[Resolved] Please help!

Hi jerryandcheri,



My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

• I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
• The fixes are specific to your problem and should only be used for the issues on this machine.
• Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
• It's often worth reading through these instructions and printing them for ease of reference.
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
• Please reply to this thread. Do not start a new topic.

Hopefully you have a thumb drive to transfer this program over to your "sick" computer. If you don't, burn it onto a CD.

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link –> http://www.bleepingcomputer.com/forums/topic114351.html
  
  
• Double click on ComboFix.exe & follow the prompts.
  
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

(If your computer is unable to access the internet, Recovery Console won't be able to install. Continue on without it.)
Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.


Notes:

1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
4. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
5. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

I have tried and tried. I cant get combofix to load. Task manager show it running in processes but I cant see it. Thank you so much for helping me.

jerryandcheri,

Well let's try this first then:

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

Then

Please download Malwarebytes' Anti-Malware to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform quick scan, then click Scan.
• When the scan is complete, click OK, then Show Results to view the results.
• Be sure that everything is checked, and click Remove Selected.
• When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
• Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot (shut down your computer then restart it).

Also "copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.

jerryandcheri,

ATF doesn't remove any malware. It just cleans temp files and such. We haven't done anything to kill the virus yet.

Please see if you can get this to run:
Download VundoFix to your desktop

• Double-click VundoFix.exe to run it.
• Click the Scan for Vundo button.
• Once it's done scanning, click the Remove Vundo button.
• You will receive a prompt asking if you want to remove the files, click YES
• Once you click yes, your desktop will go blank as it starts removing Vundo.
• When completed, it will prompt that it will reboot your computer, click OK.
• It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.

Please post the contents of C:\vundofix.txt and a new HiJackThis log in a reply to this thread.

If that doesn't work then:
OTScanIt

Download OTScanIt to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.

• Open the OTScanIt folder and double-click on OTScanIt to start the program.
  
  • In the Files Created Within group click 30 days
  • In the Files Modified Within group select 30 days
  • In the File String Search group select Non-Microsoft
• Now click the Run Scan button on the toolbar.
• When the scan is complete Notepad will open with the report file loaded in it.
• Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Please post the resulting log here.

jerryandcheri,

I see that Viewpoint is installed. Viewpoint, Viewpoint Manager, Viewpoint Media Player are Viewpoint components which are installed as a side effect of installing other software, most notably AOL and AOL Instant Messenger (AIM). Viewpoint Manager is responsible for managing and updating Viewpoint Media Player’s components. You can disable this using the Viewpoint Manager Control Panel found in the Windows Control Panel menu. By selecting Disable auto-updating for the Viewpoint Manager – the player will no longer attempt to check for updates. Anything that is installed without your consent is suspect. Read what Viewpoint says and make your own decision.

To provide a satisfying consumer experience and to operate effectively, the Viewpoint Media Player periodically sends information to servers at Viewpoint. Each installation of the Viewpoint Media Player is identifiable to Viewpoint via a Customer Unique Identifier (CUID), an alphanumeric identifier embedded in the Viewpoint Media Player. The Viewpoint Media Player randomly generates the CUID during installation and uses it to indicate a unique installation of the product. A CUID is never connected to a user's name, email address, or other personal contact information. CUIDs are used for the sole purpose of filtering redundant information. Each of these information exchanges occurs anonymously.

Viewpoint Manager is considered as foistware instead of malware since it is often installed without user's approval but doesn't spy or do anything "bad". This may change, read Viewpoint to Plunge Into Adware
It is STRONGLY recommended that you remove the Viewpoint products; however, decide for yourself. To uninstall the Viewpoint components (Viewpoint, Viewpoint Manager, Viewpoint Media Player):

• Click Start, then Settings, then click Control Panel.
• In Control Panel, double-click Add or Remove Programs.
• In Add or Remove Programs, Remove the Viewpoint component
• Do the same for each Viewpoint component.

While you're in Add/remove programs, please uninstall any reference to Mywebsearch.

Please either print out these instructions for reference or copy/paste them in notepad and save to your desktop for access when in safe mode

Make all files and folders visible
Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Clear "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Clear "Hide protected operating system files."
Click Apply, and then click OK.

We must disable certain protection programs that may interfere with our fix:
http://forums.whatthetech.com/How_to_Disab…ams_t89859.html

• Please open HijackThis and run Do a system scan only
• Check the boxes next to ONLY the entries listed below(if present):
  
  • R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    O4 - HKLM\..\Run: [nvxutfwjvjjmkomh] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\system32\lzeqvqcjotggzqm.dll"
    O4 - HKCU\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"
    O4 - HKCU\..\Run: [gadcom] "C:\Documents and Settings\Cheri\Application
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
    O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner -
• Close all programs except for HijackThis.
• Click on Fix checked
• A box will pop up asking you if you wish to fix the selected items. Please choose YES.
• Once it has fixed them, please exit/close HijackThis.

We Now Need To Boot Into Safemode

Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine,
amount of memory, hard drives installed etc (BOOT SCREEEN).
At this point you should gently tap the F8 key repeatedly until you are presented with a Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode.

Using Windows Explorer (Windows Key + E), locate the following files/folders, and DELETE them (if still present):
C:\WINDOWS\system32\lzeqvqcjotggzqm.dll <–This file
C:\WINDOWS\system32\prunnet.exe <–This file
C:\Documents and Settings\Cheri\ApplicationData\gadcom\gadcom.exe <–This file
C:\Program Files\MyWebSearch <–This folder

Don't be concerned if you don't find these folders. It just means that it was already removed in a previous step.

Restart your computer normally.

Please open Notepad. Click on Format at the top of the window. Make sure Word Wrap is unchecked.

• Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
• Double click on RSIT.exe to run RSIT.
• Click Continue at the disclaimer screen.
• Once it has finished, two logs will open. Please post the contents of both log.txt (<info.txt (<

Ok I did all of the things up to Restart your computer normally. I tried and now the blue error screen is coming up. Is it possible to take my pics and stuuf that I want and put them on a thumb drive and just use my reinstall disc to reformat? Is that the best thing to do?

jerryandcheri,

Is it possible to take my pics and stuuf that I want and put them on a thumb drive and just use my reinstall disc to reformat?

This is possible if you can boot up your computer. But if you can boot up, it would seem like some program should be able to run.

If you can boot up, maybe you can try one more.

Please download DDS and save it to your desktop.

• Disable any script blocking protection
• Double click dds.scr to run the tool.
• When done, DDS.txt will open.
• Click Yes at the next prompt for Optional Scan.
• Save both reports to your desktop.

—————————————————

• Post the contents of the DDS.txt report in your next reply
• Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and the click UPLOAD.

Is that the best thing to do?

Unfortunately if we can't get your computer to run, then we can't remove anything. Your only option then is to reformat.

It will only boot in safe mode can I do this in safe mode?

