ComboFix 09-03-14.01 - mustard 2009-03-15 10:05:08.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.3199.2638 [GMT -6:00]
Running from: c:\documents and settings\mustard\Desktop\ComboFix.exe
AV: McAfee VirusScan *On-access scanning disabled* (Outdated)
FW: McAfee Personal Firewall Plus *enabled*
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\docume~1\mustard\LOCALS~1\Temp\ntdll64.dll
c:\documents and settings\mustard\Application Data\inst.exe
c:\documents and settings\mustard\Local Settings\Temporary Internet Files\bestwiner.stt
c:\documents and settings\mustard\Local Settings\Temporary Internet Files\CPV.stt
c:\documents and settings\mustard\Local Settings\Temporary Internet Files\fbk.sts
c:\program files\FBrowserAdvisor
c:\program files\FBrowsingAdvisor
c:\program files\FBrowsingAdvisor\IXPCOMEvents.xpt
c:\program files\FBrowsingAdvisor\Logo.png
c:\program files\FBrowsingAdvisor\main.db
c:\program files\FBrowsingAdvisor\unins000.dat
c:\program files\FBrowsingAdvisor\unins000.exe
c:\program files\FBrowsingAdvisor\XPCOMEvents.dll
c:\program files\mantec~1
c:\program files\mantec~1\??mantec\
c:\program files\mantec~1\logonui.exe
c:\temp\tn3
c:\windows\Downloaded Program Files\nethv32.inf
c:\windows\Fonts\acrsecB.fon
c:\windows\Fonts\acrsecI.fon
c:\windows\IE4 Error Log.txt
c:\windows\system32\aehwbbgs.ini
c:\windows\system32\aksvuh.dll
c:\windows\system32\apdbkcsc.dll
c:\windows\system32\apyijuxw.ini
c:\windows\system32\araocuwx.dll
c:\windows\system32\avobynhy.dll
c:\windows\system32\bbrbltqj.ini
c:\windows\system32\bbuvulvs.dll
c:\windows\system32\bckyssld.ini
c:\windows\system32\bcsrkg.dll
c:\windows\system32\bfnkteoj.ini
c:\windows\system32\bhfqikek.ini
c:\windows\system32\bkfogmog.ini
c:\windows\system32\bnfufrbq.ini
c:\windows\system32\bpjbqcqc.ini
c:\windows\system32\bpvrfl.dll
c:\windows\system32\brveln.dll
c:\windows\system32\brvfjitp.ini
c:\windows\system32\buijbukp.ini
c:\windows\system32\bvnxkcle.ini
c:\windows\system32\calttkod.dll
c:\windows\system32\cbcwiyqw.dll
c:\windows\system32\cbXRJDWO.dll
c:\windows\system32\cbXRJDWO.dll.vir
c:\windows\system32\ccqanudx.ini
c:\windows\system32\ceanywnd.ini
c:\windows\system32\cicsowkn.ini
c:\windows\system32\cmscxvkm.ini
c:\windows\system32\cojgfx.dll
c:\windows\system32\crrhrpxi.dll
c:\windows\system32\cruywe.dll
c:\windows\system32\cvshfq.dll
c:\windows\system32\cyjrnp.dll
c:\windows\system32\deobpvil.ini
c:\windows\system32\derhjkhw.ini
c:\windows\system32\devrklua.dll
c:\windows\system32\diirxypm.ini
c:\windows\system32\dkddkz.dll
c:\windows\system32\dlssykcb.dll
c:\windows\system32\dqhuqlwh.dll
c:\windows\system32\drivers\core.cache(2).dsk
c:\windows\system32\drivers\core.cache(3).dsk
c:\windows\system32\drivers\core.cache(4).dsk
c:\windows\system32\drivers\core.cache(5).dsk
c:\windows\system32\dtggeihe.ini
c:\windows\system32\ebxbqiqn.ini
c:\windows\system32\ec2
c:\windows\system32\ec2\PDI5MDi2.exe
c:\windows\system32\ecixexvr.dll
c:\windows\system32\efnbdl.dll
c:\windows\system32\ehosmsqh.ini
c:\windows\system32\eofrplsu.ini
c:\windows\system32\eoxakyvg.ini
c:\windows\system32\eoxrwfgs.ini
c:\windows\system32\eqnjwwwa.ini
c:\windows\system32\eucqvnio.ini
c:\windows\system32\EV02
c:\windows\system32\EV02\EV022328.exe
c:\windows\system32\evidxt.dll
c:\windows\system32\fazawf.dll
c:\windows\system32\fhckeaqm.ini
c:\windows\system32\fsnlddvh.dll
c:\windows\system32\ftbedguv.ini
c:\windows\system32\fuujmorc.ini
c:\windows\system32\fwgwhhjf.dll
c:\windows\system32\fzbigc.dll
c:\windows\system32\gcrvpv.dll
c:\windows\system32\geamutkx.ini
c:\windows\system32\ghdfheib.dll
c:\windows\system32\gmajuz.dll
c:\windows\system32\gmeiquir.dll
c:\windows\system32\gngxekfp.ini
c:\windows\system32\gohfkneb.ini
c:\windows\system32\grjupdqq.ini
c:\windows\system32\gsdtgqlb.dll
c:\windows\system32\gsvgflek.ini
c:\windows\system32\haqehjed.ini
c:\windows\system32\hbhndwnc.ini
c:\windows\system32\hghtev.dll
c:\windows\system32\hhamligy.dll
c:\windows\system32\hiqfhbsv.dll
c:\windows\system32\hmmniiqr.ini
c:\windows\system32\hmsfrj.dll
c:\windows\system32\hnohpp.dll
c:\windows\system32\hpelnkib.ini
c:\windows\system32\hptogduv.ini
c:\windows\system32\hrkoooeu.ini
c:\windows\system32\hshalm.dll
c:\windows\system32\hsxnljel.dll
c:\windows\system32\htbslmlo.ini
c:\windows\system32\hvaqbaml.ini
c:\windows\system32\hyguqbkw.ini
c:\windows\system32\ibyehcfo.ini
c:\windows\system32\icfoni.dll
c:\windows\system32\iiisnmdl.dll
c:\windows\system32\ikxogxja.dll
c:\windows\system32\ilizrz.dll
c:\windows\system32\irkplqvp.ini
c:\windows\system32\itrvhwor.ini
c:\windows\system32\iyhlveay.ini
c:\windows\system32\jcltum.dll
c:\windows\system32\jfbtglbv.ini
c:\windows\system32\joefmulp.ini
c:\windows\system32\joggogke.ini
c:\windows\system32\jqfdjmdb.dll
c:\windows\system32\jsgpyova.ini
c:\windows\system32\jtsrclfb.ini
c:\windows\system32\jvabcyfm.ini
c:\windows\system32\jyujqpnj.dll
c:\windows\system32\kanwxrki.ini
c:\windows\system32\kmdbshsp.ini
c:\windows\system32\kmformek.dll
c:\windows\system32\kmjrfi.dll
c:\windows\system32\knwfaatw.ini
c:\windows\system32\knxiyogw.ini
c:\windows\system32\kuutmynt.dll
c:\windows\system32\kvgqln.dll
c:\windows\system32\lcbpvz.dll
c:\windows\system32\lemrwdkb.ini
c:\windows\system32\leysioth.dll
c:\windows\system32\lhjdreyw.dll
c:\windows\system32\ljoevg.dll
c:\windows\system32\lknkwp.dll
c:\windows\system32\lllpdx.dll
c:\windows\system32\lmsafoop.ini
c:\windows\system32\lqeaelco.dll
c:\windows\system32\luxhcvuw.dll
c:\windows\system32\lwdqsu.dll
c:\windows\system32\lxxlxiyg.ini
c:\windows\system32\m3v
c:\windows\system32\mabwyosy.ini
c:\windows\system32\maoklucv.dll
c:\windows\system32\mbols~1
c:\windows\system32\mbpsdlnv.ini
c:\windows\system32\mcuowv.dll
c:\windows\system32\mejuppab.dll
c:\windows\system32\memaopsi.ini
c:\windows\system32\mermuxhd.dll
c:\windows\system32\messjiyf.dll
c:\windows\system32\meucxelp.ini
c:\windows\system32\mgayijkx.ini
c:\windows\system32\mjdixpsw.ini
c:\windows\system32\mkkylycc.ini
c:\windows\system32\mmajsbkj.ini
c:\windows\system32\mnbhltrl.dll
c:\windows\system32\mqfqbubv.ini
c:\windows\system32\mtbxbqum.ini
c:\windows\system32\mtcrbqir.dll
c:\windows\system32\ncase.ini
c:\windows\system32\nffpdqfj.ini
c:\windows\system32\njbqiw.dll
c:\windows\system32\njltadsw.ini
c:\windows\system32\nmmbwkio.ini
c:\windows\system32\nmohlnro.ini
c:\windows\system32\npgpptmt.ini
c:\windows\system32\nsujlvnf.ini
c:\windows\system32\nwyarc.dll
c:\windows\system32\nyjkgh.dll
c:\windows\system32\oaqmjg.dll
c:\windows\system32\ocxipheb.dll
c:\windows\system32\oecalqks.ini
c:\windows\system32\ohhldina.dll
c:\windows\system32\omaqbtew.ini
c:\windows\system32\oqubqkle.dll
c:\windows\system32\ornlhomn.dll
c:\windows\system32\osatybxn.ini
c:\windows\system32\osvrlpsr.ini
c:\windows\system32\oukppdho.dll
c:\windows\system32\ovvyjdfw.ini
c:\windows\system32\OWDJRXbc.ini
c:\windows\SYSTEM32\OWDJRXbc.ini2
c:\windows\system32\p2ecom.dll
c:\windows\system32\pac.txt
c:\windows\system32\pahqkqkj.ini
c:\windows\system32\pbswnvne.ini
c:\windows\system32\pewmqnah.dll
c:\windows\system32\pfgpvgiy.ini
c:\windows\system32\pfxnpmbw.ini
c:\windows\system32\pilnxybn.dll
c:\windows\system32\pioatd.dll
c:\windows\system32\piynps.dll
c:\windows\system32\plbacvjs.ini
c:\windows\system32\plhwzs.dll
c:\windows\system32\prthgrsf.ini
c:\windows\system32\prxsthko.dll
c:\windows\system32\ptpbbgmn.ini
c:\windows\system32\pwvxatxl.dll
c:\windows\system32\qffsgt.dll
c:\windows\system32\qhpeohvk.ini
c:\windows\system32\qlfpxhiq.ini
c:\windows\system32\qoisiatu.ini
c:\windows\system32\qphcgpcc.dll
c:\windows\system32\qsdbothl.dll
c:\windows\system32\quwhxm.dll
c:\windows\system32\qwpntsep.ini
c:\windows\system32\rahusa.dll
c:\windows\system32\raowkwkl.dll
c:\windows\system32\raylynlu.dll
c:\windows\system32\rdamicsu.ini
c:\windows\system32\rgybloaj.ini
c:\windows\system32\rhckggkv.dll
c:\windows\system32\rnmdmrwj.dll
c:\windows\system32\rpzzaj.dll
c:\windows\system32\rqrlrhyx.ini
c:\windows\system32\rvikbsxy.dll
c:\windows\system32\rxalypnh.ini
c:\windows\system32\rxmctlcl.ini
c:\windows\system32\scdiqwqc.ini
c:\windows\system32\sctlckde.ini
c:\windows\system32\seazxh.dll
c:\windows\system32\seiwiccs.dll
c:\windows\system32\sfyytmjo.ini
c:\windows\system32\skqlaceo.dll
c:\windows\system32\smlrea.dll
c:\windows\system32\smoknyor.dll
c:\windows\system32\sniwcvsw.ini
c:\windows\system32\ssjant.dll
c:\windows\system32\sthysqcd.ini
c:\windows\system32\svbaqnja.dll
c:\windows\system32\tawjlrcu.ini
c:\windows\system32\tbyxgrno.ini
c:\windows\system32\tdcifrdl.ini
c:\windows\system32\tdyaqfya.ini
c:\windows\system32\tezbtf.dll
c:\windows\system32\tframuax.ini
c:\windows\system32\thjqkvdc.ini
c:\windows\system32\tirqsx.dll
c:\windows\system32\twdstsdw.ini
c:\windows\system32\uakolpeg.ini
c:\windows\system32\ucrljwat.dll
c:\windows\system32\uekmsm.dll
c:\windows\system32\uiccymbu.ini
c:\windows\system32\ulgphwds.dll
c:\windows\system32\umepodus.dll
c:\windows\system32\unenwz.dll
c:\windows\system32\uniq.tll
c:\windows\system32\upyamfak.dll
c:\windows\system32\uxmubrqx.dll
c:\windows\system32\vbcfjfxg.ini
c:\windows\system32\vfoitn.dll
c:\windows\system32\vmiqlc.dll
c:\windows\system32\vmjjkcjf.ini
c:\windows\system32\vmkwumin.ini
c:\windows\system32\vpsdpldl.ini
c:\windows\system32\vpvqmo.dll
c:\windows\system32\vudgotph.dll
c:\windows\system32\vuffvhid.dll
c:\windows\system32\vwsigvea.ini
c:\windows\system32\wcspqh.dll
c:\windows\system32\wfghrwbm.ini
c:\windows\system32\wgjhownn.ini
c:\windows\system32\wglyrfkf.ini
c:\windows\system32\wguhombg.dll
c:\windows\system32\whsquwbg.ini
c:\windows\system32\wi
c:\windows\system32\win32hlp.cnf
c:\windows\system32\winpfz33.sys
c:\windows\system32\wjsprmnm.ini
c:\windows\system32\wjxacgxp.ini
c:\windows\system32\wkqmwucs.ini
c:\windows\system32\wnvbuyoc.ini
c:\windows\system32\wpoyutbl.dll
c:\windows\system32\wsnscdta.dll
c:\windows\system32\wvaeoepu.ini
c:\windows\system32\xacgqa.dll
c:\windows\system32\xchvhy.dll
c:\windows\system32\xcrbnk.dll
c:\windows\system32\xgfixgbo.ini
c:\windows\system32\xhxroiua.ini
c:\windows\system32\xljswyev.ini
c:\windows\system32\xqhdxkyw.ini
c:\windows\system32\xtemcz.dll
c:\windows\system32\xtpwnhut.ini
c:\windows\system32\xvceiqno.ini
c:\windows\system32\xvtfdv.dll
c:\windows\system32\xwucoara.ini
c:\windows\system32\ydmsft.dll
c:\windows\system32\yjzuvd.dll
c:\windows\system32\ymkodemu.dll
c:\windows\system32\ypuovbdc.ini
c:\windows\system32\yqismfxy.ini
c:\windows\system32\drivers\core.cache.dsk . . . . failed to delete
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_SVCPROC
((((((((((((((((((((((((( Files Created from 2009-02-15 to 2009-03-15 )))))))))))))))))))))))))))))))
.
2009-03-15 10:17 . 2009-03-15 10:17 <DIR> d-------- c:\temp\tn3
2009-03-14 14:14 . 2009-03-14 14:14 <DIR> d-------- c:\program files\Trend Micro
2009-03-14 13:29 . 2009-03-14 13:59 90,350 --a------ c:\windows\SYSTEM32\DRIVERS\645c0146.sys
2009-03-14 13:29 . 2009-03-14 13:29 32,256 --a------ c:\windows\SYSTEM32\crypts(2)(2).dll
2009-03-14 11:51 . 2009-03-14 14:12 <DIR> d-------- c:\program files\ERUNT
2009-03-14 11:43 . 2009-03-14 13:55 <DIR> d-------- c:\program files\Trend Micro(2)
2009-03-14 10:42 . 2009-03-14 13:59 90,350 --a------ c:\windows\SYSTEM32\DRIVERS\27da6bb.sys
2009-03-14 10:16 . 2009-03-14 10:34 90,350 --a------ c:\windows\SYSTEM32\DRIVERS\a006ec02.sys
2009-03-14 10:14 . 2009-03-14 13:28 2 --a------ C:\1615243742
2009-03-07 14:08 . 2009-03-07 14:08 <DIR> d-------- c:\program files\2WIRE, Inc
2009-03-07 14:08 . 2006-08-24 13:44 477,696 --a------ c:\windows\SYSTEM32\DRIVERS\ZD1211BU.sys
2009-03-07 14:08 . 2004-01-14 11:25 81,920 --a------ c:\windows\SYSTEM32\ZDPN50.DLL
2009-03-07 14:08 . 2005-03-18 15:35 31,744 --a------ c:\windows\SYSTEM32\DRIVERS\ZDPSp50a64.sys
2009-03-07 14:08 . 2005-06-08 18:44 29,184 --a------ c:\windows\SYSTEM32\DRIVERS\BRGSp50a64.sys
2009-03-07 14:08 . 2004-03-23 16:38 28,672 --a------ c:\windows\SYSTEM32\InsDrvZD.dll
2009-03-07 14:08 . 2003-03-14 12:24 24,576 --a------ c:\windows\SYSTEM32\ZyDelReg.exe
2009-03-07 14:08 . 2005-06-08 18:44 20,608 --a------ c:\windows\SYSTEM32\DRIVERS\BRGSp50.sys
2009-03-07 14:08 . 2004-10-25 13:40 17,664 --a------ c:\windows\SYSTEM32\DRIVERS\ZDPSp50.sys
2009-03-07 14:08 . 2004-01-14 11:30 17,151 --a------ c:\windows\SYSTEM32\ZDPNDIS5.SYS
2009-03-07 14:08 . 2005-07-12 14:44 15,872 --a------ c:\windows\SYSTEM32\InsDrvZD64.DLL
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-15 16:16 167,976 ------w c:\windows\system32\drivers\core.cache.dsk
2009-03-14 19:55 --------- d-----w c:\documents and settings\mustard\Application Data\uTorrent
2009-03-14 19:54 --------- d-----w c:\program files\Spybot - Search & Destroy
2009-03-11 03:33 28,808 ----a-w c:\documents and settings\mustard\Application Data\wklnhst.dat
2009-03-07 20:08 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-28 06:03 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-25 02:33 --------- d-----w c:\program files\Safari
2009-02-18 02:05 --------- d-----w c:\program files\Google
2009-02-18 02:04 --------- d-----w c:\program files\uTorrent
2009-02-17 10:57 --------- d-----w c:\program files\LimeWire
2009-01-30 00:28 --------- d-----w c:\documents and settings\mustard\Application Data\dvdcss
2009-01-21 19:49 --------- d-----w c:\program files\Windows Defender
2008-10-24 20:56 68 ----a-w c:\documents and settings\mustard\z.bat
2008-10-24 20:56 45,568 ----a-w c:\documents and settings\mustard\index.exe
2008-10-03 05:46 67,504 ----a-w c:\documents and settings\mustard\Application Data\GDIPFONTCACHEV1.DAT
2008-05-26 03:10 47,360 ----a-w c:\documents and settings\mustard\Application Data\pcouffin.sys
2007-06-28 10:07 1,085,440 ----a-w c:\documents and settings\mustard\iTunesMobileDevice.dll
2005-10-31 19:09 246 ----a-w c:\documents and settings\Guest\Application Data\wklnhst.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1fb09a17-0265-3095-7794-b7508c7037e9}]
2008-10-23 21:55 160768 --a------ c:\windows\system32\oqqmxfbssvrzht.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-18 68856]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"type32"="c:\program files\Microsoft IntelliType Pro\type32.exe" [2004-06-03 172032]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\point32.exe" [2004-06-03 204800]
"MCUpdateExe"="c:\progra~1\McAfee.com\Agent\McUpdate.exe" [2006-01-11 212992]
"MCAgentExe"="c:\progra~1\McAfee.com\Agent\McAgent.exe" [2005-09-22 303104]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"McRegWiz"="c:\progra~1\mcafee.com\agent\mcregwiz.exe" [2003-09-02 135168]
c:\documents and settings\mustard\Start Menu\Programs\Startup\
ERUNT AutoBackup.lnk - c:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.I420"= i420vfw.dll
"VIDC.NSVI"= NSVIDEO.DLL
"VIDC.SP54"= SP5X_32.DLL
"VIDC.SP55"= SP5X_32.DLL
"VIDC.SP56"= SP5X_32.DLL
"VIDC.SP57"= SP5X_32.DLL
"VIDC.SP58"= SP5X_32.DLL
"vidc.X264"= x264vfw.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online 9.0 Tray Icon.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\America Online 9.0 Tray Icon.lnk
backup=c:\windows\pss\America Online 9.0 Tray Icon.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^GStartup.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\GStartup.lnk
backup=c:\windows\pss\GStartup.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^SBC Self Support Tool.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\SBC Self Support Tool.lnk
backup=c:\windows\pss\SBC Self Support Tool.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UserFaultCheck]
c:\windows\system32\dumprep 0 -u [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\6046a971]
--a------ 2008-11-08 23:28 71680 c:\windows\SYSTEM32\mruyigfr.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BJCFD]
--a------ 2002-09-10 21:26 368706 c:\program files\BroadJump\Client Foundation\CFD.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-04 01:56 15360 c:\windows\SYSTEM32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupport]
--a------ 2004-07-19 08:51 306688 c:\program files\Dell Support\DSAgnt.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
--a------ 2003-08-06 01:04 114741 c:\windows\SYSTEM32\dla\tfswctrl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDSentry]
--a------ 2003-08-13 10:27 28672 c:\windows\SYSTEM32\DSentry.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ExploreUpdSched]
--a------ 2008-10-23 21:55 548928 c:\windows\SYSTEM32\qcntmtdl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2007-05-08 16:24 54840 c:\program files\HP\HP Software Update\hpwuSchd2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
--a------ 2006-09-11 04:40 218032 c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCAgentExe]
--a------ 2005-09-22 18:29 303104 c:\progra~1\McAfee.com\Agent\mcagent.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCUpdateExe]
--a------ 2006-01-11 12:05 212992 c:\progra~1\McAfee.com\Agent\mcupdate.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection]
--------- 2003-12-05 22:08 50688 c:\program files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MoneyAgent]
--a------ 2003-06-18 12:00 200704 c:\program files\Microsoft Money\System\mnyexpr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Motive SmartBridge]
--a------ 2003-12-10 04:52 380928 c:\progra~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MPFEXE]
--a------ 2005-11-11 17:00 1005096 c:\progra~1\McAfee.com\PERSON~1\MpfTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MPSExe]
--a------ 2003-07-25 15:56 225280 c:\program files\McAfee.com\MPS\mscifapp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--a------ 2004-10-13 10:24 1694208 c:\program files\Messenger\msmsgs.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2003-10-30 08:06 4800512 c:\windows\SYSTEM32\nvcpl.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService]
--------- 2003-08-26 19:47 204800 c:\program files\Dell\Media Experience\PCMService.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-11-04 10:30 413696 c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
-rahs---- 2009-01-26 15:31 2144088 c:\program files\Spybot - Search & Destroy\TeaTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-06-10 04:27 144784 c:\program files\Java\jre1.6.0_07\bin\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2007-06-18 18:58 68856 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateManager]
--a------ 2003-08-19 01:01 110592 c:\program files\Common Files\Sonic\Update Manager\sgtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr]
-ra------ 2006-03-30 16:45 313472 c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoraiPodConverter]
--a------ 2005-11-11 12:32 483328 c:\program files\VideoraiPodConverter\VideoraiPodConverter.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ViewMgr]
--a------ 2004-11-10 22:15 111816 c:\program files\Viewpoint\Viewpoint Manager\ViewMgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirusScan Online]
--a------ 2003-08-17 21:50 163840 c:\progra~1\McAfee.com\VSO\mcvsshld.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VSOCheckTask]
--a------ 2003-08-08 18:02 122880 c:\progra~1\McAfee.com\VSO\mcmnhdlr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
--a------ 2006-11-03 19:20 866584 c:\program files\Windows Defender\MSASCui.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
--a------ 2006-03-21 16:58 3325952 c:\program files\Yahoo!\Messenger\YahooMessenger.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YBrowser]
--a------ 2003-12-09 14:02 57344 c:\progra~1\Yahoo!\browser\ybrwicon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\{ab4a89b5-f0e8-2881-ed3e-48dd6e75eaf8}]
--a------ 2008-10-23 21:55 160768 c:\windows\SYSTEM32\oqqmxfbssvrzht.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCMSMMSG]
--a------ 2003-08-29 04:59 122880 c:\windows\BCMSMMSG.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=c:\program files\Spybot - Search & Destroy\TeaTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YPager.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\StubInstaller.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\MSN Gaming Zone\\Windows\\CHKRZM.EXE"=
"c:\\Program Files\\MSN Gaming Zone\\Windows\\HRTZZM.EXE"=
"c:\\Program Files\\MSN Gaming Zone\\Windows\\Rvsezm.exe"=
"c:\\Program Files\\MSN Gaming Zone\\Windows\\SHVLZM.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\QuickTime\\QuickTimePlayer.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
R1 mpee;mpee;c:\windows\SYSTEM32\DRIVERS\mpee.sys [2008-10-23 86144]
R3 NaiFiltr;NaiFiltr;c:\windows\SYSTEM32\DRIVERS\NaiFiltr.sys [2004-03-17 23296]
S2 Ca536av;FashionCam Video Camera Device;c:\windows\SYSTEM32\DRIVERS\Ca536av.sys [2005-02-20 514859]
S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\SYSTEM32\DRIVERS\npf.sys [2006-08-15 34944]
S3 USBCamera;FashionCam Digital Still Camera Device;c:\windows\SYSTEM32\DRIVERS\Bulk536.sys [2005-02-20 11048]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7d825c44-2409-11db-8a44-00038a000015}]
\Shell\AutoRun\command - F:\setupSNK.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a0e8323a-9a35-11d9-87e3-00038a000015}]
\Shell\AutoRun\command - JDSecure\Windows\JDSecure20.exe
.
Contents of the 'Scheduled Tasks' folder
2009-03-10 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
- - - - ORPHANS REMOVED - - - -
URLSearchHooks-{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - c:\program files\Winamp Toolbar\winamptb.dll
BHO-{030844fd-9279-4697-ba9e-d8ae3dfe76e0} - (no file)
BHO-{2486CED0-3224-429B-B463-8D680986DBAD} - c:\windows\system32\cbXRJDWO.dll
BHO-{3AF50AD4-35C9-4BAE-A591-F210A4656812} - (no file)
BHO-{4ED0AFD2-CFC1-4482-81F5-DF822E5C76D7} - (no file)
BHO-{6ec8a18b-e40c-47cf-b88c-feef9a21c813} - (no file)
BHO-{731E1456-0B30-4BAB-A23A-D8262117C5F7} - (no file)
BHO-{a61fc1eb-60be-4ac4-b915-ccb32037043e} - (no file)
BHO-{B40B865D-B0D3-4ED1-A8CB-9EF352BC6EA9} - c:\windows\system32\xxywXOgh.dll
BHO-{B46CFBA1-730C-46EA-9FFA-3FAE81BE45FC} - (no file)
BHO-{bae007f0-6327-4370-ae5b-b57871b81bc6} - (no file)
BHO-{d9c34316-722e-434b-82a5-a02e4259bdba} - c:\windows\system32\kmjrfi.dll
ShellExecuteHooks-{B40B865D-B0D3-4ED1-A8CB-9EF352BC6EA9} - c:\windows\system32\xxywXOgh.dll
Notify-xxywXOgh - xxywXOgh.dll
MSConfigStartUp-Adobe Photo Downloader - c:\program files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
MSConfigStartUp-Aida - c:\progra~1\MANTEC~1\logonui.exe
MSConfigStartUp-AIM - c:\program files\AIM\aim.exe
MSConfigStartUp-AltnetPointsManager - c:\program files\altnet\points manager\points manager.exe
MSConfigStartUp-aqadcup - c:\windows\aqadcup.exe
MSConfigStartUp-Belt - c:\windows\Belt.exe
MSConfigStartUp-bfimvx - c:\windows\system32\rqjshhr.exe
MSConfigStartUp-cogwlk - c:\windows\system32\ahjdbjs.exe
MSConfigStartUp-dbjdmtc - c:\windows\System32\rkqoakkm.exe
MSConfigStartUp-Dinst - c:\windows\dinst.exe
MSConfigStartUp-djuxym - c:\windows\system32\ipvdllk.exe
MSConfigStartUp-Enh Win Updt - c:\windows\enhupdt.exe
MSConfigStartUp-faofaqyudbx - c:\windows\System32\rkqoakkm.exe
MSConfigStartUp-farmmext - c:\windows\farmmext.exe
MSConfigStartUp-fddooz - c:\windows\system32\sravkjr.exe
MSConfigStartUp-fyimdq - c:\windows\system32\qxvcja.exe
MSConfigStartUp-gemyqac - c:\windows\system32\akqtxgy.exe
MSConfigStartUp-GetPack24 - c:\program files\GetPack\GetPack24.exe
MSConfigStartUp-Google Desktop Search - c:\program files\Google\Google Desktop Search\GoogleDesktop.exe
MSConfigStartUp-Gool - c:\documents and settings\mustard\Application Data\Gool\Gool.exe
MSConfigStartUp-hgpmpk - c:\windows\system32\vwdphw.exe
MSConfigStartUp-hitbznnzoat - c:\windows\System32\rkqoakkm.exe
MSConfigStartUp-iclgfy - c:\windows\system32\dunmws.exe
MSConfigStartUp-ixvlps - c:\windows\system32\leozcuh.exe
MSConfigStartUp-KAZAA - c:\program files\Kazaa\kazaa.exe
MSConfigStartUp-kijlktftffi - c:\windows\System32\rkqoakkm.exe
MSConfigStartUp-kiyiew - c:\windows\system32\dxzudmu.exe
MSConfigStartUp-kvusaq - c:\windows\system32\rtwpmf.exe
MSConfigStartUp-kxcalt - c:\windows\system32\rpswon.exe
MSConfigStartUp-lxkvkk - c:\windows\system32\rcvlit.exe
MSConfigStartUp-MbarInstall - c:\docume~1\mustard\LOCALS~1\Temp\tem9F.tmp.exe
MSConfigStartUp-mmtask - c:\program files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
MSConfigStartUp-MMTray - c:\program files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
MSConfigStartUp-mmziihq - c:\windows\system32\qqeztp.exe
MSConfigStartUp-mrzyqhh - c:\windows\system32\asvebu.exe
MSConfigStartUp-nhrrnv - c:\windows\system32\bhdufp.exe
MSConfigStartUp-oarbdxx - c:\windows\System32\rkqoakkm.exe
MSConfigStartUp-ocqyaef - c:\windows\System32\rkqoakkm.exe
MSConfigStartUp-rqmo - c:\program files\InetGet2\stub109_4_0_4_0.exe
MSConfigStartUp-SearchUpgrader - c:\program files\Common files\SearchUpgrader\SearchUpgrader.exe
MSConfigStartUp-SfKg6wIP - c:\documents and settings\mustard\Application Data\Microsoft\Windows\ncxslpi.exe
MSConfigStartUp-Smart Start UP - c:\program files\NewSoft\Smart Start UP\PnPDetect.exe
MSConfigStartUp-somhkk - c:\windows\system32\mtttqn.exe
MSConfigStartUp-SpeedRunner - c:\documents and settings\mustard\Application Data\SpeedRunner\SpeedRunner.exe
MSConfigStartUp-Spyware Stormer - c:\program files\Spyware Stormer\SpywareStormer.Exe
MSConfigStartUp-SQInstaller - c:\program files\STC\SQ_3394_3222.exeSQInstaller.exe
MSConfigStartUp-TkBellExe - c:\program files\Common Files\Real\Update_OB\realsched.exe
MSConfigStartUp-Uniblue RegistryBooster 2 - c:\program files\Uniblue\RegistryBooster 2\RegistryBooster.exe
MSConfigStartUp-updmgr - c:\program files\Common files\updmgr\updmgr.exe
MSConfigStartUp-vfozwh - c:\windows\system32\lfkvpw.exe
MSConfigStartUp-Weather - c:\program files\AWS\WeatherBug\Weather.exe
MSConfigStartUp-Win Server Updt - c:\windows\wupdt.exe
MSConfigStartUp-WinampAgent - c:\program files\Winamp\winampa.exe
MSConfigStartUp-Windows Logon Applicationedc - c:\documents and settings\mustard\winlogon.exe
MSConfigStartUp-xcymmx - c:\windows\system32\bdknpq.exe
MSConfigStartUp-zcfxnu - c:\windows\system32\tdrkrsx.exe
MSConfigStartUp-{6A-A9-9D-DE-DW} - c:\windows\system32\dwwnw64r.exe
MSConfigStartUp-IPPDetect - IPP4Detect.exe
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.yahoo.com/
uSearch Page = hxxp://www.google.com
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearch Bar = hxxp://www.google.com/ie
mStart Page = hxxp://www.dogpile.com/info.dogpl/
mSearch Bar = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sb/sbcydsl/*
http://www.yahoo.com/search/ie.html
uInternet Settings,ProxyOverride = 127.0.0.1;*.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Viewpoint Search - c:\program files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
IE: &Winamp Search - c:\documents and settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
LSP: c:\windows\System32\mclsp.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\mustard\Application Data\Mozilla\Firefox\Profiles\scrb3te7.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1396957&SearchSource=3&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - component: c:\documents and settings\mustard\Application Data\Mozilla\Firefox\Profiles\scrb3te7.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampPlayer.dll
FF - component: c:\documents and settings\mustard\Application Data\Mozilla\Firefox\Profiles\scrb3te7.default\extensions\{f592709f-ff4a-4862-b659-4afabda56312}\components\FFAlert.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPTURNMED.dll
FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2009-03-15 10:17:29
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5EB4415E-B969-2C69-DD874BCF6C12CC68}\{3E489D97-A265-F92B-B062A61AC9296970}\{9D75BF9D-92B8-985A-711124B44CF5D523}*]
"JWOYTVPITEDJCHYUGDR5XL6BSC1"=hex:01,00,01,00,00,00,00,00,b1,dc,8a,ef,e5,23,43,
80,35,81,92,71,e8,29,5a,84,14,35,16,70,d8,6e,ff,61
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{80019D1B-8DB3-7371-77F0-1961C8E8AF7F}\InProcServer32*]
"eajabkoofl"=hex:6b,61,6c,64,68,70,6e,6d,6b,68,6a,66,69,68,65,62,66,70,62,6b,
68,69,00,00
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{84989203-5DE8-3073-8BE62EC2F2FBE831}\{944CD226-8AE2-56C7-1A2253B060F71AD3}\{34E7E91D-17F9-EA39-81692D881F65A730}*]
"JWOYTVPITEDJCHYUGDR5XL6BSC1"=hex:01,00,01,00,00,00,00,00,b1,dc,8a,ef,e5,23,43,
80,35,81,92,71,e8,29,5a,84,14,35,16,70,d8,6e,ff,61
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'lsass.exe'(936)
c:\windows\System32\mclsp.dll
c:\windows\system32\SPORDER.dll
c:\windows\System32\mclsphlr\gdlsphlr.dll
c:\windows\system32\McRtl32.dll
.
------------------------ Other Running Processes ------------------------
.
c:\progra~1\COMMON~1\AOL\ACS\acsd.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\McAfee.com\Agent\Mcdetect.exe
c:\progra~1\McAfee.com\Agent\McTskshd.exe
c:\progra~1\McAfee.com\VSO\mcvsrte.exe
c:\progra~1\McAfee.com\PERSON~1\MpfService.exe
c:\windows\SYSTEM32\nvsvc32.exe
c:\windows\SYSTEM32\HPZipm12.exe
c:\windows\wanmpsvc.exe
c:\progra~1\McAfee.com\VSO\McShield.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Completion time: 2009-03-15 10:27:46 - machine was rebooted
ComboFix-quarantined-files.txt 2009-03-15 16:26:35
Pre-Run: 29,550,854,144 bytes free
Post-Run: 29,608,669,184 bytes free
WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn
689 --- E O F --- 2008-10-23 21:46:41
Uninstall List
2WIRE Wireless LAN - USB Driver
Adobe Acrobat 5.0
Adobe Atmosphere Player for Acrobat and Adobe Reader
Adobe Flash Player 10 Plugin
Adobe Flash Player ActiveX
Adobe Reader 7.1.0
Adobe Shockwave Player
America Online (Choose which version to remove)
Apple Mobile Device Support
Apple Software Update
ARYANPUR
AviSynth 2.5
BCM V.92 56K Modem
BHA B's Recorder GOLD 3.25
Bonjour
BroadJump Client Foundation
Computrainer
Dell Digital Jukebox Driver
Dell Media Experience
Dell ResourceCD
Dell Solution Center
Dell Support 5.0.0 (766)
DivX Content Uploader
DivX Web Player
DVC305
DVD Decrypter (Remove Only)
DVDSentry
ERUNT 1.1j
FBrowsingAdvisor
Google Toolbar for Internet Explorer
HijackThis 2.0.2
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB952287)
HP Imaging Device Functions 7.0
HP Photosmart and Deskjet 7.0.A
HP Photosmart Essential
HP Solution Center 7.0
HP Update
Incredifind
Intel(R) Integrated Performance Primitives RTI 4.0
Intel(R) PRO Network Adapters and Drivers
Intel(R) PROSet
Internet Explorer Default Page
iPod for Windows 2005-02-22
iPod for Windows 2005-11-17
iPod for Windows 2006-01-10
iPod for Windows 2006-03-23
iTunes
J2SE Runtime Environment 5.0 Update 3
J2SE Runtime Environment 5.0 Update 6
Jasc Paint Shop Photo Album
Jasc Paint Shop Pro 8 Dell Edition
Java 2 Runtime Environment, SE v1.4.2
Java(TM) 6 Update 7
Learn2 Player (Uninstall Only)
LimeWire 4.18.8
McAfee Personal Firewall Plus
McAfee Privacy Service
McAfee SecurityCenter
McAfee VirusScan
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Data Access Components KB870669
Microsoft Document Explorer 2005
Microsoft Document Explorer 2005
Microsoft Encarta Encyclopedia Standard 2004
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2004
Microsoft Money 2004 System Pack
Microsoft National Language Support Downlevel APIs
Microsoft Office PowerPoint Viewer 2003
Microsoft Picture It! Photo Premium 9
Microsoft Streets and Trips 2004
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Word 2002
Microsoft Works
Microsoft Works 2004 Setup Launcher
Microsoft Works Suite Add-in for Microsoft Word
Minitab 15 English
Modem Helper
Mozilla Firefox (3.0.5)
MSN Music Assistant
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
NVIDIA Windows 2000/XP Display Drivers
OCR Software by I.R.I.S 7.0
PowerDVD
PSP Video 9 1.74
Quicken WillMaker Plus 2005
QuickTime
Safari
SBC Self Support Tool
SBC Yahoo! Applications
Search Basket
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901190)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931768)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933566)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937143)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB939653)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB942615)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944338)
Security Update for Windows XP (KB944533)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB947864)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Shockwave
Sonic DLA
Sonic MyDVD
Sonic RecordNow!
Sonic Update Manager
Spybot - Search & Destroy
TBS WMP Plug-in
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB932823-v3)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB942840)
Update for Windows XP (KB946627)
Update for Windows XP (KB951072-v2)
VideoLAN VLC media player 0.8.6h
Videora iPod Converter 4.05
Viewpoint Manager (Remove Only)
VisualTool
Windows Defender
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
WinPcap 4.0 beta 1
WinRAR archiver
X264 H.264/AVC Video Codec (remove only)
YouTube Downloader App 1.01
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:31:35 AM, on 3/15/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Safari\Safari.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://red.clientapps.yahoo.com/cus.../sbcydsl/*http://www.yahoo.com/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.dogpile.com/info.dogpl/
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://www.dogpile.com/info.dogpl.toolbar/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O2 - BHO: agadoo browser optimizer - {1fb09a17-0265-3095-7794-b7508c7037e9} - C:\WINDOWS\system32\oqqmxfbssvrzht.dll
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (file missing)
O3 - Toolbar: (no name) - {5E92F538-B50B-46C5-9C5F-C6EECED3F6C6} - (no file)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\McAfee.com\Agent\McAgent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [McRegWiz] c:\PROGRA~1\mcafee.com\agent\mcregwiz.exe /autorun
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: SBC Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) -
http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,84/mcinsctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129085842125
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} -
http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {9BFC2253-B9D9-477E-9488-CA450232620D} (BinAg1 Class) -
https://fastconnectkitsetup.cox.net/wizlet/CoxNA/static/controls/WebflowActiveX.CAB
O16 - DPF: {9E17A5F9-2B9C-4C66-A592-199A4BA1FBC8} -
http://pictures06.aim.com/ygp/aol/plugin/upf/AOLUPF.en-US-AIM.9.5.1.7.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) -
http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yse/ymmapi_416.dll
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) -
http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) -
http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,21/mcgdmgr.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) -
http://a532.g.akamai.net/f/532/6712/4h/player.virtools.com/downloads/player/Install3.0/Installer.exe
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Plug-in 1.6.0_03) -
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} (Java Plug-in 1.6.0_05) -
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) -
http://www.gamehouse.com/games/SproutLauncher.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O24 - Desktop Component 0: (no name) -
http://www.sonypictures.com/movies/...ads/wallpapers/wallpapers/lodt1_1280x1024.jpg
--
End of file - 10518 bytes
