Thanks heaps for replying, I am interested in the free antivirus software, let me know
, thankyou!
I ran the program to remove Norton, followed by the rest of the instructions. Here are the logs:
Combofix:
ComboFix 09-04-17.01 - Mathieu 17/04/2009 2:00.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.479.154 [GMT 8:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Mathieu.MATHIEU-1\Application Data\inst.exe
c:\program files\Common Files\Companion Wizard
c:\recycler\ADAPT_Installer.exe
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\accessories\cup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\accessories\customer_cup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\accessories\heart.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\accessories\menu_down.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\accessories\menu_up.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\accessories\plates.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\accessories\ticket.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\accessories\tray.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\music\mainmenumusic.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_bring_check_1_snd.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_deliver_food_1_snd.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_deliver_order_1_snd.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_diner.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_dish_dropoff_1_snd.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_food_ready_1_snd.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_gain_heart_1.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_get_drinks_1_snd.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_party_arrive_1_snd.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_pencil_write_2.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_pickup_food_1_snd.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_rollover_1.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\audio\sfx\sfx_seat_people_snd.ogg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\choosedifficulty.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\credits.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\flo_lose.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\flo_win.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\help1.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\help2.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\highscores.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\levelintro.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\levelintro_mask.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\levelover.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\levelover_mask.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\mainmenu.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\popup.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\popup_mask.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\upgradegrid.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\upgradetitle.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\backgrounds\upsell.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\arrowleft_blue.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\arrowleft_yellow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\arrowright_blue.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\arrowright_yellow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\back_blue.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\back_yellow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\backchalk.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\backchalkup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\backtomenu_blue.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\backtomenu_yellow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\cancel.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\cancelup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\career.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\career_over.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\close.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\closeup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\continue.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\continueover.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\credits_blue.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\credits_yellow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\download_blue.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\download_yellow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\easy.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\easy_over.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\endlessshift.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\endlessshift_over.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\hard.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\hard_over.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\help.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\help_over.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\highscores.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\highscores_over.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\instructions_blue.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\instructions_yellow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\letsplay.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\letsplayover.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\medium.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\medium_over.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\moreinfo.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\moreinfoup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\off.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\off_on.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\on.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\on_on.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\pause.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\pauseover.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\quit.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\quitgame.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\quitgameover.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\quitover.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\resumegame.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\resumegameover.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\submit.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\submitup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\tryagain.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\tryagainover.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\upgrade_over.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\upgrade_up.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\viewglobal.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\viewglobalup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\viewhighscore.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\viewhighscoreon.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\viewlocal.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\buttons\viewlocalup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\comics\webcomic.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\config\career.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\config\customer.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\config\endless.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\config\global.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\config\powerups.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\cook\cook.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\cook\cook.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\cook\stove.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\cursor\arrow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\cursor\click.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\cursor\click2.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\cursor\grab.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\cursor\open.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\blue\anim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\blue\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\blue\sit_legs.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\green\anim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\green\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\green\sit_legs.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\purple\anim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\purple\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\purple\sit_legs.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\red\anim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\red\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\red\sit_legs.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\yellow\anim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\yellow\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\old_male\yellow\sit_legs.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\blue\anim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\blue\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\blue\sit_legs.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\green\anim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\green\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\green\sit_legs.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\purple\anim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\purple\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\purple\sit_legs.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\red\anim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\red\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\red\sit_legs.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\yellow\anim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\yellow\anim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\customers\young_female\yellow\sit_legs.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\flo\idle.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\flo\idle.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\flo\lower.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\flo\lower.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\flo\upper.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\flo\upper.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\fonts\arial.mvec
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\fonts\komikaaxis.mvec
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\chair.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\chair.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\dirt2top.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\dirt4top.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\dishcart.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\dishcart.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\drinkstation_off.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\drinkstation_on1.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\drinkstation_on2.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\ticketstation.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\furniture\ticketstation.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\arrowdown.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\arrowdownon.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\arrowleft.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\arrowlefton.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\arrowright.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\arrowrighton.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\arrowup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\arrowupon.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\p1icon.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\textedit.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\hiscore\title.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_1.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_1_a.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_1_b.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_1_c.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_2.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_2_a.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_2_b.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_2_c.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_2_d.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_3.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_3_a.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_3_b.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_3_c.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\endless_1_3_d.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\fifth_level_diner.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\first_level_diner.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\fourth_level_diner.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\layouts\second_level_diner.txt
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\playfirst_logo.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\background.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\food\food1.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\food\food1.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\food\food2.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\food\food2.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\food\food3.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\food\food3.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\frames\upgrade_0001.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\tables\2top.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\tables\2top.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\tables\4top.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\tables\4top.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\diner\upgrades.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\restaurants\tableshadow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\choosedifficulty.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\chooseplayer.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\chooserestaurant.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\credits.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\game.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\gothighscore.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\help.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\help2.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\hiscore.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\hiscoreinfo.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\hiscoresubmit.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\levelintro.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\levelover.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\loading.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\mainloop.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\mainmenu.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\ok.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\pause.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\style.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\tutorialintro.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\upgrade.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\upsell.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\webcomic.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\scripts\yesno.lua
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\splash\aol_logo.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\splash\gamelabsplash.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\splash\playfirst_logo.jpg
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\strings.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\angersmoke.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\angersmoke.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\chairflags.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\chairflags.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\check.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\checkmark.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\clock.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\closed.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\closingtime.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\coinflip.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\coinflip.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\dollar.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\doodles\coffee.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\doodles\tables.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\doodles\wallpaper.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\expert.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\expertscore.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\foodpoof.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\foodpoof.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\fork_timer.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\goalcompleted.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\heartgrow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\heartgrow.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\jar.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\jar.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\level.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\level_career.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\score.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\sound.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\staroff.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\staron.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\tablenumber.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\tablenumberup.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\traynumber.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\tutorial_character.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\tutorialarrow.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\tutorialbox.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\upgradeanim.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\upgradeanim.xml
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\upgrades\drinks.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\upgrades\maitred.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\upgrades\oven.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\upgrades\select.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\upgrades\shoes.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\upgrades\stereo.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\assets\ui\upgrades\table.png
c:\windows\Downloaded Program Files\DDSonic.1.0.0.92\dinerdash.exe
c:\windows\IE4 Error Log.txt
c:\windows\system32\ejdyrta.dat
c:\windows\system32\ejdyrta_navps.dat
c:\windows\system32\ejdyrta_navup.dat
c:\windows\system32\nvs2.inf
c:\windows\system32\stera.log
c:\windows\system32\yqwecofbmi.dat
c:\windows\system32\yqwecofbmi_nav.dat
c:\windows\system32\yqwecofbmi_navps.dat
c:\windows\tmlpcert2007
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
——-\Legacy_FOPN
((((((((((((((((((((((((( Files Created from 2009-03-16 to 2009-04-16 )))))))))))))))))))))))))))))))
.
2009-04-16 17:40 . 2009-04-16 17:40 ——– d—–w c:\documents and settings\All Users.WINDOWS\Application Data\NortonInstaller
2009-04-16 02:14 . 2009-04-16 02:14 ——– d—–w C:\VundoFix Backups
2009-04-16 02:13 . 2009-04-16 02:13 ——– d—–w c:\program files\Trend Micro
2009-04-16 02:09 . 2009-04-16 02:09 ——– d—–w c:\program files\Lavasoft
2009-04-15 18:45 . 2009-04-16 02:28 ——– d—–w c:\documents and settings\All Users.WINDOWS\Application Data\Lavasoft
2009-04-15 18:32 . 2009-04-15 18:32 6656 —-a-w c:\windows\system32\wincreate.exe
2009-04-15 18:14 . 2009-04-15 18:14 ——– d—–w c:\documents and settings\All Users.WINDOWS\Application Data\SUPERAntiSpyware.com
2009-04-15 18:13 . 2009-04-16 05:34 ——– d—–w c:\program files\SUPERAntiSpyware
2009-04-15 18:13 . 2009-04-15 18:13 ——– d—–w c:\documents and settings\Mathieu.MATHIEU-1\Application Data\SUPERAntiSpyware.com
2009-04-15 18:03 . 2009-04-16 02:13 ——– d—–w C:\New Folder
2009-04-15 08:07 . 2009-04-15 23:53 244 —ha-w C:\sqmnoopt19.sqm
2009-04-15 08:07 . 2009-04-15 23:53 232 —ha-w C:\sqmdata19.sqm
2009-04-15 08:06 . 2009-04-15 23:53 244 —ha-w C:\sqmnoopt18.sqm
2009-04-15 08:06 . 2009-04-15 23:53 232 —ha-w C:\sqmdata18.sqm
2009-04-15 08:05 . 2009-04-15 23:52 244 —ha-w C:\sqmnoopt17.sqm
2009-04-15 08:05 . 2009-04-15 23:52 232 —ha-w C:\sqmdata17.sqm
2009-04-15 05:18 . 2009-04-15 21:44 244 —ha-w C:\sqmnoopt16.sqm
2009-04-15 05:18 . 2009-04-15 21:44 232 —ha-w C:\sqmdata16.sqm
2009-04-15 04:59 . 2009-04-15 20:58 244 —ha-w C:\sqmnoopt15.sqm
2009-04-15 04:59 . 2009-04-15 20:58 232 —ha-w C:\sqmdata15.sqm
2009-04-15 04:57 . 2009-04-15 20:56 244 —ha-w C:\sqmnoopt14.sqm
2009-04-15 04:57 . 2009-04-15 20:56 232 —ha-w C:\sqmdata14.sqm
2009-04-15 04:38 . 2009-04-15 20:54 244 —ha-w C:\sqmnoopt13.sqm
2009-04-15 04:38 . 2009-04-15 20:54 232 —ha-w C:\sqmdata13.sqm
2009-04-15 04:12 . 2009-04-15 20:52 244 —ha-w C:\sqmnoopt12.sqm
2009-04-15 04:12 . 2009-04-15 20:52 232 —ha-w C:\sqmdata12.sqm
2009-04-15 04:11 . 2009-04-15 20:52 244 —ha-w C:\sqmnoopt11.sqm
2009-04-15 04:11 . 2009-04-15 20:52 232 —ha-w C:\sqmdata11.sqm
2009-04-15 04:09 . 2009-04-15 20:51 244 —ha-w C:\sqmnoopt10.sqm
2009-04-15 04:09 . 2009-04-15 20:51 232 —ha-w C:\sqmdata10.sqm
2009-04-15 04:09 . 2009-04-15 20:51 244 —ha-w C:\sqmnoopt09.sqm
2009-04-15 04:09 . 2009-04-15 20:51 232 —ha-w C:\sqmdata09.sqm
2009-04-15 04:08 . 2009-04-15 20:50 244 —ha-w C:\sqmnoopt08.sqm
2009-04-15 04:08 . 2009-04-15 20:50 232 —ha-w C:\sqmdata08.sqm
2009-04-15 04:08 . 2009-04-15 20:48 244 —ha-w C:\sqmnoopt07.sqm
2009-04-15 04:08 . 2009-04-15 20:48 232 —ha-w C:\sqmdata07.sqm
2009-04-15 04:07 . 2009-04-15 20:46 244 —ha-w C:\sqmnoopt06.sqm
2009-04-15 04:07 . 2009-04-15 20:46 232 —ha-w C:\sqmdata06.sqm
2009-04-15 04:07 . 2009-04-15 20:44 244 —ha-w C:\sqmnoopt05.sqm
2009-04-15 04:07 . 2009-04-15 20:44 232 —ha-w C:\sqmdata05.sqm
2009-04-15 03:25 . 2009-04-15 03:25 ——– dc—-w c:\documents and settings\All Users.WINDOWS\Application Data\{2BAE6915-8510-4B9F-B498-02DA86258AA0}
2009-04-15 03:03 . 2009-04-16 00:44 244 —ha-w C:\sqmnoopt04.sqm
2009-04-15 03:03 . 2009-04-16 00:44 232 —ha-w C:\sqmdata04.sqm
2009-04-15 03:02 . 2009-04-15 23:55 244 —ha-w C:\sqmnoopt03.sqm
2009-04-15 03:02 . 2009-04-15 23:55 232 —ha-w C:\sqmdata03.sqm
2009-04-15 03:00 . 2009-04-15 03:00 ——– d—–w c:\documents and settings\Administrator\Application Data\NCH Swift Sound
2009-04-15 02:54 . 2009-04-15 18:00 408 —-a-w c:\windows\Lravifaniva.dat
2009-04-15 02:54 . 2009-04-15 18:00 0 —-a-w c:\windows\Lzezu.bin
2009-04-15 02:54 . 2009-04-15 02:54 ——– d—–w c:\documents and settings\Administrator\Local Settings\Application Data\{CAF7E976-9BEC-4388-8C79-339E1EFF5E98}
2009-04-15 02:54 . 2009-04-15 02:54 ——– d—–w c:\documents and settings\All Users.WINDOWS\Application Data\McAfee
2009-04-14 17:47 . 2009-04-15 19:13 664 —-a-w c:\windows\system32\d3d9caps.dat
2009-04-14 07:30 . 2004-08-03 16:56 21504 —-a-w c:\windows\system32\hidserv.dll
2009-04-14 07:30 . 2004-08-03 14:58 14848 —-a-w c:\windows\system32\drivers\kbdhid.sys
2009-04-14 07:30 . 2004-08-03 15:08 31616 —-a-w c:\windows\system32\drivers\usbccgp.sys
2009-04-13 10:58 . 2009-04-13 10:58 ——– d—–w C:\PollManager
2009-04-13 09:30 . 2009-04-13 09:30 ——– d—–w c:\documents and settings\Mathieu.MATHIEU-1\Local Settings\Application Data\{DE838560-7443-45A5-96E2-5431BDF4EBF4}
2009-04-13 09:17 . 2009-04-13 09:17 18432 —-a-w c:\windows\system32\digiwet.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-16 18:16 . 2008-10-25 01:01 ——– d—–w c:\program files\DNA
2009-04-16 18:16 . 2008-10-25 01:01 ——– d—–w c:\documents and settings\Mathieu.MATHIEU-1\Application Data\DNA
2009-04-16 17:44 . 2006-12-09 15:00 ——– d—–w c:\documents and settings\Mathieu.MATHIEU-1\Application Data\BitTorrent
2009-04-16 02:14 . 2009-04-16 02:14 105 —-a-w C:\VundoFix.txt
2009-04-16 01:51 . 2008-05-08 14:22 ——– d—–w c:\program files\Avanquest update
2009-04-15 23:54 . 2008-02-24 11:30 244 —ha-w C:\sqmnoopt02.sqm
2009-04-15 23:54 . 2008-02-24 11:30 232 —ha-w C:\sqmdata02.sqm
2009-04-15 23:54 . 2008-02-02 05:04 244 —ha-w C:\sqmnoopt01.sqm
2009-04-15 23:54 . 2008-02-02 05:04 232 —ha-w C:\sqmdata01.sqm
2009-04-15 23:53 . 2007-10-05 08:52 244 —ha-w C:\sqmnoopt00.sqm
2009-04-15 23:53 . 2007-10-05 08:52 232 —ha-w C:\sqmdata00.sqm
2009-04-15 18:17 . 2007-03-02 16:50 ——– d—–w c:\documents and settings\All Users.WINDOWS\Application Data\Google Updater
2009-04-15 04:08 . 2006-08-28 07:07 ——– d—–w c:\program files\Common Files\Wise Installation Wizard
2009-04-14 18:09 . 2008-09-09 06:16 ——– d—–w c:\documents and settings\Mathieu.MATHIEU-1\Application Data\Zylom
2009-04-13 07:27 . 2009-03-11 15:15 ——– d—–w c:\program files\PeerGuardian2
2009-04-13 01:46 . 2008-08-05 08:47 34 —-a-w c:\documents and settings\Mathieu.MATHIEU-1\jagex_runescape_preferences.dat
2009-04-03 05:51 . 2007-10-14 07:47 ——– d—–w c:\program files\Ricochet Lost Worlds Recharged
2009-03-15 09:16 . 2007-10-14 10:29 ——– d—–w c:\program files\Turtle Bay
2009-03-12 05:44 . 2007-04-20 10:46 43520 —-a-w c:\windows\system32\CmdLineExt03.dll
2009-02-22 04:19 . 2009-02-22 04:02 ——– d—–w c:\program files\Star Alliance Mileage Calculator
2009-02-16 12:45 . 2009-02-16 12:46 410984 —-a-w c:\windows\system32\deploytk.dll
2009-02-16 12:45 . 2006-07-01 07:18 ——– d—–w c:\program files\Java
2009-02-09 10:19 . 2006-06-04 01:13 1846272 —-a-w c:\windows\system32\win32k.sys
2009-01-21 03:15 . 2007-07-04 11:47 77712 —-a-w C:\playground.log
2008-10-31 16:45 . 2006-06-03 17:10 63984 -c–a-w c:\documents and settings\Mathieu.MATHIEU-1\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2008-10-20 13:26 . 2006-11-25 14:35 47360 —-a-w c:\documents and settings\Mathieu.MATHIEU-1\Application Data\pcouffin.sys
2008-04-09 12:23 . 2008-04-09 12:23 0 -c–a-w c:\documents and settings\Mathieu.MATHIEU-1\CONFIG.DAT
2006-12-19 08:22 . 2007-02-17 08:22 32 -c–a-r c:\documents and settings\All Users\hash.dat
2006-11-25 14:35 . 2006-11-25 14:35 81920 —-a-w c:\documents and settings\Mathieu.MATHIEU-1\Application Data\ezpinst.exe
2006-06-02 12:49 . 2006-06-02 12:49 12328 -c–a-w c:\documents and settings\Mathieu\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2006-05-05 23:04 . 2006-01-25 06:03 55880 -c–a-w c:\documents and settings\Owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2008-10-15 22:2008-10-15 22:28 28:12 . c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"NBJ"="c:\program files\Ahead\Nero BackItUp\NBJ.exe" [2005-04-14 1957888]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-20 68856]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 356352]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2008-12-19 342848]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2008-07-11 223984]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-04-15 1830128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SiSUSBRG"="c:\windows\SiSUSBrg.exe" [2002-07-12 106496]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-31 32768]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-16 136600]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-10-15 29744]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2008-07-11 223984]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-11-27 185896]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"SiSPower"="SiSPower.dll" - c:\windows\system32\SiSPower.dll [2004-09-02 49152]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\soundman.exe [2004-07-27 68096]
"SMSERIAL"="sm56hlpr.exe" - c:\windows\sm56hlpr.exe [2004-06-29 569344]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 04:05 356352 —-a-w c:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\mmmwbpfb.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.DIV3"= DivXc32.dll
"vidc.DIV4"= DivXc32f.dll
"msacm.divxa32"= DivXa32.acm
"VIDC.HFYU"= huffyuv.dll
"vidc.i263"= c:\windows\system32\i263_32.drv
"msacm.imc"= c:\windows\system32\imc32.acm
"VIDC.JDCT"= jl_jdct.drv
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\
0?????\
0lsdelete
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli csrant.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digiwet.dll
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
R3 cdrmkaun;cdrmkaun; [x]
R3 FXDRV;FXDRV; [x]
R3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-10-15 29744]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2009-03-23 9968]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.sys [2009-03-23 72944]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-03-23 7408]
— Other Services/Drivers In Memory —
*Deregistered* - aawservice
*Deregistered* - ALG
*Deregistered* - Apple Mobile Device
*Deregistered* - AudioSrv
*Deregistered* - BITS
*Deregistered* - Bonjour Service
*Deregistered* - Browser
*Deregistered* - CryptSvc
*Deregistered* - DcomLaunch
*Deregistered* - Dhcp
*Deregistered* - Dnscache
*Deregistered* - ERSvc
*Deregistered* - EventSystem
*Deregistered* - FastUserSwitchingCompatibility
*Deregistered* - gusvc
*Deregistered* - helpsvc
*Deregistered* - HidServ
*Deregistered* - HTTPFilter
*Deregistered* - ImapiService
*Deregistered* - iPod Service
*Deregistered* - JavaQuickStarterService
*Deregistered* - lanmanserver
*Deregistered* - lanmanworkstation
*Deregistered* - LmHosts
*Deregistered* - MDM
*Deregistered* - Netman
*Deregistered* - Nla
*Deregistered* - PolicyAgent
*Deregistered* - ProtectedStorage
*Deregistered* - RasMan
*Deregistered* - RpcSs
*Deregistered* - SamSs
*Deregistered* - Schedule
*Deregistered* - seclogon
*Deregistered* - SENS
*Deregistered* - SharedAccess
*Deregistered* - ShellHWDetection
*Deregistered* - Spooler
*Deregistered* - srservice
*Deregistered* - SSDPSRV
*Deregistered* - stisvc
*Deregistered* - TapiSrv
*Deregistered* - TermService
*Deregistered* - Themes
*Deregistered* - TrkWks
*Deregistered* - usnjsvc
*Deregistered* - W32Time
*Deregistered* - WebClient
*Deregistered* - winmgmt
*Deregistered* - wscsvc
*Deregistered* - wuauserv
*Deregistered* - WudfSvc
*Deregistered* - WZCSVC
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bfb4c88b-b1aa-11dc-8272-00016ce119da}]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL
http://www.mgae.com/keylauncher/?code=3654332019861162
.
Contents of the 'Scheduled Tasks' folder
2009-04-10 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 04:34]
2009-04-16 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 03:20]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.hotbite.com.au/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid;=ie7&rls;=com.microsoft:en-US&ie;=utf8&oe;=utf8
mStart Page = hxxp://au.yahoo.com
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://g.ninemsn.com.au/0SEENAU/SAOS01?FORM=TOOLBR
IE: &Windows; Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live; Favorites - http://favorites.live.com/quickadd.aspx
DPF: {049A470D-F818-4E34-B14D-E4E237DADCF8} - hxxp://www.shockwave.com/content/fashiondash/sis/fashiondashweb.1.0.0.21.cab
DPF: {055B4212-4C81-448E-AFA9-C3CA4AAE8F95} - hxxp://www.shockwave.com/content/dairydash/sis/DairyDashWeb.1.0.0.12.cab
DPF: {2A510DC8-C9B5-4269-B9BA-E5B04D47D981} - hxxp://www.shockwave.com/content/dinerdash/sis/DDSonic.1.0.0.92.cab
DPF: {6715D12F-213F-4C6E-ACE1-8A363F550B96} - hxxp://www.shockwave.com/content/doggiedash/sis/DoggieDash.1.0.0.6.cab
DPF: {6C7CAD20-85AA-475A-AC0D-303C4A9A69CE} - hxxp://www.shockwave.com/content/greatchocolatechase/sis/greatchocolatechaseweb.1.0.0.12.cab
DPF: {87056D28-9730-4A47-B9F9-7E890B62C58A} - hxxp://www.shockwave.com/content/ghostfrenzy/sis/axhost.cab
DPF: {B516CA4E-A5BA-405C-AFCF-A97F08CC7429} - hxxp://www.shockwave.com/content/burgershop/sis/GoBitGamesPlayer_v5.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://www.arcadetown.com/swf/deliciousdeluxe2/zylomplayer.cab
DPF: {C0C0CB9B-BFEB-47C2-90FA-BE9692875ADB} - hxxp://www.shockwave.com/content/petshophop/sis/petshophopweb.1.0.0.17.cab
FF - ProfilePath -
.
**************************************************************************
catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2009-04-17 02:16
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
- - - - - - - > 'winlogon.exe'(544)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\documents and settings\Mathieu.MATHIEU-1\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
- - - - - - - > 'lsass.exe'(600)
c:\windows\csrant.dll
- - - - - - - > 'explorer.exe'(3664)
c:\windows\system32\browselc.dll
c:\windows\IME\SPGRMR.DLL
c:\program files\Common Files\Microsoft Shared\INK\SKCHUI.DLL
c:\windows\csrant.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Bonjour\mdnsNSP.dll
.
———————— Other Running Processes ————————
.
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\sistray.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Windows Live\Messenger\usnsvc.exe
.
**************************************************************************
.
Completion time: 2009-04-16 2:26 - machine was rebooted
ComboFix-quarantined-files.txt 2009-04-16 18:25
Pre-Run: 7,078,477,824 bytes free
Post-Run: 19,711,041,536 bytes free
WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /noexecute=optin
615 — E O F — 2009-03-20 18:03
Uninstall_list from Hijackthis:
3DSexVilla-027.001
Ad-Aware
Adobe Acrobat 4.0
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
Adobe Flash Player 10 ActiveX
Adobe Reader 8.1.2
Adobe Shockwave Player 11
Apple Mobile Device Support
Apple Software Update
Audio Conversion Wizard 2.0
Avanquest update
AVS Video Converter 4.3.1.371
Bonjour
BRATZ - Rock Angelz
ConvertXtoDVD [removed]
Critical Update for Windows Media Player 11 (KB959772)
Disney's Lilo and Stitch Hawaiian Discovery
DVDFab Platinum 3.0.3.0 Ghosthunter release
eMule
e-tax 2007
e-tax 2008
Feeding Frenzy
fifa02 Screen Saver
Finding Nemo: Nemo's Underwater World of Fun
Google Desktop
Google Toolbar for Internet Explorer
Google Updater
Grover's Travels
Highlight Viewer (Windows Live Toolbar)
HijackThis 2.0.2
Hot Shots SlingShot
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB929120)
Hotfix for Windows XP (KB952287)
iTunes
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 7
Java™ 6 Update 11
Java™ 6 Update 2
Java™ 6 Update 3
Java™ 6 Update 5
Java™ 6 Update 7
Java™ SE Runtime Environment 6 Update 1
JumpStart Languages
Leisure Suit Larry 2 Point and Click
LimeWire 4.12.6
Luxor
Mavis Beacon Teaches Typing Platinum 20
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft User-Mode Driver Framework Feature Pack 1.0
Miuchiz - Planet Mion
Miuchiz TM Update
Mozilla Firefox (3.0.1)
MSN
Nero Suite
nismo_screensaver
OneCare Advisor (Windows Live Toolbar)
OpenOffice.org Installer 1.0
OTOY
PCI Fax Modem
PeerGuardian 2.0
Popup Blocker (Windows Live Toolbar)
PowerDVD
PowerISO
QuickTime
ratDVD 0.78.1444
RealPlayer
Realtek AC'97 Audio
Ricochet Lost Worlds: Recharged
Rugrats Go Wild Demo
Safari
Sandlot Games Client Services
Scooby-Doo 2 - Monsters Unleashed
Secret Chamber
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
SiS 900 PCI Fast Ethernet Adapter Driver
SiS VGA Utilities
SiSRaidPackage
Smart Menus (Windows Live Toolbar)
Sony Ericsson PC Suite 3.209.00
SpongeBob SquarePants - Battle for Bikini Bottom
SpongeBob SquarePants Employee of the Month
SUPERAntiSpyware Professional
Switch Sound File Converter
The Game Of Life
The Incredibles - When Danger Calls
The Wild Thornberrys™ Rambler™
TheBells_ Screen Saver
Theorica Divx ;-) Codecs (remove only)
Turtle Bay
Uninstall Star Alliance Mileage Calculator
Uninstall Dual Mode Camera
Unity Web Player
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB932823-v3)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Video Journal Version 1.4
Virtools 3D Life Player
Wedding Dash 2® Deluxe
WinAce Archiver
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Favorites for Windows Live Toolbar
Windows Live installer
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar
Windows Live Toolbar Extension (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
WordBiz version 1.8
Yahoo! Install Manager
Yahoo! Search Protection
Yahoo!7 Toolbar
and finally another HJT log if needed:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:30:28 AM, on 17/04/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\sm56hlpr.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.hotbite.com.au/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://au.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://g.ninemsn.com.au/0SEENAU/SAOS01?FORM=TOOLBR
R3 - URLSearchHook: Yahoo!7 Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: &Yahoo;! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - (no file)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: LG SyncManager.lnk = C:\Program Files\LG PC Suite\LG PC Sync\LGSyncManager.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: &Windows; Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live; Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog; This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {049A470D-F818-4E34-B14D-E4E237DADCF8} (CPlayFirstFashionDasControl Object) -
http://www.shockwave.com/content/fashionda…eb.1.0.0.21.cab
O16 - DPF: {055B4212-4C81-448E-AFA9-C3CA4AAE8F95} (CPlayFirstDairyDashWControl Object) -
http://www.shockwave.com/content/dairydash…eb.1.0.0.12.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1…toUploader5.cab
O16 - DPF: {138E6DC9-722B-4F4B-B09D-95D191869696} (Bebo Uploader Control) - http://www.bebo.com/files/BeboUploader.5.1.4.cab
O16 - DPF: {2A510DC8-C9B5-4269-B9BA-E5B04D47D981} (CPlayFirstDDSonicControl Object) -
http://www.shockwave.com/content/dinerdash…ic.1.0.0.92.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/Facebo…toUploader3.cab
O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) -
http://www.shockwave.com/content/dinerdash…h2.1.0.0.67.cab
O16 - DPF: {6715D12F-213F-4C6E-ACE1-8A363F550B96} (CPlayFirstDoggieDashControl Object) -
http://www.shockwave.com/content/doggiedas…ash.1.0.0.6.cab
O16 - DPF: {6C7CAD20-85AA-475A-AC0D-303C4A9A69CE} (CPlayFirstGreatChocoControl Object) -
http://www.shockwave.com/content/greatchoc…eb.1.0.0.12.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
O16 - DPF: {87056D28-9730-4A47-B9F9-7E890B62C58A} (WildfireActiveXHost Class) -
http://www.shockwave.com/content/ghostfrenzy/sis/axhost.cab
O16 - DPF: {B516CA4E-A5BA-405C-AFCF-A97F08CC7429} (GoBit Games Player) -
http://www.shockwave.com/content/burgersho…esPlayer_v5.cab
O16 - DPF: {BAE1D8DF-0B35-47E3-A1E7-EEB3FF2ECD19} (CPlayFirstddfotgControl Object) -
http://www.shockwave.com/content/dinerdash…tg.1.0.0.33.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) -
http://www.arcadetown.com/swf/deliciousdel…zylomplayer.cab
O16 - DPF: {C0C0CB9B-BFEB-47C2-90FA-BE9692875ADB} (CPlayFirstPetShopHopControl Object) -
http://www.shockwave.com/content/petshopho…eb.1.0.0.17.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir…0/installer.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir…l/installer.exe
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) -
http://www.shockwave.com/content/feedingfr…outLauncher.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) -
http://www.shockwave.com/content/cinematyc…inematycoon.cab
O16 - DPF: {E13F1132-4CA0-4005-84D3-51406E27D269} (BTDownloadCtrl Control) -
http://www.shockwave.com/content/thinktank…ownloadCtrl.cab
O16 - DPF: {EA6246B4-F380-443F-8727-9AEA3371146C} (CPlayFirstWeddingDashControl Object) -
http://www.shockwave.com/content/weddingda…sh.1.0.0.47.cab
O20 - AppInit_DLLs: C:\WINDOWS\system32\mmmwbpfb.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
–
End of file - 11592 bytes
