help desperation mode

My comp is going nuts as soon as i write something it gets erased and it opens the msn and starts messageing everyone i have wrote this many time and this is my 5 times it erases everthing i write help Logfile of HijackThis v1.99.1 Scan saved at 9:09:58 AM, on 19/11/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wpabaln.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Mumtaz\Desktop\winstall.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\DOCUME~1\Mumtaz\APPLIC~1\PPATCH~1\ati2evxx.exe C:\Program Files\Common Files\??sks\??oolsv.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\MSN Messenger\msrr.exe C:\Program Files\Common Files\{EC085794-031D-4105-0128-000928190002}\Update.exe C:\HijackThis.exe R3 - URLSearchHook: (no name) - {FA60383E-DDFF-8056-DEA9-D228947560EA} - C:\WINDOWS\system32\uszis.dll R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O2 - BHO: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\PROGRA~1\COMMON~1\{3C085~1\888Bar.dll O2 - BHO: (no name) - {FA60383E-DDFF-8056-DEA9-D228947560EA} - C:\WINDOWS\system32\uszis.dll O3 - Toolbar: 888Bar - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\PROGRA~1\COMMON~1\{3C085~1\888Bar.dll O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" O4 - HKLM\..\Run: [explorer] C:\Documents and Settings\Mumtaz\Desktop\winstall.exe O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Aets] "C:\DOCUME~1\Mumtaz\APPLIC~1\PPATCH~1\ati2evxx.exe" -vt yazb O4 - HKCU\..\Run: [Skvmsyw] C:\Program Files\Common Files\??sks\??oolsv.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

here you go
first
hijackthis log
Logfile of HijackThis v1.99.1
Scan saved at 4:05:16 PM, on 19/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\HijackThis.exe

R3 - URLSearchHook: (no name) - {C2760CC9-B80E-B6F4-7BE3-B69E8F3405B8} - C:\WINDOWS\system32\buei.dll
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {C004DEC2-2623-438e-9CA2-C9043AB28508} - (no file)
O2 - BHO: (no name) - {C2760CC9-B80E-B6F4-7BE3-B69E8F3405B8} - C:\WINDOWS\system32\buei.dll
O2 - BHO: (no name) - {FA60383E-DDFF-8056-DEA9-D228947560EA} - C:\WINDOWS\system32\uszis.dll (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skvmsyw] C:\Program Files\Common Files\??sks\??oolsv.exe
O4 - HKCU\..\Run: [Aets] "C:\WINDOWS\SMANTE~1\nslookup.exe" -vt ndrv
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://activex.matcash.com/speedtest2.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

combofix log
Mumtaz - 06-11-19 15:58:47.73 Service Pack 2
ComboFix 06.11.26 - Running from: "C:\Documents and Settings\Mumtaz\Desktop"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\wnsintsv.exe
C:\Program Files\Common Files\Yazzle1122OinAdmin.exe
C:\Program Files\Common Files\Yazzle1122OinUninstaller.exe
C:\Program Files\Inetget2
C:\Program Files\Ipwins
C:\Program Files\Common Files\{3C085794-031D-4105-0128-000928190002}
C:\Program Files\Common Files\{EC085794-031D-4105-0128-000928190002}

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

Folders Quarantined:

C:\QooBox\Purity\Documents and Settings\Mumtaz\Application Data\PPATCH~1
C:\QooBox\Purity\Program Files\Common Files\SKS~1
C:\QooBox\Purity\Program Files\Common Files\SKS~1\??oolsv.exe
C:\QooBox\Purity\WINDOWS\MBOLS~1
C:\QooBox\Purity\WINDOWS\SMANTE~1
C:\QooBox\Purity\WINDOWS\SMANTE~1\nslookup.exe
C:\QooBox\Purity\WINDOWS\SMANTE~1\S?mantec
C:\QooBox\Purity\WINDOWS\system32\STEM~1


((((((((((((((((((((((((((((((( Files Created from 2006-10-19 to 2006-11-19 ))))))))))))))))))))))))))))))))))


2006-11-24 16:44 d——– C:\WINDOWS\Sun
2006-11-24 16:44 d——– C:\WINDOWS\.file_store_32
2006-11-24 16:44 d——– C:\Documents and Settings\Mumtaz\Application Data\Sun
2006-11-24 02:41 d——– C:\Program Files\Java
2006-11-24 02:41 d——– C:\Program Files\Common Files\Java
2006-11-19 15:52 131,072 –a—— C:\WINDOWS\system32\buei.dll
2006-11-19 15:49 52,161 –a—— C:\Documents and Settings\Mumtaz\mt-uninstaller.exe
2006-11-19 14:41 d——– C:\WINDOWS\temp
2006-11-19 14:32 d——– C:\WINDOWS\pss
2006-11-19 10:15 3,968 –a—— C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-11-19 10:14 d—s—- C:\Documents and Settings\Mumtaz\UserData
2006-11-19 10:14 d——– C:\Program Files\Grisoft
2006-11-19 09:04 218,112 –a—— C:\HijackThis.exe
2006-11-19 08:40 d——– C:\Program Files\IMVU
2006-11-19 08:38 138,565 –a—— C:\WINDOWS\system32\mcnew.exe
2006-11-19 08:38 138,565 –a—— C:\Documents and Settings\Mumtaz\mcnew.exe
2006-11-19 08:38 122,880 –a—— C:\WINDOWS\system32\winstall.exe
2006-11-19 08:38 122,880 –a—— C:\Documents and Settings\Mumtaz\winstall.exe
2006-11-13 23:02 81,920 –a—— C:\WINDOWS\system\BIVBX11.DLL
2006-11-13 23:02 21,648 –a—— C:\WINDOWS\system\CTL3DV2.DLL
2006-11-13 23:02 19,568 –a—— C:\WINDOWS\system\CTL3D.DLL
2006-11-13 23:02 d–h—– C:\WINDOWS\PIF
2006-11-13 23:01 97,072 –a—— C:\WINDOWS\system\BWCC0007.DLL
2006-11-13 23:01 96,928 –a—— C:\WINDOWS\system\BWCC000C.DLL
2006-11-13 23:01 96,912 –a—— C:\WINDOWS\system\BWCC0009.DLL
2006-11-13 23:01 589,856 –a—— C:\WINDOWS\system32\BOCOLEF.DLL
2006-11-13 23:01 56,320 –a—— C:\WINDOWS\system32\BIVBX11N.EXE
2006-11-13 23:01 264,800 –a—— C:\WINDOWS\system\BOCOLE.DLL
2006-11-13 23:01 211,488 –a—— C:\WINDOWS\system32\BWCC32.DLL
2006-11-13 23:01 18,944 –a—— C:\WINDOWS\system32\BIVBX11S.DLL
2006-11-13 23:01 164,928 –a—— C:\WINDOWS\system\BWCC.DLL
2006-11-13 23:01 16,384 –a—— C:\WINDOWS\system32\BIVBX11C.DLL
2006-11-13 23:01 159,744 –a—— C:\WINDOWS\system32\BW32000C.DLL
2006-11-13 23:01 159,744 –a—— C:\WINDOWS\system32\BW320009.DLL
2006-11-13 23:01 159,744 –a—— C:\WINDOWS\system32\BW320007.DLL
2006-11-13 23:01 d——– C:\DTEXT23
2006-11-13 23:00 d——– C:\BC45
2006-11-13 22:59 d–hs—- C:\RECYCLER
2006-11-13 22:51 d——– C:\Documents and Settings\Mumtaz\Contacts
2006-11-13 22:47 d—-c— C:\WINDOWS\system32\DRVSTORE
2006-11-13 22:46 d——– C:\Program Files\MSN Messenger
2006-11-10 21:15 d——– C:\Documents and Settings\Mumtaz\Application Data\vlc
2006-11-09 08:18 d——– C:\Program Files\Azureus
2006-11-07 15:37 d——– C:\Program Files\VideoLAN
2006-11-07 06:00 22,752 –a—— C:\WINDOWS\system32\spupdsvc.exe
2006-11-07 06:00 d–h—– C:\WINDOWS\$hf_mig$
2006-11-07 06:00 d——– C:\WINDOWS\system32\PreInstall
2006-11-06 23:51 d——– C:\WINDOWS\system32\SoftwareDistribution
2006-11-06 23:51 d——– C:\Documents and Settings\Mumtaz\Application Data\Macromedia
2006-11-04 13:12 d——– C:\Program Files\EAWDSE
2006-11-04 13:09 17,920 –a—— C:\WINDOWS\system32\mdimon.dll
2006-11-04 13:06 d——– C:\Program Files\Common Files\L&H
2006-11-04 13:05 d——– C:\Program Files\Microsoft.NET
2006-11-04 13:05 d——– C:\Program Files\Microsoft ActiveSync
2006-11-04 13:04 d——– C:\Program Files\Microsoft Works
2006-11-04 13:04 d——– C:\Program Files\Common Files\DESIGNER
2006-11-04 13:03 d——– C:\WINDOWS\SHELLNEW
2006-11-04 13:03 d——– C:\Program Files\Microsoft Visual Studio
2006-11-04 13:03 d——– C:\Program Files\Microsoft Office
2006-11-04 12:59 dr-h—– C:\MSOCache
2006-11-04 12:52 9,600 –a—— C:\WINDOWS\system32\drivers\hidusb.sys
2006-11-04 12:52 12,160 –a—— C:\WINDOWS\system32\drivers\mouhid.sys
2006-11-04 12:50 dr-h—– C:\Documents and Settings\Mumtaz\SendTo
2006-11-04 12:50 dr-h—– C:\Documents and Settings\Mumtaz\Recent
2006-11-04 12:50 dr-h—– C:\Documents and Settings\Mumtaz\Application Data\.
2006-11-04 12:50 dr-h—– C:\Documents and Settings\Mumtaz\Application Data
2006-11-04 12:50 dr——- C:\Documents and Settings\Mumtaz\Start Menu
2006-11-04 12:50 dr——- C:\Documents and Settings\Mumtaz\My Documents
2006-11-04 12:50 dr——- C:\Documents and Settings\Mumtaz\Favorites
