Deckard's System Scanner v20071014.68
Run by USER on 2008-05-12 15:38:19
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
System Restore is disabled; attempting to re-enable...success.
-- Last 1 Restore Point(s) --
1: 2008-05-12 03:38:21 UTC - RP1 - System Checkpoint
Backed up registry hives.
Performed disk cleanup.
-- HijackThis (run as USER.exe) ------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:40:02 PM, on 5/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\COMODO\Firewall\cfp.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
E:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\iPod\bin\iPodService.exe
E:\Program Files\Internet Download Manager\IEMonitor.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Desktop\dss.exe
C:\DOCUME~1\USER~1.USE\Desktop\USER.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
https://login.live.com/ppsecure/sha1auth.srf?lc=1033R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\COMODO\Firewall\cfp.exe" -h
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IDMan] E:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Download all links with IDM - E:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - E:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - E:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} -
file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} -
file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} -
file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} -
file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} -
file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} -
file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\Firewall\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 7874 bytes
-- File Associations -----------------------------------------------------------
All associations okay.
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R3 ASNDIS5 (ASNDIS5 Protocol Driver) - c:\windows\system32\asndis5.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows>
S3 PciCon - f:\pcicon.sys (file missing)
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
R2 Bonjour Service - "c:\program files\bonjour\mdnsresponder.exe" <Not Verified; Apple Inc.; Bonjour>
S3 FLEXnet Licensing Service - "c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" <Not Verified; Macrovision Europe Ltd.; FLEXnet Publisher (32 bit)>
-- Device Manager: Disabled ----------------------------------------------------
No disabled devices found.
-- Scheduled Tasks -------------------------------------------------------------
2008-05-10 11:29:00 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
-- Files created between 2008-04-12 and 2008-05-12 -----------------------------
2008-05-11 13:20:36 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\DivX
2008-05-10 12:33:44 0 d-------- C:\Documents and Settings\All Users\Application Data\FLEXnet
2008-05-10 12:19:35 0 d-------- C:\Program Files\Common Files\Macrovision Shared
2008-05-09 19:46:16 0 d-------- C:\WINDOWS\.jagex_cache_32
2008-05-09 19:46:10 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\Sun
2008-05-09 16:06:26 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\AdobeUM
2008-05-08 16:23:46 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\IDM
2008-05-08 16:23:46 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\DMCache
2008-05-08 15:57:14 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\Apple Computer
2008-05-07 18:17:50 0 d-------- C:\Program Files\Apple Software Update
2008-05-07 15:38:14 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Contacts
2008-05-07 09:39:40 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\WinRAR
2008-05-07 09:28:17 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\Macromedia
2008-05-07 09:28:17 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\Adobe
2008-05-07 09:17:45 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\Mozilla
2008-05-07 09:11:45 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\Comodo
2008-05-07 09:11:23 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data\Identities
2008-05-07 09:11:03 0 d--h----- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Templates
2008-05-07 09:11:03 0 dr------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Start Menu
2008-05-07 09:11:03 0 dr-h----- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\SendTo
2008-05-07 09:11:03 0 dr-h----- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Recent
2008-05-07 09:11:03 0 d--h----- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\PrintHood
2008-05-07 09:11:03 1310720 --ah----- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\NTUSER.DAT
2008-05-07 09:11:03 0 d--h----- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\NetHood
2008-05-07 09:11:03 0 dr------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\My Documents
2008-05-07 09:11:03 0 d--h----- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Local Settings
2008-05-07 09:11:03 0 dr------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Favorites
2008-05-07 09:11:03 0 d-------- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Desktop
2008-05-07 09:11:03 0 d---s---- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Cookies
2008-05-07 09:11:03 0 dr-h----- C:\Documents and Settings\USER.USER-KKE4O1Z1ZV\Application Data
2008-05-06 18:50:21 0 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-05-06 18:36:46 0 d-------- C:\Program Files\Trend Micro
2008-05-03 13:02:58 0 d-------- C:\Documents and Settings\USER\Application Data\BWMeterPro
2008-05-03 13:02:51 0 d-------- C:\Program Files\BandwidthMeterPro
2008-05-02 16:56:27 0 d-------- C:\Documents and Settings\USER\Application Data\Apple Computer
2008-05-02 16:56:18 0 d-------- C:\Program Files\iPod
2008-05-02 16:56:14 0 d-------- C:\Program Files\iTunes
2008-05-02 16:56:10 0 d-------- C:\Program Files\Bonjour
2008-05-02 16:55:54 0 d-------- C:\Program Files\QuickTime
2008-05-02 16:55:53 0 d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-05-02 16:55:34 0 d-------- C:\Program Files\Common Files\Apple
2008-05-02 16:55:34 0 d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-05-02 12:58:45 0 d-------- C:\Documents and Settings\USER\Contacts
2008-05-02 12:51:47 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller
2008-05-02 12:51:44 0 d-------- C:\Program Files\Windows Live
2008-05-02 12:51:40 0 d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-05-02 12:49:05 0 d-------- C:\WINDOWS\system32\SoftwareDistribution
2008-05-02 12:42:18 0 d-------- C:\Documents and Settings\USER\Application Data\OpenOffice.org2
2008-05-02 11:50:20 1160 --a------ C:\WINDOWS\mozver.dat
2008-05-02 11:38:11 0 --a------ C:\WINDOWS\nsreg.dat
2008-05-02 11:38:02 0 d-------- C:\Documents and Settings\USER\Application Data\Mozilla
2008-05-02 11:23:40 0 d-------- C:\Documents and Settings\All Users\Application Data\Avg8
2008-05-01 21:28:55 0 d-------- C:\Documents and Settings\All Users\Application Data\RoboForm
2008-05-01 21:28:32 0 d-------- C:\Program Files\Siber Systems
2008-05-01 21:27:32 0 d-------- C:\WINDOWS\Sun
2008-05-01 20:45:43 0 d-------- C:\Documents and Settings\USER\Application Data\WinRAR
2008-05-01 20:34:54 0 d-------- C:\Documents and Settings\USER\Application Data\IDM
2008-05-01 20:34:54 0 d-------- C:\Documents and Settings\USER\Application Data\DMCache
2008-05-01 20:34:51 0 d-------- C:\Documents and Settings\USER\Application Data\Macromedia
2008-05-01 20:28:56 0 d-------- C:\WINDOWS\NV4048320.TMP
2008-05-01 19:50:17 0 d-------- C:\Documents and Settings\USER\Application Data\AdobeUM
2008-05-01 19:49:32 0 d-------- C:\Documents and Settings\USER\Application Data\Adobe
-- Find3M Report ---------------------------------------------------------------
2008-05-10 12:27:34 0 d-------- C:\Program Files\Common Files\Adobe
2008-05-10 12:19:35 0 d-------- C:\Program Files\Common Files
2008-05-07 09:28:27 0 d-------- C:\Program Files\Java
2008-04-01 09:25:48 823296 --a------ C:\WINDOWS\system32\divx_xx0c.dll <Not Verified; DivX, Inc.; DivX®>
2008-04-01 09:25:48 823296 --a------ C:\WINDOWS\system32\divx_xx07.dll <Not Verified; DivX, Inc.; DivX®>
2008-04-01 09:25:46 802816 --a------ C:\WINDOWS\system32\divx_xx11.dll <Not Verified; DivX, Inc.; DivX?>
2008-04-01 09:25:46 831488 --a------ C:\WINDOWS\system32\divx_xx0a.dll
2008-04-01 09:25:46 682496 --a------ C:\WINDOWS\system32\DivX.dll <Not Verified; DivX, Inc.; DivX®>
2008-03-22 08:30:08 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2008-03-22 08:28:54 196608 --a------ C:\WINDOWS\system32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>
2008-03-22 08:28:54 81920 --a------ C:\WINDOWS\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2008-03-22 08:28:20 12288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [05/21/2007 07:32 PM]
"nwiz"="nwiz.exe" [05/21/2007 07:32 PM C:\WINDOWS\system32\nwiz.exe]
"RTHDCPL"="RTHDCPL.EXE" [02/26/2007 07:03 PM C:\WINDOWS\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [05/16/2006 10:04 PM C:\WINDOWS\SkyTel.exe]
"Alcmtr"="ALCMTR.EXE" [05/03/2005 10:43 PM C:\WINDOWS\Alcmtr.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [02/22/2008 04:25 AM]
"COMODO Firewall Pro"="C:\Program Files\COMODO\Firewall\cfp.exe" [05/02/2008 11:27 AM]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [05/21/2007 07:32 PM]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [03/30/2008 06:37 AM]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [03/28/2008 11:37 PM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [03/30/2008 10:36 AM]
"Control Center"="C:\Program Files\ASUS\WLAN Card Utilities\Center.exe" [03/02/2006 08:10 PM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RoboForm"="C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [05/01/2008 09:28 PM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/03/2004 11:56 PM]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [10/18/2007 11:34 AM]
"IDMan"="E:\Program Files\Internet Download Manager\IDMan.exe" [01/09/2008 01:48 PM]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [12/14/2004 3:44:06 AM]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\WINDOWS\system32\guard32.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"
-- Hosts -----------------------------------------------------------------------
127.0.0.1
http://www.007guard.com127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1
http://www.008k.com127.0.0.1 008k.com
127.0.0.1
http://www.00hq.com127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1
http://www.032439.com127.0.0.1 032439.com
8300 more entries in hosts file.
-- End of Deckard's System Scanner: finished at 2008-05-12 15:41:20 ------------