDOWS\system32\SET259.tmp moved successfully.
C:\WINDOWS\system32\SET25B.tmp moved successfully.
C:\WINDOWS\system32\SET25E.tmp moved successfully.
C:\WINDOWS\system32\SET25F.tmp moved successfully.
C:\WINDOWS\system32\SET260.tmp moved successfully.
C:\WINDOWS\system32\SET262.tmp moved successfully.
C:\WINDOWS\system32\SET265.tmp moved successfully.
C:\WINDOWS\system32\SET266.tmp moved successfully.
C:\WINDOWS\system32\SET267.tmp moved successfully.
C:\WINDOWS\system32\SET268.tmp moved successfully.
C:\WINDOWS\system32\SET26B.tmp moved successfully.
C:\WINDOWS\system32\SET26C.tmp moved successfully.
C:\WINDOWS\system32\SET26F.tmp moved successfully.
C:\WINDOWS\system32\SET272.tmp moved successfully.
C:\WINDOWS\system32\SET273.tmp moved successfully.
C:\WINDOWS\system32\SET279.tmp moved successfully.
C:\WINDOWS\system32\SET27A.tmp moved successfully.
C:\WINDOWS\system32\SET27C.tmp moved successfully.
C:\WINDOWS\system32\SET27E.tmp moved successfully.
C:\WINDOWS\system32\SET27F.tmp moved successfully.
C:\WINDOWS\system32\SET280.tmp moved successfully.
C:\WINDOWS\system32\SET281.tmp moved successfully.
C:\WINDOWS\system32\SET282.tmp moved successfully.
C:\WINDOWS\system32\SET287.tmp moved successfully.
C:\WINDOWS\system32\SET288.tmp moved successfully.
C:\WINDOWS\system32\SET28C.tmp moved successfully.
C:\WINDOWS\system32\SET290.tmp moved successfully.
C:\WINDOWS\system32\SET294.tmp moved successfully.
C:\WINDOWS\system32\SET295.tmp moved successfully.
C:\WINDOWS\system32\SET298.tmp moved successfully.
C:\WINDOWS\system32\SET299.tmp moved successfully.
C:\WINDOWS\system32\SET29A.tmp moved successfully.
C:\WINDOWS\system32\SET29C.tmp moved successfully.
C:\WINDOWS\system32\SET29D.tmp moved successfully.
C:\WINDOWS\system32\SET29E.tmp moved successfully.
C:\WINDOWS\system32\SET2A1.tmp moved successfully.
C:\WINDOWS\system32\SET2A3.tmp moved successfully.
C:\WINDOWS\system32\SET2A4.tmp moved successfully.
C:\WINDOWS\system32\SET2A5.tmp moved successfully.
C:\WINDOWS\system32\SET2A6.tmp moved successfully.
C:\WINDOWS\system32\SET2A7.tmp moved successfully.
C:\WINDOWS\system32\SET2A8.tmp moved successfully.
C:\WINDOWS\system32\SET2AA.tmp moved successfully.
C:\WINDOWS\system32\SET2AB.tmp moved successfully.
C:\WINDOWS\system32\SET2AC.tmp moved successfully.
C:\WINDOWS\system32\SET2AD.tmp moved successfully.
C:\WINDOWS\system32\SET2AF.tmp moved successfully.
C:\WINDOWS\system32\SET2B1.tmp moved successfully.
C:\WINDOWS\system32\SET2B5.tmp moved successfully.
C:\WINDOWS\system32\SET2B9.tmp moved successfully.
C:\WINDOWS\system32\SET2C1.tmp moved successfully.
C:\WINDOWS\system32\SET2C2.tmp moved successfully.
C:\WINDOWS\system32\SET2C6.tmp moved successfully.
C:\WINDOWS\system32\SET2C9.tmp moved successfully.
C:\WINDOWS\system32\SET2CA.tmp moved successfully.
C:\WINDOWS\system32\SET2CC.tmp moved successfully.
C:\WINDOWS\system32\SET2CD.tmp moved successfully.
C:\WINDOWS\system32\SET2CE.tmp moved successfully.
C:\WINDOWS\system32\SET2CF.tmp moved successfully.
C:\WINDOWS\system32\SET2D2.tmp moved successfully.
C:\WINDOWS\system32\SET2D3.tmp moved successfully.
C:\WINDOWS\system32\SET2D4.tmp moved successfully.
C:\WINDOWS\system32\SET2D5.tmp moved successfully.
C:\WINDOWS\system32\SET2D6.tmp moved successfully.
C:\WINDOWS\system32\SET2D7.tmp moved successfully.
C:\WINDOWS\system32\SET2D8.tmp moved successfully.
C:\WINDOWS\system32\SET2D9.tmp moved successfully.
C:\WINDOWS\system32\SET2DB.tmp moved successfully.
C:\WINDOWS\system32\SET2DC.tmp moved successfully.
C:\WINDOWS\system32\SET2DD.tmp moved successfully.
