[Resolved] Can't seem to find this Trojan; help much needed&#

Hi, this is my first time posting here. A buddy recommended I give it a shot. I can't seem to shake this virus, and I fear my only resort is backing everything up and strarting from scratch. I am VERY reluctant to do this since I have a massive amount of data (500 GB) and don't want to risk losing any of it.

In a nut shell, these are my symptoms: IE (using ver 7) will not open anymore. I continuously receive the error message, "Windows had to shut down IE" and can either Debug, Send Error Report, or Don't Send. Funny thing is, I receive these error messages even when IE isn't open, or I try to open it. I can be in Firefox perfectly fine, and these IE error messages will appear out of no where it seems like. I am also receiving this error message, "Run a DLL as an App has encountered a problem and needs to close. We are sorry for the inconvenience." Aside from these error messages from Windows, I get pop ups in IE from time to time asking me to install what seems like some bogus virus protection. I immediately close these out. My machine also appears to be running much, much slower than ever despite having only one or 2 apps running at a given time. I have 4 GB of RAM. No way should Windows be thinking this much.

I ran HijackThis and here is my log file…

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:02:06 PM, on 2/1/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmon.exe
C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Documents and Settings\Victor A. Vega\Desktop\utorrent.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Philips\Philips Lime Service\bin\Lime.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?fr=mcafee&p=%s
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://local.swarmcast.net:8001/proxy.pac
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: Gamevance - {0ED403E8-470A-4a8a-85A4-D7688CFE39A3} - C:\Program Files\Gamevance\gamevancelib32.dll (file missing)
O2 - BHO: (no name) - {28d09d6f-b93e-45fa-92d7-52e70e9cfa1e} - C:\WINDOWS\system32\jojosiru.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {889EEACF-C43A-403D-B427-5AEC5B495BB1} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: {12494c1c-802b-c6ab-1ac4-ff6cdb96265d} - {d56269bd-c6ff-4ca1-ba6c-b208c1c49421} - C:\WINDOWS\system32\vovtfz.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Dell Photo AIO Printer 922] "C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe"
O4 - HKLM\..\Run: [DLBTCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBTtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [PhilipsDM] "C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=0
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [gapuhebuya] Rundll32.exe "C:\WINDOWS\system32\nesuhepa.dll",s
O4 - HKLM\..\Run: [CPM1f548c32] Rundll32.exe "c:\windows\system32\fibozuva.dll",a
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PhilipsLime] "C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [gapuhebuya] Rundll32.exe "C:\WINDOWS\system32\nesuhepa.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [gapuhebuya] Rundll32.exe "C:\WINDOWS\system32\nesuhepa.dll",s (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2138559374-1700061216-565483928-1010\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/…04NWUS_ZKfox000
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1…toUploader5.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www1.snapfish.com/SnapfishActivia.cab
O16 - DPF: {483EB14D-AF1C-4951-81B0-4E2B41829FF6} (QOLCheck Control) - https://www.select2perform.com/cabs/QOLCheck.ocx
O16 - DPF: {54823A9D-6BAE-11D5-B519-0050BA2413EB} (ChkDVDCtl Class) - http://www.cyberlink.com/winxp/CheckDVD.cab
O16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} (VideoEgg ActiveX Loader) - http://update.videoegg.com/Install/Windows…ggPublisher.exe
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL qaloqd.dll C:\WINDOWS\system32\nofopoku.dll c:\windows\system32\fibozuva.dll
O21 - SSODL: gimmicks - {40dcff6e-af8d-4183-8ebe-a82270ac449e} - C:\WINDOWS\system32\dcvwaah.dll (file missing)
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\fibozuva.dll
O22 - SharedTaskScheduler: gimmicks - {40dcff6e-af8d-4183-8ebe-a82270ac449e} - C:\WINDOWS\system32\dcvwaah.dll (file missing)
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\fibozuva.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: dlbt_device - Dell - C:\WINDOWS\system32\dlbtcoms.exe
O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O24 - Desktop Component 0: Fireplace Active Desktop Component - E207A920-9461-468F-88B8-2021AF3B424D

–
End of file - 15554 bytes

I'm truly at a lost, and would greatly appreciate any help in removing this virus from my machine. I would love to meet the creator of this thing and punch them square in the face. OK, enough frustration. Thanks!

Vic.

DDS.txt
DDS (Ver_09-02-01.01) - NTFSx86
Run by [removed] at 14:28:12.95 on Mon 02/02/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.2531 [GMT -5:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated)
FW: McAfee Personal Firewall *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
svchost.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmon.exe
C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe
C:\Program Files\Philips\Philips Lime Service\bin\Lime.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\Victor A. Vega\Desktop\utorrent.exe
C:\Documents and Settings\Victor A. Vega\Desktop\dds.pif

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/ig?sourceid=navclient&ie=UTF-8&hl=en
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://www.dell4me.com/myway
uSearch Bar = hxxp://bfc.myway.com/search/de_srchlft.html
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s
mSearchAssistant = hxxp://www.google.com/ie
uURLSearchHooks: N/A: {4d25f926-b9fe-4682-bf72-8ab8210d6d75} - c:\program files\mywaysa\srchasde\1.bin\deSrcAs.dll
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} -
uURLSearchHooks: H - No File
mURLSearchHooks: H - No File
mURLSearchHooks: N/A: {4d25f926-b9fe-4682-bf72-8ab8210d6d75} - c:\program files\mywaysa\srchasde\1.bin\deSrcAs.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: Gamevance: {0ed403e8-470a-4a8a-85a4-d7688cfe39a3} - c:\program files\gamevance\gamevancelib32.dll
BHO: {28d09d6f-b93e-45fa-92d7-52e70e9cfa1e} - c:\windows\system32\jojosiru.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: : {4d25f921-b9fe-4682-bf72-8ab8210d6d75} - c:\program files\mywaysa\srchasde\1.bin\deSrcAs.dll
BHO: {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - No File
BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll
{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c}
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.5.0_11\bin\ssv.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
{889eeacf-c43a-403d-b427-5aec5b495bb1}
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar5.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\3.1.807.1746\swg.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: {12494c1c-802b-c6ab-1ac4-ff6cdb96265d}: {d56269bd-c6ff-4ca1-ba6c-b208c1c49421} - c:\windows\system32\vovtfz.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar5.dll
TB: {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No File
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} -
TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File
TB: {5BED3930-2E9E-76D8-BACC-80DF2188D455} - No File
EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File
EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [PhilipsLime] "c:\program files\philips\philips lime service\bin\LimeAlive.exe"
uRun: [Aim6]
uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
uRun: [RocketDock] "c:\program files\rocketdock\RocketDock.exe"
uRun: [DW6] "c:\program files\the weather channel fw\desktop\DesktopWeather.exe"
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.5.0_11\bin\jusched.exe"
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [CTSysVol] c:\program files\creative\sbaudigy2zs\surround mixer\CTSysVol.exe /r
mRun: [CTDVDDET] "c:\program files\creative\sbaudigy2zs\dvdaudio\CTDVDDET.EXE"
mRun: [CTHelper] CTHELPER.EXE
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe"
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [Dell Photo AIO Printer 922] "c:\program files\dell photo aio printer 922\dlbtbmgr.exe"
mRun: [DLBTCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\DLBTtime.dll,_RunDLLEntry@16
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [PhilipsDM] "c:\program files\philips\philips device manager\bin\DeviceManager.exe"
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [MyWebSearch Plugin] rundll32 c:\progra~1\mywebs~1\bar\1.bin\M3PLUGIN.DLL,UPF
mRun: [My Web Search Bar Search Scope Monitor] "c:\progra~1\mywebs~1\bar\1.bin\m3SrchMn.exe" /m=0
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [gapuhebuya] Rundll32.exe "c:\windows\system32\nesuhepa.dll",s
mRun: [1c67bfae] rundll32.exe "c:\windows\system32\gipidiwu.dll",b
mRun: [CPM1f548c32] Rundll32.exe "c:\windows\system32\kalahavi.dll",a
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
IE: &Download with &DAP - c:\program files\dap\dapextie.htm
IE: Download &all with DAP - c:\program files\dap\dapextie2.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_11\bin\ssv.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://www1.snapfish.com/SnapfishActivia.cab
DPF: {483EB14D-AF1C-4951-81B0-4E2B41829FF6} - hxxps://www.select2perform.com/cabs/QOLCheck.ocx
DPF: {54823A9D-6BAE-11D5-B519-0050BA2413EB} - hxxp://www.cyberlink.com/winxp/CheckDVD.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} - hxxp://update.videoegg.com/Install/Windows/Initial/VideoEggPublisher.exe
DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
AppInit_DLLs: c:\progra~1\google\google~2\goec62~1.dll qaloqd.dll c:\windows\system32\nofopoku.dll c:\windows\system32\kalahavi.dll
SSODL: gimmicks - {40dcff6e-af8d-4183-8ebe-a82270ac449e} - c:\windows\system32\dcvwaah.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kalahavi.dll
STS: gimmicks: {40dcff6e-af8d-4183-8ebe-a82270ac449e} - c:\windows\system32\dcvwaah.dll
STS: STS: {ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} - c:\windows\system32\kalahavi.dll
{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c}
LSA: Authentication Packages = msv1_0 c:\windows\system32\fccyxYrP
LSA: Notification Packages = scecli c:\windows\system32\nofopoku.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\victor~1.veg\applic~1\mozilla\firefox\profiles\kyqyolkb.default\
FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50fftrie7&query=
FF - prefs.js: browser.search.selectedEngine - Merriam-Webster Dictionary
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=20008&gct=&gc=1&q=
FF - component: c:\documents and settings\victor a. vega\application data\mozilla\firefox\profiles\kyqyolkb.default\extensions\[removed]\components\coolirisstub.dll
FF - component: c:\program files\mcafee\siteadvisor\components\McFFPlg.dll
FF - component: c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\progra~1\yahoo!\common\npyaxmpb.dll
FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava11.dll
FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava12.dll
FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava13.dll
FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava14.dll
FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava32.dll
FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJPI150_11.dll
FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPOJI610.dll
FF - plugin: c:\program files\mozilla firefox\plugins\NPAdbESD.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdnu.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
FF - plugin: c:\program files\mozilla firefox\plugins\NPMyWebS.dll
FF - plugin: c:\program files\mozilla firefox\plugins\NpPopup.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll

============= SERVICES / DRIVERS ===============

R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2007-2-17 207656]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2008-8-28 206096]
R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2007-7-30 358736]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2007-2-17 144704]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files\common files\nero\nero backitup 4\NBService.exe [2008-9-24 935208]
R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2007-2-17 605512]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2007-2-17 79240]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2007-2-17 35240]
R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2007-2-17 40488]
S3 CW50;CW50 Device;c:\windows\system32\drivers\CW50.sys [2005-12-31 24059]
S3 GoogleDesktopManager-022208-143751;Google Desktop Manager 5.7.802.22438;c:\program files\google\google desktop search\GoogleDesktop.exe [2008-3-21 29744]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2007-2-17 34152]

