What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

IE Search results links go to other websites

30 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
When I search for a topic in the search / address bar in IE 9
Vista Home Basic Edition SP2

Example: I type lizard in the search bar, the first results shows link to en.wikipedia.org/wiki/Lizard, but when I select that link, it brings me to http://www.budgetmatch.net/us/v25/searcha….p;aff=and2-2751 (after passing through a couple of links that I can't quite catch)

here is my Hijackthis Log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:28:39 PM, on 4/26/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\Yahoo!\Common\YMailAdvisor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Verizon\McciTrayApp.exe
C:\Program Files\VERIZONDM\bin\sprtcmd.exe
C:\Program Files\Verizon\VSP\VerizonServicepoint.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Panasonic\VideoCam Suite 2\VideoCamSuiteAutoStart.exe
C:\Program Files\EDIMAX\Common\RaUI.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Verizon\VSP\VerizonServicepointComHandler.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [YMailAdvisor] "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Verizon_McciTrayApp] "C:\Program Files\Verizon\McciTrayApp.exe"
O4 - HKLM\..\Run: [VERIZONDM] "C:\Program Files\VERIZONDM\bin\sprtcmd.exe" /P VERIZONDM
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Dmqgr] rundll32 "C:\Users\Mom\AppData\Roaming\ISUSPMD.dll",CWRYALKRF
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: VideoCam Suite 2.0.lnk = ?
O4 - Global Startup: Wireless Utility.lnk = C:\Program Files\EDIMAX\Common\RaUI.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {75A6AEA3-F26E-4608-AE9B-8DA78C87576E} (Wizard101GameLauncher) - https://kingsisle.hs.llnwd.net/e1/static/th…ameLauncher.CAB
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - C:\Program Files\Cozi Express\CoziProtocolHandler.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
O23 - Service: ServicepointService - Radialpoint Inc. - C:\Program Files\Verizon\VSP\ServicepointService.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - Unknown owner - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (verizondm) (sprtsvc_verizondm) - SupportSoft, Inc. - C:\Program Files\VERIZONDM\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SupportSoft Repair Service (verizondm) (tgsrvc_verizondm) - SupportSoft, Inc. - C:\Program Files\VERIZONDM\bin\tgsrvc.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

–
End of file - 10361 bytes
Post #2
Posted Image


DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.

Vista and Windows 7 users:
1. These tools MUST be run from the executable. (.exe) every time you run them
2. With Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

I suggest you do this:

XP Users

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Uncheck "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Uncheck "Hide protected operating system files."
Click Apply, and then click OK.


Vista Users

To enable the viewing of hidden and protected system files in Windows Vista please follow these steps:

Close all programs so that you are at your desktop.
Click on the Start button. This is the small round button with the Windows flag in the lower left corner.

Click on the Control Panel menu option.
When the control panel opens you can either be in Classic View or Control Panel Home view:

If you are in the Classic View do the following:
Double-click on the Folder Options icon.
Click on the View tab.


If you are in the Control Panel Home view do the following:

Click on the Appearance and Personalization link.
Click on Show Hidden Files or Folders.
Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
Remove the checkmark from the checkbox labeled Hide extensions for known file types.
Remove the checkmark from the checkbox labeled Hide protected operating system files.



Please do not delete anything unless instructed to.


I've been seeing some Java infections lately.

Go here and follow the instructions to clear your Java Cache
http://www.java.com/en/download/help/plugin_cache.xml


Next:
Note: Close all browsers before running ATF Cleaner: IE, FireFox, etc.

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox browser

Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.


It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

Next:

Please download Malwarebytes' Anti-Malware to your desktop.


  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • [external image: Posted Image]
  • Then click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.


Also please describe how your computer behaves at the moment.


Please don't attach the scans / logs, use "copy/paste".
Post #3
Please don't close this post due to inactivity, I was just able to see the reply today - all other days I was getting a database error when I tried to view.
Post #4

Please don't close this post due to inactivity, I was just able to see the reply today - all other days I was getting a database error when I tried to view.

:thumbup:
Post #5
I followed all of your steps - but it did not fix my problem. I don't seem to see any other adverse affects on my PC other than with web search result links not going where they are supposed to.
I do notice that if I go to IE Settings…Internet Options, and go to the Advanced Tab and hit the Reset button, this corrects the problem temporarily; but something seems to be turning it back on.

Here is an example of a search I did before resetting Advanced Options in IE settings:

I just typed "bearded dragons" in my address/search bar in IE 9 using Google search, and the first result was:

Pet Bearded Dragon Lizard Facts & Information | Bearded Dragon GuideBearded dragons make a great pet lizard.
They don't get too large, eat a wide variety of foods, are active during the day, and are gentle animals. …
Care Sheet - Food & Diet - Baby Dragons - Cages & Supplies
www.beardeddragonguide.com/ - Cached - Similar

But when I click on the link, it takes me to
http://www.findstuff.com/search.php?uvx=33…nbsYp7yTpU4JX0*

Before it gets to this final link, it does temporarily route through:
http://www.icityfind.com/jump1/?affiliate=…p;mr=1&rc=0

This same thing happens when I search using any search site directly too - not just in the IE 9 search bar. Yahoo.com, Google.com,

After I reset IE advanced settings, and reopen IE, I go to the link that is listed in the results.



Here is my Malwarebytes log:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6490

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

5/2/2011 6:42:03 AM
mbam-log-2011-05-02 (06-42-03).txt

Scan type: Quick scan
Objects scanned: 205724
Time elapsed: 34 minute(s), 12 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
Post #6 last edited
Download aswMBR.exe ( 511KB ) to your desktop.

Double click the aswMBR.exe to run it

Click the "Scan" button to start scan
[external image: Posted Image]

On completion of the scan click save log, save it to your desktop and post in your next reply
[external image: Posted Image]
Post #7
aswMBR version 0.9.5.247 Copyright© 2011 AVAST Software Run date: 2011-05-02 19:59:57 —————————– 19:59:57.267 OS Version: Windows 6.0.6002 Service Pack 2 19:59:57.267 Number of processors: 2 586 0x170A 19:59:57.267 ComputerName: KITCHEN-PC UserName: Mom 20:00:05.535 Initialize success 20:00:08.312 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-2 20:00:08.312 Disk 0 Vendor: ST350041 CC44 Size: 476940MB BusType: 3 20:00:08.359 Disk 0 MBR read successfully 20:00:08.359 Disk 0 MBR scan 20:00:08.359 Disk 0 unknown MBR code 20:00:08.406 Disk 0 scanning sectors +976771120 20:00:08.484 Disk 0 scanning C:\Windows\system32\drivers 20:00:20.199 Service scanning 20:00:22.461 Disk 0 trace - called modules: 20:00:22.493 ntkrnlpa.exe CLASSPNP.SYS disk.sys iastor.sys hal.dll 20:00:22.493 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x87084728] 20:00:22.493 3 CLASSPNP.SYS[8b3aa8b3] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-2[0x8653e028] 20:00:22.493 Scan finished successfully 20:00:35.253 Disk 0 MBR has been saved successfully to "C:\Users\Mom\Desktop\MBR.dat" 20:00:35.269 The log file has been saved successfully to "C:\Users\Mom\Desktop\aswMBR.txt"
Post #8
Vista and Windows 7 users:
1. These tools MUST be run from the executable. (.exe) every time you run them
2. With Admin Rights (Right click, choose "Run as Administrator")


Download ComboFix from one of these locations:

Link 1
Link 2 If using this link, Right Click and select Save As.


* IMPORTANT !!! Save ComboFix.exe to your Desktop


  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : Protective Programs

  • Double click on ComboFix.exe & follow the prompts.

    Notes: Combofix will run without the Recovery Console installed. Skip the Recovery Console part if you're running Vista or Windows 7.

    Note: If you have XP SP3, use the XP SP2 package.
    If Vista or Windows 7, skip the Recovery Console part
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


[external image: Posted Image]



Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt using Copy / Paste in your next reply.


Notes:

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Give it atleast 20-30 minutes to finish if needed.

Please do not attach the scan results from Combofx. Use copy/paste.

