First, thanks for keeping up with this. Second, I did update my Java, so your
last post should probably not have that commentary in it.
Here is the ComboFix log:
vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
ComboFix 08-01-04.1 - Main 2008-01-04 19:10:17.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1553 [GMT -5:00]
Running from: G:\Documents and Settings\Main\Desktop\ComboFix.exe
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
G:\Documents and Settings\Main\Application Data\inst.exe
G:\Program Files\Common Files\{3C6E6~1
G:\Program Files\Common Files\{3C6E6~1\toolbardll.lzma
G:\Program Files\Common Files\{3C6E6~1\UnInstall.exe
.
((((((((((((((((((((((((( Files Created from 2007-12-05 to 2008-01-05 )))))))))))))))))))))))))))))))
.
2008-01-04 19:09 . 2000-08-31 08:00 51,200 --a------ G:\WINDOWS\NirCmd.exe
2008-01-04 08:30 . 2008-01-04 08:35 54,156 --ah----- G:\WINDOWS\QTFont.qfn
2008-01-04 08:30 . 2008-01-04 08:35 1,409 --a------ G:\WINDOWS\QTFont.for
2008-01-03 22:50 . 2008-01-03 22:50 <DIR> d-------- G:\WINDOWS\system32\Kaspersky Lab
2008-01-03 22:50 . 2008-01-03 22:50 <DIR> d-------- G:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-01-03 22:48 . 2007-09-24 23:31 69,632 --a------ G:\WINDOWS\system32\javacpl.cpl
2008-01-03 22:39 . 2008-01-03 22:39 <DIR> d-------- G:\Documents and Settings\Main\.SunDownloadManager
2008-01-03 22:18 . 2008-01-03 22:18 <DIR> d-------- G:\Program Files\SampleTank 2 Free
2008-01-03 21:56 . 2008-01-03 21:57 <DIR> d-------- G:\Documents and Settings\Main\Application Data\PrevxCSI
2008-01-03 21:56 . 2008-01-03 21:56 <DIR> d-------- G:\Documents and Settings\All Users\Application Data\Prevx
2008-01-03 21:48 . 2008-01-03 21:48 <DIR> d-------- G:\Deckard
2007-12-31 16:04 . 2007-12-31 16:05 <DIR> d-------- G:\Program Files\EsetOnlineScanner
2007-12-30 16:53 . 2007-12-30 17:02 <DIR> d-------- G:\Documents and Settings\Main\Application Data\CleanupAssistant
2007-12-30 16:52 . 2007-12-30 16:52 <DIR> d--h----- G:\Program Files\InstallJammer Registry
2007-12-30 16:52 . 2007-12-30 16:52 <DIR> d-------- G:\Program Files\Cleanup Assistant
2007-12-29 23:13 . 2007-12-29 23:13 <DIR> d-------- G:\Program Files\Apple Software Update
2007-12-29 23:13 . 2007-12-29 23:13 <DIR> d-------- G:\Documents and Settings\All Users\Application Data\Apple
2007-12-26 15:12 . 2007-11-16 10:25 143,872 --a------ G:\WINDOWS\system32\drivers\bmdpbox.sys
2007-12-26 15:12 . 2007-11-16 10:25 17,408 --a------ G:\WINDOWS\system32\drivers\bmdpdisk.sys
2007-12-26 14:19 . 2007-12-26 14:31 <DIR> d-------- G:\symbols
2007-12-26 14:12 . 2007-12-26 14:31 <DIR> d-------- G:\Program Files\Debugging Tools for Windows
2007-12-25 23:17 . 2008-01-04 19:15 8 --a------ G:\WINDOWS\mvraidver.dat
2007-12-25 22:58 . 2007-08-10 16:12 53,248 --a------ G:\WINDOWS\system32\CSVer.dll
2007-12-22 13:57 . 2007-12-22 13:57 <DIR> d-------- G:\Video Plug-Ins
2007-12-22 13:57 . 2007-12-22 13:57 <DIR> d-------- G:\Presets
2007-12-15 17:16 . 2005-09-23 08:29 626,688 --a------ G:\WINDOWS\system32\msvcr80.dll
2007-12-15 12:07 . 2007-12-15 12:14 1,245,216 --a------ G:\WINDOWS\system32\AutoPartNt.exe