2006-11-04 12:50 d–h—– C:\Program Files\Uninstall Information
2006-11-04 12:50 d–h—– C:\Documents and Settings\Mumtaz\Templates
2006-11-04 12:50 d–h—– C:\Documents and Settings\Mumtaz\PrintHood
2006-11-04 12:50 d–h—– C:\Documents and Settings\Mumtaz\NetHood
2006-11-04 12:50 d–h—– C:\Documents and Settings\Mumtaz\Local Settings
2006-11-04 12:50 d—s—- C:\Documents and Settings\Mumtaz\Cookies
2006-11-04 12:50 d—s—- C:\Documents and Settings\Mumtaz\Application Data\Microsoft
2006-11-04 12:50 d——– C:\Documents and Settings\Mumtaz\Desktop
2006-11-04 12:50 d——– C:\Documents and Settings\Mumtaz\Application Data\Identities
2006-11-04 12:50 d——– C:\Documents and Settings\Mumtaz\Application Data\..
2006-11-04 12:50 d——– C:\Documents and Settings\Mumtaz\..
2006-11-04 12:50 d——– C:\Documents and Settings\Mumtaz\.
2006-11-04 12:34 d—s—- C:\WINDOWS\system32\Microsoft
2006-11-04 12:34 d——– C:\WINDOWS\SoftwareDistribution
2006-11-04 12:34 d——– C:\WINDOWS\Prefetch
2006-11-04 12:28 d——– C:\WINDOWS\system32\xircom
2006-11-04 12:28 d——– C:\Program Files\xerox
2006-11-04 12:28 d——– C:\Program Files\microsoft frontpage
2006-11-04 12:27 112,128 –a—— C:\WINDOWS\system32\mapi32.dll
2006-11-04 12:27 0 -rahs—- C:\MSDOS.SYS
2006-11-04 12:27 0 -rahs—- C:\IO.SYS
2006-11-04 12:27 0 –a—— C:\CONFIG.SYS
2006-11-04 12:27 0 –a—— C:\AUTOEXEC.BAT
2006-11-04 12:25 dr——- C:\WINDOWS\Offline Web Pages
2006-11-04 12:25 d–hs—- C:\Documents and Settings\All Users\DRM
2006-11-04 12:25 d—s—- C:\WINDOWS\Downloaded Program Files
2006-11-04 12:24 d–h—– C:\Program Files\WindowsUpdate
2006-11-04 12:23 64,512 –a—— C:\WINDOWS\system32\acctres.dll
2006-11-04 12:23 16,384 –a—— C:\WINDOWS\system32\icfgnt5.dll
2006-11-04 12:23 12,288 –a—— C:\WINDOWS\system32\nmevtmsg.dll
2006-11-04 12:23 11,264 –a—— C:\WINDOWS\system32\atrace.dll
2006-11-04 12:23 d—s—- C:\WINDOWS\Tasks
2006-11-04 12:23 d——– C:\WINDOWS\system32\DirectX
2006-11-04 12:23 d——– C:\Program Files\Common Files\Services
2006-11-04 12:23 d——– C:\Program Files\Common Files\MSSoap
2006-11-04 12:22 81,920 –a—— C:\WINDOWS\system32\isign32.dll
2006-11-04 12:22 81,920 –a—— C:\WINDOWS\system32\ils.dll
2006-11-04 12:22 8,192 –a—— C:\WINDOWS\system32\bitsprx2.dll
2006-11-04 12:22 73,728 –a—— C:\WINDOWS\system32\icwdial.dll
2006-11-04 12:22 73,472 –a—— C:\WINDOWS\system32\drivers\sr.sys
2006-11-04 12:22 7,168 –a—— C:\WINDOWS\system32\bitsprx3.dll
2006-11-04 12:22 69,632 –a—— C:\WINDOWS\system32\msconf.dll
2006-11-04 12:22 679,424 –a—— C:\WINDOWS\system32\inetcomm.dll
2006-11-04 12:22 67,584 –a—— C:\WINDOWS\system32\srclient.dll
2006-11-04 12:22 65,536 –a—— C:\WINDOWS\system32\icwphbk.dll
2006-11-04 12:22 6,656 –a—— C:\WINDOWS\system32\wuauserv.dll
2006-11-04 12:22 48,128 –a—— C:\WINDOWS\system32\inetres.dll
2006-11-04 12:22 465,176 –a—— C:\WINDOWS\system32\wuapi.dll
2006-11-04 12:22 45,568 –a—— C:\WINDOWS\system32\safrslv.dll
2006-11-04 12:22 43,520 –a—— C:\WINDOWS\system32\safrcdlg.dll
2006-11-04 12:22 43,520 –a—— C:\WINDOWS\system32\racpldlg.dll
2006-11-04 12:22 41,240 –a—— C:\WINDOWS\system32\wups.dll
2006-11-04 12:22 382,464 –a—— C:\WINDOWS\system32\qmgr.dll
2006-11-04 12:22 34,560 –a—— C:\WINDOWS\system32\mnmdd.dll
2006-11-04 12:22 32,768 –a—— C:\WINDOWS\system32\mnmsrvc.exe
2006-11-04 12:22 32,768 –a—— C:\WINDOWS\system32\isrdbg32.dll
2006-11-04 12:22 29,696 –a—— C:\WINDOWS\system32\safrdm.dll
2006-11-04 12:22 28,672 –a—— C:\WINDOWS\system32\nmmkcert.dll
2006-11-04 12:22 274,944 –a—— C:\WINDOWS\system32\mstask.dll
2006-11-04 12:22 274,432 –a—— C:\WINDOWS\system32\inetcfg.dll
2006-11-04 12:22 252,928 –a—— C:\WINDOWS\system32\msoeacct.dll
2006-11-04 12:22 239,104 –a—— C:\WINDOWS\system32\srrstr.dll
2006-11-04 12:22 22,528 –a—— C:\WINDOWS\system32\fltMc.exe
2006-11-04 12:22 194,328 –a—— C:\WINDOWS\system32\wuaueng1.dll
2006-11-04 12:22 190,976 –a—— C:\WINDOWS\system32\schedsvc.dll
2006-11-04 12:22 18,944 –a—— C:\WINDOWS\system32\qmgrprxy.dll
2006-11-04 12:22 173,536 –a—— C:\WINDOWS\system32\wuweb.dll
2006-11-04 12:22 172,312 –a—— C:\WINDOWS\system32\wuauclt1.exe
2006-11-04 12:22 170,496 –a—— C:\WINDOWS\system32\srsvc.dll
2006-11-04 12:22 16,896 –a—— C:\WINDOWS\system32\fltlib.dll
2006-11-04 12:22 127,256 –a—— C:\WINDOWS\system32\wucltui.dll
2006-11-04 12:22 124,800 –a—— C:\WINDOWS\system32\drivers\fltMgr.sys
2006-11-04 12:22 124,184 –a—— C:\WINDOWS\system32\wuauclt.exe
2006-11-04 12:22 12,288 –a—— C:\WINDOWS\system32\mstinit.exe
2006-11-04 12:22 105,984 –a—— C:\WINDOWS\system32\msoert2.dll
2006-11-04 12:22 1,343,768 –a—— C:\WINDOWS\system32\wuaueng.dll
2006-11-04 12:22 d——– C:\WINDOWS\system32\Restore
2006-11-04 12:22 d——– C:\WINDOWS\system32\Macromed
2006-11-04 12:22 d——– C:\WINDOWS\srchasst
2006-11-04 12:22 d——– C:\Program Files\Outlook Express
2006-11-04 12:22 d——– C:\Program Files\NetMeeting
2006-11-04 12:22 d——– C:\Program Files\Movie Maker
2006-11-04 12:22 d——– C:\Program Files\Internet Explorer
2006-11-04 12:22 d——– C:\Program Files\Common Files\System
2006-11-04 12:21 d——– C:\WINDOWS\Registration
2006-11-04 12:21 d——– C:\Program Files\ComPlus Applications
2006-11-04 12:20 5,632 –a—— C:\WINDOWS\system32\write.exe
2006-11-04 12:20 d——– C:\Program Files\Windows Media Player
2006-11-04 12:20 d——– C:\Program Files\Online Services
2006-11-04 12:20 d——– C:\Program Files\MSN Gaming Zone
2006-11-04 12:20 d——– C:\Program Files\Messenger
2006-11-04 12:19 956,416 –a—— C:\WINDOWS\system32\msdtctm.dll
2006-11-04 12:19 93,696 –a—— C:\WINDOWS\system32\tscfgwmi.dll
2006-11-04 12:19 91,136 –a—— C:\WINDOWS\system32\mtxoci.dll
2006-11-04 12:19 9,728 –a—— C:\WINDOWS\system32\reset.exe
2006-11-04 12:19 87,176 –a—— C:\WINDOWS\system32\rdpwsx.dll
2006-11-04 12:19 85,504 –a—— C:\WINDOWS\system32\catsrvps.dll
2006-11-04 12:19 82,432 –a—— C:\WINDOWS\system32\comrepl.dll
2006-11-04 12:19 80,384 –a—— C:\WINDOWS\system32\charmap.exe
2006-11-04 12:19 73,216 –a—— C:\WINDOWS\system32\avwav.dll
2006-11-04 12:19 67,072 –a—— C:\WINDOWS\system32\rdshost.exe
2006-11-04 12:19 655,360 –a—— C:\WINDOWS\system32\mstscax.dll
2006-11-04 12:19 628,224 –a—— C:\WINDOWS\system32\catsrvut.dll
2006-11-04 12:19 62,464 –a—— C:\WINDOWS\system32\rdpclip.exe
2006-11-04 12:19 62,464 –a—— C:\WINDOWS\system32\colbact.dll
2006-11-04 12:19 605,696 –a—— C:\WINDOWS\system32\getuname.dll
2006-11-04 12:19 60,416 –a—— C:\WINDOWS\system32\remotepg.dll
2006-11-04 12:19 6,144 –a—— C:\WINDOWS\system32\msdtc.exe
2006-11-04 12:19 58,880 –a—— C:\WINDOWS\system32\msdtclog.dll
2006-11-04 12:19 58,880 –a—— C:\WINDOWS\system32\licwmi.dll
2006-11-04 12:19 56,832 –a—— C:\WINDOWS\system32\sol.exe
2006-11-04 12:19 56,320 –a—— C:\WINDOWS\system32\servdeps.dll
2006-11-04 12:19 55,296 –a—— C:\WINDOWS\system32\freecell.exe
2006-11-04 12:19 540,160 –a—— C:\WINDOWS\system32\comuid.dll
2006-11-04 12:19 54,272 –a—— C:\WINDOWS\system32\stclient.dll
2006-11-04 12:19 538,624 –a—— C:\WINDOWS\system32\spider.exe
2006-11-04 12:19 501,248 –a—— C:\WINDOWS\system32\clbcatq.dll
2006-11-04 12:19 5,120 –a—— C:\WINDOWS\system32\dcomcnfg.exe
2006-11-04 12:19 44,544 –a—— C:\WINDOWS\system32\tscupgrd.exe
2006-11-04 12:19 44,544 –a—— C:\WINDOWS\system32\hticons.dll
2006-11-04 12:19 426,496 –a—— C:\WINDOWS\system32\msdtcprx.dll
2006-11-04 12:19 407,552 –a—— C:\WINDOWS\system32\mstsc.exe
2006-11-04 12:19 4,096 –a—— C:\WINDOWS\system32\rdpcfgex.dll
2006-11-04 12:19 4,096 –a—— C:\WINDOWS\system32\mtxex.dll
2006-11-04 12:19 38,912 –a—— C:\WINDOWS\system32\cfgbkend.dll
2006-11-04 12:19 35,328 –a—— C:\WINDOWS\system32\winchat.exe
2006-11-04 12:19 345,088 –a—— C:\WINDOWS\system32\hypertrm.dll
2006-11-04 12:19 343,040 –a—— C:\WINDOWS\system32\mspaint.exe
2006-11-04 12:19 33,792 –a—— C:\WINDOWS\system32\regini.exe
2006-11-04 12:19 295,424 –a—— C:\WINDOWS\system32\termsrv.dll
2006-11-04 12:19 25,600 –a—— C:\WINDOWS\system32\comaddin.dll
2006-11-04 12:19 25,088 –a—— C:\WINDOWS\system32\mtxlegih.dll
2006-11-04 12:19 229,888 –a—— C:\WINDOWS\system32\catsrv.dll
2006-11-04 12:19 227,840 –a—— C:\WINDOWS\system32\avtapi.dll
2006-11-04 12:19 22,016 –a—— C:\WINDOWS\system32\qwinsta.exe
2006-11-04 12:19 21,896 –a—— C:\WINDOWS\system32\drivers\tdtcp.sys
2006-11-04 12:19 20,992 –a—— C:\WINDOWS\system32\msg.exe
2006-11-04 12:19 20,480 –a—— C:\WINDOWS\system32\qprocess.exe
2006-11-04 12:19 20,480 –a—— C:\WINDOWS\system32\mtxdm.dll
2006-11-04 12:19 19,968 –a—— C:\WINDOWS\system32\rdpsnd.dll
2006-11-04 12:19 185,344 –a—— C:\WINDOWS\system32\cmprops.dll
2006-11-04 12:19 183,808 –a—— C:\WINDOWS\system32\accwiz.exe
2006-11-04 12:19 17,408 –a—— C:\WINDOWS\system32\mmfutil.dll
2006-11-04 12:19 161,280 –a—— C:\WINDOWS\system32\msdtcuiu.dll
2006-11-04 12:19 16,896 –a—— C:\WINDOWS\system32\tsshutdn.exe
2006-11-04 12:19 16,896 –a—— C:\WINDOWS\system32\qappsrv.exe
2006-11-04 12:19 16,384 –a—— C:\WINDOWS\system32\tskill.exe
2006-11-04 12:19 16,384 –a—— C:\WINDOWS\system32\avmeter.dll
2006-11-04 12:19 15,872 –a—— C:\WINDOWS\system32\rwinsta.exe
2006-11-04 12:19 15,872 –a—— C:\WINDOWS\system32\cdmodem.dll
2006-11-04 12:19 15,360 –a—— C:\WINDOWS\system32\logoff.exe
2006-11-04 12:19 147,968 –a—— C:\WINDOWS\system32\rdchost.dll
2006-11-04 12:19 147,456 –a—— C:\WINDOWS\system32\comsnap.dll
2006-11-04 12:19 140,800 –a—— C:\WINDOWS\system32\sessmgr.exe
2006-11-04 12:19 14,848 –a—— C:\WINDOWS\system32\tsdiscon.exe
2006-11-04 12:19 14,848 –a—— C:\WINDOWS\system32\tscon.exe
2006-11-04 12:19 14,848 –a—— C:\WINDOWS\system32\shadow.exe
2006-11-04 12:19 139,400 –a—— C:\WINDOWS\system32\drivers\rdpwd.sys
2006-11-04 12:19 138,752 –a—— C:\WINDOWS\system32\sndvol32.exe
2006-11-04 12:19 131,584 –a—— C:\WINDOWS\system32\sndrec32.exe
2006-11-04 12:19 13,824 –a—— C:\WINDOWS\system32\rdsaddin.exe
2006-11-04 12:19 126,976 –a—— C:\WINDOWS\system32\mshearts.exe
2006-11-04 12:19 123,392 –a—— C:\WINDOWS\system32\mplay32.exe
2006-11-04 12:19 12,040 –a—— C:\WINDOWS\system32\drivers\tdpipe.sys
2006-11-04 12:19 119,808 –a—— C:\WINDOWS\system32\winmine.exe
2006-11-04 12:19 114,688 –a—— C:\WINDOWS\system32\calc.exe
2006-11-04 12:19 110,080 –a—— C:\WINDOWS\system32\clbcatex.dll
2006-11-04 12:19 11,776 –a—— C:\WINDOWS\system32\xolehlp.dll
2006-11-04 12:19 11,264 –a—— C:\WINDOWS\system32\icaapi.dll
2006-11-04 12:19 102,912 –a—— C:\WINDOWS\system32\clipbrd.exe
2006-11-04 12:19 1,251,840 –a—— C:\WINDOWS\system32\comsvcs.dll
2006-11-04 12:19 1,161 –a—— C:\WINDOWS\system32\usrlogon.cmd
2006-11-04 12:19 d——– C:\WINDOWS\system32\MsDtc
2006-11-04 12:19 d——– C:\WINDOWS\system32\Com
2006-11-04 12:19 d——– C:\Program Files\Windows NT
2006-11-04 12:19 d——– C:\Program Files\MSN
2006-11-04 12:18 40,840 –a—— C:\WINDOWS\system32\drivers\termdd.sys
2006-11-04 12:18 196,864 –a—— C:\WINDOWS\system32\drivers\rdpdr.sys
2006-11-04 04:16 82,944 –a—— C:\WINDOWS\system32\drivers\wdmaud.sys
2006-11-04 04:16 6,400 –a—— C:\WINDOWS\system32\drivers\splitter.sys
2006-11-04 04:16 52,864 –a—— C:\WINDOWS\system32\drivers\DMusic.sys
2006-11-04 04:16 4,992 –a—— C:\WINDOWS\system32\drivers\MSPQM.sys
2006-11-04 04:16 2,944 –a—— C:\WINDOWS\system32\drivers\drmkaud.sys
2006-11-04 04:16 142,464 –a—— C:\WINDOWS\system32\drivers\aec.sys
2006-11-04 04:15 7,552 –a—— C:\WINDOWS\system32\drivers\MSKSSRV.sys
2006-11-04 04:15 60,800 –a—— C:\WINDOWS\system32\drivers\sysaudio.sys
2006-11-04 04:15 54,272 –a—— C:\WINDOWS\system32\drivers\swmidi.sys
2006-11-04 04:15 5,376 –a—— C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2006-11-04 04:15 3,072 –a—— C:\WINDOWS\system32\drivers\audstub.sys
2006-11-04 04:15 171,776 –a—— C:\WINDOWS\system32\drivers\kmixer.sys
2006-11-04 04:14 57,472 –a—— C:\WINDOWS\system32\drivers\redbook.sys
2006-11-04 04:13 702,845 –a—— C:\WINDOWS\system32\i81xdnt5.dll
2006-11-04 04:13 60,288 –a—— C:\WINDOWS\system32\drivers\drmk.sys
2006-11-04 04:13 40,704 –a—— C:\WINDOWS\system32\drivers\es1371mp.sys
2006-11-04 04:13 4,255 –a—— C:\WINDOWS\system32\drivers\adv01nt5.dll
2006-11-04 04:13 4,096 –a—— C:\WINDOWS\system32\ksuser.dll
2006-11-04 04:13 33,599 –a—— C:\WINDOWS\system32\drivers\wATV04nt.sys
2006-11-04 04:13 3,967 –a—— C:\WINDOWS\system32\drivers\adv02nt5.dll
2006-11-04 04:13 3,901 –a—— C:\WINDOWS\system32\drivers\SiInt5.dll
2006-11-04 04:13 3,775 –a—— C:\WINDOWS\system32\drivers\adv11nt5.dll
2006-11-04 04:13 3,711 –a—— C:\WINDOWS\system32\drivers\adv09nt5.dll
2006-11-04 04:13 3,647 –a—— C:\WINDOWS\system32\drivers\adv07nt5.dll
2006-11-04 04:13 3,615 –a—— C:\WINDOWS\system32\drivers\adv05nt5.dll
2006-11-04 04:13 3,135 –a—— C:\WINDOWS\system32\drivers\adv08nt5.dll
2006-11-04 04:13 29,311 –a—— C:\WINDOWS\system32\drivers\wATV01nt.sys
2006-11-04 04:13 25,471 –a—— C:\WINDOWS\system32\drivers\wATV10nt.sys
2006-11-04 04:13 25,471 –a—— C:\WINDOWS\system32\drivers\atv04nt5.dll
2006-11-04 04:13 23,615 –a—— C:\WINDOWS\system32\drivers\wCh7xxNT.sys
2006-11-04 04:13 23,040 –a—— C:\WINDOWS\system32\drivers\mouclass.sys
2006-11-04 04:13 22,271 –a—— C:\WINDOWS\system32\drivers\wATV06nt.sys
2006-11-04 04:13 21,183 –a—— C:\WINDOWS\system32\drivers\atv01nt5.dll
2006-11-04 04:13 19,551 –a—— C:\WINDOWS\system32\drivers\wATV02NT.sys
2006-11-04 04:13 19,455 –a—— C:\WINDOWS\system32\drivers\wVchNTxx.sys
2006-11-04 04:13 17,279 –a—— C:\WINDOWS\system32\drivers\atv10nt5.dll
2006-11-04 04:13 161,020 –a—— C:\WINDOWS\system32\drivers\i81xnt5.sys
2006-11-04 04:13 15,423 –a—— C:\WINDOWS\system32\drivers\Ch7xxNT5.dll
2006-11-04 04:13 145,792 –a—— C:\WINDOWS\system32\drivers\portcls.sys
2006-11-04 04:13 14,143 –a—— C:\WINDOWS\system32\drivers\atv06nt5.dll
2006-11-04 04:13 12,415 –a—— C:\WINDOWS\system32\drivers\wADV01nt.sys
2006-11-04 04:13 12,127 –a—— C:\WINDOWS\system32\drivers\wADV02NT.sys
2006-11-04 04:13 12,063 –a—— C:\WINDOWS\system32\drivers\wSiINTxx.sys
2006-11-04 04:13 11,935 –a—— C:\WINDOWS\system32\drivers\wADV11nt.sys
2006-11-04 04:13 11,871 –a—— C:\WINDOWS\system32\drivers\wADV09NT.sys
2006-11-04 04:13 11,807 –a—— C:\WINDOWS\system32\drivers\wADV07nt.sys
2006-11-04 04:13 11,775 –a—— C:\WINDOWS\system32\drivers\wADV05NT.sys
2006-11-04 04:13 11,359 –a—— C:\WINDOWS\system32\drivers\atv02nt5.dll
2006-11-04 04:13 11,325 –a—— C:\WINDOWS\system32\drivers\Vchnt5.dll
2006-11-04 04:13 11,295 –a—— C:\WINDOWS\system32\drivers\wADV08NT.sys
2006-11-04 04:12 74,240 –a—— C:\WINDOWS\system32\usbui.dll
2006-11-04 04:10 dr——- C:\Program Files\Common Files\..
2006-11-04 04:10 dr——- C:\Program Files\.
2006-11-04 04:10 dr——- C:\Program Files
2006-11-04 04:10 d–hs—- C:\WINDOWS\Installer
2006-11-04 04:10 d–hs—- C:\Program Files\..
2006-11-04 04:10 d——– C:\Program Files\Common Files\SpeechEngines
2006-11-04 04:10 d——– C:\Program Files\Common Files\ODBC
2006-11-04 04:10 d——– C:\Program Files\Common Files\Microsoft Shared
2006-11-04 04:10 d——– C:\Program Files\Common Files\.
2006-11-04 04:10 d——– C:\Program Files\Common Files
2006-11-04 04:09 9,936 –a—— C:\WINDOWS\system\LZEXPAND.DLL
2006-11-04 04:09 9,008 –a—— C:\WINDOWS\system\VER.DLL
2006-11-04 04:09 85,020 –a—— C:\WINDOWS\system32\dgsetup.dll
2006-11-04 04:09 82,944 –a—— C:\WINDOWS\system\OLECLI.DLL
2006-11-04 04:09 8,704 –a—— C:\WINDOWS\system32\batt.dll
2006-11-04 04:09 8,192 -ra—— C:\WINDOWS\system32\kbdhept.dll
2006-11-04 04:09 74,752 –a—— C:\WINDOWS\system32\storprop.dll
2006-11-04 04:09 7,168 -ra—— C:\WINDOWS\system32\kbdcz.dll
2006-11-04 04:09 69,584 –a—— C:\WINDOWS\system\AVICAP.DLL
2006-11-04 04:09 69,120 –a—— C:\WINDOWS\NOTEPAD.EXE
2006-11-04 04:09 68,768 –a—— C:\WINDOWS\system\MMSYSTEM.DLL
2006-11-04 04:09 6,656 -ra—— C:\WINDOWS\system32\kbdycl.dll
2006-11-04 04:09 6,656 -ra—— C:\WINDOWS\system32\kbdsl1.dll
2006-11-04 04:09 6,656 -ra—— C:\WINDOWS\system32\kbdsl.dll
2006-11-04 04:09 6,656 -ra—— C:\WINDOWS\system32\kbdpl.dll
2006-11-04 04:09 6,656 -ra—— C:\WINDOWS\system32\kbdhu.dll
2006-11-04 04:09 6,656 -ra—— C:\WINDOWS\system32\kbdhela3.dll
2006-11-04 04:09 6,656 -ra—— C:\WINDOWS\system32\kbdcz2.dll
2006-11-04 04:09 6,656 -ra—— C:\WINDOWS\system32\kbdcz1.dll
2006-11-04 04:09 6,656 -ra—— C:\WINDOWS\system32\kbdcr.dll
2006-11-04 04:09 6,656 -ra—— C:\WINDOWS\system32\KBDAL.DLL
2006-11-04 04:09 6,144 -ra—— C:\WINDOWS\system32\kbdtuq.dll
2006-11-04 04:09 6,144 -ra—— C:\WINDOWS\system32\kbdtuf.dll
2006-11-04 04:09 6,144 -ra—— C:\WINDOWS\system32\kbdlv1.dll
2006-11-04 04:09 6,144 -ra—— C:\WINDOWS\system32\kbdlv.dll
2006-11-04 04:09 6,144 -ra—— C:\WINDOWS\system32\kbdhela2.dll
2006-11-04 04:09 6,144 -ra—— C:\WINDOWS\system32\kbdgkl.dll
2006-11-04 04:09 6,144 -ra—— C:\WINDOWS\system32\kbdest.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdycc.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbduzb.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdur.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdtat.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdru1.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdru.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdro.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdpl1.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdmon.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdlt1.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdlt.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdkyr.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdkaz.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdhu1.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdhe319.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdhe220.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdhe.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdbu.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdblr.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdazel.dll
2006-11-04 04:09 5,632 -ra—— C:\WINDOWS\system32\kbdaze.dll
2006-11-04 04:09 5,120 –a—— C:\WINDOWS\system\SHELL.DLL
2006-11-04 04:09 32,816 –a—— C:\WINDOWS\system\COMMDLG.DLL
2006-11-04 04:09 24,661 –a—— C:\WINDOWS\system32\spxcoins.dll
2006-11-04 04:09 24,064 –a—— C:\WINDOWS\system\OLESVR.DLL
2006-11-04 04:09 19,200 –a—— C:\WINDOWS\system\TAPI.DLL
2006-11-04 04:09 176,157 –a—— C:\WINDOWS\system32\dgrpsetu.dll
2006-11-04 04:09 15,360 –a—— C:\WINDOWS\TASKMAN.EXE
2006-11-04 04:09 13,312 –a—— C:\WINDOWS\system32\irclass.dll
2006-11-04 04:09 126,912 –a—— C:\WINDOWS\system\MSVIDEO.DLL
2006-11-04 04:09 11,264 –a—— C:\WINDOWS\system32\drivers\irenum.sys
2006-11-04 04:09 109,456 –a—— C:\WINDOWS\system\AVIFILE.DLL
2006-11-04 04:09 103,424 –a—— C:\WINDOWS\system32\EqnClass.Dll
2006-11-04 04:09 dr——- C:\Documents and Settings\All Users\Start Menu
2006-11-04 04:09 dr——- C:\Documents and Settings\All Users\Documents
2006-11-04 04:09 d–h—– C:\Documents and Settings\All Users\Templates
2006-11-04 04:09 d——– C:\WINDOWS\system32\CatRoot2
2006-11-04 04:09 d——– C:\WINDOWS\system32\CatRoot
2006-11-04 04:09 d——– C:\Documents and Settings\All Users\Favorites
2006-11-04 04:09 d——– C:\Documents and Settings\All Users\Desktop
2006-11-04 04:08 dr-h—– C:\Documents and Settings\All Users\Application Data\.
2006-11-04 04:08 dr-h—– C:\Documents and Settings\All Users\Application Data
2006-11-04 04:08 d—s—- C:\Documents and Settings\All Users\Application Data\Microsoft
2006-11-04 04:08 d——– C:\Documents and Settings\All Users\Application Data\..
2006-11-04 04:08 d——– C:\Documents and Settings\All Users\..
2006-11-04 04:08 d——– C:\Documents and Settings\All Users\.
2006-11-04 04:08 d——– C:\Documents and Settings
2006-11-04 04:06 d——– C:\WINDOWS\system32\OEM
2006-11-04 04:06 d——– C:\PNPDRIVERS
2006-11-04 04:00 d–hs—- C:\System Volume Information
2006-11-04 03:55 dr-hsc— C:\WINDOWS\system32\dllcache
2006-11-04 03:55 dr–s—- C:\WINDOWS\Fonts
2006-11-04 03:55 dr——- C:\WINDOWS\Web
2006-11-04 03:55 d–hs—- C:\WINDOWS\..
2006-11-04 03:55 d–h—– C:\WINDOWS\inf
2006-11-04 03:55 d——– C:\WINDOWS\WinSxS
2006-11-04 03:55 d——– C:\WINDOWS\twain_32
2006-11-04 03:55 d——– C:\WINDOWS\system32\wins
2006-11-04 03:55 d——– C:\WINDOWS\system32\wbem
2006-11-04 03:55 d——– C:\WINDOWS\system32\usmt
2006-11-04 03:55 d——– C:\WINDOWS\system32\spool
2006-11-04 03:55 d——– C:\WINDOWS\system32\ShellExt
2006-11-04 03:55 d——– C:\WINDOWS\system32\Setup
2006-11-04 03:55 d——– C:\WINDOWS\system32\ras
2006-11-04 03:55 d——– C:\WINDOWS\system32\oobe
2006-11-04 03:55 d——– C:\WINDOWS\system32\npp
2006-11-04 03:55 d——– C:\WINDOWS\system32\mui
2006-11-04 03:55 d——– C:\WINDOWS\system32\inetsrv
2006-11-04 03:55 d——– C:\WINDOWS\system32\IME
2006-11-04 03:55 d——– C:\WINDOWS\system32\icsxml
2006-11-04 03:55 d——– C:\WINDOWS\system32\ias
2006-11-04 03:55 d——– C:\WINDOWS\system32\export
2006-11-04 03:55 d——– C:\WINDOWS\system32\drivers\etc
2006-11-04 03:55 d——– C:\WINDOWS\system32\drivers\disdn
2006-11-04 03:55 d——– C:\WINDOWS\system32\drivers\..
2006-11-04 03:55 d——– C:\WINDOWS\system32\drivers\.
2006-11-04 03:55 d——– C:\WINDOWS\system32\drivers
2006-11-04 03:55 d——– C:\WINDOWS\system32\dhcp
2006-11-04 03:55 d——– C:\WINDOWS\system32\config
2006-11-04 03:55 d——– C:\WINDOWS\system32\3com_dmi
2006-11-04 03:55 d——– C:\WINDOWS\system32\3076
2006-11-04 03:55 d——– C:\WINDOWS\system32\2052
2006-11-04 03:55 d——– C:\WINDOWS\system32\1054
2006-11-04 03:55 d——– C:\WINDOWS\system32\1042
2006-11-04 03:55 d——– C:\WINDOWS\system32\1041
2006-11-04 03:55 d——– C:\WINDOWS\system32\1037
2006-11-04 03:55 d——– C:\WINDOWS\system32\1033
2006-11-04 03:55 d——– C:\WINDOWS\system32\1031
2006-11-04 03:55 d——– C:\WINDOWS\system32\1028
2006-11-04 03:55 d——– C:\WINDOWS\system32\1025
2006-11-04 03:55 d——– C:\WINDOWS\system32\..
2006-11-04 03:55 d——– C:\WINDOWS\system32\.
2006-11-04 03:55 d——– C:\WINDOWS\system32
2006-11-04 03:55 d——– C:\WINDOWS\system\..
2006-11-04 03:55 d——– C:\WINDOWS\system\.
2006-11-04 03:55 d——– C:\WINDOWS\system
2006-11-04 03:55 d——– C:\WINDOWS\security
2006-11-04 03:55 d——– C:\WINDOWS\Resources
2006-11-04 03:55 d——– C:\WINDOWS\repair
2006-11-04 03:55 d——– C:\WINDOWS\Provisioning
2006-11-04 03:55 d——– C:\WINDOWS\PeerNet
2006-11-04 03:55 d——– C:\WINDOWS\pchealth
2006-11-04 03:55 d——– C:\WINDOWS\mui
2006-11-04 03:55 d——– C:\WINDOWS\msapps
2006-11-04 03:55 d——– C:\WINDOWS\msagent
2006-11-04 03:55 d——– C:\WINDOWS\Media
2006-11-04 03:55 d——– C:\WINDOWS\java
2006-11-04 03:55 d——– C:\WINDOWS\ime
2006-11-04 03:55 d——– C:\WINDOWS\Help
2006-11-04 03:55 d——– C:\WINDOWS\Driver Cache
2006-11-04 03:55 d——– C:\WINDOWS\Debug
2006-11-04 03:55 d——– C:\WINDOWS\Cursors
2006-11-04 03:55 d——– C:\WINDOWS\Connection Wizard
2006-11-04 03:55 d——– C:\WINDOWS\Config
2006-11-04 03:55 d——– C:\WINDOWS\AppPatch
2006-11-04 03:55 d——– C:\WINDOWS\addins
2006-11-04 03:55 d——– C:\WINDOWS\.
2006-11-04 03:55 d——– C:\WINDOWS


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))




(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"Skvmsyw"="C:\\Program Files\\Common Files\\??sks\\??oolsv.exe"
"Aets"="\"C:\\WINDOWS\\SMANTE~1\\nslookup.exe\" -vt ndrv"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"MSConfig"="C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\MSConfig.exe /auto"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoDispAppearancePage"=dword:00000000
"NoColorChoice"=dword:00000000
"NoSizeChoice"=dword:00000000
"NoDispBackgroundPage"=dword:00000000
"NoDispScrSavPage"=dword:00000000
"NoDispCPL"=dword:00000000
"NoVisualStyleChoice"=dword:00000000
"NoDispSettingsPage"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"NoActiveDesktop"=dword:00000000
"NoSaveSettings"=dword:00000000
"ClassicShell"=dword:00000000
"NoThemesTab"=dword:00000000
"ForceActiveDesktopOn"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoActiveDesktopChanges"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

Completion time: 06-11-19 16:01:16.47
C:\ComboFix.txt … 06-11-19 16:01

smith fraud log
SmitFraudFix v2.124

Scan done at 16:04:28.79, 19/11/2006
Run from C:\Documents and Settings\Mumtaz\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Mumtaz


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Mumtaz\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Mumtaz\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End