Log & Info Files
Here are the files you requested. Thank you for the help!
Logfile of random's system information tool 1.06 (written by random/random)
Run by Dickinson at 2009-10-02 15:19:25
Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (41%) free of 18 GB
Total RAM: 1023 MB (61% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:19:45 PM, on 10/2/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\acs.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
D:\Programs\IObit Security 360\IS360srv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
D:\Programs\SPEEDB~1\VideoAcceleratorService.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINNT\System32\MsPMSPSv.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\WINNT\System32\alg.exe
C:\WINNT\system32\wbem\wmiprvse.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\pctspk.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe
D:\Programs\SPEEDB~1\VideoAcceleratorEngine.exe
C:\WINNT\Profiles\Dickinson.LAPTOP\Desktop\RSIT.exe
C:\WINNT\system32\wbem\wmiprvse.exe
C:\Program Files\Trend Micro\HijackThis\Dickinson.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://news.google.com/nwshp?ie=UTF-8&tab=wn
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5400
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;127.0.0.1:5400;localhost;<local>
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Programs\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SBCONVERT - {A1056498-D09A-41E4-864B-505EDD640D9E} - C:\Program Files\SpeedBit Video Downloader\Toolbar\SpeedBitVideoDownloader.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: GrabberObj Class - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\SPEEDB~1\Toolbar\grabber.dll
O3 - Toolbar: GVDownloader - {ae4df123-9140-4f93-9b32-ff0186389cc3} - mscoree.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: SpeedBit Video Downloader - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\Toolbar\SpeedBitVideoDownloader.dll
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [IObit Security 360] D:\Programs\IObit Security 360\IS360tray.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe
O4 - HKCU\..\Run: [SmartRAM] "C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe" /m
O4 - HKCU\..\Run: [SpeedBitVideoAccelerator] D:\Programs\SpeedBit Video Accelerator\VideoAccelerator.exe
O4 - Global Startup: ACS.lnk = ?
O4 - Global Startup: D-Link AirPlus Xtreme G Configuration Utility.lnk = ?
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
O10 - Unknown file in Winsock LSP: d:\programs\speedb~1\sblsp.dll
O10 - Unknown file in Winsock LSP: d:\programs\speedb~1\sblsp.dll
O10 - Unknown file in Winsock LSP: d:\programs\speedb~1\sblsp.dll
O13 - WWW. Prefix: http://
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) -
http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) -
http://zone.msn.com/bingame/zpagames/GAME_UNO1.cab60096.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) -
http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {8C279F4E-917E-4CD2-8DF0-D9C73C0CE763} (ZPA_WheelOfFortune Object) -
http://zone.msn.com/bingame/zpagames/zpa_wof.cab55579.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) -
http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://zone.msn.com/bingame/dim2/default/popcaploader_v6.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINNT\system32\acs.exe
O23 - Service: IS360service - IObit - D:\Programs\IObit Security 360\IS360srv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - D:\Programs\SPEEDB~1\VideoAcceleratorService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
--
End of file - 8404 bytes
======Scheduled tasks folder======
C:\WINNT\tasks\AWC AutoSweep.job
C:\WINNT\tasks\AWC Update.job
C:\WINNT\tasks\MP Scheduled Quick Scan.job
C:\WINNT\tasks\Norton Security Scan.job
C:\WINNT\tasks\User_Feed_Synchronization-{03313BC8-5EAF-42C7-AB15-921F729B5C99}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - D:\Programs\rpbrowserrecordplugin.dll [2009-07-21 312928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A1056498-D09A-41E4-864B-505EDD640D9E}]
SBCONVERT Class - C:\Program Files\SpeedBit Video Downloader\Toolbar\SpeedBitVideoDownloader.dll [2009-08-23 2498056]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF7C3CF0-4B15-11D1-ABED-709549C10000}]
GrabberObj Class - C:\PROGRA~1\SPEEDB~1\Toolbar\grabber.dll [2009-08-23 198232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{ae4df123-9140-4f93-9b32-ff0186389cc3} - GVDownloader - C:\WINNT\system32\mscoree.dll [2008-07-25 282112]
Locked
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{0329E7D6-6F54-462D-93F6-F5C3118BADF2} - SpeedBit Video Downloader - C:\Program Files\SpeedBit Video Downloader\Toolbar\SpeedBitVideoDownloader.dll [2009-08-23 2498056]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"OneCareUI"=C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe [2009-07-09 65240]
"PCTVOICE"=C:\WINNT\system32\pctspk.exe [2003-02-24 163840]
"NvCplDaemon"=C:\WINNT\system32\NvCpl.dll [2005-09-23 7290880]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-02-01 385024]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-07-21 198160]
"IObit Security 360"=D:\Programs\IObit Security 360\IS360tray.exe [2009-09-02 1216272]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 3"=C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe [2009-06-30 2329224]
"ctfmon.exe"=C:\WINNT\system32\ctfmon.exe [2008-04-13 15360]
"SmartRAM"=C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe [2009-02-19 202064]
"SpeedBitVideoAccelerator"=D:\Programs\SpeedBit Video Accelerator\VideoAccelerator.exe [2009-08-23 1443432]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aim6]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIModeChange]
C:\WINNT\system32\Ati2mdxx.exe [2001-09-04 28672]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2003-07-29 335872]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverMax]
C:\Program Files\Innovative Solutions\DriverMax\devices.exe [2009-07-22 7914328]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\WINNT\Profiles\Dickinson.LAPTOP\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-13 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nmctxth]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2008-02-01 385024]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RDListener]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioAudioCentral]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioEngineUtility]
C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe [2003-05-01 65536]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartRAM]
C:\Program Files\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe [2009-02-19 202064]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-25 149280]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-07-21 198160]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uoltray]
C:\Program Files\NetZero\exec.exe [2004-01-20 90384]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^WINNT^Profiles^All Users^Start Menu^Programs^Startup^D-Link REG Utility.lnk]
C:\PROGRA~1\D-LINK~1\Reg.exe [2004-07-26 24576]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^WINNT^Profiles^All Users^Start Menu^Programs^Startup^Google Updater.lnk]
C:\PROGRA~1\Google\GOOGLE~1\GOOGLE~1.EXE -systray -startup []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^WINNT^Profiles^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~1\Office10\OSA.EXE [2001-02-13 83360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^WINNT^Profiles^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
C:\PROGRA~1\WinZip\WZQKPICK.EXE [2001-11-27 106560]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"TapiSrv"=3
"iPod Service"=3
"gusvc"=3
"Apple Mobile Device"=2
"mnmsrvc"=3
"idsvc"=3
C:\WINNT\Profiles\All Users\Start Menu\Programs\Startup
ACS.lnk - C:\WINNT\system32\ACS.BAT
D-Link AirPlus Xtreme G Configuration Utility.lnk - C:\Program Files\D-Link AirPlus Xtreme G\AirPlus.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINNT\system32\Ati2evxx.dll [2003-07-29 86016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ckpNotify]
