|
|
aestone
new user
Reg'd: Thu
Posts: 1
|
|
Hi:
I am new to the forums and first wish to say hello to all. Now, I face the same problem that the other user faced. Internet Eplorer windows keep popping up, even when internet explorer is not running. Now, I did what you said and made those two files and here is main text:
Deckard's System Scanner v20071014.68 Run by Administrator on 2008-05-08 13:06:29 Computer is in Normal Mode. --------------------------------------------------------------------------------
Backed up registry hives. Performed disk cleanup.
System Drive C: has 9.54 GiB (less than 15%) free.
-- HijackThis Clone ------------------------------------------------------------
Emulating logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2008-05-08 13:12:28 Platform: Windows 2003 Service Pack 2 (5.02.3790) MSIE: Internet Explorer (7.00.6000.16640) Boot mode: Normal
Running processes: C:\WINDOWS\system32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ccs.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\scardsvr.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\msdtc.exe C:\Program Files\CA\SharedComponents\Alert\alert.exe C:\WINDOWS\system32\alg.exe C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe C:\WINDOWS\system32\ServerAppliance\appmgr.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers\avp.exe C:\Program Files\CA\SharedComponents\BrightStor\CADS\casdscsvc.exe C:\Program Files\CA\BrightStor ARCserve Backup\jobeng.exe C:\Program Files\CA\BrightStor ARCserve Backup\msgeng.exe C:\Program Files\CA\BrightStor ARCserve Backup\CASMRTBK.EXE C:\Program Files\CA\BrightStor ARCserve Backup\caserved.exe C:\Program Files\CA\BrightStor ARCserve Backup\tapeeng.exe C:\Program Files\CA\BrightStor ARCserve Backup\cadiscovd.exe C:\Program Files\CA\BrightStor ARCserve Backup\Catirpc.exe C:\WINDOWS\system32\cisvc.exe C:\Program Files\CA\BrightStor ARCserve Backup\caloggerd.exe C:\Program Files\FDD + FMD Combo Reader\Czfmdser.exe C:\Program Files\CA\SharedComponents\BrightStor\DBAcommon\DBASVR.exe C:\WINDOWS\system32\dfssvc.exe C:\WINDOWS\system32\dns.exe C:\WINDOWS\system32\ServerAppliance\elementmgr.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\g7ddcoms.exe C:\Program Files\CA\SharedComponents\iTechnology\igateway.exe C:\Program Files\CA\BrightStor ARCserve Backup\caauthd.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\Program Files\CA\BrightStor ARCserve Backup\LQserver.exe C:\WINDOWS\system32\ismserv.exe C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe C:\Program Files\Matrox Graphics Inc\PowerDesk\Services\Matrox.PowerDesk.Services.exe C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\MDM.EXE C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers\avp.exe C:\Program Files\Microsoft SQL Server\MSSQL$SHAREPOINT\Binn\sqlservr.exe C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\Program Files\Microsoft SQL Server\MSSQL.2\OLAP\bin\msmdsrv.exe C:\Program Files\CA\BrightStor ARCserve Backup\Mediasvr.exe C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ntfrs.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\PSIService.exe C:\Program Files\CA\SharedComponents\BrightStor\DBAcommon\dbasqlr.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Microsoft SQL Server\MSSQL.3\Reporting Services\ReportServer\bin\ReportingServicesService.exe C:\Program Files\Spyware Doctor\svcntaux.exe C:\WINDOWS\system32\tcpsvcs.exe C:\WINDOWS\system32\snmp.exe C:\Program Files\Common Files\Microsoft Shared\web server extensions\60\BIN\OWSTIMER.EXE C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ServerAppliance\srvcsurg.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\tlntsvr.exe C:\WINDOWS\system32\vssvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wins.exe C:\WINDOWS\system32\windows media\server\wmserver.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\dfsr.exe C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe C:\WINDOWS\system32\mqsvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\mqdssvc.exe C:\WINDOWS\system32\mqtgsvc.exe C:\WINDOWS\system32\cidaemon.exe C:\WINDOWS\system32\cidaemon.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\CA\BrightStor ARCserve Backup\ASAlert.exe C:\WINDOWS\system32\locator.exe C:\Program Files\CA\BrightStor ARCserve Backup\LDBserver.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Spyware Doctor\swdsvc.exe C:\WINDOWS\explorer.exe C:\Program Files\Cisco Aironet\ADU.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\Program Files\FDD + FMD Combo Reader\CZFMDxpk.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Program Files\PowerISO\PWRISOVM.EXE C:\Program Files\VersaJette M400-V08\g7ddmon.exe C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.PowerDesk SE.exe C:\Documents and Settings\Administrator\lsass.exe C:\Program Files\Spyware Doctor\SDTrayApp.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers\avp.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe C:\Program Files\Svconr\Svconr.exe C:\Program Files\Nero\PhotoShow 5\data\Xtras\mssysmgr.exe C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe C:\Program Files\VCOM\PowerDesk\pddlghlp.exe C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpmup081.bin C:\WINDOWS\system32\cidaemon.exe H:\Download\dss.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://shdoclc.dll/softAdmin.htm R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: LNHelper.BarHelper - {05A34600-8920-479b-92A9-68FACF7BB8FA} - mscoree.dll (file missing) O2 - BHO: (no name) - {6099E475-049B-4239-BE88-2910A49F9F6A} - C:\WINDOWS\system32\opnnnnMf.dll (file missing) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: (no name) - {D2376FB3-3D0D-414D-83AA-3AD6AD6B111F} - C:\WINDOWS\system32\ljJDSIcC.dll (file missing) O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: LexisNexis Toolbar - {86BE1CDA-4F72-4c2f-9526-8E6A22DF46ED} - mscoree.dll (file missing) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [ADU] "C:\Program Files\Cisco Aironet\adu.exe" -nogui O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [CZFMDXPK] C:\PROGRA~1\FDD_FM~1\CZFMDXPK.exe O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll O4 - HKLM\..\Run: [DWPersistentQueuedReporting] C:\PROGRA~1\COMMON~1\MICROS~1\DW\DWTRIG20.EXE -a O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [ScanSoft OmniPage 16-reminder] "C:\Program Files\ScanSoft\OmniPage16\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\OmniPage 16\Ereg\Ereg.ini" O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [g7ddmon.exe] "C:\Program Files\VersaJette M400-V08\g7ddmon.exe" O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\VersaJette Fax Solutions\fm3032.exe" /s O4 - HKLM\..\Run: [PdxRegCl] "C:\Program Files\Paradox\Programs\PdxRegCl.exe" /s /c O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\WordPerfect Office X3\Programs\QFSCHD130.EXE" O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" O4 - HKLM\..\Run: [Matrox PowerDesk SE] "C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.PowerDesk SE.exe" O4 - HKLM\..\Run: [LSA Shellu] C:\Documents and Settings\Administrator\lsass.exe O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe" O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers\avp.exe" O4 - HKCU\..\Run: [OpAgent] "OpAgent.exe" /agent O4 - HKCU\..\Run: [JavaCore] C:\Program Files\\JavaCore\\JavaCore.exe O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 O4 - HKCU\..\Run: [Svconr] C:\Program Files\Svconr\Svconr.exe O4 - HKCU\..\Run: [Nero PhotoShow Media Manager] C:\PROGRA~1\Nero\PHOTOS~1\data\Xtras\mssysmgr.exe O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user') O4 - Startup: Dialog Helper.lnk = C:\Program Files\VCOM\PowerDesk\pddlghlp.exe O4 - Global Startup: APC UPS Status.lnk = C:\Program Files\APC\APC PowerChute Personal Edition\Display.exe O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Open with WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing) O10 - Unknown file in Winsock LSP: C:\WINDOWS\system32\nwprovau.dll O15 - Trusted Zone: https://turbotax.com (HKCU) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O17 - HKLM\Software\..\Telephony: DomainName = stone-and-stone.com O17 - HKLM\SYSTEM\CCS\Services\Tcpip\..\{B011C667-DEE8-47C3-BB7C-8CB79E05A8A2}: NameServer = 24.92.226.11,24.92.226.12 O17 - HKLM\SYSTEM\CCS\Services\Tcpip\..\{ED90DC01-B2D0-48A0-9353-E41A7AE38AEC}: NameServer = 24.92.226.11,24.92.226.12 O17 - HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: Domain = stone-and-stone.com O17 - HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: Domain = stone-and-stone.com O18 - Protocol: g7ps - {9EACF0FB-4FC7-436E-989B-3197142AD979} - C:\Program Files\Common Files\G7PS\Shared Files\G7PSDLL\G7PS.dll O18 - Protocol: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL O20 - Winlogon Notify: ljJDSIcC - C:\WINDOWS\system32\ljJDSIcC.dll (file missing) O23 - Service: Alert Notification Server - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\Alert\alert.exe O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers\avp.exe O23 - Service: CA BrightStor Database Engine (CASDBEngine) - CA - C:\Program Files\CA\BrightStor ARCserve Backup\DBENG.exe O23 - Service: CA BrightStor Discovery Service (CASDiscoverySvc) - CA - C:\Program Files\CA\SharedComponents\BrightStor\CADS\casdscsvc.exe O23 - Service: CA BrightStor Job Engine (CASJobEngine) - CA - C:\Program Files\CA\BrightStor ARCserve Backup\jobeng.exe O23 - Service: CA BrightStor Message Engine (CASMsgEngine) - CA - C:\Program Files\CA\BrightStor ARCserve Backup\msgeng.exe O23 - Service: CA BrightStor Service Controller (CASSvcControlSvr) - CA - C:\Program Files\CA\BrightStor ARCserve Backup\caserved.exe O23 - Service: CA BrightStor Tape Engine (CASTapeEngine) - CA - C:\Program Files\CA\BrightStor ARCserve Backup\tapeeng.exe O23 - Service: CA BrightStor Domain Server (CASUnivDomainSvr) - CA - C:\Program Files\CA\BrightStor ARCserve Backup\cadiscovd.exe O23 - Service: CA Remote Procedure Call Server (CATIRPC) - CA - C:\Program Files\CA\BrightStor ARCserve Backup\Catirpc.exe O23 - Service: CA License Client (CA_LIC_CLNT) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\\lic98rmt.exe O23 - Service: Cisco Configuration Service (CCS) - Unknown owner - C:\WINDOWS\system32\ccs.exe O23 - Service: CZFMDSER.EXE - Unknown owner - C:\Program Files\FDD + FMD Combo Reader\Czfmdser.exe O23 - Service: CA BrightStor Backup Agent RPC Server (DbaRpcService) - CA - C:\Program Files\CA\SharedComponents\BrightStor\DBAcommon\DBASVR.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: g7dd_device - Unknown owner - C:\WINDOWS\system32\g7ddcoms.exe O23 - Service: iTechnology iGateway 4.0 (iGateway) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\iTechnology\igateway.exe O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe O23 - Service: Matrox Centering Service - Matrox Graphics Inc. - C:\Program Files\Matrox Graphics Inc\PowerDesk\Services\Matrox.PowerDesk.Services.exe O23 - Service: Matrox.Pdesk.ServicesHost - Unknown owner - C:\Program Files\Matrox Graphics Inc\PowerDesk SE\Matrox.Pdesk.ServicesHost.exe O23 - Service: Nero BackItUp Scheduler 3 - Unknown owner - C:\Program Files\Nero\Nero8\Nero O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe O23 - Service: CA BrightStor Backup Agent Remote Service (RemoteDbagent) - CA - C:\Program Files\CA\SharedComponents\BrightStor\DBAcommon\dbasqlr.exe O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
-- End of file - 18988 bytes
-- File Associations -----------------------------------------------------------
.cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser "%1",%*[/COLOR] .ini - inifile - shell\open\command - C:\WINDOWS\SYSTEM32\NOTEPAD.EXE %1[/COLOR] .js - jsfile - DefaultIcon - C:\Corel\Suite8\Programs\CCWin\Cscape.exe ,1[/COLOR] .js - jsfile - shell\open\command - C:\Corel\Suite8\Programs\CCWin\Cscape.exe[/COLOR] .txt - txtfile - shell\open\command - C:\WINDOWS\SYSTEM32\NOTEPAD.EXE %1[/COLOR]
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R1 AFS2K - c:\windows\system32\drivers\afs2k.sys <Not Verified; Oak Technology Inc.; AFS> R1 modemm - c:\windows\system32\drivers\modemm.sys R1 Mtxparmx - c:\windows\system32\drivers\mtxparmx.sys <Not Verified; Matrox Graphics Inc.; Matrox Miniport Extension Kernel Driver> R1 SCDEmu - c:\windows\system32\drivers\scdemu.sys <Not Verified; PowerISO Computing, Inc.; scdemu> R2 CSCO21P (Cisco Protocol (IEEE 802.1x) v2.3.1.8) - c:\windows\system32\drivers\csco21p.sys <Not Verified; Meetinghouse Data Communications; AEGIS Client 2.3.1.9> R3 MTXPAR - c:\windows\system32\drivers\mtxparm.sys <Not Verified; Matrox Graphics Inc.; Matrox Parhelia Miniport Driver> R3 NCHSSVAD (SoundTap Recorder) - c:\windows\system32\drivers\nchssvad.sys <Not Verified; NCH Swift Sound; NCH Swift Sound Virtual Audio Device>
S3 IpInIp (IP in IP Tunnel Driver) - c:\windows\system32\drivers\ipinip.sys (file missing)
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 Alert Notification Server - "c:\program files\ca\sharedcomponents\alert\alert.exe" <Not Verified; Computer Associates International, Inc.; Alert Service> R2 CASDiscoverySvc (CA BrightStor Discovery Service) - "c:\program files\ca\sharedcomponents\brightstor\cads\casdscsvc.exe" <Not Verified; CA; BrightStor ARCserve Backup> R2 CASJobEngine (CA BrightStor Job Engine) - "c:\program files\ca\brightstor arcserve backup\jobeng.exe" <Not Verified; CA; BrightStor ARCserve Backup> R2 CASMsgEngine (CA BrightStor Message Engine) - "c:\program files\ca\brightstor arcserve backup\msgeng.exe" <Not Verified; CA; BrightStor ARCserve Backup> R2 CASSvcControlSvr (CA BrightStor Service Controller) - "c:\program files\ca\brightstor arcserve backup\caserved.exe" <Not Verified; CA; BrightStor ARCserve Backup> R2 CASTapeEngine (CA BrightStor Tape Engine) - "c:\program files\ca\brightstor arcserve backup\tapeeng.exe" <Not Verified; CA; BrightStor ARCserve Backup> R2 CASUnivDomainSvr (CA BrightStor Domain Server) - "c:\program files\ca\brightstor arcserve backup\cadiscovd.exe" <Not Verified; CA; BrightStor ARCserve Backup> R2 CATIRPC (CA Remote Procedure Call Server) - "c:\program files\ca\brightstor arcserve backup\catirpc.exe" <Not Verified; CA; BrightStor ARCserve Backup> R2 CCS (Cisco Configuration Service) - c:\windows\system32\ccs.exe R2 CZFMDSER.EXE - "c:\progra~1\fdd_fm~1\czfmdser.exe" R2 DbaRpcService (CA BrightStor Backup Agent RPC Server) - "c:\program files\ca\sharedcomponents\brightstor\dbacommon\dbasvr.exe" <Not Verified; CA; BrightStor ARCserve Backup> R2 iGateway (iTechnology iGateway 4.0) - "c:\program files\ca\sharedcomponents\itechnology\igateway.exe" <Not Verified; Computer Associates International, Inc.; iTechnology iGateway> R2 LogWatch (Event Log Watch) - "c:\program files\ca\sharedcomponents\ca_lic\logwatnt.exe" <Not Verified; Computer Associates; Computer Associates LogWatNT> R2 Nero BackItUp Scheduler 3 - c:\program files\nero\nero8\nero backitup\nbservice.exe R2 ProtexisLicensing - c:\windows\system32\psiservice.exe <Not Verified; ; PSIService> R2 RemoteDbagent (CA BrightStor Backup Agent Remote Service) - "c:\program files\ca\sharedcomponents\brightstor\dbacommon\dbasqlr.exe" <Not Verified; CA; BrightStor ARCserve Backup> R3 FLEXnet Licensing Service - "c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" <Not Verified; Macrovision Europe Ltd.; FLEXnet Publisher (32 bit)> R3 ServiceLayer - "c:\program files\common files\pcsuite\services\servicelayer.exe" <Not Verified; Nokia.; PC Connectivity Solution>
S2 CASDBEngine (CA BrightStor Database Engine) - "c:\program files\ca\brightstor arcserve backup\dbeng.exe" <Not Verified; CA; BrightStor ARCserve Backup> S3 CA_LIC_CLNT (CA License Client) - "c:\program files\ca\sharedcomponents\ca_lic\\lic98rmt.exe" <Not Verified; Computer Associates International Inc.; Lic98> S3 SrmReports (File Server Storage Reports Manager) - c:\windows\system32\srmhost.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
-- Device Manager: Disabled ----------------------------------------------------
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: Cisco Aironet 802.11a/b/g Wireless Adapter Device ID: PCI\VEN_168C&DEV_0013&SUBSYS_CC2114B9&REV_01\5&FF66674&0&08F810 Manufacturer: Cisco Name: Cisco Aironet 802.11a/b/g Wireless Adapter PNP Device ID: PCI\VEN_168C&DEV_0013&SUBSYS_CC2114B9&REV_01\5&FF66674&0&08F810 Service: CSCO21
Class GUID: {36FC9E60-C465-11CF-8056-444553540000} Description: USB Mass Storage Device Device ID: USB\VID_55AA&PID_B012\9A0D905641 Manufacturer: Compatible USB storage device Name: USB Mass Storage Device PNP Device ID: USB\VID_55AA&PID_B012\9A0D905641 Service: USBSTOR
Class GUID: {4D36E980-E325-11CE-BFC1-08002BE10318} Description: USB FloppyDisk Drive Device ID: USBSTOR\SFLOPPY&VEN_CITIZEN&PROD_X1DE-USB&REV_1002\8&13F131FE&0 Manufacturer: (Standard floppy disk drives) Name: CITIZEN X1DE-USB USB Device PNP Device ID: USBSTOR\SFLOPPY&VEN_CITIZEN&PROD_X1DE-USB&REV_1002\8&13F131FE&0 Service: sfloppy
Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318} Description: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard Device ID: ACPI\PNP0303\4&2A083901&0 Manufacturer: (Standard keyboards) Name: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard PNP Device ID: ACPI\PNP0303\4&2A083901&0 Service: i8042prt
Class GUID: {4D36E96F-E325-11CE-BFC1-08002BE10318} Description: PS/2 Compatible Mouse Device ID: ACPI\PNP0F13\4&2A083901&0 Manufacturer: Microsoft Name: PS/2 Compatible Mouse PNP Device ID: ACPI\PNP0F13\4&2A083901&0 Service: i8042prt
Class GUID: Description: Device ID: ROOT\LEGACY_MSISERVER\0000 Manufacturer: Name: PNP Device ID: ROOT\LEGACY_MSISERVER\0000 Service:
-- Files created between 2008-04-08 and 2008-05-08 -----------------------------
2008-05-07 10:41:59 0 d-------- C:\Documents and Settings\All Users\Application Data\Simple Star 2008-05-07 10:31:33 335872 --a------ C:\WINDOWS\Nero PhotoShow.scr <Not Verified; Nero AG / Nero Inc.; Nero PhotoShow Screen Saver> 2008-05-07 10:11:21 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll <Not Verified; Pegasus Software; TWNLIB20> 2008-05-07 10:11:21 38912 --a------ C:\WINDOWS\system32\picn20.dll <Not Verified; Pegasus Imaging Corp.; PEGASUS> 2008-05-07 09:54:28 0 d-------- C:\Documents and Settings\All Users\Application Data\Simple Star Shared 2008-05-07 09:54:23 0 d-------- C:\Program Files\Common Files\Simple Star Shared 2008-05-07 09:52:28 0 d-------- C:\Documents and Settings\Administrator\Application Data\Simple Star 2008-05-07 08:24:48 2112 --a------ C:\WINDOWS\system32\dotgvivp.exe 2008-05-07 08:12:47 425472 --ahs---- C:\WINDOWS\system32\fMnnnnpo.ini2 2008-05-07 07:06:51 0 d-------- C:\Program Files\Kaspersky Lab 2008-05-07 07:06:48 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2008-05-07 07:04:47 326944 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat 2008-05-07 07:04:47 18583072 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat 2008-05-07 07:02:15 0 d-------- C:\kav 2008-05-04 08:37:23 0 d-------- C:\Windows XP Pro SP3 VL MSDN 2008-05-01 18:30:16 545 -----n--- C:\WINDOWS\UC.PIF 2008-05-01 18:30:16 545 -----n--- C:\WINDOWS\RAR.PIF 2008-05-01 18:30:16 545 -----n--- C:\WINDOWS\PKZIP.PIF 2008-05-01 18:30:16 545 -----n--- C:\WINDOWS\PKUNZIP.PIF 2008-05-01 18:30:16 545 -----n--- C:\WINDOWS\NOCLOSE.PIF 2008-05-01 18:30:16 545 -----n--- C:\WINDOWS\LHA.PIF 2008-05-01 18:30:16 545 -----n--- C:\WINDOWS\ARJ.PIF 2008-05-01 18:30:16 0 d-------- C:\totalcmd 2008-05-01 13:12:41 515245 --ahs---- C:\WINDOWS\system32\rCehQqss.ini2 2008-04-30 23:13:01 0 d-------- C:\Documents and Settings\All Users\Application Data\NCH Software 2008-04-30 23:13:00 0 d-------- C:\Documents and Settings\Administrator\Application Data\NCH Software 2008-04-30 23:11:58 0 d-------- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound 2008-04-30 23:11:35 26112 --a------ C:\WINDOWS\system32\drivers\nchssvad.sys <Not Verified; NCH Swift Sound; NCH Swift Sound Virtual Audio Device> 2008-04-30 23:11:35 0 d-------- C:\Documents and Settings\Administrator\Application Data\NCH Swift Sound 2008-04-30 23:11:34 0 d-------- C:\Program Files\NCH Swift Sound 2008-04-30 23:10:46 0 d-------- C:\Program Files\NCH Software 2008-04-30 10:28:01 542694 --ahs---- C:\WINDOWS\system32\ghRBJRqr.ini2 2008-04-29 10:34:05 0 d-------- C:\Documents and Settings\Administrator\sgzcache 2008-04-28 19:20:06 0 d-------- C:\total commander 7.03 2008-04-28 18:14:42 77 -----n--- C:\Documents and Settings\Administrator\3517.bat 2008-04-28 18:14:42 297 -----n--- C:\134.bat 2008-04-28 17:52:36 77 -----n--- C:\Documents and Settings\Administrator\1155.bat 2008-04-28 17:52:36 297 -----n--- C:\467.bat 2008-04-28 17:52:33 27136 -----n--- C:\svchost.exe 2008-04-28 17:52:33 27136 -----n--- C:\Documents and Settings\Administrator\services.exe 2008-04-28 16:14:50 0 d-------- C:\Program Files\Svconr 2008-04-28 16:13:39 147456 --a------ C:\WINDOWS\system32\vbzip10.dll <Not Verified; Info-ZIP; Info-ZIP's WiZ> 2008-04-28 16:13:37 0 -----n--- C:\WINDOWS\b.exe 2008-04-28 16:10:34 85504 ---hs---- C:\Documents and Settings\Administrator\lsass.exe 2008-04-28 16:10:30 86144 --a------ C:\WINDOWS\system32\drivers\modemm.sys 2008-04-28 16:10:24 0 d-------- C:\WINDOWS\system32\wTMP 2008-04-28 16:10:24 0 d-------- C:\WINDOWS\system32\n3 2008-04-28 16:10:24 0 d-------- C:\WINDOWS\system32\b1 2008-04-28 16:10:22 0 d-------- C:\WINDOWS\system32\pnVes18 2008-04-25 22:35:47 0 d-------- C:\Documents and Settings\Administrator\Shared 2008-04-25 20:14:26 0 d-------- C:\Documents and Settings\Administrator\Application Data\Simply Super Software 2008-04-25 17:11:50 0 d-------- C:\Documents and Settings\All Users\Application Data\Matrox 2008-04-25 17:11:30 0 d-------- C:\Program Files\Matrox Graphics Inc 2008-04-25 17:11:30 0 d-------- C:\Documents and Settings\All Users\Application Data\Matrox Graphics Inc 2008-04-25 17:10:41 0 d-------- C:\WINDOWS\system32\PowerDesk8 2008-04-25 17:10:40 2005120 --a------ C:\WINDOWS\system32\MTXPARD.dll <Not Verified; Matrox Graphics Inc.; Matrox Parhelia Display Driver> 2008-04-25 17:10:40 5504 --a------ C:\WINDOWS\system32\drivers\mtxparmx.sys <Not Verified; Matrox Graphics Inc.; Matrox Miniport Extension Kernel Driver> 2008-04-25 17:10:40 1485440 --a------ C:\WINDOWS\system32\drivers\MTXPARM.sys <Not Verified; Matrox Graphics Inc.; Matrox Parhelia Miniport Driver> 2008-04-25 17:10:37 5410816 --a------ C:\WINDOWS\system32\MTXOGL.dll <Not Verified; Matrox Graphics, Inc.; Matrox Graphics, Inc. MTXOGL> 2008-04-25 17:10:36 761856 --a------ C:\WINDOWS\system32\MtxEscape.dll <Not Verified; ; MtxEscape Dynamic Link Library> 2008-04-25 17:10:35 139264 --a------ C:\WINDOWS\system32\MtxCIP.dll <Not Verified; Matrox Graphics Inc.; Co-Installer Proxy Dynamic Link Library> 2008-04-25 17:09:59 0 d-------- C:\MGAFOLD 2008-04-24 16:57:28 24576 --a------ C:\WINDOWS\system32\mll_arc.dll <Not Verified; CA; BrightStor ARCserve Backup> 2008-04-22 10:02:05 0 d-------- C:\Documents and Settings\Administrator\Application Data\Nero 2008-04-22 09:54:28 0 d-------- C:\Program Files\Nero 2008-04-22 09:54:28 0 d-------- C:\Program Files\Common Files\Nero 2008-04-22 09:54:28 0 d-------- C:\Documents and Settings\All Users\Application Data\Nero 2008-04-22 09:51:52 0 d-------- C:\WINDOWS\system32\DirectX 2008-04-21 07:16:59 2860 -----n--- C:\Documents and Settings\Administrator\Application Data\BrightStorMgr.dat 2008-04-21 06:59:37 0 d-------- C:\Program Files\CA 2008-04-20 17:58:05 0 d-------- C:\Program Files\Common Files\?ymbols 2008-04-20 14:01:29 1541089 --ahs---- C:\WINDOWS\system32\oftblqwa.ini2 2008-04-20 13:36:42 0 d-------- C:\Program Files\Spyware Doctor 2008-04-20 13:36:42 0 d-------- C:\Documents and Settings\Administrator\Application Data\PC Tools 2008-04-19 19:59:10 0 d-------- C:\Documents and Settings\Default User\Application Data\Mozilla 2008-04-19 19:56:52 0 d-------- C:\Documents and Settings\Administrator\Application Data\Intuit 2008-04-19 18:45:33 0 d-------- C:\Documents and Settings\All Users\Application Data\Redirected 2008-04-19 18:35:21 410300 --ahs---- C:\WINDOWS\system32\dLkQqBeg.ini2 2008-04-19 17:24:45 0 d-------- C:\Program Files\?ssembly 2008-04-19 12:08:38 0 d-------- C:\WINDOWS\adam 2008-04-19 12:08:13 0 d-------- C:\WINDOWS\adfs 2008-04-19 12:07:50 0 d-------- C:\Program Files\cmak 2008-04-19 12:01:14 0 d-------- C:\WINDOWS\ServicePackFiles 2008-04-19 11:48:43 0 d-a------ C:\WINDOWS\PolicyBackup 2008-04-19 10:07:54 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2008-04-19 08:51:27 0 d-------- C:\Program Files\KLMSoft 2008-04-19 08:50:51 2619915 -----n--- C:\BEsetup.exe <Not Verified; KLMsoft; > 2008-04-17 21:06:24 0 d-------- C:\Documents and Settings\Administrator\Application Data\Macromedia 2008-04-17 21:05:17 0 d-------- C:\WINDOWS\system32\Macromed 2008-04-17 21:05:17 1619 -----n--- C:\WINDOWS\mozver.dat 2008-04-17 20:32:37 0 d-------- C:\Program Files\Common Files\Nokia 2008-04-17 20:30:26 0 d-------- C:\Program Files\Common Files\PCSuite 2008-04-17 19:55:45 0 d-------- C:\Program Files\Common Files\L&H 2008-04-17 19:54:14 0 d-------- C:\Program Files\Microsoft ActiveSync 2008-04-17 19:51:52 0 d-------- C:\Program Files\Microsoft Works 2008-04-17 14:49:38 273408 -----n--- C:\WINDOWS\b148.exe 2008-04-17 09:15:15 0 d-------- C:\Documents and Settings\Administrator\Application Data\ScanSoft 2008-04-17 08:33:46 0 d-------- C:\Program Files\Common Files\Brother 2008-04-17 08:33:25 0 d-------- C:\Program Files\Brother 2008-04-16 22:22:44 0 d-------- C:\Documents and Settings\Administrator\Application Data\Datalayer 2008-04-16 22:22:42 0 d-------- C:\Documents and Settings\Administrator\Phone Browser 2008-04-16 20:22:22 0 d-------- C:\Documents and Settings\Administrator\Incomplete 2008-04-16 20:22:14 0 d-------- C:\Documents and Settings\Administrator\Application Data\FrostWire 2008-04-16 20:18:20 0 d-------- C:\Documents and Settings\Administrator\Application Data\Help 2008-04-16 20:09:33 0 d-------- C:\Program Files\FrostWire 2008-04-16 19:41:21 0 -----n--- C:\WINDOWS\nsreg.dat 2008-04-16 19:41:18 0 d-------- C:\Documents and Settings\Administrator\Application Data\Mozilla 2008-04-16 16:33:01 0 d-------- C:\Documents and Settings\Default User\Application Data\NetMon 2008-04-16 16:33:00 0 d--hs---- C:\WINDOWS\QWxsZW4gRS4gU3RvbmUsIEpyLg 2008-04-16 16:28:04 0 d-------- C:\WINDOWS\krmf 2008-04-16 16:28:04 0 d-------- C:\Program Files\Common Files\krmf 2008-04-16 16:23:27 0 d-------- C:\Documents and Settings\Administrator\Application Data\S?mantec 2008-04-16 16:22:52 0 d-------- C:\WINDOWS\s?curity 2008-04-16 16:17:35 0 d-------- C:\Program Files\Inet_Get_2 2008-04-16 16:12:31 0 d-------- C:\Documents and Settings\Administrator\Application Data\SpeedRunner 2008-04-16 16:07:32 0 d-------- C:\Program Files\JavaCore 2008-04-16 15:57:27 0 d-------- C:\Program Files\CPV 2008-04-16 11:58:47 0 d-------- C:\WINDOWS\Sun 2008-04-16 10:02:36 1160 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys 2008-04-16 10:01:04 32768 --a------ C:\WINDOWS\system32\XLLDFRequest2.dll <Not Verified; KMT Software, Inc.; LLDataRequest> 2008-04-16 10:01:04 36864 --a------ C:\WINDOWS\system32\LLInstances2.dll <Not Verified; KMT Software, Inc.; LLInstances> 2008-04-16 10:01:04 77824 --a------ C:\WINDOWS\system32\LLClientMiddleWare2.dll <Not Verified; KMT Software, Inc.; LLClientMiddleWare> 2008-04-16 10:01:04 32768 --a------ C:\WINDOWS\system32\LLClasses2.dll <Not Verified; KMT Software, Inc.; LLClasses> 2008-04-16 10:01:01 40448 --a------ C:\WINDOWS\system32\regobj.dll 2008-04-16 10:00:59 0 d-------- C:\Program Files\WordPerfect OfficeReady 1.5 2008-04-16 09:54:25 0 d-------- C:\Program Files\WordPerfect Office X3 2008-04-16 09:46:50 0 d-------- C:\Program Files\Common Files\Corel 2008-04-16 09:46:50 0 d-------- C:\Program Files\Common Files\Borland Shared 2008-04-16 09:46:49 0 d-------- C:\Program Files\Paradox 2008-04-16 09:43:52 0 d-------- C:\Program Files\Microsoft Silverlight 2008-04-16 08:51:14 0 d-------- C:\Documents and Settings\All Users\Application Data\Innovative Solutions 2008-04-16 08:50:30 0 d-------- C:\Program Files\Innovative Solutions 2008-04-16 06:29:04 0 d-------- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion 2008-04-16 03:11:11 0 d-------- C:\Program Files\MSXML 6.0 2008-04-16 03:00:54 0 d-------- C:\Program Files\MSXML 4.0 2008-04-15 20:50:08 0 d-------- C:\Documents and Settings\Administrator\Application Data\Corel 2008-04-15 19:51:05 0 d-------- C:\WINDOWS\system32\SoftwareDistribution 2008-04-15 19:40:35 0 d-------- C:\Program Files\Windows Desktop Search 2008-04-15 19:39:08 0 d--h----- C:\WINDOWS\$hf_mig$ 2008-04-15 17:51:00 0 d-------- C:\WINDOWS\system32\appmgmt 2008-04-15 17:45:52 0 d-------- C:\Program Files\Yahoo! 2008-04-15 17:44:28 0 d-------- C:\Documents and Settings\All Users\Application Data\Corel 2008-04-15 17:44:28 0 d-------- C:\Documents and Settings\All Users\Application Data\Borland 2008-04-15 16:08:11 15872 --a------ C:\WINDOWS\system32\rsxunins.exe <Not Verified; Intel Corporation; Realistic 3D Sound Experience (RSX 3D)> 2008-04-15 16:08:11 66048 --a------ C:\WINDOWS\system32\rsxtool.exe <Not Verified; Intel Corporation; Realistic 3D Sound Experience (RSX 3D)> 2008-04-15 16:08:08 563712 --a------ C:\WINDOWS\system32\vdk32116.dll <Not Verified; Voxware, Inc.; RealTime Codec> 2008-04-15 16:08:08 69632 --a------ C:\WINDOWS\system32\sx83p32.dll 2008-04-15 16:08:08 389120 --a------ C:\WINDOWS\system32\Rwl21.dll <Not Verified; Criterion Software Ltd.; RenderWare> 2008-04-15 16:08:08 621056 --a------ C:\WINDOWS\system32\Rwdlmb21.dll <Not Verified; Criterion Software Ltd.; RenderWare> 2008-04-15 16:08:08 558080 --a------ C:\WINDOWS\system32\Rwdl8b21.dll <Not Verified; Criterion Software Ltd.; RenderWare> 2008-04-15 16:08:07 576000 --a------ C:\WINDOWS\system32\Rwdl6b21.dll <Not Verified; Criterion Software Ltd.; RenderWare> 2008-04-15 16:08:07 115200 --a------ C:\WINDOWS\system32\rsxdata.dll <Not Verified; Intel Corporation; Realistic 3D Sound Experience (RSX 3D)> 2008-04-15 16:08:07 158720 --a------ C:\WINDOWS\system32\rsx.dll <Not Verified; Intel Corporation; Realistic 3D Sound Experience (RSX 3D)> 2008-04-15 16:08:06 22528 --a------ C:\WINDOWS\system32\nsmlaw32.dll <Not Verified; Netscape Communications; G.711 u-law Codec> 2008-04-15 16:08:06 264192 --a------ C:\WINDOWS\system32\npacrx.dll <Not Verified; Lucent Technologies; Music Decoder Library AX24000P> 2008-04-15 16:08:06 76800 --a------ C:\WINDOWS\system32\mcilma32.dll <Not Verified; Netscape Communications; LA file format player> 2008-04-15 16:08:06 37856 --a------ C:\WINDOWS\system32\mcilma.dll <Not Verified; Netscape Communications; LA file format player> 2008-04-15 16:08:05 131584 --a------ C:\WINDOWS\system32\mcilau32.dll <Not Verified; Netscape; Netscape Media Player / Audio Streaming Client> 2008-04-15 16:08:05 95296 --a------ C:\WINDOWS\system32\mcilau.dll <Not Verified; Netscape; Netscape Media Player / Audio Streaming Client> 2008-04-15 16:08:05 71168 --a------ C:\WINDOWS\system32\lmactl32.dll <Not Verified; Netscape Communications; GUI for Netscape Media Player> 2008-04-15 16:08:05 67936 --a------ C:\WINDOWS\system32\isprsht.dll <Not Verified; InSoft, Inc.; PropertySheet16> 2008-04-15 16:08:03 11776 --a------ C:\WINDOWS\system32\aaudio.dll <Not Verified; Intel Corporation; Realistic 3D Sound Experience (RSX 3D)> 2008-04-15 16:07:58 0 d-------- C:\Font Navigator 2008-04-15 16:06:49 68096 --a------ C:\WINDOWS\system32\QPAUTO8.DLL <Not Verified; Corel Corporation Limited; PerfectFit 32-Bit> 2008-04-15 16:06:30 123904 --a------ C:\WINDOWS\system32\NCSPI8EN.DLL <Not Verified; Nexal Corporation; Corel Suite 8> 2008-04-15 16:06:29 809744 --a------ C:\WINDOWS\system32\wmsui32.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System> 2008-04-15 16:06:29 286208 --a------ C:\WINDOWS\system32\NCSPI832.DLL <Not Verified; Nexal Corporation; Corel Suite 8> 2008-04-15 16:06:29 635152 --a------ C:\WINDOWS\system32\mapi32x.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System> 2008-04-15 16:06:28 803680 --a------ C:\WINDOWS\system32\AXDIST.EXE <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System> 2008-04-15 16:06:27 721168 --a------ C:\WINDOWS\system32\VB40032.DLL <Not Verified; Microsoft Corporation; Visual Basic 4.0> 2008-04-15 16:06:24 90112 --a------ C:\WINDOWS\system32\Evysh7en.dll <Not Verified; Novell, Inc.; Envoy 7 For Windows 95> 2008-04-15 16:06:24 310544 --a------ C:\WINDOWS\system32\COMCTLNT.DLL <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System> 2008-04-15 16:06:24 379152 --a------ C:\WINDOWS\system32\COMCTL95.DLL <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System> 2008-04-15 16:06:23 960512 --a------ C:\WINDOWS\system32\EVYSH7.DLL <Not Verified; Novell, Inc.; Envoy 7 For Windows 95> 2008-04-15 16:06:15 9216 --a------ C:\WINDOWS\system32\Barmven.exe <Not Verified; Corel Corporation Limited; Rename function for Corel Barista driver> 2008-04-15 16:06:15 11296 --a------ C:\WINDOWS\system32\Baren.DLL <Not Verified; Corel Corporation Limited; Corel Barista for Windows 95> 2008-04-15 16:06:10 20992 --a------ C:\WINDOWS\system32\PFMAPI32.DLL <Not Verified; ; PFMAPI32> 2008-04-15 16:06:10 22480 --a------ C:\WINDOWS\system32\PFMAPI16.DLL 2008-04-15 16:06:06 64000 --a------ C:\WINDOWS\system32\PFAUTO8.DLL <Not Verified; Corel Corporation Limited; PerfectFit 32-Bit> 2008-04-15 16:06:00 7680 --a------ C:\WINDOWS\system32\SHLWP8EN.DLL <Not Verified; Corel Corporation Limited; WordPerfect Shell Extensions> 2008-04-15 16:06:00 125952 --a------ C:\WINDOWS\system32\SHELLWP.DLL <Not Verified; Corel Corporation Limited; WordPerfect Shell Extensions> 2008-04-15 16:05:54 68096 --a------ C:\WINDOWS\system32\PRAUTO8.DLL <Not Verified; Corel Corporation Limited; PerfectFit 32-Bit> 2008-04-15 16:05:47 72192 --a------ C:\WINDOWS\system32\WPAUTO8.DLL <Not Verified; Corel Corporation Limited; PerfectFit 32-Bit> 2008-04-15 16:05:40 0 d--h----- C:\WINDOWS\ShellNew 2008-04-15 16:05:30 0 d-------- C:\MyFiles 2008-04-15 15:39:27 0 d-------- C:\Program Files\gs 2008-04-15 15:25:17 0 d-------- C:\Documents and Settings\Administrator\Application Data\VersaJetteFax 2008-04-15 15:23:55 0 d-------- C:\logs 2008-04-15 15:21:33 692224 --a------ C:\WINDOWS\system32\g7dddrs.dll 2008-04-15 15:21:33 69632 --a------ C:\WINDOWS\system32\g7ddcnv4.dll 2008-04-15 15:21:33 65536 --a------ C:\WINDOWS\system32\g7ddcaps.dll 2008-04-15 15:21:10 98345 --a------ C:\WINDOWS\system32\IMHOST32.DLL <Not Verified; Data Techniques, Inc.; ImageMan Image Processing Toolkit> 2008-04-15 15:21:10 339968 --a------ C:\WINDOWS\system32\IMGMAN32.DLL <Not Verified; Data Techniques, Inc.; ImageMan Image Processing Toolkit> 2008-04-15 15:21:10 45056 --a------ C:\WINDOWS\system32\g7F3PMON.DLL 2008-04-15 15:21:10 36864 --a------ C:\WINDOWS\system32\g7f3oem.dll <Not Verified; ; VersaJette Fax Solutions Software> 2008-04-15 15:21:10 32768 --a------ C:\WINDOWS\system32\g7F3FXPU.DLL 2008-04-15 15:21:04 0 d-------- C:\Documents and Settings\All Users\Application Data\VersaJetteFax 2008-04-15 15:20:44 0 d-------- C:\Program Files\VersaJette Fax Solutions 2008-04-15 15:20:02 0 d-------- C:\Program Files\Abbyy FineReader 6.0 Sprint 2008-04-15 15:19:45 0 d-------- C:\Program Files\VersaJette M400-V08 2008-04-15 15:19:32 286720 --a------ C:\WINDOWS\system32\G7DDinst.dll 2008-04-15 15:19:32 323584 --a------ C:\WINDOWS\system32\G7DDhcp.dll <Not Verified; ; Printer Communication System> 2008-04-15 15:18:08 0 d-------- C:\Documents and Settings\Administrator\Application Data\Nokia 2008-04-15 15:02:47 0 d-------- C:\Program Files\PowerISO 2008-04-15 14:28:05 0 d-------- C:\Program Files\Common Files\i4j_jres 2008-04-15 14:27:58 0 d-------- C:\Program Files\SimpleCenter 2008-04-15 14:23:24 0 d-------- C:\Program Files\DIFX 2008-04-15 14:21:58 0 d-------- C:\Documents and Settings\Administrator\Application Data\PC Suite 2008-04-15 14:21:57 0 d-------- C:\Documents and Settings\All Users\Application Data\PC Suite 2008-04-15 14:21:37 0 d------c- C:\WINDOWS\system32\DRVSTORE 2008-04-15 14:21:14 0 d-------- C:\Documents and Settings\All Users\Application Data\Downloaded Installations 2008-04-15 14:20:42 0 d-------- C:\WINDOWS\Downloaded Installations 2008-04-15 14:20:08 664 --a------ C:\WINDOWS\system32\d3d9caps.dat 2008-04-15 14:12:22 0 d-------- C:\Program Files\Nokia 2008-04-15 10:56:10 0 d-------- C:\Program Files\SQLXML 4.0 2008-04-15 10:39:06 0 d-------- C:\Program Files\Microsoft Visual Studio 8 2008-04-15 10:39:06 0 d-------- C:\Program Files\Common Files\Merge Modules 2008-04-15 10:39:03 0 d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-04-15 10:29:55 0 d-------- C:\Program Files\Microsoft Analysis Services 2008-04-15 10:28:53 0 d-------- C:\Program Files\Microsoft.NET 2008-04-15 10:13:37 0 d-------- C:\Program Files\ItsDeductible2006 2008-04-15 10:11:00 0 d-------- C:\Documents and Settings\Administrator\Application Data\InstallShield 2008-04-15 10:10:02 0 d-------- C:\Program Files\ItsDeductible2005 2008-04-15 10:06:55 0 d-------- C:\Program Files\ItsDeductibleEX 2008-04-15 10:06:30 110592 --a------ C:\WINDOWS\system32\tsccvid.dll <Not Verified; TechSmith Corporation; TechSmith Screen Capture Codec> 2008-04-15 10:06:06 0 d-------- C:\Documents and Settings\All Users\Application Data\Intuit 2008-04-15 10:04:11 0 d-------- C:\Program Files\Common Files\AnswerWorks 4.0 2008-04-15 10:02:17 0 d-------- C:\Program Files\Intuit 2008-04-15 10:01:22 0 d-------- C:\Program Files\TurboTax 2008-04-15 09:56:44 0 d-------- C:\Tax01 2008-04-15 09:55:00 0 d-------- C:\Tax00 2008-04-15 09:52:45 50176 --a------ C:\WINDOWS\system32\mvtl13n.dll <Not Verified; Microsoft Corporation; Microsoft Media View> 2008-04-15 09:52:44 51712 --a------ C:\WINDOWS\system32\mvsr13n.dll <Not Verified; Microsoft Corporation; Microsoft Media View> 2008-04-15 09:52:44 32256 --a------ C:\WINDOWS\system32\mvmg13n.dll <Not Verified; Microsoft Corporation; Microsoft Media View> 2008-04-15 09:52:44 73728 --a------ C:\WINDOWS\system32\mvmc13n.dll <Not Verified; Microsoft Corporation; Microsoft Media View> 2008-04-15 09:52:44 58880 --a------ C:\WINDOWS\system32\mvfs13n.dll <Not Verified; Microsoft Corporation; Microsoft Media View> 2008-04-15 09:52:44 111104 --a------ C:\WINDOWS\system32\mvcl13n.dll 2008-04-15 09:52:44 25600 --a------ C:\WINDOWS\system32\mvbk13n.dll <Not Verified; Microsoft Corporation; Microsoft Media View> 2008-04-15 09:52:41 48640 --a------ C:\WINDOWS\system32\inetwh32.dll <Not Verified; Blue Sky Software; Blue Sky Software - INETWH32> 2008-04-15 09:52:41 5856 --a------ C:\WINDOWS\system32\inet16.dll <Not Verified; Microsoft Corporation; Microsoft® Plus! for Windows® 95> 2008-04-15 09:52:41 73728 -----n--- C:\WINDOWS\icg32.dll <Not Verified; Intuit; Internet Client 2.3> 2008-04-15 09:52:38 7102 -----n--- C:\WINDOWS\icoadb32.dat 2008-04-15 09:52:27 259584 --a------ C:\WINDOWS\system32\qcon32.dll <Not Verified; Intuit Inc.; Quicken 99 for Windows> 2008-04-15 09:52:27 539136 --a------ C:\WINDOWS\system32\qba32.dll <Not Verified; Intuit, Inc.; QuickBooks for Windows> 2008-04-15 09:52:27 41472 --a------ C:\WINDOWS\system32\iprof32.dll <Not Verified; Intuit; Intuit Family of Products> 2008-04-15 09:52:25 0 d-------- C:\WINDOWS\Intuit 2008-04-15 09:52:24 0 d-------- C:\Tax99 2008-04-15 09:52:24 0 d-------- C:\Program Files\Common Files\Intuit 2008-04-15 09:19:52 0 d-------- C:\Documents and Settings\All Users\Application Data\System 2008-04-15 09:19:51 0 d-------- C:\Documents and Settings\Administrator\Application Data\G7PS 2008-04-15 09:19:03 0 d-------- C:\Documents and Settings\All Users\Application Data\G7PS 2008-04-15 09:18:39 0 d-------- C:\Program Files\Common Files\GNU Ghostscript Shared 2008-04-15 09:18:29 0 d-------- C:\Program Files\Common Files\G7PS 2008-04-15 09:18:26 0 d-------- C:\Program Files\Common Files\GPL Ghostscript Shared 2008-04-15 09:11:47 0 d-------- C:\Program Files\G7PS 2008-04-15 08:26:29 0 d-------- C:\Documents and Settings\All Users\Application Data\Hewlett-Packard 2008-04-15 08:24:10 0 d-------- C:\HP-UPD4_5-PCL6-32 2008-04-15 08:08:41 0 d-------- C:\Program Files\Cisco Systems 2008-04-15 08:03:22 0 d-------- C:\Documents and Settings\Administrator\Application Data\Sun 2008-04-15 08:02:55 0 d-------- C:\Program Files\Java 2008-04-15 08:02:54 0 d-------- C:\Program Files\Common Files\Java 2008-04-15 01:34:27 0 d-------- C:\Documents and Settings\Administrator\Application Data\WinRAR 2008-04-15 01:31:17 0 d-------- C:\Documents and Settings\Administrator\Application Data\LexisNexis 2008-04-15 01:31:10 0 d-------- C:\Program Files\LexisNexis 2008-04-15 01:22:47 0 d-------- C:\Documents and Settings\Administrator\Application Data\VCOM 2008-04-15 01:22:30 0 d-------- C:\Program Files\VCOM 2008-04-15 01:20:58 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-04-15 01:15:41 0 d-------- C:\Documents and Settings\Administrator\Application Data\UseNeXT 2008-04-15 01:15:34 0 d-------- C:\Program Files\UseNeXT 2008-04-15 00:11:49 0 d-------- C:\WINDOWS\system32\ReinstallBackups 2008-04-15 00:11:41 4142592 --a------ C:\WINDOWS\system32\qtintf.dll <Not Verified; Borland Software Corporation; Delphi-Qt2.x Interface Library> 2008-04-15 00:11:40 0 d-------- C:\Program Files\APC 2008-04-15 00:10:35 11136 --a------ C:\WINDOWS\system32\FPRUN300.DLL 2008-04-15 00:04:45 277400 --a------ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT 2008-04-15 00:02:20 1056768 --a------ C:\WINDOWS\system32\ROBOEX32.DLL <Not Verified; Blue Sky Software Corporation.; RoboHELP Classic 2000> 2008-04-15 00:02:20 28672 --a------ C:\WINDOWS\system32\PlugFile.dll <Not Verified; ; PlugFile Module> 2008-04-15 00:02:19 210944 --a------ C:\WINDOWS\system32\MSVCRT10.DLL 2008-04-14 23:59:12 0 d-------- C:\Program Files\Rand McNally 2008-04-14 23:57:06 0 d-------- C:\Documents and Settings\Default User\Application Data\Identities 2008-04-14 23:01:15 0 d-------- C:\Documents and Settings\Administrator\Application Data\Zeon 2008-04-14 21:53:07 0 d-------- C:\Program Files\Registrar Registry Manager 2008-04-14 20:39:06 0 d-------- C:\Documents and Settings\All Users\Application Data\Installations 2008-04-14 20:08:22 0 d-------- C:\Corel 2008-04-14 16:30:55 0 d--hs---- C:\WINDOWS\CSC 2008-04-14 16:09:38 0 d--h----- C:\WINDOWS\system32\GroupPolicy 2008-04-14 16:09:28 0 d-------- C:\Program Files\Common Files\ScanSoft Shared 2008-04-14 16:09:14 0 d-------- C:\Documents and Settings\All Users\Application Data\Zeon 2008-04-14 16:07:40 0 d-------- C:\Documents and Settings\All Users\Application Data\InstallShield 2008-04-14 16:07:01 0 d-------- C:\Documents and Settings\All Users\Application Data\ScanSoft 2008-04-14 16:05:03 0 d-------- C:\Program Files\ScanSoft 2008-04-14 15:08:30 0 d-------- C:\Program Files\Microsoft SQL Server 2008-04-14 14:47:42 4608 --a------ C:\WINDOWS\system32\WsmSelrr.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:42 13824 --a------ C:\WINDOWS\system32\ipmisetp.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:41 0 d-------- C:\WINDOWS\system32\ipmi 2008-04-14 14:47:40 66560 --a------ C:\WINDOWS\system32\wecutil.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:40 80896 --a------ C:\WINDOWS\system32\wecsvc.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:40 26112 --a------ C:\WINDOWS\system32\wecapi.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:40 8704 --a------ C:\WINDOWS\system32\ELSEXT.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:39 208384 --a------ C:\WINDOWS\system32\WsmSvc.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:39 95744 --a------ C:\WINDOWS\system32\WsmRes.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:37 41984 --a------ C:\WINDOWS\system32\WsmProv.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:37 243200 --a------ C:\WINDOWS\system32\WsmCl.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:37 49664 --a------ C:\WINDOWS\system32\WsmAuto.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 14:47:36 77917 --a------ C:\WINDOWS\system32\winrm.vbs 2008-04-14 14:47:36 35 --a------ C:\WINDOWS\system32\winrm.cmd 2008-04-14 14:47:33 0 d-------- C:\WINDOWS\PMCSnap 2008-04-14 14:46:01 0 d-------- C:\Program Files\Phone Book Service 2008-04-14 12:43:58 0 d-------- C:\WINDOWS\system32\msmq 2008-04-14 12:43:57 0 d-------- C:\ADFS 2008-04-14 12:39:02 0 d--hs---- C:\Documents and Settings\Administrator\UserData 2008-04-14 12:27:56 0 d-------- C:\StorageReports 2008-04-14 11:35:00 0 d-------- C:\WINDOWS\RegisteredPackages 2008-04-14 11:32:23 42496 --a------ C:\WINDOWS\system32\dfsext.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 11:32:20 5120 --a------ C:\WINDOWS\system32\dfsres.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 11:32:20 200704 --a------ C:\WINDOWS\system32\dfsrAdmin.exe <Not Verified; Microsoft Corporation; Microsoft (R) Windows (R) Operating System> 2008-04-14 11:32:17 73728 --a------ C:\WINDOWS\system32\Dfsrres.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 11:32:10 0 d-------- C:\WINDOWS\system32\srm 2008-04-14 11:32:09 7168 --a------ C:\WINDOWS\system32\srmsched_ps.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 11:32:08 125952 --a------ C:\WINDOWS\system32\storrept.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 11:32:07 10752 --a------ C:\WINDOWS\system32\srmhost.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 11:32:07 10240 --a------ C:\WINDOWS\system32\srmclient.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 11:32:07 105472 --a------ C:\WINDOWS\system32\srm.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 11:14:06 0 d-------- C:\Program Files\Support Tools 2008-04-14 11:00:24 41030 --a------ C:\WINDOWS\system32\cscogina.dll <Not Verified; Cisco Systems, Inc.; Cisco GINA Dynamic Link Library> 2008-04-14 11:00:22 20480 --a------ C:\WINDOWS\system32\ccs.exe 2008-04-14 11:00:17 15780 --a------ C:\WINDOWS\system32\drivers\csco21p.sys <Not Verified; Meetinghouse Data Communications; AEGIS Client 2.3.1.9> 2008-04-14 11:00:17 110592 --a------ C:\WINDOWS\system32\AegisI5.exe <Not Verified; ; AegisInstall Application> 2008-04-14 11:00:16 372736 --a------ C:\WINDOWS\system32\csccfg10.dll <Not Verified; Cisco Systems, Inc.; Cisco Configuration API Dynamic Link Library> 2008-04-14 11:00:16 843776 --a------ C:\WINDOWS\system32\AegisC5.dll <Not Verified; Meetinghouse Data Communications; AEGIS Client API> 2008-04-14 11:00:15 0 d--h----- C:\Program Files\InstallShield Installation Information 2008-04-14 11:00:15 0 d-------- C:\Program Files\Cisco Aironet 2008-04-14 10:59:52 0 d-------- C:\temp 2008-04-14 10:59:50 0 d-------- C:\Program Files\Common Files\InstallShield 2008-04-14 10:34:55 0 d-------- C:\WINDOWS\system32\en 2008-04-14 10:34:15 0 d-------- C:\WINDOWS\system32\corebins 2008-04-14 10:32:01 0 d-------- C:\FPSE_search 2008-04-14 10:31:29 0 d-------- C:\WINDOWS\IIS Temporary Compressed Files 2008-04-14 10:31:20 0 d-------- C:\WINDOWS\system32\Cache 2008-04-14 10:29:10 0 d-------- C:\Inetpub 2008-04-14 10:25:21 0 d-------- C:\WINDOWS\SchCache 2008-04-14 10:17:35 0 d-------- C:\Documents and Settings\Administrator\Application Data\Identities 2008-04-14 10:17:13 0 d--h----- C:\Documents and Settings\Administrator\Templates 2008-04-14 10:17:13 0 dr------- C:\Documents and Settings\Administrator\Start Menu 2008-04-14 10:17:13 0 dr-h----- C:\Documents and Settings\Administrator\SendTo 2008-04-14 10:17:13 0 dr-h----- C:\Documents and Settings\Administrator\Recent 2008-04-14 10:17:13 0 d--h----- C:\Documents and Settings\Administrator\PrintHood 2008-04-14 10:17:13 5505024 --ah----- C:\Documents and Settings\Administrator\NTUSER.DAT 2008-04-14 10:17:13 0 d--h----- C:\Documents and Settings\Administrator\NetHood 2008-04-14 10:17:13 0 dr------- C:\Documents and Settings\Administrator\My Documents 2008-04-14 10:17:13 0 d--h----- C:\Documents and Settings\Administrator\Local Settings 2008-04-14 10:17:13 0 dr------- C:\Documents and Settings\Administrator\Favorites 2008-04-14 10:17:13 0 d-------- C:\Documents and Settings\Administrator\Desktop 2008-04-14 10:17:13 0 d--hs---- C:\Documents and Settings\Administrator\Cookies 2008-04-14 10:17:13 0 dr-h----- C:\Documents and Settings\Administrator\Application Data 2008-04-14 10:06:58 0 d-------- C:\WIND
|
|
John_McKenna
HijackThis Helper
Reg'd: Wed
Posts: 7400
Loc: England
|
|
After reading your log I regret to inform you that Webuser will be unable to help on this occassion.
It is Forum Policy that we only help home users in the HJT Forum and your machine clearly comes from a corporate environment.
I suggest your contact your IT department, call an engineer or try any number of alternative anti-spyware forums for a solution to your bot infections.
-------------------- .
Click here before posting a HijackThis Log - Important !!
My Site
|
|
0 registered and 8 anonymous users are browsing this forum.
Moderator: putasolutions, kimhollamby, greysts, bricat, AndrewC, Joe_London, John_McKenna, Mouse, Hello_There, TheFatControlleR, Nanook, Noviciate
Print Topic
|
Forum Permissions
You cannot start new topics
You cannot reply to topics
HTML is disabled
Mark-up is enabled
|
Rating:
Topic views: 0
|
|
|
|
|