info.txt:
info.txt logfile of random's system information tool 1.04 2008-10-23 12:49:28
======Uninstall list======
-->MsiExec.exe /I{71EEA108-09C9-4D81-8FA2-D48C70681242}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
Adobe Shockwave Player-->C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
BitDefender Internet Security 2008-->MsiExec.exe /I{BF7D87C5-CFC3-40C5-A367-24586EEBB8CA}
CyberPower Audio Editing Lab 12.9-->"C:\Program Files\CyberPower Audio Editing Lab\unins000.exe"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Linksys Wireless-N USB Network Adapter WUSB300N-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DCD3471D-4DDA-4DC2-8B9F-A662D0C362AC}\setup.exe" -l0x9
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Age of Empires-->C:\Program Files\Microsoft Games\Age of Empires\Uninstal.exe /uninstall
Microsoft Office 2000 Disc 2-->MsiExec.exe /I{00040409-78E1-11D2-B60F-006097C998E7}
Microsoft Office Access MUI (English) 2007-->MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE}
Microsoft Office Access Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE}
Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Outlook MUI (English) 2007-->MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office Professional 2007 Trial-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROR /dll OSETUP.DLL
Microsoft Office Professional 2007-->MsiExec.exe /X{91120000-0014-0000-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Publisher MUI (English) 2007-->MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Mozilla Firefox (2.0.0.17)-->K:\System\Apps\3C9F7B3F-D55C-42cd-8537-B878518B73AF\Exec\firefox\uninstall\helper.exe
Mozilla Firefox (3.0.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe"
QuickBooks Premier: Nonprofit Edition 2007-->msiexec.exe /I {71EEA108-09C9-4D81-8FA2-D48C70681242} UNIQUE_NAME="nonprofit" QBFULLNAME="QuickBooks Premier: Nonprofit Edition 2007" ADDREMOVE=1
QuickBooks Product Listing Service-->MsiExec.exe /I{91208A47-5D08-4C79-986F-1931940F51BB}
RegAlyzer-->"C:\Program Files\Safer Networking\RegAlyzer\unins000.exe"
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB955936)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {1D94099C-2BBA-440E-BD5E-093BBDF8F028}
Security Update for Microsoft Office Excel 2007 (KB955470)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {6E8637D8-10D6-4568-AA06-E2706F31685E}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB951808)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {8F375E11-4FD6-4B89-9E2B-A76D48B51E00}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office Word 2007 (KB950113)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {AD72BABE-C733-4FCF-9674-4314466191B9}
Security Update for Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Security Update for Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Smart Budget-->MsiExec.exe /I{03219BA9-3753-4B20-B088-9082C76E16D5}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
SupportSoft Assisted Service-->MsiExec.exe /I{5A3F6A80-7913-475E-8B96-477A952CFA43}
TurboTax Deluxe 2007-->C:\Program Files\TurboTax\Deluxe 2007\TaxUnst.EXE "C:\Program Files\TurboTax\Deluxe 2007\Uninstall.log" -NoGui
Unlocker 1.8.5-->C:\Program Files\Unlocker\uninst.exe
Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
Update for Office 2007 (KB946691)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Update for Outlook 2007 Junk Email Filter (kb957258)-->msiexec /package {91120000-0014-0000-0000-0000000FF1CE} /uninstall {E070CDA4-A8DD-47FA-89A0-F5DA5D5DDFF9}
Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Update for Windows XP (KB953356)-->"C:\WINDOWS\$NtUninstallKB953356$\spuninst\spuninst.exe"
Windows Defender-->MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Yahoo! Browser Services-->C:\PROGRA~1\Yahoo!\Common\UNIN_Y~1.EXE /S
Yahoo! Internet Mail-->C:\WINDOWS\system32\regsvr32 /u /s C:\PROGRA~1\Yahoo!\Common\YMMAPI.dll
=====HijackThis Backups=====
O2 - BHO: (no name) - {DEEE7F12-92D7-4605-A90E-36B49D844CD7} - C:\WINDOWS\system32\mllml.dll (file missing)
O2 - BHO: (no name) - {DCD53738-C4F9-414A-A03C-C7405A4AC844} - C:\WINDOWS\system32\yayxywt.dll (file missing)
O2 - BHO: (no name) - {4311AD61-38F5-4627-F8CE-61A396F9F0CA} - C:\WINDOWS\system32\qlf.dll (file missing)
O2 - BHO: (no name) - {9E51510C-F8BF-42DD-AEE8-E72FE0CF94DA} - C:\WINDOWS\system32\compob.dll
O2 - BHO: (no name) - {BE90A72A-31CF-174C-EA5D-4F761E3B07B0} - C:\WINDOWS\system32\itblh.dll (file missing)
O2 - BHO: (no name) - {b7f0fe74-6679-4a65-8f84-dcc3899155ff} - C:\WINDOWS\system32\xjegktl.dll (file missing)
O2 - BHO: {0dc532d5-7751-8459-6c84-d9a827e084ee} - {ee480e72-8a9d-48c6-9548-15775d235cd0} - C:\WINDOWS\system32\oebdefji.dll
O2 - BHO: (no name) - {A00D8EC8-A50C-4662-88FC-F48DAB390707} - C:\WINDOWS\system32\hjwkyepk.dll
O2 - BHO: 0 - {977DADA3-AB23-46FC-51B6-07F9B8F26610} - C:\Program Files\Internet Explorer\quja727.dll (file missing)
O2 - BHO: (no name) - {326E9696-5055-7F8E-5761-5B00BCC988CB} - C:\WINDOWS\system32\jxalxa.dll
O2 - BHO: (no name) - {9E51510C-F8BF-42DD-AEE8-E72FE0CF94DA} - C:\WINDOWS\system32\compob.dll
O2 - BHO: (no name) - {9E51510C-F8BF-42DD-AEE8-E72FE0CF94DA} - C:\WINDOWS\system32\compob.dll
O15 - Trusted Zone: *.errorprotector.com
O15 - Trusted Zone: *.winantispyware.com
O4 - HKCU\..\Run: [Gcp] C:\WINDOWS\system32\?ystem\s?ool32.exe
O15 - Trusted Zone: *.drivecleaner.com
O15 - Trusted Zone: *.amaena.com
O15 - Trusted Zone: *.systemdoctor.com
O15 - Trusted Zone: *.errorsafe.com
O15 - Trusted Zone: *.winfixer.com
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html
O4 - HKCU\..\Run: [WinPop] C:\Program Files\WinPop\winpop.exe
O4 - Startup: TA_Start.lnk = C:\Documents and Settings\Owner\Local Settings\Temp\thinksnet.exe
O15 - Trusted Zone: *.winantivirus.com
O4 - HKLM\..\Run: [{35-56-6E-EF-ZN}] C:\DOCUME~1\Owner\LOCALS~1\Temp\thinksnet.exe CHD003
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O4 - HKCU\..\Run: [Usrr] "C:\DOCUME~1\Owner\APPLIC~1\SSEMBL~1\lsass.exe" -vt ndrv
O4 - HKLM\..\Run: [NI.UWAS6_0001_N91M1508] "C:\DOCUME~1\Chase\LOCALS~1\Temp\winaspsnet.exe" -nag
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://download.games.yahoo.com/games/web_games/popcap/chuzzle/popcaploader_v6.cab
O2 - BHO: (no name) - {9E51510C-F8BF-42DD-AEE8-E72FE0CF94DA} - C:\WINDOWS\system32\compob.dll
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O20 - Winlogon Notify: pmnno - C:\WINDOWS\system32\pmnno.dll (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\tkswyojp.exe (file missing)
O20 - Winlogon Notify: mllml - C:\WINDOWS\system32\mllml.dll (file missing)
O20 - Winlogon Notify: yayxywt - yayxywt.dll (file missing)
O2 - BHO: (no name) - {9E51510C-F8BF-42DD-AEE8-E72FE0CF94DA} - C:\WINDOWS\system32\compob.dll
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
O2 - BHO: (no name) - {6CF0A05E-7D6B-4E00-B836-B3F23513657C} - C:\WINDOWS\system32\cbXPiGww.dll
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll (file missing)
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O21 - SSODL: fdxbameg - {E920C2C8-7848-430B-A473-A3E5A473CDC2} - C:\WINDOWS\fdxbameg.dll
O3 - Toolbar: (no name) - {83B3FEA7-601A-4BB0-8D74-A819069A4CFA} - (no file)
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O2 - BHO: QXK Olive - {DACA1E5E-6969-4475-B758-986E883CF152} - C:\WINDOWS\wbxdpgfeqod.dll
O21 - SSODL: fsrpknov - {FDA8F291-401E-4B8D-B4E8-D834536F0570} - C:\WINDOWS\fsrpknov.dll
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
O21 - SSODL: fsrpknov - {4FD6C07C-F1C6-41BE-B876-59B9D9B9DF08} - C:\WINDOWS\fsrpknov.dll (file missing)
O2 - BHO: (no name) - {6CF0A05E-7D6B-4E00-B836-B3F23513657C} - C:\WINDOWS\system32\cbXPiGww.dll (file missing)
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O2 - BHO: (no name) - {9E51510C-F8BF-42DD-AEE8-E72FE0CF94DA} - C:\WINDOWS\system32\compob.dll
O2 - BHO: (no name) - {9E51510C-F8BF-42DD-AEE8-E72FE0CF94DA} - C:\WINDOWS\system32\compob.dll
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O20 - Winlogon Notify: cbXPiGww - cbXPiGww.dll (file missing)
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/
O2 - BHO: (no name) - {9E51510C-F8BF-42DD-AEE8-E72FE0CF94DA} - (no file)
======Hosts File======
127.0.0.1
www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1
www.008k.com
127.0.0.1 008k.com
127.0.0.1
www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1
www.032439.com
127.0.0.1 032439.com
======Security center information======
AV: Bitdefender Antivirus
FW: Bitdefender Firewall
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\QuickTime\QTSystem
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 10 Stepping 0, AuthenticAMD
"PROCESSOR_REVISION"=0a00
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"CLASSPATH"=.;C:\Program Files\Java\j2re1.4.2\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\j2re1.4.2\lib\ext\QTJava.zip
-----------------EOF-----------------
log.txt:
Logfile of random's system information tool 1.04 (written by random/random)
Run by Owner at 2008-10-23 12:48:29
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 86 GB (56%) free of 153 GB
Total RAM: 703 MB (28% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:48 PM, on 10/23/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Linksys\WUSB300N\WLService.exe
C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Linksys\WUSB300N\WUSB300N.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\Office\WINWORD.EXE
C:\Documents and Settings\Owner\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Owner.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://windowsupdate.microsoft.com/
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: QuickBooks Database Manager Service (QBCFMonitorService) - - C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: WUSB300NSvc - Unknown owner - C:\Program Files\Linksys\WUSB300N\WLService.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe
--
End of file - 7174 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{381FFDE8-2394-4f90-B10D-FC6124A40F8C} - BitDefender Toolbar - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll [2008-02-28 86016]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2004-03-03 2904064]
"CHotkey"=C:\WINDOWS\zHotkey.exe [2004-05-17 543232]
"SunKistEM"=C:\Program Files\Digital Media Reader\shwiconem.exe [2004-03-11 135168]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-12-15 49152]
"BitDefender Antiphishing Helper"=C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe [2007-10-09 61440]
"BDAgent"=C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe [2008-09-15 368640]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"nwiz"=nwiz.exe /install []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Picasa Media Detector"=C:\Program Files\Picasa2\PicasaMediaDetector.exe [2007-10-23 443968]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-09-16 1833296]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
C:\PROGRA~1\COMMON~1\Intuit\QUICKB~1\QBUpdate\qbupdate.exe [2006-11-29 968224]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Bonjour Service"=2
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-05-03 61440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{6CF0A05E-7D6B-4E00-B836-B3F23513657C}"= []
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WINDOW~4\MpShHook.dll [2006-11-03 83224]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
C:\WINDOWS\system32\hjwkyepk.dll
"notification packages"=
scecli
scecli
scecli
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispCPL"=0
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoToolbarCustomize"=1
"NoDrives"=12
"StartMenuLogoff"=1
"NoStartMenuMorePrograms"=0
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe"="C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:*:Enabled:Adobe Version Cue CS3 Server"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:javaw"
"C:\WINDOWS\system32\wfikftdo.exe"="C:\WINDOWS\system32\wfi"
"C:\WINDOWS\system32\tkswyojp.exe"="C:\WINDOWS\system32\tks"
"C:\Program Files\TurboTax\Deluxe 2007\32bit\ttax.exe"="C:\Program Files\TurboTax\Deluxe 2007\32bit\ttax.exe:LocalSubNet:Enabled:TurboTax"
"C:\Program Files\TurboTax\Deluxe 2007\32bit\updatemgr.exe"="C:\Program Files\TurboTax\Deluxe 2007\32bit\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager"
"C:\Program Files\Intuit\QuickBooks 2007\QBDBMgrN.exe"="C:\Program Files\Intuit\QuickBooks 2007\QBDBMgrN.exe:*:Enabled:QuickBooks 2007 Data Manager"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Microsoft Games\Age of Empires\Empires.exe"="C:\Program Files\Microsoft Games\Age of Empires\Empires.exe:*:Enabled:Age of Empires"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*
isabled
xpsp2res.dll,-22019"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled
xpsp2res.dll,-22019"
"C:\Documents and Settings\Owner\Application Data\U3\0D61395161D38A27\020BD180-AF7E-413C-9635-CFA208B739AF\Exec\Xfire.exe"="C:\Documents and Settings\Owner\Application Data\U3\0D61395161D38A27\020BD180-AF7E-413C-9635-CFA208B739AF\Exec\Xfire.exe:*:Enabled:Xfire"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled
xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled
xpsp2res.dll,-22019"
"C:\Program Files\AIM\aim.exe"="C:\Program Files\AIM\aim.exe:*:Enabled:AOL Instant Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled
xpsp3res.dll,-20000"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e12c4441-089b-11dc-a034-806d6172696f}]
shell\AutoRun\command - D:\aoesetup.exe
shell\dxsetup\command - D:\directx\dxsetup.exe
shell\ie30\command - D:\goodies\ie30295.exe
shell\ie30nt\command - D:\goodies\ie302nt.exe
shell\msinfo\command - D:\goodies\msinfo\msinfo32.exe
shell\setup\command - D:\aoesetup.exe
======File associations======
.js - open - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"
======List of files/folders created in the last 1 months======
2008-10-23 12:48:29 ----D---- C:\rsit
2008-10-19 09:55:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2008-10-18 15:19:14 ----D---- C:\WINDOWS\Prefetch
2008-10-18 12:35:44 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-10-18 12:35:35 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-10-18 12:35:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-10-18 12:35:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956390$
2008-10-18 12:35:07 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-10-18 12:34:55 ----HDC---- C:\WINDOWS\$NtUninstallKB953838$
2008-10-18 12:34:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-10-18 12:34:37 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-10-18 12:34:28 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-10-18 12:34:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-10-18 12:34:14 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-10-18 12:34:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2008-10-18 12:33:57 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-10-18 12:33:49 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-10-18 12:33:42 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-10-18 12:33:31 ----HDC---- C:\WINDOWS\$NtUninstallKB950759$
2008-10-18 12:33:24 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-10-18 12:33:17 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-10-18 12:13:32 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2008-10-15 03:06:37 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2008-10-15 03:06:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-10-15 03:06:17 ----HDC---- C:\WINDOWS\$NtUninstallKB957095_0$
2008-10-15 03:06:05 ----HDC---- C:\WINDOWS\$NtUninstallKB954211_0$
2008-10-15 03:05:40 ----HDC---- C:\WINDOWS\$NtUninstallKB956841_0$
2008-10-15 03:03:09 ----HDC---- C:\WINDOWS\$NtUninstallKB956390_0$
2008-10-08 21:20:08 ----A---- C:\WINDOWS\system32\qmgr.dll
2008-10-08 21:20:02 ----A---- C:\WINDOWS\system32\xpsp2res.dll
2008-10-08 21:18:48 ----A---- C:\WINDOWS\system32\comdlg32.dll
2008-10-08 21:18:48 ----A---- C:\WINDOWS\system32\comctl32.dll
2008-10-08 21:18:48 ----A---- C:\WINDOWS\system32\cmd.exe
2008-10-08 21:18:48 ----A---- C:\WINDOWS\system32\cacls.exe
2008-10-08 21:18:48 ----A---- C:\WINDOWS\system32\autoconv.exe
2008-10-08 21:18:48 ----A---- C:\WINDOWS\system32\autochk.exe
2008-10-08 21:18:48 ----A---- C:\WINDOWS\system32\advapi32.dll
2008-10-08 21:18:47 ----A---- C:\WINDOWS\system32\locator.exe
2008-10-08 21:18:47 ----A---- C:\WINDOWS\system32\localspl.dll
2008-10-08 21:18:47 ----A---- C:\WINDOWS\system32\lmhsvc.dll
2008-10-08 21:18:47 ----A---- C:\WINDOWS\system32\kernel32.dll
2008-10-08 21:18:47 ----A---- C:\WINDOWS\system32\imagehlp.dll
2008-10-08 21:18:47 ----A---- C:\WINDOWS\system32\ftp.exe
2008-10-08 21:18:47 ----A---- C:\WINDOWS\system32\format.com
2008-10-08 21:18:47 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2008-10-08 21:18:47 ----A---- C:\WINDOWS\system32\csrsrv.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\rasauto.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\rasapi32.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\printui.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\perfctrs.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\olecnv32.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\oleaut32.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\nwprovau.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\ntvdm.exe
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\ntprint.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\ntlsapi.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\ntdll.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\nslookup.exe
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\msv1_0.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\msgsvc.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\mgmtapi.dll
2008-10-08 21:18:46 ----A---- C:\WINDOWS\system32\lsasrv.dll
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\srvsvc.dll
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\smss.exe
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\setupapi.dll
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\sessmgr.exe
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\services.exe
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\schannel.dll
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\scardsvr.exe
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\savedump.exe
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\samsrv.dll
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\samlib.dll
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\rshx32.dll
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\rastapi.dll
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\rasman.dll
2008-10-08 21:18:45 ----A---- C:\WINDOWS\system32\rasdlg.dll
2008-10-08 21:18:44 ----A---- C:\WINDOWS\system32\wkssvc.dll
2008-10-08 21:18:44 ----A---- C:\WINDOWS\system32\win32spl.dll
2008-10-08 21:18:44 ----A---- C:\WINDOWS\system32\userinit.exe
2008-10-08 21:18:44 ----A---- C:\WINDOWS\system32\untfs.dll
2008-10-08 21:18:44 ----A---- C:\WINDOWS\system32\ulib.dll
2008-10-08 21:18:44 ----A---- C:\WINDOWS\system32\tcpmonui.dll
2008-10-08 21:18:44 ----A---- C:\WINDOWS\system32\syssetup.dll
2008-10-08 21:18:37 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2008-10-08 21:18:37 ----A---- C:\WINDOWS\system32\HAL.DLL
2008-10-08 21:18:36 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2008-10-08 20:11:05 ----D---- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2008-10-08 19:47:12 ----A---- C:\WINDOWS\system32\xfcodec.dll
2008-10-08 19:31:09 ----D---- C:\WINDOWS\system32\scripting
2008-10-08 19:31:06 ----D---- C:\WINDOWS\l2schemas
2008-10-08 19:31:05 ----D---- C:\WINDOWS\system32\en
2008-10-08 19:31:05 ----D---- C:\Program Files\msn
2008-10-08 19:22:17 ----D---- C:\WINDOWS\network diagnostic
2008-10-08 19:17:50 ----N---- C:\WINDOWS\system32\_003799_.tmp.dll
2008-10-08 19:17:40 ----N---- C:\WINDOWS\system32\_003798_.tmp.dll
2008-10-08 19:16:20 ----N---- C:\WINDOWS\system32\_003796_.tmp.dll
2008-10-08 19:16:19 ----N---- C:\WINDOWS\system32\_003791_.tmp.dll
2008-10-08 19:16:19 ----N---- C:\WINDOWS\system32\_003790_.tmp.dll
2008-10-08 19:16:18 ----N---- C:\WINDOWS\system32\_003789_.tmp.dll
2008-10-08 19:16:18 ----N---- C:\WINDOWS\system32\_003788_.tmp.dll
2008-10-08 19:16:18 ----N---- C:\WINDOWS\system32\_003787_.tmp.dll
2008-10-08 19:16:18 ----N---- C:\WINDOWS\system32\_003784_.tmp.dll
2008-10-08 19:16:17 ----N---- C:\WINDOWS\system32\_003783_.tmp.dll
2008-10-08 19:16:17 ----N---- C:\WINDOWS\system32\_003782_.tmp.dll
2008-10-08 19:16:17 ----N---- C:\WINDOWS\system32\_003781_.tmp.dll
2008-10-08 19:16:16 ----N---- C:\WINDOWS\system32\_003779_.tmp.dll
2008-10-08 19:16:16 ----N---- C:\WINDOWS\system32\_003778_.tmp.dll
2008-10-08 19:16:16 ----N---- C:\WINDOWS\system32\_003776_.tmp.dll
2008-10-08 19:16:15 ----N---- C:\WINDOWS\system32\_003774_.tmp.dll
2008-10-08 19:16:15 ----N---- C:\WINDOWS\system32\_003773_.tmp.dll
2008-10-08 19:16:14 ----N---- C:\WINDOWS\system32\_003769_.tmp.dll
2008-10-08 19:16:14 ----N---- C:\WINDOWS\system32\_003768_.tmp.dll
2008-10-08 19:16:13 ----N---- C:\WINDOWS\system32\_003765_.tmp.dll
2008-10-08 19:16:13 ----N---- C:\WINDOWS\system32\_003763_.tmp.dll
2008-10-08 19:16:13 ----N---- C:\WINDOWS\system32\_003762_.tmp.dll
2008-10-08 19:16:13 ----N---- C:\WINDOWS\system32\_003761_.tmp.dll
2008-10-08 19:16:13 ----N---- C:\WINDOWS\system32\_003759_.tmp.dll
2008-10-08 19:16:12 ----N---- C:\WINDOWS\system32\_003758_.tmp.dll
2008-10-08 19:16:12 ----N---- C:\WINDOWS\system32\_003755_.tmp.dll
2008-10-08 19:16:12 ----N---- C:\WINDOWS\system32\_003754_.tmp.dll
2008-10-08 19:16:11 ----N---- C:\WINDOWS\system32\_003752_.tmp.dll
2008-10-08 19:16:11 ----N---- C:\WINDOWS\system32\_003751_.tmp.dll
2008-10-08 19:16:11 ----N---- C:\WINDOWS\system32\_003750_.tmp.dll
2008-10-08 19:16:09 ----N---- C:\WINDOWS\system32\_003743_.tmp.dll
2008-10-08 19:16:09 ----N---- C:\WINDOWS\system32\_003742_.tmp.dll
2008-10-08 19:16:09 ----N---- C:\WINDOWS\system32\_003741_.tmp.dll
2008-10-08 19:16:09 ----N---- C:\WINDOWS\system32\_003740_.tmp.dll
2008-10-05 13:34:54 ----A---- C:\WINDOWS\zip.exe
2008-10-05 13:34:54 ----A---- C:\WINDOWS\VFind.exe
2008-10-05 13:34:54 ----A---- C:\WINDOWS\swxcacls.exe
2008-10-05 13:34:54 ----A---- C:\WINDOWS\SWSC.exe
2008-10-05 13:34:54 ----A---- C:\WINDOWS\SWREG.exe
2008-10-05 13:34:54 ----A---- C:\WINDOWS\sed.exe
2008-10-05 13:34:54 ----A---- C:\WINDOWS\Nircmd.exe
2008-10-05 13:34:54 ----A---- C:\WINDOWS\grep.exe
2008-10-05 13:34:54 ----A---- C:\WINDOWS\fdsv.exe
2008-10-05 13:34:46 ----D---- C:\ComboFix
2008-10-05 13:34:45 ----A---- C:\WINDOWS\system32\CF9719.exe
2008-10-05 12:18:59 ----D---- C:\Program Files\Safer Networking
2008-10-05 05:44:51 ----D---- C:\WINDOWS\pss
2008-10-05 04:45:14 ----D---- C:\WINDOWS\system32\NtmsData
2008-10-05 04:19:39 ----D---- C:\getservice
2008-10-05 00:32:58 ----D---- C:\Program Files\Spybot - Search & Destroy
2008-10-05 00:32:58 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
======List of files/folders modified in the last 1 months======
2008-10-23 12:48:33 ----D---- C:\WINDOWS\temp
2008-10-23 12:36:11 ----D---- C:\WINDOWS\system32
2008-10-23 12:10:01 ----A---- C:\test.txt
2008-10-23 11:17:33 ----SHD---- C:\WINDOWS\Installer
2008-10-23 10:10:45 ----D---- C:\Program Files\Mozilla Firefox
2008-10-22 13:36:40 ----D---- C:\Documents and Settings\Owner\Application Data\U3
2008-10-22 08:15:18 ----D---- C:\WINDOWS\system32\CatRoot2
2008-10-22 08:07:43 ----SD---- C:\WINDOWS\Tasks
2008-10-22 08:03:52 ----D---- C:\WINDOWS
2008-10-22 00:04:04 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-10-22 00:03:54 ----A---- C:\WINDOWS\bdagent.INI
2008-10-21 21:52:33 ----HD---- C:\WINDOWS\inf
2008-10-21 13:25:16 ----D---- C:\Program Files\Microsoft Silverlight
2008-10-21 03:00:53 ----HD---- C:\Config.Msi
2008-10-19 09:55:38 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-10-19 04:47:33 ----HD---- C:\WINDOWS\$hf_mig$
2008-10-18 15:23:16 ----A---- C:\WINDOWS\OEWABLog.txt
2008-10-18 15:21:58 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-10-18 15:19:34 ----A---- C:\WINDOWS\setuplog.txt
2008-10-18 15:18:40 ----D---- C:\WINDOWS\system32\Setup
2008-10-18 15:18:39 ----D---- C:\WINDOWS\system32\wbem
2008-10-18 15:18:39 ----D---- C:\WINDOWS\AppPatch
2008-10-18 15:18:37 ----RSD---- C:\WINDOWS\Fonts
2008-10-18 15:18:26 ----D---- C:\WINDOWS\system32\drivers
2008-10-18 12:39:02 ----D---- C:\WINDOWS\security
2008-10-18 12:36:39 ----D---- C:\WINDOWS\system32\CatRoot
2008-10-18 12:35:48 ----A---- C:\WINDOWS\imsins.BAK
2008-10-18 12:33:25 ----D---- C:\Program Files\Messenger
2008-10-18 12:28:39 ----D---- C:\WINDOWS\WinSxS
2008-10-18 12:28:29 ----D---- C:\WINDOWS\ServicePackFiles
2008-10-18 12:28:26 ----D---- C:\WINDOWS\ime
2008-10-18 12:28:25 ----D---- C:\WINDOWS\Help
2008-10-18 12:28:02 ----D---- C:\WINDOWS\system32\usmt
2008-10-18 12:28:02 ----D---- C:\WINDOWS\system32\en-us
2008-10-18 12:27:58 ----D---- C:\Program Files\Internet Explorer
2008-10-18 12:27:56 ----D---- C:\WINDOWS\system32\bits
2008-10-18 12:27:55 ----D---- C:\WINDOWS\peernet
2008-10-18 12:27:55 ----D---- C:\Program Files\Movie Maker
2008-10-18 12:22:43 ----D---- C:\WINDOWS\system32\Restore
2008-10-18 12:22:42 ----D---- C:\WINDOWS\system32\npp
2008-10-18 12:22:37 ----D---- C:\WINDOWS\msagent
2008-10-18 12:22:33 ----D---- C:\WINDOWS\srchasst
2008-10-18 12:22:32 ----D---- C:\Program Files\NetMeeting
2008-10-18 12:22:29 ----D---- C:\WINDOWS\system32\Com
2008-10-18 12:22:26 ----D---- C:\Program Files\Windows Media Player
2008-10-18 12:22:25 ----D---- C:\Program Files\Windows NT
2008-10-18 12:22:25 ----D---- C:\Program Files\Outlook Express
2008-10-18 12:22:20 ----D---- C:\Program Files\Common Files\System
2008-10-18 12:22:02 ----D---- C:\WINDOWS\system32\oobe
2008-10-18 12:21:58 ----D---- C:\WINDOWS\system
2008-10-18 12:17:48 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-10-18 12:11:10 ----D---- C:\WINDOWS\EHome
2008-10-15 20:54:01 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-10-09 20:58:29 ----A---- C:\WINDOWS\NeroDigital.ini
2008-10-08 20:57:55 ----D---- C:\Program Files\InterActual
2008-10-08 19:31:05 ----AD---- C:\Program Files
2008-10-07 14:19:40 ----A---- C:\WINDOWS\system32\MRT.exe
2008-10-06 16:08:09 ----A---- C:\VundoFix.txt
2008-10-06 14:05:31 ----D---- C:\WINDOWS\system32\?ystem
2008-10-05 20:47:10 ----A---- C:\WINDOWS\WININIT.INI
2008-10-05 13:48:50 ----D---- C:\Program Files\A4Desk
2008-10-05 13:45:49 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2008-10-05 05:47:32 ----RASH---- C:\boot.ini
2008-10-05 05:47:32 ----A---- C:\WINDOWS\win.ini
2008-10-05 05:47:32 ----A---- C:\WINDOWS\system.ini
2008-10-05 04:45:13 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-10-05 03:20:07 ----D---- C:\Program Files\Yahoo!
2008-10-05 03:20:03 ----D---- C:\Program Files\Common Files\Scanner
2008-10-04 13:58:30 ----D---- C:\Program Files\Maxis
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AmdK7;AMD K7 Processor Driver; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-13 37760]
R1 bdftdif;bdftdif; \??\C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys []
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2003-03-31 12032]
R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2003-01-03 8552]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\System32\DRIVERS\mdmxsdk.sys [2004-01-16 12970]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service; C:\WINDOWS\system32\DRIVERS\bdfndisf.sys [2008-07-02 86792]
R3 bdfsfltr;bdfsfltr; C:\WINDOWS\system32\drivers\bdfsfltr.sys [2008-01-07 196368]
R3 BDSelfPr;BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2008\bdselfpr.sys []
R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-10-27 49664]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-10-27 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-10-27 21568]
R3 HSF_DP;HSF_DP; C:\WINDOWS\System32\DRIVERS\HSF_DP.sys [2003-11-13 1042816]
R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\System32\DRIVERS\HSFHWBS2.sys [2003-11-13 210304]
R3 MRVW245;Linksys Wireless-N USB Network Adapter WUSB300N; C:\WINDOWS\system32\DRIVERS\MRVW245.sys [2006-09-29 489216]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-03-03 1893536]
R3 nvax;Service for NVIDIA(R) nForce(TM) Audio Enumerator; C:\WINDOWS\system32\drivers\nvax.sys [2003-09-02 36864]
R3 nvnforce;Service for NVIDIA(R) nForce(TM) Audio; C:\WINDOWS\system32\drivers\nvapu.sys [2003-09-02 312704]
R3 SunkFilt39;Alcor Micro Corp - 3239; \??\C:\WINDOWS\System32\Drivers\sunkfilt39.sys []
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbstor;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 winachsf;winachsf; C:\WINDOWS\System32\DRIVERS\HSF_CNXT.sys [2003-11-13 679808]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
S3 Alpham1;Ideazon Merc USB Human Interface Device; C:\WINDOWS\system32\DRIVERS\Alpham1.sys [2007-03-20 42240]
S3 Alpham2;Ideazon Merc MM USB Human Interface Device; C:\WINDOWS\system32\DRIVERS\Alpham2.sys [2007-03-20 18432]
S3 AN983;ADMtek AN983/AN985/ADM951X 10/100Mbps Fast Ethernet Adapter; C:\WINDOWS\System32\DRIVERS\AN983.sys [2002-08-29 36224]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-05-03 1540608]
S3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 ltmodem5;LT Modem Driver; C:\WINDOWS\System32\DRIVERS\ltmdmnt.sys [2004-08-04 606684]
S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys []
S3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
S3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 nm;Network Monitor Driver; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 NVENET;NVIDIA nForce MCP Networking Controller Driver; C:\WINDOWS\System32\DRIVERS\NVENET.sys [2003-08-15 72771]
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 Profos;Profos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 SunkFilt;Alcor Micro Corp - 9360; \??\C:\WINDOWS\System32\Drivers\sunkfilt.sys []
S3 Sunkfiltp;HP && Alcor Micro Corp for Phison; \??\C:\WINDOWS\System32\Drivers\sunkfiltp.sys []
S3 TnIDriver;TnIDriver; \??\C:\DOCUME~1\Owner\LOCALS~1\Temp\tni131E.tmp []
S3 Trufos;Trufos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 usbsermpt;Motorola USB Modem Driver for MPT; C:\WINDOWS\system32\DRIVERS\usbsermpt.sys [2007-06-02 22768]
S3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys []
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-13 36352]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 LIVESRV;BitDefender Desktop Update Service; C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [2008-07-02 1155072]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2004-03-03 77824]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2005-03-14 69632]
R2 QBCFMonitorService;QuickBooks Database Manager Service; C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [2006-11-28 20480]
R2 VSSERV;BitDefender Virus Shield; C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe [2008-09-11 1261568]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R2 XCOMM;BitDefender Communicator; C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe [2007-11-27 86016]
R3 scan;BitDefender Threat Scanner; C:\WINDOWS\System32\svchost.exe [2008-04-13 14336]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-05-03 413696]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-05-03 520192]
S2 WUSB300NSvc;WUSB300NSvc; C:\Program Files\Linksys\WUSB300N\WLService.exe [2005-07-04 53307]
S3 Adobe Version Cue CS3;Adobe Version Cue CS3; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [2007-03-20 153792]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2007-06-01 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2007-04-27 500800]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 QBFCService;Intuit QuickBooks FCS; C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [2006-11-09 65536]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S4 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe []
S4 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe []
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]
S4 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2007-05-23 63040]
S4 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2007-05-23 99904]
-----------------EOF-----------------
