Thanks for the explanation …
Here are the files you requested
Report.txt
SDFix: Version 1.115
Run by [removed] on Tue 11/20/2007 at 06:31 PM
Microsoft Windows XP [Version 5.1.2600]
Running From: C:\SDFix
Safe Mode:
Checking Services:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting…
Normal Mode:
Checking Files:
Trojan Files Found:
C:\WINDOWS\SYSTEM32\IALMCOIN.DLL - Deleted
C:\WINDOWS\SYSTEM32\STP68_~1.DLL - Deleted
C:\WLAN.TMP - Deleted
C:\413241~1 - Deleted
C:\Documents and Settings\Owner\Local Settings\Temp\WinAntiSpyware 2007 FreeInstall.exe - Deleted
C:\DOCUME~1\Owner\LOCALS~1\Temp\removalfile.bat - Deleted
Removing Temp Files…
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-11-20 18:45:06
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes …
scanning hidden services & system hive …
scanning hidden registry entries …
scanning hidden files …
C:\Documents and Settings\Owner\Application Data\NSS PKI Store\AOL
C:\Documents and Settings\Owner\Application Data\NSS PKI Store\AOL\certS.db 24576 bytes
C:\Documents and Settings\Owner\Application Data\NSS PKI Store\AOL\keyS.db 24576 bytes
C:\Documents and Settings\Owner\Application Data\NSS PKI Store\AOL\log.0000000001 29038 bytes
C:\Documents and Settings\Owner\Application Data\NSS PKI Store\AOL\secmodS.db 24576 bytes
C:\Documents and Settings\Owner\Application Data\NSS PKI Store\AOL\__db.001 8192 bytes
C:\Documents and Settings\Owner\Application Data\NSS PKI Store\AOL\__db.002 270336 bytes
C:\Documents and Settings\Owner\Application Data\NSS PKI Store\AOL\__db.003 98304 bytes
C:\Documents and Settings\Owner\Application Data\NSS PKI Store\AOL\__db.004 8192 bytes
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 9
Remaining Services:
——————
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
Remaining Files:
—————
File Backups: - C:\SDFix\backups\backups.zip
Files with Hidden Attributes:
Wed 10 Sep 2003 49,237 A..H. — "C:\Program Files\America Online 9.0\aolphx.exe"
Wed 10 Sep 2003 36,953 A..H. — "C:\Program Files\America Online 9.0\aoltray.exe"
Wed 10 Sep 2003 40,960 A..H. — "C:\Program Files\America Online 9.0\RBM.exe"
Wed 10 Sep 2003 233,553 A..H. — "C:\Program Files\America Online 9.0\waol.exe"
Wed 10 Sep 2003 49,237 A..H. — "C:\Program Files\America Online 9.0a\aolphx.exe"
Wed 10 Sep 2003 36,953 A..H. — "C:\Program Files\America Online 9.0a\aoltray.exe"
Wed 10 Sep 2003 40,960 A..H. — "C:\Program Files\America Online 9.0a\RBM.exe"
Wed 28 Apr 2004 238,792 A..H. — "C:\Program Files\America Online 9.0a\waol.exe"
Tue 16 Nov 2004 54,872 A..H. — "C:\Program Files\America Online 9.0b\AOLphx.exe"
Tue 16 Nov 2004 31,832 A..H. — "C:\Program Files\America Online 9.0b\rbm.exe"
Fri 7 May 2004 54,384 A..H. — "C:\Program Files\America Online 9.0c\aolphx.exe"
Fri 7 May 2004 156,784 A..H. — "C:\Program Files\America Online 9.0c\aoltray.exe"
Fri 7 May 2004 31,344 A..H. — "C:\Program Files\America Online 9.0c\RBM.exe"
Fri 19 Nov 2004 54,872 A..H. — "C:\Program Files\America Online 9.0d\AOLphx.exe"
Fri 19 Nov 2004 31,832 A..H. — "C:\Program Files\America Online 9.0d\rbm.exe"
Wed 10 Sep 2003 36,953 A..H. — "C:\Program Files\America Online 9.0e\aoltray.exe"
Fri 7 May 2004 54,384 A..H. — "C:\Program Files\America Online 9.0f\aolphx.exe"
Fri 7 May 2004 156,784 A..H. — "C:\Program Files\America Online 9.0f\aoltray.exe"
Fri 7 May 2004 31,344 A..H. — "C:\Program Files\America Online 9.0f\RBM.exe"
Wed 10 Sep 2003 49,237 A..H. — "C:\Program Files\America Online 9.0g\aolphx.exe"
Wed 10 Sep 2003 36,953 A..H. — "C:\Program Files\America Online 9.0g\aoltray.exe"
Wed 10 Sep 2003 40,960 A..H. — "C:\Program Files\America Online 9.0g\RBM.exe"
Fri 23 Feb 2007 225,380 A..H. — "C:\Program Files\America Online 9.0g\waol.exe"
Fri 27 Apr 2007 4,348 ..SH. — "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Wed 13 Apr 2005 4,348 ..SH. — "C:\Documents and Settings\All Users\DRM\DRMv1.key.bak"
Thu 22 Sep 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw111.tmp"
Thu 22 Sep 2005 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw112.tmp"
Thu 22 Sep 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw113.tmp"
Thu 22 Sep 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw114.tmp"
Thu 22 Sep 2005 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw115.tmp"
Thu 22 Sep 2005 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw116.tmp"
Thu 22 Sep 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw117.tmp"
Thu 22 Sep 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw118.tmp"
Tue 18 Oct 2005 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1D.tmp"
Tue 18 Oct 2005 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1E.tmp"
Thu 1 Jun 2006 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1E6.tmp"
Thu 1 Jun 2006 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1E7.tmp"
Thu 1 Jun 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1E8.tmp"
Thu 1 Jun 2006 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1E9.tmp"
Thu 1 Jun 2006 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1EA.tmp"
Thu 1 Jun 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1EB.tmp"
Thu 1 Jun 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1EC.tmp"
Thu 1 Jun 2006 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1ED.tmp"
Tue 18 Oct 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw1F.tmp"
Tue 18 Oct 2005 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw20.tmp"
Tue 18 Oct 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw21.tmp"
Tue 18 Oct 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw22.tmp"
Tue 18 Oct 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw23.tmp"
Tue 6 Sep 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw24.tmp"
Tue 6 Sep 2005 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw25.tmp"
Tue 6 Sep 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw26.tmp"
Tue 6 Sep 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw27.tmp"
Tue 6 Sep 2005 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw28.tmp"
Tue 6 Sep 2005 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw29.tmp"
Tue 6 Sep 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw2A.tmp"
Tue 6 Sep 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw2B.tmp"
Tue 18 Oct 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw2C.tmp"
Thu 10 Aug 2006 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw2D.tmp"
Thu 10 Aug 2006 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw2E.tmp"
Thu 10 Aug 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw2F.tmp"
Thu 10 Aug 2006 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw30.tmp"
Thu 10 Aug 2006 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw31.tmp"
Thu 10 Aug 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw32.tmp"
Thu 10 Aug 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw33.tmp"
Thu 10 Aug 2006 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw34.tmp"
Sun 3 Sep 2006 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw4A.tmp"
Sun 3 Sep 2006 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw4B.tmp"
Sun 3 Sep 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw4C.tmp"
Sun 3 Sep 2006 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw4D.tmp"
Sun 3 Sep 2006 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw4E.tmp"
Sun 3 Sep 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw4F.tmp"
Sun 3 Sep 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw50.tmp"
Sun 3 Sep 2006 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw51.tmp"
Tue 14 Feb 2006 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw57.tmp"
Tue 14 Feb 2006 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw58.tmp"
Tue 14 Feb 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw59.tmp"
Tue 14 Feb 2006 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw5A.tmp"
Tue 14 Feb 2006 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw5B.tmp"
Tue 14 Feb 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw5C.tmp"
Tue 14 Feb 2006 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw5D.tmp"
Tue 14 Feb 2006 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw5E.tmp"
Sun 4 Dec 2005 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw94.tmp"
Sun 4 Dec 2005 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw95.tmp"
Sun 4 Dec 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw96.tmp"
Sun 4 Dec 2005 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw97.tmp"
Sun 4 Dec 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw98.tmp"
Sun 4 Dec 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw99.tmp"
Sun 4 Dec 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw9A.tmp"
Sun 4 Dec 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipw9B.tmp"
Thu 22 Dec 2005 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwAE.tmp"
Thu 22 Dec 2005 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwAF.tmp"
Thu 22 Dec 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwB0.tmp"
Thu 22 Dec 2005 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwB1.tmp"
Thu 22 Dec 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwB2.tmp"
Thu 22 Dec 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwB3.tmp"
Thu 22 Dec 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwB4.tmp"
Thu 22 Dec 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwB5.tmp"
Wed 30 Nov 2005 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwDB.tmp"
Wed 30 Nov 2005 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwDC.tmp"
Wed 30 Nov 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwDD.tmp"
Wed 30 Nov 2005 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwDE.tmp"
Wed 30 Nov 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwDF.tmp"
Wed 30 Nov 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE0.tmp"
Wed 30 Nov 2005 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE1.tmp"
Wed 30 Nov 2005 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE2.tmp"
Sun 17 Oct 2004 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE44.tmp"
Sun 17 Oct 2004 69,632 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE45.tmp"
Sun 17 Oct 2004 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE46.tmp"
Sun 17 Oct 2004 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE47.tmp"
Sun 17 Oct 2004 77,824 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE48.tmp"
Sun 17 Oct 2004 61,440 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE49.tmp"
Sun 17 Oct 2004 86,016 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE4A.tmp"
Sun 17 Oct 2004 81,920 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\Local Settings\Temp\ipwE4B.tmp"
Thu 22 Sep 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw111.tmp"
Thu 22 Sep 2005 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw112.tmp"
Thu 22 Sep 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw113.tmp"
Thu 22 Sep 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw114.tmp"
Thu 22 Sep 2005 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw115.tmp"
Thu 22 Sep 2005 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw116.tmp"
Thu 22 Sep 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw117.tmp"
Thu 22 Sep 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw118.tmp"
Tue 18 Oct 2005 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1D.tmp"
Tue 18 Oct 2005 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1E.tmp"
Thu 1 Jun 2006 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1E6.tmp"
Thu 1 Jun 2006 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1E7.tmp"
Thu 1 Jun 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1E8.tmp"
Thu 1 Jun 2006 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1E9.tmp"
Thu 1 Jun 2006 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1EA.tmp"
Thu 1 Jun 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1EB.tmp"
Thu 1 Jun 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1EC.tmp"
Thu 1 Jun 2006 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1ED.tmp"
Tue 18 Oct 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw1F.tmp"
Tue 18 Oct 2005 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw20.tmp"
Tue 18 Oct 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw21.tmp"
Tue 18 Oct 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw22.tmp"
Tue 18 Oct 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw23.tmp"
Tue 6 Sep 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw24.tmp"
Tue 6 Sep 2005 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw25.tmp"
Tue 6 Sep 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw26.tmp"
Tue 6 Sep 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw27.tmp"
Tue 6 Sep 2005 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw28.tmp"
Tue 6 Sep 2005 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw29.tmp"
Tue 6 Sep 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw2A.tmp"
Tue 6 Sep 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw2B.tmp"
Tue 18 Oct 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw2C.tmp"
Thu 10 Aug 2006 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw2D.tmp"
Thu 10 Aug 2006 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw2E.tmp"
Thu 10 Aug 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw2F.tmp"
Thu 10 Aug 2006 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw30.tmp"
Thu 10 Aug 2006 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw31.tmp"
Thu 10 Aug 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw32.tmp"
Thu 10 Aug 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw33.tmp"
Thu 10 Aug 2006 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw34.tmp"
Sun 3 Sep 2006 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw4A.tmp"
Sun 3 Sep 2006 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw4B.tmp"
Sun 3 Sep 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw4C.tmp"
Sun 3 Sep 2006 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw4D.tmp"
Sun 3 Sep 2006 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw4E.tmp"
Sun 3 Sep 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw4F.tmp"
Sun 3 Sep 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw50.tmp"
Sun 3 Sep 2006 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw51.tmp"
Tue 14 Feb 2006 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw57.tmp"
Tue 14 Feb 2006 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw58.tmp"
Tue 14 Feb 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw59.tmp"
Tue 14 Feb 2006 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw5A.tmp"
Tue 14 Feb 2006 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw5B.tmp"
Tue 14 Feb 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw5C.tmp"
Tue 14 Feb 2006 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw5D.tmp"
Tue 14 Feb 2006 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw5E.tmp"
Sun 4 Dec 2005 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw94.tmp"
Sun 4 Dec 2005 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw95.tmp"
Sun 4 Dec 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw96.tmp"
Sun 4 Dec 2005 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw97.tmp"
Sun 4 Dec 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw98.tmp"
Sun 4 Dec 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw99.tmp"
Sun 4 Dec 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw9A.tmp"
Sun 4 Dec 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipw9B.tmp"
Thu 22 Dec 2005 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwAE.tmp"
Thu 22 Dec 2005 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwAF.tmp"
Thu 22 Dec 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwB0.tmp"
Thu 22 Dec 2005 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwB1.tmp"
Thu 22 Dec 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwB2.tmp"
Thu 22 Dec 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwB3.tmp"
Thu 22 Dec 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwB4.tmp"
Thu 22 Dec 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwB5.tmp"
Wed 30 Nov 2005 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwDB.tmp"
Wed 30 Nov 2005 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwDC.tmp"
Wed 30 Nov 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwDD.tmp"
Wed 30 Nov 2005 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwDE.tmp"
Wed 30 Nov 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwDF.tmp"
Wed 30 Nov 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE0.tmp"
Wed 30 Nov 2005 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE1.tmp"
Wed 30 Nov 2005 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE2.tmp"
Sun 17 Oct 2004 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE44.tmp"
Sun 17 Oct 2004 69,632 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE45.tmp"
Sun 17 Oct 2004 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE46.tmp"
Sun 17 Oct 2004 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE47.tmp"
Sun 17 Oct 2004 77,824 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE48.tmp"
Sun 17 Oct 2004 61,440 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE49.tmp"
Sun 17 Oct 2004 86,016 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE4A.tmp"
Sun 17 Oct 2004 81,920 A..H. — "C:\Documents and Settings\mp\Local Settings\Temp\ipwE4B.tmp"
Fri 22 Dec 2006 600 A..H. — "C:\Program Files\Common Files\AOL\IPHSend\IPH.BAK"
Wed 13 Apr 2005 4,348 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\My Documents\My Music\License Backup\drmv1key.bak"
Wed 13 Apr 2005 20 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\My Documents\My Music\License Backup\drmv1lic.bak"
Wed 13 Apr 2005 312 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\My Documents\My Music\License Backup\drmv2key.bak"
Wed 13 Apr 2005 1,536 A..H. — "C:\Documents and Settings\Administrator.YOUR-W04GTXLD67\My Documents\My Music\License Backup\drmv2lic.bak"
Wed 13 Apr 2005 4,348 A..H. — "C:\Documents and Settings\Default User\My Documents\My Music\License Backup\drmv1key.bak"
Wed 13 Apr 2005 20 A..H. — "C:\Documents and Settings\Default User\My Documents\My Music\License Backup\drmv1lic.bak"
Wed 13 Apr 2005 312 A..H. — "C:\Documents and Settings\Default User\My Documents\My Music\License Backup\drmv2key.bak"
Wed 13 Apr 2005 1,536 A..H. — "C:\Documents and Settings\Default User\My Documents\My Music\License Backup\drmv2lic.bak"
Wed 13 Apr 2005 4,348 A..H. — "C:\Documents and Settings\mp\My Documents\My Music\License Backup\drmv1key.bak"
Wed 13 Apr 2005 20 A..H. — "C:\Documents and Settings\mp\My Documents\My Music\License Backup\drmv1lic.bak"
Wed 13 Apr 2005 312 A..H. — "C:\Documents and Settings\mp\My Documents\My Music\License Backup\drmv2key.bak"
Wed 13 Apr 2005 1,536 A..H. — "C:\Documents and Settings\mp\My Documents\My Music\License Backup\drmv2lic.bak"
Wed 13 Apr 2005 4,348 A..H. — "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv1key.bak"
Wed 13 Apr 2005 20 A..H. — "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv1lic.bak"
Wed 13 Apr 2005 312 A..H. — "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv2key.bak"
Wed 13 Apr 2005 1,536 A..H. — "C:\Documents and Settings\Owner\My Documents\My Music\License Backup\drmv2lic.bak"
Wed 10 Sep 2003 111,824 A..H. — "C:\Program Files\Common Files\aolshare\shell\us\shellext.dll"
Tue 22 May 2007 1,266,056 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\2f352a821695fbd87c50ccc2b4807dbe\BIT2DE.tmp"
Mon 7 Aug 2006 1,667,488 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\7a57263d52ef89a3cee46b33df8a0a10\BIT1EC.tmp"
Wed 9 Aug 2006 0 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\813e0a95fdfeb1f729c9fb87b7dc71fe\BIT245.tmp"
Wed 2 Aug 2006 1,023,792 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\ce22198694d29edbf2e0c5b7bb0f3d9c\BIT1F4.tmp"
Mon 7 Aug 2006 95,315,977 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\da2f0608e733122385625f65db46b421\BIT165.tmp"
Sun 18 Mar 2007 0 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\79a472c662fcaea1ff845b3a03de2d4f\download\BIT60.tmp"
Wed 13 Apr 2005 4,348 A..H. — "C:\WINDOWS\system32\config\systemprofile\My Documents\My Music\License Backup\drmv1key.bak"
Wed 13 Apr 2005 20 A..H. — "C:\WINDOWS\system32\config\systemprofile\My Documents\My Music\License Backup\drmv1lic.bak"
Wed 13 Apr 2005 312 A..H. — "C:\WINDOWS\system32\config\systemprofile\My Documents\My Music\License Backup\drmv2key.bak"
Wed 13 Apr 2005 1,536 A..H. — "C:\WINDOWS\system32\config\systemprofile\My Documents\My Music\License Backup\drmv2lic.bak"
Finished!
Uninstall List
Adobe Flash Player ActiveX
Adobe Photoshop Album Starter Edition
Adobe Reader 6.0
America Online (Choose which version to remove)
ArcSoft ShowBiz 2
BLS-2007
CardRd81
CCHelp
CCScore
Comcast High-Speed Internet Install Wizard
Comcast Toolbar
Compaq Connections
Compaq Instant Support
Compaq Organize
CR2
Desktop Doctor
DXG-552
Easy Internet Sign-up
ESSAdpt
ESSANUP
ESSBrwr
ESSCAM
ESSCDBK
ESScore
ESSCT
ESSgui
ESShelp
ESSini
ESSPCD
ESSPDock
ESSSONIC
ESSTUTOR
ESSvpaht
ESSvpot
Hijackthis 1.99.1
HijackThis 1.99.1
HLPCCTR
HLPIndex
HLPPDOCK
HLPRFO
HP Deskjet Preloaded Printer Drivers
HP Driver Diagnostics
HP Extended Capabilities 5.3
HP Image Zone Express
HP Imaging Device Functions 5.3
HP Photo & Imaging 3.1
HP Photo and Imaging 2.0 - Photosmart Cameras
HP PSC & OfficeJet 3.0
HP PSC & OfficeJet 5.3.B
HP Software Update
HP Solution Center & Imaging Support Tools 5.3
Intel® Extreme Graphics Driver
Intel® Integrated Performance Primitives RTI 4.0
IntelliMover Data Transfer Demo
ItsDeductible Express
iTunes
Java 2 Runtime Environment, SE v1.4.2
KBD
Kodak EasyShare software
KSU
Learn2 Player (Uninstall Only)
Memories Disc Creator 2.0
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft Money 2004
Microsoft Money 2004 System Pack
Microsoft Office Professional Edition 2003
Microsoft Plus! Digital Media Edition
Microsoft Works 7.0
MSXML 4.0 SP2 (KB927978)
Musicmatch® Jukebox
Nero - Burning Rom
Notifier
NVIDIA GART Driver
OTtBP
OTtBPSDK
PCDLNCH
Photosmart 140,240,7200,7600,7700,7900 Series
Pop-Up Stopper Professional
Presto! VideoWorks 6
PS2
Python 2.2 combined Win32 extensions
Python 2.2.1
Quicken 2004
QuickTime
RealOne Player
RecordNow!
S3 S3Display
S3 S3Gamma2
S3 S3Info2
S3 S3Overlay
SafeCast Shared Components
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows XP (KB923789)
SFR
SFR2
Sonic Update Manager
Spybot - Search & Destroy
TextTwist Deluxe
TurboTax ItsDeductible 2005
TurboTax ItsDeductible 2006
TurboTax Premier 2004
TurboTax Premier 2005
TurboTax Premier Investments 2006
VCAMCEN
VIA Rhine-Family Fast-Ethernet Adapter
VIA/S3G Display Driver
Viewpoint Media Player
VPRINTOL
WexTech AnswerWorks
Windows Media Format Runtime
Windows Media Player 10
WinRAR archiver
Zone Deluxe Games
HiJackThis Log
Logfile of HijackThis v1.99.1
Scan saved at 6:59:39 PM, on 11/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\system32\cba\pds.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\system32\drivers\security\services.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\cba\xfr.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\LTMSG.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://srch-qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://srch-qus10.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {C44EA79C-667B-4862-9055-CED0C16FED8F} - C:\WINDOWS\system32\ssqpq.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [PopUpStopperProfessional] "C:\Program Files\Panicware\Pop-Up Stopper Professional\PopUpStopperProfessional.exe"
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController Control) -
http://h30155.www3.hp.com/ediags/dd/instal…llMgr_v01_4.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://www.update.microsoft.com/windowsupd…b?1191287272531
O20 - Winlogon Notify: ddcdbaw - ddcdbaw.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: ssqpq - C:\WINDOWS\system32\ssqpq.dll
O20 - Winlogon Notify: stp68_2007 - stp68_2007.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Gear Security Service (GEARSecurity) - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: Intel File Transfer - Intel® Corporation - C:\WINDOWS\system32\cba\xfr.exe
O23 - Service: Intel PDS - Intel® Corporation - C:\WINDOWS\system32\cba\pds.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: msnsupport - Unknown owner - C:\WINDOWS\system32\drivers\security\services.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
Let me know what you find….