AntivirusXP hijack logs

Help, my browser is being controlled and I can't find the culprit.

Logfile of HijackThis v1.99.1
Scan saved at 17:55:21, on 9/2/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\MOHAGame\pb\PnkBstrA.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Roxio\Kio\KioTray.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\FinePixViewer\QuickDCF2.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
c:\windows\system\hpsysdrv.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Yahoo!\browser\ybrwicon.exe
C:\Program Files\Yahoo!\browser\ybrowser.exe
C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix\Policies.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Spyware Doctor\pctsGui.exe
C:\Documents and Settings\HP_Administrator\Desktop\spybotsd160.exe
C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\is-49J5M.tmp\spybotsd160.tmp
C:\Documents and Settings\HP_Administrator\Desktop\Tools\HijackThis.exe
C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\is-9IC73.tmp\spybotsd_includes.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=552…cid={SUB_CLCID}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [EPSON Stylus CX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE /P26 "EPSON Stylus CX4200 Series" /O6 "USB001" /M "Stylus CX4200"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [KioTray] C:\Program Files\Roxio\Kio\KioTray.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ExifLauncher2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Verizon Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://*.trymedia.com (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqcpc/downloads/sysinfo.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {69F497FB-5082-4EA4-9305-9E19F20A2BFF} (MaxisSimCity3TeleX Control) - http://simcity3000unlimited.ea.com/telepor…mCity3TeleX.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemplates/…login-devel.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ARSVC ARSVCaspnet_state (ARSVCaspnet_state) - Unknown owner - ð%€|x
.exe (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Windows Audio AudioSrvMcSysmon (AudioSrvMcSysmon) - Unknown owner - ð%€|x
.exe (file missing)
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Password Validation (ccPwdSvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - (no file)
O23 - Service: LiveUpdate LiveUpdateARSVC (LiveUpdateARSVC) - Unknown owner - ð%€|x
.exe (file missing)
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: MHN MHNehSched (MHNehSched) - Unknown owner - ð%€|x
.exe (file missing)
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: Network DDE DSDM NetDDEdsdmseclogon (NetDDEdsdmseclogon) - Unknown owner - ð%€|x
.exe (file missing)
O23 - Service: PunkBuster (PnkBstrA) - Unknown owner - C:\Program Files\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\MOHAGame\pb\PnkBstrA.exe
O23 - Service: Remote Access Auto Connection Manager RasAutolanmanworkstation (RasAutolanmanworkstation) - Unknown owner - ð%€|x
.exe (file missing)
O23 - Service: Remote Desktop Help Session Manager RDSessMgrRDSessMgr (RDSessMgrRDSessMgr) - Unknown owner - ð%€|x
.exe (file missing)
O23 - Service: Remote Desktop Help Session Manager RDSessMgrusnjsvc (RDSessMgrusnjsvc) - Unknown owner - ð%€|x
.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: PC Tools Spyware Doctor SDhelperSpooler (SDhelperSpooler) - Unknown owner - ð%€|x
.exe (file missing)
O23 - Service: Symantec AppCore Service (SymAppCore) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe (file missing)
O23 - Service: Symantec AppCore Service SymAppCorecomHost (SymAppCorecomHost) - Unknown owner - ð%€|x
.exe (file missing)



Logfile of Spyware Terminator v2.3.0.488 (db:1.000.000.000)
Scan Time: 9/2/2008 6:10:43 PM length: 127 s
Platform: WXP (5.1.0.2600)
User: Admin
Boot Mode: Normal
Scan type: Fast_Spyware_Scan
Scanned Objects: 19904 (Critical:2)
Filter: No System items, No Safe items, No Invalid items

Running Processes
Ati2evxx.exe [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe
Ati2evxx.exe [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe
arservice.exe [Microsoft] : C:\WINDOWS\arservice.exe
bgsvcgen.exe [B.H.A Corporation] : C:\WINDOWS\system32\bgsvcgen.exe
LSSrvc.exe [Hewlett-Packard Company] : C:\Program Files\Common Files\LightScribe\LSSrvc.exe
mcmscsvc.exe [McAfee, Inc.] : C:\Program Files\McAfee\MSC\mcmscsvc.exe
McNASvc.exe [McAfee, Inc.] : C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
McProxy.exe [McAfee, Inc.] : C:\Program Files\Common Files\McAfee\McProxy\McProxy.exe
McShield.exe [McAfee, Inc.] : C:\Program Files\McAfee\VirusScan\McShield.exe
MPFSrv.exe [McAfee, Inc.] : C:\Program Files\McAfee\MPF\MPFSrv.exe
PnkBstrA.exe : C:\Program Files\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\MOHAGame\pb\PnkBstrA.exe
sdhelp.exe [PC Tools Research Pty Ltd] : C:\Program Files\Spyware Doctor\sdhelp.exe
ARPWRMSG.EXE [Microsoft] : C:\WINDOWS\ARPWRMSG.EXE
jusched.exe [Sun Microsystems, Inc.] : C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
E_FATIAEA.EXE [SEIKO EPSON CORPORATION] : C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE
HPwuSchd2.exe [Hewlett-Packard Development Company, L.P.] : C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
KBD.EXE [Hewlett-Packard Company] : C:\HP\KBD\KBD.EXE
KioTray.exe : C:\Program Files\Roxio\Kio\KioTray.exe
DMAScheduler.exe [Sonic Solutions] : C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
QuickDCF2.exe [FUJIFILM Corporation] : C:\Program Files\FinePixViewer\QuickDCF2.exe
hpqtra08.exe [Hewlett-Packard Development Company, L.P.] : C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
em_exec.exe [Logitech Inc.] : C:\Program Files\Logitech\MouseWare\system\em_exec.exe
mcsysmon.exe [McAfee, Inc.] : C:\Program Files\McAfee\VirusScan\mcsysmon.exe
iPodService.exe [Apple Inc.] : C:\Program Files\iPod\bin\iPodService.exe
ycommon.exe [Yahoo!, Inc.] : C:\Program Files\Yahoo!\browser\ycommon.exe
ybrowser.exe [Yahoo!, Inc.] : C:\Program Files\Yahoo!\browser\ybrowser.exe
Policies.exe : C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix\Policies.exe

Internet Settings
R - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=552…cid={SUB_CLCID}
R - HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
R - HKLM\Software\Microsoft\Internet Explorer\Search, CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
R - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters, Domain =
R - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony, DomainName =

BHO
02 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - [Safer Networking Limited] : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

Toolbars
03 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - [McAfee, Inc.] : C:\Program Files\SiteAdvisor\6261\SiteAdv.dll

StartUps
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SpybotSD TeaTimer : [Safer Networking Limited] : C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SUPERAntiSpyware : [SUPERAntiSpyware.com] : C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AlwaysReady Power Message APP : [Microsoft] : C:\WINDOWS\ARPWRMSG.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HPHUPD08 : [Hewlett-Packard] : C:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HPBootOp : [Hewlett-Packard Company] : C:\Program Files\HEWLETT-PACKARD\HP BOOT OPTIMIZER\HPBOOTOP.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SunJavaUpdateSched : [Sun Microsystems, Inc.] : C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, EPSON Stylus CX4200 Series : [SEIKO EPSON CORPORATION] : C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HP Software Update : [Hewlett-Packard Development Company, L.P.] : C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, KBD : [Hewlett-Packard Company] : C:\HP\KBD\KBD.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, KioTray : : C:\Program Files\Roxio\Kio\KioTray.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DMAScheduler : [Sonic Solutions] : C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
04 - Startup: %STARTUPALL%\ExifLauncher2.lnk [FUJIFILM Corporation] : C:\Program Files\FinePixViewer\QuickDCF2.exe
04 - Startup: %STARTUPALL%\HP Digital Imaging Monitor.lnk [Hewlett-Packard Development Company, L.P.] : C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

Shell Extensions
- {DBFB267C-334F-4F19-A304-63B7130C20C7} - [Microsoft] : C:\WINDOWS\arpower.dll
RealOne Player Context Menu Class - {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} - [RealNetworks, Inc.] : C:\Program Files\Real\RealPlayer\rpshell.dll
ShellViewRTF - {7F67036B-66F1-411A-AD85-759FB9C5B0DB} - [XSS] : C:\WINDOWS\system32\ShellvRTF.dll
- {BB7DF450-F119-11CD-8465-00AA00425D90} - [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office\soa800.dll
Yahoo! Mail Shell Extension - {5464D816-CF16-4784-B9F3-75C0DB52B499} - [Yahoo! Inc.] : C:\Program Files\Yahoo!\Common\YMMAPI.dll
Outlook File Icon Extension - {0006F045-0000-0000-C000-000000000046} - [Microsoft Corporation] : C:\Program Files\Microsoft Office\OFFICE11\OLKFSTUB.DLL
Microsoft Office Outlook - {00020D75-0000-0000-C000-000000000046} - [Microsoft Corporation] : C:\Program Files\Microsoft Office\OFFICE11\MLSHEXT.DLL
iTunes - {B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} - [Apple Inc.] : C:\Program Files\iTunes\iTunesMiniPlayer.dll
WinRAR - {B41DB860-8EE4-11D2-9906-E49FADC173CA} - : C:\Program Files\WinRAR\rarext.dll

Shell Extecute Hooks
CShellExecuteHookImpl Object - {{57B86673-276A-48B2-BAE7-C6DBB3020EB8}} - [GRISOFT s.r.o.] : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll
SABShellExecuteHook Class - {{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}} - [SuperAdBlocker.com] : C:\Program Files\SUPERAntiSpyware\SASSEH.DLL

Protocol Handler
- {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - [McAfee, Inc.] : C:\Program Files\SiteAdvisor\6261\SiteAdv.dll

Services
23 - [Agere Systems] : C:\WINDOWS\system32\DRIVERS\AGRSM.sys
23 - [Realtek Semiconductor Corp.] : C:\WINDOWS\system32\drivers\ALCXWDM.SYS
23 - [Microsoft] : C:\WINDOWS\arservice.exe
23 - [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe
23 - : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys
23 - [GRISOFT, s.r.o.] : C:\WINDOWS\system32\DRIVERS\AvgAsCln.sys
23 - [Promise Technology, Inc.] : C:\WINDOWS\system32\DRIVERS\bb-run.sys
23 - [B.H.A Corporation] : C:\WINDOWS\system32\bgsvcgen.exe
23 - [Promise Technology, Inc.] : C:\WINDOWS\system32\DRIVERS\ftsata2.sys
23 - [Intel Corporation] : C:\WINDOWS\system32\DRIVERS\iaStor.sys
23 - [Apple Inc.] : C:\Program Files\iPod\bin\iPodService.exe
23 - [Logitech, Inc.] : C:\WINDOWS\system32\DRIVERS\LHidFlt2.Sys
23 - [Logitech, Inc.] : C:\WINDOWS\system32\Drivers\LHidUsb.Sys
23 - [Hewlett-Packard Company] : C:\Program Files\Common Files\LightScribe\LSSrvc.exe
23 - [Logitech, Inc.] : C:\WINDOWS\system32\DRIVERS\LMouFlt2.Sys
23 - [McAfee, Inc.] : C:\Program Files\McAfee\MSC\mcmscsvc.exe
23 - [McAfee, Inc.] : C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
23 - [McAfee, Inc.] : C:\Program Files\Common Files\McAfee\McProxy\McProxy.exe
23 - [McAfee, Inc.] : C:\Program Files\McAfee\VirusScan\McShield.exe
23 - [McAfee, Inc.] : C:\Program Files\McAfee\VirusScan\mcsysmon.exe
23 - [McAfee, Inc.] : C:\WINDOWS\system32\drivers\mfeavfk.sys
23 - [McAfee, Inc.] : C:\WINDOWS\system32\drivers\mfebopk.sys
23 - [McAfee, Inc.] : C:\WINDOWS\system32\drivers\mfehidk.sys
23 - [McAfee, Inc.] : C:\WINDOWS\system32\drivers\mfesmfk.sys
23 - [McAfee, Inc.] : C:\WINDOWS\system32\Drivers\Mpfp.sys
23 - [McAfee, Inc.] : C:\Program Files\McAfee\MPF\MPFSrv.exe
23 - [Padus, Inc.] : C:\WINDOWS\system32\drivers\pfc.sys
23 - : C:\Program Files\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\MOHAGame\pb\PnkBstrA.exe
23 - [Hewlett-Packard Company] : C:\WINDOWS\system32\DRIVERS\PS2.sys
23 - [PC Tools Research Pty Ltd] : C:\Program Files\Spyware Doctor\sdhelp.exe
23 - [Symantec Corporation] : C:\WINDOWS\system32\Drivers\SRTSPX.SYS
23 - [Symantec Corporation] : C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
23 - [Symantec Corporation] : C:\WINDOWS\system32\drivers\symlcbrd.sys
23 - [Symantec Corporation] : C:\WINDOWS\system32\Drivers\SYMTDI.SYS
23 - [PCTools Research Pty Ltd.] : C:\WINDOWS\system32\drivers\ikfilesec.sys
23 - [PCTools Research Pty Ltd.] : C:\WINDOWS\system32\drivers\iksysflt.sys
23 - [PCTools Research Pty Ltd.] : C:\WINDOWS\system32\drivers\iksyssec.sys
23 - [SUPERAdBlocker.com and SUPERAntiSpyware.com] : C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
23 - [SUPERAdBlocker.com and SUPERAntiSpyware.com] : C:\Program Files\SUPERAntiSpyware\SASENUM.SYS

Winlogon Notify
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon, DLLName : [SUPERAntiSpyware.com] : C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent, DLLName : [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.dll

Threat Files
: C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix\Reboot.exe
: C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix\restart.exe

Advanced Files Report
%PROGRAMFILES%\Spyware Doctor\tools\swpg.dat [PC Tools] MD5=81B5E1AD392FBBE8E7EC79104B544FFF SIZE=101448
%SYSDIR%\Ati2evxx.dll [ATI Technologies Inc.] [ATI External Event Utility for NT, W2K and W9X] MD5=E4BDE7562DAF188A1F31CB63CC2F4AA1 SIZE=61440
%SYSDIR%\Ati2evxx.exe [ATI Technologies Inc.] [ATI External Event Utility for WindowsNT and Windows9X] MD5=7D6AB867E5CD805357F6D3EFA98EF749 SIZE=405504
%SYSDIR%\Ati2edxx.dll [ATI Technologies, Inc.] [ATI External Device Utility] MD5=BE207415E15559645BE191FEB65AC637 SIZE=41472
%COMMONFILES%\Logitech\Scrolling\LgMsgHk.dll [Logitech Inc.] [Productivity Software Common Files] MD5=06CA25E522E43426C7DC966B9EFA3361 SIZE=24064
%PROGRAMFILES%\ArcSoft\PhotoImpression 5\share\pihook.dll MD5=9064D871EF0125B58CC58AFC767F1E47 SIZE=53248
%PROGRAMFILES%\Logitech\MouseWare\System\LgWndHk.dll [Logitech Inc.] [MouseWare] MD5=B18A08A8A228173BC00A5E5239E42C04 SIZE=6144
%PROGRAMFILES%\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll [GRISOFT s.r.o.] [AVG Anti-Spyware] MD5=3FD0B984601D65C6DA8E891A0D5905D1 SIZE=79408
%PROGRAMFILES%\SUPERAntiSpyware\SASSEH.DLL [SuperAdBlocker.com] [SuperAntiSpyware] MD5=ECD5517A6633826057D4F050927DDF56 SIZE=77824
%PROGRAMFILES%\McAfee\VirusScan\scriptsn.dll [McAfee, Inc.] [VSCORE.14.0.0.366.x86] MD5=5B9FCB73F5A4A000C55AFF08B639A07C SIZE=58688
%PROGRAMFILES%\WinRAR\rarext.dll MD5=8A22F6B4976053924FE93DEA8218D68A SIZE=128512
%PROGRAMFILES%\McAfee\VirusScan\mcctxmnu.dll [McAfee, Inc.] [McAfee VirusScan] MD5=840CF950DCB4C96BB7A4877A23D5F6BE SIZE=165192
%PROGRAMFILES%\Malwarebytes' Anti-Malware\mbamext.dll [Malwarebytes Corporation] [Malwarebytes' Anti-Malware] MD5=5131E3897A8D57768A303A1CA4D62EFF SIZE=73336
%SYSDIR%\E_FLMAEA.DLL [SEIKO EPSON CORPORATION] [EPSON Bi-directional Printer] MD5=7AEC176A5DE912D440E3B37120E2E38F SIZE=79679
%SYSDIR%\HpTcpMon.dll [Hewlett Packard] [HP® Standard Port Monitor] MD5=E965160B09675E027EF8235EF90EB405 SIZE=155648
%SYSDIR%\hpzjrd01.dll [Hewlett Packard] [Hewlett Packard Rediscovery Library] MD5=B85EC14C7A5F7B2C8D70D4443486DD77 SIZE=139264
%SYSDIR%\hptcpmib.dll [Hewlett Packard] [HP® Standard Port Monitor] MD5=E5A93F799298147E169D689969D5C73F SIZE=73728
%SYSDIR%\spool\DRIVERS\W32X86\3\E_FUICAEA.DLL [SEIKO EPSON CORP.] [EPSON Color Printing System] MD5=2944AEFC1D932E62193387C5B8A8C653 SIZE=521216
%SYSDIR%\spool\DRIVERS\W32X86\3\E_FMAIAEA.DLL [SEIKO EPSON Corporation] [EPSON Color Printing System] MD5=F2F1E908AE051099EF276A31E0E04FEF SIZE=72704
%WINDIR%\arservice.exe [Microsoft] [ARSVC Application] MD5=9A0D9B2E263BEDE80FB79DDBAD240EC1 SIZE=58880
%SYSDIR%\bgsvcgen.exe [B.H.A Corporation] [B's Recorder GOLD8] MD5=71489FA2C4A238F178E30AE6E4449013 SIZE=86016
%COMMONFILES%\LightScribe\LSSrvc.exe [Hewlett-Packard Company] [LightScribe] MD5=E4973B3229E0015345AFBE43A8A8EB3B SIZE=73728
%PROGRAMFILES%\McAfee\MSC\mcmscsvc.exe [McAfee, Inc.] [McAfee SecurityCenter] MD5=CB3A8976DE2F65349322DA7627CEA223 SIZE=767976
%COMMONFILES%\McAfee\MSC\mcutil\8,1,114,0\mcutil.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=CA0732D2F2D582E669C9A408C4E2DCF9 SIZE=128368
%PROGRAMFILES%\McAfee\MSC\mcres.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=CF5C2CBCCC496B9157A7C56DA71EA6BB SIZE=80720
%PROGRAMFILES%\McAfee\MSC\mclocres.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=99B6E705C5CE392CA8FF526A6EB46175 SIZE=64408
%PROGRAMFILES%\McAfee\MSC\oem\106-01\Mccobres.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=82627F3D9E2C049AB88D880B3C377A7F SIZE=558656
%PROGRAMFILES%\McAfee\MSC\mccobres.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=92014B08550DB313BC6DD90EBFE0E6F3 SIZE=690648
%COMMONFILES%\McAfee\MSC\sqlite3.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=377A49EC40546CE62AB424F41D8D0300 SIZE=410072
%COMMONFILES%\McAfee\Core\mccoreps.dll [McAfee, Inc.] [McAfee Core API] MD5=19E0FBD24CB1A016E035BC1A526AA1ED SIZE=90968
%PROGRAMFILES%\McAfee\MSC\mcshllps.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=2BBEBD88F878D07DF1C98D31B08FF545 SIZE=95568
%PROGRAMFILES%\McAfee\MSC\mcmispps.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=71987B191F2FD94CECDF29C3C599D3CB SIZE=168272
%PROGRAMFILES%\McAfee\MSC\mcsubmgr\8,1,133,0\mcsubmgr.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=52B6E1BA4DCC3F22842C0AEE499F4A22 SIZE=492880
%PROGRAMFILES%\McAfee\MSC\mcmscver.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=828C209F104B6776A6A3733DEA524F6F SIZE=320848
%PROGRAMFILES%\McAfee\VirusScan\mvsap.dll [McAfee, Inc.] [McAfee VirusScan] MD5=A3FF6F525FEC34233F2092F946A2E71D SIZE=185672
%PROGRAMFILES%\McAfee\MPF\MC\MpfMISP.dll [McAfee, Inc.] [McAfee Personal Firewall Plus] MD5=973411647A7FE64A78A463640969EA9D SIZE=1047328
%PROGRAMFILES%\McAfee\MPF\L10N.DLL [McAfee, Inc.] [McAfee Personal Firewall] MD5=9CD16D2DF7B22F44889941FC72041F3C SIZE=214304
%PROGRAMFILES%\McAfee\MSC\mcprotpv.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=C12AF9ADFD6B2A8011CAB87E77CE1408 SIZE=329040
%PROGRAMFILES%\McAfee\MSC\McNmcRes.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=244B30B37B46968F7DBE0748274CE6E8 SIZE=150928
%PROGRAMFILES%\McAfee\MSC\McNmcLoR.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=7DAD4AE7938A92AD7D614E55BB82E3A3 SIZE=16568
%PROGRAMFILES%\McAfee\MSC\McNmcCoR.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=2B925B6D5EE70A0686F8E1314ADBD61F SIZE=14520
%PROGRAMFILES%\McAfee\MSC\mcprohlp.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=A1CB12BCE7436EF6EDD7946F9FBC4703 SIZE=240976
%PROGRAMFILES%\McAfee\VirusScan\mvsver.dll [McAfee, Inc.] [McAfee VirusScan API] MD5=D7ACCE83BE1F8CF6C2FB1AD4864A3530 SIZE=206152
%COMMONFILES%\McAfee\Core\McEvtBrk.dll [McAfee, Inc.] [McAfee Core API] MD5=28223D573C66522CF9F9DCE551747E06 SIZE=267600
%COMMONFILES%\McAfee\McProxy\Proxyver.dll [McAfee, Inc.] [McAfee Proxy] MD5=5F4BCD0AE7366230463C3B1E0B5482A6 SIZE=149328
%COMMONFILES%\McAfee\HackerWatch\HWAPI.dll [McAfee, Inc.] [McAfee HackerWatch] MD5=D07F2BA1451AE4F97985A2870F682A8E SIZE=620648
%PROGRAMFILES%\McAfee\MSC\McNmcVer.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=FF20C98E3AE040B415257329E2BFAF3F SIZE=181536
%PROGRAMFILES%\McAfee\MQC\QCMISP.dll [McAfee, Inc.] [McAfee QuickClean] MD5=9D533D4D7243BAF3B52BEC9FE6A622BD SIZE=591136
%PROGRAMFILES%\McAfee\MQC\QCLite.dll [McAfee, Inc.] [McAfee QuickClean] MD5=C5C42F7A44993D1824DF70000CD34ECF SIZE=304416
%PROGRAMFILES%\McAfee\MSC\McDBMgr.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=292F8E60E8BC0CFFBDF538F78A2CE2B8 SIZE=257872
%PROGRAMFILES%\McAfee\MSC\mcdemenu.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=2C4913A5581E3B9D032D9A57477BB27C SIZE=435024
%PROGRAMFILES%\McAfee\VirusScan\mvscp.dll [McAfee, Inc.] [McAfee VirusScan] MD5=63DA6121EB851F63EBB95C0C5D78C3A3 SIZE=169288
%PROGRAMFILES%\McAfee\MSC\mcuicfg.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=6808762C4FC147C6D8AF1CE3E9267517 SIZE=116048
%PROGRAMFILES%\McAfee\VirusScan\mvscfg.dll [McAfee, Inc.] [McAfee VirusScan API] MD5=6F95ACC764A3755314CCE267B7F8BFAF SIZE=324936
%PROGRAMFILES%\McAfee\MSC\mccfgpv.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=CC2CA1AA9623A737EF4905271B3FC62D SIZE=425808
%PROGRAMFILES%\McAfee\VirusScan\McVsPP.dll [McAfee, Inc.] [McAfee VirusScan] MD5=392653214BCA3B24D2757E4B65B05082 SIZE=210248
%PROGRAMFILES%\McAfee\VirusScan\naiannps.dll [McAfee, Inc.] [McAfee VirusScan API] MD5=0255E9CEA240A664F403DA759FD50954 SIZE=24392
%PROGRAMFILES%\McAfee\MSC\mcregobj\8,0,226,0\mcregobj.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=E8B7A11BBB7E1E47B58BA5BC69D73556 SIZE=300368
%PROGRAMFILES%\McAfee\MSC\McNmcPrv.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=FCF388A3EB9F8286A93FBC94A7804854 SIZE=385768
%COMMONFILES%\McAfee\MNA\McNASvcPS.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=19B21FDCDD5BF86D86254A8416E407E2 SIZE=85008
%PROGRAMFILES%\McAfee\MSC\McNmcSPS.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=8D687570948C1F728C552EF55E3572F2 SIZE=66848
%PROGRAMFILES%\McAfee\MPF\MC\MPFP.dll [McAfee, Inc.] [McAfee Personal Firewall Plus] MD5=9BB8167C197BA54DADAD677D1DB51AA6 SIZE=730400
%COMMONFILES%\McAfee\MNA\McNASvc.exe [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=C69E71E00B30B60556D3E096699BD423 SIZE=2458128
%PROGRAMFILES%\McAfee\MSC\McNmcSrv.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=75B5C9F6090D89D4E87A675007063EBB SIZE=1185048
%PROGRAMFILES%\McAfee\MSC\mcmismgr.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=2B160CD12B622E18AD913905845AECD4 SIZE=431952
%COMMONFILES%\McAfee\MNA\McUJ.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=E150DF39CB8ABB17627071FEF8EA5376 SIZE=336328
%COMMONFILES%\McAfee\McProxy\McProxy.exe [McAfee, Inc.] [McAfee Proxy] MD5=8CF3DA0BE6094C34D7C4A85493E60547 SIZE=359248
%PROGRAMFILES%\McAfee\VirusScan\EscnPlug.dll [McAfee, Inc.] [McAfee VirusScan API] MD5=621FF0E8917AB0FEE5463C117861A460 SIZE=460104
%PROGRAMFILES%\McAfee\VirusScan\esplgres.dll [McAfee, Inc.] [McAfee VirusScan API] MD5=8C437135FD69BB84B96B072B49E4B4A1 SIZE=14624
%PROGRAMFILES%\McAfee\VirusScan\mvslog.dll [McAfee, Inc.] [McAfee VirusScan] MD5=835E11BD5DF2E91F1E241D0EEB5C6E89 SIZE=275784
%PROGRAMFILES%\McAfee\VirusScan\McShield.exe [McAfee, Inc.] [VSCORE.14.0.0.349.x86] MD5=33734ABFA52EC8D096A1254D645E9B4F SIZE=144704
%PROGRAMFILES%\McAfee\VirusScan\LockDown.dll [McAfee, Inc.] [VSCORE.14.0.0.349.x86] MD5=0906307AB33EA67610C5F8EC588FD34F SIZE=24896
%PROGRAMFILES%\McAfee\VirusScan\mytilus3.dll [McAfee, Inc.] [VSCORE.14.0.0.349.x86] MD5=77739EAB2C2595DC4F4D5EFEDFA47945 SIZE=66880
%PROGRAMFILES%\McAfee\VirusScan\mytilus3_worker.dll [McAfee, Inc.] [VSCORE.14.0.0.349.x86] MD5=A03ECC2416C792241B66B93725B5EB15 SIZE=251200
%PROGRAMFILES%\McAfee\VirusScan\mytilus3_server.dll [McAfee, Inc.] [VSCORE.14.0.0.349.x86] MD5=546DF14A1661D8C80354C992767A26A8 SIZE=99648
%PROGRAMFILES%\McAfee\VirusScan\RES00\McShield.dll [McAfee, Inc.] [VSCORE.14.0.0.349] MD5=1E648639BD89045A9DF767276AC9731B SIZE=24384
%PROGRAMFILES%\McAfee\VirusScan\FTL.Dll [McAfee, Inc.] [VSCORE.14.0.0.349.x86] MD5=CCF0D793988E55D306B38A9EFE0B11DF SIZE=40768
%PROGRAMFILES%\McAfee\VirusScan\naiann.dll [McAfee, Inc.] [McAfee VirusScan API] MD5=B84BD0E69DCACF4FC772B2E6AF1E0204 SIZE=300360
%PROGRAMFILES%\McAfee\VirusScan\mcvsps.dll [McAfee, Inc.] [McAfee VirusScan API] MD5=82202254AD1D2F65C8B58F112ACCBE0D SIZE=173384
%PROGRAMFILES%\McAfee\VirusScan\Engine\5200.2160\mcscan32.dll [McAfee, Inc.] [McScan] MD5=7D89C620128AC1B1D2BEADAE59C5EDF2 SIZE=2724006
%PROGRAMFILES%\McAfee\VirusScan\mfebopa.dll [McAfee, Inc.] [SYSCORE.14.0.0.291.x86] MD5=0FDAABC9A53555E88B97B62283E17203 SIZE=58688
%PROGRAMFILES%\McAfee\VirusScan\mfehida.dll [McAfee, Inc.] [SYSCORE.14.0.0.291.x86] MD5=009AC65799B7D717F2A3682D3C168076 SIZE=18752
%PROGRAMFILES%\McAfee\VirusScan\mfeavfa.dll [McAfee, Inc.] [SYSCORE.14.0.0.291.x86] MD5=FB8543292619D904CBAAD4EE9FA8AF64 SIZE=58688
%PROGRAMFILES%\McAfee\MPF\MPFSrv.exe [McAfee, Inc.] [McAfee Personal Firewall] MD5=346F30F1FF73553AA466F4AE7948DA00 SIZE=856864
%PROGRAMFILES%\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\MOHAGame\pb\PnkBstrA.exe MD5=C183B7E8C4DD96AF66D7ACE48D2D9B05 SIZE=63040
%PROGRAMFILES%\Spyware Doctor\sdhelp.exe [PC Tools Research Pty Ltd] [Spyware Doctor] MD5=D8CA03BE0F6DC8C8D71009795028006A SIZE=895088
%PROGRAMFILES%\McAfee.com\Agent\mcagntps.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=34B8ECDBA9B8806578DD3770264E2702 SIZE=66896
%SystemDiskRoot%\HP\KBD\led.dll [Hewlett-Packard Company] [Hewlett-Packard Company LED DLL] MD5=F68A3F0D63BE926ED65ED1C8C5B03A3D SIZE=49152
%SystemDiskRoot%\HP\KBD\USB.dll [Hewlett-Packard Company] [Hewlett-Packard Company USB DLL] MD5=F8C008DA6F620E822394781C894A06DB SIZE=77824
%SystemDiskRoot%\HP\KBD\ps2.dll [Hewlett-Packard Company] [Hewlett-Packard Company PS2 DLL] MD5=2AE54F20144B2AF570587A8478D02885 SIZE=61440
%SystemDiskRoot%\HP\KBD\msg.dll [Hewlett-Packard Company] [Hewlett-Packard Company MSG DLL] MD5=205DB5A0DD15DF2657EFD4B64D0CC4A3 SIZE=53248
%SystemDiskRoot%\HP\KBD\osd.dll [Hewlett-Packard Company] [Hewlett-Packard Company OSD DLL] MD5=5F1EC8079DCC3ACB3315966A9A7E2391 SIZE=118784
%SystemDiskRoot%\HP\KBD\sct.dll [Hewlett-Packard Company] [Hewlett-Packard Company SCT DLL] MD5=2F420C4DCFFACF50F73CAB6C27DDA901 SIZE=81920
%SystemDiskRoot%\HP\KBD\onl.dll [Hewlett-Packard Company] [Hewlett-Packard Company ONL DLL] MD5=FB8BFCDF02173E59F8336C3EAECE76E5 SIZE=61440
%SystemDiskRoot%\HP\KBD\aol.dll [Hewlett-Packard Company] [Hewlett-Packard Company AOL DLL] MD5=308C9DDBD043903534514B097396E017 SIZE=57344
%SystemDiskRoot%\HP\KBD\url.dll [Hewlett-Packard Company] [Hewlett-Packard Company URL DLL] MD5=996FC333026A68A66078A4AB6C9EA54C SIZE=57344
%SystemDiskRoot%\HP\KBD\cfg.dll [Hewlett-Packard Company] [Hewlett-Packard Company CFG DLL] MD5=261E5E3602941656A1442B255C936B9E SIZE=94208
%SystemDiskRoot%\HP\KBD\MSIKBDIF.DLL [Hewlett-Packard Company] [Hewlett-Packard Company MSIKBDIF DLL] MD5=60DB5561F7B646FA217E9EA6561E6705 SIZE=69632
%COMMONFILES%\Sonic Shared\Sonic Central\Engine\PxWrap.dll [Sonic Solutions] MD5=0F1B84F6765F126CA0D4A9AF74E792C7 SIZE=589824
%SYSDIR%\PX.dll [Sonic Solutions] [Px] MD5=13CFCB4E2A212C208840D7E679A5EE60 SIZE=430080
%SYSDIR%\PXDRV.DLL [Sonic Solutions] [Px] MD5=0F2C90DB2EDCB26FB0E79BB15FEE36B9 SIZE=450560
%SYSDIR%\PXMAS.DLL [Sonic Solutions] [Px Mastering Engine] MD5=F1C41C629AC44573BD93A19AFA5944EA SIZE=176128
%SYSDIR%\PXSFS.DLL [Sonic Solutions] [Px Streaming Mastering Engine] MD5=49C71D59D0D940568F86494FE4A63C6D SIZE=1257472
%SYSDIR%\PXWAVE.DLL [Sonic Solutions] [PxWave] MD5=9164FA3064CE25A40B374EF70059EB46 SIZE=339968
%SYSDIR%\VXBLOCK.DLL [Sonic Solutions] MD5=566102B8A7CD38E4417F0EAFAC10E25D SIZE=28672
%PROGRAMFILES%\HP DigitalMedia Archive\EAFunctions.dll [Sonic Solutions] [DigitalMedia Archive] MD5=1FC5CCD0920F45C62886B52C247D24AC SIZE=249856
%PROGRAMFILES%\FinePixViewer\QuickDCF2.exe [FUJIFILM Corporation] [FinePixViewer] MD5=00AE29C7F81218FD86FC8225BEC4397A SIZE=303104
%PROGRAMFILES%\FinePixViewer\wia_register_event.dll MD5=9EB772AA19E02D41089AE9CE52A8E575 SIZE=81920
%WINDIR%\armcex.dll [ARMCEX Module] MD5=21850AF423E983904CD63D43A560387D SIZE=50176
%SYSDIR%\fpalsu.dll [Hewlett-Packard Company] [FPALSU Module] MD5=8D1805727E8642FF88DE9DAEB088ADEF SIZE=36864
%PROGRAMFILES%\HP\Digital Imaging\bin\hpqtra08.exe [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=A9D65CEEEC7844C9A0C6B445BCBE7823 SIZE=282624
%SystemDiskRoot%\hp\drivers\printers\deskjet\program files\HP\Digital Imaging\bin\hpqcxm08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=1E973E77308F6C267E395C4DB9809E94 SIZE=139264
%PROGRAMFILES%\HP\Digital Imaging\bin\hpquio08.dll [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=2D7689E3A09C582100E824BD9224203C SIZE=102400
%PROGRAMFILES%\HP\Digital Imaging\bin\hpqtra08.rsc [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=6893D2F2C2BAB9C4DBADA52DFB8B3AD6 SIZE=65536
%PROGRAMFILES%\HP\Digital Imaging\bin\hpqtao08.dll [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=9669358A3DE454884CAA5F6BD3E49D67 SIZE=65536
%PROGRAMFILES%\HP\Digital Imaging\Unload\hpnkhTA.dll [Hewlett-Packard] [TrayAppPlugin Module] MD5=8E89B72CB355EA260936B3A59B5071A9 SIZE=77824
%PROGRAMFILES%\HP\Digital Imaging\bin\hpotra08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=B12C4496BBF10B6DDDD10EFEF643FEAE SIZE=208896
%PROGRAMFILES%\HP\Digital Imaging\bin\hpotra08.rsc [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=0B996332F7501273E50E7E2F80A47025 SIZE=28672
%PROGRAMFILES%\HP\Digital Imaging\bin\hpotradd.dll [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=E4832C938869CE5FD9B873CFCFDA18C8 SIZE=53248
%PROGRAMFILES%\HP\Digital Imaging\Unload\hpiCamTA.dll [Hewlett-Packard] [TrayAppPlugin Module] MD5=28A43C3605019B5BEB6BBDA9B3B92BE0 SIZE=126976
%PROGRAMFILES%\HP\Digital Imaging\Unload\HpqUnRes.dll [Hewlett-Packard] [HpqUnRes] MD5=4037F423494A66E9B7F85581E154361C SIZE=77824
%PROGRAMFILES%\HP\Digital Imaging\bin\hpqmif08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=DA74F6CB9B6BADC53E72F49BDA478DDF SIZE=241664
%PROGRAMFILES%\HP\Digital Imaging\bin\hphtra08.dll [Hewlett-Packard] [HP Photosmart] MD5=633A529EBAEB78FF0F50A5A658600EB4 SIZE=163840
%PROGRAMFILES%\HP\Digital Imaging\bin\HpqUtil.dll [HpqUtil] MD5=FEAC3A668939FF90A37AC0D76FD16EBA SIZE=192512
%PROGRAMFILES%\HP\Digital Imaging\bin\hpodvd09.dll [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=CA988683EFB05808A79FAD61A9030E67 SIZE=70656
%PROGRAMFILES%\HP\Digital Imaging\bin\hpoddcomm09.dll [Hewlett-Packard Development Company, L.P.] [hp digital imaging] MD5=BED2E90115298488CAEFCE39FC6CC5F8 SIZE=95232
%PROGRAMFILES%\Logitech\MouseWare\system\em_exec.exe [Logitech Inc.] [MouseWare] MD5=3678463D8ECB6CF3C25AC2F085711461 SIZE=37888
%PROGRAMFILES%\Logitech\MouseWare\system\EVENTEX.dll [Logitech Inc.] [MouseWare] MD5=CC374BD2AB88E3100896D579A0CEC919 SIZE=236544
%SYSDIR%\COMNCTR.dll [Logitech Inc.] [MouseWare] MD5=AB41A5FA14B0E14E17B48143F49DB19E SIZE=104960
%PROGRAMFILES%\Logitech\MouseWare\system\ccresrce.dll [Logitech Inc.] [MouseWare] MD5=C276381C27F77C2EBD7A40D4A5628286 SIZE=78336
%PROGRAMFILES%\Logitech\MouseWare\system\GlbResLt.dll [Logitech Inc.] [MouseWare] MD5=66B223029BA6EF3E3B3351763CB3AD0C SIZE=13312
%PROGRAMFILES%\Logitech\MouseWare\System\devices.dll [Logitech Inc.] [MouseWare] MD5=0E554A5D7995DDCAA2900ACA5B7E39F1 SIZE=134656
%PROGRAMFILES%\Logitech\MouseWare\system\ccstmglb.dll [Logitech Inc.] [MouseWare] MD5=B97967B2DF6954B9BE621806975324EF SIZE=21504
%PROGRAMFILES%\Logitech\MouseWare\system\ccustom.dll [Logitech Inc.] [MouseWare] MD5=85A757167F5ECB0D8A4741D0F5C689CF SIZE=16384
%PROGRAMFILES%\Logitech\MouseWare\system\ccmsghk.dll [Logitech Inc.] [MouseWare] MD5=279D3F3C849D6ABD4367D75AAAF264EA SIZE=42496
%PROGRAMFILES%\ATI Technologies\ATI Control Panel\atipdsxx.dll [ATI Technologies, Inc.] [ATI Desktop Component] MD5=F7EDE18497107101DD1514E333CC464A SIZE=278528
%PROGRAMFILES%\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.ENU [ATI Technologies, Inc.] [ATI Desktop Component] MD5=953D5C3AFD45F97A27F212BD80BFCA6A SIZE=147456
%PROGRAMFILES%\ATI Technologies\ATI Control Panel\atipdxxx.dll [ATI Technologies, Inc.] [ATI Desktop Component] MD5=2AC6B96A2538C210F385353BFF662749 SIZE=73728
%PROGRAMFILES%\McAfee\VirusScan\mcsysmon.exe [McAfee, Inc.] [McAfee VirusScan API] MD5=FD47DF2BCC3544DF65B01AD6B6062430 SIZE=695624
%PROGRAMFILES%\McAfee\VirusScan\mfesmfa.dll [McAfee, Inc.] [SYSCORE.14.0.0.291.x86] MD5=AF711D24B9180BABE04E4A80A57F6219 SIZE=17216
%PROGRAMFILES%\iTunes\iTunesHelper.Resources\en.lproj\iTunesHelperLocalized.DLL [Apple Inc.] [iTunes] MD5=7B93648CA1F4F21DD218394CE5F51F87 SIZE=43520
%PROGRAMFILES%\iTunes\iTunesHelper.Resources\iTunesHelper.DLL [Apple Inc.] [iTunes] MD5=1670E5B5EF8D2BAE70E69F6E8F189C0A SIZE=42496
%PROGRAMFILES%\iPod\bin\iPodService.exe [Apple Inc.] [iTunes] MD5=661194608009B558DE1925C7EBE1A4BA SIZE=500800
%PROGRAMFILES%\iPod\bin\iPodService.Resources\en.lproj\iPodServiceLocalized.DLL [Apple Inc.] [iTunes] MD5=DDA43C03EC722E439A0E3CF6049C4708 SIZE=43008
%PROGRAMFILES%\iPod\bin\iPodService.Resources\iPodService.DLL [Apple Inc.] [iTunes] MD5=93843B26BCB8EDD42A7B42B9700A1D7E SIZE=42496
%PROGRAMFILES%\Yahoo!\browser\ycommon.exe [Yahoo!, Inc.] [YCommon Exe Module] MD5=DC384325FFC20A35BBD2A49FAE962153 SIZE=200704
%PROGRAMFILES%\Yahoo!\browser\ycommon.dll [Yahoo! Inc.] [Yahoo! Inc. YCommon] MD5=3AF9BC6B8427923EF2D6E21A19861C58 SIZE=176128
%PROGRAMFILES%\Yahoo!\browser\YCommonPS.dll [YCommon Dynamic Link Library] MD5=314B4F7A8F49F056FF1DB8C4E6EB4B64 SIZE=38912
%PROGRAMFILES%\Yahoo!\browser\YBrwRes.dll [Yahoo! Inc.] [Verizon Yahoo! YBrwRes] MD5=344ED0BBB289B4CC563A9D5E89B8B9B4 SIZE=172032
%PROGRAMFILES%\Yahoo!\browser\ybrowser.exe [Yahoo!, Inc.] [Yahoo! Browser] MD5=E86691E4DE85B4728BE84CBCEC7F9130 SIZE=668152
%PROGRAMFILES%\Yahoo!\browser\ypub.dll [Yahoo! Inc.] [Yahoo! Pop-Up Blocker] MD5=86390E2E2B51BAA78F930394C15E7184 SIZE=131072
%PROGRAMFILES%\Yahoo!\browser\ytbctl.dll [Yahoo! Inc.] [ytbctl] MD5=64DB49DDD2FF2F41D13486A853F99482 SIZE=73782
%PROGRAMFILES%\Yahoo!\browser\ybcomp.dll [Yahoo! Inc.] [Yahoo! Toolbar 3.3 for YBrowser] MD5=0BD3337C9170C118281C5EDAFFDFBD1C SIZE=370777
%PROGRAMFILES%\Yahoo!\Common\YShortcut.dll [Yahoo! Inc.] [Shortcuts] MD5=79165FD9F08225C15B32F4A0DD3FA16C SIZE=239096
%PROGRAMFILES%\Yahoo!\browser\YBrowseGuard.dll [Yahoo! Inc.] [YBrowseGuard] MD5=09AFCD2CAB49DBF74174478D4282FCB7 SIZE=70768
%PROGRAMFILES%\Yahoo!\browser\ysbhistory.dll [Yahoo!] [Yahoo! Browser Sidebar History] MD5=8A943AA8BA2F4295AE4A314A4C27105E SIZE=172616
%SYSDIR%\Macromed\Flash\Flash9e.ocx [Adobe Systems, Inc.] [Shockwave Flash] MD5=D3C50535C26190FEAD7785A03499C0AC SIZE=2987392
%DESKTOP%\SmitfraudFix\Policies.exe MD5=2576EFBFECD8E90F7BCCE395259F77AD SIZE=3584
deskpan.dll
%WINDIR%\arpower.dll [Microsoft] [ARPower Dynamic Link Library] MD5=C47B9BEE1B11F118CEFE812D88B7F665 SIZE=62464
%PROGRAMFILES%\Real\RealPlayer\rpshell.dll [RealNetworks, Inc.] [RealPlayer] MD5=D6315DC9FCC6C62FD54E02F0907030E3 SIZE=49198
%SYSDIR%\ShellvRTF.dll [XSS] [XSS ShellvRTF] MD5=B309190CEDF4A4E60865787DDE826901 SIZE=237568
%PROGRAMFILES%\Microsoft Office\Office\soa800.dll [Microsoft Corporation] [Microsoft® Access] MD5=816A78403677AE254643A6F853BE76C1 SIZE=212992
%PROGRAMFILES%\Yahoo!\Common\YMMAPI.dll [Yahoo! Inc.] [Yahoo! Mail] MD5=42D08A04BEA63D24545C543583BC5D7A SIZE=285464
%PROGRAMFILES%\Microsoft Office\OFFICE11\OLKFSTUB.DLL [Microsoft Corporation] [Microsoft Office Outlook] MD5=EEFF9EB53DE2111DEC77E7C9E8D090F0 SIZE=236384
%PROGRAMFILES%\Microsoft Office\OFFICE11\MLSHEXT.DLL [Microsoft Corporation] [Microsoft Office Outlook] MD5=283926C9F1D6C0EC263962F684F502A1 SIZE=33120
%PROGRAMFILES%\iTunes\iTunesMiniPlayer.dll [Apple Inc.] [iTunes] MD5=3C25F7710D8C138B7B34FCDBBDB372BA SIZE=132672
%PROGRAMFILES%\SUPERAntiSpyware\SASWINLO.dll [SUPERAntiSpyware.com] [SUPERAntiSpyware WinLogon Processor] MD5=D8EDAEEAF63BBF45ED9B7A3666641C2A SIZE=352256
%SYSDIR%\DRIVERS\AGRSM.sys [Agere Systems] [Agere SoftModem Driver] MD5=994A42D273C35B43EE9D1E8A5D8BC639 SIZE=1149888
%SYSDIR%\drivers\ALCXWDM.SYS [Realtek Semiconductor Corp.] [Windows ® WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab)] MD5=7F26D024355CBADB60838F53DFB171EC SIZE=3644928
%SYSDIR%\svchost.exe -k netsvcs
%PROGRAMFILES%\Grisoft\AVG Anti-Spyware 7.5\guard.sys MD5=D6F4C1450699901048818B0C3AAF7A17 SIZE=11000
%SYSDIR%\DRIVERS\AvgAsCln.sys [GRISOFT, s.r.o.] [AVG7 Clean Driver] MD5=6D4A1DA6E6D522B3EBBCBFF4A3589EC5 SIZE=3968
%SYSDIR%\DRIVERS\bb-run.sys [Promise Technology, Inc.] [Promise® Disk Accelerator] MD5=7270D070173B20AC9487EA16BB08B45F SIZE=17408
%SYSDIR%\dllhost.exe \Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
%SYSDIR%\svchost -k DcomLaunch
%SYSDIR%\svchost.exe -k NetworkService
%SYSDIR%\DRIVERS\ftsata2.sys [Promise Technology, Inc.] [Promise FastTrak Series Driver] MD5=22399D3CE5840C6082844679CCA5D2FC SIZE=175104
%SYSDIR%\DRIVERS\iaStor.sys [Intel Corporation] [Intel Matrix Storage Manager driver] MD5=9A65E42664D1534B68512CAAD0EFE963 SIZE=872064
%SYSDIR%\DRIVERS\LHidFlt2.Sys [Logitech, Inc.] [Logitech MouseWare™] MD5=B97D05E656818572B6B04BA682D3AA8F SIZE=25502
%SYSDIR%\Drivers\LHidUsb.Sys [Logitech, Inc.] [Logitech iTouch™] MD5=826AACB98A2CA5C51E982C748A60D645 SIZE=37884
%SYSDIR%\svchost.exe -k LocalService
%SYSDIR%\DRIVERS\LMouFlt2.Sys [Logitech, Inc.] [Logitech MouseWare™] MD5=B666F835C18974F392A387C6E863072F SIZE=70798
%SYSDIR%\drivers\mfeavfk.sys [McAfee, Inc.] [SYSCORE.14.0.0.291.x86] MD5=C97CBFD71C1C215150A3B3E55F77A7A3 SIZE=79304
%SYSDIR%\drivers\mfebopk.sys [McAfee, Inc.] [SYSCORE.14.0.0.291.x86] MD5=5447338B83A1A2354FB2FEA7604387FD SIZE=35240
%SYSDIR%\drivers\mfehidk.sys [McAfee, Inc.] [SYSCORE.14.0.0.291.x86] MD5=6C9A6ED60B8FC3BAF72FE1B1D096445B SIZE=201320
%SYSDIR%\drivers\mfesmfk.sys [McAfee, Inc.] [SYSCORE.14.0.0.284.x86] MD5=299A86B780C9627AAA24E74292363ED2 SIZE=40488
%SYSDIR%\Drivers\Mpfp.sys [McAfee, Inc.] [McAfee Personal Firewall Plus] MD5=E454F42AE5524D695D76EAB5D363B8AC SIZE=113952
%SYSDIR%\msiexec.exe \V
%SYSDIR%\drivers\pfc.sys [Padus, Inc.] [Padus® ASPI Shell] MD5=6C1618A07B49E3873582B6449E744088 SIZE=21248
%SYSDIR%\DRIVERS\PS2.sys [Hewlett-Packard Company] [Hewlett-Packard Company PS2 SYS] MD5=390C204CED3785609AB24E9C52054A84 SIZE=19072
%SYSDIR%\svchost -k rpcss
%SYSDIR%\Drivers\SRTSPX.SYS [Symantec Corporation] [AutoProtect] MD5=05F2DB228922E6B8A001ED83EE4D1153 SIZE=25400
%SYSDIR%\svchost.exe -k imgsvc
%SYSDIR%\Drivers\SYMEVENT.SYS [Symantec Corporation] [SYMEVENT] MD5=403BD24FA5C55FC648ABDD039629A954 SIZE=115000
%SYSDIR%\drivers\symlcbrd.sys [Symantec Corporation] [Symantec Core Component] MD5=B226F8A4D780ACDF76145B58BB791D5B SIZE=10344
%SYSDIR%\Drivers\SYMTDI.SYS [Symantec Corporation] [Symantec Security Drivers] MD5=4A294BF8A1A11485DA5CB79216E3291B SIZE=186048
%SYSDIR%\drivers\ikfilesec.sys [PCTools Research Pty Ltd.] [Spyware Doctor] MD5=FF9F262494FC23D77A6148D49D87D2DE SIZE=40840
%SYSDIR%\drivers\iksysflt.sys [PCTools Research Pty Ltd.] [Spyware Doctor] MD5=7E359671FD9595ECB1B0A33FB4184B19 SIZE=66952
%SYSDIR%\drivers\iksyssec.sys [PCTools Research Pty Ltd.] [Spyware Doctor] MD5=A44CB3CF3AF266665261A6E6C9CAC27C SIZE=81288
%PROGRAMFILES%\SUPERAntiSpyware\SASKUTIL.sys [SUPERAdBlocker.com and SUPERAntiSpyware.com] [SUPERAntiSpyware] MD5=64C100DBF57C6CB6E7D5D24153F5E444 SIZE=55024
%PROGRAMFILES%\SUPERAntiSpyware\SASENUM.SYS [SUPERAdBlocker.com and SUPERAntiSpyware.com] [SUPERAntiSpyware] MD5=E9C2D75C748C3F0A4C34D6CF2AE1D754 SIZE=7408
%COMMONFILES%\InstallShield\UpdateService\issch.exe [InstallShield Software Corporation] [InstallShield Update Service] MD5=763DAB43BDAB27316DBF3373192823D7 SIZE=81920
%COMMONFILES%\InstallShield\UpdateService\isuspm.exe [InstallShield Software Corporation] [InstallShield Update Service] MD5=FB9E5C251CF6C37749F296BACB34A69B SIZE=221184
%SYSDIR%\MACROMED\SHOCKWAVE 10\GTAPI.DLL MD5=AE5CDA196A69F583DD356E7487AF3B49 SIZE=52288

End of Report


Remove Process:

Preparing structures
Remove Affiliate tracking cookie
Deleted File: C:\Documents and Settings\HP_Administrator\cookies\hp_administrator@clickbank[2].txt
Deleted File: C:\Documents and Settings\HP_Administrator\cookies\hp_administrator@emjcd[2].txt
Deleted File: C:\Documents and Settings\HP_Administrator\cookies\hp_administrator@tribalfusion[2].txt
Remove SPR.Tool.Hardoff.A
Deleted File: C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix\restart.exe
Remove RiskTool.Reboot.f
Deleted File: C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix\Reboot.exe
Done