fig9078
2006-07-31, 20:44
My google search has started to give all strange searches. I did some investigation and it looked like a "Trust Clean" problem. I have deleted the software following the "how to remove trust clean" but the explorer is still not working. I could use the Opera browser to do most of my work because I cannot even go to Panda or other protection sites using explorer.
This is my log file by running the hijackthis software. Any input will be appreciated.
Logfile of HijackThis v1.99.1
Scan saved at 9:45:20 AM, on 7/31/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Canon\VDC\AuVdc.exe
C:\WINDOWS\System32\cusrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\program files\support.com\client\bin\tgcmd.exe
C:\Program Files\Sony\HotKey Utility\HKWnd.exe
C:\WINDOWS\system32\NWTRAY.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\Logi_MwX.Exe
C:\Program Files\Java\j2re1.4.2_10\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\internet download\protection software\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O1 - Hosts: 12.36.41.182 web-fs WEB_FS
O1 - Hosts: 12.36.41.183 nero b2b1
O1 - Hosts: 12.36.41.184 brutus b2b2
O1 - Hosts: 12.36.41.185 www #virtual host on b2b1
O1 - Hosts: 12.36.41.186 www #virtual host on b2b2
O1 - Hosts: 12.36.41.189 qtracs
O1 - Hosts: 128.1.17.1 neo neo.glscorp.com neo.glscorp.com name-svr
O1 - Hosts: 128.1.17.2 ARLI_FS arli-fs
O1 - Hosts: 128.1.17.3 MAIL_FS mail mail-fs ngwnameserver
O1 - Hosts: 128.1.17.4 arli-nt
O1 - Hosts: 128.1.17.5 corp-rln
O1 - Hosts: 128.1.17.7 ACCT_FS acct-fs
O1 - Hosts: 128.1.17.8 devweb spacely igi www mirror new
O1 - Hosts: 128.1.17.9 gozer
O1 - Hosts: 128.1.17.10 cdrom cdrom-fs #CD-ROM Server
O1 - Hosts: 128.1.17.91 kmac-nt #development web server for webspeed
O1 - Hosts: 128.1.17.92 cogswell
O1 - Hosts: 128.1.17.93 ursula
O1 - Hosts: 128.1.17.94 oldspacely
O1 - Hosts: 128.1.17.98 Arli2040 #Single Port 2040 SDU at Arli
O1 - Hosts: 128.1.17.99 ArliDataSMART656 #Single Port T1 DSU/CSU at Arli
O1 - Hosts: 128.1.17.100 arli
O1 - Hosts: 128.1.17.101 arli-cat1900
O1 - Hosts: 128.1.17.102 arli-switch2
O1 - Hosts: 128.1.17.103 arli-switch3
O1 - Hosts: 128.1.17.104 arli-switch4
O1 - Hosts: 128.1.17.105 arli-hpswitch
O1 - Hosts: 128.1.17.106 wlan-ap #Wireless Lan Access Point
O1 - Hosts: 128.1.17.108 sid
O1 - Hosts: 128.1.17.109 ecabinet
O1 - Hosts: 128.1.17.110 unknown
O1 - Hosts: 128.1.17.111 arli-snap
O1 - Hosts: 128.1.17.112 arli-term ARLI-TERM
O1 - Hosts: 128.1.17.176 gwa-fs GWA-FS
O1 - Hosts: 128.1.17.228 arli-copy1
O1 - Hosts: 128.1.17.229 arli-copy2
O1 - Hosts: 128.1.17.230 arli-acct
O1 - Hosts: 128.1.17.231 arli-cfs
O1 - Hosts: 128.1.17.232 arli-exec
O1 - Hosts: 128.1.17.233 arli-is
O1 - Hosts: 128.1.17.234 arli-ap
O1 - Hosts: 128.1.17.235 arli-hse
O1 - Hosts: 128.1.17.236 arli-clr
O1 - Hosts: 128.1.17.237 arli-cmd
O1 - Hosts: 128.1.17.238 arli-west
O1 - Hosts: 128.1.17.239 arli-ljcolor
O1 - Hosts: 128.1.17.240 arli-hrhp4
O1 - Hosts: 128.1.17.241 arli-actng
O1 - Hosts: 128.1.17.243 hr-ceridian #pcAnywhere System for HR
O1 - Hosts: 128.1.17.244 arli-exec2 #HP4050TN by BMike
O1 - Hosts: 128.1.17.246 arli-ex2
O1 - Hosts: 128.1.17.247 arli-hrex3
O1 - Hosts: 128.1.17.248 arli-recp
O1 - Hosts: 128.1.17.249 arli-hp3 #ex+3 in Mike Jones' Office
