My pc must have a virus or something. It is running so slow. AVG anti virus detects the same virus everyday, "Downloads". Please help???
Here is the log file.Logfile of HijackThis v1.99.1
Scan saved at 10:05:37 AM, on 12/19/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINNT\system32\HPZipm12.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SymTray.exe
C:\WINNT\system32\dla\tfswctrl.exe
C:\installed software\hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINNT\system32\wuauclt.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Documents and Settings\Dan\Desktop\HijackThis.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINNT\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: CleanMyPC Popup Blocker - {7A9BC6B1-7F27-47c6-A66D-13582E81E537} - C:\installed software\CleanMyPC Popup Blocker\CleanBHO.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: CleanMyPC Toolbar - {04164EC4-1E48-4279-818E-3721931E7636} - C:\installed software\CleanMyPC Popup Blocker\CleanBar.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [dla] C:\WINNT\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [HPHUPD08] C:\installed software\hp\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\installed software\hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\Symtray.exe SetReg
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\Symtrdr.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\system32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
Thanks for your help. I have made a donation for the first time I was helped. I'm finding out that my son or his friend are going to porn sites. I believe this is what is causing my problems. Here is the log file.
Logfile of HijackThis v1.99.1
Scan saved at 9:22:40 PM, on 12/20/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINNT\system32\HPZipm12.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SymTray.exe
C:\WINNT\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
C:\installed software\hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINNT\system32\wuauclt.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Documents and Settings\Dan\Desktop\HijackThis.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINNT\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: CleanMyPC Popup Blocker - {7A9BC6B1-7F27-47c6-A66D-13582E81E537} - C:\installed software\CleanMyPC Popup Blocker\CleanBHO.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: CleanMyPC Toolbar - {04164EC4-1E48-4279-818E-3721931E7636} - C:\installed software\CleanMyPC Popup Blocker\CleanBar.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [dla] C:\WINNT\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [HPHUPD08] C:\installed software\hp\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\installed software\hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\Symtray.exe SetReg
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\Symtrdr.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\system32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
I ran the atf. I do have firefox but wasn't able to use atf for that, for some reason. Here the other log you requested.
Dan - Thu 12/21/2006 7:57:35.41 Service Pack 4
ComboFix 06.11.27 - Running from: "C:\Documents and Settings\Dan\Desktop"
(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\Program Files\Common Files\{2CB1B1AD-03E4-1033-1128-001024000001}
C:\Program Files\Common Files\{3CB1B1AD-03E4-1033-1128-001024000001}
((((((((((((((((((((((((((((((( Files Created from 2006-11-21 to 2006-12-21 ))))))))))))))))))))))))))))))))))
2006-12-20 21:16 d-a—— C:\Documents and Settings\All Users\Application Data\Avg7
2006-12-19 13:20 d—s—- C:\WINNT\Temporary Internet Files
2006-12-19 13:20 d—s—- C:\WINNT\History
2006-12-19 13:20 d—s—- C:\WINNT\Cookies
2006-12-18 18:37 d——– C:\Documents and Settings\Dan\Application Data\Help
2006-12-16 11:13 d——– C:\WINNT\Sun
2006-12-16 06:51 d——– C:\TEMP
2006-12-14 21:41 d——– C:\IN
2006-12-13 22:32 d——– C:\whiskeys
2006-12-13 22:09 d——– C:\Program Files\Yahoo SiteBuilder
2006-12-13 22:08 d——– C:\Program Files\Java
2006-12-13 22:08 d——– C:\Program Files\Common Files\Java
2006-12-13 22:07 d——– C:\Documents and Settings\Dan\Application Data\Sun
2006-12-12 13:47 d——– C:\Program Files\Integral
2006-12-11 18:05 d——– C:\Program Files\Grisoft
2006-12-11 17:51 90,368 –a—— C:\WINNT\system32\drivers\SdDriver.SYS
2006-12-11 17:50 34,578 –a—— C:\WINNT\system32\drivers\NPDRIVER.SYS
2006-12-11 17:50 31,744 –a—— C:\WINNT\system32\S32STAT.DLL
2006-12-11 17:49 d——– C:\Program Files\Norton SystemWorks
2006-12-11 17:17 0 —h—– C:\CONFIG.SYS
2006-12-11 17:17 0 —h—– C:\AUTOEXEC.BAT
2006-12-11 17:16 72,464 –a—— C:\WINNT\system32\isign32.dll
2006-12-11 17:16 68,368 –a—— C:\WINNT\system32\msoert2.dll
2006-12-11 17:16 63,248 –a—— C:\WINNT\system32\ils.dll
2006-12-11 17:16 59,904 –a—— C:\WINNT\system32\acctres.dll
2006-12-11 17:16 572,688 –a—— C:\WINNT\system32\inetcomm.dll
2006-12-11 17:16 57,104 –a—— C:\WINNT\system32\icwdial.dll
2006-12-11 17:16 53,520 –a—— C:\WINNT\system32\msconf.dll
2006-12-11 17:16 5,904 –a—— C:\WINNT\system32\icfgnt5.dll
2006-12-11 17:16 49,424 –a—— C:\WINNT\system32\icwphbk.dll
2006-12-11 17:16 47,616 –a—— C:\WINNT\system32\inetres.dll
2006-12-11 17:16 32,880 –a—— C:\WINNT\system32\mnmdd.dll
2006-12-11 17:16 3,072 –a—— C:\WINNT\system32\nmevtmsg.dll
2006-12-11 17:16 251,152 –a—— C:\WINNT\system32\inetcfg.dll
2006-12-11 17:16 216,848 –a—— C:\WINNT\system32\mstask.dll
2006-12-11 17:16 21,776 –a—— C:\WINNT\system32\mnmsrvc.exe
2006-12-11 17:16 183,056 –a—— C:\WINNT\system32\msoeacct.dll
2006-12-11 17:16 12,560 –a—— C:\WINNT\system32\nmmkcert.dll
2006-12-11 17:16 119,568 –a—— C:\WINNT\system32\mstask.exe
2006-12-11 17:16 10,000 –a—— C:\WINNT\system32\mstinit.exe
2006-12-11 17:06 78,096 –a—— C:\WINNT\system32\drivers\el90xnd5.sys
2006-12-11 17:06 214,848 –a—— C:\WINNT\system32\drivers\emu10K1.sys
2006-12-11 17:04 148,992 –a—— C:\WINNT\system32\spxcoins.dll
2006-12-11 15:36 61,200 –a—— C:\WINNT\system32\oiui400.dll
2006-12-11 15:36 574,224 –a—— C:\WINNT\system32\hypertrm.dll
2006-12-11 15:36 52,496 –a—— C:\WINNT\system32\packager.exe
2006-12-11 15:36 319,248 –a—— C:\WINNT\system32\mspaint.exe
2006-12-11 15:36 226,064 –a—— C:\WINNT\system32\avtapi.dll
2006-12-11 15:36 21,776 –a—— C:\WINNT\system32\hticons.dll
2006-12-11 15:36 150,800 –a—— C:\WINNT\system32\accwiz.exe
2006-12-11 15:36 107,792 –a—— C:\WINNT\system32\sndrec32.exe
2006-12-11 15:35 91,920 –a—— C:\WINNT\system32\msdtclog.dll
2006-12-11 15:35 89,360 –a—— C:\WINNT\system32\comrepl.dll
2006-12-11 15:35 86,800 –a—— C:\WINNT\system32\clbcatex.dll
2006-12-11 15:35 803,072 -ra—— C:\WINNT\system32\dtcsetup.exe
2006-12-11 15:35 634,128 –a—— C:\WINNT\system32\msdtcprx.dll
2006-12-11 15:35 608,016 –a—— C:\WINNT\system32\comuid.dll
2006-12-11 15:35 550,672 –a—— C:\WINNT\system32\catsrvut.dll
2006-12-11 15:35 490,768 –a—— C:\WINNT\system32\clbcatq.dll
2006-12-11 15:35 444,176 –a—— C:\WINNT\system32\oieng400.dll
2006-12-11 15:35 4,880 –a—— C:\WINNT\system32\mtxdm.dll
2006-12-11 15:35 349,456 –a—— C:\WINNT\system32\txfaux.dll
2006-12-11 15:35 34,576 –a—— C:\WINNT\system32\colbact.dll
2006-12-11 15:35 162,064 –a—— C:\WINNT\system32\catsrv.dll
2006-12-11 15:35 144,656 –a—— C:\WINNT\system32\msdtcui.dll
2006-12-11 15:35 111,888 –a—— C:\WINNT\system32\mtxoci.dll
2006-12-11 15:35 1,219,856 –a—— C:\WINNT\system32\comsvcs.dll
2006-12-11 15:35 1,070,864 –a—— C:\WINNT\system32\msdtctm.dll
2006-12-11 15:17 35,088 –a—— C:\WINNT\system32\drivers\redbook.sys
2006-12-11 15:15 35,600 –a—— C:\WINNT\system32\storprop.dll
2006-12-11 10:09 d-a—— C:\WINNT\java
2006-12-10 10:24 33,376 –a—— C:\WINNT\system32\drivers\Pcouffin.sys
2006-12-04 21:56 d——– C:\Documents and Settings\Dan\Application Data\Mozilla
2006-12-03 23:54 d——– C:\Documents and Settings\Dan\Application Data\AdobeUM
2006-12-03 23:53 d——– C:\Documents and Settings\Dan\Application Data\Adobe
2006-12-03 11:46 1,485 –a—— C:\795882.exe
2006-11-30 21:08 d-a—— C:\Program Files\QuickTime
2006-11-27 22:47 d——– C:\downloads
2006-11-25 21:17 d——– C:\Documents and Settings\Dan\Application Data\CyberLink
2006-11-25 17:39 d-ah—– C:\WINNT\PIF
2006-11-25 16:32 d-a—— C:\WINNT\system32\Macromed
2006-11-25 16:32 d——– C:\Documents and Settings\Dan\Application Data\Macromedia
2006-11-25 05:07 d—s—- C:\Documents and Settings\Dan\UserData
2006-11-25 05:02 69 –a-s—- C:\WINNT\test.bat
2006-11-24 22:46 d——– C:\Documents and Settings\All Users\Application Data\HP
2006-11-24 22:39 d-a—— C:\Program Files\Common Files\Sonic Shared
2006-11-24 22:39 d——– C:\Documents and Settings\All Users\Application Data\Sonic
2006-11-24 22:38 d-a—— C:\Program Files\Common Files\HP
2006-11-24 22:35 d-a—— C:\Program Files\Hewlett-Packard
2006-11-24 22:32 dra-s—- C:\WINNT\assembly
2006-11-24 22:32 d-a—— C:\WINNT\system32\URTTemp
2006-11-24 22:32 d-a—— C:\WINNT\Microsoft.NET
2006-11-24 22:31 77,824 -ra—— C:\WINNT\system32\hpzids01.dll
2006-11-24 22:31 37,376 –a—— C:\WINNT\system32\hpz3l3xu.dll
2006-11-24 22:29 94,208 –a—— C:\WINNT\system32\HPZipt12.dll
2006-11-24 22:29 69,632 –a—— C:\WINNT\system32\HPZipm12.exe
2006-11-24 22:29 61,440 –a—— C:\WINNT\system32\HPZinw12.exe
2006-11-24 22:29 57,344 –a—— C:\WINNT\system32\HPZisn12.dll
2006-11-24 22:29 278,584 –a—— C:\WINNT\system32\HPZidr12.dll
2006-11-24 22:29 204,800 –a—— C:\WINNT\system32\HPZipr12.dll
2006-11-24 22:28 d——– C:\installed software
2006-11-24 22:26 d-ah—– C:\Config.Msi
2006-11-24 22:26 d-a—— C:\Program Files\HP
2006-11-24 22:24 d——– C:\Documents and Settings\Dan\Application Data\HP
2006-11-23 17:40 22,064 –a—— C:\WINNT\system32\drivers\usbprint.sys
2006-11-23 17:40 d-a—— C:\WINNT\Minidump
2006-11-22 17:09 54,787 –a—— C:\WINNT\system32\ltremove.exe
2006-11-22 17:09 109,059 –a—— C:\WINNT\system32\ltmsg.exe
2006-11-22 17:09 d-a—— C:\WINNT\Options
2006-11-22 17:04 d——– C:\driver-mdn
2006-11-22 15:13 17,920 –a—— C:\WINNT\system32\mdimon.dll
2006-11-22 15:12 d-a—— C:\Program Files\Microsoft.NET
2006-11-22 15:12 d-a—— C:\Program Files\Microsoft ActiveSync
2006-11-22 15:10 d-a—— C:\Program Files\Common Files\DESIGNER
2006-11-22 15:10 d–h—– C:\WINNT\ShellNew
2006-11-22 15:09 d-a—— C:\WINNT\PCHEALTH
2006-11-22 15:09 d-a—— C:\Program Files\Microsoft Office
2006-11-22 14:28 d-a—— C:\Program Files\Common Files\Adobe
2006-11-22 14:28 d——– C:\Documents and Settings\All Users\Application Data\Adobe
2006-11-22 14:26 d-a—— C:\Program Files\Adobe
2006-11-22 14:02 d——– C:\Documents and Settings\Dan\Application Data\Leadertech
2006-11-22 13:30 368,912 –a—— C:\WINNT\system32\VBAR332.DLL
2006-11-22 13:30 252,176 –a—— C:\WINNT\system32\MSRD2X35.DLL
2006-11-22 13:30 24,848 –a—— C:\WINNT\system32\MSJTER35.DLL
2006-11-22 13:30 123,664 –a—— C:\WINNT\system32\MSJINT35.DLL
2006-11-22 13:30 1,046,288 –a—— C:\WINNT\system32\MSJET35.DLL
2006-11-22 13:30 d–hs—- C:\RECYCLER
2006-11-22 13:29 91,904 –a—— C:\WINNT\system32\S32EVNT1.DLL
2006-11-22 13:29 124,016 –a—— C:\WINNT\system32\drivers\SYMEVENT.SYS
2006-11-22 13:28 94,208 –a—— C:\WINNT\system32\msstkprp.dll
2006-11-22 13:28 d-a—— C:\Program Files\Symantec
2006-11-22 13:28 d-a—— C:\Program Files\Common Files\Symantec Shared
2006-11-22 13:28 d——– C:\Documents and Settings\Dan\Application Data\Symantec
2006-11-22 13:28 d——– C:\Documents and Settings\All Users\Application Data\Symantec
2006-11-22 12:46 d-a—— C:\WINNT\RegisteredPackages
2006-11-22 12:45 d-ah—– C:\WINNT\msdownld.tmp
2006-11-22 12:45 d-ah—– C:\Program Files\Uninstall Information
2006-11-22 12:29 d——– C:\Documents and Settings\Dan\Application Data\Sonic
2006-11-22 12:27 d-a—— C:\Program Files\Common Files\Sonic
2006-11-22 12:26 98,358 –a—— C:\WINNT\dla.exe
2006-11-22 12:26 87,136 –a—— C:\WINNT\system32\drivers\drvmcdb.sys
2006-11-22 12:26 61,498 –a—— C:\WINNT\system32\tfswapi.dll
2006-11-22 12:26 5,627 –a—— C:\WINNT\system32\drivers\sscdbhk5.sys
2006-11-22 12:26 40,544 –a—— C:\WINNT\system32\drivers\drvnddm.sys
2006-11-22 12:26 23,545 –a—— C:\WINNT\system32\drivers\ssrtln.sys
2006-11-22 12:26 d-a—— C:\WINNT\system32\dla
2006-11-22 12:26 d-a—— C:\Program Files\Sonic
2006-11-22 12:22 83,968 –a—— C:\WINNT\system32\drivers\nabtsfec.sys
2006-11-22 12:22 56,832 –a—— C:\WINNT\system32\drivers\msdv.sys
2006-11-22 12:22 480,256 –a—— C:\WINNT\system32\msvidctl.dll
2006-11-22 12:22 47,104 –a—— C:\WINNT\system32\wstdecod.dll
2006-11-22 12:22 354,816 –a—— C:\WINNT\system32\psisdecd.dll
2006-11-22 12:22 18,688 –a—— C:\WINNT\system32\drivers\wstcodec.sys
2006-11-22 12:22 16,896 –a—— C:\WINNT\system32\msyuv.dll
2006-11-22 12:22 16,384 –a—— C:\WINNT\system32\drivers\ccdecode.sys
2006-11-22 12:22 15,104 –a—— C:\WINNT\system32\drivers\mpe.sys
2006-11-22 12:22 14,976 –a—— C:\WINNT\system32\drivers\streamip.sys
2006-11-22 12:22 11,392 –a—— C:\WINNT\system32\drivers\bdasup.sys
2006-11-22 12:22 10,880 –a—— C:\WINNT\system32\drivers\slip.sys
2006-11-22 12:22 10,112 –a—— C:\WINNT\system32\drivers\ndisip.sys
2006-11-22 12:22 d-a—— C:\WINNT\system32\DirectX
2006-11-22 12:22 d-a—— C:\Program Files\CyberLink
2006-11-22 12:22 d——– C:\Documents and Settings\All Users\Application Data\CyberLink
2006-11-22 12:20 d-a—— C:\WUTemp
2006-11-22 12:05 306,688 –a—— C:\WINNT\IsUninst.exe
2006-11-22 12:05 d-a—— C:\Program Files\Intel
2006-11-22 11:33 d——– C:\Dell
2006-11-21 17:48 89,360 –a—— C:\WINNT\system32\VB5DB.DLL
2006-11-21 17:48 29,344 –a—— C:\WINNT\system32\drivers\cmosa.sys
2006-11-21 17:48 167,936 –a—— C:\WINNT\system32\RcdScan.dll
2006-11-21 17:48 d-ah—– C:\Program Files\InstallShield Installation Information
2006-11-21 17:47 d-a—— C:\Program Files\Common Files\InstallShield
2006-11-21 17:34 dr-h—– C:\Documents and Settings\Dan\Recent
2006-11-21 17:34 dr——- C:\Documents and Settings\Dan\Favorites
2006-11-21 17:34 d-a—— C:\Documents and Settings\Dan\..
2006-11-21 17:34 d–hs—- C:\WINNT\Installer
2006-11-21 17:34 d–hs—- C:\WINNT\CSC
2006-11-21 17:34 d–h—– C:\WINNT\system32\GroupPolicy
2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\Templates
2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\SendTo
2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\PrintHood
2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\NetHood
2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\Local Settings
2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\Application Data\.
2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\Application Data
2006-11-21 17:34 d—s—- C:\Documents and Settings\Dan\Cookies
2006-11-21 17:34 d—s—- C:\Documents and Settings\Dan\Application Data\Microsoft
2006-11-21 17:34 d——– C:\Documents and Settings\Dan\Start Menu
2006-11-21 17:34 d——– C:\Documents and Settings\Dan\My Documents
2006-11-21 17:34 d——– C:\Documents and Settings\Dan\Desktop
2006-11-21 17:34 d——– C:\Documents and Settings\Dan\Application Data\Identities
2006-11-21 17:34 d——– C:\Documents and Settings\Dan\Application Data\..
2006-11-21 17:34 d——– C:\Documents and Settings\Dan\.
2006-11-21 17:23 d-a—— C:\WINNT\system32\Microsoft
2006-11-21 17:23 d–hs—- C:\System Volume Information
2006-11-21 17:23 d——– C:\WINNT\system32\NtmsData
2006-11-21 16:09 d-a—— C:\WINNT\system32\rpcproxy
2006-11-21 16:09 d-a—— C:\WINNT\system32\rocket
2006-11-21 16:09 d-a—— C:\WINNT\system32\inetsrv
2006-11-21 16:09 d-a—— C:\WINNT\mww32
2006-11-21 16:09 d-a—— C:\WINNT\ime
2006-11-21 16:09 d-a—— C:\Program Files\microsoft frontpage
2006-11-21 16:08 0 -rahs—- C:\MSDOS.SYS
2006-11-21 16:08 0 -rahs—- C:\IO.SYS
2006-11-21 16:07 131,072 –a—— C:\WINNT\system32\mapi32.dll
2006-11-21 16:07 dr——- C:\WINNT\Offline Web Pages
2006-11-21 16:07 d-a-s—- C:\WINNT\Tasks
2006-11-21 16:07 d-a—— C:\Program Files\Outlook Express
2006-11-21 16:07 d-a—— C:\Program Files\NetMeeting
2006-11-21 16:07 d-a—— C:\Program Files\Internet Explorer
2006-11-21 16:07 d-a—— C:\Program Files\Common Files\System
2006-11-21 16:07 d-a—— C:\Program Files\Common Files\Services
2006-11-21 16:07 d–hs—- C:\Documents and Settings\All Users\DRM
2006-11-21 16:07 d—s—- C:\WINNT\Downloaded Program Files
2006-11-21 16:06 6,416 –a—— C:\WINNT\system32\write.exe
2006-11-21 16:06 d-ah—– C:\Program Files\WindowsUpdate
2006-11-21 16:06 d-a—— C:\Program Files\Windows Media Player
2006-11-21 16:06 d-a—— C:\Program Files\ComPlus Applications
2006-11-21 16:06 d——– C:\WINNT\system32\DTCLog
2006-11-21 16:06 d——– C:\WINNT\Registration
2006-11-21 16:05 99,600 –a—— C:\WINNT\system32\clipbrd.exe
2006-11-21 16:05 96,528 –a—— C:\WINNT\system32\winmine.exe
2006-11-21 16:05 91,408 –a—— C:\WINNT\system32\calc.exe
2006-11-21 16:05 90,384 –a—— C:\WINNT\system32\charmap.exe
2006-11-21 16:05 9,216 –a—— C:\WINNT\system32\wuauserv.dll
2006-11-21 16:05 84,240 –a—— C:\WINNT\system32\txflog.dll
2006-11-21 16:05 76,048 –a—— C:\WINNT\system32\avwav.dll
2006-11-21 16:05 68,368 –a—— C:\WINNT\system32\stclient.dll
2006-11-21 16:05 68,368 –a—— C:\WINNT\system32\sndvol32.exe
2006-11-21 16:05 66,832 –a—— C:\WINNT\system32\winchat.exe
2006-11-21 16:05 641,808 –a—— C:\WINNT\system32\xiffr3_0.dll
2006-11-21 16:05 60,688 –a—— C:\WINNT\system32\imgcmn.dll
2006-11-21 16:05 6,928 –a—— C:\WINNT\system32\msdtc.exe
2006-11-21 16:05 55,056 –a—— C:\WINNT\system32\catsrvps.dll
2006-11-21 16:05 406,800 –a—— C:\WINNT\system32\getuname.dll
2006-11-21 16:05 38,160 –a—— C:\WINNT\system32\jpeg2x32.dll
2006-11-21 16:05 34,064 –a—— C:\WINNT\system32\sol.exe
2006-11-21 16:05 34,064 –a—— C:\WINNT\system32\freecell.exe
2006-11-21 16:05 337,680 –a—— C:\WINNT\system32\cdplayer.exe
2006-11-21 16:05 33,552 –a—— C:\WINNT\system32\tifflt.dll
2006-11-21 16:05 30,480 –a—— C:\WINNT\system32\mtxlegih.dll
2006-11-21 16:05 3,856 –a—— C:\WINNT\system32\mtxex.dll
2006-11-21 16:05 29,968 –a—— C:\WINNT\system32\comaddin.dll
2006-11-21 16:05 27,920 –a—— C:\WINNT\system32\jpeg1x32.dll
2006-11-21 16:05 25,872 –a—— C:\WINNT\system32\oitwa400.dll
2006-11-21 16:05 21,776 –a—— C:\WINNT\system32\oislb400.dll
2006-11-21 16:05 21,264 –a—— C:\WINNT\system32\comclust.exe
2006-11-21 16:05 192,512 –a—— C:\WINNT\system32\wuaueng.dll
2006-11-21 16:05 17,680 –a—— C:\WINNT\system32\xolehlp.dll
2006-11-21 16:05 17,168 –a—— C:\WINNT\system32\avmeter.dll
2006-11-21 16:05 147,216 –a—— C:\WINNT\system32\DComExt.dll
2006-11-21 16:05 146,192 –a—— C:\WINNT\system32\comsnap.dll
2006-11-21 16:05 141,312 –a—— C:\WINNT\system32\wuauclt.exe
2006-11-21 16:05 13,584 –a—— C:\WINNT\system32\imgshl.dll
2006-11-21 16:05 13,072 –a—— C:\WINNT\system32\oissq400.dll
2006-11-21 16:05 13,072 –a—— C:\WINNT\system32\oiprt400.dll
2006-11-21 16:05 118,032 –a—— C:\WINNT\system32\mplay32.exe
2006-11-21 16:05 d-a—— C:\WINNT\system32\Com
2006-11-21 16:05 d-a—— C:\Program Files\Windows NT
2006-11-21 16:05 d-a—— C:\Program Files\Accessories
2006-11-21 16:02 d——– C:\Documents and Settings\All Users\Application Data\Microsoft
2006-11-21 10:35 51,152 –a—— C:\WINNT\system32\drivers\DMusic.sys
2006-11-21 10:35 2,896 –a—— C:\WINNT\system32\drivers\audstub.sys
2006-11-21 10:33 4,128 –a—— C:\WINNT\system32\drivers\ctljystk.sys
2006-11-21 10:31 69,584 –a—— C:\WINNT\system\AVICAP.DLL
2006-11-21 10:31 5,392 –a—— C:\WINNT\delttsul.exe
2006-11-21 10:31 176,400 –a—— C:\WINNT\system32\EqnClass.Dll
2006-11-21 10:31 123,904 –a—— C:\WINNT\system32\dgrpsetu.dll
2006-11-21 10:31 dra—— C:\Program Files\Common Files\..
2006-11-21 10:31 dra—— C:\Program Files\.
2006-11-21 10:31 dra—— C:\Program Files
2006-11-21 10:31 d-ahs—- C:\Program Files\..
2006-11-21 10:31 d-ah—– C:\Documents and Settings\All Users\Application Data\.
2006-11-21 10:31 d-ah—– C:\Documents and Settings\All Users\Application Data
2006-11-21 10:31 d-a—— C:\WINNT\system32\CatRoot
2006-11-21 10:31 d-a—— C:\WINNT\Speech
2006-11-21 10:31 d-a—— C:\Program Files\Common Files\ODBC
2006-11-21 10:31 d-a—— C:\Program Files\Common Files\Microsoft Shared
2006-11-21 10:31 d-a—— C:\Program Files\Common Files\.
2006-11-21 10:31 d-a—— C:\Program Files\Common Files
2006-11-21 10:31 d-a—— C:\Documents and Settings\All Users\Documents
2006-11-21 10:31 d-a—— C:\Documents and Settings\All Users\Application Data\..
2006-11-21 10:31 d-a—— C:\Documents and Settings\All Users\..
2006-11-21 10:31 d-a—— C:\Documents and Settings\All Users\.
2006-11-21 10:31 d-a—— C:\Documents and Settings
2006-11-21 10:31 d–h—– C:\Documents and Settings\All Users\Templates
2006-11-21 10:31 d——– C:\Documents and Settings\All Users\Start Menu
2006-11-21 10:31 d——– C:\Documents and Settings\All Users\Favorites
2006-11-21 10:31 d——– C:\Documents and Settings\All Users\Desktop
2006-11-21 10:28 drahsc— C:\WINNT\system32\dllcache
2006-11-21 10:28 dra-s—- C:\WINNT\Fonts
2006-11-21 10:28 d-ahs—- C:\WINNT\..
2006-11-21 10:28 d-a—— C:\WINNT\twain_32
2006-11-21 10:28 d-a—— C:\WINNT\Temp
2006-11-21 10:28 d-a—— C:\WINNT\system32\wins
2006-11-21 10:28 d-a—— C:\WINNT\system32\wbem
2006-11-21 10:28 d-a—— C:\WINNT\system32\spool
2006-11-21 10:28 d-a—— C:\WINNT\system32\ShellExt
2006-11-21 10:28 d-a—— C:\WINNT\system32\ras
2006-11-21 10:28 d-a—— C:\WINNT\system32\os2
2006-11-21 10:28 d-a—— C:\WINNT\system32\npp
2006-11-21 10:28 d-a—— C:\WINNT\system32\mui
2006-11-21 10:28 d-a—— C:\WINNT\system32\ie_de
2006-11-21 10:28 d-a—— C:\WINNT\system32\ias
2006-11-21 10:28 d-a—— C:\WINNT\system32\export
2006-11-21 10:28 d-a—— C:\WINNT\system32\drivers\etc
2006-11-21 10:28 d-a—— C:\WINNT\system32\drivers\disdn
2006-11-21 10:28 d-a—— C:\WINNT\system32\drivers\..
2006-11-21 10:28 d-a—— C:\WINNT\system32\drivers\.
2006-11-21 10:28 d-a—— C:\WINNT\system32\drivers
2006-11-21 10:28 d-a—— C:\WINNT\system32\dhcp
2006-11-21 10:28 d-a—— C:\WINNT\system32\config
2006-11-21 10:28 d-a—— C:\WINNT\system32\..
2006-11-21 10:28 d-a—— C:\WINNT\system32\.
2006-11-21 10:28 d-a—— C:\WINNT\system32
2006-11-21 10:28 d-a—— C:\WINNT\system\..
2006-11-21 10:28 d-a—— C:\WINNT\system\.
2006-11-21 10:28 d-a—— C:\WINNT\system
2006-11-21 10:28 d-a—— C:\WINNT\security
2006-11-21 10:28 d-a—— C:\WINNT\repair
2006-11-21 10:28 d-a—— C:\WINNT\msapps
2006-11-21 10:28 d-a—— C:\WINNT\msagent
2006-11-21 10:28 d-a—— C:\WINNT\Media
2006-11-21 10:28 d-a—— C:\WINNT\Help
2006-11-21 10:28 d-a—— C:\WINNT\Driver Cache
2006-11-21 10:28 d-a—— C:\WINNT\Debug
2006-11-21 10:28 d-a—— C:\WINNT\Cursors
2006-11-21 10:28 d-a—— C:\WINNT\Connection Wizard
2006-11-21 10:28 d-a—— C:\WINNT\Config
2006-11-21 10:28 d-a—— C:\WINNT\AppPatch
2006-11-21 10:28 d-a—— C:\WINNT\addins
2006-11-21 10:28 d-a—— C:\WINNT\.
2006-11-21 10:28 d-a—— C:\WINNT
2006-11-21 10:28 d–h—– C:\WINNT\inf
2006-11-21 10:28 d—s—- C:\WINNT\Web
2006-11-21 10:28 d——– C:\WINNT\system32\Setup
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"Synchronization Manager"="mobsync.exe /logon"
"dla"="C:\\WINNT\\system32\\dla\\tfswctrl.exe"
"UpdateManager"="\"C:\\Program Files\\Common Files\\Sonic\\Update Manager\\sgtray.exe\" /r"
"SSC_UserPrompt"="C:\\Program Files\\Common Files\\Symantec Shared\\Security Center\\UsrPrmpt.exe"
"HPHUPD08"="C:\\installed software\\hp\\Digital Imaging\\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\\hphupd08.exe"
"HP Software Update"="C:\\installed software\\hp\\HP Software Update\\HPWuSchd2.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"ccApp"="C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe"
"ccRegVfy"="C:\\Program Files\\Common Files\\Symantec Shared\\ccRegVfy.exe"
"SymTray - Norton SystemWorks"="C:\\Program Files\\Common Files\\Symantec Shared\\Symtray.exe SetReg"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce]
"SymTray - Norton SystemWorks"="C:\\Program Files\\Common Files\\Symantec Shared\\Symtrdr.exe"
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000003
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,a0,00,00,00,00,00,00,00,80,02,00,00,3c,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,f0,01,00,00,1f,00,00,00,80,00,00,00,76,00,\
00,00,01,00,00,00
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"ALUAlert"="C:\\Program Files\\Symantec\\LiveUpdate\\ALUNotify.exe"
[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"^SetupICWDesktop"="C:\\Program Files\\Internet Explorer\\Connection Wizard\\icwconn1.exe /desktop"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000095
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000095
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"Network.ConnectionTray"="{7007ACCF-3202-11D1-AAD2-00805FC1270E}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
Contents of the 'Scheduled Tasks' folder
C:\WINNT\tasks\Norton AntiVirus - Scan my computer.job
C:\WINNT\tasks\Norton SystemWorks One Button Checkup.job
C:\WINNT\tasks\Symantec NetDetect.job
Completion time: Thu 2006-12-21 7:58:16.81
C:\ComboFix.txt … 06-12-21 07:58