Deckard's System Scanner v20071014.68 Run by [removed] on 2009-01-16 10:30:02 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- HijackThis (run as Dick.exe) ------------------------------------------------ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:30:21 AM, on 1/16/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Windows Desktop Search\WindowsSearch.exe c:\Program Files\Microsoft IntelliPoint\dpupdchk.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\System32\HPZipm12.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\UPHClean\uphclean.exe C:\WINDOWS\system32\SearchIndexer.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Outlook Express\msimn.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Microsoft Office\Office10\WINWORD.EXE C:\Program Files\Microsoft Works\MSWorks.exe C:\Documents and Settings\Dick\Desktop\dss.exe C:\PROGRA~1\TRENDM~1\HIJACK~1\Dick.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/a/ O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe" O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe O4 - Global Startup: WinZip Quick Pick.lnk.disabled O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: PackageCab - http://ak.imgag.com/imgag/cp/install/AxCtp2.cab O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://pccheckup.dellfix.com/sdccommon/download/tgctlcm.cab O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/dcode/ActiveX/MSDcode.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1125759480093 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?AuthParam=1230124955_f2e6c1f728093aad71d2369f044177ce&GroupName=JSC&BHost=javadl.sun.com&FilePath=/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab&File=jinstall-6u11-windows-i586-jc.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} - http://www.pandasoftware.com/activescan/as5/asinst.cab O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/Crusher.cab O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab O16 - DPF: {FFFFFFFF-CACE-BABE-BABE-00AA0055595A} - http://www.trueswitch.com/TrueInstall.exe O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe -- End of file - 7114 bytes -- Files created between 2008-12-16 and 2009-01-16 ----------------------------- 2009-01-10 13:56:40 0 d-------- C:\My Drivers 2009-01-10 07:21:14 0 d-------- C:\Documents and Settings\Emmy\Application Data\Windows Desktop Search 2009-01-09 15:39:44 0 d-------- C:\Documents and Settings\Carol\Application Data\Windows Desktop Search 2009-01-09 15:07:24 0 dr-h----- C:\Documents and Settings\Dick\Recent 2009-01-09 13:28:50 0 d------c- C:\WINDOWS\system32\DRVSTORE 2009-01-09 13:28:41 0 d-------- C:\Program Files\Microsoft IntelliPoint 2009-01-09 12:32:31 0 d-------- C:\Program Files\Microsoft IntelliPoint 5.5 2009-01-08 16:11:24 0 d-------- C:\Documents and Settings\Dick\Application Data\Windows Search 2009-01-08 16:00:19 0 d-------- C:\Documents and Settings\Dick\Application Data\Windows Desktop Search 2009-01-08 15:59:30 0 d-------- C:\WINDOWS\system32\GroupPolicy 2009-01-08 15:59:30 0 d-------- C:\Program Files\Windows Desktop Search 2009-01-08 15:57:22 0 d-------- C:\Program Files\Windows Media Connect 2 2009-01-08 15:04:20 0 d-------- C:\Program Files\PC Wizard 2008 2009-01-08 11:16:58 0 d-------- C:\Documents and Settings\Dick\usrusmt2.tmp 2009-01-05 09:01:31 0 d-------- C:\Program Files\Hewlett-Packard 2009-01-05 09:00:01 0 d-------- C:\Program Files\Analog Devices 2009-01-05 08:56:03 0 d-------- C:\Program Files\NOS 2009-01-05 08:55:50 0 d--h----- C:\WINDOWS\PIF 2009-01-05 07:23:13 0 d-------- C:\Program Files\DriverGuide DriverScan(2) 2009-01-04 15:51:44 0 d-------- C:\Documents and Settings\Dick\Application Data\DeepBurner 2009-01-04 15:48:54 0 d-------- C:\Program Files\Astonsoft 2009-01-03 16:26:25 0 d-------- C:\HXCD-ROM 2009-01-02 09:40:57 0 d-------- C:\Program Files\Visioneer OneTouch 2009-01-01 11:22:30 8126464 --a------ C:\Documents and Settings\Dick\ntuser.dat 2009-01-01 10:53:00 17176 -----n--- C:\WINDOWS\hpomdl04.dat 2009-01-01 10:53:00 103511 --a------ C:\WINDOWS\hpoins04.dat 2008-12-31 12:23:34 0 d-------- C:\Documents and Settings\Dick\Application Data\Uniblue 2008-12-29 15:04:30 36864 --a------ C:\WINDOWS\system32\DSndUp.exe 2008-12-29 15:04:30 45056 --a------ C:\WINDOWS\system32\CleanUp.exe 2008-12-29 14:57:18 0 d-------- C:\HP CLJ CM6040 Printer 2008-12-28 12:43:16 0 d-------- C:\Program Files\Research In Motion 2008-12-28 07:48:57 0 d-------- C:\Program Files\Common Files\Adobe AIR 2008-12-28 07:42:30 0 d-------- C:\Documents and Settings\All Users\Application Data\NOS 2008-12-27 16:10:59 0 d-------- C:\USBDEVIEW 2008-12-27 10:52:10 262144 --a------ C:\WINDOWS\system32\default_user_class.dat 2008-12-27 10:16:16 0 d-------- C:\Documents and Settings\LocalService\Application Data\Adobe 2008-12-27 10:14:01 0 d-------- C:\Documents and Settings\Dick\Application Data\Roxio 2008-12-27 09:21:15 1310 --a------ C:\Documents and Settings\Dick\reset.cmd 2008-12-27 08:31:32 0 d-------- C:\Program Files\Windows Resource Kits 2008-12-26 14:37:49 0 d-------- C:\Program Files\UPHClean 2008-12-26 09:28:29 0 d-------- C:\Documents and Settings\Dick\Application Data\Malwarebytes 2008-12-26 09:28:23 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-12-26 09:28:23 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-12-25 09:32:31 0 d-------- C:\Documents and Settings\Administrator\Application Data\Macromedia 2008-12-24 07:57:41 0 d-------- C:\Program Files\System Security Suite 1.04 2008-12-22 16:55:39 0 d-------- C:\Documents and Settings\Dick\.housecall6.6 2008-12-21 14:50:33 0 d-------- C:\Documents and Settings\Dick\Application Data\InstallShield 2008-12-21 12:33:01 0 d-------- C:\Documents and Settings\All Users\Application Data\TEMP 2008-12-21 12:32:37 0 d-------- C:\Program Files\Modem Helper 2008-12-21 12:30:24 0 d-------- C:\Documents and Settings\All Users\Application Data\InstallShield 2008-12-21 12:28:25 0 d-------- C:\drvrtmp 2008-12-21 12:20:05 0 d-------- C:\Program Files\Common Files\Sonic Shared 2008-12-21 12:16:41 0 d-------- C:\Program Files\support.com 2008-12-21 12:16:40 0 d-------- C:\Program Files\Common Files\SupportSoft 2008-12-21 07:27:55 0 d-------- C:\Documents and Settings\Administrator\Application Data\Mozilla 2008-12-20 20:09:51 0 d-------- C:\Program Files\Enigma Software Group 2008-12-20 07:11:18 0 d-------- C:\Documents and Settings\NetworkService\Application Data\Macromedia 2008-12-20 07:01:01 0 dr------- C:\Documents and Settings\NetworkService\Favorites 2008-12-18 09:48:05 0 d-------- C:\Program Files\PCCheckupOnline 2008-12-17 13:39:49 53248 --a------ C:\WINDOWS\system32\CSVer.dll 2008-12-17 13:39:32 0 d-------- C:\Intel 2008-12-17 13:10:12 0 d-------- C:\WINDOWS\LastGood(2) 2008-12-17 08:43:45 256 --a------ C:\WINDOWS\system32\pool.bin 2008-12-17 08:24:00 0 d-------- C:\Documents and Settings\All Users\Application Data\Sonic 2008-12-17 08:20:24 0 d-------- C:\Documents and Settings\All Users\Application Data\Roxio 2008-12-16 15:20:37 0 d-------- C:\Program Files\PC Drivers HeadQuarters 2008-12-16 15:20:37 0 d-------- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters -- Find3M Report --------------------------------------------------------------- 2009-01-15 19:55:40 0 d-------- C:\Documents and Settings\Dick\Application Data\OpenOffice.org2 2009-01-10 13:42:51 0 d--h----- C:\Program Files\InstallShield Installation Information 2009-01-10 13:24:32 1011 --a------ C:\CONFIG.SYS 2009-01-10 13:24:32 565 --a------ C:\AUTOEXEC.BAT 2009-01-08 11:42:31 0 d-------- C:\Program Files\QuickTime 2009-01-08 11:40:18 0 d-------- C:\Program Files\Office 2009-01-08 11:40:14 0 d-------- C:\Program Files\Microsoft Works 2009-01-08 11:40:14 0 d-------- C:\Program Files\Microsoft Streets & Trips 2009-01-08 11:39:00 0 d-------- C:\Program Files\Microsoft Money 2009-01-08 11:39:00 0 d-------- C:\Program Files\Messenger 2009-01-08 11:38:59 0 d-------- C:\Program Files\LimeWire 2009-01-08 11:38:17 0 d-------- C:\Program Files\iTunes 2009-01-08 11:37:07 0 d-------- C:\Program Files\GoldPocket 2009-01-08 11:37:05 0 d-------- C:\Program Files\Gold Miner Vegas 2009-01-08 11:37:03 0 d-------- C:\Program Files\exPressit S.E. 2.2 2009-01-08 11:35:28 0 d-------- C:\Program Files\Classic PhoneTools 2009-01-08 11:20:04 0 d-------- C:\Documents and Settings\Dick\Application Data\Template 2009-01-07 13:30:50 0 d-------- C:\Program Files\Common Files 2009-01-05 09:00:34 0 d-------- C:\Program Files\CCleaner 2009-01-05 09:00:20 0 d-------- C:\Program Files\TAXCUT2003 2009-01-05 08:59:45 0 d-------- C:\Program Files\CONEXANT 2009-01-05 08:56:31 0 d-------- C:\Program Files\OpenOffice.org 2.2 2009-01-05 08:56:31 0 d-------- C:\Program Files\Microsoft Picture It! 2002 2009-01-05 08:56:31 0 d-------- C:\Program Files\Advanced System Optimizer 2009-01-05 08:56:30 0 d-------- C:\Program Files\Java 2009-01-05 08:56:25 0 d-------- C:\Program Files\Flash Movie Player 2009-01-05 08:56:10 0 d-------- C:\Program Files\Common Files\Adobe 2009-01-05 08:48:40 0 d-------- C:\Program Files\intel 2009-01-05 08:35:35 0 d-------- C:\Documents and Settings\Dick\Application Data\Adobe 2009-01-05 08:33:22 0 d-------- C:\Program Files\Dell 2009-01-05 08:31:57 0 d-------- C:\Program Files\TaxCut03 2009-01-01 11:22:58 0 d-------- C:\Program Files\HP 2009-01-01 11:18:17 1906 --a------ C:\Documents and Settings\Dick\Application Data\HPCOM_48BitScanUpdate.log 2008-12-27 09:08:34 87928 --a------ C:\Documents and Settings\Dick\Application Data\GDIPFONTCACHEV1.DAT 2008-12-21 12:10:41 0 d-------- C:\Program Files\Google 2008-12-21 12:06:48 0 d-------- C:\Program Files\SlySoft 2008-12-17 08:20:24 0 d-------- C:\Program Files\Common Files\InstallShield 2008-12-05 21:32:42 0 d-------- C:\Program Files\MSECache 2008-11-29 10:31:07 0 d-------- C:\Documents and Settings\Dick\Application Data\AVG7 2008-11-26 14:07:55 0 d-------- C:\Program Files\Trend Micro -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] 06/11/2008 10:33 PM 75128 --a------ C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] 12/22/2008 03:13 PM 34816 --a------ C:\Program Files\Java\jre6\bin\jp2ssv.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] 12/22/2008 03:13 PM 73728 --a------ C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WinPatrol"="C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe" [03/06/2004 05:16 PM] "IntelliPoint"="c:\Program Files\Microsoft IntelliPoint\ipoint.exe" [06/10/2008 12:56 PM] "Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [08/29/2008 11:06 PM] "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [10/17/2008 09:22 AM] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [06/12/2008 02:38 AM] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Microsoft Works Update Detection"="C:\Program Files\Microsoft Works\WkDetect.exe" [] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [04/13/2008 07:12 PM] C:\Documents and Settings\Dick\Start Menu\Programs\Startup\ DESKTOP.INI [9/3/2002 10:00:00 AM] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ DESKTOP.INI [9/3/2002 10:00:00 AM] HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [7/7/2003 12:20:40 AM] Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe [5/26/2008 10:19:14 PM] WinZip Quick Pick.lnk.disabled [8/21/2005 7:42:27 AM] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [05/26/2008 10:19 PM 304128] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy] C:\WINDOWS\System32\dimsntfy.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "appinit_dlls"=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}] @="Volume shadow copy" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Works Calendar Reminders.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Works Calendar Reminders.lnk backup=C:\WINDOWS\pss\Microsoft Works Calendar Reminders.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Ulead Photo Express 4.0 SE Calendar Checker .lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Ulead Photo Express 4.0 SE Calendar Checker .lnk backup=C:\WINDOWS\pss\Ulead Photo Express 4.0 SE Calendar Checker .lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Dick^Start Menu^Programs^Startup^OpenOffice.org 2.2.lnk.disabled] path=C:\Documents and Settings\Dick\Start Menu\Programs\Startup\OpenOffice.org 2.2.lnk.disabled backup=C:\WINDOWS\pss\OpenOffice.org 2.2.lnk.disabledStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "ModemOnHold"=C:\PROGRA~1\DELLMO~1\MOH.exe "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" /background "ccleaner"="C:\Program Files\CCleaner\ccleaner.exe" /AUTO "ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] eapsvcs eaphost dot3svc dot3svc HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs napagent hkmsvc -- End of Deckard's System Scanner: finished at 2009-01-16 10:30:58 ------------