[Resolved]Hijack Log

Here is one of my hijack this logs…..this computer has tons of pop-ups etc. Just trying to get it clean. Oh and this is a different computer then I posted about a couple days earlier.

Logfile of HijackThis v1.99.1
Scan saved at 4:34:53 PM, on 7/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\System32\qwerty12.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\rkfsmbl.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\AOL\1155748555\ee\AOLSoftware.exe
C:\WINDOWS\rkfsmblA.exe
C:\Program Files\Common Files\WinAntiSpyware 2007\WAS7Mon.exe
C:\WINDOWS\svhost.exe
C:\WINDOWS\retadpu77.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
c:\program files\common files\aol\1155748555\ee\aim6.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\retadpu77.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\nyukvfri.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.emachines.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1155748555\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [rkfsmblA] C:\WINDOWS\rkfsmblA.exe
O4 - HKLM\..\Run: [{ZN}] C:\WINDOWS\TISKY009.exe SKY009
O4 - HKLM\..\Run: [Salestart] "C:\Program Files\Common Files\WinAntiSpyware 2007\WAS7Mon.exe"
O4 - HKLM\..\Run: [poolsv] "C:\WINDOWS\poolsv.exe"
O4 - HKLM\..\Run: [svhost] "C:\WINDOWS\svhost.exe"
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\retadpu77.exe 61A847B5BBF72815358B2B27128065E9C084320161C4661227A755E9C2933154389A
O4 - HKLM\..\Run: [icq.com] rundll32.exe "C:\WINDOWS\system32\fnqeidin.dll",forkonce
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp /HIDEBL
O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Startup: TA_Start.lnk = C:\WINDOWS\TISKY009.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1142734391421
O16 - DPF: {8A0DCBDB-6E20-489C-9041-C1E8A0352E75} - http://awbeta.net-nucleus.com/FIX/WinATS.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/1452/ftp…02/cpbrkpie.cab
O16 - DPF: {A2E05F45-F127-4092-B9F7-9A02C3E04C77} (HGPlugin7USA Class) - http://gamedownload.ijjimax.com/gamedownlo…GPlugin7USA.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/67/install/gtdownls.cab
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: DomainService - - C:\WINDOWS\System32\qwerty12.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - c:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Windows Overlay Components - Unknown owner - C:\WINDOWS\rkfsmbl.exe

Ok here you go:

Logfile of HijackThis v1.99.1
Scan saved at 12:54:30 PM, on 7/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\AOL\1155748555\ee\AOLSoftware.exe
C:\WINDOWS\rkfsmblA.exe
C:\Program Files\Common Files\WinAntiSpyware 2007\WAS7Mon.exe
C:\WINDOWS\svhost.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
c:\program files\common files\aol\1155748555\ee\aim6.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\iqulyvle.exe
C:\Program Files\HijackThis\fred.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.emachines.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: 0 - {380D2A68-CEEC-4DC5-B6BC-D00B6400EA51} - C:\Program Files\WindowsUpdate\vikixehab992.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {938A8A03-A938-4019-B764-03FF8D167D79} - C:\WINDOWS\system32\gkvdlpxh.dll
O2 - BHO: (no name) - {A873F5DD-6591-4C8E-AD67-6AAB146B677A} - C:\WINDOWS\System32\ssqrq.dll
O2 - BHO: (no name) - {DCD53738-C4F9-414A-A03C-C7405A4AC844} - C:\WINDOWS\System32\jkklkkj.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1155748555\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [rkfsmblA] C:\WINDOWS\rkfsmblA.exe
O4 - HKLM\..\Run: [{ZN}] C:\WINDOWS\TISKY009.exe SKY009
O4 - HKLM\..\Run: [Salestart] "C:\Program Files\Common Files\WinAntiSpyware 2007\WAS7Mon.exe"
O4 - HKLM\..\Run: [poolsv] "C:\WINDOWS\poolsv.exe"
O4 - HKLM\..\Run: [svhost] "C:\WINDOWS\svhost.exe"
O4 - HKLM\..\Run: [uwas7cw] "C:\Program Files\Common Files\WinAntiSpyware 2007\uwas7cw.exe" -c
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [icq.com] rundll32.exe "C:\WINDOWS\system32\yykuedte.dll",forkonce
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp /HIDEBL
O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Startup: TA_Start.lnk = C:\WINDOWS\TISKY009.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1142734391421
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/1452/ftp…02/cpbrkpie.cab
O16 - DPF: {A2E05F45-F127-4092-B9F7-9A02C3E04C77} (HGPlugin7USA Class) - http://gamedownload.ijjimax.com/gamedownlo…GPlugin7USA.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/67/install/gtdownls.cab
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: jkklkkj - C:\WINDOWS\SYSTEM32\jkklkkj.dll
O20 - Winlogon Notify: ssqrq - C:\WINDOWS\System32\ssqrq.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\System32\qwerty12.exe (file missing)
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - c:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

Ok here is the log from combofix:

"Owner" - 2007-07-21 21:20:37 - ComboFix 07-07-14.6 - Service Pack 2 NTFS


(((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\kuweroqn.dll
C:\WINDOWS\system32\pgivrdyc.dll
C:\WINDOWS\system32\pieywail.dll
C:\WINDOWS\system32\qvtgirps.dll
C:\WINDOWS\system32\ryvhunkc.dll
C:\WINDOWS\system32\vnorskjt.dll
C:\WINDOWS\system32\ypjwphgv.dll
C:\WINDOWS\system32\yykuedte.dll
C:\WINDOWS\system32\boclicej.exe
C:\WINDOWS\system32\cdhjyrqe.exe
C:\WINDOWS\system32\dghcnake.exe
C:\WINDOWS\system32\dqyygevv.exe
C:\WINDOWS\system32\eblqlijr.exe
C:\WINDOWS\system32\emqmopnu.exe
C:\WINDOWS\system32\febamgup.exe
C:\WINDOWS\system32\fsdywlhj.exe
C:\WINDOWS\system32\fxlxrydj.exe
C:\WINDOWS\system32\gbusoakt.exe
C:\WINDOWS\system32\hoegpqoy.exe
C:\WINDOWS\system32\iqulyvle.exe
C:\WINDOWS\system32\nyukvfri.exe
C:\WINDOWS\system32\qkpgolvk.exe
C:\WINDOWS\system32\vtncnvyc.exe
C:\WINDOWS\system32\wjamxxxw.exe
C:\WINDOWS\system32\ynhftbie.exe
C:\WINDOWS\system32\ytrajivy.exe
C:\WINDOWS\system32\cotqlyhi.dll
C:\WINDOWS\system32\daswsdnn.dll
C:\WINDOWS\system32\gkvdlpxh.dll
C:\WINDOWS\system32\hqkvxlbo.dll
C:\WINDOWS\system32\ireprfjv.dll
C:\WINDOWS\system32\ofnpyqwc.dll
C:\WINDOWS\system32\orchwcge.dll
C:\WINDOWS\system32\qlxdrfqs.dll
C:\WINDOWS\system32\stikxmcs.dll
C:\WINDOWS\system32\sytgtetv.dll
C:\WINDOWS\system32\ttlpyrsx.dll
C:\WINDOWS\system32\vgbknlix.dll
C:\WINDOWS\system32\qrqss.bak1
C:\WINDOWS\system32\qrqss.bak2
C:\WINDOWS\system32\qrqss.ini
C:\WINDOWS\system32\qrqss.ini2
C:\WINDOWS\system32\qrqss.tmp
C:\WINDOWS\system32\nqorewuk.ini
C:\WINDOWS\system32\cydrvigp.ini
C:\WINDOWS\system32\liawyeip.ini
C:\WINDOWS\system32\sprigtvq.ini
C:\WINDOWS\system32\cknuhvyr.ini
C:\WINDOWS\system32\tjksronv.ini
C:\WINDOWS\system32\vghpwjpy.ini
C:\WINDOWS\system32\etdeukyy.ini
C:\WINDOWS\system32\qrqss.bak1
C:\WINDOWS\system32\qrqss.bak2
C:\WINDOWS\system32\qrqss.ini
C:\WINDOWS\system32\qrqss.ini2
C:\WINDOWS\system32\qrqss.tmp
C:\WINDOWS\system32\ssqrq.dll
C:\WINDOWS\system32\jkklkkj.dll
C:\WINDOWS\system32\jkklkkj.dll


* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *



((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\ALLUSE~1\APPLIC~1.\salesmonitor
C:\DOCUME~1\ALLUSE~1\APPLIC~1.\winantispyware 2007
C:\DOCUME~1\ALLUSE~1\APPLIC~1.\winantispyware 2007\Data\Abbr
C:\DOCUME~1\ALLUSE~1\APPLIC~1.\winantispyware 2007\Data\ProductCode
C:\DOCUME~1\Owner\APPLIC~1.\scurit~1
C:\DOCUME~1\Owner\APPLIC~1.\winantispyware2007freeinstall[1].exe
C:\Documents and Settings\Owner.\err.log
C:\Program Files\Common Files\crosof~1
C:\Program Files\Common Files\ecurit~1
C:\Program Files\Common Files\racle~1
C:\Program Files\Common Files\winantispyware 2007
C:\Program Files\Common Files\winantispyware 2007\err.log
C:\Program Files\Common Files\winantispyware 2007\WAS7Mon.exe
C:\Program Files\Common Files\wnsxs~1
C:\Program Files\poolsv
C:\Program Files\poolsv\k11u72.exe
C:\Program Files\poolsv\svhost.exe
C:\Program Files\poolsv\wr-1-0000077.exe
C:\Program Files\poolsv\YazzleBundle-1549.exe
C:\Program Files\svhost
C:\Program Files\winantispyware 2007
C:\Program Files\winantispyware 2007\AsAgents.xml
C:\Program Files\winantispyware 2007\atl71.dll
C:\Program Files\winantispyware 2007\AutoProcess.dat
C:\Program Files\winantispyware 2007\bnlink.dat
C:\Program Files\winantispyware 2007\database\enemies.dat
C:\Program Files\winantispyware 2007\database\knownfiles.dat
C:\Program Files\winantispyware 2007\database\TEBase.dat
C:\Program Files\winantispyware 2007\database\vbpv.dat
C:\Program Files\winantispyware 2007\dbupdate.dat
C:\Program Files\winantispyware 2007\fopnl.dll
C:\Program Files\winantispyware 2007\InstHelp.exe
C:\Program Files\winantispyware 2007\InstUp.exe
C:\Program Files\winantispyware 2007\lapv.dat
C:\Program Files\winantispyware 2007\license.rtf
C:\Program Files\winantispyware 2007\manual.pdf
C:\Program Files\winantispyware 2007\manual.url
C:\Program Files\winantispyware 2007\mfc71.dll
C:\Program Files\winantispyware 2007\monstate.dat
C:\Program Files\winantispyware 2007\msvcp71.dll
C:\Program Files\winantispyware 2007\msvcr71.dll
C:\Program Files\winantispyware 2007\ps.dat
C:\Program Files\winantispyware 2007\pv.dat
C:\Program Files\winantispyware 2007\quaratine.dat\#post_quarantine
C:\Program Files\winantispyware 2007\readme.rtf
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\16642660422946e56409d29c\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\16642660422946e56409d29c\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\16642660422946e56409d29c\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\3e3ae8a2418041e2795761aa\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\3e3ae8a2418041e2795761aa\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\3e3ae8a2418041e2795761aa\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\4d876f02bcae41afd19d29b1\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\4d876f02bcae41afd19d29b1\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\4d876f02bcae41afd19d29b1\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\6433da477b244314bba47a8a\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\6433da477b244314bba47a8a\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\5ce6c8e485eb414598161898\6433da477b244314bba47a8a\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\9095799205144232f4bb918c\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\9095799205144232f4bb918c314bed67bcc42576f3d07b8\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\9095799205144232f4bb918c314bed67bcc42576f3d07b8\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\9095799205144232f4bb918c314bed67bcc42576f3d07b8\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\9095799205144232f4bb918c\c86253e306dc4b25a4a65c91\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\9095799205144232f4bb918c\c86253e306dc4b25a4a65c91\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\9095799205144232f4bb918c\c86253e306dc4b25a4a65c91\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\9095799205144232f4bb918c\d4583ac2df6e439ebd3f1583\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\9095799205144232f4bb918c\d4583ac2df6e439ebd3f1583\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\9095799205144232f4bb918c\d4583ac2df6e439ebd3f1583\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\bac3fe9cd44fc9668b9cac\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\bac3fe9cd44fc9668b9cac\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\bac3fe9cd44fc9668b9cac\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\bac3fe9cd44fc9668b9cac\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cd944362e24429cc206f9b\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cd944362e24429cc206f9b\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cd944362e24429cc206f9b\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db918d5dcede19467950c59a86\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db918d5dcede19467950c59a86\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db918d5dcede19467950c59a86\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db99364a7543bc45753f4de2ae\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db99364a7543bc45753f4de2ae\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db99364a7543bc45753f4de2ae\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9d933ce705af417dfdde0385\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9d933ce705af417dfdde0385\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9d933ce705af417dfdde0385\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\134ae39d796f414d5d3e5481\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\134ae39d796f414d5d3e5481\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\134ae39d796f414d5d3e5481\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\134ae39d796f414d5d3e5481\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\16e53da8128d4a2e5447a1bd\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\16e53da8128d4a2e5447a1bd\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\16e53da8128d4a2e5447a1bd\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\16e53da8128d4a2e5447a1bd\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\1f0ccd8b21ef4a0f65cf32ad\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\1f0ccd8b21ef4a0f65cf32ad\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\1f0ccd8b21ef4a0f65cf32ad\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\2225f289c2f0405d3be39bb8\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\2225f289c2f0405d3be39bb8\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\2225f289c2f0405d3be39bb8\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\298fc854c49c4f6b498ebebb\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\298fc854c49c4f6b498ebebb\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\298fc854c49c4f6b498ebebb\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\298fc854c49c4f6b498ebebb\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\2f8bc37e8121421465d07c8e\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\2f8bc37e8121421465d07c8e\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\2f8bc37e8121421465d07c8e\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\331403f6a8ed4b3971e749b1\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\331403f6a8ed4b3971e749b1\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\331403f6a8ed4b3971e749b1\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\34707d572a384f388e6e0d92\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\34707d572a384f388e6e0d92\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\34707d572a384f388e6e0d92\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\3e132c6ccf8e46d2750d4a96\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\3e132c6ccf8e46d2750d4a96\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\3e132c6ccf8e46d2750d4a96\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\3f2612b331534791b11afab4\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\3f2612b331534791b11afab4\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\3f2612b331534791b11afab4\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\3f2612b331534791b11afab4\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\40032f7a5aa841afea5fca98\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\40032f7a5aa841afea5fca98\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\40032f7a5aa841afea5fca98\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\46d5d798dd784352b19ad2b8\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\46d5d798dd784352b19ad2b8\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\46d5d798dd784352b19ad2b8\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\46d5d798dd784352b19ad2b8\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\4d2779e4d32d461ef323adab\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\4d2779e4d32d461ef323adab\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\4d2779e4d32d461ef323adab\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\4d2779e4d32d461ef323adab\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\4dfcacb58f5845a820e2cea0\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\4dfcacb58f5845a820e2cea0\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\4dfcacb58f5845a820e2cea0\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\4dfcacb58f5845a820e2cea0\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\54f8851a451346f36bcc71b3\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\54f8851a451346f36bcc71b3\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\54f8851a451346f36bcc71b3\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\54f8851a451346f36bcc71b3\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\55001dfb48924baf3466399e\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\55001dfb48924baf3466399e\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\55001dfb48924baf3466399e\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\558ec9ac132247bdddd1cfa7\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\558ec9ac132247bdddd1cfa7\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\558ec9ac132247bdddd1cfa7\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\558ec9ac132247bdddd1cfa7\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\57cd6ccd67af4e2e09dd4c96\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\57cd6ccd67af4e2e09dd4c96\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\57cd6ccd67af4e2e09dd4c96\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\57cd6ccd67af4e2e09dd4c96\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\5d17d29bc20843da9507f298\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\5d17d29bc20843da9507f298\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\5d17d29bc20843da9507f298\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\5d6a5d719605439ad17c5b9a\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\5d6a5d719605439ad17c5b9a\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\5d6a5d719605439ad17c5b9a\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\5e36791d3d914a2424282190\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\5e36791d3d914a2424282190\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\5e36791d3d914a2424282190\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\5e36791d3d914a2424282190\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\71b4b40c4cba447448a2d09c\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\71b4b40c4cba447448a2d09c\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\71b4b40c4cba447448a2d09c\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\72bfb00be2d44cf44a5197b3\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\72bfb00be2d44cf44a5197b3\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\72bfb00be2d44cf44a5197b3\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\788af2409cfd466d1ffdc08e\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\788af2409cfd466d1ffdc08e\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\788af2409cfd466d1ffdc08e\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\7a65442fa7384f3db33ff089\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\7a65442fa7384f3db33ff089\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\7a65442fa7384f3db33ff089\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\7e36d0cf76b04408633cbf8b\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\7e36d0cf76b04408633cbf8b\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\7e36d0cf76b04408633cbf8b\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\7e36d0cf76b04408633cbf8b\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\80ff92e70e8d4250b288498f\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\80ff92e70e8d4250b288498f\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\80ff92e70e8d4250b288498f\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\8f8ff5872f154829d21fd6b2\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\8f8ff5872f154829d21fd6b2\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\8f8ff5872f154829d21fd6b2\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\9743a188f512464e714a698c\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\9743a188f512464e714a698c\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\9743a188f512464e714a698c\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\994d7504e63b41f0b8dde08e\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\994d7504e63b41f0b8dde08e\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\994d7504e63b41f0b8dde08e\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\9dc5a02871344311964974a4\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\9dc5a02871344311964974a4\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\9dc5a02871344311964974a4\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\9dc5a02871344311964974a4\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a0359b5570a344c727a9c3a9\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a0359b5570a344c727a9c3a9\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a0359b5570a344c727a9c3a9\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a0359b5570a344c727a9c3a9\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a318305e66234744cba8d597\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a318305e66234744cba8d597\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a318305e66234744cba8d597\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a65968cc31be4b5fc5de20bc\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a65968cc31be4b5fc5de20bc\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a65968cc31be4b5fc5de20bc\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\a65968cc31be4b5fc5de20bc\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\aabdb995b759445c5358b0b5\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\aabdb995b759445c5358b0b5\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\aabdb995b759445c5358b0b5\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\aad5264c84dc4caa4b1d65aa\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\aad5264c84dc4caa4b1d65aa\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\aad5264c84dc4caa4b1d65aa\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\aad5264c84dc4caa4b1d65aa\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\b06d9a0bce8b4da85b6c239f\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\b06d9a0bce8b4da85b6c239f\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\b06d9a0bce8b4da85b6c239f\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\b0973ff0da2a4c9ed9721284\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\b0973ff0da2a4c9ed9721284\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\b0973ff0da2a4c9ed9721284\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\b1a0fe7a66244129a0f503b5\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\b1a0fe7a66244129a0f503b5\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\b1a0fe7a66244129a0f503b5\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\c1290bfcd7994692a958b8ab\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\c1290bfcd7994692a958b8ab\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\c1290bfcd7994692a958b8ab\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\c1290bfcd7994692a958b8ab\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\c4a22f2a03e2492f2919b1be\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\c4a22f2a03e2492f2919b1be\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\c4a22f2a03e2492f2919b1be\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cb7586bc6bf142256b1f73a2\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cb7586bc6bf142256b1f73a2\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cb7586bc6bf142256b1f73a2\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cba2067428ea4d09e3a1f2a4\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cba2067428ea4d09e3a1f2a4\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cba2067428ea4d09e3a1f2a4\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cba2067428ea4d09e3a1f2a4\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\ce9369980aa64ef5e61befab\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\ce9369980aa64ef5e61befab\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\ce9369980aa64ef5e61befab\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cfec78d4c6a14a4cfa6ef1b3\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cfec78d4c6a14a4cfa6ef1b3\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\cfec78d4c6a14a4cfa6ef1b3\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dc57f4220e904feba3b7c198\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dc57f4220e904feba3b7c198\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dc57f4220e904feba3b7c198\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dd2a3912303a48e8b05474bc\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dd2a3912303a48e8b05474bc\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dd2a3912303a48e8b05474bc\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\deb5b52dafaa41ea493ca082\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\deb5b52dafaa41ea493ca082\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\deb5b52dafaa41ea493ca082\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\deb5b52dafaa41ea493ca082\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dec73ea5187347470544c2b0\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dec73ea5187347470544c2b0\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dec73ea5187347470544c2b0\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dfb92a7efde44f3e3a6e6c86\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dfb92a7efde44f3e3a6e6c86\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\dfb92a7efde44f3e3a6e6c86\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e638cc9dd3d143ceb002228a\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e638cc9dd3d143ceb002228a\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e638cc9dd3d143ceb002228a\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e638cc9dd3d143ceb002228a\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e683adcb3bb54862e743419e\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e683adcb3bb54862e743419e\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e683adcb3bb54862e743419e\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e6b4b9837a214cd81ec154a1\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e6b4b9837a214cd81ec154a1\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e6b4b9837a214cd81ec154a1\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e86615a1670948b4b123ddb1\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e86615a1670948b4b123ddb1\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e86615a1670948b4b123ddb1\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e9b4556c74374015fda1419e\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e9b4556c74374015fda1419e\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\e9b4556c74374015fda1419e\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\ed12e98415d24940665fc297\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\ed12e98415d24940665fc297\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\ed12e98415d24940665fc297\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\f1a790215bff41ca79c8c68e\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\f1a790215bff41ca79c8c68e\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\f1a790215bff41ca79c8c68e\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\f1a790215bff41ca79c8c68e\Owner
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\f986e00aa5184f90f3c456ab\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\f986e00aa5184f90f3c456ab\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\b5ddbe06413345b9c0e209ae\f78b6a96c9d94c27ec0c3db9\f986e00aa5184f90f3c456ab\#name
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\13fb90db99bf45e1e238bb92\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\13fb90db99bf45e1e238bb92\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\18064230f3074bbaf8f6b4a6\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\18064230f3074bbaf8f6b4a6\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\2195e4183ea14593205d36b3\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\2195e4183ea14593205d36b3\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\2a7db23da04148bb000513b2\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\2a7db23da04148bb000513b2\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\304056b08ca448b203ff81b1\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\304056b08ca448b203ff81b1\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\3b4ccf55d2d04be80786468d\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\3b4ccf55d2d04be80786468d\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\3f1d2f8eee0340e6a299469f\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\3f1d2f8eee0340e6a299469f\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\4cabcea925f74cf6493495b8\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\4cabcea925f74cf6493495b8\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\54113f9dd7ee4ea8bfb72aa1\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\54113f9dd7ee4ea8bfb72aa1\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\56ac3db87f5f4e1b2bac32b3\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\56ac3db87f5f4e1b2bac32b3\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\5728143def414cff3363a4b4\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\5728143def414cff3363a4b4\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\588ece1b70ca4d54c1cd4d9a\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\588ece1b70ca4d54c1cd4d9a\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\5aada7e60b204725f0407aba\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\5aada7e60b204725f0407aba\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\6497362f8f8a4bd517e658ad\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\6497362f8f8a4bd517e658ad\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\67fe2cc352344a85413ba887\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\67fe2cc352344a85413ba887\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\6e3572fea31d44cd96ec0389\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\6e3572fea31d44cd96ec0389\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\75304920ff9f40bc2f63f7aa\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\75304920ff9f40bc2f63f7aa\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\79f99096be614c9070402b9f\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\79f99096be614c9070402b9f\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\7adc459e2f3c4dc9bbd22284\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\7adc459e2f3c4dc9bbd22284\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\81b80ff596b24c4e6f664d91\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\81b80ff596b24c4e6f664d91\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\8724eae2ff224291098c91b4\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\8724eae2ff224291098c91b4\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\8d15b0934e164b0437e59690\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\8d15b0934e164b0437e59690\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\8f89267c3d0f4eece0f0599f\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\8f89267c3d0f4eece0f0599f\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\90b293d9ccad41b011487db7\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\90b293d9ccad41b011487db7\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\92fc60dc9f5e48db28768986\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\92fc60dc9f5e48db28768986\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\95445bfaf2e54d05c8613180\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\95445bfaf2e54d05c8613180\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\9be1a8055c0d4db8dc564d9c\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\9be1a8055c0d4db8dc564d9c\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\9c7306e016c64068a40fafa8\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\9c7306e016c64068a40fafa8\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\a873e96cd5714f69253ec58e\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\a873e96cd5714f69253ec58e\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\aac9f6178ade4f5641257c9d\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\aac9f6178ade4f5641257c9d\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\aca5c0061ca94309264d05b1\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\aca5c0061ca94309264d05b1\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\af7366321c2540a2d5d896b0\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\af7366321c2540a2d5d896b0\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\aff2c221effa414c882e1e8e\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\aff2c221effa414c882e1e8e\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\b003de9e3aad417bc40a489c\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\b003de9e3aad417bc40a489c\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\b003de9e3aad417bc40a489c\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\b62b33bbf6f24bf52ddd96bc\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\b62b33bbf6f24bf52ddd96bc\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\bf095163c04f447d1103a294\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\bf095163c04f447d1103a294\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\c48565186c784e41e61f4e99\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\c48565186c784e41e61f4e99\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\c48565186c784e41e61f4e99\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\ca3d766fc90447774073e3af\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\ca3d766fc90447774073e3af\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\cc05c3cb3abe4f975b1340a7\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\cc05c3cb3abe4f975b1340a7\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\cc9a7857f3154eee25babca7\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\cc9a7857f3154eee25babca7\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\cccbfcf3af5443302df68589\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\cccbfcf3af5443302df68589\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\d51034d305d848e6c7d65f92\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\d51034d305d848e6c7d65f92\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\d8b929e8d41644936a1080b8\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\d8b929e8d41644936a1080b8\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\d92a592123f245f73d7b7c84\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\d92a592123f245f73d7b7c84\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\df2b8e1e5c3a44194f43438d\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\df2b8e1e5c3a44194f43438d\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\e19e73a09165440424a95d99\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\e19e73a09165440424a95d99\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\eddc634aa3084dacf0c01cb8\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\eddc634aa3084dacf0c01cb8\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\f0830eba3834481a6a66d39a\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\f0830eba3834481a6a66d39a\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\f9ad920d3561430665bc9d8b\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\f9ad920d3561430665bc9d8b\#startup
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\fe0f7de355664c3f626df59a\#data
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\fe0f7de355664c3f626df59a\#internal
C:\Program Files\winantispyware 2007\RTMonitor.dat\e83f39c8dba440a24e377a9b\fe0f7de355664c3f626df59a\#startup
C:\Program Files\winantispyware 2007\scanlog.xml
C:\Program Files\winantispyware 2007\settings.ini
C:\Program Files\winantispyware 2007\shellext.dll
C:\Program Files\winantispyware 2007\shellext.xml
C:\Program Files\winantispyware 2007\sr.log
C:\Program Files\winantispyware 2007\Summary.dat
C:\Program Files\winantispyware 2007\support.url
C:\Program Files\winantispyware 2007\tasks.dat
C:\Program Files\winantispyware 2007\threatnet.dat
C:\Program Files\winantispyware 2007\threatnet.ini
C:\Program Files\winantispyware 2007\unins000.dat
C:\Program Files\winantispyware 2007\unins000.exe
C:\Program Files\winantispyware 2007\uninstall.ico
C:\Program Files\winantispyware 2007\UnWizard.exe
C:\Program Files\winantispyware 2007\unwizard.xml
C:\Program Files\winantispyware 2007\up.dat
C:\Program Files\winantispyware 2007\updater.dat
C:\Program Files\winantispyware 2007\was7.exe
C:\Program Files\winantispyware 2007\WAS7.url
C:\Program Files\winantispyware 2007\WAS7.xml
C:\Program Files\WindowsUpdate\zysomaboz.html
C:\temp\tn3
C:\WINDOWS\DOWNLO~1\UWA7P_0001_N91M0809NetInstaller.exe
C:\WINDOWS\poolsv.exe
C:\WINDOWS\rau001978.exe
C:\WINDOWS\retadpu1000106.exe
C:\WINDOWS\retadpu572.exe
C:\WINDOWS\svhost.exe
C:\WINDOWS\system32\aloidxpt.exe
C:\WINDOWS\system32\aplfahvy.exe
C:\WINDOWS\system32\aqiwpnqn.exe
C:\WINDOWS\system32\bjxpyxfr.exe
C:\WINDOWS\system32\bwubetba.exe
C:\WINDOWS\system32\ccdflbfa.exe
C:\WINDOWS\system32\dapmcmmd.exe
C:\WINDOWS\system32\dkwdaaxp.exe
C:\WINDOWS\system32\drivers\ApiMon.sys
C:\WINDOWS\system32\drivers\core.cache.dsk
C:\WINDOWS\system32\drivers\core.sys
C:\WINDOWS\system32\drivers\fopn.sys
C:\WINDOWS\system32\ewmqkifv.exe
C:\WINDOWS\system32\gpvcvlnn.exe
C:\WINDOWS\system32\iodfckcv.exe
C:\WINDOWS\system32\jfbdiwmd.exe
C:\WINDOWS\system32\jfyqrkrv.exe
C:\WINDOWS\system32\kgrtqbxb.exe
C:\WINDOWS\system32\lrtcpuhx.exe
C:\WINDOWS\system32\olmhfgno.exe
C:\WINDOWS\system32\romtsurk.exe
C:\WINDOWS\system32\stera.exe
C:\WINDOWS\system32\tmmjlpkf.exe
C:\WINDOWS\system32\uflxvdih.exe
C:\WINDOWS\system32\ufpqhmxg.exe
C:\WINDOWS\system32\ulplxtgu.exe
C:\WINDOWS\system32\vluhacrc.exe
C:\WINDOWS\system32\wmlfdcka.exe
C:\WINDOWS\system32\wuevlnrt.exe
C:\WINDOWS\system32\wwfqhkek.exe
C:\WINDOWS\system32\Z1
C:\WINDOWS\system32\Z1\mwspasrt83122.exe
C:\WINDOWS\system32\Z3
C:\WINDOWS\system32\Z3\wr73.exe
C:\WINDOWS\system32\Z5
C:\WINDOWS\system32\Z5\st2.exe
C:\WINDOWS\system32\Z7
C:\WINDOWS\system32\Z9
C:\WINDOWS\system32\Z9\bw73.exe


((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


——-\LEGACY_CORE
——-\LEGACY_DOMAINSERVICE
——-\LEGACY_WINDOWS_OVERLAY_COMPONENTS
——-\core


((((((((((((((((((((((((( Files Created from 2007-06-22 to 2007-07-22 )))))))))))))))))))))))))))))))


2007-07-21 21:17 51,200 –a—— C:\WINDOWS\nircmd.exe
2007-07-20 12:46 95,872 –a—— C:\WINDOWS\system32\AvastSS.scr
2007-07-20 12:46 94,552 –a—— C:\WINDOWS\system32\drivers\aswmon2.sys
2007-07-20 12:46 85,952 –a—— C:\WINDOWS\system32\drivers\aswmon.sys
2007-07-20 12:46 745,600 –a—— C:\WINDOWS\system32\aswBoot.exe
2007-07-20 12:46 43,176 –a—— C:\WINDOWS\system32\drivers\aswTdi.sys
2007-07-20 12:46 26,888 –a—— C:\WINDOWS\system32\drivers\aavmker4.sys
2007-07-20 12:46 23,416 –a—— C:\WINDOWS\system32\drivers\aswRdr.sys
2007-07-20 12:46 d——– C:\Program Files\Alwil Software
2007-07-18 13:45 60,288 –a—— C:\WINDOWS\system32\drivers\drmk.sys
2007-07-18 13:45 48,640 –a—— C:\WINDOWS\system32\drivers\stream.sys
2007-07-18 13:45 4,096 –a—— C:\WINDOWS\system32\ksuser.dll
2007-07-18 13:45 4,030,144 –a—— C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2007-07-18 13:45 147,456 –a—— C:\WINDOWS\system32\RTLCPAPI.dll
2007-07-18 13:45 145,792 –a—— C:\WINDOWS\system32\drivers\portcls.sys
2007-07-18 13:45 140,928 –a—— C:\WINDOWS\system32\drivers\ks.sys
2007-07-18 13:00 d——– C:\WINDOWS\network diagnostic
2007-07-18 11:33 d——– C:\Program Files\MSXML 4.0
2007-07-18 10:13 d——– C:\WINDOWS\system32\b10FdUe
2007-07-17 10:51 d——– C:\WINDOWS\provisioning
2007-07-17 10:51 d——– C:\WINDOWS\peernet
2007-07-17 10:47 d——– C:\WINDOWS\ServicePackFiles
2007-07-17 10:39 d——– C:\WINDOWS\EHome
2007-07-16 17:30 d——– C:\Program Files\Realtek AC97
2007-07-16 15:28 947,472 –a—— C:\WINDOWS\system32\msjava.dll
2007-07-16 15:28 63,248 –a—— C:\WINDOWS\system32\javaprxy.dll
2007-07-16 15:28 6,550 –a—— C:\WINDOWS\jautoexp.dat
2007-07-16 15:28 49,424 –a—— C:\WINDOWS\system32\clspack.exe
2007-07-16 15:28 46,352 –a—— C:\WINDOWS\setdebug.exe
2007-07-16 15:28 404,752 –a—— C:\WINDOWS\system32\javart.dll
2007-07-16 15:28 313,856 –a—— C:\WINDOWS\system32\dx3j.dll
2007-07-16 15:28 286,992 –a—— C:\WINDOWS\system32\vmhelper.dll
2007-07-16 15:28 21,264 –a—— C:\WINDOWS\system32\msjdbc10.dll
2007-07-16 15:28 187,152 –a—— C:\WINDOWS\system32\javacypt.dll
2007-07-16 15:28 172,304 –a—— C:\WINDOWS\system32\jview.exe
2007-07-16 15:28 171,792 –a—— C:\WINDOWS\system32\wjview.exe
2007-07-16 15:28 171,280 –a—— C:\WINDOWS\system32\jit.dll
2007-07-16 15:28 154,384 –a—— C:\WINDOWS\system32\msawt.dll
2007-07-16 15:28 15,120 –a—— C:\WINDOWS\system32\jdbgmgr.exe
2007-07-16 15:28 113 –a—— C:\WINDOWS\system32\zonedon.reg
2007-07-16 15:28 113 –a—— C:\WINDOWS\system32\zonedoff.reg
2007-07-16 12:43 89,088 –a—— C:\WINDOWS\system32\atl71.dll
2007-07-16 12:36 816,352 -r-hs—- C:\WINDOWS\rkfsmblA.exe
2007-07-16 12:36 54,784 –a—— C:\WINDOWS\rkfsmbl.exe
2007-07-16 12:36 49,152 –a—— C:\WINDOWS\TISKY009.exe
2007-07-16 12:36 d——– C:\WINDOWS\system32\Z11
2007-07-16 12:36 d——– C:\WINDOWS\system32\driver
2007-07-16 12:36 d——– C:\Tempc2
2007-07-16 12:35 d——– C:\WINDOWS\system32\b02FdUe
2007-07-16 12:35 d——– C:\Temp\brr
2007-07-16 12:35 d——– C:\Temp
2007-07-13 19:57 1,048,576 –ah—– C:\DOCUME~1\Guest\NTUSER.DAT
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\You've Got Pictures Screensaver
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\Symantec
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\Real
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\Gtek
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\CyberLink
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\AOL
2007-07-11 10:13 d——– C:\Program Files\Lavasoft
2007-07-11 10:13 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-07-11 10:07 d——– C:\Program Files\Common Files\Wise Installation Wizard
2007-07-11 09:40 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-07-02 14:24 d——– C:\DOCUME~1\Owner\APPLIC~1\fretsonfire
2007-07-02 12:24 12,800 –a—— C:\WINDOWS\system32\WING32.DLL
2007-06-29 11:41 d–hs—- C:\found.000
2007-06-21 20:28 d——– C:\WINDOWS\system32\SoftwareDistribution


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-22 02:26:47 ——– d–h–w C:\Program Files\WindowsUpdate
2007-07-21 17:48:03 ——– d—–w C:\Program Files\CONEXANT
2007-07-18 17:41:48 ——– d—–w C:\Program Files\Messenger
2007-07-17 15:51:36 ——– d—–w C:\Program Files\Movie Maker
2007-07-17 15:47:36 ——– d—–w C:\Program Files\Windows NT
2007-07-16 22:30:23 ——– d–h–w C:\Program Files\InstallShield Installation Information
2007-07-16 19:55:14 ——– d—–w C:\Program Files\BigFix
2007-07-05 22:53:45 3,859 —-a-w C:\WINDOWS\mozver.dat
2007-07-02 17:13:12 ——– d—–w C:\Program Files\Wesnoth
2007-06-27 20:45:18 ——– d—–w C:\Program Files\Symantec
2007-06-27 20:45:18 ——– d—–w C:\Program Files\Common Files\Symantec Shared
2007-06-22 00:52:53 ——– d—–w C:\Program Files\Norton AntiVirus
2007-06-14 01:35:29 ——– d–h–w C:\DOCUME~1\Owner\APPLIC~1\GTek
2007-06-14 01:35:29 ——– d—–w C:\Program Files\Linksys EasyLink Advisor
2007-06-14 01:33:46 28,672 —-a-w C:\WINDOWS\system32\drivers\goprot51.sys
2007-06-04 20:18:48 9,344 —-a-w C:\WINDOWS\system32\drivers\NSDriver.sys
2007-06-04 20:17:02 8,320 —-a-w C:\WINDOWS\system32\drivers\AWRTRD.sys
2007-06-04 20:14:56 6,272 —-a-w C:\WINDOWS\system32\drivers\AWRTPD.sys
2007-05-16 15:12:02 683,520 —-a-w C:\WINDOWS\system32\inetcomm.dll
2007-04-25 14:21:15 144,896 —-a-w C:\WINDOWS\system32\schannel.dll
2007-04-23 00:15:18 200,704 —-a-w C:\WINDOWS\system32\ssldivx.dll
2007-04-23 00:15:18 1,044,480 —-a-w C:\WINDOWS\system32\libdivx.dll
2006-05-06 14:04:49 188 —-a-w C:\Program Files\Shortcut to CD Drive.lnk
2004-12-20 18:55:03 0 —-a-w C:\DOCUME~1\Owner\APPLIC~1\wklnhst.dat


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
2005-11-22 12:46 399352 –a—— C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
2006-10-22 23:08 62080 –a—— C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{380D2A68-CEEC-4DC5-B6BC-D00B6400EA51}]
C:\Program Files\WindowsUpdate\vikixehab992.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
2005-05-31 01:04 853672 –a—— C:\PROGRA~1\SPYBOT~1\SDHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{549B5CA7-4A86-11D7-A4DF-000874180BB3}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AOLDialer"="C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" [2004-04-07 14:07]
"AOL Spyware Protection"="C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe" [2004-03-19 16:17]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-31 21:42]
"SunKistEM"="C:\Program Files\Digital Media Reader\shwiconem.exe" [2004-03-11 17:18]
"@"="" []
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-01-26 14:58]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2004-08-09 18:40]
"HostManager"="C:\Program Files\Common Files\AOL\1155748555\ee\AOLSoftware.exe" [2006-05-09 19:24]
"IPHSend"="C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe" [2006-02-17 11:59]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 10:42]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 11:24]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\mnyexpr.exe" [2003-06-18 14:00]
"AIM"="C:\Program Files\AIM\aim.exe" [2004-06-07 15:53]
"Aim6"="C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" [2006-05-09 19:24]
"EasyLinkAdvisor"="C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" [2006-10-30 11:01]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 02:56]

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
Source= C:\Program Files\WindowsUpdate\zysomaboz.html
FriendlyName=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice]


Contents of the 'Scheduled Tasks' folder
2004-12-22 04:00:00 C:\WINDOWS\tasks\ISP signup reminder 1.job
2004-12-29 14:00:00 C:\WINDOWS\tasks\ISP signup reminder 2.job
2005-01-04 02:30:13 C:\WINDOWS\tasks\ISP signup reminder 3.job
2007-02-20 14:17:17 C:\WINDOWS\tasks\Symantec NetDetect.job

**************************************************************************

catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-21 21:38:15
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-07-21 21:40:48 - machine was rebooted
C:\ComboFix-quarantined-files.txt … 2007-07-21 21:40

— E O F —

OK here are the logs, first up the Combofix log:

"Owner" - 2007-07-22 14:56:46 - ComboFix 07-07-14.6 - Service Pack 2 NTFS
Command switches used :: C:\Documents and Settings\Owner\Desktop\CFScript.txt


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\Owner\APPLIC~1\wklnhst.dat
C:\Temp
C:\Tempc2\tmpFF.log
C:\Temp\brr\tmpZTF.log
C:\WINDOWS\jautoexp.dat
C:\WINDOWS\rkfsmbl.exe
C:\WINDOWS\rkfsmblA.exe
C:\WINDOWS\system32\b02FdUe
C:\WINDOWS\system32\b02FdUe\b02FdUe1065.exe
C:\WINDOWS\system32\b10FdUe
C:\WINDOWS\system32\b10FdUe\b10FdUe1099.exe
C:\WINDOWS\system32\Z11
C:\WINDOWS\TISKY009.exe


((((((((((((((((((((((((( Files Created from 2007-06-22 to 2007-07-22 )))))))))))))))))))))))))))))))


2007-07-21 21:17 51,200 –a—— C:\WINDOWS\nircmd.exe
2007-07-20 12:46 95,872 –a—— C:\WINDOWS\system32\AvastSS.scr
2007-07-20 12:46 94,552 –a—— C:\WINDOWS\system32\drivers\aswmon2.sys
2007-07-20 12:46 85,952 –a—— C:\WINDOWS\system32\drivers\aswmon.sys
2007-07-20 12:46 745,600 –a—— C:\WINDOWS\system32\aswBoot.exe
2007-07-20 12:46 43,176 –a—— C:\WINDOWS\system32\drivers\aswTdi.sys
2007-07-20 12:46 26,888 –a—— C:\WINDOWS\system32\drivers\aavmker4.sys
2007-07-20 12:46 23,416 –a—— C:\WINDOWS\system32\drivers\aswRdr.sys
2007-07-20 12:46 d——– C:\Program Files\Alwil Software
2007-07-18 13:45 60,288 –a—— C:\WINDOWS\system32\drivers\drmk.sys
2007-07-18 13:45 48,640 –a—— C:\WINDOWS\system32\drivers\stream.sys
2007-07-18 13:45 4,096 –a—— C:\WINDOWS\system32\ksuser.dll
2007-07-18 13:45 4,030,144 –a—— C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2007-07-18 13:45 147,456 –a—— C:\WINDOWS\system32\RTLCPAPI.dll
2007-07-18 13:45 145,792 –a—— C:\WINDOWS\system32\drivers\portcls.sys
2007-07-18 13:45 140,928 –a—— C:\WINDOWS\system32\drivers\ks.sys
2007-07-18 13:00 d——– C:\WINDOWS\network diagnostic
2007-07-18 11:33 d——– C:\Program Files\MSXML 4.0
2007-07-17 10:51 d——– C:\WINDOWS\provisioning
2007-07-17 10:51 d——– C:\WINDOWS\peernet
2007-07-17 10:47 d——– C:\WINDOWS\ServicePackFiles
2007-07-17 10:39 d——– C:\WINDOWS\EHome
2007-07-16 17:30 d——– C:\Program Files\Realtek AC97
2007-07-16 15:28 947,472 –a—— C:\WINDOWS\system32\msjava.dll
2007-07-16 15:28 63,248 –a—— C:\WINDOWS\system32\javaprxy.dll
2007-07-16 15:28 49,424 –a—— C:\WINDOWS\system32\clspack.exe
2007-07-16 15:28 46,352 –a—— C:\WINDOWS\setdebug.exe
2007-07-16 15:28 404,752 –a—— C:\WINDOWS\system32\javart.dll
2007-07-16 15:28 313,856 –a—— C:\WINDOWS\system32\dx3j.dll
2007-07-16 15:28 286,992 –a—— C:\WINDOWS\system32\vmhelper.dll
2007-07-16 15:28 21,264 –a—— C:\WINDOWS\system32\msjdbc10.dll
2007-07-16 15:28 187,152 –a—— C:\WINDOWS\system32\javacypt.dll
2007-07-16 15:28 172,304 –a—— C:\WINDOWS\system32\jview.exe
2007-07-16 15:28 171,792 –a—— C:\WINDOWS\system32\wjview.exe
2007-07-16 15:28 171,280 –a—— C:\WINDOWS\system32\jit.dll
2007-07-16 15:28 154,384 –a—— C:\WINDOWS\system32\msawt.dll
2007-07-16 15:28 15,120 –a—— C:\WINDOWS\system32\jdbgmgr.exe
2007-07-16 15:28 113 –a—— C:\WINDOWS\system32\zonedon.reg
2007-07-16 15:28 113 –a—— C:\WINDOWS\system32\zonedoff.reg
2007-07-16 12:43 89,088 –a—— C:\WINDOWS\system32\atl71.dll
2007-07-16 12:36 d——– C:\WINDOWS\system32\driver
2007-07-13 19:57 1,048,576 –ah—– C:\DOCUME~1\Guest\NTUSER.DAT
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\You've Got Pictures Screensaver
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\Symantec
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\Real
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\Gtek
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\CyberLink
2007-07-13 19:57 d——– C:\DOCUME~1\Guest\APPLIC~1\AOL
2007-07-11 10:13 d——– C:\Program Files\Lavasoft
2007-07-11 10:13 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-07-11 10:07 d——– C:\Program Files\Common Files\Wise Installation Wizard
2007-07-11 09:40 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-07-02 14:24 d——– C:\DOCUME~1\Owner\APPLIC~1\fretsonfire
2007-07-02 12:24 12,800 –a—— C:\WINDOWS\system32\WING32.DLL
2007-06-29 11:41 d–hs—- C:\found.000


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-22 02:26:47 ——– d–h–w C:\Program Files\WindowsUpdate
2007-07-21 17:48:03 ——– d—–w C:\Program Files\CONEXANT
2007-07-18 17:41:48 ——– d—–w C:\Program Files\Messenger
2007-07-17 15:51:36 ——– d—–w C:\Program Files\Movie Maker
2007-07-17 15:47:36 ——– d—–w C:\Program Files\Windows NT
2007-07-16 22:30:23 ——– d–h–w C:\Program Files\InstallShield Installation Information
2007-07-16 19:55:14 ——– d—–w C:\Program Files\BigFix
2007-07-05 22:53:45 3,859 —-a-w C:\WINDOWS\mozver.dat
2007-07-02 17:13:12 ——– d—–w C:\Program Files\Wesnoth
2007-06-27 20:45:18 ——– d—–w C:\Program Files\Symantec
2007-06-27 20:45:18 ——– d—–w C:\Program Files\Common Files\Symantec Shared
2007-06-22 00:52:53 ——– d—–w C:\Program Files\Norton AntiVirus
2007-06-14 01:35:29 ——– d–h–w C:\DOCUME~1\Owner\APPLIC~1\GTek
2007-06-14 01:35:29 ——– d—–w C:\Program Files\Linksys EasyLink Advisor
2007-06-14 01:33:46 28,672 —-a-w C:\WINDOWS\system32\drivers\goprot51.sys
2007-06-04 20:18:48 9,344 —-a-w C:\WINDOWS\system32\drivers\NSDriver.sys
2007-06-04 20:17:02 8,320 —-a-w C:\WINDOWS\system32\drivers\AWRTRD.sys
2007-06-04 20:14:56 6,272 —-a-w C:\WINDOWS\system32\drivers\AWRTPD.sys
2007-05-16 15:12:02 683,520 —-a-w C:\WINDOWS\system32\inetcomm.dll
2007-04-25 14:21:15 144,896 —-a-w C:\WINDOWS\system32\schannel.dll
2007-04-23 00:15:18 200,704 —-a-w C:\WINDOWS\system32\ssldivx.dll
2007-04-23 00:15:18 1,044,480 —-a-w C:\WINDOWS\system32\libdivx.dll
2006-05-06 14:04:49 188 —-a-w C:\Program Files\Shortcut to CD Drive.lnk


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
2005-11-22 12:46 399352 –a—— C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
2006-10-22 23:08 62080 –a—— C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
2005-05-31 01:04 853672 –a—— C:\PROGRA~1\SPYBOT~1\SDHelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AOLDialer"="C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" [2004-04-07 14:07]
"AOL Spyware Protection"="C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe" [2004-03-19 16:17]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-31 21:42]
"SunKistEM"="C:\Program Files\Digital Media Reader\shwiconem.exe" [2004-03-11 17:18]
"@"="" []
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-01-26 14:58]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2004-08-09 18:40]
"HostManager"="C:\Program Files\Common Files\AOL\1155748555\ee\AOLSoftware.exe" [2006-05-09 19:24]
"IPHSend"="C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe" [2006-02-17 11:59]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 10:42]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 11:24]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\mnyexpr.exe" [2003-06-18 14:00]
"AIM"="C:\Program Files\AIM\aim.exe" [2004-06-07 15:53]
"Aim6"="C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" [2006-05-09 19:24]
"EasyLinkAdvisor"="C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" [2006-10-30 11:01]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 02:56]

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
Source= C:\Program Files\WindowsUpdate\zysomaboz.html
FriendlyName=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice]

*Newly Created Service* - CATCHME

Contents of the 'Scheduled Tasks' folder
2004-12-22 04:00:00 C:\WINDOWS\tasks\ISP signup reminder 1.job
2004-12-29 14:00:00 C:\WINDOWS\tasks\ISP signup reminder 2.job
2005-01-04 02:30:13 C:\WINDOWS\tasks\ISP signup reminder 3.job
2007-02-20 14:17:17 C:\WINDOWS\tasks\Symantec NetDetect.job

**************************************************************************

catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-22 14:59:43
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-07-22 15:00:42
C:\ComboFix-quarantined-files.txt … 2007-07-22 15:00
C:\ComboFix2.txt … 2007-07-21 21:40

— E O F —


And Now the HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 3:04:07 PM, on 7/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\AOL\1155748555\ee\aolsoftware.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
c:\program files\common files\aol\1155748555\ee\aim6.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\fred.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.emachines.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1155748555\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp /HIDEBL
O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1142734391421
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/1452/ftp…02/cpbrkpie.cab
O16 - DPF: {A2E05F45-F127-4092-B9F7-9A02C3E04C77} (HGPlugin7USA Class) - http://gamedownload.ijjimax.com/gamedownlo…GPlugin7USA.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/67/install/gtdownls.cab
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - c:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

Ok here is the online scaner report:

——————————————————————————-
KASPERSKY ONLINE SCANNER REPORT
Monday, July 23, 2007 9:14:08 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 23/07/2007
Kaspersky Anti-Virus database records: 366692
——————————————————————————-

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\

Scan Statistics:
Total number of scanned objects: 95456
Number of viruses found: 26
Number of infected objects: 215
Number of suspicious objects: 6
Duration of the scan process: 01:14:16

Infected Object Name / Virus Name / Last Action
C:\30D.tmp/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eg skipped
C:\30D.tmp NSIS: infected - 1 skipped
C:\30E.tmp Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\ph Object is locked skipped
C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\variable Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\PurityScan.zip/offun.exe Suspicious: Password-protected-EXE skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\PurityScan.zip ZIP: suspicious - 1 skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinAgentqt.zip/retadpu11.exe Suspicious: Password-protected-EXE skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinAgentqt.zip ZIP: suspicious - 1 skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinAgentqt2.zip/retadpu77.exe Suspicious: Password-protected-EXE skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinAgentqt2.zip ZIP: suspicious - 1 skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Owner\Application Data\Aim\asiammyself\cert8.db Object is locked skipped
C:\Documents and Settings\Owner\Application Data\Aim\asiammyself\key3.db Object is locked skipped
C:\Documents and Settings\Owner\Application Data\GTek\GTUpdate\AUpdate\EasyLinkAdvisor\gdql_lsa_LinksysAgent.log Object is locked skipped
C:\Documents and Settings\Owner\Application Data\GTek\GTUpdate\AUpdate\EasyLinkAdvisor\glog.log Object is locked skipped
C:\Documents and Settings\Owner\Application Data\GTek\GTUpdate\AUpdate\EasyLinkAdvisor\LinksysAgent.log Object is locked skipped
C:\Documents and Settings\Owner\Application Data\GTek\GTUpdate\AUpdate\EasyLinkAdvisor\LinksysAgent_GTActions.log Object is locked skipped
C:\Documents and Settings\Owner\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Application Data\AOL\UserProfiles\All Users\cls\common.cls Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\History\History.IE5\MSHist012007072220070723\index.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Temp\me_biKVGnpHzildP3L Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Temp\me_dg5gyWWx7hwoeWl Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Temp\me_JkloC0G1sexwzXX Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Temp\me_uOtflBNd6g9XX1E Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Temp\me_WiVgNGT3WBhOZLi Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Owner\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Owner\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\report\Resident protection.txt Object is locked skipped
C:\Program Files\Common Files\AOL\ACS\US\forms.fdb Object is locked skipped
C:\Program Files\Common Files\AOL\ACS\US\static Object is locked skipped
C:\Program Files\HijackThis\backups\backup-20070722-221026-990.dll Infected: not-a-virus:AdWare.Win32.Coupons.h skipped
C:\Program Files\Kodak\Kodak EasyShare software\bin\Catalog\EasyShare.me Object is locked skipped
C:\Program Files\Kodak\Kodak EasyShare software\bin\Catalog\EasyShare.mm Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\BWKDLogs\BWTargetInf.log Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\chandir.dat Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\chandir.idx Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\chn.dat Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\chn.idx Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\D0000000.FCS Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\inuse.txt Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\L0000026.FCS Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\main.log Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\prs.dat Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\prs.idx Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\prs_die.dat Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\prs_die.idx Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\prs_dnd.dat Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\prs_dnd.idx Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\prs_ext.dat Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\prs_ext.idx Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\prs_rcv.dat Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\prs_rcv.idx Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\storydb.dat Object is locked skipped
C:\Program Files\Kodak\KODAK Software Updater\7288971\Users\Default\Data\storydb.idx Object is locked skipped
C:\QooBox\Quarantine\C\DOCUME~1\Owner\APPLIC~1\winantispyware2007freeinstall[1].exe.vir Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\QooBox\Quarantine\C\Program Files\Common Files\WinAntiSpyware 2007\WAS7Mon.exe.vir Infected: not-a-virus:Downloader.Win32.WinFixer.x skipped
C:\QooBox\Quarantine\C\Program Files\poolsv\k11u72.exe.vir/data0005 Infected: Trojan-Downloader.Win32.VB.awj skipped
C:\QooBox\Quarantine\C\Program Files\poolsv\k11u72.exe.vir NSIS: infected - 1 skipped
C:\QooBox\Quarantine\C\Program Files\poolsv\wr-1-0000077.exe.vir Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\QooBox\Quarantine\C\Program Files\poolsv\YazzleBundle-1549.exe.vir/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eg skipped
C:\QooBox\Quarantine\C\Program Files\poolsv\YazzleBundle-1549.exe.vir NSIS: infected - 1 skipped
C:\QooBox\Quarantine\C\Program Files\WinAntiSpyware 2007\InstUp.exe.vir/file2 Infected: not-a-virus:Downloader.Win32.WinFixer.t skipped
C:\QooBox\Quarantine\C\Program Files\WinAntiSpyware 2007\InstUp.exe.vir Inno: infected - 1 skipped
C:\QooBox\Quarantine\C\WINDOWS\DOWNLO~1\UWA7P_0001_N91M0809NetInstaller.exe.vir Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\QooBox\Quarantine\C\WINDOWS\retadpu1000106.exe.vir Infected: Trojan-Downloader.Win32.Agent.bls skipped
C:\QooBox\Quarantine\C\WINDOWS\retadpu572.exe.vir Infected: Trojan-Downloader.Win32.Agent.bls skipped
C:\QooBox\Quarantine\C\WINDOWS\rkfsmbl.exe.vir Infected: Trojan-Dropper.Win32.Agent.mu skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\aloidxpt.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\aplfahvy.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\aqiwpnqn.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\b02FdUe\b02FdUe1065.exe.vir Infected: Trojan-Downloader.Win32.VB.awj skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\b10FdUe\b10FdUe1099.exe.vir Infected: Trojan-Downloader.Win32.VB.awj skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\bjxpyxfr.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\boclicej.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\bwubetba.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ccdflbfa.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\cdhjyrqe.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\cotqlyhi.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\dapmcmmd.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\dghcnake.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\dkwdaaxp.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\dqyygevv.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\eblqlijr.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\emqmopnu.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ewmqkifv.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\febamgup.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\fsdywlhj.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\fxlxrydj.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\gbusoakt.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\gkvdlpxh.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\gpvcvlnn.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\hoegpqoy.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\hqkvxlbo.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\iodfckcv.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\iqulyvle.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ireprfjv.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\jfbdiwmd.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\jfyqrkrv.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\jkklkkj.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.bq skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\kgrtqbxb.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\lrtcpuhx.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\nyukvfri.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ofnpyqwc.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\olmhfgno.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\orchwcge.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\pgivrdyc.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\qkpgolvk.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\qlxdrfqs.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\romtsurk.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ryvhunkc.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ssqrq.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.kr skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\stikxmcs.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\sytgtetv.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\tmmjlpkf.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ttlpyrsx.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\uflxvdih.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ufpqhmxg.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ulplxtgu.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\vgbknlix.dll.vir Infected: Trojan.Win32.BHO.bd skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\vluhacrc.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\vnorskjt.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\vtncnvyc.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\wjamxxxw.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\wmlfdcka.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\wuevlnrt.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\wwfqhkek.exe.vir Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ynhftbie.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ytrajivy.exe.vir Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\Z1\mwspasrt83122.exe.vir/data0002 Infected: not-a-virus:AdWare.Win32.TTC.c skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\Z1\mwspasrt83122.exe.vir NSIS: infected - 1 skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\Z3\wr73.exe.vir Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\Z5\st2.exe.vir Infected: Trojan-Dropper.Win32.Agent.bfr skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\Z9\bw73.exe.vir Infected: not-a-virus:AdWare.Win32.Agent.co skipped
C:\QooBox\Quarantine\C\WINDOWS\TISKY009.exe.vir Infected: not-a-virus:AdWare.Win32.ZenoSearch.o skipped
C:\QooBox\Quarantine\catchme2007-07-21_213812.89.zip/core.sys Infected: Rootkit.Win32.Agent.eq skipped
C:\QooBox\Quarantine\catchme2007-07-21_213812.89.zip ZIP: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP806\A0287863.exe Infected: Trojan-Downloader.Win32.Agent.bls skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP808\A0287901.exe Infected: Trojan-Downloader.Win32.Agent.bls skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP812\A0288254.exe/file2 Infected: not-a-virus:Downloader.Win32.WinFixer.t skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP812\A0288254.exe Inno: infected - 1 skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP812\A0288259.dll Infected: not-a-virus:AdWare.Win32.Agent.dk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP812\A0288310.dll Infected: not-a-virus:AdWare.Win32.Agent.dk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP812\A0288311.exe Infected: not-a-virus:AdWare.Win32.Agent.dk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP867\A0293229.exe Infected: Trojan-Downloader.Win32.Agent.bls skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP868\A0293272.exe Infected: not-a-virus:Downloader.Win32.WinFixer.t skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP869\A0293452.exe Infected: not-a-virus:Downloader.Win32.WinFixer.x skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP869\A0293453.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP869\A0293505.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP869\snapshot\MFEX-1.DAT Infected: not-a-virus:Downloader.Win32.WinFixer.x skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP871\A0293558.exe Infected: Trojan-Downloader.Win32.Zlob.bqw skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP871\A0293655.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0293719.exe/file2 Infected: not-a-virus:Downloader.Win32.WinFixer.t skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0293719.exe Inno: infected - 1 skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0293725.exe Infected: Trojan-Downloader.Win32.Agent.bls skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0293727.exe Infected: not-a-virus:Downloader.Win32.WinFixer.t skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0293728.exe Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0293757.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0295758.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0295777.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0295796.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0295851.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0295858.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0295867.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP872\A0295886.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0295905.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0295907.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0295908.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0295920.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0295929.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0295939.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0295946.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0295959.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0295974.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296060.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.bq skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296061.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296062.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296063.exe Infected: Trojan-Downloader.Win32.Agent.bls skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296067.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296081.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296098.exe Infected: Trojan-Dropper.Win32.Agent.mu skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296099.exe Infected: Trojan.Win32.BHO.ab skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296100.exe Infected: not-a-virus:Downloader.Win32.WinFixer.x skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296101.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP873\A0296116.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP874\A0296139.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP874\A0296140.dll Infected: not-a-virus:AdWare.Win32.TTC.c skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP874\A0296143.exe Infected: Trojan.Win32.Agent.aoy skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296163.exe Infected: Trojan-Downloader.Win32.Agent.bls skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296164.exe Infected: Trojan-Downloader.Win32.Agent.bls skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296165.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296166.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296167.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296168.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296169.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296170.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296171.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296172.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296173.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296174.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296175.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296176.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296177.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296178.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296179.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296180.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296181.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296182.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296183.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296184.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296185.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296186.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296187.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296188.exe Infected: Trojan-Dropper.Win32.Agent.bmk skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296189.exe Infected: not-a-virus:Downloader.Win32.WinFixer.x skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296190.exe/data0005 Infected: Trojan-Downloader.Win32.VB.awj skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296190.exe NSIS: infected - 1 skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296192.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296193.exe/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eg skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296193.exe NSIS: infected - 1 skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296197.exe/file2 Infected: not-a-virus:Downloader.Win32.WinFixer.t skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296197.exe Inno: infected - 1 skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296208.exe/data0002 Infected: not-a-virus:AdWare.Win32.TTC.c skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296208.exe NSIS: infected - 1 skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296209.exe Infected: Trojan-Downloader.Win32.Small.eqn skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296210.exe Infected: Trojan-Dropper.Win32.Agent.bfr skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296211.exe Infected: not-a-virus:AdWare.Win32.Agent.co skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296215.exe Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296219.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296222.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296223.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296226.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296227.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296228.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296229.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296230.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296231.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296232.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296233.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296234.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296235.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296236.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296237.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296238.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296239.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296240.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296241.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296242.exe Infected: Trojan-Downloader.Win32.Tiny.id skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296243.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296244.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296245.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296246.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296247.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296248.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296249.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296250.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296251.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296252.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296253.dll Infected: Trojan.Win32.BHO.bd skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296263.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.kr skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296264.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.bq skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296351.exe Infected: Trojan-Downloader.Win32.VB.awj skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296352.exe Infected: Trojan-Downloader.Win32.VB.awj skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296354.exe Infected: Trojan-Dropper.Win32.Agent.mu skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP875\A0296355.exe Infected: not-a-virus:AdWare.Win32.ZenoSearch.o skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP876\A0296379.ocx Infected: not-a-virus:AdWare.Win32.Coupons.h skipped
C:\System Volume Information\_restore{F85E50F6-23AA-4ADC-862E-3E5F25DFB1DC}\RP876\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_654.dat Object is locked skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 9:16:01 AM, on 7/23/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\AOL\1155748555\ee\AOLSoftware.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
c:\program files\common files\aol\1155748555\ee\aim6.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\HijackThis\fred.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.emachines.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1155748555\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp /HIDEBL
O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1142734391421
O16 - DPF: {A2E05F45-F127-4092-B9F7-9A02C3E04C77} (HGPlugin7USA Class) - http://gamedownload.ijjimax.com/gamedownlo…GPlugin7USA.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/67/install/gtdownls.cab
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - c:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe