"Windows Security Alert" messages

[jconstan]

I continue to receive "Windows Security Alert" messages informining me of one infection or another. I believe these messages are fake but I can't get them to go away. I have run SpyBot, Ad-Aware 2008, Rouge Remover and MalwareBytes. All have found and removed issues but the Windows Security Alert stays.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:29:11 PM, on 9/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Common Files\AOL\1218123930\ee\AOLSoftware.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\S3tray2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\SecCopy\SecCopy.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\fcjepmlg.exe
C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\fcjepmlg.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1218123930\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Second Copy] "C:\Program Files\SecCopy\SecCopy.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [mntcmddsc] C:\WINDOWS\system32\fcjepmlg.exe
O4 - Global Startup: Microtek Scanner Finder.lnk = C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 5.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 8127279156
O16 - DPF: {CE8267C2-D41A-4A50-A69D-F32B5C289F14} (FileOpenInstaller) - http://dev.publicrecords.trendmls.com/R ... leopen.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

--
End of file - 6164 bytes

[Shaba]

Hi jconstan

• Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
• Double click on RSIT.exe to run RSIT.
• Click Continue at the disclaimer screen.
• Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

[jconstan]

Thank your for the reply. I am sorry for the delay in getting back.

-Jim

LOG.TXT FILE:

Logfile of random's system information tool (written by random/random)
Run by Frank at 2008-09-07 10:38:45
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 103 GB (90%) free of 114 GB
Total RAM: 991 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:38:55 AM, on 9/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Common Files\AOL\1218123930\ee\AOLSoftware.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\S3tray2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\SecCopy\SecCopy.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Frank\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Frank.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1218123930\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Second Copy] "C:\Program Files\SecCopy\SecCopy.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.1\AOL.EXE" -b
O4 - Global Startup: Microtek Scanner Finder.lnk = C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 5.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 8127279156
O16 - DPF: {CE8267C2-D41A-4A50-A69D-F32B5C289F14} (FileOpenInstaller) - http://dev.publicrecords.trendmls.com/R ... leopen.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5C425053-A245-4B09-B440-AF43A28B0126}: NameServer = 151.204.0.84,151.197.0.39
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe

--
End of file - 6470 bytes

Registry dump

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-08-30 455960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-07-07 1562448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
AOL Toolbar Launcher - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2007-03-23 1025584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2008-08-20 2549368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll [2008-08-20 651760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{DE9C389F-3316-41A7-809B-AA305ED9D922} - AOL Toolbar - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2007-03-23 1025584]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2008-08-20 2549368]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AlcxMonitor"=C:\WINDOWS\ALCXMNTR.EXE [2004-09-07 57344]
"HostManager"=C:\Program Files\Common Files\AOL\1218123930\ee\AOLSoftware.exe [2007-05-25 42032]
"UpdateManager"=C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe [2003-08-19 110592]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-08-30 1235736]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"S3TRAY2"=C:\WINDOWS\system32\S3tray2.exe [2003-02-25 69632]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-08-04 1667584]
"Second Copy"=C:\Program Files\SecCopy\SecCopy.exe [2007-10-17 2425856]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-08-20 39408]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]
"AOL Fast Start"=C:\Program Files\AOL 9.1\AOL.EXE [2008-06-03 50528]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Microtek Scanner Finder.lnk - C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

File associations

.reg - open - regedit.exe "%1" %*
.scr - open - "%1" %*

List of files/folders created in the last three months

2008-09-07 10:38:45 ----D---- C:\rsit
2008-09-04 13:57:53 ----D---- C:\Program Files\RealVNC
2008-09-04 11:48:30 ----D---- C:\Program Files\SpywareBlaster
2008-09-03 15:28:41 ----D---- C:\Program Files\Trend Micro
2008-09-03 14:57:44 ----D---- C:\Program Files\Lavasoft
2008-09-03 14:57:44 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-09-03 14:57:08 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2008-09-03 11:40:57 ----D---- C:\Program Files\Spybot - Search & Destroy
2008-09-03 11:40:57 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-09-03 11:26:52 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-09-03 11:22:49 ----D---- C:\Program Files\CCleaner
2008-09-02 17:25:14 ----D---- C:\Avenger
2008-09-02 17:25:13 ----A---- C:\avenger.txt
2008-09-02 17:05:19 ----D---- C:\Program Files\RogueRemover FREE
2008-09-02 16:45:42 ----D---- C:\WINDOWS\pss
2008-09-02 16:40:06 ----D---- C:\Program Files\Enigma Software Group
2008-09-02 15:56:49 ----D---- C:\Documents and Settings\Frank\Application Data\Malwarebytes
2008-09-02 15:56:44 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-09-02 15:56:44 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-09-02 15:47:30 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-09-02 15:46:45 ----D---- C:\Program Files\Common Files\Download Manager
2008-09-02 10:11:34 ----HD---- C:\$AVG8.VAULT$
2008-09-02 07:58:59 ----D---- C:\Documents and Settings\All Users\Application Data\cnanedqn
2008-08-28 09:55:30 ----D---- C:\WINDOWS\speech
2008-08-28 09:55:22 ----D---- C:\WINDOWS\lhsp
2008-08-28 09:55:08 ----D---- C:\Program Files\Common Files\DeLorme
2008-08-28 09:55:07 ----A---- C:\WINDOWS\SA8.ini
2008-08-28 09:55:07 ----A---- C:\WINDOWS\SA4_WKSP.INI
2008-08-28 09:55:07 ----A---- C:\WINDOWS\SA4_DRAW.INI
2008-08-28 09:55:07 ----A---- C:\WINDOWS\DeLGPS.ini
2008-08-28 09:54:41 ----A---- C:\WINDOWS\system32\MFCANS32.DLL
2008-08-28 09:54:40 ----A---- C:\WINDOWS\system32\OC30.DLL
2008-08-28 09:54:39 ----A---- C:\WINDOWS\system32\INETWH32.dll
2008-08-28 09:54:38 ----A---- C:\WINDOWS\system32\VB40032.DLL
2008-08-28 09:54:38 ----A---- C:\WINDOWS\system32\hlp25632.dll
2008-08-28 09:54:37 ----D---- C:\Program Files\Street Atlas USA 8.0
2008-08-25 12:28:22 ----A---- C:\WINDOWS\system32\PDFWRITR.INI
2008-08-25 12:28:22 ----A---- C:\WINDOWS\system32\__PDF.INI
2008-08-22 10:16:15 ----D---- C:\WINDOWS\ie7updates
2008-08-22 10:15:47 ----D---- C:\WINDOWS\WBEM
2008-08-22 10:15:46 ----D---- C:\WINDOWS\system32\en-US
2008-08-22 10:14:24 ----HDC---- C:\WINDOWS\ie7
2008-08-22 10:14:10 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2008-08-22 10:13:57 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2008-08-22 10:13:40 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2008-08-22 10:13:38 ----N---- C:\WINDOWS\system32\xmllite.dll
2008-08-22 10:12:38 ----D---- C:\WINDOWS\network diagnostic
2008-08-22 10:12:36 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
2008-08-22 10:12:27 ----HDC---- C:\WINDOWS\$NtUninstallKB904942$
2008-08-21 17:42:35 ----A---- C:\WINDOWS\system32\DBCLIENT.DLL
2008-08-21 17:42:21 ----A---- C:\WINDOWS\system32\TwnLib3.dll
2008-08-21 17:42:21 ----A---- C:\WINDOWS\system32\TwnLib20.dll
2008-08-21 17:42:20 ----A---- C:\WINDOWS\system32\TwnPro3.dll
2008-08-21 17:42:20 ----A---- C:\WINDOWS\system32\PSL32A60.DLL
2008-08-21 17:42:20 ----A---- C:\WINDOWS\system32\PrntPRO2.dll
2008-08-21 17:42:20 ----A---- C:\WINDOWS\system32\PICN20.DLL
2008-08-21 17:42:20 ----A---- C:\WINDOWS\system32\NOTEXP60.DLL
2008-08-21 17:42:20 ----A---- C:\WINDOWS\system32\IMAGXPR6.DLL
2008-08-21 17:42:20 ----A---- C:\WINDOWS\system32\IMAGX6.DLL
2008-08-21 17:42:20 ----A---- C:\WINDOWS\system32\IMAGR6.DLL
2008-08-21 17:42:19 ----D---- C:\Program Files\CRT Support
2008-08-21 17:42:19 ----A---- C:\WINDOWS\system32\STLPMT45.DLL
2008-08-21 17:42:19 ----A---- C:\WINDOWS\system32\cc3260mt.dll
2008-08-21 17:41:10 ----A---- C:\NJPM_OnlineSetup.exe
2008-08-20 12:12:18 ----D---- C:\Documents and Settings\Frank\Application Data\FileOpen
2008-08-20 11:57:13 ----D---- C:\Documents and Settings\Frank\Application Data\Google
2008-08-20 11:56:02 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2008-08-20 11:55:33 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2008-08-20 11:55:29 ----D---- C:\Program Files\Google
2008-08-19 11:03:59 ----D---- C:\Program Files\realval
2008-08-19 11:01:47 ----N---- C:\WINDOWS\Setup1.exe
2008-08-19 11:01:43 ----A---- C:\WINDOWS\ST6UNST.EXE
2008-08-19 09:50:45 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2008-08-18 17:07:41 ----A---- C:\WINDOWS\Ulead32.INI
2008-08-13 18:34:27 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-08-13 18:34:22 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-08-13 18:34:17 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$
2008-08-13 18:34:12 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-08-13 18:33:08 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-08-13 18:33:02 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-08-13 18:32:56 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-08-13 18:32:37 ----HDC---- C:\WINDOWS\$NtUninstallKB953838$
2008-08-13 18:32:20 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2008-08-11 16:21:35 ----D---- C:\Documents and Settings\All Users\Application Data\MSN6
2008-08-11 16:21:34 ----D---- C:\Documents and Settings\Frank\Application Data\MSN6
2008-08-11 15:15:22 ----HDC---- C:\WINDOWS\$NtUninstallKB942840$
2008-08-11 15:14:34 ----A---- C:\WINDOWS\system32\MRT.exe
2008-08-11 15:14:25 ----HDC---- C:\WINDOWS\$NtUninstallKB917344$
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMWUD9.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMWUD7.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMWUD17.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMWUD15.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMWUD13.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMWUD12.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMWUD11.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMWUD10.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMWUD.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSME6w.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSME5w.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSME4W.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMD9W.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMD8w.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMD4W.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMCFw.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMCEw.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMC9W.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMC1W.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMBDW.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMB1W.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMB0W.dll
2008-08-09 11:58:45 ----A---- C:\WINDOWS\system32\MSMA7W.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM8BW.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM25w.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM24w.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM23w.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM22w.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM21w.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM20w.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM1FW.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM1CW.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM17W.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM13w.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM0CW.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM0Bw.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM0Aw.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MSM08w.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MiiRTS8822.dll
2008-08-09 11:58:44 ----A---- C:\WINDOWS\system32\MiiIniFile13.ini
2008-08-09 11:58:31 ----A---- C:\WINDOWS\system32\Msmusd7.dll
2008-08-09 11:58:31 ----A---- C:\WINDOWS\system32\Msmusd6.dll
2008-08-09 11:58:31 ----A---- C:\WINDOWS\system32\Msmusd5.dll
2008-08-09 11:58:27 ----D---- C:\Program Files\Microtek
2008-08-09 11:57:39 ----D---- C:\ScanWizard 5 v6.54
2008-08-09 11:45:23 ----A---- C:\WINDOWS\system32\ZTAG.DLL
2008-08-09 11:45:23 ----A---- C:\WINDOWS\system32\ZLHP2600.DLL
2008-08-09 11:45:23 ----A---- C:\WINDOWS\system32\zIMF.DLL
2008-08-09 11:45:23 ----A---- C:\WINDOWS\system32\ZHHP2600.EXE
2008-08-09 11:45:23 ----A---- C:\WINDOWS\system32\AGISSI.DLL
2008-08-09 11:45:22 ----A---- C:\WINDOWS\system32\zSHP2600.EXE
2008-08-09 11:45:21 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-08-09 11:45:21 ----A---- C:\WINDOWS\system32\ZHHP_RES.DLL
2008-08-09 11:45:11 ----D---- C:\Program Files\Hewlett-Packard
2008-08-09 11:45:02 ----D---- C:\clj2600n
2008-08-09 11:34:59 ----D---- C:\lj1010 series
2008-08-09 03:01:27 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-08-09 03:01:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-08-09 03:01:17 ----HDC---- C:\WINDOWS\$NtUninstallKB942763$
2008-08-09 03:01:11 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-08-09 03:00:57 ----HDC---- C:\WINDOWS\$NtUninstallKB950759$
2008-08-09 03:00:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2008-08-09 03:00:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-08-09 03:00:27 ----HDC---- C:\WINDOWS\$NtUninstallKB950749$
2008-08-08 08:12:59 ----N---- C:\WINDOWS\system32\tzchange.exe
2008-08-08 08:12:06 ----D---- C:\WINDOWS\system32\PreInstall
2008-08-08 08:12:03 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2008-08-08 08:12:03 ----HD---- C:\WINDOWS\$hf_mig$
2008-08-08 07:31:41 ----D---- C:\Documents and Settings\All Users\Application Data\ACI32
2008-08-08 07:31:40 ----D---- C:\Documents and Settings\All Users\Application Data\EServices
2008-08-07 16:44:15 ----D---- C:\Documents and Settings\Frank\Application Data\EServices
2008-08-07 16:43:29 ----A---- C:\WINDOWS\system32\ATL71.dll
2008-08-07 16:35:27 ----A---- C:\WINDOWS\system32\cdintf251.dll
2008-08-07 16:32:35 ----D---- C:\Documents and Settings\Frank\Application Data\ACI
2008-08-07 16:32:18 ----N---- C:\WINDOWS\system32\XTP9601Lib.dll
2008-08-07 16:32:18 ----N---- C:\WINDOWS\system32\MFC71.dll
2008-08-07 16:32:17 ----N---- C:\WINDOWS\system32\Codejock.ToolkitPro.Mfc71.v9.80.dll
2008-08-07 16:32:17 ----D---- C:\Win2Data
2008-08-07 16:32:13 ----N---- C:\WINDOWS\system32\cw3220mt.dll
2008-08-07 15:42:38 ----A---- C:\WINDOWS\system32\XceedZip.dll
2008-08-07 15:41:46 ----D---- C:\Program Files\SecCopy
2008-08-07 15:13:54 ----A---- C:\WINDOWS\Apexwin.ini
2008-08-07 15:11:40 ----N---- C:\WINDOWS\system32\PCDLIB32.DLL
2008-08-07 15:11:40 ----N---- C:\WINDOWS\system32\Ltwvc11n.dll
2008-08-07 15:11:40 ----N---- C:\WINDOWS\system32\BORLNDMM.DLL
2008-08-07 15:11:40 ----D---- C:\Program Files\BDE
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\MSVCRTD.DLL
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\LTWND11n.DLL
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\lttwn11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\LTKRN70W.DLL
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\ltkrn11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\ltimg11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\LTFIL70W.DLL
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\LTFIL11W.DLL
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\ltfil11n.DLL
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\LTDIS11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\lfwmf11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\lftif11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\lftga11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\lfras11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\lfpsd11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\Lfpng11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\lfpcx11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\lfpct11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\lfpcd11n.dll
2008-08-07 15:11:39 ----N---- C:\WINDOWS\system32\lfmsp11n.dll
2008-08-07 15:11:38 ----N---- C:\WINDOWS\system32\lfmac11n.dll
2008-08-07 15:11:38 ----N---- C:\WINDOWS\system32\lfkodak.dll
2008-08-07 15:11:38 ----N---- C:\WINDOWS\system32\lfimg11n.dll
2008-08-07 15:11:38 ----N---- C:\WINDOWS\system32\lfgif11n.dll
2008-08-07 15:11:38 ----N---- C:\WINDOWS\system32\lffpx7.dll
2008-08-07 15:11:38 ----N---- C:\WINDOWS\system32\lffpx11n.dll
2008-08-07 15:11:38 ----N---- C:\WINDOWS\system32\lffax11n.dll
2008-08-07 15:11:38 ----N---- C:\WINDOWS\system32\LFCMP11n.DLL
2008-08-07 15:11:38 ----N---- C:\WINDOWS\system32\lfbmp11n.dll
2008-08-07 15:11:38 ----N---- C:\WINDOWS\system32\Crpaig80.dll
2008-08-07 15:11:37 ----N---- C:\WINDOWS\system32\Implode.dll
2008-08-07 15:11:37 ----N---- C:\WINDOWS\system32\crpe32.dll
2008-08-07 15:11:36 ----D---- C:\WINDOWS\Crystal
2008-08-07 15:10:34 ----N---- C:\WINDOWS\system32\txobj32.dll
2008-08-07 15:10:34 ----N---- C:\WINDOWS\system32\Tx32.dll
2008-08-07 15:10:34 ----N---- C:\WINDOWS\system32\tx_word.dll
2008-08-07 15:10:34 ----N---- C:\WINDOWS\system32\tx_rtf32.dll
2008-08-07 15:10:34 ----N---- C:\WINDOWS\system32\ic32.dll
2008-08-07 15:10:33 ----N---- C:\WINDOWS\system32\txtls32.dll
2008-08-07 15:10:33 ----N---- C:\WINDOWS\system32\tx_htm32.dll
2008-08-07 15:10:33 ----N---- C:\WINDOWS\system32\ic32.ini
2008-08-07 15:10:24 ----N---- C:\WINDOWS\system32\CP5DLL32.DLL
2008-08-07 15:10:24 ----N---- C:\WINDOWS\system32\Cp5.dll
2008-08-07 15:10:24 ----A---- C:\WINDOWS\LHOUSE.INI
2008-08-07 15:10:23 ----D---- C:\Program Files\Common Files\ACI
2008-08-07 15:10:22 ----N---- C:\WINDOWS\system32\LTKRN11W.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGVOL16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGTRIG16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGTRIA16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGTRF16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGTOOL16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGSURF16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGSPHR16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGSOLD16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGPOLY16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGKERN16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGENT16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGDXF16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGDRAW16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGDBAS16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGCURV16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGCONV16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGCLIP16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGCIRC16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGAREA16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TGARC16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TG3D16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\TG2D16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\LEAD45.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\EVMOV3.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\EVCHK3.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\system32\BRKDWN16.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\pdsiapex32.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\PDSIAPEX.DLL
2008-08-07 15:10:20 ----N---- C:\WINDOWS\APEXUTIL.DLL
2008-08-07 15:09:57 ----D---- C:\Program Files\ACI32
2008-08-07 14:50:57 ----D---- C:\IMAGEIN3
2008-08-07 14:50:28 ----D---- C:\FLOODMAP
2008-08-07 14:50:26 ----D---- C:\DMSMAPS
2008-08-07 14:50:26 ----D---- C:\DeLorme Docs
2008-08-07 14:50:24 ----D---- C:\CESTWIN
2008-08-07 14:50:24 ----D---- C:\BILLING
2008-08-07 14:49:45 ----D---- C:\APPRAISALS2007
2008-08-07 14:49:42 ----D---- C:\ApexWin
2008-08-07 14:49:42 ----D---- C:\ADOBEAPP
2008-08-07 14:48:23 ----D---- C:\92cbe524fc5daa28d921a6
2008-08-07 14:48:22 ----D---- C:\6in1ico
2008-08-07 14:48:22 ----D---- C:\20f1262d3923f7dfb5
2008-08-07 14:48:16 ----D---- C:\utility
2008-08-07 14:48:16 ----D---- C:\ULEAD2
2008-08-07 14:48:16 ----D---- C:\spoolerlogs
2008-08-07 14:48:16 ----D---- C:\Ricks Photo Files
2008-08-07 14:48:14 ----D---- C:\REVIEW
2008-08-07 14:48:10 ----D---- C:\REALVAL
2008-08-07 14:46:32 ----D---- C:\Photos
2008-08-07 14:46:32 ----D---- C:\PDF Publisher
2008-08-07 14:46:31 ----D---- C:\NASCARPICS
2008-08-07 14:46:30 ----D---- C:\Multi Family
2008-08-07 14:46:20 ----D---- C:\LORDS2
2008-08-07 14:46:19 ----D---- C:\Kpcms
2008-08-07 14:39:43 ----D---- C:\acdc
2008-08-07 14:33:39 ----SHD---- C:\RECYCLER
2008-08-07 14:32:14 ----D---- C:\Program Files\Common Files\Adobe AIR
2008-08-07 14:32:13 ----D---- C:\Documents and Settings\Frank\Application Data\Adobe
2008-08-07 14:31:23 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2008-08-07 14:31:05 ----D---- C:\Program Files\Common Files\Adobe
2008-08-07 14:31:05 ----D---- C:\Program Files\Adobe
2008-08-07 14:24:50 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2008-08-07 14:24:48 ----D---- C:\Program Files\NOS
2008-08-07 14:22:12 ----A---- C:\WINDOWS\ODBC.INI
2008-08-07 14:22:05 ----A---- C:\WINDOWS\system32\mdimon.dll
2008-08-07 14:21:19 ----D---- C:\Program Files\Microsoft ActiveSync
2008-08-07 14:21:16 ----D---- C:\Program Files\Common Files\DESIGNER
2008-08-07 14:21:01 ----D---- C:\WINDOWS\SHELLNEW
2008-08-07 14:20:39 ----D---- C:\Program Files\Microsoft Office
2008-08-07 14:19:05 ----RHD---- C:\MSOCache
2008-08-07 14:14:26 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2008-08-07 14:14:09 ----D---- C:\Program Files\AVG
2008-08-07 14:14:09 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2008-08-07 14:06:09 ----D---- C:\WINDOWS\Prefetch
2008-08-07 14:06:08 ----SD---- C:\WINDOWS\system32\Microsoft
2008-08-07 13:58:35 ----N---- C:\WINDOWS\system32\proxycfg.exe
2008-08-07 13:58:35 ----N---- C:\WINDOWS\system32\logman.exe
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\fsquirt.exe
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\fltmc.exe
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\fltlib.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\extmgr.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\encdec.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\encapi.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\dxdiagn.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\dsprpres.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\d3d9.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\cmsetacl.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\btpanui.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\bthserv.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\bthci.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\blastcln.exe
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\bitsprx3.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\bitsprx2.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\auditusr.exe
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\ati3duag.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2008-08-07 13:58:28 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2008-08-07 13:58:27 ----N---- C:\WINDOWS\system32\httpapi.dll
2008-08-07 13:58:27 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2008-08-07 13:58:27 ----N---- C:\WINDOWS\system32\hccoin.dll
2008-08-07 13:58:27 ----N---- C:\WINDOWS\system32\fwcfg.dll
2008-08-07 13:58:27 ----A---- C:\WINDOWS\system32\ieencode.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\p2pgasvc.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\p2p.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\mssap.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\mspmsnsv.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\msftedit.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\msdadiag.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdukx.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdsmsno.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdsmsfi.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdno1.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdmlt48.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdmlt47.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdmaori.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdinmal.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdinben.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdinbe1.dll
2008-08-07 13:58:26 ----N---- C:\WINDOWS\system32\kbdfi1.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\wmerror.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\winshfhc.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\winbrand.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\w3ssl.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\twext.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\strmfilt.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\smbinst.exe
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\slserv.exe
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\slrundll.exe
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\slgen.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\slextspk.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\slcoinst.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\sdhcinst.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\sbeio.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\sbe.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\powercfg.exe
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\pnrpnsp.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\p2psvc.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\p2pnetsh.dll
2008-08-07 13:58:25 ----N---- C:\WINDOWS\system32\p2pgraph.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\xpsp1res.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\xpob2res.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\xmlprovi.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\xmlprov.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\wuaueng1.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\wuauclt1.exe
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\wshbth.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\wscsvc.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\wscntfy.exe
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\wmpdxm.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\wmpasf.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\system32\wmp.dll
2008-08-07 13:58:24 ----N---- C:\WINDOWS\slrundll.exe
2008-08-07 13:58:22 ----D---- C:\WINDOWS\peernet
2008-08-07 13:58:20 ----D---- C:\WINDOWS\provisioning
2008-08-07 13:56:58 ----D---- C:\WINDOWS\ServicePackFiles
2008-08-07 13:54:50 ----N---- C:\WINDOWS\system32\xpsp2res.dll
2008-08-07 13:53:39 ----A---- C:\WINDOWS\002222_.tmp
2008-08-07 13:53:38 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-08-07 13:53:25 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2008-08-07 13:51:30 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2008-08-07 13:51:29 ----D---- C:\WINDOWS\EHome
2008-08-07 12:41:48 ----A---- C:\WINDOWS\system32\wups2.dll
2008-08-07 12:41:48 ----A---- C:\WINDOWS\system32\wups.dll
2008-08-07 12:41:48 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2008-08-07 12:41:48 ----A---- C:\WINDOWS\system32\wucltui.dll
2008-08-07 12:41:48 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2008-08-07 12:41:48 ----A---- C:\WINDOWS\system32\winhttp.dll
2008-08-07 12:41:47 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2008-08-07 12:41:47 ----A---- C:\WINDOWS\system32\wuapi.dll
2008-08-07 12:41:23 ----D---- C:\WINDOWS\SoftwareDistribution
2008-08-07 12:01:25 ----D---- C:\Documents and Settings\Frank\Application Data\Sonic
2008-08-07 12:01:23 ----D---- C:\Program Files\Common Files\Sonic
2008-08-07 12:00:17 ----N---- C:\WINDOWS\system32\pxsfs.dll
2008-08-07 12:00:17 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2008-08-07 12:00:17 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2008-08-07 12:00:17 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2008-08-07 12:00:17 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2008-08-07 12:00:17 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2008-08-07 12:00:05 ----N---- C:\WINDOWS\system32\spmsg.dll
2008-08-07 12:00:05 ----HDC---- C:\WINDOWS\$NtUninstallQ329112$
2008-08-07 12:00:03 ----HDC---- C:\WINDOWS\$xpsp1hfm$
2008-08-07 12:00:03 ----A---- C:\WINDOWS\system32\xpsp1hfm.exe
2008-08-07 11:59:59 ----D---- C:\Program Files\Common Files\SureThing Shared
2008-08-07 11:59:56 ----D---- C:\Program Files\Sonic RecordNow!
2008-08-07 11:59:56 ----D---- C:\Program Files\Sonic
2008-08-07 11:56:56 ----D---- C:\temp
2008-08-07 11:47:11 ----D---- C:\Documents and Settings\Frank\Application Data\Macromedia
2008-08-07 11:47:11 ----D---- C:\Documents and Settings\Frank\Application Data\AOL
2008-08-07 11:46:57 ----D---- C:\Documents and Settings\All Users\Application Data\Macromedia
2008-08-07 11:46:52 ----A---- C:\WINDOWS\system32\mpg4dmod.dll
2008-08-07 11:46:52 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
2008-08-07 11:46:52 ----A---- C:\WINDOWS\system32\mp43dmod.dll
2008-08-07 11:46:51 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
2008-08-07 11:46:51 ----A---- C:\WINDOWS\system32\wmvdmod.dll
2008-08-07 11:46:51 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
2008-08-07 11:46:51 ----A---- C:\WINDOWS\system32\wmspdmod.dll
2008-08-07 11:46:51 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
2008-08-07 11:46:51 ----A---- C:\WINDOWS\system32\wmsdmod.dll
2008-08-07 11:46:51 ----A---- C:\WINDOWS\system32\wmadmoe.dll
2008-08-07 11:46:51 ----A---- C:\WINDOWS\system32\wmadmod.dll
2008-08-07 11:46:51 ----A---- C:\WINDOWS\system32\qasf.dll
2008-08-07 11:46:50 ----A---- C:\WINDOWS\system32\wmvcore.dll
2008-08-07 11:46:50 ----A---- C:\WINDOWS\system32\wmnetmgr.dll
2008-08-07 11:46:50 ----A---- C:\WINDOWS\system32\wmidx.dll
2008-08-07 11:46:50 ----A---- C:\WINDOWS\system32\logagent.exe
2008-08-07 11:46:50 ----A---- C:\WINDOWS\system32\laprxy.dll
2008-08-07 11:46:49 ----A---- C:\WINDOWS\system32\wmasf.dll
2008-08-07 11:46:49 ----A---- C:\WINDOWS\system32\msnetobj.dll
2008-08-07 11:46:48 ----A---- C:\WINDOWS\system32\drmv2clt.dll
2008-08-07 11:46:48 ----A---- C:\WINDOWS\system32\drmstor.dll
2008-08-07 11:46:48 ----A---- C:\WINDOWS\system32\drmclien.dll
2008-08-07 11:46:48 ----A---- C:\WINDOWS\system32\blackbox.dll
2008-08-07 11:46:28 ----D---- C:\Program Files\Viewpoint
2008-08-07 11:46:28 ----D---- C:\Documents and Settings\All Users\Application Data\Viewpoint
2008-08-07 11:46:27 ----D---- C:\Program Files\Common Files\Nullsoft
2008-08-07 11:45:40 ----D---- C:\Program Files\AOL
2008-08-07 11:45:37 ----D---- C:\Documents and Settings\All Users\Application Data\AOL OCP
2008-08-07 11:45:29 ----D---- C:\WINDOWS\aolshare
2008-08-07 11:45:28 ----D---- C:\Program Files\Common Files\aolshare
2008-08-07 11:45:28 ----D---- C:\Program Files\Common Files\aol
2008-08-07 11:45:28 ----D---- C:\Program Files\AOL 9.1
2008-08-07 11:45:28 ----D---- C:\Documents and Settings\All Users\Application Data\AOL
2008-08-07 11:37:09 ----D---- C:\Documents and Settings\All Users\Application Data\AOL Downloads
2008-08-07 11:27:37 ----A---- C:\WINDOWS\system32\ksuser.dll
2008-08-07 11:27:31 ----N---- C:\WINDOWS\system32\RtlCPAPI.dll
2008-08-07 11:27:31 ----N---- C:\WINDOWS\system32\ChCfg.exe
2008-08-07 11:27:31 ----N---- C:\WINDOWS\soundman.exe
2008-08-07 11:27:31 ----A---- C:\WINDOWS\ALCXMNTR.EXE
2008-08-07 11:27:29 ----N---- C:\WINDOWS\system32\RTLCPL.exe
2008-08-07 11:27:29 ----N---- C:\WINDOWS\alcupd.exe
2008-08-07 11:27:29 ----N---- C:\WINDOWS\alcrmv.exe
2008-08-07 11:27:29 ----HD---- C:\Program Files\InstallShield Installation Information
2008-08-07 11:27:28 ----D---- C:\Program Files\Common Files\InstallShield
2008-08-07 11:26:48 ----D---- C:\Program Files\S3
2008-08-07 11:26:44 ----A---- C:\WINDOWS\IsUninst.exe
2008-08-07 11:25:37 ----SHD---- C:\WINDOWS\Installer
2008-08-07 11:25:34 ----D---- C:\Documents and Settings\Frank\Application Data\Identities
2008-08-07 11:25:31 ----HD---- C:\Program Files\Uninstall Information
2008-08-07 11:25:26 ----ASH---- C:\Documents and Settings\Frank\Application Data\desktop.ini
2008-08-07 11:25:25 ----SD---- C:\Documents and Settings\Frank\Application Data\Microsoft
2008-08-07 11:25:00 ----A---- C:\WINDOWS\system32\wpa.bak
2008-08-07 11:23:51 ----SHD---- C:\System Volume Information
2008-08-07 11:20:16 ----D---- C:\WINDOWS\system32\xircom
2008-08-07 11:20:16 ----D---- C:\Program Files\xerox
2008-08-07 11:20:16 ----D---- C:\Program Files\microsoft frontpage
2008-08-07 11:20:05 ----A---- C:\WINDOWS\control.ini
2008-08-07 11:20:05 ----A---- C:\AUTOEXEC.BAT
2008-08-07 11:19:53 ----A---- C:\WINDOWS\system32\mapi32.dll
2008-08-07 11:19:03 ----RD---- C:\WINDOWS\Offline Web Pages
2008-08-07 11:19:02 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-08-07 11:19:02 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2008-08-07 11:18:57 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2008-08-07 11:18:41 ----D---- C:\WINDOWS\srchasst
2008-08-07 11:18:35 ----D---- C:\WINDOWS\system32\Macromed
2008-08-07 11:18:35 ----D---- C:\WINDOWS\system32\DirectX
2008-08-07 11:18:26 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2008-08-07 11:18:26 ----A---- C:\WINDOWS\system32\qmgr.dll
2008-08-07 11:18:24 ----D---- C:\Program Files\Movie Maker
2008-08-07 11:18:12 ----A---- C:\WINDOWS\system32\safrslv.dll
2008-08-07 11:18:11 ----A---- C:\WINDOWS\system32\safrdm.dll
2008-08-07 11:18:11 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2008-08-07 11:18:11 ----A---- C:\WINDOWS\system32\racpldlg.dll
2008-08-07 11:18:11 ----A---- C:\WINDOWS\system32\atrace.dll
2008-08-07 11:18:08 ----A---- C:\WINDOWS\system32\desktop.ini
2008-08-07 11:18:08 ----A---- C:\WINDOWS\desktop.ini
2008-08-07 11:18:03 ----D---- C:\WINDOWS\system32\Restore
2008-08-07 11:18:03 ----A---- C:\WINDOWS\system32\srsvc.dll
2008-08-07 11:18:03 ----A---- C:\WINDOWS\system32\srrstr.dll
2008-08-07 11:18:02 ----D---- C:\Program Files\Windows Media Player
2008-08-07 11:18:02 ----A---- C:\WINDOWS\system32\srclient.dll
2008-08-07 11:18:02 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2008-08-07 11:18:02 ----A---- C:\WINDOWS\system32\ils.dll
2008-08-07 11:18:01 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2008-08-07 11:18:01 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2008-08-07 11:18:01 ----A---- C:\WINDOWS\system32\msconf.dll
2008-08-07 11:18:01 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2008-08-07 11:18:01 ----A---- C:\WINDOWS\system32\mnmdd.dll
2008-08-07 11:17:58 ----D---- C:\WINDOWS\PCHEALTH
2008-08-07 11:17:58 ----D---- C:\Program Files\NetMeeting
2008-08-07 11:17:58 ----A---- C:\WINDOWS\system32\msoert2.dll
2008-08-07 11:17:58 ----A---- C:\WINDOWS\system32\msoeacct.dll
2008-08-07 11:17:58 ----A---- C:\WINDOWS\system32\acctres.dll
2008-08-07 11:17:57 ----D---- C:\Program Files\Common Files\Services
2008-08-07 11:17:57 ----A---- C:\WINDOWS\system32\inetres.dll
2008-08-07 11:17:56 ----A---- C:\WINDOWS\system32\inetcomm.dll
2008-08-07 11:17:53 ----SD---- C:\WINDOWS\Tasks
2008-08-07 11:17:53 ----D---- C:\Program Files\Outlook Express
2008-08-07 11:17:53 ----A---- C:\WINDOWS\system32\schedsvc.dll
2008-08-07 11:17:53 ----A---- C:\WINDOWS\system32\mstinit.exe
2008-08-07 11:17:53 ----A---- C:\WINDOWS\system32\mstask.dll
2008-08-07 11:17:53 ----A---- C:\WINDOWS\system32\isign32.dll
2008-08-07 11:17:53 ----A---- C:\WINDOWS\system32\inetcfg.dll
2008-08-07 11:17:53 ----A---- C:\WINDOWS\system32\icwphbk.dll
2008-08-07 11:17:53 ----A---- C:\WINDOWS\system32\icwdial.dll
2008-08-07 11:17:53 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2008-08-07 11:17:51 ----D---- C:\Program Files\Common Files\MSSoap
2008-08-07 11:17:48 ----D---- C:\Program Files\Common Files\System
2008-08-07 11:17:44 ----D---- C:\Program Files\Internet Explorer
2008-08-07 11:17:26 ----D---- C:\Program Files\ComPlus Applications
2008-08-07 11:17:24 ----A---- C:\WINDOWS\vbaddin.ini
2008-08-07 11:17:24 ----A---- C:\WINDOWS\vb.ini
2008-08-07 11:17:19 ----D---- C:\WINDOWS\Registration
2008-08-07 11:16:49 ----HD---- C:\Program Files\WindowsUpdate
2008-08-07 11:16:49 ----D---- C:\Program Files\Online Services
2008-08-07 11:16:44 ----D---- C:\Program Files\Messenger
2008-08-07 11:16:38 ----D---- C:\Program Files\MSN
2008-08-07 11:16:35 ----D---- C:\Program Files\MSN Gaming Zone
2008-08-07 11:16:35 ----A---- C:\WINDOWS\system32\write.exe
2008-08-07 11:16:29 ----A---- C:\WINDOWS\system32\accwiz.exe
2008-08-07 11:16:28 ----A---- C:\WINDOWS\system32\sndvol32.exe
2008-08-07 11:16:28 ----A---- C:\WINDOWS\system32\sndrec32.exe
2008-08-07 11:16:28 ----A---- C:\WINDOWS\system32\mplay32.exe
2008-08-07 11:16:28 ----A---- C:\WINDOWS\system32\hypertrm.dll
2008-08-07 11:16:28 ----A---- C:\WINDOWS\system32\hticons.dll
2008-08-07 11:16:28 ----A---- C:\WINDOWS\system32\avwav.dll
2008-08-07 11:16:28 ----A---- C:\WINDOWS\system32\avtapi.dll
2008-08-07 11:16:28 ----A---- C:\WINDOWS\system32\avmeter.dll
2008-08-07 11:16:27 ----D---- C:\Program Files\Windows NT
2008-08-07 11:16:27 ----A---- C:\WINDOWS\system32\winchat.exe
2008-08-07 11:16:26 ----A---- C:\WINDOWS\system32\mspaint.exe
2008-08-07 11:16:23 ----A---- C:\WINDOWS\system32\clipbrd.exe
2008-08-07 11:16:22 ----A---- C:\WINDOWS\system32\getuname.dll
2008-08-07 11:16:22 ----A---- C:\WINDOWS\system32\charmap.exe
2008-08-07 11:16:21 ----A---- C:\WINDOWS\system32\winmine.exe
2008-08-07 11:16:21 ----A---- C:\WINDOWS\system32\spider.exe
2008-08-07 11:16:21 ----A---- C:\WINDOWS\system32\sol.exe
2008-08-07 11:16:21 ----A---- C:\WINDOWS\system32\mshearts.exe
2008-08-07 11:16:21 ----A---- C:\WINDOWS\system32\calc.exe
2008-08-07 11:16:20 ----A---- C:\WINDOWS\system32\wuauserv.dll
2008-08-07 11:16:20 ----A---- C:\WINDOWS\system32\wuaueng.dll
2008-08-07 11:16:20 ----A---- C:\WINDOWS\system32\wuauclt.exe
2008-08-07 11:16:20 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2008-08-07 11:16:20 ----A---- C:\WINDOWS\system32\freecell.exe
2008-08-07 11:16:19 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2008-08-07 11:16:19 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2008-08-07 11:16:19 ----A---- C:\WINDOWS\system32\sessmgr.exe
2008-08-07 11:16:19 ----A---- C:\WINDOWS\system32\reset.exe
2008-08-07 11:16:19 ----A---- C:\WINDOWS\system32\remotepg.dll
2008-08-07 11:16:19 ----A---- C:\WINDOWS\system32\rdshost.exe
2008-08-07 11:16:19 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2008-08-07 11:16:19 ----A---- C:\WINDOWS\system32\rdchost.dll
2008-08-07 11:16:19 ----A---- C:\WINDOWS\system32\mstscax.dll
2008-08-07 11:16:19 ----A---- C:\WINDOWS\system32\mstsc.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\tslabels.ini
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\tskill.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\tscon.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\termsrv.dll
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\shadow.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\rwinsta.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\regini.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\rdpclip.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\qwinsta.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\qprocess.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\qappsrv.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\msg.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\logoff.exe
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\icaapi.dll
2008-08-07 11:16:18 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2008-08-07 11:16:17 ----D---- C:\WINDOWS\system32\MsDtc
2008-08-07 11:16:17 ----A---- C:\WINDOWS\system32\xolehlp.dll
2008-08-07 11:16:17 ----A---- C:\WINDOWS\system32\mtxoci.dll
2008-08-07 11:16:17 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2008-08-07 11:16:17 ----A---- C:\WINDOWS\system32\msdtctm.dll
2008-08-07 11:16:17 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2008-08-07 11:16:17 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2008-08-07 11:16:17 ----A---- C:\WINDOWS\system32\msdtclog.dll
2008-08-07 11:16:17 ----A---- C:\WINDOWS\system32\msdtc.exe
2008-08-07 11:16:17 ----A---- C:\WINDOWS\system32\cdmodem.dll
2008-08-07 11:16:16 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2008-08-07 11:16:16 ----A---- C:\WINDOWS\system32\mtxex.dll
2008-08-07 11:16:16 ----A---- C:\WINDOWS\system32\mtxdm.dll
2008-08-07 11:16:16 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2008-08-07 11:16:15 ----D---- C:\WINDOWS\system32\Com
2008-08-07 11:16:15 ----A---- C:\WINDOWS\system32\stclient.dll
2008-08-07 11:16:15 ----A---- C:\WINDOWS\system32\comrepl.dll
2008-08-07 11:16:15 ----A---- C:\WINDOWS\system32\comaddin.dll
2008-08-07 11:16:15 ----A---- C:\WINDOWS\system32\colbact.dll
2008-08-07 11:16:15 ----A---- C:\WINDOWS\system32\clbcatex.dll
2008-08-07 11:16:15 ----A---- C:\WINDOWS\system32\catsrvut.dll
2008-08-07 11:16:15 ----A---- C:\WINDOWS\system32\catsrvps.dll
2008-08-07 11:16:15 ----A---- C:\WINDOWS\system32\catsrv.dll
2008-08-07 11:16:14 ----A---- C:\WINDOWS\system32\comuid.dll
2008-08-07 11:16:14 ----A---- C:\WINDOWS\system32\comsvcs.dll
2008-08-07 11:16:14 ----A---- C:\WINDOWS\system32\comsnap.dll
2008-08-07 11:16:14 ----A---- C:\WINDOWS\system32\clbcatq.dll
2008-08-07 11:16:07 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2008-08-07 11:16:07 ----A---- C:\WINDOWS\system32\servdeps.dll
2008-08-07 11:16:07 ----A---- C:\WINDOWS\system32\mmfutil.dll
2008-08-07 11:16:07 ----A---- C:\WINDOWS\system32\licwmi.dll
2008-08-07 11:16:06 ----A---- C:\WINDOWS\system32\cmprops.dll
2008-08-07 07:02:44 ----A---- C:\WINDOWS\system32\h323log.txt
2008-08-07 06:51:54 ----A---- C:\WINDOWS\system32\usbui.dll
2008-08-07 06:50:49 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-08-07 06:50:48 ----D---- C:\Program Files\Common Files\ODBC
2008-08-07 06:50:48 ----A---- C:\WINDOWS\ODBCINST.INI
2008-08-07 06:50:46 ----D---- C:\Program Files\Common Files\SpeechEngines
2008-08-07 06:50:45 ----RD---- C:\Program Files
2008-08-07 06:50:45 ----D---- C:\Program Files\Common Files\Microsoft Shared
2008-08-07 06:50:45 ----D---- C:\Program Files\Common Files
2008-08-07 06:50:43 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2008-08-07 06:50:43 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2008-08-07 06:50:43 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdur.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdru.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2008-08-07 06:50:42 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2008-08-07 06:50:41 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2008-08-07 06:50:41 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2008-08-07 06:50:41 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2008-08-07 06:50:41 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2008-08-07 06:50:41 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2008-08-07 06:50:41 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2008-08-07 06:50:41 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2008-08-07 06:50:40 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2008-08-07 06:50:40 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2008-08-07 06:50:40 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2008-08-07 06:50:40 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2008-08-07 06:50:40 ----RA---- C:\WINDOWS\system32\kbdest.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdro.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2008-08-07 06:50:38 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2008-08-07 06:50:36 ----A---- C:\WINDOWS\system32\spxcoins.dll
2008-08-07 06:50:36 ----A---- C:\WINDOWS\system32\irclass.dll
2008-08-07 06:50:36 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2008-08-07 06:50:36 ----A---- C:\WINDOWS\system32\dgsetup.dll
2008-08-07 06:50:36 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2008-08-07 06:50:36 ----A---- C:\WINDOWS\system32\batt.dll
2008-08-07 06:50:34 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2008-08-07 06:50:34 ----A---- C:\WINDOWS\TASKMAN.EXE
2008-08-07 06:50:34 ----A---- C:\WINDOWS\system32\storprop.dll
2008-08-07 06:50:34 ----A---- C:\WINDOWS\notepad.exe
2008-08-07 06:50:26----ASH----C:\Documents and Settings\All Users\Application Data\desktop.ini
2008-08-07 06:50:23 ----RA---- C:\WINDOWS\SET7.tmp
2008-08-07 06:50:20 ----RA---- C:\WINDOWS\SET3.tmp
2008-08-07 06:50:13 ----D---- C:\WINDOWS\system32\CatRoot2
2008-08-07 06:50:13 ----D---- C:\WINDOWS\system32\CatRoot
2008-08-07 06:50:08 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-08-07 06:49:53 ----D---- C:\Documents and Settings
2008-08-07 06:49:00 ----RASH---- C:\boot.ini
2008-08-07 06:46:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-08-07 06:46:18 ----RSD---- C:\WINDOWS\Fonts
2008-08-07 06:46:18 ----RD---- C:\WINDOWS\Web
2008-08-07 06:46:18 ----HD---- C:\WINDOWS\inf
2008-08-07 06:46:18 ----D---- C:\WINDOWS\WinSxS
2008-08-07 06:46:18 ----D---- C:\WINDOWS\twain_32
2008-08-07 06:46:18 ----D---- C:\WINDOWS\Temp
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\wins
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\wbem
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\usmt
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\spool
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\ShellExt
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\Setup
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\ras
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\oobe
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\npp
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\mui
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\inetsrv
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\IME
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\icsxml
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\ias
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\export
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\drivers
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\dhcp
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\config
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\3com_dmi
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\3076
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\2052
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\1054
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\1042
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\1041
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\1037
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\1033
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\1031
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\1028
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32\1025
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system32
2008-08-07 06:46:18 ----D---- C:\WINDOWS\system
2008-08-07 06:46:18 ----D---- C:\WINDOWS\security
2008-08-07 06:46:18 ----D---- C:\WINDOWS\Resources
2008-08-07 06:46:18 ----D---- C:\WINDOWS\repair
2008-08-07 06:46:18 ----D---- C:\WINDOWS\mui
2008-08-07 06:46:18 ----D---- C:\WINDOWS\msapps
2008-08-07 06:46:18 ----D---- C:\WINDOWS\msagent
2008-08-07 06:46:18 ----D---- C:\WINDOWS\Media
2008-08-07 06:46:18 ----D---- C:\WINDOWS\java
2008-08-07 06:46:18 ----D---- C:\WINDOWS\ime
2008-08-07 06:46:18 ----D---- C:\WINDOWS\Help
2008-08-07 06:46:18 ----D---- C:\WINDOWS\Driver Cache
2008-08-07 06:46:18 ----D---- C:\WINDOWS\Debug
2008-08-07 06:46:18 ----D---- C:\WINDOWS\Cursors
2008-08-07 06:46:18 ----D---- C:\WINDOWS\Connection Wizard
2008-08-07 06:46:18 ----D---- C:\WINDOWS\Config
2008-08-07 06:46:18 ----D---- C:\WINDOWS\AppPatch
2008-08-07 06:46:18 ----D---- C:\WINDOWS\addins
2008-08-07 06:46:18 ----D---- C:\WINDOWS

List of drivers

R1 AmdK7;AMD K7 Processor Driver; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2004-08-03 37376]
R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\system32\System32\Drivers\avgldx86.sys []
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\system32\System32\Drivers\avgmfx86.sys []
R2 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\system32\System32\Drivers\avgtdix.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-10-01 2279424]
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2004-12-16 42496]
R3 ltmodem5;LT Modem Driver; C:\WINDOWS\System32\DRIVERS\ltmdmnt.sys [2003-03-31 625537]
R3 S3Psddr;S3Psddr; C:\WINDOWS\System32\DRIVERS\s3gnbm.sys [2003-05-26 166912]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
R3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys [2003-01-10 33588]
S2 ASPI32;ASPI32; C:\WINDOWS\system32\drivers\ASPI32.sys []
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

List of services

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-09-03 611664]
R2 AOL ACS;AOL Connectivity Service; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [2006-10-23 46640]
R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-08-30 875288]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-08-30 231704]
R2 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-08-20 137200]
R2 WinVNC4;VNC Server Version 4; C:\Program Files\RealVNC\VNC4\WinVNC4.exe [2006-05-12 439248]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

INFO.TXT FILE:

info.txt logfile of random's system information tool 2008-09-07 10:38:59

Uninstall list

-->"C:\Program Files\AOL\AOL Toolbar 5.0\uninstall.exe"
-->C:\WINDOWS\System32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
-->C:\WINDOWS\System32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2006 SP5 Updates Setup-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CDBB3A08-5E3A-4429-B1E6-758FF739C04C}\setup.exe" -l0x9
ACI Collection 32-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\ACI32\Uninstall\setup.exe" -l0x9 AWCv85
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe AIR-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{00203668-8170-44A0-BE44-B632FA4D780F}
Adobe Flash Player 9 ActiveX-->C:\WINDOWS\System32\Macromed\Flash\UninstFl.exe -q
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A90000000001}
AOL Toolbar 5.0-->"C:\Program Files\AOL\AOL Toolbar 5.0\uninstall.exe"
AOL Uninstaller (Choose which Products to Remove)-->C:\Program Files\Common Files\AOL\uninstaller.exe
AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
Google Updater-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Lernout & Hauspie TruVoice American English TTS Engine-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\tv_enua.inf, Uninstall
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Malwarebytes' RogueRemover-->"C:\Program Files\RogueRemover FREE\unins000.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Standard Edition 2003-->MsiExec.exe /I{91120409-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
NJPM_Online 4.5.9-->"C:\Program Files\CRT Support\NJPM_Online\unins000.exe"
ProSavageDDR and Utilities-->C:\PROGRA~1\S3\P4M266\s3setvga.exe -s -fC:\PROGRA~1\S3\P4M266\P4M266.uns
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
RealVal-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\realval\ST6UNST.LOG"
S3Display-->s3uninst.exe -reg 5 'HKLM\Software\S3\S3Uninst\S3Display'
S3Gamma2-->s3uninst.exe -reg 5 'HKLM\Software\S3\S3Uninst\S3Gamma2'
S3Info2-->s3uninst.exe -reg 5 'HKLM\Software\S3\S3Uninst\S3Info2'
S3Overlay-->s3uninst.exe -reg 5 'HKLM\Software\S3\S3Uninst\S3Overlay'
ScanWizard 5-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B08D262E-D902-11D5-9C28-0080C85A0C2D}\setup.exe"
Second Copy 7-->C:\PROGRA~1\SecCopy\UNWISE.EXE C:\PROGRA~1\SecCopy\INSTALL.LOG
Security Update for Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Security Update for Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Security Update for Windows XP (KB944338-v2)-->"C:\WINDOWS\$NtUninstallKB944338-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Security Update for Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Sonic Update Manager-->MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
SpywareBlaster 4.1-->"C:\Program Files\SpywareBlaster\unins000.exe"
Street Atlas USA 8.0-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Street Atlas USA 8.0\Sa8Uninst.isu"
Uninstall AOL Emergency Connect Utility 1.0-->C:\Program Files\Common Files\AOL\ECU\uninst.exe
Update for Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Update for Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Update for Windows XP (KB932823-v3)-->"C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
Update for Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Update for Windows XP (KB942840)-->"C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.exe"
Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
VIA Rhine-Family Fast Ethernet Adapter-->Rundll32.exe vuins32.dll,vuins32Ex $Rhine $VIA
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
VNC Free Edition 4.1.2-->"C:\Program Files\RealVNC\VNC4\unins000.exe"
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows XP Service Pack 2-->C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe

Security center information

AV: AVG Anti-Virus Free

Environment variables

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 8 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION"=0801
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO

-----------------EOF-----------------

[Shaba]

Please make sure that all programs are closed when installing Java.

1. Click here to visit Java's website.
2. Scroll down to Java Runtime Environment (JRE) 6 Update 7. Click on Download.
3. Select Windows from the drop-down list for Platform.
4. Select Multi-language from the drop-down list for Language.
5. Check (tick) I agree to the Java SE Runtime Environment 6 License Agreement box and click on Continue.
6. Click on jre-6u7-windows-i586-p.exe link to download it and save this to a convenient location.
7. Double click on jre-6u7-windows-i586-p.exe to install Java.
8. After the Java installation has finished, please go to Kaspersky website and perform an online antivirus scan.
9. Read through the requirements and privacy statement and click on Accept button.
10. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
11. When the downloads have finished, click on Settings.
12. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
    Spyware, Adware, Dialers, and other potentially dangerous programs
    Archives
    
13. Click on My Computer under Scan.
14. Once the scan is complete, it will display the results. Click on View Scan Report.
15. You will see a list of infected items there. Click on Save Report As....
16. Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
17. Please post this log in your next reply along with a fresh HijackThis log.

[jconstan]

Thank you and here is the information requested:

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Sunday, September 7, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Sunday, September 07, 2008 16:13:46
Records in database: 1200548
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
U:\

Scan statistics:
Files scanned: 45775
Threat name: 2
Infected objects: 9
Suspicious objects: 0
Duration of the scan: 03:22:48


File name / Threat name / Threats count
C:\Documents and Settings\All Users\Application Data\cnanedqn\ilafqret.exe Infected: Trojan-Downloader.Win32.Obfuscated.dno 1
C:\Program Files\RealVNC\VNC4\vncconfig.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 1
C:\Program Files\RealVNC\VNC4\vncviewer.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 1
C:\Program Files\RealVNC\VNC4\winvnc4.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 1
C:\Program Files\RealVNC\VNC4\wm_hooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 1
U:\Program Files\RealVNC\VNC4\vncconfig.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 1
U:\Program Files\RealVNC\VNC4\vncviewer.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 1
U:\Program Files\RealVNC\VNC4\winvnc4.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 1
U:\Program Files\RealVNC\VNC4\wm_hooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 1

The selected area was scanned.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:37:40 PM, on 9/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Common Files\AOL\1218123930\ee\AOLSoftware.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\S3tray2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\SecCopy\SecCopy.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1218123930\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Second Copy] "C:\Program Files\SecCopy\SecCopy.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.1\AOL.EXE" -b
O4 - Global Startup: Microtek Scanner Finder.lnk = C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 5.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 8127279156
O16 - DPF: {CE8267C2-D41A-4A50-A69D-F32B5C289F14} (FileOpenInstaller) - http://dev.publicrecords.trendmls.com/R ... leopen.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5C425053-A245-4B09-B440-AF43A28B0126}: NameServer = 151.204.0.84,151.197.0.39
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe

--
End of file - 6837 bytes

[Shaba]

Delete this:

C:\Documents and Settings\All Users\Application Data\cnanedqn

Empty Recycle Bin.

Still problems?

[jconstan]

Thank you....... I will let you know after today.

-Jim

[Shaba]

OK, keep me informed

[jconstan]

Sahba,

That appears to have taken care of the problem. Thank you very much....keep up the good work.

-Jim

[Shaba]

Great

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

Next we remove all used tools.

You can delete RSIT.

Please download OTCleanIt and save it to desktop.

• Double-click OTCleanIt.exe.
• Click the CleanUp! button.
• Select Yes when the "Begin cleanup Process?" prompt appears.
• If you are prompted to Reboot during the cleanup, select Yes.
• The tool will delete itself once it finishes, if not delete it by yourself.

Note: If you receive a warning from your firewall or other security programs regarding OTCleanIt attempting to contact the internet, please allow it to do so.

• Disable and Enable System Restore. - If you are using Windows XP then you should disable and re-enable system restore to make sure there are no infected files found in a restore point.
  
  You can find instructions on how to enable and re-enable system restore here:
  
  Windows XP System Restore Guide

Re-enable system restore with instructions from tutorial above

• Make your Internet Explorer more secure - This can be done by following these simple instructions:
• From within Internet Explorer click on the Tools menu and then click on Options.
• Click once on the Security tab
• Click once on the Internet icon so it becomes highlighted.
• Click once on the Custom Level button.
• Change the Download signed ActiveX controls to Prompt
  
• Change the Download unsigned ActiveX controls to Disable
  
• Change the Initialize and script ActiveX controls not marked as safe to Disable
  
• Change the Installation of desktop items to Prompt
  
• Change the Launching programs and files in an IFRAME to Prompt
  
• Change the Navigate sub-frames across different domains to Prompt
  
• When all these settings have been made, click on the OK button.
  
• If it prompts you as to whether or not you want to save the settings, press the Yes button.
• Next press the Apply button and then the OK to exit the Internet Properties page.

• Update your AntiVirus Software - It is imperitive that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.
  
  
• Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
  
• Install Malwarebytes' Anti-Malware - Malwarebytes' Anti-Malware is a new and powerful anti-malware tool. It is
  totally free but for real-time protection you will have to pay a small one-time fee. Tutorial on installing & using this product can be found below:
  
  Malwarebytes' Anti-Malware Setup Guide
  
  Malwarebytes' Anti-Malware Scanning Guide
  
  
• Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
  
  A tutorial on installing & using this product can be found here:
  
  Using SpywareBlaster to protect your computer from Spyware and Malware
  
  
• Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.

Here are some additional utilities that will enhance your safety

• MVPS Hosts file <= The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer
• Winpatrol <= Download and install the free version of Winpatrol. a tutorial for this product is located here:
  Using Winpatrol to protect your computer from malicious software

Stand Up and Be Counted ---> Malware Complaints <--- where you can make difference!

The site offers people who have been (or are) victims of malware the opportunity to document their story and, in that way, launch a complaint against the malware and the makers of the malware.

Also, please read this great article by Tony Klein So How Did I Get Infected In First Place

Happy surfing and stay clean!

[Shaba]

jconstan this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.