2007-12-15 12:07 . 2007-12-15 12:16 1,024 --a------ G:\WINDOWS\system32\AutoPartNt.let
2007-12-15 08:52 . 2007-12-15 08:52 <DIR> d-------- G:\Documents and Settings\All Users\Application Data\Future Systems Solutions
2007-12-15 08:51 . 2007-12-15 08:51 <DIR> d-------- G:\Documents and Settings\Main\Application Data\Future Systems Solutions
2007-12-11 20:12 . 2007-12-11 20:12 <DIR> d-------- G:\Program Files\HD Tune
2007-12-11 10:57 . 2007-12-11 10:57 65,536 --a------ G:\WINDOWS\system32\QuickTimeVR.qtx
2007-12-11 10:57 . 2007-12-11 10:57 49,152 --a------ G:\WINDOWS\system32\QuickTime.qts
2007-12-08 10:07 . 2007-12-08 10:07 <DIR> d-------- G:\Documents and Settings\Main\Application Data\DVDFab
2007-12-08 09:36 . 2007-12-09 22:29 <DIR> d-------- G:\Program Files\DVDFab Platinum 4
2007-12-08 09:36 . 2007-12-09 22:33 <DIR> d-------- G:\Documents and Settings\Main\Application Data\Vso
2007-12-08 09:36 . 2007-12-08 09:36 47,360 --a------ G:\WINDOWS\system32\drivers\pcouffin.sys
2007-12-08 09:36 . 2007-12-08 09:36 47,360 --a------ G:\Documents and Settings\Main\Application Data\pcouffin.sys
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-04 13:17 --------- d-----w G:\Program Files\Java
2008-01-04 04:47 --------- d-----w G:\Program Files\FlashGet
2008-01-04 03:33 --------- d--h--w G:\Program Files\InstallShield Installation Information
2008-01-04 03:04 --------- d-----w G:\Program Files\Sonic Foundry Soft Encode
2008-01-01 22:03 --------- d-----w G:\Documents and Settings\All Users\Application Data\pdf995
2007-12-30 11:58 --------- d-----w G:\Program Files\SpywareGuard
2007-12-30 04:14 --------- d-----w G:\Program Files\QuickTime
2007-12-30 04:13 --------- d-----w G:\Documents and Settings\All Users\Application Data\Apple Computer
2007-12-30 01:09 --------- d-----w G:\Program Files\Intel
2007-12-30 01:09 --------- d-----w G:\Documents and Settings\All Users\Application Data\Avocent AdminWorks
2007-12-26 01:03 --------- d---a-w G:\Documents and Settings\All Users\Application Data\TEMP
2007-12-22 23:01 --------- d-----w G:\Documents and Settings\Main\Application Data\Canon
2007-12-22 18:56 --------- d-----w G:\Program Files\Boris FX, Inc
2007-12-11 05:27 --------- d-----w G:\Program Files\EPSON Print CD
2007-12-09 19:41 --------- d-----w G:\Documents and Settings\Main\Application Data\BitTorrent
2007-12-02 03:41 --------- d-----w G:\Program Files\Micro Technology Unlimited
2007-12-02 03:40 --------- d-----w G:\Documents and Settings\All Users\Application Data\YoGen
2007-11-16 15:38 7,680 ----a-w G:\WINDOWS\system32\drivers\deckmp.sys
2007-11-16 15:38 2,274,304 ----a-w G:\WINDOWS\system32\drivers\decklink.sys
2007-11-16 15:24 18,944 ----a-w G:\WINDOWS\system32\drivers\deckser.sys
2007-11-16 15:24 13,824 ----a-w G:\WINDOWS\system32\drivers\deckaud.sys
2007-11-16 12:56 --------- d-----w G:\Program Files\Sorenson Media
2007-11-16 01:37 --------- d-----w G:\Program Files\ONES (E)
2007-11-15 03:54 --------- d-----w G:\Program Files\Loudspeaker Design
2007-11-15 03:52 --------- d-----w G:\Documents and Settings\Main\Application Data\Syntrillium
2007-11-15 03:49 --------- d-----w G:\Program Files\TechSmith
2007-11-15 03:33 --------- d-----w G:\Program Files\subsim
2007-11-13 10:25 20,480 ----a-w G:\WINDOWS\system32\drivers\secdrv.sys
2007-11-10 22:56 --------- d-----w G:\Documents and Settings\Main\Application Data\System Tweaker
2007-11-05 00:27 --------- d-----w G:\Program Files\Serious Magic
2006-10-28 17:43 1,378 ----a-w G:\Program Files\uninstal.log
2006-10-24 02:02 952 --sha-w G:\WINDOWS\system32\KGyGaAvL.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EPSON Stylus Photo 900"="G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S0XIC1.exe" [2002-12-10 02:00 75776]
"NvCplDaemon"="G:\WINDOWS\system32\NvCpl.dll" [2007-09-17 00:07 8491008]
"NvMediaCenter"="G:\WINDOWS\system32\NvMcTray.dll" [2007-09-17 00:07 81920]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-12-10 11:45 49152 G:\WINDOWS\KHALMNPR.Exe]
"Blackmagic CheckVersion PCI"="G:\Program Files\Blackmagic Design\Blackmagic DeckLink\CheckVersionPCI.exe" [2007-11-16 10:38 4730880]
"COMODO Firewall Pro"="G:\Program Files\Comodo\Firewall\CPF.exe" [2007-09-22 09:53 1115728]
"nod32kui"="G:\Program Files\Eset\nod32kui.exe" [2007-04-27 15:59 949376]
"QuickTime Task"="G:\Program Files\QuickTime\QTTask.exe" [2007-12-11 10:56 286720]
"SpywareGuard"="G:\Program Files\SpywareGuard\sgmain.exe" [2003-08-29 18:05 360448]
"FireBox Control Panel"="G:\Program Files\PreSonus\1394AudioDriver_FIREBox\FireBox.exe" [2007-10-10 17:03 1077248]
"CleanupAssistant Boot Cleaner"="G:\Program Files\Cleanup Assistant\Cleanup Assistant.exe" [2007-10-30 09:58 593920]
"SunJavaUpdateSched"="G:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"HideShutdownScripts"= 0 (0x0)
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 relog_ap
R0 mv61xx;mv61xx;G:\WINDOWS\system32\DRIVERS\mv61xx.sys [2007-10-31 15:47]
R0 PzWDM;PzWDM;G:\WINDOWS\system32\Drivers\PzWDM.sys [2004-03-11 00:32]
R1 BMDPDisk;BMDPDisk;G:\WINDOWS\system32\drivers\BMDPDisk.sys [2007-11-16 10:25]
R2 BMDPBox;BMDPBox;G:\WINDOWS\system32\drivers\BMDPBox.sys [2007-11-16 10:25]
R2 Marvell RAID;Marvell RAID Event Agent;G:\Program Files\Marvell\61xx\svc\mvraidsvc.exe [2007-10-24 18:15]
R2 MRUWebService;MRU Web Service;"G:\Program Files\Marvell\61xx\Apache2\bin\httpd.exe" [2007-08-24 05:06]
R2 osaio;osaio;G:\WINDOWS\system32\drivers\osaio.sys [2007-10-29 20:47]
R3 BMDDeckLinkAudio;BMDDeckLinkAudio;G:\WINDOWS\system32\DRIVERS\deckaud.sys [2007-11-16 10:24]
R3 BMDDeckLinkSerial;BMDDeckLinkSerial;G:\WINDOWS\system32\DRIVERS\deckser.sys [2007-11-16 10:24]
R3 DeckLink;DeckLink;G:\WINDOWS\system32\DRIVERS\DeckLink.sys [2007-11-16 10:38]
R3 DeckLinkDisplay;DeckLinkDisplay;G:\WINDOWS\system32\DRIVERS\deckmp.sys [2007-11-16 10:38]
R3 pae_1394;pae_1394;G:\WINDOWS\system32\Drivers\pae_1394.sys [2007-10-09 17:06]
R3 pae_avs;pae_avs;G:\WINDOWS\system32\Drivers\pae_avs.sys [2007-10-09 17:06]
S3 Asushwio;Asushwio;G:\WINDOWS\system32\drivers\Asushwio.sys [2004-04-27 10:26]
S3 PciCon;PciCon;F:\PciCon.sys []
S3 ps_1394;ps_1394;G:\WINDOWS\system32\Drivers\ps_1394.sys [2004-10-14 14:33]
S3 ps_avs;ps_avs;G:\WINDOWS\system32\Drivers\ps_avs.sys [2004-10-14 14:33]
.
Contents of the 'Scheduled Tasks' folder
"2007-12-30 04:13:03 G:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- G:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2008-01-04 19:16:24
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-01-04 19:19:17 - machine was rebooted
ComboFix-quarantined-files.txt 2008-01-05 00:19:15
-----------------------------------------------------------------------------------------------
Here is the latest HJT logfile:
vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 7:20:17 PM, on 1/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\Program Files\Comodo\Firewall\cmdagent.exe
G:\Program Files\Marvell\61xx\svc\mvraidsvc.exe
G:\Program Files\Marvell\61xx\Apache2\bin\httpd.exe
G:\Program Files\Eset\nod32krn.exe
G:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
G:\WINDOWS\system32\nvsvc32.exe
G:\WINDOWS\Explorer.EXE
G:\WINDOWS\system32\svchost.exe
G:\Program Files\UPHClean\uphclean.exe
G:\Program Files\Marvell\61xx\Apache2\bin\httpd.exe
G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S0XIC1.EXE
G:\WINDOWS\system32\RUNDLL32.EXE
G:\Program Files\Comodo\Firewall\CPF.exe
G:\Program Files\Eset\nod32kui.exe
G:\Program Files\SpywareGuard\sgmain.exe
G:\Program Files\PreSonus\1394AudioDriver_FIREBox\FireBox.exe
G:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
G:\Program Files\SpywareGuard\sgbhp.exe
G:\WINDOWS\system32\wuauclt.exe
G:\WINDOWS\system32\notepad.exe
G:\Documents and Settings\Main\Desktop\Utilities\HiJackThis_v2.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - G:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - G:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - G:\PROGRA~1\FlashGet\getflash.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - G:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [EPSON Stylus Photo 900] G:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S0XIC1.EXE /P22 "EPSON Stylus Photo 900" /O6 "USB001" /M "Stylus Photo 900"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE G:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE G:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Blackmagic CheckVersion PCI] G:\Program Files\Blackmagic Design\Blackmagic DeckLink\CheckVersionPCI.exe
O4 - HKLM\..\Run: [COMODO Firewall Pro] "G:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [nod32kui] "G:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [QuickTime Task] "G:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SpywareGuard] G:\Program Files\SpywareGuard\sgmain.exe
O4 - HKLM\..\Run: [FireBox Control Panel] G:\Program Files\PreSonus\1394AudioDriver_FIREBox\FireBox.exe
O4 - HKLM\..\Run: [CleanupAssistant Boot Cleaner] G:\Program Files\Cleanup Assistant\Cleanup Assistant.exe /boot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "G:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O8 - Extra context menu item: Download All by FlashGet - G:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - G:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://G:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - G:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - G:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/kos/eng/partne ... nicode.cabO16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) -
http://www.eset.eu/buxus/docs/OnlineScanner.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://www.update.microsoft.com/microso ... 8304550421O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/microso ... 8304530812O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) -
http://www.live365.com/players/play365.cabO16 - DPF: {E5ABEB00-B357-4884-9949-77B2C71A7EE3} (BoardCtl Class) -
http://www.intel.com/design/motherbd/bo ... oardID.cabO22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - G:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - G:\WINDOWS\system32\browseui.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - G:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - G:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - G:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - G:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: Google Updater Service (gusvc) - GARMIN Corp. - (no file)
O23 - Service: Marvell RAID Event Agent (Marvell RAID) - Unknown owner - G:\Program Files\Marvell\61xx\svc\mvraidsvc.exe
O23 - Service: MRU Web Service (MRUWebService) - Apache Software Foundation - G:\Program Files\Marvell\61xx\Apache2\bin\httpd.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - G:\Program Files\Eset\nod32krn.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - G:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - G:\WINDOWS\system32\nvsvc32.exe
--
End of file - 7246 bytes