Well I did it in safe mode here are the results. DDS (Version 1.0) - NTFSx86 NETWORK Run by [removed] at 21:28:55.25 on Thu 11/27/2008 ============== Psuedo HJT Report =============== uStart Page = hxxp://www.comcast.net/a/ uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 mSearch Page = uURLSearchHooks: {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - c:\program files\morpheusbar\srchastt\1.bin\MBSRCAS.DLL uURLSearchHooks: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll mWinlogon: SFCDisable=-99 (0xffffff9d) BHO: {02478D38-C3F9-4EFB-9B51-7695ECA05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll BHO: {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - c:\program files\morpheusbar\bar\1.bin\MORPHBAR.DLL BHO: {47388408-A0AF-4D5F-B715-FC5C9EEF2EF4} - c:\windows\system32\yayaWQIa.dll BHO: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll BHO: {5CA3D70E-1895-11CF-8E15-001234567890} - c:\windows\system32\dla\tfswshx.dll BHO: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll BHO: {73259091-9574-4ED8-A40F-7F65AFC28634} - c:\windows\system32\ljJCvTnk.dll BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.6.0_01\bin\ssv.dll BHO: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll BHO: {D73F49B1-B51B-4d32-A3B7-BD04B8342F53} - c:\program files\morpheusbar\srchastt\1.bin\MBSRCAS.DLL BHO: {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL BHO: {F5A149DC-26C1-24C2-9785-502423DE2CA3} - c:\windows\system32\lzeqvqcjotggzqm.dll TB: {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - c:\program files\canon\easy-webprint\Toolband.dll TB: {3F3714A9-89A4-46be-8AF3-D0C9D1FB03F9} - c:\program files\morpheusbar\bar\1.bin\MORPHBAR.DLL TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll TB: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll TB: {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - c:\program files\veoh networks\veohwebplayer\VeohIEToolbar.dll TB: {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll TB: {3F3714A9-89A4-46BE-8AF3-D0C9D1FB03F9} - c:\program files\morpheusbar\bar\1.bin\MORPHBAR.DLL TB: {724D43A0-0D85-11D4-9908-00400523E39A} - c:\program files\siber systems\ai roboform\roboform.dll TB: {F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL uRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startup uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [ccleaner] "c:\program files\ccleaner\ccleaner.exe" /AUTO uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 uRun: [Advanced SystemCare 3] "c:\program files\iobit\advanced systemcare 3\AWC.exe" /startup uRun: [VeohPlugin] "c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" uRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe" uRun: [prunnet] "c:\windows\system32\prunnet.exe" mRun: [Microsoft Works Update Detection] c:\program files\common files\microsoft shared\works shared\WkUFind.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot mRun: [OpwareSE2] "c:\program files\scansoft\omnipagese2.0\OpwareSE2.exe" mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_07\bin\jusched.exe" mRun: [mcagent_exe] c:\program files\mcafee.com\agent\mcagent.exe /runkey mRun: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe" mRun: [dla] c:\windows\system32\dla\tfswctrl.exe mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide mRun: [UpdateManager] "c:\program files\common files\sonic\update manager\sgtray.exe" /r mRun: [SM1BG] c:\windows\SM1BG.EXE mRun: [PCMService] "c:\program files\dell\media experience\PCMService.exe" mRun: [mmtask] c:\program files\musicmatch\musicmatch jukebox\mmtask.exe mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [DVDSentry] c:\windows\system32\DSentry.exe mRun: [BCMSMMSG] BCMSMMSG.exe dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t dRun: [Picasa Media Detector] c:\program files\picasa2\PicasaMediaDetector.exe dRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe" dRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil9f.exe mPolicies-system: DisableTaskMgr = 0 (0x0) IE: Customize Menu - file://c:\program files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html IE: Easy-WebPrint Add To Print List - c:\program files\canon\easy-webprint\Resource.dll/RC_AddToList.html IE: Easy-WebPrint High Speed Print - c:\program files\canon\easy-webprint\Resource.dll/RC_HSPrint.html IE: Easy-WebPrint Preview - c:\program files\canon\easy-webprint\Resource.dll/RC_Preview.html IE: Easy-WebPrint Print - c:\program files\canon\easy-webprint\Resource.dll/RC_Print.html IE: Fill Forms - file://c:\program files\siber systems\ai roboform\RoboFormComFillForms.html IE: RoboForm Toolbar - file://c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html IE: Save Forms - file://c:\program files\siber systems\ai roboform\RoboFormComSavePass.html IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL Notify: igfxcui - igfxsrvc.dll Notify: ljJCvTnk - ljJCvTnk.dll Notify: PremierOpinion - c:\program files\premieropinion\pmls.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - c:\progra~1\window~4\MpShHook.dll SEH: {73259091-9574-4ED8-A40F-7F65AFC28634} - c:\windows\system32\ljJCvTnk.dll LSA: Authentication Packages = msv1_0 c:\windows\system32\yayaWQIa ============= SERVICES / DRIVERS =============== =============== Created Last 30 ================ 2008-11-27 15:00 54,156 a—h— c:\windows\QTFont.qfn 2008-11-27 15:00 1,409 a——- c:\windows\QTFont.for 2008-11-27 13:11 –d—– C:\fb1a564d7cd3e5bb0b021ca7 2008-11-26 14:01 –d—– C:\VundoFix Backups 2008-11-25 12:23 –d—– C:\New Folder 2008-11-24 16:32 –d—– c:\docume~1\cheri\applic~1\GoodSync 2008-11-24 00:21 860,259 a–sh— c:\windows\system32\aIQWayay.ini 2008-11-24 00:21 860,021 a–sh— c:\windows\system32\aIQWayay.ini2 2008-11-24 00:21 860 a——- c:\windows\system32\winpfz33.sys 2008-11-24 00:17 21 a——- c:\windows\system32\zxdnt3d.cfg 2008-11-24 00:17 –dsh— c:\windows\Q2hlcmk 2008-11-24 00:17 –d—– c:\temp\tn3 2008-11-24 00:16 160 a——- c:\windows\system32\msnav32.ax 2008-11-24 00:16 –d—– c:\temp\FT62 2008-11-24 00:16 167,976 a——- c:\windows\system32\drivers\core.cache.dsk 2008-11-24 00:16 86,272 a——- c:\windows\system32\drivers\wdmaudd.sys 2008-11-24 00:16 –d—– c:\temp\1cb 2008-11-24 00:16 –d—– c:\windows\system32\x4 2008-11-24 00:16 –d—– c:\windows\system32\mp 2008-11-24 00:16 –d—– c:\windows\system32\ID2 2008-11-24 00:16 –d—– c:\windows\system32\gp2 2008-11-24 00:16 –d—– c:\windows\system32\dim 2008-11-24 00:16 29,184 a——- c:\windows\system32\MSINET.oca 2008-11-24 00:16 2,407 a——- c:\windows\system32\MSINET.DEP 2008-11-24 00:13 –d—– c:\docume~1\cheri\applic~1\IUpd721 2008-11-24 00:08 –d—– c:\docume~1\cheri\applic~1\NI.GSCNS 2008-11-23 21:44 –d—– c:\program files\PremierOpinion 2008-11-23 21:43 88,372 a——- c:\windows\system32\znlenobnnmo.dll-uninst.exe 2008-11-23 21:43 47,584 a——- c:\windows\system32\uftackihuglvuy.exe 2008-11-21 09:04 –d—– c:\program files\FrostWire 2008-11-21 09:04 –d—– c:\program files\AskSBar 2008-11-21 08:25 197,976 a—-r– c:\windows\system32\cpnprt2.cid 2008-11-19 17:23 547 a——- c:\windows\system32\ff_vfw.dll.manifest 2008-11-19 17:23 7,680 a——- c:\windows\system32\ff_vfw.dll 2008-11-19 17:23 60,273 a——- c:\windows\system32\pthreadGC2.dll 2008-11-19 17:23 –d—– c:\program files\ffdshow 2008-11-19 14:47 –d—– c:\program files\Veoh Networks 2008-11-17 20:41 –d—– c:\docume~1\cheri\applic~1\IObit 2008-11-17 10:35 –d—– c:\program files\Unity 2008-11-12 01:38 455,296 ——– c:\windows\system32\dllcache\mrxsmb.sys 2008-11-12 01:38 1,106,944 ——– c:\windows\system32\dllcache\msxml3.dll ==================== Find3M ==================== 2008-11-24 16:32 –d—– c:\program files\Siber Systems 2008-11-23 21:58 –d—– c:\program files\Morpheus 2008-11-23 21:57 –d—– c:\docume~1\cheri\applic~1\FrostWire 2008-11-18 19:12 –d—– c:\program files\PokerStars 2008-11-17 20:41 –d—– c:\program files\IObit 2008-11-12 09:34 –d—– c:\program files\Drawing for Children 2008-11-11 21:01 –d—– c:\program files\The Hidden Object Show - Season 2 2008-11-11 20:31 –d—– c:\docume~1\alluse~1\applic~1\BigFishGamesCache 2008-11-11 08:46 –d—– c:\program files\bfgclient 2008-11-02 15:45 –d—– c:\program files\common files\AOL 2008-11-02 14:48 –d—– c:\docume~1\alluse~1\applic~1\Viewpoint 2008-10-25 16:49 –d—– c:\docume~1\cheri\applic~1\PlayFirst 2008-10-20 11:08 –d—– c:\program files\Cribbage Buddy Pogo 2008-10-20 09:34 –d—– c:\docume~1\cheri\applic~1\Skinux 2008-10-20 09:32 –d—– c:\program files\common files\Kodak 2008-10-18 21:55 –d—– c:\docume~1\alluse~1\applic~1\Gogii 2008-10-16 15:26 –d—– c:\program files\Microsoft Picture It! 10 2008-10-16 14:13 1,809,944 a——- c:\windows\system32\dllcache\wuaueng.dll 2008-10-16 14:13 202,776 a——- c:\windows\system32\dllcache\wuweb.dll 2008-10-16 14:12 323,608 a——- c:\windows\system32\dllcache\wucltui.dll 2008-10-16 14:12 561,688 a——- c:\windows\system32\dllcache\wuapi.dll 2008-10-16 14:09 92,696 a——- c:\windows\system32\dllcache\cdm.dll 2008-10-16 14:09 51,224 a——- c:\windows\system32\dllcache\wuauclt.exe 2008-10-16 14:08 34,328 a——- c:\windows\system32\dllcache\wups.dll 2008-10-15 11:34 337,408 ——– c:\windows\system32\dllcache\netapi32.dll 2008-10-14 07:25 –d—– c:\docume~1\cheri\applic~1\JoyBits 2008-10-13 20:48 –d—– c:\program files\Oberon Media 2008-10-13 20:47 –d—– c:\program files\Hasbro Interactive 2008-10-13 20:46 –d—– c:\program files\IncrediMail 2008-10-08 21:03 –d—– c:\docume~1\cheri\applic~1\Sudden Games 2008-10-08 21:00 4,096 a——- c:\windows\d3dx.dat 2008-10-06 22:40 –d—– c:\program files\Dream Day First Home 2008-10-03 12:41 6,066,176 ——– c:\windows\system32\dllcache\ieframe.dll 2008-09-30 16:43 1,286,152 a——- c:\windows\system32\msxml4.dll 2008-09-29 07:34 –d—– c:\docume~1\cheri\applic~1\Pogo Games 2008-09-22 11:26 –d—– c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy 2008-09-15 07:12 1,846,400 a——- c:\windows\system32\win32k.sys 2008-09-15 07:12 1,846,400 ——– c:\windows\system32\dllcache\win32k.sys 2008-09-14 09:25 –d—– c:\docume~1\cheri\applic~1\FunWebProducts 2008-09-12 11:14 78,587 a——- c:\windows\pchealth\helpctr\offlinecache\index.dat 2008-09-09 20:14 1,307,648 ——– c:\windows\system32\msxml6.dll 2008-09-09 20:14 1,307,648 ——– c:\windows\system32\dllcache\msxml6.dll 2008-09-08 05:41 333,824 ——– c:\windows\system32\dllcache\srv.sys 2008-09-06 23:30 –d—– c:\docume~1\cheri\applic~1\Move Networks 2008-09-04 12:15 1,106,944 a——- c:\windows\system32\msxml3.dll 2008-09-03 08:40 –d—– c:\docume~1\alluse~1\applic~1\n7-89-o9-3r-4t-r9 2008-09-03 08:39 –d—– c:\docume~1\cheri\applic~1\GameHouse 2008-08-14 00:05 –d—– c:\docume~1\alluse~1\applic~1\SDYKZQUZXG 2008-08-03 18:44 –d—– c:\docume~1\cheri\applic~1\Canon 2008-07-15 12:07 –d—– c:\docume~1\alluse~1\applic~1\BOONTY 2008-07-14 12:49 –d—– c:\docume~1\cheri\applic~1\FrameSize Options 2008-07-08 22:45 –d—– c:\docume~1\cheri\applic~1\Ludia 2008-07-08 22:45 –d—– c:\docume~1\alluse~1\applic~1\Ludia 2008-05-09 11:59 –d—– c:\docume~1\alluse~1\applic~1\Wal-Mart 2008-05-09 11:59 –d—– c:\docume~1\cheri\applic~1\Wal-Mart 2008-05-09 11:54 –d—– c:\docume~1\cheri\applic~1\Wal-Mart Digital Photo Manager 2008-03-30 09:51 –d—– c:\docume~1\alluse~1\applic~1\pdf995 2008-03-30 09:22 –d—– c:\docume~1\cheri\applic~1\pdf995 2008-03-25 21:09 –d—– c:\docume~1\alluse~1\applic~1\GDYKZQUZXG 2008-01-19 23:06 –d—– c:\docume~1\cheri\applic~1\TaxCut 2008-01-19 22:59 –d—– c:\docume~1\alluse~1\applic~1\TaxCut 2007-07-24 22:07 –d—– c:\docume~1\cheri\applic~1\MySpace 2007-06-29 12:15 –d—– c:\docume~1\alluse~1\applic~1\SSScanWizard 2007-06-29 12:15 –d—– c:\docume~1\alluse~1\applic~1\SSScanAppDataDir 2007-06-23 12:14 –d—– c:\docume~1\alluse~1\applic~1\Knowledge Adventure 2007-06-05 04:19 –d—– c:\docume~1\cheri\applic~1\RegistrySmart 2007-05-28 16:13 –d—– c:\docume~1\cheri\applic~1\Comcast 2007-05-25 23:08 –d—– c:\docume~1\cheri\applic~1\Wal-Mart Digital Photo Viewer 2007-05-18 14:57 –d—– c:\docume~1\cheri\applic~1\Printer Info Cache 2007-05-16 15:17 –d—– c:\docume~1\alluse~1\applic~1\Napster 2007-05-16 15:09 –d—– c:\docume~1\cheri\applic~1\Paltalk 2007-05-10 13:39 –d—– c:\docume~1\cheri\applic~1\Stamps.com Internet Postage 2007-05-07 08:20 –d—– c:\docume~1\cheri\applic~1\AdobeAUM 2007-04-24 22:44 –d—– c:\docume~1\cheri\applic~1\Morpheus 2007-04-24 08:29 –d—– c:\docume~1\alluse~1\applic~1\JollyBear 2007-02-25 19:09 –d—– c:\docume~1\alluse~1\applic~1\Kodak 2007-02-18 17:29 –d—– c:\docume~1\cheri\applic~1\Snapfish 2007-02-10 20:04 –d—– c:\docume~1\alluse~1\applic~1\McAfee.com 2006-08-04 18:01 –d—– c:\docume~1\cheri\applic~1\ScanSoft 2006-05-01 21:10 –d—– c:\docume~1\cheri\applic~1\Netscape 2006-01-13 10:04 –d—– c:\docume~1\cheri\applic~1\Simple Star 2006-01-03 22:56 –d—– c:\docume~1\cheri\applic~1\MSN6 2005-12-11 20:42 –d—– c:\docume~1\cheri\applic~1\CherinJerry 2005-12-02 15:45 –d—– c:\docume~1\cheri\applic~1\.gaim 2005-06-18 11:49 –d—– c:\docume~1\cheri\applic~1\Jasc Software Inc 2005-06-15 15:32 –d—– c:\docume~1\cheri\applic~1\AOL 2005-06-06 19:16 –d—– c:\docume~1\cheri\applic~1\FFDesigner 2005-06-04 08:14 –d—– c:\docume~1\cheri\applic~1\FotoFinish 2005-06-04 08:03 –d—– c:\docume~1\cheri\applic~1\SmartDraw 2005-05-21 05:57 –d—– c:\docume~1\cheri\applic~1\Jasc 2005-05-13 08:43 –d—– c:\docume~1\cheri\applic~1\Webroot 2005-05-11 19:16 –d—– c:\docume~1\alluse~1\applic~1\Avery 2005-04-17 17:53 –d—– c:\docume~1\alluse~1\applic~1\GameHouse 2005-04-09 17:26 –d—– c:\docume~1\alluse~1\applic~1\Trymedia 2005-03-15 07:41 –d—– c:\docume~1\cheri\applic~1\MSNInstaller 2005-02-25 19:25 –d—– c:\docume~1\cheri\applic~1\MyPublisher 2005-02-08 19:36 –d—– c:\docume~1\cheri\applic~1\Digital Album Organizer 2004-11-19 08:53 –d—– c:\docume~1\cheri\applic~1\McAfee.com 2004-07-15 02:00 –d—– c:\docume~1\cheri\applic~1\EA 2004-07-15 02:00:09 –D—– - c:\docume~1\alluse~1\applic~1\EA 2007-04-18 09:00 56 —shr– c:\windows\system32\5FAB9FD8E1.sys 2007-04-18 09:01 3,350 ac-sh— c:\windows\system32\KGyGaAvL.sys ============= FINISH: 21:30:12.60 =============== ==== Installed Programs ====================== 3D Groove Playback Engine 3DVIA Player 4.1 Adobe Flash Player ActiveX Adobe Reader 7.0.5 Language Support Adobe Reader 7.0.9 Adobe Shockwave Player 11 Adobe® Photoshop® Album Starter Edition 3.0 Adobe® Photoshop® Album Starter Edition 3.0.1 Advanced SystemCare 3 After Dark Games AI RoboForm (All Users) AltoMP3 Gold 5.10 AmysGames Apple Mobile Device Support Apple Software Update ArcSoft PhotoStudio 5.5 Arthur's Premium CD Ask Toolbar Banctec Service Agreement Baseball Desktop Theme BCM V.92 56K Modem Big Action Garage Big Fish Games Client Broadcom Management Programs BufferChm Canon MP Navigator 2.0 Canon MP150 Canon Utilities Easy-PhotoPrint Caribbean Mah Jong CCleaner (remove only) CCScore ClipShack Uploader Clue Comcast High-Speed Internet Install Wizard Comcast PhotoShow Deluxe 4 Coupon Printer for Windows CreataCard Plus 3 Create and Print Greeting Cards 1.0 CreativeProjects CreativeProjectsTemplates Cribbage Buddy - Pogo Version 1.4 CueTour Cypress USB Mass Storage Driver Installation DeductionPro 2007 Deer Avenger 2 Dell Digital Jukebox Driver Dell Media Experience Dell Networking Guide Dell ResourceCD Dell Solution Center Dell Support Center (Support Software) DellSupport DesignPro 5.0 Limited Edition Director DirectX Media Runtime 5.1 Disney's Winnie the Pooh Preschool Drawing for Children Drawing for Children 2.2 Dream Day First Home DS21Patch DVDSentry easterbaby.zip Easy-WebPrint Easy Photo Backup 1.53 EmpirePoker eMusic Download Manager ERUNT 1.1j ESPN Java Check ESSBrwr ESSCDBK ESScore ESSgui ESSini ESSPCD ESSPDock ESSSONIC ESSTOOLS essvatgt Eye Candy 3 Eye Candy 4000 Demo FaxDrive FaxTools ffdshow [rev 2033] [2008-07-05] FrameSize Garfield - Grade1_Reading Vol1 glowtulip.exe GoodSync Google Desktop Google Earth GTK+ Runtime 2.4.7 rev a (remove only) Help and Support Customization HijackThis 2.0.2 Hotfix for Windows Internet Explorer 7 (KB947864) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB952287) Hoyle Board Games 2003 Hoyle Card Games 3 HP Image Zone 4.0 HP Memories Disc HPSystemDiagnostics I SPY Spooky Mansion IconPackager ilo Digital Audio Player InstantShare Intel® Extreme Graphics Driver InterActual Player Internet Explorer Default Page IrfanView (remove only) iTunes IZArc 3.81 J2SE Runtime Environment 5.0 Update 11 Jasc Animation Shop 3 Jasc Animation Shop 3 20041030_07 Help file Patch Jasc Paint Shop Photo Album Jasc Paint Shop Photo Album 5 Jasc Paint Shop Pro 8 Dell Edition Jasc Paint Shop Pro 9 Jasc Paint Shop Pro 9 GDI+ Patch Jasc Paint Shop Pro 9.01 - (9.0.1.1) Jasc Paint Shop Pro 9.01 Patch Jasc Paint Shop Pro Studio Jasc Paint Shop Pro Studio Additional Content Jasc Paint Shop Pro Studio.01 - (1.0.1.1) Java 2 Runtime Environment, SE v1.4.2 Java™ 6 Update 2 Java™ 6 Update 3 Java™ 6 Update 5 Java™ 6 Update 7 Java™ SE Runtime Environment 6 Update 1 Jeopardy! 2003 JS World Kindergarten JSWorldKGMain JSWPFCom JSWPFGradeK JumpStart Toddlers 2000 kgcbase KODAK EASYSHARE Gallery Upload ActiveX Control Kodak EasyShare software Learn2 Player (Uninstall Only) Leaves Screensaver Math Blaster Ages 6-9 MathPlayer McAfee SecurityCenter Memorex exPressit Label Design Studio Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Service Pack 1 Microsoft Digital Image Library 9 - Blocker Microsoft Encarta Encyclopedia Standard 2003 Microsoft Money 2003 Microsoft Money 2003 System Pack Microsoft Office Excel Viewer 2003 Microsoft Office Word Viewer 2003 Microsoft Picture It! Library 10 Microsoft Picture It! Photo 7.0 Microsoft Picture It! Premium 10 Microsoft Silverlight Microsoft Streets and Trips 2002 Microsoft Word 2002 Microsoft Works 2003 Setup Launcher Microsoft Works 7.0 Microsoft Works Suite Add-in for Microsoft Word Modem Helper Monopoly Junior Morpheus 5.3 (remove only) Morpheus Toolbar Move Networks Media Player for Internet Explorer Mozilla Firefox (2.0.0.18) MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MUSICMATCH® Jukebox My Wal-Mart Digital Photo Center netbrdg OfotoXMI OmniPage SE 2.0 Optiquest Monitor Drivers Paradise Poker Pdf995 (installed by TaxCut) PdfEdit995 (installed by TaxCut) Pegasus Imaging's ImagXpress 7.0 Photodex Presenter PhotoGallery Picasa 2 PIXresizer 1.0.8 PokerStars Power Wheels Off-Road Adventure PowerDVD QFolder QuickProjects QuickTime Reader Rabbit's 1st Grade Reader Rabbit Kindergarten RealOne Player Rhapsody Player Engine Ringling Bros. - Frankie Goes to the Circus RON Tool Cpmsky Safari Sarah's Mostly Harmless Key Banger 1.0 Search Assistant Mysidesearch Security Update for Windows Internet Explorer 7 (KB928090) Security Update for Windows Internet Explorer 7 (KB929969) Security Update for Windows Internet Explorer 7 (KB931768) Security Update for Windows Internet Explorer 7 (KB933566) Security Update for Windows Internet Explorer 7 (KB937143) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Internet Explorer 7 (KB956390) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954459) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958644) SFR SFR2 ShareIns SHASTA Shockwave Sierra Utilities Siren Digital Audio Player skin0001 SkinsHP1 SKINXSDK Snowflakes Screensaver Sonic DLA Sonic RecordNow! Sonic Update Manager Spybot - Search & Destroy 1.4 St Pats Pot O Gold staticcr TaxCut Deluxe 2005 TaxCut Premium 2006 TaxCut Premium 2007 The Hidden Object Show: Season 2 Thomas & Friends - The Great Festival Adventure tooltips TrayApp tulipspydt.exe Unity Web Player Unload Update for Windows XP (KB951072-v2) Update for Windows XP (KB951978) USB MassStorage CardReader USB Storage Adapter FX (SM1) Valentines Pooh Desktop Theme Veoh Web Player Beta ViewSonic Windows XP Signed Files VPRINTOL Wal-Mart Digital Photo Manager WebCyberCoach 3.2 Dell WebFldrs XP WebReg Winamp Windows Defender Windows Defender Signatures Windows Genuine Advantage Notifications (KB905474) Windows Genuine Advantage v1.3.0254.0 Windows Internet Explorer 7 Windows Live OneCare safety scanner Windows Media Format 11 runtime Windows Media Player 11 Windows XP Service Pack 3 WIRELESS Wise Disk Cleaner 2.3 Wise Registry Cleaner 2.9.2 Works Suite OS Pack Yahoo! Install Manager Yahoo! Toolbar Yahtzee ==== Event Viewer Messages =================== ==== End Of File ===========================