O1 - Hosts: 128.1.17.250 hopper #redirected to Spacely until clients updated
O1 - Hosts: 128.1.17.251 arli-check1 #HP8100 for AP Checks
O1 - Hosts: 128.1.17.252 arli-ap1 #HP8100 for AP backup
O1 - Hosts: 128.1.17.253 watchguard2
O1 - Hosts: 128.1.17.254 watchguard
O1 - Hosts: 172.16.20.1 ted #ted router
O1 - Hosts: 172.16.20.2 monstro monstro.glscorp.com
O1 - Hosts: 172.16.20.3 TED_FS ted-fs #ted file server
O1 - Hosts: 172.16.20.4 ted2040 #ted T1 Add/Drop SDU
O1 - Hosts: 172.16.20.5 ted-rln #ted RLN server
O1 - Hosts: 172.16.20.6 tedDataSmart658 #DataSmart658 Add/Drop DSU/CSU
O1 - Hosts: 172.16.20.7 teddoors #Doors Computer at TED
O1 - Hosts: 172.16.20.8 chipcom2 #Chipcom Hub In East Warehouse at TED
O1 - Hosts: 172.16.20.9 chipcom #Large Chipcom Hub At TED
O1 - Hosts: 172.16.20.10 tedfirebox #WatchGuard Firebox II at McHenry
O1 - Hosts: 172.16.20.11 ted-hp5r #HP 5 printer in Reception
O1 - Hosts: 172.16.20.12 ted-exec #HP5Si in Computer/Phone Room in McHenry
O1 - Hosts: 172.16.20.13 ted-hp5 tedhp5 #HP5Si TED Main Printer
O1 - Hosts: 172.16.20.14 ted-rd #HP 4050 in R&D
O1 - Hosts: 172.16.20.15 ted-rdcolor #HP Deskjet 1600c
O1 - Hosts: 172.16.20.16 ted-hp3200 #HP LaserJet 3200 in Diane's Office
O1 - Hosts: 172.16.20.17 ted-hp4050 #HP 4050 in QC Lab
O1 - Hosts: 172.16.20.18 printronix #HP JetDirect - Printronix Gaylord Label Printer
O1 - Hosts: 172.16.20.19 ted-hp8150 #HP LaserJet 8150dn
O1 - Hosts: 172.16.20.20 tedclj8550dn #HP Color LaserJet 8550dn
O1 - Hosts: 172.16.20.21 ted-ex1 #HP Jetdirect EX+3 - MXP Invoice Printer
O1 - Hosts: 172.16.20.22 ted-ex2 #HP Jetdirect - Epson Color InkJet
O1 - Hosts: 172.16.20.23 ted-hp1220c #HP JetDirect 300X on HP DeskJet 1220Cxi
O1 - Hosts: 172.16.20.24 ted-printronix2 #HP JetDirect 300X on Old Printronix
O1 - Hosts: 172.16.20.29 devb2b #DevB2B Web Server
O1 - Hosts: 172.16.20.191 PWEYNA-DESKTOP pweyna #Paul's workstation at McHenry
O1 - Hosts: 172.16.20.95 OLDTED_FS oldted-fs #Old NetWare Server at TED
O1 - Hosts: 172.16.1.1 argo #Argo router
O1 - Hosts: 172.16.1.2 ARGO_FS argo-fs #Argo NetWare server
O1 - Hosts: 172.16.1.11 argo-hp5 #Argo HP LaserJet 5N
O1 - Hosts: 172.16.1.12 argo-hp3200 #Argo HP LaserJet 3200se
O1 - Hosts: 172.16.1.13 argo-hp2200 #Argo HP LaserJet 2200dn
O1 - Hosts: 172.16.1.21 argo-ex1 #Argo HP JetDirect EX Plus 3
O1 - Hosts: 172.16.1.22 argo-ex2 #Argo HP JetDirect EX Plus 3
O1 - Hosts: 172.16.3.1 woodstock wood #Woodstock Router
O1 - Hosts: 172.16.3.2 WOOD_FS wood-fs #Woodstock NetWare Server
O1 - Hosts: 172.16.3.11 wood-hp5 #Woodstock HP LaserJet 5Si
O1 - Hosts: 172.16.3.12 wood-hp4000 #Woodstock HP LaserJet 4000TN
O1 - Hosts: 172.16.3.13 wood-hp2200 #Woodstock HP LaserJet 2200DN
O1 - Hosts: 172.16.3.21 wood-ex1 #HP JetDirect EX+3 Warehouse Okidata Printer
O1 - Hosts: 172.16.3.22 wood-ex2 #HP JetDirect EX+3 Invoice Okidata Printer
O1 - Hosts: 172.16.5.1 asht #ashtabula router
O2 - BHO: ChangerBHO Class - {0D4C7057-EAD2-44C6-AD18-9092905F28F1} - C:\WINDOWS\system32\avicap32v.dll
O2 - BHO: FlpLauncher Class - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\Program Files\E-Book Systems\FlipViewer\fplaunch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [ZTgServerSwitch] "c:\program files\support.com\client\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\WINDOWS\System32\PRISMSVR.EXE" /APPLY
