This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

HELP I am being HIJACKED

44 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Logfile of HijackThis v1.99.1
Scan saved at 8:27:32 AM, on 12/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
C:\WINDOWS\MXOaldr.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files\PhatNoise Media Manager\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O1 - Hosts: 69.93.229.151 www.allonlinecoupons.com
O1 - Hosts: 69.93.229.151 www.allonlinecoupons.com
O1 - Hosts: 209.197.98.50 www.yesterland.com
O1 - Hosts: 199.181.132.174 abclocal.go.com
O1 - Hosts: 70.85.60.100 dvdxcopy.afterdawn.com
O1 - Hosts: 67.15.80.76 www.ambushhotel.com
O1 - Hosts: 64.86.106.143 quake.usgs.gov
O1 - Hosts: 69.16.243.21 sanfrancisco.apartmenttherapy.com
O1 - Hosts: 194.242.43.137 web.artprice.com
O1 - Hosts: 65.212.180.185 www.mesart.com
O1 - Hosts: 66.35.240.8 www.sfgate.com
O1 - Hosts: 66.147.225.180 www.bewellvitamins.com
O1 - Hosts: 209.197.121.1 www.tomshardware.com
O1 - Hosts: 216.39.58.163 www.bradysclockrepair.com
O1 - Hosts: 216.39.58.163 www.bradysclockrepair.com
O1 - Hosts: 203.26.51.42 www.theage.com.au
O1 - Hosts: 209.247.184.164 www.comedyschoolforless.com
O1 - Hosts: 129.41.69.150 dealnews.com
O1 - Hosts: 216.113.183.151 cgi.ebay.com
O1 - Hosts: 199.75.209.126 www.ewg.org
O1 - Hosts: 199.75.209.126 www.ewg.org
O1 - Hosts: 68.142.212.43 exquisiteandrare.com
O1 - Hosts: 66.135.192.87 pages.ebay.com
O1 - Hosts: 68.142.214.24 www.flickr.com
O1 - Hosts: 198.78.132.165 flight001.com
O1 - Hosts: 198.78.132.165 flight001.com
O1 - Hosts: 65.208.172.71 www.nascigs.com
O1 - Hosts: 198.65.115.241 www.auctionbytes.com
O1 - Hosts: 72.14.219.191 fpiarticle.blogspot.com
O1 - Hosts: 195.58.170.6 www.dvdmarkt.at
O1 - Hosts: 66.160.181.132 www.projectghb.org
O1 - Hosts: 4.79.142.202 www.grc.com
O1 - Hosts: 64.70.136.98 www.guspresents.com
O1 - Hosts: 4.79.142.202 www.grc.com
O1 - Hosts: 63.240.208.227 www.cms.hhs.gov
O1 - Hosts: 149.99.58.196 www.sidefx.com
O1 - Hosts: 209.197.82.28 www.tomsnetworking.com
O1 - Hosts: 66.175.27.150 astro-mate.org
O1 - Hosts: 207.171.166.57 maps.a9.com
O1 - Hosts: 63.208.196.109 hypercube.is.dreaming.org
O1 - Hosts: 206.225.87.181 www.infomercialscams.com
O1 - Hosts: 208.109.49.163 www.selfdefenseproducts.com
O1 - Hosts: 66.151.248.213 www.jesuscampthemovie.com
O1 - Hosts: 85.17.11.27 www.juicygoo.com
O1 - Hosts: 216.104.187.28 spellmaker.com
O1 - Hosts: 64.154.20.29 www.maletreasures.com
O1 - Hosts: 207.155.248.122 www.microsoftcalsettlement.com
O1 - Hosts: 68.142.205.137 webtronics.stores.yahoo.net
O1 - Hosts: 209.232.226.110 www.mbayaq.org
O1 - Hosts: 63.211.141.52 nakedsword.com
O1 - Hosts: 207.178.135.200 www.onenotguilty.com
O1 - Hosts: 149.99.58.196 www.sidefx.com
O1 - Hosts: 66.90.101.64 www.pentagonstrike.co.uk
O1 - Hosts: 72.3.253.107 www.photo-accessories.com.au
O1 - Hosts: 216.104.71.5 www.portforward.com
O1 - Hosts: 207.58.145.9 www.powersellersunite.com
O1 - Hosts: 66.225.239.127 primaljaimal.com
O1 - Hosts: 216.93.251.17 www.purevolume.com
O1 - Hosts: 216.105.61.225 www.rainbowdepot.com
O1 - Hosts: 207.178.253.12 www.rushtrafficschool.com
O1 - Hosts: 216.103.100.55 www.sfgov.org
O1 - Hosts: 67.19.224.132 www.sandrabernhard.com
O1 - Hosts: 204.127.198.25 mywebpages.comcast.net
O1 - Hosts: 216.103.100.55 www.sfgov.org
O1 - Hosts: 68.142.205.137 www.waterproducts.com
O1 - Hosts: 209.11.51.41 www.gizmodo.com
O1 - Hosts: 68.142.214.24 www.flickr.com
O1 - Hosts: 69.156.240.29 svat.com
O1 - Hosts: 81.187.187.112 hot-on-the-trail-at.blog-city.com
O1 - Hosts: 64.202.189.186 www.irisvista.com
O1 - Hosts: 68.142.205.137 www.spytown.com
O1 - Hosts: 204.127.195.15 www.comcast.net
O1 - Hosts: 66.228.122.12 www.zombietime.com
O1 - Hosts: 212.44.68.7 users.gazinter.net
O1 - Hosts: 66.228.122.12 www.zombietime.com
O1 - Hosts: 209.126.151.229 www.allvideotrafficschool.com
O1 - Hosts: 216.133.229.130 www.trafficschool.com
O1 - Hosts: 209.126.151.229 www.allvideotrafficschool.com
O1 - Hosts: 64.94.178.89 www.dealtime.co.uk
O1 - Hosts: 129.41.69.158 dealcoupon.com
O1 - Hosts: 66.184.245.100 www.vzwshop.com
O1 - Hosts: 162.115.227.100 www.verizonwireless.com
O1 - Hosts: 72.3.138.22 www.videoegg.com
O1 - Hosts: 74.52.135.146 www.videohelp.com
O1 - Hosts: 216.218.218.27 vax.hanford.org
O1 - Hosts: 81.187.187.112 hot-on-the-trail-at.blog-city.com
O1 - Hosts: 62.214.98.28 www.sorrygottago.com
O1 - Hosts: 64.73.155.29 www.sears.com
O1 - Hosts: 69.61.15.150 www.whosarat.com
O1 - Hosts: 66.150.161.133 www.avalonepicure.com
O1 - Hosts: 216.52.81.211 zabasearch.com
O1 - Hosts: 66.151.238.124 www.zipcar.com
O1 - Hosts: 64.86.106.145 www.zappos.com
O1 - Hosts: 63.240.117.53 www.kennethcole.com
O1 - Hosts: 64.86.106.145 www.zappos.com
O1 - Hosts: 66.218.77.68 www.geocities.com
O1 - Hosts: 207.46.248.248 support.microsoft.com
O1 - Hosts: 64.85.14.90 pubs.logicalexpressions.com
O1 - Hosts: 66.218.77.68 www.geocities.com
O1 - Hosts: 65.19.174.45 www.primedius.com
O1 - Hosts: 207.188.5.44 www.real.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [IMONTRAY] C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOaldr.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .efp: C:\Program Files\Internet Explorer\Plugins\NPEFPrn.dll
O12 - Plugin for .efv: C:\Program Files\Internet Explorer\Plugins\NPEFV.dll
O12 - Plugin for .fmp: C:\Program Files\Internet Explorer\Plugins\NPFMP.dll
O12 - Plugin for .fmr: C:\Program Files\Internet Explorer\Plugins\NPFME.dll
O12 - Plugin for .ifx: C:\Program Files\Internet Explorer\Plugins\NPWebPrn.dll
O12 - Plugin for .lfx: C:\Program Files\Internet Explorer\Plugins\NPLaunch.dll
O12 - Plugin for .mwp: C:\Program Files\Internet Explorer\Plugins\NPMWPrn.dll
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1152647794359
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1153525397531
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel® Active Monitor (imonNT) - Intel Corp. - C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: V2i Protector - PowerQuest Corporation - C:\Program Files\PowerQuest\Drive Image 7.0\Agent\PQV2iSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

:rofl:
Hi johndude. I need to take some time to look over your Hijack This log to come up with a fix. Please remember that I am an undergraduate which means I need to have my posts to you checked by a teacher or moderator to make sure I'm giving you the proper instructions. This process won't take long and I thank you for your patience. I'll be back with you soon.
Hi Johndude. Look at the entries below: O1 - Hosts: 69.93.229.151 www.allonlinecoupons.com O1 - Hosts: 69.93.229.151 www.allonlinecoupons.com O1 - Hosts: 209.197.98.50 www.yesterland.com O1 - Hosts: 199.181.132.174 abclocal.go.com O1 - Hosts: 70.85.60.100 dvdxcopy.afterdawn.com O1 - Hosts: 67.15.80.76 www.ambushhotel.com O1 - Hosts: 64.86.106.143 quake.usgs.gov O1 - Hosts: 69.16.243.21 sanfrancisco.apartmenttherapy.com O1 - Hosts: 194.242.43.137 web.artprice.com O1 - Hosts: 65.212.180.185 www.mesart.com O1 - Hosts: 66.35.240.8 www.sfgate.com O1 - Hosts: 66.147.225.180 www.bewellvitamins.com O1 - Hosts: 209.197.121.1 www.tomshardware.com O1 - Hosts: 216.39.58.163 www.bradysclockrepair.com O1 - Hosts: 216.39.58.163 www.bradysclockrepair.com O1 - Hosts: 203.26.51.42 www.theage.com.au O1 - Hosts: 209.247.184.164 www.comedyschoolforless.com O1 - Hosts: 129.41.69.150 dealnews.com O1 - Hosts: 216.113.183.151 cgi.ebay.com O1 - Hosts: 199.75.209.126 www.ewg.org O1 - Hosts: 199.75.209.126 www.ewg.org O1 - Hosts: 68.142.212.43 exquisiteandrare.com O1 - Hosts: 66.135.192.87 pages.ebay.com O1 - Hosts: 68.142.214.24 www.flickr.com O1 - Hosts: 198.78.132.165 flight001.com O1 - Hosts: 198.78.132.165 flight001.com O1 - Hosts: 65.208.172.71 www.nascigs.com O1 - Hosts: 198.65.115.241 www.auctionbytes.com O1 - Hosts: 72.14.219.191 fpiarticle.blogspot.com O1 - Hosts: 195.58.170.6 www.dvdmarkt.at O1 - Hosts: 66.160.181.132 www.projectghb.org O1 - Hosts: 4.79.142.202 www.grc.com O1 - Hosts: 64.70.136.98 www.guspresents.com O1 - Hosts: 4.79.142.202 www.grc.com O1 - Hosts: 63.240.208.227 www.cms.hhs.gov O1 - Hosts: 149.99.58.196 www.sidefx.com O1 - Hosts: 209.197.82.28 www.tomsnetworking.com O1 - Hosts: 66.175.27.150 astro-mate.org O1 - Hosts: 207.171.166.57 maps.a9.com O1 - Hosts: 63.208.196.109 hypercube.is.dreaming.org O1 - Hosts: 206.225.87.181 www.infomercialscams.com O1 - Hosts: 208.109.49.163 www.selfdefenseproducts.com O1 - Hosts: 66.151.248.213 www.jesuscampthemovie.com O1 - Hosts: 85.17.11.27 www.juicygoo.com O1 - Hosts: 216.104.187.28 spellmaker.com O1 - Hosts: 64.154.20.29 www.maletreasures.com O1 - Hosts: 207.155.248.122 www.microsoftcalsettlement.com O1 - Hosts: 68.142.205.137 webtronics.stores.yahoo.net O1 - Hosts: 209.232.226.110 www.mbayaq.org O1 - Hosts: 63.211.141.52 nakedsword.com O1 - Hosts: 207.178.135.200 www.onenotguilty.com O1 - Hosts: 149.99.58.196 www.sidefx.com O1 - Hosts: 66.90.101.64 www.pentagonstrike.co.uk O1 - Hosts: 72.3.253.107 www.photo-accessories.com.au O1 - Hosts: 216.104.71.5 www.portforward.com O1 - Hosts: 207.58.145.9 www.powersellersunite.com O1 - Hosts: 66.225.239.127 primaljaimal.com O1 - Hosts: 216.93.251.17 www.purevolume.com O1 - Hosts: 216.105.61.225 www.rainbowdepot.com O1 - Hosts: 207.178.253.12 www.rushtrafficschool.com O1 - Hosts: 216.103.100.55 www.sfgov.org O1 - Hosts: 67.19.224.132 www.sandrabernhard.com O1 - Hosts: 204.127.198.25 mywebpages.comcast.net O1 - Hosts: 216.103.100.55 www.sfgov.org O1 - Hosts: 68.142.205.137 www.waterproducts.com O1 - Hosts: 209.11.51.41 www.gizmodo.com O1 - Hosts: 68.142.214.24 www.flickr.com O1 - Hosts: 69.156.240.29 svat.com O1 - Hosts: 81.187.187.112 hot-on-the-trail-at.blog-city.com O1 - Hosts: 64.202.189.186 www.irisvista.com O1 - Hosts: 68.142.205.137 www.spytown.com O1 - Hosts: 204.127.195.15 www.comcast.net O1 - Hosts: 66.228.122.12 www.zombietime.com O1 - Hosts: 212.44.68.7 users.gazinter.net O1 - Hosts: 66.228.122.12 www.zombietime.com O1 - Hosts: 209.126.151.229 www.allvideotrafficschool.com O1 - Hosts: 216.133.229.130 www.trafficschool.com O1 - Hosts: 209.126.151.229 www.allvideotrafficschool.com O1 - Hosts: 64.94.178.89 www.dealtime.co.uk O1 - Hosts: 129.41.69.158 dealcoupon.com O1 - Hosts: 66.184.245.100 www.vzwshop.com O1 - Hosts: 162.115.227.100 www.verizonwireless.com O1 - Hosts: 72.3.138.22 www.videoegg.com O1 - Hosts: 74.52.135.146 www.videohelp.com O1 - Hosts: 216.218.218.27 vax.hanford.org O1 - Hosts: 81.187.187.112 hot-on-the-trail-at.blog-city.com O1 - Hosts: 62.214.98.28 www.sorrygottago.com O1 - Hosts: 64.73.155.29 www.sears.com O1 - Hosts: 69.61.15.150 www.whosarat.com O1 - Hosts: 66.150.161.133 www.avalonepicure.com O1 - Hosts: 216.52.81.211 zabasearch.com O1 - Hosts: 66.151.238.124 www.zipcar.com O1 - Hosts: 64.86.106.145 www.zappos.com O1 - Hosts: 63.240.117.53 www.kennethcole.com O1 - Hosts: 64.86.106.145 www.zappos.com O1 - Hosts: 66.218.77.68 www.geocities.com O1 - Hosts: 207.46.248.248 support.microsoft.com O1 - Hosts: 64.85.14.90 pubs.logicalexpressions.com O1 - Hosts: 66.218.77.68 www.geocities.com O1 - Hosts: 65.19.174.45 www.primedius.com O1 - Hosts: 207.188.5.44 www.real.com Can you tell me if these entries were put into the hosts file purposely by yourself or another user of the PC? It's important for me to know so we can continue with the fix.
It looks like I have visited all of these websites but I did not "put" them anywhere except for in IE tools cookies ok to accept from. Here is the log from Spybot (this keeps coming back after I do a fix): — Search result list — Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done) www.microsoft.com=207.46.225.60 Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done) go.microsoft.com=207.46.250.101 — Spybot - Search & Destroy version: 1.4 (build: 20050523) — I CAN SEND THE COMPLETE RESULT/LOG OF SPYBOT IF IT HELPS? THANK YOU, HOPE YOU CAN HELP! John :D
HERE IS THE COMPLETE SPYBOT LOG:


— Search result list —
Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done)
www.microsoft.com=207.46.225.60

Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done)
go.microsoft.com=[removed]


— Spybot - Search & Destroy version: 1.4 (build: 20050523) —

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2006-08-02 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-12-15 Includes\Cookies.sbi (*)
2006-12-08 Includes\Dialer.sbi (*)
2006-12-15 Includes\DialerC.sbi (*)
2006-11-24 Includes\Hijackers.sbi (*)
2006-12-15 Includes\HijackersC.sbi (*)
2006-10-27 Includes\Keyloggers.sbi (*)
2006-12-15 Includes\KeyloggersC.sbi (*)
2006-12-15 Includes\Malware.sbi (*)
2006-12-15 Includes\MalwareC.sbi (*)
2006-10-20 Includes\PUPS.sbi (*)
2006-12-15 Includes\PUPSC.sbi (*)
2006-12-15 Includes\Revision.sbi (*)
2006-12-08 Includes\Security.sbi (*)
2006-12-15 Includes\SecurityC.sbi (*)
2006-10-13 Includes\Spybots.sbi (*)
2006-12-15 Includes\SpybotsC.sbi (*)
2005-02-17 Includes\Tracks.uti
2006-12-08 Includes\Trojans.sbi (*)
2006-12-15 Includes\TrojansC.sbi (*)



— System information —
Windows XP (Build: 2600) Service Pack 2
/ .NETFramework / 1.0: Microsoft .NET Framework 1.0 Hotfix (KB886906)
/ .NETFramework / 1.0: Microsoft .NET Framework 1.0 Service Pack 3 (KB867461)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB886903)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
/ Microsoft .NET Framework 2.0: This Security Update is for Microsoft .NET Framework 2.0. \n
If you later install a more recent service pack, this Security Update will be uninstalled automatically. \n
For more information, visit http://support.microsoft.com/kb/917283
/ Microsoft .NET Framework 2.0: This Security Update is for Microsoft .NET Framework 2.0. \n
If you later install a more recent service pack, this Security Update will be uninstalled automatically. \n
For more information, visit http://support.microsoft.com/kb/922770
/ MSXML4SP2: FIX: ASP stops responding when calling Response.Redirect to another server using msxml4 sp2
/ MSXML4SP2: FIX: ASP stops responding when calling Response.Redirect to another server using msxml4 sp2
/ Windows / SP1: Microsoft Internationalized Domain Names Mitigation APIs
/ Windows / SP1: Microsoft National Language Support Downlevel APIs
/ Windows Media Player 10: Security Update for Windows Media Player 10 (KB911565)
/ Windows Media Player 10: Security Update for Windows Media Player 10 (KB917734)
/ Windows Media Player 6.4: Security Update for Windows Media Player 6.4 (KB925398)
/ Windows Media Player 9: Security Update for Windows Media Player 9 (KB917734)
/ Windows XP / SP10: Microsoft Compression Client Pack 1.0 for Windows XP
/ Windows XP / SP3: Windows XP Hotfix - KB873339
/ Windows XP / SP3: Windows XP Hotfix - KB885835
/ Windows XP / SP3: Windows XP Hotfix - KB885836
/ Windows XP / SP3: Windows XP Hotfix - KB886185
/ Windows XP / SP3: Windows XP Hotfix - KB887472
/ Windows XP / SP3: Windows XP Hotfix - KB888113
/ Windows XP / SP3: Windows XP Hotfix - KB888302
/ Windows XP / SP3: Security Update for Windows XP (KB890046)
/ Windows XP / SP3: Windows XP Hotfix - KB890859
/ Windows XP / SP3: Windows XP Hotfix - KB891781
/ Windows XP / SP3: Security Update for Windows XP (KB893756)
/ Windows XP / SP3: Windows Installer 3.1 (KB893803)
/ Windows XP / SP3: Update for Windows XP (KB894391)
/ Windows XP / SP3: Hotfix for Windows XP (KB896344)
/ Windows XP / SP3: Security Update for Windows XP (KB896358)
/ Windows XP / SP3: Security Update for Windows XP (KB896423)
/ Windows XP / SP3: Security Update for Windows XP (KB896424)
/ Windows XP / SP3: Security Update for Windows XP (KB896428)
/ Windows XP / SP3: Update for Windows XP (KB898461)
/ Windows XP / SP3: Security Update for Windows XP (KB899587)
/ Windows XP / SP3: Security Update for Windows XP (KB899589)
/ Windows XP / SP3: Security Update for Windows XP (KB899591)
/ Windows XP / SP3: Update for Windows XP (KB900485)
/ Windows XP / SP3: Security Update for Windows XP (KB900725)
/ Windows XP / SP3: Security Update for Windows XP (KB901017)
/ Windows XP / SP3: Security Update for Windows XP (KB901214)
/ Windows XP / SP3: Security Update for Windows XP (KB902400)
/ Windows XP / SP3: Security Update for Windows XP (KB904706)
/ Windows XP / SP3: Update for Windows XP (KB904942)
/ Windows XP / SP3: Security Update for Windows XP (KB905414)
/ Windows XP / SP3: Security Update for Windows XP (KB905749)
/ Windows XP / SP3: Security Update for Windows XP (KB908519)
/ Windows XP / SP3: Update for Windows XP (KB908531)
/ Windows XP / SP3: Update for Windows XP (KB910437)
/ Windows XP / SP3: Update for Windows XP (KB911280)
/ Windows XP / SP3: Security Update for Windows XP (KB911562)
/ Windows XP / SP3: Security Update for Windows XP (KB911567)
/ Windows XP / SP3: Security Update for Windows XP (KB911927)
/ Windows XP / SP3: Security Update for Windows XP (KB912919)
/ Windows XP / SP3: Security Update for Windows XP (KB913580)
/ Windows XP / SP3: Security Update for Windows XP (KB914388)
/ Windows XP / SP3: Security Update for Windows XP (KB914389)
/ Windows XP / SP3: Hotfix for Windows XP (KB914440)
/ Windows XP / SP3: Hotfix for Windows XP (KB915865)
/ Windows XP / SP3: Security Update for Windows XP (KB916281)
/ Windows XP / SP3: Update for Windows XP (KB916595)
/ Windows XP / SP3: Security Update for Windows XP (KB917159)
/ Windows XP / SP3: Security Update for Windows XP (KB917344)
/ Windows XP / SP3: Security Update for Windows XP (KB917422)
/ Windows XP / SP3: Security Update for Windows XP (KB917953)
/ Windows XP / SP3: Security Update for Windows XP (KB918439)
/ Windows XP / SP3: Security Update for Windows XP (KB918899)
/ Windows XP / SP3: Security Update for Windows XP (KB919007)
/ Windows XP / SP3: Security Update for Windows XP (KB920213)
/ Windows XP / SP3: Security Update for Windows XP (KB920214)
/ Windows XP / SP3: Security Update for Windows XP (KB920670)
/ Windows XP / SP3: Security Update for Windows XP (KB920683)
/ Windows XP / SP3: Security Update for Windows XP (KB920685)
/ Windows XP / SP3: Update for Windows XP (KB920872)
/ Windows XP / SP3: Security Update for Windows XP (KB921398)
/ Windows XP / SP3: Security Update for Windows XP (KB921883)
/ Windows XP / SP3: Update for Windows XP (KB922582)
/ Windows XP / SP3: Security Update for Windows XP (KB922616)
/ Windows XP / SP3: Security Update for Windows XP (KB922819)
/ Windows XP / SP3: Security Update for Windows XP (KB923191)
/ Windows XP / SP3: Security Update for Windows XP (KB923414)
/ Windows XP / SP3: Security Update for Windows XP (KB923694)
/ Windows XP / SP3: Security Update for Windows XP (KB923980)
/ Windows XP / SP3: Security Update for Windows XP (KB924191)
/ Windows XP / SP3: Security Update for Windows XP (KB924270)
/ Windows XP / SP3: Security Update for Windows XP (KB924496)
/ Windows XP / SP3: Security Update for Windows XP (KB925486)
/ Windows XP / SP3: Hotfix for Windows XP (KB926239)
/ Windows XP / SP3: Security Update for Windows XP (KB926255)
/ Windows XP / SP3: Hotfix for Windows XP (KB928388)


— Startup entries list —
Located: HK_LM:Run, IMONTRAY
command: C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
file: C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
size: 32768
MD5: 8ab280a7366ff66c59afc64f3a85ffa2

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
file: C:\WINDOWS\system32\RUNDLL32.EXE
size: 33280
MD5: da285490bbd8a1d0ce6623577d5ba1ff

Located: HK_LM:Run, NvMediaCenter
command: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
file: C:\WINDOWS\system32\RUNDLL32.EXE
size: 33280
MD5: da285490bbd8a1d0ce6623577d5ba1ff

Located: HK_LM:Run, Zone Labs Client
command: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
file: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
size: 968696
MD5: 71514e2c74d554f5902dc184046eca3b

Located: HK_CU:Run, Active Desktop Calendar
command: C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
file: C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
size: 3313664
MD5: 0a83b75e58e0421246ee59c684c26980

Located: HK_CU:Run, EPSON Stylus Photo R320 Series
command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9FA.EXE /P30 "EPSON Stylus Photo R320 Series" /M "Stylus Photo R320" /EF "HKCU"
file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9FA.EXE
size: 98304
MD5: fd81ef75770d341ce00485c9cba09f6b

Located: HK_CU:Run, IDMan
command: C:\Program Files\Internet Download Manager\IDMan.exe /onboot
file:

Located: HK_CU:Run, XPize Reloader
command: C:\WINDOWS\XPize\XPizeReloader.exe /S
file: C:\WINDOWS\XPize\XPizeReloader.exe
size: 109785
MD5: ef317c9d1b9f5a56469a18c788500e25

Located: System.ini, crypt32chain
command: crypt32.dll
file: crypt32.dll

Located: System.ini, cryptnet
command: cryptnet.dll
file: cryptnet.dll

Located: System.ini, cscdll
command: cscdll.dll
file: cscdll.dll

Located: System.ini, ScCertProp
command: wlnotify.dll
file: wlnotify.dll

Located: System.ini, Schedule
command: wlnotify.dll
file: wlnotify.dll

Located: System.ini, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll

Located: System.ini, SensLogn
command: WlNotify.dll
file: WlNotify.dll

Located: System.ini, termsrv
command: wlnotify.dll
file: wlnotify.dll

Located: System.ini, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll

Located: System.ini, wlballoon
command: wlnotify.dll
file: wlnotify.dll



— Browser helper object list —
{9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
BHO name:
CLSID name: Windows Live Sign-in Helper
Path: C:\Program Files\Common Files\Microsoft Shared\Windows Live\
Long name: WindowsLiveLogin.dll
Short name: WINDOW~1.DLL
Date (created): 4/17/2006 12:32:58 PM
Date (last access): 11/21/2006 1:30:10 AM
Date (last write): 4/17/2006 12:32:58 PM
Filesize: 323904
Attributes: archive
MD5: 4D834364B09155778A3330A67EBD4621
CRC32: D2CB2586
Version: 4.0.248.1

{AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
BHO name:
CLSID name: Google Toolbar Helper
description: Google toolbar
classification: Open for discussion
known filename: googletoolbar.dll
googletoolbar*.dll
(* = number)
googletoolbar_en_*.**-big.dll
Googletoolbar_en_*.*.**-deleon.dll
info link: http://toolbar.google.com/
info source: TonyKlein
Path: c:\program files\google\
Long name: GoogleToolbar3.dll
Short name: GOOGLE~3.DLL
Date (created): 10/17/2006 3:34:10 PM
Date (last access): 11/21/2006 1:30:08 AM
Date (last write): 10/12/2006 10:38:04 AM
Filesize: 2108480
Attributes: readonly archive
MD5: 4CB9CC5E19F70337BFE200A4DAD58025
CRC32: 07D15995
Version: 4.0.1020.2544



— ActiveX list —
{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool)
DPF name:
CLSID name: Office Genuine Advantage Validation Tool
Installer: C:\WINDOWS\Downloaded Program Files\OGAControl.inf
Codebase: http://go.microsoft.com/fwlink/?linkid=58813
Path: C:\WINDOWS\system32\
Long name: OGACheckControl.DLL
Short name: OGACHE~1.DLL
Date (created): 5/23/2006 4:25:56 PM
Date (last access): 11/21/2006 12:09:52 AM
Date (last write): 5/23/2006 4:25:56 PM
Filesize: 448816
Attributes: archive
MD5: 406B36B9BE53D9B93B48E59A3DEDC737
CRC32: E20B2942
Version: 1.5.532.0

{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
DPF name: Java Runtime Environment 1.5.0
CLSID name: Java Plug-in 1.5.0_09
Installer:
Codebase: http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab
Path: C:\Program Files\Java\jre1.5.0_09\bin\
Long name: NPJPI150_09.dll
Short name: NPJPI1~1.DLL
Date (created): 10/12/2006 3:10:58 AM
Date (last access): 11/20/2006 2:35:44 AM
Date (last write): 10/12/2006 3:25:44 AM
Filesize: 69746
Attributes: archive
MD5: A3CDEB59B6B8C2EA81B9ED2D3EF4C95E
CRC32: 2A32A9A2
Version: 5.0.90.3



— Process list —
PID: 0 ( 0) [System]
PID: 1128 ( 4) \SystemRoot\System32\smss.exe
PID: 1884 (1128) \??\C:\WINDOWS\system32\csrss.exe
PID: 484 (1128) \??\C:\WINDOWS\system32\winlogon.exe
PID: 876 ( 484) C:\WINDOWS\system32\services.exe
size: 108032
MD5: C6CE6EEC82F187615D1002BB3BB50ED4
PID: 944 ( 484) C:\WINDOWS\system32\lsass.exe
size: 13312
MD5: 84885F9B82F4D55C6146EBF6065D75D2
PID: 1596 ( 876) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 556 ( 876) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 1212 ( 876) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 1420 ( 876) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 1840 ( 876) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 1980 ( 876) C:\WINDOWS\system32\ZoneLabs\vsmon.exe
size: 75768
MD5: A9062968DF9419FA45ACF044B4D9F5AC
PID: 1684 ( 876) C:\WINDOWS\system32\spoolsv.exe
size: 57856
MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
PID: 1872 (1444) C:\WINDOWS\Explorer.EXE
size: 1182720
MD5: 10BB2609C39A00C567C584BEA9CF8F9F
PID: 1452 ( 876) C:\WINDOWS\system32\ZoneLabs\isafe.exe
size: 188416
MD5: F2AA32E37D59A5480A9C98B3C1D6A9B2
PID: 1460 (1872) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 4393096
MD5: 09CA174A605B480318731E691DC98539
PID: 1832 ( 876) C:\WINDOWS\System32\GEARSec.exe
size: 53248
MD5: B6E01969246FCB67470E87E6957EE147
PID: 2108 ( 876) C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
size: 45056
MD5: 6723C9E89F7186333CB55F9C7C860FA0
PID: 2184 ( 876) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 2316 ( 876) C:\WINDOWS\System32\ups.exe
size: 18432
MD5: 3F5DF65B0758675F95A2D43918A740A3
PID: 2524 ( 876) C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
size: 106496
MD5: 863952BCB5E488ECBBEB7D177CB699BC
PID: 4 ( 0) System


— Browser start & search pages list —
Spybot - Search & Destroy browser pages report, 12/21/2006 7:23:27 AM

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\Program Files\PhatNoise Media Manager\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.Google.com
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar
http://www.Google.com/ie
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.comcast.net/home.html
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
http://www.Google.com/keyword/%s
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
http://go.microsoft.com/fwlink/?LinkId=54896
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://go.microsoft.com/fwlink/?LinkId=69157
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://go.microsoft.com/fwlink/?LinkId=69157
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://go.microsoft.com/fwlink/?LinkId=54896
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
http://www.Google.com/ie
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
http://www.Google.com/ie


— Winsock Layered Service Provider list —
Protocol 0: CA ISafe LSP over [MSAFD Tcpip [TCP/IP]]
GUID: {414838C8-0213-46CD-A23F-42F2E0B75DE7}
Filename: C:\WINDOWS\system32\ZoneLabs\vetredir.dll

Protocol 1: CA ISafe LSP over [MSAFD Tcpip [UDP/IP]]
GUID: {414838C8-0213-46CD-A23F-42F2E0B75DE7}
Filename: C:\WINDOWS\system32\ZoneLabs\vetredir.dll

Protocol 2: CA ISafe LSP over [MSAFD Tcpip [RAW/IP]]
GUID: {414838C8-0213-46CD-A23F-42F2E0B75DE7}
Filename: C:\WINDOWS\system32\ZoneLabs\vetredir.dll

Protocol 8: CA ISafe LSP
GUID: {AE2578B4-F478-4313-9A3E-1B83F7A643DF}
Filename: C:\WINDOWS\system32\ZoneLabs\vetredir.dll



— Uninstall list —
3D Waterfall Screensaver 1.0 (3D Waterfall Screensaver_is1)
install location: C:\Program Files\3D Waterfall Screensaver\
uninstall cmd: "C:\Program Files\3D Waterfall Screensaver\unins000.exe"

(Acoustica CD Label Maker)
uninstall cmd: C:\Program Files\Acoustica CD Label Maker\uisurvey.exe

Active Desktop Calendar 6.3 (Active Desktop Calendar_is1)
install location: C:\Program Files\XemiComputers\Active Desktop Calendar\
uninstall cmd: "C:\Program Files\XemiComputers\Active Desktop Calendar\unins000.exe"
publisher: XemiComputers
help link: http://www.xemico.com

Adobe Shockwave Player 10.1.3.18 (Adobe Shockwave Player)
uninstall cmd: C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
publisher: Adobe Systems, Inc.
help link: http://www.adobe.com/support/shockwave

AM-DeadLink 2.8 2.8 (aignesamdeadlink_is1)
install location: C:\Program Files\AM-DeadLink\
uninstall cmd: "C:\Program Files\AM-DeadLink\unins000.exe"
publisher: www.aignes.com
help link: http://www.aignes.com

AMCap 9.10.88.3 (AMCap)
version (major): 9
version (minor): 10
uninstall cmd: C:\Program Files\AMCap\uninst.exe
publisher: Noël Danjou
help link: http://noeld.com/programs.asp?cat=video#AMCap
readme: C:\Program Files\AMCap\readme.txt

AnyDVD (AnyDVD)
install location: C:\Program Files\SlySoft\AnyDVD
uninstall cmd: "C:\Program Files\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program Files\SlySoft\AnyDVD"
publisher: SlySoft

AviSynth 2.5 (AviSynth)
uninstall cmd: "C:\Program Files\AviSynth 2.5\Uninstall.exe"

(Branding)

C-Media WDM Audio Driver (C-Media Audio Driver)
uninstall cmd: C:\WINDOWS\system32\cmirmdrv.exe

CloneDVD2 (CloneDVD2)
install location: C:\Program Files\Elaborate Bytes\CloneDVD2
uninstall cmd: "C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program Files\Elaborate Bytes\CloneDVD2"
publisher: Elaborate Bytes

Desktop Doctor (comcastDD)
uninstall cmd: "C:\Program Files\Support.com\providerComcast\Uninstall.exe" /c "Remove Desktop Doctor?"

(Connection Manager)

Cucusoft MPEG/MOV/rmvb/DivX/AVI to DVD/VCD/SVCD Converter Pro 7 (Cucusoft MPEG/MOV/rmvb/DivX/AVI to DVD/VCD/SVCD ~78C2EC41_is1)
install location: C:\Program Files\Cucusoft\avi-dvd-pro\
uninstall cmd: "C:\Program Files\Cucusoft\avi-dvd-pro\unins000.exe"

Microsoft Windows XP Video Decoder Checkup Utility (DECCHECK)
uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\DECCHECK.inf,Uninstall

(DirectDrawEx)

Personal License Update Wizard for Windows Media Player (DRM7Tool)
uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\drmtool.inf,Uninstall

EPSON Printer Software (EPSON Printer and Utilities)
uninstall cmd: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R

(Fontcore)

Microsoft Internationalized Domain Names Mitigation APIs (IDNMitigationAPIs)
install date: 20061005
uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
publisher: Microsoft Corporation

(IE40)

(IE4Data)

(IE5BAKEX)

Windows Internet Explorer 7 20061017.133151 (ie7)
install date: 20061030
uninstall cmd: "C:\WINDOWS\ie7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://www.microsoft.com/ie

(IEData)

(InstallShield Uninstall Information)

Norton PartitionMagic 8.0 8.05.000 (InstallShield_{21DBBDD6-93A5-4326-9A04-C9A5C9148502})
version: 134545408
version (major): 8
version (minor): 5
estimated size: 39169
install date: 20060810
install location: C:\Program Files\Symantec\Norton PartitionMagic 8.0\
uninstall cmd: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{21DBBDD6-93A5-4326-9A04-C9A5C9148502}
publisher: Symantec
comments: Symantec Inc.
contact: Customer Support Department
help link: http://www.symantec.com/support
help telephone: [removed]
readme: Readme.txt

5000 Series 1.00.0200 (InstallShield_{3BDB8AA5-EDDD-441A-877A-FC6D8664869F})
version: 16777416
version (major): 1
estimated size: 1298
install date: 20061020
uninstall cmd: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{3BDB8AA5-EDDD-441A-877A-FC6D8664869F}
publisher: Maxtor
comments: None
contact: Customer Support Department
help link: http://www.maxtor.com
help telephone: [removed]
readme: Readme.txt

QuickTime 7.0.2 (InstallShield_{4E5E22C2-1386-47AE-8EDE-32DDCDCD6653})
version: 117440514
version (major): 7
estimated size: 62867
install date: 20061219
install location: C:\Program Files\QuickTime\
install source: p:\TEMP\_is56\
uninstall cmd: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{4E5E22C2-1386-47AE-8EDE-32DDCDCD6653} /l1033
publisher: Apple Computer, Inc.
contact: AppleCare Support
help link: http://www.info.apple.com/
help telephone: [removed]

TWAIN Data Source for hp Scanjet Scanner 1.00.0000 (InstallShield_{BA3B4501-0AEE-4C0F-BDC3-2B58D4740A1C})
version: 16777216
version (major): 1
estimated size: 764
install date: 20060808
install source: c:\col4827\
uninstall cmd: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{BA3B4501-0AEE-4C0F-BDC3-2B58D4740A1C} /l1033
publisher: Hewlett-Packard
comments: Uninstalls hp TWAIN Data Source for hp Scanjet scanner
contact: Customer Support Department
help link: http://www.hp.com/help
help telephone: 1

Internet Download Manager (Internet Download Manager)
uninstall cmd: C:\Program Files\Internet Download Manager\Uninstall.exe

Windows XP Hotfix - KB873339 20041117.092459 (KB873339)
uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=873339

(KB884016)

(KB884267)

(KB885353)

Windows XP Hotfix - KB885835 20041027.181713 (KB885835)
uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=885835

Windows XP Hotfix - KB885836 20041028.173203 (KB885836)
uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=885836

Windows XP Hotfix - KB886185 20041021.090540 (KB886185)
uninstall cmd: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=886185

(KB886612)

(KB887078)

Windows XP Hotfix - KB887472 20041014.162858 (KB887472)
uninstall cmd: C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=887472

(KB887626)

Windows XP Hotfix - KB888113 20041116.131036 (KB888113)
uninstall cmd: C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=888113

Windows XP Hotfix - KB888302 20041207.111426 (KB888302)
uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=888302

(KB888656)

(KB889858)

Security Update for Windows XP (KB890046) 1 (KB890046)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=890046

Windows XP Hotfix - KB890859 1 (KB890859)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=890859

Windows Media Format SDK Hotfix - KB891122 (KB891122)
uninstall cmd: "C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=891122

Windows XP Hotfix - KB891781 20050110.165439 (KB891781)
uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=891781

(KB892313)

(KB893240)

(KB893241)

Security Update for Windows XP (KB893756) 1 (KB893756)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=893756

(KB893803)

Windows Installer 3.1 (KB893803) 3.1 (KB893803v2)
uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://go.microsoft.com/fwlink/?LinkId=42467

Update for Windows XP (KB894391) 1 (KB894391)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=894391

(KB895181)

(KB895316)

(KB895572)

Hotfix for Windows XP (KB896344) 2 (KB896344)
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896344$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=896344

Security Update for Windows XP (KB896358) 1 (KB896358)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=896358

Security Update for Windows XP (KB896423) 1 (KB896423)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=896423

Security Update for Windows XP (KB896424) 1 (KB896424)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=896424

Security Update for Windows XP (KB896428) 1 (KB896428)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=896428

(KB897586)

Update for Windows XP (KB898461) 1 (KB898461)
install date: 20060711
uninstall cmd: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=898461

(KB898549)

Security Update for Windows XP (KB899587) 1 (KB899587)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=899587

Security Update for Windows XP (KB899589) 1 (KB899589)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=899589

Security Update for Windows XP (KB899591) 1 (KB899591)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=899591

(KB900399)

Update for Windows XP (KB900485) 2 (KB900485)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=900485

Security Update for Windows XP (KB900725) 1 (KB900725)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=900725

Security Update for Windows XP (KB901017) 1 (KB901017)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=901017

Security Update for Windows XP (KB901214) 1 (KB901214)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=901214

(KB902344)

Security Update for Windows XP (KB902400) 1 (KB902400)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=902400

Security Update for Windows XP (KB904706) 2 (KB904706)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=904706

Update for Windows XP (KB904942) 2 (KB904942)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=904942

Security Update for Windows XP (KB905414) 1 (KB905414)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=905414

Security Update for Windows XP (KB905749) 1 (KB905749)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=905749

(KB907658)

Security Update for Windows XP (KB908519) 1 (KB908519)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=908519

Update for Windows XP (KB908531) 2 (KB908531)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=908531

Update for Windows XP (KB910437) 1 (KB910437)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=910437

Update for Windows XP (KB911280) 2 (KB911280)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=911280

Security Update for Windows XP (KB911562) 1 (KB911562)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=911562

Security Update for Windows Media Player (KB911564) (KB911564)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=911564

Security Update for Windows Media Player 10 (KB911565) (KB911565)
install date: 20060722
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=911565

Security Update for Windows XP (KB911567) 1 (KB911567)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=911567

(KB911854)

Security Update for Windows XP (KB911927) 1 (KB911927)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=911927

Security Update for Windows XP (KB912919) 1 (KB912919)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=912919

Security Update for Windows XP (KB913433) (KB913433)
uninstall cmd: C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB913433.inf
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=913433

Security Update for Windows XP (KB913580) 1 (KB913580)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=913580

Security Update for Windows XP (KB914388) 1 (KB914388)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=914388

Security Update for Windows XP (KB914389) 1 (KB914389)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=914389

Hotfix for Windows XP (KB914440) 10 (KB914440)
install date: 20061005
uninstall cmd: "C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=914440

Hotfix for Windows XP (KB915865) 10 (KB915865)
install date: 20061005
uninstall cmd: "C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=915865

Security Update for Windows XP (KB916281) 1 (KB916281)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=916281

Update for Windows XP (KB916595) 1 (KB916595)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=916595

Security Update for Windows XP (KB917159) 1 (KB917159)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=917159

Security Update for Microsoft .NET Framework 2.0 (KB917283) 1 (KB917283.T1_1ToU93_1)
uninstall cmd: C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {967B098A-042D-4367-BAC9-8BC11684174F} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
publisher: Microsoft Corporation
help link: http://support.microsoft.com/kb/917283

Security Update for Windows XP (KB917344) 1 (KB917344)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=917344

Security Update for Windows XP (KB917422) 1 (KB917422)
install date: 20060813
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=917422

Security Update for Windows Media Player 10 (KB917734) (KB917734_WMP10)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=917734

Security Update for Windows Media Player 9 (KB917734) (KB917734_WMP9)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=917734

Security Update for Windows XP (KB917953) 1 (KB917953)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=917953

Security Update for Windows XP (KB918439) 1 (KB918439)
install date: 20060714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=918439

Security Update for Windows XP (KB918899) 1 (KB918899)
install date: 20061005
uninstall cmd: "C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=918899

Security Update for Windows XP (KB919007) 1 (KB919007)
install date: 20060915
uninstall cmd: "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=919007

Security Update for Windows XP (KB920213) 1 (KB920213)
install date: 20061115
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=920213

Security Update for Windows XP (KB920214) 1 (KB920214)
install date: 20060813
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=920214

Security Update for Windows XP (KB920670) 1 (KB920670)
install date: 20060813
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=920670

Security Update for Windows XP (KB920683) 1 (KB920683)
install date: 20060813
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=920683

Security Update for Windows XP (KB920685) 1 (KB920685)
install date: 20060915
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=920685

Update for Windows XP (KB920872) 1 (KB920872)
install date: 20060915
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=920872

Security Update for Windows XP (KB921398) 1 (KB921398)
install date: 20060813
uninstall cmd: "C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=921398

Security Update for Windows XP (KB921883) 1 (KB921883)
install date: 20060813
uninstall cmd: "C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=921883

Update for Windows XP (KB922582) 1 (KB922582)
install date: 20060915
uninstall cmd: "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=922582

Security Update for Windows XP (KB922616) 1 (KB922616)
install date: 20060813
uninstall cmd: "C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=922616

Security Update for Microsoft .NET Framework 2.0 (KB922770) 1 (KB922770.T1_1ToU168_1)
uninstall cmd: C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {0E92DD42-76F5-4EF2-B381-F9C1D72BE23D} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
publisher: Microsoft Corporation
help link: http://support.microsoft.com/kb/922770

Security Update for Windows XP (KB922819) 1 (KB922819)
install date: 20061012
uninstall cmd: "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=922819

Security Update for Windows XP (KB923191) 1 (KB923191)
install date: 20061012
uninstall cmd: "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=923191

Security Update for Windows XP (KB923414) 1 (KB923414)
install date: 20061012
uninstall cmd: "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=923414

Security Update for Windows XP (KB923694) 1 (KB923694)
install date: 20061213
uninstall cmd: "C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=923694

Security Update for Windows XP (KB923980) 1 (KB923980)
install date: 20061115
uninstall cmd: "C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=923980

Security Update for Windows XP (KB924191) 1 (KB924191)
install date: 20061012
uninstall cmd: "C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=924191

Security Update for Windows XP (KB924270) 1 (KB924270)
install date: 20061115
uninstall cmd: "C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=924270

Security Update for Windows XP (KB924496) 1 (KB924496)
install date: 20061012
uninstall cmd: "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=924496

Security Update for Windows Media Player 6.4 (KB925398) (KB925398_WMP64)
install date: 20061213
uninstall cmd: "C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=925398

Security Update for Windows XP (KB925486) 1 (KB925486)
install date: 20060926
uninstall cmd: "C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=925486

Hotfix for Windows XP (KB926239) 2 (KB926239)
install date: 20061201
uninstall cmd: "C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=926239

Security Update for Windows XP (KB926255) 1 (KB926255)
install date: 20061213
uninstall cmd: "C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=926255

Hotfix for Windows XP (KB928388) 1 (KB928388)
install date: 20061219
uninstall cmd: "C:\WINDOWS\$NtUninstallKB928388$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=928388

K-Lite Mega Codec Pack 1.25 1.25 (KLiteCodecPack_is1)
install location: C:\Program Files\K-Lite Codec Pack\
uninstall cmd: "C:\Program Files\K-Lite Codec Pack\unins000.exe"

LiveReg (Symantec Corporation) 3.0.0 (LiveReg)
install location: C:\Program Files\Common Files\Symantec Shared\LiveReg
uninstall cmd: C:\Program Files\Common Files\Symantec Shared\LiveReg\VcSetup.exe /REMOVE
publisher: Symantec Corporation

LiveUpdate 2.5 (Symantec Corporation) 2.5.55.0 (LiveUpdate)
install location: C:\Program Files\Symantec\LiveUpdate
uninstall cmd: C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
publisher: Symantec Corporation

Microsoft .NET Framework 1.1 Hotfix (KB886903) (M886903)
uninstall cmd: "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"

Microsoft .NET Framework 1.0 Hotfix (KB886906) (M886906)
uninstall cmd: "C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\Updates\M886906\M886906Uninstall.msp"

MailFrontier Desktop 4.8.2.7565 (MailFrontier Desktop)
uninstall cmd: C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\UNWISE.EXE C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\INSTMLF.LOG
publisher: MailFrontier

Microsoft .NET Framework 1.1 (Microsoft .NET Framework 1.1 (1033))
uninstall cmd: msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm

Microsoft .NET Framework 2.0 (Microsoft .NET Framework 2.0)
install location: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727&#
CONTINUED: Service (registry key): CryptSvc Display name: Cryptographic Services Description: Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Depends On services: RpcSs Service (registry key): ctljystk Display name: Creative SBLive! Gameport Image path: system32\DRIVERS\ctljystk.sys Image size: 3712 Image MD5: 71007BD2E1E26927FE3E4EB00C0BEEDF Start: 3 Type: 1 Error Control: 0 Service (registry key): ctlntsvc Start: 0 Type: 0 Error Control: 0 Service (registry key): ctlsb16 Display name: Creative SB16/AWE32/AWE64 Driver (WDM) Image path: system32\drivers\ctlsb16.sys Image size: 96256 Image MD5: E2B1AEDB62845581D848037F0A614EE6 Start: 3 Type: 1 Error Control: 1 Service (registry key): dac2w2k Start: 4 Type: 1 Error Control: 0 Service (registry key): dac960nt Start: 4 Type: 1 Error Control: 1 Service (registry key): DcomLaunch Display name: DCOM Server Process Launcher Description: Provides launch functionality for DCOM services. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost -k DcomLaunch Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Service (registry key): Dhcp Display name: DHCP Client Description: Manages network configuration by registering and updating IP addresses and DNS names. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Depends On services: Tcpip,Afd,NetBT Service (registry key): Disk Display name: Disk Driver Image path: system32\DRIVERS\disk.sys Image size: 36352 Image MD5: 00CA44E4534865F8A3B64F7C0984BFF0 Start: 0 Type: 1 Error Control: 1 Depends On group: "SCSI miniport" Service (registry key): dmadmin Display name: Logical Disk Manager Administrative Service Description: Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. Object name: LocalSystem Image path: %SystemRoot%\System32\dmadmin.exe /com Image size: 224768 Image MD5: 554C7CB178FE3BD12450B81AD63ADBC3 Start: 3 Type: 32 Error Control: 1 Depends On services: RpcSs,PlugPlay,DmServer Service (registry key): dmboot Image path: System32\drivers\dmboot.sys Image size: 799744 Image MD5: C0FBB516E06E243F0CF31F597E7EBF7D Start: 4 Type: 1 Error Control: 1 Service (registry key): dmio Display name: Logical Disk Manager Driver Image path: System32\drivers\dmio.sys Image size: 153344 Image MD5: F5E7B358A732D09F4BCF2824B88B9E28 Start: 0 Type: 1 Error Control: 1 Service (registry key): dmload Image path: System32\drivers\dmload.sys Image size: 5888 Image MD5: E9317282A63CA4D188C0DF5E09C6AC5F Start: 0 Type: 1 Error Control: 1 Service (registry key): dmserver Display name: Logical Disk Manager Description: Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Depends On services: RpcSs,PlugPlay Service (registry key): dmsmbios Display name: dmsmbios Image path: \??\C:\WINDOWS\system32\dmsmbios.sys Image size: 16480 Image MD5: 43CB4F8C4C110F06E5B0A1F15787A081 Start: 2 Type: 1 Error Control: 1 Service (registry key): DMusic Display name: Microsoft Kernel DLS Syntheiszer Image path: system32\drivers\DMusic.sys Image size: 52864 Image MD5: A6F881284AC1150E37D9AE47FF601267 Start: 3 Type: 1 Error Control: 1 Service (registry key): Dnscache Display name: DNS Client Description: Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: NT AUTHORITY\NetworkService Image path: %SystemRoot%\system32\svchost.exe -k NetworkService Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Depends On services: Tcpip Service (registry key): dpti2o Start: 4 Type: 1 Error Control: 1 Service (registry key): drmkaud Display name: Microsoft Kernel DRM Audio Descrambler Image path: system32\drivers\drmkaud.sys Image size: 2944 Image MD5: 1ED4DBBAE9F5D558DBBA4CC450E3EB2E Start: 3 Type: 1 Error Control: 1 Service (registry key): drvmcdb Image path: system32\DRIVERS\drvmcdb.sys Image size: 88016 Image MD5: 7DF2E645FBDA7CDE94FCABBA7F0DE4C2 Start: 0 Type: 1 Error Control: 1 Service (registry key): DVDVRRdr_xp Start: 1 Type: 2 Error Control: 1 Service (registry key): E100B Display name: Intel® PRO Adapter Driver Image path: system32\DRIVERS\e100b325.sys Image size: 154112 Image MD5: 7D91DC6342248369F94D6EBA0CF42E99 Start: 3 Type: 1 Error Control: 1 Service (registry key): ElbyCDIO Display name: ElbyCDIO Driver Image path: System32\Drivers\ElbyCDIO.sys Image size: 8064 Image MD5: FA13264EEA448B2E1B3A844AE4F75C7A Start: 2 Type: 1 Error Control: 1 Service (registry key): ElbyDelay Display name: ElbyDelay Image path: System32\Drivers\ElbyDelay.sys Image size: 4608 Image MD5: DF9957DB3BFE5136AAD3C2C101806C98 Start: 3 Type: 1 Error Control: 1 Service (registry key): emu10k Display name: Creative SB Live! (WDM) Image path: system32\drivers\emu10k1m.sys Image size: 283904 Image MD5: 01F83E1B5DCE05F5CB7D99113CA9E890 Start: 3 Type: 1 Error Control: 1 Service (registry key): emu10k1 Display name: Creative Interface Manager Driver (WDM) Image path: system32\drivers\ctlfacem.sys Image size: 6912 Image MD5: 7FFA171CCE6A8BFC774862A578BA39A2 Start: 3 Type: 1 Error Control: 1 Service (registry key): ERSvc Display name: Error Reporting Service Description: Allows error reporting for services and applictions running in non-standard environments. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 4 Type: 32 Error Control: 0 Depends On services: RpcSs Service (registry key): Eventlog Display name: Event Log Description: Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. Object name: LocalSystem Image path: %SystemRoot%\system32\services.exe Image size: 108032 Image MD5: C6CE6EEC82F187615D1002BB3BB50ED4 Start: 2 Type: 32 Error Control: 1 Service (registry key): EventSystem Display name: COM+ Event System Description: Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: C:\WINDOWS\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 3 Type: 32 Error Control: 1 Depends On services: RPCSS Service (registry key): Fastfat Start: 4 Type: 2 Error Control: 1 Service (registry key): FastUserSwitchingCompatibility Display name: Fast User Switching Compatibility Description: Provides management for applications that require assistance in a multiple user environment. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 3 Type: 32 Error Control: 1 Depends On services: TermService Service (registry key): Fdc Start: 1 Type: 1 Error Control: 0 Service (registry key): Fips Start: 1 Type: 1 Error Control: 1 Service (registry key): Flpydisk Start: 1 Type: 1 Error Control: 0 Service (registry key): FltMgr Display name: FltMgr Description: File System Filter Manager Driver Image path: system32\DRIVERS\fltMgr.sys Image size: 128896 Image MD5: 3D234FB6D6EE875EB009864A299BEA29 Start: 0 Type: 2 Error Control: 1 Service (registry key): Fs_Rec Start: 1 Type: 8 Error Control: 0 Service (registry key): Ftdisk Display name: Volume Manager Driver Image path: system32\DRIVERS\ftdisk.sys Image size: 125056 Image MD5: 6AC26732762483366C3969C9E4D2259D Start: 0 Type: 1 Error Control: 1 Service (registry key): gameenum Display name: Game Port Enumerator Image path: system32\DRIVERS\gameenum.sys Image size: 10624 Image MD5: 5F92FD09E5610A5995DA7D775EADCD12 Start: 3 Type: 1 Error Control: 0 Service (registry key): GearAspiWDM Display name: GearAspiWDM Start: 1 Type: 1 Error Control: 1 Service (registry key): GEARSecurity Display name: GEARSecurity Object name: LocalSystem Image path: %SystemRoot%\System32\GEARSec.exe Image size: 53248 Image MD5: B6E01969246FCB67470E87E6957EE147 Start: 2 Type: 16 Error Control: 0 Service (registry key): Gpc Display name: Generic Packet Classifier Description: Generic Packet Classifier Image path: system32\DRIVERS\msgpc.sys Image size: 35072 Image MD5: C0F1D4A21DE5A415DF8170616703DEBF Start: 3 Type: 1 Error Control: 1 Service (registry key): helpsvc Display name: Help and Support Description: Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 3 Type: 32 Error Control: 1 Depends On services: RPCSS Service (registry key): HidServ Display name: HID Input Service Description: Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Depends On services: RpcSs Service (registry key): hidusb Display name: Microsoft HID Class Driver Image path: system32\DRIVERS\hidusb.sys Image size: 9600 Image MD5: 1DE6783B918F540149AA69943BDFEBA8 Start: 3 Type: 1 Error Control: 0 Service (registry key): hpn Start: 4 Type: 1 Error Control: 1 Service (registry key): HTTP Display name: HTTP Description: This service implements the hypertext transfer protocol (HTTP). If this service is disabled, any services that explicitly depend on it will fail to start. Image path: System32\Drivers\HTTP.sys Image size: 262784 Image MD5: CB77BB47E67E84DEB17BA29632501730 Start: 3 Type: 1 Error Control: 1 Service (registry key): HTTPFilter Display name: HTTP SSL Description: This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k HTTPFilter Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 3 Type: 32 Error Control: 1 Depends On services: HTTP Service (registry key): i2omgmt Start: 1 Type: 1 Error Control: 1 Service (registry key): i2omp Start: 4 Type: 1 Error Control: 1 Service (registry key): i8042prt Display name: i8042 Keyboard and PS/2 Mouse Port Driver Image path: system32\DRIVERS\i8042prt.sys Image size: 52736 Image MD5: 5502B58EEF7486EE6F93F3F164DCB808 Start: 1 Type: 1 Error Control: 1 Service (registry key): IdeBusDr Image path: system32\DRIVERS\IdeBusDr.sys Image size: 13891 Image MD5: 791F0829DE88DD0CA77192F0DFAD03B6 Start: 0 Type: 1 Error Control: 1 Service (registry key): IdeChnDr Display name: Intel® Ultra ATA Controller Image path: system32\DRIVERS\IdeChnDr.sys Image size: 101431 Image MD5: 7D2B8BE9E89628663C1FB571F7C34062 Start: 0 Type: 1 Error Control: 1 Service (registry key): IDriverT Display name: InstallDriver Table Manager Description: Provides support for the Running Object Table for InstallShield Drivers Object name: LocalSystem Image path: "C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" Image size: 69632 Image MD5: 1CF03C69B49ACB70C722DF92755C0C8C Start: 3 Type: 16 Error Control: 0 Service (registry key): Imapi Display name: CD-Burning Filter Driver Image path: system32\DRIVERS\imapi.sys Image size: 41856 Image MD5: F8AA320C6A0409C0380E5D8A99D76EC6 Start: 1 Type: 1 Error Control: 1 Service (registry key): ImapiService Display name: IMAPI CD-Burning COM Service Description: Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: C:\WINDOWS\system32\imapi.exe Image size: 150016 Image MD5: FA788520BCAC0F5D9D5CDE5615C0D931 Start: 3 Type: 16 Error Control: 1 Service (registry key): imonNT Display name: Intel® Active Monitor Object name: LocalSystem Image path: C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe Image size: 106496 Image MD5: 863952BCB5E488ECBBEB7D177CB699BC Start: 2 Type: 272 Error Control: 1 Depends On services: SMBusP,SIODRV Service (registry key): inetaccs Start: 0 Type: 0 Error Control: 0 Service (registry key): ini910u Start: 4 Type: 1 Error Control: 1 Service (registry key): Inport Start: 0 Type: 0 Error Control: 0 Service (registry key): IntelIde Image path: system32\DRIVERS\intelide.sys Image size: 5504 Image MD5: 2D722B2B54AB55B2FA475EB58D7B2AAD Start: 0 Type: 1 Error Control: 1 Service (registry key): intelppm Display name: Intel Processor Driver Image path: system32\DRIVERS\intelppm.sys Image size: 36096 Image MD5: 279FB78702454DFF2BB445F238C048D2 Start: 1 Type: 1 Error Control: 1 Service (registry key): Ip6Fw Display name: IPv6 Windows Firewall Driver Description: Provides intrusion prevention service for a home or small office network. Image path: system32\DRIVERS\Ip6Fw.sys Image size: 29056 Image MD5: 4448006B6BC60E6C027932CFC38D6855 Start: 3 Type: 1 Error Control: 1 Service (registry key): IpFilterDriver Display name: IP Traffic Filter Driver Description: IP Traffic Filter Driver Image path: system32\DRIVERS\ipfltdrv.sys Image size: 32896 Image MD5: 731F22BA402EE4B62748ADAF6363C182 Start: 3 Type: 1 Error Control: 1 Depends On services: Tcpip Service (registry key): IpInIp Display name: IP in IP Tunnel Driver Description: IP in IP Tunnel Driver Image path: system32\DRIVERS\ipinip.sys Image size: 20992 Image MD5: E1EC7F5DA720B640CD8FB8424F1B14BB Start: 3 Type: 1 Error Control: 1 Depends On services: Tcpip Service (registry key): IpNat Display name: IP Network Address Translator Description: IP Network Address Translator Image path: system32\DRIVERS\ipnat.sys Image size: 134912 Image MD5: E2168CBC7098FFE963C6F23F472A3593 Start: 3 Type: 1 Error Control: 1 Depends On services: Tcpip Service (registry key): IPSec Display name: IPSEC driver Description: IPSEC driver Image path: system32\DRIVERS\ipsec.sys Image size: 74752 Image MD5: 64537AA5C003A6AFEEE1DF819062D0D1 Start: 1 Type: 1 Error Control: 1 Service (registry key): IRENUM Display name: IR Enumerator Service Image path: system32\DRIVERS\irenum.sys Image size: 11264 Image MD5: 50708DAA1B1CBB7D6AC1CF8F56A24410 Start: 3 Type: 1 Error Control: 1 Service (registry key): ISAPISearch Start: 0 Type: 0 Error Control: 0 Service (registry key): isapnp Display name: PnP ISA/EISA Bus Driver Image path: system32\DRIVERS\isapnp.sys Image size: 35840 Image MD5: E504F706CCB699C2596E9A3DA1596E87 Start: 0 Type: 1 Error Control: 3 Service (registry key): Kbdclass Display name: Keyboard Class Driver Image path: system32\DRIVERS\kbdclass.sys Image size: 24576 Image MD5: EBDEE8A2EE5393890A1ACEE971C4C246 Start: 1 Type: 1 Error Control: 1 Service (registry key): kmixer Display name: Microsoft Kernel Wave Audio Mixer Image path: system32\drivers\kmixer.sys Image size: 172416 Image MD5: BA5DEDA4D934E6288C2F66CAF58D2562 Start: 3 Type: 1 Error Control: 1 Service (registry key): KSecDD Start: 0 Type: 1 Error Control: 1 Service (registry key): lanmanserver Display name: Server Description: Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Service (registry key): lanmanworkstation Display name: Workstation Description: Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Service (registry key): lbrtfdc Start: 1 Type: 1 Error Control: 0 Service (registry key): ldap Start: 0 Type: 0 Error Control: 0 Service (registry key): LicenseService Start: 0 Type: 0 Error Control: 0 Service (registry key): LmHosts Display name: TCP/IP NetBIOS Helper Description: Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. Object name: NT AUTHORITY\LocalService Image path: %SystemRoot%\system32\svchost.exe -k LocalService Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Depends On services: NetBT,Afd Service (registry key): LVUSBSta Display name: Logitech USB Monitor Filter Image path: system32\drivers\lvusbsta.sys Start: 3 Type: 1 Error Control: 1 Service (registry key): MaxtorFrontPanel1 Display name: Maxtor 1394 Storage Front Panel Driver Description: Buttons, lights and configuration facility for Maxtor 1394 Personal Storage products. Image path: system32\DRIVERS\mxofwfp.sys Image size: 15104 Image MD5: E5046C403051B2F9594EF0909E9AA50C Start: 3 Type: 1 Error Control: 1 Service (registry key): Messenger Display name: Messenger Description: Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 4 Type: 32 Error Control: 1 Depends On services: LanmanWorkstation,NetBIOS,PlugPlay,RpcSS Service (registry key): mnmdd Start: 1 Type: 1 Error Control: 0 Service (registry key): mnmsrvc Display name: NetMeeting Remote Desktop Sharing Description: Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: C:\WINDOWS\system32\mnmsrvc.exe Image size: 32768 Image MD5: F6415361201915B9FE3896B0E4E724FF Start: 4 Type: 272 Error Control: 1 Service (registry key): Modem Start: 3 Type: 1 Error Control: 0 Service (registry key): MODEMCSA Display name: Unimodem Streaming Filter Device Image path: system32\drivers\MODEMCSA.sys Image size: 16128 Image MD5: 1992E0D143B09653AB0F9C5E04B0FD65 Start: 3 Type: 1 Error Control: 1 Service (registry key): Mouclass Display name: Mouse Class Driver Image path: system32\DRIVERS\mouclass.sys Image size: 23040 Image MD5: 34E1F0031153E491910E12551400192C Start: 1 Type: 1 Error Control: 1 Service (registry key): mouhid Display name: Mouse HID Driver Image path: system32\DRIVERS\mouhid.sys Image size: 12160 Image MD5: B1C303E17FB9D46E87A98E4BA6769685 Start: 3 Type: 1 Error Control: 0 Service (registry key): MountMgr Start: 0 Type: 1 Error Control: 1 Service (registry key): mraid35x Start: 4 Type: 1 Error Control: 1 Service (registry key): MRxDAV Display name: WebDav Client Redirector Description: WebDav Client Redirector Image path: system32\DRIVERS\mrxdav.sys Image size: 181248 Image MD5: 46EDCC8F2DB2F322C24F48785CB46366 Start: 3 Type: 2 Error Control: 1 Service (registry key): MRxSmb Display name: MRXSMB Description: MRXSMB Image path: system32\DRIVERS\mrxsmb.sys Image size: 453120 Image MD5: 025AF03CE51645C62F3B6907A7E2BE5E Start: 1 Type: 2 Error Control: 1 Service (registry key): MSDTC Display name: Distributed Transaction Coordinator Description: Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: NT AUTHORITY\NetworkService Image path: C:\WINDOWS\system32\msdtc.exe Image size: 20480 Image MD5: 92C2B5285FEAAF4B8A3485A205B2544F Start: 3 Type: 16 Error Control: 1 Depends On services: RPCSS,SamSS Service (registry key): MSDV Display name: Microsoft DV Camera and VCR Image path: system32\DRIVERS\msdv.sys Image size: 51328 Image MD5: 6DD721DFD2648F3F6D5808B5BA6CB095 Start: 3 Type: 1 Error Control: 1 Service (registry key): Msfs Start: 1 Type: 2 Error Control: 1 Service (registry key): MSIServer Display name: Windows Installer Description: Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: C:\WINDOWS\system32\msiexec.exe /V Image size: 211968 Image MD5: E48B5134963D04EB5A9B81D878CF6994 Start: 3 Type: 32 Error Control: 1 Depends On services: RpcSs Service (registry key): MSKSSRV Display name: Microsoft Streaming Service Proxy Image path: system32\drivers\MSKSSRV.sys Image size: 7552 Image MD5: AE431A8DD3C1D0D0610CDBAC16057AD0 Start: 3 Type: 1 Error Control: 1 Service (registry key): MSPCLOCK Display name: Microsoft Streaming Clock Proxy Image path: system32\drivers\MSPCLOCK.sys Image size: 5376 Image MD5: 13E75FEF9DFEB08EEDED9D0246E1F448 Start: 3 Type: 1 Error Control: 1 Service (registry key): MSPQM Display name: Microsoft Streaming Quality Manager Proxy Image path: system32\drivers\MSPQM.sys Image size: 4992 Image MD5: 1988A33FF19242576C3D0EF9CE785DA7 Start: 3 Type: 1 Error Control: 1 Service (registry key): mssmbios Display name: Microsoft System Management BIOS Driver Image path: system32\DRIVERS\mssmbios.sys Image size: 15488 Image MD5: 469541F8BFD2B32659D5D463A6714BCE Start: 3 Type: 1 Error Control: 1 Service (registry key): MSTEE Display name: Microsoft Streaming Tee/Sink-to-Sink Converter Image path: system32\drivers\MSTEE.sys Image size: 5504 Image MD5: BF13612142995096AB084F2DB7F40F77 Start: 3 Type: 1 Error Control: 1 Service (registry key): Mup Display name: Mup Start: 0 Type: 2 Error Control: 1 Service (registry key): MXOFX Display name: USB Storage Adapter FX (MXO) Image path: system32\DRIVERS\MXOFX.SYS Image size: 32256 Image MD5: 4F598A92F65945699599B19F16AC6E33 Start: 3 Type: 1 Error Control: 1 Service (registry key): NABTSFEC Display name: NABTS/FEC VBI Codec Image path: system32\DRIVERS\NABTSFEC.sys Image size: 85376 Image MD5: 5C8DC6429C43DC6177C1FA5B76290D1A Start: 3 Type: 1 Error Control: 1 Service (registry key): NDIS Display name: NDIS System Driver Start: 0 Type: 1 Error Control: 1 Service (registry key): NdisIP Display name: Microsoft TV/Video Connection Image path: system32\DRIVERS\NdisIP.sys Image size: 10880 Image MD5: 520CE427A8B298F54112857BCF6BDE15 Start: 3 Type: 1 Error Control: 1 Service (registry key): NdisTapi Display name: Remote Access NDIS TAPI Driver Description: Remote Access NDIS TAPI Driver Image path: system32\DRIVERS\ndistapi.sys Image size: 9600 Image MD5: 08D43BBDACDF23F34D79E44ED35C1B4C Start: 3 Type: 1 Error Control: 1 Service (registry key): Ndisuio Display name: NDIS Usermode I/O Protocol Description: NDIS Usermode I/O Protocol Image path: system32\DRIVERS\ndisuio.sys Image size: 12928 Image MD5: 34D6CD56409DA9A7ED573E1C90A308BF Start: 3 Type: 1 Error Control: 1 Service (registry key): NdisWan Display name: Remote Access NDIS WAN Driver Description: Remote Access NDIS WAN Driver Image path: system32\DRIVERS\ndiswan.sys Image size: 91776 Image MD5: 0B90E255A9490166AB368CD55A529893 Start: 3 Type: 1 Error Control: 1 Service (registry key): NDProxy Start: 3 Type: 1 Error Control: 1 Service (registry key): NetBIOS Display name: NetBIOS Interface Description: NetBIOS Interface Image path: system32\DRIVERS\netbios.sys Image size: 34560 Image MD5: 3A2ACA8FC1D7786902CA434998D7CEB4 Start: 1 Type: 2 Error Control: 1 Service (registry key): NetBT Display name: NetBios over Tcpip Description: NetBios over Tcpip Image path: system32\DRIVERS\netbt.sys Image size: 162816 Image MD5: 0C80E410CD2F47134407EE7DD19CC86B Start: 1 Type: 1 Error Control: 1 Depends On services: Tcpip Service (registry key): NetDDE Display name: Network DDE Description: Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\system32\netdde.exe Image size: 111104 Image MD5: 05AFB5AD06462257BEA7495283C86D50 Start: 4 Type: 32 Error Control: 1 Depends On services: NetDDEDSDM Service (registry key): NetDDEdsdm Display name: Network DDE DSDM Description: Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\system32\netdde.exe Image size: 111104 Image MD5: 05AFB5AD06462257BEA7495283C86D50 Start: 4 Type: 32 Error Control: 1 Service (registry key): Netlogon Display name: Net Logon Description: Supports pass-through authentication of account logon events for computers in a domain. Object name: LocalSystem Image path: %SystemRoot%\system32\lsass.exe Image size: 13312 Image MD5: 84885F9B82F4D55C6146EBF6065D75D2 Start: 3 Type: 32 Error Control: 1 Depends On services: LanmanWorkstation Service (registry key): Netman Display name: Network Connections Description: Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 3 Type: 288 Error Control: 1 Depends On services: RpcSs Service (registry key): NIC1394 Display name: 1394 Net Driver Image path: system32\DRIVERS\nic1394.sys Image size: 61824 Image MD5: 5C5C53DB4FEF16CF87B9911C7E8C6FBC Start: 3 Type: 1 Error Control: 1 Service (registry key): Nla Display name: Network Location Awareness (NLA) Description: Collects and stores network configuration and location information, and notifies applications when this information changes. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 3 Type: 32 Error Control: 1 Depends On services: Tcpip,Afd Service (registry key): Npfs Start: 1 Type: 2 Error Control: 1 Service (registry key): Ntfs Start: 4 Type: 2 Error Control: 1 Service (registry key): NtLmSsp Display name: NT LM Security Support Provider Description: Provides security to remote procedure call (RPC) programs that use transports other than named pipes. Object name: LocalSystem Image path: %SystemRoot%\system32\lsass.exe Image size: 13312 Image MD5: 84885F9B82F4D55C6146EBF6065D75D2 Start: 3 Type: 32 Error Control: 1 Service (registry key): NtmsSvc Display name: Removable Storage Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 3 Type: 32 Error Control: 1 Depends On services: RpcSs Service (registry key): Null Start: 1 Type: 1 Error Control: 1 Service (registry key): nv Image path: system32\DRIVERS\nv4_mini.sys Image size: 3994624 Image MD5: BA1B732C1A70CFEA0C1B64F2850BF44F Start: 3 Type: 1 Error Control: 0 Service (registry key): NVSvc Display name: NVIDIA Display Driver Service Description: Provides system and desktop level support to the NVIDIA display driver Object name: LocalSystem Image path: %SystemRoot%\system32\nvsvc32.exe Image size: 159810 Image MD5: 0FEBE37DB6650FAA5965C00545009D1D Start: 4 Type: 16 Error Control: 1 Service (registry key): NwlnkFlt Display name: IPX Traffic Filter Driver Description: IPX Traffic Filter Driver Image path: system32\DRIVERS\nwlnkflt.sys Image size: 12416 Image MD5: B305F3FAD35083837EF46A0BBCE2FC57 Start: 3 Type: 1 Error Control: 1 Depends On services: NwlnkFwd Service (registry key): NwlnkFwd Display name: IPX Traffic Forwarder Driver Description: IPX Traffic Forwarder Driver Image path: system32\DRIVERS\nwlnkfwd.sys Image size: 32512 Image MD5: C99B3415198D1AAB7227F2C88FD664B9 Start: 3 Type: 1 Error Control: 1 Service (registry key): ohci1394 Display name: VIA OHCI Compliant IEEE 1394 Host Controller Image path: system32\DRIVERS\ohci1394.sys Image size: 61056 Image MD5: 0951DB8E5823EA366B0E408D71E1BA2A Start: 0 Type: 1 Error Control: 1 Service (registry key): ose Display name: Office Source Engine Description: Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports. Object name: LocalSystem Image path: "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" Image size: 89136 Image MD5: 7A56CF3E3F12E8AF599963B16F50FB6A Start: 3 Type: 16 Error Control: 1 Service (registry key): Outlook Start: 0 Type: 0 Error Control: 0 Service (registry key): Parport Start: 3 Type: 1 Error Control: 0 Service (registry key): PartMgr Start: 0 Type: 1 Error Control: 1 Service (registry key): ParVdm Start: 2 Type: 1 Error Control: 0 Depends On services: Parport Depends On group: "Parallel arbitrator" Service (registry key): PCI Display name: PCI Bus Driver Image path: system32\DRIVERS\pci.sys Image size: 68224 Image MD5: 8086D9979234B603AD5BC2F5D890B234 Start: 0 Type: 1 Error Control: 3 Service (registry key): PCIDump Start: 1 Type: 1 Error Control: 0 Service (registry key): PCIIde Start: 4 Type: 1 Error Control: 1 Service (registry key): Pcmcia Start: 4 Type: 1 Error Control: 1 Service (registry key): PDCOMP Start: 3 Type: 1 Error Control: 0 Service (registry key): PDFRAME Start: 3 Type: 1 Error Control: 0 Service (registry key): PDRELI Start: 3 Type: 1 Error Control: 0 Service (registry key): PDRFRAME Start: 3 Type: 1 Error Control: 0 Service (registry key): perc2 Start: 4 Type: 1 Error Control: 1 Service (registry key): perc2hib Start: 4 Type: 1 Error Control: 1 Service (registry key): PerfDisk Start: 0 Type: 0 Error Control: 0 Service (registry key): PerfNet Start: 0 Type: 0 Error Control: 0 Service (registry key): PerfOS Start: 0 Type: 0 Error Control: 0 Service (registry key): PerfProc Start: 0 Type: 0 Error Control: 0 Service (registry key): PlugPlay Display name: Plug and Play Description: Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. Object name: LocalSystem Image path: %SystemRoot%\system32\services.exe Image size: 108032 Image MD5: C6CE6EEC82F187615D1002BB3BB50ED4 Start: 2 Type: 32 Error Control: 1 Service (registry key): PolicyAgent Display name: IPSEC Services Description: Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. Object name: LocalSystem Image path: %SystemRoot%\system32\lsass.exe Image size: 13312 Image MD5: 84885F9B82F4D55C6146EBF6065D75D2 Start: 2 Type: 32 Error Control: 1 Depends On services: RPCSS,Tcpip,IPSec Service (registry key): PptpMiniport Display name: WAN Miniport (PPTP) Description: WAN Miniport (PPTP) Image path: system32\DRIVERS\raspptp.sys Image size: 48384 Image MD5: 1C5CC65AAC0783C344F16353E60B72AC Start: 3 Type: 1 Error Control: 1 Service (registry key): PQIMount Start: 1 Type: 1 Error Control: 1 Service (registry key): PQNTDrv Start: 1 Type: 1 Error Control: 0 Service (registry key): PQV2i Start: 0 Type: 2 Error Control: 0 Service (registry key): ProtectedStorage Display name: Protected Storage Description: Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users. Object name: LocalSystem Image path: %SystemRoot%\system32\lsass.exe Image size: 13312 Image MD5: 84885F9B82F4D55C6146EBF6065D75D2 Start: 2 Type: 288 Error Control: 1 Depends On services: RpcSs Service (registry key): PSched Display name: QoS Packet Scheduler Description: QoS Packet Scheduler Image path: system32\DRIVERS\psched.sys Image size: 69120 Image MD5: 48671F327553DCF1D27F6197F622A668 Start: 3 Type: 1 Error Control: 1 Depends On services: Gpc Service (registry key): Ptilink Display name: Direct Parallel Link Driver Description: Direct Parallel Link Driver Image path: system32\DRIVERS\ptilink.sys Image size: 17792 Image MD5: 80D317BD1C3DBC5D4FE7B1678C60CADD Start: 3 Type: 1 Error Control: 1 Service (registry key): PxHelp20 Display name: PxHelp20 Image path: System32\Drivers\PxHelp20.sys Image size: 20640 Image MD5: 183EF96BCC2EC3D5294CB2C2C0ECBCD1 Start: 0 Type: 1 Error Control: 1 Service (registry key): QDFSDRV Start: 0 Type: 0 Error Control: 0 Service (registry key): ql1080 Start: 4 Type: 1 Error Control: 1 Service (registry key): Ql10wnt Start: 4 Type: 1 Error Control: 1 Service (registry key): ql12160 Start: 4 Type: 1 Error Control: 1 Service (registry key): ql1240 Start: 4 Type: 1 Error Control: 1 Service (registry key): ql1280 Start: 4 Type: 1 Error Control: 1 Service (registry key): RasAcd Display name: Remote Access Auto Connection Driver Description: Remote Access Auto Connection Driver Image path: system32\DRIVERS\rasacd.sys Image size: 8832 Image MD5: FE0D99D6F31E4FAD8159F690D68DED9C Start: 1 Type: 1 Error Control: 1 Service (registry key): RasAuto Display name: Remote Access Auto Connection Manager Description: Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 4 Type: 32 Error Control: 1 Depends On services: RasMan,Tapisrv Service (registry key): Rasl2tp Display name: WAN Miniport (L2TP) Description: WAN Miniport (L2TP) Image path: system32\DRIVERS\rasl2tp.sys Image size: 51328 Image MD5: 98FAEB4A4DCF812BA1C6FCA4AA3E115C Start: 3 Type: 1 Error Control: 1 Service (registry key): RasMan Display name: Remote Access Connection Manager Description: Creates a network connection. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 4 Type: 32 Error Control: 1 Depends On services: Tapisrv Service (registry key): RasPppoe Display name: Remote Access PPPOE Driver Description: Remote Access PPPOE Driver Image path: system32\DRIVERS\raspppoe.sys Image size: 41472 Image MD5: 7306EEED8895454CBED4669BE9F79FAA Start: 3 Type: 1 Error Control: 1 Service (registry key): Raspti Display name: Direct Parallel Description: Direct Parallel Image path: system32\DRIVERS\raspti.sys Image size: 16512 Image MD5: FDBB1D60066FCFBB7452FD8F9829B242 Start: 3 Type: 1 Error Control: 1 Service (registry key): Rdbss Display name: Rdbss Description: Rdbss Image path: system32\DRIVERS\rdbss.sys Image size: 174592 Image MD5: 03B965B1CA47F6EF60EB5E51CB50E0AF Start: 1 Type: 2 Error Control: 1 Service (registry key): RDPCDD Image path: System32\DRIVERS\RDPCDD.sys Image size: 4224 Image MD5: 4912D5B403614CE99C28420F75353332 Start: 1 Type: 1 Error Control: 0 Service (registry key): RDPDD Start: 0 Type: 0 Error Control: 0 Service (registry key): rdpdr Display name: Terminal Server Device Redirector Driver Image path: system32\DRIVERS\rdpdr.sys Image size: 196864 Image MD5: A2CAE2C60BC37E0751EF9DDA7CEAF4AD Start: 3 Type: 1 Error Control: 1 Service (registry key): RDPNP Start: 0 Type: 0 Error Control: 0 Service (registry key): RDPWD Start: 3 Type: 1 Error Control: 0 Service (registry key): RDSessMgr Display name: Remote Desktop Help Session Manager Description: Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. Object name: LocalSystem Image path: C:\WINDOWS\system32\sessmgr.exe Image size: 140800 Image MD5: 729798E0933076B8FCFCD9934698F164 Start: 4 Type: 16 Error Control: 1 Depends On services: RPCSS Service (registry key): redbook Display name: Digital CD Audio Playback Filter Driver Image path: system32\DRIVERS\redbook.sys Image size: 57472 Image MD5: B31B4588E4086D8D84ADBF9845C2402B Start: 1 Type: 1 Error Control: 1 Service (registry key): RemoteAccess Display name: Routing and Remote Access Description: Offers routing services to businesses in local area and wide area network environments. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 4 Type: 32 Error Control: 1 Depends On services: RpcSS Depends On group: NetBIOSGroup Service (registry key): RemoteRegistry Display name: Remote Registry Description: Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: NT AUTHORITY\LocalService Image path: %SystemRoot%\system32\svchost.exe -k LocalService Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 4 Type: 32 Error Control: 1 Depends On services: RPCSS Service (registry key): RpcLocator Display name: Remote Procedure Call (RPC) Locator Description: Manages the RPC name service database. Object name: NT AUTHORITY\NetworkService Image path: %SystemRoot%\system32\locator.exe Image size: 75264 Image MD5: 793F04A09B15E7C6C11DBDFFAF06C0AB Start: 3 Type: 16 Error Control: 1 Depends On services: LanmanWorkstation Service (registry key): RpcSs Display name: Remote Procedure Call (RPC) Description: Provides the endpoint mapper and other miscellaneous RPC services. Object name: NT AUTHORITY\NetworkService Image path: %SystemRoot%\system32\svchost -k rpcss Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Service (registry key): RSVP Display name: QoS RSVP Description: Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets. Object name: LocalSystem Image path: %SystemRoot%\system32\rsvp.exe Image size: 132608 Image MD5: 471B3F9741D762ABE75E9DEEA4787E47 Start: 3 Type: 16 Error Control: 1 Depends On services: TcpIp,Afd,RpcSs Service (registry key): rtl8139 Display name: Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver Image path: system32\DRIVERS\RTL8139.SYS Image size: 20992 Image MD5: D507C1400284176573224903819FFDA3 Start: 3 Type: 1 Error Control: 1 Service (registry key): SamSs Display name: Security Accounts Manager Description: Stores security information for local user accounts. Object name: LocalSystem Image path: %SystemRoot%\system32\lsass.exe Image size: 13312 Image MD5: 84885F9B82F4D55C6146EBF6065D75D2 Start: 2 Type: 32 Error Control: 1 Depends On services: RPCSS Service (registry key): sbp2port Display name: SBP-2 Transport/Protocol Bus Driver Image path: system32\DRIVERS\sbp2port.sys Image size: 43136 Image MD5: 3E2C3B180872BE4120F246D85560B734 Start: 0 Type: 1 Error Control: 1 Service (registry key): SCardSvr Display name: Smart Card Description: Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: NT AUTHORITY\LocalService Image path: %SystemRoot%\System32\SCardSvr.exe Image size: 95744 Image MD5: 25D8DE134DF108E3DBC8D7D23B1AA58E Start: 3 Type: 32 Error Control: 0 Depends On services: PlugPlay Service (registry key): Schedule Display name: Task Scheduler Description: Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 4 Type: 32 Error Control: 1 Depends On services: RpcSs Service (registry key): SDdriver Display name: SDdriver Image path: \??\C:\WINDOWS\system32\Drivers\sddriver.sys Image size: 90272 Image MD5: 074DA08E844DED21731C38E8395EBD3B Start: 3 Type: 1 Error Control: 1 Service (registry key): Secdrv Display name: Secdrv Description: SafeDisc driver Image path: system32\DRIVERS\secdrv.sys Image size: 27440 Image MD5: D26E26EA516450AF9D072635C60387F4 Start: 3 Type: 1 Error Control: 1 Service (registry key): seclogon Display name: Secondary Logon Description: Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 4 Type: 288 Error Control: 0 Service (registry key): SENS Display name: System Event Notification Description: Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 1 Depends On services: EventSystem Service (registry key): serenum Display name: Serenum Filter Driver Image path: system32\DRIVERS\serenum.sys Image size: 15488 Image MD5: A2D868AEEFF612E70E213C451A70CAFB Start: 3 Type: 1 Error Control: 1 Service (registry key): Serial Display name: Serial port driver Image path: system32\DRIVERS\serial.sys Image size: 64896 Image MD5: CD9404D115A00D249F70A371B46D5A26 Start: 1 Type: 1 Error Control: 0 Service (registry key): Sfloppy Display name: High-Capacity Floppy Disk Drive Image path: system32\DRIVERS\sfloppy.sys Image size: 11392 Image MD5: 0D13B6DF6E9E101013A7AFB0CE629FE0 Start: 3 Type: 1 Error Control: 1 Depends On group: "SCSI miniport" Service (registry key): sfman Display name: Creative SoundFont Manager Driver (WDM) Image path: system32\drivers\sfmanm.sys Image size: 36480 Image MD5: 0B1A5E9CACB5CDD54A2815107BD7C772 Start: 3 Type: 1 Error Control: 1 Service (registry key): SharedAccess Display name: Windows Firewall/Internet Connection Sharing (ICS) Description: Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 4 Type: 32 Error Control: 1 Depends On services: Netman,WinMgmt Service (registry key): ShellHWDetection Display name: Shell Hardware Detection Description: Provides notifications for AutoPlay hardware events. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 14336 Image MD5: 8F078AE4ED187AAABC0A305146DE6716 Start: 2 Type: 32 Error Control: 0 Depends On services: RpcSs Service (registry key): Simbad Start: 4 Type: 1 Error Control: 1 Service (registry key): SIODRV Display name: SIODRV Image path: \??\C:\WINDOWS\system32\drivers\SIODRV.SYS Image size: 7424 Image MD5: 20F6649D168567A66C25662171BF4FE8 Start: 2 Type: 1 Error Control: 1 Service (registry key): SLIP Display name: BDA Slip De-Framer Image path: system32\DRIVERS\SLIP.sys Image size: 11136 Image MD5: 5CAEED86821FA2C6139E32E9E05CCDC9 Start: 3 Type: 1 Error Control: 1 Service (registry key): SMBios Display name: Intel ® System Management BIOS Service Image path: system32\DRIVERS\SMBios.sys Image size: 36484 Image MD5: D72A21424CA66C7A745BD995ECA6A710 Start: 3 Type: 1 Error Control: 1 Service (registry key): smbusp Display name: Intel® SMBus 2.0 Driver Image path: system32\DRIVERS\smb.sys Image size: 21963 Image MD5: 067114712715D88E1FCCABA33E418E24 Start: 3 Type: 1 Error Control: 0 Service (registry key): smserial Image path: system32\DRIVERS\smserial.sys Image size: 894514 Image MD5: 7788242E3628A32A77C384AFF392E514 Start: 3 Type: 1 Error Control: 1 Service (registry key): smwdm Image path: system32\drivers\smwdm.sys Image size: 549672 Image MD5: C908F7A3326E794789CAC485B73149B4 Start: 3 Type: 1 Error Control: 1 Service (registry key): snpstd Display name: USB PC Camera Image path: system32\DRIVERS\snpstd.sys Image size: 301184 Image MD5: 5C10259426A1036338628EBED973C382 Start: 3 Type: 1 Error Control: 1 Service (registry key): SoundMAX Agent Service (default) Display name: SoundMAX Agent Service Object name: LocalSystem Image path: C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe Image size: 45056 Image MD5: 6723C9E89F7186333CB55F9C7C860FA0 Start: 2 Type: 16 Error Control: 1 Service (registry key): Sparrow Start: 4 Type: 1 Error Control: 1 Service (registry key): Speed Disk service Display name: Speed Disk service Description: Used to schedule disk defragmentation Object name: LocalSystem Image path: C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE Image size: 181416 Image MD5: F15D5050C234D07E85D224C346476B89 Start: 3 Type: 272 Error Control: 0 Depends On services: RPCSS Service (registry key): splitter Display name: Microsoft Kernel Audio Splitter Image path: system32\drivers\splitter.sys Image size: 6400 Image MD5: 0CE218578FFF5F4F7E4201539C45C78F Start: 3 Type: 1 Error Control: 1 Service (registry key): Spooler Display name: Print Spooler Description: Loads files to memory for later printing. Object name: LocalSystem Image path: %SystemRoot%\system32\spoolsv.exe Image size: 57856 Image MD5: DA81EC57ACD4CDC3D
Hi johndude. Below are some instructions to begin with the fix. Could you also let me know how/where you're being hijacked? Thanks.

First off I would like to see a different kind of log from Hijack This. Follow these instructions:
  • Run Hijackthis.
  • Click on Open the Misc Tools section.
  • Next click on Open uninstall manager.
  • Press the Save list button. It will open a Notepad file.
  • Save the file to your desktop, with the default name of uninstall_list
  • Copy & Paste the entire contents of that file in your in your next post.
Next run Hijack This again and have it do a system scan only. Put a check (tick) next to the following entries:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

O1 - Hosts: 69.93.229.151 www.allonlinecoupons.com
O1 - Hosts: 69.93.229.151 www.allonlinecoupons.com
O1 - Hosts: 209.197.98.50 www.yesterland.com
O1 - Hosts: 199.181.132.174 abclocal.go.com
O1 - Hosts: 70.85.60.100 dvdxcopy.afterdawn.com
O1 - Hosts: 67.15.80.76 www.ambushhotel.com
O1 - Hosts: 64.86.106.143 quake.usgs.gov
O1 - Hosts: 69.16.243.21 sanfrancisco.apartmenttherapy.com
O1 - Hosts: 194.242.43.137 web.artprice.com
O1 - Hosts: 65.212.180.185 www.mesart.com
O1 - Hosts: 66.35.240.8 www.sfgate.com
O1 - Hosts: 66.147.225.180 www.bewellvitamins.com
O1 - Hosts: 209.197.121.1 www.tomshardware.com
O1 - Hosts: 216.39.58.163 www.bradysclockrepair.com
O1 - Hosts: 216.39.58.163 www.bradysclockrepair.com
O1 - Hosts: 203.26.51.42 www.theage.com.au
O1 - Hosts: 209.247.184.164 www.comedyschoolforless.com
O1 - Hosts: 129.41.69.150 dealnews.com
O1 - Hosts: 216.113.183.151 cgi.ebay.com
O1 - Hosts: 199.75.209.126 www.ewg.org
O1 - Hosts: 199.75.209.126 www.ewg.org
O1 - Hosts: 68.142.212.43 exquisiteandrare.com
O1 - Hosts: 66.135.192.87 pages.ebay.com
O1 - Hosts: 68.142.214.24 www.flickr.com
O1 - Hosts: 198.78.132.165 flight001.com
O1 - Hosts: 198.78.132.165 flight001.com
O1 - Hosts: 65.208.172.71 www.nascigs.com
O1 - Hosts: 198.65.115.241 www.auctionbytes.com
O1 - Hosts: 72.14.219.191 fpiarticle.blogspot.com
O1 - Hosts: 195.58.170.6 www.dvdmarkt.at
O1 - Hosts: 66.160.181.132 www.projectghb.org
O1 - Hosts: 4.79.142.202 www.grc.com
O1 - Hosts: 64.70.136.98 www.guspresents.com
O1 - Hosts: 4.79.142.202 www.grc.com
O1 - Hosts: 63.240.208.227 www.cms.hhs.gov
O1 - Hosts: 149.99.58.196 www.sidefx.com
O1 - Hosts: 209.197.82.28 www.tomsnetworking.com
O1 - Hosts: 66.175.27.150 astro-mate.org
O1 - Hosts: 207.171.166.57 maps.a9.com
O1 - Hosts: 63.208.196.109 hypercube.is.dreaming.org
O1 - Hosts: 206.225.87.181 www.infomercialscams.com
O1 - Hosts: 208.109.49.163 www.selfdefenseproducts.com
O1 - Hosts: 66.151.248.213 www.jesuscampthemovie.com
O1 - Hosts: 85.17.11.27 www.juicygoo.com
O1 - Hosts: 216.104.187.28 spellmaker.com
O1 - Hosts: 64.154.20.29 www.maletreasures.com
O1 - Hosts: 207.155.248.122 www.microsoftcalsettlement.com
O1 - Hosts: 68.142.205.137 webtronics.stores.yahoo.net
O1 - Hosts: 209.232.226.110 www.mbayaq.org
O1 - Hosts: 63.211.141.52 nakedsword.com
O1 - Hosts: 207.178.135.200 www.onenotguilty.com
O1 - Hosts: 149.99.58.196 www.sidefx.com
O1 - Hosts: 66.90.101.64 www.pentagonstrike.co.uk
O1 - Hosts: 72.3.253.107 www.photo-accessories.com.au
O1 - Hosts: 216.104.71.5 www.portforward.com
O1 - Hosts: 207.58.145.9 www.powersellersunite.com
O1 - Hosts: 66.225.239.127 primaljaimal.com
O1 - Hosts: 216.93.251.17 www.purevolume.com
O1 - Hosts: 216.105.61.225 www.rainbowdepot.com
O1 - Hosts: 207.178.253.12 www.rushtrafficschool.com
O1 - Hosts: 216.103.100.55 www.sfgov.org
O1 - Hosts: 67.19.224.132 www.sandrabernhard.com
O1 - Hosts: 204.127.198.25 mywebpages.comcast.net
O1 - Hosts: 216.103.100.55 www.sfgov.org
O1 - Hosts: 68.142.205.137 www.waterproducts.com
O1 - Hosts: 209.11.51.41 www.gizmodo.com
O1 - Hosts: 68.142.214.24 www.flickr.com
O1 - Hosts: 69.156.240.29 svat.com
O1 - Hosts: 81.187.187.112 hot-on-the-trail-at.blog-city.com
O1 - Hosts: 64.202.189.186 www.irisvista.com
O1 - Hosts: 68.142.205.137 www.spytown.com
O1 - Hosts: 204.127.195.15 www.comcast.net
O1 - Hosts: 66.228.122.12 www.zombietime.com
O1 - Hosts: 212.44.68.7 users.gazinter.net
O1 - Hosts: 66.228.122.12 www.zombietime.com
O1 - Hosts: 209.126.151.229 www.allvideotrafficschool.com
O1 - Hosts: 216.133.229.130 www.trafficschool.com
O1 - Hosts: 209.126.151.229 www.allvideotrafficschool.com
O1 - Hosts: 64.94.178.89 www.dealtime.co.uk
O1 - Hosts: 129.41.69.158 dealcoupon.com
O1 - Hosts: 66.184.245.100 www.vzwshop.com
O1 - Hosts: 162.115.227.100 www.verizonwireless.com
O1 - Hosts: 72.3.138.22 www.videoegg.com
O1 - Hosts: 74.52.135.146 www.videohelp.com
O1 - Hosts: 216.218.218.27 vax.hanford.org
O1 - Hosts: 81.187.187.112 hot-on-the-trail-at.blog-city.com
O1 - Hosts: 62.214.98.28 www.sorrygottago.com
O1 - Hosts: 64.73.155.29 www.sears.com
O1 - Hosts: 69.61.15.150 www.whosarat.com
O1 - Hosts: 66.150.161.133 www.avalonepicure.com
O1 - Hosts: 216.52.81.211 zabasearch.com
O1 - Hosts: 66.151.238.124 www.zipcar.com
O1 - Hosts: 64.86.106.145 www.zappos.com
O1 - Hosts: 63.240.117.53 www.kennethcole.com
O1 - Hosts: 64.86.106.145 www.zappos.com
O1 - Hosts: 66.218.77.68 www.geocities.com
O1 - Hosts: 207.46.248.248 support.microsoft.com
O1 - Hosts: 64.85.14.90 pubs.logicalexpressions.com
O1 - Hosts: 66.218.77.68 www.geocities.com
O1 - Hosts: 65.19.174.45 www.primedius.com
O1 - Hosts: 207.188.5.44 www.real.com

O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -


Close all other browsers/windows and click Fix Checked. Close Hijack This.

Reboot the PC and post the uninstall list and a fresh Hijack This log.
Cool, I will do it tonight! One more thing……..for some reason I cannot go to apple.com AT ALL? It causes IE crash detection and the browser closes. It does the same thing in firefox!
Here is the un-install list: 3D Waterfall Screensaver 1.0 5000 Series ACDSee 8 Active Desktop Calendar 6.3 Ad-Aware SE Professional Adobe Reader 6.0 Adobe Shockwave Player AMCap AM-DeadLink 2.8 AnyDVD Avanquest update AviSynth 2.5 ccCommon ClearType Tuning Control Panel Applet CloneDVD2 C-Media WDM Audio Driver Crystal Player Free 1.97 Cucusoft MPEG/MOV/rmvb/DivX/AVI to DVD/VCD/SVCD Converter Pro 7 Cypress USB Mass Storage Driver Installation Dragon NaturallySpeaking 9 DVD Rebuilder EasyCleaner E-Filing Plugins EPSON Printer Software ffdshow (remove only) Google Earth Google Toolbar for Internet Explorer HijackThis 1.99.1 Hotfix for Windows XP (KB896344) Hotfix for Windows XP (KB914440) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB926239) HP Photo and Imaging 2.3 - Scanjet 4600 Series HPScanjet4600TWAINOnly ICUII Intel Application Accelerator Intel® Active Monitor Intel® PRO Network Adapters and Drivers Internet Download Manager J2SE Runtime Environment 5.0 Update 7 J2SE Runtime Environment 5.0 Update 9 K-Lite Mega Codec Pack 1.27 LiveReg (Symantec Corporation) LiveUpdate 2.5 (Symantec Corporation) LoveChess Age Of Egypt Macromedia Flash Player 8 MailFrontier Desktop MaxBlast 4 Microsoft .NET Framework (English) v1.0.3705 Microsoft .NET Framework 1.0 Hotfix (KB886906) Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft .NET Framework 2.0 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Sounds Microsoft Office Standard Edition 2003 Microsoft Plus! Digital Media Edition Microsoft Plus! for Windows XP Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Windows XP Video Decoder Checkup Utility Motorola Phone Tools Mozilla Firefox (2.0) MSRedist MSXML 4.0 SP2 (KB925672) MSXML 4.0 SP2 (KB927978) Nero 7 Ultra Edition Norton CleanSweep Norton PartitionMagic 8.0 Norton SystemWorks Norton SystemWorks 2005 (Symantec Corporation) Norton Utilities NSW_DRM_COLLECTION NVIDIA Drivers PaperPort 9.0 PDR Electronic Library Personal License Update Wizard for Windows Media Player PhatNoise CAS Speech Support PhatNoise Media Manager PowerQuest Drive Image 7.0 QuickTime RealPlayer Registry First Aid Roxio Easy Media Creator 7 Security Update for Microsoft .NET Framework 2.0 (KB917283) Security Update for Microsoft .NET Framework 2.0 (KB922770) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB917734) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899589) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911567) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913433) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB916281) Security Update for Windows XP (KB917159) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB918899) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920214) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921398) Security Update for Windows XP (KB921883) Security Update for Windows XP (KB922616) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB925486) Security Update for Windows XP (KB926255) SereneScreen Marine Aquarium 2 Serials 2000 SoundMAX Spybot - Search & Destroy 1.4 SpywareBlaster v3.5.1 SSC Service Utility v4.20 TWAIN Data Source for hp Scanjet Scanner Tweak UI Update for Windows XP (KB894391) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB904942) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) USB Storage Adapter FX (MXO) USB Storage Adapter FX (SM1) Winamp (remove only) Windows Installer 3.1 (KB893803) Windows Installer Clean Up Windows Internet Explorer 7 Windows Live Messenger Windows Live Sign-in Assistant Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Format SDK Hotfix - KB891122 Windows Media Player 11 Windows Media Player 11 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 WinRAR archiver WinSnap WinXP Manager WinZip XPize 4.5.1 Yahoo! Messenger ZoneAlarm Security Suite
I did it, here is the latest log:

Logfile of HijackThis v1.99.1
Scan saved at 10:52:35 PM, on 12/25/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
C:\WINDOWS\MXOaldr.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Documents and Settings\John\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://www.comcast.net/home.html
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Page_URL =

http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Search_URL =

http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page

= http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

C:\Program Files\PhatNoise Media Manager\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O1 - Hosts: 193.226.140.167 www.softpedia.com
O1 - Hosts: 70.84.218.249 samsungcc.tv
O1 - Hosts: 140.212.202.254 www2.panasonic.com
O1 - Hosts: 64.156.13.20 www.pricegrabber.com
O1 - Hosts: 63.113.48.167 www.hermes-one.com
O1 - Hosts: 63.240.53.230 www.christies.com
O1 - Hosts: 63.240.53.230 www.christies.com
O1 - Hosts: 64.38.11.243 www.artcyclopedia.com
O1 - Hosts: 66.93.106.167 collectors.org
O1 - Hosts: 63.240.53.135 www.jr.com
O1 - Hosts: 208.64.132.122 forums.ebay.com
O1 - Hosts: 72.21.206.5 www.amazon.com
O1 - Hosts: 209.132.230.246 www.thudrumble.com
O1 - Hosts: 170.224.19.5 www.lowes.com
O1 - Hosts: 71.4.116.220 www.ntlfloortrends.com
O1 - Hosts: 66.97.163.102 www.fastfloors.com
O1 - Hosts: 66.97.163.102 www.fastfloors.com
O1 - Hosts: 65.254.250.107 www.antiquebottles.co.za
O1 - Hosts: 65.182.101.170 www.antiquebottles.com
O1 - Hosts: 67.133.36.183 www.finishline.com
O1 - Hosts: 67.133.37.113 www.karmaloop.com
O1 - Hosts: 67.133.37.113 www.karmaloop.com
O1 - Hosts: 65.211.209.134 www.aiptek.com
O1 - Hosts: 70.86.227.242 www.stevesforums.com
O1 - Hosts: 64.27.26.243 www.beachaudio.com
O1 - Hosts: 198.77.206.100 www.bhphotovideo.com
O1 - Hosts: 65.116.250.201 www.geeks.com
O1 - Hosts: 202.7.102.13 www.sanyo-dsc.com
O1 - Hosts: 207.127.97.242 www.jvc.com
O1 - Hosts: 216.25.78.122 focuscamera.com
O1 - Hosts: 140.212.202.254 www2.panasonic.com
O1 - Hosts: 140.212.202.254 www2.panasonic.com
O1 - Hosts: 65.211.209.134 www.aiptek.com
O1 - Hosts: 161.165.194.66 www.samsclub.com
O1 - Hosts: 64.93.72.75 sanyo.com
O1 - Hosts: 70.86.227.242 www.stevesforums.com
O1 - Hosts: 64.156.2.60 www.sdcard.org
O1 - Hosts: 66.192.131.227 www.steves-digicams.com
O1 - Hosts: 72.21.210.12 www.target.com
O1 - Hosts: 72.21.210.12 www.target.com
O1 - Hosts: 72.21.210.12 www.target.com
O1 - Hosts: 72.21.210.12 www.target.com
O1 - Hosts: 216.178.32.50 myspace.com
O1 - Hosts: 205.178.189.131 www.nycwetnet.com
O1 - Hosts: 72.32.92.112 www.ouchytheclown.com
O1 - Hosts: 207.246.137.90 www.outster.com
O1 - Hosts: 64.125.138.189 www.planetout.com
O1 - Hosts: 64.132.43.73 www.pornotube.com
O1 - Hosts: 64.132.43.93 template.aebn.net
O1 - Hosts: 66.206.162.107 www.powerexchange.com
O1 - Hosts: 85.92.159.5 www.ragingstallion.com
O1 - Hosts: 85.92.159.5 www.ragingstallion.com
O1 - Hosts: 209.227.62.49 www.rentboy.com
O1 - Hosts: 209.227.62.49 www.rentboy.com
O1 - Hosts: 209.66.64.32 www.lovings.com
O1 - Hosts: 216.133.149.128 www.totallycaliforniaescorts.com
O1 - Hosts: 66.159.20.220 www.saroftreve.com
O1 - Hosts: 64.38.238.63 www.sexpigs.com
O1 - Hosts: 208.109.44.243 sf.gaylocal.net
O1 - Hosts: 209.200.11.117 www.themalenude.com
O1 - Hosts: 64.84.19.100 www.partylist.com
O1 - Hosts: 216.113.252.142 www.tlavideo.com
O1 - Hosts: 38.113.205.138 www.boyjuice.com
O1 - Hosts: 216.100.186.49 www.ugas.com
O1 - Hosts: 64.124.22.160 webcamnow.com
O1 - Hosts: 64.7.213.25 www.webdate.com
O1 - Hosts: 65.254.228.100 www.hollywoodspa.com
O1 - Hosts: 72.52.129.144 www.blowbuddies.com
O1 - Hosts: 209.35.251.192 koalamensclub.com
O1 - Hosts: 66.115.186.90 www.malemovieclub.com
O1 - Hosts: 216.144.233.104 xtube.com
O1 - Hosts: 205.178.189.131 www.toptierstud.com
O1 - Hosts: 216.10.104.217 www.shop.com
O1 - Hosts: 208.187.218.180 balancehomeliving.com
O1 - Hosts: 65.254.225.112 www.aafilters.com
O1 - Hosts: 208.66.61.23 www.filters-now.com
O1 - Hosts: 65.160.174.13 secure.data-comm.com
O1 - Hosts: 63.209.28.41 shop.filtersolution.com
O1 - Hosts: 205.241.27.123 www.iact1.com
O1 - Hosts: 208.66.61.23 www.filters-now.com
O1 - Hosts: 65.160.174.13 secure.data-comm.com
O1 - Hosts: 208.66.61.23 www.filters-now.com
O1 - Hosts: 63.236.78.72 www.filtersusa.com
O1 - Hosts: 72.32.87.207 www.costlessair.com
O1 - Hosts: 65.160.174.13 secure.data-comm.com
O1 - Hosts: 64.233.163.99 froogle.google.com
O1 - Hosts: 167.140.19.2 www.qvc.com
O1 - Hosts: 64.49.254.237 www.afraidtoask.com
O1 - Hosts: 63.126.1.60 vitaminlady.com
O1 - Hosts: 64.239.143.230 nostigma.org
O1 - Hosts: 207.97.232.130 www.remedyfind.com
O1 - Hosts: 207.217.125.50 www.braintuner.com
O1 - Hosts: 195.8.66.1 www.antiaging-systems.com
O1 - Hosts: 216.251.43.98 www.crystalneon.org
O1 - Hosts: 207.217.125.50 www.lessons4living.com
O1 - Hosts: 66.38.255.104 www.canadadrugs.com
O1 - Hosts: 64.41.101.119 www.solutionspharmacy.net
O1 - Hosts: 195.8.66.1 www.antiaging-systems.com
O1 - Hosts: 164.109.59.132 people.delphi.com
O1 - Hosts: 207.167.4.26 www.medicationscanada.com
O1 - Hosts: 195.82.124.124 www.modafinil.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} -

C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class -

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class -

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper -

{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common

Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper -

{AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program

files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} -

c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone

Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [IMONTRAY] C:\Program Files\Intel\Intel®

Active Monitor\imontray.exe
O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOaldr.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download

Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program

Files\XemiComputers\Active Desktop Calendar\ADC.exe
O8 - Extra context menu item: Download All Links with IDM -

C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program

Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) -

{e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network

Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -

{e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network

Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger -

{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} -

C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger -

{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} -

C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .efp: C:\Program Files\Internet

Explorer\Plugins\NPEFPrn.dll
O12 - Plugin for .efv: C:\Program Files\Internet

Explorer\Plugins\NPEFV.dll
O12 - Plugin for .fmp: C:\Program Files\Internet

Explorer\Plugins\NPFMP.dll
O12 - Plugin for .fmr: C:\Program Files\Internet

Explorer\Plugins\NPFME.dll
O12 - Plugin for .ifx: C:\Program Files\Internet

Explorer\Plugins\NPWebPrn.dll
O12 - Plugin for .lfx: C:\Program Files\Internet

Explorer\Plugins\NPLaunch.dll
O12 - Plugin for .mwp: C:\Program Files\Internet

Explorer\Plugins\NPMWPrn.dll
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office

Genuine Advantage Validation Tool) -

http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows

Genuine Advantage Validation Tool) -

http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft

Data Collection Control) -

https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl

Class) -

http://update.microsoft.com/windowsupdate/…ntrols/en/x86/c

lient/wuweb_site.cab?1152647794359
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl

Class) -

http://update.microsoft.com/microsoftupdat…Controls/en/x86

/client/muweb_site.cab?1153525397531
O18 - Protocol: livecall -

{828030A1-22C1-4009-854F-8E305202313F} -

C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon -

C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj -

{AAA288BA-9A4C-45B0-95D7-94D524869DB5} -

C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: CA ISafe (CAISafe) - Computer Associates

International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec

Corporation - C:\Program Files\Common Files\Symantec

Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) -

Symantec Corporation - C:\Program Files\Common Files\Symantec

Shared\ccPwdSvc.exe
O23 - Service: GEARSecurity - GEAR Software -

C:\WINDOWS\System32\GEARSec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) -

Macrovision Corporation - C:\Program Files\Common

Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel® Active Monitor (imonNT) - Intel Corp. -

C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service

(default)) - Analog Devices, Inc. - C:\Program Files\Analog

Devices\SoundMAX\SMAgent.exe
O23 - Service: Speed Disk service - Symantec Corporation -

C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation -

C:\Program Files\Common Files\Symantec

Shared\CCPD-LC\symlcsvc.exe
O23 - Service: V2i Protector - PowerQuest Corporation -

C:\Program Files\PowerQuest\Drive Image 7.0\Agent\PQV2iSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs,

LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
AND here is the latest un-install list: 3D Waterfall Screensaver 1.0 5000 Series ACDSee 8 Active Desktop Calendar 6.3 Adobe Flash Player 9 ActiveX Adobe Reader 6.0 Adobe Shockwave Player AMCap AM-DeadLink 2.8 AnyDVD Avanquest update AviSynth 2.5 ccCommon ClearType Tuning Control Panel Applet CloneDVD2 C-Media WDM Audio Driver Crystal Player Free 1.97 Cucusoft MPEG/MOV/rmvb/DivX/AVI to DVD/VCD/SVCD Converter Pro 7 Cypress USB Mass Storage Driver Installation Dragon NaturallySpeaking 9 Dream Aquarium DVD Rebuilder EasyCleaner E-Filing Plugins EPSON Printer Software ffdshow (remove only) Google Earth Google Toolbar for Internet Explorer HijackThis 1.99.1 Hotfix for Windows XP (KB896344) Hotfix for Windows XP (KB914440) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB926239) HP Photo and Imaging 2.3 - Scanjet 4600 Series HPScanjet4600TWAINOnly Hyper-Threading Technology Test Utility ICUII Intel Application Accelerator Intel® Active Monitor Intel® PRO Network Adapters and Drivers Internet Download Manager J2SE Runtime Environment 5.0 Update 7 J2SE Runtime Environment 5.0 Update 9 K-Lite Mega Codec Pack 1.27 LiveReg (Symantec Corporation) LiveUpdate 2.5 (Symantec Corporation) LoveChess Age Of Egypt MailFrontier Desktop MaxBlast 4 Microsoft .NET Framework (English) v1.0.3705 Microsoft .NET Framework 1.0 Hotfix (KB886906) Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft .NET Framework 2.0 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Sounds Microsoft Office Standard Edition 2003 Microsoft Plus! Digital Media Edition Microsoft Plus! for Windows XP Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Windows XP Video Decoder Checkup Utility Motorola Phone Tools Mozilla Firefox (2.0) MSRedist MSXML 4.0 SP2 (KB925672) MSXML 4.0 SP2 (KB927978) Nero 7 Ultra Edition Norton CleanSweep Norton PartitionMagic 8.0 Norton SystemWorks Norton SystemWorks 2005 (Symantec Corporation) Norton Utilities NSW_DRM_COLLECTION NVIDIA Drivers PaperPort 9.0 PDR Electronic Library Personal License Update Wizard for Windows Media Player PhatNoise CAS Speech Support PhatNoise Media Manager PowerQuest Drive Image 7.0 QuickTime RealPlayer Registry First Aid Roxio Easy Media Creator 7 Security Update for Microsoft .NET Framework 2.0 (KB917283) Security Update for Microsoft .NET Framework 2.0 (KB922770) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB917734) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899589) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911567) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913433) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB916281) Security Update for Windows XP (KB917159) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB918899) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920214) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921398) Security Update for Windows XP (KB921883) Security Update for Windows XP (KB922616) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB925486) Security Update for Windows XP (KB926255) SereneScreen Marine Aquarium 2 Serials 2000 SoundMAX Spybot - Search & Destroy 1.4 SpywareBlaster v3.5.1 SSC Service Utility v4.20 TWAIN Data Source for hp Scanjet Scanner Tweak UI Update for Windows XP (KB894391) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB904942) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) USB Storage Adapter FX (MXO) USB Storage Adapter FX (SM1) Winamp (remove only) Windows Installer 3.1 (KB893803) Windows Installer Clean Up Windows Internet Explorer 7 Windows Live Messenger Windows Live Sign-in Assistant Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Format SDK Hotfix - KB891122 Windows Media Player 11 Windows Media Player 11 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 WinRAR archiver WinSnap WinXP Manager WinZip XPize 4.5.1 Yahoo! Messenger ZoneAlarm Security Suite _______________________________________________ I hope you can help me!! did I mention that I cannot go to the apple website at all? Happy Holidays to you and Thanks in advance!!! JOHN
I'm sorry John but could you please post another Hijack This log and this time make sure word wrap is turned off in Notepad? Go to the format tab and uncheck word wrap. This makes the log much easier to read.
HERE YOU GO:

Logfile of HijackThis v1.99.1
Scan saved at 10:52:35 PM, on 12/25/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
C:\WINDOWS\MXOaldr.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Documents and Settings\John\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/home.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files\PhatNoise Media Manager\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O1 - Hosts: 193.226.140.167 www.softpedia.com
O1 - Hosts: 70.84.218.249 samsungcc.tv
O1 - Hosts: 140.212.202.254 www2.panasonic.com
O1 - Hosts: 64.156.13.20 www.pricegrabber.com
O1 - Hosts: 63.113.48.167 www.hermes-one.com
O1 - Hosts: 63.240.53.230 www.christies.com
O1 - Hosts: 63.240.53.230 www.christies.com
O1 - Hosts: 64.38.11.243 www.artcyclopedia.com
O1 - Hosts: 66.93.106.167 collectors.org
O1 - Hosts: 63.240.53.135 www.jr.com
O1 - Hosts: 208.64.132.122 forums.ebay.com
O1 - Hosts: 72.21.206.5 www.amazon.com
O1 - Hosts: 209.132.230.246 www.thudrumble.com
O1 - Hosts: 170.224.19.5 www.lowes.com
O1 - Hosts: 71.4.116.220 www.ntlfloortrends.com
O1 - Hosts: 66.97.163.102 www.fastfloors.com
O1 - Hosts: 66.97.163.102 www.fastfloors.com
O1 - Hosts: 65.254.250.107 www.antiquebottles.co.za
O1 - Hosts: 65.182.101.170 www.antiquebottles.com
O1 - Hosts: 67.133.36.183 www.finishline.com
O1 - Hosts: 67.133.37.113 www.karmaloop.com
O1 - Hosts: 67.133.37.113 www.karmaloop.com
O1 - Hosts: 65.211.209.134 www.aiptek.com
O1 - Hosts: 70.86.227.242 www.stevesforums.com
O1 - Hosts: 64.27.26.243 www.beachaudio.com
O1 - Hosts: 198.77.206.100 www.bhphotovideo.com
O1 - Hosts: 65.116.250.201 www.geeks.com
O1 - Hosts: 202.7.102.13 www.sanyo-dsc.com
O1 - Hosts: 207.127.97.242 www.jvc.com
O1 - Hosts: 216.25.78.122 focuscamera.com
O1 - Hosts: 140.212.202.254 www2.panasonic.com
O1 - Hosts: 140.212.202.254 www2.panasonic.com
O1 - Hosts: 65.211.209.134 www.aiptek.com
O1 - Hosts: 161.165.194.66 www.samsclub.com
O1 - Hosts: 64.93.72.75 sanyo.com
O1 - Hosts: 70.86.227.242 www.stevesforums.com
O1 - Hosts: 64.156.2.60 www.sdcard.org
O1 - Hosts: 66.192.131.227 www.steves-digicams.com
O1 - Hosts: 72.21.210.12 www.target.com
O1 - Hosts: 72.21.210.12 www.target.com
O1 - Hosts: 72.21.210.12 www.target.com
O1 - Hosts: 72.21.210.12 www.target.com
O1 - Hosts: 216.178.32.50 myspace.com
O1 - Hosts: 205.178.189.131 www.nycwetnet.com
O1 - Hosts: 72.32.92.112 www.ouchytheclown.com
O1 - Hosts: 207.246.137.90 www.outster.com
O1 - Hosts: 64.125.138.189 www.planetout.com
O1 - Hosts: 64.132.43.73 www.pornotube.com
O1 - Hosts: 64.132.43.93 template.aebn.net
O1 - Hosts: 66.206.162.107 www.powerexchange.com
O1 - Hosts: 85.92.159.5 www.ragingstallion.com
O1 - Hosts: 85.92.159.5 www.ragingstallion.com
O1 - Hosts: 209.227.62.49 www.rentboy.com
O1 - Hosts: 209.227.62.49 www.rentboy.com
O1 - Hosts: 209.66.64.32 www.lovings.com
O1 - Hosts: 216.133.149.128 www.totallycaliforniaescorts.com
O1 - Hosts: 66.159.20.220 www.saroftreve.com
O1 - Hosts: 64.38.238.63 www.sexpigs.com
O1 - Hosts: 208.109.44.243 sf.gaylocal.net
O1 - Hosts: 209.200.11.117 www.themalenude.com
O1 - Hosts: 64.84.19.100 www.partylist.com
O1 - Hosts: 216.113.252.142 www.tlavideo.com
O1 - Hosts: 38.113.205.138 www.boyjuice.com
O1 - Hosts: 216.100.186.49 www.ugas.com
O1 - Hosts: 64.124.22.160 webcamnow.com
O1 - Hosts: 64.7.213.25 www.webdate.com
O1 - Hosts: 65.254.228.100 www.hollywoodspa.com
O1 - Hosts: 72.52.129.144 www.blowbuddies.com
O1 - Hosts: 209.35.251.192 koalamensclub.com
O1 - Hosts: 66.115.186.90 www.malemovieclub.com
O1 - Hosts: 216.144.233.104 xtube.com
O1 - Hosts: 205.178.189.131 www.toptierstud.com
O1 - Hosts: 216.10.104.217 www.shop.com
O1 - Hosts: 208.187.218.180 balancehomeliving.com
O1 - Hosts: 65.254.225.112 www.aafilters.com
O1 - Hosts: 208.66.61.23 www.filters-now.com
O1 - Hosts: 65.160.174.13 secure.data-comm.com
O1 - Hosts: 63.209.28.41 shop.filtersolution.com
O1 - Hosts: 205.241.27.123 www.iact1.com
O1 - Hosts: 208.66.61.23 www.filters-now.com
O1 - Hosts: 65.160.174.13 secure.data-comm.com
O1 - Hosts: 208.66.61.23 www.filters-now.com
O1 - Hosts: 63.236.78.72 www.filtersusa.com
O1 - Hosts: 72.32.87.207 www.costlessair.com
O1 - Hosts: 65.160.174.13 secure.data-comm.com
O1 - Hosts: 64.233.163.99 froogle.google.com
O1 - Hosts: 167.140.19.2 www.qvc.com
O1 - Hosts: 64.49.254.237 www.afraidtoask.com
O1 - Hosts: 63.126.1.60 vitaminlady.com
O1 - Hosts: 64.239.143.230 nostigma.org
O1 - Hosts: 207.97.232.130 www.remedyfind.com
O1 - Hosts: 207.217.125.50 www.braintuner.com
O1 - Hosts: 195.8.66.1 www.antiaging-systems.com
O1 - Hosts: 216.251.43.98 www.crystalneon.org
O1 - Hosts: 207.217.125.50 www.lessons4living.com
O1 - Hosts: 66.38.255.104 www.canadadrugs.com
O1 - Hosts: 64.41.101.119 www.solutionspharmacy.net
O1 - Hosts: 195.8.66.1 www.antiaging-systems.com
O1 - Hosts: 164.109.59.132 people.delphi.com
O1 - Hosts: 207.167.4.26 www.medicationscanada.com
O1 - Hosts: 195.82.124.124 www.modafinil.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [IMONTRAY] C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOaldr.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .efp: C:\Program Files\Internet Explorer\Plugins\NPEFPrn.dll
O12 - Plugin for .efv: C:\Program Files\Internet Explorer\Plugins\NPEFV.dll
O12 - Plugin for .fmp: C:\Program Files\Internet Explorer\Plugins\NPFMP.dll
O12 - Plugin for .fmr: C:\Program Files\Internet Explorer\Plugins\NPFME.dll
O12 - Plugin for .ifx: C:\Program Files\Internet Explorer\Plugins\NPWebPrn.dll
O12 - Plugin for .lfx: C:\Program Files\Internet Explorer\Plugins\NPLaunch.dll
O12 - Plugin for .mwp: C:\Program Files\Internet Explorer\Plugins\NPMWPrn.dll
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1152647794359
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1153525397531
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel® Active Monitor (imonNT) - Intel Corp. - C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: V2i Protector - PowerQuest Corporation - C:\Program Files\PowerQuest\Drive Image 7.0\Agent\PQV2iSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

———————————————————-

Thanks Again! Did you find out why I can't go to the apple.com website?? Hope to hear back soon!!
ALSO: (below) is spybot log, this keeps coming back cannot get rid of problem: Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done) www.microsoft.com=207.46.225.60 Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done) go.microsoft.com=[removed] THESE KEEP COMING BACK!!! —————————————————————————————————————————- Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done) www.microsoft.com=207.46.225.60 Microsoft.Windows.RedirectedHosts: Redirected host (Redirected host, nothing done) go.microsoft.com=[removed] — Spybot - Search & Destroy version: 1.4 (build: 20050523) — 2005-05-31 blindman.exe (1.0.0.1) 2005-05-31 SpybotSD.exe (1.4.0.3) 2005-05-31 TeaTimer.exe (1.4.0.2) 2006-08-02 unins000.exe (51.41.0.0) 2005-05-31 Update.exe (1.4.0.0) 2006-02-06 advcheck.dll (1.0.2.0) 2005-05-31 aports.dll (2.1.0.0) 2005-05-31 borlndmm.dll (7.0.4.453) 2005-05-31 delphimm.dll (7.0.4.453) 2005-05-31 SDHelper.dll (1.4.0.0) 2006-02-20 Tools.dll (2.0.0.2) 2005-05-31 UnzDll.dll (1.73.1.1) 2005-05-31 ZipDll.dll (1.73.2.0) 2006-12-22 Includes\Cookies.sbi (*) 2006-12-08 Includes\Dialer.sbi (*) 2006-12-22 Includes\DialerC.sbi (*) 2006-11-24 Includes\Hijackers.sbi (*) 2006-12-22 Includes\HijackersC.sbi (*) 2006-10-27 Includes\Keyloggers.sbi (*) 2006-12-22 Includes\KeyloggersC.sbi (*) 2006-12-22 Includes\Malware.sbi (*) 2006-12-22 Includes\MalwareC.sbi (*) 2006-10-20 Includes\PUPS.sbi (*) 2006-12-22 Includes\PUPSC.sbi (*) 2006-12-22 Includes\Revision.sbi (*) 2006-12-08 Includes\Security.sbi (*) 2006-12-22 Includes\SecurityC.sbi (*) 2006-10-13 Includes\Spybots.sbi (*) 2006-12-22 Includes\SpybotsC.sbi (*) 2005-02-17 Includes\Tracks.uti 2006-12-08 Includes\Trojans.sbi (*) 2006-12-22 Includes\TrojansC.sbi (*)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI