also @ TechSpot: AMD A4-5000 Review: the affordable ultraportable APU

Please, look at my files

Discussion in 'Virus and Malware Removal' started by jaga_k, Mar 23, 2008.

Page 1 of 4

  1. jaga_k Newcomer, in training Posts: 43

    For some time now I have been experiencing random sounds on my computer (they are very rare - once a few days). After googling it, I found out that its perfs.exe which is responsible for it. I have McAffee, which detected many times "a file change" with
    Indt2.sys and andt.sys, so I googled that as well, and it seems that all these files are connected.

    Routing.exe seems to be a separate one. I tried to remove them all before
    with Regrun (befor knowing about this forum). It removed perfs.exe/ Indt2.sys/ andt.sys temporarily (they re-appeared the next day). When I tried to remove routing.exe, Windows didn't even run properly after re-starting (all I was getting was a black screen with a mouse icon), so I had to restore the system...

    I have followed your preliminary removal instructions. Not without a few problems, since I run Vista 64bit (Panda Antiroot did not work, so I wanted to try AVG Antiroot, but the link given by you did not work...).

    I also had problems with Combofix, so I used DSS...

    Anyway, I have two logs: DSS and hijackthis. Attaching those.

    Hope to hear from you soon... Thank you.
    jaga_k, Mar 23, 2008
    #1

  2. kritius TechSpot Guru Posts: 2,087

    Try HERE

    And sorry, but there isnt any logs there.
    kritius, Mar 23, 2008
    #2

  3. jaga_k Newcomer, in training Posts: 43

    Like I said, the 64 bit version is not supported.

    I have posted the logs earlier in the thread:

    Random sounds - perfs.exe/ Indt2.sys/ andt.sys/ routing.exe

    but no one replied, please have a look at them if you get a chance.
    jaga_k, Mar 23, 2008
    #3

  4. kritius TechSpot Guru Posts: 2,087

    Theres nothing posted there.
    kritius, Mar 23, 2008
    #4

  5. jaga_k Newcomer, in training Posts: 43

    I can't re-post them, because I'm getting an upload error:

    "You have already attached this file in thread : Random sounds - perfs.exe/ Indt2.sys/ andt.sys/ routing.exe"

    I will paste them here in a sec.
    Thanks!
    jaga_k, Mar 23, 2008
    #5

  6. kritius TechSpot Guru Posts: 2,087

    rename them and then try.
    kritius, Mar 23, 2008
    #6
     

  7. jaga_k Newcomer, in training Posts: 43

    That's not helping at all, I renamed them and changed their location, but still getting the same upload error: "You have already attached this file in thread : Random sounds - perfs.exe/ Indt2.sys/ andt.sys/ routing.exe"

    Can't paste them either, I would have to split them, there are too many characters in each.
    jaga_k, Mar 23, 2008
    #7

  8. kritius TechSpot Guru Posts: 2,087

    Ok then, Just split the HJT log in two and paste it here and ill have a look at it.
    kritius, Mar 23, 2008
    #8

  9. jaga_k Newcomer, in training Posts: 43

    Thank you. Would you like me to post the dss log in here as well?





    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 03:06, on 2008-03-23
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\Kontiki\KHost.exe
    C:\Program Files (x86)\Gadu-Gadu\gg.exe
    C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe
    C:\Program Files (x86)\SiteAdvisor\6253\SiteAdv.exe
    C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
    C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe
    C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\CPSHelpRunner10.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Users\Jaga\Desktop\dss.exe
    C:\PROGRA~2\TRENDM~1\HIJACK~1\Jaga.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
    F2 - REG:system.ini: Shell=C:\WINDOWS\EXPLORER.EXE
    F2 - REG:system.ini: UserInit=userinit.exe
    O1 - Hosts: ::1 localhost
    O1 - Hosts: 75.126.173.162 domainameshome.com
    O1 - Hosts: 75.126.173.162 Verzeichnen.de
    O1 - Hosts: 12.170.116.90 perfumerose.com
    O1 - Hosts: 75.126.173.162 key.us
    O1 - Hosts: 82.98.86.179 moe3p2.com
    O1 - Hosts: 82.98.86.179 hfkhh.cn
    O1 - Hosts: 12.170.116.90 senorsalsa.com
    O1 - Hosts: 82.98.86.179 revweb.org
    O1 - Hosts: 82.98.86.179 o-wii.com
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files (x86)\SiteAdvisor\6253\SiteAdv.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: McAfee Phishing Filter - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - C:\Program Files (x86)\McAfee\MSK\mcapbho.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~2\mcafee\VIRUSS~1\scriptsn.dll
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files (x86)\SiteAdvisor\6253\SiteAdv.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files (x86)\SiteAdvisor\6253\SiteAdv.exe"
    O4 - HKLM\..\Run: [McENUI] C:\PROGRA~2\McAfee\MHN\McENUI.exe /hide
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
    O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
    O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [kdx] C:\Program Files (x86)\Kontiki\KHost.exe -all
    O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files (x86)\Gadu-Gadu\gg.exe" /tray
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
    O13 - Gopher Prefix:
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files (x86)\Yahoo!\Common\yinsthelper.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll
    jaga_k, Mar 23, 2008
    #9

  10. jaga_k Newcomer, in training Posts: 43

    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
    O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    O23 - Service: DCPFLICS - Unknown owner - C:\Program Files (x86)\DCPFLICS\DCPFLICS.exe
    O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
    O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: KService - Kontiki Inc. - C:\Program Files (x86)\Kontiki\KService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2008 32-bit 32-bit (mi-raysat_3dsMax2008_32) - Unknown owner - C:\Program Files (x86)\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
    O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2008 64-bit 64-bit (mi-raysat_3dsMax2008_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_64server.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MSK\MskSrver.exe
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: perfmons Service (perfmons) - Unknown owner - C:\Windows\SysWOW64\perfs.exe
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Routing Service (Routing) - Unknown owner - C:\Windows\SysWOW64\routing.exe
    O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
    O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe
    O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
    O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
    O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: SessionLauncher - Unknown owner - C:\Users\Jaga\AppData\Local\Temp\DX9\SessionLauncher.exe (file missing)
    O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files (x86)\SiteAdvisor\6253\SAService.exe
    O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
    O23 - Service: Window Washer Engine (wwEngineSvc) - Webroot Software, Inc. - C:\Program Files (x86)\Webroot\Washer\WasherSvc.exe

    --
    End of file - 15337 bytes
    jaga_k, Mar 23, 2008
    #10

  11. kritius TechSpot Guru Posts: 2,087

    Yes post it too.

    have you made changes to your host file? Did you add all the O1 lines to your Host file?
    kritius, Mar 23, 2008
    #11

  12. jaga_k Newcomer, in training Posts: 43

    Deckard's System Scanner v20071014.68
    Run by Jaga on 2008-03-23 03:00:49
    Computer is in Normal Mode.
    --------------------------------------------------------------------------------

    -- Last 5 Restore Point(s) --
    31: 2008-03-23 02:20:29 UTC - RP287 - ComboFix created restore point
    30: 2008-03-23 01:14:21 UTC - RP286 - Installed Ad-Aware 2007
    29: 2008-03-22 01:03:53 UTC - RP284 - RegRun Virus Scan
    28: 2008-03-22 00:49:23 UTC - RP283 - RegRun Virus Scan
    27: 2008-03-22 00:48:03 UTC - RP282 - RegRun Virus Scan


    -- First Restore Point --
    1: 2008-03-18 19:34:20 UTC - RP245 - Scheduled Checkpoint


    Backed up registry hives.
    Performed disk cleanup.



    -- HijackThis (run as Jaga.exe) ------------------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 03:06, on 2008-03-23
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16609)
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\Kontiki\KHost.exe
    C:\Program Files (x86)\Gadu-Gadu\gg.exe
    C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe
    C:\Program Files (x86)\SiteAdvisor\6253\SiteAdv.exe
    C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
    C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe
    C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\CPSHelpRunner10.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Users\Jaga\Desktop\dss.exe
    C:\PROGRA~2\TRENDM~1\HIJACK~1\Jaga.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
    F2 - REG:system.ini: Shell=C:\WINDOWS\EXPLORER.EXE
    F2 - REG:system.ini: UserInit=userinit.exe
    O1 - Hosts: ::1 localhost
    O1 - Hosts: 75.126.173.162 domainameshome.com
    O1 - Hosts: 75.126.173.162 Verzeichnen.de
    O1 - Hosts: 12.170.116.90 perfumerose.com
    O1 - Hosts: 75.126.173.162 key.us
    O1 - Hosts: 82.98.86.179 moe3p2.com
    O1 - Hosts: 82.98.86.179 hfkhh.cn
    O1 - Hosts: 12.170.116.90 senorsalsa.com
    O1 - Hosts: 82.98.86.179 revweb.org
    O1 - Hosts: 82.98.86.179 o-wii.com
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files (x86)\SiteAdvisor\6253\SiteAdv.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: McAfee Phishing Filter - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - C:\Program Files (x86)\McAfee\MSK\mcapbho.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~2\mcafee\VIRUSS~1\scriptsn.dll
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files (x86)\SiteAdvisor\6253\SiteAdv.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files (x86)\SiteAdvisor\6253\SiteAdv.exe"
    O4 - HKLM\..\Run: [McENUI] C:\PROGRA~2\McAfee\MHN\McENUI.exe /hide
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
    O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
    O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [kdx] C:\Program Files (x86)\Kontiki\KHost.exe -all
    O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files (x86)\Gadu-Gadu\gg.exe" /tray
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
    O13 - Gopher Prefix:
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files (x86)\Yahoo!\Common\yinsthelper.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll
    jaga_k, Mar 23, 2008
    #12

  13. jaga_k Newcomer, in training Posts: 43

    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
    O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    O23 - Service: DCPFLICS - Unknown owner - C:\Program Files (x86)\DCPFLICS\DCPFLICS.exe
    O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
    O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: KService - Kontiki Inc. - C:\Program Files (x86)\Kontiki\KService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2008 32-bit 32-bit (mi-raysat_3dsMax2008_32) - Unknown owner - C:\Program Files (x86)\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_32server.exe
    O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2008 64-bit 64-bit (mi-raysat_3dsMax2008_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2008\mentalray\satellite\raysat_3dsMax2008_64server.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MSK\MskSrver.exe
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: perfmons Service (perfmons) - Unknown owner - C:\Windows\SysWOW64\perfs.exe
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Routing Service (Routing) - Unknown owner - C:\Windows\SysWOW64\routing.exe
    O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
    O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe
    O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
    O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
    O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: SessionLauncher - Unknown owner - C:\Users\Jaga\AppData\Local\Temp\DX9\SessionLauncher.exe (file missing)
    O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files (x86)\SiteAdvisor\6253\SAService.exe
    O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
    O23 - Service: Window Washer Engine (wwEngineSvc) - Webroot Software, Inc. - C:\Program Files (x86)\Webroot\Washer\WasherSvc.exe

    --
    End of file - 15337 bytes

    -- HijackThis Fixed Entries (C:\PROGRA~2\TRENDM~1\HIJACK~1\backups\) -----------

    backup-20080323-003341-255 O1 - Hosts: 82.98.86.179 moe3p2.com
    backup-20080323-003341-347 O1 - Hosts: 75.126.173.162 domainameshome.com
    backup-20080323-003341-391 O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    backup-20080323-003341-416 O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    backup-20080323-003341-499 O23 - Service: Routing Service (Routing) - Unknown owner - C:\Windows\SysWOW64\routing.exe
    backup-20080323-003341-590 O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    backup-20080323-003341-598 O23 - Service: perfmons Service (perfmons) - Unknown owner - C:\Windows\SysWOW64\perfs.exe
    backup-20080323-003341-663 O1 - Hosts: ::1 localhost
    backup-20080323-003341-704 O1 - Hosts: 82.98.86.179 revweb.org
    backup-20080323-003341-738 O1 - Hosts: 12.170.116.90 senorsalsa.com
    backup-20080323-003341-763 O1 - Hosts: 82.98.86.179 o-wii.com
    backup-20080323-003341-769 O1 - Hosts: 75.126.173.162 Verzeichnen.de
    backup-20080323-003341-785 O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    backup-20080323-003341-814 O1 - Hosts: 12.170.116.90 perfumerose.com
    backup-20080323-003341-844 O1 - Hosts: 82.98.86.179 hfkhh.cn
    backup-20080323-003341-888 O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    jaga_k, Mar 23, 2008
    #13

  14. kritius TechSpot Guru Posts: 2,087

    Did you make any fixes with HJT?
    kritius, Mar 23, 2008
    #14

  15. jaga_k Newcomer, in training Posts: 43

    -- File Associations -----------------------------------------------------------

    .scr - AutoCADScriptFile - shell\open\command - "C:\Windows\system32\notepad.exe" "%1"


    -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

    R0 ACPI (Microsoft ACPI Driver) - c:\windows\system32\drivers\acpi.sys (file missing)
    R0 CLFS (Common Log (CLFS)) - c:\windows\system32\clfs.sys (file missing)
    R0 crcdisk (Crcdisk Filter Driver) - c:\windows\system32\drivers\crcdisk.sys (file missing)
    R0 disk (Disk Driver) - c:\windows\system32\drivers\disk.sys (file missing)
    R0 Ecache (ReadyBoost Caching Driver) - c:\windows\system32\drivers\ecache.sys (file missing)
    R0 FileInfo (File Information FS MiniFilter) - c:\windows\system32\drivers\fileinfo.sys (file missing)
    R0 FltMgr - c:\windows\system32\drivers\fltmgr.sys (file missing)
    R0 fvevol (BitLocker Drive Encryption Filter Driver) - c:\windows\system32\drivers\fvevol.sys (file missing)
    R0 iaStorV (Intel RAID Controller Vista) - c:\windows\system32\drivers\iastorv.sys (file missing)
    R0 KSecDD - c:\windows\system32\drivers\ksecdd.sys (file missing)
    R0 MountMgr (Mount Point Manager) - c:\windows\system32\drivers\mountmgr.sys (file missing)
    R0 msisadrv (ISA/EISA Class Driver) - c:\windows\system32\drivers\msisadrv.sys (file missing)
    R0 Mup - c:\windows\system32\drivers\mup.sys (file missing)
    R0 NDIS (NDIS System Driver) - c:\windows\system32\drivers\ndis.sys (file missing)
    R0 partmgr (Partition Manager) - c:\windows\system32\drivers\partmgr.sys (file missing)
    R0 pci (PCI Bus Driver) - c:\windows\system32\drivers\pci.sys (file missing)
    R0 PxHlpa64 - c:\windows\system32\drivers\pxhlpa64.sys (file missing)
    R0 spldr (Security Processor Loader Driver) - c:\windows\system32\drivers\spldr.sys (file missing)
    R0 volmgr (Volume Manager Driver) - c:\windows\system32\drivers\volmgr.sys (file missing)
    R0 volmgrx (Dynamic Volume Manager) - c:\windows\system32\drivers\volmgrx.sys (file missing)
    R0 volsnap (Storage volumes) - c:\windows\system32\drivers\volsnap.sys (file missing)
    R0 Wdf01000 (Kernel Mode Driver Frameworks service) - c:\windows\system32\drivers\wdf01000.sys (file missing)
    R1 AFD (Ancilliary Function Driver for Winsock) - c:\windows\system32\drivers\afd.sys (file missing)
    R1 cdrom (CD-ROM Driver) - c:\windows\system32\drivers\cdrom.sys (file missing)
    R1 CSC (Offline Files Driver) - c:\windows\system32\drivers\csc.sys (file missing)
    R1 DfsC (Dfs Client Driver) - c:\windows\system32\drivers\dfsc.sys (file missing)
    R1 kbdclass (Keyboard Class Driver) - c:\windows\system32\drivers\kbdclass.sys (file missing)
    R1 kbdhid (Keyboard HID Driver) - c:\windows\system32\drivers\kbdhid.sys (file missing)
    R1 mfehidk (McAfee Inc.) - c:\windows\system32\drivers\mfehidk.sys (file missing)
    R1 mouclass (Mouse Class Driver) - c:\windows\system32\drivers\mouclass.sys (file missing)
    R1 MPFP - c:\windows\system32\drivers\mpfp.sys (file missing)
    R1 Msfs - c:\windows\system32\drivers\msfs.sys (file missing)
    R1 NetBIOS (NetBIOS Interface) - c:\windows\system32\drivers\netbios.sys (file missing)
    R1 netbt - c:\windows\system32\drivers\netbt.sys (file missing)
    R1 Npfs - c:\windows\system32\drivers\npfs.sys (file missing)
    R1 nsiproxy (NSI proxy service) - c:\windows\system32\drivers\nsiproxy.sys (file missing)
    R1 Null - c:\windows\system32\drivers\null.sys (file missing)
    R1 PSched (QoS Packet Scheduler) - c:\windows\system32\drivers\pacer.sys (file missing)
    R1 RasAcd (Remote Access Auto Connection Driver) - c:\windows\system32\drivers\rasacd.sys (file missing)
    R1 rdbss (Redirected Buffering Sub Sysytem) - c:\windows\system32\drivers\rdbss.sys (file missing)
    R1 RDPCDD - c:\windows\system32\drivers\rdpcdd.sys (file missing)
    R1 RDPENCDD (RDP Encoder Mirror Driver) - c:\windows\system32\drivers\rdpencdd.sys (file missing)
    R1 SCDEmu - c:\windows\system32\drivers\scdemu.sys (file missing)
    R1 Smb (Message-oriented TCP/IP and TCP/IPv6 Protocol (SMB session)) - c:\windows\system32\drivers\smb.sys (file missing)
    R1 Tcpip (TCP/IP Protocol Driver) - c:\windows\system32\drivers\tcpip.sys (file missing)
    R1 tdx (NetIO Legacy TDI Support Driver) - c:\windows\system32\drivers\tdx.sys (file missing)
    R1 TermDD (Terminal Device Driver) - c:\windows\system32\drivers\termdd.sys (file missing)
    R1 VgaSave - c:\windows\system32\drivers\vga.sys (file missing)
    R1 Wanarpv6 (Remote Access IPv6 ARP Driver) - c:\windows\system32\drivers\wanarp.sys (file missing)
    R2 lltdio (Link-Layer Topology Discovery Mapper I/O Driver) - c:\windows\system32\drivers\lltdio.sys (file missing)
    R2 luafv (UAC File Virtualization) - c:\windows\system32\drivers\luafv.sys (file missing)
    R2 PEAUTH - c:\windows\system32\drivers\peauth.sys (file missing)
    R2 rspndr (Link-Layer Topology Discovery Responder) - c:\windows\system32\drivers\rspndr.sys (file missing)
    R2 secdrv (Security Driver) - c:\windows\system32\drivers\secdrv.sys (file missing)
    R2 tcpipreg (TCP/IP Registry Compatibility) - c:\windows\system32\drivers\tcpipreg.sys (file missing)
    R3 AsyncMac (RAS Asynchronous Media Driver) - c:\windows\system32\drivers\asyncmac.sys (file missing)
    R3 atikmdag - c:\windows\system32\drivers\atikmdag.sys (file missing)
    R3 bowser - c:\windows\system32\drivers\bowser.sys (file missing)
    R3 circlass (Consumer IR Devices) - c:\windows\system32\drivers\circlass.sys (file missing)
    R3 DXGKrnl (LDDM Graphics Subsystem) - c:\windows\system32\drivers\dxgkrnl.sys (file missing)
    R3 e1express (Intel(R) PRO/1000 PCI Express Network Connection Driver) - c:\windows\system32\drivers\e1e6032e.sys (file missing)
    R3 fastfat (FAT12/16/32 File System Driver) - c:\windows\system32\drivers\fastfat.sys (file missing)
    R3 GEARAspiWDM - c:\windows\system32\drivers\gearaspiwdm.sys (file missing)
    R3 hcwPP2 (Hauppauge WinTV PVR PCI II ([23|25|26]xxx)) - c:\windows\system32\drivers\hcwpp2.sys (file missing)
    R3 HdAudAddService (Microsoft 1.1 UAA Function Driver for High Definition Audio Service) - c:\windows\system32\drivers\hdaudio.sys (file missing)
    R3 HDAudBus (Microsoft UAA Bus Driver for High Definition Audio) - c:\windows\system32\drivers\hdaudbus.sys (file missing)
    R3 HidIr (Microsoft Infrared HID Driver) - c:\windows\system32\drivers\hidir.sys (file missing)
    R3 HidUsb (Microsoft HID Class Driver) - c:\windows\system32\drivers\hidusb.sys (file missing)
    R3 HTTP - c:\windows\system32\drivers\http.sys (file missing)
    R3 intelppm (Intel Processor Driver) - c:\windows\system32\drivers\intelppm.sys (file missing)
    R3 IpFilterDriver (IP Traffic Filter Driver) - c:\windows\system32\drivers\ipfltdrv.sys (file missing)
    R3 iScsiPrt (iScsiPort Driver) - c:\windows\system32\drivers\msiscsi.sys (file missing)
    R3 ksthunk (Kernel Streaming Thunks) - c:\windows\system32\drivers\ksthunk.sys (file missing)
    R3 mfeavfk (McAfee Inc.) - c:\windows\system32\drivers\mfeavfk.sys (file missing)
    R3 mfesmfk (McAfee Inc.) - c:\windows\system32\drivers\mfesmfk.sys (file missing)
    R3 Modem - c:\windows\system32\drivers\modem.sys (file missing)
    R3 monitor (Microsoft Monitor Class Function Driver Service) - c:\windows\system32\drivers\monitor.sys (file missing)
    R3 mouhid (Mouse HID Driver) - c:\windows\system32\drivers\mouhid.sys (file missing)
    R3 mpsdrv (Windows Firewall Authorization Driver) - c:\windows\system32\drivers\mpsdrv.sys (file missing)
    R3 MRxDAV (WebDav Client Redirector Driver) - c:\windows\system32\drivers\mrxdav.sys (file missing)
    R3 mrxsmb (SMB MiniRedirector Wrapper and Engine) - c:\windows\system32\drivers\mrxsmb.sys (file missing)
    R3 mrxsmb10 (SMB 1.x MiniRedirector) - c:\windows\system32\drivers\mrxsmb10.sys (file missing)
    R3 mrxsmb20 (SMB 2.0 MiniRedirector) - c:\windows\system32\drivers\mrxsmb20.sys (file missing)
    R3 mssmbios (Microsoft System Management BIOS Driver) - c:\windows\system32\drivers\mssmbios.sys (file missing)
    R3 NativeWifiP (NativeWiFi Filter) - c:\windows\system32\drivers\nwifi.sys (file missing)
    R3 NdisTapi (Remote Access NDIS TAPI Driver) - c:\windows\system32\drivers\ndistapi.sys (file missing)
    R3 Ndisuio (NDIS Usermode I/O Protocol) - c:\windows\system32\drivers\ndisuio.sys (file missing)
    R3 NdisWan (Remote Access NDIS WAN Driver) - c:\windows\system32\drivers\ndiswan.sys (file missing)
    R3 NDProxy (NDIS Proxy) - c:\windows\system32\drivers\ndproxy.sys (file missing)
    R3 Ntfs - c:\windows\system32\drivers\ntfs.sys (file missing)
    R3 PptpMiniport (WAN Miniport (PPTP)) - c:\windows\system32\drivers\raspptp.sys (file missing)
    R3 Rasl2tp (WAN Miniport (L2TP)) - c:\windows\system32\drivers\rasl2tp.sys (file missing)
    R3 RasPppoe (Remote Access PPPOE Driver) - c:\windows\system32\drivers\raspppoe.sys (file missing)
    R3 rdpdr (Terminal Server Device Redirector Driver) - c:\windows\system32\drivers\rdpdr.sys (file missing)
    R3 srv - c:\windows\system32\drivers\srv.sys (file missing)
    R3 srv2 - c:\windows\system32\drivers\srv2.sys (file missing)
    R3 srvnet - c:\windows\system32\drivers\srvnet.sys (file missing)
    jaga_k, Mar 23, 2008
    #15

  16. jaga_k Newcomer, in training Posts: 43

    R3 swenum (Software Bus Driver) - c:\windows\system32\drivers\swenum.sys (file missing)
    R3 tunmp (Microsoft Tun Miniport Adapter Driver) - c:\windows\system32\drivers\tunmp.sys (file missing)
    R3 tunnel (Microsoft IPv6 Tunnel Miniport Adapter Driver) - c:\windows\system32\drivers\tunnel.sys (file missing)
    R3 umbus (UMBus Enumerator Driver) - c:\windows\system32\drivers\umbus.sys (file missing)
    R3 usbccgp (Microsoft USB Generic Parent Driver) - c:\windows\system32\drivers\usbccgp.sys (file missing)
    R3 usbcir (eHome Infrared Receiver (USBCIR)) - c:\windows\system32\drivers\usbcir.sys (file missing)
    R3 usbehci (Microsoft USB 2.0 Enhanced Host Controller Miniport Driver) - c:\windows\system32\drivers\usbehci.sys (file missing)
    R3 usbhub (Microsoft USB Standard Hub Driver) - c:\windows\system32\drivers\usbhub.sys (file missing)
    R3 usbuhci (Microsoft USB Universal Host Controller Miniport Driver) - c:\windows\system32\drivers\usbuhci.sys (file missing)
    R3 VST64_DPV - c:\windows\system32\drivers\vstdpv6.sys (file missing)
    R3 VST64HWBS2 - c:\windows\system32\drivers\vstbs26.sys (file missing)
    R3 winachsf - c:\windows\system32\drivers\vstcnxt6.sys (file missing)
    R4 udfs - c:\windows\system32\drivers\udfs.sys (file missing)

    S1 SASDIFSV - \??\c:\program files (x86)\superantispyware\sasdifsv.sys
    S3 agp440 (Intel AGP Bus Filter) - c:\windows\system32\drivers\agp440.sys (file missing)
    S3 athrusb (Atheros Wireless LAN USB device driver) - c:\windows\system32\drivers\athrxusb.sys (file missing)
    S3 BrFiltLo (Brother USB Mass-Storage Lower Filter Driver) - c:\windows\system32\drivers\brfiltlo.sys (file missing)
    S3 BrFiltUp (Brother USB Mass-Storage Upper Filter Driver) - c:\windows\system32\drivers\brfiltup.sys (file missing)
    S3 BrUsbSer (Brother MFC USB Serial WDM Driver) - c:\windows\system32\drivers\brusbser.sys (file missing)
    S3 drmkaud (Microsoft Kernel DRM Audio Descrambler) - c:\windows\system32\drivers\drmkaud.sys (file missing)
    S3 E1G60 (Intel(R) PRO/1000 NDIS 6 Adapter Driver) - c:\windows\system32\drivers\e1g6032e.sys (file missing)
    S3 Filetrace - c:\windows\system32\drivers\filetrace.sys (file missing)
    S3 gagp30kx (Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms) - c:\windows\system32\drivers\gagp30kx.sys (file missing)
    S3 IPNAT (IP Network Address Translator) - c:\windows\system32\drivers\ipnat.sys (file missing)
    S3 IRENUM (IR Bus Enumerator) - c:\windows\system32\drivers\irenum.sys (file missing)
    S3 mferkdk (McAfee Inc.) - c:\windows\system32\drivers\mferkdk.sys (file missing)
    S3 MSKSSRV (Microsoft Streaming Service Proxy) - c:\windows\system32\drivers\mskssrv.sys (file missing)
    S3 MSPCLOCK (Microsoft Streaming Clock Proxy) - c:\windows\system32\drivers\mspclock.sys (file missing)
    S3 MSPQM (Microsoft Streaming Quality Manager Proxy) - c:\windows\system32\drivers\mspqm.sys (file missing)
    S3 MsRPC - c:\windows\system32\drivers\msrpc.sys (file missing)
    S3 MSTEE (Microsoft Streaming Tee/Sink-to-Sink Converter) - c:\windows\system32\drivers\mstee.sys (file missing)
    S3 nv_agp (NVIDIA nForce AGP Bus Filter) - c:\windows\system32\drivers\nv_agp.sys (file missing)
    S3 QWAVEdrv (QWAVE driver) - c:\windows\system32\drivers\qwavedrv.sys (file missing)
    S3 R300 - c:\windows\system32\drivers\atikmdag.sys (file missing)
    S3 RDPWD (RDP Winstation Driver) - c:\windows\system32\drivers\rdpwd.sys (file missing)
    S3 SASENUM - \??\c:\program files (x86)\superantispyware\sasenum.sys
    S3 Serenum (Serenum Filter Driver) - c:\windows\system32\drivers\serenum.sys (file missing)
    S3 Serial (Serial Port Driver) - c:\windows\system32\drivers\serial.sys (file missing)
    S3 sffp_mmc (SFF Storage Protocol Driver for MMC) - c:\windows\system32\drivers\sffp_mmc.sys (file missing)
    S3 sffp_sd (SFF Storage Protocol Driver for SDBus) - c:\windows\system32\drivers\sffp_sd.sys (file missing)
    S3 Tcpip6 (Microsoft IPv6 Protocol Driver) - c:\windows\system32\drivers\tcpip.sys (file missing)
    S3 TDPIPE - c:\windows\system32\drivers\tdpipe.sys (file missing)
    S3 TDTCP - c:\windows\system32\drivers\tdtcp.sys (file missing)
    S3 tssecsrv (Terminal Services Security Filter Driver) - c:\windows\system32\drivers\tssecsrv.sys (file missing)
    S3 uagp35 (Microsoft AGPv3.5 Filter) - c:\windows\system32\drivers\uagp35.sys (file missing)
    S3 uliagpkx (Uli AGP Bus Filter) - c:\windows\system32\drivers\uliagpkx.sys (file missing)
    S3 usbaudio (USB Audio Driver (WDM)) - c:\windows\system32\drivers\usbaudio.sys (file missing)
    S3 usbprint (Microsoft USB PRINTER Class) - c:\windows\system32\drivers\usbprint.sys (file missing)
    S3 usbscan (USB Scanner Driver) - c:\windows\system32\drivers\usbscan.sys (file missing)
    S3 USBSTOR (USB Mass Storage Driver) - c:\windows\system32\drivers\usbstor.sys (file missing)
    S3 vga - c:\windows\system32\drivers\vgapnp.sys (file missing)
    S3 Wanarp (Remote Access IP ARP Driver) - c:\windows\system32\drivers\wanarp.sys (file missing)
    S3 WUDFRd - c:\windows\system32\drivers\wudfrd.sys (file missing)
    S4 adp94xx - c:\windows\system32\drivers\adp94xx.sys (file missing)
    S4 adpahci - c:\windows\system32\drivers\adpahci.sys (file missing)
    S4 adpu160m - c:\windows\system32\drivers\adpu160m.sys (file missing)
    S4 adpu320 - c:\windows\system32\drivers\adpu320.sys (file missing)
    S4 aic78xx - c:\windows\system32\drivers\djsvs.sys (file missing)
    S4 aliide - c:\windows\system32\drivers\aliide.sys (file missing)
    S4 amdide - c:\windows\system32\drivers\amdide.sys (file missing)
    S4 AmdK8 (AMD K8 Processor Driver) - c:\windows\system32\drivers\amdk8.sys (file missing)
    S4 arc - c:\windows\system32\drivers\arc.sys (file missing)
    S4 arcsas - c:\windows\system32\drivers\arcsas.sys (file missing)
    S4 atapi (IDE Channel) - c:\windows\system32\drivers\atapi.sys (file missing)
    S4 Brserid (Brother MFC Serial Port Interface Driver (WDM)) - c:\windows\system32\drivers\brserid.sys (file missing)
    S4 BrSerWdm (Brother WDM Serial driver) - c:\windows\system32\drivers\brserwdm.sys (file missing)
    S4 BrUsbMdm (Brother MFC USB Fax Only Modem) - c:\windows\system32\drivers\brusbmdm.sys (file missing)
    S4 BTHMODEM (Bluetooth Serial Communications Driver) - c:\windows\system32\drivers\bthmodem.sys (file missing)
    S4 cdfs (CD/DVD File System Reader) - c:\windows\system32\drivers\cdfs.sys (file missing)
    S4 cmdide - c:\windows\system32\drivers\cmdide.sys (file missing)
    S4 Compbatt (Microsoft Composite Battery Driver) - c:\windows\system32\drivers\compbatt.sys (file missing)
    S4 elxstor - c:\windows\system32\drivers\elxstor.sys (file missing)
    S4 fdc (Floppy Disk Controller Driver) - c:\windows\system32\drivers\fdc.sys (file missing)
    S4 flpydisk (Floppy Disk Driver) - c:\windows\system32\drivers\flpydisk.sys (file missing)
    S4 HidBth (Microsoft Bluetooth HID Miniport) - c:\windows\system32\drivers\hidbth.sys (file missing)
    S4 HpCISSs - c:\windows\system32\drivers\hpcisss.sys (file missing)
    S4 i2omp - c:\windows\system32\drivers\i2omp.sys (file missing)
    S4 i8042prt (i8042 Keyboard and PS/2 Mouse Port Driver) - c:\windows\system32\drivers\i8042prt.sys (file missing)
    S4 iirsp - c:\windows\system32\drivers\iirsp.sys (file missing)
    S4 intelide - c:\windows\system32\drivers\intelide.sys (file missing)
    S4 IPMIDRV - c:\windows\system32\drivers\ipmidrv.sys (file missing)
    S4 isapnp (PnP ISA/EISA Bus Driver) - c:\windows\system32\drivers\isapnp.sys (file missing)
    S4 iteatapi (ITEATAPI_Service_Install) - c:\windows\system32\drivers\iteatapi.sys (file missing)
    S4 iteraid (ITERAID_Service_Install) - c:\windows\system32\drivers\iteraid.sys (file missing)
    S4 LSI_FC - c:\windows\system32\drivers\lsi_fc.sys (file missing)
    S4 LSI_SAS - c:\windows\system32\drivers\lsi_sas.sys (file missing)
    jaga_k, Mar 23, 2008
    #16

  17. jaga_k Newcomer, in training Posts: 43

    S4 LSI_SCSI - c:\windows\system32\drivers\lsi_scsi.sys (file missing)
    S4 megasas - c:\windows\system32\drivers\megasas.sys (file missing)
    S4 mpio (Microsoft Multi-Path Bus Driver) - c:\windows\system32\drivers\mpio.sys (file missing)
    S4 Mraid35x - c:\windows\system32\drivers\mraid35x.sys (file missing)
    S4 msahci - c:\windows\system32\drivers\msahci.sys (file missing)
    S4 msdsm (Microsoft Multi-Path Device Specific Module) - c:\windows\system32\drivers\msdsm.sys (file missing)
    S4 nfrd960 - c:\windows\system32\drivers\nfrd960.sys (file missing)
    S4 nvraid - c:\windows\system32\drivers\nvraid.sys (file missing)
    S4 nvstor - c:\windows\system32\drivers\nvstor.sys (file missing)
    S4 ohci1394 (NEC FireWarden OHCI Compliant IEEE 1394 Host Controller) - c:\windows\system32\drivers\ohci1394.sys (file missing)
    S4 Parport (Parallel port driver) - c:\windows\system32\drivers\parport.sys (file missing)
    S4 pciide - c:\windows\system32\drivers\pciide.sys (file missing)
    S4 pcmcia - c:\windows\system32\drivers\pcmcia.sys (file missing)
    S4 Processor (Processor Driver) - c:\windows\system32\drivers\processr.sys (file missing)
    S4 ql2300 (QLogic Fibre Channel Miniport Driver) - c:\windows\system32\drivers\ql2300.sys (file missing)
    S4 ql40xx (QLogic iSCSI Miniport Driver) - c:\windows\system32\drivers\ql40xx.sys (file missing)
    S4 sbp2port (SBP-2 Transport/Protocol Bus Driver) - c:\windows\system32\drivers\sbp2port.sys (file missing)
    S4 sermouse (Serial Mouse Driver) - c:\windows\system32\drivers\sermouse.sys (file missing)
    S4 sffdisk (SFF Storage Class Driver) - c:\windows\system32\drivers\sffdisk.sys (file missing)
    S4 sfloppy (High-Capacity Floppy Disk Drive) - c:\windows\system32\drivers\sfloppy.sys (file missing)
    S4 SiSRaid2 - c:\windows\system32\drivers\sisraid2.sys (file missing)
    S4 SiSRaid4 - c:\windows\system32\drivers\sisraid4.sys (file missing)
    S4 Sym_hi - c:\windows\system32\drivers\sym_hi.sys (file missing)
    S4 Sym_u3 - c:\windows\system32\drivers\sym_u3.sys (file missing)
    S4 Symc8xx - c:\windows\system32\drivers\symc8xx.sys (file missing)
    S4 uliahci - c:\windows\system32\drivers\uliahci.sys (file missing)
    S4 UlSata - c:\windows\system32\drivers\ulsata.sys (file missing)
    S4 ulsata2 - c:\windows\system32\drivers\ulsata2.sys (file missing)
    S4 usbohci (Microsoft USB Open Host Controller Miniport Driver) - c:\windows\system32\drivers\usbohci.sys (file missing)
    S4 viaide - c:\windows\system32\drivers\viaide.sys (file missing)
    S4 vsmraid - c:\windows\system32\drivers\vsmraid.sys (file missing)
    S4 WacomPen (Wacom Serial Pen HID Driver) - c:\windows\system32\drivers\wacompen.sys (file missing)
    S4 Wd (Microsoft Watchdog Timer Driver) - c:\windows\system32\drivers\wd.sys (file missing)
    S4 WmiAcpi (Microsoft Windows Management Interface for ACPI) - c:\windows\system32\drivers\wmiacpi.sys (file missing)
    S4 ws2ifsl (Winsock IFS driver) - c:\windows\system32\drivers\ws2ifsl.sys (file missing)


    -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

    R2 Ati External Event Utility - c:\windows\system32\ati2evxx.exe (file missing)
    R2 Bonjour Service - "c:\program files (x86)\bonjour\mdnsresponder.exe" <Not Verified; Apple Inc.; Bonjour>
    R2 KService - "c:\program files (x86)\kontiki\kservice.exe" <Not Verified; Kontiki Inc.; Delivery Manager>
    R2 mi-raysat_3dsMax2008_32 (mental ray 3.6 Satellite for Autodesk 3ds Max 2008 32-bit 32-bit) - "c:\program files (x86)\autodesk\3ds max 2008\mentalray\satellite\raysat_3dsmax2008_32server.exe"
    R2 mi-raysat_3dsMax2008_64 (mental ray 3.6 Satellite for Autodesk 3ds Max 2008 64-bit 64-bit) - "c:\program files\autodesk\3ds max 2008\mentalray\satellite\raysat_3dsmax2008_64server.exe"
    R2 perfmons (perfmons Service) - c:\windows\syswow64\perfs.exe
    R2 RichVideo (Cyberlink RichVideo Service(CRVS)) - "c:\program files (x86)\cyberlink\shared files\richvideo.exe" <Not Verified; ; RichVideo Module>
    R2 Routing (Routing Service) - c:\windows\syswow64\routing.exe
    R2 SamSs (Security Accounts Manager) - c:\windows\system32\lsass.exe (file missing)
    R2 SBSDWSCService (SBSD Security Center Service) - c:\program files (x86)\spybot - search & destroy\sdwinsec.exe
    R2 slsvc (Software Licensing) - c:\windows\system32\slsvc.exe (file missing)
    R2 Spooler (Print Spooler) - c:\windows\system32\spoolsv.exe (file missing)
    R2 wwEngineSvc (Window Washer Engine) - c:\program files (x86)\webroot\washer\washersvc.exe
    R3 FLEXnet Licensing Service - "c:\program files (x86)\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" <Not Verified; Macrovision Europe Ltd.; FLEXnet Publisher (32 bit)>
    R3 KeyIso (CNG Key Isolation) - c:\windows\system32\lsass.exe (file missing)

    S2 DCPFLICS - c:\program files (x86)\dcpflics\dcpflics.exe
    S2 SessionLauncher - c:\users\jaga\appdata\local\temp\dx9\sessionlauncher.exe (file missing)
    S3 ALG (Application Layer Gateway Service) - c:\windows\system32\alg.exe (file missing)
    S3 DFSR (DFS Replication) - c:\windows\system32\dfsr.exe (file missing)
    S3 Fax - c:\windows\system32\fxssvc.exe (file missing)
    S3 MSDTC (Distributed Transaction Coordinator) - c:\windows\system32\msdtc.exe (file missing)
    S3 Netlogon - c:\windows\system32\lsass.exe (file missing)
    S3 ProtectedStorage (Protected Storage) - c:\windows\system32\lsass.exe (file missing)
    S3 RpcLocator (Remote Procedure Call (RPC) Locator) - c:\windows\system32\locator.exe (file missing)
    S3 SNMPTRAP (SNMP Trap) - c:\windows\system32\snmptrap.exe (file missing)
    S3 UI0Detect (Interactive Services Detection) - c:\windows\system32\ui0detect.exe (file missing)
    S3 vds (Virtual Disk) - c:\windows\system32\vds.exe (file missing)
    S3 VSS (Volume Shadow Copy) - c:\windows\system32\vssvc.exe (file missing)
    S3 wbengine (Block Level Backup Engine Service) - "c:\windows\system32\wbengine.exe" (file missing)
    S3 wmiApSrv (WMI Performance Adapter) - c:\windows\system32\wbem\wmiapsrv.exe (file missing)


    -- Device Manager: Disabled ----------------------------------------------------

    No disabled devices found.


    -- Scheduled Tasks -------------------------------------------------------------

    2008-03-23 02:57:05 460 --a------ C:\Windows\Tasks\SDMsgUpdate (SD).job
    2008-03-22 12:42:32 416 --ah----- C:\Windows\Tasks\User_Feed_Synchronization-{412BCDD7-4F8E-4D80-B11F-5F756C630C8C}.job
    2008-03-15 01:09:58 222 --a------ C:\Windows\Tasks\McDefragTask.job
    2008-03-01 01:01:26 330 --a------ C:\Windows\Tasks\McQcTask.job
    jaga_k, Mar 23, 2008
    #17

  18. jaga_k Newcomer, in training Posts: 43

    -- Files created between 2008-02-23 and 2008-03-23 -----------------------------

    2008-03-23 02:52:47 0 d-------- C:\Users\Jaga\Pavark
    2008-03-23 02:19:54 68096 --a------ C:\Windows\system32\zip.exe
    2008-03-23 02:19:54 98816 --a------ C:\Windows\system32\sed.exe
    2008-03-23 02:19:54 80412 --a------ C:\Windows\system32\grep.exe
    2008-03-23 02:19:54 73728 --a------ C:\Windows\system32\fdsv.exe <Not Verified; Smallfrogs Studio; >
    2008-03-23 01:56:12 0 d-------- C:\VundoFix Backups
    2008-03-23 01:51:47 53248 --a------ C:\Windows\system32\Process.exe <Not Verified; http://www.beyondlogic.org; Command Line Process Utility>
    2008-03-23 01:51:16 2004 --a------ C:\Windows\system32\tmp.reg
    2008-03-23 01:50:39 25600 --a------ C:\Windows\system32\WS2Fix.exe
    2008-03-23 01:50:39 289144 --a------ C:\Windows\system32\VCCLSID.exe <Not Verified; S!Ri; >
    2008-03-23 01:50:39 86528 --a------ C:\Windows\system32\VACFix.exe <Not Verified; S!Ri.URZ; VACFix>
    2008-03-23 01:50:39 82432 --a------ C:\Windows\system32\IEDFix.exe <Not Verified; S!Ri.URZ; IEDFix>
    2008-03-23 01:50:38 288417 --a------ C:\Windows\system32\SrchSTS.exe <Not Verified; S!Ri; SrchSTS>
    2008-03-23 01:50:38 51200 --a------ C:\Windows\system32\dumphive.exe
    2008-03-23 01:18:23 0 d-------- C:\Program Files (x86)\Yahoo!
    2008-03-23 01:18:09 0 d-------- C:\Program Files (x86)\CCleaner
    2008-03-23 01:14:33 0 d-------- C:\Users\All Users\Lavasoft
    2008-03-23 01:14:33 0 d-------- C:\Program Files (x86)\Lavasoft
    2008-03-23 01:00:28 0 d-------- C:\Users\All Users\Spybot - Search & Destroy
    2008-03-23 00:58:06 0 d-------- C:\Windows\Internet Logs
    2008-03-23 00:31:01 0 d-------- C:\Program Files (x86)\Trend Micro
    2008-03-23 00:17:56 53478 --a------ C:\Windows\system32\adcklog.dat
    2008-03-22 11:31:14 45056 --a------ C:\Windows\system32\Indt2.sys <Not Verified; b; >
    2008-03-22 11:31:13 276992 --a------ C:\Windows\system32\andt.sys
    2008-03-21 01:41:16 2 -rahs-o-t C:\Windows\winstart.bat
    2008-03-21 00:39:17 0 d-------- C:\Program Files (x86)\Greatis
    2008-03-20 20:58:24 0 d-------- C:\$WINDOWS.~LS
    2008-03-20 20:53:52 0 d-------- C:\$WINDOWS.~BT
    2008-03-20 15:55:08 0 d-------- C:\Program Files (x86)\thomson
    2008-03-19 05:28:03 0 d-------- C:\Program Files (x86)\EPSON Print CD
    2008-03-13 17:34:05 0 d-------- C:\Users\All Users\Sonic
    2008-03-13 17:32:59 0 d-------- C:\Program Files (x86)\Perfect Uninstaller
    2008-03-13 17:24:52 0 d-------- C:\Users\All Users\Roxio
    2008-03-13 17:21:10 0 d-------- C:\Program Files (x86)\Common Files\PX Storage Engine
    2008-03-13 17:21:09 0 d-------- C:\Program Files (x86)\Common Files\Sonic Shared
    2008-03-13 17:19:49 0 d-------- C:\Program Files (x86)\Common Files\Roxio Shared
    2008-03-13 17:18:52 0 d-------- C:\Program Files (x86)\Roxio
    2008-03-13 17:16:15 0 d-------- C:\Windows\system32\URTTEMP
    2008-03-13 17:13:08 0 d-------- C:\Users\All Users\FLEXnet
    2008-03-13 15:57:46 0 d-------- C:\Program Files (x86)\Ubisoft
    2008-03-13 15:07:58 0 d-------- C:\Program Files (x86)\Common Files\LightScribe
    2008-03-13 15:03:03 0 d-------- C:\Program Files (x86)\Nero
    2008-03-13 15:03:03 0 d-------- C:\Program Files (x86)\Common Files\Ahead
    2008-03-13 06:02:52 0 d-------- C:\Users\All Users\ALM
    2008-03-13 04:04:41 0 d-------- C:\Windows\system32\spool
    2008-03-13 03:54:13 0 d-------- C:\Program Files (x86)\Common Files\Macrovision Shared
    2008-03-06 19:20:30 0 d-------- C:\Program Files (x86)\SmartDraw 2008
    2008-03-06 18:32:03 24576 --a------ C:\Windows\system32\ZyDelReg.exe <Not Verified; ; ZyDelReg Application>
    2008-03-06 18:32:03 81920 --a------ C:\Windows\system32\ZDPN50.DLL <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows>
    2008-03-06 18:32:02 15872 --a------ C:\Windows\system32\InsDrvZD64.DLL <Not Verified; ; InsDrvZD Dynamic Link Library>
    2008-03-06 18:32:02 28672 --a------ C:\Windows\system32\InsDrvZD.dll <Not Verified; ; InsDrvZD Dynamic Link Library>
    2008-03-06 17:51:31 0 d-------- C:\Program Files (x86)\SmartDraw 2007
    2008-03-06 13:44:07 200704 --a------ C:\Windows\system32\UpdateDriver.exe <Not Verified; ; UpdateDriver Application>
    2008-03-04 22:08:34 0 d-------- C:\Program Files (x86)\DAMN NFO Viewer
    2008-03-04 22:02:53 0 d-------- C:\Program Files (x86)\DCPFLICS
    2008-03-04 17:24:06 0 d-------- C:\Program Files (x86)\Microsoft Silverlight
    2008-03-03 17:13:11 0 d-------- C:\Program Files (x86)\FastStone Capture
    2008-02-25 12:14:24 0 d-------- C:\Program Files (x86)\omniformat
    2008-02-25 12:13:29 47616 --a------ C:\Windows\system32\pdf995mon64.dll
    2008-02-25 12:13:29 0 d-------- C:\Users\All Users\pdf995
    2008-02-25 12:13:26 0 d-------- C:\Program Files (x86)\pdf995
    2008-02-25 12:11:42 0 d-------- C:\omniformat
    2008-02-25 11:15:21 0 d-------- C:\3dsmax9
    2008-02-25 11:04:54 0 d-------- C:\3dsmax7
    2008-02-25 04:46:27 0 d-------- C:\Users\All Users\Adobe Systems
    2008-02-25 04:09:56 0 d-------- C:\Program Files (x86)\QuickTime
    2008-02-25 03:06:07 0 d-------- C:\Program Files (x86)\PowerISO
    2008-02-24 21:05:02 0 d-------- C:\Program Files (x86)\Cool MP3 Splitter
    2008-02-24 19:05:47 0 d-------- C:\Program Files (x86)\No Right Click
    2008-02-24 02:16:30 0 d-------- C:\Program Files (x86)\Common Files\Real
    2008-02-23 23:01:36 32256 --a------ C:\Windows\system32\routing.exe


    -- Find3M Report ---------------------------------------------------------------

    2008-03-23 02:57:43 0 d-------- C:\Users\Jaga\AppData\Roaming\Skype
    2008-03-23 02:47:48 0 d-------- C:\Users\Jaga\AppData\Roaming\skypePM
    2008-03-23 01:13:55 0 d-------- C:\Program Files (x86)\Common Files\Wise Installation Wizard
    2008-03-23 00:57:20 0 d-------- C:\Users\Jaga\AppData\Roaming\uTorrent
    2008-03-22 21:23:31 0 d-------- C:\Program Files (x86)\McAfee
    2008-03-21 09:26:58 0 d-------- C:\Program Files (x86)\Kontiki
    2008-03-21 02:23:15 0 d-------- C:\Users\Jaga\AppData\Roaming\RegRun
    2008-03-20 22:31:53 0 d-------- C:\Users\Jaga\AppData\Roaming\McAfee
    2008-03-20 16:21:34 0 d--h----- C:\Program Files (x86)\InstallShield Installation Information
    2008-03-19 20:09:00 3350 --ahs---- C:\Windows\system32\KGyGaAvL.sys
    2008-03-19 19:51:04 0 d-------- C:\Users\Jaga\AppData\Roaming\Adobe
    2008-03-19 19:50:50 0 d-------- C:\Program Files (x86)\Common Files\Adobe
    2008-03-19 19:38:05 0 d-------- C:\Program Files (x86)\NCH Swift Sound
    2008-03-19 19:36:49 0 d-------- C:\Program Files (x86)\Common Files
    2008-03-19 19:36:26 0 d-------- C:\Users\Jaga\AppData\Roaming\Real
    2008-03-19 19:35:15 0 d-------- C:\Program Files (x86)\SUPERAntiSpyware
    2008-03-18 18:55:06 4072 --a------ C:\Users\Jaga\AppData\Roaming\wklnhst.dat
    2008-03-16 16:14:00 0 d-------- C:\Program Files (x86)\Java
    2008-03-13 21:25:58 0 d-------- C:\Users\Jaga\AppData\Roaming\Roxio
    2008-03-13 15:15:54 0 d-------- C:\Users\Jaga\AppData\Roaming\Ahead
    2008-03-12 05:07:07 0 d-------- C:\Program Files (x86)\Windows Mail
    2008-03-12 00:29:10 0 d-------- C:\Users\Jaga\AppData\Roaming\Macromedia
    2008-03-10 18:56:51 0 d-------- C:\Program Files (x86)\Common Files\Autodesk Shared
    2008-03-09 18:00:13 0 d-------- C:\Program Files (x86)\Common Files\Webroot Shared
    2008-02-28 21:18:49 0 d-------- C:\Users\Jaga\AppData\Roaming\dvdcss
    2008-02-28 13:07:36 0 d-------- C:\Program Files (x86)\Mozilla Thunderbird
    2008-02-25 12:25:08 0 d-------- C:\Users\Jaga\AppData\Roaming\pdf995
    2008-02-25 04:59:10 0 d-------- C:\Program Files (x86)\Google
    2008-02-22 13:05:58 0 d-------- C:\Program Files (x86)\PFConfig
    2008-02-20 23:45:18 0 d-------- C:\Users\Jaga\AppData\Roaming\LimeWire
    2008-02-18 16:40:03 0 d-------- C:\Program Files (x86)\EssentialPIM Pro
    2008-02-18 16:39:53 0 d-------- C:\Users\Jaga\AppData\Roaming\EssentialPIM Pro
    2008-02-18 16:29:44 0 d-------- C:\Program Files (x86)\Firebird
    2008-02-13 01:09:09 31049 --a------ C:\Users\Jaga\AppData\Roaming\UserTile.png
    2008-02-13 01:09:09 0 d-------- C:\Users\Jaga\AppData\Roaming\PeerNetworking
    2008-02-11 22:27:29 0 d-------- C:\Program Files (x86)\Calendarscope
    2008-02-10 23:23:39 0 d-------- C:\Users\Jaga\AppData\Roaming\EPSON
    2008-02-10 21:02:40 0 d-------- C:\Users\Jaga\AppData\Roaming\Duality Software
    2008-02-10 21:00:53 0 d-------- C:\Program Files (x86)\Organizer
    2008-02-10 20:51:13 0 d-------- C:\Users\Jaga\AppData\Roaming\Konrad Papala
    2008-02-10 18:26:37 0 d-------- C:\Program Files (x86)\Agenda Mx 2005
    2008-02-10 18:18:41 0 d-------- C:\Program Files (x86)\Scalogic
    2008-02-10 17:02:38 0 d-------- C:\Program Files (x86)\Easy Schedule Maker
    2008-02-10 17:00:19 0 d-------- C:\Program Files (x86)\ClockIt
    2008-02-10 16:18:16 0 d-------- C:\Users\Jaga\AppData\Roaming\SmartDraw
    2008-02-10 15:47:16 0 d-------- C:\Program Files (x86)\Microsoft FrontPage
    2008-02-10 15:46:01 0 d-------- C:\Users\Jaga\AppData\Roaming\Microsoft Web Folders
    2008-02-08 13:17:16 1061 --a------ C:\Windows\mozver.dat
    2008-02-08 13:10:53 0 d-------- C:\Users\Jaga\AppData\Roaming\SUPERAntiSpyware.com
    jaga_k, Mar 23, 2008
    #18

  19. jaga_k Newcomer, in training Posts: 43

    2008-02-05 01:23:20 0 d-------- C:\Users\Jaga\AppData\Roaming\vlc
    2008-02-04 21:16:10 0 d-------- C:\Program Files (x86)\VideoLAN
    2008-02-04 16:30:26 0 d-------- C:\Users\Jaga\AppData\Roaming\Template
    2008-02-04 03:52:18 0 d-------- C:\Program Files (x86)\Autodesk
    2008-02-03 00:48:03 0 d-------- C:\Program Files (x86)\Windows Sidebar
    2008-02-03 00:48:03 0 d-------- C:\Program Files (x86)\Windows Calendar
    2008-02-03 00:48:01 0 d-------- C:\Program Files (x86)\Windows Photo Gallery
    2008-02-03 00:48:01 0 d-------- C:\Program Files (x86)\Windows Defender
    2008-02-02 22:25:16 0 d-------- C:\Program Files (x86)\SiteAdvisor
    2008-02-02 00:12:02 0 d-------- C:\Users\Jaga\AppData\Roaming\FastStone
    2008-02-01 19:53:43 0 d-------- C:\Program Files (x86)\NAPI-PROJEKT
    2008-02-01 15:06:43 0 d-------- C:\Users\Jaga\AppData\Roaming\SiteAdvisor
    2008-02-01 14:39:21 0 d-------- C:\Program Files (x86)\Common Files\McAfee
    2008-02-01 14:38:53 0 d-------- C:\Program Files (x86)\McAfee.com
    2008-01-30 18:00:59 56 -r-hs---- C:\Windows\system32\B3912A2091.sys
    2008-01-30 17:58:00 0 d-------- C:\Program Files (x86)\Corel
    2008-01-30 17:58:00 0 d-------- C:\Program Files (x86)\Common Files\Corel
    2008-01-30 17:11:02 0 d-------- C:\Users\Jaga\AppData\Roaming\Corel
    2008-01-30 02:47:59 0 d-------- C:\Program Files (x86)\Common Files\Java
    2008-01-30 02:47:53 0 d-------- C:\Users\Jaga\AppData\Roaming\Google
    2008-01-30 00:13:34 0 d-------- C:\Program Files (x86)\ffdshow
    2008-01-30 00:09:39 0 d-------- C:\Program Files (x86)\AVIcodec
    2008-01-29 18:50:31 0 d-------- C:\Users\Jaga\AppData\Roaming\CyberLink
    2008-01-29 16:05:23 0 d-------- C:\Program Files (x86)\Channel4
    2008-01-29 02:00:11 0 d-------- C:\Program Files (x86)\PC Drivers HeadQuarters
    2008-01-29 00:56:53 0 d-------- C:\Users\Jaga\AppData\Roaming\Talkback
    2008-01-29 00:56:43 0 d-------- C:\Users\Jaga\AppData\Roaming\Mozilla
    2008-01-29 00:56:42 0 d-------- C:\Users\Jaga\AppData\Roaming\Thunderbird
    2008-01-29 00:45:50 0 d-------- C:\Program Files (x86)\Microsoft Works
    2008-01-29 00:37:40 0 d-------- C:\Users\Jaga\AppData\Roaming\Autodesk
    2008-01-28 23:50:57 0 d-------- C:\Program Files (x86)\turbo squid tentacles
    2008-01-28 23:21:55 0 d-------- C:\Program Files (x86)\IncrediMail
    2008-01-28 22:36:33 0 d-------- C:\Users\Jaga\AppData\Roaming\Apple Computer
    2008-01-28 22:35:37 0 d-------- C:\Program Files (x86)\iTunes
    2008-01-28 22:35:27 0 d-------- C:\Program Files (x86)\iPod
    2008-01-28 22:34:56 0 d-------- C:\Program Files (x86)\Bonjour
    2008-01-28 22:26:45 0 d-------- C:\Users\Jaga\AppData\Roaming\Webroot
    2008-01-28 22:26:43 0 d-------- C:\Program Files (x86)\Webroot
    2008-01-28 22:18:30 0 d-------- C:\Program Files (x86)\Apple Software Update
    2008-01-28 22:16:54 0 d-------- C:\Users\Jaga\AppData\Roaming\Gadu-Gadu
    2008-01-28 21:45:29 0 d-------- C:\Program Files (x86)\Gadu-Gadu
    2008-01-28 21:45:12 0 d-------- C:\Program Files (x86)\AutoCAD Architecture 2008
    2008-01-28 21:36:38 0 d-------- C:\Program Files (x86)\Common Files\InstallShield
    2008-01-28 21:28:26 0 d-------- C:\Program Files (x86)\Skype
    2008-01-28 21:28:24 0 d-------- C:\Program Files (x86)\Common Files\Skype
    2008-01-28 21:23:34 0 d-------- C:\Users\Jaga\AppData\Roaming\eMule
    2008-01-28 21:23:34 0 d-------- C:\Program Files (x86)\eMule
    2008-01-28 21:14:54 0 d-------- C:\Users\Jaga\AppData\Roaming\Winamp
    2008-01-28 21:13:58 0 d-------- C:\Program Files (x86)\Winamp
    2008-01-28 20:56:00 0 --a------ C:\Windows\ativpsrm.bin
    2008-01-28 20:55:31 0 d-------- C:\Program Files (x86)\Windows Doctor
    2008-01-28 20:49:04 0 d-------- C:\Program Files (x86)\CyberLink
    2008-01-28 20:43:46 0 d-------- C:\Program Files (x86)\MSXML 4.0
    2008-01-28 20:36:01 0 d-------- C:\Program Files (x86)\Common Files\Adobe Systems Shared
    2008-01-28 20:27:30 0 d-------- C:\Users\Jaga\AppData\Roaming\ACD Systems
    2008-01-28 20:26:29 0 d-------- C:\Program Files (x86)\Common Files\ACD Systems
    2008-01-28 20:26:11 0 d-------- C:\Program Files (x86)\ACD Systems
    2008-01-28 19:37:31 0 d-------- C:\Program Files (x86)\Kaspersky Lab
    2008-01-28 18:57:50 0 d-------- C:\Program Files (x86)\uTorrent
    2008-01-28 18:55:40 0 --a------ C:\Windows\nsreg.dat
    2008-01-28 18:33:21 174 --ahs---- C:\Program Files (x86)\desktop.ini
    2008-01-28 17:51:18 0 d-------- C:\Program Files (x86)\MagicISO
    2008-01-28 17:42:42 0 d-------- C:\Users\Jaga\AppData\Roaming\WinRAR
    2008-01-28 17:39:03 0 d-------- C:\Program Files (x86)\EPSON
    2008-01-28 17:20:59 0 d-------- C:\Users\Jaga\AppData\Roaming\InstallShield
    2008-01-28 17:08:17 0 d-------- C:\Users\Jaga\AppData\Roaming\Identities
    2008-01-28 14:45:48 0 -rahs---- C:\MSDOS.SYS
    2008-01-28 14:45:48 0 -rahs---- C:\IO.SYS
    2008-01-28 14:45:48 0 --a------ C:\CONFIG.SYS
    2008-01-28 14:45:48 0 --a------ C:\AUTOEXEC.BAT
    2008-01-27 14:19:24 7680 --a------ C:\Windows\system32\ff_vfw.dll
    2008-01-01 00:00:00 60273 --a------ C:\Windows\system32\pthreadGC2.dll <Not Verified; Open Source Software community project; >


    -- Registry Dump ---------------------------------------------------------------



    -- Hosts -----------------------------------------------------------------------

    75.126.173.162 domainameshome.com
    75.126.173.162 Verzeichnen.de
    12.170.116.90 perfumerose.com
    75.126.173.162 key.us
    82.98.86.179 moe3p2.com
    82.98.86.179 hfkhh.cn
    12.170.116.90 senorsalsa.com
    82.98.86.179 revweb.org
    82.98.86.179 o-wii.com
    127.0.0.1 www.007guard.com

    8041 more entries in hosts file.


    -- End of Deckard's System Scanner: finished at 2008-03-23 03:07:19 ------------
    jaga_k, Mar 23, 2008
    #19

  20. jaga_k Newcomer, in training Posts: 43

    No, i don't think I have.
    Like I said, before knowing about this website, I tried to fix all this with regrun...
    jaga_k, Mar 23, 2008
    #20
Page 1 of 4
Topic Status:
Not open for further replies.

Add New Comment

Social Login & Guest Posting

TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.