[Resolved] Slow Startup and Slowdowns while using PC

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:44:57 AM, on 4/5/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Common Files\AOL\1185584072\ee\aolsoftware.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Weather Watcher Live\ww.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Program Files\Digsby\lib\digsby-app.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\System32\rundll32.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://2003.bdkmail.com/exchange/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.us.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn5\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: OToolbarHelper Class - {EAD3A971-6A23-4246-8691-C9244E858967} - C:\Program Files\PayPal\PayPal Plug-In\PayPalHelper.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn5\yt.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O3 - Toolbar: PayPal Plug-In - {DC0F2F93-27FA-4f84-ACAA-9416F90B9511} - C:\Program Files\PayPal\PayPal Plug-In\OToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1185584072\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKCU\..\Run: [WeatherWatcherLive] "C:\Program Files\Weather Watcher Live\ww.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [DelayShred] "c:\program files\mcafee\mshr\ShrCL.EXE" /P7 /q C:\Users\PAULPA~1\AppData\Local\Temp\Low\HSPERF~1.SH! C:\Users\PAULPA~1\AppData\Local\Temp\HSPERF~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\FEED_1~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_4_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\ZVIERC5L\AUTOSN~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_3_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_5_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\AIM_UA~1.SH! (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [DelayShred] "c:\program files\mcafee\mshr\ShrCL.EXE" /P7 /q C:\Users\PAULPA~1\AppData\Local\Temp\Low\HSPERF~1.SH! C:\Users\PAULPA~1\AppData\Local\Temp\HSPERF~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\FEED_1~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_4_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\ZVIERC5L\AUTOSN~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_3_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_5_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\AIM_UA~1.SH! (User 'Default user')
O4 - Startup: digsby.lnk = C:\Program Files\Digsby\digsby.exe
O4 - Startup: SpeedFan.lnk = C:\Program Files\SpeedFan\speedfan.exe
O8 - Extra context menu item: Subscribe in NewsGator Inbox - C:\Program Files\NewsGator\Inbox\addref.htm
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O9 - Extra 'Tools' menuitem: &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - (no file)
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {00C0A1F2-D492-4DBA-A8E2-76CB1B791724} (TNPLDownloader Control) - https://dtwx2.accuweather.com/tnpl_awda/cli…LDownloader.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {0B72CCA4-5F11-11D0-9CB5-0000C0EC9FDB} (Street Technologies ActiveX Control Object) - http://ftp.newaol.com/pub/sr-test/streetnoagent7.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
O16 - DPF: {138E6DC9-722B-4F4B-B09D-95D191869696} (Bebo Uploader Control) - http://www.bebo.com/files/BeboUploader.5.1.4.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/Facebo…toUploader3.cab
O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) - http://chill.comcast.net/GameShell/online/…h2.1.0.0.68.cab
O16 - DPF: {6824D897-F7E1-4E41-B84B-B1D3FA4BF1BD} (PCPitstop AntiVirus) - http://utilities.pcpitstop.com/Exterminate…opAntiVirus.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1235329760844
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-27-0.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://chill.comcast.net/Gameshell/GameHos…ronGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O16 - DPF: {FF1CD9A3-00CD-45C1-8182-4EEC229A182D} (Plaxo Auto-Import Utility) - http://www.plaxo.com/activex/plx_upldr-2k-xp.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll
O20 - AppInit_DLLs: eNetHook.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\WildGames\Game Console - WildGames\GameConsoleService.exe
O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VirusScan\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VirusScan\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VirusScan\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\supportsoft\bin\ssrc.exe
O23 - Service: SupportSoft Repair Service (providercomcast) (tgsrvc_providercomcast) - SupportSoft, Inc. - C:\Program Files\providerComcast\bin\tgsrvc.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files\Launch Manager\WisLMSvc.exe

–
End of file - 15109 bytes
________________________________________________________________________________
________________________________________

StartupList report, 4/5/2009, 11:45:53 AM
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows Vista SP1 (WinNT 6.00.1905)
Detected: Internet Explorer v7.00 (7.00.6001.18000)
* Using default options
==================================================

Running processes:

C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Common Files\AOL\1185584072\ee\aolsoftware.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Weather Watcher Live\ww.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Program Files\Digsby\lib\digsby-app.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\System32\rundll32.exe
C:\Windows\system32\NOTEPAD.EXE

————————————————–

Listing of startup folders:

Shell folders Startup:
[C:\Users\Paul Palumbo Jr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup]
digsby.lnk = C:\Program Files\Digsby\digsby.exe
SpeedFan.lnk = C:\Program Files\SpeedFan\speedfan.exe

————————————————–

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\Windows\system32\userinit.exe,

————————————————–

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

itype = "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
HostManager = C:\Program Files\Common Files\AOL\1185584072\ee\AOLSoftware.exe
mcagent_exe = C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
IntelliPoint = "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
Ad-Watch = C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

————————————————–

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Sidebar = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
ehTray.exe = C:\Windows\ehome\ehTray.exe
TomTomHOME.exe = "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
WeatherWatcherLive = "C:\Program Files\Weather Watcher Live\ww.exe"

————————————————–

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[OptionalComponents]
=

————————————————–

Load/Run keys from C:\Windows\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=eNetHook.dll

————————————————–

Shell & screensaver key from C:\Windows\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=explorer.exe
SCRNSAVE.EXE=
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

————————————————–


Enumerating Browser Helper Objects:

AcroIEHelperStub - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll - {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
(no name) - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll - {3049C3E9-B461-4BC5-8870-4C09146192CA}
WormRadar.com IESiteBlocker.NavFilter - (no file) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
(no name) - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29}
(no name) - C:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - C:\Program Files\Yahoo!\common\yiesrvc.dll - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B}
(no name) - C:\Program Files\Java\jre6\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
AOL Toolbar Launcher - (no file) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9}
scriptproxy - C:\Program Files\McAfee\VirusScan\scriptsn.dll - {7DB2D5A0-7241-4E79-B68D-6309F01C5231}
(no name) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
(no name) - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}
(no name) - C:\Program Files\Java\jre6\bin\jp2ssv.dll - {DBC80044-A445-435b-BC74-9C25C1C588A9}
Google Gears Helper - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53}
(no name) - C:\Program Files\Windows Live\Toolbar\wltcore.dll - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}
(no name) - C:\Program Files\PayPal\PayPal Plug-In\PayPalHelper.dll - {EAD3A971-6A23-4246-8691-C9244E858967}
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}

————————————————–

Enumerating Task Scheduler jobs:

Ad-Aware Update (Weekly).job
AutoSmartDefrag.job
AWC AutoCare.job
AWC Startup.job
Google Software Updater.job
GoogleUpdateTaskMachine.job
McDefragTask.job
McQcTask.job

————————————————–

Enumerating Download Program Files:

[TNPLDownloader Control]
InProcServer32 = C:\Windows\DOWNLO~1\TNPLDO~1.OCX
CODEBASE = https://dtwx2.accuweather.com/tnpl_awda/cli…LDownloader.cab

[QuickTime Object]
InProcServer32 = C:\Program Files\QuickTime\QTPlugin.ocx
CODEBASE = http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab

[Street Technologies ActiveX Control Object]
InProcServer32 = C:\Windows\Downloaded Program Files\iestm32.dll
CODEBASE = http://ftp.newaol.com/pub/sr-test/streetnoagent7.cab

[PCPitstop Utility]
InProcServer32 = C:\Windows\Downloaded Program Files\PCPitstop.dll
CODEBASE = http://www.pcpitstop.com/betapit/PCPitStop.CAB

[Bebo Uploader Control]
InProcServer32 = C:\Windows\Downloaded Program Files\BeboUploader.ocx
CODEBASE = http://www.bebo.com/files/BeboUploader.5.1.4.cab

[Shockwave ActiveX Control]
InProcServer32 = C:\Windows\system32\Adobe\Director\SwDir.dll
CODEBASE = http://download.macromedia.com/pub/shockwa…director/sw.cab

[MySpace Uploader Control]
InProcServer32 = C:\Windows\Downloaded Program Files\MySpaceUploader.ocx
CODEBASE = http://lads.myspace.com/upload/MySpaceUploader1006.cab

[Facebook Photo Uploader 4 Control]
InProcServer32 = C:\Windows\Downloaded Program Files\ImageUploader4.ocx
CODEBASE = http://upload.facebook.com/controls/Facebo…toUploader3.cab

[CPlayFirstDinerDash2Control Object]
InProcServer32 = C:\Windows\Downloaded Program Files\DinerDash2.1.0.0.68.dll
CODEBASE = http://chill.comcast.net/GameShell/online/…h2.1.0.0.68.cab

[PCPitstop AntiVirus]
InProcServer32 = C:\Windows\Downloaded Program Files\pcpitstopAntiVirus.dll
CODEBASE = http://utilities.pcpitstop.com/Exterminate…opAntiVirus.dll

[MUWebControl Class]
InProcServer32 = C:\Windows\system32\muweb.dll
CODEBASE = http://update.microsoft.com/microsoftupdat…b?1235329760844

[HP Download Manager]
InProcServer32 = C:\Windows\Downloaded Program Files\HPDEXAXO.dll
CODEBASE = https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab

[{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}]
CODEBASE = http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab

[IGDTester Class]
InProcServer32 = C:\Windows\Downloaded Program Files\igdtoolx.dll
CODEBASE = http://download.microsoft.com/download/B/3…44/igdtoolx.cab

[EPUImageControl Class]
InProcServer32 = C:\Windows\Downloaded Program Files\EPUWALcontrol.dll
CODEBASE = http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-27-0.cab

[Oberon Flash Game Host]
InProcServer32 = C:\Windows\Downloaded Program Files\OberonGameHost.dll
CODEBASE = http://chill.comcast.net/Gameshell/GameHos…ronGameHost.cab

[Shockwave Flash Object]
InProcServer32 = C:\Windows\system32\Macromed\Flash\Flash9f.ocx
CODEBASE = http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab

[Plaxo Auto-Import Utility]
InProcServer32 = C:\Windows\system32\plx_upldr.dll
CODEBASE = http://www.plaxo.com/activex/plx_upldr-2k-xp.cab

[PCPitstop Exam]
InProcServer32 = C:\Windows\Downloaded Program Files\pcpitstop2.dll
CODEBASE = http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll

————————————————–

Enumerating Winsock LSP files:

NameSpace #1: C:\Windows\system32\NLAapi.dll
NameSpace #2: C:\Windows\system32\napinsp.dll
NameSpace #3: C:\Windows\system32\pnrpnsp.dll
NameSpace #4: C:\Windows\system32\pnrpnsp.dll

————————————————–

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:\Windows\system32\webcheck.dll

————————————————–
End of report, 11,291 bytes
Report generated in 0.140 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

Hello TomK,
Thanks for responding and your assistance.

I performed your steps and downloads… and restarted once completed both ATF Cleaner and Malwarebytes. To be expected – the start-up was slower. However once logged into Vista startup programs and overall speed was not increased nor decreased any.

I've attached the logfile from Malware Bytes and below is a new HjackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:52:16 PM, on 4/11/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Weather Watcher Live\ww.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Program Files\Digsby\lib\digsby-app.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\WerCon.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://2003.bdkmail.com/exchange/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.us.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn5\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: OToolbarHelper Class - {EAD3A971-6A23-4246-8691-C9244E858967} - C:\Program Files\PayPal\PayPal Plug-In\PayPalHelper.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn5\yt.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O3 - Toolbar: PayPal Plug-In - {DC0F2F93-27FA-4f84-ACAA-9416F90B9511} - C:\Program Files\PayPal\PayPal Plug-In\OToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKCU\..\Run: [WeatherWatcherLive] "C:\Program Files\Weather Watcher Live\ww.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [DelayShred] "c:\program files\mcafee\mshr\ShrCL.EXE" /P7 /q C:\Users\PAULPA~1\AppData\Local\Temp\Low\HSPERF~1.SH! C:\Users\PAULPA~1\AppData\Local\Temp\HSPERF~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\FEED_1~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_4_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\ZVIERC5L\AUTOSN~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_3_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_5_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\AIM_UA~1.SH! (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [DelayShred] "c:\program files\mcafee\mshr\ShrCL.EXE" /P7 /q C:\Users\PAULPA~1\AppData\Local\Temp\Low\HSPERF~1.SH! C:\Users\PAULPA~1\AppData\Local\Temp\HSPERF~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\FEED_1~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_4_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\ZVIERC5L\AUTOSN~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_3_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\RSS_5_~1.SH! C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\Content.IE5\TILP85DM\AIM_UA~1.SH! (User 'Default user')
O4 - Startup: digsby.lnk = C:\Program Files\Digsby\digsby.exe
O4 - Startup: SpeedFan.lnk = C:\Program Files\SpeedFan\speedfan.exe
O8 - Extra context menu item: Subscribe in NewsGator Inbox - C:\Program Files\NewsGator\Inbox\addref.htm
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O9 - Extra 'Tools' menuitem: &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - (no file)
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {00C0A1F2-D492-4DBA-A8E2-76CB1B791724} (TNPLDownloader Control) - https://dtwx2.accuweather.com/tnpl_awda/cli…LDownloader.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {0B72CCA4-5F11-11D0-9CB5-0000C0EC9FDB} (Street Technologies ActiveX Control Object) - http://ftp.newaol.com/pub/sr-test/streetnoagent7.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
O16 - DPF: {138E6DC9-722B-4F4B-B09D-95D191869696} (Bebo Uploader Control) - http://www.bebo.com/files/BeboUploader.5.1.4.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/Facebo…toUploader3.cab
O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) - http://chill.comcast.net/GameShell/online/…h2.1.0.0.68.cab
O16 - DPF: {6824D897-F7E1-4E41-B84B-B1D3FA4BF1BD} (PCPitstop AntiVirus) - http://utilities.pcpitstop.com/Exterminate…opAntiVirus.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1235329760844
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-27-0.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://chill.comcast.net/Gameshell/GameHos…ronGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O16 - DPF: {FF1CD9A3-00CD-45C1-8182-4EEC229A182D} (Plaxo Auto-Import Utility) - http://www.plaxo.com/activex/plx_upldr-2k-xp.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll
O20 - AppInit_DLLs: eNetHook.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\WildGames\Game Console - WildGames\GameConsoleService.exe
O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VirusScan\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VirusScan\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VirusScan\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\supportsoft\bin\ssrc.exe
O23 - Service: SupportSoft Repair Service (providercomcast) (tgsrvc_providercomcast) - SupportSoft, Inc. - C:\Program Files\providerComcast\bin\tgsrvc.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files\Launch Manager\WisLMSvc.exe

–
End of file - 15170 bytes

Below is the log as well as attached

——————–\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Home Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Genuine Intel® CPU T2060 @ 1.60GHz )
BIOS : Ver 1.00PARTTBL1
USER : Paul Palumbo Jr ( Not Administrator ! )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:51 Go (Free:6 Go)
D:\ (Local Disk) - NTFS - Total:51 Go (Free:14 Go)
E:\ (CD or DVD)
F:\ (USB) - NTFS - Total:3935 Mo (Free:0 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( Sat 04/11/2009|22:57 )

[ UAC => 0 ]

——————–\\ Listing folders in Local

[03/25/2007|01:01] C:\Users\PAULPA~1\AppData\Local\ {3248F0A6-6813-11D6-A77B-00B0D0150010}
[04/11/2009|05:39] C:\Users\PAULPA~1\AppData\Local\ Adobe
[04/11/2009|01:36] C:\Users\PAULPA~1\AppData\Local\ AOL
[06/06/2007|11:40] C:\Users\PAULPA~1\AppData\Local\ AOL OCP
[07/14/2007|12:03] C:\Users\PAULPA~1\AppData\Local\ Apple
[07/15/2007|09:26] C:\Users\PAULPA~1\AppData\Local\ Apple Computer
[03/11/2007|02:26] C:\Users\PAULPA~1\AppData\Local\ Application Data
[04/15/2007|09:43] C:\Users\PAULPA~1\AppData\Local\ Apps
[03/17/2009|08:18] C:\Users\PAULPA~1\AppData\Local\ BuildAGadget Content
[08/08/2008|11:33] C:\Users\PAULPA~1\AppData\Local\ Citrix
[02/22/2009|04:34] C:\Users\PAULPA~1\AppData\Local\1,356 d3d9caps.dat
[03/15/2009|01:37] C:\Users\PAULPA~1\AppData\Local\129,024 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[04/30/2007|07:47] C:\Users\PAULPA~1\AppData\Local\ Deployment
[04/10/2009|09:47] C:\Users\PAULPA~1\AppData\Local\ Digsby
[11/08/2008|01:04] C:\Users\PAULPA~1\AppData\Local\ DNA
[07/19/2008|12:11] C:\Users\PAULPA~1\AppData\Local\ Downloaded Installations
[02/23/2009|09:13] C:\Users\PAULPA~1\AppData\Local\103,904 GDIPFONTCACHEV1.DAT
[11/03/2008|09:59] C:\Users\PAULPA~1\AppData\Local\ Geek Squad 24 Hour Computer Support
[04/04/2009|12:40] C:\Users\PAULPA~1\AppData\Local\ Google
[03/11/2007|02:26] C:\Users\PAULPA~1\AppData\Local\ History
[04/11/2009|01:36] C:\Users\PAULPA~1\AppData\Local\4,119,704 IconCache.db
[10/24/2007|12:02] C:\Users\PAULPA~1\AppData\Local\ IM
[12/23/2007|01:12] C:\Users\PAULPA~1\AppData\Local\ IsolatedStorage
[03/16/2008|08:26] C:\Users\PAULPA~1\AppData\Local\ JollyBear
[01/31/2009|01:21] C:\Users\PAULPA~1\AppData\Local\ Kentdome_Technologies
[11/03/2007|12:02] C:\Users\PAULPA~1\AppData\Local\4,096 keyfile3.drm
[03/30/2008|08:44] C:\Users\PAULPA~1\AppData\Local\ Learn2.com
[04/08/2007|10:49] C:\Users\PAULPA~1\AppData\Local\ Magentic
[03/25/2007|12:37] C:\Users\PAULPA~1\AppData\Local\ MCE Deluxe Suite
[04/04/2009|05:17] C:\Users\PAULPA~1\AppData\Local\ Microsoft
[03/18/2007|07:26] C:\Users\PAULPA~1\AppData\Local\ Microsoft Games
[06/01/2008|09:56] C:\Users\PAULPA~1\AppData\Local\ Microsoft Help
[03/11/2007|02:57] C:\Users\PAULPA~1\AppData\Local\ MigWiz
[03/16/2008|02:16] C:\Users\PAULPA~1\AppData\Local\ Mozilla
[05/06/2007|12:25] C:\Users\PAULPA~1\AppData\Local\ MTV Networks
[03/03/2009|12:21] C:\Users\PAULPA~1\AppData\Local\ NewsGator
[01/07/2008|10:32] C:\Users\PAULPA~1\AppData\Local\ Oberon Games
[04/02/2009|07:39] C:\Users\PAULPA~1\AppData\Local\ Plaxo
[03/25/2007|12:37] C:\Users\PAULPA~1\AppData\Local\ PowerCinema
[11/04/2007|12:47] C:\Users\PAULPA~1\AppData\Local\ Powerhouse Games
[09/29/2008|08:15] C:\Users\PAULPA~1\AppData\Local\255 RAExpertHistory.xml
[02/21/2009|12:24] C:\Users\PAULPA~1\AppData\Local\ Stardock
[08/19/2007|11:16] C:\Users\PAULPA~1\AppData\Local\ SupportSoft
[04/11/2009|10:57] C:\Users\PAULPA~1\AppData\Local\ Temp
[03/11/2007|02:26] C:\Users\PAULPA~1\AppData\Local\ Temporary Internet Files
[02/01/2009|12:32] C:\Users\PAULPA~1\AppData\Local\ The Weather Channel
[09/22/2007|02:09] C:\Users\PAULPA~1\AppData\Local\ Thunderbird
[02/16/2008|07:12] C:\Users\PAULPA~1\AppData\Local\ TomTom
[03/11/2007|02:46] C:\Users\PAULPA~1\AppData\Local\ VirtualStore
[02/18/2008|01:33] C:\Users\PAULPA~1\AppData\Local\ WeatherBug
[03/11/2007|11:20] C:\Users\PAULPA~1\AppData\Local\ WindowsUpdate
[01/18/2009|03:10] C:\Users\PAULPA~1\AppData\Local\ WinZip
[12/13/2007|07:18] C:\Users\PAULPA~1\AppData\Local\ Yahoo
[08/29/2008|07:39] C:\Users\PAULPA~1\AppData\Local\ Yahoo!
[12/23/2007|01:12] C:\Users\PAULPA~1\AppData\Local\ Yahoo! Inc
[12/23/2007|01:09] C:\Users\PAULPA~1\AppData\Local\ Yahoo!_Inc

——————–\\ Scheduled Tasks located in C:\Windows\Tasks

[04/11/2009 05:01 PM][–a——] C:\Windows\tasks\AWC AutoCare.job
[04/06/2009 07:18 PM][–a——] C:\Windows\tasks\Ad-Aware Update (Weekly).job
[04/11/2009 01:39 PM][–a——] C:\Windows\tasks\AWC Startup.job
[04/11/2009 01:39 PM][–a——] C:\Windows\tasks\AutoSmartDefrag.job
[04/11/2009 10:44 PM][–a——] C:\Windows\tasks\Google Software Updater.job
[04/11/2009 06:05 PM][–a——] C:\Windows\tasks\GoogleUpdateTaskMachine.job
[03/15/2009 01:43 AM][–a——] C:\Windows\tasks\McDefragTask.job
[03/01/2009 02:00 AM][–a——] C:\Windows\tasks\McQcTask.job
[04/11/2009 01:39 PM][–ah—–] C:\Windows\tasks\SA.DAT
[04/11/2009 01:37 PM][–a——] C:\Windows\tasks\SCHEDLGU.TXT

——————–\\ Listing Folders in C:\ProgramData

[02/18/2009|07:49] C:\ProgramData\ {51019853-129C-4EDE-9030-D5FD7BBD9AD0}
[03/23/2009|07:16] C:\ProgramData\ {7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[02/21/2009|12:08] C:\ProgramData\ {B159C29F-4EA9-4DB1-AB62-6E36285A00B0}
[02/19/2009|12:23] C:\ProgramData\ {B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
[02/19/2009|12:28] C:\ProgramData\ {D5ABFFAD-D592-4F98-B02B-587125B4801F}
[02/19/2009|12:44] C:\ProgramData\ {FCCD3ACF-B2F9-4087-B2A4-0DB5FADB9C32}
[03/21/2009|01:28] C:\ProgramData\ Adobe
[02/22/2009|05:00] C:\ProgramData\ AOL
[05/21/2008|08:00] C:\ProgramData\ AOL Downloads
[06/06/2007|11:40] C:\ProgramData\ AOL OCP
[08/15/2008|01:19] C:\ProgramData\ Apple
[01/22/2009|09:12] C:\ProgramData\ Apple Computer
[11/02/2006|09:02] C:\ProgramData\ Application Data
[02/21/2009|04:03] C:\ProgramData\ Ashtons. Family Resort
[01/13/2009|08:46] C:\ProgramData\ Avg8
[06/23/2007|01:15] C:\ProgramData\ CheckPoint
[07/02/2008|04:56] C:\ProgramData\ Comcast
[10/17/2007|07:19] C:\ProgramData\ CyberLink
[11/02/2006|09:02] C:\ProgramData\ Desktop
[03/05/2009|12:24] C:\ProgramData\ Digsby
[11/02/2006|09:02] C:\ProgramData\ Documents
[02/20/2009|08:47] C:\ProgramData\ DriverScanner
[01/02/2008|10:04] C:\ProgramData\ eSellerate
[11/02/2006|09:02] C:\ProgramData\ Favorites
[05/12/2008|09:39] C:\ProgramData\ Fugazo
[06/04/2007|07:13] C:\ProgramData\ Google
[02/22/2009|01:03] C:\ProgramData\ Google Updater
[01/16/2009|11:49] C:\ProgramData\ HP
[01/17/2009|11:13] C:\ProgramData\ HP Product Assistant
[03/23/2007|11:06] C:\ProgramData\ HPSSUPPLY
[01/16/2009|11:56] C:\ProgramData\36,671 hpzinstall.log
[03/11/2007|02:26] C:\ProgramData\ InstallShield
[03/16/2008|08:26] C:\ProgramData\ JollyBear
[08/10/2008|11:14] C:\ProgramData\ Lavasoft
[04/05/2008|11:57] C:\ProgramData\ Ludia
[03/16/2007|01:38] C:\ProgramData\ Macromedia
[04/11/2009|01:02] C:\ProgramData\ Malwarebytes
[01/13/2009|08:54] C:\ProgramData\ McAfee
[04/04/2009|10:28] C:\ProgramData\ Microsoft
[03/11/2009|11:57] C:\ProgramData\ Microsoft Help
[10/26/2007|06:50] C:\ProgramData\ NCH Swift Sound
[12/13/2008|06:10] C:\ProgramData\ NOS
[03/21/2009|02:21] C:\ProgramData\ NtiDvdCopy
[05/05/2007|02:27] C:\ProgramData\258 ntuser.pol
[06/18/2007|07:56] C:\ProgramData\ Office Genuine Advantage
[01/17/2009|03:03] C:\ProgramData\ PassMark
[03/29/2009|12:15] C:\ProgramData\ PCPitstop
[12/09/2007|06:27] C:\ProgramData\ PlayFirst
[12/07/2008|10:49] C:\ProgramData\ PopCap Games
[02/22/2008|05:59] C:\ProgramData\ QuickTime
[11/25/2008|08:53] C:\ProgramData\ Remote Desktop Control 2
[05/07/2007|08:33] C:\ProgramData\ Sandlot Games
[05/15/2008|08:12] C:\ProgramData\ Sony Online Entertainment
[08/17/2008|04:00] C:\ProgramData\ SpinTop Games
[07/27/2008|11:55] C:\ProgramData\ Spybot - Search & Destroy
[02/20/2009|11:32] C:\ProgramData\ Stardock
[11/02/2006|09:02] C:\ProgramData\ Start Menu
[08/19/2007|11:16] C:\ProgramData\ SupportSoft
[07/20/2007|08:35] C:\ProgramData\ Symantec
[01/15/2009|12:54] C:\ProgramData\ TEMP
[11/02/2006|09:02] C:\ProgramData\ Templates
[07/19/2008|02:02] C:\ProgramData\ Thought Communications
[02/16/2008|07:12] C:\ProgramData\ TomTom
[10/07/2007|12:34] C:\ProgramData\ Trymedia
[04/12/2008|03:48] C:\ProgramData\ Valusoft
[04/08/2007|09:56] C:\ProgramData\ Viewpoint
[03/23/2007|11:12] C:\ProgramData\ WEBREG
[02/21/2009|04:35] C:\ProgramData\ WildTangent
[06/11/2008|03:54] C:\ProgramData\ WindowsSearch
[01/18/2009|06:36] C:\ProgramData\ WinZip
[09/06/2008|12:12] C:\ProgramData\ WLInstaller
[04/25/2007|07:31] C:\ProgramData\ Yahoo!
[06/28/2008|12:39] C:\ProgramData\ Yahoo! Companion

——————–\\ Listing Folders in C:\Program Files

[03/08/2008|01:16] C:\Program Files\ AccuWeatherDesktopAlerts
[12/05/2006|01:08] C:\Program Files\ Acer Arcade Deluxe
[03/11/2007|02:31] C:\Program Files\ Acer Assist
[03/11/2007|02:26] C:\Program Files\ Acer Inc
[03/11/2007|02:31] C:\Program Files\ Acer Registration
[12/13/2008|06:17] C:\Program Files\ Adobe
[12/07/2007|11:58] C:\Program Files\ Alwil Software
[01/08/2008|10:02] C:\Program Files\ AOL
[08/02/2007|11:51] C:\Program Files\ AOL 9.0
[07/15/2007|10:45] C:\Program Files\ AOL 9.0a
[03/29/2009|11:13] C:\Program Files\ AOL 9.1
[07/08/2007|08:47] C:\Program Files\ APC
[08/15/2008|01:19] C:\Program Files\ Apple Software Update
[08/26/2007|12:05] C:\Program Files\ Atheros
[11/22/2008|03:23] C:\Program Files\ AVG
[02/07/2009|12:17] C:\Program Files\ AWS
[11/08/2008|01:04] C:\Program Files\ BitTorrent
[06/29/2008|06:34] C:\Program Files\ BOINC
[04/30/2007|08:38] C:\Program Files\ Broderbund
[05/03/2008|03:29] C:\Program Files\ CA Yahoo! Anti-Spy
[07/27/2008|11:55] C:\Program Files\ CCleaner
[02/10/2008|03:33] C:\Program Files\ chatClient
[03/16/2008|02:35] C:\Program Files\ Chill
[08/19/2007|11:15] C:\Program Files\ Comcast
[12/08/2008|09:00] C:\Program Files\ Comcast Rhapsody
[04/13/2008|11:10] C:\Program Files\ ComcastToolbar
[04/04/2009|10:21] C:\Program Files\ Common Files
[12/13/2007|06:30] C:\Program Files\ COMODO
[03/04/2009|12:32] C:\Program Files\ Coupons
[10/26/2007|06:52] C:\Program Files\ CyberLink
[02/26/2008|10:44] C:\Program Files\ DialIdol.com
[04/10/2009|09:47] C:\Program Files\ Digsby
[01/25/2009|02:28] C:\Program Files\ DivX
[11/08/2008|01:03] C:\Program Files\ DNA
[03/11/2007|09:30] C:\Program Files\ FoneSync
[01/18/2009|02:45] C:\Program Files\ FOX News Live
[09/14/2008|11:42] C:\Program Files\ Free Audio Pack
[03/12/2008|08:16] C:\Program Files\ GamesBar
[11/03/2008|09:58] C:\Program Files\ Geek Squad
[04/04/2009|12:40] C:\Program Files\ Google
[06/28/2008|02:58] C:\Program Files\ Hewlett-Packard
[02/27/2008|12:25] C:\Program Files\ HP
[09/01/2007|10:53] C:\Program Files\ IMVU
[03/08/2008|12:52] C:\Program Files\ IncrediGames
[10/24/2007|01:02] C:\Program Files\ IncrediMail
[11/08/2008|01:39] C:\Program Files\ InstallShield Installation Information
[12/02/2006|02:41] C:\Program Files\ Intel
[04/14/2008|12:29] C:\Program Files\ Internet Explorer
[02/18/2009|01:46] C:\Program Files\ IObit
[03/21/2009|03:55] C:\Program Files\ IrfanView
[10/18/2007|11:09] C:\Program Files\ iTrick
[04/06/2009|11:14] C:\Program Files\ Java
[11/07/2008|08:23] C:\Program Files\ Launch Manager
[08/10/2008|11:14] C:\Program Files\ Lavasoft
[03/30/2008|08:44] C:\Program Files\ Learn2.com
[11/25/2007|02:55] C:\Program Files\ Magentic
[04/11/2009|01:02] C:\Program Files\ Malwarebytes' Anti-Malware
[01/15/2009|07:51] C:\Program Files\ McAfee
[01/13/2009|08:49] C:\Program Files\ McAfee.com
[08/17/2008|11:26] C:\Program Files\ MeadCo Neptune
[04/04/2009|10:27] C:\Program Files\ Microsoft
[05/08/2007|11:23] C:\Program Files\ Microsoft CAPICOM 2.1.0.2
[11/02/2006|08:37] C:\Program Files\ Microsoft Games
[02/20/2009|09:36] C:\Program Files\ Microsoft IntelliPoint
[06/28/2008|01:11] C:\Program Files\ Microsoft IntelliType Pro
[12/07/2008|02:49] C:\Program Files\ Microsoft Money 2005
[12/29/2007|02:20] C:\Program Files\ Microsoft Money 2006
[10/27/2007|03:02] C:\Program Files\ Microsoft Office
[04/04/2009|05:20] C:\Program Files\ Microsoft Office Outlook Connector
[02/27/2009|12:19] C:\Program Files\ Microsoft Silverlight
[04/04/2009|10:26] C:\Program Files\ Microsoft SQL Server Compact Edition
[04/04/2009|10:28] C:\Program Files\ Microsoft Sync Framework
[10/27/2007|03:02] C:\Program Files\ Microsoft Visual Studio
[06/27/2008|12:08] C:\Program Files\ Microsoft Windows Script
[11/22/2008|07:19] C:\Program Files\ Microsoft Works
[10/27/2007|03:00] C:\Program Files\ Microsoft.NET
[04/14/2008|12:29] C:\Program Files\ Movie Maker
[04/11/2009|10:53] C:\Program Files\ Mozilla Firefox
[09/27/2007|09:51] C:\Program Files\ Mozilla Thunderbird
[03/04/2009|11:48] C:\Program Files\ MP3 Rocket
[11/02/2006|08:37] C:\Program Files\ MSBuild
[03/11/2007|05:44] C:\Program Files\ MSXML 4.0
[05/06/2007|12:25] C:\Program Files\ MTV Networks
[08/29/2008|07:41] C:\Program Files\ MySpace
[03/28/2009|11:46] C:\Program Files\ NaturalSoft
[02/22/2008|05:50] C:\Program Files\ NCH Swift Sound
[03/03/2009|12:11] C:\Program Files\ NewsGator
[06/08/2008|12:44] C:\Program Files\ NewTech Infosystems
[07/14/2007|12:00] C:\Program Files\ Norton 360
[12/13/2008|06:08] C:\Program Files\ NOS
[12/25/2007|01:08] C:\Program Files\ Oberon Media
[01/23/2008|10:31] C:\Program Files\ Passware
[08/17/2008|02:54] C:\Program Files\ PayPal
[12/07/2008|10:36] C:\Program Files\ PCPitstop
[10/24/2007|12:59] C:\Program Files\ Plaxo
[09/28/2008|12:17] C:\Program Files\ PlayFirst
[03/14/2009|10:48] C:\Program Files\ providerComcast
[01/22/2009|09:13] C:\Program Files\ QuickTime
[12/25/2007|01:18] C:\Program Files\ Real
[11/02/2006|08:37] C:\Program Files\ Reference Assemblies
[11/04/2007|12:45] C:\Program Files\ ReflexiveArcade
[11/23/2008|02:21] C:\Program Files\ Remote Desktop Control 2
[05/08/2007|11:02] C:\Program Files\ Safer Networking
[04/11/2009|01:39] C:\Program Files\ SpeedFan
[02/18/2009|08:23] C:\Program Files\ Spybot - Search & Destroy
[02/21/2009|12:08] C:\Program Files\ Stardock
[04/05/2007|11:50] C:\Program Files\ Support.com
[03/01/2008|01:08] C:\Program Files\ Synaptics
[07/15/2007|10:50] C:\Program Files\ Tencent
[02/01/2009|12:32] C:\Program Files\ The Weather Channel FW
[02/16/2008|07:10] C:\Program Files\ TomTom DesktopSuite
[02/22/2009|07:10] C:\Program Files\ TomTom HOME 2
[04/05/2009|11:26] C:\Program Files\ Trend Micro
[06/29/2008|06:35] C:\Program Files\ Trillian
[11/08/2008|01:35] C:\Program Files\ TUGZip
[02/19/2009|12:27] C:\Program Files\ Uniblue
[11/02/2006|09:01] C:\Program Files\ Uninstall Information
[11/30/2008|02:35] C:\Program Files\ UniversalCallerID
[09/28/2007|02:20] C:\Program Files\ Viewpoint
[12/07/2007|04:06] C:\Program Files\ Weather Pulse
[03/02/2009|12:10] C:\Program Files\ Weather Watcher Live
[04/30/2007|09:41] C:\Program Files\ Web Publish
[02/21/2009|03:59] C:\Program Files\ WildGames
[04/14/2008|12:29] C:\Program Files\ Windows Calendar
[04/14/2008|12:29] C:\Program Files\ Windows Collaboration
[04/14/2008|12:28] C:\Program Files\ Windows Defender
[04/14/2008|12:29] C:\Program Files\ Windows Journal
[04/04/2009|10:28] C:\Program Files\ Windows Live
[09/30/2007|01:11] C:\Program Files\ Windows Live Safety Center
[04/04/2009|10:27] C:\Program Files\ Windows Live SkyDrive
[03/12/2009|07:54] C:\Program Files\ Windows Mail
[03/12/2009|07:54] C:\Program Files\ Windows Media Player
[11/02/2006|08:37] C:\Program Files\ Windows NT
[04/14/2008|12:28] C:\Program Files\ Windows Photo Gallery
[04/14/2008|12:29] C:\Program Files\ Windows Sidebar
[03/03/2009|02:47] C:\Program Files\ WinWay Resume
[12/13/2007|07:18] C:\Program Files\ Yahoo!

——————–\\ Listing Folders in C:\Program Files\Common Files

[03/21/2009|01:28] C:\Program Files\Common Files\ Adobe
[03/26/2009|11:12] C:\Program Files\Common Files\ Adobe AIR
[01/22/2009|12:31] C:\Program Files\Common Files\ AOL
[12/28/2007|08:31] C:\Program Files\Common Files\ aolshare
[10/27/2007|03:02] C:\Program Files\Common Files\ DESIGNER
[03/23/2007|11:01] C:\Program Files\Common Files\ Hewlett-Packard
[03/23/2007|11:05] C:\Program Files\Common Files\ HP
[08/08/2008|11:05] C:\Program Files\Common Files\ InstallShield
[03/25/2007|01:01] C:\Program Files\Common Files\ Java
[06/08/2008|12:43] C:\Program Files\Common Files\ LightScribe
[01/13/2009|08:50] C:\Program Files\Common Files\ McAfee
[03/28/2009|11:46] C:\Program Files\Common Files\ microsoft shared
[06/08/2008|12:44] C:\Program Files\Common Files\ NewTech Infosystems
[03/16/2007|01:37] C:\Program Files\Common Files\ Nullsoft
[03/12/2008|08:16] C:\Program Files\Common Files\ Oberon Media
[12/06/2008|01:30] C:\Program Files\Common Files\ PX Storage Engine
[03/21/2009|02:30] C:\Program Files\Common Files\ Real
[12/07/2008|01:43] C:\Program Files\Common Files\ Scanner
[11/02/2006|07:18] C:\Program Files\Common Files\ Services
[11/02/2006|07:18] C:\Program Files\Common Files\ SpeechEngines
[02/21/2009|11:56] C:\Program Files\Common Files\ Stardock
[08/19/2007|11:15] C:\Program Files\Common Files\ supportsoft
[12/26/2008|01:57] C:\Program Files\Common Files\ SWF Studio
[07/20/2007|08:35] C:\Program Files\Common Files\ Symantec Shared
[04/14/2008|12:28] C:\Program Files\Common Files\ System
[04/04/2009|10:21] C:\Program Files\Common Files\ Windows Live
[09/06/2008|12:19] C:\Program Files\Common Files\ WindowsLiveInstaller
[12/06/2008|12:45] C:\Program Files\Common Files\ Wise Installation Wizard
[03/21/2009|02:30] C:\Program Files\Common Files\ xing shared

——————–\\ Process

( 71 Processes )

… OK !

——————–\\ Searching with S_Lop

No Lop folder found !

——————–\\ Searching for Lop Files - Folders

No Lop folder found !

——————–\\ Searching within the Registry

….. OK !

——————–\\ Checking the Hosts file

Hosts file CLEAN


——————–\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-11 22:58:12
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes …
scanning hidden files …
scan completed successfully
hidden processes: 0
hidden files: 0

——————–\\ Searching for other infections

——————–\\ Cracks & Keygens ..

C:\Users\PAULPA~1\AppData\Local\VirtualStore\Program Files\chatClient\Crackwhorebbbottom4u.HTM
C:\PROGRA~2\Fugazo\Cooking Academy\cached\sounds\eggcrack.wav


[F:12][D:1]-> C:\Users\PAULPA~1\AppData\Local\Temp
[F:475][D:1]-> C:\Users\PAULPA~1\AppData\Roaming\MICROS~1\Windows\Cookies
[F:36][D:5]-> C:\Users\PAULPA~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:32][D:5]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - Sat 04/11/2009|23:03 - Option : [1]

——————–\\ Scan completed at 23:03:27
[ UAC => 1 ]