C:\WINNT\system32\ckpNotify.dll [2004-07-19 24681]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINNT\system32\WgaLogon.dll [2009-03-10 239496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINNT\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINNT\system32\upnpui.dll [2008-04-13 239616]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau
"notification packages"=FPNWCLNT
scecli
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\OneCareMP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\OneCareMP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoResolveSearch"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled
xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\StubInstaller.exe"="C:\StubInstaller.exe:*:Enabled:LimeWire swarmed installer"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled
xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled
xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled
xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
======List of files/folders created in the last 1 months======
2009-10-02 14:52:52 ----D---- C:\rsit
2009-10-01 22:44:24 ----D---- C:\WINNT\Profiles\Dickinson.LAPTOP\Application Data\Big Fish Games
2009-10-01 22:23:23 ----D---- C:\WINNT\Profiles\All Users\Application Data\PopCap
2009-09-30 19:35:17 ----D---- C:\Program Files\Trend Micro
2009-09-30 19:02:24 ----D---- C:\WINNT\Performance
2009-09-28 20:45:13 ----D---- C:\WINNT\Profiles\All Users\Application Data\IObit
2009-09-12 13:10:48 ----D---- C:\WINNT\Profiles\All Users\Application Data\DriverScanner
2009-09-10 19:41:14 ----D---- C:\WINNT\Profiles\Dickinson.LAPTOP\Application Data\PlayFirst
2009-09-10 19:41:14 ----D---- C:\WINNT\Profiles\All Users\Application Data\PlayFirst
2009-09-09 14:40:40 ----HDC---- C:\WINNT\$NtUninstallKB968816_WM9$
2009-09-09 14:26:23 ----HDC---- C:\WINNT\$NtUninstallKB956844$
2009-09-07 09:15:07 ----D---- C:\WINNT\system32\zh-TW
2009-09-07 09:15:07 ----D---- C:\WINNT\system32\zh-HK
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\tr-TR
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\sv-SE
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\pt-BR
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\nl-NL
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\nb-NO
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\ko-KR
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\it-IT
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\he-IL
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\fr-FR
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\fi-FI
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\es-ES
2009-09-07 09:15:06 ----D---- C:\WINNT\system32\el-GR
2009-09-07 09:15:05 ----D---- C:\WINNT\system32\de-DE
2009-09-07 09:15:05 ----D---- C:\WINNT\system32\da-DK
2009-09-07 09:15:05 ----D---- C:\WINNT\system32\ar-SA
======List of files/folders modified in the last 1 months======
2009-10-02 15:19:38 ----D---- C:\TEMP
2009-10-02 15:19:12 ----D---- C:\WINNT\Prefetch
2009-10-02 15:11:17 ----D---- C:\WINNT\system32\CatRoot2
2009-10-02 15:09:16 ----A---- C:\WINNT\SchedLgU.Txt
2009-10-02 14:40:11 ----D---- C:\Program Files\Microsoft Windows OneCare Live
2009-10-02 14:39:17 ----D---- C:\WINNT
2009-10-02 00:21:19 ----AD---- C:\WINNT\Profiles\All Users\Application Data\TEMP
2009-10-01 22:43:39 ----D---- C:\WINNT\Profiles\All Users\Application Data\BigFishGamesCache
2009-10-01 22:23:03 ----SD---- C:\WINNT\Downloaded Program Files
2009-10-01 22:13:08 ----D---- C:\Program Files\bfgclient
2009-09-30 19:35:17 ----RD---- C:\Program Files
2009-09-30 15:28:03 ----SHD---- C:\WINNT\Installer
2009-09-30 15:27:57 ----HD---- C:\Config.Msi
2009-09-29 12:42:11 ----D---- C:\Program Files\Common Files\Roxio Shared
2009-09-29 12:42:07 ----D---- C:\WINNT\system32\drivers
2009-09-29 12:40:34 ----D---- C:\WINNT\system32
2009-09-28 16:51:40 ----HD---- C:\WINNT\INF
2009-09-28 14:50:29 ----A---- C:\WINNT\WIN.INI
2009-09-24 23:28:21 ----RSHD---- C:\WINNT\system32\dllcache
2009-09-24 23:28:21 ----D---- C:\Program Files\Internet Explorer
2009-09-24 23:27:40 ----HD---- C:\WINNT\$hf_mig$
2009-09-13 14:32:28 ----D---- C:\WINNT\Profiles\Dickinson.LAPTOP\Application Data\LimeWire
2009-09-13 11:01:26 ----RD---- C:\My Documents
2009-09-13 10:12:28 ----D---- C:\WINNT\Profiles\All Users\Application Data\NOS
2009-09-13 10:10:31 ----D---- C:\WINNT\system32\config
2009-09-12 13:31:21 ----D---- C:\WINNT\Profiles\Dickinson.LAPTOP\Application Data\Uniblue
2009-09-12 13:31:04 ----D---- C:\Program Files\Uniblue
2009-09-09 16:05:30 ----D---- C:\WINNT\Profiles\Dickinson.LAPTOP\Application Data\Real
2009-09-09 15:38:31 ----D---- C:\Program Files\Microsoft Silverlight
2009-09-09 14:40:34 ----A---- C:\WINNT\imsins.BAK
2009-09-07 10:09:16 ----SD---- C:\WINNT\Tasks
2009-09-07 09:15:05 ----D---- C:\WINNT\system32\en-US
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Cdr4_xp;Cdr4_xp; C:\WINNT\system32\drivers\Cdr4_xp.sys [2007-10-17 9072]
R1 Cdralw2k;Cdralw2k; C:\WINNT\system32\drivers\Cdralw2k.sys [2007-10-17 9200]
R1 intelppm;Intel Processor Driver; C:\WINNT\System32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 MSFWHLPR;MSFWHLPR; C:\WINNT\system32\DRIVERS\msfwhlpr.sys [2007-11-27 116416]
R1 OMCI;OMCI WDM Device Driver; C:\WINNT\System32\DRIVERS\omci.sys [2002-10-15 17153]
R1 Tcpip6;Microsoft IPv6 Protocol Driver; C:\WINNT\system32\DRIVERS\tcpip6.sys [2008-06-20 225856]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINNT\System32\drivers\ws2ifsl.sys [2001-08-23 12032]
R2 MDC8021X;AEGIS Protocol (IEEE 802.1x) v2.3.1.9; C:\WINNT\system32\DRIVERS\mdc8021x.sys [2009-08-14 15781]
R2 MSFWDrv;MSFWDrv; C:\WINNT\system32\DRIVERS\msfwdrv.sys [2007-11-27 91328]
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS Compatible Transport Protocol; C:\WINNT\System32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;NWLink NetBIOS; C:\WINNT\System32\DRIVERS\nwlnknb.sys [2001-08-23 63232]
R2 NwlnkSpx;NWLink SPX/SPXII Protocol; C:\WINNT\System32\DRIVERS\nwlnkspx.sys [2001-08-23 55936]
R2 Scap;SecureClient Application Policy Module; C:\WINNT\System32\DRIVERS\Scap.sys [2004-07-19 17424]
R2 VPN-1;VPN-1 Module; C:\WINNT\System32\drivers\vpn.sys [2004-07-19 668432]
R3 AR5211;D-Link Adapter; C:\WINNT\system32\DRIVERS\ar5211.sys [2004-12-22 407360]
R3 Arp1394;1394 ARP Client Protocol; C:\WINNT\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 AWINDIS5;AWINDIS5 Protocol Driver; \??\C:\WINNT\system32\AWINDIS5.SYS []
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINNT\System32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINNT\System32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
R3 FW1;SecuRemote Miniport; C:\WINNT\system32\DRIVERS\fw.sys [2004-07-19 2038704]
R3 HidUsb;Microsoft HID Class Driver; C:\WINNT\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Mouse HID Driver; C:\WINNT\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 MpFilter;Microsoft Malware Protection Driver; C:\WINNT\system32\DRIVERS\MpFilter.sys [2008-05-15 53168]
R3 Mup;Mup; C:\WINNT\System32\drivers\mup.sys [2008-04-13 105344]
R3 NIC1394;1394 Net Driver; C:\WINNT\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINNT\system32\DRIVERS\nv4_mini.sys [2005-09-23 3528000]
R3 NWRDR;NetWare Rdr; C:\WINNT\System32\DRIVERS\nwrdr.sys [2008-04-13 163584]
R3 Ptserial;W2K Pctel Serial Device Driver; C:\WINNT\system32\DRIVERS\ptserial.sys [2003-02-24 135292]
R3 STAC97;Intel 82801 Audio Driver (WDM) - SigmaTel Codec; C:\WINNT\system32\drivers\STAC97FJ.sys [2001-12-20 98288]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINNT\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINNT\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINNT\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 DVDVRRdr_xp;DVDVRRdr_xp; C:\WINNT\system32\drivers\DVDVRRdr_xp.sys []
S1 P3;Intel PentiumIII Processor Driver; C:\WINNT\System32\DRIVERS\p3.sys [2008-04-13 42752]
S1 Scsiscan;Scsiscan; C:\WINNT\system32\drivers\Scsiscan.sys []
S2 Scsiprnt;Scsiprnt; C:\WINNT\system32\drivers\Scsiprnt.sys [2001-08-23 11648]
S3 ac97intc;Intel(r) 82801 Audio Driver Install Service (WDM); C:\WINNT\system32\drivers\ac97intc.sys [2001-08-17 96256]
S3 AIRPLUS;D-Link AirPlus Wireless Adapter; C:\WINNT\system32\DRIVERS\airplus.sys [2003-09-08 255360]
S3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINNT\system32\DRIVERS\athw.sys [2008-09-24 1326528]
S3 ati2mtag;ati2mtag; C:\WINNT\System32\DRIVERS\ati2mtag.sys [2003-07-29 587264]
S3 atimtai;atimtai; C:\WINNT\System32\DRIVERS\atimtai.sys [2001-08-17 281600]
S3 b57w2k;Broadcom 570x Gigabit Integrated Controller; C:\WINNT\System32\DRIVERS\b57xp32.sys [2003-05-21 175360]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINNT\System32\Drivers\btwusb.sys []
S3 EL556;3Com 10/100 Mini PCI Ethernet Adapter NDIS 5.0 Driver; C:\WINNT\system32\DRIVERS\EL556ND5.sys [2001-09-27 58433]
S3 EL556ND5;3Com 10/100 MiniPCI Ethernet Adapter Driver; C:\WINNT\System32\DRIVERS\EL556ND5.sys [2001-09-27 58433]
S3 IPSECSHM;Nortel IPSECSHM Adapter; C:\WINNT\System32\DRIVERS\ipsecw2k.sys []
S3 maestro;ESS Maestro Audio Driver (WDM); C:\WINNT\system32\drivers\es198xdl.sys [2002-06-20 414400]
S3 nm;Network Monitor Driver; C:\WINNT\System32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 O2SCBUS;O2Micro SmartCardBus Reader; C:\WINNT\System32\DRIVERS\ozscr.sys []
S3 OMVA;VPN-1 SecureClient Adapter; C:\WINNT\system32\DRIVERS\OMVA.sys [2004-07-19 14924]
S3 PRISM_ICB;NETGEAR WG511 Wireless LAN Driver; C:\WINNT\system32\DRIVERS\WG511ICB.sys []
S3 Sermouse;Sermouse; C:\WINNT\system32\drivers\Sermouse.sys []
S3 SMCWGU(SMC);SMCWUSB-G 802.11g Wireless USB 2.0 Adapter(SMC); C:\WINNT\system32\DRIVERS\SMCWGU.sys [2005-12-16 408064]
S3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINNT\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
S3 usbscan;USB Scanner Driver; C:\WINNT\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINNT\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 w22n51;Intel(R) PRO/Wireless 2200 Adapter Driver; C:\WINNT\System32\DRIVERS\w22n51.sys [2004-01-14 1648640]
S3 WDHAALBA;WDHAALBAMiniPCI Winmodem; C:\WINNT\System32\DRIVERS\WDHAALBA.sys [2001-10-02 706192]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINNT\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINNT\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 Aha174x;Aha174x; C:\WINNT\system32\drivers\Aha174x.sys []
S4 Always;Always; C:\WINNT\system32\drivers\Always.sys []
S4 ami0nt;ami0nt; C:\WINNT\system32\drivers\ami0nt.sys []
S4 Arrow;Arrow; C:\WINNT\system32\drivers\Arrow.sys []
S4 ati;ati; C:\WINNT\system32\drivers\ati.sys []
S4 BusLogic;BusLogic; C:\WINNT\system32\drivers\BusLogic.sys []
S4 Busmouse;Busmouse; C:\WINNT\system32\drivers\Busmouse.sys []
S4 cirrus;cirrus; C:\WINNT\system32\drivers\cirrus.sys []
S4 cpqfws2e;cpqfws2e; C:\WINNT\system32\drivers\cpqfws2e.sys []
S4 dce376nt;dce376nt; C:\WINNT\system32\drivers\dce376nt.sys []
S4 Dell_DGX;Dell_DGX; C:\WINNT\system32\drivers\Dell_DGX.sys []
S4 Delldsa;Delldsa; C:\WINNT\system32\drivers\Delldsa.sys []
S4 DptScsi;DptScsi; C:\WINNT\system32\drivers\DptScsi.sys []
S4 dtc329x;dtc329x; C:\WINNT\system32\drivers\dtc329x.sys []
S4 et4000;et4000; C:\WINNT\system32\drivers\et4000.sys []
S4 Fd16_700;Fd16_700; C:\WINNT\system32\drivers\Fd16_700.sys []
S4 Fd7000ex;Fd7000ex; C:\WINNT\system32\drivers\Fd7000ex.sys []
S4 Fd8xx;Fd8xx; C:\WINNT\system32\drivers\Fd8xx.sys []
S4 flashpnt;flashpnt; C:\WINNT\system32\drivers\flashpnt.sys []
S4 Inport;Inport; C:\WINNT\system32\drivers\Inport.sys []
S4 Jazzg300;Jazzg300; C:\WINNT\system32\drivers\Jazzg300.sys []
S4 Jazzg364;Jazzg364; C:\WINNT\system32\drivers\Jazzg364.sys []
S4 Jzvxl484;Jzvxl484; C:\WINNT\system32\drivers\Jzvxl484.sys []
S4 mga;mga; C:\WINNT\system32\drivers\mga.sys []
S4 mga_mil;mga_mil; C:\WINNT\system32\drivers\mga_mil.sys []
S4 mitsumi;mitsumi; C:\WINNT\system32\drivers\mitsumi.sys []
S4 mkecr5xx;mkecr5xx; C:\WINNT\system32\drivers\mkecr5xx.sys []
S4 Ncr53c9x;Ncr53c9x; C:\WINNT\system32\drivers\Ncr53c9x.sys []
S4 ncr77c22;ncr77c22; C:\WINNT\system32\drivers\ncr77c22.sys []
S4 Ncrc700;Ncrc700; C:\WINNT\system32\drivers\Ncrc700.sys []
S4 Ncrc710;Ncrc710; C:\WINNT\system32\drivers\Ncrc710.sys []
S4 Oliscsi;Oliscsi; C:\WINNT\system32\drivers\Oliscsi.sys []
S4 Parallel;Parallel; C:\WINNT\system32\drivers\Parallel.sys []
S4 psidisp;psidisp; C:\WINNT\system32\drivers\psidisp.sys []
S4 qv;qv; C:\WINNT\system32\drivers\qv.sys []
S4 s24trans;WLAN Transport; C:\WINNT\System32\DRIVERS\s24trans.sys []
S4 s3;s3; C:\WINNT\system32\drivers\s3.sys [1999-04-29 65296]
S4 slcd32;slcd32; C:\WINNT\system32\drivers\slcd32.sys []
S4 Spock;Spock; C:\WINNT\system32\drivers\Spock.sys []
S4 T128;T128; C:\WINNT\system32\drivers\T128.sys []
S4 T13B;T13B; C:\WINNT\system32\drivers\T13B.sys []
S4 tga;tga; C:\WINNT\system32\drivers\tga.sys []
S4 tmv1;tmv1; C:\WINNT\system32\drivers\tmv1.sys []
S4 Ultra124;Ultra124; C:\WINNT\system32\drivers\Ultra124.sys []
S4 Ultra14f;Ultra14f; C:\WINNT\system32\drivers\Ultra14f.sys []
S4 Ultra24f;Ultra24f; C:\WINNT\system32\drivers\Ultra24f.sys []
S4 v7vram;v7vram; C:\WINNT\system32\drivers\v7vram.sys []
S4 Wd33c93;Wd33c93; C:\WINNT\system32\drivers\Wd33c93.sys []
S4 wd90c24a;wd90c24a; C:\WINNT\system32\drivers\wd90c24a.sys []
S4 wdvga;wdvga; C:\WINNT\system32\drivers\wdvga.sys []
S4 weitekp9;weitekp9; C:\WINNT\system32\drivers\weitekp9.sys []
S4 Xga;Xga; C:\WINNT\system32\drivers\Xga.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 6to4;IPv6 Helper Service; C:\WINNT\system32\svchost.exe [2008-04-13 14336]
R2 ACS;Atheros Configuration Service; C:\WINNT\system32\acs.exe [2004-07-12 36864]
R2 IS360service;IS360service; D:\Programs\IObit Security 360\IS360srv.exe [2009-09-02 305936]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-25 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
R2 msfwsvc;OneCare Firewall; C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe [2007-11-27 755264]
R2 NWCWorkstation;Client Service for NetWare; C:\WINNT\System32\svchost.exe [2008-04-13 14336]
R2 OcHealthMon;Windows Live OneCare Health Monitor; C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe [2009-07-09 26104]
R2 OneCareMP;OneCare AntiSpyware and AntiVirus; C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe [2008-07-09 18704]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 VideoAcceleratorService;VideoAcceleratorService; D:\Programs\SPEEDB~1\VideoAcceleratorService.exe [2009-08-23 300656]
R2 Viewpoint Manager Service;Viewpoint Manager Service; C:\Program Files\Viewpoint\Common\ViewpointService.exe [2007-01-04 24652]
R2 winss;Windows Live OneCare; C:\Program Files\Microsoft Windows OneCare Live\winss.exe [2009-07-09 1139536]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINNT\System32\MsPMSPSv.exe [2001-05-01 53248]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINNT\System32\Atievxx.exe [2001-08-17 37376]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINNT\system32\nvsvc32.exe [2005-09-23 143426]
S2 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 aspnet_state;ASP.NET State Service; C:\WINNT\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINNT\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINNT\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINNT\system32\svchost.exe [2008-04-13 14336]
S4 idsvc;Windows CardSpace; C:\WINNT\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINNT\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 SR_Service;Check Point SecuRemote Service; C:\Program Files\CheckPoint\SecuRemote\bin\SR_Service.exe []
S4 SR_WatchDog;Check Point SecuRemote WatchDog; C:\Program Files\CheckPoint\SecuRemote\bin\SR_WatchDog.exe []
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2009-10-02 14:53:16
======Uninstall list======
-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINNT\INF\PCHealth.inf
3Com Mini PCI 56K Modem-->C:\WINNT\3CWMUNST.EXE WDHAALBA
Adobe AIR-->c:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 ActiveX-->C:\WINNT\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINNT\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.1.3-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A91000000001}
Adobe Shockwave Player 11.5-->"C:\WINNT\system32\Adobe\Shockwave 11\uninstaller.exe"
Advanced SystemCare 3-->"C:\Program Files\IObit\Advanced SystemCare 3\unins000.exe"
ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Control Panel-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINNT\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class
ISPLAY -clean
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
Audacity 1.3.8 (Unicode)-->"C:\Program Files\Audacity 1.3 Beta (Unicode)\unins000.exe"
Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe
Cate West: The Velvet Keys-->"D:\Big Fish Games\Cate West - The Velvet Keys\Uninstall.exe"
Check Point VPN-1 SecuRemote NG_AI_R55-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9FCF2FC0-8268-11D4-A313-0006290D766E}\setup.exe" ADD_REMOVE
Cliprex DS DVD Player-->"C:\Program Files\Cliprex DS DVD Player\uninstall.exe"
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
Cooking Dash: DinerTown Studios-->"D:\Big Fish Games\Cooking Dash - DinerTown Studios\Uninstall.exe"
Dell ResourceCD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D78653C3-A8FF-415F-92E6-D774E634FF2D}\setup.exe"
D-Link AirPlus Xtreme G Adapter-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{52A5F706-2FCC-4C14-9E9A-345C2DCB25E9}\setup.exe" -l0x9
Drawn: The Painted Tower ™-->"D:\Big Fish Games\Drawn - The Painted Tower\Uninstall.exe"
DriverMax 5-->"C:\Program Files\Innovative Solutions\DriverMax\unins000.exe"
EasyCleaner-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe" -l0x9 -removeonly
EmailStripper 2.2-->"C:\Program Files\EmailStripper\unins000.exe"
Enlightenus-->"D:\Big Fish Games\Enlightenus\Uninstall.exe"
ESET Online Scanner v3-->C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
Flux Family Secrets: The Ripple Effect-->"D:\Big Fish Games\Flux Family Secrets - The Ripple Effect\Uninstall.exe"
Free Disc Burner version 1.1-->"C:\Program Files\DVDVideoSoft\Free Disc Burner\unins000.exe"
GTOneCare-->MsiExec.exe /X{8B21B9EF-6DBF-4F63-8CC7-9F6A56D1EE8E}
Hidden Expedition: Titanic -->"D:\Big Fish Games\Hidden Expedition - Titanic\Uninstall.exe"
Hidden in Time: Mirror Mirror-->"D:\Big Fish Games\Hidden in Time - Mirror Mirror\Uninstall.exe"
Hidden Mysteries: Civil War-->"D:\Big Fish Games\Hidden Mysteries - Civil War\Uninstall.exe"
HighMAT Extension to Microsoft Windows XP CD Writing Wizard-->MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.0 (KB932471)-->C:\WINNT\system32\msiexec.exe /promptrestart /uninstall {ECD292A0-0347-4244-8C24-5DBCE990FB40} /package {BAF78226-3200-4DB4-BE33-4D922A799840}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINNT\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINNT\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Internet Explorer 7 (KB947864)-->"C:\WINNT\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Hoyle Board Games 2003-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{37F9D0BD-9AED-4EE6-BCA3-BA0749636E04}
IObit Security 360 1.0-->"D:\Programs\IObit Security 360\unins000.exe"
Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014FF}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
LimeWire 5.2.13-->"C:\Program Files\LimeWire\uninstall.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINNT\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Data Access Components KB870669-->C:\WINNT\muninst.exe C:\WINNT\INF\KB870669.inf
Microsoft Internet Explorer Administration Kit 5-->rundll32 advpack.dll,LaunchINFSection ieak5.inf,IEAK.Uninstall
Microsoft Office Live Add-in 1.4-->MsiExec.exe /I{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}
Microsoft Office PowerPoint Viewer 2007 (English)-->MsiExec.exe /X{95120000-00AF-0409-0000-0000000FF1CE}
Microsoft Office XP Professional-->MsiExec.exe /I{90110409-6000-11D3-8CFE-0050048383C9}
Microsoft Office XP Resource Kit Tools-->MsiExec.exe /I{95250409-6000-11D3-8CFE-0050048383C9}
Microsoft Outlook 2002 Connector-->MsiExec.exe /X{2708AEFF-57BB-47F2-83DF-BFD4B25CBEA4}
Microsoft Protection Service-->MsiExec.exe /I{85CFDC2D-710E-49D5-B799-F3743CA506BA}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Windows Journal Viewer-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
Microsoft Windows Live OneCare Resources v2.5.2900.28-->MsiExec.exe /I{5660022E-F3F2-4126-8CC5-9726C47150EB}
Microsoft Windows OneCare Live AntiSpyware and AntiVirus-->MsiExec.exe /I{E26B83D1-C0BB-41BC-8F44-31D5354DD6AF}
Microsoft Windows OneCare Live v2.5.2900.20 Idcrl Install-->MsiExec.exe /I{3851147E-5A91-4469-BA4D-13FFFCC8A920}
Microsoft Windows OneCare Live v2.5.2900.28-->MsiExec.exe /I{D07A8E7E-D324-4945-BA8C-E532AD008FF3}
Midnight Mysteries: The Edgar Allan Poe Conspiracy-->"D:\Big Fish Games\Midnight Mysteries - The Edgar Allan Poe Conspiracy\Uninstall.exe"
Mozilla Firefox (3.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Mystery Case Files Huntsville-->"C:\WINNT\Mystery Case Files Huntsville\uninstall.exe" "/U:C:\Program Files\Mystery Case Files Huntsville\Uninstall\uninstall.xml"
Mystery Case Files: Prime Suspects ™-->"D:\Big Fish Games\Mystery Case Files - Prime Suspects\Uninstall.exe"
Mystery Case Files: Ravenhearst ™-->"D:\Big Fish Games\Mystery Case Files - Ravenhearst\Uninstall.exe"
Mystery Case Files: Return to Ravenhearst ™-->"D:\Big Fish Games\Mystery Case Files - Return to Ravenhearst\Uninstall.exe"
Mystery Legends: Sleepy Hollow-->"D:\Big Fish Games\Mystery Legends - Sleepy Hollow\Uninstall.exe"
Norton Security Scan-->MsiExec.exe /I{E5431FB5-B3EB-46C8-8275-F6447131C98A}
Office XP Web Services Toolkit 2.0 Installation Files and Whitepapers-->MsiExec.exe /I{921B212B-3113-492C-88A7-115D69B4CD9A}
OGA Notifier 2.0.0048.0-->MsiExec.exe /I{B2544A03-10D0-4E5E-BA69-0362FFC20D18}
PCTEL 2304WT V.9x MDC Modem Drivers-->ptuninst.exe
PX Engine-->MsiExec.exe /I{6513E869-647F-40FD-A55D-CFC92579B9BA}
QuickTime-->MsiExec.exe /I{BFD96B89-B769-4CD6-B11E-E79FFD46F067}
RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Redrum ™-->"D:\Big Fish Games\Redrum\Uninstall.exe"
Righteous Kill 2: Revenge of the Poet Killer-->"D:\Big Fish Games\Righteous Kill 2 - Revenge of the Poet Killer\Uninstall.exe"
Righteous Kill-->"D:\Big Fish Games\Righteous Kill\Uninstall.exe"
Security Update for Windows Internet Explorer 7 (KB933566)-->"C:\WINNT\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB937143)-->"C:\WINNT\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB938127)-->"C:\WINNT\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB939653)-->"C:\WINNT\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB942615)-->"C:\WINNT\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB944533)-->"C:\WINNT\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB950759)-->"C:\WINNT\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB953838)-->"C:\WINNT\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB969897)-->"C:\WINNT\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB972260)-->"C:\WINNT\ie7updates\KB972260-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 8 (KB971961)-->"C:\WINNT\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 8 (KB972260)-->"C:\WINNT\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB968816)-->"C:\WINNT\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Security Update for Windows XP (KB913433)-->C:\WINNT\system32\MacroMed\Flash\genuinst.exe C:\WINNT\system32\MacroMed\Flash\KB913433.inf
Security Update for Windows XP (KB956844)-->"C:\WINNT\$NtUninstallKB956844$\spuninst\spuninst.exe"
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Send To Extensions PowerToy-->rundll32.exe C:\WINNT\system32\ShellExt\SENDTOX.DLL,Configure C:\WINNT\system32\ShellExt\SendToX.inf
SigmaTel AC97 Audio Drivers-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7959721D-8268-4565-9E0E-C41A9F4848A9}\setup.exe" -l0x9 -nodialog -uninstall
Software Informer 1.0 BETA-->"C:\Program Files\Software Informer\unins000.exe"
SpeedBit Video Accelerator-->"D:\Programs\SpeedBit Video Accelerator\VARemove.
