johnekroll_WTT
Topic Starter
System have bean running without major problems for four years - but slowly getting more and more buggy'
Attempting to install a new program (appears to be cracked' - autch' …) it crashed, disabled the AV-applications… and often gets the "Error: Not A Valid win32 application" message…
"SpywareFighter" have detected "Rootkit.Bagle.21"
PC crached when pushing OK to RootRepeal - and all quick-launch butons disapeared … … …
So I just post what i have go until now /:-I
Best - John E. K. Denmark
DDS (Ver_09-06-26.01) - NTFSx86
Run by [removed] at 22:30:14,87 on 17-12-2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Professional 5.1.2600.3.1252.45.1030.18.3071.2109 [GMT 1:00]
AV: Eset NOD32 antivirus system 2.51 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Spyware Cease\SpywareCease.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\explorer.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Programmer\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Programmer\Windows Live\Toolbar\wltuser.exe
C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmer\Microsoft Office\Office10\WINWORD.EXE
C:\Programmer\Microsoft\Office Live\OfficeLiveSignIn.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Programmer\Microsoft Office\Office10\OUTLOOK.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\jek\Skrivebord\dds.scr
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.google.dk/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://search.live.com/sphome.aspx
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = *.local 127.0.0.1 127.0.0.1 127.0.0.1
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://search.live.com/sphome.aspx
uURLSearchHooks: H - No File
BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\programmer\yahoo!\companion\installs\cpn\yt.dll
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\programmer\hp\smart web printing\hpswp_printenhancer.dll
BHO: HP Print Clips: {053f9267-dc04-4294-a72c-58f732d338c0} - c:\programmer\hp\smart web printing\hpswp_framework.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\programmer\fælles filer\adobe\acrobat\activex\AcroIEHelper.dll
BHO: ContributeBHO Class: {074c1dc5-9320-4a9a-947d-c042949c6216} - c:\programmer\adobe\/Adobe Contribute CS3/contributeieplugin.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Spybot-S&D; IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\programmer\spybot - search & destroy\SDHelper.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\programmer\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Hjælp til tilmelding til Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\programmer\fælles filer\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\programmer\google\google toolbar\GoogleToolbar.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\programmer\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\programmer\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\programmer\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\programmer\windows live\toolbar\wltcore.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\programmer\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\programmer\yahoo!\companion\installs\cpn\yt.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
TB: Contribute Toolbar: {517bdde4-e3a7-4570-b21e-2b52b6139fc7} - c:\programmer\adobe\/Adobe Contribute CS3/contributeieplugin.dll
TB: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
TB: &Windows; Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\programmer\windows live\toolbar\wltcore.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\programmer\google\google toolbar\GoogleToolbar.dll
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [LDM] c:\programmer\logitech\desktop messenger\8876480\program\LogitechDesktopMessenger.exe
uRun: [swg] c:\programmer\google\googletoolbarnotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
uRun: [SpybotSD TeaTimer] c:\programmer\spybot - search & destroy\TeaTimer.exe
uRun: [Steam] "c:\programmer\steam\Steam.exe" -silent
uRun: [Skype] "c:\programmer\skype\phone\Skype.exe" /nosplash /minimized
mRun: [NVRaidService] c:\windows\system32\nvraidservice.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [nod32kui] "c:\programmer\eset\nod32kui.exe" /WAITSERVICE
mRun: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [OODefragTray] c:\windows\system32\oodtray.exe
mRun: [HPDJ Taskbar Utility] c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exe
mRun: [Acrobat Assistant 8.0] "c:\programmer\adobe\acrobat 8.0\acrobat\Acrotray.exe"
mRun: []
mRun: [Adobe_ID0EYTHM] c:\progra~1\fllesf~1\adobe\adobev~1\server\bin\VERSIO~2.EXE
mRun: [AppleSyncNotifier] c:\programmer\fælles filer\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [LogitechCommunicationsManager] "c:\programmer\fælles filer\logishrd\lcommgr\Communications_Helper.exe"
mRun: [LogitechQuickCamRibbon] "c:\programmer\logitech\quickcam\Quickcam.exe" /hide
mRun: [HP Software Update] c:\programmer\hp\hp software update\HPWuSchd2.exe
mRun: [XoftSpySE] "c:\programmer\xoftspyse6\XoftSpySE.exe" -NM -hidesplash
mRun: [SunJavaUpdateSched] "c:\programmer\java\jre6\bin\jusched.exe"
mRun: [iTunesHelper] "c:\programmer\itunes\iTunesHelper.exe"
mRun: [Adobe ARM] "c:\programmer\fælles filer\adobe\arm\1.0\AdobeARM.exe"
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [RoxioEngineUtility] "c:\programmer\fælles filer\roxio shared\system\EngUtil.exe"
mRun: [RoxioDragToDisc] "c:\programmer\roxio\easy cd creator 6\dragtodisc\DrgToDsc.exe"
mRun: [RoxioAudioCentral] "c:\programmer\roxio\easy cd creator 6\audiocentral\RxMon.exe"
mRun: [MMTray] "c:\programmer\musicmatch\musicmatch jukebox\mm_tray.exe"
mRun: [mmtask] "c:\programmer\musicmatch\musicmatch jukebox\mmtask.exe"
mRun: [LocalCooling] "c:\programmer\localcooling\localcooling.exe" -s
mRun: [LiveMonitor] c:\programmer\msi\live update 3\LMonitor.exe
mRun: [SpywareCease.exe] c:\programmer\spyware cease\SpywareCease.exe
mRun: [SWPROguard] c:\programmer\fighters\spywarefighter\SWPROTray.exe
mRun: [QuickTime Task] "c:\programmer\quicktime\qttask.exe" -atboottime
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\jek\menuen~1\progra~1\start\magicd~1.lnk - c:\programmer\magicdisc\MagicDisc.exe
StartupFolder: c:\documents and settings\jek\menuen start\programmer\start\PowerReg Scheduler.exe
StartupFolder: c:\docume~1\alluse~1\menuen~1\progra~1\start\adober~1.lnk - c:\programmer\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\menuen~1\progra~1\start\hpdigi~1.lnk - c:\programmer\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\docume~1\alluse~1\menuen~1\progra~1\start\logite~2.lnk - c:\programmer\logitech\desktop messenger\8876480\program\LogitechDesktopMessenger.exe
StartupFolder: c:\docume~1\alluse~1\menuen~1\progra~1\start\logite~1.lnk - c:\programmer\logitech\setpoint\SetPoint.exe
StartupFolder: c:\docume~1\alluse~1\menuen~1\progra~1\start\micros~1.lnk - c:\programmer\microsoft office\office10\OSA.EXE
mPolicies-system: EnableLUA = 0 (0x0)
IE: Add to Google Photos Screensa&ver; - c:\windows\system32\GPhotos.scr/200
IE: Append to existing PDF - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\programmer\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&ksporter; til Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: E&xport; to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Locate Spot on Map by GPS - c:\programmer\opanda\iexif 2.3\IExifMap.htm
IE: View Exif/GPS/IPTC with IExif - c:\programmer\opanda\iexif 2.3\IExifCom.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\programmer\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\programmer\windows live\writer\WriterBrowserExtension.dll
IE: {58ECB495-38F0-49cb-A538-10282ABF65E7} - {E763472E-A716-4CD9-89BD-DBDA6122F741} - c:\programmer\hp\smart web printing\hpswp_extensions.dll
IE: {700259D7-1666-479a-93B1-3250410481E8} - {A93C41D8-01F8-4F8B-B14C-DE20B117E636} - c:\programmer\hp\smart web printing\hpswp_extensions.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\programmer\spybot - search & destroy\SDHelper.dll
LSP: imon.dll
DPF: {00000161-9980-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/msaud.cab
DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} - hxxp://downol.dr.dk/download/netradio/Rawflow.cab
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab
DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E}
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {2DA3C4AB-E6B6-47A6-B0F3-1BD81524B51B} - hxxp://www.activeworlds.com/products/ActiveWorldsDownload.cab
DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} - hxxp://www.cult3d.com/download/cult.cab
DPF: {32564D57-9980-0010-8000-00AA00389B71} - hxxp://codecs.microsoft.com/codecs/i386/wmv8dmo.cab
DPF: {3334504D-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/0/C/8/0C8EDFAB-30BC-4792-898E-2DABE27B2C4D/mp43dmo.CAB
DPF: {33564D57-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab
DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} - hxxp://www.turntool.com/ViewerInstall.exe
DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} - hxxp://www.linkedin.com/cab/LinkedInContactFinderControl.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
DPF: {594ECDD4-A991-4208-A7B7-00DDAD9BE328} - hxxp://media.labs.live.com/all/ps/_code_/Photosynth.cab
DPF: {5D2CF9D0-113A-476B-986F-288B54571614} - hxxp://www.devalvr.com/instalacion/plugin/devalocx.cab
DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} - hxxp://www.geni.com/ImageUploader_5_5.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1154122721296
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1155714307578
DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} - hxxps://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
DPF: {86A88967-7A20-11D2-8EDA-00600818EDB1} - hxxp://www.parallelgraphics.com/bin/cortvrml.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {9393AF10-1A0E-4F10-B32B-E57CB4543F49} - hxxp://launcher.room-3.com/room3_40/room3_40.cab
DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} - hxxp://kamerahuset.click.dk/click/_res/developer/ImageUploader3.cab
DPF: {A6EE3F8E-925E-11D4-892D-0000C0D84CF5} - hxxp://www.3dcompress.com/download/3DSee.cab
DPF: {B6905E70-4B33-11D3-A498-0008C7DB06E6} - hxxp://web1.web.shost.dk/AxaptaWebDeploy/AxWebDeploy.cab
DPF: {B6982537-59D6-4A4B-9AE8-B4EC9DB0E223} - hxxp://cadcon.niras.dk/visualiseringer/nw_ax.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - hxxp://a532.g.akamai.net/f/532/6712/5m/virtools.download.akamai.com/6712/player/install/installer.exe
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {F81FB289-0FB6-4FE0-A488-101447EE1ED3} - hxxp://research.microsoft.com/ivm/HDView/HDViewXP.cab
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\programmer\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\programmer\logitech\desktop messenger\8876480\program\GAPlugProtocol-8876480.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\fllesf~1\skype\SKYPE4~1.DLL
Notify: LBTWlgn - c:\programmer\fælles filer\logitech\bluetooth\LBTWlgn.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\jek\applic~1\mozilla\firefox\profiles\6zun9jzv.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q;=
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.dk/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q;=
FF - plugin: c:\documents and settings\jek\application data\mozilla\firefox\profiles\6zun9jzv.default\extensions\[removed]\plugins\nptnt.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nppl3260.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nprjplug.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nprpjplug.dll
FF - plugin: c:\programmer\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\programmer\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\programmer\google\picasa3\npPicasa2.dll
FF - plugin: c:\programmer\google\picasa3\npPicasa3.dll
FF - plugin: c:\programmer\google\update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\programmer\microsoft research\hdview for firefox\nphdview.dll
FF - plugin: c:\programmer\microsoft\office live\npOLW.dll
FF - plugin: c:\programmer\mozilla firefox\plugins\npdbplug.dll
FF - plugin: c:\programmer\opera\program\plugins\npdivx32.dll
FF - plugin: c:\programmer\photosynth\npPhotosynthMozilla.dll
FF - plugin: c:\programmer\virtools\3d life player\npvirtools.dll
FF - plugin: c:\programmer\virtual earth 3d\npVE3D.dll
FF - plugin: c:\programmer\windows live\photo gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmer\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmer\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmer\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmer\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmer\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmer\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmer\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmer\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmer\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
============= SERVICES / DRIVERS ===============
R0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [2007-11-5 38448]
R1 sK9Ou0s;sK9Ou0s;c:\windows\system32\srosa2.sys [2009-12-14 7168]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-3-2 55152]
R2 SeaPort;SeaPort;c:\programmer\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
R3 AVFSFilter;AVFSFilter;c:\windows\system32\drivers\avfsfilter.sys [2009-12-11 10264]
R3 RkHit;RkHit;c:\windows\system32\drivers\RKHit.sys [2009-12-15 34736]
R3 WEBNTACCESS;WEBNTACCESS;c:\windows\system32\Ntaccess.sys [2006-8-3 18359]
S2 AV Engine Scanning Service;AV Engine Scanning Service;c:\programmer\fælles filer\common toolkit suite\avengine\AVScanningService.exe [2009-12-11 661888]
S2 Common Toolkit Service;Common Toolkit Service;c:\programmer\fælles filer\common toolkit suite\FighterSuiteService.exe [2009-12-11 676488]
S2 gupdate;Tjenesten Google Update (gupdate);c:\programmer\google\update\GoogleUpdate.exe [2009-8-30 133104]
S2 Viewpoint Manager Service;Viewpoint Manager Service;"c:\programmer\viewpoint\common\viewpointservice.exe" –> c:\programmer\viewpoint\common\ViewpointService.exe [?]
S2 aawservice;Lavasoft Ad-Aware Service;c:\programmer\lavasoft\ad-aware\aawservice.exe [2008-5-12 611664]
S3 fsssvc;Windows Live Family Safety;c:\programmer\windows live\family safety\fsssvc.exe [2009-2-6 533360]
S3 PD100VID;Video Blaster WebCam 5 (WDM);c:\windows\system32\drivers\PD100Vid.sys [2006-12-4 374200]
S3 XoftSpyService;XoftSpyService;c:\programmer\fælles filer\xoftspyse\6\xoftspyservice.exe [2009-8-28 582424]
S4 NOD32krn;NOD32 Kernel Service;c:\programmer\eset\nod32krn.exe [2006-7-28 507904]
S4 Wdhelteerrso;Wdhelteerrso; [x]
=============== Created Last 30 ================
2009-12-15 21:58 –d—– c:\docume~1\alluse~1\applic~1\clp
2009-12-15 21:57 –d—– c:\docume~1\jek\applic~1\Common Toolkit Suite
2009-12-15 21:56 –d—– c:\programmer\Fighters
2009-12-15 21:56 –d—– c:\docume~1\alluse~1\applic~1\Common Toolkit Suite
2009-12-15 21:56 –d—– c:\programmer\fælles filer\Common Toolkit Suite
2009-12-15 21:53 -cd-h— c:\docume~1\alluse~1\applic~1\{7516B6E8-5C01-4895-B079-DFC32A4ADEE1}
2009-12-15 21:53 –d—– c:\docume~1\jek\applic~1\Fighters
2009-12-15 21:12 136,647 a——- C:\MGlogs.zip
2009-12-15 21:12 –d—– C:\MGtools
2009-12-15 12:08 42 a——- c:\windows\system32\scud.udf
2009-12-15 12:08 34,736 a——- c:\windows\system32\drivers\RKHit.sys
2009-12-15 12:08 –d—– c:\programmer\Spyware Cease
2009-12-15 11:42 2,385,267 a——- C:\MGtools.exe
2009-12-15 11:26 –d—– C:\Antivirus
2009-12-15 10:46 –d—– c:\programmer\CCleaner
2009-12-14 01:23 –d—– c:\programmer\Panorama Tools (PTGui edition)
2009-12-14 00:54 7,168 a——- c:\windows\system32\srosa2.sys
2009-12-14 00:46 –d-h— c:\docume~1\jek\applic~1\drivers
2009-12-13 00:11 –d—– c:\docume~1\jek\applic~1\com.adobe.example.avatarAirApplication.199ED43C2CFEB351CD0244628B93195D7C58
F98C.1
2009-12-13 00:11 –d—– c:\programmer\Avatar Desktop App
2009-12-11 13:34 10,264 a——- c:\windows\system32\drivers\avfsfilter.sys
2009-12-01 16:56 25 a——- c:\windows\popcinfot.dat
2009-12-01 16:55 –d—– c:\docume~1\alluse~1\applic~1\PopCap Games
2009-12-01 16:54 –d—– c:\programmer\PopCap Games
2009-11-30 11:47 5,632 a——- c:\windows\system32\ptpusb.dll
2009-11-30 11:47 159,232 a——- c:\windows\system32\ptpusd.dll
2009-11-25 22:11 –d—– c:\programmer\iPod
2009-11-19 14:22 –d—– c:\programmer\Moyea
==================== Find3M ====================
2009-12-13 00:14 1,310,901 a——- c:\programmer\avatar.air
2009-12-12 01:48 459,228 a——- c:\windows\system32\perfh006.dat
2009-12-12 01:48 83,478 a——- c:\windows\system32\perfc006.dat
2009-11-14 01:47 856,064 a——- c:\windows\system32\divx_xx0c.dll
2009-11-14 01:47 856,064 a——- c:\windows\system32\divx_xx07.dll
2009-11-14 01:47 847,872 a——- c:\windows\system32\divx_xx0a.dll
2009-11-14 01:47 843,776 a——- c:\windows\system32\divx_xx16.dll
2009-11-14 01:47 839,680 a——- c:\windows\system32\divx_xx11.dll
2009-11-14 01:47 696,320 a——- c:\windows\system32\DivX.dll
2009-10-29 08:43 916,480 a——- c:\windows\system32\wininet.dll
2009-10-21 06:39 75,776 a——- c:\windows\system32\strmfilt.dll
2009-10-21 06:39 25,088 a——- c:\windows\system32\httpapi.dll
2009-10-20 17:20 265,728 ——– c:\windows\system32\drivers\http.sys
2009-10-13 11:34 270,848 a——- c:\windows\system32\oakley.dll
2009-10-12 14:40 150,016 a——- c:\windows\system32\rastls.dll
2009-10-12 14:40 79,872 a——- c:\windows\system32\raschap.dll
2009-10-11 04:17 411,368 a——- c:\windows\system32\deploytk.dll
2009-08-13 10:31 106,864 a——- c:\docume~1\jek\applic~1\GDIPFONTCACHEV1.DAT
2009-06-30 16:53 0 a——- c:\documents and settings\jek\temp.dat
2009-06-26 15:30 0 a——- c:\docume~1\alluse~1\applic~1\PKP_DLea.DAT
2009-06-23 23:06 0 a——- c:\docume~1\alluse~1\applic~1\PKP_DLbx.DAT
2009-06-15 19:24 665 a——- c:\programmer\NewProject.pqp
2009-06-07 22:19 64 a——- c:\programmer\c5user.sys
2009-06-02 14:02 2,698,018 a——- c:\programmer\c5data.DAT
2008-12-11 14:13 167 a——- c:\documents and settings\jek\udownload.dat
2008-12-02 00:00 12,006 a——- c:\programmer\usr0002.tbl
2008-11-23 19:30 16,544 a——- c:\programmer\c5util.usr
2008-11-23 17:09 8,192 a——- c:\programmer\c5modalt.is
2008-11-23 17:09 522,240 a——- c:\programmer\c5sysali.is
2008-11-23 17:09 299,008 a——- c:\programmer\c5sysalc.is
2008-11-23 17:09 8,192 a——- c:\programmer\c5modalt.uk
2008-11-23 17:09 8,192 a——- c:\programmer\c5modalt.de
2008-11-23 17:09 526,336 a——- c:\programmer\c5sysali.uk
2008-11-23 17:09 299,008 a——- c:\programmer\c5sysalc.uk
2008-11-23 17:09 120,832 a——- c:\programmer\c5sysali.de
2008-11-23 17:09 112,640 a——- c:\programmer\c5sysalc.de
2008-11-21 14:44 24,736 a——- c:\programmer\C5menu.dat
2008-11-20 23:55 516,087 a——- c:\programmer\c5direct.sys
2008-11-20 23:55 165 a——- c:\programmer\c5codes.sys
2008-11-20 23:52 8,192 a——- c:\programmer\c5modalt.dk
2008-11-20 23:52 530,432 a——- c:\programmer\c5sysali.dk
2008-11-20 23:52 299,008 a——- c:\programmer\c5sysalc.dk
2008-11-20 23:52 4,804 a——- c:\programmer\c5txtidx.dk
2008-11-20 23:48 711 a——- c:\programmer\Installation.ini
2008-03-21 12:36 32 a——- c:\docume~1\alluse~1\applic~1\ezsid.dat
2007-10-31 17:29 31,014,328 a——- c:\programmer\c5util.sys
2007-10-31 16:56 20,732,511 a——- c:\programmer\c5data.DMO
2007-10-31 08:56 800,685 a——- c:\programmer\c5sysald.is
2007-10-30 20:30 814,807 a——- c:\programmer\c5sysald.dk
2007-10-30 20:22 812,506 a——- c:\programmer\c5sysald.uk
2007-10-30 12:01 67,590 a——- c:\programmer\C5menu.dev
2007-10-29 17:34 34,033 a——- c:\programmer\zipcode_dk.csv
2007-10-28 16:04 48,761 a——- c:\programmer\wizardis.sys
2007-10-28 16:02 48,377 a——- c:\programmer\wizarddk.sys
2007-10-28 15:28 48,761 a——- c:\programmer\wizarduk.sys
2007-10-27 13:17 56,634 a——- c:\programmer\Wizard.bmp
2007-10-26 16:47 444,486 ac—— c:\programmer\C5.bmp
2007-10-25 16:39 570,930 a——- c:\programmer\Exp4200.sys
2007-10-22 22:17 307,986 a——- c:\programmer\M_dat.bmp
2007-10-22 08:02 224,857 a——- c:\programmer\c5txtdat.uk
2007-10-22 06:24 233,389 a——- c:\programmer\c5txtdat.dk
2007-10-19 10:58 15,537 a——- c:\programmer\c5sysald.de
2007-10-16 09:54 227,296 a——- c:\programmer\c5txtdat.is
2007-09-26 09:53 491,297 a——- c:\programmer\DynC5Lon.kom
2007-09-26 09:53 49,195 a——- c:\programmer\DynC5LonSt.kom
2007-08-21 06:05 37,393 a——- c:\programmer\ParmHelp.chm
2007-08-13 17:20 19,086 a——- c:\programmer\Sqlsrvr_C5.xal
2007-08-13 17:19 16,896 a——- c:\programmer\c5menu.mss
2007-08-13 17:19 16,448 a——- c:\programmer\c5menu.dba
2007-08-13 17:18 7,920 a——- c:\programmer\usr0001.tbl
2007-08-13 17:18 7,920 a——- c:\programmer\usr0000.tbl
2007-08-13 17:18 3,798 a——- c:\programmer\Warning.BMP
2007-08-13 17:18 1,596 a——- c:\programmer\TTWIN.DAT
2007-08-13 17:18 1,596 a——- c:\programmer\TTDOS.DAT
2007-08-13 17:18 25,751 a——- c:\programmer\PROLOG.PS
2007-08-13 17:18 20,988 a——- c:\programmer\PARSER.TBL
2007-08-13 17:18 655 a——- c:\programmer\PTOH.AWK
2007-08-13 17:18 163 a——- c:\programmer\TRAILER.PS
2007-08-13 17:18 10,462 ac—— c:\programmer\C5.ico
2007-08-13 17:18 33 a——- c:\programmer\c5.ini
2006-07-04 14:07 4,841 a——- c:\programmer\zipcode_is.csv
2005-03-31 09:22 17,067 a——- c:\programmer\html.xsl
2004-11-04 14:14 2,560 a——- c:\programmer\Wn8x10.tbl
2004-11-04 14:14 32,744 a——- c:\programmer\zipcode_uk.csv
2004-11-04 14:12 9,311 a——- c:\programmer\Header.ps
2004-11-04 14:12 5,104 a——- c:\programmer\F800256.win
2004-11-04 14:12 5,104 a——- c:\programmer\F640256.win
2004-11-04 14:12 5,104 a——- c:\programmer\F1024256.win
2004-11-04 14:12 5,052 a——- c:\programmer\F80016.win
2004-11-04 14:12 5,052 a——- c:\programmer\F64016.win
2004-11-04 14:12 5,052 a——- c:\programmer\F102416.win
2004-11-04 14:10 146 a——- c:\programmer\c5sort.SYS
2004-11-04 14:10 146 a——- c:\programmer\c5sort.dk
2003-05-22 20:12 2,441,216 a——- c:\programmer\cutftp32.exe
2002-05-23 03:57 9,776 a——- c:\programmer\patch.exe
2002-03-14 07:32 146 a——- c:\programmer\c5sort.uk
2002-03-14 07:32 146 a——- c:\programmer\c5sort.is
============= FINISH: 22:31:08,84 ===============