Also please describe how your computer behaves at the moment.
Post #9
ComboFix 11-05-03.02 - Mom 05/03/2011 20:36:26.2.2 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.1.1033.18.3070.1730 [GMT -4:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2011-04-04 to 2011-05-04 )))))))))))))))))))))))))))))))
.
.
2011-05-04 00:41 . 2011-05-04 00:41 ——– d—–w- c:\users\Guest\AppData\Local\temp
2011-05-04 00:41 . 2011-05-04 00:41 ——– d—–w- c:\users\Default\AppData\Local\temp
2011-05-04 00:41 . 2011-05-04 00:41 ——– d—–w- c:\users\Daddy\AppData\Local\temp
2011-05-03 11:54 . 2011-05-04 00:41 ——– d—–w- c:\users\Mom\AppData\Local\temp
2011-05-03 01:04 . 2011-05-03 01:05 ——– d—–w- c:\users\Mom\AppData\Local\{0DE41B97-5395-4E68-9DD2-E4A6AF8800F5}
2011-05-02 13:04 . 2011-05-02 13:04 ——– d—–w- c:\users\Mom\AppData\Local\{78C52151-CC6B-49D8-8071-48161EFD32DD}
2011-05-02 01:03 . 2011-05-02 01:03 ——– d—–w- c:\users\Mom\AppData\Local\{522E4940-6677-4CE1-A058-2BAE54AB0B8E}
2011-05-01 13:03 . 2011-05-01 13:03 ——– d—–w- c:\users\Mom\AppData\Local\{5BDE74BD-4241-4DEE-8C48-5D8A509F639F}
2011-05-01 11:12 . 2011-05-01 11:12 ——– d—–w- c:\program files\iPod
2011-05-01 11:12 . 2011-05-01 11:13 ——– d—–w- c:\program files\iTunes
2011-05-01 11:09 . 2011-05-01 11:09 ——– d—–w- c:\program files\Bonjour
2011-05-01 01:02 . 2011-05-01 01:02 ——– d—–w- c:\users\Mom\AppData\Local\{FC9FB11F-DB78-49E8-99D4-40B4A6681A98}
2011-04-30 13:01 . 2011-04-30 13:02 ——– d—–w- c:\users\Mom\AppData\Local\{087ADFDC-2CCE-4FF5-920A-44324581D030}
2011-04-30 01:01 . 2011-04-30 01:01 ——– d—–w- c:\users\Mom\AppData\Local\{39D8937C-635A-4025-91EC-C830C79A179A}
2011-04-29 13:00 . 2011-04-29 13:01 ——– d—–w- c:\users\Mom\AppData\Local\{9117C60C-BFB8-4E7B-A864-81B99996BFD4}
2011-04-29 01:00 . 2011-04-29 01:00 ——– d—–w- c:\users\Mom\AppData\Local\{DAC7ECC1-CD2B-4A5C-A7FB-24F464038A9C}
2011-04-28 12:59 . 2011-04-28 13:00 ——– d—–w- c:\users\Mom\AppData\Local\{6173C2F6-1096-4DF0-93B9-031987E64F1F}
2011-04-28 00:59 . 2011-04-28 00:59 ——– d—–w- c:\users\Mom\AppData\Local\{8443DD7B-EAC4-4825-8ED2-9E518199DD5C}
2011-04-27 12:58 . 2011-04-27 12:59 ——– d—–w- c:\users\Mom\AppData\Local\{DA777732-83CA-45A4-BAD2-7A4EC7DF27D3}
2011-04-27 04:05 . 2011-03-03 15:40 28672 —-a-w- c:\windows\system32\Apphlpdm.dll
2011-04-27 04:05 . 2011-03-03 13:35 4240384 —-a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2011-04-27 04:05 . 2011-03-12 21:55 876032 —-a-w- c:\windows\system32\XpsPrint.dll
2011-04-27 00:58 . 2011-04-27 00:58 ——– d—–w- c:\users\Mom\AppData\Local\{191EEB87-B7DA-4039-829B-8E5E7FB0C09B}
2011-04-26 12:57 . 2011-04-26 12:57 ——– d—–w- c:\users\Mom\AppData\Local\{1A5D9E9A-9BCA-401E-A36A-721596840318}
2011-04-26 00:30 . 2011-04-26 00:31 ——– d—–w- c:\users\Mom\AppData\Local\{47EA0A73-8750-423A-B005-1DC20A6325F0}
2011-04-25 12:30 . 2011-04-25 12:30 ——– d—–w- c:\users\Mom\AppData\Local\{FEF7AF76-B011-4D74-B8A4-D07E262A3829}
2011-04-25 00:29 . 2011-04-25 00:29 ——– d—–w- c:\users\Mom\AppData\Local\{23960EC4-79E4-4351-BE32-09A394CF03FE}
2011-04-24 12:29 . 2011-04-24 12:29 ——– d—–w- c:\users\Mom\AppData\Local\{25C09D14-7946-451F-BEAE-DC8846B250FE}
2011-04-24 00:28 . 2011-04-24 00:28 ——– d—–w- c:\users\Mom\AppData\Local\{75BA5B2D-F320-4626-AFDC-6F2F13902ED2}
2011-04-23 21:27 . 2011-04-23 21:27 ——– d—–w- c:\users\Mom\Citrix
2011-04-23 12:27 . 2011-04-23 12:28 ——– d—–w- c:\users\Mom\AppData\Local\{49262273-B4D8-4640-94F5-69BBE1233E02}
2011-04-23 00:27 . 2011-04-23 00:27 ——– d—–w- c:\users\Mom\AppData\Local\{A16B6D49-8175-4B02-A3CD-DB58ACDDB557}
2011-04-22 11:04 . 2011-04-22 11:04 ——– d—–w- c:\users\Mom\AppData\Local\{7675E311-C043-4478-80DD-3DD2188AD408}
2011-04-21 23:03 . 2011-04-21 23:03 ——– d—–w- c:\users\Mom\AppData\Local\{84606315-6C8B-4B2F-9F41-60C3DBB58C10}
2011-04-21 11:03 . 2011-04-21 11:03 ——– d—–w- c:\users\Mom\AppData\Local\{70D188A5-5604-46CA-9905-CF6AE117CD01}
2011-04-20 23:02 . 2011-04-20 23:02 ——– d—–w- c:\users\Mom\AppData\Local\{DE8E5E15-1CFF-4D02-B136-467DD3B6DA35}
2011-04-20 11:01 . 2011-04-20 11:02 ——– d—–w- c:\users\Mom\AppData\Local\{C61CD734-BD59-4096-9FB2-535C69751654}
2011-04-19 23:01 . 2011-04-19 23:01 ——– d—–w- c:\users\Mom\AppData\Local\{2A6E38E3-714F-429A-8FCA-D7884CF76499}
2011-04-19 18:21 . 2011-04-19 18:21 ——– d—–w- c:\users\Daddy\AppData\Local\{340366FC-6421-49F2-90B4-710495557331}
2011-04-19 11:00 . 2011-04-19 11:00 ——– d—–w- c:\users\Mom\AppData\Local\{264FC977-95D2-4A40-AC2F-952F8FDE6084}
2011-04-18 22:59 . 2011-04-18 22:59 ——– d—–w- c:\users\Mom\AppData\Local\{7963AFF1-D707-4719-AD7C-1080FD0CE102}
2011-04-18 15:01 . 2011-04-18 15:01 ——– d—–w- c:\users\Daddy\AppData\Local\{ECB85FB7-C7C0-42D9-BC2F-FC1A595D9CE2}
2011-04-18 10:59 . 2011-04-18 10:59 ——– d—–w- c:\users\Mom\AppData\Local\{FD6A09AF-5622-4836-A0E6-DFAA9ADC8C41}
2011-04-17 22:58 . 2011-04-17 22:58 ——– d—–w- c:\users\Mom\AppData\Local\{3EE7C08A-44A4-40B1-89EF-5C06C8D1FF29}
2011-04-17 16:59 . 2011-04-17 16:59 ——– d—–w- c:\users\Daddy\AppData\Local\{B8F76586-209E-4A7D-BA14-69FB6E3F2D3F}
2011-04-17 10:57 . 2011-04-17 10:57 ——– d—–w- c:\users\Mom\AppData\Local\{204F8822-AA0B-42B4-98C3-B220F3CEEEC8}
2011-04-17 10:38 . 2011-04-17 10:38 ——– d—–w- c:\users\Mom\AppData\Roaming\Malwarebytes
2011-04-17 10:38 . 2011-04-17 10:38 ——– d—–w- c:\programdata\Malwarebytes
2011-04-17 10:38 . 2010-12-20 22:09 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-17 10:38 . 2010-12-20 22:08 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-04-17 10:38 . 2011-04-17 10:38 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2011-04-16 01:46 . 2011-04-16 01:47 ——– d—–w- c:\users\Mom\AppData\Local\{A0B77129-1A81-4EC2-8570-B689BF244E91}
2011-04-16 00:29 . 2011-04-16 00:29 ——– d—–w- c:\programdata\KingsIsle Entertainment
2011-04-15 13:46 . 2011-04-15 13:46 ——– d—–w- c:\users\Mom\AppData\Local\{8032F726-0403-4873-8071-F774D71131EC}
2011-04-15 13:44 . 2011-04-15 13:44 ——– d—–w- c:\users\Mom\AppData\Roaming\yahoo!
2011-04-15 10:31 . 2011-04-15 10:31 388096 —-a-r- c:\users\Mom\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-04-15 10:31 . 2011-04-15 10:31 ——– d—–w- c:\program files\Trend Micro
2011-04-14 07:39 . 2011-04-14 07:39 103864 —-a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll
2011-04-13 16:39 . 2011-04-13 16:40 ——– d—–w- c:\users\Mom\AppData\Local\{7AB1360D-5143-4635-8844-50CA9CFDF2F6}
2011-04-12 22:30 . 2011-04-12 22:31 ——– d—–w- c:\users\Daddy\AppData\Local\{7225C336-2581-4832-8233-07A57E64445B}
2011-04-12 10:30 . 2011-04-12 10:30 ——– d—–w- c:\users\Daddy\AppData\Local\{CEA6FC22-6FE4-46CF-A6A3-482B23FEF313}
2011-04-11 22:29 . 2011-04-11 22:30 ——– d—–w- c:\users\Daddy\AppData\Local\{80876230-6707-4028-9D0B-E1FD5DD99573}
2011-04-11 10:26 . 2011-04-11 10:26 ——– d—–w- c:\users\Mom\AppData\Local\{1364E210-E930-4BB4-ABAF-0F9F2C6C4930}
2011-04-10 22:25 . 2011-04-10 22:25 ——– d—–w- c:\users\Mom\AppData\Local\{26EA5E59-EFF2-4DFB-B8ED-82F01593DBAC}
2011-04-10 16:37 . 2011-04-11 04:37 ——– d—–w- c:\users\Daddy\AppData\Local\{A85DB9D7-FBBD-4A8A-98E2-4275456A1341}
2011-04-10 11:56 . 2011-04-10 11:56 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-04-10 11:56 . 2011-04-10 11:56 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-04-10 11:56 . 2011-04-10 11:56 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-04-10 11:56 . 2011-04-10 11:56 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-04-10 11:56 . 2011-04-10 11:56 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-04-10 11:56 . 2011-04-10 11:56 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-04-10 11:56 . 2011-04-10 11:56 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-04-10 11:55 . 2011-04-10 11:56 ——– d—–w- c:\program files\QuickTime
2011-04-10 11:53 . 2011-04-10 11:53 ——– d—–w- c:\program files\Apple Software Update
2011-04-10 10:25 . 2011-04-10 10:25 ——– d—–w- c:\users\Mom\AppData\Local\{9E2E2EDA-D433-4129-B84B-AEFA3F11C31F}
2011-04-09 23:18 . 2011-04-09 23:18 ——– d—–w- c:\users\Daddy\AppData\Roaming\Motive
2011-04-06 20:20 . 2011-04-06 20:20 91424 —-a-w- c:\windows\system32\dnssd.dll
2011-04-06 20:20 . 2011-04-06 20:20 75040 —-a-w- c:\windows\system32\jdns_sd.dll
2011-04-06 20:20 . 2011-04-06 20:20 197920 —-a-w- c:\windows\system32\dnssdX.dll
2011-04-06 20:20 . 2011-04-06 20:20 107808 —-a-w- c:\windows\system32\dns-sd.exe
2011-04-04 19:44 . 2011-04-09 07:49 ——– d—–w- c:\users\Daddy\AppData\Local\{8A46350B-2DC6-4884-A78E-AA60003E5890}
2011-04-04 15:05 . 2011-04-04 15:06 ——– d—–w- c:\program files\I Spy Fantasy
2011-04-04 14:52 . 2011-04-04 14:52 ——– d—–w- c:\program files\Avatar Bobble Battles
2011-04-04 14:51 . 2011-04-04 14:51 ——– d—–w- c:\program files\A Magnetic Adventure
2011-04-04 14:50 . 2011-04-04 14:50 ——– d—–w- c:\program files\Hodgepodge Hollow
2011-04-04 14:48 . 2007-07-20 04:57 267112 —-a-w- c:\windows\system32\xactengine2_9.dll
2011-04-04 14:48 . 2007-07-20 04:54 18280 —-a-w- c:\windows\system32\x3daudio1_2.dll
2011-04-04 14:48 . 2007-07-19 22:14 3727720 —-a-w- c:\windows\system32\d3dx9_35.dll
2011-04-04 14:47 . 2011-04-04 14:47 ——– d—–w- c:\program files\Brain Challenge
2011-04-04 14:46 . 2011-04-04 14:46 ——– d—–w- c:\programdata\Big Fish Games
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-10 00:01 . 2010-06-24 16:33 18328 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-03-03 15:40 . 2011-04-27 04:05 173056 —-a-w- c:\windows\apppatch\AcXtrnal.dll
2011-03-03 15:40 . 2011-04-27 04:05 542720 —-a-w- c:\windows\apppatch\AcLayers.dll
2011-03-03 15:40 . 2011-04-27 04:05 458752 —-a-w- c:\windows\apppatch\AcSpecfc.dll
2011-03-03 15:40 . 2011-04-27 04:05 2159616 —-a-w- c:\windows\apppatch\AcGenral.dll
2011-02-22 14:13 . 2011-03-23 02:12 288768 —-a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-22 13:33 . 2011-03-23 02:12 1068544 —-a-w- c:\windows\system32\DWrite.dll
2011-02-22 13:33 . 2011-03-23 02:12 797696 —-a-w- c:\windows\system32\FntCache.dll
2011-02-10 11:16 . 2011-02-10 11:16 98392 —-a-w- c:\windows\system32\drivers\SBREDrv.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-03 111856]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-03 111856]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
"Dmqgr"="c:\users\Mom\AppData\Roaming\ISUSPMD.dll" [2010-11-16 99328]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-11 218032]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-08-19 6265376]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-26 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-26 178712]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-26 154136]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-12-04 186904]
"PDVDDXSrv"="c:\program files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2009-02-05 128232]
"ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2006-11-30 112216]
"McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2006-11-17 136768]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"YMailAdvisor"="c:\program files\Yahoo!\Common\YMailAdvisor.exe" [2009-05-08 174424]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-03 111856]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"Verizon_McciTrayApp"="c:\program files\Verizon\McciTrayApp.exe" [2010-03-17 1565696]
"VERIZONDM"="c:\program files\VERIZONDM\bin\sprtcmd.exe" [2010-07-20 206120]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"VerizonServicepoint.exe"="c:\program files\Verizon\VSP\VerizonServicepoint.exe" [2011-01-10 4318520]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-04-14 421160]
.
c:\users\Mom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
VideoCam Suite 2.0.lnk - c:\program files\Panasonic\VideoCam Suite 2\VideoCamSuiteAutoStart.exe [2009-9-14 185688]
Wireless Utility.lnk - c:\program files\EDIMAX\Common\RaUI.exe [2009-12-5 1040384]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ServicepointService]
@="Service"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2009-11-05 135664]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2009-11-05 135664]
R3 hcw72ADFilter;WinTV HVR-950 USB Audio Filter Driver;c:\windows\system32\DRIVERS\hcw72ADFilter.sys [2010-01-11 28928]
R3 hcw72ATV;WinTV HVR-950 NTSC;c:\windows\system32\DRIVERS\hcw72ATV.sys [2010-01-11 1217920]
R3 hcw72DTV;WinTV HVR-950 ATSC/QAM;c:\windows\system32\DRIVERS\hcw72DTV.sys [2010-01-11 1220224]
R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-08-26 112128]
R3 PCDSRVC{E9D79540-57D5953E-06020101}_0;PCDSRVC{E9D79540-57D5953E-06020101}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\dell support center\pcdsrvc.pkms [2010-11-18 21744]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 15672]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-14 172032]
S2 RtNdPt60;Realtek NDIS Protocol Driver;c:\windows\system32\DRIVERS\RtNdPt60.sys [2008-08-19 27648]
S2 ServicepointService;ServicepointService;c:\program files\Verizon\VSP\ServicepointService.exe [2011-01-10 689464]
S2 sprtsvc_verizondm;SupportSoft Sprocket Service (verizondm);c:\program files\VERIZONDM\bin\sprtsvc.exe [2010-07-20 206120]
S2 tgsrvc_verizondm;SupportSoft Repair Service (verizondm);c:\program files\VERIZONDM\bin\tgsrvc.exe [2010-07-20 185640]
S3 rt61x86;Edimax RT61 Wireless Driver for Windows Vista;c:\windows\system32\DRIVERS\netr61.sys [2009-06-10 335872]
.
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - ASWMBR
*Deregistered* - aswMBR
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the 'Scheduled Tasks' folder
.
2011-05-01 c:\windows\Tasks\AWC Startup.job
- c:\program files\IObit\Advanced SystemCare 3\AWC.exe [2011-02-11 17:53]
.
2011-05-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-05 11:34]
.
2011-05-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-05 11:34]
.
2011-04-17 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
- c:\program files\Dell Support Center\uaclauncher.exe [2010-11-18 15:13]
.
2011-05-01 c:\windows\Tasks\RtlNICDiagVistaStart.job
- c:\program files\Realtek\RTNICDiag\RTNICDiag.exe [2009-06-13 07:02]
.
2011-05-01 c:\windows\Tasks\SystemToolsDailyTest.job
- c:\program files\Dell Support Center\pcdrcui.exe [2010-11-18 15:13]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
uInternet Settings,ProxyOverride = *.local
DPF: {75A6AEA3-F26E-4608-AE9B-8DA78C87576E} - hxxps://kingsisle.hs.llnwd.net/e1/static/themes/wizard101A/activex/Wizard101GameLauncher.CAB
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-03 20:41
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\PCDSRVC{E9D79540-57D5953E-06020101}_0]
"ImagePath"="\??\c:\program files\dell support center\pcdsrvc.pkms"
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2011-05-03 20:42:49
ComboFix-quarantined-files.txt 2011-05-04 00:42
ComboFix2.txt 2011-05-03 11:54
.
Pre-Run: 291,587,870,720 bytes free
Post-Run: 291,582,599,168 bytes free
.
- - End Of File - - 091121F1E40FAB47EB7CE35D95BD269C
Post #10
aswMBR.exe has been updated.
Please delete the one you have now and download a new copy.

Download aswMBR.exe ( 511KB ) to your desktop.

Double click the aswMBR.exe to run it

Click the "Scan" button to start scan
[external image: Posted Image]

On completion of the scan click save log, save it to your desktop and post in your next reply
[external image: Posted Image]
Post #11
aswMBR version 0.9.5.247 Copyright© 2011 AVAST Software Run date: 2011-05-02 19:59:57 —————————– 19:59:57.267 OS Version: Windows 6.0.6002 Service Pack 2 19:59:57.267 Number of processors: 2 586 0x170A 19:59:57.267 ComputerName: KITCHEN-PC UserName: Mom 20:00:05.535 Initialize success 20:00:08.312 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-2 20:00:08.312 Disk 0 Vendor: ST350041 CC44 Size: 476940MB BusType: 3 20:00:08.359 Disk 0 MBR read successfully 20:00:08.359 Disk 0 MBR scan 20:00:08.359 Disk 0 unknown MBR code 20:00:08.406 Disk 0 scanning sectors +976771120 20:00:08.484 Disk 0 scanning C:\Windows\system32\drivers 20:00:20.199 Service scanning 20:00:22.461 Disk 0 trace - called modules: 20:00:22.493 ntkrnlpa.exe CLASSPNP.SYS disk.sys iastor.sys hal.dll 20:00:22.493 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x87084728] 20:00:22.493 3 CLASSPNP.SYS[8b3aa8b3] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-2[0x8653e028] 20:00:22.493 Scan finished successfully 20:00:35.253 Disk 0 MBR has been saved successfully to "C:\Users\Mom\Desktop\MBR.dat" 20:00:35.269 The log file has been saved successfully to "C:\Users\Mom\Desktop\aswMBR.txt" aswMBR version 0.9.5.256 Copyright© 2011 AVAST Software Run date: 2011-05-04 09:08:56 —————————– 09:08:56.144 OS Version: Windows 6.0.6002 Service Pack 2 09:08:56.144 Number of processors: 2 586 0x170A 09:08:56.144 ComputerName: KITCHEN-PC UserName: Mom 09:09:51.867 Initialize success 09:10:06.781 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-2 09:10:06.781 Disk 0 Vendor: ST350041 CC44 Size: 476940MB BusType: 3 09:10:06.796 Disk 0 MBR read successfully 09:10:06.796 Disk 0 MBR scan 09:10:06.796 Disk 0 unknown MBR code 09:10:06.796 Disk 0 scanning sectors +976771120 09:10:06.843 Disk 0 scanning C:\Windows\system32\drivers 09:10:19.791 Service scanning 09:10:20.930 Disk 0 trace - called modules: 09:10:20.961 ntkrnlpa.exe CLASSPNP.SYS disk.sys iastor.sys hal.dll 09:10:20.961 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8705d2f8] 09:10:20.961 3 CLASSPNP.SYS[8b3a48b3] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-2[0x8653e028] 09:10:20.961 Scan finished successfully 09:10:31.319 Disk 0 MBR has been saved successfully to "C:\Users\Mom\Desktop\MBR.dat" 09:10:31.351 The log file has been saved successfully to "C:\Users\Mom\Desktop\aswMBR.txt"
Post #13
Yes, I'm still getting redirected. My internet connection is through a modem/router combo unit from Verizon. I'm guessing that it is some kind of add-in in I.E. since it goes away when I reset the advanced settings; but it always comes back. Stumped?
Post #14
First lets uninstall combofix.

For Vista / Windows 7
  • Click START Search
  • Now type ComboFix /Uninstall in the runbox and click OK. Note the space between the X and the /, it needs to be there.

Now lets try turning off the add-ons.

IE Add-ons
http://support.microsoft.com/kb/956196


You can open Internet Explorer without add-ons in 2 ways. One way to open is to navigate to start menu-> All Programs-> Accessories-> System Tools-> Internet Explorer (no Add-ons). This opens up IE without ActiveX controls and browser extensions.


•Type iexplore –extoff in the Run box on the Start menu
•Click “Internet Explorer (No Add-ons)” under All Programs -> Accessories -> System Tools
•Right-clicking the IE icon on the Start Menu (if IE is your default browser) and selecting “Browse Without Add-Ons”
Post #15
Opening IE without addons does fix the problem - so does using Firefox instead of IE. When I looked at the currently loaded Add-ons, the only one enabled is Shockwave Flash object. When I reviewed the Run without Permission list, there are many more addons enabled. I just disabled a list of addons under Alcatel-Lucent because I didn't know what they were, but can you look at the others to see if there are any suspect ones? Also, do you know how to delete add-ons? Name RpSoftwareVersion Class Publisher Radialpoint Status Disabled File date ‎Monday, ‎January ‎10, ‎2011, ‏‎12:56 PM Version 3.7.44.50819 Name McciUtilsGUIDGen Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysDialModem Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.11 Name McciSysNetNetwork Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciSysModuleInfo Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciUtilsPlatform Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciUtilsFile Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name FavoriteLink Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciUtilsFileDirectoryCodes Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name GenericArray Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name MailClientType Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciUtilsGlobalDataStore Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciContextScript Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.5 Name McciUtilsURLEncodingMask Interface Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysRAM Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name WebBrowserType Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciNetTcpClientSocket Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.20 Name McciSysProcess Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciUtilsBase64Utils Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciNetSMTPEx Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.20 Name McciNetMessageData Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.20 Name McciUtilsVirtualDataControl Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysNetWirelessPrivacyConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciUtilsPrivileges Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciContext Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.5 Name WebBrowserConfigHelper Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciSysDialPhoneBook Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.11 Name McciSysNetWirelessPowerModeConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciSysDialPhoneBookEntry Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.11 Name RpClientGatewayScriptInterface Class Publisher Radialpoint Status Disabled File date ‎Monday, ‎January ‎10, ‎2011, ‏‎12:56 PM Version 3.7.44.50819 Name McciSysNetWirelessAuthenticationModeConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciHTTPClient Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.5 Name McciEventAlertStat Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysEvent Interface Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciSysNetWirelessPrivacyFilterConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciSysNetNetBIOSStateConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciSysEventLog Interface Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciSysWindowsFirewall Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciUtilsCryptoUtils Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciConnectedDevicesUPnPMSearch Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.16 Name McciUtilsRegistry Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysNetWirelessEncryptionStatusConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name RpClientGatewayScriptInterface4 Class Publisher Radialpoint Status Disabled File date ‎Monday, ‎January ‎10, ‎2011, ‏‎12:56 PM Version 3.7.44.50819 Name McciUtilsIEVersion Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysFileArchive Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciSysNetHardwareStatusConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciConnectedDevicesCPEConfiguration Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.16 Name McciSysLocalPS Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciSysBrowser Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciSysShell Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciSM Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.5 Name McciUtilsINI Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysCPU Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciUtilsTrustManager Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysDeviceManager Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciSysDialRas Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.11 Name McciSysNetPhysicalMediumConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciUtilsDirectory Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciWirelessClientAppCallbackErrorConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.21 Name McciUtilsFileInfo Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciNetDNS Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.20 Name ProxyServer Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciUtilsFileProcessor Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name Java™ Plug-In SSV Helper Publisher Sun Microsystems, Inc. Status Disabled File date ‎Saturday, ‎June ‎13, ‎2009, ‏‎4:18 PM Version 6.0.110.3 Name McciEventInstallStat Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name RpClientGatewayScriptInterface2 Class Publisher Radialpoint Status Disabled File date ‎Monday, ‎January ‎10, ‎2011, ‏‎12:56 PM Version 3.7.44.50819 Name McciUtilsAuthenticode Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciUtilsPlatform2 Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysNetWirelessNetworkTypeConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciConnectedDevicesUPnPRootDevice Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.16 Name McciSysLocalFS Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciWirelessClientApp Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.21 Name McciNetPOP3 Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.20 Name McciUtilsDirectory2 Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciWirelessClientAppEncryptionConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.21 Name McciSysNetMediaConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciUtilsPath Interface Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysSCM Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciSysNetWirelessAccessTypeConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciWirelessClientAppAuthenticationConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.21 Name McciSysNetCallbackErrorConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciUtilsSpecialFolder Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name RpClientGatewayScriptInterface3 Class Publisher Radialpoint Status Disabled File date ‎Monday, ‎January ‎10, ‎2011, ‏‎12:56 PM Version 3.7.44.50819 Name McciConnectedDevicesCPEDevice Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.16 Name McciConnectedDevicesUPnPNotify Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.16 Name McciSysFwExceptionDescriptor Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciEventStatRetriever Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciEventWorkFlowStat Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name RpClientGatewayScriptInterface5 Class Publisher Radialpoint Status Disabled File date ‎Monday, ‎January ‎10, ‎2011, ‏‎12:56 PM Version 3.7.44.50819 Name McciNetWindowsNetworkHost Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.20 Name McciSysNetworkNeighborhood Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciWirelessClientAppProfile Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.21 Name IEPrivacySettingTemplate Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciSysIdentification Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciSysDisk Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name AccountDataDictionary Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciSysNetAdapterCriteriaConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name McciSysCAB Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciSysNetWirelessEncryptionConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name IESecurityZone Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciNetPing Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.20 Name IESecuritySetting Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciUtilsLocale Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysShutdown Interface Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciLog Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.0.1 Name McciContextAlert Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.5 Name MailNewsAccountParameters Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name MailClientConfigHelper Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciNetWindowsNetwork Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.20 Name McciSysWindowManager Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name McciUtilsSecurityUtils Interface Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciUACManager Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.14 Name McciUtilsFile2 Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciSysNetNodeTypeConstant Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.18 Name ProxyServerProtocol Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciConnectedDevicesTethered Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.16 Name McciSysDialLocation Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.11 Name McciConnectedDevicesUSB Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:54 PM Version 6.6.1.16 Name IESecuritySettingValue Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.17 Name McciUtilsURL Interface Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:15 AM Version 6.6.1.11 Name McciNetSMTP Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.20 Name McciNetPOP3Ex Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎4:53 PM Version 6.6.1.20 Name McciSysSecurityCenter Class Publisher (Not verified) Alcatel-Lucent Status Disabled File date ‎Wednesday, ‎March ‎17, ‎2010, ‏‎8:14 AM Version 6.6.1.11 Name XML Data Source Object Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name Free Threaded XML DOM Document Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name XML Data Source Object 3.0 Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name XSL Template 3.0 Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name XML HTTP 3.0 Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name XML Schema Cache 3.0 Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name Free Threaded XML DOM Document 3.0 Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name XML DOM Document 3.0 Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name Windows Live Mail and Messenger Publisher Microsoft Corporation Status Enabled File date ‎Wednesday, ‎November ‎10, ‎2010, ‏‎2:54 AM Version 15.4.3508.1109 Name Scripting.Dictionary Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎April ‎11, ‎2009, ‏‎2:28 AM Version 5.7.0.6000 Name PersonalSite Class Publisher Microsoft Corporation Status Enabled File date ‎Sunday, ‎October ‎26, ‎2008, ‏‎6:42 AM Version 12.0.6413.1000 Name OISClientLauncher Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎March ‎06, ‎2009, ‏‎5:23 AM Version 12.0.6423.1000 Name Windows Live Mail and Messenger Publisher Microsoft Corporation Status Enabled File date ‎Wednesday, ‎November ‎10, ‎2010, ‏‎2:54 AM Version 15.4.3508.1109 Name Windows Live Mail and Messenger Publisher Microsoft Corporation Status Enabled File date ‎Wednesday, ‎November ‎10, ‎2010, ‏‎2:54 AM Version 15.4.3508.1109 Name Groove Text View Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎February ‎14, ‎2009, ‏‎7:03 AM Version 4.2.2.2807 Name Microsoft Silverlight Publisher Microsoft Corporation Status Enabled File date ‎Wednesday, ‎March ‎09, ‎2011, ‏‎10:49 PM Version 4.0.60310.0 Name iTunesDetector Class Publisher Apple Inc. Status Enabled File date ‎Thursday, ‎April ‎14, ‎2011, ‏‎11:32 AM Version 2.0.1.1 Name Shockwave Flash Object Publisher Adobe Systems Incorporated Status Enabled File date ‎Sunday, ‎April ‎17, ‎2011, ‏‎6:56 AM Version 10.2.159.1 Name Windows Live ID Sign-in Control Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎September ‎21, ‎2010, ‏‎3:08 PM Version 7.250.4225.0 Name STSUpld CopyCtl Class Publisher Microsoft Corporation Status Enabled File date ‎Thursday, ‎October ‎26, ‎2006, ‏‎8:59 PM Version 12.0.4518.1014 Name Behavior Object Publisher Apple Inc. Status Enabled File date ‎Monday, ‎November ‎29, ‎2010, ‏‎6:19 PM Version QuickTime 7.6.9 (1680.9) Name Java Plug-in 1.6.0_11 Publisher (Not verified) Sun Microsystems, Inc. Status Enabled File date ‎Saturday, ‎June ‎13, ‎2009, ‏‎4:18 PM Version 6.0.110.3 Name Java Plug-in 1.6.0_11 Publisher (Not verified) Sun Microsystems, Inc. Status Enabled File date ‎Saturday, ‎June ‎13, ‎2009, ‏‎4:18 PM Version 6.0.110.3 Name Java Plug-in 1.6.0_11 Publisher (Not verified) Sun Microsystems, Inc. Status Enabled File date ‎Saturday, ‎June ‎13, ‎2009, ‏‎4:18 PM Version 6.0.110.3 Name Adobe PDF Reader Publisher Adobe Systems, Incorporated Status Enabled File date ‎Sunday, ‎January ‎30, ‎2011, ‏‎6:53 PM Name Microsoft Office 12 Authorization Control Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎October ‎25, ‎2008, ‏‎7:18 AM Version 12.0.6413.1000 Name Google Update Plugin Publisher Google Inc Status Enabled File date ‎Saturday, ‎April ‎23, ‎2011, ‏‎7:23 PM Version 1.3.21.53 Name Google Update Plugin Publisher Google Inc Status Enabled File date ‎Saturday, ‎April ‎23, ‎2011, ‏‎7:23 PM Version 1.3.21.53 Name SharePoint Stssync Handler Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎March ‎06, ‎2009, ‏‎5:23 AM Version 12.0.6423.1000 Name SharePoint Stssync Handler Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎March ‎06, ‎2009, ‏‎5:23 AM Version 12.0.6423.1000 Name SharePoint OpenDocuments Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎March ‎06, ‎2009, ‏‎5:23 AM Version 12.0.6423.1000 Name OWSDiscussionBar Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OSE Global Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OSE.DiscussionServers Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OSE.DiscussionServer Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OSE.Discussions Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OSE.Discussion Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OWSClientCollaboration Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OWSDiscussionServers Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name Web Discussions Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name Web Discussions Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name Web Discussions Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name SharePoint Spreadsheet Launcher Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OWS Post Data Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OWSBrowserUI Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OWSClientComment Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OWSClientCommentThread Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OWSClientMiscApis Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name OWSClientEventSubscription Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎November ‎21, ‎2008, ‏‎3:34 AM Version 12.0.6415.1000 Name Microsoft Scriptlet Component Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎April ‎09, ‎2011, ‏‎7:20 PM Version 9.00.8112.16421 Name RMGetLicense Class Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎April ‎11, ‎2009, ‏‎2:28 AM Version 11.0.6002.18005 Name Yahoo! MailTo Publisher Yahoo! Inc. Status Enabled File date ‎Thursday, ‎April ‎09, ‎2009, ‏‎9:59 AM Version 1. 0. 0. 0 Name SharePoint OpenDocuments Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎March ‎06, ‎2009, ‏‎5:23 AM Version 12.0.6423.1000 Name Device Class Publisher Hewlett-Packard Company Status Enabled File date ‎Tuesday, ‎April ‎07, ‎2009, ‏‎5:43 PM Version 1.0.14.1 Name SharePoint OpenDocuments Class Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎March ‎06, ‎2009, ‏‎5:23 AM Version 12.0.6423.1000 Name Registration Control Publisher Microsoft Corporation Status Enabled File date ‎Sunday, ‎January ‎20, ‎2008, ‏‎10:34 PM Version 6.0.6001.18000 Name Java Plug-in 1.6.0_11 Publisher (Not verified) Sun Microsystems, Inc. Status Enabled File date ‎Saturday, ‎June ‎13, ‎2009, ‏‎4:18 PM Version 6.0.110.3 Name XML HTTP 6.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎August ‎11, ‎2009, ‏‎12:44 PM Version 6.20.5002.0 Name XSL Template 6.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎August ‎11, ‎2009, ‏‎12:44 PM Version 6.20.5002.0 Name XML Schema Cache 6.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎August ‎11, ‎2009, ‏‎12:44 PM Version 6.20.5002.0 Name Free Threaded XML DOM Document 6.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎August ‎11, ‎2009, ‏‎12:44 PM Version 6.20.5002.0 Name XML DOM Document 6.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎August ‎11, ‎2009, ‏‎12:44 PM Version 6.20.5002.0 Name XML HTTP 4.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎1:05 AM Version 4.20.9876.0 Name XML Data Source Object 4.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎1:05 AM Version 4.20.9876.0 Name XSL Template 4.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎1:05 AM Version 4.20.9876.0 Name XML Schema Cache 4.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎1:05 AM Version 4.20.9876.0 Name Free Threaded XML DOM Document 4.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎1:05 AM Version 4.20.9876.0 Name XML DOM Document 4.0 Publisher Microsoft Corporation Status Enabled File date ‎Tuesday, ‎July ‎21, ‎2009, ‏‎1:05 AM Version 4.20.9876.0 Name SharepointOpenXMLDocuments Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎March ‎06, ‎2009, ‏‎5:26 AM Version 12.0.6423.1000 Name Windows Media Services DRM Storage object Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎April ‎11, ‎2009, ‏‎2:28 AM Version 11.0.6002.18005 Name GMNRev Class Publisher Hewlett-Packard Company Status Enabled File date ‎Monday, ‎April ‎06, ‎2009, ‏‎4:25 PM Version 9.7.2.0 Name Windows Media Player Publisher Microsoft Corporation Status Enabled File date ‎Monday, ‎September ‎13, ‎2010, ‏‎11:46 AM Version 11.0.6002.18311 Name Microsoft Office List 12.0 Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎March ‎06, ‎2009, ‏‎4:01 AM Version 12.0.6423.1000 Name Microsoft Shell UI Helper Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎April ‎09, ‎2011, ‏‎7:20 PM Version 9.00.8112.16421 Name SharePoint Export Database Launcher Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎March ‎06, ‎2009, ‏‎5:23 AM Version 12.0.6423.1000 Name isInstalled Class Publisher (Not verified) Sun Microsystems, Inc. Status Enabled File date ‎Saturday, ‎June ‎13, ‎2009, ‏‎4:18 PM Version 6.0.110.3 Name Groove Data List Display Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎February ‎14, ‎2009, ‏‎7:03 AM Version 4.2.2.2807 Name Windows Live Mail and Messenger Publisher Microsoft Corporation Status Enabled File date ‎Wednesday, ‎November ‎10, ‎2010, ‏‎2:54 AM Version 15.4.3508.1109 Name QuickTime Object Publisher Apple Inc. Status Enabled File date ‎Monday, ‎November ‎29, ‎2010, ‏‎6:19 PM Version QuickTime 7.6.9 (1680.9) Name SharePoint Spreadsheet Launcher Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎March ‎06, ‎2009, ‏‎5:23 AM Version 12.0.6423.1000 Name XML Schema Cache Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name DeviceDetection Class Publisher Hewlett-Packard Company Status Enabled File date ‎Tuesday, ‎April ‎07, ‎2009, ‏‎5:43 PM Version 1.0.14.1 Name Installation Support Publisher Yahoo! Inc. Status Enabled File date ‎Wednesday, ‎November ‎28, ‎2007, ‏‎5:55 PM Version 1. 0. 0. 1 Name Tabular Data Control Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎April ‎09, ‎2011, ‏‎7:20 PM Version 9.00.8112.16421 Name Windows Live Mail and Messenger Publisher Microsoft Corporation Status Enabled File date ‎Wednesday, ‎November ‎10, ‎2010, ‏‎2:54 AM Version 15.4.3508.1109 Name Installation Support Publisher Yahoo! Inc. Status Enabled File date ‎Wednesday, ‎November ‎28, ‎2007, ‏‎5:55 PM Version 1. 0. 0. 1 Name HtmlDlgSafeHelper Class Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎April ‎09, ‎2011, ‏‎7:20 PM Version 9.00.8112.16421 Name XSL Template Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name XML DOM Document Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎June ‎11, ‎2010, ‏‎12:15 PM Version 8.100.5003.0 Name DeviceCollection Class Publisher Hewlett-Packard Company Status Enabled File date ‎Tuesday, ‎April ‎07, ‎2009, ‏‎5:43 PM Version 1.0.14.1 Name InformationCardSigninHelper Class Publisher Microsoft Corporation Status Enabled File date ‎Saturday, ‎April ‎09, ‎2011, ‏‎7:20 PM Version 9.00.8112.16421 Name Groove DocumentShareView Publisher Microsoft Corporation Status Enabled File date ‎Friday, ‎April ‎17, ‎2009, ‏‎4:04 AM Version 4.2.2.2820 Name STSUpld UploadCtl Class Publisher Microsoft Corporation Status Enabled File date ‎Thursday, ‎October ‎26, ‎2006, ‏‎8:59 PM Version 12.0.4518.1014 Name QuickTime Object Publisher Apple Inc. Status Enabled File date ‎Monday, ‎November ‎29, ‎2010, ‏‎6:19 PM Version QuickTime 7.6.9 (1680.9) Name Installation Support Publisher Yahoo! Inc. Status Enabled File date ‎Wednesday, ‎November ‎28, ‎2007, ‏‎5:55 PM Version 1. 0. 0. 1 Name SdcMail Class Publisher SupportSoft, Inc. Status Enabled File date ‎Tuesday, ‎July ‎20, ‎2010, ‏‎1:29 AM Version 7.0.1871.0 Name SupportSoft Password Reset Class Publisher SupportSoft, Inc. Status Enabled File date ‎Tuesday, ‎July ‎20, ‎2010, ‏‎1:29 AM Version 7.0.1871.0 Name SupportSoft Script Runner Class Publisher SupportSoft, Inc. Status Enabled File date ‎Tuesday, ‎July ‎20, ‎2010, ‏‎1:29 AM Version 7.0.1871.0 Name SdcNetCheckCtl Class Publisher SupportSoft, Inc. Status Enabled File date ‎Tuesday, ‎July ‎20, ‎2010, ‏‎1:29 AM Version 7.0.2011.0 Name SupportSoft SmartIssue Publisher SupportSoft, Inc. Status Enabled File date ‎Tuesday, ‎July ‎20, ‎2010, ‏‎1:29 AM Version 7.0.2011.0

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI