systemdoctor 2006 / virus

CP = 1
IPAddress = 0.0.0.0;
IPAutoconfigurationAddress = 169.254.24.63
NameServer =
SubnetMask = 0.0.0.0;

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{6C33BC62-C274-41F5-A1F5-C1C0B6A18AB4}]
DefaultGateway =
Domain =
EnableDHCP = 1
IPAddress = 0.0.0.0;
NameServer =
SubnetMask = 0.0.0.0;

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{D4AC8F61-D5D8-4FDB-85D9-53E205CDE3A8}] ( Realtek RTL8139/810x Family Fast Ethernet NIC )
DefaultGateway =
Domain =
EnableDHCP = 1
IPAddress = 0.0.0.0;
NameServer =
SubnetMask = 0.0.0.0;

>>>>> WinSock2 Parameters <<<<<

>>>>> Protocol Handlers <<<<<

>>>>> Protocol Filters <<<<<

>>>>> Downloaded Program Files <<<<<

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0E5F0222-96B9-11D3-8997-00104BD12D94}\DownloadInformation]
CODEBASE = http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
INF = C:\WINDOWS\Downloaded Program Files\PCPitstop.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{13EC55CF-D993-475B-9ACA-F4A384957956}\DownloadInformation]
CODEBASE = https://www.windowsonecare.com/install/cli/…nSSWebAgent.CAB
INF = C:\WINDOWS\Downloaded Program Files\setup.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{17492023-C23A-453E-A040-C7C580BBF700}\DownloadInformation]
CODEBASE = http://download.microsoft.com/download/3/9…heckControl.cab
INF = C:\WINDOWS\Downloaded Program Files\LegitCheckControl.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{4C39376E-FA9D-4349-BACC-D305C1750EF3}\DownloadInformation]
CODEBASE = http://tools.ebayimg.com/eps/wl/activex/EP…l_v1-0-3-24.cab
INF = C:\WINDOWS\Downloaded Program Files\EPUWALcontrol.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{5F0C30E4-1E72-4DCC-85E5-57810F1CA97B}\DownloadInformation]
CODEBASE = http://www.amiuptodate.com/vsc/bin/1,0,0,8…pdatePortal.cab
INF = C:\WINDOWS\Downloaded Program Files\McMysec.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{6E32070A-766D-4EE6-879C-DC1FA91D2FC3}\DownloadInformation]
CODEBASE = http://update.microsoft.com/microsoftupdat…b?1170975278984
INF = C:\WINDOWS\Downloaded Program Files\muweb.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{79E0C1C0-316D-11D5-A72A-006097BFA1AC}\DownloadInformation]
CODEBASE = http://support.epson-europe.com/selftest/Prg/ESTPTest.cab
INF = C:\WINDOWS\Downloaded Program Files\ESTPTEST.INF

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{7F8C8173-AD80-4807-AA75-5672F22B4582}\DownloadInformation]
CODEBASE = http://download.zonelabs.com/bin/promotion…anner371290.cab
INF = C:\WINDOWS\Downloaded Program Files\ICSScanner.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{9A9307A0-7DA4-4DAF-B042-5009F29E09E1}\DownloadInformation]
CODEBASE = http://acs.pandasoftware.com/activescan/as5free/asinst.cab
INF = C:\WINDOWS\Downloaded Program Files\asinst.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{B38870E4-7ECB-40DA-8C6A-595F0A5519FF}\DownloadInformation]
CODEBASE = http://messenger.msn.com/download/msnmesse…pdownloader.cab
INF = C:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B}\DownloadInformation]
CODEBASE = http://game19.zylomgames.com/activex/zylomgamesplayer.cab
INF = C:\WINDOWS\Downloaded Program Files\ZylomGamesPlayer.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\DownloadInformation]
CODEBASE = http://fpdownload.macromedia.com/get/flash…ent/swflash.cab
INF = C:\WINDOWS\Downloaded Program Files\swflash.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{EF791A6B-FC12-4C68-99EF-FB9E207A39E6}\DownloadInformation]
CODEBASE = http://download.mcafee.com/molbin/iss-loc/…519/mcfscan.cab
INF = C:\WINDOWS\Downloaded Program Files\mcfscan.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation]
CODEBASE = file://C:\WINDOWS\Java\classes\dajava.cab
OSD = C:\WINDOWS\Downloaded Program Files\DirectAnimation Java Classes.osd

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation]
CODEBASE = file://C:\WINDOWS\Java\classes\xmldso.cab
OSD = C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

»»»»»»»»»»»»»»»»»»»» Files Created Within 30 Days »»»»»»»»»»»»»

C:\hiberfil.sys [Ver = | Size = 200855552 bytes | Created Date = 01/01/1601 | Attr = HS]
C:\sqmdata04.sqm [Ver = | Size = 268 bytes | Created Date = 11/02/2007 21:47:15 | Attr = H ]
C:\sqmdata05.sqm [Ver = | Size = 208 bytes | Created Date = 11/02/2007 21:47:15 | Attr = H ]
C:\sqmdata06.sqm [Ver = | Size = 208 bytes | Created Date = 11/02/2007 21:47:15 | Attr = H ]
C:\sqmnoopt04.sqm [Ver = | Size = 244 bytes | Created Date = 11/02/2007 21:47:14 | Attr = H ]
C:\sqmnoopt05.sqm [Ver = | Size = 232 bytes | Created Date = 11/02/2007 21:47:15 | Attr = H ]
C:\sqmnoopt06.sqm [Ver = | Size = 232 bytes | Created Date = 11/02/2007 21:47:15 | Attr = H ]
C:\Documents and Settings\Dena Othen\My Documents\avgas-setup-7.5.0.50.exe [Ver = | Size = 6469352 bytes | Created Date = 12/02/2007 17:41:24 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\avgas-setup-7.5.0.50.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\chavtest.xls [Ver = | Size = 56832 bytes | Created Date = 26/01/2007 09:55:09 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\chavtest.xls:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe Trend Micro Incorporated [Ver = 2.19-1099 | Size = 532480 bytes | Created Date = 12/02/2007 16:04:42 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\erunt-setup.exe Lars Hederer [Ver = | Size = 791393 bytes | Created Date = 20/02/2007 20:17:21 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\erunt-setup.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\hijackthis.zip [Ver = | Size = 212849 bytes | Created Date = 12/02/2007 15:39:21 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\hijackthis.zip:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\HJTsetup.exe Soeperman Enterprises Ltd [Ver = | Size = 488144 bytes | Created Date = 12/02/2007 15:54:29 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\HJTsetup.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\setupeng.exe [Ver = 1, 1, 0, 0 | Size = 13326120 bytes | Created Date = 08/02/2007 20:48:34 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\setupeng.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\ssftrialsnrsetup1_1908302891.exe Webroot Software, Inc. [Ver = 5.3.1.2344 | Size = 12887888 bytes | Created Date = 08/02/2007 15:56:54 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\ssftrialsnrsetup1_1908302891.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\systdoc.wps [Ver = | Size = 11776 bytes | Created Date = 12/02/2007 11:05:44 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\SZScanLog.dat [Ver = | Size = 58723 bytes | Created Date = 14/02/2007 15:03:04 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\VundoFix.exe Atribune.org [Ver = 6.03.0007 | Size = 91648 bytes | Created Date = 19/02/2007 14:25:10 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\VundoFix.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\winpfind.exe [Ver = | Size = 262159 bytes | Created Date = 20/02/2007 20:32:30 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\winpfind.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\All Users\Desktop\Ad-Aware SE Personal.lnk [Ver = | Size = 844 bytes | Created Date = 10/02/2007 23:05:42 | Attr = ]
C:\Documents and Settings\All Users\Desktop\avast! Antivirus.lnk [Ver = | Size = 1712 bytes | Created Date = 08/02/2007 20:49:31 | Attr = ]
C:\Documents and Settings\All Users\Desktop\AVG Anti-Spyware.lnk [Ver = | Size = 852 bytes | Created Date = 12/02/2007 17:43:01 | Attr = ]
C:\Documents and Settings\All Users\Desktop\Launch STOPzilla!.lnk [Ver = | Size = 1578 bytes | Created Date = 08/02/2007 19:33:31 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\CCleaner.lnk [Ver = | Size = 1551 bytes | Created Date = 09/02/2007 18:26:56 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\ERUNT.lnk [Ver = | Size = 595 bytes | Created Date = 20/02/2007 20:18:24 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\Hijackthis.lnk [Ver = | Size = 653 bytes | Created Date = 12/02/2007 15:55:39 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\NTREGOPT.lnk [Ver = | Size = 614 bytes | Created Date = 20/02/2007 20:18:24 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\Piolet.lnk [Ver = | Size = 1495 bytes | Created Date = 10/02/2007 17:45:45 | Attr = ]
C:\Documents and Settings\Dena Othen\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk [Ver = | Size = 770 bytes | Created Date = 20/02/2007 20:18:42 | Attr = ]
C:\WINDOWS\imsins.BAK [Ver = | Size = 1374 bytes | Created Date = 14/02/2007 16:24:54 | Attr = ]
C:\WINDOWS\mngui.INI [Ver = | Size = 0 bytes | Created Date = 23/01/2007 20:27:10 | Attr = ]
C:\WINDOWS\System32\asuninst.exe Panda Software [Ver = 1, 0, 0, 2 | Size = 73728 bytes | Created Date = 17/02/2007 21:49:29 | Attr = ]
C:\WINDOWS\System32\aswBoot.exe [Ver = 4, 7, 936, 0 | Size = 689280 bytes | Created Date = 08/02/2007 20:49:13 | Attr = ]
C:\WINDOWS\System32\AVASTSS.scr ALWIL Software [Ver = 4, 7, 936, 0 | Size = 90112 bytes | Created Date = 08/02/2007 20:49:13 | Attr = ]
C:\WINDOWS\System32\dumphive.exe [Ver = | Size = 51200 bytes | Created Date = 12/02/2007 11:03:41 | Attr = ]
C:\WINDOWS\System32\Help.ico [Ver = | Size = 1406 bytes | Created Date = 17/02/2007 18:00:42 | Attr = ]
C:\WINDOWS\System32\IS39XLdr.dll International Software Systems Solutions [Ver = 4.3.63.0 | Size = 81977 bytes | Created Date = 01/02/2007 18:18:24 | Attr = R ]
C:\WINDOWS\System32\IS3Base.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 516152 bytes | Created Date = 01/02/2007 18:17:18 | Attr = R ]
C:\WINDOWS\System32\IS3DBA.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 278583 bytes | Created Date = 01/02/2007 18:19:56 | Attr = R ]
C:\WINDOWS\System32\IS3Hooks.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 49209 bytes | Created Date = 01/02/2007 18:18:30 | Attr = R ]
C:\WINDOWS\System32\IS3HTUI.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 73728 bytes | Created Date = 01/02/2007 18:20:04 | Attr = R ]
C:\WINDOWS\System32\IS3Inet.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 69688 bytes | Created Date = 01/02/2007 18:17:46 | Attr = R ]
C:\WINDOWS\System32\IS3Svc.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 65591 bytes | Created Date = 01/02/2007 18:17:40 | Attr = R ]
C:\WINDOWS\System32\IS3UI.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 340022 bytes | Created Date = 01/02/2007 18:18:44 | Attr = R ]
C:\WINDOWS\System32\IS3VFS.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 45111 bytes | Created Date = 01/02/2007 18:19:32 | Attr = R ]
C:\WINDOWS\System32\IS3Win32.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 139321 bytes | Created Date = 01/02/2007 18:18:02 | Attr = R ]
C:\WINDOWS\System32\IS3XData.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 32768 bytes | Created Date = 01/02/2007 18:18:10 | Attr = R ]
C:\WINDOWS\System32\pavas.ico [Ver = | Size = 30590 bytes | Created Date = 17/02/2007 18:00:41 | Attr = ]
C:\WINDOWS\System32\Process.exe http://www.beyondlogic.org [Ver = 2, 0, 0, 0 | Size = 53248 bytes | Created Date = 12/02/2007 11:03:40 | Attr = ]
C:\WINDOWS\System32\SrchSTS.exe S!Ri [Ver = | Size = 288417 bytes | Created Date = 12/02/2007 11:03:40 | Attr = ]
C:\WINDOWS\System32\swreg.exe SteelWerX [Ver = 2.0.1.0 | Size = 135168 bytes | Created Date = 12/02/2007 11:03:40 | Attr = ]
C:\WINDOWS\System32\swsc.exe [Ver = | Size = 40960 bytes | Created Date = 12/02/2007 11:03:40 | Attr = ]
C:\WINDOWS\System32\swxcacls.exe SteelWerX [Ver = 1.0.1.1 | Size = 79360 bytes | Created Date = 12/02/2007 11:03:41 | Attr = ]
C:\WINDOWS\System32\SZBase.dll iS3, Inc. [Ver = 4.4.7.16 | Size = 98355 bytes | Created Date = 05/02/2007 18:23:28 | Attr = R ]
C:\WINDOWS\System32\ZPORT4AS.dll [Ver = | Size = 11776 bytes | Created Date = 17/02/2007 21:49:29 | Attr = ]
C:\WINDOWS\System32\drivers\aavmker4.sys ALWIL Software [Ver = 4.7.892.0 | Size = 31560 bytes | Created Date = 08/02/2007 20:49:29 | Attr = ]
C:\WINDOWS\System32\drivers\aswmon.sys ALWIL Software [Ver = 4.7.892.0 | Size = 85952 bytes | Created Date = 08/02/2007 20:49:20 | Attr = ]
C:\WINDOWS\System32\drivers\aswmon2.sys ALWIL Software [Ver = 4.7.892.0 | Size = 94424 bytes | Created Date = 08/02/2007 20:49:20 | Attr = ]
C:\WINDOWS\System32\drivers\aswRdr.sys ALWIL Software [Ver = 4.7.936.0 | Size = 23352 bytes | Created Date = 08/02/2007 20:49:30 | Attr = ]
C:\WINDOWS\System32\drivers\aswTdi.sys ALWIL Software [Ver = 4.7.936.0 | Size = 43176 bytes | Created Date = 08/02/2007 20:49:29 | Attr = ]
C:\WINDOWS\System32\drivers\AvgAsCln.sys GRISOFT, s.r.o. [Ver = 1.0.0.14 | Size = 3968 bytes | Created Date = 12/02/2007 17:42:09 | Attr = ]
C:\WINDOWS\System32\drivers\W700bus.sys MCCI [Ver = V4.34 | Size = 61536 bytes | Created Date = 23/01/2007 19:33:32 | Attr = ]
C:\WINDOWS\System32\drivers\W700cm.sys MCCI [Ver = V4.34 | Size = 6208 bytes | Created Date = 23/01/2007 19:33:32 | Attr = ]
C:\WINDOWS\System32\drivers\W700cmnt.sys MCCI [Ver = V4.34 | Size = 6208 bytes | Created Date = 23/01/2007 19:33:32 | Attr = ]
C:\WINDOWS\System32\drivers\W700mdfl.sys MCCI [Ver = V4.34 | Size = 9264 bytes | Created Date = 23/01/2007 19:33:32 | Attr = ]
C:\WINDOWS\System32\drivers\W700mdm.sys MCCI [Ver = V4.34 | Size = 97056 bytes | Created Date = 23/01/2007 19:33:32 | Attr = ]
C:\WINDOWS\System32\drivers\W700mgmt.sys MCCI [Ver = V4.34 | Size = 88560 bytes | Created Date = 23/01/2007 19:33:33 | Attr = ]
C:\WINDOWS\System32\drivers\W700obex.sys MCCI [Ver = V4.34 | Size = 86368 bytes | Created Date = 23/01/2007 19:33:33 | Attr = ]
C:\WINDOWS\System32\drivers\W700wh.sys MCCI [Ver = V4.34 | Size = 5840 bytes | Created Date = 23/01/2007 19:33:33 | Attr = ]
C:\WINDOWS\System32\drivers\W700whnt.sys MCCI [Ver = V4.34 | Size = 5840 bytes | Created Date = 23/01/2007 19:33:33 | Attr = ]

»»»»»»»»»»»»»»»»»»»» Files Modified Within 30 Days »»»»»»»»»»»»»

C:\BOOT.INI [Ver = | Size = 281 bytes | Modified Date = 09/02/2007 15:01:16 | Attr = HS]
C:\hiberfil.sys [Ver = | Size = 200855552 bytes | Modified Date = 20/02/2007 20:51:00 | Attr = HS]
C:\sqmdata04.sqm [Ver = | Size = 268 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\sqmdata05.sqm [Ver = | Size = 208 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\sqmdata06.sqm [Ver = | Size = 208 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\sqmnoopt04.sqm [Ver = | Size = 244 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\sqmnoopt05.sqm [Ver = | Size = 232 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\sqmnoopt06.sqm [Ver = | Size = 232 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\Documents and Settings\Dena Othen\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [Ver = | Size = 10752 bytes | Modified Date = 23/01/2007 20:24:52 | Attr = ]
C:\Documents and Settings\Dena Othen\Local Settings\Application Data\IconCache.db [Ver = | Size = 3712744 bytes | Modified Date = 20/02/2007 20:49:54 | Attr = H ]
C:\Documents and Settings\All Users\Documents\Global.sw2 [Ver = | Size = 4777 bytes | Modified Date = 20/02/2007 20:55:52 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\avgas-setup-7.5.0.50.exe [Ver = | Size = 6469352 bytes | Modified Date = 12/02/2007 17:41:26 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\avgas-setup-7.5.0.50.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\chavtest.xls [Ver = | Size = 56832 bytes | Modified Date = 26/01/2007 09:55:14 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\chavtest.xls:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe Trend Micro Incorporated [Ver = 2.19-1099 | Size = 532480 bytes | Modified Date = 12/02/2007 16:04:46 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\erunt-setup.exe Lars Hederer [Ver = | Size = 791393 bytes | Modified Date = 20/02/2007 20:18:04 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\erunt-setup.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\hijackthis.zip [Ver = | Size = 212849 bytes | Modified Date = 12/02/2007 15:39:38 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\hijackthis.zip:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\HJTsetup.exe Soeperman Enterprises Ltd [Ver = | Size = 488144 bytes | Modified Date = 12/02/2007 15:54:32 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\HJTsetup.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\My Sharing Folders.lnk [Ver = | Size = 588 bytes | Modified Date = 11/02/2007 21:48:44 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\setupeng.exe [Ver = 1, 1, 0, 0 | Size = 13326120 bytes | Modified Date = 08/02/2007 20:48:48 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\setupeng.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\ssftrialsnrsetup1_1908302891.exe Webroot Software, Inc. [Ver = 5.3.1.2344 | Size = 12887888 bytes | Modified Date = 08/02/2007 15:57:02 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\ssftrialsnrsetup1_1908302891.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\systdoc.wps [Ver = | Size = 11776 bytes | Modified Date = 12/02/2007 11:05:48 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\SZScanLog.dat [Ver = | Size = 58723 bytes | Modified Date = 14/02/2007 15:03:04 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\VundoFix.exe Atribune.org [Ver = 6.03.0007 | Size = 91648 bytes | Modified Date = 19/02/2007 14:25:22 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\VundoFix.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\winpfind.exe [Ver = | Size = 262159 bytes | Modified Date = 20/02/2007 20:32:34 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\winpfind.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\All Users\Desktop\Ad-Aware SE Personal.lnk [Ver = | Size = 844 bytes | Modified Date = 10/02/2007 23:05:44 | Attr = ]
C:\Documents and Settings\All Users\Desktop\avast! Antivirus.lnk [Ver = | Size = 1712 bytes | Modified Date = 08/02/2007 20:49:32 | Attr = ]
C:\Documents and Settings\All Users\Desktop\AVG Anti-Spyware.lnk [Ver = | Size = 852 bytes | Modified Date = 12/02/2007 17:43:02 | Attr = ]
C:\Documents and Settings\All Users\Desktop\Launch STOPzilla!.lnk [Ver = | Size = 1578 bytes | Modified Date = 08/02/2007 19:33:32 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\CCleaner.lnk [Ver = | Size = 1551 bytes | Modified Date = 09/02/2007 18:26:58 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\ERUNT.lnk [Ver = | Size = 595 bytes | Modified Date = 20/02/2007 20:18:26 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\Hijackthis.lnk [Ver = | Size = 653 bytes | Modified Date = 12/02/2007 15:55:40 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\NTREGOPT.lnk [Ver = | Size = 614 bytes | Modified Date = 20/02/2007 20:18:26 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\Piolet.lnk [Ver = | Size = 1495 bytes | Modified Date = 10/02/2007 17:45:46 | Attr = ]
C:\Documents and Settings\Dena Othen\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk [Ver = | Size = 770 bytes | Modified Date = 20/02/2007 20:18:44 | Attr = ]
C:\WINDOWS\AppRun.ini [Ver = | Size = 543 bytes | Modified Date = 09/02/2007 18:36:04 | Attr = ]
C:\WINDOWS\bootstat.dat [Ver = | Size = 2048 bytes | Modified Date = 20/02/2007 20:51:04 | Attr = S]
C:\WINDOWS\imsins.BAK [Ver = | Size = 1374 bytes | Modified Date = 16/02/2007 08:25:40 | Attr = ]
C:\WINDOWS\mngui.INI [Ver = | Size = 0 bytes | Modified Date = 23/01/2007 20:27:12 | Attr = ]
C:\WINDOWS\system.ini [Ver = | Size = 227 bytes | Modified Date = 09/02/2007 15:01:16 | Attr = ]
C:\WINDOWS\win.ini [Ver = | Size = 935 bytes | Modified Date = 17/02/2007 21:54:02 | Attr = ]
C:\WINDOWS\WMSysPr9.prx [Ver = | Size = 316640 bytes | Modified Date = 10/02/2007 17:45:54 | Attr = ]
C:\WINDOWS\System32\CONFIG.NT [Ver = | Size = 2626 bytes | Modified Date = 08/02/2007 20:49:30 | Attr = ]
C:\WINDOWS\System32\Help.ico [Ver = | Size = 1406 bytes | Modified Date = 17/02/2007 21:46:30 | Attr = ]
C:\WINDOWS\System32\IS39XLdr.dll International Software Systems Solutions [Ver = 4.3.63.0 | Size = 81977 bytes | Modified Date = 01/02/2007 18:18:24 | Attr = R ]
C:\WINDOWS\System32\IS3Base.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 516152 bytes | Modified Date = 01/02/2007 18:17:18 | Attr = R ]
C:\WINDOWS\System32\IS3DBA.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 278583 bytes | Modified Date = 01/02/2007 18:19:56 | Attr = R ]
C:\WINDOWS\System32\IS3Hooks.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 49209 bytes | Modified Date = 01/02/2007 18:18:30 | Attr = R ]
C:\WINDOWS\System32\IS3HTUI.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 73728 bytes | Modified Date = 01/02/2007 18:20:04 | Attr = R ]
C:\WINDOWS\System32\IS3Inet.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 69688 bytes | Modified Date = 01/02/2007 18:17:46 | Attr = R ]
C:\WINDOWS\System32\IS3Svc.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 65591 bytes | Modified Date = 01/02/2007 18:17:40 | Attr = R ]
C:\WINDOWS\System32\IS3UI.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 340022 bytes | Modified Date = 01/02/2007 18:18:44 | Attr = R ]
C:\WINDOWS\System32\IS3VFS.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 45111 bytes | Modified Date = 01/02/2007 18:19:32 | Attr = R ]
C:\WINDOWS\System32\IS3Win32.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 139321 bytes | Modified Date = 01/02/2007 18:18:02 | Attr = R ]
C:\WINDOWS\System32\IS3XData.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 32768 bytes | Modified Date = 01/02/2007 18:18:10 | Attr = R ]
C:\WINDOWS\System32\pavas.ico [Ver = | Size = 30590 bytes | Modified Date = 17/02/2007 21:46:30 | Attr = ]
C:\WINDOWS\System32\perfc009.dat [Ver = | Size = 39992 bytes | Modified Date = 14/02/2007 16:25:48 | Attr = ]
C:\WINDOWS\System32\perfh009.dat [Ver = | Size = 311604 bytes | Modified Date = 14/02/2007 16:25:48 | Attr = ]
C:\WINDOWS\System32\PerfStringBackup.INI [Ver = | Size = 354910 bytes | Modified Date = 14/02/2007 16:25:48 | Attr = ]
C:\WINDOWS\System32\Status.MPF [Ver = | Size = 158240 bytes | Modified Date = 20/02/2007 20:55:14 | Attr = ]
C:\WINDOWS\System32\SZBase.dll iS3, Inc. [Ver = 4.4.7.16 | Size = 98355 bytes | Modified Date = 05/02/2007 18:23:28 | Attr = R ]
C:\WINDOWS\System32\Uninstall.ico [Ver = | Size = 2550 bytes | Modified Date = 17/02/2007 21:46:30 | Attr = ]
C:\WINDOWS\System32\wpa.dbl [Ver = | Size = 1170 bytes | Modified Date = 20/02/2007 20:55:54 | Attr = ]
C:\WINDOWS\System32\drivers\W700bus.sys MCCI [Ver = V4.34 | Size = 61536 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700cm.sys MCCI [Ver = V4.34 | Size = 6208 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700cmnt.sys MCCI [Ver = V4.34 | Size = 6208 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700mdfl.sys MCCI [Ver = V4.34 | Size = 9264 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700mdm.sys MCCI [Ver = V4.34 | Size = 97056 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700mgmt.sys MCCI [Ver = V4.34 | Size = 88560 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700obex.sys MCCI [Ver = V4.34 | Size = 86368 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700wh.sys MCCI [Ver = V4.34 | Size = 5840 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700whnt.sys MCCI [Ver = V4.34 | Size = 5840 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]

»»»»»»»»»»»»»»»»»»»» File String Scan (Non-Microsoft Only) »»»»»
@Alternate Data Stream - C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 (118 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\avgas-setup-7.5.0.50.exe:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\chavtest.xls:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe:Zone.Identifier (26 bytes)
[qoologic , urllogic , ]C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe (Trend Micro Incorporated)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\erunt-setup.exe:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\hijackthis.zip:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\HJTsetup.exe:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\PioletSetup.exe:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\pitflash.swf:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\setupeng.exe:Zone.Identifier (26 bytes)
[UPX! , UPX0 , ]C:\Documents and Settings\Dena Othen\My Documents\setupeng.exe ()
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\ssftrialsnrsetup1_1908302891.exe:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\Thumbs.db:encryptable (0 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\VundoFix.exe:Zone.Identifier (26 bytes)
[PEC2 , PECompact2 , ]C:\Documents and Settings\Dena Othen\My Documents\VundoFix.exe (Atribune.org)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\winpfind.exe:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\WINDOWS\Thumbs.db:encryptable (0 bytes)
[UPX! , UPX0 , ]C:\WINDOWS\System32\aswBoot.exe ()
[PEC2 , ]C:\WINDOWS\System32\dfrg.msc ()
[Thawte Consulting , ]C:\WINDOWS\System32\SmartUI2.ocx (Xceed Software Inc [removed] [removed] www.xceedsoft.com)
[UPX! , UPX0 , ]C:\WINDOWS\System32\SrchSTS.exe (S!Ri)
[UPX! , UPX0 , ]C:\WINDOWS\System32\swreg.exe (SteelWerX)
[UPX! , UPX0 , ]C:\WINDOWS\System32\swsc.exe ()
[UPX! , UPX0 , ]C:\WINDOWS\System32\swxcacls.exe (SteelWerX)
[winsync , ]C:\WINDOWS\System32\wbdbase.deu ()
[Thawte Consulting , ]C:\WINDOWS\System32\XceedCry.dll (Xceed Software Inc [removed] [removed] www.xceedsoft.com)
[Thawte Consulting , ]C:\WINDOWS\System32\XceedZip.dll (Xceed Software Inc [removed] [removed] www.xceedsoft.com)
[PTech , ]C:\WINDOWS\System32\drivers\mtlstrm.sys ( )

< End of report >

logfile created on: 20/02/2007 20:59:06
WinPFind by OldTimer - v2.0.1 Folder = C:\Documents and Settings\Dena Othen\My Documents\WinPFind\

»»»»»»»»»»»»»»»»»»»» Windows OS and Versions »»»»»»»»»»»»»»»»»»»»

Product Name: Microsoft Windows XP Service Pack 2 | Version: 5.1.2600
Internet Explorer Version: 7.0.5730.11

»»»»»»»»»»»»»»»»»»»» Memory/Drive Info »»»»»»»»»»»»»»»»»»»»»»»»»»

196080 Kb Total Physical Memory | 47324 Kb Available Physical Memory | 24.14% Memory free
329372 Kb Paging File | 41456 Kb Available in Paging File | 12.59% Paging File free
Paging file location: C:\pagefile.sys 144 288

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 73945808 Kb Total Space | 65257160 Kb Free Space | 88.25% Space Free
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded

»»»»»»»»»»»»»»»»»»»» Running Processes (Non-Microsoft) »»»»»»»»

C:\Documents and Settings\Dena Othen\My Documents\WinPFind\WinPFind.exe ()
C:\Program Files\Alwil Software\Avast4\ashDisp.exe ()
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
C:\Program Files\Alwil Software\Avast4\ashServ.exe ()
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe ()
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe (iS3, Inc.)
c:\program files\common files\Logitech\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (Anti-Malware Development a.s.)
C:\Program Files\McAfee.com\agent\mcagent.exe (Networks Associates Technology, Inc)
C:\Program Files\McAfee.com\Personal Firewall\MpfAgent.exe (McAfee Security)
C:\Program Files\McAfee.com\Personal Firewall\MPFSERVICE.exe (McAfee Corporation)
C:\Program Files\McAfee.com\Personal Firewall\MpfTray.exe (McAfee Security)
C:\Program Files\Piolet\Piolet.exe (MP2P Technologies.)
C:\Program Files\STOPzilla!\STOPzilla.exe (iS3, Inc.)
C:\Program Files\TalkTalk\bin\sprtcmd.exe (SupportSoft, Inc.)

»»»»»»»»»»»»»»»»»»»» Win32 Services (Non-Microsoft) »»»»»»»»»»»

(aswUpdSv) avast! iAVS4 Control Service [Win32_Own | Auto | Running]
= C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe ()

(avast! Antivirus) avast! Antivirus [Win32_Own | Auto | Running]
= C:\Program Files\Alwil Software\Avast4\ashServ.exe ()

(avast! Mail Scanner) avast! Mail Scanner [Win32_Own | On_Demand | Running]
= C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)

(avast! Web Scanner) avast! Web Scanner [Win32_Own | On_Demand | Running]
= C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)

(AVG Anti-Spyware Guard) AVG Anti-Spyware Guard [Win32_Own | Auto | Running]
= C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (Anti-Malware Development a.s.)

(CiSvc) Indexing Service [Win32_Shared | On_Demand | Stopped]
= C:\WINDOWS\system32\cisvc.exe (File not found)

(dmadmin) Logical Disk Manager Administrative Service [Win32_Shared | On_Demand | Stopped]
= C:\WINDOWS\system32\dmadmin.exe (Microsoft Corp., Veritas Software)

(IDriverT) InstallDriver Table Manager [Win32_Own | On_Demand | Stopped]
= C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)

(LVPrcSrv) Logitech Process Monitor [Win32_Own | Auto | Running]
= c:\program files\common files\Logitech\LVMVFM\LVPrcSrv.exe (Logitech Inc.)

(LVSrvLauncher) LVSrvLauncher [Win32_Own | Auto | Stopped]
= C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe (Logitech Inc.)

(mcupdmgr.exe) McAfee SecurityCenter Update Manager [Win32_Own | On_Demand | Stopped]
= C:\Program Files\McAfee.com\agent\mcupdmgr.exe (Networks Associates Technology, Inc)

(MpfService) McAfee Personal Firewall Service [Win32_Own | Auto | Running]
= C:\Program Files\McAfee.com\Personal Firewall\MPFSERVICE.exe (McAfee Corporation)

(SandraDataSrv) Sandra Data Service [Win32_Own | On_Demand | Stopped]
= C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe (SiSoftware)

(SandraTheSrv) Sandra Service [Win32_Own | On_Demand | Stopped]
= C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe (SiSoftware)

(SLService) SmartLinkService [Win32_Own | Auto | Stopped]
= C:\WINDOWS\system32\slserv.exe ( )

(szserver) STOPzilla Service [Win32_Own | Auto | Running]
= C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe (iS3, Inc.)

»»»»»»»»»»»»»»»»»»»» Registry Items (Non-Microsoft) »»»»»»»»»»»

>>>>> Run Keys and Auto-Start Folders <<<<<

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
avast! = C:\Program Files\Alwil Software\Avast4\ashDisp.exe ()
MCAgentExe = c:\Program Files\McAfee.com\agent\mcagent.exe (Networks Associates Technology, Inc)
MCUpdateExe = C:\Program Files\McAfee.com\agent\mcupdate.exe (Networks Associates Technology, Inc)
MPFExe = C:\Program Files\McAfee.com\Personal Firewall\MpfTray.exe (McAfee Security)
Piolet = C:\Program Files\Piolet\Piolet.exe (MP2P Technologies.)
TalkTalk = C:\Program Files\TalkTalk\bin\sprtcmd.exe (SupportSoft, Inc.)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx]*


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx]*


< Common Startup Folder = C:\Documents and Settings\All Users\Start Menu\Programs\Startup >
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini ()

< User Startup Folder = C:\Documents and Settings\Dena Othen\Start Menu\Programs\Startup >
C:\Documents and Settings\Dena Othen\Start Menu\Programs\Startup\desktop.ini ()

C:\Documents and Settings\Dena Othen\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
C:\Program Files\ERUNT\AUTOBACK.EXE ()

>>>>> MsConfig Disabled Items <<<<<

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig]*

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path = C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk (File not found)
backup = C:\WINDOWS\pss\Adobe Reader Speed Launch.lnk (File not found)
location = Common Startup
command = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
item = Adobe Reader Speed Launch

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digimax Viewer 2.1.lnk]
path = C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digimax Viewer 2.1.lnk (File not found)
backup = C:\WINDOWS\pss\Digimax Viewer 2.1.l (File not found)
location = Common Startup
command = C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe (STOIK Imaging (www.stoik.com))
item = Digimax Viewer 2.1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Logitech Desktop Messenger.lnk]
path = C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech Desktop Messenger.lnk (File not found)
backup = C:\WINDOWS\pss\Logitech Desktop Messenger.lnk (File not found)
location = Common Startup
command = C:\PROGRA~1\Logitech\DESKTO~1\8876480\Program\LDMConf.exe (File not found)
item = Logitech Desktop Messenger

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\%FP%Friendly fts.exe]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = fts
hkey = HKLM
command = C:\Program Files\VoyagerTest\fts.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AOLDialer]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = AOLDial
hkey = HKLM
command = C:\Program Files\Common Files\AOL\ACS\AOLDial.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AVG7_CC]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = avgcc
hkey = HKLM
command = C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ctfmon.exe]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
hkey = HKCU
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DSLAGENTEXE]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = dslagent
hkey = HKLM
command = C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DSLSTATEXE]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = dslstat
hkey = HKLM
command = C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GreasyPalmUpdate]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = C:\WINDOWS\GreasyPalmUpdate.exe (GreasyPalm)
hkey = HKLM
command = C:\WINDOWS\GreasyPalmUpdate.exe (GreasyPalm)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HostManager]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = AOLHostManager
hkey = HKLM
command = C:\Program Files\Common Files\AOL\1134937258\ee\AOLHostManager.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iTunesHelper]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = iTunesHelper
hkey = HKLM
command = C:\Program Files\iTunes\iTunesHelper.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LDM]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = LogitechDesktopMessenger
hkey = HKCU
command = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LogitechCommunicationsManager]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = Communications_Helper
hkey = HKLM
command = C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe (Logitech Inc.)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LogitechQuickCamRibbon]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = QuickCam10
hkey = HKLM
command = C:\Program Files\Logitech\QuickCam10\QuickCam10.exe ()
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LVCOMSX]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = LVComSX
hkey = HKLM
command = C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe (Logitech Inc.)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MSMSGS]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = msmsgs
hkey = HKCU
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MsnMsgr]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = MsnMsgr
hkey = HKCU
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PC Registry Cleaner]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = PC Registry Cleaner
hkey = HKCU
command = C:\Program Files\PC Registry Cleaner\PC Registry Cleaner.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PCMService]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = PCMService
hkey = HKLM
command = c:\APPS\Powercinema\PCMService.exe (CyberLink Corp.)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Piolet]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = Piolet
hkey = HKLM
command = C:\Program Files\Piolet\Piolet.exe (MP2P Technologies.)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = qttask
hkey = HKLM
command = C:\Program Files\QuickTime\qttask.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SiS Windows KeyHook]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = C:\WINDOWS\system32\Keyhook.exe (Silicon Integrated Systems Corporation)
hkey = HKLM
command = C:\WINDOWS\system32\Keyhook.exe (Silicon Integrated Systems Corporation)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TkBellExe]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = realsched
hkey = HKLM
command = C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\VirusScan Online]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = mcvsshld
hkey = HKLM
command = c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\VSOCheckTask]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = mcmnhdlr
hkey = HKLM
command = c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Windows Defender]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = MSASCui
hkey = HKLM
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\WinFixer2005]
key = SOFTWARE\Microsoft\Windows\CurrentVersion\Run
item = uwfx5
hkey = HKCU
command = C:\Program Files\WinFixer 2005\uwfx5.exe (File not found)
inimapping = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\state]
system.ini = 0
win.ini = 0
bootini = 0
services = 0
startup = 2

>>>>> Disabled Startup Folder Items <<<<<

>>>>> Items Started Through Miscellaneous Registry Keys <<<<<


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
{57B86673-276A-48B2-BAE7-C6DBB3020EB8} = AVG Anti-Spyware 7.5 ( HKLM = C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll (Anti-Malware Development a.s.) )


>>>>> Security Providers <<<<<

>>>>> Winlogon Keys <<<<<


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet]
Control_RunDLL (File not found)
>>>>> Policy Keys <<<<<

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies]*

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Attachments]
ScanWithAntiVirus = 2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum]
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} = 1
{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} = 1073741857
{0DF44EAA-FF21-4412-828E-260A8728E7F1} = 32

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
dontdisplaylastusername = 0
legalnoticecaption =
legalnoticetext =
shutdownwithoutlogon = 1
undockwithoutlogon = 1

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies]*

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
NoDriveTypeAutoRun = 145

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer]*

>>>>> Desktop Components <<<<<

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
FriendlyName = My Current Home Page
Source = About:Home
SubscribedURL = About:Home

>>>>> HOSTS File <<<<<

HOSTS file found at: C:\WINDOWS\System32\drivers\etc\Hosts (Size: 9525 bytes | Modified Date: 20/02/2007 20:51:26)

>>>>> Internet Explorer Settings <<<<<

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
Local Page = %SystemRoot%\system32\blank.htm
Search Page = http://www.google.com
Start Page = http://www.aol.co.uk/talktalk

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]
CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main]
Local Page = C:\WINDOWS\SYSTEM32\blank.htm
Search Bar = http://home.microsoft.com/search/lobby/search.asp
Search Page = http://www.google.com
Start Page = http://www.aol.co.uk/talktalk

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search]
SearchAssistant = http://ie.search.msn.com/en-us/srchasst/srchasst.htm

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} = Yahoo! Toolbar ( HKLM = Reg Data - Key not found (File not found) )

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
ProxyEnable = 0

>>>>> Browser Helper Objects <<<<<

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
- AcroIEHlprObj Class ( HKLM = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) )

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1827766B-9F49-4854-8034-F6EE26FCB1EC}]
- ZILLAbar Browser Helper Object ( HKLM = C:\Program Files\STOPzilla!\ZB2.dll (iS3, Inc) )

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8272B062-BD4D-4EAD-A149-45B3CE3F5CDA}]
- Band Class ( HKLM = C:\WINDOWS\GPalm.dll () )

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E3215F20-3212-11D6-9F8B-00D0B743919D}]
- STOPzilla Browser Helper Object ( HKLM = C:\Program Files\STOPzilla!\SZIEBHO.dll (iS3, Inc.) )

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
- EpsonToolBandKicker Class ( HKLM = C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) )

>>>>> Bars, Toolbars and Extensions <<<<<

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478}]
- Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]
{8272B062-BD4D-4EAD-A149-45B3CE3F5CDA} - Band Class ( HKLM = C:\WINDOWS\GPalm.dll () )
{98828DED-A591-462F-83BA-D2F62A68B8B8} - STOPzilla ( HKLM = C:\Program Files\STOPzilla!\ZB2.dll (iS3, Inc) )
{BA52B914-B692-46c4-B683-905236F6F655} - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page ( HKLM = C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) )

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\ToolBar\ShellBrowser]
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\ToolBar\WebBrowser]
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
{C75C8E7E-5059-4469-AC11-D7544B260382} - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page ( HKLM = C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) )

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping]
{2D663D1A-8670-49D9-A1A5-4C56B4E14E84} = 8194 - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
{300DB664-75B5-47c0-8B45-A44ACCF73C00} = 8198 - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
{CD67F990-D8E9-11d2-98FE-00C0F0318AFE} = 8193 - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
{E908B145-C847-4e85-B315-07E2E70DECF8} = 8199 - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
{FB5F1910-F110-11d2-BB9E-00C04F795683} = 8195 - Reg Data - Key not found ( HKLM = Reg Data - Key not found (File not found) )
NextId = 8200

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{CD67F990-D8E9-11d2-98FE-00C0F0318AFE}]
ButtonText = Real.com

>>>>> Approved Shell Extensions <<<<<

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
{0DF44EAA-FF21-4412-828E-260A8728E7F1} = Taskbar and Start Menu ( HKLM = Reg Data - Key not found (File not found) )
{227F862C-3DFD-4daa-8009-ED1DB6288810} = Samsung YP-N30Shell Hook ( HKLM = C:\WINDOWS\system32\ypn30h.dll (Samsung Electronics Co., LTD.) )
{32683183-48a0-441b-a342-7c2a440a9478} = Media Band ( CLSID not found! )
{42071714-76d4-11d1-8b24-00a0c9068ff3} = Display Panning CPL Extension ( HKLM = deskpan.dll (File not found) )
{472083B0-C522-11CF-8763-00608CC02F24} = avast ( HKLM = C:\Program Files\Alwil Software\Avast4\ashShell.dll (ALWIL Software) )
{764BF0E1-F219-11ce-972D-00AA00A14F56} = Shell extensions for file compression ( CLSID not found! )
{7A9D77BD-5403-11d2-8785-2E0420524153} = User Accounts ( HKLM = Reg Data - Key not found (File not found) )
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} = Encryption Context Menu ( CLSID not found! )
{88895560-9AA2-1069-930E-00AA0030EBC8} = HyperTerminal Icon Ext ( HKLM = C:\WINDOWS\system32\hticons.dll (Hilgraeve, Inc.) )
{DEE12703-6333-4D4E-8F34-738C4DCC2E04} = RecordNow! SendToExt ( HKLM = C:\APPS\RecordNow\shlext.dll () )
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} = RealOne Player Context Menu Class ( HKLM = C:\Program Files\Real\RealPlayer\rpshell.dll (RealNetworks, Inc.) )

>>>>> Context Menu Handlers / Column Handlers <<<<<

[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\avast]
@ = {472083B0-C522-11CF-8763-00608CC02F24} ( HKLM = C:\Program Files\Alwil Software\Avast4\ashShell.dll (ALWIL Software) )

[HKEY_LOCAL_MACHINE\Software\Classes\*\shellex\ContextMenuHandlers\AVG Anti-Spyware]
@ = {8934FCEF-F5B8-468f-951F-78A921CD3920} ( HKLM = C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll (Anti-Malware Development a.s.) )

[HKEY_LOCAL_MACHINE\Software\Classes\Directory\shellex\ContextMenuHandlers\AVG Anti-Spyware]
@ = {8934FCEF-F5B8-468f-951F-78A921CD3920} ( HKLM = C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll (Anti-Malware Development a.s.) )

[HKEY_LOCAL_MACHINE\Software\Classes\Folder\shellex\ContextMenuHandlers\avast]
@ = {472083B0-C522-11CF-8763-00608CC02F24} ( HKLM = C:\Program Files\Alwil Software\Avast4\ashShell.dll (ALWIL Software) )

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{F9DB5320-233E-11D1-9F84-707F02C10627}]
- PDF Shell Extension ( HKLM = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\pdfshell.dll (Adobe Systems, Inc.) )

>>>>> User Agent Post Platform <<<<<

>>>>> TCP/IP Configuration <<<<<

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{024A88F7-3C65-4ED9-83BB-50546F693376}]
DefaultGateway =
DhcpIPAddress = 169.254.24.63
DhcpServer = 255.255.255.255
DhcpSubnetMask = 255.255.0.0
Domain =
EnableDHCP = 1
IPAddress = 0.0.0.0;
IPAutoconfigurationAddress = 169.254.24.63
NameServer =
SubnetMask = 0.0.0.0;

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{6C33BC62-C274-41F5-A1F5-C1C0B6A18AB4}]
DefaultGateway =
Domain =
EnableDHCP = 1
IPAddress = 0.0.0.0;
NameServer =
SubnetMask = 0.0.0.0;

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{D4AC8F61-D5D8-4FDB-85D9-53E205CDE3A8}] ( Realtek RTL8139/810x Family Fast Ethernet NIC )
DefaultGateway =
Domain =
EnableDHCP = 1
IPAddress = 0.0.0.0;
NameServer =
SubnetMask = 0.0.0.0;

>>>>> WinSock2 Parameters <<<<<

>>>>> Protocol Handlers <<<<<

>>>>> Protocol Filters <<<<<

>>>>> Downloaded Program Files <<<<<

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0E5F0222-96B9-11D3-8997-00104BD12D94}\DownloadInformation]
CODEBASE = http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
INF = C:\WINDOWS\Downloaded Program Files\PCPitstop.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{13EC55CF-D993-475B-9ACA-F4A384957956}\DownloadInformation]
CODEBASE = https://www.windowsonecare.com/install/cli/…nSSWebAgent.CAB
INF = C:\WINDOWS\Downloaded Program Files\setup.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{17492023-C23A-453E-A040-C7C580BBF700}\DownloadInformation]
CODEBASE = http://download.microsoft.com/download/3/9…heckControl.cab
INF = C:\WINDOWS\Downloaded Program Files\LegitCheckControl.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{4C39376E-FA9D-4349-BACC-D305C1750EF3}\DownloadInformation]
CODEBASE = http://tools.ebayimg.com/eps/wl/activex/EP…l_v1-0-3-24.cab
INF = C:\WINDOWS\Downloaded Program Files\EPUWALcontrol.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{5F0C30E4-1E72-4DCC-85E5-57810F1CA97B}\DownloadInformation]
CODEBASE = http://www.amiuptodate.com/vsc/bin/1,0,0,8…pdatePortal.cab
INF = C:\WINDOWS\Downloaded Program Files\McMysec.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{6E32070A-766D-4EE6-879C-DC1FA91D2FC3}\DownloadInformation]
CODEBASE = http://update.microsoft.com/microsoftupdat…b?1170975278984
INF = C:\WINDOWS\Downloaded Program Files\muweb.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{79E0C1C0-316D-11D5-A72A-006097BFA1AC}\DownloadInformation]
CODEBASE = http://support.epson-europe.com/selftest/Prg/ESTPTest.cab
INF = C:\WINDOWS\Downloaded Program Files\ESTPTEST.INF

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{7F8C8173-AD80-4807-AA75-5672F22B4582}\DownloadInformation]
CODEBASE = http://download.zonelabs.com/bin/promotion…anner371290.cab
INF = C:\WINDOWS\Downloaded Program Files\ICSScanner.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{9A9307A0-7DA4-4DAF-B042-5009F29E09E1}\DownloadInformation]
CODEBASE = http://acs.pandasoftware.com/activescan/as5free/asinst.cab
INF = C:\WINDOWS\Downloaded Program Files\asinst.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{B38870E4-7ECB-40DA-8C6A-595F0A5519FF}\DownloadInformation]
CODEBASE = http://messenger.msn.com/download/msnmesse…pdownloader.cab
INF = C:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B}\DownloadInformation]
CODEBASE = http://game19.zylomgames.com/activex/zylomgamesplayer.cab
INF = C:\WINDOWS\Downloaded Program Files\ZylomGamesPlayer.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\DownloadInformation]
CODEBASE = http://fpdownload.macromedia.com/get/flash…ent/swflash.cab
INF = C:\WINDOWS\Downloaded Program Files\swflash.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{EF791A6B-FC12-4C68-99EF-FB9E207A39E6}\DownloadInformation]
CODEBASE = http://download.mcafee.com/molbin/iss-loc/…519/mcfscan.cab
INF = C:\WINDOWS\Downloaded Program Files\mcfscan.inf

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation]
CODEBASE = file://C:\WINDOWS\Java\classes\dajava.cab
OSD = C:\WINDOWS\Downloaded Program Files\DirectAnimation Java Classes.osd

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation]
CODEBASE = file://C:\WINDOWS\Java\classes\xmldso.cab
OSD = C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

»»»»»»»»»»»»»»»»»»»» Files Created Within 30 Days »»»»»»»»»»»»»

C:\hiberfil.sys [Ver = | Size = 200855552 bytes | Created Date = 01/01/1601 | Attr = HS]
C:\sqmdata04.sqm [Ver = | Size = 268 bytes | Created Date = 11/02/2007 21:47:15 | Attr = H ]
C:\sqmdata05.sqm [Ver = | Size = 208 bytes | Created Date = 11/02/2007 21:47:15 | Attr = H ]
C:\sqmdata06.sqm [Ver = | Size = 208 bytes | Created Date = 11/02/2007 21:47:15 | Attr = H ]
C:\sqmnoopt04.sqm [Ver = | Size = 244 bytes | Created Date = 11/02/2007 21:47:14 | Attr = H ]
C:\sqmnoopt05.sqm [Ver = | Size = 232 bytes | Created Date = 11/02/2007 21:47:15 | Attr = H ]
C:\sqmnoopt06.sqm [Ver = | Size = 232 bytes | Created Date = 11/02/2007 21:47:15 | Attr = H ]
C:\Documents and Settings\Dena Othen\My Documents\avgas-setup-7.5.0.50.exe [Ver = | Size = 6469352 bytes | Created Date = 12/02/2007 17:41:24 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\avgas-setup-7.5.0.50.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\chavtest.xls [Ver = | Size = 56832 bytes | Created Date = 26/01/2007 09:55:09 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\chavtest.xls:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe Trend Micro Incorporated [Ver = 2.19-1099 | Size = 532480 bytes | Created Date = 12/02/2007 16:04:42 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\erunt-setup.exe Lars Hederer [Ver = | Size = 791393 bytes | Created Date = 20/02/2007 20:17:21 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\erunt-setup.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\hijackthis.zip [Ver = | Size = 212849 bytes | Created Date = 12/02/2007 15:39:21 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\hijackthis.zip:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\HJTsetup.exe Soeperman Enterprises Ltd [Ver = | Size = 488144 bytes | Created Date = 12/02/2007 15:54:29 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\HJTsetup.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\setupeng.exe [Ver = 1, 1, 0, 0 | Size = 13326120 bytes | Created Date = 08/02/2007 20:48:34 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\setupeng.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\ssftrialsnrsetup1_1908302891.exe Webroot Software, Inc. [Ver = 5.3.1.2344 | Size = 12887888 bytes | Created Date = 08/02/2007 15:56:54 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\ssftrialsnrsetup1_1908302891.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\systdoc.wps [Ver = | Size = 11776 bytes | Created Date = 12/02/2007 11:05:44 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\SZScanLog.dat [Ver = | Size = 58723 bytes | Created Date = 14/02/2007 15:03:04 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\VundoFix.exe Atribune.org [Ver = 6.03.0007 | Size = 91648 bytes | Created Date = 19/02/2007 14:25:10 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\VundoFix.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\winpfind.exe [Ver = | Size = 262159 bytes | Created Date = 20/02/2007 20:32:30 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\winpfind.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\All Users\Desktop\Ad-Aware SE Personal.lnk [Ver = | Size = 844 bytes | Created Date = 10/02/2007 23:05:42 | Attr = ]
C:\Documents and Settings\All Users\Desktop\avast! Antivirus.lnk [Ver = | Size = 1712 bytes | Created Date = 08/02/2007 20:49:31 | Attr = ]
C:\Documents and Settings\All Users\Desktop\AVG Anti-Spyware.lnk [Ver = | Size = 852 bytes | Created Date = 12/02/2007 17:43:01 | Attr = ]
C:\Documents and Settings\All Users\Desktop\Launch STOPzilla!.lnk [Ver = | Size = 1578 bytes | Created Date = 08/02/2007 19:33:31 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\CCleaner.lnk [Ver = | Size = 1551 bytes | Created Date = 09/02/2007 18:26:56 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\ERUNT.lnk [Ver = | Size = 595 bytes | Created Date = 20/02/2007 20:18:24 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\Hijackthis.lnk [Ver = | Size = 653 bytes | Created Date = 12/02/2007 15:55:39 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\NTREGOPT.lnk [Ver = | Size = 614 bytes | Created Date = 20/02/2007 20:18:24 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\Piolet.lnk [Ver = | Size = 1495 bytes | Created Date = 10/02/2007 17:45:45 | Attr = ]
C:\Documents and Settings\Dena Othen\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk [Ver = | Size = 770 bytes | Created Date = 20/02/2007 20:18:42 | Attr = ]
C:\WINDOWS\imsins.BAK [Ver = | Size = 1374 bytes | Created Date = 14/02/2007 16:24:54 | Attr = ]
C:\WINDOWS\mngui.INI [Ver = | Size = 0 bytes | Created Date = 23/01/2007 20:27:10 | Attr = ]
C:\WINDOWS\System32\asuninst.exe Panda Software [Ver = 1, 0, 0, 2 | Size = 73728 bytes | Created Date = 17/02/2007 21:49:29 | Attr = ]
C:\WINDOWS\System32\aswBoot.exe [Ver = 4, 7, 936, 0 | Size = 689280 bytes | Created Date = 08/02/2007 20:49:13 | Attr = ]
C:\WINDOWS\System32\AVASTSS.scr ALWIL Software [Ver = 4, 7, 936, 0 | Size = 90112 bytes | Created Date = 08/02/2007 20:49:13 | Attr = ]
C:\WINDOWS\System32\dumphive.exe [Ver = | Size = 51200 bytes | Created Date = 12/02/2007 11:03:41 | Attr = ]
C:\WINDOWS\System32\Help.ico [Ver = | Size = 1406 bytes | Created Date = 17/02/2007 18:00:42 | Attr = ]
C:\WINDOWS\System32\IS39XLdr.dll International Software Systems Solutions [Ver = 4.3.63.0 | Size = 81977 bytes | Created Date = 01/02/2007 18:18:24 | Attr = R ]
C:\WINDOWS\System32\IS3Base.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 516152 bytes | Created Date = 01/02/2007 18:17:18 | Attr = R ]
C:\WINDOWS\System32\IS3DBA.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 278583 bytes | Created Date = 01/02/2007 18:19:56 | Attr = R ]
C:\WINDOWS\System32\IS3Hooks.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 49209 bytes | Created Date = 01/02/2007 18:18:30 | Attr = R ]
C:\WINDOWS\System32\IS3HTUI.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 73728 bytes | Created Date = 01/02/2007 18:20:04 | Attr = R ]
C:\WINDOWS\System32\IS3Inet.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 69688 bytes | Created Date = 01/02/2007 18:17:46 | Attr = R ]
C:\WINDOWS\System32\IS3Svc.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 65591 bytes | Created Date = 01/02/2007 18:17:40 | Attr = R ]
C:\WINDOWS\System32\IS3UI.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 340022 bytes | Created Date = 01/02/2007 18:18:44 | Attr = R ]
C:\WINDOWS\System32\IS3VFS.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 45111 bytes | Created Date = 01/02/2007 18:19:32 | Attr = R ]
C:\WINDOWS\System32\IS3Win32.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 139321 bytes | Created Date = 01/02/2007 18:18:02 | Attr = R ]
C:\WINDOWS\System32\IS3XData.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 32768 bytes | Created Date = 01/02/2007 18:18:10 | Attr = R ]
C:\WINDOWS\System32\pavas.ico [Ver = | Size = 30590 bytes | Created Date = 17/02/2007 18:00:41 | Attr = ]
C:\WINDOWS\System32\Process.exe http://www.beyondlogic.org [Ver = 2, 0, 0, 0 | Size = 53248 bytes | Created Date = 12/02/2007 11:03:40 | Attr = ]
C:\WINDOWS\System32\SrchSTS.exe S!Ri [Ver = | Size = 288417 bytes | Created Date = 12/02/2007 11:03:40 | Attr = ]
C:\WINDOWS\System32\swreg.exe SteelWerX [Ver = 2.0.1.0 | Size = 135168 bytes | Created Date = 12/02/2007 11:03:40 | Attr = ]
C:\WINDOWS\System32\swsc.exe [Ver = | Size = 40960 bytes | Created Date = 12/02/2007 11:03:40 | Attr = ]
C:\WINDOWS\System32\swxcacls.exe SteelWerX [Ver = 1.0.1.1 | Size = 79360 bytes | Created Date = 12/02/2007 11:03:41 | Attr = ]
C:\WINDOWS\System32\SZBase.dll iS3, Inc. [Ver = 4.4.7.16 | Size = 98355 bytes | Created Date = 05/02/2007 18:23:28 | Attr = R ]
C:\WINDOWS\System32\ZPORT4AS.dll [Ver = | Size = 11776 bytes | Created Date = 17/02/2007 21:49:29 | Attr = ]
C:\WINDOWS\System32\drivers\aavmker4.sys ALWIL Software [Ver = 4.7.892.0 | Size = 31560 bytes | Created Date = 08/02/2007 20:49:29 | Attr = ]
C:\WINDOWS\System32\drivers\aswmon.sys ALWIL Software [Ver = 4.7.892.0 | Size = 85952 bytes | Created Date = 08/02/2007 20:49:20 | Attr = ]
C:\WINDOWS\System32\drivers\aswmon2.sys ALWIL Software [Ver = 4.7.892.0 | Size = 94424 bytes | Created Date = 08/02/2007 20:49:20 | Attr = ]
C:\WINDOWS\System32\drivers\aswRdr.sys ALWIL Software [Ver = 4.7.936.0 | Size = 23352 bytes | Created Date = 08/02/2007 20:49:30 | Attr = ]
C:\WINDOWS\System32\drivers\aswTdi.sys ALWIL Software [Ver = 4.7.936.0 | Size = 43176 bytes | Created Date = 08/02/2007 20:49:29 | Attr = ]
C:\WINDOWS\System32\drivers\AvgAsCln.sys GRISOFT, s.r.o. [Ver = 1.0.0.14 | Size = 3968 bytes | Created Date = 12/02/2007 17:42:09 | Attr = ]
C:\WINDOWS\System32\drivers\W700bus.sys MCCI [Ver = V4.34 | Size = 61536 bytes | Created Date = 23/01/2007 19:33:32 | Attr = ]
C:\WINDOWS\System32\drivers\W700cm.sys MCCI [Ver = V4.34 | Size = 6208 bytes | Created Date = 23/01/2007 19:33:32 | Attr = ]
C:\WINDOWS\System32\drivers\W700cmnt.sys MCCI [Ver = V4.34 | Size = 6208 bytes | Created Date = 23/01/2007 19:33:32 | Attr = ]
C:\WINDOWS\System32\drivers\W700mdfl.sys MCCI [Ver = V4.34 | Size = 9264 bytes | Created Date = 23/01/2007 19:33:32 | Attr = ]
C:\WINDOWS\System32\drivers\W700mdm.sys MCCI [Ver = V4.34 | Size = 97056 bytes | Created Date = 23/01/2007 19:33:32 | Attr = ]
C:\WINDOWS\System32\drivers\W700mgmt.sys MCCI [Ver = V4.34 | Size = 88560 bytes | Created Date = 23/01/2007 19:33:33 | Attr = ]
C:\WINDOWS\System32\drivers\W700obex.sys MCCI [Ver = V4.34 | Size = 86368 bytes | Created Date = 23/01/2007 19:33:33 | Attr = ]
C:\WINDOWS\System32\drivers\W700wh.sys MCCI [Ver = V4.34 | Size = 5840 bytes | Created Date = 23/01/2007 19:33:33 | Attr = ]
C:\WINDOWS\System32\drivers\W700whnt.sys MCCI [Ver = V4.34 | Size = 5840 bytes | Created Date = 23/01/2007 19:33:33 | Attr = ]

»»»»»»»»»»»»»»»»»»»» Files Modified Within 30 Days »»»»»»»»»»»»»

C:\BOOT.INI [Ver = | Size = 281 bytes | Modified Date = 09/02/2007 15:01:16 | Attr = HS]
C:\hiberfil.sys [Ver = | Size = 200855552 bytes | Modified Date = 20/02/2007 20:51:00 | Attr = HS]
C:\sqmdata04.sqm [Ver = | Size = 268 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\sqmdata05.sqm [Ver = | Size = 208 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\sqmdata06.sqm [Ver = | Size = 208 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\sqmnoopt04.sqm [Ver = | Size = 244 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\sqmnoopt05.sqm [Ver = | Size = 232 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\sqmnoopt06.sqm [Ver = | Size = 232 bytes | Modified Date = 11/02/2007 21:47:16 | Attr = H ]
C:\Documents and Settings\Dena Othen\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [Ver = | Size = 10752 bytes | Modified Date = 23/01/2007 20:24:52 | Attr = ]
C:\Documents and Settings\Dena Othen\Local Settings\Application Data\IconCache.db [Ver = | Size = 3712744 bytes | Modified Date = 20/02/2007 20:49:54 | Attr = H ]
C:\Documents and Settings\All Users\Documents\Global.sw2 [Ver = | Size = 4777 bytes | Modified Date = 20/02/2007 20:55:52 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\avgas-setup-7.5.0.50.exe [Ver = | Size = 6469352 bytes | Modified Date = 12/02/2007 17:41:26 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\avgas-setup-7.5.0.50.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\chavtest.xls [Ver = | Size = 56832 bytes | Modified Date = 26/01/2007 09:55:14 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\chavtest.xls:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe Trend Micro Incorporated [Ver = 2.19-1099 | Size = 532480 bytes | Modified Date = 12/02/2007 16:04:46 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\erunt-setup.exe Lars Hederer [Ver = | Size = 791393 bytes | Modified Date = 20/02/2007 20:18:04 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\erunt-setup.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\hijackthis.zip [Ver = | Size = 212849 bytes | Modified Date = 12/02/2007 15:39:38 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\hijackthis.zip:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\HJTsetup.exe Soeperman Enterprises Ltd [Ver = | Size = 488144 bytes | Modified Date = 12/02/2007 15:54:32 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\HJTsetup.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\My Sharing Folders.lnk [Ver = | Size = 588 bytes | Modified Date = 11/02/2007 21:48:44 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\setupeng.exe [Ver = 1, 1, 0, 0 | Size = 13326120 bytes | Modified Date = 08/02/2007 20:48:48 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\setupeng.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\ssftrialsnrsetup1_1908302891.exe Webroot Software, Inc. [Ver = 5.3.1.2344 | Size = 12887888 bytes | Modified Date = 08/02/2007 15:57:02 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\ssftrialsnrsetup1_1908302891.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\systdoc.wps [Ver = | Size = 11776 bytes | Modified Date = 12/02/2007 11:05:48 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\SZScanLog.dat [Ver = | Size = 58723 bytes | Modified Date = 14/02/2007 15:03:04 | Attr = ]
C:\Documents and Settings\Dena Othen\My Documents\VundoFix.exe Atribune.org [Ver = 6.03.0007 | Size = 91648 bytes | Modified Date = 19/02/2007 14:25:22 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\VundoFix.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\Dena Othen\My Documents\winpfind.exe [Ver = | Size = 262159 bytes | Modified Date = 20/02/2007 20:32:34 | Attr = ]
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\winpfind.exe:Zone.Identifier (26 bytes)
C:\Documents and Settings\All Users\Desktop\Ad-Aware SE Personal.lnk [Ver = | Size = 844 bytes | Modified Date = 10/02/2007 23:05:44 | Attr = ]
C:\Documents and Settings\All Users\Desktop\avast! Antivirus.lnk [Ver = | Size = 1712 bytes | Modified Date = 08/02/2007 20:49:32 | Attr = ]
C:\Documents and Settings\All Users\Desktop\AVG Anti-Spyware.lnk [Ver = | Size = 852 bytes | Modified Date = 12/02/2007 17:43:02 | Attr = ]
C:\Documents and Settings\All Users\Desktop\Launch STOPzilla!.lnk [Ver = | Size = 1578 bytes | Modified Date = 08/02/2007 19:33:32 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\CCleaner.lnk [Ver = | Size = 1551 bytes | Modified Date = 09/02/2007 18:26:58 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\ERUNT.lnk [Ver = | Size = 595 bytes | Modified Date = 20/02/2007 20:18:26 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\Hijackthis.lnk [Ver = | Size = 653 bytes | Modified Date = 12/02/2007 15:55:40 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\NTREGOPT.lnk [Ver = | Size = 614 bytes | Modified Date = 20/02/2007 20:18:26 | Attr = ]
C:\Documents and Settings\Dena Othen\Desktop\Piolet.lnk [Ver = | Size = 1495 bytes | Modified Date = 10/02/2007 17:45:46 | Attr = ]
C:\Documents and Settings\Dena Othen\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk [Ver = | Size = 770 bytes | Modified Date = 20/02/2007 20:18:44 | Attr = ]
C:\WINDOWS\AppRun.ini [Ver = | Size = 543 bytes | Modified Date = 09/02/2007 18:36:04 | Attr = ]
C:\WINDOWS\bootstat.dat [Ver = | Size = 2048 bytes | Modified Date = 20/02/2007 20:51:04 | Attr = S]
C:\WINDOWS\imsins.BAK [Ver = | Size = 1374 bytes | Modified Date = 16/02/2007 08:25:40 | Attr = ]
C:\WINDOWS\mngui.INI [Ver = | Size = 0 bytes | Modified Date = 23/01/2007 20:27:12 | Attr = ]
C:\WINDOWS\system.ini [Ver = | Size = 227 bytes | Modified Date = 09/02/2007 15:01:16 | Attr = ]
C:\WINDOWS\win.ini [Ver = | Size = 935 bytes | Modified Date = 17/02/2007 21:54:02 | Attr = ]
C:\WINDOWS\WMSysPr9.prx [Ver = | Size = 316640 bytes | Modified Date = 10/02/2007 17:45:54 | Attr = ]
C:\WINDOWS\System32\CONFIG.NT [Ver = | Size = 2626 bytes | Modified Date = 08/02/2007 20:49:30 | Attr = ]
C:\WINDOWS\System32\Help.ico [Ver = | Size = 1406 bytes | Modified Date = 17/02/2007 21:46:30 | Attr = ]
C:\WINDOWS\System32\IS39XLdr.dll International Software Systems Solutions [Ver = 4.3.63.0 | Size = 81977 bytes | Modified Date = 01/02/2007 18:18:24 | Attr = R ]
C:\WINDOWS\System32\IS3Base.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 516152 bytes | Modified Date = 01/02/2007 18:17:18 | Attr = R ]
C:\WINDOWS\System32\IS3DBA.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 278583 bytes | Modified Date = 01/02/2007 18:19:56 | Attr = R ]
C:\WINDOWS\System32\IS3Hooks.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 49209 bytes | Modified Date = 01/02/2007 18:18:30 | Attr = R ]
C:\WINDOWS\System32\IS3HTUI.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 73728 bytes | Modified Date = 01/02/2007 18:20:04 | Attr = R ]
C:\WINDOWS\System32\IS3Inet.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 69688 bytes | Modified Date = 01/02/2007 18:17:46 | Attr = R ]
C:\WINDOWS\System32\IS3Svc.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 65591 bytes | Modified Date = 01/02/2007 18:17:40 | Attr = R ]
C:\WINDOWS\System32\IS3UI.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 340022 bytes | Modified Date = 01/02/2007 18:18:44 | Attr = R ]
C:\WINDOWS\System32\IS3VFS.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 45111 bytes | Modified Date = 01/02/2007 18:19:32 | Attr = R ]
C:\WINDOWS\System32\IS3Win32.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 139321 bytes | Modified Date = 01/02/2007 18:18:02 | Attr = R ]
C:\WINDOWS\System32\IS3XData.dll iS3, Inc. [Ver = 4.3.63.0 | Size = 32768 bytes | Modified Date = 01/02/2007 18:18:10 | Attr = R ]
C:\WINDOWS\System32\pavas.ico [Ver = | Size = 30590 bytes | Modified Date = 17/02/2007 21:46:30 | Attr = ]
C:\WINDOWS\System32\perfc009.dat [Ver = | Size = 39992 bytes | Modified Date = 14/02/2007 16:25:48 | Attr = ]
C:\WINDOWS\System32\perfh009.dat [Ver = | Size = 311604 bytes | Modified Date = 14/02/2007 16:25:48 | Attr = ]
C:\WINDOWS\System32\PerfStringBackup.INI [Ver = | Size = 354910 bytes | Modified Date = 14/02/2007 16:25:48 | Attr = ]
C:\WINDOWS\System32\Status.MPF [Ver = | Size = 158240 bytes | Modified Date = 20/02/2007 20:55:14 | Attr = ]
C:\WINDOWS\System32\SZBase.dll iS3, Inc. [Ver = 4.4.7.16 | Size = 98355 bytes | Modified Date = 05/02/2007 18:23:28 | Attr = R ]
C:\WINDOWS\System32\Uninstall.ico [Ver = | Size = 2550 bytes | Modified Date = 17/02/2007 21:46:30 | Attr = ]
C:\WINDOWS\System32\wpa.dbl [Ver = | Size = 1170 bytes | Modified Date = 20/02/2007 20:55:54 | Attr = ]
C:\WINDOWS\System32\drivers\W700bus.sys MCCI [Ver = V4.34 | Size = 61536 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700cm.sys MCCI [Ver = V4.34 | Size = 6208 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700cmnt.sys MCCI [Ver = V4.34 | Size = 6208 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700mdfl.sys MCCI [Ver = V4.34 | Size = 9264 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700mdm.sys MCCI [Ver = V4.34 | Size = 97056 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700mgmt.sys MCCI [Ver = V4.34 | Size = 88560 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700obex.sys MCCI [Ver = V4.34 | Size = 86368 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700wh.sys MCCI [Ver = V4.34 | Size = 5840 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]
C:\WINDOWS\System32\drivers\W700whnt.sys MCCI [Ver = V4.34 | Size = 5840 bytes | Modified Date = 23/01/2007 19:33:34 | Attr = ]

»»»»»»»»»»»»»»»»»»»» File String Scan (Non-Microsoft Only) »»»»»
@Alternate Data Stream - C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 (118 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\avgas-setup-7.5.0.50.exe:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\chavtest.xls:Zone.Identifier (26 bytes)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe:Zone.Identifier (26 bytes)
[qoologic , urllogic , ]C:\Documents and Settings\Dena Othen\My Documents\CWShredder.exe (Trend Micro Incorporated)
@Alternate Data Stream - C:\Documents and Settings\Dena Othen\My Documents\erunt-setup.exe:Zone.Identifier (26 bytes)

f HijackThis v1.99.1
Scan saved at 15:38:22, on 21/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\TalkTalk\bin\sprtcmd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Piolet\Piolet.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.co.uk/talktalk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.co.uk/talktalk
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ZILLAbar Browser Helper Object - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - C:\Program Files\STOPzilla!\ZB2.dll
O2 - BHO: Band Class - {8272B062-BD4D-4EAD-A149-45B3CE3F5CDA} - C:\WINDOWS\GPalm.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Band Class - {8272B062-BD4D-4EAD-A149-45B3CE3F5CDA} - C:\WINDOWS\GPalm.dll
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Program Files\STOPzilla!\ZB2.dll
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [TalkTalk] "C:\Program Files\TalkTalk\bin\sprtcmd.exe" /P TalkTalk
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Piolet] C:\Program Files\Piolet\Piolet.exe SILENT
O4 - HKLM\..\Run: [PC Pitstop Optimize Scheduler] C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe -boot
O4 - HKLM\..\Run: [PCPitstop Optimize Registration Reminder] C:\Program Files\PCPitstop\Optimize\Reminder.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/cli/…nSSWebAgent.CAB
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EP…l_v1-0-3-24.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0,0,8…pdatePortal.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1170975278984
O16 - DPF: {79E0C1C0-316D-11D5-A72A-006097BFA1AC} (EPSON Web Printer-SelfTest Control Class) - http://support.epson-europe.com/selftest/Prg/ESTPTest.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…anner371290.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game19.zylomgames.com/activex/zylomgamesplayer.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…519/mcfscan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D0852BBF-D26E-4338-BADC-080BEACF8DC1}: NameServer = 62.24.252.134 62.24.252.135
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Indexing Service (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Networks Associates Technology, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe


Hi, thanks for your help. System is still running slow ( could it be do do with the things ive installed to get rid of virus?) Ive had acouple of pop ups, from mediaclick (i think) Also my internet explorer keeps freezing. Or just not responing.Then closes down. I had a message (looked like it was from microsoft) Saying Dr Watson Postmortem debugger has encountered a problem and neesds to close. Do you want to send an error report.
Is that anything to worry about?
Once again thank you for your help

Logfile of HijackThis v1.99.1
Scan saved at 17:57:38, on 25/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\TalkTalk\bin\sprtcmd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.co.uk/talktalk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.co.uk/talktalk
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ZILLAbar Browser Helper Object - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - C:\Program Files\STOPzilla!\ZB2.dll
O2 - BHO: Band Class - {8272B062-BD4D-4EAD-A149-45B3CE3F5CDA} - C:\WINDOWS\GPalm.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Band Class - {8272B062-BD4D-4EAD-A149-45B3CE3F5CDA} - C:\WINDOWS\GPalm.dll
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Program Files\STOPzilla!\ZB2.dll
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [TalkTalk] "C:\Program Files\TalkTalk\bin\sprtcmd.exe" /P TalkTalk
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Piolet] C:\Program Files\Piolet\Piolet.exe SILENT
O4 - HKLM\..\Run: [PC Pitstop Optimize Scheduler] C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe -boot
O4 - HKLM\..\Run: [PCPitstop Optimize Registration Reminder] C:\Program Files\PCPitstop\Optimize\Reminder.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/cli/…nSSWebAgent.CAB
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EP…l_v1-0-3-24.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0,0,8…pdatePortal.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1170975278984
O16 - DPF: {79E0C1C0-316D-11D5-A72A-006097BFA1AC} (EPSON Web Printer-SelfTest Control Class) - http://support.epson-europe.com/selftest/Prg/ESTPTest.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…anner371290.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game19.zylomgames.com/activex/zylomgamesplayer.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…519/mcfscan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D0852BBF-D26E-4338-BADC-080BEACF8DC1}: NameServer = 62.24.252.134 62.24.252.135
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Indexing Service (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Networks Associates Technology, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe


Hi this is my hijack this log. I could not load the kaspersky scan. I disabled the virus protections i had, but for some reason i still could'nt load it, even after clicking on the avtive x box.
And here is my GMER.exe scan
GMER 1.0.12.12027 - http://www.gmer.net
Rootkit scan 2007-02-25 18:21:04
Windows 5.1.2600 Service Pack 2


—- System - GMER 1.0.12 —-

SSDT \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwOpenProcess
SSDT \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwTerminateProcess

—- User code sections - GMER 1.0.12 —-

.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxParamW 77D5662C 5 Bytes JMP 7E1FF205 C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxIndirectParamW 77D62043 5 Bytes JMP 7E38FEBF C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxIndirectA 77D6A05A 5 Bytes JMP 7E38FE40 C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxParamA 77D6B11C 5 Bytes JMP 7E38FE84 C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxExW 77D80538 5 Bytes JMP 7E38FDCC C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxExA 77D8055C 5 Bytes JMP 7E38FE06 C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxIndirectParamA 77D86CAD 5 Bytes JMP 7E38FEFA C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxIndirectW 77D96093 5 Bytes JMP 7E2215DA C:\WINDOWS\system32\IEFRAME.dll

—- Devices - GMER 1.0.12 —-

Device \FileSystem\Fastfat \Fat IRP_MJ_CREATE F3B32C8A
Device \FileSystem\Fastfat \Fat IRP_MJ_CLOSE F3B2F7C8
Device \FileSystem\Fastfat \Fat IRP_MJ_READ F3B2B60A
Device \FileSystem\Fastfat \Fat IRP_MJ_WRITE F3B2BAED
Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION F3B36958
Device \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION F3B39821
Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA F3B4238A
Device \FileSystem\Fastfat \Fat IRP_MJ_SET_EA F3B41D49
Device \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS F3B3BBBE
Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION F3B3C331
Device \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION F3B4A4F4
Device \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL F3B32B37
Device \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL F3B2E948
Device \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL F3B3846B
Device \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN F3B4979D
Device \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL F3B48C4A
Device \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP F3B2F2FD
Device \FileSystem\Fastfat \Fat IRP_MJ_PNP F3B491DB
Device \FileSystem\Fastfat \Fat FastIoCheckIfPossible F3B441F9

—- EOF - GMER 1.0.12 —-

Hi susan, My computer seems to be running a bit slow, but not as slow as before. i am not getting any pop - ups now. The only other problem i seem to be having is my internet explorer keeps closing, or not responing. Thank you for your help. Here is the reports for the active scan and hijack this log.
Incident Status Location

Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@adrevolver[2].txt
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@adtech[2].txt
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@advertising[1].txt
Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@adviva[1].txt
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@atdmt[2].txt
Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@bluestreak[1].txt
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dena Othen\Cookies\[removed]-sys[2].txt
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Dena Othen\Cookies\[removed][1].txt
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@casalemedia[2].txt
Spyware:Cookie/Hitslink Not disinfected C:\Documents and Settings\Dena Othen\Cookies\[removed][1].txt
Spyware:Cookie/Sextracker Not disinfected C:\Documents and Settings\Dena Othen\Cookies\[removed][1].txt
Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\Dena Othen\Cookies\[removed][2].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@doubleclick[1].txt
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@fastclick[2].txt
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@hitbox[1].txt
Spyware:Cookie/Itrack Not disinfected C:\Documents and Settings\Dena Othen\Cookies\[removed][2].txt
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Dena Othen\Cookies\[removed][1].txt
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@mediaplex[1].txt
Spyware:Cookie/PayCounter Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@paycounter[2].txt
Spyware:Cookie/WegCash Not disinfected C:\Documents and Settings\Dena Othen\Cookies\[removed][1].txt
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@realmedia[2].txt
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@serving-sys[1].txt
Spyware:Cookie/Sextracker Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@sextracker[2].txt
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@tradedoubler[2].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@tribalfusion[1].txt
Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\Dena Othen\Cookies\[removed][1].txt
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@xiti[1].txt
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Dena Othen\Cookies\dena_othen@zedo[1].txt
Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Dena Othen\Desktop\SmitfraudFix\Process.exe
Potentially unwanted tool:Application/Processor Not disinfected C:\WINDOWS\system32\Process.exe
Logfile of HijackThis v1.99.1
Scan saved at 22:00:33, on 28/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TalkTalk\bin\sprtcmd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
c:\program files\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.co.uk/talktalk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.co.uk/talktalk
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ZILLAbar Browser Helper Object - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - C:\Program Files\STOPzilla!\ZB2.dll
O2 - BHO: Band Class - {8272B062-BD4D-4EAD-A149-45B3CE3F5CDA} - C:\WINDOWS\GPalm.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Band Class - {8272B062-BD4D-4EAD-A149-45B3CE3F5CDA} - C:\WINDOWS\GPalm.dll
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Program Files\STOPzilla!\ZB2.dll
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [TalkTalk] "C:\Program Files\TalkTalk\bin\sprtcmd.exe" /P TalkTalk
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Piolet] C:\Program Files\Piolet\Piolet.exe SILENT
O4 - HKLM\..\Run: [PC Pitstop Optimize Scheduler] C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe -boot
O4 - HKLM\..\Run: [PCPitstop Optimize Registration Reminder] C:\Program Files\PCPitstop\Optimize\Reminder.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/cli/…nSSWebAgent.CAB
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EP…l_v1-0-3-24.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0,0,8…pdatePortal.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1170975278984
O16 - DPF: {79E0C1C0-316D-11D5-A72A-006097BFA1AC} (EPSON Web Printer-SelfTest Control Class) - http://support.epson-europe.com/selftest/Prg/ESTPTest.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion…anner371290.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game19.zylomgames.com/activex/zylomgamesplayer.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…519/mcfscan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D0852BBF-D26E-4338-BADC-080BEACF8DC1}: NameServer = 62.24.128.17 62.24.128.18
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Indexing Service (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Networks Associates Technology, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe