Frequent BSODs. Varying Error Msgs

First, let me say I really appreciate you volunteers taking the time and trouble to help the likes of me. Thanks in advance!

My problem is that my work is interrupted at least twice a day by the evil Blue Screen of Death.

What is particularly vexing is that the reasons seem to be different. And, even if I knew enough to track them down, I wouldn't know what I needed to do to fix them.

Here are a couple of the errors from the Events Log (followed by a reprint of a couple of days of that log).

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 2/2/2008
Time: 11:47:06 AM
User: N/A
Computer: ELLIS1
Description:
Error code 00000050, parameter1 eb3094d8, parameter2 00000000, parameter3 804efce0, parameter4 00000002.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 35 0000005
0020: 30 20 20 50 61 72 61 6d 0 Param
0028: 65 74 65 72 73 20 65 62 eters eb
0030: 33 30 39 34 64 38 2c 20 3094d8,
0038: 30 30 30 30 30 30 30 30 00000000
0040: 2c 20 38 30 34 65 66 63 , 804efc
0048: 65 30 2c 20 30 30 30 30 e0, 0000
0050: 30 30 30 32 0002


Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 2/2/2008
Time: 11:51:24 AM
User: N/A
Computer: ELLIS1
Description:
Error code 000000c4, parameter1 00000081, parameter2 89a46ba8, parameter3 0000008a, parameter4 00000000.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 63 000000c
0020: 34 20 20 50 61 72 61 6d 4 Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 38 31 2c 20 000081,
0038: 38 39 61 34 36 62 61 38 89a46ba8
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 38 61 2c 20 30 30 30 30 8a, 0000
0050: 30 30 30 30 0000

Here's the past week of the Event Log that might help, followed by the Hijackthis log.

Saturday, January 19, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, January 19, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, January 19, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, January 19, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Sunday, January 20, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 Applicatio n Hang Hanging application Eudora.exe, version 7.1.0.9, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Sunday, January 20, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Sunday, January 20, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Sunday, January 20, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 Applicatio n Hang Hanging application Eudora.exe, version 7.1.0.9, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Sunday, January 20, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Sunday, January 20, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Sunday, January 20, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Sunday, January 20, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Sunday, January 20, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Sunday, January 20, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Sunday, January 20, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 Applicatio n Hang Hanging application Photoshop.exe, version 8.0.0.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Sunday, January 20, 2008 Applicatio n Hang Hanging application Photoshop.exe, version 8.0.0.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Sunday, January 20, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Sunday, January 20, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Sunday, January 20, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Sunday, January 20, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Sunday, January 20, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Sunday, January 20, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Sunday, January 20, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Sunday, January 20, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Sunday, January 20, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Sunday, January 20, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Sunday, January 20, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Sunday, January 20, 2008 Applicatio n Hang Hanging application iTunes.exe, version 7.5.0.20, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Sunday, January 20, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Sunday, January 20, 2008 Applicatio n Hang Hanging application OUTLOOK.EXE, version 12.0.6212.1000, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Monday, January 21, 2008 MPSampleSu bmission EventType mptelemetry, P1 8024402c, P2 endsearch, P3 search, P4 1.1.1593.0, P5 mpsigdwn.dll, P6 1.1.1593.0, P7 windows defender, P8 NIL, P9 NIL, P10 NIL.
Monday, January 21, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Monday, January 21, 2008 Applicatio n Hang Hanging application iTunes.exe, version 7.5.0.20, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Monday, January 21, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Monday, January 21, 2008 Windows Search Service None
Monday, January 21, 2008 Windows Search Service None
Monday, January 21, 2008 Windows Search Service None
Monday, January 21, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Monday, January 21, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Monday, January 21, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Monday, January 21, 2008 LoadPerf Unloading the performance counter strings for service UGatherer (UGatherer) failed. The Error code is the first DWORD in Data section.
Monday, January 21, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Monday, January 21, 2008 LoadPerf Unloading the performance counter strings for service UGTHRSVC (UGTHRSVC) failed. The Error code is the first DWORD in Data section.
Monday, January 21, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Monday, January 21, 2008 LoadPerf Unloading the performance counter strings for service wsearchidxpi (wsearchidxpi) failed. The Error code is the first DWORD in Data section.
Monday, January 21, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Monday, January 21, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Monday, January 21, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Monday, January 21, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Monday, January 21, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Monday, January 21, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Monday, January 21, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Monday, January 21, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Monday, January 21, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Monday, January 21, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Monday, January 21, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Monday, January 21, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Tuesday, January 22, 2008 Applicatio n Error Faulting application eudora.exe, version 7.1.0.9, faulting module eudora.exe, version 7.1.0.9, fault address 0x001a0d67.
Tuesday, January 22, 2008 Applicatio n Error Fault bucket 344576911.
Tuesday, January 22, 2008 Applicatio n Error Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
Tuesday, January 22, 2008 Applicatio n Error Fault bucket 00733296.
Tuesday, January 22, 2008 Applicatio n Hang Hanging application cs.exe, version 6.0.6.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Tuesday, January 22, 2008 Applicatio n Hang Fault bucket 77433380.
Tuesday, January 22, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Tuesday, January 22, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Tuesday, January 22, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Tuesday, January 22, 2008 Applicatio n Error Faulting application explorer.exe, version 6.0.2900.3156, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
Tuesday, January 22, 2008 Applicatio n Error Fault bucket 00733296.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Hang Hanging application wmplayer.exe, version 11.0.5721.5145, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Tuesday, January 22, 2008 Applicatio n Hang Hanging application explorer.exe, version 6.0.2900.3156, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Tuesday, January 22, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Tuesday, January 22, 2008 Applicatio n Error Faulting application explorer.exe, version 6.0.2900.3156, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Tuesday, January 22, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Tuesday, January 22, 2008 Applicatio n Error Faulting application explorer.exe, version 6.0.2900.3156, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
Tuesday, January 22, 2008 Applicatio n Error Fault bucket 00733296.
Tuesday, January 22, 2008 Applicatio n Hang Hanging application wmplayer.exe, version 11.0.5721.5145, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Tuesday, January 22, 2008 Applicatio n Hang Hanging application explorer.exe, version 6.0.2900.3156, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Tuesday, January 22, 2008 Applicatio n Error Faulting application explorer.exe, version 6.0.2900.3156, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Hang Hanging application wmplayer.exe, version 11.0.5721.5145, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Tuesday, January 22, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Tuesday, January 22, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Tuesday, January 22, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Tuesday, January 22, 2008 Applicatio n Error Faulting application divx player.exe, version 6.6.0.42, faulting module msvcr80.dll, version 8.0.50727.762, fault address 0x00008a8c.
Tuesday, January 22, 2008 Applicatio n Error Faulting application explorer.exe, version 6.0.2900.3156, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Fault bucket 343022986.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application explorer.exe, version 6.0.2900.3156, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Tuesday, January 22, 2008 Applicatio n Hang Hanging application Eudora.exe, version 7.1.0.9, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Wednesday, January 23, 2008 Applicatio n Error Faulting application explorer.exe, version 6.0.2900.3156, faulting module nvcpl.dll, version 6.14.10.9371, fault address 0x0005d617.
Wednesday, January 23, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Wednesday, January 23, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Wednesday, January 23, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Wednesday, January 23, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Wednesday, January 23, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Wednesday, January 23, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Wednesday, January 23, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Wednesday, January 23, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Wednesday, January 23, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Wednesday, January 23, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Thursday, January 24, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Thursday, January 24, 2008 Applicatio n Hang Hanging application ConvertMovie.exe, version 3.0.0.1, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Thursday, January 24, 2008 Microsoft Office 12 Faulting application powerpnt.exe, version 12.0.6211.1000, stamp 46d4a83f, faulting module qdv.dll, version 6.5.2600.2180, stamp 411096a9, debug? 0, fault address 0x00006e2b.
Thursday, January 24, 2008 Applicatio n Error Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module qdv.dll, version 6.5.2600.2180, fault address 0x00006e2b.
Thursday, January 24, 2008 Microsoft Office 12 EventType officelifeboathang, P1 outlook.exe, P2 12.0.6212.1000, P3 ntdll.dll, P4 5.1.2600.2180, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL.
Thursday, January 24, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Thursday, January 24, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Thursday, January 24, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Thursday, January 24, 2008 Applicatio n Hang Hanging application EXCEL.EXE, version 12.0.6214.1000, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Thursday, January 24, 2008 Applicatio n Hang Hanging application EXCEL.EXE, version 12.0.6214.1000, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Thursday, January 24, 2008 Applicatio n Hang Hanging application EXCEL.EXE, version 12.0.6214.1000, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Thursday, January 24, 2008 Applicatio n Hang Fault bucket 591026659.
Thursday, January 24, 2008 Applicatio n Hang Fault bucket 591026659.
Thursday, January 24, 2008 Applicatio n Hang Fault bucket 591026659.
Friday, January 25, 2008 Applicatio n Hang Hanging application Eudora.exe, version 7.1.0.9, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Friday, January 25, 2008 Applicatio n Hang Hanging application Eudora.exe, version 7.1.0.9, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Friday, January 25, 2008 Microsoft Office 12 Faulting application powerpnt.exe, version 12.0.6211.1000, stamp 46d4a83f, faulting module ppcore.dll, version 12.0.6211.1000, stamp 46d4a8ba, debug? 0, fault address 0x00654bf5.
Friday, January 25, 2008 Applicatio n Hang Fault bucket 333717638.
Friday, January 25, 2008 Applicatio n Hang Fault bucket 333717638.
Friday, January 25, 2008 Applicatio n Hang Hanging application cs.exe, version 6.0.6.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Friday, January 25, 2008 Applicatio n Hang Hanging application cs.exe, version 6.0.6.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Friday, January 25, 2008 Applicatio n Hang Hanging application Acrobat.exe, version 5.0.5.452, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Friday, January 25, 2008 Applicatio n Hang Fault bucket 03295218.
Saturday, January 26, 2008 Applicatio n Error Faulting application avginet.exe, version 7.5.0.504, faulting module avgupd.dll, version 7.5.0.515, fault address 0x00044ec7.
Saturday, January 26, 2008 Applicatio n Error Fault bucket 595583631.
Saturday, January 26, 2008 Applicatio n Error Faulting application avginet.exe, version 7.5.0.504, faulting module avgupd.dll, version 7.5.0.515, fault address 0x00044ec7.
Saturday, January 26, 2008 Applicatio n Error Fault bucket 595583631.
Saturday, January 26, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Saturday, January 26, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, January 26, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, January 26, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, January 26, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, January 26, 2008 Applicatio n Hang Hanging application Eudora.exe, version 7.1.0.9, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Saturday, January 26, 2008 Applicatio n Hang Hanging application Eudora.exe, version 7.1.0.9, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Saturday, January 26, 2008 Applicatio n Hang Fault bucket 333717638.
Saturday, January 26, 2008 Applicatio n Hang Fault bucket 333717638.
Saturday, January 26, 2008 Applicatio n Error Faulting application eudora.exe, version 7.1.0.9, faulting module eudora.exe, version 7.1.0.9, fault address 0x001a0d67.
Saturday, January 26, 2008 Applicatio n Error Fault bucket 344576911.
Saturday, January 26, 2008 Applicatio n Error Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
Saturday, January 26, 2008 Applicatio n Error Fault bucket 00733296.
Saturday, January 26, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Saturday, January 26, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, January 26, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, January 26, 2008 Applicatio n Hang Hanging application iTunes.exe, version 7.6.0.29, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Saturday, January 26, 2008 Applicatio n Hang Hanging application Eudora.exe, version 7.1.0.9, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Saturday, January 26, 2008 Applicatio n Hang Fault bucket 333717638.
Monday, January 28, 2008 Applicatio n Error Faulting application eudora.exe, version 7.1.0.9, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x00010f29.
Monday, January 28, 2008 Applicatio n Error Fault bucket 337967711.
Tuesday, January 29, 2008 Applicatio n Hang Hanging application Eudora.exe, version 7.1.0.9, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Tuesday, January 29, 2008 Applicatio n Hang Fault bucket 333717638.
Wednesday, January 30, 2008 Applicatio n Hang Hanging application EXCEL.EXE, version 12.0.6214.1000, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Wednesday, January 30, 2008 Applicatio n Hang Hanging application EXCEL.EXE, version 12.0.6214.1000, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Wednesday, January 30, 2008 Applicatio n Hang Hanging application EXCEL.EXE, version 12.0.6214.1000, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Wednesday, January 30, 2008 Applicatio n Hang Hanging application EXCEL.EXE, version 12.0.6214.1000, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Wednesday, January 30, 2008 Applicatio n Hang Hanging application EXCEL.EXE, version 12.0.6214.1000, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Wednesday, January 30, 2008 Applicatio n Hang Fault bucket 591026659.
Wednesday, January 30, 2008 Applicatio n Hang Fault bucket 591026659.
Wednesday, January 30, 2008 Applicatio n Hang Fault bucket 591026659.
Wednesday, January 30, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Wednesday, January 30, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Wednesday, January 30, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Wednesday, January 30, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Wednesday, January 30, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Wednesday, January 30, 2008 Applicatio n Hang Hanging application WINWORD.EXE, version 12.0.6211.1000, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Thursday, January 31, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Thursday, January 31, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Thursday, January 31, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Friday, February 01, 2008 ESENT wuauclt (4576) An attempt to open the file "C:\WINDOWS\SoftwareDistributi on\DataStore\Logs\edb.log" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).
Friday, February 01, 2008 ESENT wuaueng.dll (4576) SUS20ClientDataStore: Error -1032 (0xfffffbf8) occurred while opening logfile C:\WINDOWS\SoftwareDistributio n\DataStore\Logs\edb.log.
Friday, February 01, 2008 ESENT wuauclt (4576) An attempt to open the file "C:\WINDOWS\SoftwareDistributi on\DataStore\Logs\edb.log" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).
Friday, February 01, 2008 ESENT wuaueng.dll (4576) SUS20ClientDataStore: Error -1032 (0xfffffbf8) occurred while opening logfile C:\WINDOWS\SoftwareDistributio n\DataStore\Logs\edb.log.
Friday, February 01, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Friday, February 01, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Friday, February 01, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, February 02, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Saturday, February 02, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, February 02, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, February 02, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, February 02, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, February 02, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Saturday, February 02, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, February 02, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, February 02, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, February 02, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, February 02, 2008 PowerAlert UPS Engine The communications port specified could not be opened.
Saturday, February 02, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, February 02, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, February 02, 2008 LoadPerf The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
Saturday, February 02, 2008 LoadPerf Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
Saturday, February 02, 2008 crypt32 Failed auto update retrieval of third-party root list sequence number from: with error: This operation returned because the timeout period expired.
Saturday, February 02, 2008 crypt32 Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation.
Saturday, February 02, 2008 crypt32 Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation.
Saturday, February 02, 2008 crypt32 Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation.
Saturday, February 02, 2008 Applicatio n Hang Hanging application helpctr.exe, version 5.1.2600.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Saturday, February 02, 2008 Applicatio n Hang Fault bucket 126833367.

…and finally the HijackThis log.

Logfile of HijackThis v1.99.1
Scan saved at 2:35:52 PM, on 2/2/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\LogMeIn Backup\BackupMaint.exe
C:\Program Files\WS_FTP Pro\ftpsched.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\LogMeIn Backup\LMIBackupVSSService.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn Backup\LogMeInBackupService.exe
C:\Program Files\M-Audio\MidAir\MidAirInst.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\M-Audio MobilePre\Install\MPInst.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\PROGRA~1\Dantz\RETROS~1\retrorun.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Roland\VSC32\vscvol.exe
C:\Program Files\FarStone\VirtualDrive\VDTask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
C:\Program Files\FarStone\VirtualDrive\VHD\RDTask.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\LogMeIn Backup\BackupSystray.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\WS_FTP Pro\ftpqueue.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\MXOALDR.EXE
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Quicken\bagent.exe
C:\Program Files\Conceptworld\QNPlus\QNPlus.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Corex\CardScan\System\CSyncCfg.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Documents and Settings\All Users\Application Data\U3\U3Launcher\LaunchU3.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\M-Audio MobilePre\MPTask.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.diannesimpressions.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\googletoolbar4.dll
O2 - BHO: Catcher Class - {ADECBED6-0366-4377-A739-E69DFBA04663} - C:\Program Files\Moyea\FLV Downloader\MoyeaCth.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\PROGRA~1\DAP\dapiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\googletoolbar4.dll
O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O4 - HKLM\..\Run: [vscvol.exe] C:\Program Files\Roland\VSC32\vscvol.exe
O4 - HKLM\..\Run: [vsc32cnf.exe] C:\Program Files\Roland\VSC32\vsc32cnf.exe
O4 - HKLM\..\Run: [VirtualDrive] "C:\Program Files\FarStone\VirtualDrive\VDTask.exe" /AutoRestore
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
O4 - HKLM\..\Run: [RAMDrive] "C:\Program Files\FarStone\VirtualDrive\VHD\RDTask.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [LogMeIn Backup GUI] "C:\Program Files\LogMeIn Backup\BackupSystray.exe"
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ftpqueue] "C:\Program Files\WS_FTP Pro\ftpqueue.exe" -tray
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [Deskup] C:\Program Files\Iomega\DriveIcons\deskup.exe /IMGSTART
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOALDR.EXE
O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [QuickenScheduledUpdates] C:\Program Files\Quicken\bagent.exe
O4 - HKCU\..\Run: [QNPlus] C:\Program Files\Conceptworld\QNPlus\QNPlus.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [CardScan AutoSync] "C:\Program Files\Corex\CardScan\System\CSyncCfg.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Audible Download Manager.lnk = C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: LaunchU3.exe.lnk = ?
O4 - Global Startup: M-Audio MobilePre Control Panel Launcher.lnk = C:\Program Files\M-Audio MobilePre\MPTask.exe
O4 - Global Startup: officejet 6100.lnk = ?
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Identities - {45DB34C3-955C-11D3-ABEF-444553540000} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditIdent.html
O9 - Extra 'Tools' menuitem: Identities Editor - {45DB34C3-955C-11D3-ABEF-444553540000} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditIdent.html
O9 - Extra button: Passcards - {45DB34C3-955C-11D3-ABEF-444553540001} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditPass.html
O9 - Extra 'Tools' menuitem: Passcards Editor - {45DB34C3-955C-11D3-ABEF-444553540001} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditPass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://www.adobe.com
O15 - Trusted Zone: http://www.alpha-omega.org
O15 - Trusted Zone: http://*.driveragent.com
O15 - Trusted Zone: http://www.floir.com
O15 - Trusted Zone: http://*.free-media-players.org
O15 - Trusted Zone: http://www.jetblue.com
O15 - Trusted Zone: http://www.macromedia.com
O15 - Trusted Zone: http://*.prosalon.com
O15 - Trusted Zone: http://www.prosolutionssoftware.com
O15 - Trusted Zone: http://www.sgblocks.com
O15 - Trusted Zone: http://*.sgblocks.com
O15 - Trusted Zone: http://www.speedbit.com
O15 - Trusted Zone: http://www.stockcentral.com
O15 - Trusted Zone: http://www.trotterschasefl.com
O15 - Trusted Zone: http://www.uniprop.com
O15 - Trusted Zone: http://corporate.yodlee.com
O15 - Trusted Zone: http://www.youtube.com
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/200610…ex/qtplugin.cab
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {1B9935E4-8A50-4DD8-BD09-A7518723BF97} - https://quicken.ehosts.net/netagent/objects/custappx3.cab
O16 - DPF: {1DF36010-E276-11D4-A7C0-00C04F0453DD} - https://secure.stamps.com/download/us/regis…55/sdcregie.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} - http://us.chat1.yimg.com/us.yimg.com/i/cha…v45/yacscom.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.weatherbug.com/minibug/tr…Transporter.cab?
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {4620BC29-8B8E-4F4E-9D92-1DB6633D6793} - http://rd1.surfernetwork.com/surferplugin.ocx
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} - http://picasaweb.google.com/s/v/17.17/uploader2.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqaio/downloads/sysinfo.cab
O16 - DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} (LinkedIn ContactFinderControl) - http://www.linkedin.com/cab/LinkedInContactFinderControl.cab
O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/instal…llMgr_v01_6.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200305…meInstaller.exe
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/inst…ctDetection.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1133705277375
O16 - DPF: {754693AA-011F-40DD-B075-DD4644A47F54} (Importer.Imp) - http://www.stumbleupon.com/import/Importer.CAB
O16 - DPF: {8EDAD21C-3584-4E66-A8AB-EB0E5584767D} - http://toolbar.google.com/data/GoogleActivate.cab
O16 - DPF: {A364AF35-0CDF-41E8-8F3B-E0E55E15EBA1} - http://www.programchecker.com/dll/nixon.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://89.145.215.21:81/activex/AMC.cab
O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} - https://livewc01.custhelp.com/7530-b327h-qu…l/java/RntX.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} - http://www.driveragent.com/files/driveragent.cab
O16 - DPF: {F09BFD07-20B5-46D8-A6D5-BE4EF22F1F4D} (DGTx.uc1) - http://66.98.144.30/DGTx.CAB
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/RACtrl.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\WEBACC~1\FASTSE~1.DLL C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: LMIinit - C:\WINDOWS\SYSTEM32\LMIinit.dll
O20 - Winlogon Notify: RAinit - C:\WINDOWS\SYSTEM32\RAinit.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: LogMeIn Backup Maintenance Service (BackupMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn Backup\BackupMaint.exe
O23 - Service: Ipswitch WS_FTP Queue (ftpqueue) - Ipswitch, Inc., 81 Hartwell Ave, Lexington MA 02421 - C:\Program Files\WS_FTP Pro\ftpsched.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LogMeIn Backup VSS Service (LMIBackupVSSService.exe) - LogMeIn, Inc. - C:\Program Files\LogMeIn Backup\LMIBackupVSSService.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn Service (LogMeIn) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: LogMeIn Backup Storage PC Service (LogMeInBackupService.exe) - LogMeIn, Inc. - C:\Program Files\LogMeIn Backup\LogMeInBackupService.exe
O23 - Service: M-Audio MidAir Installer (MAudioMidAirService) - Avid Technology, Inc. - C:\Program Files\M-Audio\MidAir\MidAirInst.exe
O23 - Service: MobilePre Installer (MobilePreInstallerService) - M-Audio - C:\Program Files\M-Audio MobilePre\Install\MPInst.exe
O23 - Service: MSSQL$PINNACLESYS - Unknown owner - C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe" -sPINNACLESYS (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: PowerAlert Port Manager Engine - Unknown owner - C:\Program Files\Tripp Lite\PowerAlert\Engine\portmgr.exe
O23 - Service: PowerAlert UPS Engine - Unknown owner - C:\Program Files\Tripp Lite\PowerAlert\Engine\paserver.exe
O23 - Service: QuickBooks Database Manager Service (QBCFMonitorService) - Intuit - C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: QuickBooksDB17 - iAnywhere Solutions, Inc. - C:\PROGRA~1\Intuit\QUICKB~2\QBDBMgrN.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\retrorun.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SQLAgent$PINNACLESYS - Unknown owner - C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE" -i PINNACLESYS (file missing)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe