ishost/ismon/SpyQuake - Infected Laptop

Rename hijackthis.exe to something like findit.exe then scan and post a new hijackthis log please.

Thats better it was being hiddden

Download VundoFix.exe to your desktop from here:

http://www.atribune.org/ccount/click.php?id=4

CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!

1. Double-click VundoFix.exe to run it.
2. Click the Scan for Vundo button.
3. Once it's done scanning, click the Remove Vundo button.
4. If it doesn't find anything, in the main program window, choose "Add more files?". Type this in the box EXACTLY AS SHOWN:

C:\WINDOWS\system32\vtutt.dll

Click Close Window, then Remove Vundo.

4. You will receive a prompt asking if you want to remove the files, click YES.
5. Once you click yes, your desktop will go blank as it starts removing Vundo.
6. When completed, it will prompt that it will shutdown your computer, click OK.
7. Turn your computer back on.

Post a new HijackThis! log, along with the contents of this file:

C:\vundofix.txt

into this thread.

Please disable Trojan Hunter Guard or it could block the fix.


Scan with hijackthis and put a check beside these files and choose FIX

O20 - Winlogon Notify: winxtx32 - winxtx32.dll (file missing)

NEXT

1. Download this file - combofix.exe http://download.bleepingcomputer.com/sUBs/combofix.exe
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Open HijackThis, click Config, click Misc Tools
Click "Open Uninstall Manager"
Click "Save List" (generates uninstall_list.txt)
Click Save, copy and paste the results in your next post.

Make sure hijackthis.exe is the renamed one before you scan.



In your next post, please include
new hijackthis log
combofix log
uninstall list

And the last two. Start Time= Tue 08/08/2006 23:39:44.45 Running from: C:\Documents and Settings\[removed]\My Documents QuickScan did not find any signs of infected files (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-08-03 20:07:34 ( .D… ) "C:\Documents and Settings\Manny\Application Data\TrojanHunter" 2006-08-02 22:22:12 59392 ( ….R ) "C:\WINDOWS\system32\streamhlp.dll" 2006-08-02 22:22:02 ( .D… ) "C:\Program Files\TrojanHunter 4.5" 2006-08-01 20:57:30 ( .D… ) "C:\Program Files\VstPlugins" 2006-08-01 20:55:22 ( .D… ) "C:\Program Files\Image-Line" 2006-07-31 00:42:14 ( .D… ) "C:\Program Files\Common Files\Network Associates" 2006-07-29 23:05:42 ( .D… ) "C:\Program Files\Panda Software" 2006-07-29 12:33:08 ( .D… ) "C:\Program Files\SpywareGuard" 2006-07-28 19:34:44 ( .D… ) "C:\Program Files\Common Files\Panda Software" 2006-07-28 00:36:48 ( .D… ) "C:\Program Files\ewido anti-spyware 4.0" 2006-07-27 21:58:38 ( .D… ) "C:\Program Files\Common Files\{30DC071B-0729-1033-0414-060001}" 2006-07-16 23:18:00 ( .D… ) "C:\Program Files\America's Army Server Manager" 2006-07-16 23:15:10 ( .D… ) "C:\Program Files\America's Army" 2006-07-16 21:21:36 ( .D… ) "C:\Program Files\GameSpy Arcade" 2006-07-16 21:20:02 ( .D… ) "C:\Program Files\Common Files\EasyInfo" 2006-07-16 16:40:58 873 ( A…. ) "C:\Documents and Settings\Manny\Application Data\AdobeDLM.log" 2006-07-16 16:40:58 0 ( A…. ) "C:\Documents and Settings\Manny\Application Data\dm.ini" 2006-07-09 23:10:58 460 ( A…. ) "C:\Documents and Settings\Manny\Application Data\AutoGK.ini" 2006-07-09 00:09:18 ( .D… ) "C:\Program Files\yasavideoconverter" 2006-07-08 23:56:48 43668 ( A…. ) "C:\WINDOWS\system32\xvid-uninstall.exe" 2006-07-08 23:56:32 ( .D… ) "C:\Program Files\AviSynth 2.5" 2006-07-08 23:56:10 ( .D… ) "C:\Program Files\Gabest" 2006-07-08 23:55:56 ( .D… ) "C:\Program Files\AutoGK" 2006-07-08 23:10:28 ( .D… ) "C:\Program Files\DVD Decrypter" 2006-07-07 00:41:36 ( .D… ) "C:\Program Files\QuickTime" 2006-07-07 00:39:40 ( .D… ) "C:\Program Files\iTunes" 2006-07-05 20:44:42 ( .D… ) "C:\Documents and Settings\Manny\Application Data\Gearbox Software" 2006-07-04 01:19:28 ( .D… ) "C:\Documents and Settings\Manny\Application Data\Media Player Classic" 2006-07-03 16:40:52 778240 ( A…. ) "C:\WINDOWS\system32\divx_xx0c.dll" 2006-07-03 16:40:52 778240 ( A…. ) "C:\WINDOWS\system32\divx_xx07.dll" 2006-07-03 16:40:50 761856 ( A…. ) "C:\WINDOWS\system32\divx_xx11.dll" 2006-07-03 16:40:50 620180 ( A…. ) "C:\WINDOWS\system32\DivX.dll" 2006-07-03 03:13:38 ( .D… ) "C:\Program Files\Infogrames" 2006-07-02 04:27:28 ( .D… ) "C:\Program Files\EA SPORTS" 2006-07-01 00:38:48 ( .D… ) "C:\Program Files\MSN Messenger" 2006-06-21 05:49:48 53248 ( A…. ) "C:\WINDOWS\system32\dpuGUI10.dll" 2006-06-21 05:43:10 520192 ( A…. ) "C:\WINDOWS\system32\DivXsm.exe" 2006-06-21 05:43:06 3596288 ( A…. ) "C:\WINDOWS\system32\qt-dx331.dll" 2006-06-21 05:42:58 1044480 ( A…. ) "C:\WINDOWS\system32\libdivx.dll" 2006-06-21 05:42:58 200704 ( A…. ) "C:\WINDOWS\system32\ssldivx.dll" 2006-06-21 05:34:22 593920 ( A…. ) "C:\WINDOWS\system32\dpuGUI11.dll" 2006-06-21 05:34:22 344064 ( A…. ) "C:\WINDOWS\system32\dpus11.dll" 2006-06-21 05:34:22 294912 ( A…. ) "C:\WINDOWS\system32\dpu11.dll" 2006-06-21 05:34:22 294912 ( A…. ) "C:\WINDOWS\system32\dpu10.dll" 2006-06-21 05:34:22 200704 ( A…. ) "C:\WINDOWS\system32\dtu100.dll" 2006-06-21 05:34:22 90112 ( A…. ) "C:\WINDOWS\system32\dpl100.dll" 2006-06-21 05:34:22 57344 ( A…. ) "C:\WINDOWS\system32\dpv11.dll" 2006-06-21 05:33:42 118784 ( A…. ) "C:\WINDOWS\system32\DivXCodecUpdateChecker.exe" 2006-06-21 05:33:42 12288 ( A…. ) "C:\WINDOWS\system32\DivXWMPExtType.dll" 2006-06-20 22:50:24 ( .D… ) "C:\Documents and Settings\Manny\Application Data\Yahoo!" 2006-06-20 22:48:34 ( .D… ) "C:\Program Files\Yahoo!" 2006-06-19 16:20:42 702768 ( A…. ) "C:\WINDOWS\system32\WgaLogon.dll" 2006-06-19 15:18:34 22752 ( A…. ) "C:\WINDOWS\system32\spupdsvc.exe" 2006-06-17 12:59:00 ( .D… ) "C:\Program Files\Windows Media Connect 2" 2006-06-16 14:34:44 48936 ( A…. ) "C:\WINDOWS\system32\sirenacm.dll" 2006-06-11 03:07:06 ( .D… ) "C:\Documents and Settings\Manny\Application Data\ScanSoft" 2006-06-11 03:06:34 ( .D… ) "C:\Program Files\ScanSoft" 2006-06-11 03:06:34 ( .D… ) "C:\Program Files\Common Files\ScanSoft Shared" 2006-06-11 03:05:04 ( .D… ) "C:\Program Files\ArcSoft" 2006-06-11 03:01:52 ( .D… ) "C:\Program Files\Canon" 2006-05-19 07:59:42 148480 ( A…. ) "C:\WINDOWS\system32\dnsapi.dll" 2006-05-19 07:59:42 111616 ( A…. ) "C:\WINDOWS\system32\dhcpcsvc.dll" 2006-05-19 07:59:42 94720 ( A…. ) "C:\WINDOWS\system32\iphlpapi.dll" (((((((((((((((((((((((((((((((((((((( Files Created - Last 30days ))))))))))))))))))))))))))))))))))))))))))) 2006-08-02 19:24 127,208 C:\WINDOWS\system32\mucltui.dll 2006-08-01 22:18 117,760 C:\WINDOWS\system32\xmllite.dll 2006-08-01 21:23 11,776 C:\WINDOWS\system32\ZPORT4AS.dll 2006-08-01 20:57 225,280 C:\WINDOWS\system32\rewire.dll 2006-07-31 00:38 1,063,374,848 C:\hiberfil.sys 2006-07-29 23:08 9,488 C:\WINDOWS\system32\sporder.dll 2006-07-29 14:30 53,248 C:\WINDOWS\system32\Process.exe 2006-07-29 14:30 42,496 C:\WINDOWS\system32\swreg.exe 2006-07-29 14:30 40,960 C:\WINDOWS\system32\swsc.exe 2006-07-29 14:30 288,417 C:\WINDOWS\system32\SrchSTS.exe 2006-07-28 17:24 73,728 C:\WINDOWS\system32\asuninst.exe 2006-07-08 23:56 43,668 C:\WINDOWS\system32\xvid-uninstall.exe 2006-07-04 23:47 89,360 C:\WINDOWS\system32\VB5DB.DLL 2006-07-04 23:47 69,632 C:\WINDOWS\system32\xmltok.dll 2006-07-04 23:47 36,864 C:\WINDOWS\system32\xmlparse.dll 2006-07-04 23:47 26,064 C:\WINDOWS\system32\xmlinst.exe 2006-07-04 23:47 24,576 C:\WINDOWS\system32\msxml3a.dll 2006-07-03 16:40 778,240 C:\WINDOWS\system32\divx_xx0c.dll 2006-07-03 16:40 778,240 C:\WINDOWS\system32\divx_xx07.dll 2006-07-03 16:40 761,856 C:\WINDOWS\system32\divx_xx11.dll 2006-07-03 16:40 620,180 C:\WINDOWS\system32\DivX.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" "Apoint"="C:\\Program Files\\Apoint\\Apoint.exe" "igfxtray"="C:\\WINDOWS\\system32\\igfxtray.exe" "igfxhkcmd"="C:\\WINDOWS\\system32\\hkcmd.exe" "igfxpers"="C:\\WINDOWS\\system32\\igfxpers.exe" "SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe" "ISBMgr.exe"="C:\\Program Files\\Sony\\ISB Utility\\ISBMgr.exe" "Switcher.exe"="C:\\Program Files\\Sony\\Wireless Switch Setting Utility\\Switcher.exe" "iPrint LPT Redirector"="C:\\WINDOWS\\system32\\nipplpte.exe" "IntelZeroConfig"="\"C:\\Program Files\\Intel\\Wireless\\bin\\ZCfgSvc.exe\"" "IntelWireless"="\"C:\\Program Files\\Intel\\Wireless\\Bin\\ifrmewrk.exe\" /tf Intel PROSet/Wireless" "EOUApp"="\"C:\\Program Files\\Intel\\Wireless\\Bin\\EOUWiz.exe\"" "PartSeal"="C:\\WINDOWS\\Sonysys\\VAIO Recovery\\PartSeal.exe" "SonyPowerCfg"="C:\\Program Files\\Sony\\VAIO Power Management\\SPMgr.exe" "Biomenu"="\"C:\\Program Files\\Protector Suite QL\\menusw.exe\"" "OpwareSE2"="\"C:\\Program Files\\ScanSoft\\OmniPageSE2.0\\OpwareSE2.exe\"" "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\"" "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "ShStatEXE"="\"C:\\Program Files\\Network Associates\\VirusScan\\SHSTAT.EXE\" /STANDALONE" "Network Associates Error Reporting Service"="\"C:\\Program Files\\Common Files\\Network Associates\\TalkBack\\tbmon.exe\"" "McAfeeUpdaterUI"="\"C:\\Program Files\\Network Associates\\Common Framework\\UpdaterUI.exe\" /StartedFromRunKey" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\Compaq] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000008 "NoCDBurning"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run] "{30DC071B-0729-1033-0414-060001}"="\"C:\\Program Files\\Common Files\\{30DC071B-0729-1033-0414-060001}\\Update.exe\" mc-110-12-0000272" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000004 [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0" "{81559C35-8464-49F7-BB0E-07A383BEF910}"="" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] "path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Adobe Reader Speed Launch.lnk" "backup"="C:\\WINDOWS\\pss\\Adobe Reader Speed Launch.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\Adobe\\ACROBA~1.0\\Reader\\READER~1.EXE " "item"="Adobe Reader Speed Launch" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Manny^Start Menu^Programs^Startup^Adobe Gamma.lnk] "path"="C:\\Documents and Settings\\Manny\\Start Menu\\Programs\\Startup\\Adobe Gamma.lnk" "backup"="C:\\WINDOWS\\pss\\Adobe Gamma.lnkStartup" "location"="Startup" "command"="C:\\PROGRA~1\\COMMON~1\\Adobe\\CALIBR~1\\ADOBEG~1.EXE " "item"="Adobe Gamma" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Manny^Start Menu^Programs^Startup^Microsoft Office OneNote 2003 Quick Launch.lnk] "path"="C:\\Documents and Settings\\Manny\\Start Menu\\Programs\\Startup\\Microsoft Office OneNote 2003 Quick Launch.lnk" "backup"="C:\\WINDOWS\\pss\\Microsoft Office OneNote 2003 Quick Launch.lnkStartup" "location"="Startup" "command"="C:\\PROGRA~1\\MICROS~3\\OFFICE11\\ONENOTEM.EXE /tsr" "item"="Microsoft Office OneNote 2003 Quick Launch" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Manny^Start Menu^Programs^Startup^Registration Lock On] "path"="C:\\Documents and Settings\\Manny\\Start Menu\\Programs\\Startup\\Registration Lock On" "backup"="C:\\WINDOWS\\pss\\Registration Lock OnStartup" "location"="Startup" "command"="C:\\Documents and Settings\\Manny\\Start Menu\\Programs\\Startup\\Registration Lock On" "item"="Registration Lock On" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGEIA PhysX SysTray] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="TrayIcon" "hkey"="HKLM" "command"="C:\\Program Files\\AGEIA Technologies\\TrayIcon.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="daemon" "hkey"="HKLM" "command"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iPrint Tray] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="iprntctl" "hkey"="HKLM" "command"="C:\\WINDOWS\\system32\\iprntctl.exe TRAY_ICON" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="iTunesHelper" "hkey"="HKLM" "command"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\"" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\McAfeeUpdaterUI] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="UpdaterUI" "hkey"="HKLM" "command"="\"C:\\Program Files\\Network Associates\\Common Framework\\UpdaterUI.exe\"" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MimBoot] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="mimboot" "hkey"="HKLM" "command"="C:\\PROGRA~1\\MUSICM~1\\MUSICM~2\\mimboot.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Network Associates Error Reporting Service] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="tbmon" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\Network Associates\\TalkBack\\tbmon.exe\"" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="qttask" "hkey"="HKLM" "command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SsAAD.exe] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="SsAAD" "hkey"="HKLM" "command"="C:\\PROGRA~1\\Sony\\SONICS~1\\SsAAD.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="AdobeUpdateManager" "hkey"="HKCU" "command"="C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Recovery] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="PartSeal" "hkey"="HKLM" "command"="C:\\WINDOWS\\Sonysys\\VAIO Recovery\\PartSeal.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Update 2] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="VAIOUpdt" "hkey"="HKLM" "command"="\"C:\\Program Files\\Sony\\VAIO Update 2\\VAIOUpdt.exe\" /Stationary" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIOCameraUtility] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="VCUServe" "hkey"="HKLM" "command"="\"C:\\Program Files\\Sony\\VAIO Camera Utility\\VCUServe.exe\"" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIOSurvey] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="surveysa" "hkey"="HKLM" "command"="c:\\program files\\sony\\vaio survey\\surveysa.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ViewMgr] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ViewMgr" "hkey"="HKLM" "command"="C:\\Program Files\\Viewpoint\\Viewpoint Manager\\ViewMgr.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMConsole.exe] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="VMConsole" "hkey"="HKLM" "command"="C:\\Program Files\\Sony\\VAIO Media Integrated Server\\Platform\\VMConsole.exe /windowmin" "inimapping"="0" HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system DisableRegistryTools REG_DWORD 0 (0x0) Contents of the 'Scheduled Tasks' folder Completion time: Tue 08/08/2006 23:40:03.10 ComboFix ver 06.07.15/29 - This logfile is located at C:\ComboFix.txt AND 2006 FIFA World Cup ™ AC3Filter (remove only) Ad-Aware SE Personal Adobe Bridge 1.0 Adobe Common File Installer Adobe Download Manager 2.0 (Remove Only) Adobe Help Center 1.0 Adobe Photoshop Album 2.0 Starter Edition Adobe Photoshop CS2 Adobe Reader 7.0.8 Adobe Stock Photos 1.0 AGEIA PhysX v2.3.3 America's Army AOL Instant Messenger ArcSoft PhotoStudio 5.5 Ares 1.9.0 Auto Gordian Knot 2.27 AviSynth 2.5 Battlefield 2™ BitLord 1.1 Bluetooth Stack for Windows by Toshiba Brothers In Arms EiB Canon MP Navigator 2.0 Canon MP150 Canon Utilities Easy-PhotoPrint Click to DVD 2.0.03 Menu Data Click to DVD 2.5.00 Codec Pack - All In 1 6.0.3.0 Collab CONNECT Deadly Dozen 2 Pacific Theater DivX DivX Converter DivX Player DivX Web Player DSD Direct DSD Playback Plug-in 1.0 DVD Decrypter (Remove Only) DVD Shrink 3.2 DVgate Plus Easy-WebPrint ewido anti-spyware 4.0 Fingerprint Tutorial GameSpy Arcade Ghost Recon Advanced Warfighter Google Toolbar for Internet Explorer HDAUDIO SoftV92 Data Fax Modem with SmartCP High Definition Audio Driver Package - KB835221 HijackThis 1.99.1 Hotfix for Windows Media Format SDK (KB902344) Hotfix for Windows XP (KB893357) Hotfix for Windows XP (KB896256) Hotfix for Windows XP (KB896344) Hotfix for Windows XP (KB909667) Hotfix for Windows XP (KB914440) Hotfix for Windows XP (KB915865) Icy Tower v1.3.1 Image Converter 2 Plus Intel® Graphics Media Accelerator Driver Intel® PROSet/Wireless Software InterVideo WinDVD for VAIO iPod for Windows 2006-03-23 iTunes J2SE Runtime Environment 5.0 Update 5 J2SE Runtime Environment 5.0 Update 6 JEOPARDY! (remove only) Kaspersky On-line Scanner LAN Setting Utility Lexmark Printer Software Uninstall LiveUpdate BVRP Software Lock On: Modern Air Combat McAfee VirusScan Enterprise mCore mDriver mDrWiFi Memory Stick Formatter mEoU mHelp Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft .NET Framework 2.0 Microsoft Base Smart Card Cryptographic Service Provider Package Microsoft Data Access Components KB870669 Microsoft Halo Microsoft Office OneNote 2003 Microsoft Office Professional Edition 2003 Microsoft Rise Of Nations Microsoft Works mIRC mIWA mLogView mMHouse mobile PhoneTools mPfMgr mPfWiz mProSafe MSXML 4.0 SP2 Parser and SDK Musicmatch® Jukebox mWlsSafe mXML mZConfig Netscape Browser (remove only) Novell iPrint Client v04.05.00 NVIDIA Drivers Office 2003 Trial Assistant OmniPage SE 2.0 OpenMG Secure Module 4.3.00 Panda ActiveScan QuickTime Roxio DigitalMedia Audio Roxio DigitalMedia Copy Roxio DigitalMedia Data Security Update for Microsoft .NET Framework 2.0 (KB917283) Security Update for Step By Step Interactive Training (KB898458) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893066) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896422) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB896688) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899588) Security Update for Windows XP (KB899589) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901190) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB903235) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB908531) Security Update for Windows XP (KB911280) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911567) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912812) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913446) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB916281) Security Update for Windows XP (KB917159) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918439) Setting Utility Series SigmaTel Audio SonicStage 3.3 SonicStage Mastering Studio 2.1 SonicStage Mastering Studio Audio Filter SonicStage Mastering Studio Audio Filter Custom Preset SonicStage Mastering Studio Plugins Sony Certificate PCH Sony MP4 Shared Library Sony Utilities DLL Sony Video Shared Library SpywareGuard v2.2 Update for Windows XP (KB894391) Update for Windows XP (KB896727) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB904942) Update for Windows XP (KB910437) Update for Windows XP (KB916595) VAIO Breeze Wallpaper VAIO Camera Utility VAIO Central VAIO Entertainment Platform VAIO Event Service VAIO HDD Protection VAIO Light Flo Wallpaper VAIO Media 5.0 VAIO Media AC3 Decoder 1.0 VAIO Media Integrated Server 5.0 VAIO Media Redistribution 5.0 VAIO Media Registration Tool 5.0 VAIO Original Screen Saver VAIO Original Screen Saver VAIO Cozy Screen SD Wide Contents VAIO Power Management VAIO Registration VAIO Security Center VAIO Support Central VAIO Update 2 VAIO Wireless LAN Setup Utility VAIOSurveySA Viewpoint Manager (Remove Only) Viewpoint Media Player VobSub v2.23 (Remove Only) Wheel of Fortune (remove only) Windows Backup Utility Windows Driver Package - NVIDIA (nv) Display (03/07/2006 8.4.0.5) Windows Installer 3.1 (KB893803) Windows Live Messenger Windows Media Connect Windows Media Format Runtime Windows Media Player 10 Windows Media Player 10 Hotfix [See KB886612 for more information] Windows XP Hotfix - KB307154 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB884575 Windows XP Hotfix - KB885250 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB887742 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888239 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB888402 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 WinRAR archiver Wireless Switch Setting Utility XviD 1.1 final uninstall XviD MPEG4 Video Codec (remove only) Yahoo! Browser Services Yahoo! Install Manager Yahoo! Internet Mail Yahoo! Messenger YASA MPEG/AVI to VCD/DVD/SVCD/MPEG/AVI Converter v2.4 (build 0074)

Looks ok, how is it running?

Its running great. Explorer hasnt crashed or anything. Thank you so much. I am soo greateful.

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php