combofix & HJT logs
Thank you. Your recommendation worked very well. Here are the two reports. There was one hiccup during the combofix process. The security suite had been disabled but upon restart (initiated by combofix) the software was re-enabled. Combofix asked it to be disabled but I had no way to access it as the desktop had no icons avail. I was afraid to abort combfix so I let it continue. It seemed to go just fine until Windows Update tried to automatically install updates (sorry, it never occurred to me this would happen). All-in-all, I'm hoping no problems created.
COMBOFIX
ComboFix 08-12-26.03 - Diane Stacey 2008-12-27 13:55:58.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.626 [GMT -5:00]
Running from: D:\combo-fix.exe.exe
AV: ESET Smart Security 3.0 *On-access scanning enabled* (Updated)
FW: ESET Personal firewall *enabled*
* Resident AV is active
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\bold.log
c:\documents and settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
c:\documents and settings\All Users\Application Data\SeekmoSA
c:\documents and settings\All Users\Application Data\SeekmoSA\SeekmoSA.dat
c:\documents and settings\All Users\Application Data\SeekmoSA\SeekmoSA_kyf.dat
c:\documents and settings\All Users\Application Data\SeekmoSA\SeekmoSAAbout.mht
c:\documents and settings\All Users\Application Data\SeekmoSA\SeekmoSAau.dat
c:\documents and settings\All Users\Application Data\SeekmoSA\SeekmoSAEULA.mht
c:\documents and settings\All Users\Start Menu\Programs\Seekmo
c:\documents and settings\All Users\Start Menu\Programs\Seekmo\Reset Cursor.lnk
c:\documents and settings\All Users\Start Menu\Programs\Seekmo\Seekmo Customer Support Center.lnk
c:\documents and settings\All Users\Start Menu\Programs\Seekmo\Seekmo Uninstall Instructions.lnk
c:\documents and settings\Diane Stacey\Application Data\gadcom
c:\documents and settings\Diane Stacey\Application Data\gadcom\gadcom.exe
c:\documents and settings\Diane Stacey\Application Data\Seekmo
c:\documents and settings\Diane Stacey\Local Settings\Temporary Internet Files\fbk.sts
c:\documents and settings\Josh Stacey\Application Data\Seekmo
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\1.sdf
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\221540.sdf
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\344stat\3607.dat
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\3893228.sdf
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\600583.sdf
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\domains.txt
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\119945
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\16204
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\17040
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\210198
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\22672
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\26656
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\32290
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\32293
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\34174
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\4576
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\459338
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\4732
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\52335
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\59844
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\64517
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\67226
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\713199
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\738022
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\745433
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\748176
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\751709
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\752522
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\753300
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\80663
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\890
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\dynamic\ustat\3607.dat
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\buttondir.txt
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\components.cdf
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\cursors.res
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\default.cdf
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_511745-514279.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_categorize.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_comparison.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_explorer-Mails.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_explorer-people.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_favorites.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_Games.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_Hide.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_Hotmail.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_hsskin.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_new.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_premium.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_searchfor.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_searchgo.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_weather.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_yellowpages.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\email-t1-bg.res
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\ie_games_icon.res
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\ie_video.res
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\keywords.idx
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\keywords1.dat
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\layout.cdf
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\sales_buttons.res
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\seekmo.res
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\seekmo_ie_menu.res
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\t2_bg.res
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\theweb.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\top7.cdf
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\Top7_theweb.mnu
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\2\tsd_bg.res
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\buttondir.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\cursors.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\default.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\email-t1-bg.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\ie_games_icon.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\ie_video.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\keywords.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\keywords1.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\layout.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\sales_buttons.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\samplegroups2.txt
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\samplegroups2.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\seekmo.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\seekmo_ie_menu.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\t2_bg.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\top7.xip
c:\documents and settings\Josh Stacey\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\tsd_bg.xip
c:\program files\Video Add-on
c:\windows\Downloaded Program Files\setup.inf
c:\windows\setup.exe
c:\windows\system32\avhigaur.dll
c:\windows\system32\axtovl.dll
c:\windows\system32\bulimane.dll
c:\windows\system32\drivers\TDSSrftc.sys
c:\windows\system32\FfgMUvut.ini
c:\windows\system32\FfgMUvut.ini2
c:\windows\system32\gadonesi.dll
c:\windows\system32\gokepave.dll
c:\windows\system32\huverego.dll
c:\windows\system32\iahqfz.dll
c:\windows\system32\jamajide.dll
c:\windows\system32\kaeqmdix.dll
c:\windows\system32\kimupabe.dll
c:\windows\system32\knupyymm.dll
c:\windows\system32\mijhvfrt.dll
c:\windows\system32\mprqqeju.dll
c:\windows\system32\nokamido.dll
c:\windows\system32\piwogome.dll
c:\windows\system32\prunnet.exe
c:\windows\system32\qwkasi.dll
c:\windows\system32\rqRLFuSl.dll
c:\windows\system32\rrkxmi.dll
c:\windows\system32\S4b5LNd2.exe.a_a
c:\windows\system32\sqwrpw.dll
c:\windows\system32\TDSSfccf.dll
c:\windows\system32\TDSSjriv.dll
c:\windows\system32\TDSSkfrm.dll
c:\windows\system32\TDSSnirj.dat
c:\windows\system32\TDSSqoaa.log
c:\windows\system32\TDSSxbad.dll
c:\windows\system32\TDSSxnmq.dll
c:\windows\system32\tuvUMgfF.dll
c:\windows\system32\vajoneyo.dll
c:\windows\system32\vyfhgylm.dll
c:\windows\system32\xcylqoqj.dll
c:\windows\system32\xxehvqap.dll
c:\windows\system32\zakawuli.dll
c:\windows\system32\zebekeli.dll
c:\windows\Tasks\rkulgred.job
c:\windows\wiaserviv.log
L:\autorun.inf
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_TDSSserv.sys
-------\Legacy_TDSSserv.sys
((((((((((((((((((((((((( Files Created from 2008-11-27 to 2008-12-27 )))))))))))))))))))))))))))))))
.
2008-12-27 14:02 . 2008-12-27 14:02 <DIR> d-------- c:\windows\LastGood
2008-12-27 10:50 . 2008-12-27 10:55 1,255,962 --ahs---- c:\windows\system32\emogowip.ini
2008-12-27 09:55 . 2008-12-27 09:55 1,299,344 --ahs---- c:\windows\system32\qrccnigs.ini
2008-12-24 19:46 . 2008-12-24 19:46 1,661,209 --ahs---- c:\windows\system32\xidmqeak.ini
2008-12-24 19:39 . 2008-12-24 19:39 <DIR> d-------- c:\documents and settings\Diane Stacey\Application Data\ESET
2008-12-24 19:38 . 2008-12-24 19:38 <DIR> d-------- c:\program files\ESET
2008-12-24 19:38 . 2008-12-24 19:38 <DIR> d-------- c:\documents and settings\All Users\Application Data\ESET
2008-12-24 19:32 . 2008-12-24 19:32 1,603,449 --ahs---- c:\windows\system32\awoweyeb.ini
2008-12-23 13:17 . 2008-12-23 14:01 1,661,218 --ahs---- c:\windows\system32\krjioqfe.ini
2008-12-23 12:26 . 2008-12-13 01:40 3,593,216 --a------ c:\windows\system32\SET5B.tmp
2008-12-23 11:17 . 2008-12-23 11:17 <DIR> d-------- c:\windows\JT3HK1PPK13JLGJ0
2008-12-23 10:07 . 2008-12-23 05:53 1,661,209 --ahs---- c:\windows\system32\edijamaj.ini
2008-12-23 05:46 . 2008-12-23 05:53 1,661,209 --ahs---- c:\windows\system32\trfvhjim.ini
2008-12-22 19:54 . 2008-12-22 20:00 1,603,449 --ahs---- c:\windows\system32\ayolozaj.ini
2008-12-22 00:41 . 2008-12-22 00:41 1,603,449 --ahs---- c:\windows\system32\edohezaj.ini
2008-12-21 17:59 . 2008-12-21 17:59 <DIR> d-------- c:\program files\Trend Micro
2008-12-21 12:40 . 2008-12-21 12:40 1,603,449 --ahs---- c:\windows\system32\umifizek.ini
2008-12-21 09:23 . 2008-12-21 09:23 <DIR> d-------- c:\documents and settings\All Users\Application Data\CrucialSoft Ltd
2008-12-21 07:49 . 2008-12-21 07:49 1,661,209 --ahs---- c:\windows\system32\mmyypunk.ini
2008-12-20 22:20 . 2008-12-20 22:20 1,603,449 --ahs---- c:\windows\system32\urijugok.ini
2008-12-20 10:21 . 2008-12-20 10:21 1,603,449 --ahs---- c:\windows\system32\ogerevuh.ini
2008-12-19 21:50 . 2008-12-19 21:50 1,603,449 --ahs---- c:\windows\system32\evapekog.ini
2008-12-19 09:51 . 2008-12-19 09:51 1,603,449 --ahs---- c:\windows\system32\obizasis.ini
2008-12-18 19:57 . 2008-12-18 19:57 1,661,209 --ahs---- c:\windows\system32\iftuvapg.ini
2008-12-18 19:54 . 2008-12-18 19:54 1,603,449 --ahs---- c:\windows\system32\isenodag.ini
2008-12-17 09:02 . 2008-12-18 19:55 1,603,449 --ahs---- c:\windows\system32\arwwpdif.ini
2008-12-16 15:12 . 2008-12-16 15:12 1,647,996 --ahs---- c:\windows\system32\wfyloylu.ini
2008-12-15 15:09 . 2008-12-16 15:10 1,647,996 --ahs---- c:\windows\system32\umstwiwq.ini
2008-12-14 12:54 . 2008-12-15 15:01 1,647,997 --ahs---- c:\windows\system32\gjdkaevr.ini
2008-12-13 12:55 . 2008-12-13 12:55 1,647,120 --ahs---- c:\windows\system32\gimficfk.ini
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-27 19:02 --------- d-----w c:\documents and settings\Diane Stacey\Application Data\mjusbsp
2008-12-24 23:21 --------- d-----w c:\program files\Veoh Networks
2008-12-24 23:19 --------- d-----w c:\program files\DivX
2008-12-12 00:07 --------- d-----w c:\program files\America Online 9.0
2008-11-29 02:13 --------- d-----w c:\documents and settings\Diane Stacey\Application Data\Move Networks
2008-11-19 22:34 --------- d-----w c:\documents and settings\All Users\Application Data\AOL
2008-11-14 13:15 --------- d-----w c:\documents and settings\Diane Stacey\Application Data\Sony Corporation
2008-11-10 11:08 --------- d-----w c:\documents and settings\All Users\Application Data\HP Product Assistant
2008-10-31 17:39 --------- d--h--w c:\program files\Zero G Registry
2008-10-31 17:39 --------- d-----w c:\program files\IHMC CmapTools
2008-10-31 17:39 --------- d-----w c:\documents and settings\Diane Stacey\Application Data\CmapTools
2008-09-23 12:53 80,896 --sha-w c:\windows\system32\jakejoki.dll
2008-08-30 14:21 32,768 -csha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008083020080831\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EA756889-2338-43DB-8F07-D1CA6FB9C90D}"= "c:\program files\AOL\AOL Toolbar 5.0\aoltb.dll" [2007-05-17 1025584]
[HKEY_CLASSES_ROOT\clsid\{ea756889-2338-43db-8f07-d1ca6fb9c90d}]
[HKEY_CLASSES_ROOT\AOLTB.AOLTBSearch.1]
[HKEY_CLASSES_ROOT\TypeLib\{371A6A18-2D6A-4DF8-A4AA-61CA349B3C70}]
[HKEY_CLASSES_ROOT\AOLTB.AOLTBSearch]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-13 1695232]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-28 68856]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 204288]
"cdloader"="c:\documents and settings\Diane Stacey\Application Data\mjusbsp\cdloader2.exe" [2008-12-17 50520]
"Veoh"="c:\program files\Veoh Networks\Veoh\VeohClient.exe" [2008-08-28 3660848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-22 339968]
"VAIO Recovery"="c:\windows\Sonysys\VAIO Recovery\PartSeal.exe" [2003-04-19 28672]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2005-06-17 139264]
"VAIO Update 2"="c:\program files\Sony\VAIO Update 2\VAIOUpdt.exe" [2005-01-14 151552]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-08-09 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-08-09 81920]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-07-19 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-07-19 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-07-19 114688]
"PartSeal"="c:\windows\Sonysys\VAIO Recovery\PartSeal.exe" [2003-04-19 28672]
"HostManager"="c:\program files\Common Files\AOL\1188180461\ee\AOLSoftware.exe" [2006-03-10 48280]
"AOLDialer"="c:\program files\Common Files\AOL\ACS\AOLDial.exe" [2004-10-20 34904]
"RealTray"="c:\program files\Real\RealPlayer\RealPlay.exe" [2007-08-26 26112]
"Pure Networks Port Magic"="c:\progra~1\PURENE~1\PORTMA~1\PortAOL.exe" [2004-04-05 99480]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-09 63712]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-09-03 111936]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-09-10 289576]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2008-10-24 1451264]
"AGRSMMSG"="AGRSMMSG.exe" [2004-10-08 c:\windows\AGRSMMSG.exe]
c:\documents and settings\Josh Stacey\Start Menu\Programs\Startup\
VirtuaGirl HD.LNK - c:\program files\vghd\vghd.exe [2007-11-30 11773248]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-08-31 288472]
HP Photosmart Premier Fast Start.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2006-02-10 73728]
SpySubtract.lnk - c:\program files\InterMute\SpySubtract\SpySub.exe [2007-08-26 1187840]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.dvsd"= c:\progra~1\COMMON~1\SONYSH~1\VideoLib\sonydv.dll
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"=
"c:\\Program Files\\America Online 9.0\\waol.exe"=
"c:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltsmon.exe"=
"c:\\Program Files\\Common Files\\AOL\\TopSpeed\\2.0\\aoltpspd.exe"=
"c:\\Program Files\\Common Files\\AOL\\1188180461\\EE\\AOLServiceHost.exe"=
"c:\\Program Files\\Common Files\\AOL\\System Information\\sinf.exe"=
"c:\\Program Files\\Common Files\\AolCoach\\en_en\\player\\AOLNySEV.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft SQL Server\\MSSQL$VAIO_VEDB\\Binn\\sqlservr.exe"=
"c:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
"c:\\Documents and Settings\\Diane Stacey\\Application Data\\mjusbsp\\magicJack.exe"=
R2 ekrn;Eset Service;"c:\program files\ESET\ESET Smart Security\ekrn.exe" [2008-10-24 468224]
R2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB;c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB []
S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB;c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB []
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
\Shell\AutoRun\command - K:\autorun.exe
\Shell\phone\command - K:\autorun.exe
.
Contents of the 'Scheduled Tasks' folder
2008-12-23 c:\windows\Tasks\AOL Spyware Protection.job
- c:\progra~1\COMMON~1\AOL\Launch\AOLLAU~1.EXE []
2008-12-20 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
2008-12-23 c:\windows\Tasks\At1.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-21 c:\windows\Tasks\At10.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-27 c:\windows\Tasks\At11.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-19 c:\windows\Tasks\At12.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At13.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At14.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At15.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At16.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At17.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-20 c:\windows\Tasks\At18.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-21 c:\windows\Tasks\At19.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At2.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-22 c:\windows\Tasks\At20.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-25 c:\windows\Tasks\At21.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-25 c:\windows\Tasks\At22.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-25 c:\windows\Tasks\At23.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At24.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At3.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At4.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At5.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At6.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At7.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At8.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-23 c:\windows\Tasks\At9.job
- c:\windows\system32\S4b5LNd2.exe []
2008-12-20 c:\windows\Tasks\Disk Cleanup.job
- c:\windows\system32\cleanmgr.exe [2008-04-13 19:12]
2008-12-20 c:\windows\Tasks\Utility Manager.job
- c:\windows\system32\utilman.exe [2008-04-13 19:12]
.
- - - - ORPHANS REMOVED - - - -
BHO-{540e8e85-ae0c-4095-93d8-1aaeb06c8812} - c:\windows\system32\vajoneyo.dll
BHO-{cff80b2b-a793-4085-8632-e8e960d500e3} - c:\windows\system32\sqwrpw.dll
BHO-{F8DBF988-13E8-4515-9B21-224E7837F622} - c:\windows\system32\tuvUMgfF.dll
Toolbar-{F06E2ABE-3A50-4079-BE25-FC100D9EAA25} - c:\program files\Video ActiveX Access\iesbpl.dll
Toolbar-{07AA283A-43D7-4CBE-A064-32A21112D94D} - (no file)
WebBrowser-{07AA283A-43D7-4CBE-A064-32A21112D94D} - (no file)
HKCU-Run-prunnet - c:\windows\system32\prunnet.exe
HKLM-Run-AOLAspSunset2 - c:\documents and settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\updates\aspapp\sunsetAsp2.exe
HKLM-Run-prunnet - c:\windows\system32\prunnet.exe
ShellExecuteHooks-{FA010552-4A27-4cb1-A1BB-3E2D697F1639} - (no file)
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.aol.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &AOL Toolbar Search - c:\program files\aol\aol toolbar 5.0\resources\en-US\local\search.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
IE: Transfer by Image Converter 2 - c:\program files\Sony\Image Converter 2\menu.htm
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-12-27 14:03:12
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\AOL\ACS\AOLacsd.exe
c:\program files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe
c:\program files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\ehome\ehrecvr.exe
c:\windows\ehome\ehSched.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
c:\program files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
c:\program files\Sony\Sony TV Tuner Library\SMceMan.exe
c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
c:\windows\ehome\mcrdsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
c:\windows\system32\dllhost.exe
c:\program files\Sony\Sony TV Tuner Library\RM_SV.exe
c:\windows\ehome\ehmsas.exe
c:\program files\HP\Digital Imaging\bin\hpqimzone.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Common Files\AOL\1188180461\EE\services\antiSpywareApp\ver2_0_32_1\AOLSP Scheduler.exe
c:\program files\HP\Digital Imaging\bin\hpqste08.exe
c:\documents and settings\Diane Stacey\Application Data\mjusbsp\st00000\mjsetup.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-12-27 14:05:01 - machine was rebooted
ComboFix-quarantined-files.txt 2008-12-27 19:04:58
Pre-Run: 287,617,646,592 bytes free
Post-Run: 292,836,065,280 bytes free
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect
435 --- E O F --- 2008-12-27 19:03:07
--------------------------------------------------------------------------
HIJACK THIS
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:06:06 PM, on 12/27/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\AOL\1188180461\ee\AOLSoftware.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\InterMute\SpySubtract\SpySub.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\program files\common files\aol\1188180461\ee\services\antiSpywareApp\ver2_0_32_1\AOLSP Scheduler.exe
c:\program files\common files\aol\1188180461\ee\aolsoftware.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Documents and Settings\Diane Stacey\Application Data\mjusbsp\st00000\mjsetup.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [PartSeal] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1188180461\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [Pure Networks Port Magic] "C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe" -Run
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [cdloader] "C:\Documents and Settings\Diane Stacey\Application Data\mjusbsp\cdloader2.exe" MAGICJACK
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: SpySubtract.lnk = C:\Program Files\InterMute\SpySubtract\SpySub.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 5.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Transfer by Image Converter 2 - C:\Program Files\Sony\Image Converter 2\menu.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) -
http://ipgweb.cce.hp.com/rdqaio/downloads/sysinfo.cab
O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController Control) -
http://h30155.www3.hp.com/ediags/dd/install/HPInstallMgr_v01_6.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) -
http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1188264630484
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: McAfee Real-time Scanner (McShield) - Unknown owner - C:\Program Files\McAfee\VirusScan\McShield.exe (file missing)
O23 - Service: McAfee SystemGuards (McSysmon) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SonicStageMonitoring - Sony Corporation - C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\halsv.exe
O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
O23 - Service: Sony TVTA Manager - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
--
End of file - 14400 bytes