=============== Created Last 30 ================

2009-02-02 14:27 –d-h— c:\windows\PIF
2009-02-02 12:44 25,961 —sh— c:\windows\system32\tepidike.dll
2009-02-02 12:43 134,405 a–sh— c:\windows\system32\dvybak.dll
2009-02-02 12:38 134,316 a–sh— c:\windows\system32\tqxtix.dll
2009-02-02 12:34 –d—– C:\BFU
2009-02-02 12:17 134,389 a–sh— c:\windows\system32\oyhpow.dll
2009-02-02 11:56 133,859 a–sh— c:\windows\system32\ppxxbv.dll
2009-02-02 11:36 134,264 a–sh— c:\windows\system32\gsubhf.dll
2009-02-02 11:15 133,787 a–sh— c:\windows\system32\wsnydz.dll
2009-02-02 10:39 134,270 a–sh— c:\windows\system32\ygypdb.dll
2009-02-02 10:18 134,409 a–sh— c:\windows\system32\iyiden.dll
2009-02-02 10:00 133,849 a–sh— c:\windows\system32\zucmoe.dll
2009-02-02 09:41 134,393 a–sh— c:\windows\system32\frtvti.dll
2009-02-02 09:23 133,793 a–sh— c:\windows\system32\yrjgsv.dll
2009-02-02 09:04 133,818 a–sh— c:\windows\system32\xveins.dll
2009-02-02 08:45 134,473 a–sh— c:\windows\system32\ggxugx.dll
2009-02-02 08:27 134,349 a–sh— c:\windows\system32\mdchau.dll
2009-02-02 08:06 133,862 a–sh— c:\windows\system32\zecfxf.dll
2009-02-02 07:45 135,451 a–sh— c:\windows\system32\qhbrzo.dll
2009-02-02 07:26 135,510 a–sh— c:\windows\system32\sswvfw.dll
2009-02-02 07:08 133,448 a–sh— c:\windows\system32\wcucsx.dll
2009-02-02 06:49 135,345 a–sh— c:\windows\system32\pwxqmb.dll
2009-02-02 06:25 133,212 a–sh— c:\windows\system32\aibcrl.dll
2009-02-02 06:07 135,301 a–sh— c:\windows\system32\ldclzh.dll
2009-02-02 05:46 133,293 a–sh— c:\windows\system32\iefvne.dll
2009-02-02 05:27 135,386 a–sh— c:\windows\system32\pbxkeq.dll
2009-02-02 05:09 135,505 a–sh— c:\windows\system32\xxbqne.dll
2009-02-02 04:50 135,306 a–sh— c:\windows\system32\wyjamx.dll
2009-02-02 04:31 135,302 a–sh— c:\windows\system32\cyalvm.dll
2009-02-02 04:13 133,248 a–sh— c:\windows\system32\wuusbl.dll
2009-02-02 03:54 133,444 a–sh— c:\windows\system32\acxlqj.dll
2009-02-02 03:36 135,475 a–sh— c:\windows\system32\ejkgig.dll
2009-02-02 03:17 133,325 a–sh— c:\windows\system32\azlgej.dll
2009-02-02 02:58 133,236 a–sh— c:\windows\system32\bvfbpn.dll
2009-02-02 02:40 133,306 a–sh— c:\windows\system32\umszvh.dll
2009-02-02 02:21 135,352 a–sh— c:\windows\system32\luzgfb.dll
2009-02-02 02:03 135,465 a–sh— c:\windows\system32\hcnkut.dll
2009-02-02 01:44 133,243 a–sh— c:\windows\system32\goudlc.dll
2009-02-02 01:26 133,277 a–sh— c:\windows\system32\jmchtf.dll
2009-02-02 01:04 133,317 a–sh— c:\windows\system32\lktlde.dll
2009-02-02 00:43 135,338 a–sh— c:\windows\system32\lwojly.dll
2009-02-02 00:25 133,241 a–sh— c:\windows\system32\xeedru.dll
2009-02-02 00:04 135,286 a–sh— c:\windows\system32\bfxihq.dll
2009-02-01 23:45 135,480 a–sh— c:\windows\system32\xetnnt.dll
2009-02-01 23:27 135,488 a–sh— c:\windows\system32\wamjpq.dll
2009-02-01 23:08 133,279 a–sh— c:\windows\system32\kuextq.dll
2009-02-01 22:49 133,305 a–sh— c:\windows\system32\gzoofe.dll
2009-02-01 22:31 135,348 a–sh— c:\windows\system32\wgjmnx.dll
2009-02-01 22:12 135,322 a–sh— c:\windows\system32\xntyhq.dll
2009-02-01 21:54 133,256 a–sh— c:\windows\system32\znpflb.dll
2009-02-01 21:35 135,413 a–sh— c:\windows\system32\leajmn.dll
2009-02-01 21:16 133,348 a–sh— c:\windows\system32\rtrtrr.dll
2009-02-01 20:58 133,249 a–sh— c:\windows\system32\fvtpgh.dll
2009-02-01 20:39 133,315 a–sh— c:\windows\system32\oycnxz.dll
2009-02-01 20:21 133,341 a–sh— c:\windows\system32\xmmulk.dll
2009-02-01 20:02 135,321 a–sh— c:\windows\system32\wgbeld.dll
2009-02-01 19:41 133,371 a–sh— c:\windows\system32\qsqizn.dll
2009-02-01 19:20 135,492 a–sh— c:\windows\system32\arcoho.dll
2009-02-01 19:01 135,286 a–sh— c:\windows\system32\mtgksy.dll
2009-02-01 18:43 135,314 a–sh— c:\windows\system32\schpxx.dll
2009-02-01 18:22 135,422 a–sh— c:\windows\system32\cakkrx.dll
2009-02-01 18:01 135,278 a–sh— c:\windows\system32\hmxkbi.dll
2009-02-01 17:42 133,431 a–sh— c:\windows\system32\adlotc.dll
2009-02-01 17:23 133,259 a–sh— c:\windows\system32\thgixq.dll
2009-02-01 17:05 133,335 a–sh— c:\windows\system32\xmtmzx.dll
2009-02-01 16:46 135,393 a–sh— c:\windows\system32\ghpxke.dll
2009-02-01 16:28 133,305 a–sh— c:\windows\system32\sndtyz.dll
2009-02-01 16:09 135,339 a–sh— c:\windows\system32\tbmtnj.dll
2009-02-01 16:01 –d—– c:\program files\Trend Micro
2009-02-01 15:50 133,390 a–sh— c:\windows\system32\zfgehn.dll
2009-02-01 15:32 135,426 a–sh— c:\windows\system32\ltfdnb.dll
2009-02-01 15:13 135,495 a–sh— c:\windows\system32\pgdnln.dll
2009-02-01 14:55 133,393 a–sh— c:\windows\system32\kessqp.dll
2009-02-01 14:36 133,293 a–sh— c:\windows\system32\gfevvk.dll
2009-02-01 14:18 135,332 a–sh— c:\windows\system32\kztmzb.dll
2009-02-01 13:59 135,303 a–sh— c:\windows\system32\wjwpkl.dll
2009-02-01 13:40 133,446 a–sh— c:\windows\system32\khuhng.dll
2009-02-01 13:22 133,258 a–sh— c:\windows\system32\yexiud.dll
2009-02-01 13:03 133,319 a–sh— c:\windows\system32\uczrpo.dll
2009-02-01 12:45 135,360 a–sh— c:\windows\system32\eqilfc.dll
2009-02-01 12:24 133,392 a–sh— c:\windows\system32\fteyql.dll
2009-02-01 12:05 133,405 a–sh— c:\windows\system32\tiygxi.dll
2009-02-01 11:44 133,453 a–sh— c:\windows\system32\wdlbyu.dll
2009-02-01 11:25 135,373 a–sh— c:\windows\system32\eveuem.dll
2009-02-01 11:07 133,431 a–sh— c:\windows\system32\iqttjd.dll
2009-02-01 10:48 133,312 a–sh— c:\windows\system32\zxarwg.dll
2009-02-01 10:30 133,309 a–sh— c:\windows\system32\rmfomo.dll
2009-02-01 10:11 133,440 a–sh— c:\windows\system32\rpnacs.dll
2009-02-01 09:52 133,281 a–sh— c:\windows\system32\dakiea.dll
2009-02-01 09:34 135,294 a–sh— c:\windows\system32\eouceg.dll
2009-02-01 09:15 133,263 a–sh— c:\windows\system32\ignclx.dll
2009-02-01 08:57 135,488 a–sh— c:\windows\system32\tulrkw.dll
2009-02-01 08:38 135,344 a–sh— c:\windows\system32\ryogfr.dll
2009-02-01 08:20 133,419 a–sh— c:\windows\system32\fhnnww.dll
2009-02-01 08:01 135,471 a–sh— c:\windows\system32\oajsui.dll
2009-02-01 07:43 133,366 a–sh— c:\windows\system32\fxzhuf.dll
2009-02-01 07:24 133,189 a–sh— c:\windows\system32\ztenqw.dll
2009-02-01 07:03 133,364 a–sh— c:\windows\system32\tjxpwp.dll
2009-02-01 06:44 135,265 a–sh— c:\windows\system32\xxhhxu.dll
2009-02-01 06:26 133,437 a–sh— c:\windows\system32\lrsbze.dll
2009-02-01 06:05 133,444 a–sh— c:\windows\system32\cyojpt.dll
2009-02-01 05:44 133,393 a–sh— c:\windows\system32\uexqzt.dll
2009-02-01 05:23 133,394 a–sh— c:\windows\system32\yrlpvn.dll
2009-02-01 05:04 133,387 a–sh— c:\windows\system32\hnsyve.dll
2009-02-01 04:46 135,320 a–sh— c:\windows\system32\bmpkeh.dll
2009-02-01 04:27 133,275 a–sh— c:\windows\system32\uugvcv.dll
2009-02-01 04:09 133,416 a–sh— c:\windows\system32\izvpzw.dll
2009-02-01 03:50 135,507 a–sh— c:\windows\system32\emhivg.dll
2009-02-01 03:31 133,224 a–sh— c:\windows\system32\qsftpd.dll
2009-02-01 03:13 135,338 a–sh— c:\windows\system32\hljhkh.dll
2009-02-01 02:54 135,453 a–sh— c:\windows\system32\xxcyks.dll
2009-02-01 02:36 133,267 a–sh— c:\windows\system32\qifwlr.dll
2009-02-01 02:17 133,292 a–sh— c:\windows\system32\rhsdpu.dll
2009-02-01 01:59 135,289 a–sh— c:\windows\system32\yqenzn.dll
2009-02-01 01:35 133,387 a–sh— c:\windows\system32\lckdlq.dll
2009-02-01 01:17 135,314 a–sh— c:\windows\system32\shyxhr.dll
2009-02-01 00:50 133,275 a–sh— c:\windows\system32\lmtqwx.dll
2009-02-01 00:32 133,373 a–sh— c:\windows\system32\etjbdk.dll
2009-02-01 00:13 133,268 a–sh— c:\windows\system32\dfrilq.dll
2009-01-31 23:55 135,266 a–sh— c:\windows\system32\rkfxwr.dll
2009-01-31 22:41 133,359 a–sh— c:\windows\system32\endvom.dll
2009-01-31 22:23 133,299 a–sh— c:\windows\system32\kepfyf.dll
2009-01-31 21:57 133,269 a–sh— c:\windows\system32\zacnys.dll
2009-01-31 21:33 135,317 a–sh— c:\windows\system32\zcdgtd.dll
2009-01-31 21:12 135,325 a–sh— c:\windows\system32\odtltb.dll
2009-01-31 20:41 135,486 a–sh— c:\windows\system32\mqldia.dll
2009-01-31 20:20 133,298 a–sh— c:\windows\system32\olznwz.dll
2009-01-31 20:01 135,442 a–sh— c:\windows\system32\pleukh.dll
2009-01-31 19:40 133,245 a–sh— c:\windows\system32\wscwev.dll
2009-01-31 18:49 133,252 a–sh— c:\windows\system32\jgavmk.dll
2009-01-31 18:31 133,236 a–sh— c:\windows\system32\lflecb.dll
2009-01-31 18:12 133,364 a–sh— c:\windows\system32\ghwzbc.dll
2009-01-31 17:44 133,405 a–sh— c:\windows\system32\lhvsuc.dll
2009-01-31 16:12 135,500 a–sh— c:\windows\system32\cpyacu.dll
2009-01-31 15:54 135,400 a–sh— c:\windows\system32\qgxizq.dll
2009-01-31 15:35 135,458 a–sh— c:\windows\system32\hoovwf.dll
2009-01-31 15:17 133,432 a–sh— c:\windows\system32\fpfxgv.dll
2009-01-31 14:58 135,485 a–sh— c:\windows\system32\zodrpz.dll
2009-01-31 14:40 133,323 a–sh— c:\windows\system32\fiaocw.dll
2009-01-31 14:21 135,408 a–sh— c:\windows\system32\gixopw.dll
2009-01-31 14:03 133,259 a–sh— c:\windows\system32\uogrjt.dll
2009-01-31 13:44 135,284 a–sh— c:\windows\system32\vcgsmk.dll
2009-01-31 13:23 135,415 a–sh— c:\windows\system32\guzmcg.dll
2009-01-31 13:04 133,440 a–sh— c:\windows\system32\xfdxzy.dll
2009-01-31 12:45 135,293 a–sh— c:\windows\system32\tammug.dll
2009-01-31 12:27 38,838 —sh— c:\windows\system32\lanimaye.dll
2009-01-31 12:27 133,460 a–sh— c:\windows\system32\hqspdo.dll
2009-01-31 12:08 38,838 —sh— c:\windows\system32\rotenopu.dll
2009-01-31 12:08 133,351 a–sh— c:\windows\system32\bwcbhd.dll
2009-01-31 11:50 38,838 —sh— c:\windows\system32\fagonifa.dll
2009-01-31 11:50 133,255 a–sh— c:\windows\system32\hlvaru.dll
2009-01-31 11:31 38,838 —sh— c:\windows\system32\kivowule.dll
2009-01-31 11:31 133,285 a–sh— c:\windows\system32\ejyvib.dll
2009-01-31 11:12 38,838 —sh— c:\windows\system32\tufamovo.dll
2009-01-31 11:12 135,327 a–sh— c:\windows\system32\fszidi.dll
2009-01-31 10:54 38,838 —sh— c:\windows\system32\sasisudi.dll
2009-01-31 10:54 133,252 a–sh— c:\windows\system32\dprrux.dll
2009-01-31 10:35 38,838 —sh— c:\windows\system32\hopelalo.dll
2009-01-31 10:35 135,354 a–sh— c:\windows\system32\zctqmg.dll
2009-01-31 10:17 38,838 —sh— c:\windows\system32\pogepehe.dll
2009-01-31 10:17 133,317 a–sh— c:\windows\system32\ifomti.dll
2009-01-31 09:58 38,838 —sh— c:\windows\system32\gemidesu.dll
2009-01-31 09:58 135,482 a–sh— c:\windows\system32\wgexrd.dll
2009-01-31 09:39 38,838 —sh— c:\windows\system32\kigilepi.dll
2009-01-31 09:39 135,269 a–sh— c:\windows\system32\lkitjg.dll
2009-01-31 09:21 38,838 —sh— c:\windows\system32\sezogibe.dll
2009-01-31 09:21 133,396 a–sh— c:\windows\system32\rajaux.dll
2009-01-31 09:02 38,838 —sh— c:\windows\system32\vebukufu.dll
2009-01-31 09:02 135,360 a–sh— c:\windows\system32\swhlsc.dll
2009-01-31 08:44 38,838 —sh— c:\windows\system32\volamele.dll
2009-01-31 08:44 133,306 a–sh— c:\windows\system32\jsryvv.dll
2009-01-31 08:25 38,838 —sh— c:\windows\system32\wiwenazo.dll
2009-01-31 08:25 133,284 a–sh— c:\windows\system32\ieiswj.dll
2009-01-31 08:07 38,838 —sh— c:\windows\system32\mozuvagi.dll
2009-01-31 08:06 133,431 a–sh— c:\windows\system32\trveeg.dll
2009-01-31 07:48 38,838 —sh— c:\windows\system32\tokabone.dll
2009-01-31 07:48 135,287 a–sh— c:\windows\system32\xeusra.dll
2009-01-31 07:29 38,838 —sh— c:\windows\system32\motobusi.dll
2009-01-31 07:29 135,407 a–sh— c:\windows\system32\iyvixj.dll
2009-01-31 07:11 38,838 —sh— c:\windows\system32\yamihimo.dll
2009-01-31 07:11 133,391 a–sh— c:\windows\system32\zymkqv.dll
2009-01-31 06:52 38,838 —sh— c:\windows\system32\pibosine.dll
2009-01-31 06:52 135,480 a–sh— c:\windows\system32\yjxwqq.dll
2009-01-31 06:34 38,838 —sh— c:\windows\system32\bikuhagu.dll
2009-01-31 06:33 133,433 a–sh— c:\windows\system32\noeyon.dll
2009-01-31 06:15 38,838 —sh— c:\windows\system32\wanisupa.dll
2009-01-31 06:15 133,230 a–sh— c:\windows\system32\dbbpdx.dll
2009-01-31 05:56 38,838 —sh— c:\windows\system32\renibupu.dll
2009-01-31 05:56 135,478 a–sh— c:\windows\system32\pdcsmk.dll
2009-01-31 05:38 133,361 a–sh— c:\windows\system32\dwtdjf.dll
2009-01-31 05:19 38,838 —sh— c:\windows\system32\napigowu.dll
2009-01-31 05:19 133,314 a–sh— c:\windows\system32\zuumfr.dll
2009-01-31 05:00 38,838 —sh— c:\windows\system32\luzilufe.dll
2009-01-31 05:00 135,344 a–sh— c:\windows\system32\efutzn.dll
2009-01-31 04:34 38,838 —sh— c:\windows\system32\dumagaka.dll
2009-01-31 04:34 133,211 a–sh— c:\windows\system32\swyiel.dll
2009-01-31 04:15 133,311 a–sh— c:\windows\system32\gdjgdu.dll
2009-01-30 15:59 133,326 a–sh— c:\windows\system32\cycozy.dll
2009-01-30 15:59 135,371 a–sh— c:\windows\system32\galgro.dll
2009-01-30 15:48 135,404 a–sh— c:\windows\system32\noqitf.dll
2009-01-30 15:30 133,195 a–sh— c:\windows\system32\rxapbr.dll
2009-01-30 15:11 133,387 a–sh— c:\windows\system32\pdncbg.dll
2009-01-30 14:52 133,247 a–sh— c:\windows\system32\tjnpfs.dll
2009-01-30 14:34 133,224 a–sh— c:\windows\system32\rgqbvj.dll
2009-01-30 14:15 135,286 a–sh— c:\windows\system32\tnuqpw.dll
2009-01-30 13:57 133,384 a–sh— c:\windows\system32\mntadv.dll
2009-01-30 13:38 135,273 a–sh— c:\windows\system32\dnllge.dll
2009-01-30 13:20 135,412 a–sh— c:\windows\system32\lraxmp.dll
2009-01-30 13:01 135,324 a–sh— c:\windows\system32\zwompq.dll
2009-01-30 12:43 133,320 a–sh— c:\windows\system32\qlfhvp.dll
2009-01-30 12:24 133,332 a–sh— c:\windows\system32\canuhb.dll
2009-01-30 10:18 135,491 a–sh— c:\windows\system32\ooooqp.dll
2009-01-30 09:49 133,397 a–sh— c:\windows\system32\dnimir.dll
2009-01-30 09:31 135,338 a–sh— c:\windows\system32\obfbny.dll
2009-01-30 09:12 135,352 a–sh— c:\windows\system32\hehzpp.dll
2009-01-30 08:51 133,208 a–sh— c:\windows\system32\xbmyak.dll
2009-01-30 08:32 38,838 —sh— c:\windows\system32\belejara.dll
2009-01-30 08:32 135,497 a–sh— c:\windows\system32\jknwgz.dll
2009-01-30 08:14 135,514 a–sh— c:\windows\system32\nwpjaz.dll
2009-01-30 07:55 133,396 a–sh— c:\windows\system32\odktjm.dll
2009-01-30 07:36 38,838 —sh— c:\windows\system32\zojitiyu.dll
2009-01-30 07:36 135,254 a–sh— c:\windows\system32\pjxufk.dll
2009-01-30 06:30 20,480 —sh— c:\windows\system32\matebuhe.dll
2009-01-30 06:30 133,439 a–sh— c:\windows\system32\tucbvs.dll
2009-01-30 04:06 135,295 a–sh— c:\windows\system32\ikslws.dll
2009-01-30 02:48 135,498 a–sh— c:\windows\system32\kzaxup.dll
2009-01-30 02:29 133,217 a–sh— c:\windows\system32\bitzyy.dll
2009-01-30 02:11 133,290 a–sh— c:\windows\system32\uoqpdx.dll
2009-01-30 01:49 133,447 a–sh— c:\windows\system32\xcaodu.dll
2009-01-30 01:31 38,838 —sh— c:\windows\system32\rinahara.dll
2009-01-30 01:31 135,423 a–sh— c:\windows\system32\bajfex.dll
2009-01-30 01:12 38,830 —sh— c:\windows\system32\jimojuga.dll
2009-01-30 01:12 135,431 a–sh— c:\windows\system32\iicjkk.dll
2009-01-30 00:54 38,838 —sh— c:\windows\system32\serorezu.dll
2009-01-30 00:53 133,177 a–sh— c:\windows\system32\razbbr.dll
2009-01-29 12:39 38,838 —sh— c:\windows\system32\nelezuga.dll
2009-01-29 12:39 135,335 a–sh— c:\windows\system32\objsju.dll
2009-01-29 12:37 135,316 a–sh— c:\windows\system32\dpxvly.dll
2009-01-29 12:27 135,444 a–sh— c:\windows\system32\tjnhfm.dll
2009-01-29 12:09 38,838 —sh— c:\windows\system32\jadovene.dll
2009-01-29 12:08 133,255 a–sh— c:\windows\system32\nhflmx.dll
2009-01-29 11:50 4,096 —sh— c:\windows\system32\niparizi.dll
2009-01-29 11:50 135,483 a–sh— c:\windows\system32\lwmohq.dll
2009-01-29 11:21 4,096 —sh— c:\windows\system32\tubokita.dll
2009-01-29 11:21 135,307 a–sh— c:\windows\system32\yrebhb.dll
2009-01-29 11:03 38,838 —sh— c:\windows\system32\fanijafa.dll
2009-01-29 11:03 133,427 a–sh— c:\windows\system32\cswqwg.dll
2009-01-29 10:42 38,838 —sh— c:\windows\system32\puvugipe.dll
2009-01-29 10:42 135,243 a–sh— c:\windows\system32\zpbrty.dll
2009-01-29 10:23 38,838 —sh— c:\windows\system32\gumovudo.dll
2009-01-29 10:23 133,284 a–sh— c:\windows\system32\djhpyl.dll
2009-01-29 09:59 38,838 —sh— c:\windows\system32\lepokajo.dll
2009-01-29 09:59 135,452 a–sh— c:\windows\system32\tedxwp.dll
2009-01-29 09:41 38,838 —sh— c:\windows\system32\fehilasi.dll
2009-01-29 09:41 133,325 a–sh— c:\windows\system32\erqjen.dll
2009-01-29 09:22 38,838 —sh— c:\windows\system32\waruworu.dll
2009-01-29 09:22 133,402 a–sh— c:\windows\system32\slrcna.dll
2009-01-29 08:59 38,838 —sh— c:\windows\system32\nusoyeta.dll
2009-01-29 08:59 133,475 a–sh— c:\windows\system32\giypcs.dll
2009-01-29 08:33 38,838 —sh— c:\windows\system32\hefojepe.dll
2009-01-29 08:32 133,240 a–sh— c:\windows\system32\prqkye.dll
2009-01-29 08:14 135,309 a–sh— c:\windows\system32\gfasyq.dll
2009-01-29 06:53 135,378 a–sh— c:\windows\system32\hjnfsr.dll
2009-01-29 06:30 135,327 a–sh— c:\windows\system32\jnrmsn.dll
2009-01-29 06:08 133,245 a–sh— c:\windows\system32\vhjpdk.dll
2009-01-29 05:45 133,436 a–sh— c:\windows\system32\pkymcu.dll
2009-01-29 05:23 135,417 a–sh— c:\windows\system32\ihybly.dll
2009-01-29 04:05 135,406 a–sh— c:\windows\system32\ccsanw.dll
2009-01-29 02:25 133,306 a–sh— c:\windows\system32\lxmdfd.dll
2009-01-29 02:02 133,424 a–sh— c:\windows\system32\ihqxnm.dll
2009-01-29 01:40 135,346 a–sh— c:\windows\system32\rbappo.dll
2009-01-29 01:17 135,373 a–sh— c:\windows\system32\uqojyb.dll
2009-01-29 00:55 135,444 a–sh— c:\windows\system32\comlrc.dll
2009-01-29 00:32 133,279 a–sh— c:\windows\system32\cipbjw.dll
2009-01-29 00:10 135,476 a–sh— c:\windows\system32\ofulmd.dll
2009-01-28 23:47 135,293 a–sh— c:\windows\system32\ogodkw.dll
2009-01-28 23:24 133,200 a–sh— c:\windows\system32\xhltik.dll
2009-01-28 11:05 133,283 a–sh— c:\windows\system32\vovtfz.dll
2009-01-27 23:05 135,429 a–sh— c:\windows\system32\hyqolv.dll
2009-01-20 19:37 53,973 a–sh— c:\windows\system32\TDJmVCcf.ini2
2009-01-20 19:37 53,973 a–sh— c:\windows\system32\TDJmVCcf.ini
2009-01-20 15:30 30,290 a–sh— c:\windows\system32\PrYxyccf.ini2
2009-01-20 15:30 30,290 a–sh— c:\windows\system32\PrYxyccf.ini

==================== Find3M ====================

2009-02-02 12:43 98,523 a–sh— c:\windows\system32\kalahavi.dll
2009-02-02 12:43 93,325 a–sh— c:\windows\system32\gipidiwu.dll
2009-02-02 12:43 134,405 a–sh— c:\windows\system32\nehafote.dll
2009-02-02 12:38 99,514 a–sh— c:\windows\system32\bahuwawe.dll
2009-02-02 12:38 134,316 a–sh— c:\windows\system32\zudelawa.dll
2009-02-02 12:38 91,897 a–sh— c:\windows\system32\tefutovi.dll
2009-02-02 12:17 100,455 a–sh— c:\windows\system32\degogeme.dll
2009-02-02 12:17 134,389 a–sh— c:\windows\system32\yovujiye.dll
2009-02-02 12:17 93,476 a–sh— c:\windows\system32\diwakodo.dll
2009-02-02 11:56 91,795 a–sh— c:\windows\system32\totanimo.dll
2009-02-02 11:56 133,859 a–sh— c:\windows\system32\vodideto.dll
2009-02-02 11:56 99,145 a–sh— c:\windows\system32\jaroguwu.dll
2009-02-02 11:36 91,813 a–sh— c:\windows\system32\rirurewi.dll
2009-02-02 11:36 134,264 a–sh— c:\windows\system32\yakorude.dll
2009-02-02 11:36 101,059 a–sh— c:\windows\system32\bitipote.dll
2009-02-02 11:15 133,787 a–sh— c:\windows\system32\vijukosu.dll
2009-02-02 11:15 99,067 a–sh— c:\windows\system32\jegidomu.dll
2009-02-02 11:15 93,415 a–sh— c:\windows\system32\zihosofo.dll
2009-02-02 10:39 134,270 a–sh— c:\windows\system32\tetuluyu.dll
2009-02-02 10:39 91,955 a–sh— c:\windows\system32\sotikoyu.dll
2009-02-02 10:39 99,612 a–sh— c:\windows\system32\mebahupo.dll
2009-02-02 10:18 134,409 a–sh— c:\windows\system32\hehasiya.dll
2009-02-02 10:18 93,369 a–sh— c:\windows\system32\konuguye.dll
2009-02-02 10:18 99,455 a–sh— c:\windows\system32\yiwenana.dll
2009-02-02 10:00 91,835 a–sh— c:\windows\system32\paduyaku.dll
2009-02-02 10:00 133,849 a–sh— c:\windows\system32\fapuwayo.dll
2009-02-02 10:00 99,621 a–sh— c:\windows\system32\yalenuki.dll
2009-02-02 09:41 99,523 a–sh— c:\windows\system32\folojilo.dll
2009-02-02 09:41 134,393 a–sh— c:\windows\system32\debesipe.dll
2009-02-02 09:41 86,693 a–sh— c:\windows\system32\sumahoro.dll
2009-02-02 09:23 133,793 a–sh— c:\windows\system32\biseniro.dll
2009-02-02 09:23 98,651 a–sh— c:\windows\system32\rodorime.dll
2009-02-02 09:23 86,335 a–sh— c:\windows\system32\gupiyaja.dll
2009-02-02 09:04 86,822 a–sh— c:\windows\system32\pesosase.dll
2009-02-02 09:04 133,818 a–sh— c:\windows\system32\pehimoju.dll
2009-02-02 09:04 100,687 a–sh— c:\windows\system32\wodosuso.dll
2009-02-02 08:45 100,483 a–sh— c:\windows\system32\tofopoya.dll
2009-02-02 08:45 134,473 a–sh— c:\windows\system32\pufokogi.dll
2009-02-02 08:45 86,761 a–sh— c:\windows\system32\jozaname.dll
2009-02-02 08:27 86,658 a–sh— c:\windows\system32\tapeyaki.dll
2009-02-02 08:27 134,349 a–sh— c:\windows\system32\liyowemi.dll
2009-02-02 08:27 100,939 a–sh— c:\windows\system32\netojeru.dll
2009-02-02 08:06 99,931 a–sh— c:\windows\system32\jupemuko.dll
2009-02-02 08:06 133,862 a–sh— c:\windows\system32\woyoselo.dll
2009-02-02 08:06 86,846 a–sh— c:\windows\system32\vayejaku.dll
2009-02-02 07:45 98,922 a–sh— c:\windows\system32\pujigala.dll
2009-02-02 07:45 135,451 a–sh— c:\windows\system32\leyekuka.dll
2009-02-02 07:45 86,601 a–sh— c:\windows\system32\galitata.dll
2009-02-02 07:26 135,510 a–sh— c:\windows\system32\meladole.dll
2009-02-02 07:26 86,300 a–sh— c:\windows\system32\kotutuke.dll
2009-02-02 07:08 133,448 a–sh— c:\windows\system32\fovonoka.dll
2009-02-02 07:08 100,456 a–sh— c:\windows\system32\sizobako.dll
2009-02-02 07:08 86,279 a–sh— c:\windows\system32\bupopila.dll
2009-02-02 06:49 135,345 a–sh— c:\windows\system32\divahohi.dll
2009-02-02 06:49 100,561 a–sh— c:\windows\system32\yapoluhe.dll
2009-02-02 06:49 86,190 a–sh— c:\windows\system32\hezabade.dll
2009-02-02 06:25 133,212 a–sh— c:\windows\system32\vumadore.dll
2009-02-02 06:25 100,456 a–sh— c:\windows\system32\ritimubu.dll
2009-02-02 06:25 86,731 a–sh— c:\windows\system32\wabujamo.dll
2009-02-02 06:07 86,723 a–sh— c:\windows\system32\kuyufebu.dll
2009-02-02 06:07 135,301 a–sh— c:\windows\system32\yohuwili.dll
2009-02-02 06:07 100,503 a–sh— c:\windows\system32\nowewire.dll
2009-02-02 05:46 100,493 a–sh— c:\windows\system32\lorikuno.dll
2009-02-02 05:46 133,293 a–sh— c:\windows\system32\nazuyoye.dll
2009-02-02 05:46 86,334 a–sh— c:\windows\system32\madaratu.dll
2009-02-02 05:27 100,674 a–sh— c:\windows\system32\rapuweri.dll
2009-02-02 05:27 135,386 a–sh— c:\windows\system32\tuluteto.dll
2009-02-02 05:27 86,275 a–sh— c:\windows\system32\jifelona.dll
2009-02-02 05:09 135,505 a–sh— c:\windows\system32\fugenehu.dll
2009-02-02 05:08 100,028 a–sh— c:\windows\system32\juburedu.dll
2009-02-02 05:08 86,653 a–sh— c:\windows\system32\yekufelo.dll
2009-02-02 04:50 135,306 a–sh— c:\windows\system32\poyitiki.dll
2009-02-02 04:50 100,607 a–sh— c:\windows\system32\mikuniso.dll
2009-02-02 04:50 86,881 a–sh— c:\windows\system32\wopahunu.dll
2009-02-02 04:31 100,475 a–sh— c:\windows\system32\yimudome.dll
2009-02-02 04:31 135,302 a–sh— c:\windows\system32\mutovebu.dll
2009-02-02 04:31 86,204 a–sh— c:\windows\system32\tojogefa.dll
2009-02-02 04:13 86,340 a–sh— c:\windows\system32\tohohuzo.dll
2009-02-02 04:13 133,248 a–sh— c:\windows\system32\zoweduni.dll
2009-02-02 04:13 100,468 a–sh— c:\windows\system32\havabeve.dll
2009-02-02 03:54 133,444 a–sh— c:\windows\system32\welujile.dll
2009-02-02 03:54 100,578 a–sh— c:\windows\system32\rahopeya.dll
2009-02-02 03:36 135,475 a–sh— c:\windows\system32\navomehi.dll
2009-02-02 03:36 100,586 a–sh— c:\windows\system32\lujipadu.dll
2009-02-02 03:36 86,241 a–sh— c:\windows\system32\yufateki.dll
2009-02-02 03:17 86,771 a–sh— c:\windows\system32\kanugeso.dll
2009-02-02 03:17 133,325 a–sh— c:\windows\system32\popojezu.dll
2009-02-02 03:17 99,935 a–sh— c:\windows\system32\sonijiko.dll
2009-02-02 02:58 133,236 a–sh— c:\windows\system32\wonefivo.dll
2009-02-02 02:58 100,554 a–sh— c:\windows\system32\nulipiji.dll
2009-02-02 02:58 86,167 a–sh— c:\windows\system32\dozovoku.dll
2009-02-02 02:40 133,306 a–sh— c:\windows\system32\vofidibo.dll
2009-02-02 02:40 100,057 a–sh— c:\windows\system32\popatetu.dll
2009-02-02 02:40 86,098 a–sh— c:\windows\system32\fotiyigu.dll
2009-02-02 02:21 135,352 a–sh— c:\windows\system32\lobelepi.dll
2009-02-02 02:21 98,986 a–sh— c:\windows\system32\sodejaro.dll
2009-02-02 02:21 86,185 a–sh— c:\windows\system32\sihikaye.dll
2009-02-02 02:03 135,465 a–sh— c:\windows\system32\sidewatu.dll
2009-02-02 02:03 100,073 a–sh— c:\windows\system32\turikeda.dll
2009-02-02 02:03:11 A–SH— 86,327 c:\windows\system32\rihefiso.dll
0000-00-00 00:00 62,586 a–sh— c:\windows\system32\jojosiru.dll
0000-00-00 00:00 62,586 a–sh— c:\windows\system32\nesuhepa.dll
0000-00-00 00:00 62,586 a–sh— c:\windows\system32\nofopoku.dll

============= FINISH: 14:29:47.96 ===============




Attach.txt

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-02-01.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 9/10/2005 9:10:51 AM
System Uptime: 2/2/2009 12:42:25 PM (2 hours ago)

Motherboard: Dell Inc. | | 0X8582
Processor: Intel® Pentium® D CPU 3.20GHz | Microprocessor | 3192/800mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 461 GiB total, 69.35 GiB free.
D: is CDROM ()
E: is CDROM ()
G: is Removable
H: is Removable
I: is Removable
J: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1172: 11/5/2008 4:12:38 AM - System Checkpoint
RP1173: 11/6/2008 5:12:37 AM - System Checkpoint
RP1174: 11/7/2008 6:12:47 AM - System Checkpoint
RP1175: 11/8/2008 7:12:46 AM - System Checkpoint
RP1176: 11/9/2008 8:12:43 AM - System Checkpoint
RP1177: 11/10/2008 8:13:49 AM - System Checkpoint
RP1178: 11/11/2008 9:12:41 AM - System Checkpoint
RP1179: 11/12/2008 9:47:31 AM - System Checkpoint
RP1180: 11/13/2008 10:12:43 AM - System Checkpoint
RP1181: 11/14/2008 11:13:50 AM - System Checkpoint
RP1182: 11/15/2008 12:51:35 PM - System Checkpoint
RP1183: 11/16/2008 3:00:25 AM - Software Distribution Service 3.0
RP1184: 11/17/2008 3:18:46 AM - System Checkpoint
RP1185: 11/18/2008 4:18:44 AM - System Checkpoint
RP1186: 11/19/2008 5:18:44 AM - System Checkpoint
RP1187: 11/20/2008 6:18:46 AM - System Checkpoint
RP1188: 11/21/2008 7:18:47 AM - System Checkpoint
RP1189: 11/22/2008 8:18:47 AM - System Checkpoint
RP1190: 11/23/2008 9:18:46 AM - System Checkpoint
RP1191: 11/24/2008 9:49:49 AM - System Checkpoint
RP1192: 11/25/2008 10:18:45 AM - System Checkpoint
RP1193: 11/26/2008 10:19:50 AM - System Checkpoint
RP1194: 11/27/2008 11:18:46 AM - System Checkpoint
RP1195: 11/28/2008 12:19:52 PM - System Checkpoint
RP1196: 11/29/2008 12:22:36 PM - System Checkpoint
RP1197: 11/30/2008 1:18:45 PM - System Checkpoint
RP1198: 12/1/2008 4:06:45 PM - System Checkpoint
RP1199: 12/2/2008 4:18:47 PM - System Checkpoint
RP1200: 12/3/2008 4:40:37 PM - System Checkpoint
RP1201: 12/4/2008 5:18:46 PM - System Checkpoint
RP1202: 12/5/2008 6:14:48 PM - System Checkpoint
RP1203: 12/5/2008 10:43:07 PM - Unsigned driver install
RP1204: 12/6/2008 11:14:51 PM - System Checkpoint
RP1205: 12/8/2008 8:45:40 AM - System Checkpoint
RP1206: 12/9/2008 8:50:18 AM - System Checkpoint
RP1207: 12/10/2008 9:17:09 AM - System Checkpoint
RP1208: 12/11/2008 10:17:15 AM - System Checkpoint
RP1209: 12/12/2008 11:01:11 AM - System Checkpoint
RP1210: 12/13/2008 12:49:20 PM - System Checkpoint
RP1211: 12/14/2008 3:00:17 AM - Software Distribution Service 3.0
RP1212: 12/15/2008 3:18:18 AM - System Checkpoint
RP1213: 12/16/2008 3:19:25 AM - System Checkpoint
RP1214: 12/17/2008 4:18:23 AM - System Checkpoint
RP1215: 12/18/2008 5:18:25 AM - System Checkpoint
RP1216: 12/19/2008 5:52:55 AM - System Checkpoint
RP1217: 12/20/2008 6:52:53 AM - System Checkpoint
RP1218: 12/21/2008 3:00:16 AM - Software Distribution Service 3.0
RP1219: 12/22/2008 3:58:04 AM - System Checkpoint
RP1220: 12/23/2008 4:58:05 AM - System Checkpoint
RP1221: 12/24/2008 5:58:06 AM - System Checkpoint
RP1222: 12/25/2008 6:58:07 AM - System Checkpoint
RP1223: 12/26/2008 7:58:11 AM - System Checkpoint
RP1224: 12/27/2008 8:58:09 AM - System Checkpoint
RP1225: 12/28/2008 9:58:11 AM - System Checkpoint
RP1226: 12/29/2008 10:59:18 AM - System Checkpoint
RP1227: 12/29/2008 8:21:22 PM - Removed Windows Live Messenger
RP1228: 12/29/2008 8:23:14 PM - Removed Skype™ 3.8
RP1229: 12/30/2008 9:18:04 PM - System Checkpoint
RP1230: 12/31/2008 10:19:12 PM - System Checkpoint
RP1231: 1/1/2009 11:18:07 PM - System Checkpoint
RP1232: 1/2/2009 11:52:00 PM - System Checkpoint
RP1233: 1/4/2009 12:18:11 AM - System Checkpoint
RP1234: 1/5/2009 12:30:18 AM - System Checkpoint
RP1235: 1/6/2009 12:47:17 AM - System Checkpoint
RP1236: 1/7/2009 12:47:50 AM - System Checkpoint
RP1237: 1/8/2009 1:47:22 AM - System Checkpoint
RP1238: 1/9/2009 2:47:24 AM - System Checkpoint
RP1239: 1/10/2009 3:47:26 AM - System Checkpoint
RP1240: 1/11/2009 4:47:25 AM - System Checkpoint
RP1241: 1/12/2009 5:47:26 AM - System Checkpoint
RP1242: 1/13/2009 6:47:29 AM - System Checkpoint
RP1243: 1/14/2009 7:47:31 AM - System Checkpoint
RP1244: 1/15/2009 8:47:31 AM - System Checkpoint
RP1245: 1/16/2009 9:47:33 AM - System Checkpoint
RP1246: 1/17/2009 10:08:59 AM - System Checkpoint
RP1247: 1/18/2009 3:00:16 AM - Software Distribution Service 3.0
RP1248: 1/19/2009 3:15:24 AM - System Checkpoint
RP1249: 1/20/2009 4:15:24 AM - System Checkpoint
RP1250: 1/20/2009 3:31:09 PM - Last known good configuration
RP1251: 1/21/2009 4:08:47 PM - System Checkpoint
RP1252: 1/22/2009 4:27:12 PM - System Checkpoint
RP1253: 1/23/2009 5:25:56 PM - System Checkpoint
RP1254: 1/24/2009 6:25:58 PM - System Checkpoint
RP1255: 1/25/2009 8:37:00 PM - System Checkpoint
RP1256: 1/26/2009 2:32:47 PM - Installed Snapfish Quick Uploader plugin
RP1257: 1/27/2009 4:35:41 PM - System Checkpoint
RP1258: 1/28/2009 5:20:36 PM - System Checkpoint
RP1259: 1/29/2009 12:13:57 PM - Removed Adobe® Photoshop® Album Starter Edition 3.0
RP1260: 1/29/2009 12:15:33 PM - Removed Before You Know It
RP1261: 1/29/2009 12:16:19 PM - Removed Doom 3
RP1262: 1/29/2009 10:21:22 PM - Removed Dell Support 3.2.1
RP1263: 1/30/2009 5:27:20 PM - Software Distribution Service 3.0
RP1264: 1/31/2009 5:43:29 PM - System Checkpoint
RP1265: 2/1/2009 5:51:24 PM - System Checkpoint

==== Installed Programs ======================

"Nero SoundTrax Help
Ad-Aware SE Personal
Adobe Download Manager 2.0 (Remove Only)
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Photoshop 7.0
Adobe Reader 7.0.8
Adobe Stock Photos 1.0
Advertising Center
AIM 6
AOLIcon
Apple Mobile Device Support
Apple Software Update
Audacity 1.3.3 (Unicode)
Autobahn
AutoUpdate
BitTorrent 4.2.2
Bonjour
Bookworm Adventures Deluxe 1.0
Business Contact Manager for Outlook 2003
CCScore
Conexant D850 56K V.9x DFVc Modem
Creative MediaSource
Dell Digital Jukebox Driver
Dell Driver Reset Tool
Dell Photo AIO Printer 922
Dell Picture Studio v3.0
Dell System Restore
Digital Line Detect
DISC TITLE PRINTER
DivX Codec
DivX Converter
DivX Player
DivX Web Player
DolbyFiles
Download Accelerator Plus (DAP)
Download Updater (AOL LLC)
DVD Decrypter (Remove Only)
DVD Shrink 3.2
Elf Bowling 7 - The Last Insult (remove only)
ESPNMotion
ESSBrwr
ESSCDBK
ESScore
ESSCT
ESSEMAIL
ESSgui
ESShelp
ESSini
ESSPCD
ESSSONIC
ESSTOOLS
essvcpt
ESSvpaht
ESSvpot
FLAC Installer 1.1.2a (remove only)
Garmin Communicator Plugin
GemMaster Mystic
Google Desktop
Google Toolbar for Internet Explorer
High Definition Audio Driver Package - KB835221
HijackThis 2.0.2
HLPIndex
HLPSFO
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Format SDK (KB902344)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
ImagXpress
Intel Matrix Storage Manager
Intel® PRO Network Connections Software v9.2.4.11
Intel® PROSafe for Wired Connections
InterActual Player
Internet Explorer Default Page
InterVideo Promotion Agent
InterVideo WinDVD 7
iPod for Windows 2006-01-10
iPod for Windows 2006-03-23
iTunes
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 4
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
Jasc Paint Shop Photo Album 5
Jasc Paint Shop Pro Studio, Dell Editon
Java 2 Runtime Environment, SE v1.4.2_03
Kodak EasyShare software
KSU
Learn2 Player (Uninstall Only)
Macromedia Flash Player
Macromedia Shockwave Player
McAfee SecurityCenter
Menu Templates - Starter Kit
MetaFrame Presentation Server Web Client for Win32
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Small Business Edition 2003
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft XML Parser
mkw Audio Compression Toolkit
Modem Helper
Movie Templates - Starter Kit
Mozilla Firefox (3.0.5)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
My Way Search Assistant
My Wedding Organizer 5.8.0
Nero 9 Trial
Nero BurningROM
Nero BurnRights
Nero ControlCenter
Nero CoverDesigner
Nero CoverDesigner Help
Nero Disc Copy Gadget
Nero Disc Copy Gadget Help
Nero DiscSpeed
Nero DriveSpeed
Nero Express
Nero InfoTool
Nero Installer
Nero Live
Nero Live Help
Nero PhotoSnap
Nero PhotoSnap Help
Nero Recode
Nero Recode Help
Nero Rescue Agent
Nero RescueAgent Help
Nero ShowTime
Nero StartSmart
Nero StartSmart Help
Nero Vision
Nero WaveEditor
Nero WaveEditor Help
NeroBurningROM
NeroExpress
neroxml
NetWaiting
Noah's Ark Deluxe 1.1
Notifier
NVIDIA Drivers
OfotoXMI
OTtBP
OTtBPSDK
Peggle Deluxe 1.01
Philips Device Manager
Philips Device Plug-in
Photo Viewer 2.25
PowerDVD 5.5
Public Messenger ver 2.03
Qualxserve Service Agreement
QuickTime
RealPlayer
Safari
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
SFR
SHASTA
SKIN0001
SKINXSDK
Sonic DLA
Sonic Encoders
Sonic Update Manager
Sound Blaster Audigy 2 ZS
SoundTrax
Update for Windows Media Player 10 (KB913800)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update Rollup 2 for Windows XP Media Center Edition 2005
VPRINTOL
WebCyberCoach 3.2 Dell
WebFldrs XP
Winamp (remove only)
Windows Genuine Advantage Notifications (KB905474)
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Player 10
Windows Media Player 11
Windows XP Media Center Edition 2005 KB925766
Windows XP Service Pack 3
WinRAR archiver
WinZip
WIRELESS
Yahoo! Messenger

==== Event Viewer Messages From Past Week ========

1/26/2009 4:21:22 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
1/28/2009 7:54:27 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {9B1F122C-2982-4E91-AA8B-E071D54F2A4D}
1/29/2009 4:30:02 PM, error: DCOM [10001] - Unable to start a DCOM Server: {C7E39D60-7A9F-42BF-ABB1-03DC0FA4F493} as /. The error: "%233" Happened while starting this command: c:\PROGRA~1\mcafee.com\agent\mcagent.exe -Embedding
1/29/2009 4:40:30 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the NVSvc service.

==== End Of File ===========================

========== PROCESSES ========== Process explorer.exe killed successfully. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== LoadLibrary failed for c:\windows\system32\tepidike.dll c:\windows\system32\tepidike.dll NOT unregistered. c:\windows\system32\tepidike.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\dvybak.dll c:\windows\system32\dvybak.dll NOT unregistered. c:\windows\system32\dvybak.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\tqxtix.dll c:\windows\system32\tqxtix.dll NOT unregistered. c:\windows\system32\tqxtix.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\oyhpow.dll c:\windows\system32\oyhpow.dll NOT unregistered. c:\windows\system32\oyhpow.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ppxxbv.dll c:\windows\system32\ppxxbv.dll NOT unregistered. c:\windows\system32\ppxxbv.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\gsubhf.dll c:\windows\system32\gsubhf.dll NOT unregistered. c:\windows\system32\gsubhf.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wsnydz.dll c:\windows\system32\wsnydz.dll NOT unregistered. c:\windows\system32\wsnydz.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ygypdb.dll c:\windows\system32\ygypdb.dll NOT unregistered. c:\windows\system32\ygypdb.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\iyiden.dll c:\windows\system32\iyiden.dll NOT unregistered. c:\windows\system32\iyiden.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zucmoe.dll c:\windows\system32\zucmoe.dll NOT unregistered. c:\windows\system32\zucmoe.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\frtvti.dll c:\windows\system32\frtvti.dll NOT unregistered. c:\windows\system32\frtvti.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\yrjgsv.dll c:\windows\system32\yrjgsv.dll NOT unregistered. c:\windows\system32\yrjgsv.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xveins.dll c:\windows\system32\xveins.dll NOT unregistered. c:\windows\system32\xveins.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ggxugx.dll c:\windows\system32\ggxugx.dll NOT unregistered. c:\windows\system32\ggxugx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\mdchau.dll c:\windows\system32\mdchau.dll NOT unregistered. c:\windows\system32\mdchau.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zecfxf.dll c:\windows\system32\zecfxf.dll NOT unregistered. c:\windows\system32\zecfxf.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\qhbrzo.dll c:\windows\system32\qhbrzo.dll NOT unregistered. c:\windows\system32\qhbrzo.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\sswvfw.dll c:\windows\system32\sswvfw.dll NOT unregistered. c:\windows\system32\sswvfw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wcucsx.dll c:\windows\system32\wcucsx.dll NOT unregistered. c:\windows\system32\wcucsx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\pwxqmb.dll c:\windows\system32\pwxqmb.dll NOT unregistered. c:\windows\system32\pwxqmb.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\aibcrl.dll c:\windows\system32\aibcrl.dll NOT unregistered. c:\windows\system32\aibcrl.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ldclzh.dll c:\windows\system32\ldclzh.dll NOT unregistered. c:\windows\system32\ldclzh.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\iefvne.dll c:\windows\system32\iefvne.dll NOT unregistered. c:\windows\system32\iefvne.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\pbxkeq.dll c:\windows\system32\pbxkeq.dll NOT unregistered. c:\windows\system32\pbxkeq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xxbqne.dll c:\windows\system32\xxbqne.dll NOT unregistered. c:\windows\system32\xxbqne.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wyjamx.dll c:\windows\system32\wyjamx.dll NOT unregistered. c:\windows\system32\wyjamx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\cyalvm.dll c:\windows\system32\cyalvm.dll NOT unregistered. c:\windows\system32\cyalvm.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wuusbl.dll c:\windows\system32\wuusbl.dll NOT unregistered. c:\windows\system32\wuusbl.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\acxlqj.dll c:\windows\system32\acxlqj.dll NOT unregistered. c:\windows\system32\acxlqj.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ejkgig.dll c:\windows\system32\ejkgig.dll NOT unregistered. c:\windows\system32\ejkgig.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\azlgej.dll c:\windows\system32\azlgej.dll NOT unregistered. c:\windows\system32\azlgej.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\bvfbpn.dll c:\windows\system32\bvfbpn.dll NOT unregistered. c:\windows\system32\bvfbpn.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\umszvh.dll c:\windows\system32\umszvh.dll NOT unregistered. c:\windows\system32\umszvh.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\luzgfb.dll c:\windows\system32\luzgfb.dll NOT unregistered. c:\windows\system32\luzgfb.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hcnkut.dll c:\windows\system32\hcnkut.dll NOT unregistered. c:\windows\system32\hcnkut.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\goudlc.dll c:\windows\system32\goudlc.dll NOT unregistered. c:\windows\system32\goudlc.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\jmchtf.dll c:\windows\system32\jmchtf.dll NOT unregistered. c:\windows\system32\jmchtf.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lktlde.dll c:\windows\system32\lktlde.dll NOT unregistered. c:\windows\system32\lktlde.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lwojly.dll c:\windows\system32\lwojly.dll NOT unregistered. c:\windows\system32\lwojly.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xeedru.dll c:\windows\system32\xeedru.dll NOT unregistered. c:\windows\system32\xeedru.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\bfxihq.dll c:\windows\system32\bfxihq.dll NOT unregistered. c:\windows\system32\bfxihq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xetnnt.dll c:\windows\system32\xetnnt.dll NOT unregistered. c:\windows\system32\xetnnt.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wamjpq.dll c:\windows\system32\wamjpq.dll NOT unregistered. c:\windows\system32\wamjpq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\kuextq.dll c:\windows\system32\kuextq.dll NOT unregistered. c:\windows\system32\kuextq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\gzoofe.dll c:\windows\system32\gzoofe.dll NOT unregistered. c:\windows\system32\gzoofe.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wgjmnx.dll c:\windows\system32\wgjmnx.dll NOT unregistered. c:\windows\system32\wgjmnx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xntyhq.dll c:\windows\system32\xntyhq.dll NOT unregistered. c:\windows\system32\xntyhq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\znpflb.dll c:\windows\system32\znpflb.dll NOT unregistered. c:\windows\system32\znpflb.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\leajmn.dll c:\windows\system32\leajmn.dll NOT unregistered. c:\windows\system32\leajmn.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\rtrtrr.dll c:\windows\system32\rtrtrr.dll NOT unregistered. c:\windows\system32\rtrtrr.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\fvtpgh.dll c:\windows\system32\fvtpgh.dll NOT unregistered. c:\windows\system32\fvtpgh.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\oycnxz.dll c:\windows\system32\oycnxz.dll NOT unregistered. c:\windows\system32\oycnxz.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xmmulk.dll c:\windows\system32\xmmulk.dll NOT unregistered. c:\windows\system32\xmmulk.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wgbeld.dll c:\windows\system32\wgbeld.dll NOT unregistered. c:\windows\system32\wgbeld.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\qsqizn.dll c:\windows\system32\qsqizn.dll NOT unregistered. c:\windows\system32\qsqizn.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\arcoho.dll c:\windows\system32\arcoho.dll NOT unregistered. c:\windows\system32\arcoho.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\mtgksy.dll c:\windows\system32\mtgksy.dll NOT unregistered. c:\windows\system32\mtgksy.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\schpxx.dll c:\windows\system32\schpxx.dll NOT unregistered. c:\windows\system32\schpxx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\cakkrx.dll c:\windows\system32\cakkrx.dll NOT unregistered. c:\windows\system32\cakkrx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hmxkbi.dll c:\windows\system32\hmxkbi.dll NOT unregistered. c:\windows\system32\hmxkbi.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\adlotc.dll c:\windows\system32\adlotc.dll NOT unregistered. c:\windows\system32\adlotc.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\thgixq.dll c:\windows\system32\thgixq.dll NOT unregistered. c:\windows\system32\thgixq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xmtmzx.dll c:\windows\system32\xmtmzx.dll NOT unregistered. c:\windows\system32\xmtmzx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ghpxke.dll c:\windows\system32\ghpxke.dll NOT unregistered. c:\windows\system32\ghpxke.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\sndtyz.dll c:\windows\system32\sndtyz.dll NOT unregistered. c:\windows\system32\sndtyz.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\tbmtnj.dll c:\windows\system32\tbmtnj.dll NOT unregistered. c:\windows\system32\tbmtnj.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zfgehn.dll c:\windows\system32\zfgehn.dll NOT unregistered. c:\windows\system32\zfgehn.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ltfdnb.dll c:\windows\system32\ltfdnb.dll NOT unregistered. c:\windows\system32\ltfdnb.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\pgdnln.dll c:\windows\system32\pgdnln.dll NOT unregistered. c:\windows\system32\pgdnln.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\kessqp.dll c:\windows\system32\kessqp.dll NOT unregistered. c:\windows\system32\kessqp.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\gfevvk.dll c:\windows\system32\gfevvk.dll NOT unregistered. c:\windows\system32\gfevvk.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\kztmzb.dll c:\windows\system32\kztmzb.dll NOT unregistered. c:\windows\system32\kztmzb.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wjwpkl.dll c:\windows\system32\wjwpkl.dll NOT unregistered. c:\windows\system32\wjwpkl.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\khuhng.dll c:\windows\system32\khuhng.dll NOT unregistered. c:\windows\system32\khuhng.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\yexiud.dll c:\windows\system32\yexiud.dll NOT unregistered. c:\windows\system32\yexiud.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\uczrpo.dll c:\windows\system32\uczrpo.dll NOT unregistered. c:\windows\system32\uczrpo.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\eqilfc.dll c:\windows\system32\eqilfc.dll NOT unregistered. c:\windows\system32\eqilfc.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\fteyql.dll c:\windows\system32\fteyql.dll NOT unregistered. c:\windows\system32\fteyql.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\tiygxi.dll c:\windows\system32\tiygxi.dll NOT unregistered. c:\windows\system32\tiygxi.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wdlbyu.dll c:\windows\system32\wdlbyu.dll NOT unregistered. c:\windows\system32\wdlbyu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\eveuem.dll c:\windows\system32\eveuem.dll NOT unregistered. c:\windows\system32\eveuem.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\iqttjd.dll c:\windows\system32\iqttjd.dll NOT unregistered. c:\windows\system32\iqttjd.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zxarwg.dll c:\windows\system32\zxarwg.dll NOT unregistered. c:\windows\system32\zxarwg.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\rmfomo.dll c:\windows\system32\rmfomo.dll NOT unregistered. c:\windows\system32\rmfomo.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\rpnacs.dll c:\windows\system32\rpnacs.dll NOT unregistered. c:\windows\system32\rpnacs.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\dakiea.dll c:\windows\system32\dakiea.dll NOT unregistered. c:\windows\system32\dakiea.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\eouceg.dll c:\windows\system32\eouceg.dll NOT unregistered. c:\windows\system32\eouceg.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ignclx.dll c:\windows\system32\ignclx.dll NOT unregistered. c:\windows\system32\ignclx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\tulrkw.dll c:\windows\system32\tulrkw.dll NOT unregistered. c:\windows\system32\tulrkw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ryogfr.dll c:\windows\system32\ryogfr.dll NOT unregistered. c:\windows\system32\ryogfr.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\fhnnww.dll c:\windows\system32\fhnnww.dll NOT unregistered. c:\windows\system32\fhnnww.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\oajsui.dll c:\windows\system32\oajsui.dll NOT unregistered. c:\windows\system32\oajsui.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\fxzhuf.dll c:\windows\system32\fxzhuf.dll NOT unregistered. c:\windows\system32\fxzhuf.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ztenqw.dll c:\windows\system32\ztenqw.dll NOT unregistered. c:\windows\system32\ztenqw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\tjxpwp.dll c:\windows\system32\tjxpwp.dll NOT unregistered. c:\windows\system32\tjxpwp.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xxhhxu.dll c:\windows\system32\xxhhxu.dll NOT unregistered. c:\windows\system32\xxhhxu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lrsbze.dll c:\windows\system32\lrsbze.dll NOT unregistered. c:\windows\system32\lrsbze.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\cyojpt.dll c:\windows\system32\cyojpt.dll NOT unregistered. c:\windows\system32\cyojpt.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\uexqzt.dll c:\windows\system32\uexqzt.dll NOT unregistered. c:\windows\system32\uexqzt.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\yrlpvn.dll c:\windows\system32\yrlpvn.dll NOT unregistered. c:\windows\system32\yrlpvn.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hnsyve.dll c:\windows\system32\hnsyve.dll NOT unregistered. c:\windows\system32\hnsyve.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\bmpkeh.dll c:\windows\system32\bmpkeh.dll NOT unregistered. c:\windows\system32\bmpkeh.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\uugvcv.dll c:\windows\system32\uugvcv.dll NOT unregistered. c:\windows\system32\uugvcv.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\izvpzw.dll c:\windows\system32\izvpzw.dll NOT unregistered. c:\windows\system32\izvpzw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\emhivg.dll c:\windows\system32\emhivg.dll NOT unregistered. c:\windows\system32\emhivg.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\qsftpd.dll c:\windows\system32\qsftpd.dll NOT unregistered. c:\windows\system32\qsftpd.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hljhkh.dll c:\windows\system32\hljhkh.dll NOT unregistered. c:\windows\system32\hljhkh.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xxcyks.dll c:\windows\system32\xxcyks.dll NOT unregistered. c:\windows\system32\xxcyks.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\qifwlr.dll c:\windows\system32\qifwlr.dll NOT unregistered. c:\windows\system32\qifwlr.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\rhsdpu.dll c:\windows\system32\rhsdpu.dll NOT unregistered. c:\windows\system32\rhsdpu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\yqenzn.dll c:\windows\system32\yqenzn.dll NOT unregistered. c:\windows\system32\yqenzn.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lckdlq.dll c:\windows\system32\lckdlq.dll NOT unregistered. c:\windows\system32\lckdlq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\shyxhr.dll c:\windows\system32\shyxhr.dll NOT unregistered. c:\windows\system32\shyxhr.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lmtqwx.dll c:\windows\system32\lmtqwx.dll NOT unregistered. c:\windows\system32\lmtqwx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\etjbdk.dll c:\windows\system32\etjbdk.dll NOT unregistered. c:\windows\system32\etjbdk.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\dfrilq.dll c:\windows\system32\dfrilq.dll NOT unregistered. c:\windows\system32\dfrilq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\rkfxwr.dll c:\windows\system32\rkfxwr.dll NOT unregistered. c:\windows\system32\rkfxwr.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\endvom.dll c:\windows\system32\endvom.dll NOT unregistered. c:\windows\system32\endvom.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\kepfyf.dll c:\windows\system32\kepfyf.dll NOT unregistered. c:\windows\system32\kepfyf.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zacnys.dll c:\windows\system32\zacnys.dll NOT unregistered. c:\windows\system32\zacnys.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zcdgtd.dll c:\windows\system32\zcdgtd.dll NOT unregistered. c:\windows\system32\zcdgtd.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\odtltb.dll c:\windows\system32\odtltb.dll NOT unregistered. c:\windows\system32\odtltb.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\mqldia.dll c:\windows\system32\mqldia.dll NOT unregistered. c:\windows\system32\mqldia.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\olznwz.dll c:\windows\system32\olznwz.dll NOT unregistered. c:\windows\system32\olznwz.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\pleukh.dll c:\windows\system32\pleukh.dll NOT unregistered. c:\windows\system32\pleukh.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wscwev.dll c:\windows\system32\wscwev.dll NOT unregistered. c:\windows\system32\wscwev.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\jgavmk.dll c:\windows\system32\jgavmk.dll NOT unregistered. c:\windows\system32\jgavmk.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lflecb.dll c:\windows\system32\lflecb.dll NOT unregistered. c:\windows\system32\lflecb.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ghwzbc.dll c:\windows\system32\ghwzbc.dll NOT unregistered. c:\windows\system32\ghwzbc.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lhvsuc.dll c:\windows\system32\lhvsuc.dll NOT unregistered. c:\windows\system32\lhvsuc.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\cpyacu.dll c:\windows\system32\cpyacu.dll NOT unregistered. c:\windows\system32\cpyacu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\qgxizq.dll c:\windows\system32\qgxizq.dll NOT unregistered. c:\windows\system32\qgxizq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hoovwf.dll c:\windows\system32\hoovwf.dll NOT unregistered. c:\windows\system32\hoovwf.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\fpfxgv.dll c:\windows\system32\fpfxgv.dll NOT unregistered. c:\windows\system32\fpfxgv.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zodrpz.dll c:\windows\system32\zodrpz.dll NOT unregistered. c:\windows\system32\zodrpz.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\fiaocw.dll c:\windows\system32\fiaocw.dll NOT unregistered. c:\windows\system32\fiaocw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\gixopw.dll c:\windows\system32\gixopw.dll NOT unregistered. c:\windows\system32\gixopw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\uogrjt.dll c:\windows\system32\uogrjt.dll NOT unregistered. c:\windows\system32\uogrjt.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\vcgsmk.dll c:\windows\system32\vcgsmk.dll NOT unregistered. c:\windows\system32\vcgsmk.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\guzmcg.dll c:\windows\system32\guzmcg.dll NOT unregistered. c:\windows\system32\guzmcg.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xfdxzy.dll c:\windows\system32\xfdxzy.dll NOT unregistered. c:\windows\system32\xfdxzy.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\tammug.dll c:\windows\system32\tammug.dll NOT unregistered. c:\windows\system32\tammug.dll moved successfully. LoadLibrary failed for c:\windows\system32\lanimaye.dll c:\windows\system32\lanimaye.dll NOT unregistered. c:\windows\system32\lanimaye.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hqspdo.dll c:\windows\system32\hqspdo.dll NOT unregistered. c:\windows\system32\hqspdo.dll moved successfully. LoadLibrary failed for c:\windows\system32\rotenopu.dll c:\windows\system32\rotenopu.dll NOT unregistered. c:\windows\system32\rotenopu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\bwcbhd.dll c:\windows\system32\bwcbhd.dll NOT unregistered. c:\windows\system32\bwcbhd.dll moved successfully. LoadLibrary failed for c:\windows\system32\fagonifa.dll c:\windows\system32\fagonifa.dll NOT unregistered. c:\windows\system32\fagonifa.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hlvaru.dll c:\windows\system32\hlvaru.dll NOT unregistered. c:\windows\system32\hlvaru.dll moved successfully. LoadLibrary failed for c:\windows\system32\kivowule.dll c:\windows\system32\kivowule.dll NOT unregistered. c:\windows\system32\kivowule.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ejyvib.dll c:\windows\system32\ejyvib.dll NOT unregistered. c:\windows\system32\ejyvib.dll moved successfully. LoadLibrary failed for c:\windows\system32\tufamovo.dll c:\windows\system32\tufamovo.dll NOT unregistered. c:\windows\system32\tufamovo.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\fszidi.dll c:\windows\system32\fszidi.dll NOT unregistered. c:\windows\system32\fszidi.dll moved successfully. LoadLibrary failed for c:\windows\system32\sasisudi.dll c:\windows\system32\sasisudi.dll NOT unregistered. c:\windows\system32\sasisudi.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\dprrux.dll c:\windows\system32\dprrux.dll NOT unregistered. c:\windows\system32\dprrux.dll moved successfully. LoadLibrary failed for c:\windows\system32\hopelalo.dll c:\windows\system32\hopelalo.dll NOT unregistered. c:\windows\system32\hopelalo.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zctqmg.dll c:\windows\system32\zctqmg.dll NOT unregistered. c:\windows\system32\zctqmg.dll moved successfully. LoadLibrary failed for c:\windows\system32\pogepehe.dll c:\windows\system32\pogepehe.dll NOT unregistered. c:\windows\system32\pogepehe.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ifomti.dll c:\windows\system32\ifomti.dll NOT unregistered. c:\windows\system32\ifomti.dll moved successfully. LoadLibrary failed for c:\windows\system32\gemidesu.dll c:\windows\system32\gemidesu.dll NOT unregistered. c:\windows\system32\gemidesu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\wgexrd.dll c:\windows\system32\wgexrd.dll NOT unregistered. c:\windows\system32\wgexrd.dll moved successfully. LoadLibrary failed for c:\windows\system32\kigilepi.dll c:\windows\system32\kigilepi.dll NOT unregistered. c:\windows\system32\kigilepi.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lkitjg.dll c:\windows\system32\lkitjg.dll NOT unregistered. c:\windows\system32\lkitjg.dll moved successfully. LoadLibrary failed for c:\windows\system32\sezogibe.dll c:\windows\system32\sezogibe.dll NOT unregistered. c:\windows\system32\sezogibe.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\rajaux.dll c:\windows\system32\rajaux.dll NOT unregistered. c:\windows\system32\rajaux.dll moved successfully. LoadLibrary failed for c:\windows\system32\vebukufu.dll c:\windows\system32\vebukufu.dll NOT unregistered. c:\windows\system32\vebukufu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\swhlsc.dll c:\windows\system32\swhlsc.dll NOT unregistered. c:\windows\system32\swhlsc.dll moved successfully. LoadLibrary failed for c:\windows\system32\volamele.dll c:\windows\system32\volamele.dll NOT unregistered. c:\windows\system32\volamele.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\jsryvv.dll c:\windows\system32\jsryvv.dll NOT unregistered. c:\windows\system32\jsryvv.dll moved successfully. LoadLibrary failed for c:\windows\system32\wiwenazo.dll c:\windows\system32\wiwenazo.dll NOT unregistered. c:\windows\system32\wiwenazo.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ieiswj.dll c:\windows\system32\ieiswj.dll NOT unregistered. c:\windows\system32\ieiswj.dll moved successfully. LoadLibrary failed for c:\windows\system32\mozuvagi.dll c:\windows\system32\mozuvagi.dll NOT unregistered. c:\windows\system32\mozuvagi.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\trveeg.dll c:\windows\system32\trveeg.dll NOT unregistered. c:\windows\system32\trveeg.dll moved successfully. LoadLibrary failed for c:\windows\system32\tokabone.dll c:\windows\system32\tokabone.dll NOT unregistered. c:\windows\system32\tokabone.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xeusra.dll c:\windows\system32\xeusra.dll NOT unregistered. c:\windows\system32\xeusra.dll moved successfully. LoadLibrary failed for c:\windows\system32\motobusi.dll c:\windows\system32\motobusi.dll NOT unregistered. c:\windows\system32\motobusi.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\iyvixj.dll c:\windows\system32\iyvixj.dll NOT unregistered. c:\windows\system32\iyvixj.dll moved successfully. LoadLibrary failed for c:\windows\system32\yamihimo.dll c:\windows\system32\yamihimo.dll NOT unregistered. c:\windows\system32\yamihimo.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zymkqv.dll c:\windows\system32\zymkqv.dll NOT unregistered. c:\windows\system32\zymkqv.dll moved successfully. LoadLibrary failed for c:\windows\system32\pibosine.dll c:\windows\system32\pibosine.dll NOT unregistered. c:\windows\system32\pibosine.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\yjxwqq.dll c:\windows\system32\yjxwqq.dll NOT unregistered. c:\windows\system32\yjxwqq.dll moved successfully. LoadLibrary failed for c:\windows\system32\bikuhagu.dll c:\windows\system32\bikuhagu.dll NOT unregistered. c:\windows\system32\bikuhagu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\noeyon.dll c:\windows\system32\noeyon.dll NOT unregistered. c:\windows\system32\noeyon.dll moved successfully. LoadLibrary failed for c:\windows\system32\wanisupa.dll c:\windows\system32\wanisupa.dll NOT unregistered. c:\windows\system32\wanisupa.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\dbbpdx.dll c:\windows\system32\dbbpdx.dll NOT unregistered. c:\windows\system32\dbbpdx.dll moved successfully. LoadLibrary failed for c:\windows\system32\renibupu.dll c:\windows\system32\renibupu.dll NOT unregistered. c:\windows\system32\renibupu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\pdcsmk.dll c:\windows\system32\pdcsmk.dll NOT unregistered. c:\windows\system32\pdcsmk.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\dwtdjf.dll c:\windows\system32\dwtdjf.dll NOT unregistered. c:\windows\system32\dwtdjf.dll moved successfully. LoadLibrary failed for c:\windows\system32\napigowu.dll c:\windows\system32\napigowu.dll NOT unregistered. c:\windows\system32\napigowu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zuumfr.dll c:\windows\system32\zuumfr.dll NOT unregistered. c:\windows\system32\zuumfr.dll moved successfully. LoadLibrary failed for c:\windows\system32\luzilufe.dll c:\windows\system32\luzilufe.dll NOT unregistered. c:\windows\system32\luzilufe.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\efutzn.dll c:\windows\system32\efutzn.dll NOT unregistered. c:\windows\system32\efutzn.dll moved successfully. LoadLibrary failed for c:\windows\system32\dumagaka.dll c:\windows\system32\dumagaka.dll NOT unregistered. c:\windows\system32\dumagaka.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\swyiel.dll c:\windows\system32\swyiel.dll NOT unregistered. c:\windows\system32\swyiel.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\gdjgdu.dll c:\windows\system32\gdjgdu.dll NOT unregistered. c:\windows\system32\gdjgdu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\cycozy.dll c:\windows\system32\cycozy.dll NOT unregistered. c:\windows\system32\cycozy.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\galgro.dll c:\windows\system32\galgro.dll NOT unregistered. c:\windows\system32\galgro.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\noqitf.dll c:\windows\system32\noqitf.dll NOT unregistered. c:\windows\system32\noqitf.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\rxapbr.dll c:\windows\system32\rxapbr.dll NOT unregistered. c:\windows\system32\rxapbr.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\pdncbg.dll c:\windows\system32\pdncbg.dll NOT unregistered. c:\windows\system32\pdncbg.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\tjnpfs.dll c:\windows\system32\tjnpfs.dll NOT unregistered. c:\windows\system32\tjnpfs.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\rgqbvj.dll c:\windows\system32\rgqbvj.dll NOT unregistered. c:\windows\system32\rgqbvj.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\tnuqpw.dll c:\windows\system32\tnuqpw.dll NOT unregistered. c:\windows\system32\tnuqpw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\mntadv.dll c:\windows\system32\mntadv.dll NOT unregistered. c:\windows\system32\mntadv.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\dnllge.dll c:\windows\system32\dnllge.dll NOT unregistered. c:\windows\system32\dnllge.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lraxmp.dll c:\windows\system32\lraxmp.dll NOT unregistered. c:\windows\system32\lraxmp.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zwompq.dll c:\windows\system32\zwompq.dll NOT unregistered. c:\windows\system32\zwompq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\qlfhvp.dll c:\windows\system32\qlfhvp.dll NOT unregistered. c:\windows\system32\qlfhvp.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\canuhb.dll c:\windows\system32\canuhb.dll NOT unregistered. c:\windows\system32\canuhb.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ooooqp.dll c:\windows\system32\ooooqp.dll NOT unregistered. c:\windows\system32\ooooqp.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\dnimir.dll c:\windows\system32\dnimir.dll NOT unregistered. c:\windows\system32\dnimir.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\obfbny.dll c:\windows\system32\obfbny.dll NOT unregistered. c:\windows\system32\obfbny.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hehzpp.dll c:\windows\system32\hehzpp.dll NOT unregistered. c:\windows\system32\hehzpp.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xbmyak.dll c:\windows\system32\xbmyak.dll NOT unregistered. c:\windows\system32\xbmyak.dll moved successfully. LoadLibrary failed for c:\windows\system32\belejara.dll c:\windows\system32\belejara.dll NOT unregistered. c:\windows\system32\belejara.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\jknwgz.dll c:\windows\system32\jknwgz.dll NOT unregistered. c:\windows\system32\jknwgz.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\nwpjaz.dll c:\windows\system32\nwpjaz.dll NOT unregistered. c:\windows\system32\nwpjaz.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\odktjm.dll c:\windows\system32\odktjm.dll NOT unregistered. c:\windows\system32\odktjm.dll moved successfully. LoadLibrary failed for c:\windows\system32\zojitiyu.dll c:\windows\system32\zojitiyu.dll NOT unregistered. c:\windows\system32\zojitiyu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\pjxufk.dll c:\windows\system32\pjxufk.dll NOT unregistered. c:\windows\system32\pjxufk.dll moved successfully. LoadLibrary failed for c:\windows\system32\matebuhe.dll c:\windows\system32\matebuhe.dll NOT unregistered. c:\windows\system32\matebuhe.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\tucbvs.dll c:\windows\system32\tucbvs.dll NOT unregistered. c:\windows\system32\tucbvs.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ikslws.dll c:\windows\system32\ikslws.dll NOT unregistered. c:\windows\system32\ikslws.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\kzaxup.dll c:\windows\system32\kzaxup.dll NOT unregistered. c:\windows\system32\kzaxup.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\bitzyy.dll c:\windows\system32\bitzyy.dll NOT unregistered. c:\windows\system32\bitzyy.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\uoqpdx.dll c:\windows\system32\uoqpdx.dll NOT unregistered. c:\windows\system32\uoqpdx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xcaodu.dll c:\windows\system32\xcaodu.dll NOT unregistered. c:\windows\system32\xcaodu.dll moved successfully. LoadLibrary failed for c:\windows\system32\rinahara.dll c:\windows\system32\rinahara.dll NOT unregistered. c:\windows\system32\rinahara.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\bajfex.dll c:\windows\system32\bajfex.dll NOT unregistered. c:\windows\system32\bajfex.dll moved successfully. LoadLibrary failed for c:\windows\system32\jimojuga.dll c:\windows\system32\jimojuga.dll NOT unregistered. c:\windows\system32\jimojuga.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\iicjkk.dll c:\windows\system32\iicjkk.dll NOT unregistered. c:\windows\system32\iicjkk.dll moved successfully. LoadLibrary failed for c:\windows\system32\serorezu.dll c:\windows\system32\serorezu.dll NOT unregistered. c:\windows\system32\serorezu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\razbbr.dll c:\windows\system32\razbbr.dll NOT unregistered. c:\windows\system32\razbbr.dll moved successfully. LoadLibrary failed for c:\windows\system32\nelezuga.dll c:\windows\system32\nelezuga.dll NOT unregistered. c:\windows\system32\nelezuga.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\objsju.dll c:\windows\system32\objsju.dll NOT unregistered. c:\windows\system32\objsju.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\dpxvly.dll c:\windows\system32\dpxvly.dll NOT unregistered. c:\windows\system32\dpxvly.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\tjnhfm.dll c:\windows\system32\tjnhfm.dll NOT unregistered. c:\windows\system32\tjnhfm.dll moved successfully. LoadLibrary failed for c:\windows\system32\jadovene.dll c:\windows\system32\jadovene.dll NOT unregistered. c:\windows\system32\jadovene.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\nhflmx.dll c:\windows\system32\nhflmx.dll NOT unregistered. c:\windows\system32\nhflmx.dll moved successfully. LoadLibrary failed for c:\windows\system32\niparizi.dll c:\windows\system32\niparizi.dll NOT unregistered. c:\windows\system32\niparizi.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lwmohq.dll c:\windows\system32\lwmohq.dll NOT unregistered. c:\windows\system32\lwmohq.dll moved successfully. LoadLibrary failed for c:\windows\system32\tubokita.dll c:\windows\system32\tubokita.dll NOT unregistered. c:\windows\system32\tubokita.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\yrebhb.dll c:\windows\system32\yrebhb.dll NOT unregistered. c:\windows\system32\yrebhb.dll moved successfully. LoadLibrary failed for c:\windows\system32\fanijafa.dll c:\windows\system32\fanijafa.dll NOT unregistered. c:\windows\system32\fanijafa.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\cswqwg.dll c:\windows\system32\cswqwg.dll NOT unregistered. c:\windows\system32\cswqwg.dll moved successfully. LoadLibrary failed for c:\windows\system32\puvugipe.dll c:\windows\system32\puvugipe.dll NOT unregistered. c:\windows\system32\puvugipe.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\zpbrty.dll c:\windows\system32\zpbrty.dll NOT unregistered. c:\windows\system32\zpbrty.dll moved successfully. LoadLibrary failed for c:\windows\system32\gumovudo.dll c:\windows\system32\gumovudo.dll NOT unregistered. c:\windows\system32\gumovudo.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\djhpyl.dll c:\windows\system32\djhpyl.dll NOT unregistered. c:\windows\system32\djhpyl.dll moved successfully. LoadLibrary failed for c:\windows\system32\lepokajo.dll c:\windows\system32\lepokajo.dll NOT unregistered. File move failed. c:\windows\system32\lepokajo.dll scheduled to be moved on reboot. DllUnregisterServer procedure not found in c:\windows\system32\tedxwp.dll c:\windows\system32\tedxwp.dll NOT unregistered. c:\windows\system32\tedxwp.dll moved successfully. LoadLibrary failed for c:\windows\system32\fehilasi.dll c:\windows\system32\fehilasi.dll NOT unregistered. c:\windows\system32\fehilasi.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\erqjen.dll c:\windows\system32\erqjen.dll NOT unregistered. c:\windows\system32\erqjen.dll moved successfully. LoadLibrary failed for c:\windows\system32\waruworu.dll c:\windows\system32\waruworu.dll NOT unregistered. c:\windows\system32\waruworu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\slrcna.dll c:\windows\system32\slrcna.dll NOT unregistered. c:\windows\system32\slrcna.dll moved successfully. LoadLibrary failed for c:\windows\system32\nusoyeta.dll c:\windows\system32\nusoyeta.dll NOT unregistered. c:\windows\system32\nusoyeta.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\giypcs.dll c:\windows\system32\giypcs.dll NOT unregistered. c:\windows\system32\giypcs.dll moved successfully. LoadLibrary failed for c:\windows\system32\hefojepe.dll c:\windows\system32\hefojepe.dll NOT unregistered. c:\windows\system32\hefojepe.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\prqkye.dll c:\windows\system32\prqkye.dll NOT unregistered. c:\windows\system32\prqkye.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\gfasyq.dll c:\windows\system32\gfasyq.dll NOT unregistered. c:\windows\system32\gfasyq.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hjnfsr.dll c:\windows\system32\hjnfsr.dll NOT unregistered. c:\windows\system32\hjnfsr.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\jnrmsn.dll c:\windows\system32\jnrmsn.dll NOT unregistered. c:\windows\system32\jnrmsn.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\vhjpdk.dll c:\windows\system32\vhjpdk.dll NOT unregistered. c:\windows\system32\vhjpdk.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\pkymcu.dll c:\windows\system32\pkymcu.dll NOT unregistered. c:\windows\system32\pkymcu.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ihybly.dll c:\windows\system32\ihybly.dll NOT unregistered. c:\windows\system32\ihybly.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ccsanw.dll c:\windows\system32\ccsanw.dll NOT unregistered. c:\windows\system32\ccsanw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\lxmdfd.dll c:\windows\system32\lxmdfd.dll NOT unregistered. c:\windows\system32\lxmdfd.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ihqxnm.dll c:\windows\system32\ihqxnm.dll NOT unregistered. c:\windows\system32\ihqxnm.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\rbappo.dll c:\windows\system32\rbappo.dll NOT unregistered. c:\windows\system32\rbappo.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\uqojyb.dll c:\windows\system32\uqojyb.dll NOT unregistered. c:\windows\system32\uqojyb.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\comlrc.dll c:\windows\system32\comlrc.dll NOT unregistered. c:\windows\system32\comlrc.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\cipbjw.dll c:\windows\system32\cipbjw.dll NOT unregistered. c:\windows\system32\cipbjw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ofulmd.dll c:\windows\system32\ofulmd.dll NOT unregistered. c:\windows\system32\ofulmd.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\ogodkw.dll c:\windows\system32\ogodkw.dll NOT unregistered. c:\windows\system32\ogodkw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\xhltik.dll c:\windows\system32\xhltik.dll NOT unregistered. c:\windows\system32\xhltik.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\vovtfz.dll c:\windows\system32\vovtfz.dll NOT unregistered. c:\windows\system32\vovtfz.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hyqolv.dll c:\windows\system32\hyqolv.dll NOT unregistered. c:\windows\system32\hyqolv.dll moved successfully. c:\windows\system32\TDJmVCcf.ini2 moved successfully. c:\windows\system32\TDJmVCcf.ini moved successfully. c:\windows\system32\PrYxyccf.ini2 moved successfully. c:\windows\system32\PrYxyccf.ini moved successfully. ========== COMMANDS ========== File delete failed. C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\AcrE60C.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\AcrE60F.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\etilqs_AvLctICQScghh1y3lGSe scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\~DFA6CA.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\~DFF3B4.tmp scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\mcafee_0QQi0bq80CdEZ1l scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\mcafee_dq21YGM1dcfm7RM scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\mcmsc_57bOqV8DN2A3yIs scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\mcmsc_jJBdTd0WkdVE1Y8 scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\mcmsc_KcBhlL8U79dEO9T scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\mcmsc_pP1izTdAz1AHG9v scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\mcmsc_Wt8zpx3BqF5V9y8 scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_6b4.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\sqlite_6bUQewaAL4aPkfv scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\sqlite_6nFec7CMIh6eG1N scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\sqlite_e7vf05n8ARzNboU scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\WFVB.tmp scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. File delete failed. C:\Documents and Settings\Victor A. Vega\Local Settings\Application Data\Mozilla\Firefox\Profiles\kyqyolkb.default\Cache\_CACHE_001_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Victor A. Vega\Local Settings\Application Data\Mozilla\Firefox\Profiles\kyqyolkb.default\Cache\_CACHE_002_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Victor A. Vega\Local Settings\Application Data\Mozilla\Firefox\Profiles\kyqyolkb.default\Cache\_CACHE_003_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Victor A. Vega\Local Settings\Application Data\Mozilla\Firefox\Profiles\kyqyolkb.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Victor A. Vega\Local Settings\Application Data\Mozilla\Firefox\Profiles\kyqyolkb.default\urlclassifier3.sqlite scheduled to be deleted on reboot. FireFox cache emptied. Temp folders emptied. Explorer started successfully OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02022009_145708 Files moved on Reboot… LoadLibrary failed for c:\windows\system32\lepokajo.dll c:\windows\system32\lepokajo.dll NOT unregistered. c:\windows\system32\lepokajo.dll moved successfully. File C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\AcrE60C.tmp not found! File C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\AcrE60F.tmp not found! File C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\etilqs_AvLctICQScghh1y3lGSe not found! File C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\~DFA6CA.tmp not found! C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\~DFF3B4.tmp moved successfully. File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot. File C:\WINDOWS\temp\mcafee_0QQi0bq80CdEZ1l not found! File C:\WINDOWS\temp\mcafee_dq21YGM1dcfm7RM not found! File C:\WINDOWS\temp\mcmsc_57bOqV8DN2A3yIs not found! File C:\WINDOWS\temp\mcmsc_jJBdTd0WkdVE1Y8 not found! File C:\WINDOWS\temp\mcmsc_KcBhlL8U79dEO9T not found! File C:\WINDOWS\temp\mcmsc_pP1izTdAz1AHG9v not found! File C:\WINDOWS\temp\mcmsc_Wt8zpx3BqF5V9y8 not found! File C:\WINDOWS\temp\Perflib_Perfdata_6b4.dat not found! C:\WINDOWS\temp\sqlite_6bUQewaAL4aPkfv moved successfully. C:\WINDOWS\temp\sqlite_6nFec7CMIh6eG1N moved successfully. C:\WINDOWS\temp\sqlite_e7vf05n8ARzNboU moved successfully. File C:\WINDOWS\temp\WFVB.tmp not found! C:\Documents and Settings\Victor A. Vega\Local Settings\Application Data\Mozilla\Firefox\Profiles\kyqyolkb.default\Cache\_CACHE_001_ moved successfully. C:\Documents and Settings\Victor A. Vega\Local Settings\Application Data\Mozilla\Firefox\Profiles\kyqyolkb.default\Cache\_CACHE_002_ moved successfully. C:\Documents and Settings\Victor A. Vega\Local Settings\Application Data\Mozilla\Firefox\Profiles\kyqyolkb.default\Cache\_CACHE_003_ moved successfully. C:\Documents and Settings\Victor A. Vega\Local Settings\Application Data\Mozilla\Firefox\Profiles\kyqyolkb.default\Cache\_CACHE_MAP_ moved successfully. C:\Documents and Settings\Victor A. Vega\Local Settings\Application Data\Mozilla\Firefox\Profiles\kyqyolkb.default\urlclassifier3.sqlite moved successfully. DDS (Ver_09-02-01.01) - NTFSx86 Run by [removed] at 15:09:55.92 on Mon 02/02/2009 Internet Explorer: 7.0.5730.13 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.2562 [GMT -5:00] AV: McAfee VirusScan *On-access scanning enabled* (Updated) FW: McAfee Personal Firewall *enabled* ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe C:\Program Files\McAfee\SiteAdvisor\McSACore.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe c:\program files\common files\mcafee\mna\mcnasvc.exe c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\McAfee\MPF\MPFSrv.exe C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe C:\WINDOWS\system32\nvsvc32.exe svchost.exe C:\WINDOWS\system32\svchost.exe -k imgsvc c:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\notepad.exe C:\WINDOWS\ehome\ehtray.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE C:\WINDOWS\eHome\ehmsas.exe C:\WINDOWS\system32\CTHELPER.EXE C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe C:\Program Files\Dell Photo AIO Printer 922\dlbtbmon.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Philips\Philips Lime Service\bin\Lime.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Victor A. Vega\Desktop\dds.pif ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ig?sourceid=navclient&ie=UTF-8&hl=en uSearch Page = hxxp://www.google.com uDefault_Page_URL = hxxp://www.dell4me.com/myway uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s mSearchAssistant = hxxp://www.google.com/ie uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - uURLSearchHooks: H - No File mURLSearchHooks: H - No File BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll BHO: Gamevance: {0ed403e8-470a-4a8a-85a4-d7688cfe39a3} - c:\program files\gamevance\gamevancelib32.dll BHO: {28d09d6f-b93e-45fa-92d7-52e70e9cfa1e} - c:\windows\system32\jojosiru.dll BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll BHO: {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - No File BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll {6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.5.0_11\bin\ssv.dll BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll {889eeacf-c43a-403d-b427-5aec5b495bb1} BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar5.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\3.1.807.1746\swg.dll BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll BHO: {12494c1c-802b-c6ab-1ac4-ff6cdb96265d}: {d56269bd-c6ff-4ca1-ba6c-b208c1c49421} - c:\windows\system32\vovtfz.dll TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar5.dll TB: {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No File TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File TB: {5BED3930-2E9E-76D8-BACC-80DF2188D455} - No File EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [PhilipsLime] "c:\program files\philips\philips lime service\bin\LimeAlive.exe" uRun: [Aim6] uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1 uRun: [RocketDock] "c:\program files\rocketdock\RocketDock.exe" uRun: [DW6] "c:\program files\the weather channel fw\desktop\DesktopWeather.exe" uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background mRun: [ehTray] c:\windows\ehome\ehtray.exe mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.5.0_11\bin\jusched.exe" mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe mRun: [CTSysVol] c:\program files\creative\sbaudigy2zs\surround mixer\CTSysVol.exe /r mRun: [CTDVDDET] "c:\program files\creative\sbaudigy2zs\dvdaudio\CTDVDDET.EXE" mRun: [CTHelper] CTHELPER.EXE mRun: [UpdReg] c:\windows\UpdReg.EXE mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe" mRun: [dla] c:\windows\system32\dla\tfswctrl.exe mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start mRun: [Dell Photo AIO Printer 922] "c:\program files\dell photo aio printer 922\dlbtbmgr.exe" mRun: [DLBTCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\DLBTtime.dll,_RunDLLEntry@16 mRun: [SigmatelSysTrayApp] stsystra.exe mRun: [PhilipsDM] "c:\program files\philips\philips device manager\bin\DeviceManager.exe" mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot mRun: [MyWebSearch Plugin] rundll32 c:\progra~1\mywebs~1\bar\1.bin\M3PLUGIN.DLL,UPF mRun: [My Web Search Bar Search Scope Monitor] "c:\progra~1\mywebs~1\bar\1.bin\m3SrchMn.exe" /m=0 mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [gapuhebuya] Rundll32.exe "c:\windows\system32\nesuhepa.dll",s mRun: [1c67bfae] rundll32.exe "c:\windows\system32\gipidiwu.dll",b mRun: [CPM1f548c32] Rundll32.exe "c:\windows\system32\kalahavi.dll",a StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe IE: &Download with &DAP - c:\program files\dap\dapextie.htm IE: Download &all with DAP - c:\program files\dap\dapextie2.htm IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_11\bin\ssv.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://www1.snapfish.com/SnapfishActivia.cab DPF: {483EB14D-AF1C-4951-81B0-4E2B41829FF6} - hxxps://www.select2perform.com/cabs/QOLCheck.ocx DPF: {54823A9D-6BAE-11D5-B519-0050BA2413EB} - hxxp://www.cyberlink.com/winxp/CheckDVD.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} - hxxp://update.videoegg.com/Install/Windows/Initial/VideoEggPublisher.exe DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll AppInit_DLLs: c:\progra~1\google\google~2\goec62~1.dll qaloqd.dll c:\windows\system32\nofopoku.dll c:\windows\system32\kalahavi.dll SSODL: gimmicks - {40dcff6e-af8d-4183-8ebe-a82270ac449e} - c:\windows\system32\dcvwaah.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kalahavi.dll STS: gimmicks: {40dcff6e-af8d-4183-8ebe-a82270ac449e} - c:\windows\system32\dcvwaah.dll STS: STS: {ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} - c:\windows\system32\kalahavi.dll {6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} LSA: Authentication Packages = msv1_0 c:\windows\system32\fccyxYrP LSA: Notification Packages = scecli c:\windows\system32\nofopoku.dll ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\victor~1.veg\applic~1\mozilla\firefox\profiles\kyqyolkb.default\ FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50fftrie7&query= FF - prefs.js: browser.search.selectedEngine - Merriam-Webster Dictionary FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=20008&gct=&gc=1&q= FF - component: c:\documents and settings\victor a. vega\application data\mozilla\firefox\profiles\kyqyolkb.default\extensions\[removed]\components\coolirisstub.dll FF - component: c:\program files\mcafee\siteadvisor\components\McFFPlg.dll FF - component: c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll FF - plugin: c:\progra~1\yahoo!\common\npyaxmpb.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava11.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava12.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava13.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava14.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava32.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJPI150_11.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPOJI610.dll FF - plugin: c:\program files\mozilla firefox\plugins\NPAdbESD.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdnu.dll FF - plugin: c:\program files\mozilla firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll FF - plugin: c:\program files\mozilla firefox\plugins\NPMyWebS.dll FF - plugin: c:\program files\mozilla firefox\plugins\NpPopup.dll FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll ============= SERVICES / DRIVERS =============== R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2007-2-17 207656] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2008-8-28 206096] R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2007-7-30 358736] R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328] R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2007-2-17 144704] R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files\common files\nero\nero backitup 4\NBService.exe [2008-9-24 935208] R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2007-2-17 605512] R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2007-2-17 79240] R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2007-2-17 35240] R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2007-2-17 40488] S3 CW50;CW50 Device;c:\windows\system32\drivers\CW50.sys [2005-12-31 24059] S3 GoogleDesktopManager-022208-143751;Google Desktop Manager 5.7.802.22438;c:\program files\google\google desktop search\GoogleDesktop.exe [2008-3-21 29744] S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2007-2-17 34152] =============== Created Last 30 ================ 2009-02-02 14:57 –d—– C:\_OTMoveIt 2009-02-02 14:27 –d-h— c:\windows\PIF 2009-02-02 12:34 –d—– C:\BFU 2009-02-01 16:01 –d—– c:\program files\Trend Micro ==================== Find3M ==================== 2009-02-02 12:43 98,523 a–sh— c:\windows\system32\kalahavi.dll 2009-02-02 12:43 93,325 a–sh— c:\windows\system32\gipidiwu.dll 2009-02-02 12:43 134,405 a–sh— c:\windows\system32\nehafote.dll 2009-02-02 12:38 99,514 a–sh— c:\windows\system32\bahuwawe.dll 2009-02-02 12:38 134,316 a–sh— c:\windows\system32\zudelawa.dll 2009-02-02 12:38 91,897 a–sh— c:\windows\system32\tefutovi.dll 2009-02-02 12:17 100,455 a–sh— c:\windows\system32\degogeme.dll 2009-02-02 12:17 134,389 a–sh— c:\windows\system32\yovujiye.dll 2009-02-02 12:17 93,476 a–sh— c:\windows\system32\diwakodo.dll 2009-02-02 11:56 91,795 a–sh— c:\windows\system32\totanimo.dll 2009-02-02 11:56 133,859 a–sh— c:\windows\system32\vodideto.dll 2009-02-02 11:56 99,145 a–sh— c:\windows\system32\jaroguwu.dll 2009-02-02 11:36 91,813 a–sh— c:\windows\system32\rirurewi.dll 2009-02-02 11:36 134,264 a–sh— c:\windows\system32\yakorude.dll 2009-02-02 11:36 101,059 a–sh— c:\windows\system32\bitipote.dll 2009-02-02 11:15 133,787 a–sh— c:\windows\system32\vijukosu.dll 2009-02-02 11:15 99,067 a–sh— c:\windows\system32\jegidomu.dll 2009-02-02 11:15 93,415 a–sh— c:\windows\system32\zihosofo.dll 2009-02-02 10:39 134,270 a–sh— c:\windows\system32\tetuluyu.dll 2009-02-02 10:39 91,955 a–sh— c:\windows\system32\sotikoyu.dll 2009-02-02 10:39 99,612 a–sh— c:\windows\system32\mebahupo.dll 2009-02-02 10:18 134,409 a–sh— c:\windows\system32\hehasiya.dll 2009-02-02 10:18 93,369 a–sh— c:\windows\system32\konuguye.dll 2009-02-02 10:18 99,455 a–sh— c:\windows\system32\yiwenana.dll 2009-02-02 10:00 91,835 a–sh— c:\windows\system32\paduyaku.dll 2009-02-02 10:00 133,849 a–sh— c:\windows\system32\fapuwayo.dll 2009-02-02 10:00 99,621 a–sh— c:\windows\system32\yalenuki.dll 2009-02-02 09:41 99,523 a–sh— c:\windows\system32\folojilo.dll 2009-02-02 09:41 134,393 a–sh— c:\windows\system32\debesipe.dll 2009-02-02 09:41 86,693 a–sh— c:\windows\system32\sumahoro.dll 2009-02-02 09:23 133,793 a–sh— c:\windows\system32\biseniro.dll 2009-02-02 09:23 98,651 a–sh— c:\windows\system32\rodorime.dll 2009-02-02 09:23 86,335 a–sh— c:\windows\system32\gupiyaja.dll 2009-02-02 09:04 86,822 a–sh— c:\windows\system32\pesosase.dll 2009-02-02 09:04 133,818 a–sh— c:\windows\system32\pehimoju.dll 2009-02-02 09:04 100,687 a–sh— c:\windows\system32\wodosuso.dll 2009-02-02 08:45 100,483 a–sh— c:\windows\system32\tofopoya.dll 2009-02-02 08:45 134,473 a–sh— c:\windows\system32\pufokogi.dll 2009-02-02 08:45 86,761 a–sh— c:\windows\system32\jozaname.dll 2009-02-02 08:27 86,658 a–sh— c:\windows\system32\tapeyaki.dll 2009-02-02 08:27 134,349 a–sh— c:\windows\system32\liyowemi.dll 2009-02-02 08:27 100,939 a–sh— c:\windows\system32\netojeru.dll 2009-02-02 08:06 99,931 a–sh— c:\windows\system32\jupemuko.dll 2009-02-02 08:06 133,862 a–sh— c:\windows\system32\woyoselo.dll 2009-02-02 08:06 86,846 a–sh— c:\windows\system32\vayejaku.dll 2009-02-02 07:45 98,922 a–sh— c:\windows\system32\pujigala.dll 2009-02-02 07:45 135,451 a–sh— c:\windows\system32\leyekuka.dll 2009-02-02 07:45 86,601 a–sh— c:\windows\system32\galitata.dll 2009-02-02 07:26 135,510 a–sh— c:\windows\system32\meladole.dll 2009-02-02 07:26 86,300 a–sh— c:\windows\system32\kotutuke.dll 2009-02-02 07:08 133,448 a–sh— c:\windows\system32\fovonoka.dll 2009-02-02 07:08 100,456 a–sh— c:\windows\system32\sizobako.dll 2009-02-02 07:08 86,279 a–sh— c:\windows\system32\bupopila.dll 2009-02-02 06:49 135,345 a–sh— c:\windows\system32\divahohi.dll 2009-02-02 06:49 100,561 a–sh— c:\windows\system32\yapoluhe.dll 2009-02-02 06:49 86,190 a–sh— c:\windows\system32\hezabade.dll 2009-02-02 06:25 133,212 a–sh— c:\windows\system32\vumadore.dll 2009-02-02 06:25 100,456 a–sh— c:\windows\system32\ritimubu.dll 2009-02-02 06:25 86,731 a–sh— c:\windows\system32\wabujamo.dll 2009-02-02 06:07 86,723 a–sh— c:\windows\system32\kuyufebu.dll 2009-02-02 06:07 135,301 a–sh— c:\windows\system32\yohuwili.dll 2009-02-02 06:07 100,503 a–sh— c:\windows\system32\nowewire.dll 2009-02-02 05:46 100,493 a–sh— c:\windows\system32\lorikuno.dll 2009-02-02 05:46 133,293 a–sh— c:\windows\system32\nazuyoye.dll 2009-02-02 05:46 86,334 a–sh— c:\windows\system32\madaratu.dll 2009-02-02 05:27 100,674 a–sh— c:\windows\system32\rapuweri.dll 2009-02-02 05:27 135,386 a–sh— c:\windows\system32\tuluteto.dll 2009-02-02 05:27 86,275 a–sh— c:\windows\system32\jifelona.dll 2009-02-02 05:09 135,505 a–sh— c:\windows\system32\fugenehu.dll 2009-02-02 05:08 100,028 a–sh— c:\windows\system32\juburedu.dll 2009-02-02 05:08 86,653 a–sh— c:\windows\system32\yekufelo.dll 2009-02-02 04:50 135,306 a–sh— c:\windows\system32\poyitiki.dll 2009-02-02 04:50 100,607 a–sh— c:\windows\system32\mikuniso.dll 2009-02-02 04:50 86,881 a–sh— c:\windows\system32\wopahunu.dll 2009-02-02 04:31 100,475 a–sh— c:\windows\system32\yimudome.dll 2009-02-02 04:31 135,302 a–sh— c:\windows\system32\mutovebu.dll 2009-02-02 04:31 86,204 a–sh— c:\windows\system32\tojogefa.dll 2009-02-02 04:13 86,340 a–sh— c:\windows\system32\tohohuzo.dll 2009-02-02 04:13 133,248 a–sh— c:\windows\system32\zoweduni.dll 2009-02-02 04:13 100,468 a–sh— c:\windows\system32\havabeve.dll 2009-02-02 03:54 133,444 a–sh— c:\windows\system32\welujile.dll 2009-02-02 03:54 100,578 a–sh— c:\windows\system32\rahopeya.dll 2009-02-02 03:36 135,475 a–sh— c:\windows\system32\navomehi.dll 2009-02-02 03:36 100,586 a–sh— c:\windows\system32\lujipadu.dll 2009-02-02 03:36 86,241 a–sh— c:\windows\system32\yufateki.dll 2009-02-02 03:17 86,771 a–sh— c:\windows\system32\kanugeso.dll 2009-02-02 03:17 133,325 a–sh— c:\windows\system32\popojezu.dll 2009-02-02 03:17 99,935 a–sh— c:\windows\system32\sonijiko.dll 2009-02-02 02:58 133,236 a–sh— c:\windows\system32\wonefivo.dll 2009-02-02 02:58 100,554 a–sh— c:\windows\system32\nulipiji.dll 2009-02-02 02:58 86,167 a–sh— c:\windows\system32\dozovoku.dll 2009-02-02 02:40 133,306 a–sh— c:\windows\system32\vofidibo.dll 2009-02-02 02:40 100,057 a–sh— c:\windows\system32\popatetu.dll 2009-02-02 02:40 86,098 a–sh— c:\windows\system32\fotiyigu.dll 2009-02-02 02:21 135,352 a–sh— c:\windows\system32\lobelepi.dll 2009-02-02 02:21 98,986 a–sh— c:\windows\system32\sodejaro.dll 2009-02-02 02:21 86,185 a–sh— c:\windows\system32\sihikaye.dll 2009-02-02 02:03 135,465 a–sh— c:\windows\system32\sidewatu.dll 2009-02-02 02:03 100,073 a–sh— c:\windows\system32\turikeda.dll 2009-02-02 02:03:11 A–SH— 86,327 c:\windows\system32\rihefiso.dll 0000-00-00 00:00 62,586 a–sh— c:\windows\system32\jojosiru.dll 0000-00-00 00:00 62,586 a–sh— c:\windows\system32\nesuhepa.dll 0000-00-00 00:00 62,586 a–sh— c:\windows\system32\nofopoku.dll ============= FINISH: 15:11:20.20 ===============

DDS (Ver_09-02-01.01) - NTFSx86 Run by [removed] at 15:54:54.96 on Mon 02/02/2009 Internet Explorer: 7.0.5730.13 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.2713 [GMT -5:00] AV: McAfee VirusScan *On-access scanning enabled* (Updated) FW: McAfee Personal Firewall *enabled* ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE C:\WINDOWS\system32\CTHELPER.EXE C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe C:\Program Files\Dell Photo AIO Printer 922\dlbtbmon.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe C:\Program Files\Messenger\msmsgs.exe C:\DOCUME~1\VICTOR~1.VEG\LOCALS~1\Temp\_A00F1D549B.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe C:\Program Files\McAfee\SiteAdvisor\McSACore.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe c:\program files\common files\mcafee\mna\mcnasvc.exe c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\McAfee\MPF\MPFSrv.exe C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe C:\WINDOWS\system32\nvsvc32.exe svchost.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\system32\dllhost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\eHome\ehmsas.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\Program Files\Philips\Philips Lime Service\bin\Lime.exe C:\Documents and Settings\Victor A. Vega\Desktop\dds.pif C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ig?sourceid=navclient&ie=UTF-8&hl=en uSearch Page = hxxp://www.google.com uDefault_Page_URL = hxxp://www.dell4me.com/myway uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s mSearchAssistant = hxxp://www.google.com/ie uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - uURLSearchHooks: H - No File mURLSearchHooks: H - No File BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll BHO: Gamevance: {0ed403e8-470a-4a8a-85a4-d7688cfe39a3} - c:\program files\gamevance\gamevancelib32.dll BHO: {28d09d6f-b93e-45fa-92d7-52e70e9cfa1e} - c:\windows\system32\jojosiru.dll BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll BHO: {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - No File BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll {6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.5.0_11\bin\ssv.dll BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll {889eeacf-c43a-403d-b427-5aec5b495bb1} BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar5.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\3.1.807.1746\swg.dll BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll BHO: {12494c1c-802b-c6ab-1ac4-ff6cdb96265d}: {d56269bd-c6ff-4ca1-ba6c-b208c1c49421} - c:\windows\system32\vovtfz.dll TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar5.dll TB: {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No File TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File TB: {5BED3930-2E9E-76D8-BACC-80DF2188D455} - No File EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [PhilipsLime] "c:\program files\philips\philips lime service\bin\LimeAlive.exe" uRun: [Aim6] uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1 uRun: [RocketDock] "c:\program files\rocketdock\RocketDock.exe" uRun: [DW6] "c:\program files\the weather channel fw\desktop\DesktopWeather.exe" uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background uRun: [A00F1D549B.exe] c:\docume~1\victor~1.veg\locals~1\temp\_A00F1D549B.exe mRun: [ehTray] c:\windows\ehome\ehtray.exe mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.5.0_11\bin\jusched.exe" mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe mRun: [CTSysVol] c:\program files\creative\sbaudigy2zs\surround mixer\CTSysVol.exe /r mRun: [CTDVDDET] "c:\program files\creative\sbaudigy2zs\dvdaudio\CTDVDDET.EXE" mRun: [CTHelper] CTHELPER.EXE mRun: [UpdReg] c:\windows\UpdReg.EXE mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe" mRun: [dla] c:\windows\system32\dla\tfswctrl.exe mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start mRun: [Dell Photo AIO Printer 922] "c:\program files\dell photo aio printer 922\dlbtbmgr.exe" mRun: [DLBTCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\DLBTtime.dll,_RunDLLEntry@16 mRun: [SigmatelSysTrayApp] stsystra.exe mRun: [PhilipsDM] "c:\program files\philips\philips device manager\bin\DeviceManager.exe" mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot mRun: [MyWebSearch Plugin] rundll32 c:\progra~1\mywebs~1\bar\1.bin\M3PLUGIN.DLL,UPF mRun: [My Web Search Bar Search Scope Monitor] "c:\progra~1\mywebs~1\bar\1.bin\m3SrchMn.exe" /m=0 mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [gapuhebuya] Rundll32.exe "c:\windows\system32\nesuhepa.dll",s mRun: [1c67bfae] rundll32.exe "c:\windows\system32\gipidiwu.dll",b mRun: [CPM1f548c32] Rundll32.exe "c:\windows\system32\kalahavi.dll",a StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe IE: &Download with &DAP - c:\program files\dap\dapextie.htm IE: Download &all with DAP - c:\program files\dap\dapextie2.htm IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_11\bin\ssv.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://www1.snapfish.com/SnapfishActivia.cab DPF: {483EB14D-AF1C-4951-81B0-4E2B41829FF6} - hxxps://www.select2perform.com/cabs/QOLCheck.ocx DPF: {54823A9D-6BAE-11D5-B519-0050BA2413EB} - hxxp://www.cyberlink.com/winxp/CheckDVD.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} - hxxp://update.videoegg.com/Install/Windows/Initial/VideoEggPublisher.exe DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll Notify: __c00C31C - c:\windows\system32\__c00C31C.dat AppInit_DLLs: c:\progra~1\google\google~2\goec62~1.dll qaloqd.dll c:\windows\system32\nofopoku.dll c:\windows\system32\kalahavi.dll c:\windows\system32\bahuwawe.dll c:\windows\system32\degogeme.dll c:\windows\system32\jaroguwu.dll c:\windows\system32\bitipote.dll c:\windows\system32\jegidomu.dll SSODL: gimmicks - {40dcff6e-af8d-4183-8ebe-a82270ac449e} - c:\windows\system32\dcvwaah.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\kalahavi.dll STS: gimmicks: {40dcff6e-af8d-4183-8ebe-a82270ac449e} - c:\windows\system32\dcvwaah.dll STS: STS: {ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} - c:\windows\system32\kalahavi.dll {6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} LSA: Authentication Packages = msv1_0 c:\windows\system32\fccyxYrP LSA: Notification Packages = scecli c:\windows\system32\nofopoku.dll ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\victor~1.veg\applic~1\mozilla\firefox\profiles\kyqyolkb.default\ FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50fftrie7&query= FF - prefs.js: browser.search.selectedEngine - Merriam-Webster Dictionary FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=20008&gct=&gc=1&q= FF - component: c:\documents and settings\victor a. vega\application data\mozilla\firefox\profiles\kyqyolkb.default\extensions\[removed]\components\coolirisstub.dll FF - component: c:\program files\mcafee\siteadvisor\components\McFFPlg.dll FF - component: c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll FF - plugin: c:\progra~1\yahoo!\common\npyaxmpb.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava11.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava12.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava13.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava14.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJava32.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPJPI150_11.dll FF - plugin: c:\program files\java\jre1.5.0_11\bin\NPOJI610.dll FF - plugin: c:\program files\mozilla firefox\plugins\NPAdbESD.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdnu.dll FF - plugin: c:\program files\mozilla firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll FF - plugin: c:\program files\mozilla firefox\plugins\NPMyWebS.dll FF - plugin: c:\program files\mozilla firefox\plugins\NpPopup.dll FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll ============= SERVICES / DRIVERS =============== R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2007-2-17 207656] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2008-8-28 206096] R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2007-7-30 358736] R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328] R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2007-2-17 144704] R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files\common files\nero\nero backitup 4\NBService.exe [2008-9-24 935208] R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2007-2-17 605512] R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2007-2-17 79240] R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2007-2-17 35240] R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2007-2-17 40488] S3 CW50;CW50 Device;c:\windows\system32\drivers\CW50.sys [2005-12-31 24059] S3 GoogleDesktopManager-022208-143751;Google Desktop Manager 5.7.802.22438;c:\program files\google\google desktop search\GoogleDesktop.exe [2008-3-21 29744] S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2007-2-17 34152] =============== Created Last 30 ================ 2009-02-02 15:35 25,088 a——- c:\windows\system32\__c00C31C.dat 2009-02-02 14:57 –d—– C:\_OTMoveIt 2009-02-02 14:27 –d-h— c:\windows\PIF 2009-02-02 12:34 –d—– C:\BFU 2009-02-01 16:01 –d—– c:\program files\Trend Micro ==================== Find3M ==================== 2009-02-02 11:15 93,415 a–sh— c:\windows\system32\zihosofo.dll 2009-02-02 10:39 134,270 a–sh— c:\windows\system32\tetuluyu.dll 2009-02-02 10:39 91,955 a–sh— c:\windows\system32\sotikoyu.dll 2009-02-02 10:39 99,612 a–sh— c:\windows\system32\mebahupo.dll 2009-02-02 10:18 134,409 a–sh— c:\windows\system32\hehasiya.dll 2009-02-02 10:18 93,369 a–sh— c:\windows\system32\konuguye.dll 2009-02-02 10:18 99,455 a–sh— c:\windows\system32\yiwenana.dll 2009-02-02 10:00 91,835 a–sh— c:\windows\system32\paduyaku.dll 2009-02-02 10:00 133,849 a–sh— c:\windows\system32\fapuwayo.dll 2009-02-02 10:00 99,621 a–sh— c:\windows\system32\yalenuki.dll 2009-02-02 09:41 99,523 a–sh— c:\windows\system32\folojilo.dll 2009-02-02 09:41 134,393 a–sh— c:\windows\system32\debesipe.dll 2009-02-02 09:41 86,693 a–sh— c:\windows\system32\sumahoro.dll 2009-02-02 09:23 133,793 a–sh— c:\windows\system32\biseniro.dll 2009-02-02 09:23 98,651 a–sh— c:\windows\system32\rodorime.dll 2009-02-02 09:23 86,335 a–sh— c:\windows\system32\gupiyaja.dll 2009-02-02 09:04 86,822 a–sh— c:\windows\system32\pesosase.dll 2009-02-02 09:04 133,818 a–sh— c:\windows\system32\pehimoju.dll 2009-02-02 09:04 100,687 a–sh— c:\windows\system32\wodosuso.dll 2009-02-02 08:45 100,483 a–sh— c:\windows\system32\tofopoya.dll 2009-02-02 08:45 134,473 a–sh— c:\windows\system32\pufokogi.dll 2009-02-02 08:45 86,761 a–sh— c:\windows\system32\jozaname.dll 2009-02-02 08:27 86,658 a–sh— c:\windows\system32\tapeyaki.dll 2009-02-02 08:27 134,349 a–sh— c:\windows\system32\liyowemi.dll 2009-02-02 08:27 100,939 a–sh— c:\windows\system32\netojeru.dll 2009-02-02 08:06 99,931 a–sh— c:\windows\system32\jupemuko.dll 2009-02-02 08:06 133,862 a–sh— c:\windows\system32\woyoselo.dll 2009-02-02 08:06 86,846 a–sh— c:\windows\system32\vayejaku.dll 2009-02-02 07:45 98,922 a–sh— c:\windows\system32\pujigala.dll 2009-02-02 07:45 135,451 a–sh— c:\windows\system32\leyekuka.dll 2009-02-02 07:45 86,601 a–sh— c:\windows\system32\galitata.dll 2009-02-02 07:26 135,510 a–sh— c:\windows\system32\meladole.dll 2009-02-02 07:26 86,300 a–sh— c:\windows\system32\kotutuke.dll 2009-02-02 07:08 133,448 a–sh— c:\windows\system32\fovonoka.dll 2009-02-02 07:08 100,456 a–sh— c:\windows\system32\sizobako.dll 2009-02-02 07:08 86,279 a–sh— c:\windows\system32\bupopila.dll 2009-02-02 06:49 135,345 a–sh— c:\windows\system32\divahohi.dll 2009-02-02 06:49 100,561 a–sh— c:\windows\system32\yapoluhe.dll 2009-02-02 06:49 86,190 a–sh— c:\windows\system32\hezabade.dll 2009-02-02 06:25 133,212 a–sh— c:\windows\system32\vumadore.dll 2009-02-02 06:25 100,456 a–sh— c:\windows\system32\ritimubu.dll 2009-02-02 06:25 86,731 a–sh— c:\windows\system32\wabujamo.dll 2009-02-02 06:07 86,723 a–sh— c:\windows\system32\kuyufebu.dll 2009-02-02 06:07 135,301 a–sh— c:\windows\system32\yohuwili.dll 2009-02-02 06:07 100,503 a–sh— c:\windows\system32\nowewire.dll 2009-02-02 05:46 100,493 a–sh— c:\windows\system32\lorikuno.dll 2009-02-02 05:46 133,293 a–sh— c:\windows\system32\nazuyoye.dll 2009-02-02 05:46 86,334 a–sh— c:\windows\system32\madaratu.dll 2009-02-02 05:27 100,674 a–sh— c:\windows\system32\rapuweri.dll 2009-02-02 05:27 135,386 a–sh— c:\windows\system32\tuluteto.dll 2009-02-02 05:27 86,275 a–sh— c:\windows\system32\jifelona.dll 2009-02-02 05:09 135,505 a–sh— c:\windows\system32\fugenehu.dll 2009-02-02 05:08 100,028 a–sh— c:\windows\system32\juburedu.dll 2009-02-02 05:08 86,653 a–sh— c:\windows\system32\yekufelo.dll 2009-02-02 04:50 135,306 a–sh— c:\windows\system32\poyitiki.dll 2009-02-02 04:50 100,607 a–sh— c:\windows\system32\mikuniso.dll 2009-02-02 04:50 86,881 a–sh— c:\windows\system32\wopahunu.dll 2009-02-02 04:31 100,475 a–sh— c:\windows\system32\yimudome.dll 2009-02-02 04:31 135,302 a–sh— c:\windows\system32\mutovebu.dll 2009-02-02 04:31 86,204 a–sh— c:\windows\system32\tojogefa.dll 2009-02-02 04:13 86,340 a–sh— c:\windows\system32\tohohuzo.dll 2009-02-02 04:13 133,248 a–sh— c:\windows\system32\zoweduni.dll 2009-02-02 04:13 100,468 a–sh— c:\windows\system32\havabeve.dll 2009-02-02 03:54 133,444 a–sh— c:\windows\system32\welujile.dll 2009-02-02 03:54 100,578 a–sh— c:\windows\system32\rahopeya.dll 2009-02-02 03:36 135,475 a–sh— c:\windows\system32\navomehi.dll 2009-02-02 03:36 100,586 a–sh— c:\windows\system32\lujipadu.dll 2009-02-02 03:36 86,241 a–sh— c:\windows\system32\yufateki.dll 2009-02-02 03:17 86,771 a–sh— c:\windows\system32\kanugeso.dll 2009-02-02 03:17 133,325 a–sh— c:\windows\system32\popojezu.dll 2009-02-02 03:17 99,935 a–sh— c:\windows\system32\sonijiko.dll 2009-02-02 02:58 133,236 a–sh— c:\windows\system32\wonefivo.dll 2009-02-02 02:58 100,554 a–sh— c:\windows\system32\nulipiji.dll 2009-02-02 02:58 86,167 a–sh— c:\windows\system32\dozovoku.dll 2009-02-02 02:40 133,306 a–sh— c:\windows\system32\vofidibo.dll 2009-02-02 02:40 100,057 a–sh— c:\windows\system32\popatetu.dll 2009-02-02 02:40 86,098 a–sh— c:\windows\system32\fotiyigu.dll 2009-02-02 02:21 135,352 a–sh— c:\windows\system32\lobelepi.dll 2009-02-02 02:21 98,986 a–sh— c:\windows\system32\sodejaro.dll 2009-02-02 02:21 86,185 a–sh— c:\windows\system32\sihikaye.dll 2009-02-02 02:03 135,465 a–sh— c:\windows\system32\sidewatu.dll 2009-02-02 02:03 100,073 a–sh— c:\windows\system32\turikeda.dll 2009-02-02 02:03 86,327 a–sh— c:\windows\system32\rihefiso.dll 2009-02-02 01:44 98,953 a–sh— c:\windows\system32\husebasi.dll 2009-02-02 01:44 133,243 a–sh— c:\windows\system32\fenomale.dll 2009-02-02 01:44 86,735 a–sh— c:\windows\system32\kosikigi.dll 2009-02-02 01:26 133,277 a–sh— c:\windows\system32\duhelufu.dll 2009-02-02 01:26 100,481 a–sh— c:\windows\system32\kemobide.dll 2009-02-02 01:26 86,234 a–sh— c:\windows\system32\pazoveki.dll 2009-02-02 01:04 100,197 a–sh— c:\windows\system32\purariwo.dll 2009-02-02 01:04 133,317 a–sh— c:\windows\system32\wibarawu.dll 2009-02-02 01:04 86,225 a–sh— c:\windows\system32\mepovufa.dll 2009-02-02 00:43 135,338 a–sh— c:\windows\system32\layeyiro.dll 2009-02-02 00:43 100,517 a–sh— c:\windows\system32\faruloyi.dll 2009-02-02 00:43 86,793 a–sh— c:\windows\system32\bupajeli.dll 2009-02-02 00:25 100,537 a–sh— c:\windows\system32\favoyofa.dll 2009-02-02 00:25 133,241 a–sh— c:\windows\system32\ponubomu.dll 2009-02-02 00:25 86,122 a–sh— c:\windows\system32\zakolosi.dll 2009-02-02 00:04 100,637 a–sh— c:\windows\system32\kawiwufi.dll 2009-02-02 00:04:11 A–SH— 135,286 c:\windows\system32\nepowemi.dll 0000-00-00 00:00 62,586 a–sh— c:\windows\system32\jojosiru.dll 0000-00-00 00:00 62,586 a–sh— c:\windows\system32\nesuhepa.dll 0000-00-00 00:00 62,586 a–sh— c:\windows\system32\nofopoku.dll ============= FINISH: 15:55:59.95 ===============