jerryandcheri,

Please open Notepad. Click on Format at the top of the window. Make sure Word Wrap is unchecked.

Please repost the information with Word Wrap off.

==== Installed Programs ====================== 3D Groove Playback Engine 3DVIA Player 4.1 Adobe Flash Player ActiveX Adobe Reader 7.0.5 Language Support Adobe Reader 7.0.9 Adobe Shockwave Player 11 Adobe® Photoshop® Album Starter Edition 3.0 Adobe® Photoshop® Album Starter Edition 3.0.1 Advanced SystemCare 3 After Dark Games AI RoboForm (All Users) AltoMP3 Gold 5.10 AmysGames Apple Mobile Device Support Apple Software Update ArcSoft PhotoStudio 5.5 Arthur's Premium CD Ask Toolbar Banctec Service Agreement Baseball Desktop Theme BCM V.92 56K Modem Big Action Garage Big Fish Games Client Broadcom Management Programs BufferChm Canon MP Navigator 2.0 Canon MP150 Canon Utilities Easy-PhotoPrint Caribbean Mah Jong CCleaner (remove only) CCScore ClipShack Uploader Clue Comcast High-Speed Internet Install Wizard Comcast PhotoShow Deluxe 4 Coupon Printer for Windows CreataCard Plus 3 Create and Print Greeting Cards 1.0 CreativeProjects CreativeProjectsTemplates Cribbage Buddy - Pogo Version 1.4 CueTour Cypress USB Mass Storage Driver Installation DeductionPro 2007 Deer Avenger 2 Dell Digital Jukebox Driver Dell Media Experience Dell Networking Guide Dell ResourceCD Dell Solution Center Dell Support Center (Support Software) DellSupport DesignPro 5.0 Limited Edition Director DirectX Media Runtime 5.1 Disney's Winnie the Pooh Preschool Drawing for Children Drawing for Children 2.2 Dream Day First Home DS21Patch DVDSentry easterbaby.zip Easy-WebPrint Easy Photo Backup 1.53 EmpirePoker eMusic Download Manager ERUNT 1.1j ESPN Java Check ESSBrwr ESSCDBK ESScore ESSgui ESSini ESSPCD ESSPDock ESSSONIC ESSTOOLS essvatgt Eye Candy 3 Eye Candy 4000 Demo FaxDrive FaxTools ffdshow [rev 2033] [2008-07-05] FrameSize Garfield - Grade1_Reading Vol1 glowtulip.exe GoodSync Google Desktop Google Earth GTK+ Runtime 2.4.7 rev a (remove only) Help and Support Customization HijackThis 2.0.2 Hotfix for Windows Internet Explorer 7 (KB947864) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB952287) Hoyle Board Games 2003 Hoyle Card Games 3 HP Image Zone 4.0 HP Memories Disc HPSystemDiagnostics I SPY Spooky Mansion IconPackager ilo Digital Audio Player InstantShare Intel® Extreme Graphics Driver InterActual Player Internet Explorer Default Page IrfanView (remove only) iTunes IZArc 3.81 J2SE Runtime Environment 5.0 Update 11 Jasc Animation Shop 3 Jasc Animation Shop 3 20041030_07 Help file Patch Jasc Paint Shop Photo Album Jasc Paint Shop Photo Album 5 Jasc Paint Shop Pro 8 Dell Edition Jasc Paint Shop Pro 9 Jasc Paint Shop Pro 9 GDI+ Patch Jasc Paint Shop Pro 9.01 - (9.0.1.1) Jasc Paint Shop Pro 9.01 Patch Jasc Paint Shop Pro Studio Jasc Paint Shop Pro Studio Additional Content Jasc Paint Shop Pro Studio.01 - (1.0.1.1) Java 2 Runtime Environment, SE v1.4.2 Java™ 6 Update 2 Java™ 6 Update 3 Java™ 6 Update 5 Java™ 6 Update 7 Java™ SE Runtime Environment 6 Update 1 Jeopardy! 2003 JS World Kindergarten JSWorldKGMain JSWPFCom JSWPFGradeK JumpStart Toddlers 2000 kgcbase KODAK EASYSHARE Gallery Upload ActiveX Control Kodak EasyShare software Learn2 Player (Uninstall Only) Leaves Screensaver Math Blaster Ages 6-9 MathPlayer McAfee SecurityCenter Memorex exPressit Label Design Studio Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Service Pack 1 Microsoft Digital Image Library 9 - Blocker Microsoft Encarta Encyclopedia Standard 2003 Microsoft Money 2003 Microsoft Money 2003 System Pack Microsoft Office Excel Viewer 2003 Microsoft Office Word Viewer 2003 Microsoft Picture It! Library 10 Microsoft Picture It! Photo 7.0 Microsoft Picture It! Premium 10 Microsoft Silverlight Microsoft Streets and Trips 2002 Microsoft Word 2002 Microsoft Works 2003 Setup Launcher Microsoft Works 7.0 Microsoft Works Suite Add-in for Microsoft Word Modem Helper Monopoly Junior Morpheus 5.3 (remove only) Morpheus Toolbar Move Networks Media Player for Internet Explorer Mozilla Firefox (2.0.0.18) MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MUSICMATCH® Jukebox My Wal-Mart Digital Photo Center netbrdg OfotoXMI OmniPage SE 2.0 Optiquest Monitor Drivers Paradise Poker Pdf995 (installed by TaxCut) PdfEdit995 (installed by TaxCut) Pegasus Imaging's ImagXpress 7.0 Photodex Presenter PhotoGallery Picasa 2 PIXresizer 1.0.8 PokerStars Power Wheels Off-Road Adventure PowerDVD QFolder QuickProjects QuickTime Reader Rabbit's 1st Grade Reader Rabbit Kindergarten RealOne Player Rhapsody Player Engine Ringling Bros. - Frankie Goes to the Circus RON Tool Cpmsky Safari Sarah's Mostly Harmless Key Banger 1.0 Search Assistant Mysidesearch Security Update for Windows Internet Explorer 7 (KB928090) Security Update for Windows Internet Explorer 7 (KB929969) Security Update for Windows Internet Explorer 7 (KB931768) Security Update for Windows Internet Explorer 7 (KB933566) Security Update for Windows Internet Explorer 7 (KB937143) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Internet Explorer 7 (KB956390) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954459) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958644) SFR SFR2 ShareIns SHASTA Shockwave Sierra Utilities Siren Digital Audio Player skin0001 SkinsHP1 SKINXSDK Snowflakes Screensaver Sonic DLA Sonic RecordNow! Sonic Update Manager Spybot - Search & Destroy 1.4 St Pats Pot O Gold staticcr TaxCut Deluxe 2005 TaxCut Premium 2006 TaxCut Premium 2007 The Hidden Object Show: Season 2 Thomas & Friends - The Great Festival Adventure tooltips TrayApp tulipspydt.exe Unity Web Player Unload Update for Windows XP (KB951072-v2) Update for Windows XP (KB951978) USB MassStorage CardReader USB Storage Adapter FX (SM1) Valentines Pooh Desktop Theme Veoh Web Player Beta ViewSonic Windows XP Signed Files VPRINTOL Wal-Mart Digital Photo Manager WebCyberCoach 3.2 Dell WebFldrs XP WebReg Winamp Windows Defender Windows Defender Signatures Windows Genuine Advantage Notifications (KB905474) Windows Genuine Advantage v1.3.0254.0 Windows Internet Explorer 7 Windows Live OneCare safety scanner Windows Media Format 11 runtime Windows Media Player 11 Windows XP Service Pack 3 WIRELESS Wise Disk Cleaner 2.3 Wise Registry Cleaner 2.9.2 Works Suite OS Pack Yahoo! Install Manager Yahoo! Toolbar Yahtzee ==== Event Viewer Messages =================== ==== End Of File =========================== DDS (Version 1.0) - NTFSx86 NETWORK Run by [removed] at 21:54:38.56 on Thu 11/27/2008 ============== Psuedo HJT Report =============== uStart Page = hxxp://www.comcast.net/a/ uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 mSearch Page = uURLSearchHooks: {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - c:\program files\morpheusbar\srchastt\1.bin\MBSRCAS.DLL uURLSearchHooks: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll mWinlogon: SFCDisable=-99 (0xffffff9d) BHO: {02478D38-C3F9-4EFB-9B51-7695ECA05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll BHO: {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - c:\program files\morpheusbar\bar\1.bin\MORPHBAR.DLL BHO: {47388408-A0AF-4D5F-B715-FC5C9EEF2EF4} - c:\windows\system32\yayaWQIa.dll BHO: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll BHO: {5CA3D70E-1895-11CF-8E15-001234567890} - c:\windows\system32\dla\tfswshx.dll BHO: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll BHO: {73259091-9574-4ED8-A40F-7F65AFC28634} - c:\windows\system32\ljJCvTnk.dll BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.6.0_01\bin\ssv.dll BHO: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll BHO: {D73F49B1-B51B-4d32-A3B7-BD04B8342F53} - c:\program files\morpheusbar\srchastt\1.bin\MBSRCAS.DLL BHO: {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL BHO: {F5A149DC-26C1-24C2-9785-502423DE2CA3} - c:\windows\system32\lzeqvqcjotggzqm.dll TB: {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - c:\program files\canon\easy-webprint\Toolband.dll TB: {3F3714A9-89A4-46be-8AF3-D0C9D1FB03F9} - c:\program files\morpheusbar\bar\1.bin\MORPHBAR.DLL TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll TB: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll TB: {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - c:\program files\veoh networks\veohwebplayer\VeohIEToolbar.dll TB: {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll TB: {3F3714A9-89A4-46BE-8AF3-D0C9D1FB03F9} - c:\program files\morpheusbar\bar\1.bin\MORPHBAR.DLL TB: {724D43A0-0D85-11D4-9908-00400523E39A} - c:\program files\siber systems\ai roboform\roboform.dll TB: {F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL uRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startup uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [ccleaner] "c:\program files\ccleaner\ccleaner.exe" /AUTO uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 uRun: [Advanced SystemCare 3] "c:\program files\iobit\advanced systemcare 3\AWC.exe" /startup uRun: [VeohPlugin] "c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" uRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe" uRun: [prunnet] "c:\windows\system32\prunnet.exe" mRun: [Microsoft Works Update Detection] c:\program files\common files\microsoft shared\works shared\WkUFind.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot mRun: [OpwareSE2] "c:\program files\scansoft\omnipagese2.0\OpwareSE2.exe" mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_07\bin\jusched.exe" mRun: [mcagent_exe] c:\program files\mcafee.com\agent\mcagent.exe /runkey mRun: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe" mRun: [dla] c:\windows\system32\dla\tfswctrl.exe mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide mRun: [UpdateManager] "c:\program files\common files\sonic\update manager\sgtray.exe" /r mRun: [SM1BG] c:\windows\SM1BG.EXE mRun: [PCMService] "c:\program files\dell\media experience\PCMService.exe" mRun: [mmtask] c:\program files\musicmatch\musicmatch jukebox\mmtask.exe mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [DVDSentry] c:\windows\system32\DSentry.exe mRun: [BCMSMMSG] BCMSMMSG.exe dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t dRun: [Picasa Media Detector] c:\program files\picasa2\PicasaMediaDetector.exe dRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe" dRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil9f.exe mPolicies-system: DisableTaskMgr = 0 (0x0) IE: Customize Menu - file://c:\program files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html IE: Easy-WebPrint Add To Print List - c:\program files\canon\easy-webprint\Resource.dll/RC_AddToList.html IE: Easy-WebPrint High Speed Print - c:\program files\canon\easy-webprint\Resource.dll/RC_HSPrint.html IE: Easy-WebPrint Preview - c:\program files\canon\easy-webprint\Resource.dll/RC_Preview.html IE: Easy-WebPrint Print - c:\program files\canon\easy-webprint\Resource.dll/RC_Print.html IE: Fill Forms - file://c:\program files\siber systems\ai roboform\RoboFormComFillForms.html IE: RoboForm Toolbar - file://c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html IE: Save Forms - file://c:\program files\siber systems\ai roboform\RoboFormComSavePass.html IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL Notify: igfxcui - igfxsrvc.dll Notify: ljJCvTnk - ljJCvTnk.dll Notify: PremierOpinion - c:\program files\premieropinion\pmls.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - c:\progra~1\window~4\MpShHook.dll SEH: {73259091-9574-4ED8-A40F-7F65AFC28634} - c:\windows\system32\ljJCvTnk.dll LSA: Authentication Packages = msv1_0 c:\windows\system32\yayaWQIa ============= SERVICES / DRIVERS =============== =============== Created Last 30 ================ 2008-11-27 15:00 54,156 a—h— c:\windows\QTFont.qfn 2008-11-27 15:00 1,409 a——- c:\windows\QTFont.for 2008-11-27 13:11 –d—– C:\fb1a564d7cd3e5bb0b021ca7 2008-11-26 14:01 –d—– C:\VundoFix Backups 2008-11-25 12:23 –d—– C:\New Folder 2008-11-24 16:32 –d—– c:\docume~1\cheri\applic~1\GoodSync 2008-11-24 00:21 860,259 a–sh— c:\windows\system32\aIQWayay.ini 2008-11-24 00:21 860,021 a–sh— c:\windows\system32\aIQWayay.ini2 2008-11-24 00:21 860 a——- c:\windows\system32\winpfz33.sys 2008-11-24 00:17 21 a——- c:\windows\system32\zxdnt3d.cfg 2008-11-24 00:17 –dsh— c:\windows\Q2hlcmk 2008-11-24 00:17 –d—– c:\temp\tn3 2008-11-24 00:16 160 a——- c:\windows\system32\msnav32.ax 2008-11-24 00:16 –d—– c:\temp\FT62 2008-11-24 00:16 167,976 a——- c:\windows\system32\drivers\core.cache.dsk 2008-11-24 00:16 86,272 a——- c:\windows\system32\drivers\wdmaudd.sys 2008-11-24 00:16 –d—– c:\temp\1cb 2008-11-24 00:16 –d—– c:\windows\system32\x4 2008-11-24 00:16 –d—– c:\windows\system32\mp 2008-11-24 00:16 –d—– c:\windows\system32\ID2 2008-11-24 00:16 –d—– c:\windows\system32\gp2 2008-11-24 00:16 –d—– c:\windows\system32\dim 2008-11-24 00:16 29,184 a——- c:\windows\system32\MSINET.oca 2008-11-24 00:16 2,407 a——- c:\windows\system32\MSINET.DEP 2008-11-24 00:13 –d—– c:\docume~1\cheri\applic~1\IUpd721 2008-11-24 00:08 –d—– c:\docume~1\cheri\applic~1\NI.GSCNS 2008-11-23 21:44 –d—– c:\program files\PremierOpinion 2008-11-23 21:43 88,372 a——- c:\windows\system32\znlenobnnmo.dll-uninst.exe 2008-11-23 21:43 47,584 a——- c:\windows\system32\uftackihuglvuy.exe 2008-11-21 09:04 –d—– c:\program files\FrostWire 2008-11-21 09:04 –d—– c:\program files\AskSBar 2008-11-21 08:25 197,976 a—-r– c:\windows\system32\cpnprt2.cid 2008-11-19 17:23 547 a——- c:\windows\system32\ff_vfw.dll.manifest 2008-11-19 17:23 7,680 a——- c:\windows\system32\ff_vfw.dll 2008-11-19 17:23 60,273 a——- c:\windows\system32\pthreadGC2.dll 2008-11-19 17:23 –d—– c:\program files\ffdshow 2008-11-19 14:47 –d—– c:\program files\Veoh Networks 2008-11-17 20:41 –d—– c:\docume~1\cheri\applic~1\IObit 2008-11-17 10:35 –d—– c:\program files\Unity 2008-11-12 01:38 455,296 ——– c:\windows\system32\dllcache\mrxsmb.sys 2008-11-12 01:38 1,106,944 ——– c:\windows\system32\dllcache\msxml3.dll ==================== Find3M ==================== 2008-11-24 16:32 –d—– c:\program files\Siber Systems 2008-11-23 21:58 –d—– c:\program files\Morpheus 2008-11-23 21:57 –d—– c:\docume~1\cheri\applic~1\FrostWire 2008-11-18 19:12 –d—– c:\program files\PokerStars 2008-11-17 20:41 –d—– c:\program files\IObit 2008-11-12 09:34 –d—– c:\program files\Drawing for Children 2008-11-11 21:01 –d—– c:\program files\The Hidden Object Show - Season 2 2008-11-11 20:31 –d—– c:\docume~1\alluse~1\applic~1\BigFishGamesCache 2008-11-11 08:46 –d—– c:\program files\bfgclient 2008-11-02 15:45 –d—– c:\program files\common files\AOL 2008-11-02 14:48 –d—– c:\docume~1\alluse~1\applic~1\Viewpoint 2008-10-25 16:49 –d—– c:\docume~1\cheri\applic~1\PlayFirst 2008-10-20 11:08 –d—– c:\program files\Cribbage Buddy Pogo 2008-10-20 09:34 –d—– c:\docume~1\cheri\applic~1\Skinux 2008-10-20 09:32 –d—– c:\program files\common files\Kodak 2008-10-18 21:55 –d—– c:\docume~1\alluse~1\applic~1\Gogii 2008-10-16 15:26 –d—– c:\program files\Microsoft Picture It! 10 2008-10-16 14:13 1,809,944 a——- c:\windows\system32\dllcache\wuaueng.dll 2008-10-16 14:13 202,776 a——- c:\windows\system32\dllcache\wuweb.dll 2008-10-16 14:12 323,608 a——- c:\windows\system32\dllcache\wucltui.dll 2008-10-16 14:12 561,688 a——- c:\windows\system32\dllcache\wuapi.dll 2008-10-16 14:09 92,696 a——- c:\windows\system32\dllcache\cdm.dll 2008-10-16 14:09 51,224 a——- c:\windows\system32\dllcache\wuauclt.exe 2008-10-16 14:08 34,328 a——- c:\windows\system32\dllcache\wups.dll 2008-10-15 11:34 337,408 ——– c:\windows\system32\dllcache\netapi32.dll 2008-10-14 07:25 –d—– c:\docume~1\cheri\applic~1\JoyBits 2008-10-13 20:48 –d—– c:\program files\Oberon Media 2008-10-13 20:47 –d—– c:\program files\Hasbro Interactive 2008-10-13 20:46 –d—– c:\program files\IncrediMail 2008-10-08 21:03 –d—– c:\docume~1\cheri\applic~1\Sudden Games 2008-10-08 21:00 4,096 a——- c:\windows\d3dx.dat 2008-10-06 22:40 –d—– c:\program files\Dream Day First Home 2008-10-03 12:41 6,066,176 ——– c:\windows\system32\dllcache\ieframe.dll 2008-09-30 16:43 1,286,152 a——- c:\windows\system32\msxml4.dll 2008-09-29 07:34 –d—– c:\docume~1\cheri\applic~1\Pogo Games 2008-09-22 11:26 –d—– c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy 2008-09-15 07:12 1,846,400 a——- c:\windows\system32\win32k.sys 2008-09-15 07:12 1,846,400 ——– c:\windows\system32\dllcache\win32k.sys 2008-09-14 09:25 –d—– c:\docume~1\cheri\applic~1\FunWebProducts 2008-09-12 11:14 78,587 a——- c:\windows\pchealth\helpctr\offlinecache\index.dat 2008-09-09 20:14 1,307,648 ——– c:\windows\system32\msxml6.dll 2008-09-09 20:14 1,307,648 ——– c:\windows\system32\dllcache\msxml6.dll 2008-09-08 05:41 333,824 ——– c:\windows\system32\dllcache\srv.sys 2008-09-06 23:30 –d—– c:\docume~1\cheri\applic~1\Move Networks 2008-09-04 12:15 1,106,944 a——- c:\windows\system32\msxml3.dll 2008-09-03 08:40 –d—– c:\docume~1\alluse~1\applic~1\n7-89-o9-3r-4t-r9 2008-09-03 08:39 –d—– c:\docume~1\cheri\applic~1\GameHouse 2008-08-14 00:05 –d—– c:\docume~1\alluse~1\applic~1\SDYKZQUZXG 2008-08-03 18:44 –d—– c:\docume~1\cheri\applic~1\Canon 2008-07-15 12:07 –d—– c:\docume~1\alluse~1\applic~1\BOONTY 2008-07-14 12:49 –d—– c:\docume~1\cheri\applic~1\FrameSize Options 2008-07-08 22:45 –d—– c:\docume~1\cheri\applic~1\Ludia 2008-07-08 22:45 –d—– c:\docume~1\alluse~1\applic~1\Ludia 2008-05-09 11:59 –d—– c:\docume~1\alluse~1\applic~1\Wal-Mart 2008-05-09 11:59 –d—– c:\docume~1\cheri\applic~1\Wal-Mart 2008-05-09 11:54 –d—– c:\docume~1\cheri\applic~1\Wal-Mart Digital Photo Manager 2008-03-30 09:51 –d—– c:\docume~1\alluse~1\applic~1\pdf995 2008-03-30 09:22 –d—– c:\docume~1\cheri\applic~1\pdf995 2008-03-25 21:09 –d—– c:\docume~1\alluse~1\applic~1\GDYKZQUZXG 2008-01-19 23:06 –d—– c:\docume~1\cheri\applic~1\TaxCut 2008-01-19 22:59 –d—– c:\docume~1\alluse~1\applic~1\TaxCut 2007-07-24 22:07 –d—– c:\docume~1\cheri\applic~1\MySpace 2007-06-29 12:15 –d—– c:\docume~1\alluse~1\applic~1\SSScanWizard 2007-06-29 12:15 –d—– c:\docume~1\alluse~1\applic~1\SSScanAppDataDir 2007-06-23 12:14 –d—– c:\docume~1\alluse~1\applic~1\Knowledge Adventure 2007-06-05 04:19 –d—– c:\docume~1\cheri\applic~1\RegistrySmart 2007-05-28 16:13 –d—– c:\docume~1\cheri\applic~1\Comcast 2007-05-25 23:08 –d—– c:\docume~1\cheri\applic~1\Wal-Mart Digital Photo Viewer 2007-05-18 14:57 –d—– c:\docume~1\cheri\applic~1\Printer Info Cache 2007-05-16 15:17 –d—– c:\docume~1\alluse~1\applic~1\Napster 2007-05-16 15:09 –d—– c:\docume~1\cheri\applic~1\Paltalk 2007-05-10 13:39 –d—– c:\docume~1\cheri\applic~1\Stamps.com Internet Postage 2007-05-07 08:20 –d—– c:\docume~1\cheri\applic~1\AdobeAUM 2007-04-24 22:44 –d—– c:\docume~1\cheri\applic~1\Morpheus 2007-04-24 08:29 –d—– c:\docume~1\alluse~1\applic~1\JollyBear 2007-02-25 19:09 –d—– c:\docume~1\alluse~1\applic~1\Kodak 2007-02-18 17:29 –d—– c:\docume~1\cheri\applic~1\Snapfish 2007-02-10 20:04 –d—– c:\docume~1\alluse~1\applic~1\McAfee.com 2006-08-04 18:01 –d—– c:\docume~1\cheri\applic~1\ScanSoft 2006-05-01 21:10 –d—– c:\docume~1\cheri\applic~1\Netscape 2006-01-13 10:04 –d—– c:\docume~1\cheri\applic~1\Simple Star 2006-01-03 22:56 –d—– c:\docume~1\cheri\applic~1\MSN6 2005-12-11 20:42 –d—– c:\docume~1\cheri\applic~1\CherinJerry 2005-12-02 15:45 –d—– c:\docume~1\cheri\applic~1\.gaim 2005-06-18 11:49 –d—– c:\docume~1\cheri\applic~1\Jasc Software Inc 2005-06-15 15:32 –d—– c:\docume~1\cheri\applic~1\AOL 2005-06-06 19:16 –d—– c:\docume~1\cheri\applic~1\FFDesigner 2005-06-04 08:14 –d—– c:\docume~1\cheri\applic~1\FotoFinish 2005-06-04 08:03 –d—– c:\docume~1\cheri\applic~1\SmartDraw 2005-05-21 05:57 –d—– c:\docume~1\cheri\applic~1\Jasc 2005-05-13 08:43 –d—– c:\docume~1\cheri\applic~1\Webroot 2005-05-11 19:16 –d—– c:\docume~1\alluse~1\applic~1\Avery 2005-04-17 17:53 –d—– c:\docume~1\alluse~1\applic~1\GameHouse 2005-04-09 17:26 –d—– c:\docume~1\alluse~1\applic~1\Trymedia 2005-03-15 07:41 –d—– c:\docume~1\cheri\applic~1\MSNInstaller 2005-02-25 19:25 –d—– c:\docume~1\cheri\applic~1\MyPublisher 2005-02-08 19:36 –d—– c:\docume~1\cheri\applic~1\Digital Album Organizer 2004-11-19 08:53 –d—– c:\docume~1\cheri\applic~1\McAfee.com 2004-07-15 02:00 –d—– c:\docume~1\cheri\applic~1\EA 2004-07-15 02:00:09 –D—– - c:\docume~1\alluse~1\applic~1\EA 2007-04-18 09:00 56 —shr– c:\windows\system32\5FAB9FD8E1.sys 2007-04-18 09:01 3,350 ac-sh— c:\windows\system32\KGyGaAvL.sys ============= FINISH: 21:55:35.67 ===============

I've removed all the line returns from the word wrap. This makes it easier for me to read. Now I'll work on a fix. uStart Page = hxxp://www.comcast.net/a/ uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 mSearch Page = uURLSearchHooks: {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - c:\program files\morpheusbar\srchastt\1.bin\MBSRCAS.DLL uURLSearchHooks: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll mWinlogon: SFCDisable=-99 (0xffffff9d) BHO: {02478D38-C3F9-4EFB-9B51-7695ECA05670} - c:\programfiles\yahoo!\companion\installs\cpn\yt.dll BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll BHO: {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - c:\program files\morpheusbar\bar\1.bin\MORPHBAR.DLL BHO: {47388408-A0AF-4D5F-B715-FC5C9EEF2EF4} - c:\windows\system32\yayaWQIa.dll BHO: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll BHO: {5CA3D70E-1895-11CF-8E15-001234567890} - c:\windows\system32\dla\tfswshx.dll BHO: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll BHO: {73259091-9574-4ED8-A40F-7F65AFC28634} - c:\windows\system32\ljJCvTnk.dll BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.6.0_01\bin\ssv.dll BHO: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll BHO: {D73F49B1-B51B-4d32-A3B7-BD04B8342F53} - c:\program files\morpheusbar\srchastt\1.bin\MBSRCAS.DLL BHO: {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL BHO: {F5A149DC-26C1-24C2-9785-502423DE2CA3} - c:\windows\system32\lzeqvqcjotggzqm.dll TB: {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - c:\program files\canon\easy-webprint\Toolband.dll TB: {3F3714A9-89A4-46be-8AF3-D0C9D1FB03F9} - c:\program files\morpheusbar\bar\1.bin\MORPHBAR.DLL TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll TB: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll TB: {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - c:\program files\veoh networks\veohwebplayer\VeohIEToolbar.dll TB: {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll TB: {3F3714A9-89A4-46BE-8AF3-D0C9D1FB03F9} - c:\program files\morpheusbar\bar\1.bin\MORPHBAR.DLL TB: {724D43A0-0D85-11D4-9908-00400523E39A} - c:\program files\siber systems\ai roboform\roboform.dll TB: {F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL uRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startup uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [ccleaner] "c:\program files\ccleaner\ccleaner.exe" /AUTO uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 uRun: [Advanced SystemCare 3] "c:\program files\iobit\advanced systemcare 3\AWC.exe" /startup uRun: [VeohPlugin] "c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" uRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe" uRun: [prunnet] "c:\windows\system32\prunnet.exe" mRun: [Microsoft Works Update Detection] c:\program files\common files\microsoft shared\works shared\WkUFind.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot mRun: [OpwareSE2] "c:\program files\scansoft\omnipagese2.0\OpwareSE2.exe" mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_07\bin\jusched.exe" mRun: [mcagent_exe] c:\program files\mcafee.com\agent\mcagent.exe /runkey mRun: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe" mRun: [dla] c:\windows\system32\dla\tfswctrl.exe mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide mRun: [UpdateManager] "c:\program files\common files\sonic\update manager\sgtray.exe" /r mRun: [SM1BG] c:\windows\SM1BG.EXE mRun: [PCMService] "c:\program files\dell\media experience\PCMService.exe" mRun: [mmtask] c:\program files\musicmatch\musicmatch jukebox\mmtask.exe mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [DVDSentry] c:\windows\system32\DSentry.exe mRun: [BCMSMMSG] BCMSMMSG.exe dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t dRun: [Picasa Media Detector] c:\program files\picasa2\PicasaMediaDetector.exe dRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe" dRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil9f.exe mPolicies-system: DisableTaskMgr = 0 (0x0) IE: Customize Menu - file://c:\program files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html IE: Easy-WebPrint Add To Print List - c:\program files\canon\easy-webprint\Resource.dll/RC_AddToList.html IE: Easy-WebPrint High Speed Print - c:\program files\canon\easy-webprint\Resource.dll/RC_HSPrint.html IE: Easy-WebPrint Preview - c:\program files\canon\easy-webprint\Resource.dll/RC_Preview.html IE: Easy-WebPrint Print - c:\program files\canon\easy-webprint\Resource.dll/RC_Print.html IE: Fill Forms - file://c:\program files\siber systems\ai roboform\RoboFormComFillForms.html IE: RoboForm Toolbar - file://c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html IE: Save Forms - file://c:\program files\siber systems\ai roboform\RoboFormComSavePass.html IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL Notify: igfxcui - igfxsrvc.dll Notify: ljJCvTnk - ljJCvTnk.dll Notify: PremierOpinion - c:\program files\premieropinion\pmls.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - c:\progra~1\window~4\MpShHook.dll SEH: {73259091-9574-4ED8-A40F-7F65AFC28634} - c:\windows\system32\ljJCvTnk.dll LSA: Authentication Packages = msv1_0 c:\windows\system32\yayaWQIa ============= SERVICES / DRIVERS =============== =============== Created Last 30 ================ 2008-11-27 15:00 54,156 a—h— c:\windows\QTFont.qfn 2008-11-27 15:00 1,409 a——- c:\windows\QTFont.for 2008-11-27 13:11 –d—– C:\fb1a564d7cd3e5bb0b021ca7 2008-11-26 14:01 –d—– C:\VundoFix Backups 2008-11-25 12:23 –d—– C:\New Folder 2008-11-24 16:32 –d—– c:\docume~1\cheri\applic~1\GoodSync 2008-11-24 00:21 860,259 a–sh— c:\windows\system32\aIQWayay.ini 2008-11-24 00:21 860,021 a–sh— c:\windows\system32\aIQWayay.ini2 2008-11-24 00:21 860 a——- c:\windows\system32\winpfz33.sys 2008-11-24 00:17 21 a——- c:\windows\system32\zxdnt3d.cfg 2008-11-24 00:17 –dsh— c:\windows\Q2hlcmk 2008-11-24 00:17 –d—– c:\temp\tn3 2008-11-24 00:16 160 a——- c:\windows\system32\msnav32.ax 2008-11-24 00:16 –d—– c:\temp\FT62 2008-11-24 00:16 167,976 a——- c:\windows\system32\drivers\core.cache.dsk 2008-11-24 00:16 86,272 a——- c:\windows\system32\drivers\wdmaudd.sys 2008-11-24 00:16 –d—– c:\temp\1cb 2008-11-24 00:16 –d—– c:\windows\system32\x4 2008-11-24 00:16 –d—– c:\windows\system32\mp 2008-11-24 00:16 –d—– c:\windows\system32\ID2 2008-11-24 00:16 –d—– c:\windows\system32\gp2 2008-11-24 00:16 –d—– c:\windows\system32\dim 2008-11-24 00:16 29,184 a——- c:\windows\system32\MSINET.oca 2008-11-24 00:16 2,407 a——- c:\windows\system32\MSINET.DEP 2008-11-24 00:13 –d—– c:\docume~1\cheri\applic~1\IUpd721 2008-11-24 00:08 –d—– c:\docume~1\cheri\applic~1\NI.GSCNS 2008-11-23 21:44 –d—– c:\program files\PremierOpinion 2008-11-23 21:43 88,372 a——- c:\windows\system32\znlenobnnmo.dll-uninst.exe 2008-11-23 21:43 47,584 a——- c:\windows\system32\uftackihuglvuy.exe 2008-11-21 09:04 –d—– c:\program files\FrostWire 2008-11-21 09:04 –d—– c:\program files\AskSBar 2008-11-21 08:25 197,976 a—-r– c:\windows\system32\cpnprt2.cid 2008-11-19 17:23 547 a——- c:\windows\system32\ff_vfw.dll.manifest 2008-11-19 17:23 7,680 a——- c:\windows\system32\ff_vfw.dll 2008-11-19 17:23 60,273 a——- c:\windows\system32\pthreadGC2.dll 2008-11-19 17:23 –d—– c:\program files\ffdshow 2008-11-19 14:47 –d—– c:\program files\Veoh Networks 2008-11-17 20:41 –d—– c:\docume~1\cheri\applic~1\IObit 2008-11-17 10:35 –d—– c:\program files\Unity 2008-11-12 01:38 455,296 ——– c:\windows\system32\dllcache\mrxsmb.sys 2008-11-12 01:38 1,106,944 ——– c:\windows\system32\dllcache\msxml3.dll ==================== Find3M ==================== 2008-11-24 16:32 –d—– c:\program files\Siber Systems 2008-11-23 21:58 –d—– c:\program files\Morpheus 2008-11-23 21:57 –d—– c:\docume~1\cheri\applic~1\FrostWire 2008-11-18 19:12 –d—– c:\program files\PokerStars 2008-11-17 20:41 –d—– c:\program files\IObit 2008-11-12 09:34 –d—– c:\program files\Drawing for Children 2008-11-11 21:01 –d—– c:\program files\The Hidden Object Show - Season 2 2008-11-11 20:31 –d—– c:\docume~1\alluse~1\applic~1\BigFishGamesCache 2008-11-11 08:46 –d—– c:\program files\bfgclient 2008-11-02 15:45 –d—– c:\program files\common files\AOL 2008-11-02 14:48 –d—– c:\docume~1\alluse~1\applic~1\Viewpoint 2008-10-25 16:49 –d—– c:\docume~1\cheri\applic~1\PlayFirst 2008-10-20 11:08 –d—– c:\program files\Cribbage Buddy Pogo 2008-10-20 09:34 –d—– c:\docume~1\cheri\applic~1\Skinux 2008-10-20 09:32 –d—– c:\program files\common files\Kodak 2008-10-18 21:55 –d—– c:\docume~1\alluse~1\applic~1\Gogii 2008-10-16 15:26 –d—– c:\program files\Microsoft Picture It! 10 2008-10-16 14:13 1,809,944 a——- c:\windows\system32\dllcache\wuaueng.dll 2008-10-16 14:13 202,776 a——- c:\windows\system32\dllcache\wuweb.dll 2008-10-16 14:12 323,608 a——- c:\windows\system32\dllcache\wucltui.dll 2008-10-16 14:12 561,688 a——- c:\windows\system32\dllcache\wuapi.dll 2008-10-16 14:09 92,696 a——- c:\windows\system32\dllcache\cdm.dll 2008-10-16 14:09 51,224 a——- c:\windows\system32\dllcache\wuauclt.exe 2008-10-16 14:08 34,328 a——- c:\windows\system32\dllcache\wups.dll 2008-10-15 11:34 337,408 ——– c:\windows\system32\dllcache\netapi32.dll 2008-10-14 07:25 –d—– c:\docume~1\cheri\applic~1\JoyBits 2008-10-13 20:48 –d—– c:\program files\Oberon Media 2008-10-13 20:47 –d—– c:\program files\Hasbro Interactive 2008-10-13 20:46 –d—– c:\program files\IncrediMail 2008-10-08 21:03 –d—– c:\docume~1\cheri\applic~1\Sudden Games 2008-10-08 21:00 4,096 a——- c:\windows\d3dx.dat 2008-10-06 22:40 –d—– c:\program files\Dream Day First Home 2008-10-03 12:41 6,066,176 ——– c:\windows\system32\dllcache\ieframe.dll 2008-09-30 16:43 1,286,152 a——- c:\windows\system32\msxml4.dll 2008-09-29 07:34 –d—– c:\docume~1\cheri\applic~1\Pogo Games 2008-09-22 11:26 –d—– c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy 2008-09-15 07:12 1,846,400 a——- c:\windows\system32\win32k.sys 2008-09-15 07:12 1,846,400 ——– c:\windows\system32\dllcache\win32k.sys 2008-09-14 09:25 –d—– c:\docume~1\cheri\applic~1\FunWebProducts 2008-09-12 11:14 78,587 a——- c:\windows\pchealth\helpctr\offlinecache\index.dat 2008-09-09 20:14 1,307,648 ——– c:\windows\system32\msxml6.dll 2008-09-09 20:14 1,307,648 ——– c:\windows\system32\dllcache\msxml6.dll 2008-09-08 05:41 333,824 ——– c:\windows\system32\dllcache\srv.sys 2008-09-06 23:30 –d—– c:\docume~1\cheri\applic~1\Move Networks 2008-09-04 12:15 1,106,944 a——- c:\windows\system32\msxml3.dll 2008-09-03 08:40 –d—– c:\docume~1\alluse~1\applic~1\n7-89-o9-3r-4t-r9 2008-09-03 08:39 –d—– c:\docume~1\cheri\applic~1\GameHouse 2008-08-14 00:05 –d—– c:\docume~1\alluse~1\applic~1\SDYKZQUZXG 2008-08-03 18:44 –d—– c:\docume~1\cheri\applic~1\Canon 2008-07-15 12:07 –d—– c:\docume~1\alluse~1\applic~1\BOONTY 2008-07-14 12:49 –d—– c:\docume~1\cheri\applic~1\FrameSize Options 2008-07-08 22:45 –d—– c:\docume~1\cheri\applic~1\Ludia 2008-07-08 22:45 –d—– c:\docume~1\alluse~1\applic~1\Ludia 2008-05-09 11:59 –d—– c:\docume~1\alluse~1\applic~1\Wal-Mart 2008-05-09 11:59 –d—– c:\docume~1\cheri\applic~1\Wal-Mart 2008-05-09 11:54 –d—– c:\docume~1\cheri\applic~1\Wal-Mart Digital Photo Manager 2008-03-30 09:51 –d—– c:\docume~1\alluse~1\applic~1\pdf995 2008-03-30 09:22 –d—– c:\docume~1\cheri\applic~1\pdf995 2008-03-25 21:09 –d—– c:\docume~1\alluse~1\applic~1\GDYKZQUZXG 2008-01-19 23:06 –d—– c:\docume~1\cheri\applic~1\TaxCut 2008-01-19 22:59 –d—– c:\docume~1\alluse~1\applic~1\TaxCut 2007-07-24 22:07 –d—– c:\docume~1\cheri\applic~1\MySpace 2007-06-29 12:15 –d—– c:\docume~1\alluse~1\applic~1\SSScanWizard 2007-06-29 12:15 –d—– c:\docume~1\alluse~1\applic~1\SSScanAppDataDir 2007-06-23 12:14 –d—– c:\docume~1\alluse~1\applic~1\Knowledge Adventure 2007-06-05 04:19 –d—– c:\docume~1\cheri\applic~1\RegistrySmart 2007-05-28 16:13 –d—– c:\docume~1\cheri\applic~1\Comcast 2007-05-25 23:08 –d—– c:\docume~1\cheri\applic~1\Wal-Mart Digital Photo Viewer 2007-05-18 14:57 –d—– c:\docume~1\cheri\applic~1\Printer Info Cache 2007-05-16 15:17 –d—– c:\docume~1\alluse~1\applic~1\Napster 2007-05-16 15:09 –d—– c:\docume~1\cheri\applic~1\Paltalk 2007-05-10 13:39 –d—– c:\docume~1\cheri\applic~1\Stamps.com Internet Postage 2007-05-07 08:20 –d—– c:\docume~1\cheri\applic~1\AdobeAUM 2007-04-24 22:44 –d—– c:\docume~1\cheri\applic~1\Morpheus 2007-04-24 08:29 –d—– c:\docume~1\alluse~1\applic~1\JollyBear 2007-02-25 19:09 –d—– c:\docume~1\alluse~1\applic~1\Kodak 2007-02-18 17:29 –d—– c:\docume~1\cheri\applic~1\Snapfish 2007-02-10 20:04 –d—– c:\docume~1\alluse~1\applic~1\McAfee.com 2006-08-04 18:01 –d—– c:\docume~1\cheri\applic~1\ScanSoft 2006-05-01 21:10 –d—– c:\docume~1\cheri\applic~1\Netscape 2006-01-13 10:04 –d—– c:\docume~1\cheri\applic~1\Simple Star 2006-01-03 22:56 –d—– c:\docume~1\cheri\applic~1\MSN6 2005-12-11 20:42 –d—– c:\docume~1\cheri\applic~1\CherinJerry 2005-12-02 15:45 –d—– c:\docume~1\cheri\applic~1\.gaim 2005-06-18 11:49 –d—– c:\docume~1\cheri\applic~1\Jasc Software Inc 2005-06-15 15:32 –d—– c:\docume~1\cheri\applic~1\AOL 2005-06-06 19:16 –d—– c:\docume~1\cheri\applic~1\FFDesigner 2005-06-04 08:14 –d—– c:\docume~1\cheri\applic~1\FotoFinish 2005-06-04 08:03 –d—– c:\docume~1\cheri\applic~1\SmartDraw 2005-05-21 05:57 –d—– c:\docume~1\cheri\applic~1\Jasc 2005-05-13 08:43 –d—– c:\docume~1\cheri\applic~1\Webroot 2005-05-11 19:16 –d—– c:\docume~1\alluse~1\applic~1\Avery 2005-04-17 17:53 –d—– c:\docume~1\alluse~1\applic~1\GameHouse 2005-04-09 17:26 –d—– c:\docume~1\alluse~1\applic~1\Trymedia 2005-03-15 07:41 –d—– c:\docume~1\cheri\applic~1\MSNInstaller 2005-02-25 19:25 –d—– c:\docume~1\cheri\applic~1\MyPublisher 2005-02-08 19:36 –d—– c:\docume~1\cheri\applic~1\Digital Album Organizer 2004-11-19 08:53 –d—– c:\docume~1\cheri\applic~1\McAfee.com 2004-07-15 02:00 –d—– c:\docume~1\cheri\applic~1\EA 2004-07-15 02:00:09 –D—– - c:\docume~1\alluse~1\applic~1\EA 2007-04-18 09:00 56 —shr– c:\windows\system32\5FAB9FD8E1.sys 2007-04-18 09:01 3,350 ac-sh— c:\windows\system32\KGyGaAvL.sys