O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\Program Files\SBC Yahoo!\Connection Manager\IP InSight\IPMon32.exe"
O4 - HKLM\..\Run: [ZingSpooler] C:\Program Files\Common Files\Zing\ZingSpooler.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_10\bin\jusched.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [SP2 Connection Patcher] "C:\Program Files\SP2 Connection Patcher\SP2ConnPatcher.exe" -n=200
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealOne Player\realplay.exe" /RunUPGToolCommandReBoot
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: ColorVisionStartup.lnk = C:\Program Files\PANTONE COLORVISION\Startup\ColorVisionStartup.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: View EXIF - C:\ViewEXIF\EXIF.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O15 - Trusted Zone: http://*.sony.com
O16 - DPF: {10000000-1000-0000-1000-000000000000} - file://C:\Program Files\Internet Explorer\dfimua.exe
O16 - DPF: {106E49CF-797A-11D2-81A2-00E02C015623} (AlternaTIFF ActiveX) - http://www.alternatiff.com/install/00/alttiff.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {230C3D02-DA27-11D2-8612-00A0C93EEA3C} (SAXFile FileUpload ActiveX Control) - http://www.winkflash.com/photo/loaders/SAXFile.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EP...l_v1-0-3-12.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/07d71387909fe9...ip/RdxIE601.cab
O16 - DPF: {5E943D9C-F8DC-4258-8E3F-A61BB3405A33} (ZingBatchAXDwnl Class) - http://www.imagestation.com/common/classes...ion=4,3,2,20802
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1125507485170
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.ofoto.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - file://C:\WINDOWS\msxml4.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/...utocomplete.cab
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/...ropper1_3us.cab
O16 - DPF: {C75BE5CC-7F80-458C-8B66-FAB86E3B13C3} (FotkiUploader Control) - http://images.fotki.com/activex/FotkiUploader.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://specialchem.webex.com/client/v_mywe...ent/ieatgpc.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/sj/en/check/qdiagh.cab?326
O18 - Protocol: nim - {3D206AE2-3039-413B-B748-3ACC562EC22A} - (no file)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Canon NetSpot Suite Service - CANON INC. - C:\Program Files\Canon\VDC\AuVdc.exe
O23 - Service: Client Update Service for Novell (cusrvc) - Novell, Inc. - C:\WINDOWS\System32\cusrvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: VAIO Media Music Server (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Music\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (file missing)
O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing)
O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Photo Server (VAIOMediaPlatform-PhotoServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Photo\appsrv\PhotoAppSrv.exe
O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing)
O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing)
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing)
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
This is my log file by running the hijackthis software. Any input will be appreciated.
Logfile of HijackThis v1.99.1
Scan saved at 9:45:20 AM, on 7/31/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Canon\VDC\AuVdc.exe
C:\WINDOWS\System32\cusrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\program files\support.com\client\bin\tgcmd.exe
C:\Program Files\Sony\HotKey Utility\HKWnd.exe
C:\WINDOWS\system32\NWTRAY.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\Logi_MwX.Exe
C:\Program Files\Java\j2re1.4.2_10\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\internet download\protection software\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O1 - Hosts: 12.36.41.182 web-fs WEB_FS
O1 - Hosts: 12.36.41.183 nero b2b1
O1 - Hosts: 12.36.41.184 brutus b2b2
O1 - Hosts: 12.36.41.185 www #virtual host on b2b1
O1 - Hosts: 12.36.41.186 www #virtual host on b2b2
O1 - Hosts: 12.36.41.189 qtracs
O1 - Hosts: 128.1.17.1 neo neo.glscorp.com neo.glscorp.com name-svr
O1 - Hosts: 128.1.17.2 ARLI_FS arli-fs
O1 - Hosts: 128.1.17.3 MAIL_FS mail mail-fs ngwnameserver
O1 - Hosts: 128.1.17.4 arli-nt
O1 - Hosts: 128.1.17.5 corp-rln
O1 - Hosts: 128.1.17.7 ACCT_FS acct-fs
O1 - Hosts: 128.1.17.8 devweb spacely igi www mirror new
O1 - Hosts: 128.1.17.9 gozer
O1 - Hosts: 128.1.17.10 cdrom cdrom-fs #CD-ROM Server
O1 - Hosts: 128.1.17.91 kmac-nt #development web server for webspeed
O1 - Hosts: 128.1.17.92 cogswell
O1 - Hosts: 128.1.17.93 ursula
O1 - Hosts: 128.1.17.94 oldspacely
O1 - Hosts: 128.1.17.98 Arli2040 #Single Port 2040 SDU at Arli
O1 - Hosts: 128.1.17.99 ArliDataSMART656 #Single Port T1 DSU/CSU at Arli
O1 - Hosts: 128.1.17.100 arli
O1 - Hosts: 128.1.17.101 arli-cat1900
O1 - Hosts: 128.1.17.102 arli-switch2
O1 - Hosts: 128.1.17.103 arli-switch3
O1 - Hosts: 128.1.17.104 arli-switch4
O1 - Hosts: 128.1.17.105 arli-hpswitch
O1 - Hosts: 128.1.17.106 wlan-ap #Wireless Lan Access Point
O1 - Hosts: 128.1.17.108 sid
O1 - Hosts: 128.1.17.109 ecabinet
O1 - Hosts: 128.1.17.110 unknown
O1 - Hosts: 128.1.17.111 arli-snap
O1 - Hosts: 128.1.17.112 arli-term ARLI-TERM
O1 - Hosts: 128.1.17.176 gwa-fs GWA-FS
O1 - Hosts: 128.1.17.228 arli-copy1
O1 - Hosts: 128.1.17.229 arli-copy2
O1 - Hosts: 128.1.17.230 arli-acct
O1 - Hosts: 128.1.17.231 arli-cfs
O1 - Hosts: 128.1.17.232 arli-exec
O1 - Hosts: 128.1.17.233 arli-is
O1 - Hosts: 128.1.17.234 arli-ap
O1 - Hosts: 128.1.17.235 arli-hse
O1 - Hosts: 128.1.17.236 arli-clr
O1 - Hosts: 128.1.17.237 arli-cmd
O1 - Hosts: 128.1.17.238 arli-west
O1 - Hosts: 128.1.17.239 arli-ljcolor
O1 - Hosts: 128.1.17.240 arli-hrhp4
O1 - Hosts: 128.1.17.241 arli-actng
O1 - Hosts: 128.1.17.243 hr-ceridian #pcAnywhere System for HR
O1 - Hosts: 128.1.17.244 arli-exec2 #HP4050TN by BMike
O1 - Hosts: 128.1.17.246 arli-ex2
O1 - Hosts: 128.1.17.247 arli-hrex3
O1 - Hosts: 128.1.17.248 arli-recp
O1 - Hosts: 128.1.17.249 arli-hp3 #ex+3 in Mike Jones' Office
O1 - Hosts: 128.1.17.250 hopper #redirected to Spacely until clients updated
O1 - Hosts: 128.1.17.251 arli-check1 #HP8100 for AP Checks
O1 - Hosts: 128.1.17.252 arli-ap1 #HP8100 for AP backup
O1 - Hosts: 128.1.17.253 watchguard2
O1 - Hosts: 128.1.17.254 watchguard
O1 - Hosts: 172.16.20.1 ted #ted router
O1 - Hosts: 172.16.20.2 monstro monstro.glscorp.com
O1 - Hosts: 172.16.20.3 TED_FS ted-fs #ted file server
O1 - Hosts: 172.16.20.4 ted2040 #ted T1 Add/Drop SDU
O1 - Hosts: 172.16.20.5 ted-rln #ted RLN server
O1 - Hosts: 172.16.20.6 tedDataSmart658 #DataSmart658 Add/Drop DSU/CSU
O1 - Hosts: 172.16.20.7 teddoors #Doors Computer at TED
O1 - Hosts: 172.16.20.8 chipcom2 #Chipcom Hub In East Warehouse at TED
O1 - Hosts: 172.16.20.9 chipcom #Large Chipcom Hub At TED
O1 - Hosts: 172.16.20.10 tedfirebox #WatchGuard Firebox II at McHenry
O1 - Hosts: 172.16.20.11 ted-hp5r #HP 5 printer in Reception
O1 - Hosts: 172.16.20.12 ted-exec #HP5Si in Computer/Phone Room in McHenry
O1 - Hosts: 172.16.20.13 ted-hp5 tedhp5 #HP5Si TED Main Printer
O1 - Hosts: 172.16.20.14 ted-rd #HP 4050 in R&D
O1 - Hosts: 172.16.20.15 ted-rdcolor #HP Deskjet 1600c
O1 - Hosts: 172.16.20.16 ted-hp3200 #HP LaserJet 3200 in Diane's Office
O1 - Hosts: 172.16.20.17 ted-hp4050 #HP 4050 in QC Lab
O1 - Hosts: 172.16.20.18 printronix #HP JetDirect - Printronix Gaylord Label Printer
O1 - Hosts: 172.16.20.19 ted-hp8150 #HP LaserJet 8150dn
O1 - Hosts: 172.16.20.20 tedclj8550dn #HP Color LaserJet 8550dn
O1 - Hosts: 172.16.20.21 ted-ex1 #HP Jetdirect EX+3 - MXP Invoice Printer
O1 - Hosts: 172.16.20.22 ted-ex2 #HP Jetdirect - Epson Color InkJet
O1 - Hosts: 172.16.20.23 ted-hp1220c #HP JetDirect 300X on HP DeskJet 1220Cxi
O1 - Hosts: 172.16.20.24 ted-printronix2 #HP JetDirect 300X on Old Printronix
O1 - Hosts: 172.16.20.29 devb2b #DevB2B Web Server
O1 - Hosts: 172.16.20.191 PWEYNA-DESKTOP pweyna #Paul's workstation at McHenry
O1 - Hosts: 172.16.20.95 OLDTED_FS oldted-fs #Old NetWare Server at TED
O1 - Hosts: 172.16.1.1 argo #Argo router
O1 - Hosts: 172.16.1.2 ARGO_FS argo-fs #Argo NetWare server
O1 - Hosts: 172.16.1.11 argo-hp5 #Argo HP LaserJet 5N
O1 - Hosts: 172.16.1.12 argo-hp3200 #Argo HP LaserJet 3200se
O1 - Hosts: 172.16.1.13 argo-hp2200 #Argo HP LaserJet 2200dn
O1 - Hosts: 172.16.1.21 argo-ex1 #Argo HP JetDirect EX Plus 3
O1 - Hosts: 172.16.1.22 argo-ex2 #Argo HP JetDirect EX Plus 3
O1 - Hosts: 172.16.3.1 woodstock wood #Woodstock Router
O1 - Hosts: 172.16.3.2 WOOD_FS wood-fs #Woodstock NetWare Server
O1 - Hosts: 172.16.3.11 wood-hp5 #Woodstock HP LaserJet 5Si
O1 - Hosts: 172.16.3.12 wood-hp4000 #Woodstock HP LaserJet 4000TN
O1 - Hosts: 172.16.3.13 wood-hp2200 #Woodstock HP LaserJet 2200DN
O1 - Hosts: 172.16.3.21 wood-ex1 #HP JetDirect EX+3 Warehouse Okidata Printer
O1 - Hosts: 172.16.3.22 wood-ex2 #HP JetDirect EX+3 Invoice Okidata Printer
O1 - Hosts: 172.16.5.1 asht #ashtabula router
O2 - BHO: ChangerBHO Class - {0D4C7057-EAD2-44C6-AD18-9092905F28F1} - C:\WINDOWS\system32\avicap32v.dll
O2 - BHO: FlpLauncher Class - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\Program Files\E-Book Systems\FlipViewer\fplaunch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [ZTgServerSwitch] "c:\program files\support.com\client\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\WINDOWS\System32\PRISMSVR.EXE" /APPLY
O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\Program Files\SBC Yahoo!\Connection Manager\IP InSight\IPMon32.exe"
