Airscape -
Please see my notes at the bottom of this post.
gmer log:GMER 1.0.15.15281 -
http://www.gmer.netRootkit scan 2010-07-23 15:38:17
Windows 5.1.2600 Service Pack 3
Running: pjgdclff.exe; Driver: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\awlorfob.sys
---- User code sections - GMER 1.0.15 ----
.text C:\WINDOWS\System32\svchost.exe[1036] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 007B000A
.text C:\WINDOWS\System32\svchost.exe[1036] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 007C000A
.text C:\WINDOWS\System32\svchost.exe[1036] ntdll.dll!KiUserExceptionDispatcher 7C90E47C 5 Bytes JMP 007A000C
.text C:\WINDOWS\System32\svchost.exe[1036] USER32.dll!GetCursorPos 7E42974E 5 Bytes JMP 00F2000A
.text C:\WINDOWS\System32\svchost.exe[1036] ole32.dll!CoCreateInstance 7750057E 5 Bytes JMP 00C2000A
.text C:\WINDOWS\system32\spoolsv.exe[1524] ntdll.dll!NtResumeThread 7C90DB3E 5 Bytes JMP 00EB000A
.text C:\WINDOWS\explorer.exe[3164] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 00A2000A
.text C:\WINDOWS\explorer.exe[3164] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 00A8000A
.text C:\WINDOWS\explorer.exe[3164] ntdll.dll!KiUserExceptionDispatcher 7C90E47C 5 Bytes JMP 00A1000C
---- EOF - GMER 1.0.15 ----
RSIT Log:Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2010-07-23 15:38:55
Microsoft Windows XP Professional Service Pack 3
System drive C: has 90 GB (59%) free of 153 GB
Total RAM: 2047 MB (78% free)
HijackThis download failed
======Scheduled tasks folder======
C:\WINDOWS\tasks\51e89591.job
C:\WINDOWS\tasks\At1.job
C:\WINDOWS\tasks\At10.job
C:\WINDOWS\tasks\At100.job
C:\WINDOWS\tasks\At1000.job
C:\WINDOWS\tasks\At1001.job
C:\WINDOWS\tasks\At1002.job
C:\WINDOWS\tasks\At1003.job
C:\WINDOWS\tasks\At1004.job
C:\WINDOWS\tasks\At1005.job
C:\WINDOWS\tasks\At1006.job
C:\WINDOWS\tasks\At1007.job
C:\WINDOWS\tasks\At1008.job
C:\WINDOWS\tasks\At1009.job
C:\WINDOWS\tasks\At101.job
C:\WINDOWS\tasks\At1010.job
C:\WINDOWS\tasks\At1011.job
C:\WINDOWS\tasks\At1012.job
C:\WINDOWS\tasks\At1013.job
C:\WINDOWS\tasks\At1014.job
C:\WINDOWS\tasks\At1015.job
C:\WINDOWS\tasks\At1016.job
C:\WINDOWS\tasks\At1017.job
C:\WINDOWS\tasks\At1018.job
C:\WINDOWS\tasks\At1019.job
C:\WINDOWS\tasks\At102.job
C:\WINDOWS\tasks\At1020.job
C:\WINDOWS\tasks\At1021.job
C:\WINDOWS\tasks\At1022.job
C:\WINDOWS\tasks\At1023.job
C:\WINDOWS\tasks\At1024.job
C:\WINDOWS\tasks\At1025.job
C:\WINDOWS\tasks\At1026.job
C:\WINDOWS\tasks\At1027.job
C:\WINDOWS\tasks\At1028.job
C:\WINDOWS\tasks\At1029.job
C:\WINDOWS\tasks\At103.job
C:\WINDOWS\tasks\At1030.job
C:\WINDOWS\tasks\At1031.job
C:\WINDOWS\tasks\At1032.job
C:\WINDOWS\tasks\At1033.job
C:\WINDOWS\tasks\At1034.job
C:\WINDOWS\tasks\At1035.job
C:\WINDOWS\tasks\At1036.job
C:\WINDOWS\tasks\At1037.job
C:\WINDOWS\tasks\At1038.job
C:\WINDOWS\tasks\At1039.job
C:\WINDOWS\tasks\At104.job
C:\WINDOWS\tasks\At1040.job
C:\WINDOWS\tasks\At1041.job
C:\WINDOWS\tasks\At1042.job
C:\WINDOWS\tasks\At1043.job
C:\WINDOWS\tasks\At1044.job
C:\WINDOWS\tasks\At1045.job
C:\WINDOWS\tasks\At1046.job
C:\WINDOWS\tasks\At1047.job
C:\WINDOWS\tasks\At1048.job
C:\WINDOWS\tasks\At1049.job
C:\WINDOWS\tasks\At105.job
C:\WINDOWS\tasks\At1050.job
C:\WINDOWS\tasks\At1051.job
C:\WINDOWS\tasks\At1052.job
C:\WINDOWS\tasks\At1053.job
C:\WINDOWS\tasks\At1054.job
C:\WINDOWS\tasks\At1055.job
C:\WINDOWS\tasks\At1056.job
C:\WINDOWS\tasks\At1057.job
C:\WINDOWS\tasks\At1058.job
C:\WINDOWS\tasks\At1059.job
C:\WINDOWS\tasks\At106.job
C:\WINDOWS\tasks\At1060.job
C:\WINDOWS\tasks\At1061.job
C:\WINDOWS\tasks\At1062.job
C:\WINDOWS\tasks\At1063.job
C:\WINDOWS\tasks\At1064.job
C:\WINDOWS\tasks\At1065.job
C:\WINDOWS\tasks\At1066.job
C:\WINDOWS\tasks\At1067.job
C:\WINDOWS\tasks\At1068.job
C:\WINDOWS\tasks\At1069.job
C:\WINDOWS\tasks\At107.job
C:\WINDOWS\tasks\At1070.job
C:\WINDOWS\tasks\At1071.job
C:\WINDOWS\tasks\At1072.job
C:\WINDOWS\tasks\At1073.job
C:\WINDOWS\tasks\At1074.job
C:\WINDOWS\tasks\At1075.job
C:\WINDOWS\tasks\At1076.job
C:\WINDOWS\tasks\At1077.job
C:\WINDOWS\tasks\At1078.job
C:\WINDOWS\tasks\At1079.job
C:\WINDOWS\tasks\At108.job
C:\WINDOWS\tasks\At1080.job
C:\WINDOWS\tasks\At1081.job
C:\WINDOWS\tasks\At1082.job
C:\WINDOWS\tasks\At1083.job
C:\WINDOWS\tasks\At1084.job
C:\WINDOWS\tasks\At1085.job
C:\WINDOWS\tasks\At1086.job
C:\WINDOWS\tasks\At1087.job
C:\WINDOWS\tasks\At1088.job
C:\WINDOWS\tasks\At1089.job
C:\WINDOWS\tasks\At109.job
C:\WINDOWS\tasks\At1090.job
C:\WINDOWS\tasks\At1091.job
C:\WINDOWS\tasks\At1092.job
C:\WINDOWS\tasks\At1093.job
C:\WINDOWS\tasks\At1094.job
C:\WINDOWS\tasks\At1095.job
C:\WINDOWS\tasks\At1096.job
C:\WINDOWS\tasks\At1097.job
C:\WINDOWS\tasks\At1098.job
C:\WINDOWS\tasks\At1099.job
C:\WINDOWS\tasks\At11.job
C:\WINDOWS\tasks\At110.job
C:\WINDOWS\tasks\At1100.job
C:\WINDOWS\tasks\At1101.job
C:\WINDOWS\tasks\At1102.job
C:\WINDOWS\tasks\At1103.job
C:\WINDOWS\tasks\At1104.job
C:\WINDOWS\tasks\At1105.job
C:\WINDOWS\tasks\At1106.job
C:\WINDOWS\tasks\At1107.job
C:\WINDOWS\tasks\At1108.job
C:\WINDOWS\tasks\At1109.job
C:\WINDOWS\tasks\At111.job
C:\WINDOWS\tasks\At1110.job
C:\WINDOWS\tasks\At1111.job
C:\WINDOWS\tasks\At1112.job
C:\WINDOWS\tasks\At1113.job
C:\WINDOWS\tasks\At1114.job
C:\WINDOWS\tasks\At1115.job
C:\WINDOWS\tasks\At1116.job
C:\WINDOWS\tasks\At1117.job
C:\WINDOWS\tasks\At1118.job
C:\WINDOWS\tasks\At1119.job
C:\WINDOWS\tasks\At112.job
C:\WINDOWS\tasks\At1120.job
C:\WINDOWS\tasks\At1121.job
C:\WINDOWS\tasks\At1122.job
C:\WINDOWS\tasks\At1123.job
C:\WINDOWS\tasks\At1124.job
C:\WINDOWS\tasks\At1125.job
C:\WINDOWS\tasks\At1126.job
C:\WINDOWS\tasks\At1127.job
C:\WINDOWS\tasks\At1128.job
C:\WINDOWS\tasks\At1129.job
C:\WINDOWS\tasks\At113.job
C:\WINDOWS\tasks\At1130.job
C:\WINDOWS\tasks\At1131.job
C:\WINDOWS\tasks\At1132.job
C:\WINDOWS\tasks\At1133.job
C:\WINDOWS\tasks\At1134.job
C:\WINDOWS\tasks\At1135.job
C:\WINDOWS\tasks\At1136.job
C:\WINDOWS\tasks\At1137.job
C:\WINDOWS\tasks\At1138.job
C:\WINDOWS\tasks\At1139.job
C:\WINDOWS\tasks\At114.job
C:\WINDOWS\tasks\At1140.job
C:\WINDOWS\tasks\At1141.job
C:\WINDOWS\tasks\At1142.job
C:\WINDOWS\tasks\At1143.job
C:\WINDOWS\tasks\At1144.job
C:\WINDOWS\tasks\At1145.job
C:\WINDOWS\tasks\At1146.job
C:\WINDOWS\tasks\At1147.job
C:\WINDOWS\tasks\At1148.job
C:\WINDOWS\tasks\At1149.job
C:\WINDOWS\tasks\At115.job
C:\WINDOWS\tasks\At1150.job
C:\WINDOWS\tasks\At1151.job
C:\WINDOWS\tasks\At1152.job
C:\WINDOWS\tasks\At1153.job
C:\WINDOWS\tasks\At1154.job
C:\WINDOWS\tasks\At1155.job
C:\WINDOWS\tasks\At1156.job
C:\WINDOWS\tasks\At1157.job
C:\WINDOWS\tasks\At1158.job
C:\WINDOWS\tasks\At1159.job
C:\WINDOWS\tasks\At116.job
C:\WINDOWS\tasks\At1160.job
C:\WINDOWS\tasks\At1161.job
C:\WINDOWS\tasks\At1162.job
C:\WINDOWS\tasks\At1163.job
C:\WINDOWS\tasks\At1164.job
C:\WINDOWS\tasks\At1165.job
C:\WINDOWS\tasks\At1166.job
C:\WINDOWS\tasks\At1167.job
C:\WINDOWS\tasks\At1168.job
C:\WINDOWS\tasks\At1169.job
C:\WINDOWS\tasks\At117.job
C:\WINDOWS\tasks\At1170.job
C:\WINDOWS\tasks\At1171.job
C:\WINDOWS\tasks\At1172.job
C:\WINDOWS\tasks\At1173.job
C:\WINDOWS\tasks\At1174.job
C:\WINDOWS\tasks\At1175.job
C:\WINDOWS\tasks\At1176.job
C:\WINDOWS\tasks\At1177.job
C:\WINDOWS\tasks\At1178.job
C:\WINDOWS\tasks\At1179.job
C:\WINDOWS\tasks\At118.job
C:\WINDOWS\tasks\At1180.job
C:\WINDOWS\tasks\At1181.job
C:\WINDOWS\tasks\At1182.job
C:\WINDOWS\tasks\At1183.job
C:\WINDOWS\tasks\At1184.job
C:\WINDOWS\tasks\At1185.job
C:\WINDOWS\tasks\At1186.job
C:\WINDOWS\tasks\At1187.job
C:\WINDOWS\tasks\At1188.job
C:\WINDOWS\tasks\At1189.job
C:\WINDOWS\tasks\At119.job
C:\WINDOWS\tasks\At1190.job
C:\WINDOWS\tasks\At1191.job
C:\WINDOWS\tasks\At1192.job
C:\WINDOWS\tasks\At1193.job
C:\WINDOWS\tasks\At1194.job
C:\WINDOWS\tasks\At1195.job
C:\WINDOWS\tasks\At1196.job
C:\WINDOWS\tasks\At1197.job
C:\WINDOWS\tasks\At1198.job
C:\WINDOWS\tasks\At1199.job
C:\WINDOWS\tasks\At12.job
C:\WINDOWS\tasks\At120.job
C:\WINDOWS\tasks\At1200.job
C:\WINDOWS\tasks\At1201.job
C:\WINDOWS\tasks\At121.job
C:\WINDOWS\tasks\At122.job
C:\WINDOWS\tasks\At123.job
C:\WINDOWS\tasks\At124.job
C:\WINDOWS\tasks\At125.job
C:\WINDOWS\tasks\At126.job
C:\WINDOWS\tasks\At127.job
C:\WINDOWS\tasks\At128.job
C:\WINDOWS\tasks\At129.job
C:\WINDOWS\tasks\At13.job
C:\WINDOWS\tasks\At130.job
C:\WINDOWS\tasks\At131.job
C:\WINDOWS\tasks\At132.job
C:\WINDOWS\tasks\At133.job
C:\WINDOWS\tasks\At134.job
C:\WINDOWS\tasks\At135.job
C:\WINDOWS\tasks\At136.job
C:\WINDOWS\tasks\At137.job
C:\WINDOWS\tasks\At138.job
C:\WINDOWS\tasks\At139.job
C:\WINDOWS\tasks\At14.job
C:\WINDOWS\tasks\At140.job
C:\WINDOWS\tasks\At141.job
C:\WINDOWS\tasks\At142.job
C:\WINDOWS\tasks\At143.job
C:\WINDOWS\tasks\At144.job
C:\WINDOWS\tasks\At145.job
C:\WINDOWS\tasks\At146.job
C:\WINDOWS\tasks\At147.job
C:\WINDOWS\tasks\At148.job
C:\WINDOWS\tasks\At149.job
C:\WINDOWS\tasks\At15.job
C:\WINDOWS\tasks\At150.job
C:\WINDOWS\tasks\At151.job
C:\WINDOWS\tasks\At152.job
C:\WINDOWS\tasks\At153.job
C:\WINDOWS\tasks\At154.job
C:\WINDOWS\tasks\At155.job
C:\WINDOWS\tasks\At156.job
C:\WINDOWS\tasks\At157.job
C:\WINDOWS\tasks\At158.job
C:\WINDOWS\tasks\At159.job
C:\WINDOWS\tasks\At16.job
C:\WINDOWS\tasks\At160.job
C:\WINDOWS\tasks\At161.job
C:\WINDOWS\tasks\At162.job
C:\WINDOWS\tasks\At163.job
C:\WINDOWS\tasks\At164.job
C:\WINDOWS\tasks\At165.job
C:\WINDOWS\tasks\At166.job
C:\WINDOWS\tasks\At167.job
C:\WINDOWS\tasks\At168.job
C:\WINDOWS\tasks\At169.job
C:\WINDOWS\tasks\At17.job
C:\WINDOWS\tasks\At170.job
C:\WINDOWS\tasks\At171.job
C:\WINDOWS\tasks\At172.job
C:\WINDOWS\tasks\At173.job
C:\WINDOWS\tasks\At174.job
C:\WINDOWS\tasks\At175.job
C:\WINDOWS\tasks\At176.job
C:\WINDOWS\tasks\At177.job
C:\WINDOWS\tasks\At178.job
C:\WINDOWS\tasks\At179.job
C:\WINDOWS\tasks\At18.job
C:\WINDOWS\tasks\At180.job
C:\WINDOWS\tasks\At181.job
C:\WINDOWS\tasks\At182.job
C:\WINDOWS\tasks\At183.job
C:\WINDOWS\tasks\At184.job
C:\WINDOWS\tasks\At185.job
C:\WINDOWS\tasks\At186.job
C:\WINDOWS\tasks\At187.job
C:\WINDOWS\tasks\At188.job
C:\WINDOWS\tasks\At189.job
C:\WINDOWS\tasks\At19.job
C:\WINDOWS\tasks\At190.job
C:\WINDOWS\tasks\At191.job
C:\WINDOWS\tasks\At192.job
C:\WINDOWS\tasks\At193.job
C:\WINDOWS\tasks\At194.job
C:\WINDOWS\tasks\At195.job
C:\WINDOWS\tasks\At196.job
C:\WINDOWS\tasks\At197.job
C:\WINDOWS\tasks\At198.job
C:\WINDOWS\tasks\At199.job
C:\WINDOWS\tasks\At2.job
C:\WINDOWS\tasks\At20.job
C:\WINDOWS\tasks\At200.job
C:\WINDOWS\tasks\At201.job
C:\WINDOWS\tasks\At202.job
C:\WINDOWS\tasks\At203.job
C:\WINDOWS\tasks\At204.job
C:\WINDOWS\tasks\At205.job
C:\WINDOWS\tasks\At206.job
C:\WINDOWS\tasks\At207.job
C:\WINDOWS\tasks\At208.job
C:\WINDOWS\tasks\At209.job
C:\WINDOWS\tasks\At21.job
C:\WINDOWS\tasks\At210.job
C:\WINDOWS\tasks\At211.job
C:\WINDOWS\tasks\At212.job
C:\WINDOWS\tasks\At213.job
C:\WINDOWS\tasks\At214.job
C:\WINDOWS\tasks\At215.job
C:\WINDOWS\tasks\At216.job
C:\WINDOWS\tasks\At217.job
C:\WINDOWS\tasks\At218.job
C:\WINDOWS\tasks\At219.job
C:\WINDOWS\tasks\At22.job
C:\WINDOWS\tasks\At220.job
C:\WINDOWS\tasks\At221.job
C:\WINDOWS\tasks\At222.job
C:\WINDOWS\tasks\At223.job
C:\WINDOWS\tasks\At224.job
C:\WINDOWS\tasks\At225.job
C:\WINDOWS\tasks\At226.job
C:\WINDOWS\tasks\At227.job
C:\WINDOWS\tasks\At228.job
C:\WINDOWS\tasks\At229.job
C:\WINDOWS\tasks\At23.job
C:\WINDOWS\tasks\At230.job
C:\WINDOWS\tasks\At231.job
C:\WINDOWS\tasks\At232.job
C:\WINDOWS\tasks\At233.job
C:\WINDOWS\tasks\At234.job
C:\WINDOWS\tasks\At235.job
C:\WINDOWS\tasks\At236.job
C:\WINDOWS\tasks\At237.job
C:\WINDOWS\tasks\At238.job
C:\WINDOWS\tasks\At239.job
C:\WINDOWS\tasks\At24.job
C:\WINDOWS\tasks\At240.job
C:\WINDOWS\tasks\At241.job
C:\WINDOWS\tasks\At242.job
C:\WINDOWS\tasks\At243.job
C:\WINDOWS\tasks\At244.job
C:\WINDOWS\tasks\At245.job
C:\WINDOWS\tasks\At246.job
C:\WINDOWS\tasks\At247.job
C:\WINDOWS\tasks\At248.job
C:\WINDOWS\tasks\At249.job
C:\WINDOWS\tasks\At25.job
C:\WINDOWS\tasks\At250.job
C:\WINDOWS\tasks\At251.job
C:\WINDOWS\tasks\At252.job
C:\WINDOWS\tasks\At253.job
C:\WINDOWS\tasks\At254.job
C:\WINDOWS\tasks\At255.job
C:\WINDOWS\tasks\At256.job
C:\WINDOWS\tasks\At257.job
C:\WINDOWS\tasks\At258.job
C:\WINDOWS\tasks\At259.job
C:\WINDOWS\tasks\At26.job
C:\WINDOWS\tasks\At260.job
C:\WINDOWS\tasks\At261.job
C:\WINDOWS\tasks\At262.job
C:\WINDOWS\tasks\At263.job
C:\WINDOWS\tasks\At264.job
C:\WINDOWS\tasks\At265.job
C:\WINDOWS\tasks\At266.job
C:\WINDOWS\tasks\At267.job
C:\WINDOWS\tasks\At268.job
C:\WINDOWS\tasks\At269.job
C:\WINDOWS\tasks\At27.job
C:\WINDOWS\tasks\At270.job
C:\WINDOWS\tasks\At271.job
C:\WINDOWS\tasks\At272.job
C:\WINDOWS\tasks\At273.job
C:\WINDOWS\tasks\At274.job
C:\WINDOWS\tasks\At275.job
C:\WINDOWS\tasks\At276.job
C:\WINDOWS\tasks\At277.job
C:\WINDOWS\tasks\At278.job
C:\WINDOWS\tasks\At279.job
C:\WINDOWS\tasks\At28.job
C:\WINDOWS\tasks\At280.job
C:\WINDOWS\tasks\At281.job
C:\WINDOWS\tasks\At282.job
C:\WINDOWS\tasks\At283.job
C:\WINDOWS\tasks\At284.job
C:\WINDOWS\tasks\At285.job
C:\WINDOWS\tasks\At286.job
C:\WINDOWS\tasks\At287.job
C:\WINDOWS\tasks\At288.job
C:\WINDOWS\tasks\At289.job
C:\WINDOWS\tasks\At29.job
C:\WINDOWS\tasks\At290.job
C:\WINDOWS\tasks\At291.job
C:\WINDOWS\tasks\At292.job
C:\WINDOWS\tasks\At293.job
C:\WINDOWS\tasks\At294.job
C:\WINDOWS\tasks\At295.job
C:\WINDOWS\tasks\At296.job
C:\WINDOWS\tasks\At297.job
C:\WINDOWS\tasks\At298.job
C:\WINDOWS\tasks\At299.job
C:\WINDOWS\tasks\At3.job
C:\WINDOWS\tasks\At30.job
C:\WINDOWS\tasks\At300.job
C:\WINDOWS\tasks\At301.job
C:\WINDOWS\tasks\At302.job
C:\WINDOWS\tasks\At303.job
C:\WINDOWS\tasks\At304.job
C:\WINDOWS\tasks\At305.job
C:\WINDOWS\tasks\At306.job
C:\WINDOWS\tasks\At307.job
C:\WINDOWS\tasks\At308.job
C:\WINDOWS\tasks\At309.job
C:\WINDOWS\tasks\At31.job
C:\WINDOWS\tasks\At310.job
C:\WINDOWS\tasks\At311.job
C:\WINDOWS\tasks\At312.job
C:\WINDOWS\tasks\At313.job
C:\WINDOWS\tasks\At314.job
C:\WINDOWS\tasks\At315.job
C:\WINDOWS\tasks\At316.job
C:\WINDOWS\tasks\At317.job
C:\WINDOWS\tasks\At318.job
C:\WINDOWS\tasks\At319.job
C:\WINDOWS\tasks\At32.job
C:\WINDOWS\tasks\At320.job
C:\WINDOWS\tasks\At321.job
C:\WINDOWS\tasks\At322.job
C:\WINDOWS\tasks\At323.job
C:\WINDOWS\tasks\At324.job
C:\WINDOWS\tasks\At325.job
C:\WINDOWS\tasks\At326.job
C:\WINDOWS\tasks\At327.job
C:\WINDOWS\tasks\At328.job
C:\WINDOWS\tasks\At329.job
C:\WINDOWS\tasks\At33.job
C:\WINDOWS\tasks\At330.job
C:\WINDOWS\tasks\At331.job
C:\WINDOWS\tasks\At332.job
C:\WINDOWS\tasks\At333.job
C:\WINDOWS\tasks\At334.job
C:\WINDOWS\tasks\At335.job
C:\WINDOWS\tasks\At336.job
C:\WINDOWS\tasks\At337.job
C:\WINDOWS\tasks\At338.job
C:\WINDOWS\tasks\At339.job
C:\WINDOWS\tasks\At34.job
C:\WINDOWS\tasks\At340.job
C:\WINDOWS\tasks\At341.job
C:\WINDOWS\tasks\At342.job
C:\WINDOWS\tasks\At343.job
C:\WINDOWS\tasks\At344.job
C:\WINDOWS\tasks\At345.job
C:\WINDOWS\tasks\At346.job
C:\WINDOWS\tasks\At347.job
C:\WINDOWS\tasks\At348.job
C:\WINDOWS\tasks\At349.job
C:\WINDOWS\tasks\At35.job
C:\WINDOWS\tasks\At350.job
C:\WINDOWS\tasks\At351.job
C:\WINDOWS\tasks\At352.job
C:\WINDOWS\tasks\At353.job
C:\WINDOWS\tasks\At354.job
C:\WINDOWS\tasks\At355.job
C:\WINDOWS\tasks\At356.job
C:\WINDOWS\tasks\At357.job
C:\WINDOWS\tasks\At358.job
C:\WINDOWS\tasks\At359.job
C:\WINDOWS\tasks\At36.job
C:\WINDOWS\tasks\At360.job
C:\WINDOWS\tasks\At361.job
C:\WINDOWS\tasks\At362.job
C:\WINDOWS\tasks\At363.job
C:\WINDOWS\tasks\At364.job
C:\WINDOWS\tasks\At365.job
C:\WINDOWS\tasks\At366.job
C:\WINDOWS\tasks\At367.job
C:\WINDOWS\tasks\At368.job
C:\WINDOWS\tasks\At369.job
C:\WINDOWS\tasks\At37.job
C:\WINDOWS\tasks\At370.job
C:\WINDOWS\tasks\At371.job
C:\WINDOWS\tasks\At372.job
C:\WINDOWS\tasks\At373.job
C:\WINDOWS\tasks\At374.job
C:\WINDOWS\tasks\At375.job
C:\WINDOWS\tasks\At376.job
C:\WINDOWS\tasks\At377.job
C:\WINDOWS\tasks\At378.job
C:\WINDOWS\tasks\At379.job
C:\WINDOWS\tasks\At38.job
C:\WINDOWS\tasks\At380.job
C:\WINDOWS\tasks\At381.job
C:\WINDOWS\tasks\At382.job
C:\WINDOWS\tasks\At383.job
C:\WINDOWS\tasks\At384.job
C:\WINDOWS\tasks\At385.job
C:\WINDOWS\tasks\At386.job
C:\WINDOWS\tasks\At387.job
C:\WINDOWS\tasks\At388.job
C:\WINDOWS\tasks\At389.job
C:\WINDOWS\tasks\At39.job
C:\WINDOWS\tasks\At390.job
C:\WINDOWS\tasks\At391.job
C:\WINDOWS\tasks\At392.job
C:\WINDOWS\tasks\At393.job
C:\WINDOWS\tasks\At394.job
C:\WINDOWS\tasks\At395.job
C:\WINDOWS\tasks\At396.job
C:\WINDOWS\tasks\At397.job
C:\WINDOWS\tasks\At398.job
C:\WINDOWS\tasks\At399.job
C:\WINDOWS\tasks\At4.job
C:\WINDOWS\tasks\At40.job
C:\WINDOWS\tasks\At400.job
C:\WINDOWS\tasks\At401.job
C:\WINDOWS\tasks\At402.job
C:\WINDOWS\tasks\At403.job
C:\WINDOWS\tasks\At404.job
C:\WINDOWS\tasks\At405.job
C:\WINDOWS\tasks\At406.job
C:\WINDOWS\tasks\At407.job
C:\WINDOWS\tasks\At408.job
C:\WINDOWS\tasks\At409.job
C:\WINDOWS\tasks\At41.job
C:\WINDOWS\tasks\At410.job
C:\WINDOWS\tasks\At411.job
C:\WINDOWS\tasks\At412.job
C:\WINDOWS\tasks\At413.job
C:\WINDOWS\tasks\At414.job
C:\WINDOWS\tasks\At415.job
C:\WINDOWS\tasks\At416.job
C:\WINDOWS\tasks\At417.job
C:\WINDOWS\tasks\At418.job
C:\WINDOWS\tasks\At419.job
C:\WINDOWS\tasks\At42.job
C:\WINDOWS\tasks\At420.job
C:\WINDOWS\tasks\At421.job
C:\WINDOWS\tasks\At422.job
C:\WINDOWS\tasks\At423.job
C:\WINDOWS\tasks\At424.job
C:\WINDOWS\tasks\At425.job
C:\WINDOWS\tasks\At426.job
C:\WINDOWS\tasks\At427.job
C:\WINDOWS\tasks\At428.job
C:\WINDOWS\tasks\At429.job
C:\WINDOWS\tasks\At43.job
C:\WINDOWS\tasks\At430.job
C:\WINDOWS\tasks\At431.job
C:\WINDOWS\tasks\At432.job
C:\WINDOWS\tasks\At433.job
C:\WINDOWS\tasks\At434.job
C:\WINDOWS\tasks\At435.job
C:\WINDOWS\tasks\At436.job
C:\WINDOWS\tasks\At437.job
C:\WINDOWS\tasks\At438.job
C:\WINDOWS\tasks\At439.job
C:\WINDOWS\tasks\At44.job
C:\WINDOWS\tasks\At440.job
C:\WINDOWS\tasks\At441.job
C:\WINDOWS\tasks\At442.job
C:\WINDOWS\tasks\At443.job
C:\WINDOWS\tasks\At444.job
C:\WINDOWS\tasks\At445.job
C:\WINDOWS\tasks\At446.job
C:\WINDOWS\tasks\At447.job
C:\WINDOWS\tasks\At448.job
C:\WINDOWS\tasks\At449.job
C:\WINDOWS\tasks\At45.job
C:\WINDOWS\tasks\At450.job
C:\WINDOWS\tasks\At451.job
C:\WINDOWS\tasks\At452.job
C:\WINDOWS\tasks\At453.job
C:\WINDOWS\tasks\At454.job
C:\WINDOWS\tasks\At455.job
C:\WINDOWS\tasks\At456.job
C:\WINDOWS\tasks\At457.job
C:\WINDOWS\tasks\At458.job
C:\WINDOWS\tasks\At459.job
C:\WINDOWS\tasks\At46.job
C:\WINDOWS\tasks\At460.job
C:\WINDOWS\tasks\At461.job
C:\WINDOWS\tasks\At462.job
C:\WINDOWS\tasks\At463.job
C:\WINDOWS\tasks\At464.job
C:\WINDOWS\tasks\At465.job
C:\WINDOWS\tasks\At466.job
C:\WINDOWS\tasks\At467.job
C:\WINDOWS\tasks\At468.job
C:\WINDOWS\tasks\At469.job
C:\WINDOWS\tasks\At47.job
C:\WINDOWS\tasks\At470.job
C:\WINDOWS\tasks\At471.job
C:\WINDOWS\tasks\At472.job
C:\WINDOWS\tasks\At473.job
C:\WINDOWS\tasks\At474.job
C:\WINDOWS\tasks\At475.job
C:\WINDOWS\tasks\At476.job
C:\WINDOWS\tasks\At477.job
C:\WINDOWS\tasks\At478.job
C:\WINDOWS\tasks\At479.job
C:\WINDOWS\tasks\At48.job
C:\WINDOWS\tasks\At480.job
C:\WINDOWS\tasks\At481.job
C:\WINDOWS\tasks\At482.job
C:\WINDOWS\tasks\At483.job
C:\WINDOWS\tasks\At484.job
C:\WINDOWS\tasks\At485.job
C:\WINDOWS\tasks\At486.job
C:\WINDOWS\tasks\At487.job
C:\WINDOWS\tasks\At488.job
C:\WINDOWS\tasks\At489.job
C:\WINDOWS\tasks\At49.job
C:\WINDOWS\tasks\At490.job
C:\WINDOWS\tasks\At491.job
C:\WINDOWS\tasks\At492.job
C:\WINDOWS\tasks\At493.job
C:\WINDOWS\tasks\At494.job
C:\WINDOWS\tasks\At495.job
C:\WINDOWS\tasks\At496.job
C:\WINDOWS\tasks\At497.job
C:\WINDOWS\tasks\At498.job
C:\WINDOWS\tasks\At499.job
C:\WINDOWS\tasks\At5.job
C:\WINDOWS\tasks\At50.job
C:\WINDOWS\tasks\At500.job
C:\WINDOWS\tasks\At501.job
C:\WINDOWS\tasks\At502.job
C:\WINDOWS\tasks\At503.job
C:\WINDOWS\tasks\At504.job
C:\WINDOWS\tasks\At505.job
C:\WINDOWS\tasks\At506.job
C:\WINDOWS\tasks\At507.job
C:\WINDOWS\tasks\At508.job
C:\WINDOWS\tasks\At509.job
C:\WINDOWS\tasks\At51.job
C:\WINDOWS\tasks\At510.job
C:\WINDOWS\tasks\At511.job
C:\WINDOWS\tasks\At512.job
C:\WINDOWS\tasks\At513.job
C:\WINDOWS\tasks\At514.job
C:\WINDOWS\tasks\At515.job
C:\WINDOWS\tasks\At516.job
C:\WINDOWS\tasks\At517.job
C:\WINDOWS\tasks\At518.job
C:\WINDOWS\tasks\At519.job
C:\WINDOWS\tasks\At52.job
C:\WINDOWS\tasks\At520.job
C:\WINDOWS\tasks\At521.job
C:\WINDOWS\tasks\At522.job
C:\WINDOWS\tasks\At523.job
C:\WINDOWS\tasks\At524.job
C:\WINDOWS\tasks\At525.job
C:\WINDOWS\tasks\At526.job
C:\WINDOWS\tasks\At527.job
C:\WINDOWS\tasks\At528.job
C:\WINDOWS\tasks\At529.job
C:\WINDOWS\tasks\At53.job
C:\WINDOWS\tasks\At530.job
C:\WINDOWS\tasks\At531.job
C:\WINDOWS\tasks\At532.job
C:\WINDOWS\tasks\At533.job
C:\WINDOWS\tasks\At534.job
C:\WINDOWS\tasks\At535.job
C:\WINDOWS\tasks\At536.job
C:\WINDOWS\tasks\At537.job
C:\WINDOWS\tasks\At538.job
C:\WINDOWS\tasks\At539.job
C:\WINDOWS\tasks\At54.job
C:\WINDOWS\tasks\At540.job
C:\WINDOWS\tasks\At541.job
C:\WINDOWS\tasks\At542.job
C:\WINDOWS\tasks\At543.job
C:\WINDOWS\tasks\At544.job
C:\WINDOWS\tasks\At545.job
C:\WINDOWS\tasks\At546.job
C:\WINDOWS\tasks\At547.job
C:\WINDOWS\tasks\At548.job
C:\WINDOWS\tasks\At549.job
C:\WINDOWS\tasks\At55.job
C:\WINDOWS\tasks\At550.job
C:\WINDOWS\tasks\At551.job
C:\WINDOWS\tasks\At552.job
C:\WINDOWS\tasks\At553.job
C:\WINDOWS\tasks\At554.job
C:\WINDOWS\tasks\At555.job
C:\WINDOWS\tasks\At556.job
C:\WINDOWS\tasks\At557.job
C:\WINDOWS\tasks\At558.job
C:\WINDOWS\tasks\At559.job
C:\WINDOWS\tasks\At56.job
C:\WINDOWS\tasks\At560.job
C:\WINDOWS\tasks\At561.job
C:\WINDOWS\tasks\At562.job
C:\WINDOWS\tasks\At563.job
C:\WINDOWS\tasks\At564.job
C:\WINDOWS\tasks\At565.job
C:\WINDOWS\tasks\At566.job
C:\WINDOWS\tasks\At567.job
C:\WINDOWS\tasks\At568.job
C:\WINDOWS\tasks\At569.job
C:\WINDOWS\tasks\At57.job
C:\WINDOWS\tasks\At570.job
C:\WINDOWS\tasks\At571.job
C:\WINDOWS\tasks\At572.job
C:\WINDOWS\tasks\At573.job
C:\WINDOWS\tasks\At574.job
C:\WINDOWS\tasks\At575.job
C:\WINDOWS\tasks\At576.job
C:\WINDOWS\tasks\At577.job
C:\WINDOWS\tasks\At578.job
C:\WINDOWS\tasks\At579.job
C:\WINDOWS\tasks\At58.job
C:\WINDOWS\tasks\At580.job
C:\WINDOWS\tasks\At581.job
C:\WINDOWS\tasks\At582.job
C:\WINDOWS\tasks\At583.job
C:\WINDOWS\tasks\At584.job
C:\WINDOWS\tasks\At585.job
C:\WINDOWS\tasks\At586.job
C:\WINDOWS\tasks\At587.job
C:\WINDOWS\tasks\At588.job
C:\WINDOWS\tasks\At589.job
C:\WINDOWS\tasks\At59.job
C:\WINDOWS\tasks\At590.job
C:\WINDOWS\tasks\At591.job
C:\WINDOWS\tasks\At592.job
C:\WINDOWS\tasks\At593.job
C:\WINDOWS\tasks\At594.job
C:\WINDOWS\tasks\At595.job
C:\WINDOWS\tasks\At596.job
C:\WINDOWS\tasks\At597.job
C:\WINDOWS\tasks\At598.job
C:\WINDOWS\tasks\At599.job
C:\WINDOWS\tasks\At6.job
C:\WINDOWS\tasks\At60.job
C:\WINDOWS\tasks\At600.job
C:\WINDOWS\tasks\At601.job
C:\WINDOWS\tasks\At602.job
C:\WINDOWS\tasks\At603.job
C:\WINDOWS\tasks\At604.job
C:\WINDOWS\tasks\At605.job
C:\WINDOWS\tasks\At606.job
C:\WINDOWS\tasks\At607.job
C:\WINDOWS\tasks\At608.job
C:\WINDOWS\tasks\At609.job
C:\WINDOWS\tasks\At61.job
C:\WINDOWS\tasks\At610.job
C:\WINDOWS\tasks\At611.job
C:\WINDOWS\tasks\At612.job
C:\WINDOWS\tasks\At613.job
C:\WINDOWS\tasks\At614.job
C:\WINDOWS\tasks\At615.job
C:\WINDOWS\tasks\At616.job
C:\WINDOWS\tasks\At617.job
C:\WINDOWS\tasks\At618.job
C:\WINDOWS\tasks\At619.job
C:\WINDOWS\tasks\At62.job
C:\WINDOWS\tasks\At620.job
C:\WINDOWS\tasks\At621.job
C:\WINDOWS\tasks\At622.job
C:\WINDOWS\tasks\At623.job
C:\WINDOWS\tasks\At624.job
C:\WINDOWS\tasks\At625.job
C:\WINDOWS\tasks\At626.job
C:\WINDOWS\tasks\At627.job
C:\WINDOWS\tasks\At628.job
C:\WINDOWS\tasks\At629.job
C:\WINDOWS\tasks\At63.job
C:\WINDOWS\tasks\At630.job
C:\WINDOWS\tasks\At631.job
C:\WINDOWS\tasks\At632.job
C:\WINDOWS\tasks\At633.job
C:\WINDOWS\tasks\At634.job
C:\WINDOWS\tasks\At635.job
C:\WINDOWS\tasks\At636.job
C:\WINDOWS\tasks\At637.job
C:\WINDOWS\tasks\At638.job
C:\WINDOWS\tasks\At639.job
C:\WINDOWS\tasks\At64.job
C:\WINDOWS\tasks\At640.job
C:\WINDOWS\tasks\At641.job
C:\WINDOWS\tasks\At642.job
C:\WINDOWS\tasks\At643.job
C:\WINDOWS\tasks\At644.job
C:\WINDOWS\tasks\At645.job
C:\WINDOWS\tasks\At646.job
C:\WINDOWS\tasks\At647.job
C:\WINDOWS\tasks\At648.job
C:\WINDOWS\tasks\At649.job
C:\WINDOWS\tasks\At65.job
C:\WINDOWS\tasks\At650.job
C:\WINDOWS\tasks\At651.job
C:\WINDOWS\tasks\At652.job
C:\WINDOWS\tasks\At653.job
C:\WINDOWS\tasks\At654.job
C:\WINDOWS\tasks\At655.job
C:\WINDOWS\tasks\At656.job
C:\WINDOWS\tasks\At657.job
C:\WINDOWS\tasks\At658.job
C:\WINDOWS\tasks\At659.job
C:\WINDOWS\tasks\At66.job
C:\WINDOWS\tasks\At660.job
C:\WINDOWS\tasks\At661.job
C:\WINDOWS\tasks\At662.job
C:\WINDOWS\tasks\At663.job
C:\WINDOWS\tasks\At664.job
C:\WINDOWS\tasks\At665.job
C:\WINDOWS\tasks\At666.job
C:\WINDOWS\tasks\At667.job
C:\WINDOWS\tasks\At668.job
C:\WINDOWS\tasks\At669.job
C:\WINDOWS\tasks\At67.job
C:\WINDOWS\tasks\At670.job
C:\WINDOWS\tasks\At671.job
C:\WINDOWS\tasks\At672.job
C:\WINDOWS\tasks\At673.job
C:\WINDOWS\tasks\At674.job
C:\WINDOWS\tasks\At675.job
C:\WINDOWS\tasks\At676.job
C:\WINDOWS\tasks\At677.job
C:\WINDOWS\tasks\At678.job
C:\WINDOWS\tasks\At679.job
C:\WINDOWS\tasks\At68.job
C:\WINDOWS\tasks\At680.job
C:\WINDOWS\tasks\At681.job
C:\WINDOWS\tasks\At682.job
C:\WINDOWS\tasks\At683.job
C:\WINDOWS\tasks\At684.job
C:\WINDOWS\tasks\At685.job
C:\WINDOWS\tasks\At686.job
C:\WINDOWS\tasks\At687.job
C:\WINDOWS\tasks\At688.job
C:\WINDOWS\tasks\At689.job
C:\WINDOWS\tasks\At69.job
C:\WINDOWS\tasks\At690.job
C:\WINDOWS\tasks\At691.job
C:\WINDOWS\tasks\At692.job
C:\WINDOWS\tasks\At693.job
C:\WINDOWS\tasks\At694.job
C:\WINDOWS\tasks\At695.job
C:\WINDOWS\tasks\At696.job
C:\WINDOWS\tasks\At697.job
C:\WINDOWS\tasks\At698.job
C:\WINDOWS\tasks\At699.job
C:\WINDOWS\tasks\At7.job
C:\WINDOWS\tasks\At70.job
C:\WINDOWS\tasks\At700.job
C:\WINDOWS\tasks\At701.job
C:\WINDOWS\tasks\At702.job
C:\WINDOWS\tasks\At703.job
C:\WINDOWS\tasks\At704.job
C:\WINDOWS\tasks\At705.job
C:\WINDOWS\tasks\At706.job
C:\WINDOWS\tasks\At707.job
C:\WINDOWS\tasks\At708.job
C:\WINDOWS\tasks\At709.job
C:\WINDOWS\tasks\At71.job
C:\WINDOWS\tasks\At710.job
C:\WINDOWS\tasks\At711.job
C:\WINDOWS\tasks\At712.job
C:\WINDOWS\tasks\At713.job
C:\WINDOWS\tasks\At714.job
C:\WINDOWS\tasks\At715.job
C:\WINDOWS\tasks\At716.job
C:\WINDOWS\tasks\At717.job
C:\WINDOWS\tasks\At718.job
C:\WINDOWS\tasks\At719.job
C:\WINDOWS\tasks\At72.job
C:\WINDOWS\tasks\At720.job
C:\WINDOWS\tasks\At721.job
C:\WINDOWS\tasks\At722.job
C:\WINDOWS\tasks\At723.job
C:\WINDOWS\tasks\At724.job
C:\WINDOWS\tasks\At725.job
C:\WINDOWS\tasks\At726.job
C:\WINDOWS\tasks\At727.job
C:\WINDOWS\tasks\At728.job
C:\WINDOWS\tasks\At729.job
C:\WINDOWS\tasks\At73.job
C:\WINDOWS\tasks\At730.job
C:\WINDOWS\tasks\At731.job
C:\WINDOWS\tasks\At732.job
C:\WINDOWS\tasks\At733.job
C:\WINDOWS\tasks\At734.job
C:\WINDOWS\tasks\At735.job
C:\WINDOWS\tasks\At736.job
C:\WINDOWS\tasks\At737.job
C:\WINDOWS\tasks\At738.job
C:\WINDOWS\tasks\At739.job
C:\WINDOWS\tasks\At74.job
C:\WINDOWS\tasks\At740.job
C:\WINDOWS\tasks\At741.job
C:\WINDOWS\tasks\At742.job
C:\WINDOWS\tasks\At743.job
C:\WINDOWS\tasks\At744.job
C:\WINDOWS\tasks\At745.job
C:\WINDOWS\tasks\At746.job
C:\WINDOWS\tasks\At747.job
C:\WINDOWS\tasks\At748.job
C:\WINDOWS\tasks\At749.job
C:\WINDOWS\tasks\At75.job
C:\WINDOWS\tasks\At750.job
C:\WINDOWS\tasks\At751.job
C:\WINDOWS\tasks\At752.job
C:\WINDOWS\tasks\At753.job
C:\WINDOWS\tasks\At754.job
C:\WINDOWS\tasks\At755.job
C:\WINDOWS\tasks\At756.job
C:\WINDOWS\tasks\At757.job
C:\WINDOWS\tasks\At758.job
C:\WINDOWS\tasks\At759.job
C:\WINDOWS\tasks\At76.job
C:\WINDOWS\tasks\At760.job
C:\WINDOWS\tasks\At761.job
C:\WINDOWS\tasks\At762.job
C:\WINDOWS\tasks\At763.job
C:\WINDOWS\tasks\At764.job
C:\WINDOWS\tasks\At765.job
C:\WINDOWS\tasks\At766.job
C:\WINDOWS\tasks\At767.job
C:\WINDOWS\tasks\At768.job
C:\WINDOWS\tasks\At769.job
C:\WINDOWS\tasks\At77.job
C:\WINDOWS\tasks\At770.job
C:\WINDOWS\tasks\At771.job
C:\WINDOWS\tasks\At772.job
C:\WINDOWS\tasks\At773.job
C:\WINDOWS\tasks\At774.job
C:\WINDOWS\tasks\At775.job
C:\WINDOWS\tasks\At776.job
C:\WINDOWS\tasks\At777.job
C:\WINDOWS\tasks\At778.job
C:\WINDOWS\tasks\At779.job
C:\WINDOWS\tasks\At78.job
C:\WINDOWS\tasks\At780.job
C:\WINDOWS\tasks\At781.job
C:\WINDOWS\tasks\At782.job
C:\WINDOWS\tasks\At783.job
C:\WINDOWS\tasks\At784.job
C:\WINDOWS\tasks\At785.job
C:\WINDOWS\tasks\At786.job
C:\WINDOWS\tasks\At787.job
C:\WINDOWS\tasks\At788.job
C:\WINDOWS\tasks\At789.job
C:\WINDOWS\tasks\At79.job
C:\WINDOWS\tasks\At790.job
C:\WINDOWS\tasks\At791.job
C:\WINDOWS\tasks\At792.job
C:\WINDOWS\tasks\At793.job
C:\WINDOWS\tasks\At794.job
C:\WINDOWS\tasks\At795.job
C:\WINDOWS\tasks\At796.job
C:\WINDOWS\tasks\At797.job
C:\WINDOWS\tasks\At798.job
C:\WINDOWS\tasks\At799.job
C:\WINDOWS\tasks\At8.job
C:\WINDOWS\tasks\At80.job
C:\WINDOWS\tasks\At800.job
C:\WINDOWS\tasks\At801.job
C:\WINDOWS\tasks\At802.job
C:\WINDOWS\tasks\At803.job
C:\WINDOWS\tasks\At804.job
C:\WINDOWS\tasks\At805.job
C:\WINDOWS\tasks\At806.job
C:\WINDOWS\tasks\At807.job
C:\WINDOWS\tasks\At808.job
C:\WINDOWS\tasks\At809.job
C:\WINDOWS\tasks\At81.job
C:\WINDOWS\tasks\At810.job
C:\WINDOWS\tasks\At811.job
C:\WINDOWS\tasks\At812.job
C:\WINDOWS\tasks\At813.job
C:\WINDOWS\tasks\At814.job
C:\WINDOWS\tasks\At815.job
C:\WINDOWS\tasks\At816.job
C:\WINDOWS\tasks\At817.job
C:\WINDOWS\tasks\At818.job
C:\WINDOWS\tasks\At819.job
C:\WINDOWS\tasks\At82.job
C:\WINDOWS\tasks\At820.job
C:\WINDOWS\tasks\At821.job
C:\WINDOWS\tasks\At822.job
C:\WINDOWS\tasks\At823.job
C:\WINDOWS\tasks\At824.job
C:\WINDOWS\tasks\At825.job
C:\WINDOWS\tasks\At826.job
C:\WINDOWS\tasks\At827.job
C:\WINDOWS\tasks\At828.job
C:\WINDOWS\tasks\At829.job
C:\WINDOWS\tasks\At83.job
C:\WINDOWS\tasks\At830.job
C:\WINDOWS\tasks\At831.job
C:\WINDOWS\tasks\At832.job
C:\WINDOWS\tasks\At833.job
C:\WINDOWS\tasks\At834.job
C:\WINDOWS\tasks\At835.job
C:\WINDOWS\tasks\At836.job
C:\WINDOWS\tasks\At837.job
C:\WINDOWS\tasks\At838.job
C:\WINDOWS\tasks\At839.job
C:\WINDOWS\tasks\At84.job
C:\WINDOWS\tasks\At840.job
C:\WINDOWS\tasks\At841.job
C:\WINDOWS\tasks\At842.job
C:\WINDOWS\tasks\At843.job
C:\WINDOWS\tasks\At844.job
C:\WINDOWS\tasks\At845.job
C:\WINDOWS\tasks\At846.job
C:\WINDOWS\tasks\At847.job
C:\WINDOWS\tasks\At848.job
C:\WINDOWS\tasks\At849.job
C:\WINDOWS\tasks\At85.job
C:\WINDOWS\tasks\At850.job
C:\WINDOWS\tasks\At851.job
C:\WINDOWS\tasks\At852.job
C:\WINDOWS\tasks\At853.job
C:\WINDOWS\tasks\At854.job
C:\WINDOWS\tasks\At855.job
C:\WINDOWS\tasks\At856.job
C:\WINDOWS\tasks\At857.job
C:\WINDOWS\tasks\At858.job
C:\WINDOWS\tasks\At859.job
C:\WINDOWS\tasks\At86.job
C:\WINDOWS\tasks\At860.job
C:\WINDOWS\tasks\At861.job
C:\WINDOWS\tasks\At862.job
C:\WINDOWS\tasks\At863.job
C:\WINDOWS\tasks\At864.job
C:\WINDOWS\tasks\At865.job
C:\WINDOWS\tasks\At866.job
C:\WINDOWS\tasks\At867.job
C:\WINDOWS\tasks\At868.job
C:\WINDOWS\tasks\At869.job
C:\WINDOWS\tasks\At87.job
C:\WINDOWS\tasks\At870.job
C:\WINDOWS\tasks\At871.job
C:\WINDOWS\tasks\At872.job
C:\WINDOWS\tasks\At873.job
C:\WINDOWS\tasks\At874.job
C:\WINDOWS\tasks\At875.job
C:\WINDOWS\tasks\At876.job
C:\WINDOWS\tasks\At877.job
C:\WINDOWS\tasks\At878.job
C:\WINDOWS\tasks\At879.job
C:\WINDOWS\tasks\At88.job
C:\WINDOWS\tasks\At880.job
C:\WINDOWS\tasks\At881.job
C:\WINDOWS\tasks\At882.job
C:\WINDOWS\tasks\At883.job
C:\WINDOWS\tasks\At884.job
C:\WINDOWS\tasks\At885.job
C:\WINDOWS\tasks\At886.job
C:\WINDOWS\tasks\At887.job
C:\WINDOWS\tasks\At888.job
C:\WINDOWS\tasks\At889.job
C:\WINDOWS\tasks\At89.job
C:\WINDOWS\tasks\At890.job
C:\WINDOWS\tasks\At891.job
C:\WINDOWS\tasks\At892.job
C:\WINDOWS\tasks\At893.job
C:\WINDOWS\tasks\At894.job
C:\WINDOWS\tasks\At895.job
C:\WINDOWS\tasks\At896.job
C:\WINDOWS\tasks\At897.job
C:\WINDOWS\tasks\At898.job
C:\WINDOWS\tasks\At899.job
C:\WINDOWS\tasks\At9.job
C:\WINDOWS\tasks\At90.job
C:\WINDOWS\tasks\At900.job
C:\WINDOWS\tasks\At901.job
C:\WINDOWS\tasks\At902.job
C:\WINDOWS\tasks\At903.job
C:\WINDOWS\tasks\At904.job
C:\WINDOWS\tasks\At905.job
C:\WINDOWS\tasks\At906.job
C:\WINDOWS\tasks\At907.job
C:\WINDOWS\tasks\At908.job
C:\WINDOWS\tasks\At909.job
C:\WINDOWS\tasks\At91.job
C:\WINDOWS\tasks\At910.job
C:\WINDOWS\tasks\At911.job
C:\WINDOWS\tasks\At912.job
C:\WINDOWS\tasks\At913.job
C:\WINDOWS\tasks\At914.job
C:\WINDOWS\tasks\At915.job
C:\WINDOWS\tasks\At916.job
C:\WINDOWS\tasks\At917.job
C:\WINDOWS\tasks\At918.job
C:\WINDOWS\tasks\At919.job
C:\WINDOWS\tasks\At92.job
C:\WINDOWS\tasks\At920.job
C:\WINDOWS\tasks\At921.job
C:\WINDOWS\tasks\At922.job
C:\WINDOWS\tasks\At923.job
C:\WINDOWS\tasks\At924.job
C:\WINDOWS\tasks\At925.job
C:\WINDOWS\tasks\At926.job
C:\WINDOWS\tasks\At927.job
C:\WINDOWS\tasks\At928.job
C:\WINDOWS\tasks\At929.job
C:\WINDOWS\tasks\At93.job
C:\WINDOWS\tasks\At930.job
C:\WINDOWS\tasks\At931.job
C:\WINDOWS\tasks\At932.job
C:\WINDOWS\tasks\At933.job
C:\WINDOWS\tasks\At934.job
C:\WINDOWS\tasks\At935.job
C:\WINDOWS\tasks\At936.job
C:\WINDOWS\tasks\At937.job
C:\WINDOWS\tasks\At938.job
C:\WINDOWS\tasks\At939.job
C:\WINDOWS\tasks\At94.job
C:\WINDOWS\tasks\At940.job
C:\WINDOWS\tasks\At941.job
C:\WINDOWS\tasks\At942.job
C:\WINDOWS\tasks\At943.job
C:\WINDOWS\tasks\At944.job
C:\WINDOWS\tasks\At945.job
C:\WINDOWS\tasks\At946.job
C:\WINDOWS\tasks\At947.job
C:\WINDOWS\tasks\At948.job
C:\WINDOWS\tasks\At949.job
C:\WINDOWS\tasks\At95.job
C:\WINDOWS\tasks\At950.job
C:\WINDOWS\tasks\At951.job
C:\WINDOWS\tasks\At952.job
C:\WINDOWS\tasks\At953.job
C:\WINDOWS\tasks\At954.job
C:\WINDOWS\tasks\At955.job
C:\WINDOWS\tasks\At956.job
C:\WINDOWS\tasks\At957.job
C:\WINDOWS\tasks\At958.job
C:\WINDOWS\tasks\At959.job
C:\WINDOWS\tasks\At96.job
C:\WINDOWS\tasks\At960.job
C:\WINDOWS\tasks\At961.job
C:\WINDOWS\tasks\At962.job
C:\WINDOWS\tasks\At963.job
C:\WINDOWS\tasks\At964.job
C:\WINDOWS\tasks\At965.job
C:\WINDOWS\tasks\At966.job
C:\WINDOWS\tasks\At967.job
C:\WINDOWS\tasks\At968.job
C:\WINDOWS\tasks\At969.job
C:\WINDOWS\tasks\At97.job
C:\WINDOWS\tasks\At970.job
C:\WINDOWS\tasks\At971.job
C:\WINDOWS\tasks\At972.job
C:\WINDOWS\tasks\At973.job
C:\WINDOWS\tasks\At974.job
C:\WINDOWS\tasks\At975.job
C:\WINDOWS\tasks\At976.job
C:\WINDOWS\tasks\At977.job
C:\WINDOWS\tasks\At978.job
C:\WINDOWS\tasks\At979.job
C:\WINDOWS\tasks\At98.job
C:\WINDOWS\tasks\At980.job
C:\WINDOWS\tasks\At981.job
C:\WINDOWS\tasks\At982.job
C:\WINDOWS\tasks\At983.job
C:\WINDOWS\tasks\At984.job
C:\WINDOWS\tasks\At985.job
C:\WINDOWS\tasks\At986.job
C:\WINDOWS\tasks\At987.job
C:\WINDOWS\tasks\At988.job
C:\WINDOWS\tasks\At989.job
C:\WINDOWS\tasks\At99.job
C:\WINDOWS\tasks\At990.job
C:\WINDOWS\tasks\At991.job
C:\WINDOWS\tasks\At992.job
C:\WINDOWS\tasks\At993.job
C:\WINDOWS\tasks\At994.job
C:\WINDOWS\tasks\At995.job
C:\WINDOWS\tasks\At996.job
C:\WINDOWS\tasks\At997.job
C:\WINDOWS\tasks\At998.job
C:\WINDOWS\tasks\At999.job
C:\WINDOWS\tasks\EWFNVHKQG.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-27 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-05-27 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-07-17 36868]
"QuickTime Task"=C:\Program Files\QuickTime\qttask .exe [2010-03-17 421888]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2010-07-17 36868]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-07-17 36868]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-07-17 36868]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2010-07-19 36872]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
C:\Documents and Settings\Administrator\Start Menu\Programs\Startup
MagicDisc.lnk - C:\Program Files\MagicDisc\MagicDisc.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-08-04 46080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\ClamWin\bin\ClamWin.exe"="C:\Program Files\ClamWin\bin\ClamWin.exe:*:Enabled:Virus Scanner"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Disabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Disabled:Microsoft Office OneNote"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Disabled:Microsoft Office Outlook"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Disabled:Windows Messenger"
"C:\WINDOWS\system32\spoolsv.exe"="C:\WINDOWS\system32\spoolsv.exe:*:Enabled:spoolsv.exe"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2010-07-23 15:38:55 ----D---- C:\rsit
2010-07-23 15:16:11 ----A---- C:\WINDOWS\fonts\2EJRGyl.com
2010-07-23 14:05:50 ----D---- C:\Documents and Settings\Administrator\Application Data\Malwarebytes
2010-07-23 14:02:33 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-07-23 14:00:53 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-07-23 13:16:11 ----A---- C:\WINDOWS\system32\2EJRGyl.com
2010-07-20 04:26:25 ----D---- C:\Program Files\RegScrubXP
2010-07-20 04:19:09 ----D---- C:\Program Files\Trend Micro
2010-07-20 03:17:35 ----D---- C:\VundoFix Backups
2010-07-20 01:59:55 ----A---- C:\WINDOWS\wininit.ini
2010-07-20 00:50:18 ----SHD---- C:\WINDOWS\CSC
2010-07-20 00:26:36 ----A---- C:\WINDOWS\ntbtlog.txt
2010-07-20 00:19:44 ----A---- C:\WINDOWS\IE4 Error Log.txt
2010-07-19 23:38:36 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-07-19 23:38:36 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2010-07-18 14:46:00 ----D---- C:\Program Files\ESET
2010-07-18 06:02:07 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-07-18 06:01:17 ----A---- C:\Documents and Settings\All Users\Application Data\2EJRGyl.exe
2010-07-17 04:35:49 ----A---- C:\Documents and Settings\All Users\Application Data\W334kc1B.exe
2010-07-17 04:32:28 ----A---- C:\WINDOWS\system32\DdXkot3O.dll
2010-07-16 21:00:20 ----RASH---- C:\WINDOWS\system32\proctexeg.dll
2010-07-16 16:56:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-07-15 18:08:10 ----D---- C:\Program Files\Common Files\Adobe
2010-07-15 18:06:52 ----D---- C:\827fb91b5755f263d4d041
2010-07-08 03:49:20 ----D---- C:\Documents and Settings\Administrator\Application Data\dBpoweramp
2010-07-05 01:50:02 ----D---- C:\Documents and Settings\Administrator\Application Data\AccurateRip
2010-07-05 01:49:58 ----A---- C:\WINDOWS\system32\SpoonUninstall.exe
2010-07-05 01:49:53 ----D---- C:\Program Files\Illustrate
2010-06-29 01:52:59 ----D---- C:\WINDOWS\Sun
2010-06-28 22:22:14 ----A---- C:\Program Files\vlc-1.1.0-win32.exe
2010-06-27 12:13:11 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
======List of files/folders modified in the last 1 months======
2010-07-23 15:37:16 ----D---- C:\WINDOWS\Prefetch
2010-07-23 15:16:13 ----SD---- C:\WINDOWS\Tasks
2010-07-23 15:16:11 ----RSD---- C:\WINDOWS\Fonts
2010-07-23 15:16:11 ----D---- C:\Program Files\QuickTime
2010-07-23 15:16:09 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-07-23 14:58:12 ----D---- C:\WINDOWS\Temp
2010-07-23 14:48:00 ----D---- C:\WINDOWS\system32\drivers
2010-07-23 14:30:52 ----D---- C:\Documents and Settings\Administrator\Application Data\vlc
2010-07-23 14:02:33 ----RD---- C:\Program Files
2010-07-23 13:59:41 ----D---- C:\WINDOWS\system32\CatRoot2
2010-07-23 13:16:11 ----D---- C:\WINDOWS\system32
2010-07-20 05:25:27 ----SHD---- C:\System Volume Information
2010-07-20 05:25:27 ----D---- C:\WINDOWS\system32\Restore
2010-07-20 04:23:01 ----D---- C:\Program Files\uTorrent
2010-07-20 04:23:00 ----D---- C:\Documents and Settings\Administrator\Application Data\uTorrent
2010-07-20 04:19:09 ----SHD---- C:\WINDOWS\Installer
2010-07-20 04:19:09 ----SD---- C:\Documents and Settings\Administrator\Application Data\Microsoft
2010-07-20 04:15:52 ----D---- C:\Program Files\Apoint
2010-07-20 01:59:55 ----D---- C:\WINDOWS
2010-07-20 00:35:57 ----D---- C:\WINDOWS\system32\drivers\etc
2010-07-19 02:48:39 ----D---- C:\Program Files\Messenger
2010-07-18 06:02:09 ----A---- C:\WINDOWS\OEWABLog.txt
2010-07-17 04:30:01 ----D---- C:\Program Files\iTunes
2010-07-17 03:19:53 ----HD---- C:\WINDOWS\inf
2010-07-17 00:16:49 ----D---- C:\WINDOWS\system32\wbem
2010-07-17 00:16:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-07-16 16:56:30 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-07-16 16:56:11 ----HD---- C:\WINDOWS\$hf_mig$
2010-07-16 09:20:16 ----D---- C:\Documents and Settings\Administrator\Application Data\dvdcss
2010-07-15 18:09:12 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-07-15 18:08:10 ----D---- C:\Program Files\Common Files
2010-07-15 18:08:10 ----D---- C:\Program Files\Adobe
2010-07-06 12:30:15 ----D---- C:\Program Files\VLC
2010-07-02 14:39:05 ----A---- C:\WINDOWS\system32\MRT.exe
2010-06-29 15:03:33 ----D---- C:\Program Files\Mozilla Firefox
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 ohci1394;OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 APPDRV;APPDRV; C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS [2005-08-12 16128]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.6.0.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-06-11 21425]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2007-02-21 12416]
R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows 2000/XP; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2005-09-28 113847]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-08-04 1273344]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2004-05-26 44928]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.SYS [2005-05-03 1033728]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2005-05-03 208384]
R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys [2009-02-24 116736]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-14 79232]
R3 STAC97;SigmaTel C-Major Audio; C:\WINDOWS\system32\drivers\STAC97.sys [2005-03-10 273168]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-05-03 705408]
S0 cerc6;cerc6; C:\WINDOWS\system32\drivers\cerc6.sys []
S3 awlorfob;awlorfob; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\awlorfob.sys []
S3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
S3 UIUSys;Conexant Setup API; C:\WINDOWS\system32\drivers\UIUSys.sys []
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 w29n51;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2007-02-08 2209408]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-08-04 380928]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2007-02-21 643072]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 NICCONFIGSVC;NICCONFIGSVC; C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe [2006-06-29 376832]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2007-02-21 327680]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2007-02-21 983040]
R2 WLANKEEPER;Intel(R) PROSet/Wireless SSO Service; C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe [2007-02-21 294912]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-06-15 540472]
S2 6to4;Network Security; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
RSIT Info:info.txt logfile of random's system information tool 1.08 2010-07-23 15:38:56
======Uninstall list======
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0015-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0019-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-001A-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0044-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-00BA-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0114-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E}
2007 Microsoft Office Suite Service Pack 2 (SP2)-->msiexec /package {90120000-0117-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Acrobat.com-->MsiExec.exe /X{287ECFA4-719A-2143-A09B-D6A12DE54E40}
Adobe AIR-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10h_Plugin.exe -maintain plugin
Adobe Reader 9.3.3-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A93000000001}
ALPS Touch Pad Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}\setup.exe" UNINSTALL
Apple Application Support-->MsiExec.exe /I{B2D328BE-45AD-4D92-96F9-2151490A203E}
Apple Mobile Device Support-->MsiExec.exe /I{85991ED2-010C-4930-96FA-52F43C2CE98A}
Apple Software Update-->MsiExec.exe /I{C41300B9-185D-475E-BFEC-39EF732F19B1}
ASIO4ALL-->C:\Program Files\ASIO4ALL v2\uninstall.exe
ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Control Panel-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Bonjour-->MsiExec.exe /X{0CB9668D-F979-4F31-B8B8-67FE90F929F8}
Broadcom 440x 10/100 Integrated Controller-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{52504CE6-E909-4113-B232-4AFEC6543A61} /l1033
Character Builder-->MsiExec.exe /I{626C034B-50B8-47BD-AF93-EEFD0FA78FF4}
C-Major Audio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}\setup.exe" -l0x9 -remove -removeonly
Conexant D110 MDC V.92 Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_24x6&SUBSYS_542214F1\HXFSETUP.EXE -U -Idel5422k.inf
dBpoweramp [Multi Encoder] Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp [Multi Encoder] Codec.dat
dBpoweramp FLAC Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp FLAC Codec.dat
dBpoweramp m4a Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp m4a Codec.dat
dBpoweramp m4a Utilities-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp m4a Utilities.dat
dBpoweramp Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Music Converter.dat
Dell Printer Software Uninstall-->C:\Program Files\Dell_HostCD\Install\Uninstall.exe
ESET Online Scanner v3-->C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
HiJackThis-->MsiExec.exe /X{45A66726-69BC-466B-A7A4-12FCBA4883D7}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"
iTunes-->MsiExec.exe /I{7AB3A249-FB81-416B-917A-A2A10E74C503}
Java(TM) 6 Update 20-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}
MagicDisc 2.7.106-->C:\PROGRA~1\MAGICD~1\UNWISE.EXE C:\PROGRA~1\MAGICD~1\INSTALL.LOG
mCore-->MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779}
mDriver-->MsiExec.exe /I{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}
mDrWiFi-->MsiExec.exe /I{F6090A17-0967-4A8A-B3C3-422A1B514D49}
mHlpDell-->MsiExec.exe /I{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Access MUI (English) 2007-->MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE}
Microsoft Office Access Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Groove MUI (English) 2007-->MsiExec.exe /X{90120000-00BA-0409-0000-0000000FF1CE}
Microsoft Office Groove Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0114-0409-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (English) 2007-->MsiExec.exe /X{90120000-0044-0409-0000-0000000FF1CE}
Microsoft Office OneNote MUI (English) 2007-->MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}
Microsoft Office Outlook MUI (English) 2007-->MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Publisher MUI (English) 2007-->MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
mIWA-->MsiExec.exe /I{3E9D596A-61D4-4239-BD19-2DB984D2A16F}
mLogView-->MsiExec.exe /I{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}
mMHouse-->MsiExec.exe /I{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}
Mozilla Firefox (3.6.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mp3tag v2.43-->C:\Program Files\Mp3tag\Mp3tagUninstall.EXE
mPfMgr-->MsiExec.exe /I{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}
mPfWiz-->MsiExec.exe /I{90B0D222-8C21-4B35-9262-53B042F18AF9}
mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
mSCfg-->MsiExec.exe /I{829CD169-E692-48E8-9BDE-A3E8D8B65538}
mSSO-->MsiExec.exe /I{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}
MSXML 6.0 Parser-->MsiExec.exe /I{AEB9948B-4FF2-47C9-990E-47014492A0FE}
mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
mWMI-->MsiExec.exe /I{63DB9CCD-2B56-4217-9A3D-507AC78320CA}
mZConfig-->MsiExec.exe /I{94658027-9F16-4509-BBD7-A59FE57C3023}
QuickSet-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C5074CC4-0E26-4716-A307-960272A90040}\setup.exe" -l0x9 APPDRVNT4
QuickTime-->MsiExec.exe /I{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}
RegScrubXP 5.1-->"C:\Program Files\RegScrubXP\unins000.exe"
Security Update for Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Security Update for Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975561)-->"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
Security Update for Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"
Security Update for Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981349)-->"C:\WINDOWS\$NtUninstallKB981349$\spuninst\spuninst.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Update for Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Update for Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Update for Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Update for Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Update for Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Update for Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
VLC media player 1.0.5-->C:\Program Files\VLC\uninstall.exe
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
======Hosts File======
127.0.0.1
http://www.007guard.com127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1
http://www.008k.com127.0.0.1 008k.com
127.0.0.1
http://www.00hq.com127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1
http://www.032439.com127.0.0.1 032439.com
======System event log======
Computer Name: X-013126ED881B4
Event Code: 7001
Message: The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error:
A device attached to the system is not functioning.
Record Number: 7
Source Name: Service Control Manager
Time Written: 20100720002808.000000-300
Event Type: error
User:
Computer Name: X-013126ED881B4
Event Code: 7001
Message: The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
A device attached to the system is not functioning.
Record Number: 6
Source Name: Service Control Manager
Time Written: 20100720002808.000000-300
Event Type: error
User:
Computer Name: X-013126ED881B4
Event Code: 7001
Message: The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:
A device attached to the system is not functioning.
Record Number: 5
Source Name: Service Control Manager
Time Written: 20100720002808.000000-300
Event Type: error
User:
Computer Name: X-013126ED881B4
Event Code: 10005
Message: DCOM got error "%1084" attempting to start the service netman with arguments ""
in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}
Record Number: 4
Source Name: DCOM
Time Written: 20100720002735.000000-300
Event Type: error
User: X-013126ED881B4\Administrator
Computer Name: X-013126ED881B4
Event Code: 10005
Message: DCOM got error "%1084" attempting to start the service EventSystem with arguments ""
in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
Record Number: 3
Source Name: DCOM
Time Written: 20100720002730.000000-300
Event Type: error
User: NT AUTHORITY\SYSTEM
=====Application event log=====
Computer Name: X-013126ED881B4
Event Code: 100
Message: Task Scheduling Error: m->NextScheduledEvent 6281
Record Number: 760
Source Name: Bonjour Service
Time Written: 20100716183407.000000-300
Event Type: error
User:
Computer Name: X-013126ED881B4
Event Code: 100
Message: Task Scheduling Error: Continuously busy for more than a second
Record Number: 759
Source Name: Bonjour Service
Time Written: 20100716183407.000000-300
Event Type: error
User:
Computer Name: X-013126ED881B4
Event Code: 100
Message: Task Scheduling Error: m->NextScheduledSPRetry 2078
Record Number: 758
Source Name: Bonjour Service
Time Written: 20100716043845.000000-300
Event Type: error
User:
Computer Name: X-013126ED881B4
Event Code: 100
Message: Task Scheduling Error: m->NextScheduledEvent 2078
Record Number: 757
Source Name: Bonjour Service
Time Written: 20100716043845.000000-300
Event Type: error
User:
Computer Name: X-013126ED881B4
Event Code: 100
Message: Task Scheduling Error: Continuously busy for more than a second
Record Number: 756
Source Name: Bonjour Service
Time Written: 20100716043845.000000-300
Event Type: error
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 8, GenuineIntel
"PROCESSOR_REVISION"=0d08
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"asl.log"=Destination=file;OnFirstLog=command,environment
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
-----------------EOF-----------------
NOTE: ALL instances of UTorrent were removed within 5 minutes of my initial posting to Malwareremoval.org. LESSON F#@%&ING LEARNED.Airscape - The PC is running very glitchy. It won't let me go to certain websites (i.e. safer-networking.org), and if I Google anything malware/virus removal related, the links I click on redirect me to fake sites or just plain random ones (myfijihotels.com?). After I ran all the logging programs you told me to, I couldn't actually open the text files to cut and paste into this post, thus having to restart the computer. Spybot.exe won't open unless I'm in safemode, although it will work using the integrated explorer right-click, in which case it will scan specific files. AVG-free wouldn't install in normal mode. Everything is just taking longer to open in general.
Also, I have had no virus/malware/spyware programs installed in almost the past 2 years (I only started trying to install Spybot and AVG once I realized there was a issue); this is the first problem I've encountered. I do have Windows firewall turned on.
Thank you for your time,
Misterbanksiii