C:\WINDOWS\system32\SET2DE.tmp moved successfully.
C:\WINDOWS\system32\SET2E0.tmp moved successfully.
C:\WINDOWS\system32\SET2E1.tmp moved successfully.
C:\WINDOWS\system32\SET2E2.tmp moved successfully.
C:\WINDOWS\system32\SET2E4.tmp moved successfully.
C:\WINDOWS\system32\SET2E7.tmp moved successfully.
C:\WINDOWS\system32\SET2E8.tmp moved successfully.
C:\WINDOWS\system32\SET2EB.tmp moved successfully.
C:\WINDOWS\system32\SET2EC.tmp moved successfully.
C:\WINDOWS\system32\SET2ED.tmp moved successfully.
C:\WINDOWS\system32\SET2F0.tmp moved successfully.
C:\WINDOWS\system32\SET2F1.tmp moved successfully.
C:\WINDOWS\system32\SET2F2.tmp moved successfully.
C:\WINDOWS\system32\SET2F3.tmp moved successfully.
C:\WINDOWS\system32\SET2F8.tmp moved successfully.
C:\WINDOWS\system32\SET2F9.tmp moved successfully.
C:\WINDOWS\system32\SET2FA.tmp moved successfully.
C:\WINDOWS\system32\SET2FB.tmp moved successfully.
C:\WINDOWS\system32\SET2FD.tmp moved successfully.
C:\WINDOWS\system32\SET300.tmp moved successfully.
C:\WINDOWS\system32\SET301.tmp moved successfully.
C:\WINDOWS\system32\SET302.tmp moved successfully.
C:\WINDOWS\system32\SET304.tmp moved successfully.
C:\WINDOWS\system32\SET305.tmp moved successfully.
C:\WINDOWS\system32\SET308.tmp moved successfully.
C:\WINDOWS\system32\SET309.tmp moved successfully.
C:\WINDOWS\system32\SET30C.tmp moved successfully.
C:\WINDOWS\system32\SET30D.tmp moved successfully.
C:\WINDOWS\system32\SET30E.tmp moved successfully.
C:\WINDOWS\system32\SET311.tmp moved successfully.
C:\WINDOWS\system32\SET312.tmp moved successfully.
C:\WINDOWS\system32\SET319.tmp moved successfully.
C:\WINDOWS\system32\SET31F.tmp moved successfully.
C:\WINDOWS\system32\SET322.tmp moved successfully.
C:\WINDOWS\system32\SET325.tmp moved successfully.
C:\WINDOWS\system32\SET326.tmp moved successfully.
C:\WINDOWS\system32\SET328.tmp moved successfully.
C:\WINDOWS\system32\SET329.tmp moved successfully.
C:\WINDOWS\system32\SET32A.tmp moved successfully.
C:\WINDOWS\system32\SET32B.tmp moved successfully.
C:\WINDOWS\system32\SET32F.tmp moved successfully.
C:\WINDOWS\system32\SET331.tmp moved successfully.
C:\WINDOWS\system32\SET336.tmp moved successfully.
C:\WINDOWS\system32\SET33B.tmp moved successfully.
C:\WINDOWS\system32\SET33D.tmp moved successfully.
C:\WINDOWS\system32\SET33F.tmp moved successfully.
C:\WINDOWS\system32\SET340.tmp moved successfully.
C:\WINDOWS\system32\SET34B.tmp moved successfully.
C:\WINDOWS\system32\SET34C.tmp moved successfully.
C:\WINDOWS\system32\SET34E.tmp moved successfully.
C:\WINDOWS\system32\SET34F.tmp moved successfully.
C:\WINDOWS\system32\SET350.tmp moved successfully.
C:\WINDOWS\system32\SET351.tmp moved successfully.
C:\WINDOWS\system32\SET353.tmp moved successfully.
C:\WINDOWS\system32\SET354.tmp moved successfully.
C:\WINDOWS\system32\SET355.tmp moved successfully.
C:\WINDOWS\system32\SET356.tmp moved successfully.
C:\WINDOWS\system32\SET358.tmp moved successfully.
C:\WINDOWS\system32\SET35B.tmp moved successfully.
C:\WINDOWS\system32\SET35C.tmp moved successfully.
C:\WINDOWS\system32\SET360.tmp moved successfully.
C:\WINDOWS\system32\SET367.tmp moved successfully.
C:\WINDOWS\system32\SET36A.tmp moved successfully.
C:\WINDOWS\system32\SET36C.tmp moved successfully.
C:\WINDOWS\system32\SET36D.tmp moved successfully.
C:\WINDOWS\system32\SET370.tmp moved successfully.
C:\WINDOWS\system32\SET371.tmp moved successfully.
C:\WINDOWS\system32\SET372.tmp moved successfully.
C:\WINDOWS\system32\SET374.tmp moved successfully.