O4 - HKLM\..\Run: [ZingSpooler] C:\Program Files\Common Files\Zing\ZingSpooler.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_10\bin\jusched.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [SP2 Connection Patcher] "C:\Program Files\SP2 Connection Patcher\SP2ConnPatcher.exe" -n=200
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealOne Player\realplay.exe" /RunUPGToolCommandReBoot
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: ColorVisionStartup.lnk = C:\Program Files\PANTONE COLORVISION\Startup\ColorVisionStartup.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: View EXIF - C:\ViewEXIF\EXIF.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O15 - Trusted Zone: http://*.sony.com
O16 - DPF: {10000000-1000-0000-1000-000000000000} - file://C:\Program Files\Internet Explorer\dfimua.exe
O16 - DPF: {106E49CF-797A-11D2-81A2-00E02C015623} (AlternaTIFF ActiveX) - http://www.alternatiff.com/install/00/alttiff.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {230C3D02-DA27-11D2-8612-00A0C93EEA3C} (SAXFile FileUpload ActiveX Control) - http://www.winkflash.com/photo/loaders/SAXFile.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EP...l_v1-0-3-12.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/07d71387909fe9...ip/RdxIE601.cab
O16 - DPF: {5E943D9C-F8DC-4258-8E3F-A61BB3405A33} (ZingBatchAXDwnl Class) - http://www.imagestation.com/common/classes...ion=4,3,2,20802
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1125507485170
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.ofoto.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - file://C:\WINDOWS\msxml4.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/...utocomplete.cab
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/...ropper1_3us.cab
O16 - DPF: {C75BE5CC-7F80-458C-8B66-FAB86E3B13C3} (FotkiUploader Control) - http://images.fotki.com/activex/FotkiUploader.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://specialchem.webex.com/client/v_mywe...ent/ieatgpc.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/sj/en/check/qdiagh.cab?326
O18 - Protocol: nim - {3D206AE2-3039-413B-B748-3ACC562EC22A} - (no file)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Canon NetSpot Suite Service - CANON INC. - C:\Program Files\Canon\VDC\AuVdc.exe
O23 - Service: Client Update Service for Novell (cusrvc) - Novell, Inc. - C:\WINDOWS\System32\cusrvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: VAIO Media Music Server (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Music\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (file missing)
O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing)
O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Photo Server (VAIOMediaPlatform-PhotoServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Photo\appsrv\PhotoAppSrv.exe
O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing)
O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing)
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing)
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe