Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Check this Hijack log pls

  • 29-01-2008 9:20pm
    #1
    PogMoThoin
    Closed Accounts Posts: 13,874 ✭✭✭✭


    Got a mate havin probs with his pc, got him to run hijack this & msn me the log. Cant see anything in myself, but then again I'm no malware expert.

    His symptoms are, when he goes opens internet explorer other pages load up for similar websites for instance and a william hill betting thing comes up

    Heres his log:
    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 20:42:47, on 29/01/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Boot mode: Normal



    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\System32\Ati2evxx.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

    C:\Program Files\Foxy-1.7.3\foxy.exe

    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    C:\Program Files\Norton Ghost\Agent\VProSvc.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\WINDOWS\system32\atwtusb.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\WINDOWS\system32\TBLMOUSE.EXE

    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

    C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

    C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\Google\Google Updater\GoogleUpdater.exe

    C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe

    C:\Program Files\Windows Live\Messenger\usnsvc.exe

    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe


    Can someone have a look over this pls And report back what he should do or other scans he should run.


Comments

  • #2
    aidan_walsh
    Closed Accounts Posts: 17,208 ✭✭✭✭aidan_walsh


    That doesn't look like a complete HiJack This log to me. Can you get him to run it again, save the resulting log and file transfer it to you? Also, get him to run DSS and paste those log as well.


  • #3
    PogMoThoin
    Closed Accounts Posts: 13,874 ✭✭✭✭PogMoThoin


    aidan_walsh wrote: »
    That doesn't look like a complete HiJack This log to me.

    Was thinkin that myself, he's offline now, I'll get him run them 2morro.


  • #4
    ActorSeeksJob
    Closed Accounts Posts: 1,970 ✭✭✭ActorSeeksJob


    Just post the DSS log and not the HijackThis log since DSS will give you one

    Also turn off word wrap, so go into notepad, click Format, uncheck wordwrap, then run DSS


  • #5
    PogMoThoin
    Closed Accounts Posts: 13,874 ✭✭✭✭PogMoThoin


    Here are his results:
    Deckard's System Scanner v20071014.68

    Run by Nick on 2008-01-30 19:28:08

    Computer is in Normal Mode.



    -- System Restore



    Successfully created a Deckard's System Scanner Restore Point.





    -- Last 5 Restore Point(s) --

    92: 2008-01-30 19:28:17 UTC - RP229 - Deckard's System Scanner Restore Point

    91: 2008-01-29 18:26:03 UTC - RP228 - System Checkpoint

    90: 2008-01-28 06:09:04 UTC - RP227 - System Checkpoint

    89: 2008-01-27 05:19:46 UTC - RP226 - Software Distribution Service 3.0

    88: 2008-01-26 18:51:53 UTC - RP225 - Restore Operation





    -- First Restore Point --

    1: 2007-11-11 10:43:22 UTC - RP138 - System Checkpoint





    Backed up registry hives.

    Performed disk cleanup.







    -- HijackThis (run as Nick.exe)



    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 19:30:36, on 30/01/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Boot mode: Normal



    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\System32\Ati2evxx.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

    C:\Program Files\Foxy-1.7.3\foxy.exe

    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    C:\Program Files\Norton Ghost\Agent\VProSvc.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\WINDOWS\system32\atwtusb.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\WINDOWS\system32\TBLMOUSE.EXE

    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

    C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

    C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Program Files\Google\Google Updater\GoogleUpdater.exe

    C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe

    C:\Program Files\Windows Live\Messenger\usnsvc.exe

    C:\Documents and Settings\Nick\Desktop\dss.exe

    C:\PROGRA~1\TRENDM~1\HIJACK~1\Nick.exe



    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ie/

    R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL

    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

    O2 - BHO: Ask Search Assistant BHO - {0A94B111-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL

    O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll

    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

    O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

    O2 - BHO: Google Web Accelerator Helper - {69A87B7D-DE56-4136-9655-716BA50C19C7} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll

    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

    O2 - BHO: BrowsingAdvisor - {F1E96EDC-E0C8-BE98-1F15-C29DBED83B53} - C:\Program Files\BrowsingAdvisor\BrowsingAdvisor-1.dll

    O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll

    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

    O3 - Toolbar: Google Web Accelerator - {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll

    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay

    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta

    O4 - HKLM\..\Run: [TQ566808] "O:\Setup.exe"

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP

    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

    O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe

    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage

    O8 - Extra context menu item: Transfer by Image Converter 3 - C:\PROGRAM FILES\SONY\IMAGE CONVERTER 3\menu.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O17 - HKLM\System\CCS\Services\Tcpip\..\{3A125E2F-5E41-44F8-BA16-CF68F43F80C7}: NameServer = 89.184.36.1,89.184.37.177

    O17 - HKLM\System\CCS\Services\Tcpip\..\{7C915F0D-1959-4422-A38A-7D58D91E4433}: NameServer = 89.184.32.11 89.184.32.10

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL

    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe

    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

    O23 - Service: Foxy: Filtering HTTP Proxy (foxy) - Unknown owner - C:\Program Files\Foxy-1.7.3\foxy.exe

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\ICScsiSV.exe

    O23 - Service: IcVzMonLauncher - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMonLauncher.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

    O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMon.exe

    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe

    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

    O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe

    O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe

    O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe

    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe

    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe



    --

    End of file - 11550 bytes



    -- File Associations



    All associations okay.





    -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled



    R0 BTHidMgr (Bluetooth HID Manager Service) - c:\windows\system32\drivers\bthidmgr.sys <Not Verified; IVT Corporation; BlueSoleil(c)>

    R3 BlueletAudio (Bluetooth Audio Service) - c:\windows\system32\drivers\blueletaudio.sys <Not Verified; IVT Corporation; Windows (R) 2000 DDK driver>

    R3 BlueletSCOAudio (Bluetooth SCO Audio Service) - c:\windows\system32\drivers\blueletscoaudio.sys <Not Verified; IVT Corporation; Windows (R) 2000 DDK driver>

    R3 BT (Bluetooth PAN Network Adapter) - c:\windows\system32\drivers\btnetdrv.sys <Not Verified; IVT Corporation; BlueSoleil>

    R3 BTHidEnum (Bluetooth HID Enumerator) - c:\windows\system32\drivers\vbtenum.sys

    R3 mcdbus (Driver for MagicISO SCSI Host Controller) - c:\windows\system32\drivers\mcdbus.sys <Not Verified; MagicISO, Inc.; MagicISO SCSI Host Controller>

    R3 VComm (Virtual Serial port driver) - c:\windows\system32\drivers\vcomm.sys <Not Verified; IVT Corporation; BlueSoleil>

    R3 VcommMgr (Bluetooth VComm Manager Service) - c:\windows\system32\drivers\vcommmgr.sys <Not Verified; IVT Corporation; BlueSoleil>

    R3 VHidMinidrv (Bluetooth HID Device Service) - c:\windows\system32\drivers\vhidmini.sys <Not Verified; IVT Corporation; IVT BlueSoleil>



    S3 Btcsrusb (Bluetooth USB For Bluetooth Service) - c:\windows\system32\drivers\btcusb.sys <Not Verified; IVT Corporation; Bluetooth USB Device Driver>

    S3 hwdatacard (Huawei DataCard USB Modem and USB Serial) - c:\windows\system32\drivers\ewusbmdm.sys (file missing)

    S3 TVICHW32 - c:\windows\system32\drivers\tvichw32.sys <Not Verified; EnTech Taiwan; TVicHW32 Generic Device Driver for Windows 95/98/ME/NT/2000/2003/XP/XP64>





    -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled



    R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>

    R2 BlueSoleil Hid Service - c:\program files\ivt corporation\bluesoleil\btntservice.exe

    R2 foxy (Foxy: Filtering HTTP Proxy) - "c:\program files\foxy-1.7.3\foxy.exe" "--config=c:\program files\foxy-1.7.3\foxy.cfg" --reset



    S3 NBService - c:\program files\nero\nero 7\nero backitup\nbservice.exe

    S3 PACSPTISVR - "c:\program files\common files\sony shared\avlib\pacsptisvr.exe" <Not Verified; ; PACSPTISVR Module>





    -- Device Manager: Disabled



    No disabled devices found.





    -- Scheduled Tasks



    2008-01-30 19:05:00 252 --a
    C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job





    -- Files created between 2007-12-30 and 2008-01-30



    2008-01-30 19:26:58 0 d
    C:\WINDOWS\pss

    2008-01-29 20:36:43 0 d
    C:\Program Files\Trend Micro

    2008-01-27 00:16:59 0 d
    C:\Documents and Settings\Nick\Application Data\PrevxCSI

    2008-01-26 11:41:19 0 dr-h
    C:\$VAULT$.AVG

    2008-01-23 22:21:09 0 d
    C:\Documents and Settings\Nick\Application Data\AVG7

    2008-01-23 22:20:58 0 d
    C:\Documents and Settings\LocalService\Application Data\AVG7

    2008-01-23 22:20:49 0 d
    C:\Documents and Settings\All Users\Application Data\avg7

    2008-01-23 22:19:13 0 d
    C:\Documents and Settings\Nick\Application Data\Grisoft

    2008-01-23 22:19:01 0 d
    C:\Documents and Settings\All Users\Application Data\Grisoft

    2008-01-23 19:49:18 0 d
    C:\Documents and Settings\All Users\Application Data\Eset

    2008-01-23 12:50:49 0 d
    C:\Program Files\Lavasoft

    2008-01-23 12:50:49 0 d
    C:\Documents and Settings\All Users\Application Data\Lavasoft

    2008-01-23 12:19:47 0 d
    C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

    2008-01-20 00:41:45 0 d
    C:\Program Files\MalwareAlarm

    2008-01-19 15:25:41 0 d
    C:\Program Files\Microsoft Silverlight

    2008-01-17 20:05:53 1739 --a
    C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache

    2008-01-17 18:39:34 0 d
    C:\Program Files\BrowsingAdvisor

    2008-01-17 18:38:13 0 d
    C:\Program Files\PlayMP3z

    2008-01-16 23:21:22 0 d
    C:\Program Files\UBISOFT

    2008-01-13 20:00:31 0 d--h
    C:\WINDOWS\system32\GroupPolicy

    2008-01-10 13:05:38 586240 --a
    C:\WINDOWS\WLXPGSS.SCR <Not Verified; Microsoft Corporation; Windows Live Photo Gallery>

    2008-01-09 17:52:15 0 d
    C:\Program Files\Stamina

    2008-01-09 10:13:37 0 d
    C:\Program Files\Windows Live Favorites

    2008-01-09 10:09:41 0 d
    C:\Program Files\Microsoft SQL Server Compact Edition

    2008-01-09 09:52:58 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller

    2008-01-09 09:52:53 0 d
    C:\Program Files\Windows Live

    2008-01-09 09:52:28 0 d
    C:\Documents and Settings\All Users\Application Data\WLInstaller

    2008-01-08 22:23:38 0 d
    C:\Program Files\AskPBar

    2008-01-08 22:23:17 0 d
    C:\Program Files\The Weather Channel FW

    2008-01-08 22:21:24 0 d
    C:\Program Files\Trillian

    2008-01-02 16:49:49 0 d
    C:\Program Files\Wizzl

    2008-01-02 16:49:29 0 d
    C:\Documents and Settings\Nick\Application Data\Wizzl BV

    2008-01-01 13:25:08 0 d--h
    C:\WINDOWS\PIF





    -- Find3M Report



    2008-01-29 19:42:52 0 d
    C:\Documents and Settings\Nick\Application Data\wsInspector

    2008-01-28 23:04:11 0 d
    C:\Documents and Settings\Nick\Application Data\uTorrent

    2008-01-23 19:38:54 0 --a
    C:\Documents and Settings\Nick\Application Data\.googlewebacchosts

    2008-01-23 12:50:00 0 d
    C:\Program Files\Common Files\Wise Installation Wizard

    2008-01-23 12:49:41 0 d
    C:\Documents and Settings\Nick\Application Data\Lavasoft

    2008-01-17 18:08:07 0 d
    C:\Documents and Settings\Nick\Application Data\StumbleUpon

    2008-01-11 12:26:49 0 d
    C:\Program Files\Startup Inspector for Windows

    2008-01-09 17:00:18 0 d
    C:\Program Files\Yahoo!

    2008-01-09 10:14:09 0 d
    C:\Program Files\Windows Live Toolbar

    2008-01-09 09:52:58 0 d
    C:\Program Files\Common Files

    2008-01-03 23:47:35 0 d--h
    C:\Program Files\InstallShield Installation Information

    2007-12-25 20:19:12 0 d
    C:\Documents and Settings\Nick\Application Data\Apple Computer

    2007-12-25 20:18:27 0 d
    C:\Program Files\QuickTime

    2007-12-25 20:16:48 0 d
    C:\Program Files\Apple Software Update

    2007-12-25 20:15:52 0 d
    C:\Program Files\Common Files\Apple

    2007-12-25 18:50:20 0 d
    C:\Documents and Settings\Nick\Application Data\Sony Corporation

    2007-12-25 18:44:12 0 d
    C:\Program Files\Common Files\Sony Shared

    2007-12-25 18:43:25 0 d
    C:\Program Files\Sony

    2007-12-25 18:41:52 0 d
    C:\Documents and Settings\Nick\Application Data\InstallShield

    2007-12-24 16:16:19 0 d
    C:\Documents and Settings\Nick\Application Data\Ahead

    2007-12-24 15:48:34 0 d
    C:\Program Files\Avi2Dvd

    2007-12-24 15:46:02 0 d
    C:\Program Files\AviSynth 2.5

    2007-12-09 18:07:36 0 d
    C:\Program Files\Common Files\Ahead

    2007-12-09 18:05:17 0 d
    C:\Program Files\Nero

    2007-12-09 18:02:33 0 d
    C:\Program Files\Ahead

    2007-12-09 17:24:47 0 d
    C:\Program Files\MagicDisc

    2007-12-09 13:45:22 0 d
    C:\Program Files\Foxy-1.7.3

    2007-12-05 18:44:30 0 d
    C:\Documents and Settings\Nick\Application Data\dvdcss

    2007-11-30 19:43:28 0 d
    C:\Program Files\MagicISO

    2007-11-08 21:47:14 4819331 --a
    C:\uniextract15.exe <Not Verified; Jared Breland; >





    -- Registry Dump



    *Note* empty entries & legit default entries are not shown





    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F1E96EDC-E0C8-BE98-1F15-C29DBED83B53}]

    30/12/2007 20:49 1019904 --a
    C:\Program Files\BrowsingAdvisor\BrowsingAdvisor-1.dll



    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [02/01/2006 16:41]

    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [25/09/2007 00:11]

    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [11/05/2007 02:06]

    "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [14/09/2007 19:20]

    "atwtusb"="atwtusb.exe" [21/09/2005 17:08 C:\WINDOWS\system32\ATWTUSB.EXE]

    "TQ566808"="O:\Setup.exe" []

    "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [27/10/2006 00:47]

    "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [11/06/2007 09:25]

    "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [23/01/2008 22:20]



    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [04/08/2004 07:56]

    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [16/11/2006 19:04]

    "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [12/07/2007 19:28]

    "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [18/10/2007 11:34]

    "Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [11/06/2007 17:16]



    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\

    Google Updater.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [12/07/2007 19:28:09]

    Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [22/03/1999 01:00:00]



    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]

    "DisableRegistryTools"=0 (0x0)



    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

    "NoActiveDesktop"=0 (0x0)

    "ForceActiveDesktopOn"=1 (0x1)



    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

    @=&quot;Service"



    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]

    @=&quot;Service"



    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

    @=&quot;Volume shadow copy"





    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{74e9fe19-4059-11dc-a1d8-0006c990021d}]

    AutoRun\command- P:\AutoRun.exe



    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{74e9fe1d-4059-11dc-a1d8-0006c990021d}]

    AutoRun\command- P:\AutoRun.exe









    -- End of Deckard's System Scanner: finished at 2008-01-30 19:31:14

    Deckard's System Scanner v20071014.68

    Extra logfile - please post this as an attachment with your post.



    -- System Information



    Microsoft Windows XP Professional (build 2600) SP 2.0

    Architecture: X86; Language: English



    CPU 0: AMD Athlon(tm) 64 Processor 3400+

    Percentage of Memory in Use: 27%

    Physical Memory (total/avail): 2047.36 MiB / 1490.85 MiB

    Pagefile Memory (total/avail): 3430.1 MiB / 2892.73 MiB

    Virtual Memory (total/avail): 2047.88 MiB / 1933.14 MiB



    C: is Fixed (NTFS) - 48.83 GiB total, 23.5 GiB free.

    D: is Fixed (NTFS) - 100.21 GiB total, 100.13 GiB free.

    E: is Fixed (NTFS) - 29.29 GiB total, 18.85 GiB free.

    F: is Fixed (NTFS) - 47.39 GiB total, 13.88 GiB free.

    G: is Removable (No Media)

    H: is Removable (No Media)

    I: is Removable (No Media)

    J: is Removable (No Media)

    K: is Fixed (NTFS) - 97.65 GiB total, 58.75 GiB free.

    L: is Fixed (NTFS) - 97.65 GiB total, 91.54 GiB free.

    M: is Fixed (NTFS) - 102.78 GiB total, 67.81 GiB free.

    N: is CDROM (No Media)

    O: is CDROM (No Media)

    P: is CDROM (No Media)

    Q: is Fixed (FAT32) - 298.02 GiB total, 226.67 GiB free.



    \\.\PHYSICALDRIVE1 - IC35L080AVVA07-0 - 76.69 GiB - 2 partitions

    \PARTITION0 - Installable File System - 29.29 GiB - E:

    \PARTITION1 - Extended w/Extended Int 13 - 47.39 GiB - F:



    \\.\PHYSICALDRIVE0 - ST3160021A - 149.05 GiB - 2 partitions

    \PARTITION0 (bootable) - Installable File System - 48.83 GiB - C:

    \PARTITION1 - Extended w/Extended Int 13 - 100.21 GiB - D:



    \\.\PHYSICALDRIVE2 - Generic STORAGE DEVICE USB Device



    \\.\PHYSICALDRIVE3 - Generic STORAGE DEVICE USB Device



    \\.\PHYSICALDRIVE4 - Generic STORAGE DEVICE USB Device



    \\.\PHYSICALDRIVE5 - Generic STORAGE DEVICE USB Device



    \\.\PHYSICALDRIVE6 - ST332082 0AS USB Device - 298.09 GiB - 3 partitions

    \PARTITION0 - Installable File System - 97.65 GiB - K:

    \PARTITION1 - Installable File System - 97.65 GiB - L:

    \PARTITION2 - Installable File System - 102.78 GiB - M:



    \\.\PHYSICALDRIVE7 - WD 3200JB External USB Device - 298.09 GiB - 1 partition

    \PARTITION0 - Unknown - 298.09 GiB - Q:







    -- Security Center



    AUOptions is scheduled to auto-install.

    Windows Internal Firewall is enabled.



    AntivirusOverride is set.



    AV: AVG 7.5.446 v7.5.446 (GRISOFT)



    [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"



    [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

    "C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:µTorrent"

    "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"

    "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server"

    "C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"

    "C:\\Program Files\\Huawei technologies\\Huawei UMTS Data Card\\3 DataModem HSDPA.exe"="C:\\Program Files\\Huawei technologies\\Huawei UMTS Data Card\\3 DataModem HSDPA.exe:*:Enabled:3 DDataModem HSDPA"

    "C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"

    "C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"

    "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"

    "C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove"

    "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

    "C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"="C:\\Program Files\\Grisoft\\AVG7\\avginet.exe:*:Enabled:avginet.exe"

    "C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe:*:Enabled:avgamsvr.exe"

    "C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe:*:Enabled:avgcc.exe"

    "C:\\Program Files\\Prevx1\\PXConsole.exe"="C:\\Program Files\\Prevx1\\PXConsole.exe:*:Enabled:Prevx1"

    "C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:Disabled:BlueSoleil"

    "C:\\Documents and Settings\\Nick\\Application Data\\SopCast\\adv\\SopAdver.exe"="C:\\Documents and Settings\\Nick\\Application Data\\SopCast\\adv\\SopAdver.exe:*:Disabled:SopCast Adver"

    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"





    -- Environment Variables



    ALLUSERSPROFILE=C:\Documents and Settings\All Users

    APPDATA=C:\Documents and Settings\Nick\Application Data

    CLASSPATH=.;C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip

    CommonProgramFiles=C:\Program Files\Common Files

    COMPUTERNAME=HOMEPC

    ComSpec=C:\WINDOWS\system32\cmd.exe

    FP_NO_HOST_CHECK=NO

    HOMEDRIVE=C:

    HOMEPATH=\Documents and Settings\Nick

    LOGONSERVER=\\HOMEPC

    NUMBER_OF_PROCESSORS=1

    OS=Windows_NT

    Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\;C:\Program Files\Common Files\GTK\2.0\bin;C:\Program Files\QuickTime\QTSystem\

    PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

    PROCESSOR_ARCHITECTURE=x86

    PROCESSOR_IDENTIFIER=x86 Family 15 Model 47 Stepping 2, AuthenticAMD

    PROCESSOR_LEVEL=15

    PROCESSOR_REVISION=2f02

    ProgramFiles=C:\Program Files

    PROMPT=$P$G

    QTJAVA=C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip

    SESSIONNAME=Console

    SystemDrive=C:

    SystemRoot=C:\WINDOWS

    TEMP=C:\DOCUME~1\Nick\LOCALS~1\Temp

    TMP=C:\DOCUME~1\Nick\LOCALS~1\Temp

    USERDOMAIN=HOMEPC

    USERNAME=Nick

    USERPROFILE=C:\Documents and Settings\Nick

    windir=C:\WINDOWS





    -- User Profiles



    Nick (admin)

    Daniella (admin)





    -- Add/Remove Programs



    --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

    --> C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL

    --> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL

    --> C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL

    --> C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL

    --> C:\WINDOWS\UNNeroVision.exe /UNINSTALL

    --> C:\WINDOWS\UNRecode.exe /UNINSTALL

    --> Dummy

    --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

    Ad-Aware 2007 --> MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}

    Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe

    Adobe Reader 8.1.0 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81000000003}

    Apple Mobile Device Support --> MsiExec.exe /I{B5C209B1-8DDB-4642-A573-375B951514CB}

    Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}

    ATI - Software Uninstall Utility --> C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe

    ATI Catalyst Control Center --> MsiExec.exe /I{D7EBDC15-32E4-4CDC-AA49-B1055F3E3885}

    ATI Display Driver --> rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

    ATI Parental Control & Encoder --> MsiExec.exe /I{8D70145A-3BD3-4DBF-9CBF-223EF4A43257}

    µTorrent --> "C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL

    Audacity 1.2.6 --> "C:\Program Files\Audacity\unins000.exe"

    AVG 7.5 --> C:\Program Files\Grisoft\AVG7\setup.exe /UNINSTALL

    AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe

    Avi2Dvd 0.4.5 beta --> C:\Program Files\Avi2Dvd\uninst.exe

    AviSynth 2.5 --> "C:\Program Files\AviSynth 2.5\Uninstall.exe"

    BlueSoleil --> MsiExec.exe /X{FD33EAE4-B436-4CDB-8CD1-9B44892DA118}

    BrowsingAdvisor --> C:\Program Files\BrowsingAdvisor\uninstall.exe

    DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER

    DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN

    DVD Shrink 3.2 --> "C:\Program Files\DVD Shrink\unins000.exe"

    Easy CD-DA Extractor 5.1 --> C:\WINDOWS\iun6002.exe "C:\Program Files\Easy CD-DA Extractor 5.1\irunin.ini"

    getPlus(R)_ocx --> rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\inf\GETPLUSo.INF, DefaultUninstall

    Google Earth --> MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}

    Google Toolbar for Internet Explorer --> MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}

    Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"

    Google Updater --> "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall

    Google Web Accelerator --> MsiExec.exe /X{6A1975EB-27E6-491D-94BC-6355FA25F40F}

    GTK+ 2.10.13 runtime environment --> "C:\Program Files\Common Files\GTK\2.0\setup\unins000.exe"

    Highlight Viewer (Windows Live Toolbar) --> MsiExec.exe /X{A5C4AD72-25FE-4899-B6DF-6D8DF63C93CF}

    HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall

    Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"

    HP Driver Diagnostics --> MsiExec.exe /I{16BE87BC-69F5-4D36-8CF0-E1CB3ACD5ED3}

    IKEA HomePlanner Kitchen --> MsiExec.exe /I{E215F522-2FD6-46F4-9507-747E14D71598}

    Image Converter 3 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FE013D72-CF3D-41A8-BC09-C38070FDE2CB}\setup.exe" -l0x9 /CONPANE -removeonly

    Java(TM) 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}

    Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}

    Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}

    LimeWire 4.12.14 --> "C:\Program Files\LimeWire\uninstall.exe"

    LiveUpdate 3.2 (Symantec Corporation) --> "C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U

    Magic ISO Maker v4.1 (build 0086) --> C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG

    MagicDisc 2.5.79 --> C:\PROGRA~1\MAGICD~1\UNWISE.EXE C:\PROGRA~1\MAGICD~1\INSTALL.LOG

    Microsoft Base Smart Card Cryptographic Service Provider Package --> "C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"

    Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"

    Microsoft Office 2000 Premium --> MsiExec.exe /I{00000409-78E1-11D2-B60F-006097C998E7}

    Microsoft Office Access MUI (English) 2007 --> MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE}

    Microsoft Office Access Setup Metadata MUI (English) 2007 --> MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE}

    Microsoft Office Enterprise 2007 --> "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL

    Microsoft Office Enterprise 2007 --> MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}

    Microsoft Office Excel MUI (English) 2007 --> MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}

    Microsoft Office Groove MUI (English) 2007 --> MsiExec.exe /X{90120000-00BA-0409-0000-0000000FF1CE}

    Microsoft Office Groove Setup Metadata MUI (English) 2007 --> MsiExec.exe /X{90120000-0114-0409-0000-0000000FF1CE}

    Microsoft Office InfoPath MUI (English) 2007 --> MsiExec.exe /X{90120000-0044-0409-0000-0000000FF1CE}

    Microsoft Office OneNote MUI (English) 2007 --> MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}

    Microsoft Office Outlook MUI (English) 2007 --> MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE}

    Microsoft Office PowerPoint MUI (English) 2007 --> MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}

    Microsoft Office Proof (English) 2007 --> MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}

    Microsoft Office Proof (French) 2007 --> MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}

    Microsoft Office Proof (Spanish) 2007 --> MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}

    Microsoft Office Proofing (English) 2007 --> MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}

    Microsoft Office Publisher MUI (English) 2007 --> MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE}

    Microsoft Office Shared MUI (English) 2007 --> MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}

    Microsoft Office Shared Setup Metadata MUI (English) 2007 --> MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}

    Microsoft Office Word MUI (English) 2007 --> MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}

    Microsoft Silverlight --> MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

    Microsoft SQL Server 2005 Compact Edition [ENU] --> MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

    Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"

    mIRC --> "C:\Program Files\mIRC\mirc.exe" -uninstall

    Mozilla Firefox (2.0.0.6) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe

    MSXML 6.0 Parser (KB933579) --> MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}

    Nero 7 Ultra Edition --> MsiExec.exe /I{BFB8C7BE-3BFA-446C-9F3E-3AFBA5BC1033}

    Norton Ghost --> MsiExec.exe /I{B0255743-165B-4BD5-8DA8-37DFB9930012}

    OpenMG Limited Patch 4.7-07-14-05-01 --> C:\Program Files\Common Files\Sony Shared\OpenMG\HotFixes\HotFix4.7-07-14-05-01\HotFixSetup\setup.exe /u

    OpenMG Secure Module 4.7.00 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{CCD663AE-610D-4BDF-AAB0-E914B044527D} UNINSTALL

    PDF Manual NW-A800 Series --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99B9FAF2-33FD-4DC7-9087-5BC2EE4CBB9E}\setup.exe" -l0x9 UNINSTALL -removeonly

    Picasa 2 --> "C:\Program Files\Picasa2\Uninstall.exe"

    PlayMP3z --> C:\Program Files\PlayMP3z\uninstall.exe

    QuickTime --> MsiExec.exe /I{5B09BD67-4C99-46A1-8161-B7208CE18121}

    RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

    RF Keyboard 1.0 --> C:\Program Files\Wireless\RF Keyboard\1.0\unins000.EXE

    Rhapsody Player Engine --> MsiExec.exe /I{8A62A068-3FD6-495A-9F66-26FE94F32EC9}

    SCRABBLE® Interactive 2007 EDITION Uninstall --> C:\Program Files\UBISOFT\SCRABBLE® Interactive 2007 EDITION\uninstall.exe

    Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

    Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

    Security Update for Excel 2007 (KB936509) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A00724F5-82C4-4924-B707-0E5A84B52471}

    Security Update for Office 2007 (KB934062) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {305D509B-F194-4638-9F0F-D9E4C05F9D33}

    Security Update for Office 2007 (KB936514) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C7A78F7F-EF32-4477-BAD7-3439EA7571BF}

    Security Update for Publisher 2007 (KB936646) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A32E4BAF-6477-45FA-B8AB-E743FA8D63FF}

    Security Update for the 2007 Microsoft Office System (KB936960) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5E5BD655-7AA9-47F9-BB6D-A1D8CE29AC86}

    Serif PhotoPlus 7.0 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BEFCB74C-C49F-4327-8EDF-3A81A574AC0F}\setup.exe" -l0x9

    Slim Multimedia Keyboard --> C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Slim Multimedia Keyboard\uninst.isu" -c"C:\Program Files\Slim Multimedia Keyboard\UnInst.dll"

    Smart Menus (Windows Live Toolbar) --> MsiExec.exe /X{F084395C-40FB-4DB3-981C-B51E74E1E83D}

    SonicStage 4.3 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A0EB195B-5876-48E6-879D-33D4B2102610}\setup.exe" -l0x9 UNINSTALL -removeonly

    Sony Video Shared Library --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}\setup.exe" -l0x9 -removeonly /nos

    SopCore 1.1.2 --> C:\Program Files\SopCast\uninst.exe

    Spybot - Search & Destroy 1.4 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"

    Stamina 2.5 --> "C:\Program Files\Stamina\uninstall.exe"

    StumbleUpon IE Toolbar --> C:\Program Files\StumbleUpon\uninstall.exe

    The GIMP 2.2.17 --> "C:\Program Files\GIMP-2.0\unins000.exe"

    TVAnts 1.0 --> C:\PROGRA~1\TVAnts\UNWISE.EXE C:\PROGRA~1\TVAnts\INSTALL.LOG

    Uninstall Startup Inspector --> "C:\Program Files\Startup Inspector for Windows\unins000.exe"

    Update for Office 2007 (KB932080) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {EDC9CA29-6BC1-471C-828C-7A36109005D7}

    Update for Office 2007 (KB934391) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B3091818-7C56-4C45-BE7D-CA23027A5EA5}

    Update for Office 2007 (KB934393) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {92FBAD46-E7F6-49FA-89B5-C39FC5BFAD15}

    Update for Outlook 2007 (KB937608) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CBB2454D-193F-4523-8A31-FEB343B7C30E}

    Update for Outlook 2007 Junk Email Filter (kb943597) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A751F0DB-8476-4207-956E-20AEBBA4B1DA}

    Update for Word 2007 (KB934173) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C6A89125-5473-45E3-B413-ED8186437475}

    Video Downloader --> C:\Program Files\InstallShield Installation Information\{F1D891A7-2BAF-4033-9A20-DBB78F86BF0C}\setup.exe -runfromtemp -l0x0009UNINSTALL -removeonly

    VideoLAN VLC media player 0.8.6c --> C:\Program Files\VideoLAN\VLC\uninstall.exe

    WALKMAN Launcher --> C:\Program Files\InstallShield Installation Information\{C20B3C31-28CD-4732-AE45-A30F401AF91F}\setup.exe -runfromtemp -l0x0009 UNINSTALL -removeonly

    Windows Communication Foundation --> MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}

    Windows Imaging Component --> "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"

    Windows Live Favorites for Windows Live Toolbar --> MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}

    Windows Live installer --> MsiExec.exe /X{A7E4ECCA-4A8E-4258-8EC8-2DCCF5B11320}

    Windows Live Mail --> MsiExec.exe /I{184E7118-0295-43C4-B72C-1D54AA75AAF7}

    Windows Live Messenger --> MsiExec.exe /X{508CE775-4BA4-4748-82DF-FE28DA9F03B0}

    Windows Live Photo Gallery --> MsiExec.exe /X{257E440F-781F-459B-9A68-A0872B80C1D6}

    Windows Live Sign-in Assistant --> MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}

    Windows Live Toolbar --> "C:\Program Files\Windows Live Toolbar\UnInstall.exe" {D5A145FC-D00C-4F1A-9119-EB4D9D659750}

    Windows Live Toolbar --> MsiExec.exe /X{D5A145FC-D00C-4F1A-9119-EB4D9D659750}

    Windows Live Toolbar Extension (Windows Live Toolbar) --> MsiExec.exe /X{341201D4-4F61-4ADB-987E-9CCE4D83A58D}

    Windows Live Writer --> MsiExec.exe /X{9176251A-4CC1-4DDB-B343-B487195EB397}

    Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"

    Windows Media Format SDK Hotfix - KB891122 --> "C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"

    Windows Presentation Foundation --> MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}

    Windows Workflow Foundation --> MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}

    WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe

    Wireless Tablet Series --> Rmtablet KNL

    XML Paper Specification Shared Components Pack 1.0 -->

    Yahoo! Browser Services --> C:\PROGRA~1\Yahoo!\Common\UNIN_Y~1.EXE /S

    Yahoo! Install Manager --> C:\WINDOWS\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL

    Yahoo! Internet Mail --> C:\WINDOWS\system32\regsvr32 /u /s C:\PROGRA~1\Yahoo!\Common\YMMAPI.dll

    Yahoo! Messenger --> C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG





    -- Application Event Log



    Event Record #/Type13104 / Success

    Event Submitted/Written: 01/30/2008 06:48:40 PM

    Event ID/Source: 12001 / usnjsvc

    Event Description:

    The Messenger Sharing USN Journal Reader service started successfully.



    Event Record #/Type13022 / Success

    Event Submitted/Written: 01/29/2008 08:04:02 PM

    Event ID/Source: 12001 / usnjsvc

    Event Description:

    The Messenger Sharing USN Journal Reader service started successfully.



    Event Record #/Type12844 / Success

    Event Submitted/Written: 01/27/2008 01:13:12 PM

    Event ID/Source: 12001 / usnjsvc

    Event Description:

    The Messenger Sharing USN Journal Reader service started successfully.



    Event Record #/Type12811 / Warning

    Event Submitted/Written: 01/27/2008 10:54:46 AM

    Event ID/Source: 1004 / MsiInstaller

    Event Description:

    Detection of product '{508CE775-4BA4-4748-82DF-FE28DA9F03B0}', feature 'MsgrFeat', component '{898D807E-0587-41FF-84CE-BBFA842D2DFE}' failed. The resource 'C:\Program Files\Windows Live\Messenger\msgslang.8.5.1302.1018.dll' does not exist.



    Event Record #/Type12805 / Error

    Event Submitted/Written: 01/27/2008 10:37:19 AM

    Event ID/Source: 1002 / Application Hang

    Event Description:

    Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.







    -- Security Event Log



    No Errors/Warnings found.





    -- System Event Log



    Event Record #/Type35566 / Warning

    Event Submitted/Written: 01/28/2008 11:03:01 AM

    Event ID/Source: 4226 / Tcpip

    Event Description:

    TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.



    Event Record #/Type35559 / Warning

    Event Submitted/Written: 01/28/2008 03:03:18 AM

    Event ID/Source: 4226 / Tcpip

    Event Description:

    TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.



    Event Record #/Type35518 / Warning

    Event Submitted/Written: 01/27/2008 11:18:26 PM

    Event ID/Source: 4226 / Tcpip

    Event Description:

    TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.



    Event Record #/Type35510 / Warning

    Event Submitted/Written: 01/27/2008 09:29:09 PM

    Event ID/Source: 4226 / Tcpip

    Event Description:

    TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.



    Event Record #/Type35509 / Warning

    Event Submitted/Written: 01/27/2008 08:34:28 PM

    Event ID/Source: 4226 / Tcpip

    Event Description:

    TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.







    -- End of Deckard's System Scanner: finished at 2008-01-30 19:31:14



  • #6
    ActorSeeksJob
    Closed Accounts Posts: 1,970 ✭✭✭ActorSeeksJob


    Can you turn off word wrap like I said in my previous post then run DSS again and post the log


  • Advertisement
  • #7
    PogMoThoin
    Closed Accounts Posts: 13,874 ✭✭✭✭PogMoThoin


    Sorry, problem is on my side, You see I'm using linux which enables text wrapping. He's sending them to me thru msn.

    Here's the logs:
    Deckard's System Scanner v20071014.68

    Run by Nick on 2008-01-31 21:25:44

    Computer is in Normal Mode.







    -- HijackThis (run as Nick.exe)



    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 21:25:45, on 31/01/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Boot mode: Normal



    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\System32\Ati2evxx.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

    C:\Program Files\Foxy-1.7.3\foxy.exe

    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    C:\Program Files\Norton Ghost\Agent\VProSvc.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\WINDOWS\system32\atwtusb.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\WINDOWS\system32\TBLMOUSE.EXE

    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

    C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

    C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Program Files\Google\Google Updater\GoogleUpdater.exe

    C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe

    C:\Program Files\Windows Live\Messenger\usnsvc.exe

    C:\Documents and Settings\Nick\Desktop\dss.exe

    C:\PROGRA~1\TRENDM~1\HIJACK~1\Nick.exe



    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ie/

    R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL

    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

    O2 - BHO: Ask Search Assistant BHO - {0A94B111-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL

    O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll

    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

    O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

    O2 - BHO: Google Web Accelerator Helper - {69A87B7D-DE56-4136-9655-716BA50C19C7} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll

    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

    O2 - BHO: BrowsingAdvisor - {F1E96EDC-E0C8-BE98-1F15-C29DBED83B53} - C:\Program Files\BrowsingAdvisor\BrowsingAdvisor-1.dll

    O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll

    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

    O3 - Toolbar: Google Web Accelerator - {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll

    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay

    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta

    O4 - HKLM\..\Run: [TQ566808] "O:\Setup.exe"

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP

    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

    O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe

    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage

    O8 - Extra context menu item: Transfer by Image Converter 3 - C:\PROGRAM FILES\SONY\IMAGE CONVERTER 3\menu.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O17 - HKLM\System\CCS\Services\Tcpip\..\{3A125E2F-5E41-44F8-BA16-CF68F43F80C7}: NameServer = 89.184.36.1,89.184.37.177

    O17 - HKLM\System\CCS\Services\Tcpip\..\{7C915F0D-1959-4422-A38A-7D58D91E4433}: NameServer = 89.184.32.11 89.184.32.10

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL

    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe

    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

    O23 - Service: Foxy: Filtering HTTP Proxy (foxy) - Unknown owner - C:\Program Files\Foxy-1.7.3\foxy.exe

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\ICScsiSV.exe

    O23 - Service: IcVzMonLauncher - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMonLauncher.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

    O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMon.exe

    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe

    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

    O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe

    O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe

    O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe

    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe

    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe



    --

    End of file - 11517 bytes



    -- Files created between 2007-12-31 and 2008-01-31



    2008-01-31 14:11:23 0 d
    C:\WINDOWS\LastGood

    2008-01-30 19:26:58 0 d
    C:\WINDOWS\pss

    2008-01-29 20:36:43 0 d
    C:\Program Files\Trend Micro

    2008-01-27 00:16:59 0 d
    C:\Documents and Settings\Nick\Application Data\PrevxCSI

    2008-01-26 11:41:19 0 dr-h
    C:\$VAULT$.AVG

    2008-01-23 22:21:09 0 d
    C:\Documents and Settings\Nick\Application Data\AVG7

    2008-01-23 22:20:58 0 d
    C:\Documents and Settings\LocalService\Application Data\AVG7

    2008-01-23 22:20:49 0 d
    C:\Documents and Settings\All Users\Application Data\avg7

    2008-01-23 22:19:13 0 d
    C:\Documents and Settings\Nick\Application Data\Grisoft

    2008-01-23 22:19:01 0 d
    C:\Documents and Settings\All Users\Application Data\Grisoft

    2008-01-23 19:49:18 0 d
    C:\Documents and Settings\All Users\Application Data\Eset

    2008-01-23 12:50:49 0 d
    C:\Program Files\Lavasoft

    2008-01-23 12:50:49 0 d
    C:\Documents and Settings\All Users\Application Data\Lavasoft

    2008-01-23 12:19:47 0 d
    C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

    2008-01-20 00:41:45 0 d
    C:\Program Files\MalwareAlarm

    2008-01-19 15:25:41 0 d
    C:\Program Files\Microsoft Silverlight

    2008-01-17 20:05:53 1739 --a
    C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache

    2008-01-17 18:39:34 0 d
    C:\Program Files\BrowsingAdvisor

    2008-01-17 18:38:13 0 d
    C:\Program Files\PlayMP3z

    2008-01-16 23:21:22 0 d
    C:\Program Files\UBISOFT

    2008-01-13 20:00:31 0 d--h
    C:\WINDOWS\system32\GroupPolicy

    2008-01-10 13:05:38 586240 --a
    C:\WINDOWS\WLXPGSS.SCR <Not Verified; Microsoft Corporation; Windows Live Photo Gallery>

    2008-01-09 17:52:15 0 d
    C:\Program Files\Stamina

    2008-01-09 10:13:37 0 d
    C:\Program Files\Windows Live Favorites

    2008-01-09 10:09:41 0 d
    C:\Program Files\Microsoft SQL Server Compact Edition

    2008-01-09 09:52:58 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller

    2008-01-09 09:52:53 0 d
    C:\Program Files\Windows Live

    2008-01-09 09:52:28 0 d
    C:\Documents and Settings\All Users\Application Data\WLInstaller

    2008-01-08 22:23:38 0 d
    C:\Program Files\AskPBar

    2008-01-08 22:23:17 0 d
    C:\Program Files\The Weather Channel FW

    2008-01-08 22:21:24 0 d
    C:\Program Files\Trillian

    2008-01-02 16:49:49 0 d
    C:\Program Files\Wizzl

    2008-01-02 16:49:29 0 d
    C:\Documents and Settings\Nick\Application Data\Wizzl BV

    2008-01-01 13:25:08 0 d--h
    C:\WINDOWS\PIF





    -- Find3M Report



    2008-01-29 19:42:52 0 d
    C:\Documents and Settings\Nick\Application Data\wsInspector

    2008-01-28 23:04:11 0 d
    C:\Documents and Settings\Nick\Application Data\uTorrent

    2008-01-23 19:38:54 0 --a
    C:\Documents and Settings\Nick\Application Data\.googlewebacchosts

    2008-01-23 12:50:00 0 d
    C:\Program Files\Common Files\Wise Installation Wizard

    2008-01-23 12:49:41 0 d
    C:\Documents and Settings\Nick\Application Data\Lavasoft

    2008-01-17 18:08:07 0 d
    C:\Documents and Settings\Nick\Application Data\StumbleUpon

    2008-01-11 12:26:49 0 d
    C:\Program Files\Startup Inspector for Windows

    2008-01-09 17:00:18 0 d
    C:\Program Files\Yahoo!

    2008-01-09 10:14:09 0 d
    C:\Program Files\Windows Live Toolbar

    2008-01-09 09:52:58 0 d
    C:\Program Files\Common Files

    2008-01-03 23:47:35 0 d--h
    C:\Program Files\InstallShield Installation Information

    2007-12-25 20:19:12 0 d
    C:\Documents and Settings\Nick\Application Data\Apple Computer

    2007-12-25 20:18:27 0 d
    C:\Program Files\QuickTime

    2007-12-25 20:16:48 0 d
    C:\Program Files\Apple Software Update

    2007-12-25 20:15:52 0 d
    C:\Program Files\Common Files\Apple

    2007-12-25 18:50:20 0 d
    C:\Documents and Settings\Nick\Application Data\Sony Corporation

    2007-12-25 18:44:12 0 d
    C:\Program Files\Common Files\Sony Shared

    2007-12-25 18:43:25 0 d
    C:\Program Files\Sony

    2007-12-25 18:41:52 0 d
    C:\Documents and Settings\Nick\Application Data\InstallShield

    2007-12-24 16:16:19 0 d
    C:\Documents and Settings\Nick\Application Data\Ahead

    2007-12-24 15:48:34 0 d
    C:\Program Files\Avi2Dvd

    2007-12-24 15:46:02 0 d
    C:\Program Files\AviSynth 2.5

    2007-12-09 18:07:36 0 d
    C:\Program Files\Common Files\Ahead

    2007-12-09 18:05:17 0 d
    C:\Program Files\Nero

    2007-12-09 18:02:33 0 d
    C:\Program Files\Ahead

    2007-12-09 17:24:47 0 d
    C:\Program Files\MagicDisc

    2007-12-09 13:45:22 0 d
    C:\Program Files\Foxy-1.7.3

    2007-12-05 18:44:30 0 d
    C:\Documents and Settings\Nick\Application Data\dvdcss

    2007-11-30 19:43:28 0 d
    C:\Program Files\MagicISO

    2007-11-08 21:47:14 4819331 --a
    C:\uniextract15.exe <Not Verified; Jared Breland; >





    -- Registry Dump



    *Note* empty entries & legit default entries are not shown





    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F1E96EDC-E0C8-BE98-1F15-C29DBED83B53}]

    30/12/2007 20:49 1019904 --a
    C:\Program Files\BrowsingAdvisor\BrowsingAdvisor-1.dll



    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [02/01/2006 16:41]

    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [25/09/2007 00:11]

    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [11/05/2007 02:06]

    "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [14/09/2007 19:20]

    "atwtusb"="atwtusb.exe" [21/09/2005 17:08 C:\WINDOWS\system32\ATWTUSB.EXE]

    "TQ566808"="O:\Setup.exe" []

    "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [27/10/2006 00:47]

    "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [11/06/2007 09:25]

    "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [23/01/2008 22:20]



    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [04/08/2004 07:56]

    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [16/11/2006 19:04]

    "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [12/07/2007 19:28]

    "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [18/10/2007 11:34]

    "Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [11/06/2007 17:16]



    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\

    Google Updater.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [12/07/2007 19:28:09]

    Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [22/03/1999 01:00:00]



    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]

    "DisableRegistryTools"=0 (0x0)



    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

    "NoActiveDesktop"=0 (0x0)

    "ForceActiveDesktopOn"=1 (0x1)



    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

    @=&quot;Service"



    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]

    @=&quot;Service"



    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

    @=&quot;Volume shadow copy"





    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{74e9fe19-4059-11dc-a1d8-0006c990021d}]

    AutoRun\command- P:\AutoRun.exe



    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{74e9fe1d-4059-11dc-a1d8-0006c990021d}]

    AutoRun\command- P:\AutoRun.exe









    -- End of Deckard's System Scanner: finished at 2008-01-31 21:26:12

    Deckard's System Scanner v20071014.68

    Extra logfile - please post this as an attachment with your post.



    -- System Information



    Microsoft Windows XP Professional (build 2600) SP 2.0

    Architecture: X86; Language: English



    CPU 0: AMD Athlon(tm) 64 Processor 3400+

    Percentage of Memory in Use: 27%

    Physical Memory (total/avail): 2047.36 MiB / 1490.85 MiB

    Pagefile Memory (total/avail): 3430.1 MiB / 2892.73 MiB

    Virtual Memory (total/avail): 2047.88 MiB / 1933.14 MiB



    C: is Fixed (NTFS) - 48.83 GiB total, 23.5 GiB free.

    D: is Fixed (NTFS) - 100.21 GiB total, 100.13 GiB free.

    E: is Fixed (NTFS) - 29.29 GiB total, 18.85 GiB free.

    F: is Fixed (NTFS) - 47.39 GiB total, 13.88 GiB free.

    G: is Removable (No Media)

    H: is Removable (No Media)

    I: is Removable (No Media)

    J: is Removable (No Media)

    K: is Fixed (NTFS) - 97.65 GiB total, 58.75 GiB free.

    L: is Fixed (NTFS) - 97.65 GiB total, 91.54 GiB free.

    M: is Fixed (NTFS) - 102.78 GiB total, 67.81 GiB free.

    N: is CDROM (No Media)

    O: is CDROM (No Media)

    P: is CDROM (No Media)

    Q: is Fixed (FAT32) - 298.02 GiB total, 226.67 GiB free.



    \\.\PHYSICALDRIVE1 - IC35L080AVVA07-0 - 76.69 GiB - 2 partitions

    \PARTITION0 - Installable File System - 29.29 GiB - E:

    \PARTITION1 - Extended w/Extended Int 13 - 47.39 GiB - F:



    \\.\PHYSICALDRIVE0 - ST3160021A - 149.05 GiB - 2 partitions

    \PARTITION0 (bootable) - Installable File System - 48.83 GiB - C:

    \PARTITION1 - Extended w/Extended Int 13 - 100.21 GiB - D:



    \\.\PHYSICALDRIVE2 - Generic STORAGE DEVICE USB Device



    \\.\PHYSICALDRIVE3 - Generic STORAGE DEVICE USB Device



    \\.\PHYSICALDRIVE4 - Generic STORAGE DEVICE USB Device



    \\.\PHYSICALDRIVE5 - Generic STORAGE DEVICE USB Device



    \\.\PHYSICALDRIVE6 - ST332082 0AS USB Device - 298.09 GiB - 3 partitions

    \PARTITION0 - Installable File System - 97.65 GiB - K:

    \PARTITION1 - Installable File System - 97.65 GiB - L:

    \PARTITION2 - Installable File System - 102.78 GiB - M:



    \\.\PHYSICALDRIVE7 - WD 3200JB External USB Device - 298.09 GiB - 1 partition

    \PARTITION0 - Unknown - 298.09 GiB - Q:







    -- Security Center



    AUOptions is scheduled to auto-install.

    Windows Internal Firewall is enabled.



    AntivirusOverride is set.



    AV: AVG 7.5.446 v7.5.446 (GRISOFT)



    [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"



    [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

    "C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:µTorrent"

    "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"

    "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server"

    "C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"

    "C:\\Program Files\\Huawei technologies\\Huawei UMTS Data Card\\3 DataModem HSDPA.exe"="C:\\Program Files\\Huawei technologies\\Huawei UMTS Data Card\\3 DataModem HSDPA.exe:*:Enabled:3 DDataModem HSDPA"

    "C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"

    "C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"

    "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"

    "C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove"

    "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

    "C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"="C:\\Program Files\\Grisoft\\AVG7\\avginet.exe:*:Enabled:avginet.exe"

    "C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe:*:Enabled:avgamsvr.exe"

    "C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe:*:Enabled:avgcc.exe"

    "C:\\Program Files\\Prevx1\\PXConsole.exe"="C:\\Program Files\\Prevx1\\PXConsole.exe:*:Enabled:Prevx1"

    "C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:Disabled:BlueSoleil"

    "C:\\Documents and Settings\\Nick\\Application Data\\SopCast\\adv\\SopAdver.exe"="C:\\Documents and Settings\\Nick\\Application Data\\SopCast\\adv\\SopAdver.exe:*:Disabled:SopCast Adver"

    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"





    -- Environment Variables



    ALLUSERSPROFILE=C:\Documents and Settings\All Users

    APPDATA=C:\Documents and Settings\Nick\Application Data

    CLASSPATH=.;C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip

    CommonProgramFiles=C:\Program Files\Common Files

    COMPUTERNAME=HOMEPC

    ComSpec=C:\WINDOWS\system32\cmd.exe

    FP_NO_HOST_CHECK=NO

    HOMEDRIVE=C:

    HOMEPATH=\Documents and Settings\Nick

    LOGONSERVER=\\HOMEPC

    NUMBER_OF_PROCESSORS=1

    OS=Windows_NT

    Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\;C:\Program Files\Common Files\GTK\2.0\bin;C:\Program Files\QuickTime\QTSystem\

    PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

    PROCESSOR_ARCHITECTURE=x86

    PROCESSOR_IDENTIFIER=x86 Family 15 Model 47 Stepping 2, AuthenticAMD

    PROCESSOR_LEVEL=15

    PROCESSOR_REVISION=2f02

    ProgramFiles=C:\Program Files

    PROMPT=$P$G

    QTJAVA=C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip

    SESSIONNAME=Console

    SystemDrive=C:

    SystemRoot=C:\WINDOWS

    TEMP=C:\DOCUME~1\Nick\LOCALS~1\Temp

    TMP=C:\DOCUME~1\Nick\LOCALS~1\Temp

    USERDOMAIN=HOMEPC

    USERNAME=Nick

    USERPROFILE=C:\Documents and Settings\Nick

    windir=C:\WINDOWS





    -- User Profiles



    Nick (admin)

    Daniella (admin)





    -- Add/Remove Programs



    --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

    --> C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL

    --> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL

    --> C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL

    --> C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL

    --> C:\WINDOWS\UNNeroVision.exe /UNINSTALL

    --> C:\WINDOWS\UNRecode.exe /UNINSTALL

    --> Dummy

    --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

    Ad-Aware 2007 --> MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}

    Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe

    Adobe Reader 8.1.0 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81000000003}

    Apple Mobile Device Support --> MsiExec.exe /I{B5C209B1-8DDB-4642-A573-375B951514CB}

    Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}

    ATI - Software Uninstall Utility --> C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe

    ATI Catalyst Control Center --> MsiExec.exe /I{D7EBDC15-32E4-4CDC-AA49-B1055F3E3885}

    ATI Display Driver --> rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

    ATI Parental Control & Encoder --> MsiExec.exe /I{8D70145A-3BD3-4DBF-9CBF-223EF4A43257}

    µTorrent --> "C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL

    Audacity 1.2.6 --> "C:\Program Files\Audacity\unins000.exe"

    AVG 7.5 --> C:\Program Files\Grisoft\AVG7\setup.exe /UNINSTALL

    AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe

    Avi2Dvd 0.4.5 beta --> C:\Program Files\Avi2Dvd\uninst.exe

    AviSynth 2.5 --> "C:\Program Files\AviSynth 2.5\Uninstall.exe"

    BlueSoleil --> MsiExec.exe /X{FD33EAE4-B436-4CDB-8CD1-9B44892DA118}

    BrowsingAdvisor --> C:\Program Files\BrowsingAdvisor\uninstall.exe

    DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER

    DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN

    DVD Shrink 3.2 --> "C:\Program Files\DVD Shrink\unins000.exe"

    Easy CD-DA Extractor 5.1 --> C:\WINDOWS\iun6002.exe "C:\Program Files\Easy CD-DA Extractor 5.1\irunin.ini"

    getPlus(R)_ocx --> rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\inf\GETPLUSo.INF, DefaultUninstall

    Google Earth --> MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}

    Google Toolbar for Internet Explorer --> MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}

    Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"

    Google Updater --> "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall

    Google Web Accelerator --> MsiExec.exe /X{6A1975EB-27E6-491D-94BC-6355FA25F40F}

    GTK+ 2.10.13 runtime environment --> "C:\Program Files\Common Files\GTK\2.0\setup\unins000.exe"

    Highlight Viewer (Windows Live Toolbar) --> MsiExec.exe /X{A5C4AD72-25FE-4899-B6DF-6D8DF63C93CF}

    HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall

    Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"

    HP Driver Diagnostics --> MsiExec.exe /I{16BE87BC-69F5-4D36-8CF0-E1CB3ACD5ED3}

    IKEA HomePlanner Kitchen --> MsiExec.exe /I{E215F522-2FD6-46F4-9507-747E14D71598}

    Image Converter 3 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FE013D72-CF3D-41A8-BC09-C38070FDE2CB}\setup.exe" -l0x9 /CONPANE -removeonly

    Java(TM) 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}

    Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}

    Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}

    LimeWire 4.12.14 --> "C:\Program Files\LimeWire\uninstall.exe"

    LiveUpdate 3.2 (Symantec Corporation) --> "C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U

    Magic ISO Maker v4.1 (build 0086) --> C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG

    MagicDisc 2.5.79 --> C:\PROGRA~1\MAGICD~1\UNWISE.EXE C:\PROGRA~1\MAGICD~1\INSTALL.LOG

    Microsoft Base Smart Card Cryptographic Service Provider Package --> "C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"

    Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"

    Microsoft Office 2000 Premium --> MsiExec.exe /I{00000409-78E1-11D2-B60F-006097C998E7}

    Microsoft Office Access MUI (English) 2007 --> MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE}

    Microsoft Office Access Setup Metadata MUI (English) 2007 --> MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE}

    Microsoft Office Enterprise 2007 --> "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL

    Microsoft Office Enterprise 2007 --> MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}

    Microsoft Office Excel MUI (English) 2007 --> MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}

    Microsoft Office Groove MUI (English) 2007 --> MsiExec.exe /X{90120000-00BA-0409-0000-0000000FF1CE}

    Microsoft Office Groove Setup Metadata MUI (English) 2007 --> MsiExec.exe /X{90120000-0114-0409-0000-0000000FF1CE}

    Microsoft Office InfoPath MUI (English) 2007 --> MsiExec.exe /X{90120000-0044-0409-0000-0000000FF1CE}

    Microsoft Office OneNote MUI (English) 2007 --> MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}

    Microsoft Office Outlook MUI (English) 2007 --> MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE}

    Microsoft Office PowerPoint MUI (English) 2007 --> MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}

    Microsoft Office Proof (English) 2007 --> MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}

    Microsoft Office Proof (French) 2007 --> MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}

    Microsoft Office Proof (Spanish) 2007 --> MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}

    Microsoft Office Proofing (English) 2007 --> MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}

    Microsoft Office Publisher MUI (English) 2007 --> MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE}

    Microsoft Office Shared MUI (English) 2007 --> MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}

    Microsoft Office Shared Setup Metadata MUI (English) 2007 --> MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}

    Microsoft Office Word MUI (English) 2007 --> MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}

    Microsoft Silverlight --> MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

    Microsoft SQL Server 2005 Compact Edition [ENU] --> MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

    Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"

    mIRC --> "C:\Program Files\mIRC\mirc.exe" -uninstall

    Mozilla Firefox (2.0.0.6) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe

    MSXML 6.0 Parser (KB933579) --> MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}

    Nero 7 Ultra Edition --> MsiExec.exe /I{BFB8C7BE-3BFA-446C-9F3E-3AFBA5BC1033}

    Norton Ghost --> MsiExec.exe /I{B0255743-165B-4BD5-8DA8-37DFB9930012}

    OpenMG Limited Patch 4.7-07-14-05-01 --> C:\Program Files\Common Files\Sony Shared\OpenMG\HotFixes\HotFix4.7-07-14-05-01\HotFixSetup\setup.exe /u

    OpenMG Secure Module 4.7.00 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{CCD663AE-610D-4BDF-AAB0-E914B044527D} UNINSTALL

    PDF Manual NW-A800 Series --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99B9FAF2-33FD-4DC7-9087-5BC2EE4CBB9E}\setup.exe" -l0x9 UNINSTALL -removeonly

    Picasa 2 --> "C:\Program Files\Picasa2\Uninstall.exe"

    PlayMP3z --> C:\Program Files\PlayMP3z\uninstall.exe

    QuickTime --> MsiExec.exe /I{5B09BD67-4C99-46A1-8161-B7208CE18121}

    RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

    RF Keyboard 1.0 --> C:\Program Files\Wireless\RF Keyboard\1.0\unins000.EXE

    Rhapsody Player Engine --> MsiExec.exe /I{8A62A068-3FD6-495A-9F66-26FE94F32EC9}

    SCRABBLE® Interactive 2007 EDITION Uninstall --> C:\Program Files\UBISOFT\SCRABBLE® Interactive 2007 EDITION\uninstall.exe

    Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

    Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

    Security Update for Excel 2007 (KB936509) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A00724F5-82C4-4924-B707-0E5A84B52471}

    Security Update for Office 2007 (KB934062) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {305D509B-F194-4638-9F0F-D9E4C05F9D33}

    Security Update for Office 2007 (KB936514) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C7A78F7F-EF32-4477-BAD7-3439EA7571BF}

    Security Update for Publisher 2007 (KB936646) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A32E4BAF-6477-45FA-B8AB-E743FA8D63FF}

    Security Update for the 2007 Microsoft Office System (KB936960) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5E5BD655-7AA9-47F9-BB6D-A1D8CE29AC86}

    Serif PhotoPlus 7.0 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BEFCB74C-C49F-4327-8EDF-3A81A574AC0F}\setup.exe" -l0x9

    Slim Multimedia Keyboard --> C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Slim Multimedia Keyboard\uninst.isu" -c"C:\Program Files\Slim Multimedia Keyboard\UnInst.dll"

    Smart Menus (Windows Live Toolbar) --> MsiExec.exe /X{F084395C-40FB-4DB3-981C-B51E74E1E83D}

    SonicStage 4.3 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A0EB195B-5876-48E6-879D-33D4B2102610}\setup.exe" -l0x9 UNINSTALL -removeonly

    Sony Video Shared Library --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}\setup.exe" -l0x9 -removeonly /nos

    SopCore 1.1.2 --> C:\Program Files\SopCast\uninst.exe

    Spybot - Search & Destroy 1.4 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"

    Stamina 2.5 --> "C:\Program Files\Stamina\uninstall.exe"

    StumbleUpon IE Toolbar --> C:\Program Files\StumbleUpon\uninstall.exe

    The GIMP 2.2.17 --> "C:\Program Files\GIMP-2.0\unins000.exe"

    TVAnts 1.0 --> C:\PROGRA~1\TVAnts\UNWISE.EXE C:\PROGRA~1\TVAnts\INSTALL.LOG

    Uninstall Startup Inspector --> "C:\Program Files\Startup Inspector for Windows\unins000.exe"

    Update for Office 2007 (KB932080) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {EDC9CA29-6BC1-471C-828C-7A36109005D7}

    Update for Office 2007 (KB934391) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B3091818-7C56-4C45-BE7D-CA23027A5EA5}

    Update for Office 2007 (KB934393) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {92FBAD46-E7F6-49FA-89B5-C39FC5BFAD15}

    Update for Outlook 2007 (KB937608) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CBB2454D-193F-4523-8A31-FEB343B7C30E}

    Update for Outlook 2007 Junk Email Filter (kb943597) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A751F0DB-8476-4207-956E-20AEBBA4B1DA}

    Update for Word 2007 (KB934173) --> msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C6A89125-5473-45E3-B413-ED8186437475}

    Video Downloader --> C:\Program Files\InstallShield Installation Information\{F1D891A7-2BAF-4033-9A20-DBB78F86BF0C}\setup.exe -runfromtemp -l0x0009UNINSTALL -removeonly

    VideoLAN VLC media player 0.8.6c --> C:\Program Files\VideoLAN\VLC\uninstall.exe

    WALKMAN Launcher --> C:\Program Files\InstallShield Installation Information\{C20B3C31-28CD-4732-AE45-A30F401AF91F}\setup.exe -runfromtemp -l0x0009 UNINSTALL -removeonly

    Windows Communication Foundation --> MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}

    Windows Imaging Component --> "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"

    Windows Live Favorites for Windows Live Toolbar --> MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}

    Windows Live installer --> MsiExec.exe /X{A7E4ECCA-4A8E-4258-8EC8-2DCCF5B11320}

    Windows Live Mail --> MsiExec.exe /I{184E7118-0295-43C4-B72C-1D54AA75AAF7}

    Windows Live Messenger --> MsiExec.exe /X{508CE775-4BA4-4748-82DF-FE28DA9F03B0}

    Windows Live Photo Gallery --> MsiExec.exe /X{257E440F-781F-459B-9A68-A0872B80C1D6}

    Windows Live Sign-in Assistant --> MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}

    Windows Live Toolbar --> "C:\Program Files\Windows Live Toolbar\UnInstall.exe" {D5A145FC-D00C-4F1A-9119-EB4D9D659750}

    Windows Live Toolbar --> MsiExec.exe /X{D5A145FC-D00C-4F1A-9119-EB4D9D659750}

    Windows Live Toolbar Extension (Windows Live Toolbar) --> MsiExec.exe /X{341201D4-4F61-4ADB-987E-9CCE4D83A58D}

    Windows Live Writer --> MsiExec.exe /X{9176251A-4CC1-4DDB-B343-B487195EB397}

    Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"

    Windows Media Format SDK Hotfix - KB891122 --> "C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"

    Windows Presentation Foundation --> MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}

    Windows Workflow Foundation --> MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}

    WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe

    Wireless Tablet Series --> Rmtablet KNL

    XML Paper Specification Shared Components Pack 1.0 -->

    Yahoo! Browser Services --> C:\PROGRA~1\Yahoo!\Common\UNIN_Y~1.EXE /S

    Yahoo! Install Manager --> C:\WINDOWS\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL

    Yahoo! Internet Mail --> C:\WINDOWS\system32\regsvr32 /u /s C:\PROGRA~1\Yahoo!\Common\YMMAPI.dll

    Yahoo! Messenger --> C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG





    -- Application Event Log



    Event Record #/Type13104 / Success

    Event Submitted/Written: 01/30/2008 06:48:40 PM

    Event ID/Source: 12001 / usnjsvc

    Event Description:

    The Messenger Sharing USN Journal Reader service started successfully.



    Event Record #/Type13022 / Success

    Event Submitted/Written: 01/29/2008 08:04:02 PM

    Event ID/Source: 12001 / usnjsvc

    Event Description:

    The Messenger Sharing USN Journal Reader service started successfully.



    Event Record #/Type12844 / Success

    Event Submitted/Written: 01/27/2008 01:13:12 PM

    Event ID/Source: 12001 / usnjsvc

    Event Description:

    The Messenger Sharing USN Journal Reader service started successfully.



    Event Record #/Type12811 / Warning

    Event Submitted/Written: 01/27/2008 10:54:46 AM

    Event ID/Source: 1004 / MsiInstaller

    Event Description:

    Detection of product '{508CE775-4BA4-4748-82DF-FE28DA9F03B0}', feature 'MsgrFeat', component '{898D807E-0587-41FF-84CE-BBFA842D2DFE}' failed. The resource 'C:\Program Files\Windows Live\Messenger\msgslang.8.5.1302.1018.dll' does not exist.



    Event Record #/Type12805 / Error

    Event Submitted/Written: 01/27/2008 10:37:19 AM

    Event ID/Source: 1002 / Application Hang

    Event Description:

    Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.







    -- Security Event Log



    No Errors/Warnings found.





    -- System Event Log



    Event Record #/Type35566 / Warning

    Event Submitted/Written: 01/28/2008 11:03:01 AM

    Event ID/Source: 4226 / Tcpip

    Event Description:

    TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.



    Event Record #/Type35559 / Warning

    Event Submitted/Written: 01/28/2008 03:03:18 AM

    Event ID/Source: 4226 / Tcpip

    Event Description:

    TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.



    Event Record #/Type35518 / Warning

    Event Submitted/Written: 01/27/2008 11:18:26 PM

    Event ID/Source: 4226 / Tcpip

    Event Description:

    TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.



    Event Record #/Type35510 / Warning

    Event Submitted/Written: 01/27/2008 09:29:09 PM

    Event ID/Source: 4226 / Tcpip

    Event Description:

    TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.



    Event Record #/Type35509 / Warning

    Event Submitted/Written: 01/27/2008 08:34:28 PM

    Event ID/Source: 4226 / Tcpip

    Event Description:

    TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.







    -- End of Deckard's System Scanner: finished at 2008-01-30 19:31:14


  • #8
    ActorSeeksJob
    Closed Accounts Posts: 1,970 ✭✭✭ActorSeeksJob


    You are going to need to fix the word wrap problem before I can take a look at it. Not sure how you can go about it


  • #9
    PogMoThoin
    Closed Accounts Posts: 13,874 ✭✭✭✭PogMoThoin


    Have him runnin another scan, turns out that extra log is yesterdays. Dont ask ;)


  • #10
    PogMoThoin
    Closed Accounts Posts: 13,874 ✭✭✭✭PogMoThoin


    After several attempts to get him run a scan & send it to me thru msn I've now given up.


  • #11
    ActorSeeksJob
    Closed Accounts Posts: 1,970 ✭✭✭ActorSeeksJob


    Get him to do this for the time being

    Please download RUNSCANNER to your desktop and run it.
    • When the first page comes up select Beginner Mode
    • On the next page select Save a binary .Run file (Recommended) then click Start full scan at the top.
    • At this time Runscanner.exe may request access to the Internet through your firewall please allow it to do so, it will then run for two or three minutes.
    • On completion it will ask for a location to save the file and a name. It will do this for both the .run file and the log
    • Call the file "Select a file name here" and save it to your desktop. You will see the .run file on your desktop. Please zip the .run file by right clicking and selecting send to Zip file

    Then upload that as an attachment in your next post.


  • Advertisement
Advertisement