This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Please help

12 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

My pc must have a virus or something. It is running so slow. AVG anti virus detects the same virus everyday, "Downloads". Please help??? Here is the log file.Logfile of HijackThis v1.99.1 Scan saved at 10:05:37 AM, on 12/19/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINNT\system32\svchost.exe C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE C:\WINNT\system32\HPZipm12.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\SymTray.exe C:\WINNT\system32\dla\tfswctrl.exe C:\installed software\hp\HP Software Update\HPWuSchd2.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe C:\WINNT\system32\wuauclt.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Documents and Settings\Dan\Desktop\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINNT\system32\dla\tfswshx.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O2 - BHO: CleanMyPC Popup Blocker - {7A9BC6B1-7F27-47c6-A66D-13582E81E537} - C:\installed software\CleanMyPC Popup Blocker\CleanBHO.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: CleanMyPC Toolbar - {04164EC4-1E48-4279-818E-3721931E7636} - C:\installed software\CleanMyPC Popup Blocker\CleanBar.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [dla] C:\WINNT\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe O4 - HKLM\..\Run: [HPHUPD08] C:\installed software\hp\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [HP Software Update] C:\installed software\hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe O4 - HKLM\..\Run: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\Symtray.exe SetReg O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" O4 - HKLM\..\RunOnce: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\Symtrdr.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\system32\HPZipm12.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

My pc must have a virus or something. It is running so slow. AVG anti virus detects the same virus everyday, "Downloads". Please help???



You are running two AV's remove one of the rescan with hijackthis and post another log.
Thanks for your help. I have made a donation for the first time I was helped. I'm finding out that my son or his friend are going to porn sites. I believe this is what is causing my problems. Here is the log file. Logfile of HijackThis v1.99.1 Scan saved at 9:22:40 PM, on 12/20/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\system32\svchost.exe C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE C:\WINNT\system32\HPZipm12.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\SymTray.exe C:\WINNT\system32\dla\tfswctrl.exe C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe C:\installed software\hp\HP Software Update\HPWuSchd2.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe C:\WINNT\system32\wuauclt.exe C:\Program Files\Outlook Express\msimn.exe C:\Documents and Settings\Dan\Desktop\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINNT\system32\dla\tfswshx.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O2 - BHO: CleanMyPC Popup Blocker - {7A9BC6B1-7F27-47c6-A66D-13582E81E537} - C:\installed software\CleanMyPC Popup Blocker\CleanBHO.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: CleanMyPC Toolbar - {04164EC4-1E48-4279-818E-3721931E7636} - C:\installed software\CleanMyPC Popup Blocker\CleanBar.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [dla] C:\WINNT\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe O4 - HKLM\..\Run: [HPHUPD08] C:\installed software\hp\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [HP Software Update] C:\installed software\hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe O4 - HKLM\..\Run: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\Symtray.exe SetReg O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" O4 - HKLM\..\RunOnce: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\Symtrdr.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\system32\HPZipm12.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
Looks clean lets try some scans.

Download and run - ATF Cleaner instructions here.

Download and install AVG Anti-Spyware (ewido). Then scan and post the report here.
Instructions and download link can be found here.


Also Lets try running combofix.exe
Download it from one of the links below:

http://download.bleepingcomputer.com/sUBs/combofix.exe
http://www.techsupportforum.com/sectools/combofix.exe

Double click combofix.exe & follow the prompts.
When finished, it will produce a log for you. Post that log in your next reply.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall
I ran the atf. I do have firefox but wasn't able to use atf for that, for some reason. Here the other log you requested. Dan - Thu 12/21/2006 7:57:35.41 Service Pack 4 ComboFix 06.11.27 - Running from: "C:\Documents and Settings\Dan\Desktop" (((((((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\Program Files\Common Files\{2CB1B1AD-03E4-1033-1128-001024000001} C:\Program Files\Common Files\{3CB1B1AD-03E4-1033-1128-001024000001} ((((((((((((((((((((((((((((((( Files Created from 2006-11-21 to 2006-12-21 )))))))))))))))))))))))))))))))))) 2006-12-20 21:16 d-a—— C:\Documents and Settings\All Users\Application Data\Avg7 2006-12-19 13:20 d—s—- C:\WINNT\Temporary Internet Files 2006-12-19 13:20 d—s—- C:\WINNT\History 2006-12-19 13:20 d—s—- C:\WINNT\Cookies 2006-12-18 18:37 d——– C:\Documents and Settings\Dan\Application Data\Help 2006-12-16 11:13 d——– C:\WINNT\Sun 2006-12-16 06:51 d——– C:\TEMP 2006-12-14 21:41 d——– C:\IN 2006-12-13 22:32 d——– C:\whiskeys 2006-12-13 22:09 d——– C:\Program Files\Yahoo SiteBuilder 2006-12-13 22:08 d——– C:\Program Files\Java 2006-12-13 22:08 d——– C:\Program Files\Common Files\Java 2006-12-13 22:07 d——– C:\Documents and Settings\Dan\Application Data\Sun 2006-12-12 13:47 d——– C:\Program Files\Integral 2006-12-11 18:05 d——– C:\Program Files\Grisoft 2006-12-11 17:51 90,368 –a—— C:\WINNT\system32\drivers\SdDriver.SYS 2006-12-11 17:50 34,578 –a—— C:\WINNT\system32\drivers\NPDRIVER.SYS 2006-12-11 17:50 31,744 –a—— C:\WINNT\system32\S32STAT.DLL 2006-12-11 17:49 d——– C:\Program Files\Norton SystemWorks 2006-12-11 17:17 0 —h—– C:\CONFIG.SYS 2006-12-11 17:17 0 —h—– C:\AUTOEXEC.BAT 2006-12-11 17:16 72,464 –a—— C:\WINNT\system32\isign32.dll 2006-12-11 17:16 68,368 –a—— C:\WINNT\system32\msoert2.dll 2006-12-11 17:16 63,248 –a—— C:\WINNT\system32\ils.dll 2006-12-11 17:16 59,904 –a—— C:\WINNT\system32\acctres.dll 2006-12-11 17:16 572,688 –a—— C:\WINNT\system32\inetcomm.dll 2006-12-11 17:16 57,104 –a—— C:\WINNT\system32\icwdial.dll 2006-12-11 17:16 53,520 –a—— C:\WINNT\system32\msconf.dll 2006-12-11 17:16 5,904 –a—— C:\WINNT\system32\icfgnt5.dll 2006-12-11 17:16 49,424 –a—— C:\WINNT\system32\icwphbk.dll 2006-12-11 17:16 47,616 –a—— C:\WINNT\system32\inetres.dll 2006-12-11 17:16 32,880 –a—— C:\WINNT\system32\mnmdd.dll 2006-12-11 17:16 3,072 –a—— C:\WINNT\system32\nmevtmsg.dll 2006-12-11 17:16 251,152 –a—— C:\WINNT\system32\inetcfg.dll 2006-12-11 17:16 216,848 –a—— C:\WINNT\system32\mstask.dll 2006-12-11 17:16 21,776 –a—— C:\WINNT\system32\mnmsrvc.exe 2006-12-11 17:16 183,056 –a—— C:\WINNT\system32\msoeacct.dll 2006-12-11 17:16 12,560 –a—— C:\WINNT\system32\nmmkcert.dll 2006-12-11 17:16 119,568 –a—— C:\WINNT\system32\mstask.exe 2006-12-11 17:16 10,000 –a—— C:\WINNT\system32\mstinit.exe 2006-12-11 17:06 78,096 –a—— C:\WINNT\system32\drivers\el90xnd5.sys 2006-12-11 17:06 214,848 –a—— C:\WINNT\system32\drivers\emu10K1.sys 2006-12-11 17:04 148,992 –a—— C:\WINNT\system32\spxcoins.dll 2006-12-11 15:36 61,200 –a—— C:\WINNT\system32\oiui400.dll 2006-12-11 15:36 574,224 –a—— C:\WINNT\system32\hypertrm.dll 2006-12-11 15:36 52,496 –a—— C:\WINNT\system32\packager.exe 2006-12-11 15:36 319,248 –a—— C:\WINNT\system32\mspaint.exe 2006-12-11 15:36 226,064 –a—— C:\WINNT\system32\avtapi.dll 