-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, May 15, 2008 9:35:33 PM
Operating System: Microsoft Windows Vista Professional, (Build 6000)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 15/05/2008
Kaspersky Anti-Virus database records: 775447
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
H:\
J:\
Scan Statistics:
Total number of scanned objects: 167924
Number of viruses found: 1
Number of infected objects: 1
Number of suspicious objects: 0
Duration of the scan process: 01:59:49
Infected Object Name / Virus Name / Last Action
C:\Boot\BCD Object is locked skipped
C:\Boot\BCD.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
H:\found.001\file0000.chk Object is locked skipped
H:\found.004\dir0000.chk\pq Object is locked skipped
H:\ProgramData\avg8\Log\avgcore.log Object is locked skipped
H:\ProgramData\avg8\Log\avgrs.log Object is locked skipped
H:\ProgramData\avg8\Log\avgsched.log Object is locked skipped
H:\ProgramData\avg8\Log\avgui.log Object is locked skipped
H:\ProgramData\avg8\Log\avgwd.log Object is locked skipped
H:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\07ba6cd04f4b286329885247df66b9c5_3d97594a-c546-489c-b233-210c2e5ee60c Object is locked skipped
H:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
H:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.6.Crwl Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.6.gthr Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSStmp.log Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.ci Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.wsb Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010005.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010006.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010007.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010008.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010009.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000A.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000B.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000F.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010010.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010014.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010015.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010016.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001D.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001F.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001002D.wid Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX.000 Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000 Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\Used0000.000 Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000 Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.chk1.gthr Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.chk2.gthr Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.Ntfy34.gthr Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc\NtfBEBC.tmp Object is locked skipped
H:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc\NtfBEBD.tmp Object is locked skipped
H:\ProgramData\Microsoft\Windows Defender\Support\MPLog-11022006-050107.log Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Feeds Cache\index.dat Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008051520080516\index.dat Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Windows\UsrClass.dat Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Windows\UsrClass.dat{67568cb7-1eab-11dd-9141-a9f0be9ba433}.TM.blf Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Windows\UsrClass.dat{67568cb7-1eab-11dd-9141-a9f0be9ba433}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped
H:\Users\Chris\AppData\Local\Microsoft\Windows\UsrClass.dat{67568cb7-1eab-11dd-9141-a9f0be9ba433}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped
H:\Users\Chris\AppData\Roaming\Microsoft\Internet Explorer\UserData\index.dat Object is locked skipped
H:\Users\Chris\AppData\Roaming\Microsoft\Windows\Cookies\index.dat Object is locked skipped
H:\Users\Chris\NTUSER.DAT Object is locked skipped
H:\Users\Chris\ntuser.dat.LOG1 Object is locked skipped
H:\Users\Chris\ntuser.dat.LOG2 Object is locked skipped
H:\Users\Chris\NTUSER.DAT{e05af9c7-801c-11dc-ad9e-005056c00008}.TM.blf Object is locked skipped
H:\Users\Chris\NTUSER.DAT{e05af9c7-801c-11dc-ad9e-005056c00008}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped
H:\Users\Chris\NTUSER.DAT{e05af9c7-801c-11dc-ad9e-005056c00008}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped
H:\Windows\CSC\v2.0.6\pq Object is locked skipped
H:\Windows\Debug\PASSWD.LOG Object is locked skipped
H:\Windows\Debug\sam.log Object is locked skipped
H:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat Object is locked skipped
H:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat Object is locked skipped
H:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\WindowsUpdate.log Object is locked skipped
H:\Windows\ServiceProfiles\LocalService\NTUSER.DAT Object is locked skipped
H:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1 Object is locked skipped
H:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG2 Object is locked skipped
H:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{0f694465-6a70-11db-8eb3-985e31beb686}.TM.blf Object is locked skipped
H:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{0f694465-6a70-11db-8eb3-985e31beb686}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped
H:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{0f694465-6a70-11db-8eb3-985e31beb686}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped
H:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ehmsdri.log Object is locked skipped
H:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ehRecvr.log Object is locked skipped
H:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT Object is locked skipped
H:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1 Object is locked skipped
H:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG2 Object is locked skipped
H:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{0f694461-6a70-11db-8eb3-985e31beb686}.TM.blf Object is locked skipped
H:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{0f694461-6a70-11db-8eb3-985e31beb686}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped
H:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{0f694461-6a70-11db-8eb3-985e31beb686}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped
H:\Windows\SoftwareDistribution\EventCache\{4C66C283-25FB-45C2-BDD5-29E19DA6FB2D}.bin Object is locked skipped
H:\Windows\SoftwareDistribution\ReportingEvents.log Object is locked skipped
H:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped
H:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped
H:\Windows\System32\catroot2\edb.log Object is locked skipped
H:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Object is locked skipped
H:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked skipped
H:\Windows\System32\config\COMPONENTS Object is locked skipped
H:\Windows\System32\config\COMPONENTS.LOG1 Object is locked skipped
H:\Windows\System32\config\COMPONENTS.LOG2 Object is locked skipped
H:\Windows\System32\config\DEFAULT Object is locked skipped
H:\Windows\System32\config\default.LOG1 Object is locked skipped
H:\Windows\System32\config\default.LOG2 Object is locked skipped
H:\Windows\System32\config\RegBack\COMPONENTS Object is locked skipped
H:\Windows\System32\config\RegBack\DEFAULT Object is locked skipped
H:\Windows\System32\config\RegBack\SAM Object is locked skipped
H:\Windows\System32\config\RegBack\SECURITY Object is locked skipped
H:\Windows\System32\config\RegBack\SOFTWARE Object is locked skipped
H:\Windows\System32\config\RegBack\SYSTEM Object is locked skipped
H:\Windows\System32\config\SAM Object is locked skipped
H:\Windows\System32\config\SAM.LOG1 Object is locked skipped
H:\Windows\System32\config\SAM.LOG2 Object is locked skipped
H:\Windows\System32\config\SECURITY Object is locked skipped
H:\Windows\System32\config\SECURITY.LOG1 Object is locked skipped
H:\Windows\System32\config\SECURITY.LOG2 Object is locked skipped
H:\Windows\System32\config\SOFTWARE Object is locked skipped
H:\Windows\System32\config\SOFTWARE.LOG1 Object is locked skipped
H:\Windows\System32\config\SOFTWARE.LOG2 Object is locked skipped
H:\Windows\System32\config\SYSTEM Object is locked skipped
H:\Windows\System32\config\system.LOG1 Object is locked skipped
H:\Windows\System32\config\system.LOG2 Object is locked skipped
H:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TM.blf Object is locked skipped
H:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped
H:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped
H:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000003.regtrans-ms Object is locked skipped
H:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000004.regtrans-ms Object is locked skipped
H:\Windows\System32\config\TxR\{e05af9a2-801c-11dc-ad9e-005056c00008}.TxR.0.regtrans-ms Object is locked skipped
H:\Windows\System32\config\TxR\{e05af9a2-801c-11dc-ad9e-005056c00008}.TxR.1.regtrans-ms Object is locked skipped
H:\Windows\System32\config\TxR\{e05af9a2-801c-11dc-ad9e-005056c00008}.TxR.2.regtrans-ms Object is locked skipped
H:\Windows\System32\config\TxR\{e05af9a2-801c-11dc-ad9e-005056c00008}.TxR.blf Object is locked skipped
H:\Windows\System32\LogFiles\Scm\SCM.EVM Object is locked skipped
H:\Windows\System32\Msdtc\KtmRmTm.blf Object is locked skipped
H:\Windows\System32\Msdtc\KtmRmTmContainer00000000000000000001 Object is locked skipped
H:\Windows\System32\Msdtc\KtmRmTmContainer00000000000000000002 Object is locked skipped
H:\Windows\System32\spool\SpoolerETW.etl Object is locked skipped
H:\Windows\System32\wbem\Logs\WMITracing.log Object is locked skipped
H:\Windows\System32\wbem\Repository\INDEX.BTR Object is locked skipped
H:\Windows\System32\wbem\Repository\MAPPING1.MAP Object is locked skipped
H:\Windows\System32\wbem\Repository\MAPPING2.MAP Object is locked skipped
H:\Windows\System32\wbem\Repository\OBJECTS.DATA Object is locked skipped
H:\Windows\System32\WDI\LogFiles\WdiContextLog.etl.003 Object is locked skipped
H:\Windows\System32\wfp\wfpdiag.etl Object is locked skipped
H:\Windows\System32\winevt\Logs\Application.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\DFS Replication.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\HardwareEvents.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Internet Explorer.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Key Management Service.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Media Center.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Networking%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Microsoft-Windows-WLAN-AutoConfig%4Operational.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\Security.evtx Object is locked skipped
H:\Windows\System32\winevt\Logs\System.evtx Object is locked skipped
H:\Windows\Tasks\SCHEDLGU.TXT Object is locked skipped
H:\Windows\WindowsUpdate.log Object is locked skipped
H:\_OTMoveIt\MovedFiles\05142008_191624\Windows\system32\vnfbfaqb.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.rjn skipped
Scan process completed.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:40:41, on 15/05/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal
Running processes:
H:\Windows\system32\Dwm.exe
H:\Windows\Explorer.EXE
H:\Windows\system32\taskeng.exe
H:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
H:\Windows\RtHDVCpl.exe
H:\Program Files\Microsoft IntelliType Pro\itype.exe
H:\Program Files\Microsoft IntelliPoint\ipoint.exe
H:\Windows\System32\rundll32.exe
J:\Program Files\AVG\AVG8\avgtray.exe
H:\Program Files\Saitek\SD6\Software\ProfilerU.exe
H:\Program Files\Saitek\SD6\Software\SaiMfd.exe
J:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
H:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
J:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe
H:\Program Files\Windows Media Player\wmpnscfg.exe
H:\Windows\ehome\ehtray.exe
H:\Windows\ehome\ehmsas.exe
J:\Program Files\MagicDisc\MagicDisc.exe
J:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe
J:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
J:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
H:\Windows\system32\NOTEPAD.EXE
J:\Program Files\Firefox\firefox.exe
H:\Windows\system32\SearchFilterHost.exe
J:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - J:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - J:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "H:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE H:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE H:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE H:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [itype] "H:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "H:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] J:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ProfilerU] H:\Program Files\Saitek\SD6\Software\ProfilerU.exe
O4 - HKLM\..\Run: [SaiMfd] H:\Program Files\Saitek\SD6\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "J:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "J:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKCU\..\Run: [Uniblue SpeedUpMyPC] J:\Program Files\Uniblue\SpeedUpMyPC 3\StartSUMP2.exe
O4 - HKCU\..\Run: [NVIDIA nTune] "H:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [MsnMsgr] "H:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] H:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: MagicDisc.lnk = J:\Program Files\MagicDisc\MagicDisc.exe
O8 - Extra context menu item: Append to existing PDF - res://J:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://J:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://J:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://J:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://J:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://J:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://J:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://J:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://J:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - J:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - J:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - H:\Windows\System32\DreamScene.dll
O23 - Service: Acronis OS Selector Reinstall Service (AcronisOSSReinstallSvc) - Unknown owner - H:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - J:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - H:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - H:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - H:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: PnkBstrA - Unknown owner - H:\Windows\system32\PnkBstrA.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - J:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - J:\Program Files\Spyware Doctor\pctsSvc.exe
--
End of file - 7643 bytes
Cheers