C:\WINDOWS\system32\SET376.tmp moved successfully.
C:\WINDOWS\system32\SET37B.tmp moved successfully.
C:\WINDOWS\system32\SET37D.tmp moved successfully.
C:\WINDOWS\system32\SET37E.tmp moved successfully.
C:\WINDOWS\system32\SET37F.tmp moved successfully.
C:\WINDOWS\system32\SET380.tmp moved successfully.
C:\WINDOWS\system32\SET382.tmp moved successfully.
C:\WINDOWS\system32\SET383.tmp moved successfully.
C:\WINDOWS\system32\SET384.tmp moved successfully.
C:\WINDOWS\system32\SET38A.tmp moved successfully.
C:\WINDOWS\system32\SET392.tmp moved successfully.
C:\WINDOWS\system32\SET399.tmp moved successfully.
C:\WINDOWS\system32\SET39A.tmp moved successfully.
C:\WINDOWS\system32\SET39B.tmp moved successfully.
C:\WINDOWS\system32\SET39D.tmp moved successfully.
C:\WINDOWS\system32\SET3A0.tmp moved successfully.
C:\WINDOWS\system32\SET3A8.tmp moved successfully.
C:\WINDOWS\system32\SET3AD.tmp moved successfully.
C:\WINDOWS\system32\SET3AE.tmp moved successfully.
C:\WINDOWS\system32\SET3B1.tmp moved successfully.
C:\WINDOWS\system32\SET3B3.tmp moved successfully.
C:\WINDOWS\system32\SET3BC.tmp moved successfully.
C:\WINDOWS\system32\SET3BE.tmp moved successfully.
C:\WINDOWS\system32\SET3D1.tmp moved successfully.
C:\WINDOWS\system32\SET3D5.tmp moved successfully.
C:\WINDOWS\system32\SET3D7.tmp moved successfully.
C:\WINDOWS\system32\SET3D9.tmp moved successfully.
C:\WINDOWS\system32\SET3DA.tmp moved successfully.
C:\WINDOWS\system32\SET3E0.tmp moved successfully.
C:\WINDOWS\system32\SET3E2.tmp moved successfully.
C:\WINDOWS\system32\SET3E3.tmp moved successfully.
C:\WINDOWS\system32\SET3E5.tmp moved successfully.
C:\WINDOWS\system32\SET3E6.tmp moved successfully.
C:\WINDOWS\system32\SET3E7.tmp moved successfully.
C:\WINDOWS\system32\SET3E9.tmp moved successfully.
C:\WINDOWS\system32\SET3EA.tmp moved successfully.
C:\WINDOWS\system32\SET3EC.tmp moved successfully.
C:\WINDOWS\system32\SET3ED.tmp moved successfully.
C:\WINDOWS\system32\SET3EF.tmp moved successfully.
C:\WINDOWS\system32\SET3F2.tmp moved successfully.
C:\WINDOWS\system32\SET3F4.tmp moved successfully.
C:\WINDOWS\system32\SET3F9.tmp moved successfully.
C:\WINDOWS\system32\SET3FA.tmp moved successfully.
C:\WINDOWS\system32\SET3FF.tmp moved successfully.
C:\WINDOWS\system32\SET402.tmp moved successfully.
C:\WINDOWS\system32\SET407.tmp moved successfully.
C:\WINDOWS\system32\SET409.tmp moved successfully.
C:\WINDOWS\system32\SET40A.tmp moved successfully.
C:\WINDOWS\system32\SET40B.tmp moved successfully.
C:\WINDOWS\system32\SET40E.tmp moved successfully.
C:\WINDOWS\system32\SET411.tmp moved successfully.
C:\WINDOWS\system32\SET413.tmp moved successfully.
C:\WINDOWS\system32\SET414.tmp moved successfully.
C:\WINDOWS\system32\SET416.tmp moved successfully.
C:\WINDOWS\system32\SET419.tmp moved successfully.
C:\WINDOWS\system32\SET41A.tmp moved successfully.
C:\WINDOWS\system32\SET41C.tmp moved successfully.
C:\WINDOWS\system32\SET41D.tmp moved successfully.
C:\WINDOWS\system32\SET422.tmp moved successfully.
C:\WINDOWS\system32\SET423.tmp moved successfully.
C:\WINDOWS\system32\SET425.tmp moved successfully.
C:\WINDOWS\system32\SET427.tmp moved successfully.
C:\WINDOWS\system32\SET428.tmp moved successfully.
C:\WINDOWS\system32\SET42A.tmp moved successfully.
C:\WINDOWS\system32\SET42C.tmp moved successfully.
C:\WINDOWS\system32\SET42D.tmp moved successfully.
C:\WINDOWS\system32\SET433.tmp moved successfully.
C:\WINDOWS\system32\SET434.tmp moved successfully.
C:\WINDOWS\system32\SET437.tmp moved successfully.
C:\WINDOWS\system32\SET439.tmp moved successfully.
C:\WINDOWS\system32\SET43C.tmp moved successfully.
C:\WINDOWS\system32\SET43F.tmp moved successfully.
C:\WINDOWS\system32\SET441.tmp moved successfully.
C:\WINDOWS\system32\SET447.tmp moved successfully.
C:\WINDOWS\system32\SET449.tmp moved successfully.
C:\WINDOWS\system32\SET44A.tmp moved successfully.
C:\WINDOWS\system32\SET44B.tmp moved successfully.
C:\WINDOWS\system32\SET457.tmp moved successfully.
C:\WINDOWS\system32\SET462.tmp moved successfully.
C:\WINDOWS\system32\SET472.tmp moved successfully.
C:\WINDOWS\system32\SET473.tmp moved successfully.
C:\WINDOWS\system32\SET49F.tmp moved successfully.
C:\WINDOWS\system32\SET4A7.tmp moved successfully.
C:\WINDOWS\system32\SET4A8.tmp moved successfully.
C:\WINDOWS\system32\SET4AA.tmp moved successfully.
C:\WINDOWS\system32\SET4AB.tmp moved successfully.
C:\WINDOWS\system32\SET4AC.tmp moved successfully.
C:\WINDOWS\system32\SET4AF.tmp moved successfully.
C:\WINDOWS\system32\SET4B1.tmp moved successfully.
C:\WINDOWS\system32\SET4B2.tmp moved successfully.
C:\WINDOWS\system32\SET4B4.tmp moved successfully.
C:\WINDOWS\system32\SET4B7.tmp moved successfully.
C:\WINDOWS\system32\SET4B9.tmp moved successfully.
C:\WINDOWS\system32\SET4BE.tmp moved successfully.
C:\WINDOWS\system32\SET4BF.tmp moved successfully.
C:\WINDOWS\system32\SET4C7.tmp moved successfully.
C:\WINDOWS\system32\SET4CE.tmp moved successfully.
C:\WINDOWS\system32\SET4D3.tmp moved successfully.
C:\WINDOWS\system32\SET4D6.tmp moved successfully.
C:\WINDOWS\system32\SET4D9.tmp moved successfully.
C:\WINDOWS\system32\SET4DB.tmp moved successfully.
C:\WINDOWS\system32\SET4DF.tmp moved successfully.
C:\WINDOWS\system32\SET4E1.tmp moved successfully.
C:\WINDOWS\system32\SET4E2.tmp moved successfully.
C:\WINDOWS\system32\SET4E7.tmp moved successfully.
C:\WINDOWS\system32\SET4E8.tmp moved successfully.
C:\WINDOWS\system32\SET4EC.tmp moved successfully.
C:\WINDOWS\system32\SET4ED.tmp moved successfully.
C:\WINDOWS\system32\SET4F2.tmp moved successfully.
C:\WINDOWS\system32\SET4F9.tmp moved successfully.
C:\WINDOWS\system32\SET4FC.tmp moved successfully.
C:\WINDOWS\system32\SET500.tmp moved successfully.
C:\WINDOWS\system32\SET502.tmp moved successfully.
C:\WINDOWS\system32\SET504.tmp moved successfully.
C:\WINDOWS\system32\SETEA3.tmp moved successfully.
C:\WINDOWS\system32\SETEA6.tmp moved successfully.
C:\WINDOWS\system32\SETEA7.tmp moved successfully.
C:\WINDOWS\system32\SETEAB.tmp moved successfully.
C:\WINDOWS\system32\SETF63.tmp moved successfully.
C:\WINDOWS\system32\SETF66.tmp moved successfully.
C:\WINDOWS\system32\SETF6B.tmp moved successfully.
C:\WINDOWS\system32\SETF9E.tmp moved successfully.
C:\WINDOWS\002234_.tmp moved successfully.
C:\WINDOWS\002958_.tmp moved successfully.
C:\WINDOWS\005123_.tmp moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78653A3E-A63F-42A9-A6FE-7524F4058767}\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NI.UWA6P_0001_N56M1001 deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DllRunning\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\awtqr\\ deleted successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Mike\LOCALS~1\Temp\~DF657F.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Mike\LOCALS~1\Temp\~DF991B.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Mike\LOCALS~1\Temp\~DF9926.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\INDEX.DAT scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\T30DebugLogFile.txt scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11302008_164946

Files moved on Reboot...
C:\DOCUME~1\Mike\LOCALS~1\Temp\~DF657F.tmp moved successfully.
File C:\DOCUME~1\Mike\LOCALS~1\Temp\~DF991B.tmp not found!
File C:\DOCUME~1\Mike\LOCALS~1\Temp\~DF9926.tmp not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\INDEX.DAT scheduled to be moved on reboot.
C:\WINDOWS\temp\T30DebugLogFile.txt moved successfully.

[Shaba]

Please go to Kaspersky website (http://www.kaspersky.com/kos/eng/partner/default/kavwebscan.html) and perform an online antivirus scan.

Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

Read through the requirements and privacy statement and click on Accept button.
It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
When the downloads have finished, click on Settings.
Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button: Spyware, Adware, Dialers, and other potentially dangerous programs
Archives
Click on My Computer under Scan.
Once the scan is complete, it will display the results. Click on View Scan Report.
You will see a list of infected items there. Click on Save Report As....
Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
Please post this log in your next reply along with a fresh HijackThis log.

If you need a tutorial, see here (http://i275.photobucket.com/albums/jj285/Bleeping/KAS/KAS9.gif)

[hboyette]

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Monday, December 1, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Monday, December 01, 2008 18:39:03
Records in database: 1429900
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\

Scan statistics:
Files scanned: 71924
Threat name: 1
Infected objects: 1
Suspicious objects: 0
Duration of the scan: 02:58:55


File name / Threat name / Threats count
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq21F.tmp\mysearch.cab Infected: not-a-virus:WebToolbar.Win32.MyWebSearch.o 1

The selected area was scanned.

[hboyette]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:38:08 PM, on 12/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: Yahoo! IE Suggest - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\SearchSuggest\YSearchSuggest.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {CC149546-C2E2-43BA-B280-468115A165D2} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: (no name) - {81587163-443D-4331-925A-49CF6716F9FE} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130245470937
O16 - DPF: {8FA2192F-B95D-40E3-898F-8D7ABB8E00D0} (SpinTop Games Launcher) - http://www.gamehouse.com/games/SpinTopGamesLauncher.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

--
End of file - 7596 bytes

[Shaba]

Empty this folder:

C:\Program Files\Yahoo!\YPSR\Quarantine

Empty Recycle Bin.

Still problems?

[hboyette]

My internet browser seems to be working much better/faster now. Thank you so much for all your help. I appreciate it.

[Shaba]

Great :)

Before final instructions, I have to ask that have you earlier uninstalled norton?

[hboyette]

Yes I believe I did. It was out of date. I will purchase a new antivirus program soon.

[Shaba]

Then please see here (http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039?Open&src=bar_sch_nam&docid=2004092711224136&nsf=nip.nsf&view=docid&dtype=&prod=&ver=&osv=&osv_lvl=&seg=ag) and post back a fresh HijackThis log afterwards.

[hboyette]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:27:05 PM, on 12/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\netdde.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: Yahoo! IE Suggest - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\SearchSuggest\YSearchSuggest.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {CC149546-C2E2-43BA-B280-468115A165D2} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: (no name) - {81587163-443D-4331-925A-49CF6716F9FE} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130245470937
O16 - DPF: {8FA2192F-B95D-40E3-898F-8D7ABB8E00D0} (SpinTop Games Launcher) - http://www.gamehouse.com/games/SpinTopGamesLauncher.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

--
End of file - 7614 bytes

[Shaba]

Good, that is gone :)

Open HijackThis, click do a system scan only and checkmark these:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O3 - Toolbar: (no name) - {CC149546-C2E2-43BA-B280-468115A165D2} - (no file)
O3 - Toolbar: (no name) - {81587163-443D-4331-925A-49CF6716F9FE} - (no file)
O18 - Filter hijack: text/html - (no CLSID) - (no file)

Close all windows including browser and press fix checked.

Reboot.

Post back a fresh HijackThis log.

[hboyette]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:59:53 PM, on 12/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\netdde.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Suggest - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\SearchSuggest\YSearchSuggest.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130245470937
O16 - DPF: {8FA2192F-B95D-40E3-898F-8D7ABB8E00D0} (SpinTop Games Launcher) - http://www.gamehouse.com/games/SpinTopGamesLauncher.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

--
End of file - 7334 bytes

[Shaba]

Some of them are still there.

Please fix these in safe mode and post back a fresh HijackThis log.

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O3 - Toolbar: (no name) - {CC149546-C2E2-43BA-B280-468115A165D2} - (no file)
O3 - Toolbar: (no name) - {81587163-443D-4331-925A-49CF6716F9FE} - (no file)
O18 - Filter hijack: text/html - (no CLSID) - (no file)

[hboyette]

I have tried and tried to fix the three issues that remain. I booted in safemode and ran hijack this from there and selected these to fix but they keep showing back up.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:21:08 PM, on 12/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\netdde.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Suggest - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\SearchSuggest\YSearchSuggest.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130245470937
O16 - DPF: {8FA2192F-B95D-40E3-898F-8D7ABB8E00D0} (SpinTop Games Launcher) - http://www.gamehouse.com/games/SpinTopGamesLauncher.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

--
End of file - 7259 bytes

[Shaba]

Do they show back up immediately or after reboot?

[hboyette]

They show back up immediately.

I am actually trying to fix this computer up for a friend and am planning on taking it back to her tonight. I will check back here though, it just may be a few days before I can get back to you. Thank you for all of your help! It's such a blessing to be able to come here and get help!!

[Shaba]

Then I suggest that you disable AVG and Ad-aware before trying to fix those.

Let me know how it went.

[Shaba]

Due to the lack of feedback this Topic is closed.

If it has been five days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than five days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required.

Everyone else please begin a New Topic.