2006-12-11 15:36 21,776 –a—— C:\WINNT\system32\hticons.dll 2006-12-11 15:36 150,800 –a—— C:\WINNT\system32\accwiz.exe 2006-12-11 15:36 107,792 –a—— C:\WINNT\system32\sndrec32.exe 2006-12-11 15:35 91,920 –a—— C:\WINNT\system32\msdtclog.dll 2006-12-11 15:35 89,360 –a—— C:\WINNT\system32\comrepl.dll 2006-12-11 15:35 86,800 –a—— C:\WINNT\system32\clbcatex.dll 2006-12-11 15:35 803,072 -ra—— C:\WINNT\system32\dtcsetup.exe 2006-12-11 15:35 634,128 –a—— C:\WINNT\system32\msdtcprx.dll 2006-12-11 15:35 608,016 –a—— C:\WINNT\system32\comuid.dll 2006-12-11 15:35 550,672 –a—— C:\WINNT\system32\catsrvut.dll 2006-12-11 15:35 490,768 –a—— C:\WINNT\system32\clbcatq.dll 2006-12-11 15:35 444,176 –a—— C:\WINNT\system32\oieng400.dll 2006-12-11 15:35 4,880 –a—— C:\WINNT\system32\mtxdm.dll 2006-12-11 15:35 349,456 –a—— C:\WINNT\system32\txfaux.dll 2006-12-11 15:35 34,576 –a—— C:\WINNT\system32\colbact.dll 2006-12-11 15:35 162,064 –a—— C:\WINNT\system32\catsrv.dll 2006-12-11 15:35 144,656 –a—— C:\WINNT\system32\msdtcui.dll 2006-12-11 15:35 111,888 –a—— C:\WINNT\system32\mtxoci.dll 2006-12-11 15:35 1,219,856 –a—— C:\WINNT\system32\comsvcs.dll 2006-12-11 15:35 1,070,864 –a—— C:\WINNT\system32\msdtctm.dll 2006-12-11 15:17 35,088 –a—— C:\WINNT\system32\drivers\redbook.sys 2006-12-11 15:15 35,600 –a—— C:\WINNT\system32\storprop.dll 2006-12-11 10:09 d-a—— C:\WINNT\java 2006-12-10 10:24 33,376 –a—— C:\WINNT\system32\drivers\Pcouffin.sys 2006-12-04 21:56 d——– C:\Documents and Settings\Dan\Application Data\Mozilla 2006-12-03 23:54 d——– C:\Documents and Settings\Dan\Application Data\AdobeUM 2006-12-03 23:53 d——– C:\Documents and Settings\Dan\Application Data\Adobe 2006-12-03 11:46 1,485 –a—— C:\795882.exe 2006-11-30 21:08 d-a—— C:\Program Files\QuickTime 2006-11-27 22:47 d——– C:\downloads 2006-11-25 21:17 d——– C:\Documents and Settings\Dan\Application Data\CyberLink 2006-11-25 17:39 d-ah—– C:\WINNT\PIF 2006-11-25 16:32 d-a—— C:\WINNT\system32\Macromed 2006-11-25 16:32 d——– C:\Documents and Settings\Dan\Application Data\Macromedia 2006-11-25 05:07 d—s—- C:\Documents and Settings\Dan\UserData 2006-11-25 05:02 69 –a-s—- C:\WINNT\test.bat 2006-11-24 22:46 d——– C:\Documents and Settings\All Users\Application Data\HP 2006-11-24 22:39 d-a—— C:\Program Files\Common Files\Sonic Shared 2006-11-24 22:39 d——– C:\Documents and Settings\All Users\Application Data\Sonic 2006-11-24 22:38 d-a—— C:\Program Files\Common Files\HP 2006-11-24 22:35 d-a—— C:\Program Files\Hewlett-Packard 2006-11-24 22:32 dra-s—- C:\WINNT\assembly 2006-11-24 22:32 d-a—— C:\WINNT\system32\URTTemp 2006-11-24 22:32 d-a—— C:\WINNT\Microsoft.NET 2006-11-24 22:31 77,824 -ra—— C:\WINNT\system32\hpzids01.dll 2006-11-24 22:31 37,376 –a—— C:\WINNT\system32\hpz3l3xu.dll 2006-11-24 22:29 94,208 –a—— C:\WINNT\system32\HPZipt12.dll 2006-11-24 22:29 69,632 –a—— C:\WINNT\system32\HPZipm12.exe 2006-11-24 22:29 61,440 –a—— C:\WINNT\system32\HPZinw12.exe 2006-11-24 22:29 57,344 –a—— C:\WINNT\system32\HPZisn12.dll 2006-11-24 22:29 278,584 –a—— C:\WINNT\system32\HPZidr12.dll 2006-11-24 22:29 204,800 –a—— C:\WINNT\system32\HPZipr12.dll 2006-11-24 22:28 d——– C:\installed software 2006-11-24 22:26 d-ah—– C:\Config.Msi 2006-11-24 22:26 d-a—— C:\Program Files\HP 2006-11-24 22:24 d——– C:\Documents and Settings\Dan\Application Data\HP 2006-11-23 17:40 22,064 –a—— C:\WINNT\system32\drivers\usbprint.sys 2006-11-23 17:40 d-a—— C:\WINNT\Minidump 2006-11-22 17:09 54,787 –a—— C:\WINNT\system32\ltremove.exe 2006-11-22 17:09 109,059 –a—— C:\WINNT\system32\ltmsg.exe 2006-11-22 17:09 d-a—— C:\WINNT\Options 2006-11-22 17:04 d——– C:\driver-mdn 2006-11-22 15:13 17,920 –a—— C:\WINNT\system32\mdimon.dll 2006-11-22 15:12 d-a—— C:\Program Files\Microsoft.NET 2006-11-22 15:12 d-a—— C:\Program Files\Microsoft ActiveSync 2006-11-22 15:10 d-a—— C:\Program Files\Common Files\DESIGNER 2006-11-22 15:10 d–h—– C:\WINNT\ShellNew 2006-11-22 15:09 d-a—— C:\WINNT\PCHEALTH 2006-11-22 15:09 d-a—— C:\Program Files\Microsoft Office 2006-11-22 14:28 d-a—— C:\Program Files\Common Files\Adobe 2006-11-22 14:28 d——– C:\Documents and Settings\All Users\Application Data\Adobe 2006-11-22 14:26 d-a—— C:\Program Files\Adobe 2006-11-22 14:02 d——– C:\Documents and Settings\Dan\Application Data\Leadertech 2006-11-22 13:30 368,912 –a—— C:\WINNT\system32\VBAR332.DLL 2006-11-22 13:30 252,176 –a—— C:\WINNT\system32\MSRD2X35.DLL 2006-11-22 13:30 24,848 –a—— C:\WINNT\system32\MSJTER35.DLL 2006-11-22 13:30 123,664 –a—— C:\WINNT\system32\MSJINT35.DLL 2006-11-22 13:30 1,046,288 –a—— C:\WINNT\system32\MSJET35.DLL 2006-11-22 13:30 d–hs—- C:\RECYCLER 2006-11-22 13:29 91,904 –a—— C:\WINNT\system32\S32EVNT1.DLL 2006-11-22 13:29 124,016 –a—— C:\WINNT\system32\drivers\SYMEVENT.SYS 2006-11-22 13:28 94,208 –a—— C:\WINNT\system32\msstkprp.dll 2006-11-22 13:28 d-a—— C:\Program Files\Symantec 2006-11-22 13:28 d-a—— C:\Program Files\Common Files\Symantec Shared 2006-11-22 13:28 d——– C:\Documents and Settings\Dan\Application Data\Symantec 2006-11-22 13:28 d——– C:\Documents and Settings\All Users\Application Data\Symantec 2006-11-22 12:46 d-a—— C:\WINNT\RegisteredPackages 2006-11-22 12:45 d-ah—– C:\WINNT\msdownld.tmp 2006-11-22 12:45 d-ah—– C:\Program Files\Uninstall Information 2006-11-22 12:29 d——– C:\Documents and Settings\Dan\Application Data\Sonic 2006-11-22 12:27 d-a—— C:\Program Files\Common Files\Sonic 2006-11-22 12:26 98,358 –a—— C:\WINNT\dla.exe 2006-11-22 12:26 87,136 –a—— C:\WINNT\system32\drivers\drvmcdb.sys 2006-11-22 12:26 61,498 –a—— C:\WINNT\system32\tfswapi.dll 2006-11-22 12:26 5,627 –a—— C:\WINNT\system32\drivers\sscdbhk5.sys 2006-11-22 12:26 40,544 –a—— C:\WINNT\system32\drivers\drvnddm.sys 2006-11-22 12:26 23,545 –a—— C:\WINNT\system32\drivers\ssrtln.sys 2006-11-22 12:26 d-a—— C:\WINNT\system32\dla 2006-11-22 12:26 d-a—— C:\Program Files\Sonic 2006-11-22 12:22 83,968 –a—— C:\WINNT\system32\drivers\nabtsfec.sys 2006-11-22 12:22 56,832 –a—— C:\WINNT\system32\drivers\msdv.sys 2006-11-22 12:22 480,256 –a—— C:\WINNT\system32\msvidctl.dll 2006-11-22 12:22 47,104 –a—— C:\WINNT\system32\wstdecod.dll 2006-11-22 12:22 354,816 –a—— C:\WINNT\system32\psisdecd.dll 2006-11-22 12:22 18,688 –a—— C:\WINNT\system32\drivers\wstcodec.sys 2006-11-22 12:22 16,896 –a—— C:\WINNT\system32\msyuv.dll 2006-11-22 12:22 16,384 –a—— C:\WINNT\system32\drivers\ccdecode.sys 2006-11-22 12:22 15,104 –a—— C:\WINNT\system32\drivers\mpe.sys 2006-11-22 12:22 14,976 –a—— C:\WINNT\system32\drivers\streamip.sys 2006-11-22 12:22 11,392 –a—— C:\WINNT\system32\drivers\bdasup.sys 2006-11-22 12:22 10,880 –a—— C:\WINNT\system32\drivers\slip.sys 2006-11-22 12:22 10,112 –a—— C:\WINNT\system32\drivers\ndisip.sys 2006-11-22 12:22 d-a—— C:\WINNT\system32\DirectX 2006-11-22 12:22 d-a—— C:\Program Files\CyberLink 2006-11-22 12:22 d——– C:\Documents and Settings\All Users\Application Data\CyberLink 2006-11-22 12:20 d-a—— C:\WUTemp 2006-11-22 12:05 306,688 –a—— C:\WINNT\IsUninst.exe 2006-11-22 12:05 d-a—— C:\Program Files\Intel 2006-11-22 11:33 d——– C:\Dell 2006-11-21 17:48 89,360 –a—— C:\WINNT\system32\VB5DB.DLL 2006-11-21 17:48 29,344 –a—— C:\WINNT\system32\drivers\cmosa.sys 2006-11-21 17:48 167,936 –a—— C:\WINNT\system32\RcdScan.dll 2006-11-21 17:48 d-ah—– C:\Program Files\InstallShield Installation Information 2006-11-21 17:47 d-a—— C:\Program Files\Common Files\InstallShield 2006-11-21 17:34 dr-h—– C:\Documents and Settings\Dan\Recent 2006-11-21 17:34 dr——- C:\Documents and Settings\Dan\Favorites 2006-11-21 17:34 d-a—— C:\Documents and Settings\Dan\.. 2006-11-21 17:34 d–hs—- C:\WINNT\Installer 2006-11-21 17:34 d–hs—- C:\WINNT\CSC 2006-11-21 17:34 d–h—– C:\WINNT\system32\GroupPolicy 2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\Templates 2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\SendTo 2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\PrintHood 2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\NetHood 2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\Local Settings 2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\Application Data\. 2006-11-21 17:34 d–h—– C:\Documents and Settings\Dan\Application Data 2006-11-21 17:34 d—s—- C:\Documents and Settings\Dan\Cookies 2006-11-21 17:34 d—s—- C:\Documents and Settings\Dan\Application Data\Microsoft 2006-11-21 17:34 d——– C:\Documents and Settings\Dan\Start Menu 2006-11-21 17:34 d——– C:\Documents and Settings\Dan\My Documents 2006-11-21 17:34 d——– C:\Documents and Settings\Dan\Desktop 2006-11-21 17:34 d——– C:\Documents and Settings\Dan\Application Data\Identities 2006-11-21 17:34 d——– C:\Documents and Settings\Dan\Application Data\.. 2006-11-21 17:34 d——– C:\Documents and Settings\Dan\. 2006-11-21 17:23 d-a—— C:\WINNT\system32\Microsoft 2006-11-21 17:23 d–hs—- C:\System Volume Information 2006-11-21 17:23 d——– C:\WINNT\system32\NtmsData 2006-11-21 16:09 d-a—— C:\WINNT\system32\rpcproxy 2006-11-21 16:09 d-a—— C:\WINNT\system32\rocket 2006-11-21 16:09 d-a—— C:\WINNT\system32\inetsrv 2006-11-21 16:09 d-a—— C:\WINNT\mww32 2006-11-21 16:09 d-a—— C:\WINNT\ime 2006-11-21 16:09 d-a—— C:\Program Files\microsoft frontpage 2006-11-21 16:08 0 -rahs—- C:\MSDOS.SYS 2006-11-21 16:08 0 -rahs—- C:\IO.SYS 2006-11-21 16:07 131,072 –a—— C:\WINNT\system32\mapi32.dll 2006-11-21 16:07 dr——- C:\WINNT\Offline Web Pages 2006-11-21 16:07 d-a-s—- C:\WINNT\Tasks 2006-11-21 16:07 d-a—— C:\Program Files\Outlook Express 2006-11-21 16:07 d-a—— C:\Program Files\NetMeeting 2006-11-21 16:07 d-a—— C:\Program Files\Internet Explorer 2006-11-21 16:07 d-a—— C:\Program Files\Common Files\System 2006-11-21 16:07 d-a—— C:\Program Files\Common Files\Services 2006-11-21 16:07 d–hs—- C:\Documents and Settings\All Users\DRM 2006-11-21 16:07 d—s—- C:\WINNT\Downloaded Program Files 2006-11-21 16:06 6,416 –a—— C:\WINNT\system32\write.exe 2006-11-21 16:06 d-ah—– C:\Program Files\WindowsUpdate 2006-11-21 16:06 d-a—— C:\Program Files\Windows Media Player 2006-11-21 16:06 d-a—— C:\Program Files\ComPlus Applications 2006-11-21 16:06 d——– C:\WINNT\system32\DTCLog 2006-11-21 16:06 d——– C:\WINNT\Registration 2006-11-21 16:05 99,600 –a—— C:\WINNT\system32\clipbrd.exe 2006-11-21 16:05 96,528 –a—— C:\WINNT\system32\winmine.exe 2006-11-21 16:05 91,408 –a—— C:\WINNT\system32\calc.exe 2006-11-21 16:05 90,384 –a—— C:\WINNT\system32\charmap.exe 2006-11-21 16:05 9,216 –a—— C:\WINNT\system32\wuauserv.dll 2006-11-21 16:05 84,240 –a—— C:\WINNT\system32\txflog.dll 2006-11-21 16:05 76,048 –a—— C:\WINNT\system32\avwav.dll 2006-11-21 16:05 68,368 –a—— C:\WINNT\system32\stclient.dll 2006-11-21 16:05 68,368 –a—— C:\WINNT\system32\sndvol32.exe 2006-11-21 16:05 66,832 –a—— C:\WINNT\system32\winchat.exe 2006-11-21 16:05 641,808 –a—— C:\WINNT\system32\xiffr3_0.dll 2006-11-21 16:05 60,688 –a—— C:\WINNT\system32\imgcmn.dll 2006-11-21 16:05 6,928 –a—— C:\WINNT\system32\msdtc.exe 2006-11-21 16:05 55,056 –a—— C:\WINNT\system32\catsrvps.dll 2006-11-21 16:05 406,800 –a—— C:\WINNT\system32\getuname.dll 2006-11-21 16:05 38,160 –a—— C:\WINNT\system32\jpeg2x32.dll 2006-11-21 16:05 34,064 –a—— C:\WINNT\system32\sol.exe 2006-11-21 16:05 34,064 –a—— C:\WINNT\system32\freecell.exe 2006-11-21 16:05 337,680 –a—— C:\WINNT\system32\cdplayer.exe 2006-11-21 16:05 33,552 –a—— C:\WINNT\system32\tifflt.dll 2006-11-21 16:05 30,480 –a—— C:\WINNT\system32\mtxlegih.dll 2006-11-21 16:05 3,856 –a—— C:\WINNT\system32\mtxex.dll 2006-11-21 16:05 29,968 –a—— C:\WINNT\system32\comaddin.dll 2006-11-21 16:05 27,920 –a—— C:\WINNT\system32\jpeg1x32.dll 2006-11-21 16:05 25,872 –a—— C:\WINNT\system32\oitwa400.dll 2006-11-21 16:05 21,776 –a—— C:\WINNT\system32\oislb400.dll 2006-11-21 16:05 21,264 –a—— C:\WINNT\system32\comclust.exe 2006-11-21 16:05 192,512 –a—— C:\WINNT\system32\wuaueng.dll 2006-11-21 16:05 17,680 –a—— C:\WINNT\system32\xolehlp.dll 2006-11-21 16:05 17,168 –a—— C:\WINNT\system32\avmeter.dll 2006-11-21 16:05 147,216 –a—— C:\WINNT\system32\DComExt.dll 2006-11-21 16:05 146,192 –a—— C:\WINNT\system32\comsnap.dll 2006-11-21 16:05 141,312 –a—— C:\WINNT\system32\wuauclt.exe 2006-11-21 16:05 13,584 –a—— C:\WINNT\system32\imgshl.dll 2006-11-21 16:05 13,072 –a—— C:\WINNT\system32\oissq400.dll 2006-11-21 16:05 13,072 –a—— C:\WINNT\system32\oiprt400.dll 2006-11-21 16:05 118,032 –a—— C:\WINNT\system32\mplay32.exe 2006-11-21 16:05 d-a—— C:\WINNT\system32\Com 2006-11-21 16:05 d-a—— C:\Program Files\Windows NT 2006-11-21 16:05 d-a—— C:\Program Files\Accessories 2006-11-21 16:02 d——– C:\Documents and Settings\All Users\Application Data\Microsoft 2006-11-21 10:35 51,152 –a—— C:\WINNT\system32\drivers\DMusic.sys 2006-11-21 10:35 2,896 –a—— C:\WINNT\system32\drivers\audstub.sys 2006-11-21 10:33 4,128 –a—— C:\WINNT\system32\drivers\ctljystk.sys 2006-11-21 10:31 69,584 –a—— C:\WINNT\system\AVICAP.DLL 2006-11-21 10:31 5,392 –a—— C:\WINNT\delttsul.exe 2006-11-21 10:31 176,400 –a—— C:\WINNT\system32\EqnClass.Dll 2006-11-21 10:31 123,904 –a—— C:\WINNT\system32\dgrpsetu.dll 2006-11-21 10:31 dra—— C:\Program Files\Common Files\.. 2006-11-21 10:31 dra—— C:\Program Files\. 2006-11-21 10:31 dra—— C:\Program Files 2006-11-21 10:31 d-ahs—- C:\Program Files\.. 2006-11-21 10:31 d-ah—– C:\Documents and Settings\All Users\Application Data\. 2006-11-21 10:31 d-ah—– C:\Documents and Settings\All Users\Application Data 2006-11-21 10:31 d-a—— C:\WINNT\system32\CatRoot 2006-11-21 10:31 d-a—— C:\WINNT\Speech 2006-11-21 10:31 d-a—— C:\Program Files\Common Files\ODBC 2006-11-21 10:31 d-a—— C:\Program Files\Common Files\Microsoft Shared 2006-11-21 10:31 d-a—— C:\Program Files\Common Files\. 2006-11-21 10:31 d-a—— C:\Program Files\Common Files 2006-11-21 10:31 d-a—— C:\Documents and Settings\All Users\Documents 2006-11-21 10:31 d-a—— C:\Documents and Settings\All Users\Application Data\.. 2006-11-21 10:31 d-a—— C:\Documents and Settings\All Users\.. 2006-11-21 10:31 d-a—— C:\Documents and Settings\All Users\. 2006-11-21 10:31 d-a—— C:\Documents and Settings 2006-11-21 10:31 d–h—– C:\Documents and Settings\All Users\Templates 2006-11-21 10:31 d——– C:\Documents and Settings\All Users\Start Menu 2006-11-21 10:31 d——– C:\Documents and Settings\All Users\Favorites 2006-11-21 10:31 d——– C:\Documents and Settings\All Users\Desktop 2006-11-21 10:28 drahsc— C:\WINNT\system32\dllcache 2006-11-21 10:28 dra-s—- C:\WINNT\Fonts 2006-11-21 10:28 d-ahs—- C:\WINNT\.. 2006-11-21 10:28 d-a—— C:\WINNT\twain_32 2006-11-21 10:28 d-a—— C:\WINNT\Temp 2006-11-21 10:28 d-a—— C:\WINNT\system32\wins 2006-11-21 10:28 d-a—— C:\WINNT\system32\wbem 2006-11-21 10:28 d-a—— C:\WINNT\system32\spool 2006-11-21 10:28 d-a—— C:\WINNT\system32\ShellExt 2006-11-21 10:28 d-a—— C:\WINNT\system32\ras 2006-11-21 10:28 d-a—— C:\WINNT\system32\os2 2006-11-21 10:28 d-a—— C:\WINNT\system32\npp 2006-11-21 10:28 d-a—— C:\WINNT\system32\mui 2006-11-21 10:28 d-a—— C:\WINNT\system32\ie_de 2006-11-21 10:28 d-a—— C:\WINNT\system32\ias 2006-11-21 10:28 d-a—— C:\WINNT\system32\export 2006-11-21 10:28 d-a—— C:\WINNT\system32\drivers\etc 2006-11-21 10:28 d-a—— C:\WINNT\system32\drivers\disdn 2006-11-21 10:28 d-a—— C:\WINNT\system32\drivers\.. 2006-11-21 10:28 d-a—— C:\WINNT\system32\drivers\. 2006-11-21 10:28 d-a—— C:\WINNT\system32\drivers 2006-11-21 10:28 d-a—— C:\WINNT\system32\dhcp 2006-11-21 10:28 d-a—— C:\WINNT\system32\config 2006-11-21 10:28 d-a—— C:\WINNT\system32\.. 2006-11-21 10:28 d-a—— C:\WINNT\system32\. 2006-11-21 10:28 d-a—— C:\WINNT\system32 2006-11-21 10:28 d-a—— C:\WINNT\system\.. 2006-11-21 10:28 d-a—— C:\WINNT\system\. 2006-11-21 10:28 d-a—— C:\WINNT\system 2006-11-21 10:28 d-a—— C:\WINNT\security 2006-11-21 10:28 d-a—— C:\WINNT\repair 2006-11-21 10:28 d-a—— C:\WINNT\msapps 2006-11-21 10:28 d-a—— C:\WINNT\msagent 2006-11-21 10:28 d-a—— C:\WINNT\Media 2006-11-21 10:28 d-a—— C:\WINNT\Help 2006-11-21 10:28 d-a—— C:\WINNT\Driver Cache 2006-11-21 10:28 d-a—— C:\WINNT\Debug 2006-11-21 10:28 d-a—— C:\WINNT\Cursors 2006-11-21 10:28 d-a—— C:\WINNT\Connection Wizard 2006-11-21 10:28 d-a—— C:\WINNT\Config 2006-11-21 10:28 d-a—— C:\WINNT\AppPatch 2006-11-21 10:28 d-a—— C:\WINNT\addins 2006-11-21 10:28 d-a—— C:\WINNT\. 2006-11-21 10:28 d-a—— C:\WINNT 2006-11-21 10:28 d–h—– C:\WINNT\inf 2006-11-21 10:28 d—s—- C:\WINNT\Web 2006-11-21 10:28 d——– C:\WINNT\system32\Setup (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "Synchronization Manager"="mobsync.exe /logon" "dla"="C:\\WINNT\\system32\\dla\\tfswctrl.exe" "UpdateManager"="\"C:\\Program Files\\Common Files\\Sonic\\Update Manager\\sgtray.exe\" /r" "SSC_UserPrompt"="C:\\Program Files\\Common Files\\Symantec Shared\\Security Center\\UsrPrmpt.exe" "HPHUPD08"="C:\\installed software\\hp\\Digital Imaging\\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\\hphupd08.exe" "HP Software Update"="C:\\installed software\\hp\\HP Software Update\\HPWuSchd2.exe" "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "ccApp"="C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe" "ccRegVfy"="C:\\Program Files\\Common Files\\Symantec Shared\\ccRegVfy.exe" "SymTray - Norton SystemWorks"="C:\\Program Files\\Common Files\\Symantec Shared\\Symtray.exe SetReg" "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\"" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce] "SymTray - Norton SystemWorks"="C:\\Program Files\\Common Files\\Symantec Shared\\Symtrdr.exe" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000003 "Settings"=dword:00000001 "GeneralFlags"=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" "Flags"=dword:00000002 "Position"=hex:2c,00,00,00,a0,00,00,00,00,00,00,00,80,02,00,00,3c,02,00,00,00,\ 00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:04,00,00,40 "OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\ ff,ff,04,00,00,00 "RestoredStateInfo"=hex:18,00,00,00,f0,01,00,00,1f,00,00,00,80,00,00,00,76,00,\ 00,00,01,00,00,00 [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "ALUAlert"="C:\\Program Files\\Symantec\\LiveUpdate\\ALUNotify.exe" [HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce] "^SetupICWDesktop"="C:\\Program Files\\Internet Explorer\\Connection Wizard\\icwconn1.exe /desktop" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000095 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000095 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "Network.ConnectionTray"="{7007ACCF-3202-11D1-AAD2-00805FC1270E}" "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" Contents of the 'Scheduled Tasks' folder C:\WINNT\tasks\Norton AntiVirus - Scan my computer.job C:\WINNT\tasks\Norton SystemWorks One Button Checkup.job C:\WINNT\tasks\Symantec NetDetect.job Completion time: Thu 2006-12-21 7:58:16.81 C:\ComboFix.txt … 06-12-21 07:58
Ok Here is about an 8th of it. Its the only way i can send it to you.——————————————————— AVG Anti-Spyware - Scan Report ——————————————————— + Created at: 9:26:21 PM 12/21/2006 + Scan result: :mozilla.100:C:\RECYCLER\NPROTECT\00016063.MOZ -> TrackingCookie.2o7 : Cleaned. :mozilla.101:C:\RECYCLER\NPROTECT\00016063.MOZ -> TrackingCookie.2o7 : Cleaned. :mozilla.101:C:\RECYCLER\NPROTECT\00016572.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.285:C:\RECYCLER\NPROTECT\00015968.MOZ -> TrackingCookie.2o7 : Cleaned. :mozilla.285:C:\RECYCLER\NPROTECT\00015971.MOZ -> TrackingCookie.2o7 : Cleaned. :
Dont need to see tracking cookies ;) Post anything it found other than them C:\RECYCLER\NPROTECT <<<
:mozilla.384:C:\RECYCLER\NPROTECT\00015968.MOZ -> TrackingCookie.Adjuggler : Cleaned. :mozilla.384:C:\RECYCLER\NPROTECT\00015971.MOZ -> TrackingCookie.Adjuggler : Cleaned. :

C:\RECYCLER\NPROTECT\00015968.MOZ -> TrackingCookie.Adjuggler : Cleaned.

Just need to see the part of the log that does not have trackingcookies
If there is any ;)
http://www.europe.f-secure.com/exclu…ght/blbeta.exe

Download and Save blacklight to your desktop.
F-Secure Blacklight: http://www.europe.f-secure.com/exclu…ght/blbeta.exe
Double-click blbeta.exe then accept the agreement.
click > scan then > next,
You'll see a list of all items found.
Don't choose for rename yet! I want to see the log first, because legit items can also be present there…
There must be also a log on your desktop with the name fsbl.xxxxxxx.log (the xxxxxxx stand for numbers)
Post the contents of the log in your next reply together with a new hijackthislog.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI