Hi DWR!
Here is the OTMoveIt2 log
C:\Documents and Settings\Robert\Application Data\Antispyware\Settings moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\21-04-2008-19-12-47 moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\58.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\57.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\54.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\30.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\29.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\25.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\24.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\23.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\22.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\207.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\206.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\204.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22\20.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\19-04-2008-05-20-22 moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-59-41\57.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-59-41\51.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-59-41\49.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-59-41\45.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-59-41\4.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-59-41\3.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-59-41 moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\992.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\988.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\985.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\98.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\974.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\973.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\96.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\956.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\947.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\944.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\936.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\933.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\93.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\929.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\922.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\909.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\908.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\904.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\900.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\896.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\89.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\888.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\883.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\872.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\87.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\869.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\865.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\862.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\850.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\849.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\84.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\839.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\837.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\818.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\805.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\800.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\80.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\797.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\789.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\788.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\777.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\776.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\775.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\770.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\768.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\733.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\708.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\675.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\643.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\642.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\641.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\640.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\639.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\632.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\631.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\626.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\621.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\615.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\603.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\597.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\590.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\59.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\586.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\582.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\578.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\570.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\569.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\568.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\566.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\562.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\551.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\54.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\527.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\50.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\48.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\4.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\373.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\371.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\334.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\32.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\3.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\284.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\281.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\280.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\273.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\268.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\259.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\250.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\243.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\238.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\231.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\23.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\213.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\210.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\202.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\200.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\189.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\186.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\162.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\160.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1492.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1488.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1486.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1485.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1472.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\145.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\140.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\137.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\136.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1342.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1341.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1340.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1338.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1330.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\133.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1329.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1328.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1327.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1324.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1322.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1320.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\118.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\115.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1133.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1132.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1130.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1125.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1120.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1116.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1100.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1099.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1097.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1093.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1087.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1086.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1084.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1083.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\107.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1053.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1049.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1048.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1047.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1046.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1045.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1040.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\104.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1039.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1035.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1031.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1027.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1019.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1014.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1003.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\1000.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29\100.qit moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine\13-04-2008-23-50-29 moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Quarantine moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware\Log moved successfully.
C:\Documents and Settings\Robert\Application Data\Antispyware moved successfully.
OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04252008_192124
And the HJT log:
Logfile of HijackThis v1.99.1
Scan saved at 19:24, on 2008-04-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC1.EXE
C:\Program Files\ESPNRunTime\DIGServices.exe
C:\Program Files\Fisher-Price\FP3 Player\sspnotifier.exe
C:\Program Files\Common Files\AOL\1187706158\ee\AOLSoftware.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Common Files\AOL\1187706158\ee\AOLDesktop.exe
C:\Program Files\Common Files\AOL\Loader\aolload.exe
C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Logitech\QuickCam10\COCIManager.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\seemeknow.exe.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.rr.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://espn.go.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.rr.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.rr.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://g.msn.com/0SE...S01?FORM=TOOLBR
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy-server:8080;https=proxy-server:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ams-server*
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &ESPN - {AE6F2894-AF10-4C9C-B16E-1DFC6FF8C0C6} - C:\Program Files\ESPN\Toolbar\DIGToolBar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [EPSON Stylus C42 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC1.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
O4 - HKLM\..\Run: [DIGServices] C:\Program Files\ESPNRunTime\DIGServices.exe /brand=ESPN /priority=0 /poll=24
O4 - HKLM\..\Run: [SSP Notifier] C:\Program Files\Fisher-Price\FP3 Player\sspnotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1187706158\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\PCSecurityShield\The Shield Deluxe 2008\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: AOL Desktop.lnk = C:\Program Files\Common Files\AOL\Launch\aollaunch.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\PCSecurityShield\The Shield Deluxe 2008\scieplugin.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.rr.com
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
http://support.dell....iler/SysPro.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky...can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft....k/?linkid=39204
O16 - DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} -
http://fpdownload2.m...ash/swflash.cab
O16 - DPF: {37DF41B2-61DB-4CAC-A755-CFB3C7EE7F40} -
http://esupport.aol....oach_core_1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.micros...b?1130387561952
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) -
http://web1.shutterf...ds/Uploader.cab
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} (JuniperSetupSP1 Control) -
https://extranet.fli...perSetupSP1.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: The Shield Deluxe 2008 (AVP) - Unknown owner - C:\Program Files\PCSecurityShield\The Shield Deluxe 2008\avp.exe" -r (file missing)
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe