Here are the reports. The file is attached
From OTMoveIT2
Explorer killed successfully
DllUnregisterServer procedure not found in C:\WINDOWS\system32\ukysdqor.dll
C:\WINDOWS\system32\ukysdqor.dll NOT unregistered.
C:\WINDOWS\system32\ukysdqor.dll moved successfully.
C:\WINDOWS\system32\LTvuBcfe.ini2 moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\efcBuvTL.dll
C:\WINDOWS\system32\efcBuvTL.dll NOT unregistered.
C:\WINDOWS\system32\efcBuvTL.dll moved successfully.
< HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdVantage >
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdVantage\\ deleted successfully.
< HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F >
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F\\ deleted successfully.
File/Folder F:\Setup.exe not found.
< purity >
< EmptyTemp >
File delete failed. C:\DOCUME~1\Owner\LOCALS~1\Temp\Perflib_Perfdata_a88.dat scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Owner\LOCALS~1\Temp\~DF8E39.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Owner\LOCALS~1\Temp\~DF8E75.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Owner\LOCALS~1\Temp\~DFAA1A.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Owner\LOCALS~1\Temp\~DFAA5A.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_7a0.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\ZLT070d0.TMP scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\ZLT070d6.TMP scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
Temp folders emptied.
IE temp folders emptied.
Explorer started successfully
OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07252008_195449
Files moved on Reboot…
File C:\DOCUME~1\Owner\LOCALS~1\Temp\Perflib_Perfdata_a88.dat not found!
File C:\DOCUME~1\Owner\LOCALS~1\Temp\~DF8E39.tmp not found!
File C:\DOCUME~1\Owner\LOCALS~1\Temp\~DF8E75.tmp not found!
File C:\DOCUME~1\Owner\LOCALS~1\Temp\~DFAA1A.tmp not found!
File C:\DOCUME~1\Owner\LOCALS~1\Temp\~DFAA5A.tmp not found!
C:\WINDOWS\temp\Perflib_Perfdata_7a0.dat moved successfully.
C:\WINDOWS\temp\ZLT070d0.TMP moved successfully.
C:\WINDOWS\temp\ZLT070d6.TMP moved successfully.
File C:\WINDOWS\temp\_avast4_\Webshlock.txt not found!
From Runscanner
Runscanner logfile
http://www.runscanner.net
* = signed file
- = file not found
000 General info
—————-
Computer name : HOME-OFFICE
Creation time : 25/07/2008 20:24:33
Hosts <> 127.0.0.1 : 0
Hosts file location : %SystemRoot%\System32\drivers\etc
IE version : 7.0.5730.13
OS : Microsoft Windows XP
OS Build : 2600
OS SP : Service Pack 2
RunScanner Version : 1.6.3.0
User Language : English (United States)
User rights : Administrator
Windows folder : C:\WINDOWS
001 Running processes
———————
* c:\program files\lavasoft\ad-aware\aawservice.exe (Lavasoft)
* c:\program files\adobe\reader 8.0\reader\reader_sl.exe (Adobe Systems Incorporated)
c:\windows\system32\alg.exe (Microsoft Corporation)
* c:\program files\alwil software\avast4\ashserv.exe (ALWIL Software)
* c:\program files\alwil software\avast4\aswupdsv.exe (ALWIL Software)
* c:\program files\alwil software\avast4\ashmaisv.exe (ALWIL Software)
* c:\progra~1\alwils~1\avast4\ashdisp.exe (ALWIL Software)
* c:\program files\alwil software\avast4\ashwebsv.exe (ALWIL Software)
c:\program files\belkin\bluetooth software\bin\btwdins.exe (WIDCOMM, Inc.)
c:\program files\belkin\bluetooth software\bttray.exe (WIDCOMM, Inc.)
c:\windows\system32\csrss.exe (Microsoft Corporation)
c:\windows\system32\ctfmon.exe (Microsoft Corporation)
c:\program files\scansoft\naturallyspeaking\program\natspeak.exe (ScanSoft)
c:\windows\system32\svchost.exe (Microsoft Corporation)
c:\windows\system32\svchost.exe (Microsoft Corporation)
c:\windows\system32\svchost.exe (Microsoft Corporation)
c:\windows\system32\svchost.exe (Microsoft Corporation)
c:\windows\system32\svchost.exe (Microsoft Corporation)
c:\windows\system32\svchost.exe (Microsoft Corporation)
c:\windows\system32\svchost.exe (Microsoft Corporation)
* c:\program files\google\googletoolbarnotifier\googletoolbarnotifier.exe (Google Inc.)
c:\windows\system32\lsass.exe (Microsoft Corporation)
c:\windows\notepad.exe (Microsoft Corporation)
c:\windows\system32\rundll32.exe (Microsoft Corporation)
c:\windows\system32\rundll32.exe (Microsoft Corporation)
* c:\documents and settings\owner\desktop\runscanner.exe (Runscanner.net)
c:\windows\system32\services.exe (Microsoft Corporation)
c:\windows\system32\spoolsv.exe (Microsoft Corporation)
* c:\windows\system32\zonelabs\vsmon.exe (Zone Labs, LLC)
c:\windows\explorer.exe (Microsoft Corporation)
c:\program files\messenger\msmsgs.exe (Microsoft Corporation)
c:\windows\system32\winlogon.exe (Microsoft Corporation)
c:\windows\system32\smss.exe (Microsoft Corporation)
c:\windows\system32\wscntfy.exe (Microsoft Corporation)
* c:\program files\zone labs\zonealarm\zlclient.exe (Zone Labs, LLC)
002 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (+subkeys)
—————————————————————–
- c:\windows\system32\ukysdqor.dll
* c:\progra~1\alwils~1\avast4\ashdisp.exe (ALWIL Software)
C:\WINDOWS\system32\bthprops.cpl (Microsoft Corporation)
C:\WINDOWS\system\cmicnfg.cpl (C-Media Corporation)
c:\program files\quicktime\qttask.exe (Apple Inc.)
C:\WINDOWS\system32\vtpreset.exe (S3 Graphics, Inc.)
* c:\program files\zone labs\zonealarm\zlclient.exe (Zone Labs, LLC)
003 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (+subkeys)
—————————————————————–
c:\windows\system32\ctfmon.exe (Microsoft Corporation)
c:\program files\messenger\msmsgs.exe (Microsoft Corporation)
004 C:\Documents and Settings\Owner\Start Menu\Programs\Startup
—————————————————————
c:\progra~1\scansoft\natura~1\program\natspeak.exe (ScanSoft)
005 C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup
—————————————————————————
c:\progra~1\belkin\blueto~1\bttray.exe (WIDCOMM, Inc.)
010 HKLM\SYSTEM\CurrentControlSet\Services (Services)
—————————————————–
C:\WINDOWS\system32\alg.exe (Application Layer Gateway Service)
* c:\program files\alwil software\avast4\ashserv.exe (avast! Antivirus)
* c:\program files\alwil software\avast4\aswupdsv.exe (avast! iAVS4 Control Service)
* c:\program files\alwil software\avast4\ashmaisv.exe (avast! Mail Scanner)
* c:\program files\alwil software\avast4\ashwebsv.exe (avast! Web Scanner)
c:\program files\belkin\bluetooth software\bin\btwdins.exe (Bluetooth Service)
C:\WINDOWS\system32\svchost.exe (Bluetooth Support Service)
c:\windows\system32\svchost.exe (COM+ Event System)
c:\windows\system32\dllhost.exe (COM+ System Application)
C:\WINDOWS\system32\svchost.exe (Computer Browser)
C:\WINDOWS\system32\svchost.exe (Cryptographic Services)
C:\WINDOWS\system32\svchost.exe (DCOM Server Process Launcher)
C:\WINDOWS\system32\svchost.exe (DHCP Client)
c:\windows\system32\msdtc.exe (Distributed Transaction Coordinator)
C:\WINDOWS\system32\svchost.exe (DNS Client)
C:\WINDOWS\system32\svchost.exe (Error Reporting Service)
C:\WINDOWS\system32\services.exe (Event Log)
C:\WINDOWS\system32\svchost.exe (Fast User Switching Compatibility)
C:\WINDOWS\system32\svchost.exe (Help and Support)
C:\WINDOWS\system32\svchost.exe (HTTP SSL)
c:\windows\system32\imapi.exe (IMAPI CD-Burning COM Service)
C:\WINDOWS\system32\lsass.exe (IPSEC Services)
* c:\program files\lavasoft\ad-aware\aawservice.exe (Lavasoft Ad-Aware Service)
C:\WINDOWS\system32\svchost.exe (Logical Disk Manager)
C:\WINDOWS\system32\dmadmin.exe (Logical Disk Manager Administrative Service)
c:\windows\system32\dllhost.exe (MS Software Shadow Copy Provider)
C:\WINDOWS\system32\lsass.exe (Net Logon)
c:\windows\system32\mnmsrvc.exe (NetMeeting Remote Desktop Sharing)
C:\WINDOWS\system32\svchost.exe (Network Location Awareness (NLA))
C:\WINDOWS\system32\svchost.exe (Network Provisioning Service)
C:\WINDOWS\system32\lsass.exe (NT LM Security Support Provider)
C:\WINDOWS\system32\smlogsvc.exe (Performance Logs and Alerts)
C:\WINDOWS\system32\services.exe (Plug and Play)
C:\WINDOWS\system32\svchost.exe (Portable Media Serial Number Service)
C:\WINDOWS\system32\spoolsv.exe (Print Spooler)
C:\WINDOWS\system32\svchost.exe (Remote Access Auto Connection Manager)
C:\WINDOWS\system32\svchost.exe (Remote Access Connection Manager)
c:\windows\system32\sessmgr.exe (Remote Desktop Help Session Manager)
C:\WINDOWS\system32\svchost.exe (Remote Procedure Call (RPC))
C:\WINDOWS\system32\locator.exe (Remote Procedure Call (RPC) Locator)
C:\WINDOWS\system32\svchost.exe (Removable Storage)
C:\WINDOWS\system32\lsass.exe (Security Accounts Manager)
C:\WINDOWS\system32\svchost.exe (Security Center)
C:\WINDOWS\system32\svchost.exe (Server)
C:\WINDOWS\system32\svchost.exe (Shell Hardware Detection)
C:\WINDOWS\system32\svchost.exe (SSDP Discovery Service)
C:\WINDOWS\system32\svchost.exe (System Event Notification)
C:\WINDOWS\system32\svchost.exe (System Restore Service)
C:\WINDOWS\system32\svchost.exe (TCP/IP NetBIOS Helper)
C:\WINDOWS\system32\svchost.exe (Telephony)
C:\WINDOWS\system32\svchost.exe (Terminal Services)
* c:\windows\system32\zonelabs\vsmon.exe (TrueVector Internet Monitor)
C:\WINDOWS\system32\svchost.exe (Universal Plug and Play Device Host)
C:\WINDOWS\system32\svchost.exe (Upload Manager)
C:\WINDOWS\system32\svchost.exe (WebClient)
C:\WINDOWS\system32\svchost.exe (Windows Audio)
C:\WINDOWS\system32\svchost.exe (Windows Driver Foundation - User-mode Driver Framework)
C:\WINDOWS\system32\svchost.exe (Windows Firewall/Internet Connection Sharing (ICS))
C:\WINDOWS\system32\svchost.exe (Windows Image Acquisition (WIA))
c:\windows\system32\msiexec.exe (Windows Installer)
C:\WINDOWS\system32\svchost.exe (Windows Management Instrumentation)
c:\program files\windows media player\wmpnetwk.exe (Windows Media Player Network Sharing Service)
C:\WINDOWS\system32\svchost.exe (Windows Time)
C:\WINDOWS\system32\svchost.exe (Wireless Zero Configuration)
c:\windows\system32\wbem\wmiapsrv.exe (WMI Performance Adapter)
C:\WINDOWS\system32\svchost.exe (Workstation)
011 HKLM\SYSTEM\CurrentControlSet\Services (drivers)
—————————————————-
c:\windows\system32\drivers\afd.sys (AFD Networking Support Environment)
C:\WINDOWS\system32\drivers\amdk7.sys (AMD K7 Processor Driver)
* C:\WINDOWS\system32\drivers\aswfsblk.sys (aswFsBlk)
* c:\windows\system32\drivers\aswrdr.sys (aswRdr)
C:\WINDOWS\system32\drivers\atmarpc.sys (ATM ARP Client Protocol)
C:\WINDOWS\system32\drivers\audstub.sys (Audio Stub Driver)
* c:\windows\system32\drivers\aavmker4.sys (avast! Asynchronous Virus Monitor)
* c:\windows\system32\drivers\aswtdi.sys (avast! Network Shield Support)
* c:\windows\system32\drivers\aswsp.sys (avast! Self Protection)
* c:\windows\system32\drivers\aswmon2.sys (avast! Standard Shield Support)
C:\WINDOWS\system32\drivers\streamip.sys (BDA IPSink)
C:\WINDOWS\system32\drivers\slip.sys (BDA Slip De-Framer)
c:\windows\system32\drivers\beep.sys (Beep)
C:\WINDOWS\system32\drivers\btaudio.sys (Bluetooth Audio)
C:\WINDOWS\system32\drivers\bthpan.sys (Bluetooth Device (Personal Area Network))
C:\WINDOWS\system32\drivers\rfcomm.sys (Bluetooth Device (RFCOMM Protocol TDI))
C:\WINDOWS\system32\drivers\btwdndis.sys (Bluetooth LAN Access Server)
C:\WINDOWS\system32\drivers\bthmodem.sys (Bluetooth Modem Communications Driver)
c:\windows\system32\drivers\btslbcsp.sys (Bluetooth Port Client Driver)
C:\WINDOWS\system32\drivers\bthport.sys (Bluetooth Port Driver)
C:\WINDOWS\system32\drivers\btkrnl.sys (Bluetooth Protocol Stack)
C:\WINDOWS\system32\drivers\bthusb.sys (Bluetooth Radio USB Driver)
C:\WINDOWS\system32\drivers\bthenum.sys (Bluetooth Request Block Driver)
c:\windows\system32\drivers\btserial.sys (Bluetooth Serial Driver)
C:\WINDOWS\system32\drivers\btport.sys (Bluetooth Virtual Communications Driver)
- c:\docume~1\owner\locals~1\temp\catchme.sys (catchme)
c:\windows\system32\drivers\cdaudio.sys (Cdaudio)
C:\WINDOWS\system32\drivers\imapi.sys (CD-Burning Filter Driver)
C:\WINDOWS\system32\drivers\cdrom.sys (CD-ROM Driver)
- c:\windows\system32\drivers\changer.sys (Changer)
C:\WINDOWS\system32\drivers\ccdecode.sys (Closed Caption Decoder)
C:\WINDOWS\system32\drivers\cmuda.sys (C-Media WDM Audio Interface)
* C:\WINDOWS\system32\drivers\dfmirage.sys (dfmirage)
C:\WINDOWS\system32\drivers\redbook.sys (Digital CD Audio Playback Filter Driver)
C:\WINDOWS\system32\drivers\raspti.sys (Direct Parallel)
C:\WINDOWS\system32\drivers\ptilink.sys (Direct Parallel Link Driver)
C:\WINDOWS\system32\drivers\disk.sys (Disk Driver)
C:\WINDOWS\system32\drivers\mcdbus.sys (Driver for MagicISO SCSI Host Controller)
c:\windows\system32\drivers\fips.sys (Fips)
C:\WINDOWS\system32\drivers\fdc.sys (Floppy Disk Controller Driver)
C:\WINDOWS\system32\drivers\flpydisk.sys (Floppy Disk Driver)
C:\WINDOWS\system32\drivers\fltmgr.sys (FltMgr)
C:\WINDOWS\system32\drivers\gameenum.sys (Game Port Enumerator)
* C:\WINDOWS\system32\drivers\gearaspiwdm.sys (GEARAspiWDM)
C:\WINDOWS\system32\drivers\msgpc.sys (Generic Packet Classifier)
C:\WINDOWS\system32\drivers\gt680x.sys (Grand Tech GT680x NT)
C:\WINDOWS\system32\drivers\hidbatt.sys (HID UPS Battery Driver)
C:\WINDOWS\system32\drivers\http.sys (HTTP)
- c:\windows\system32\drivers\i2omgmt.sys (i2omgmt)
C:\WINDOWS\system32\drivers\i8042prt.sys (i8042 Keyboard and PS/2 Mouse Port Driver)
* C:\WINDOWS\system32\drivers\imagedrv.sys (imagedrv)
* C:\WINDOWS\system32\drivers\imagesrv.sys (imagesrv)
C:\WINDOWS\system32\drivers\ipinip.sys (IP in IP Tunnel Driver)
C:\WINDOWS\system32\drivers\ipnat.sys (IP Network Address Translator)
C:\WINDOWS\system32\drivers\ipfltdrv.sys (IP Traffic Filter Driver)
C:\WINDOWS\system32\drivers\ipsec.sys (IPSEC driver)
C:\WINDOWS\system32\drivers\ip6fw.sys (IPv6 Windows Firewall Driver)
C:\WINDOWS\system32\drivers\nwlnkflt.sys (IPX Traffic Filter Driver)
C:\WINDOWS\system32\drivers\nwlnkfwd.sys (IPX Traffic Forwarder Driver)
C:\WINDOWS\system32\drivers\irenum.sys (IR Enumerator Service)
C:\WINDOWS\system32\drivers\kbdclass.sys (Keyboard Class Driver)
* C:\WINDOWS\system32\drivers\klif.sys (KLIF)
c:\windows\system32\drivers\ksecdd.sys (KSecDD)
- c:\windows\system32\drivers\lbrtfdc.sys (lbrtfdc)
C:\WINDOWS\system32\drivers\update.sys (Microcode Update Driver)
C:\WINDOWS\system32\drivers\acpi.sys (Microsoft ACPI Driver)
C:\WINDOWS\system32\drivers\compbatt.sys (Microsoft Composite Battery Driver)
C:\WINDOWS\system32\drivers\hidusb.sys (Microsoft HID Class Driver)
C:\WINDOWS\system32\drivers\aec.sys (Microsoft Kernel Acoustic Echo Canceller)
C:\WINDOWS\system32\drivers\splitter.sys (Microsoft Kernel Audio Splitter)
C:\WINDOWS\system32\drivers\dmusic.sys (Microsoft Kernel DLS Syntheiszer)
C:\WINDOWS\system32\drivers\drmkaud.sys (Microsoft Kernel DRM Audio Descrambler)
C:\WINDOWS\system32\drivers\swmidi.sys (Microsoft Kernel GS Wavetable Synthesizer)
C:\WINDOWS\system32\drivers\sysaudio.sys (Microsoft Kernel System Audio Device)
C:\WINDOWS\system32\drivers\kmixer.sys (Microsoft Kernel Wave Audio Mixer)
C:\WINDOWS\system32\drivers\msmpu401.sys (Microsoft MPU-401 MIDI UART Driver)
C:\WINDOWS\system32\drivers\mspclock.sys (Microsoft Streaming Clock Proxy)
C:\WINDOWS\system32\drivers\mspqm.sys (Microsoft Streaming Quality Manager Proxy)
C:\WINDOWS\system32\drivers\mskssrv.sys (Microsoft Streaming Service Proxy)
C:\WINDOWS\system32\drivers\mstee.sys (Microsoft Streaming Tee/Sink-to-Sink Converter)
C:\WINDOWS\system32\drivers\mssmbios.sys (Microsoft System Management BIOS Driver)
C:\WINDOWS\system32\drivers\ndisip.sys (Microsoft TV/Video Connection)
C:\WINDOWS\system32\drivers\usbehci.sys (Microsoft USB 2.0 Enhanced Host Controller Miniport Driver)
C:\WINDOWS\system32\drivers\usbprint.sys (Microsoft USB PRINTER Class)
C:\WINDOWS\system32\drivers\usbuhci.sys (Microsoft USB Universal Host Controller Miniport Driver)
C:\WINDOWS\system32\drivers\wdmaud.sys (Microsoft WDM Virtual Wave Driver (WDM))
c:\windows\system32\drivers\mnmdd.sys (mnmdd)
c:\windows\system32\drivers\modem.sys (Modem)
C:\WINDOWS\system32\drivers\usbser.sys (Motorola USB Modem Driver)
c:\windows\system32\drivers\mountmgr.sys (Mount Point Manager)
C:\WINDOWS\system32\drivers\mouclass.sys (Mouse Class Driver)
C:\WINDOWS\system32\drivers\mrxsmb.sys (MRXSMB)
c:\windows\system32\drivers\msfs.sys (Msfs)
c:\windows\system32\drivers\mup.sys (Mup)
C:\WINDOWS\system32\drivers\nabtsfec.sys (NABTS/FEC VBI Codec)
c:\windows\system32\drivers\ndproxy.sys (NDIS Proxy)
c:\windows\system32\drivers\ndis.sys (NDIS System Driver)
C:\WINDOWS\system32\drivers\ndisuio.sys (NDIS Usermode I/O Protocol)
C:\WINDOWS\system32\drivers\netbios.sys (NetBIOS Interface)
C:\WINDOWS\system32\drivers\netbt.sys (NetBios over Tcpip)
c:\windows\system32\drivers\npfs.sys (Npfs)
c:\windows\system32\drivers\null.sys (Null)
C:\WINDOWS\system32\drivers\parport.sys (Parallel port driver)
c:\windows\system32\drivers\partmgr.sys (Partition Manager)
c:\windows\system32\drivers\parvdm.sys (ParVdm)
C:\WINDOWS\system32\drivers\pci.sys (PCI Bus Driver)
- c:\windows\system32\drivers\pcidump.sys (PCIDump)
- c:\windows\system32\drivers\pdcomp.sys (PDCOMP)
- c:\windows\system32\drivers\pdframe.sys (PDFRAME)
- c:\windows\system32\drivers\pdreli.sys (PDRELI)
- c:\windows\system32\drivers\pdrframe.sys (PDRFRAME)
C:\WINDOWS\system32\drivers\isapnp.sys (PnP ISA/EISA Bus Driver)
C:\WINDOWS\system32\drivers\psched.sys (QoS Packet Scheduler)
C:\WINDOWS\system32\drivers\asyncmac.sys (RAS Asynchronous Media Driver)
C:\WINDOWS\system32\drivers\rdbss.sys (Rdbss)
C:\WINDOWS\system32\drivers\rdpcdd.sys (RDPCDD)
c:\windows\system32\drivers\rdpwd.sys (RDPWD)
C:\WINDOWS\system32\drivers\rasacd.sys (Remote Access Auto Connection Driver)
C:\WINDOWS\system32\drivers\wanarp.sys (Remote Access IP ARP Driver)
C:\WINDOWS\system32\drivers\ndistapi.sys (Remote Access NDIS TAPI Driver)
C:\WINDOWS\system32\drivers\ndiswan.sys (Remote Access NDIS WAN Driver)
C:\WINDOWS\system32\drivers\raspppoe.sys (Remote Access PPPOE Driver)
C:\WINDOWS\system32\drivers\s3gnbm.sys (S3Psddr)
c:\windows\system32\drivers\scdemu.sys (SCDEmu)
C:\WINDOWS\system32\drivers\secdrv.sys (Secdrv)
C:\WINDOWS\system32\drivers\serenum.sys (Serenum Filter Driver)
C:\WINDOWS\system32\drivers\serial.sys (Serial port driver)
c:\windows\system32\drivers\sfloppy.sys (Sfloppy)
C:\WINDOWS\system32\drivers\swenum.sys (Software Bus Driver)
* C:\WINDOWS\system32\zonelabs\srescan.sys (srescan)
C:\WINDOWS\system32\drivers\srv.sys (Srv)
C:\WINDOWS\system32\drivers\atapi.sys (Standard IDE/ESDI Hard Disk Controller)
C:\WINDOWS\system32\drivers\sr.sys (System Restore Filter Driver)
C:\WINDOWS\system32\drivers\tcpip.sys (TCP/IP Protocol Driver)
c:\windows\system32\drivers\tdpipe.sys (TDPIPE)
c:\windows\system32\drivers\tdtcp.sys (TDTCP)
C:\WINDOWS\system32\drivers\termdd.sys (Terminal Device Driver)
* C:\WINDOWS\system32\drivers\totrec7.sys (Total Recorder WDM audio driver)
C:\WINDOWS\system32\drivers\usbstor.sys (USB Mass Storage Driver)
C:\WINDOWS\system32\drivers\usbhub.sys (USB2 Enabled Hub)
C:\WINDOWS\system32\drivers\usbscan.sys (Usbscan)
c:\windows\system32\drivers\vga.sys (VGA Display Controller.)
C:\WINDOWS\system32\drivers\viaagp.sys (VIA AGP Bus Filter)
C:\WINDOWS\system32\drivers\fetnd5.sys (VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver)
C:\WINDOWS\system32\drivers\viaide.sys (ViaIde)
c:\windows\system32\drivers\volsnap.sys (VolSnap)
C:\WINDOWS\system32\drivers\ftdisk.sys (Volume Manager Driver)
* C:\WINDOWS\system32\vsdatant.sys (vsdatant)
C:\WINDOWS\system32\drivers\rasl2tp.sys (WAN Miniport (L2TP))
C:\WINDOWS\system32\drivers\raspptp.sys (WAN Miniport (PPTP))
- c:\windows\system32\drivers\wdica.sys (WDICA)
C:\WINDOWS\system32\drivers\mrxdav.sys (WebDav Client Redirector)
C:\WINDOWS\system32\drivers\btwusb.sys (WIDCOMM USB Bluetooth Driver)
C:\WINDOWS\system32\drivers\wudfpf.sys (Windows Driver Foundation - User-mode Driver Framework Platform Driver)
C:\WINDOWS\system32\drivers\wudfrd.sys (Windows Driver Foundation - User-mode Driver Framework Reflector)
C:\WINDOWS\system32\drivers\wstcodec.sys (World Standard Teletext Codec)
030 HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
——————————————
C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation) {1E66F26B-79EE-11D2-8710-00C04F79ED0D}
C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation) {1E66F26B-79EE-11D2-8710-00C04F79ED0D}
C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation) {1E66F26B-79EE-11D2-8710-00C04F79ED0D}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {733AC4CB-F1A4-11d0-B951-00A0C90312E1}
031 HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
——————————————-
c:\windows\system32\msvidctl.dll (Microsoft Corporation) {12D51199-0DB5-46FE-A120-47A3D7D937CC}
c:\windows\system32\itss.dll (Microsoft Corporation) {9D148291-B9C8-11D0-A4CC-0000F80149F6}
C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation) {05300401-BCBC-11d0-85E3-00C04FD85AB4}
c:\windows\system32\itss.dll (Microsoft Corporation) {9D148291-B9C8-11D0-A4CC-0000F80149F6}
c:\windows\system32\msvidctl.dll (Microsoft Corporation) {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E}
c:\windows\system32\wiascr.dll (Microsoft Corporation) {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE}
032 HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms
———————————————————————————–
C:\WINDOWS\system32\rdpclip.exe (Microsoft Corporation)
033 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
———————————————————————–
c:\windows\system32\userinit.exe (Microsoft Corporation)
034 HKLM-HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
————————————————————————-
C:\WINDOWS\explorer.exe (Microsoft Corporation)
035 HKLM-HKCU\SOFTWARE\Microsoft\Active Setup\Installed Components
——————————————————————
C:\Program Files\outlook express\setup50.exe (Microsoft Corporation) {7790769C-0471-11d2-AF11-00C04FA35D02}
c:\windows\system32\mscories.dll (Microsoft Corporation) {89B4C1CD-B018-4511-B0A1-5476DBF70820}
C:\Program Files\outlook express\setup50.exe (Microsoft Corporation) {44BBA840-CC51-11CF-AAFA-00AA00B6015C}
C:\WINDOWS\system32\shmgrate.exe (Microsoft Corporation) >{881dd1c5-3dcf-431b-b061-f3f88e8be88a}
C:\WINDOWS\system32\regsvr32.exe (Microsoft Corporation) {2C7339CF-2B09-4501-B3F3-F3508C9228ED}
C:\WINDOWS\system32\regsvr32.exe (Microsoft Corporation) {89820200-ECBD-11cf-8B85-00AA005B4340}
c:\windows\inf\unregmp2.exe (Microsoft Corporation) >{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
041 HKLM-HKCU\Software\Microsoft\Internet Explorer\Toolbar
———————————————————-
c:\program files\pdfcreator toolbar\v3.3.0.1\pdfcreator_toolbar.dll {31CF9EBE-5755-4A1D-AC25-2834D952D9B4}
042 HKLM\Software\Microsoft\Internet Explorer\Extensions
——————————————————–
c:\program files\messenger\msmsgs.exe (Microsoft Corporation) {FB5F1910-F110-11d2-BB9E-00C04F795683}
045 HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
—————————————————————-
c:\program files\pdfcreator toolbar\v3.3.0.1\pdfcreator_toolbar.dll {31CF9EBE-5755-4A1D-AC25-2834D952D9B4}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {0E5CBF21-D15F-11D0-8301-00AA005B4383}
* c:\progra~1\yahoo!\companion\installs\cpn\yt.dll (Yahoo! Inc.) {EF99BD32-C1FB-11D2-892F-0090271D4F88}
c:\program files\zonealarmsb\bar\1.bin\spyblock.dll (ZoneAlarm) {F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}
050 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
—————————————————————————–
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {AEB6717E-7E19-11d0-97EE-00C04FD91972}
052 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
———————————————————————————-
GUID / CLSID not found {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
GUID / CLSID not found {7E853D72-626A-48EC-A868-BA8D5E23E045}
- c:\windows\system32\efcbuvtl.dll {B1C00C16-DCD1-4E6D-AD60-9FDDDA03CFAB}
* c:\program files\google\googletoolbarnotifier\3.0.1225.9868\swg.dll (Google Inc.) {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}
c:\program files\pdfcreator toolbar\v3.3.0.1\pdfcreator_toolbar.dll {C451C08A-EC37-45DF-AAAD-18B51AB5E837}
* c:\program files\real\realplayer\rpbrowserrecordplugin.dll (RealPlayer) {3049C3E9-B461-4BC5-8870-4C09146192CA}
* c:\program files\yahoo!\common\yiesrvc.dll (Yahoo! Inc.) {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}
* c:\progra~1\yahoo!\companion\installs\cpn\yt.dll (Yahoo! Inc.) {02478D38-C3F9-4efb-9B51-7695ECA05670}
c:\program files\zonealarmsb\bar\1.bin\spyblock.dll (ZoneAlarm) {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}
060 HKLM-HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
———————————————————————————–
c:\windows\system32\stobject.dll (Microsoft Corporation) {35CEC8A3-2BE6-11D2-8773-92E220524153}
c:\windows\system32\wpdshserviceobj.dll (Microsoft Corporation) {AAA288BA-9A4C-45B0-95D7-94D524869DB5}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {7849596a-48ea-486e-8937-a2a3009f31a9}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {fbeb8a05-beee-4442-804e-409d6c4515e9}
061 HKLM-HCKU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
———————————————————————————
C:\WINDOWS\system32\photowiz.dll (Microsoft Corporation) {60fd46de-f830-4894-a628-6fa81bc0190d}
C:\WINDOWS\system32\cabview.dll (Microsoft Corporation) {0CD7A5C0-9F37-11CE-AE65-08002B2E1262}
c:\program files\7-zip\7-zip.dll (Igor Pavlov) {23170F69-40C1-278A-1000-000100020000}
* c:\program files\alwil software\avast4\ashshell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}
C:\WINDOWS\system32\syncui.dll (Microsoft Corporation) {85BBD920-42A0-1069-A2E4-08002B30309D}
C:\WINDOWS\system32\slayerxp.dll (Microsoft Corporation) {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}
C:\WINDOWS\system32\zipfldr.dll (Microsoft Corporation) {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}
C:\WINDOWS\system32\zipfldr.dll (Microsoft Corporation) {BD472F60-27FA-11cf-B8B4-444553540000}
C:\WINDOWS\system32\zipfldr.dll (Microsoft Corporation) {888DCA60-FC0A-11CF-8F0F-00C04FD7D062}
c:\windows\system32\cryptext.dll (Microsoft Corporation) {7444C717-39BF-11D1-8CD9-00C04FC29D45}
c:\windows\system32\cryptext.dll (Microsoft Corporation) {7444C719-39BF-11D1-8CD9-00C04FC29D45}
C:\WINDOWS\system32\appwiz.cpl (Microsoft Corporation) {CFCCC7A0-A282-11D1-9082-006008059382}
c:\program files\illustrate\dbpoweramp\dmcshell.dll (Illustrate) {2C49B5D0-ACE7-4D17-9DF0-A254A6C5A0C5}
c:\windows\system32\dfsshlex.dll (Microsoft Corporation) {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}
C:\WINDOWS\system32\dsuiext.dll (Microsoft Corporation) {62AE1F9A-126A-11D0-A14B-0800361B1103}
C:\WINDOWS\system32\dsquery.dll (Microsoft Corporation) {163FDC20-2ABC-11d0-88F0-00A024AB2DBB}
C:\WINDOWS\system32\dsuiext.dll (Microsoft Corporation) {0D45D530-764B-11d0-A1CA-00AA00C16E65}
C:\WINDOWS\system32\dsquery.dll (Microsoft Corporation) {8A23E65E-31C2-11d0-891C-00A024AB2DBB}
C:\WINDOWS\system32\dsquery.dll (Microsoft Corporation) {F020E586-5264-11d1-A532-0000F8757D7E}
C:\WINDOWS\system32\diskcopy.dll (Microsoft Corporation) {59099400-57FF-11CE-BD94-0020AF85B590}
C:\WINDOWS\system32\dskquoui.dll (Microsoft Corporation) {7988B573-EC89-11cf-9C00-00AA00A14F56}
C:\WINDOWS\system32\deskadp.dll (Microsoft Corporation) {42071712-76d4-11d1-8b24-00a0c9068ff3}
C:\WINDOWS\system32\deskmon.dll (Microsoft Corporation) {42071713-76d4-11d1-8b24-00a0c9068ff3}
- deskpan.dll {42071714-76d4-11d1-8b24-00a0c9068ff3}
C:\WINDOWS\system32\deskperf.dll (Microsoft Corporation) {f92e8c40-3d33-11d2-b1aa-080036a75b03}
C:\WINDOWS\system32\dssec.dll (Microsoft Corporation) {4E40F770-369C-11d0-8922-00A024AB2DBB}
C:\WINDOWS\system32\fontext.dll (Microsoft Corporation) {BD84B380-8CA2-1069-AB1D-08000948F534}
c:\program files\outlook express\wabfind.dll (Microsoft Corporation) {32714800-2E5F-11d0-8B85-00AA0044F941}
c:\windows\system32\msieftp.dll (Microsoft Corporation) {63da6ec0-2e98-11cf-8d82-444553540000}
c:\windows\system32\shimgvw.dll (Microsoft Corporation) {3F30C968-480A-4C6C-862D-EFC0897BB84B}
C:\WINDOWS\system32\netplwiz.dll (Microsoft Corporation) {58f1f272-9240-4f51-b6d4-fd63d1618591}
c:\windows\system32\shimgvw.dll (Microsoft Corporation) {EAB841A0-9550-11cf-8C16-00805F1408F3}
c:\windows\system32\hticons.dll (Hilgraeve, Inc.) {88895560-9AA2-1069-930E-00AA0030EBC8}
C:\WINDOWS\system32\icmui.dll (Microsoft Corporation) {DBCE2480-C732-101B-BE72-BA78E9AD5B27}
C:\WINDOWS\system32\icmui.dll (Microsoft Corporation) {5DB2625A-54DF-11D0-B6C4-0800091AA605}
C:\WINDOWS\system32\icmui.dll (Microsoft Corporation) {675F097E-4C4D-11D0-B6C1-0800091AA605}
C:\WINDOWS\system32\icmui.dll (Microsoft Corporation) {176d6597-26d3-11d1-b350-080036a75b03}
C:\WINDOWS\system32\appwiz.cpl (Microsoft Corporation) {0B124F8F-91F0-11D1-B8B5-006008059382}
* c:\program files\itunes\itunesminiplayer.dll (Apple Inc.) {B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}
c:\windows\msagent\agentpsh.dll (Microsoft Corporation) {143A62C8-C33B-11D1-84FE-00C04FA34A14}
c:\program files\common files\system\ole db\oledb32.dll (Microsoft Corporation) {2206CDB2-19C1-11D1-89E0-00C04FD7A829}
c:\windows\system32\docprop2.dll (Microsoft Corporation) {6A205B57-2567-4A2C-B881-F787FAB579A3}
c:\windows\system32\docprop2.dll (Microsoft Corporation) {0EEA25CC-4362-4A12-850B-86EE61B0D3EB}
c:\windows\system32\docprop2.dll (Microsoft Corporation) {A9CF0EAE-901A-4739-A481-E35B73E47F6D}
c:\windows\system32\docprop2.dll (Microsoft Corporation) {8EE97210-FD1F-4B19-91DA-67914005F020}
c:\windows\system32\docprop2.dll (Microsoft Corporation) {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}
c:\windows\system32\docprop2.dll (Microsoft Corporation) {883373C3-BF89-11D1-BE35-080036B11A03}
C:\WINDOWS\system32\mmcshext.dll (Microsoft Corporation) {7A80E4A8-8005-11D2-BCF8-00C04F72C717}
C:\WINDOWS\system32\mmsys.cpl (Microsoft Corporation) {00022613-0000-0000-C000-000000000046}
* c:\program files\zone labs\zonealarm\zlavscan.dll (Zone Labs, LLC) {D9872D13-7651-4471-9EEE-F0A00218BEBB}
c:\windows\system32\btneighborhood.dll (WIDCOMM, Inc.) {6af09ec9-b429-11d4-a1fb-0090960218cb}
C:\WINDOWS\system32\mydocs.dll (Microsoft Corporation) {ECF03A33-103D-11d2-854D-006008059367}
C:\WINDOWS\system32\mydocs.dll (Microsoft Corporation) {ECF03A32-103D-11d2-854D-006008059367}
C:\WINDOWS\system32\mydocs.dll (Microsoft Corporation) {4a7ded0a-ad25-11d0-98a8-0800361b1103}
* c:\program files\nero\nero8\nero coverdesigner\coveredextension.dll (Nero AG) {97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2}
c:\windows\system32\netshell.dll (Microsoft Corporation) {7007ACC7-3202-11D1-AAD2-00805FC1270E}
c:\windows\system32\netshell.dll (Microsoft Corporation) {992CFFA0-F557-101A-88EC-00DD010CCC48}
C:\WINDOWS\system32\rshx32.dll (Microsoft Corporation) {1F2E5C40-9550-11CE-99D2-00AA006E086C}
C:\WINDOWS\system32\cscui.dll (Microsoft Corporation) {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}
C:\WINDOWS\system32\cscui.dll (Microsoft Corporation) {10CFC467-4392-11d2-8DB4-00C04FA31A66}
C:\WINDOWS\system32\cscui.dll (Microsoft Corporation) {750fdf0e-2a26-11d1-a3ea-080036587f03}
C:\WINDOWS\system32\docprop.dll (Microsoft Corporation) {3EA48300-8CF6-101B-84FB-666CCB9BCD32}
C:\WINDOWS\system32\themeui.dll (Microsoft Corporation) {41E300E0-78B6-11ce-849B-444553540000}
C:\WINDOWS\system32\wpdshext.dll (Microsoft Corporation) {35786D3C-B075-49b9-88DD-029876E11C01}
C:\WINDOWS\system32\wpdshext.dll (Microsoft Corporation) {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}
C:\WINDOWS\system32\audiodev.dll (Microsoft Corporation) {640167b4-59b0-47a6-b335-a6b3c0695aea}
c:\program files\poweriso\pwrisosh.dll (PowerISO Computing, Inc.) {967B2D40-8B7D-4127-9049-61EA0C2C6DCE}
c:\windows\system32\twext.dll (Microsoft Corporation) {9DB7A13C-F208-4981-8353-73CC61AE2783}
c:\windows\system32\twext.dll (Microsoft Corporation) {596AB062-B4D2-4215-9F74-E9109B0A8153}
C:\WINDOWS\system32\netplwiz.dll (Microsoft Corporation) {add36aa8-751a-4579-a266-d66f5202ccbb}
C:\WINDOWS\system32\rshx32.dll (Microsoft Corporation) {F37C5810-4D3F-11d0-B4BF-00AA00BBB723}
c:\windows\system32\remotepg.dll (Microsoft Corporation) {F0152790-D56E-4445-850E-4F3117DB740C}
C:\WINDOWS\system32\wiashext.dll (Microsoft Corporation) {3F953603-1008-4f6e-A73A-04AAC7A992F1}
C:\WINDOWS\system32\wiashext.dll (Microsoft Corporation) {83bbcbf3-b28a-4919-a5aa-73027445d672}
C:\WINDOWS\system32\wiashext.dll (Microsoft Corporation) {905667aa-acd6-11d2-8080-00805f6596d2}
C:\WINDOWS\system32\wiashext.dll (Microsoft Corporation) {E211B736-43FD-11D1-9EFB-0000F8757FCD}
C:\WINDOWS\system32\wiashext.dll (Microsoft Corporation) {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}
c:\windows\system32\mstask.dll (Microsoft Corporation) {D6277990-4C6A-11CF-8D87-00AA0060F5BF}
c:\windows\system32\sendmail.dll (Microsoft Corporation) {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}
c:\windows\system32\sendmail.dll (Microsoft Corporation) {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}
C:\WINDOWS\system32\appwiz.cpl (Microsoft Corporation) {352EC2B7-8B9A-11D1-B8AE-006008059382}
C:\WINDOWS\system32\ntlanui2.dll (Microsoft Corporation) {59be4990-f85c-11ce-aff7-00aa003ca9f6}
* c:\program files\real\realplayer\rpshell.dll (RealNetworks, Inc.) {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
C:\WINDOWS\system32\ntshrui.dll (Microsoft Corporation) {40dd6e20-7c17-11ce-a804-00aa003ca9f6}
C:\WINDOWS\system32\ntshrui.dll (Microsoft Corporation) {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
c:\windows\system32\wshext.dll (Microsoft Corporation) {60254CA5-953B-11CF-8C96-00AA00B8708C}
c:\windows\system32\dfshim.dll (Microsoft Corporation) {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}
C:\WINDOWS\system32\shimgvw.dll (Microsoft Corporation) {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}
C:\WINDOWS\system32\shimgvw.dll (Microsoft Corporation) {eb9b1153-3b57-4e68-959a-a3266bc3d7fe}
C:\WINDOWS\system32\shimgvw.dll (Microsoft Corporation) {e84fda7c-1d6a-45f6-b725-cb260c236066}
C:\WINDOWS\system32\dsquery.dll (Microsoft Corporation) {9E51E0D0-6E0F-11d2-9601-00C04FA31A86}
C:\WINDOWS\system32\netplwiz.dll (Microsoft Corporation) {6b33163c-76a5-4b6c-bf21-45de9cd503a1}
C:\WINDOWS\system32\shscrap.dll (Microsoft Corporation) {56117100-C0CD-101B-81E2-00AA004AE837}
c:\windows\system32\dfshim.dll (Microsoft Corporation) {e82a2d71-5b2f-43a0-97b8-81be15854de8}
c:\windows\system32\shimgvw.dll (Microsoft Corporation) {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
c:\windows\system32\mstask.dll (Microsoft Corporation) {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}
c:\windows\system32\mstask.dll (Microsoft Corporation) {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}
C:\WINDOWS\system32\printui.dll (Microsoft Corporation) {77597368-7b15-11d0-a0c2-080036af3f03}
C:\WINDOWS\system32\netplwiz.dll (Microsoft Corporation) {CC6EEFFB-43F6-46c5-9619-51D571967F7D}
c:\windows\system32\wmpshell.dll (Microsoft Corporation) {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}
c:\windows\system32\wmpshell.dll (Microsoft Corporation) {8DD448E6-C188-4aed-AF92-44956194EB1F}
c:\windows\system32\wmpshell.dll (Microsoft Corporation) {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}
* c:\program files\yahoo!\common\ymmapi.dll (Yahoo! Inc.) {5464D816-CF16-4784-B9F3-75C0DB52B499}
062 HKLM-HKCU\Software\Classes\Folder\Shellex\ColumnHandlers
————————————————————
c:\program files\common files\adobe\acrobat\activex\pdfshell.dll (Adobe Systems, Inc.) {F9DB5320-233E-11D1-9F84-707F02C10627}
c:\program files\illustrate\dbpoweramp\dbshell.dll (Illustrate) {FED7043D-346A-414D-ACD7-550D052499A7}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {0D2E74C4-3C34-11d2-A27E-00C04FC30871}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {24F14F01-7B1C-11d1-838f-0000F80461CF}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {24F14F02-7B1C-11d1-838f-0000F80461CF}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {66742402-F9B9-11D1-A202-0000F81FEDEE}
063 HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\BootExecute
———————————————————————
* C:\WINDOWS\system32\lsdelete.exe
064 HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls
——————————————————————-
C:\WINDOWS\system32\advapi32.dll (Microsoft Corporation)
C:\WINDOWS\system32\comdlg32.dll (Microsoft Corporation)
C:\WINDOWS\system32\gdi32.dll (Microsoft Corporation)
C:\WINDOWS\system32\imagehlp.dll (Microsoft Corporation)
C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation)
C:\WINDOWS\system32\lz32.dll (Microsoft Corporation)
C:\WINDOWS\system32\ole32.dll (Microsoft Corporation)
C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
C:\WINDOWS\system32\olecli32.dll (Microsoft Corporation)
C:\WINDOWS\system32\olecnv32.dll (Microsoft Corporation)
C:\WINDOWS\system32\olesvr32.dll (Microsoft Corporation)
C:\WINDOWS\system32\olethk32.dll (Microsoft Corporation)
C:\WINDOWS\system32\rpcrt4.dll (Microsoft Corporation)
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
C:\WINDOWS\system32\user32.dll (Microsoft Corporation)
C:\WINDOWS\system32\version.dll (Microsoft Corporation)
C:\WINDOWS\system32\wldap32.dll (Microsoft Corporation)
066 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost
———————————————————————
C:\WINDOWS\system32\logonui.exe (Microsoft Corporation)
067 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
———————————————————————
C:\WINDOWS\system32\crypt32.dll (Microsoft Corporation)
C:\WINDOWS\system32\cryptnet.dll (Microsoft Corporation)
C:\WINDOWS\system32\cscdll.dll (Microsoft Corporation)
-
C:\WINDOWS\system32\wlnotify.dll (Microsoft Corporation)
C:\WINDOWS\system32\wlnotify.dll (Microsoft Corporation)
C:\WINDOWS\system32\sclgntfy.dll (Microsoft Corporation)
C:\WINDOWS\system32\wlnotify.dll (Microsoft Corporation)
C:\WINDOWS\system32\wlnotify.dll (Microsoft Corporation)
C:\WINDOWS\system32\wlnotify.dll (Microsoft Corporation)
068 HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9
——————————————————————————–
C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
069 HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
——————————————————–
C:\WINDOWS\system32\cnbjmon.dll (Microsoft Corporation)
C:\WINDOWS\system32\bthcrp.dll (WIDCOMM, Inc.)
C:\WINDOWS\system32\cnmlm8o.dll (CANON INC.)
C:\WINDOWS\system32\localspl.dll (Microsoft Corporation)
C:\WINDOWS\system32\pdfcmnnt.dll (internet-support foehr.com)
C:\WINDOWS\system32\pjlmon.dll (Microsoft Corporation)
C:\WINDOWS\system32\tcpmon.dll (Microsoft Corporation)
C:\WINDOWS\system32\usbmon.dll (Microsoft Corporation)
070 HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages
———————————————————————
- c:\windows\system32\efcbuvtl
C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation)
072 HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages
—————————————————————
C:\WINDOWS\system32\kerberos.dll (Microsoft Corporation)
C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation)
C:\WINDOWS\system32\schannel.dll (Microsoft Corporation)
073 %windir%\Tasks
——————
AppleSoftwareUpdate.job : c:\program files\apple software update\softwareupdate.exe (Apple Inc.)
At1.job : c:\windows\system32\8wbsy5ik.exe
At10.job : c:\windows\system32\8wbsy5ik.exe
At11.job : c:\windows\system32\8wbsy5ik.exe
At12.job : c:\windows\system32\8wbsy5ik.exe
At13.job : c:\windows\system32\8wbsy5ik.exe
At14.job : c:\windows\system32\8wbsy5ik.exe
At15.job : c:\windows\system32\8wbsy5ik.exe
At16.job : c:\windows\system32\8wbsy5ik.exe
At17.job : c:\windows\system32\8wbsy5ik.exe
At18.job : c:\windows\system32\8wbsy5ik.exe
At19.job : c:\windows\system32\8wbsy5ik.exe
At2.job : c:\windows\system32\8wbsy5ik.exe
At20.job : c:\windows\system32\8wbsy5ik.exe
At21.job : c:\windows\system32\8wbsy5ik.exe
At22.job : c:\windows\system32\8wbsy5ik.exe
At23.job : c:\windows\system32\8wbsy5ik.exe
At24.job : c:\windows\system32\8wbsy5ik.exe
At3.job : c:\windows\system32\8wbsy5ik.exe
At4.job : c:\windows\system32\8wbsy5ik.exe
At5.job : c:\windows\system32\8wbsy5ik.exe
At6.job : c:\windows\system32\8wbsy5ik.exe
At7.job : c:\windows\system32\8wbsy5ik.exe
At8.job : c:\windows\system32\8wbsy5ik.exe
At9.job : c:\windows\system32\8wbsy5ik.exe
100 Internet Explorer settings
——————————
ProxyOverride HKCU : local
ProxyServer HKCU : 212.241.180.24:81
102 HKLM - HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars
——————————————————————
GUID / CLSID not found {32683183-48a0-441b-a342-7c2a440a9478}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}
104 HKLM\Software\Microsoft\Code Store Database\Distribution Units
——————————————————————
- c:\windows\downloaded program files\otoyax.dll {77E32299-629F-43C6-AB77-6A1E6D7663F6}
105 HKCU\Software\Microsoft\Internet Explorer\MenuExt
—————————————————–
Add to AMV Convert Tool… : C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
Add to Media Manager… : C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html
E&xport to Microsoft Excel : res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
Send To &Bluetooth : C:\Program Files\Belkin\Bluetooth Software\btsendto_ie_ctx.htm
Subscribe in NewsGator Inbox : C:\Program Files\NewsGator\Inbox\addref.htm
107 HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5
———————————————————————————
C:\WINDOWS\system32\wshbth.dll (Microsoft Corporation)
c:\program files\bonjour\mdnsnsp.dll (Apple Inc.)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
145 HKLM\System\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}\UpperFilters
—————————————————————————————————
C:\WINDOWS\system32\drivers\kbdclass.sys (Microsoft Corporation)
146 HKLM\System\CurrentControlSet\Control\SafeBoot\AlternateShell
—————————————————————–
C:\WINDOWS\system32\cmd.exe (Microsoft Corporation)
147 HKLM\System\CurrentControlSet\Control\SecurityProviders\SecurityProviders
—————————————————————————–
C:\WINDOWS\system32\digest.dll (Microsoft Corporation)
C:\WINDOWS\system32\msapsspc.dll (Microsoft Corporation)
C:\WINDOWS\system32\msnsspc.dll (Microsoft Corporation)
C:\WINDOWS\system32\schannel.dll (Microsoft Corporation)
148 HKLM\System\CurrentControlSet\Control\WOW\cmdline
—————————————————–
C:\WINDOWS\system32\ntvdm.exe (Microsoft Corporation)
149 HKLM\System\CurrentControlSet\Control\WOW\wowcmdline
——————————————————–
C:\WINDOWS\system32\krnl386.exe (Microsoft Corporation)
153 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
—————————————————————
C:\WINDOWS\system32\midimap.dll (Microsoft Corporation)
C:\WINDOWS\system32\wdmaud.drv (Microsoft Corporation)
C:\WINDOWS\system32\wdmaud.drv (Microsoft Corporation)
171 HKCU\Control Panel\Desktop\SCRNSAVE.EXE
——————————————-
c:\windows\system32\scrnsave.scr (Microsoft Corporation)
172 HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
—————————————————————
C:\WINDOWS\system32\ntlanman.dll (Microsoft Corporation)
C:\WINDOWS\system32\drprov.dll (Microsoft Corporation)
C:\WINDOWS\system32\davclnt.dll (Microsoft Corporation)
173 HKCR\*\shellex\ContextMenuHandlers
————————————–
c:\program files\7-zip\7-zip.dll (Igor Pavlov) {23170F69-40C1-278A-1000-000100020000}
* c:\program files\alwil software\avast4\ashshell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}
* c:\program files\nero\nero8\nero coverdesigner\coveredextension.dll (Nero AG) {73FCA462-9BD5-4065-A73F-A8E5F6904EF7}
c:\program files\magiciso\misosh.dll (MagicISO, Inc.) {DB85C504-C730-49DD-BEC1-7B39C6103B7A}
* c:\program files\nero\nero8\nero backitup\nbshell.dll (Nero AG)
C:\WINDOWS\system32\cscui.dll (Microsoft Corporation) {750fdf0e-2a26-11d1-a3ea-080036587f03}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {09799AFB-AD67-11d1-ABCD-00C04FC30936}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {A470F8CF-A1E8-4f65-8335-227475AA5C46}
c:\program files\poweriso\pwrisosh.dll (PowerISO Computing, Inc.) {967B2D40-8B7D-4127-9049-61EA0C2C6DCE}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) Start Menu Pin
c:\progra~1\winuha\shellw~1.dll {095177B8-8097-4D32-9081-A8949C47020E}
* c:\program files\yahoo!\common\ymmapi.dll (Yahoo! Inc.) {5464D816-CF16-4784-B9F3-75C0DB52B499}
* c:\program files\zone labs\zonealarm\zlavscan.dll (Zone Labs, LLC) {D9872D13-7651-4471-9EEE-F0A00218BEBB}
176 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug\Debugger
———————————————————————-
C:\WINDOWS\system32\drwtsn32.exe (Microsoft Corporation)
211 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\Cleanuppath
———————————————————————————-
C:\WINDOWS\system32\cleanmgr.exe (Microsoft Corporation)
212 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\DefragPath
———————————————————————————
C:\WINDOWS\system32\dfrg.msc
213 SOFTWARE\Microsoft\Windows NT\CurrentVersion\Accessibility\Utility Manager\Magnifier
—————————————————————————————-
C:\WINDOWS\system32\magnify.exe (Microsoft Corporation)
214 SOFTWARE\Microsoft\Windows NT\CurrentVersion\Accessibility\Utility Manager\Narrator
—————————————————————————————
C:\WINDOWS\system32\narrator.exe (Microsoft Corporation)
215 SOFTWARE\Microsoft\Windows NT\CurrentVersion\Accessibility\Utility Manager\On-Screen Keyboard
————————————————————————————————-
C:\WINDOWS\system32\osk.exe (Microsoft Corporation)
221 HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers
——————————————————-
c:\program files\7-zip\7-zip.dll (Igor Pavlov) {23170F69-40C1-278A-1000-000100020000}
* c:\program files\alwil software\avast4\ashshell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}
* c:\program files\nero\nero8\nero coverdesigner\coveredextension.dll (Nero AG) {73FCA462-9BD5-4065-A73F-A8E5F6904EF7}
c:\program files\magiciso\misosh.dll (MagicISO, Inc.) {DB85C504-C730-49DD-BEC1-7B39C6103B7A}
* c:\program files\nero\nero8\nero backitup\nbshell.dll (Nero AG)
C:\WINDOWS\system32\cscui.dll (Microsoft Corporation) {750fdf0e-2a26-11d1-a3ea-080036587f03}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {09799AFB-AD67-11d1-ABCD-00C04FC30936}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {A470F8CF-A1E8-4f65-8335-227475AA5C46}
c:\program files\poweriso\pwrisosh.dll (PowerISO Computing, Inc.) {967B2D40-8B7D-4127-9049-61EA0C2C6DCE}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) Start Menu Pin
c:\progra~1\winuha\shellw~1.dll {095177B8-8097-4D32-9081-A8949C47020E}
* c:\program files\yahoo!\common\ymmapi.dll (Yahoo! Inc.) {5464D816-CF16-4784-B9F3-75C0DB52B499}
* c:\program files\zone labs\zonealarm\zlavscan.dll (Zone Labs, LLC) {D9872D13-7651-4471-9EEE-F0A00218BEBB}
223 HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers
————————————————————————–
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {7BA4C740-9E81-11CF-99D3-00AA004AE837}
225 HKCU\Software\Classes\Folder\ShellEx\ContextMenuHandlers
————————————————————
* c:\program files\alwil software\avast4\ashshell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}
* c:\program files\alwil software\avast4\ashshell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}
c:\program files\magiciso\misosh.dll (MagicISO, Inc.) {DB85C504-C730-49DD-BEC1-7B39C6103B7A}
c:\program files\magiciso\misosh.dll (MagicISO, Inc.) {DB85C504-C730-49DD-BEC1-7B39C6103B7A}
* c:\program files\nero\nero8\nero backitup\nbshell.dll (Nero AG)
* c:\program files\nero\nero8\nero backitup\nbshell.dll (Nero AG)
c:\program files\poweriso\pwrisosh.dll (PowerISO Computing, Inc.) {967B2D40-8B7D-4127-9049-61EA0C2C6DCE}
c:\program files\poweriso\pwrisosh.dll (PowerISO Computing, Inc.) {967B2D40-8B7D-4127-9049-61EA0C2C6DCE}
c:\progra~1\winuha\shellw~1.dll {095177B8-8097-4D32-9081-A8949C47020E}
c:\progra~1\winuha\shellw~1.dll {095177B8-8097-4D32-9081-A8949C47020E}
* c:\program files\zone labs\zonealarm\zlavscan.dll (Zone Labs, LLC) {D9872D13-7651-4471-9EEE-F0A00218BEBB}
* c:\program files\zone labs\zonealarm\zlavscan.dll (Zone Labs, LLC) {D9872D13-7651-4471-9EEE-F0A00218BEBB}
227 HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers
—————————————————————
c:\program files\7-zip\7-zip.dll (Igor Pavlov) {23170F69-40C1-278A-1000-000100020000}
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {A470F8CF-A1E8-4f65-8335-227475AA5C46}
c:\program files\magiciso\misosh.dll (MagicISO, Inc.) {DB85C504-C730-49DD-BEC1-7B39C6103B7A}
C:\WINDOWS\system32\cscui.dll (Microsoft Corporation) {750fdf0e-2a26-11d1-a3ea-080036587f03}
c:\program files\poweriso\pwrisosh.dll (PowerISO Computing, Inc.) {967B2D40-8B7D-4127-9049-61EA0C2C6DCE}
C:\WINDOWS\system32\ntshrui.dll (Microsoft Corporation) {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
229 HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers
————————————————————————–
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) {D969A300-E7FF-11d0-A93B-00A0C90F2719}
231 HKLM\Software\Classes\Folder\Shellex\ColumnHandlers
——————————————————-
c:\program files\illustrate\dbpoweramp\dbshell.dll (Illustrate) dBpoweramp Column Handler
c:\program files\common files\adobe\acrobat\activex\pdfshell.dll (Adobe Systems, Inc.) PDF Column Info
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
241 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers
—————————————————————————————
C:\WINDOWS\system32\cscui.dll (Microsoft Corporation) {750fdf0e-2a26-11d1-a3ea-080036587f03}
Everything is working well now.
Thanks for your all your help and advice