27 replies to this topic

[asoares]

I need help with the Hosts File Manager under the Misc Tools section. This is a copy of the files listed. 127.0.0.1 mytotalsearch.com 127.0.0.1 www.contextplus.net 127.0.0.1 idownload.com 127.0.0.1 idownload.com 127.0.0.1 www.mytotalsearch.com 127.0.0.1 www.contextplus.net 127.0.0.1 www.idownload.com 127.0.0.1 www.contextplus.net 127.0.0.1 www.contextplus.net 127.0.0.1 www.urllogic.com 127.0.0.1 www.clkoptimizer.com 127.0.0.1 www.isearch.com 127.0.0.1 www.lop.com 127.0.0.1 lop.com 127.0.0.1 www.websearch.com 127.0.0.1 websearch.com 127.0.0.1 www.page-not-found.net 127.0.0.1 page-not-found.net 127.0.0.1 www.isearchhere.com 127.0.0.1 isearchhere.com 127.0.0.1 as.adwave.com 127.0.0.1 sr.adwave.com 127.0.0.1 www.adwave.com 127.0.0.1 adwave.com EVENT:HOST:127.0.0.1 127.0.0.1 www.exactsearch.net 127.0.0.1 www.contextplus.net 127.0.0.1 sds-qckads.com 127.0.0.1 status.qckads.com 127.0.0.1 www.qoolaid.com 127.0.0.1 www.qoologic.com 127.0.0.1 isearch.com 127.0.0.1 www.contextplus.net 127.0.0.1 www.contextplus.net 127.0.0.1 www.pacimedia.com 127.0.0.1 www.contextplus.net 127.0.0.1 www.contextplus.net 127.0.0.1 www.CLKPrecision.com 127.0.0.1 www.contextplus.net I tried deleting them but they keep coming back! How do I permanently delete them? They are annoying popunders and popups! Thanks~

[asoares]

Hello Siggyx, this is my file from L2MFix.bat option 1.. L2MFIX find log 010406 These are the registry keys present ********************************************************************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\ 6c,00,00,00 "Logoff"="ChainWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Logoff"="CryptnetWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] "DLLName"="cscdll.dll" "Logon"="WinlogonLogonEvent" "Logoff"="WinlogonLogoffEvent" "ScreenSaver"="WinlogonScreenSaverEvent" "Startup"="WinlogonStartupEvent" "Shutdown"="WinlogonShutdownEvent" "StartShell"="WinlogonStartShellEvent" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] "Logoff"="WLEventLogoff" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 "DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] "DLLName"="WlNotify.dll" "Lock"="SensLockEvent" "Logon"="SensLogonEvent" "Logoff"="SensLogoffEvent" "Safe"=dword:00000001 "MaxWait"=dword:00000258 "StartScreenSaver"="SensStartScreenSaverEvent" "StopScreenSaver"="SensStopScreenSaverEvent" "Startup"="SensStartupEvent" "Shutdown"="SensShutdownEvent" "StartShell"="SensStartShellEvent" "Unlock"="SensUnlockEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\URL] "Asynchronous"=dword:00000000 "DllName"="C:\\WINNT\\system32\\aza403dqe.dll" "Impersonate"=dword:00000000 "Logon"="WinLogon" "Logoff"="WinLogoff" "Shutdown"="WinShutdown" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif] "DLLName"="wzcdlg.dll" "Logon"="WZCEventLogon" "Logoff"="WZCEventLogoff" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000000 ********************************************************************************** useragent: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] "{EE667982-5832-2002-741B-E609BD40FC8E}"="" ********************************************************************************** Shell Extension key: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] "{00022613-0000-0000-C000-000000000046}"="Multimedia File Property Sheet" "{176d6597-26d3-11d1-b350-080036a75b03}"="ICM Scanner Management" "{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="NTFS Security Page" "{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="OLE Docfile Property Page" "{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Shell extensions for sharing" "{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension" "{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Display Adapter CPL Extension" "{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Display Monitor CPL Extension" "{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Display Panning CPL Extension" "{4E40F770-369C-11d0-8922-00A024AB2DBB}"="DS Security Page" "{56117100-C0CD-101B-81E2-00AA004AE837}"="Shell Scrap DataHandler" "{59099400-57FF-11CE-BD94-0020AF85B590}"="Disk Copy Extension" "{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Shell extensions for Microsoft Windows Network objects" "{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="ICM Monitor Management" "{675F097E-4C4D-11D0-B6C1-0800091AA605}"="ICM Printer Management" "{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Shell extensions for file compression" "{77597368-7b15-11d0-a0c2-080036af3f03}"="Web Printer Shell Extension" "{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI" "{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Encryption Context Menu" "{85BBD920-42A0-1069-A2E4-08002B30309D}"="Briefcase" "{88895560-9AA2-1069-930E-00AA0030EBC8}"="HyperTerminal Icon Ext" "{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts" "{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="ICC Profile" "{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Printers Security Page" "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Shell extensions for sharing" "{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension" "{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Shell extensions for Windows Script Host" "{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Crypto PKO Extension" "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Crypto Sign Extension" "{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Network and Dial-up Connections" "{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler" "{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension" "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Scheduled Tasks" "{1A9BA3A0-143A-11CF-8350-444553540000}"="Shell Favorite Folder" "{20D04FE0-3AEA-1069-A2D8-08002B30309D}"="My Computer" "{86747AC0-42A0-1069-A2E6-08002B30309D}"="Briefcase Folder" "{0AFACED1-E828-11D1-9187-B532F1E9575D}"="Folder Shortcut" "{12518493-00B2-11d2-9FA5-9E3420524153}"="Mounted Volume" "{21B22460-3AEA-1069-A2DC-08002B30309D}"="File Property Page Extension" "{B091E540-83E3-11CF-A713-0020AFD79762}"="File Types Page" "{FBF23B41-E3F0-101B-8488-00AA003E56F8}"="MIME File Types Hook" "{C2FBB630-2971-11d1-A18C-00C04FD75D13}"="Microsoft CopyTo Service" "{C2FBB631-2971-11d1-A18C-00C04FD75D13}"="Microsoft MoveTo Service" "{13709620-C279-11CE-A49E-444553540000}"="Shell Automation Service" "{62112AA1-EBE4-11cf-A5FB-0020AFE7292D}"="Shell Automation Folder View" "{4622AD11-FF23-11d0-8D34-00A0C90F2719}"="Start Menu" "{7BA4C740-9E81-11CF-99D3-00AA004AE837}"="Microsoft SendTo Service" "{D969A300-E7FF-11d0-A93B-00A0C90F2719}"="Microsoft New Object Service" "{09799AFB-AD67-11d1-ABCD-00C04FC30936}"="Open With Context Menu Handler" "{3FC0B520-68A9-11D0-8D77-00C04FD70822}"="Display Control Panel HTML Extensions" "{75048700-EF1F-11D0-9888-006097DEACF9}"="ActiveDesktop" "{6D5313C0-8C62-11D1-B2CD-006097DF8C11}"="Folder Options Property Page Extension" "{57651662-CE3E-11D0-8D77-00C04FC99D61}"="CmdFileIcon" "{4657278A-411B-11d2-839A-00C04FD918D0}"="Shell Drag and Drop helper" "{A470F8CF-A1E8-4f65-8335-227475AA5C46}"="Add encryption item to context menus in explorer" "{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Microsoft Internet Toolbar" "{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="Download Status" "{568804CA-CBD7-11d0-9816-00C04FD91972}"="Menu Shell Folder" "{5b4dae26-b807-11d0-9815-00c04fd91972}"="Menu Band" "{8278F931-2A3E-11d2-838F-00C04FD918D0}"="Tracking Shell Menu" "{E13EF4E4-D2F2-11d0-9816-00C04FD91972}"="Menu Site" "{ECD4FC4F-521C-11D0-B792-00A0C90312E1}"="Menu Desk Bar" "{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Augmented Shell Folder" "{6413BA2C-B461-11d1-A18A-080036B11A03}"="Augmented Shell Folder 2" "{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy" "{D82BE2B0-5764-11D0-A96E-00C04FD705A2}"="IShellFolderBand" "{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Microsoft BrowserBand" "{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Search Band" "{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="In-pane search" "{07798131-AF23-11d1-9111-00A0C98BA67D}"="Web Search" "{0E5CBF21-D15F-11d0-8301-00AA005B4383}"="&Links" "{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Registry Tree Options Utility" "{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Address" "{A08C11D2-A228-11d0-825B-00AA005B4383}"="Address EditBox" "{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Microsoft AutoComplete" "{7487cd30-f71a-11d0-9ea7-00805f714772}"="Thumbnail Image" "{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor" "{6756A641-DE71-11d0-831B-00AA005B4383}"="MRU AutoComplete List" "{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Microsoft History AutoComplete List" "{03C036F1-A186-11D0-824A-00AA005B4383}"="Microsoft Shell Folder AutoComplete List" "{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Microsoft Multiple AutoComplete List Container" "{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Shell Band Site Menu" "{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp" "{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Shell DeskBar" "{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite" "{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="User Assist" "{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="Global Folder Settings" "{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band" "{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service" "{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer" "{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut" "{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service" "{FF393560-C2A7-11CF-BFF4-444553540000}"="History" "{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook" "{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="IE4 Suite Splash Screen" "{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook" "{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC" "{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC" "{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="The Internet" "{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space" "{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{88C6C381-2E85-11D0-94DE-444553540000}"="ActiveX Cache Folder" "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck" "{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr" "{F5175861-2688-11d0-9C5E-00AA00A45957}"="Subscription Folder" "{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler" "{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent" "{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent" "{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent" "{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent" "{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent" "{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler" "{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}"="Thumbnails" "{EAB841A0-9550-11CF-8C16-00805F1408F3}"="HTML Thumbnail Extractor" "{1AEB1360-5AFC-11D0-B806-00C04FD706EC}"="Office Graphics Filters Thumbnail Extractor" "{9DBD2C50-62AD-11D0-B806-00C04FD706EC}"="Summary Info Thumbnail handler (DOCFILES)" "{500202A0-731E-11D0-B829-00C04FD706EC}"="LNK file thumbnail interface delegator" "{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Shell Application Manager" "{0B124F8C-91F0-11D1-B8B5-006008059382}"="Installed Apps Enumerator" "{CFCCC7A0-A282-11D1-9082-006008059382}"="Darwin App Publisher" "{fe1290f0-cfbd-11cf-a330-00aa00c16e65}"="Directory Namespace" "{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object" "{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI" "{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find" "{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find" "{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI" "{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs" "{450D8FBA-AD25-11D0-98A8-0800361B1103}"="MyDocs Folder" "{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook" "{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target" "{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties" "{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu" "{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options" "{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Offline Files Folder" "{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler" "{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer" "{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Web Folders" "{0006F045-0000-0000-C000-000000000046}"="Microsoft Outlook Custom Icon Handler" "{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler" "{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band" "{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Custom MRU AutoCompleted List" "{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible" "{acf35015-526e-4230-9596-becbe19f0ac9}"="Track Popup Bar" "{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Address Bar Parser" "{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture" "{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band" "{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Channel File" "{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Channel Shortcut" "{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object" "{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu" "{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties" "{32714800-2E5F-11d0-8B85-00AA0044F941}"="For &People..." "{E0D79304-84BE-11CE-9641-444553540000}"="WinZip" "{E0D79305-84BE-11CE-9641-444553540000}"="WinZip" "{E0D79306-84BE-11CE-9641-444553540000}"="WinZip" "{E0D79307-84BE-11CE-9641-444553540000}"="WinZip" "{5464D816-CF16-4784-B9F3-75C0DB52B499}"="Yahoo! Mail" "{73B24247-042E-4EF5-ADC2-42F62E6FD654}"="ICQ Lite Shell Extension" "{2A35249E-6ECE-4926-B0AB-3FF6B9FCE8CA}"="" "{DD0B2370-8C94-480A-B2C2-384FC023DAC8}"="" "{48DD23E3-A05B-4ECB-97F7-870E70183FC1}"="" "{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}"="AVG7 Shell Extension" "{9F97547E-460A-42C5-AE0C-81C61FFAEBC3}"="AVG7 Find Extension" "{C2BF43C9-C2CD-46AE-8491-25DEBFA16C4B}"="" "{CF6C2F0D-60B9-489D-9D41-C389DF7045CB}"="" "{A5B0D70D-1541-418C-AA72-953F3CDB4646}"="" "{37FAD833-E266-4300-8AD9-39F4F825F3DD}"="" "{714F0BC5-0535-48A8-961B-82FFEC27F293}"="" "{39733A57-01EF-4DD4-B907-A0D466639596}"="" "{03A80B1D-5C6A-42c2-9DFB-81B6005D8023}"="Trend Micro Anti-Spyware Shell Extension" "{D65BC3EB-3878-4D4E-B8CC-B95DA84865CF}"="" ********************************************************************************** HKEY ROOT CLASSIDS: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{2A35249E-6ECE-4926-B0AB-3FF6B9FCE8CA}] @="" [HKEY_CLASSES_ROOT\CLSID\{2A35249E-6ECE-4926-B0AB-3FF6B9FCE8CA}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{2A35249E-6ECE-4926-B0AB-3FF6B9FCE8CA}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{2A35249E-6ECE-4926-B0AB-3FF6B9FCE8CA}\InprocServer32] @="C:\\WINNT\\system32\\iplogmsg.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{DD0B2370-8C94-480A-B2C2-384FC023DAC8}] @="" [HKEY_CLASSES_ROOT\CLSID\{DD0B2370-8C94-480A-B2C2-384FC023DAC8}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{DD0B2370-8C94-480A-B2C2-384FC023DAC8}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{DD0B2370-8C94-480A-B2C2-384FC023DAC8}\InprocServer32] @="C:\\WINNT\\system32\\dkmsadsn.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{48DD23E3-A05B-4ECB-97F7-870E70183FC1}] @="" [HKEY_CLASSES_ROOT\CLSID\{48DD23E3-A05B-4ECB-97F7-870E70183FC1}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{48DD23E3-A05B-4ECB-97F7-870E70183FC1}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{48DD23E3-A05B-4ECB-97F7-870E70183FC1}\InprocServer32] @="C:\\WINNT\\system32\\wsnfax.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{C2BF43C9-C2CD-46AE-8491-25DEBFA16C4B}] @="" [HKEY_CLASSES_ROOT\CLSID\{C2BF43C9-C2CD-46AE-8491-25DEBFA16C4B}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{C2BF43C9-C2CD-46AE-8491-25DEBFA16C4B}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{C2BF43C9-C2CD-46AE-8491-25DEBFA16C4B}\InprocServer32] @="C:\\WINNT\\system32\\dTdim700.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{CF6C2F0D-60B9-489D-9D41-C389DF7045CB}] @="" [HKEY_CLASSES_ROOT\CLSID\{CF6C2F0D-60B9-489D-9D41-C389DF7045CB}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{CF6C2F0D-60B9-489D-9D41-C389DF7045CB}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{CF6C2F0D-60B9-489D-9D41-C389DF7045CB}\InprocServer32] @="C:\\WINNT\\system32\\rrched20.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{A5B0D70D-1541-418C-AA72-953F3CDB4646}] @="" [HKEY_CLASSES_ROOT\CLSID\{A5B0D70D-1541-418C-AA72-953F3CDB4646}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{A5B0D70D-1541-418C-AA72-953F3CDB4646}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{A5B0D70D-1541-418C-AA72-953F3CDB4646}\InprocServer32] @="C:\\WINNT\\system32\\lnbmp11n.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{37FAD833-E266-4300-8AD9-39F4F825F3DD}] @="" [HKEY_CLASSES_ROOT\CLSID\{37FAD833-E266-4300-8AD9-39F4F825F3DD}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{37FAD833-E266-4300-8AD9-39F4F825F3DD}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{37FAD833-E266-4300-8AD9-39F4F825F3DD}\InprocServer32] @="C:\\WINNT\\system32\\stfolder.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{714F0BC5-0535-48A8-961B-82FFEC27F293}] @="" [HKEY_CLASSES_ROOT\CLSID\{714F0BC5-0535-48A8-961B-82FFEC27F293}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{714F0BC5-0535-48A8-961B-82FFEC27F293}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{714F0BC5-0535-48A8-961B-82FFEC27F293}\InprocServer32] @="C:\\WINNT\\system32\\RVSAPI32.DLL" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{39733A57-01EF-4DD4-B907-A0D466639596}] @="" [HKEY_CLASSES_ROOT\CLSID\{39733A57-01EF-4DD4-B907-A0D466639596}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{39733A57-01EF-4DD4-B907-A0D466639596}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{39733A57-01EF-4DD4-B907-A0D466639596}\InprocServer32] @="C:\\WINNT\\system32\\ull.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{D65BC3EB-3878-4D4E-B8CC-B95DA84865CF}] @="" [HKEY_CLASSES_ROOT\CLSID\{D65BC3EB-3878-4D4E-B8CC-B95DA84865CF}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{D65BC3EB-3878-4D4E-B8CC-B95DA84865CF}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{D65BC3EB-3878-4D4E-B8CC-B95DA84865CF}\InprocServer32] @="C:\\WINNT\\system32\\XeeedZip.dll" "ThreadingModel"="Apartment" ********************************************************************************** Files Found are not all bad files: C:\WINNT\SYSTEM32\ ahsmib.dll Mon Jan 30 2006 7:55:06a ..S.R 234,183 228.69 K amipdsxx.dll Wed Jan 25 2006 11:41:54a ..S.R 236,739 231.19 K az100i~1.dll Sun Jan 1 2006 7:35:10a ..S.R 234,662 229.16 K aza00i~1.dll Thu Jan 26 2006 12:03:52p ..S.R 237,306 231.74 K aza2l9~1.dll Sat Jan 28 2006 10:34:56a ..S.R 236,491 230.95 K aza403~1.dll Sun Jan 1 2006 2:12:48p ..S.R 233,980 228.50 K aza403~2.dll Mon Jan 2 2006 2:22:50p ..S.R 234,917 229.41 K aza603~1.dll Mon Jan 2 2006 2:17:20p ..S.R 235,983 230.45 K aza609~1.dll Mon Jan 23 2006 11:47:00a ..S.R 236,094 230.56 K aza80e~1.dll Sat Jan 28 2006 9:40:14a ..S.R 234,470 228.97 K aza8la~1.dll Tue Jan 31 2006 2:31:04p ..S.R 234,331 228.84 K azao03~1.dll Thu Jan 26 2006 8:25:50a ..S.R 233,582 228.11 K azas0e~1.dll Mon Jan 30 2006 8:39:12a ..S.R 235,213 229.70 K bbtsprx2.dll Sun Jan 1 2006 7:35:12a ..S.R 233,980 228.50 K bkowser.dll Sun Jan 22 2006 7:00:54a ..S.R 234,272 228.78 K buotvid.dll Sat Jan 21 2006 11:18:54a ..S.R 234,272 228.78 K c400le~1.dll Wed Jan 25 2006 11:41:52a ..S.R 233,750 228.27 K caral.dll Sun Jan 22 2006 7:06:46a ..S.R 234,272 228.78 K cdral.dll Mon Nov 28 2005 5:29:18p A.... 45,056 44.00 K cdrtc.dll Mon Nov 28 2005 5:29:18p A.... 49,152 48.00 K chc.dll Fri Jan 27 2006 8:51:42a ..S.R 237,198 231.64 K ciutil.dll Sat Jan 28 2006 2:18:46p ..S.R 236,187 230.65 K cjrpol.dll Sun Jan 22 2006 6:55:26a ..S.R 234,272 228.78 K ckyptdll.dll Sun Jan 1 2006 7:28:24a ..S.R 233,980 228.50 K cpusapi.dll Sat Jan 28 2006 2:25:26p ..S.R 236,187 230.65 K cqrtmgr.dll Sun Jan 22 2006 7:12:36a ..S.R 234,272 228.78 K cursrv.dll Mon Jan 2 2006 2:22:52p ..S.R 234,198 228.71 K cxmcat.dll Sun Jan 29 2006 7:48:56a ..S.R 236,590 231.04 K cxrsrv.dll Tue Jan 3 2006 7:47:50a ..S.R 234,917 229.41 K d2j00c~1.dll Tue Jan 31 2006 2:35:54p ..S.R 237,300 231.74 K d6j02g~1.dll Tue Jan 24 2006 7:59:48a ..S.R 234,256 228.77 K d80mli~1.dll Sun Jan 22 2006 6:00:34p ..S.R 235,618 230.09 K dadim700.dll Sat Jan 28 2006 7:53:08a ..S.R 234,470 228.97 K daiman32.dll Thu Jan 26 2006 8:17:36a ..S.R 236,892 231.34 K dbd8.dll Thu Jan 26 2006 8:15:02a ..S.R 236,892 231.34 K ddconfig.dll Mon Jan 23 2006 11:47:02a ..S.R 235,109 229.60 K debkcinf.dll Mon Jan 30 2006 8:36:58a ..S.R 234,183 228.69 K djtime.dll Sun Jan 22 2006 7:18:52a ..S.R 234,272 228.78 K dkmsadsn.dll Sun Jan 22 2006 4:21:26p ..S.R 235,618 230.09 K dlmodemx.dll Wed Jan 25 2006 8:07:00a ..S.R 236,739 231.19 K dpsenh.dll Tue Jan 24 2006 8:06:34a ..S.R 236,739 231.19 K dtdim700.dll Wed Jan 25 2006 8:12:48a ..S.R 236,739 231.19 K duskmon.dll Mon Jan 30 2006 8:43:58a ..S.R 234,183 228.69 K dvdref.dll Tue Jan 24 2006 7:47:08a ..S.R 236,739 231.19 K dxsapi.dll Tue Jan 24 2006 7:59:50a ..S.R 236,739 231.19 K dynmpntw.dll Sun Jan 22 2006 8:11:04a ..S.R 235,051 229.54 K e402le~1.dll Sat Jan 28 2006 2:01:56p ..S.R 236,773 231.22 K e420le~1.dll Thu Jan 26 2006 8:20:18a ..S.R 233,760 228.28 K en0ul1~1.dll Sun Jan 22 2006 7:06:46a ..S.R 236,173 230.64 K es02le~1.dll Sat Jan 28 2006 2:40:00p ..S.R 236,187 230.65 K eyluue02.dll Sun Jan 22 2006 6:50:28a ..S.R 234,272 228.78 K f42mle~1.dll Sat Jan 28 2006 12:04:16p ..S.R 236,090 230.55 K f4j2le~1.dll Thu Jan 26 2006 8:12:24a ..S.R 233,855 228.37 K f8l00i~1.dll Tue Jan 3 2006 7:50:04a ..S.R 234,955 229.45 K fa8m03~1.dll Sat Jan 28 2006 2:33:26p ..S.R 236,187 230.65 K fhxshell.dll Sat Jan 28 2006 10:34:58a ..S.R 234,966 229.46 K fhxt30.dll Sat Jan 28 2006 11:56:58a ..S.R 234,966 229.46 K fp0003~1.dll Mon Jan 30 2006 8:43:56a ..S.R 234,186 228.70 K fp0403~1.dll Mon Jan 30 2006 8:19:10a ..S.R 234,586 229.09 K fp4203~1.dll Sat Jan 28 2006 2:18:44p ..S.R 236,430 230.89 K fp6403~1.dll Sun Jan 29 2006 7:48:54a ..S.R 237,053 231.50 K fp6m03~1.dll Sat Jan 28 2006 2:23:06p ..S.R 236,350 230.81 K fp8m03~1.dll Sat Jan 28 2006 11:56:56a ..S.R 235,149 229.64 K fpj603~1.dll Sat Jan 28 2006 2:20:54p ..S.R 236,800 231.25 K fpjm03~1.dll Mon Jan 30 2006 8:28:20a ..S.R 234,296 228.80 K fpjq03~1.dll Thu Jan 26 2006 8:15:00a ..S.R 233,504 228.03 K fpl003~1.dll Tue Jan 24 2006 8:06:32a ..S.R 236,772 231.22 K fplq03~1.dll Sun Jan 1 2006 7:28:22a ..S.R 234,513 229.02 K fpno03~1.dll Tue Jan 24 2006 8:14:58a ..S.R 237,092 231.54 K fppo03~1.dll Fri Jan 27 2006 8:57:06a ..S.R 233,434 227.96 K fyxmapi.dll Mon Jan 30 2006 8:30:30a ..S.R 234,183 228.69 K g8jo0i~1.dll Sat Jan 28 2006 2:16:28p ..S.R 236,505 230.96 K gdi32.dll Fri Oct 7 2005 2:19:38a A.... 233,744 228.27 K h8j40i~1.dll Thu Jan 26 2006 8:17:32a ..S.R 237,310 231.75 K hofinst.dll Mon Jan 30 2006 8:23:46a ..S.R 234,183 228.69 K hvtplug.dll Wed Jan 25 2006 8:01:24a ..S.R 236,739 231.19 K i0600a~1.dll Wed Jan 25 2006 7:50:48a ..S.R 236,799 231.25 K i4lole~1.dll Thu Jan 26 2006 12:06:32p ..S.R 233,915 228.43 K i8600i~1.dll Sat Jan 28 2006 12:06:34p ..S.R 235,034 229.52 K i8jq0i~1.dll Sun Jan 1 2006 7:26:04a ..S.R 234,498 229.00 K i8nm0i~1.dll Sun Jan 1 2006 2:17:12p ..S.R 234,356 228.86 K iissvcs.dll Sun Jan 29 2006 7:43:30a ..S.R 236,590 231.04 K impeers.dll Mon Jan 30 2006 8:17:02a ..S.R 234,183 228.69 K ir2ol5~1.dll Mon Jan 30 2006 8:14:46a ..S.R 235,508 229.99 K ir4ml5~1.dll Mon Jan 23 2006 7:51:06a ..S.R 236,254 230.71 K ir62l5~1.dll Tue Jan 24 2006 8:17:10a ..S.R 233,880 228.40 K ir64l5~1.dll Sat Jan 28 2006 11:27:32a ..S.R 236,386 230.84 K ir84l5~1.dll Sun Jan 22 2006 7:00:52a ..S.R 235,757 230.23 K ir8ol5~1.dll Sun Jan 22 2006 7:12:34a ..S.R 235,657 230.13 K ir8ql5~1.dll Mon Jan 30 2006 8:21:30a ..S.R 235,768 230.24 K ir8ul5~1.dll Wed Jan 25 2006 8:09:44a ..S.R 234,240 228.75 K irj4l5~1.dll Sun Jan 22 2006 6:47:58a ..S.R 235,687 230.16 K irj6l5~1.dll Sat Jan 28 2006 2:35:36p ..S.R 234,055 228.57 K irjul5~1.dll Sun Jan 1 2006 7:32:54a ..S.R 235,895 230.36 K irp8l5~1.dll Fri Jan 27 2006 8:47:50a ..S.R 236,892 231.34 K iuxmontr.dll Sat Jan 28 2006 12:04:18p ..S.R 234,966 229.46 K iwcvid.dll Fri Jan 27 2006 7:38:40a ..S.R 236,892 231.34 K iymon.dll Tue Jan 24 2006 7:54:32a ..S.R 236,739 231.19 K j00sla~1.dll Mon Jan 30 2006 8:23:44a ..S.R 235,883 230.35 K j04ola~1.dll Mon Jan 23 2006 7:43:38a ..S.R 236,449 230.91 K j0l4la~1.dll Mon Jan 30 2006 8:41:30a ..S.R 235,613 230.09 K j40s0e~1.dll Sat Jan 28 2006 2:37:46p ..S.R 236,891 231.34 K j46mle~1.dll Tue Jan 3 2006 7:47:46a ..S.R 236,081 230.55 K j4l4le~1.dll Wed Jan 25 2006 8:06:56a ..S.R 233,965 228.48 K j4n2le~1.dll Tue Jan 31 2006 3:00:46p ..S.R 233,875 228.39 K j8l40i~1.dll Wed Jan 25 2006 8:04:02a ..S.R 237,177 231.62 K jt2207~1.dll Wed Jan 25 2006 8:12:44a ..S.R 236,966 231.41 K k026la~1.dll Tue Jan 24 2006 7:47:06a ..S.R 234,058 228.57 K k0jsla~1.dll Sun Jan 1 2006 7:37:18a ..S.R 235,690 230.16 K k4080e~1.dll Sat Jan 28 2006 2:33:24p ..S.R 236,991 231.43 K k480le~1.dll Sun Jan 22 2006 6:45:44a ..S.R 235,356 229.84 K k4js0e~1.dll Mon Jan 30 2006 8:34:48a ..S.R 234,897 229.39 K k4jsle~1.dll Wed Jan 25 2006 8:01:20a ..S.R 234,105 228.62 K k4lq0e~1.dll Tue Jan 24 2006 7:54:30a ..S.R 237,273 231.71 K k4pmle~1.dll Tue Jan 31 2006 3:24:22p ..S.R 237,288 231.73 K k6no0g~1.dll Mon Jan 23 2006 6:05:34p ..S.R 235,109 229.60 K k8440i~1.dll Thu Jan 26 2006 11:53:26a ..S.R 234,157 228.67 K k8800i~1.dll Mon Jan 30 2006 8:17:00a ..S.R 234,271 228.78 K k8pm0i~1.dll Thu Jan 26 2006 11:52:22a ..S.R 237,070 231.51 K khdsp.dll Sat Jan 28 2006 2:27:40p ..S.R 236,187 230.65 K kndic.dll Thu Jan 26 2006 11:55:44a ..S.R 236,892 231.34 K kpdic.dll Sun Jan 1 2006 7:30:40a ..S.R 233,980 228.50 K kprberos.dll Sat Jan 28 2006 2:20:56p ..S.R 236,187 230.65 K ktpol7~1.dll Wed Jan 25 2006 5:21:26p ..S.R 236,739 231.19 K kvpm0i~1.dll Sun Jan 29 2006 7:51:04a ..S.R 236,590 231.04 K kwrberos.dll Tue Jan 3 2006 7:50:06a ..S.R 234,917 229.41 K l0j8la~1.dll Sat Jan 28 2006 11:59:22a ..S.R 236,776 231.23 K l0l6la~1.dll Tue Jan 31 2006 2:42:12p ..S.R 234,063 228.57 K l4j80e~1.dll Mon Jan 30 2006 7:58:12a ..S.R 234,997 229.49 K l84q0i~1.dll Tue Jan 31 2006 3:03:16p ..S.R 233,522 228.05 K l88m0i~1.dll Sun Jan 22 2006 6:50:26a ..S.R 234,460 228.96 K l8r00i~1.dll Tue Jan 24 2006 8:01:58a ..S.R 236,837 231.29 K latwn11n.dll Sun Jan 1 2006 7:23:50a ..S.R 233,980 228.50 K lctif11n.dll Sun Jan 22 2006 6:45:46a ..S.R 234,272 228.78 K lgasrv.dll Wed Jan 25 2006 11:56:46a ..S.R 236,739 231.19 K lhasrv.dll Mon Jan 23 2006 7:51:06a ..S.R 235,109 229.60 K li32.dll Sun Jan 22 2006 7:14:50a ..S.R 234,272 228.78 K lnbmp11n.dll Thu Jan 26 2006 8:31:40a ..S.R 236,892 231.34 K lv2609~1.dll Mon Jan 30 2006 8:30:28a ..S.R 234,812 229.31 K lv4809~1.dll Fri Jan 27 2006 8:54:28a ..S.R 233,672 228.20 K lv6609~1.dll Sun Jan 22 2006 8:07:58a ..S.R 234,272 228.78 K lv8809~1.dll Sat Jan 28 2006 11:37:16a ..S.R 234,966 229.46 K lvlu09~1.dll Thu Jan 26 2006 8:31:38a ..S.R 233,717 228.24 K lvpu09~1.dll Mon Jan 30 2006 8:32:38a ..S.R 235,162 229.65 K lvrq09~1.dll Sun Jan 22 2006 6:20:06a ..S.R 235,429 229.91 K lxasrv.dll Mon Jan 30 2006 8:46:08a ..S.R 234,183 228.69 K m028la~1.dll Mon Jan 30 2006 8:36:56a ..S.R 236,003 230.47 K m0lsla~1.dll Sat Jan 28 2006 10:29:06a ..S.R 233,371 227.90 K m4ju0e~1.dll Mon Jan 23 2006 7:48:48a ..S.R 236,023 230.49 K m4nq0e~1.dll Sun Jan 22 2006 9:39:46a ..S.R 235,051 229.54 K m4pole~1.dll Tue Jan 31 2006 2:38:20p ..S.R 233,935 228.45 K macpxl32.dll Tue Jan 24 2006 8:02:00a ..S.R 236,739 231.19 K magina.dll Sat Jan 28 2006 9:42:10a ..S.R 233,371 227.90 K mal_qic.dll Fri Jan 27 2006 8:54:32a ..S.R 237,198 231.64 K mcstkprp.dll Sat Jan 28 2006 2:35:40p ..S.R 236,187 230.65 K mdiavi32.dll Mon Jan 30 2006 8:39:14a ..S.R 234,183 228.69 K mdltus40.dll Fri Jan 27 2006 4:39:48p ..S.R 233,371 227.90 K mgcans32.dll Sat Jan 28 2006 10:13:26a ..S.R 233,371 227.90 K mgjdbc10.dll Sun Jan 1 2006 2:15:00p ..S.R 234,198 228.71 K mgvcp50.dll Mon Jan 30 2006 8:26:00a ..S.R 234,183 228.69 K mjrepl35.dll Thu Jan 26 2006 8:20:20a ..S.R 236,892 231.34 K mkexcl40.dll Sat Jan 28 2006 11:14:28a ..S.R 236,386 230.84 K mkjint40.dll Mon Jan 23 2006 11:49:22a ..S.R 235,109 229.60 K mloeacct.dll Wed Jan 25 2006 7:50:50a ..S.R 236,739 231.19 K mp40l9~1.dll Mon Jan 30 2006 8:19:14a ..S.R 234,183 228.69 K mpdart32.dll Mon Jan 23 2006 7:41:24a ..S.R 235,109 229.60 K mqidntld.dll Mon Jan 30 2006 8:32:38a ..S.R 234,183 228.69 K mssystem.dll Tue Jan 24 2006 7:49:32a ..S.R 236,739 231.19 K msvcp71.dll Tue Jan 24 2006 7:23:30p A.... 499,712 488.00 K msvcr71.dll Tue Jan 24 2006 7:23:30p A.... 348,160 340.00 K mtpi32.dll Mon Jan 30 2006 7:58:14a ..S.R 234,183 228.69 K mucans32.dll Sat Jan 28 2006 2:01:58p ..S.R 235,569 230.05 K mv02l9~1.dll Wed Jan 25 2006 12:02:24p ..S.R 233,852 228.37 K mv0ql9~1.dll Wed Jan 25 2006 11:56:44a ..S.R 234,002 228.52 K mv40l9~1.dll Sun Jan 22 2006 7:16:46a ..S.R 235,321 229.80 K mv60l9~1.dll Thu Jan 26 2006 12:12:10p ..S.R 233,782 228.30 K mv6ml9~1.dll Tue Jan 31 2006 2:33:16p ..S.R 233,832 228.35 K mvj0l9~1.dll Tue Jan 24 2006 7:49:26a ..S.R 233,757 228.28 K mvj8l9~1.dll Mon Jan 30 2006 5:59:10p ..S.R 235,433 229.91 K mvjml9~1.dll Sun Jan 1 2006 2:19:26p ..S.R 235,317 229.80 K mvl2l9~1.dll Sat Jan 28 2006 12:01:50p ..S.R 236,205 230.67 K mvn2l9~1.dll Sat Jan 28 2006 10:13:24a ..S.R 234,630 229.13 K mvrql9~1.dll Mon Jan 2 2006 5:24:56p ..S.R 234,198 228.71 K mwrmsg.dll Mon Jan 30 2006 10:07:02a ..S.R 234,183 228.69 K myxbde40.dll Sat Jan 28 2006 11:59:24a ..S.R 234,966 229.46 K n04sla~1.dll Tue Jan 3 2006 7:52:16a ..S.R 236,657 231.11 K n4r2le~1.dll Sun Jan 1 2006 7:30:38a ..S.R 235,274 229.76 K nblanui2.dll Sun Jan 1 2006 7:39:42a ..S.R 233,980 228.50 K ngwdev.dll Sat Jan 28 2006 10:37:28a ..S.R 234,966 229.46 K nrapi32.dll Sat Jan 28 2006 12:06:34p ..S.R 234,966 229.46 K nztevent.dll Fri Jan 27 2006 11:36:58a ..S.R 237,198 231.64 K o0nsla~1.dll Wed Jan 25 2006 7:58:26a ..S.R 234,123 228.63 K o4480e~1.dll Tue Jan 24 2006 8:04:16a ..S.R 233,670 228.19 K o4lu0e~1.dll Thu Jan 26 2006 11:56:18a ..S.R 233,944 228.46 K o4ns0e~1.dll Sat Jan 28 2006 2:27:38p ..S.R 236,941 231.39 K o4pq0e~1.dll Sun Jan 22 2006 6:55:24a ..S.R 234,846 229.34 K o8ns0i~1.dll Mon Jan 30 2006 7:55:04a ..S.R 234,941 229.43 K o8pq0i~1.dll Mon Jan 30 2006 12:04:08p ..S.R 234,183 228.69 K ocffilt.dll Sun Jan 22 2006 6:22:12a ..S.R 234,272 228.78 K opbcconf.dll Thu Jan 26 2006 12:03:52p ..S.R 236,892 231.34 K p0n8la~1.dll Sat Jan 28 2006 2:25:24p ..S.R 234,173 228.68 K p0r4la~1.dll Sun Jan 22 2006 7:14:48a ..S.R 235,762 230.23 K p46s0e~1.dll Mon Jan 30 2006 8:25:58a ..S.R 234,947 229.44 K pcrfctrs.dll Sun Jan 1 2006 7:32:56a ..S.R 233,980 228.50 K pdisdecd.dll Thu Jan 26 2006 8:12:28a ..S.R 236,892 231.34 K pirfnet.dll Wed Jan 25 2006 8:04:04a ..S.R 236,739 231.19 K pmrfnet.dll Sat Jan 28 2006 2:29:50p ..S.R 236,187 230.65 K pvgfilt.dll Sat Jan 28 2006 2:23:08p ..S.R 236,187 230.65 K q068la~1.dll Wed Jan 25 2006 7:53:14a ..S.R 234,178 228.69 K q086la~1.dll Tue Jan 3 2006 7:54:28a ..S.R 236,597 231.05 K q0nula~1.dll Mon Jan 30 2006 8:46:06a ..S.R 236,133 230.60 K q4680e~1.dll Fri Jan 27 2006 8:59:58a ..S.R 233,680 228.20 K qv68la~1.dll Sat Jan 28 2006 2:16:30p ..S.R 236,187 230.65 K r06ula~1.dll Fri Jan 27 2006 3:32:14p ..S.R 237,198 231.64 K r0r6la~1.dll Sat Jan 28 2006 2:29:48p ..S.R 234,093 228.61 K r46u0e~1.dll Sun Jan 22 2006 8:13:26a ..S.R 236,015 230.48 K rdfsaps.dll Mon Jan 30 2006 8:41:32a ..S.R 234,183 228.69 K rkstls.dll Sun Jan 1 2006 7:26:08a ..S.R 233,980 228.50 K rosapi32.dll Tue Jan 24 2006 7:44:46a ..S.R 236,739 231.19 K rpched32.dll Sun Jan 29 2006 7:46:48a ..S.R 236,590 231.04 K rrched20.dll Wed Jan 25 2006 12:05:16p ..S.R 236,739 231.19 K rvsapi32.dll Sun Jan 1 2006 4:09:18p ..S.R 234,198 228.71 K ryfsaps.dll Sun Jan 22 2006 7:16:48a ..S.R 234,272 228.78 K rysppp.dll Tue Jan 3 2006 7:45:18a ..S.R 234,917 229.41 K s0pula~1.dll Sun Jan 29 2006 7:46:48a ..S.R 234,233 228.74 K s8pu0i~1.dll Sat Jan 28 2006 5:25:04p ..S.R 236,187 230.65 K scnceng.dll Tue Jan 24 2006 8:04:18a ..S.R 236,739 231.19 K sdfolder.dll Sat Jan 28 2006 10:32:20a ..S.R 234,966 229.46 K semstore.dll Thu Jan 26 2006 11:52:24a ..S.R 236,892 231.34 K sfrrun.dll Wed Jan 25 2006 7:58:26a ..S.R 236,739 231.19 K shrmdll.dll Sat Jan 28 2006 10:16:04a ..S.R 233,371 227.90 K sklwid.dll Thu Jan 26 2006 11:58:40a ..S.R 236,892 231.34 K smndmail.dll Sat Jan 28 2006 2:04:10p ..S.R 235,569 230.05 K spclient.dll Mon Jan 23 2006 7:43:40a ..S.R 235,109 229.60 K spmsg.dll Mon Oct 10 2005 12:31:28a ..... 13,536 13.22 K stell32.dll Sat Jan 28 2006 12:08:48p ..S.R 234,966 229.46 K stfolder.dll Mon Jan 30 2006 12:10:02p ..S.R 235,433 229.91 K suclogon.dll Sun Jan 22 2006 6:48:00a ..S.R 234,272 228.78 K swftpub.dll Mon Jan 30 2006 8:34:50a ..S.R 234,183 228.69 K sxcpack1.dll Tue Jan 31 2006 2:28:40p ..S.R 237,288 231.73 K t48u0e~1.dll Tue Jan 31 2006 3:05:48p ..S.R 233,740 228.26 K tkpisrv.dll Sun Jan 22 2006 8:15:40a ..S.R 235,051 229.54 K ukbmon.dll Sat Jan 28 2006 11:54:38a ..S.R 234,966 229.46 K ull.dll Mon Jan 2 2006 7:31:18a ..S.R 235,983 230.45 K uxl.dll Sat Jan 28 2006 2:37:50p ..S.R 236,187 230.65 K wahtcpip.dll Sat Jan 28 2006 12:01:52p ..S.R 234,966 229.46 K wgvcore.dll Fri Jan 27 2006 4:42:28p ..S.R 233,371 227.90 K wlhtcpip.dll Tue Jan 31 2006 2:35:56p ..S.R 237,288 231.73 K wovcore.dll Mon Jan 30 2006 8:21:38a ..S.R 234,183 228.69 K wpv9vcm.dll Thu Jan 26 2006 8:07:30a ..S.R 236,892 231.34 K wqnsock.dll Mon Jan 30 2006 8:28:22a ..S.R 234,183 228.69 K wsnfax.dll Tue Jan 24 2006 8:17:12a ..S.R 236,739 231.19 K wspcd.dll Wed Jan 25 2006 7:53:16a ..S.R 236,739 231.19 K wzcltui.dll Mon Jan 30 2006 8:14:48a ..S.R 234,183 228.69 K xeeedzip.dll Tue Jan 3 2006 7:54:32a ..S.R 234,917 229.41 K 255 items found: 255 files (249 H/S), 0 directories. Total of file sizes: 59,780,606 bytes 57.01 M Locate .tmp files: C:\WINNT\SYSTEM32\ atmtdd~1.tmp Fri Jan 27 2006 8:59:46a A.... 0 0.00 K 1 item found: 1 file, 0 directories. Total of file sizes: 0 bytes 0.00 K ********************************************************************************** Directory Listing of system files: Volume in drive C has no label. Volume Serial Number is 88FB-6B40 Directory of C:\WINNT\System32 01/31/2006 03:24p 237,288 k4pmle711h.dll 01/31/2006 03:05p 233,740 t48u0el9ehq.dll 01/31/2006 03:03p 233,522 l84q0ih5e84.dll 01/31/2006 03:00p 233,875 j4n2le5o1h.dll 01/31/2006 02:42p 234,063 l0l6la3s1d.dll 01/31/2006 02:38p 233,935 m4pole731h.dll 01/31/2006 02:35p 237,288 wLhtcpip.dll 01/31/2006 02:35p 237,300 d2j00c1mef.dll 01/31/2006 02:33p 233,832 mv6ml9j11.dll 01/31/2006 02:31p 234,331 aza8la5u1d.dll 01/31/2006 02:28p 237,288 SXCPACK1.DLL 01/30/2006 05:59p 235,433 mvj8l91u1.dll 01/30/2006 12:10p 235,433 stfolder.dll 01/30/2006 12:04p 234,183 o8pq0i75e8.dll 01/30/2006 10:07a 234,183 mwrmsg.dll 01/30/2006 08:46a 234,183 LXASRV.DLL 01/30/2006 08:46a 236,133 q0nula591d.dll 01/30/2006 08:43a 234,183 duskmon.dll 01/30/2006 08:43a 234,186 fp0003dme.dll 01/30/2006 08:41a 234,183 rdfsaps.dll 01/30/2006 08:41a 235,613 j0l4la3q1d.dll 01/30/2006 08:39a 234,183 mdiavi32.dll 01/30/2006 08:39a 235,213 azas0e17eh.dll 01/30/2006 08:36a 234,183 debkcinf.dll 01/30/2006 08:36a 236,003 m028lafu1d28.dll 01/30/2006 08:34a 234,183 swftpub.dll 01/30/2006 08:34a 234,897 k4js0e17eh.dll 01/30/2006 08:32a 234,183 mqidntld.dll 01/30/2006 08:32a 235,162 lvpu0979e.dll 01/30/2006 08:30a 234,183 fYxmapi.dll 01/30/2006 08:30a 234,812 lv2609fse.dll 01/30/2006 08:28a 234,183 wqnsock.dll 01/30/2006 08:28a 234,296 fpjm0311e.dll 01/30/2006 08:25a 234,183 mgvcp50.dll 01/30/2006 08:25a 234,947 p46s0ej7eho.dll 01/30/2006 08:23a 234,183 hofinst.dll 01/30/2006 08:23a 235,883 j00slad71d0.dll 01/30/2006 08:21a 234,183 wovcore.dll 01/30/2006 08:21a 235,768 ir8ql5l51.dll 01/30/2006 08:19a 234,183 mp40l9hm1.dll 01/30/2006 08:19a 234,586 fp0403dqe.dll 01/30/2006 08:17a 234,183 impeers.dll 01/30/2006 08:16a 234,271 k8800ilme8qa0.dll 01/30/2006 08:14a 234,183 wzcltui.dll 01/30/2006 08:14a 235,508 ir2ol5f31.dll 01/30/2006 07:58a 234,183 mTpi32.dll 01/30/2006 07:58a 234,997 l4j80e1ueh.dll 01/30/2006 07:55a 234,183 ahsmib.dll 01/30/2006 07:55a 234,941 o8ns0i57e8.dll 01/29/2006 07:51a 236,590 kVpm0i71e8.dll 01/29/2006 07:48a 236,590 CXMCAT.DLL 01/29/2006 07:48a 237,053 fp6403jqe.dll 01/29/2006 07:46a 236,590 rpched32.dll 01/29/2006 07:46a 234,233 s0pula791d.dll 01/29/2006 07:43a 236,590 iIssvcs.dll 01/28/2006 05:25p 236,187 s8pu0i79e8.dll 01/28/2006 02:39p 236,187 eS02ledo1h0c.dll 01/28/2006 02:37p 236,187 uxl.dll 01/28/2006 02:37p 236,891 j40s0ed7eh0.dll 01/28/2006 02:35p 236,187 mcstkprp.dll 01/28/2006 02:35p 234,055 irj6l51s1.dll 01/28/2006 02:33p 236,187 fa8m03l1e.dll 01/28/2006 02:33p 236,991 k4080edueh080.dll 01/28/2006 02:29p 236,187 pmrfnet.dll 01/28/2006 02:29p 234,093 r0r6la9s1d.dll 01/28/2006 02:27p 236,187 khdsp.dll 01/28/2006 02:27p 236,941 o4ns0e57eh.dll 01/28/2006 02:25p 236,187 CPUSAPI.DLL 01/28/2006 02:25p 234,173 p0n8la5u1d.dll 01/28/2006 02:23p 236,187 pvgfilt.dll 01/28/2006 02:23p 236,350 fp6m03j1e.dll 01/28/2006 02:20p 236,187 kprberos.dll 01/28/2006 02:20p 236,800 fpj6031se.dll 01/28/2006 02:18p 236,187 ciutil.dll 01/28/2006 02:18p 236,430 fp4203hoe.dll 01/28/2006 02:16p 236,187 qV68laju1do8.dll 01/28/2006 02:16p 236,505 g8jo0i13e8.dll 01/28/2006 02:14p <DIR> dllcache 01/28/2006 02:04p 235,569 smndmail.dll 01/28/2006 02:01p 235,569 MUCANS32.DLL 01/28/2006 02:01p 236,773 e402ledo1h0c.dll 01/28/2006 12:08p 234,966 stell32.dll 01/28/2006 12:06p 234,966 nrapi32.dll 01/28/2006 12:06p 235,034 i8600ijme8oa0.dll 01/28/2006 12:04p 234,966 iuxmontr.dll 01/28/2006 12:04p 236,090 f42mlef11h2.dll 01/28/2006 12:01p 234,966 wahtcpip.dll 01/28/2006 12:01p 236,205 mvl2l93o1.dll 01/28/2006 11:59a 234,966 myxbde40.dll 01/28/2006 11:59a 236,776 l0j8la1u1d.dll 01/28/2006 11:56a 234,966 fHxt30.dll 01/28/2006 11:56a 235,149 fp8m03l1e.dll 01/28/2006 11:54a 234,966 ukbmon.dll 01/28/2006 11:37a 234,966 lv8809lue.dll 01/28/2006 11:27a 236,386 ir64l5jq1.dll 01/28/2006 11:14a 236,386 mkexcl40.dll 01/28/2006 10:37a 234,966 ngwdev.dll 01/28/2006 10:34a 234,966 fHxshell.dll 01/28/2006 10:34a 236,491 aza2l9do1.dll 01/28/2006 10:32a 234,966 sdfolder.dll 01/28/2006 10:29a 233,371 m0lsla371d.dll 01/28/2006 10:16a 233,371 shrmdll.dll 01/28/2006 10:13a 233,371 MGCANS32.DLL 01/28/2006 10:13a 234,630 mvn2l95o1.dll 01/28/2006 09:42a 233,371 MAGINA.DLL 01/28/2006 09:40a 234,470 aza80ejueho80.dll 01/28/2006 07:53a 234,470 dAdim700.dll 01/27/2006 04:42p 233,371 wgvcore.dll 01/27/2006 04:39p 233,371 mdltus40.dll 01/27/2006 03:32p 237,198 r06ulaj91do.dll 01/27/2006 11:36a 237,198 nztevent.dll 01/27/2006 08:59a 233,680 q4680ejueho80.dll 01/27/2006 08:57a 233,434 fppo0373e.dll 01/27/2006 08:54a 237,198 mal_qic.dll 01/27/2006 08:54a 233,672 lv4809hue.dll 01/27/2006 08:51a 237,198 chc.dll 01/27/2006 08:47a 236,892 irp8l57u1.dll 01/27/2006 07:38a 236,892 iwcvid.dll 01/26/2006 12:12p 233,782 mv60l9jm1.dll 01/26/2006 12:06p 233,915 i4lole331h.dll 01/26/2006 12:03p 236,892 opbcconf.dll 01/26/2006 12:03p 237,306 aza00i9me8.dll 01/26/2006 11:58a 236,892 sklwid.dll 01/26/2006 11:56a 233,944 o4lu0e39eh.dll 01/26/2006 11:55a 236,892 kndic.dll 01/26/2006 11:53a 234,157 k8440ihqe84e0.dll 01/26/2006 11:52a 236,892 SemStore.dll 01/26/2006 11:52a 237,070 k8pm0i71e8.dll 01/26/2006 08:31a 236,892 lnbmp11n.dll 01/26/2006 08:31a 233,717 lvlu0939e.dll 01/26/2006 08:25a 233,582 azao0353e.dll 01/26/2006 08:20a 236,892 mjrepl35.dll 01/26/2006 08:20a 233,760 e420lefm1h2a.dll 01/26/2006 08:17a 236,892 daiman32.dll 01/26/2006 08:17a 237,310 h8j40i1qe8.dll 01/26/2006 08:15a 236,892 dBd8.dll 01/26/2006 08:14a 233,504 fpjq0315e.dll 01/26/2006 08:12a 236,892 pdisdecd.dll 01/26/2006 08:12a 233,855 f4j2le1o1h.dll 01/26/2006 08:07a 236,892 wpv9vcm.dll 01/25/2006 05:21p 236,739 ktpol7731.dll 01/25/2006 12:05p 236,739 rrched20.dll 01/25/2006 12:02p 233,852 mv02l9do1.dll 01/25/2006 11:56a 236,739 LGASRV.DLL 01/25/2006 11:56a 234,002 mv0ql9d51.dll 01/25/2006 11:41a 236,739 amipdsxx.dll 01/25/2006 11:41a 233,750 c400ledm1h0a.dll 01/25/2006 08:12a 236,739 dTdim700.dll 01/25/2006 08:12a 236,966 jt2207foe.dll 01/25/2006 08:09a 234,240 ir8ul5l91.dll 01/25/2006 08:06a 236,739 dlmodemx.dll 01/25/2006 08:06a 233,965 j4l4le3q1h.dll 01/25/2006 08:04a 236,739 pirfnet.dll 01/25/2006 08:04a 237,177 j8l40i3qe8.dll 01/25/2006 08:01a 236,739 hvtplug.dll 01/25/2006 08:01a 234,105 k4jsle171h.dll 01/25/2006 07:58a 236,739 sfrrun.dll 01/25/2006 07:58a 234,123 o0nsla571d.dll 01/25/2006 07:53a 236,739 wspcd.dll 01/25/2006 07:53a 234,178 q068laju1do8.dll 01/25/2006 07:50a 236,739 MLOEACCT.DLL 01/25/2006 07:50a 236,799 i0600ajmedoa0.dll 01/24/2006 08:17a 236,739 wsnfax.dll 01/24/2006 08:17a 233,880 ir62l5jo1.dll 01/24/2006 08:14a 237,092 fpno0353e.dll 01/24/2006 08:06a 236,739 dpsenh.dll 01/24/2006 08:06a 236,772 fpl0033me.dll 01/24/2006 08:04a 236,739 scnceng.dll 01/24/2006 08:04a 233,670 o4480ehueh480.dll 01/24/2006 08:01a 236,739 macpxl32.dLL 01/24/2006 08:01a 236,837 l8r00i9me8.dll 01/24/2006 07:59a 236,739 dxsapi.dll 01/24/2006 07:59a 234,256 d6j02g1mg6.dll 01/24/2006 07:54a 236,739 iymon.dll 01/24/2006 07:54a 237,273 k4lq0e35eh.dll 01/24/2006 07:49a 236,739 mssystem.dll 01/24/2006 07:49a 233,757 mvj0l91m1.dll 01/24/2006 07:47a 236,739 dVdref.dll 01/24/2006 07:47a 234,058 k026lafs1d26.dll 01/24/2006 07:44a 236,739 ROSAPI32.DLL 01/23/2006 06:05p 235,109 k6no0g53e6.dll 01/23/2006 11:49a 235,109 mkjint40.dll 01/23/2006 11:47a 235,109 ddconfig.dll 01/23/2006 11:46a 236,094 aza609jse.dll 01/23/2006 07:51a 235,109 LHASRV.DLL 01/23/2006 07:51a 236,254 ir4ml5h11.dll 01/23/2006 07:48a 236,023 m4ju0e19eh.dll 01/23/2006 07:43a 235,109 spclient.dll 01/23/2006 07:43a 236,449 j04olah31d4.dll 01/23/2006 07:41a 235,109 mpdart32.dll 01/22/2006 06:00p 235,618 d80mlid1180.dll 01/22/2006 04:21p 235,618 dkmsadsn.dll 01/22/2006 09:39a 235,051 m4nq0e55eh.dll 01/22/2006 08:15a 235,051 tKpisrv.dll 01/22/2006 08:13a 236,015 r46u0ej9eho.dll 01/22/2006 08:11a 235,051 dynmpntw.dll 01/22/2006 08:07a 234,272 lv6609jse.dll 01/22/2006 07:18a 234,272 dJtime.dll 01/22/2006 07:16a 234,272 ryfsaps.dll 01/22/2006 07:16a 235,321 mv40l9hm1.dll 01/22/2006 07:14a 234,272 li32.dll 01/22/2006 07:14a 235,762 p0r4la9q1d.dll 01/22/2006 07:12a 234,272 cqrtmgr.dll 01/22/2006 07:12a 235,657 ir8ol5l31.dll 01/22/2006 07:06a 234,272 caral.dll 01/22/2006 07:06a 236,173 en0ul1d91.dll 01/22/2006 07:00a 234,272 bkowser.dll 01/22/2006 07:00a 235,757 ir84l5lq1.dll 01/22/2006 06:55a 234,272 cjrpol.dll 01/22/2006 06:55a 234,846 o4pq0e75eh.dll 01/22/2006 06:50a 234,272 EYLUUE02.DLL 01/22/2006 06:50a 234,460 l88m0il1e8q.dll 01/22/2006 06:47a 234,272 suclogon.dll 01/22/2006 06:47a 235,687 irj4l51q1.dll 01/22/2006 06:45a 234,272 lctif11n.dll 01/22/2006 06:45a 235,356 k480lelm1hqa.dll 01/22/2006 06:22a 234,272 ocffilt.dll 01/22/2006 06:20a 235,429 lvrq0995e.dll 01/21/2006 11:18a 234,272 buotvid.dll 01/03/2006 05:52p <DIR> .. 01/03/2006 05:52p <DIR> . 01/03/2006 07:54a 234,917 XeeedZip.dll 01/03/2006 07:54a 236,597 q086lals1dq6.dll 01/03/2006 07:52a 236,657 n04slah71d4.dll 01/03/2006 07:50a 234,917 kwrberos.dll 01/03/2006 07:50a 234,955 f8l00i3me8.dll 01/03/2006 07:47a 234,917 CXRSRV.DLL 01/03/2006 07:47a 236,081 j46mlej11ho.dll 01/03/2006 07:45a 234,917 rYsppp.dll 01/02/2006 05:24p 234,198 mvrql9951.dll 01/02/2006 02:22p 234,198 CURSRV.DLL 01/02/2006 02:22p 234,917 aza403dqe.dll 01/02/2006 02:17p 235,983 aza6031se.dll 01/02/2006 07:31a 235,983 ull.dll 01/01/2006 04:09p 234,198 RVSAPI32.DLL 01/01/2006 02:19p 235,317 mvjml9111.dll 01/01/2006 02:17p 234,356 i8nm0i51e8.dll 01/01/2006 02:14p 234,198 mgjdbc10.dll 01/01/2006 02:12p 233,980 aza403jqe.dll 01/01/2006 07:39a 233,980 nblanui2.dll 01/01/2006 07:37a 235,690 k0jsla171d.dll 01/01/2006 07:35a 233,980 bbtsprx2.dll 01/01/2006 07:35a 234,662 az100i9me8.dll 01/01/2006 07:32a 233,980 PCRFCTRS.DLL 01/01/2006 07:32a 235,895 irjul5191.dll 01/01/2006 07:30a 233,980 kpdic.dll 01/01/2006 07:30a 235,274 n4r2le9o1h.dll 01/01/2006 07:28a 233,980 ckyptdll.dll 01/01/2006 07:28a 234,513 fplq0335e.dll 01/01/2006 07:26a 233,980 rKstls.dll 01/01/2006 07:26a 234,498 i8jq0i15e8.dll 01/01/2006 07:23a 233,980 latwn11n.dll 02/22/2004 11:00p 119,808 msstdfmt.dll 250 File(s) 58,711,054 bytes 3 Dir(s) 5,301,678,080 bytes free This is my file from HijackThis afterwards.... Logfile of HijackThis v1.99.1 Scan saved at 6:00:10 PM, on 1/3/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\LEXBCES.EXE C:\WINNT\system32\spoolsv.exe C:\WINNT\system32\LEXPPS.EXE C:\WINNT\System32\Ati2evxx.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\rundll32.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\Atiptaxx.exe C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb

[Siggyx]

Download hijackthis to its own folder C:/HJT for example. Extrat the zip file to that folder. Then close all browseer windows, open hijackthis and click on scan. Once the scan has completed click on Save Log, this will produce a text file log. Highlight all of the information from in that text box then right click and copy. Come back to this post you made and click on "add reply" at the bottom right and a new window will open. Paste the hijackthis log into the new window hit add reply in that new window.

HJT download >>> http://www.softpedia.../10-17-69.shtml

[asoares]

I did download Hijack This and that was a copy of the files that it found in the Hosts folder. How can I remove those files??!!

[Siggyx]

Please post the hijackthis log.

[asoares]

I have a virus in my registry which causes numerous popup and popunder ads.. annoying!

Here is one that was found: "{EE667982-5832-2002-741B-E609BD40FC8E}"
in the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform


Here are the others that were found: 127.0.0.1 sds-qckads.com
127.0.0.1 status.qckads.com
127.0.0.1 www.qoolaid.com
127.0.0.1 www.qoologic.com
127.0.0.1 www.CLKPrecision.com
127.0.0.1 www.urllogic.com
127.0.0.1 www.clkoptimizer.com
127.0.0.1 www.isearch.com
127.0.0.1 isearch.com
127.0.0.1 www.idownload.com
127.0.0.1 idownload.com
127.0.0.1 www.mytotalsearch.com
127.0.0.1 mytotalsearch.com
127.0.0.1 www.lop.com
127.0.0.1 lop.com
127.0.0.1 www.websearch.com
127.0.0.1 websearch.com
127.0.0.1 www.page-not-found.net
127.0.0.1 page-not-found.net
127.0.0.1 www.isearchhere.com
127.0.0.1 isearchhere.com
127.0.0.1 as.adwave.com
127.0.0.1 sr.adwave.com
127.0.0.1 www.adwave.com
127.0.0.1 adwave.com EVENT:HOST:127.0.0.1
127.0.0.1 www.pacimedia.com
127.0.0.1 www.exactsearch.net
127.0.0.1 www.contextplus.net
127.0.0.1 www.contextplus.net
127.0.0.1 www.contextplus.net
127.0.0.1 www.contextplus.net

in the HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\FilesNamedMRU


I have deleted them many times and has actually witnessed them come back after deletion!!

Any suggestions on how to remove them???
Hijack This doesnt work on these viruses, nor Spybot S&D, nor Trend Spyware!!


MY HJT FILE!!

Logfile of HijackThis v1.99.1
Scan saved at 11:39:18 AM, on 2/10/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\WINNT\System32\Ati2evxx.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\wuauclt.exe
C:\WINNT\system32\Atiptaxx.exe
C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb03.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\WINNT\system32\ctfmon.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\System32\svchost.exe
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\Program Files\Yahoo!\Messenger\YPager.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\unzipped\hijackthis\HijackThis.exe
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [myupdates] c:\windows\myupdates.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - Startup: Event Reminder.lnk = C:\pmw\PMREMIND.EXE
O4 - Startup: MRU-Blaster Silent Clean.lnk = C:\Program Files\MRU-Blaster\mrublaster.exe
O4 - Global Startup: Trend Micro Anti-Spyware.lnk = C:\Program Files\Trend Micro\Tmas\Tmas.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.c...ropper1_7us.cab
O20 - Winlogon Notify: Extensions - C:\WINNT\system32\j42q0ef5eh2.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE



Thanx!

Edited by asoares, 10 February 2006 - 09:44 AM.

[little eagle]

Merged threads.

[Siggyx]

Download L2mfix from one of these two locations:

http://www.atribune....oads/l2mfix.exe
http://www.downloads....org/l2mfix.exe

Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.

IMPORTANT: Do NOT run option #2 OR any other files in the l2mfix folder until you are asked to do so! This Fix must NOT be run in safe mode for it to work.

if you receive, while running option #1, an error similar like: ''C:\windows\system32\cmd.exe
C:\windows\system32\autoexec.nt the system file is not suitable for running ms-dos and microsoft windows applications. choose close to terminate the application.."...then please use option 5 or the web page link in the l2mfix folder to solve this error condition. do not run the fix portion without fixing this first.

[asoares]

L2MFIX find log 010406 These are the registry keys present ********************************************************************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\ 6c,00,00,00 "Logoff"="ChainWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Logoff"="CryptnetWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] "DLLName"="cscdll.dll" "Logon"="WinlogonLogonEvent" "Logoff"="WinlogonLogoffEvent" "ScreenSaver"="WinlogonScreenSaverEvent" "Startup"="WinlogonStartupEvent" "Shutdown"="WinlogonShutdownEvent" "StartShell"="WinlogonStartShellEvent" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] "Logoff"="WLEventLogoff" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 "DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] "DLLName"="WlNotify.dll" "Lock"="SensLockEvent" "Logon"="SensLogonEvent" "Logoff"="SensLogoffEvent" "Safe"=dword:00000001 "MaxWait"=dword:00000258 "StartScreenSaver"="SensStartScreenSaverEvent" "StopScreenSaver"="SensStopScreenSaverEvent" "Startup"="SensStartupEvent" "Shutdown"="SensShutdownEvent" "StartShell"="SensStartShellEvent" "Unlock"="SensUnlockEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Uninstall] "Asynchronous"=dword:00000000 "DllName"="C:\\WINNT\\system32\\enp8l17u1.dll" "Impersonate"=dword:00000000 "Logon"="WinLogon" "Logoff"="WinLogoff" "Shutdown"="WinShutdown" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif] "DLLName"="wzcdlg.dll" "Logon"="WZCEventLogon" "Logoff"="WZCEventLogoff" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000000 ********************************************************************************** useragent: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] "{EE667982-5832-2002-741B-E609BD40FC8E}"="" ********************************************************************************** Shell Extension key: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] "{00022613-0000-0000-C000-000000000046}"="Multimedia File Property Sheet" "{176d6597-26d3-11d1-b350-080036a75b03}"="ICM Scanner Management" "{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="NTFS Security Page" "{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="OLE Docfile Property Page" "{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Shell extensions for sharing" "{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension" "{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Display Adapter CPL Extension" "{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Display Monitor CPL Extension" "{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Display Panning CPL Extension" "{4E40F770-369C-11d0-8922-00A024AB2DBB}"="DS Security Page" "{56117100-C0CD-101B-81E2-00AA004AE837}"="Shell Scrap DataHandler" "{59099400-57FF-11CE-BD94-0020AF85B590}"="Disk Copy Extension" "{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Shell extensions for Microsoft Windows Network objects" "{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="ICM Monitor Management" "{675F097E-4C4D-11D0-B6C1-0800091AA605}"="ICM Printer Management" "{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Shell extensions for file compression" "{77597368-7b15-11d0-a0c2-080036af3f03}"="Web Printer Shell Extension" "{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI" "{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Encryption Context Menu" "{85BBD920-42A0-1069-A2E4-08002B30309D}"="Briefcase" "{88895560-9AA2-1069-930E-00AA0030EBC8}"="HyperTerminal Icon Ext" "{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts" "{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="ICC Profile" "{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Printers Security Page" "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Shell extensions for sharing" "{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension" "{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Shell extensions for Windows Script Host" "{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Crypto PKO Extension" "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Crypto Sign Extension" "{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Network and Dial-up Connections" "{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler" "{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension" "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Scheduled Tasks" "{1A9BA3A0-143A-11CF-8350-444553540000}"="Shell Favorite Folder" "{20D04FE0-3AEA-1069-A2D8-08002B30309D}"="My Computer" "{86747AC0-42A0-1069-A2E6-08002B30309D}"="Briefcase Folder" "{0AFACED1-E828-11D1-9187-B532F1E9575D}"="Folder Shortcut" "{12518493-00B2-11d2-9FA5-9E3420524153}"="Mounted Volume" "{21B22460-3AEA-1069-A2DC-08002B30309D}"="File Property Page Extension" "{B091E540-83E3-11CF-A713-0020AFD79762}"="File Types Page" "{FBF23B41-E3F0-101B-8488-00AA003E56F8}"="MIME File Types Hook" "{C2FBB630-2971-11d1-A18C-00C04FD75D13}"="Microsoft CopyTo Service" "{C2FBB631-2971-11d1-A18C-00C04FD75D13}"="Microsoft MoveTo Service" "{13709620-C279-11CE-A49E-444553540000}"="Shell Automation Service" "{62112AA1-EBE4-11cf-A5FB-0020AFE7292D}"="Shell Automation Folder View" "{4622AD11-FF23-11d0-8D34-00A0C90F2719}"="Start Menu" "{7BA4C740-9E81-11CF-99D3-00AA004AE837}"="Microsoft SendTo Service" "{D969A300-E7FF-11d0-A93B-00A0C90F2719}"="Microsoft New Object Service" "{09799AFB-AD67-11d1-ABCD-00C04FC30936}"="Open With Context Menu Handler" "{3FC0B520-68A9-11D0-8D77-00C04FD70822}"="Display Control Panel HTML Extensions" "{75048700-EF1F-11D0-9888-006097DEACF9}"="ActiveDesktop" "{6D5313C0-8C62-11D1-B2CD-006097DF8C11}"="Folder Options Property Page Extension" "{57651662-CE3E-11D0-8D77-00C04FC99D61}"="CmdFileIcon" "{4657278A-411B-11d2-839A-00C04FD918D0}"="Shell Drag and Drop helper" "{A470F8CF-A1E8-4f65-8335-227475AA5C46}"="Add encryption item to context menus in explorer" "{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Microsoft Internet Toolbar" "{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="Download Status" "{568804CA-CBD7-11d0-9816-00C04FD91972}"="Menu Shell Folder" "{5b4dae26-b807-11d0-9815-00c04fd91972}"="Menu Band" "{8278F931-2A3E-11d2-838F-00C04FD918D0}"="Tracking Shell Menu" "{E13EF4E4-D2F2-11d0-9816-00C04FD91972}"="Menu Site" "{ECD4FC4F-521C-11D0-B792-00A0C90312E1}"="Menu Desk Bar" "{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Augmented Shell Folder" "{6413BA2C-B461-11d1-A18A-080036B11A03}"="Augmented Shell Folder 2" "{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy" "{D82BE2B0-5764-11D0-A96E-00C04FD705A2}"="IShellFolderBand" "{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Microsoft BrowserBand" "{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Search Band" "{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="In-pane search" "{07798131-AF23-11d1-9111-00A0C98BA67D}"="Web Search" "{0E5CBF21-D15F-11d0-8301-00AA005B4383}"="&Links" "{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Registry Tree Options Utility" "{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Address" "{A08C11D2-A228-11d0-825B-00AA005B4383}"="Address EditBox" "{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Microsoft AutoComplete" "{7487cd30-f71a-11d0-9ea7-00805f714772}"="Thumbnail Image" "{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor" "{6756A641-DE71-11d0-831B-00AA005B4383}"="MRU AutoComplete List" "{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Microsoft History AutoComplete List" "{03C036F1-A186-11D0-824A-00AA005B4383}"="Microsoft Shell Folder AutoComplete List" "{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Microsoft Multiple AutoComplete List Container" "{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Shell Band Site Menu" "{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp" "{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Shell DeskBar" "{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite" "{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="User Assist" "{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="Global Folder Settings" "{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band" "{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service" "{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer" "{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut" "{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service" "{FF393560-C2A7-11CF-BFF4-444553540000}"="History" "{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook" "{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="IE4 Suite Splash Screen" "{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook" "{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC" "{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC" "{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="The Internet" "{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space" "{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{88C6C381-2E85-11D0-94DE-444553540000}"="ActiveX Cache Folder" "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck" "{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr" "{F5175861-2688-11d0-9C5E-00AA00A45957}"="Subscription Folder" "{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler" "{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent" "{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent" "{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent" "{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent" "{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent" "{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler" "{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}"="Thumbnails" "{EAB841A0-9550-11CF-8C16-00805F1408F3}"="HTML Thumbnail Extractor" "{1AEB1360-5AFC-11D0-B806-00C04FD706EC}"="Office Graphics Filters Thumbnail Extractor" "{9DBD2C50-62AD-11D0-B806-00C04FD706EC}"="Summary Info Thumbnail handler (DOCFILES)" "{500202A0-731E-11D0-B829-00C04FD706EC}"="LNK file thumbnail interface delegator" "{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Shell Application Manager" "{0B124F8C-91F0-11D1-B8B5-006008059382}"="Installed Apps Enumerator" "{CFCCC7A0-A282-11D1-9082-006008059382}"="Darwin App Publisher" "{fe1290f0-cfbd-11cf-a330-00aa00c16e65}"="Directory Namespace" "{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object" "{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI" "{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find" "{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find" "{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI" "{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs" "{450D8FBA-AD25-11D0-98A8-0800361B1103}"="MyDocs Folder" "{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook" "{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target" "{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties" "{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu" "{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options" "{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Offline Files Folder" "{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler" "{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer" "{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Web Folders" "{0006F045-0000-0000-C000-000000000046}"="Microsoft Outlook Custom Icon Handler" "{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler" "{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band" "{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Custom MRU AutoCompleted List" "{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible" "{acf35015-526e-4230-9596-becbe19f0ac9}"="Track Popup Bar" "{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Address Bar Parser" "{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture" "{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band" "{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Channel File" "{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Channel Shortcut" "{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object" "{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu" "{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties" "{32714800-2E5F-11d0-8B85-00AA0044F941}"="For &People..." "{E0D79304-84BE-11CE-9641-444553540000}"="WinZip" "{E0D79305-84BE-11CE-9641-444553540000}"="WinZip" "{E0D79306-84BE-11CE-9641-444553540000}"="WinZip" "{E0D79307-84BE-11CE-9641-444553540000}"="WinZip" "{5464D816-CF16-4784-B9F3-75C0DB52B499}"="Yahoo! Mail" "{73B24247-042E-4EF5-ADC2-42F62E6FD654}"="ICQ Lite Shell Extension" "{2A35249E-6ECE-4926-B0AB-3FF6B9FCE8CA}"="" "{DD0B2370-8C94-480A-B2C2-384FC023DAC8}"="" "{48DD23E3-A05B-4ECB-97F7-870E70183FC1}"="" "{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}"="AVG7 Shell Extension" "{9F97547E-460A-42C5-AE0C-81C61FFAEBC3}"="AVG7 Find Extension" "{C2BF43C9-C2CD-46AE-8491-25DEBFA16C4B}"="" "{CF6C2F0D-60B9-489D-9D41-C389DF7045CB}"="" "{A5B0D70D-1541-418C-AA72-953F3CDB4646}"="" "{37FAD833-E266-4300-8AD9-39F4F825F3DD}"="" "{714F0BC5-0535-48A8-961B-82FFEC27F293}"="" "{39733A57-01EF-4DD4-B907-A0D466639596}"="" "{03A80B1D-5C6A-42c2-9DFB-81B6005D8023}"="Trend Micro Anti-Spyware Shell Extension" "{D65BC3EB-3878-4D4E-B8CC-B95DA84865CF}"="" "{C85DFBA2-7267-491D-B7ED-E44ADB8015E5}"="" ********************************************************************************** HKEY ROOT CLASSIDS: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{2A35249E-6ECE-4926-B0AB-3FF6B9FCE8CA}] @="" [HKEY_CLASSES_ROOT\CLSID\{2A35249E-6ECE-4926-B0AB-3FF6B9FCE8CA}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{2A35249E-6ECE-4926-B0AB-3FF6B9FCE8CA}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{2A35249E-6ECE-4926-B0AB-3FF6B9FCE8CA}\InprocServer32] @="C:\\WINNT\\system32\\iplogmsg.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{DD0B2370-8C94-480A-B2C2-384FC023DAC8}] @="" [HKEY_CLASSES_ROOT\CLSID\{DD0B2370-8C94-480A-B2C2-384FC023DAC8}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{DD0B2370-8C94-480A-B2C2-384FC023DAC8}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{DD0B2370-8C94-480A-B2C2-384FC023DAC8}\InprocServer32] @="C:\\WINNT\\system32\\dkmsadsn.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{48DD23E3-A05B-4ECB-97F7-870E70183FC1}] @="" [HKEY_CLASSES_ROOT\CLSID\{48DD23E3-A05B-4ECB-97F7-870E70183FC1}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{48DD23E3-A05B-4ECB-97F7-870E70183FC1}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{48DD23E3-A05B-4ECB-97F7-870E70183FC1}\InprocServer32] @="C:\\WINNT\\system32\\wsnfax.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{C2BF43C9-C2CD-46AE-8491-25DEBFA16C4B}] @="" [HKEY_CLASSES_ROOT\CLSID\{C2BF43C9-C2CD-46AE-8491-25DEBFA16C4B}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{C2BF43C9-C2CD-46AE-8491-25DEBFA16C4B}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{C2BF43C9-C2CD-46AE-8491-25DEBFA16C4B}\InprocServer32] @="C:\\WINNT\\system32\\dTdim700.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{CF6C2F0D-60B9-489D-9D41-C389DF7045CB}] @="" [HKEY_CLASSES_ROOT\CLSID\{CF6C2F0D-60B9-489D-9D41-C389DF7045CB}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{CF6C2F0D-60B9-489D-9D41-C389DF7045CB}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{CF6C2F0D-60B9-489D-9D41-C389DF7045CB}\InprocServer32] @="C:\\WINNT\\system32\\rrched20.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{A5B0D70D-1541-418C-AA72-953F3CDB4646}] @="" [HKEY_CLASSES_ROOT\CLSID\{A5B0D70D-1541-418C-AA72-953F3CDB4646}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{A5B0D70D-1541-418C-AA72-953F3CDB4646}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{A5B0D70D-1541-418C-AA72-953F3CDB4646}\InprocServer32] @="C:\\WINNT\\system32\\lnbmp11n.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{37FAD833-E266-4300-8AD9-39F4F825F3DD}] @="" [HKEY_CLASSES_ROOT\CLSID\{37FAD833-E266-4300-8AD9-39F4F825F3DD}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{37FAD833-E266-4300-8AD9-39F4F825F3DD}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{37FAD833-E266-4300-8AD9-39F4F825F3DD}\InprocServer32] @="C:\\WINNT\\system32\\stfolder.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{714F0BC5-0535-48A8-961B-82FFEC27F293}] @="" [HKEY_CLASSES_ROOT\CLSID\{714F0BC5-0535-48A8-961B-82FFEC27F293}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{714F0BC5-0535-48A8-961B-82FFEC27F293}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{714F0BC5-0535-48A8-961B-82FFEC27F293}\InprocServer32] @="C:\\WINNT\\system32\\RVSAPI32.DLL" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{39733A57-01EF-4DD4-B907-A0D466639596}] @="" [HKEY_CLASSES_ROOT\CLSID\{39733A57-01EF-4DD4-B907-A0D466639596}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{39733A57-01EF-4DD4-B907-A0D466639596}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{39733A57-01EF-4DD4-B907-A0D466639596}\InprocServer32] @="C:\\WINNT\\system32\\ull.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{D65BC3EB-3878-4D4E-B8CC-B95DA84865CF}] @="" [HKEY_CLASSES_ROOT\CLSID\{D65BC3EB-3878-4D4E-B8CC-B95DA84865CF}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{D65BC3EB-3878-4D4E-B8CC-B95DA84865CF}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{D65BC3EB-3878-4D4E-B8CC-B95DA84865CF}\InprocServer32] @="C:\\WINNT\\system32\\cxyptsvc.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{C85DFBA2-7267-491D-B7ED-E44ADB8015E5}] @="" [HKEY_CLASSES_ROOT\CLSID\{C85DFBA2-7267-491D-B7ED-E44ADB8015E5}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{C85DFBA2-7267-491D-B7ED-E44ADB8015E5}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{C85DFBA2-7267-491D-B7ED-E44ADB8015E5}\InprocServer32] @="C:\\WINNT\\system32\\dkintf.dll" "ThreadingModel"="Apartment" ********************************************************************************** Files Found are not all bad files: C:\WINNT\SYSTEM32\ ahsmib.dll Mon Jan 30 2006 7:55:06a ..S.R 234,183 228.69 K amipdsxx.dll Wed Jan 25 2006 11:41:54a ..S.R 236,739 231.19 K aywav.dll Wed Jan 4 2006 8:46:52a ..S.R 236,462 230.92 K az100i~1.dll Sun Jan 1 2006 7:35:10a ..S.R 234,662 229.16 K aza003~1.dll Tue Jan 3 2006 6:14:58p ..S.R 235,236 229.72 K aza00i~1.dll Thu Jan 26 2006 12:03:52p ..S.R 237,306 231.74 K aza2l9~1.dll Sat Jan 28 2006 10:34:56a ..S.R 236,491 230.95 K aza403~1.dll Sun Jan 1 2006 2:12:48p ..S.R 233,980 228.50 K aza4l5~1.dll Fri Feb 10 2006 7:19:30a ..S.R 233,510 228.04 K aza603~1.dll Mon Jan 2 2006 2:17:20p ..S.R 235,983 230.45 K aza609~1.dll Mon Jan 23 2006 11:47:00a ..S.R 236,094 230.56 K aza80c~1.dll Thu Feb 9 2006 7:33:04a ..S.R 233,817 228.34 K aza80e~1.dll Sat Jan 28 2006 9:40:14a ..S.R 234,470 228.97 K aza8la~1.dll Tue Jan 31 2006 2:31:04p ..S.R 234,331 228.84 K aza8la~2.dll Mon Feb 6 2006 1:37:26p ..S.R 234,311 228.82 K azaml9~1.dll Tue Feb 7 2006 2:32:34p ..S.R 233,834 228.35 K azao03~1.dll Thu Jan 26 2006 8:25:50a ..S.R 233,582 228.11 K azaola~1.dll Fri Feb 10 2006 11:58:14a ..S.R 234,076 228.59 K azaq0i~1.dll Sat Feb 4 2006 5:27:58p ..S.R 236,462 230.92 K azas0e~1.dll Mon Jan 30 2006 8:39:12a ..S.R 235,213 229.70 K azasla~1.dll Wed Feb 8 2006 7:53:28a ..S.R 237,135 231.57 K azasla~2.dll Sun Feb 12 2006 8:06:52a ..S.R 234,281 228.79 K batsprx2.dll Tue Feb 7 2006 2:29:40p ..S.R 233,817 228.34 K bbtsprx2.dll Sun Jan 1 2006 7:35:12a ..S.R 233,980 228.50 K bkowser.dll Sun Jan 22 2006 7:00:54a ..S.R 234,272 228.78 K buotvid.dll Sat Jan 21 2006 11:18:54a ..S.R 234,272 228.78 K c400le~1.dll Wed Jan 25 2006 11:41:52a ..S.R 233,750 228.27 K camaddin.dll Sun Feb 5 2006 7:25:00a ..S.R 237,108 231.55 K caral.dll Sun Jan 22 2006 7:06:46a ..S.R 234,272 228.78 K cdral.dll Mon Nov 28 2005 5:29:18p A.... 45,056 44.00 K cdrtc.dll Mon Nov 28 2005 5:29:18p A.... 49,152 48.00 K chc.dll Fri Jan 27 2006 8:51:42a ..S.R 237,198 231.64 K ciutil.dll Sat Jan 28 2006 2:18:46p ..S.R 236,187 230.65 K cjfgnt.dll Sat Feb 11 2006 9:03:38a ..S.R 237,265 231.70 K cjrpol.dll Sun Jan 22 2006 6:55:26a ..S.R 234,272 228.78 K ckyptdll.dll Sun Jan 1 2006 7:28:24a ..S.R 233,980 228.50 K cpnfmsp.dll Tue Feb 7 2006 3:35:08p ..S.R 234,089 228.60 K cpusapi.dll Sat Jan 28 2006 2:25:26p ..S.R 236,187 230.65 K cqrtmgr.dll Sun Jan 22 2006 7:12:36a ..S.R 234,272 228.78 K cuonts.dll Tue Feb 7 2006 2:37:20p ..S.R 233,817 228.34 K cursrv.dll Mon Jan 2 2006 2:22:52p ..S.R 234,198 228.71 K cxmcat.dll Sun Jan 29 2006 7:48:56a ..S.R 236,590 231.04 K cxrsrv.dll Tue Jan 3 2006 7:47:50a ..S.R 234,917 229.41 K cxyptsvc.dll Mon Feb 6 2006 10:22:24a ..S.R 237,108 231.55 K d2j00c~1.dll Tue Jan 31 2006 2:35:54p ..S.R 237,300 231.74 K d6j02g~1.dll Tue Jan 24 2006 7:59:48a ..S.R 234,256 228.77 K d80mli~1.dll Sun Jan 22 2006 6:00:34p ..S.R 235,618 230.09 K dadim700.dll Sat Jan 28 2006 7:53:08a ..S.R 234,470 228.97 K daiman32.dll Thu Jan 26 2006 8:17:36a ..S.R 236,892 231.34 K dbd8.dll Thu Jan 26 2006 8:15:02a ..S.R 236,892 231.34 K ddconfig.dll Mon Jan 23 2006 11:47:02a ..S.R 235,109 229.60 K debkcinf.dll Mon Jan 30 2006 8:36:58a ..S.R 234,183 228.69 K dgbkpwr.dll Mon Feb 6 2006 10:15:26a ..S.R 237,108 231.55 K djtime.dll Sun Jan 22 2006 7:18:52a ..S.R 234,272 228.78 K dkintf.dll Sun Feb 12 2006 8:21:04a ..S.R 237,265 231.70 K dkmsadsn.dll Sun Jan 22 2006 4:21:26p ..S.R 235,618 230.09 K dld8.dll Wed Feb 8 2006 7:58:12a ..S.R 235,089 229.58 K dlmodemx.dll Wed Jan 25 2006 8:07:00a ..S.R 236,739 231.19 K dnbkscin.dll Thu Feb 9 2006 7:37:26a ..S.R 237,265 231.70 K dpsenh.dll Tue Jan 24 2006 8:06:34a ..S.R 236,739 231.19 K dqserver.dll Thu Feb 9 2006 7:30:00a ..S.R 237,265 231.70 K dtdim700.dll Wed Jan 25 2006 8:12:48a ..S.R 236,739 231.19 K duskmon.dll Mon Jan 30 2006 8:43:58a ..S.R 234,183 228.69 K dvdref.dll Tue Jan 24 2006 7:47:08a ..S.R 236,739 231.19 K dxsapi.dll Tue Jan 24 2006 7:59:50a ..S.R 236,739 231.19 K dynmpntw.dll Sun Jan 22 2006 8:11:04a ..S.R 235,051 229.54 K e402le~1.dll Sat Jan 28 2006 2:01:56p ..S.R 236,773 231.22 K e420le~1.dll Thu Jan 26 2006 8:20:18a ..S.R 233,760 228.28 K e8jm0i~1.dll Tue Jan 3 2006 6:17:36p ..S.R 235,035 229.52 K en0ul1~1.dll Sun Jan 22 2006 7:06:46a ..S.R 236,173 230.64 K enp8l1~1.dll Sat Feb 11 2006 3:53:10p ..S.R 237,265 231.70 K es02le~1.dll Sat Jan 28 2006 2:40:00p ..S.R 236,187 230.65 K esutil.dll Wed Feb 8 2006 7:51:10a ..S.R 235,089 229.58 K eyluue02.dll Sun Jan 22 2006 6:50:28a ..S.R 234,272 228.78 K f42mle~1.dll Sat Jan 28 2006 12:04:16p ..S.R 236,090 230.55 K f4j2le~1.dll Thu Jan 26 2006 8:12:24a ..S.R 233,855 228.37 K f8l00i~1.dll Tue Jan 3 2006 7:50:04a ..S.R 234,955 229.45 K fa8m03~1.dll Sat Jan 28 2006 2:33:26p ..S.R 236,187 230.65 K fhxshell.dll Sat Jan 28 2006 10:34:58a ..S.R 234,966 229.46 K fhxt30.dll Sat Jan 28 2006 11:56:58a ..S.R 234,966 229.46 K fontsub.dll Thu Nov 24 2005 4:54:16p A.... 79,632 77.77 K fp0003~1.dll Mon Jan 30 2006 8:43:56a ..S.R 234,186 228.70 K fp0403~1.dll Mon Jan 30 2006 8:19:10a ..S.R 234,586 229.09 K fp0q03~1.dll Mon Feb 6 2006 8:59:14a ..S.R 234,276 228.79 K fp4203~1.dll Sat Jan 28 2006 2:18:44p ..S.R 236,430 230.89 K fp6403~1.dll Sun Jan 29 2006 7:48:54a ..S.R 237,053 231.50 K fp6m03~1.dll Sat Jan 28 2006 2:23:06p ..S.R 236,350 230.81 K fp8m03~1.dll Sat Jan 28 2006 11:56:56a ..S.R 235,149 229.64 K fpj203~1.dll Thu Feb 9 2006 7:35:16a ..S.R 233,354 227.88 K fpj603~1.dll Sat Jan 28 2006 2:20:54p ..S.R 236,800 231.25 K fpjm03~1.dll Mon Jan 30 2006 8:28:20a ..S.R 234,296 228.80 K fpjq03~1.dll Thu Jan 26 2006 8:15:00a ..S.R 233,504 228.03 K fpl003~1.dll Tue Jan 24 2006 8:06:32a ..S.R 236,772 231.22 K fpl403~1.dll Tue Feb 7 2006 3:28:26p ..S.R 233,817 228.34 K fplq03~1.dll Sun Jan 1 2006 7:28:22a ..S.R 234,513 229.02 K fpno03~1.dll Tue Jan 24 2006 8:14:58a ..S.R 237,092 231.54 K fpp003~1.dll Mon Feb 6 2006 10:22:20a ..S.R 237,181 231.62 K fppo03~1.dll Fri Jan 27 2006 8:57:06a ..S.R 233,434 227.96 K fyxmapi.dll Mon Jan 30 2006 8:30:30a ..S.R 234,183 228.69 K g8jo0i~1.dll Sat Jan 28 2006 2:16:28p ..S.R 236,505 230.96 K g8lm0i~1.dll Sun Feb 12 2006 8:21:02a ..S.R 233,317 227.85 K gdi32.dll Fri Dec 30 2005 12:15:56p A.... 233,744 228.27 K gp60l3~1.dll Tue Jan 3 2006 6:30:02p ..S.R 234,917 229.41 K h02ola~1.dll Thu Feb 9 2006 7:37:18a ..S.R 233,908 228.43 K h8j40i~1.dll Thu Jan 26 2006 8:17:32a ..S.R 237,310 231.75 K h8l20i~1.dll Tue Feb 7 2006 3:32:52p ..S.R 234,327 228.83 K hgtplug.dll Mon Feb 6 2006 1:39:40p ..S.R 237,108 231.55 K hofinst.dll Mon Jan 30 2006 8:23:46a ..S.R 234,183 228.69 K hvtplug.dll Wed Jan 25 2006 8:01:24a ..S.R 236,739 231.19 K i0600a~1.dll Wed Jan 25 2006 7:50:48a ..S.R 236,799 231.25 K i0jqla~1.dll Wed Feb 8 2006 7:55:54a ..S.R 236,599 231.05 K i4lole~1.dll Thu Jan 26 2006 12:06:32p ..S.R 233,915 228.43 K i4nmle~1.dll Thu Feb 9 2006 7:39:38a ..S.R 233,825 228.34 K i8600i~1.dll Sat Jan 28 2006 12:06:34p ..S.R 235,034 229.52 K i8jq0i~1.dll Sun Jan 1 2006 7:26:04a ..S.R 234,498 229.00 K i8nm0i~1.dll Sun Jan 1 2006 2:17:12p ..S.R 234,356 228.86 K iaxwan.dll Tue Jan 3 2006 6:17:38p ..S.R 234,917 229.41 K igxrtmgr.dll Tue Feb 7 2006 2:24:24p ..S.R 233,817 228.34 K iissvcs.dll Sun Jan 29 2006 7:43:30a ..S.R 236,590 231.04 K impeers.dll Mon Jan 30 2006 8:17:02a ..S.R 234,183 228.69 K ir08l5~1.dll Sun Feb 5 2006 7:25:28a ..S.R 233,769 228.29 K ir0sl5~1.dll Wed Feb 8 2006 7:48:50a ..S.R 236,794 231.24 K ir2ol5~1.dll Mon Jan 30 2006 8:14:46a ..S.R 235,508 229.99 K ir2ul5~1.dll Mon Feb 6 2006 10:17:52a ..S.R 234,210 228.72 K ir48l5~1.dll Sat Feb 11 2006 8:58:44a ..S.R 234,170 228.68 K ir4ml5~1.dll Mon Jan 23 2006 7:51:06a ..S.R 236,254 230.71 K ir4ol5~1.dll Tue Feb 7 2006 7:31:26a ..S.R 233,817 228.34 K ir62l5~1.dll Tue Jan 24 2006 8:17:10a ..S.R 233,880 228.40 K ir64l5~1.dll Sat Jan 28 2006 11:27:32a ..S.R 236,386 230.84 K ir84l5~1.dll Sun Jan 22 2006 7:00:52a ..S.R 235,757 230.23 K ir8ol5~1.dll Sun Jan 22 2006 7:12:34a ..S.R 235,657 230.13 K ir8ql5~1.dll Mon Jan 30 2006 8:21:30a ..S.R 235,768 230.24 K ir8ul5~1.dll Wed Jan 25 2006 8:09:44a ..S.R 234,240 228.75 K irj4l5~1.dll Sun Jan 22 2006 6:47:58a ..S.R 235,687 230.16 K irj6l5~1.dll Sat Jan 28 2006 2:35:36p ..S.R 234,055 228.57 K irjul5~1.dll Sun Jan 1 2006 7:32:54a ..S.R 235,895 230.36 K irlql5~1.dll Mon Feb 6 2006 1:51:18p ..S.R 234,015 228.53 K irlul5~1.dll Mon Feb 6 2006 1:30:30p ..S.R 233,371 227.90 K irp8l5~1.dll Fri Jan 27 2006 8:47:50a ..S.R 236,892 231.34 K irpql5~1.dll Tue Feb 7 2006 2:30:06p ..S.R 234,570 229.07 K iuxmontr.dll Sat Jan 28 2006 12:04:18p ..S.R 234,966 229.46 K iwcvid.dll Fri Jan 27 2006 7:38:40a ..S.R 236,892 231.34 K iymon.dll Tue Jan 24 2006 7:54:32a ..S.R 236,739 231.19 K j00sla~1.dll Mon Jan 30 2006 8:23:44a ..S.R 235,883 230.35 K j04ola~1.dll Mon Jan 23 2006 7:43:38a ..S.R 236,449 230.91 K j0l4la~1.dll Mon Jan 30 2006 8:41:30a ..S.R 235,613 230.09 K j40s0e~1.dll Sat Jan 28 2006 2:37:46p ..S.R 236,891 231.34 K j46mle~1.dll Tue Jan 3 2006 7:47:46a ..S.R 236,081 230.55 K j4l4le~1.dll Wed Jan 25 2006 8:06:56a ..S.R 233,965 228.48 K j4n2le~1.dll Tue Jan 31 2006 3:00:46p ..S.R 233,875 228.39 K j4p0le~1.dll Mon Feb 6 2006 1:53:30p ..S.R 233,785 228.30 K j8l40i~1.dll Wed Jan 25 2006 8:04:02a ..S.R 237,177 231.62 K jm0sla~1.dll Mon Feb 6 2006 1:32:44p ..S.R 237,108 231.55 K jrj025~1.dll Mon Feb 6 2006 1:29:44p ..S.R 234,255 228.76 K jt2207~1.dll Wed Jan 25 2006 8:12:44a ..S.R 236,966 231.41 K jtlm07~1.dll Fri Feb 10 2006 6:00:42p ..S.R 233,705 228.23 K k026la~1.dll Tue Jan 24 2006 7:47:06a ..S.R 234,058 228.57 K k0jsla~1.dll Sun Jan 1 2006 7:37:18a ..S.R 235,690 230.16 K k4080e~1.dll Sat Jan 28 2006 2:33:24p ..S.R 236,991 231.43 K k480le~1.dll Sun Jan 22 2006 6:45:44a ..S.R 235,356 229.84 K k4js0e~1.dll Mon Jan 30 2006 8:34:48a ..S.R 234,897 229.39 K k4jsle~1.dll Wed Jan 25 2006 8:01:20a ..S.R 234,105 228.62 K k4lq0e~1.dll Tue Jan 24 2006 7:54:30a ..S.R 237,273 231.71 K k4pmle~1.dll Tue Jan 31 2006 3:24:22p ..S.R 237,288 231.73 K k6no0g~1.dll Mon Jan 23 2006 6:05:34p ..S.R 235,109 229.60 K k8440i~1.dll Thu Jan 26 2006 11:53:26a ..S.R 234,157 228.67 K k8800i~1.dll Mon Jan 30 2006 8:17:00a ..S.R 234,271 228.78 K k8noli~1.dll Sat Feb 11 2006 6:23:16p ..S.R 233,625 228.15 K k8pm0i~1.dll Thu Jan 26 2006 11:52:22a ..S.R 237,070 231.51 K khdsp.dll Sat Jan 28 2006 2:27:40p ..S.R 236,187 230.65 K kndic.dll Thu Jan 26 2006 11:55:44a ..S.R 236,892 231.34 K kp80le~1.dll Tue Feb 7 2006 2:32:12p ..S.R 233,817 228.34 K kpdic.dll Sun Jan 1 2006 7:30:40a ..S.R 233,980 228.50 K kprberos.dll Sat Jan 28 2006 2:20:56p ..S.R 236,187 230.65 K ktpol7~1.dll Wed Jan 25 2006 5:21:26p ..S.R 236,739 231.19 K kvpm0i~1.dll Sun Jan 29 2006 7:51:04a ..S.R 236,590 231.04 K kwrberos.dll Tue Jan 3 2006 7:50:06a ..S.R 234,917 229.41 K l0j8la~1.dll Sat Jan 28 2006 11:59:22a ..S.R 236,776 231.23 K l0l6la~1.dll Tue Jan 31 2006 2:42:12p ..S.R 234,063 228.57 K l0n4la~1.dll Wed Feb 8 2006 7:51:08a ..S.R 236,539 230.99 K l4j80e~1.dll Mon Jan 30 2006 7:58:12a ..S.R 234,997 229.49 K l84q0i~1.dll Tue Jan 31 2006 3:03:16p ..S.R 233,522 228.05 K l88m0i~1.dll Sun Jan 22 2006 6:50:26a ..S.R 234,460 228.96 K l8r00i~1.dll Tue Jan 24 2006 8:01:58a ..S.R 236,837 231.29 K latwn11n.dll Sun Jan 1 2006 7:23:50a ..S.R 233,980 228.50 K lcpcx11n.dll Fri Feb 10 2006 11:53:48a ..S.R 237,265 231.70 K lctif11n.dll Sun Jan 22 2006 6:45:46a ..S.R 234,272 228.78 K lgasrv.dll Wed Jan 25 2006 11:56:46a ..S.R 236,739 231.19 K lhasrv.dll Mon Jan 23 2006 7:51:06a ..S.R 235,109 229.60 K li32.dll Sun Jan 22 2006 7:14:50a ..S.R 234,272 228.78 K lnbmp11n.dll Thu Jan 26 2006 8:31:40a ..S.R 236,892 231.34 K lv2609~1.dll Mon Jan 30 2006 8:30:28a ..S.R 234,812 229.31 K lv4809~1.dll Fri Jan 27 2006 8:54:28a ..S.R 233,672 228.20 K lv4u09~1.dll Sun Feb 12 2006 8:08:56a ..S.R 233,722 228.24 K lv6609~1.dll Sun Jan 22 2006 8:07:58a ..S.R 234,272 228.78 K lv8809~1.dll Sat Jan 28 2006 11:37:16a ..S.R 234,966 229.46 K lvj809~1.dll Mon Feb 6 2006 10:20:08a ..S.R 233,657 228.18 K lvlu09~1.dll Thu Jan 26 2006 8:31:38a ..S.R 233,717 228.24 K lvpu09~1.dll Mon Jan 30 2006 8:32:38a ..S.R 235,162 229.65 K lvr809~1.dll Sat Feb 11 2006 9:03:32a ..S.R 233,697 228.22 K lvrq09~1.dll Sun Jan 22 2006 6:20:06a ..S.R 235,429 229.91 K lxasrv.dll Mon Jan 30 2006 8:46:08a ..S.R 234,183 228.69 K m028la~1.dll Mon Jan 30 2006 8:36:56a ..S.R 236,003 230.47 K m0lsla~1.dll Sat Jan 28 2006 10:29:06a ..S.R 233,371 227.90 K m2280c~1.dll Wed Feb 8 2006 5:52:20p ..S.R 235,089 229.58 K m482le~1.dll Mon Feb 6 2006 5:46:36p ..S.R 237,108 231.55 K m4ju0e~1.dll Mon Jan 23 2006 7:48:48a ..S.R 236,023 230.49 K m4ls0e~1.dll Mon Feb 6 2006 1:39:38p ..S.R 233,615 228.14 K m4nq0e~1.dll Sun Jan 22 2006 9:39:46a ..S.R 235,051 229.54 K m4pole~1.dll Tue Jan 31 2006 2:38:20p ..S.R 233,935 228.45 K macpxl32.dll Tue Jan 24 2006 8:02:00a ..S.R 236,739 231.19 K magina.dll Sat Jan 28 2006 9:42:10a ..S.R 233,371 227.90 K mal_qic.dll Fri Jan 27 2006 8:54:32a ..S.R 237,198 231.64 K mcstkprp.dll Sat Jan 28 2006 2:35:40p ..S.R 236,187 230.65 K mdiavi32.dll Mon Jan 30 2006 8:39:14a ..S.R 234,183 228.69 K mdltus40.dll Fri Jan 27 2006 4:39:48p ..S.R 233,371 227.90 K mdrecr40.dll Mon Feb 6 2006 8:20:06a ..S.R 234,276 228.79 K mgcans32.dll Sat Jan 28 2006 10:13:26a ..S.R 233,371 227.90 K mgjdbc10.dll Sun Jan 1 2006 2:15:00p ..S.R 234,198 228.71 K mgvcp50.dll Mon Jan 30 2006 8:26:00a ..S.R 234,183 228.69 K mjrepl35.dll Thu Jan 26 2006 8:20:20a ..S.R 236,892 231.34 K mjtime.dll Wed Feb 8 2006 7:46:24a ..S.R 235,089 229.58 K mkexcl40.dll Sat Jan 28 2006 11:14:28a ..S.R 236,386 230.84 K mkjint40.dll Mon Jan 23 2006 11:49:22a ..S.R 235,109 229.60 K mljdbc10.dll Mon Feb 6 2006 1:55:44p ..S.R 237,108 231.55 K mloeacct.dll Wed Jan 25 2006 7:50:50a ..S.R 236,739 231.19 K mp40l9~1.dll Mon Jan 30 2006 8:19:14a ..S.R 234,183 228.69 K mpbsync.dll Wed Feb 8 2006 7:53:32a ..S.R 235,089 229.58 K mpdart32.dll Mon Jan 23 2006 7:41:24a ..S.R 235,109 229.60 K mqidntld.dll Mon Jan 30 2006 8:32:38a ..S.R 234,183 228.69 K mshtml.dll Tue Nov 22 2005 4:49:10p A.... 2,700,288 2.57 M mssystem.dll Tue Jan 24 2006 7:49:32a ..S.R 236,739 231.19 K msvcp71.dll Tue Jan 24 2006 7:23:30p A.... 499,712 488.00 K msvcr71.dll Tue Jan 24 2006 7:23:30p A.... 348,160 340.00 K mtpi32.dll Mon Jan 30 2006 7:58:14a ..S.R 234,183 228.69 K mucans32.dll Sat Jan 28 2006 2:01:58p ..S.R 235,569 230.05 K mv00l9~1.dll Tue Feb 7 2006 2:24:58p ..S.R 235,696 230.17 K mv02l9~1.dll Wed Jan 25 2006 12:02:24p ..S.R 233,852 228.37 K mv0ql9~1.dll Wed Jan 25 2006 11:56:44a ..S.R 234,002 228.52 K mv40l9~1.dll Sun Jan 22 2006 7:16:46a ..S.R 235,321 229.80 K mv4ml9~1.dll Mon Feb 6 2006 1:35:10p ..S.R 233,822 228.34 K mv60l9~1.dll Thu Jan 26 2006 12:12:10p ..S.R 233,782 228.30 K mv6ml9~1.dll Tue Jan 31 2006 2:33:16p ..S.R 233,832 228.35 K mv88l9~1.dll Tue Feb 7 2006 6:16:10p ..S.R 234,089 228.60 K mvdimap.dll Mon Feb 6 2006 10:17:58a ..S.R 237,108 231.55 K mvj0l9~1.dll Tue Jan 24 2006 7:49:26a ..S.R 233,757 228.28 K mvj8l9~1.dll Mon Jan 30 2006 5:59:10p ..S.R 235,433 229.91 K mvjml9~1.dll Sun Jan 1 2006 2:19:26p ..S.R 235,317 229.80 K mvl2l9~1.dll Sat Jan 28 2006 12:01:50p ..S.R 236,205 230.67 K mvn0l9~1.dll Fri Feb 10 2006 11:56:02a ..S.R 233,777 228.30 K mvn2l9~1.dll Sat Jan 28 2006 10:13:24a ..S.R 234,630 229.13 K mvrql9~1.dll Mon Jan 2 2006 5:24:56p ..S.R 234,198 228.71 K mwrmsg.dll Mon Jan 30 2006 10:07:02a ..S.R 234,183 228.69 K mxrd2x35.dll Thu Feb 9 2006 7:33:10a ..S.R 237,265 231.70 K myxbde40.dll Sat Jan 28 2006 11:59:24a ..S.R 234,966 229.46 K n04sla~1.dll Tue Jan 3 2006 7:52:16a ..S.R 236,657 231.11 K n0l8la~1.dll Tue Feb 7 2006 2:27:34p ..S.R 234,145 228.66 K n4r2le~1.dll Sun Jan 1 2006 7:30:38a ..S.R 235,274 229.76 K nblanui2.dll Sun Jan 1 2006 7:39:42a ..S.R 233,980 228.50 K ngwdev.dll Sat Jan 28 2006 10:37:28a ..S.R 234,966 229.46 K nhdsbcli.dll Tue Jan 3 2006 6:20:00p ..S.R 234,917 229.41 K nrapi32.dll Sat Jan 28 2006 12:06:34p ..S.R 234,966 229.46 K nztevent.dll Fri Jan 27 2006 11:36:58a ..S.R 237,198 231.64 K o0nsla~1.dll Wed Jan 25 2006 7:58:26a ..S.R 234,123 228.63 K o4480e~1.dll Tue Jan 24 2006 8:04:16a ..S.R 233,670 228.19 K o4lu0e~1.dll Thu Jan 26 2006 11:56:18a ..S.R 233,944 228.46 K o4ns0e~1.dll Sat Jan 28 2006 2:27:38p ..S.R 236,941 231.39 K o4pq0e~1.dll Sun Jan 22 2006 6:55:24a ..S.R 234,846 229.34 K o8ns0i~1.dll Mon Jan 30 2006 7:55:04a ..S.R 234,941 229.43 K o8pq0i~1.dll Mon Jan 30 2006 12:04:08p ..S.R 234,183 228.69 K ocffilt.dll Sun Jan 22 2006 6:22:12a ..S.R 234,272 228.78 K ooecnv32.dll Tue Feb 7 2006 2:27:12p ..S.R 233,817 228.34 K opbcconf.dll Thu Jan 26 2006 12:03:52p ..S.R 236,892 231.34 K orbccu32.dll Mon Feb 6 2006 1:35:12p ..S.R 237,108 231.55 K p0n8la~1.dll Sat Jan 28 2006 2:25:24p ..S.R 234,173 228.68 K p0r4la~1.dll Sun Jan 22 2006 7:14:48a ..S.R 235,762 230.23 K p46s0e~1.dll Mon Jan 30 2006 8:25:58a ..S.R 234,947 229.44 K pcnppagn.dll Fri Feb 10 2006 11:56:06a ..S.R 237,265 231.70 K pcrfctrs.dll Sun Jan 1 2006 7:32:56a ..S.R 233,980 228.50 K pdisdecd.dll Thu Jan 26 2006 8:12:28a ..S.R 236,892 231.34 K pirfnet.dll Wed Jan 25 2006 8:04:04a ..S.R 236,739 231.19 K pmrfnet.dll Sat Jan 28 2006 2:29:50p ..S.R 236,187 230.65 K pvgfilt.dll Sat Jan 28 2006 2:23:08p ..S.R 236,187 230.65 K q068la~1.dll Wed Jan 25 2006 7:53:14a ..S.R 234,178 228.69 K q086la~1.dll Tue Jan 3 2006 7:54:28a ..S.R 236,597 231.05 K q0nula~1.dll Mon Jan 30 2006 8:46:06a ..S.R 236,133 230.60 K q0rqla~1.dll Sat Feb 11 2006 9:01:08a ..S.R 234,043 228.55 K q4680e~1.dll Fri Jan 27 2006 8:59:58a ..S.R 233,680 228.20 K qc680e~1.dll Thu Feb 9 2006 7:41:54a ..S.R 237,265 231.70 K qv68la~1.dll Sat Jan 28 2006 2:16:30p ..S.R 236,187 230.65 K r06ula~1.dll Fri Jan 27 2006 3:32:14p ..S.R 237,198 231.64 K r0r6la~1.dll Sat Jan 28 2006 2:29:48p ..S.R 234,093 228.61 K r46u0e~1.dll Sun Jan 22 2006 8:13:26a ..S.R 236,015 230.48 K rdfsaps.dll Mon Jan 30 2006 8:41:32a ..S.R 234,183 228.69 K rdschap.dll Fri Feb 10 2006 5:23:40p ..S.R 233,705 228.23 K rkstls.dll Sun Jan 1 2006 7:26:08a ..S.R 233,980 228.50 K rosapi32.dll Tue Jan 24 2006 7:44:46a ..S.R 236,739 231.19 K rpched32.dll Sun Jan 29 2006 7:46:48a ..S.R 236,590 231.04 K rrched20.dll Wed Jan 25 2006 12:05:16p ..S.R 236,739 231.19 K rvsapi32.dll Sun Jan 1 2006 4:09:18p ..S.R 234,198 228.71 K ryfsaps.dll Sun Jan 22 2006 7:16:48a ..S.R 234,272 228.78 K rysppp.dll Tue Jan 3 2006 7:45:18a ..S.R 234,917 229.41 K s0pula~1.dll Sun Jan 29 2006 7:46:48a ..S.R 234,233 228.74 K s8pu0i~1.dll Sat Jan 28 2006 5:25:04p ..S.R 236,187 230.65 K scnceng.dll Tue Jan 24 2006 8:04:18a ..S.R 236,739 231.19 K sdfolder.dll Sat Jan 28 2006 10:32:20a ..S.R 234,966 229.46 K semstore.dll Thu Jan 26 2006 11:52:24a ..S.R 236,892 231.34 K sfrrun.dll Wed Jan 25 2006 7:58:26a ..S.R 236,739 231.19 K shrmdll.dll Sat Jan 28 2006 10:16:04a ..S.R 233,371 227.90 K sklwid.dll Thu Jan 26 2006 11:58:40a ..S.R 236,892 231.34 K smndmail.dll Sat Jan 28 2006 2:04:10p ..S.R 235,569 230.05 K spclient.dll Mon Jan 23 2006 7:43:40a ..S.R 235,109 229.60 K stell32.dll Sat Jan 28 2006 12:08:48p ..S.R 234,966 229.46 K stfolder.dll Mon Jan 30 2006 12:10:02p ..S.R 235,433 229.91 K suclogon.dll Sun Jan 22 2006 6:48:00a ..S.R 234,272 228.78 K swftpub.dll Mon Jan 30 2006 8:34:50a ..S.R 234,183 228.69 K sxcpack1.dll Tue Jan 31 2006 2:28:40p ..S.R 237,288 231.73 K sxlgntfy.dll Tue Feb 7 2006 3:32:54p ..S.R 234,089 228.60 K t2embed.dll Thu Nov 24 2005 4:54:16p A.... 163,600 159.77 K t48u0e~1.dll Tue Jan 31 2006 3:05:48p ..S.R 233,740 228.26 K tkpisrv.dll Sun Jan 22 2006 8:15:40a ..S.R 235,051 229.54 K tppmon.dll Thu Feb 9 2006 7:35:18a ..S.R 237,265 231.70 K ukbmon.dll Sat Jan 28 2006 11:54:38a ..S.R 234,966 229.46 K ull.dll Mon Jan 2 2006 7:31:18a ..S.R 235,983 230.45 K uxl.dll Sat Jan 28 2006 2:37:50p ..S.R 236,187 230.65 K viipxspx.dll Wed Feb 8 2006 7:48:54a ..S.R 235,089 229.58 K wahtcpip.dll Sat Jan 28 2006 12:01:52p ..S.R 234,966 229.46 K wcvcore.dll Mon Feb 6 2006 1:29:46p ..S.R 237,108 231.55 K weauserv.dll Tue Jan 3 2006 6:15:04p ..S.R 234,917 229.41 K wgvcore.dll Fri Jan 27 2006 4:42:28p ..S.R 233,371 227.90 K wlhtcpip.dll Tue Jan 31 2006 2:35:56p ..S.R 237,288 231.73 K wovcore.dll Mon Jan 30 2006 8:21:38a ..S.R 234,183 228.69 K wpv9vcm.dll Thu Jan 26 2006 8:07:30a ..S.R 236,892 231.34 K wqbvw.dll Mon Feb 6 2006 1:51:20p ..S.R 237,108 231.55 K wqnsock.dll Mon Jan 30 2006 8:28:22a ..S.R 234,183 228.69 K wqpcd.dll Sun Feb 12 2006 8:04:48a ..S.R 237,265 231.70 K wsnfax.dll Tue Jan 24 2006 8:17:12a ..S.R 236,739 231.19 K wspcd.dll Wed Jan 25 2006 7:53:16a ..S.R 236,739 231.19 K wzcltui.dll Mon Jan 30 2006 8:14:48a ..S.R 234,183 228.69 K xeeedzip.dll Tue Jan 3 2006 7:54:32a ..S.R 234,917 229.41 K 340 items found: 340 files (332 H/S), 0 directories. Total of file sizes: 82,230,873 bytes 78.42 M Locate .tmp files: C:\WINNT\SYSTEM32\ atmtdd~1.tmp Fri Jan 27 2006 8:59:46a A.... 0 0.00 K 1 item found: 1 file, 0 directories. Total of file sizes: 0 bytes 0.00 K ********************************************************************************** Directory Listing of system files: Volume in drive C has no label. Volume Serial Number is 88FB-6B40 Directory of C:\WINNT\System32 02/12/2006 11:23a <DIR> . 02/12/2006 11:23a <DIR> .. 02/12/2006 08:21a 237,265 dkintf.dll 02/12/2006 08:21a 233,317 g8lm0i31e8.dll 02/12/2006 08:08a 233,722 lv4u09h9e.dll 02/12/2006 08:06a 234,281 azasla571d.dll 02/12/2006 08:04a 237,265 wqpcd.dll 02/11/2006 06:23p 233,625 k8noli5318.dll 02/11/2006 03:53p 237,265 enp8l17u1.dll 02/11/2006 09:03a 237,265 cjfgnt.dll 02/11/2006 09:03a 233,697 lvr8099ue.dll 02/11/2006 09:01a 234,043 q0rqla951d.dll 02/11/2006 08:58a 234,170 ir48l5hu1.dll 02/10/2006 06:00p 233,705 jtlm0731e.dll 02/10/2006 05:23p 233,705 RDSCHAP.DLL 02/10/2006 11:58a 234,076 azaolah31d4.dll 02/10/2006 11:56a 237,265 pcnppagn.dll 02/10/2006 11:56a 233,777 mvn0l95m1.dll 02/10/2006 11:53a 237,265 lcpcx11n.dll 02/10/2006 07:19a 233,510 aza4l5lq1.dll 02/09/2006 07:41a 237,265 qC680ejueho80.dll 02/09/2006 07:39a 233,825 i4nmle511h.dll 02/09/2006 07:37a 237,265 dnbkscin.dll 02/09/2006 07:37a 233,908 h02olaf31d2.dll 02/09/2006 07:35a 237,265 tppmon.dll 02/09/2006 07:35a 233,354 fpj2031oe.dll 02/09/2006 07:33a 237,265 Mxrd2x35.dll 02/09/2006 07:33a 233,817 aza80cfuef280.dll 02/09/2006 07:29a 237,265 dqserver.dll 02/08/2006 05:52p 235,089 m2280cfuef280.dll 02/08/2006 07:58a 235,089 dLd8.dll 02/08/2006 07:55a 236,599 i0jqla151d.dll 02/08/2006 07:53a 235,089 mpbsync.dll 02/08/2006 07:53a 237,135 azasla371d.dll 02/08/2006 07:51a 235,089 ESUtil.dll 02/08/2006 07:51a 236,539 l0n4la5q1d.dll 02/08/2006 07:48a 235,089 VIIPXSPX.DLL 02/08/2006 07:48a 236,794 ir0sl5d71.dll 02/08/2006 07:46a 235,089 MJTIME.DLL 02/08/2006 07:44a <DIR> dllcache 02/07/2006 06:16p 234,089 mv88l9lu1.dll 02/07/2006 03:35p 234,089 cpnfmsp.dll 02/07/2006 03:32p 234,089 sxlgntfy.dll 02/07/2006 03:32p 234,327 h8l20i3oe8.dll 02/07/2006 03:28p 233,817 fpl4033qe.dll 02/07/2006 02:37p 233,817 cuonts.dll 02/07/2006 02:32p 233,834 azaml9111.dll 02/07/2006 02:32p 233,817 kP80lelm1hqa.dll 02/07/2006 02:30p 234,570 irpql5751.dll 02/07/2006 02:29p 233,817 batsprx2.dll 02/07/2006 02:27p 234,145 n0l8la3u1d.dll 02/07/2006 02:27p 233,817 OOECNV32.DLL 02/07/2006 02:24p 235,696 mv00l9dm1.dll 02/07/2006 02:24p 233,817 igxrtmgr.dll 02/07/2006 07:31a 233,817 ir4ol5h31.dll 02/06/2006 05:46p 237,108 m482lelo1hqc.dll 02/06/2006 01:55p 237,108 mljdbc10.dll 02/06/2006 01:53p 233,785 j4p0le7m1h.dll 02/06/2006 01:51p 237,108 wqbvw.dll 02/06/2006 01:51p 234,015 irlql5351.dll 02/06/2006 01:39p 237,108 hgtplug.dll 02/06/2006 01:39p 233,615 m4ls0e37eh.dll 02/06/2006 01:37p 234,311 aza8la1u1d.dll 02/06/2006 01:35p 237,108 orbccu32.dll 02/06/2006 01:35p 233,822 mv4ml9h11.dll 02/06/2006 01:32p 237,108 jM0slad71d0.dll 02/06/2006 01:30p 233,371 irlul5391.dll 02/06/2006 01:29p 237,108 wcvcore.dll 02/06/2006 01:29p 234,255 jrj0251mg.dll 02/06/2006 10:22a 237,108 cxyptsvc.dll 02/06/2006 10:22a 237,181 fpp0037me.dll 02/06/2006 10:20a 233,657 lvj8091ue.dll 02/06/2006 10:17a 237,108 mvdimap.dll 02/06/2006 10:17a 234,210 ir2ul5f91.dll 02/06/2006 10:15a 237,108 dgbkpwr.dll 02/06/2006 08:59a 234,276 fp0q03d5e.dll 02/06/2006 08:20a 234,276 mdrecr40.dll 02/05/2006 07:25a 233,769 ir08l5du1.dll 02/05/2006 07:24a 237,108 camaddin.dll 02/04/2006 05:27p 236,462 azaq0i75e8.dll 01/31/2006 03:24p 237,288 k4pmle711h.dll 01/31/2006 03:05p 233,740 t48u0el9ehq.dll 01/31/2006 03:03p 233,522 l84q0ih5e84.dll 01/31/2006 03:00p 233,875 j4n2le5o1h.dll 01/31/2006 02:42p 234,063 l0l6la3s1d.dll 01/31/2006 02:38p 233,935 m4pole731h.dll 01/31/2006 02:35p 237,288 wLhtcpip.dll 01/31/2006 02:35p 237,300 d2j00c1mef.dll 01/31/2006 02:33p 233,832 mv6ml9j11.dll 01/31/2006 02:31p 234,331 aza8la5u1d.dll 01/31/2006 02:28p 237,288 SXCPACK1.DLL 01/30/2006 05:59p 235,433 mvj8l91u1.dll 01/30/2006 12:10p 235,433 stfolder.dll 01/30/2006 12:04p 234,183 o8pq0i75e8.dll 01/30/2006 10:07a 234,183 mwrmsg.dll 01/30/2006 08:46a 234,183 LXASRV.DLL 01/30/2006 08:46a 236,133 q0nula591d.dll 01/30/2006 08:43a 234,183 duskmon.dll 01/30/2006 08:43a 234,186 fp0003dme.dll 01/30/2006 08:41a 234,183 rdfsaps.dll 01/30/2006 08:41a 235,613 j0l4la3q1d.dll 01/30/2006 08:39a 234,183 mdiavi32.dll 01/30/2006 08:39a 235,213 azas0e17eh.dll 01/30/2006 08:36a 234,183 debkcinf.dll 01/30/2006 08:36a 236,003 m028lafu1d28.dll 01/30/2006 08:34a 234,183 swftpub.dll 01/30/2006 08:34a 234,897 k4js0e17eh.dll 01/30/2006 08:32a 234,183 mqidntld.dll 01/30/2006 08:32a 235,162 lvpu0979e.dll 01/30/2006 08:30a 234,183 fYxmapi.dll 01/30/2006 08:30a 234,812 lv2609fse.dll 01/30/2006 08:28a 234,183 wqnsock.dll 01/30/2006 08:28a 234,296 fpjm0311e.dll 01/30/2006 08:25a 234,183 mgvcp50.dll 01/30/2006 08:25a 234,947 p46s0ej7eho.dll 01/30/2006 08:23a 234,183 hofinst.dll 01/30/2006 08:23a 235,883 j00slad71d0.dll 01/30/2006 08:21a 234,183 wovcore.dll 01/30/2006 08:21a 235,768 ir8ql5l51.dll 01/30/2006 08:19a 234,183 mp40l9hm1.dll 01/30/2006 08:19a 234,586 fp0403dqe.dll 01/30/2006 08:17a 234,183 impeers.dll 01/30/2006 08:16a 234,271 k8800ilme8qa0.dll 01/30/2006 08:14a 234,183 wzcltui.dll 01/30/2006 08:14a 235,508 ir2ol5f31.dll 01/30/2006 07:58a 234,183 mTpi32.dll 01/30/2006 07:58a 234,997 l4j80e1ueh.dll 01/30/2006 07:55a 234,183 ahsmib.dll 01/30/2006 07:55a 234,941 o8ns0i57e8.dll 01/29/2006 07:51a 236,590 kVpm0i71e8.dll 01/29/2006 07:48a 236,590 CXMCAT.DLL 01/29/2006 07:48a 237,053 fp6403jqe.dll 01/29/2006 07:46a 236,590 rpched32.dll 01/29/2006 07:46a 234,233 s0pula791d.dll 01/29/2006 07:43a 236,590 iIssvcs.dll 01/28/2006 05:25p 236,187 s8pu0i79e8.dll 01/28/2006 02:39p 236,187 eS02ledo1h0c.dll 01/28/2006 02:37p 236,187 uxl.dll 01/28/2006 02:37p 236,891 j40s0ed7eh0.dll 01/28/2006 02:35p 236,187 mcstkprp.dll 01/28/2006 02:35p 234,055 irj6l51s1.dll 01/28/2006 02:33p 236,187 fa8m03l1e.dll 01/28/2006 02:33p 236,991 k4080edueh080.dll 01/28/2006 02:29p 236,187 pmrfnet.dll 01/28/2006 02:29p 234,093 r0r6la9s1d.dll 01/28/2006 02:27p 236,187 khdsp.dll 01/28/2006 02:27p 236,941 o4ns0e57eh.dll 01/28/2006 02:25p 236,187 CPUSAPI.DLL 01/28/

[Siggyx]

Close any programs you have open since this step requires a reboot.

From the l2mfix folder on your desktop, double click l2mfix.bat and select option #2 for Run Fix by typing 2 and then pressing enter. It will process then start. Your desktop and icons will disappear (this is normal). L2mfix will continue to scan your computer and when it's finished, it will be ready for a reboot. Press any key to reboot. After the reboot notepad will open with a log. Copy the contents of that log and paste it back into this thread, along with a new hijackthis log.

IMPORTANT: Do NOT run any other files in the l2mfix folder unless you are asked to do so! Do Not run in safe mode!!
If after the reboot the log does not open double click on it in the l2mfix folder.

[asoares]

L2mfix 010406
Creating Account.
The command completed successfully.


Adding Administrative privleges.
The command completed successfully.

Checking for L2MFix account(0=no 1=yes):
1
Granting SeDebugPrivilege to L2MFIX ... successful
Checking for L2MFix account(0=no 1=yes):
0
Zipping up files for submission:
zip warning: name not matched: dlls\*.*

zip error: Nothing to do! (backup.zip)
updating: backregs/notibac.reg (152 bytes security) (deflated 85%)
updating: backregs/shell.reg (152 bytes security) (deflated 74%)

****Before rebooting from L2mFIX it said that I should run HJT and remove "020" but I didnt yet b/c I wanted you to see it first and suggest me what to do.


Logfile of HijackThis v1.99.1
Scan saved at 5:24:20 PM, on 2/12/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\WINNT\System32\Ati2evxx.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\Atiptaxx.exe
C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb03.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\WINNT\system32\ctfmon.exe
C:\WINNT\system32\ntvdm.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\unzipped\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [myupdates] c:\windows\myupdates.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - Startup: Event Reminder.lnk = C:\pmw\PMREMIND.EXE
O4 - Global Startup: Trend Micro Anti-Spyware.lnk = C:\Program Files\Trend Micro\Tmas\Tmas.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.c...ropper1_7us.cab
O20 - Winlogon Notify: AdminDebug - C:\WINNT\system32\fp6o03j3e.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE

[Siggyx]

Follow the steps that you are prompted with ( in other words run step 2 again) then post a new log.

[asoares]

The file (fp6o03j3e.dll) that needs to be deleted is in the /system32/winlogon.exe file and HJT says its a shared file that is why it isnt deleting it. It suggests to delete on reboot but wont do it cause "explore" cannot locate the system32 folder! This is getting very frustrated!

[Siggyx]

I know this can be frustraing, it will take a few more steps. Just out of curiosity what language is your OS? Please post a new hijackthis log. I should be bacl online at about 7:00am est tonight.

[asoares]

Ok I got rid of the that file "fp6o03j3e.dll',, but I got 2 new ones... "aza0037me.dll" and "cidaemon.exe" same place,, system32 folder..
new file...hjt..
Logfile of HijackThis v1.99.1
Scan saved at 5:52:35 PM, on 2/14/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\WINNT\System32\Ati2evxx.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINNT\System32\cisvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\Atiptaxx.exe
C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb03.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\WINNT\system32\ctfmon.exe
C:\WINNT\System32\cidaemon.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\unzipped\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [myupdates] c:\windows\myupdates.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - Startup: Event Reminder.lnk = C:\pmw\PMREMIND.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Trend Micro Anti-Spyware.lnk = C:\Program Files\Trend Micro\Tmas\Tmas.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.c...ropper1_7us.cab
O20 - Winlogon Notify: App Paths - C:\WINNT\system32\aza0037me.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE