Logfile of random's system information tool 1.06 (written by random/random)
Run by Rjay at 2010-01-08 15:01:14
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 65 GB (43%) free of 151 GB
Total RAM: 2038 MB (44% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:01:23 PM, on 1/8/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Toshiba\Utilities\KeNotify.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Adolix\Adolix Wallpaper Changer\AWC.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Rjay\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Rjay.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.toshibadirect.com/dpdstartR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.toshibadirect.com/dpdstartR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.toshibadirect.com/dpdstartR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [jswtrayutil] "C:\Program Files\Jumpstart\jswtrayutil.exe"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [HWSetup] \HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [TOSCDSPD] TOSCDSPD.EXE
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Wallpaper Manager] C:\Program Files\Adolix\Adolix Wallpaper Changer\AWC.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,avgrsstx.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Program Files\Jumpstart\jswpsapi.exe
O23 - Service: pinger - Unknown owner - C:\Toshiba\IVP\ISM\pinger.exe
O23 - Service: Swupdtmr - Unknown owner - c:\Toshiba\IVP\swupdate\swupdtmr.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
--
End of file - 10056 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-12-10 1111320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-08 259696]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-10-30 764912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-05-09 470512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-08 259696]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-09-20 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-09-20 154136]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-09-20 129560]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2008-01-17 431456]
"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2007-06-15 448080]
"00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2008-01-22 712704]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2006-09-11 180224]
"jswtrayutil"=C:\Program Files\Jumpstart\jswtrayutil.exe []
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-20 1008184]
"ITSecMng"=C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [2007-09-28 75136]
"NDSTray.exe"=NDSTray.exe []
"HWSetup"=\HWSetup.exe hwSetUP []
"SVPWUTIL"=C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe [2006-03-22 438272]
"KeNotify"=C:\Program Files\TOSHIBA\Utilities\KeNotify.exe [2006-11-06 34352]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-02-18 1862144]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-29 4911104]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-12-10 2043160]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-10-28 141600]
"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-01-07 429392]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"=TOSCDSPD.EXE []
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-05-09 39408]
"Wallpaper Manager"=C:\Program Files\Adolix\Adolix Wallpaper Changer\AWC.exe [2008-03-14 1946624]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,avgrsstx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-09-13 204800]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\TOSHIBA\ivp\NetInt\Netint.exe"="C:\TOSHIBA\ivp\NetInt\Netint.exe:*:Enabled:NIE - Toshiba Software Upgrades Engine"
"C:\TOSHIBA\Ivp\ISM\pinger.exe"="C:\TOSHIBA\Ivp\ISM\pinger.exe:*:Enabled:Toshiba Software Upgrades Pinger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
shell\AutoRun\command - E:\LaunchU3.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0a00f7b8-d961-11de-b997-001eec33ad48}]
shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL E:\m.exe /s
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{64bdc195-dad5-11de-9e25-001eec33ad48}]
shell\AutoRun\command - E:\slacker.synclauncher.exe
shell\slacker\command - E:\slacker.synclauncher.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{738c6b62-3da2-11de-932e-001eec33ad48}]
shell\AutoRun\command - E:\LaunchU3.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aabda668-7249-11de-9a0e-001eec33ad48}]
shell\AutoRun\command - F:\start.exe
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-01-08 15:01:14 ----D---- C:\rsit
2010-01-08 14:48:34 ----D---- C:\Users\Rjay\AppData\Roaming\Malwarebytes
2010-01-08 14:48:26 ----D---- C:\ProgramData\Malwarebytes
2010-01-08 14:48:25 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-01-02 01:01:45 ----D---- C:\Program Files\Trend Micro
2009-12-15 01:05:33 ----D---- C:\Users\Rjay\AppData\Roaming\WildTangent
2009-12-12 13:53:25 ----D---- C:\Program Files\Windows Portable Devices
2009-12-12 13:23:24 ----A---- C:\Windows\system32\UIRibbonRes.dll
2009-12-12 13:23:24 ----A---- C:\Windows\system32\UIAnimation.dll
2009-12-12 13:23:23 ----A---- C:\Windows\system32\UIRibbon.dll
2009-12-12 13:22:41 ----A---- C:\Windows\system32\WMPhoto.dll
2009-12-12 13:22:40 ----A---- C:\Windows\system32\XpsRasterService.dll
2009-12-12 13:22:40 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2009-12-12 13:22:40 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-12-12 13:22:40 ----A---- C:\Windows\system32\d3d10warp.dll
2009-12-12 13:22:40 ----A---- C:\Windows\system32\cdd.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\xpsservices.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\XpsPrint.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-12-12 13:22:39 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\OpcServices.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\FntCache.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\dxgi.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\dxdiagn.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\dxdiag.exe
2009-12-12 13:22:39 ----A---- C:\Windows\system32\DWrite.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\d3d11.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\d3d10level9.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\d3d10core.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\d3d10_1core.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\d3d10_1.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\d3d10.dll
2009-12-12 13:22:39 ----A---- C:\Windows\system32\d2d1.dll
2009-12-12 13:22:10 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
2009-12-12 13:22:10 ----A---- C:\Windows\system32\wpdbusenum.dll
2009-12-12 13:22:10 ----A---- C:\Windows\system32\BthMtpContextHandler.dll
2009-12-12 13:22:08 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\WPDSp.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\wpdshext.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\WpdMtpUS.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\WpdMtp.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\WpdConns.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\wpd_ci.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-12-12 13:22:07 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-12-12 13:21:00 ----A---- C:\Windows\system32\UIAutomationCore.dll
2009-12-12 13:21:00 ----A---- C:\Windows\system32\oleaccrc.dll
2009-12-12 13:21:00 ----A---- C:\Windows\system32\oleacc.dll
2009-12-12 13:18:46 ----A---- C:\Windows\system32\nshhttp.dll
2009-12-12 13:18:44 ----A---- C:\Windows\system32\httpapi.dll
2009-12-11 04:11:26 ----D---- C:\Windows\system32\eu-ES
2009-12-11 04:11:26 ----D---- C:\Windows\system32\ca-ES
2009-12-11 04:11:18 ----D---- C:\Windows\system32\vi-VN
2009-12-11 00:54:41 ----D---- C:\Windows\system32\EventProviders
2009-12-09 17:58:56 ----A---- C:\Windows\system32\mshtml.dll
2009-12-09 17:58:52 ----A---- C:\Windows\system32\ieframe.dll
2009-12-09 17:58:47 ----A---- C:\Windows\system32\iertutil.dll
2009-12-09 17:58:46 ----A---- C:\Windows\system32\urlmon.dll
2009-12-09 17:58:45 ----A---- C:\Windows\system32\wininet.dll
2009-12-09 17:58:44 ----A---- C:\Windows\system32\occache.dll
2009-12-09 17:58:44 ----A---- C:\Windows\system32\msfeeds.dll
2009-12-09 17:58:43 ----A---- C:\Windows\system32\iedkcs32.dll
2009-12-09 17:58:41 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-12-09 17:58:41 ----A---- C:\Windows\system32\ieUnatt.exe
2009-12-09 17:58:41 ----A---- C:\Windows\system32\ieui.dll
2009-12-09 17:58:41 ----A---- C:\Windows\system32\iepeers.dll
2009-12-09 17:58:40 ----A---- C:\Windows\system32\jsproxy.dll
2009-12-09 17:58:40 ----A---- C:\Windows\system32\iesysprep.dll
2009-12-09 17:58:39 ----A---- C:\Windows\system32\msfeedssync.exe
2009-12-09 17:58:39 ----A---- C:\Windows\system32\iesetup.dll
2009-12-09 17:58:39 ----A---- C:\Windows\system32\iernonce.dll
2009-12-09 17:58:39 ----A---- C:\Windows\system32\ie4uinit.exe
2009-12-09 17:03:50 ----A---- C:\Windows\system32\winhttp.dll
2009-12-09 13:43:57 ----A---- C:\Windows\system32\rastls.dll
======List of files/folders modified in the last 1 months======
2010-01-08 15:01:23 ----D---- C:\Windows\Temp
2010-01-08 15:01:23 ----D---- C:\Windows\Prefetch
2010-01-08 14:48:27 ----D---- C:\Windows\system32\drivers
2010-01-08 14:48:26 ----HD---- C:\ProgramData
2010-01-08 14:48:25 ----RD---- C:\Program Files
2010-01-08 14:41:12 ----D---- C:\Windows
2010-01-07 16:21:15 ----HD---- C:\$AVG8.VAULT$
2010-01-07 15:35:43 ----SHD---- C:\System Volume Information
2010-01-04 21:45:46 ----AD---- C:\Windows\System32
2010-01-04 21:45:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-01-04 21:45:45 ----D---- C:\Windows\inf
2010-01-03 19:17:00 ----SD---- C:\Users\Rjay\AppData\Roaming\Microsoft
2010-01-01 12:38:52 ----D---- C:\Windows\system32\catroot2
2009-12-18 18:46:55 ----SHD---- C:\Windows\Installer
2009-12-18 18:44:45 ----D---- C:\Program Files\Google
2009-12-16 03:47:11 ----D---- C:\Program Files\Mozilla Firefox
2009-12-15 01:05:30 ----D---- C:\ProgramData\WildTangent
2009-12-12 14:21:26 ----D---- C:\Windows\Microsoft.NET
2009-12-12 14:21:17 ----RSD---- C:\Windows\assembly
2009-12-12 14:12:39 ----D---- C:\Windows\rescache
2009-12-12 13:56:46 ----D---- C:\Windows\system32\Tasks
2009-12-12 13:53:28 ----D---- C:\Windows\system32\en-US
2009-12-12 13:53:25 ----D---- C:\Windows\system32\wbem
2009-12-12 13:53:20 ----D---- C:\Windows\system32\zh-TW
2009-12-12 13:53:20 ----D---- C:\Windows\system32\zh-HK
2009-12-12 13:53:20 ----D---- C:\Windows\system32\zh-CN
2009-12-12 13:53:20 ----D---- C:\Windows\system32\uk-UA
2009-12-12 13:53:20 ----D---- C:\Windows\system32\tr-TR
2009-12-12 13:53:20 ----D---- C:\Windows\system32\th-TH
2009-12-12 13:53:20 ----D---- C:\Windows\system32\sv-SE
2009-12-12 13:53:20 ----D---- C:\Windows\system32\sr-Latn-CS
2009-12-12 13:53:20 ----D---- C:\Windows\system32\sl-SI
2009-12-12 13:53:20 ----D---- C:\Windows\system32\sk-SK
2009-12-12 13:53:20 ----D---- C:\Windows\system32\ru-RU
2009-12-12 13:53:20 ----D---- C:\Windows\system32\ro-RO
2009-12-12 13:53:20 ----D---- C:\Windows\system32\pt-PT
2009-12-12 13:53:20 ----D---- C:\Windows\system32\pt-BR
2009-12-12 13:53:20 ----D---- C:\Windows\system32\pl-PL
2009-12-12 13:53:20 ----D---- C:\Windows\system32\nl-NL
2009-12-12 13:53:20 ----D---- C:\Windows\system32\lv-LV
2009-12-12 13:53:20 ----D---- C:\Windows\system32\lt-LT
2009-12-12 13:53:20 ----D---- C:\Windows\system32\ko-KR
2009-12-12 13:53:20 ----D---- C:\Windows\system32\ja-JP
2009-12-12 13:53:20 ----D---- C:\Windows\system32\it-IT
2009-12-12 13:53:20 ----D---- C:\Windows\system32\hu-HU
2009-12-12 13:53:20 ----D---- C:\Windows\system32\hr-HR
2009-12-12 13:53:20 ----D---- C:\Windows\system32\he-IL
2009-12-12 13:53:20 ----D---- C:\Windows\system32\fr-FR
2009-12-12 13:53:20 ----D---- C:\Windows\system32\fi-FI
2009-12-12 13:53:20 ----D---- C:\Windows\system32\et-EE
2009-12-12 13:53:20 ----D---- C:\Windows\system32\es-ES
2009-12-12 13:53:20 ----D---- C:\Windows\system32\el-GR
2009-12-12 13:53:20 ----D---- C:\Windows\system32\de-DE
2009-12-12 13:53:20 ----D---- C:\Windows\system32\cs-CZ
2009-12-12 13:53:20 ----D---- C:\Windows\system32\bg-BG
2009-12-12 13:53:20 ----D---- C:\Windows\system32\ar-SA
2009-12-12 13:53:19 ----D---- C:\Windows\system32\nb-NO
2009-12-12 13:53:19 ----D---- C:\Windows\system32\da-DK
2009-12-12 13:23:38 ----D---- C:\Windows\winsxs
2009-12-12 13:23:36 ----D---- C:\Windows\system32\catroot
2009-12-11 04:25:07 ----SHD---- C:\Boot
2009-12-11 04:17:33 ----D---- C:\Program Files\Windows Calendar
2009-12-11 04:17:32 ----D---- C:\Program Files\Windows Mail
2009-12-11 04:17:32 ----D---- C:\Program Files\Movie Maker
2009-12-11 04:17:25 ----D---- C:\Program Files\Windows Sidebar
2009-12-11 04:17:25 ----D---- C:\Program Files\Windows Media Player
2009-12-11 04:17:25 ----D---- C:\Program Files\Internet Explorer
2009-12-11 04:17:23 ----D---- C:\Program Files\Windows Collaboration
2009-12-11 04:17:22 ----D---- C:\Program Files\Windows Journal
2009-12-11 04:17:14 ----D---- C:\Program Files\Common Files\System
2009-12-11 04:17:13 ----D---- C:\Program Files\Windows Photo Gallery
2009-12-11 04:16:55 ----D---- C:\Windows\servicing
2009-12-11 04:16:55 ----D---- C:\Program Files\Windows Defender
2009-12-11 04:16:54 ----D---- C:\Windows\ehome
2009-12-11 04:16:02 ----D---- C:\Windows\IME
2009-12-11 04:16:01 ----D---- C:\Windows\system32\XPSViewer
2009-12-11 04:15:56 ----D---- C:\Windows\system32\oobe
2009-12-11 04:15:55 ----D---- C:\Windows\system32\migration
2009-12-11 04:15:44 ----D---- C:\Windows\system32\AdvancedInstallers
2009-12-11 04:15:43 ----D---- C:\Windows\system32\setup
2009-12-11 04:15:42 ----D---- C:\Windows\system32\SLUI
2009-12-11 04:15:38 ----D---- C:\Windows\system32\manifeststore
2009-12-11 04:15:38 ----D---- C:\Windows\system32\en
2009-12-11 04:15:19 ----D---- C:\Windows\system32\migwiz
2009-12-11 04:11:38 ----RSD---- C:\Windows\Fonts
2009-12-11 04:11:38 ----D---- C:\Windows\AppPatch
2009-12-11 04:11:18 ----D---- C:\Windows\system32\Boot
2009-12-11 04:09:16 ----D---- C:\Windows\system32\RTCOM
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AvgLdx86;AVG AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2009-07-30 335240]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2009-07-30 27784]
R1 AvgTdiX;AVG8 Network Redirector; C:\Windows\System32\Drivers\avgtdix.sys [2009-05-12 108552]
R1 Cdr4_xp;Cdr4_xp; C:\Windows\system32\drivers\Cdr4_xp.sys [2006-10-04 2432]
R1 Cdralw2k;Cdralw2k; C:\Windows\system32\drivers\Cdralw2k.sys [2006-10-04 2560]
R1 jswpslwf;JumpStart Wireless Filter Driver; C:\Windows\system32\DRIVERS\jswpslwf.sys [2007-08-31 20352]
R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-28 1161888]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2006-08-30 140800]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-01-25 764416]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-20 14208]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-09-13 1925632]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-30 2058528]
R3 NuidFltr;NUID filter driver; C:\Windows\system32\DRIVERS\NuidFltr.sys [2009-05-09 14736]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-04-30 81408]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-10 89088]
R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2006-10-18 16128]
R3 tifm21;tifm21; C:\Windows\system32\drivers\tifm21.sys [2007-01-24 290304]
S3 BVRPMPR5;BVRPMPR5 NDIS Protocol Driver; \??\C:\Windows\system32\drivers\BVRPMPR5.SYS [2007-05-23 49904]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-20 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-01 235520]
S3 motccgp;Motorola USB Composite Device Driver; C:\Windows\system32\DRIVERS\motccgp.sys [2008-08-21 18688]
S3 motccgpfl;MotCcgpFlService; C:\Windows\system32\DRIVERS\motccgpfl.sys [2008-08-21 8320]
S3 motmodem;Motorola USB CDC ACM Driver; C:\Windows\system32\DRIVERS\motmodem.sys [2007-06-18 23680]
S3 motport;Motorola USB Diagnostic Port; C:\Windows\system32\DRIVERS\motport.sys [2007-06-18 23680]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-20 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-20 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-20 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-20 6016]
S3 RimUsb;BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb.sys [2008-04-16 22784]
S3 Tosrfcom;Tosrfcom; C:\Windows\system32\drivers\Tosrfcom.sys []
S3 TpChoice;Touch Pad Detection Filter driver; C:\Windows\system32\DRIVERS\TpChoice.sys []
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-08-28 40448]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-09-30 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-20 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-20 6656]
S4 KR10I;KR10I; C:\Windows\system32\drivers\kr10i.sys [2006-11-08 219264]
S4 KR10N;KR10N; C:\Windows\system32\drivers\kr10n.sys [2006-11-08 211072]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-20 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-20 11264]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2006-10-05 9216]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-05-29 144712]
R2 avg8emc;AVG8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2009-07-30 908056]
R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-07-30 297752]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 ConfigFree Service;ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [2007-12-25 40960]
R2 pinger;pinger; C:\Toshiba\IVP\ISM\pinger.exe [2007-01-25 136816]
R2 Swupdtmr;Swupdtmr; c:\Toshiba\IVP\swupdate\swupdtmr.exe [2007-10-23 66928]
R2 TNaviSrv;TOSHIBA Navi Support Service; C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe [2008-01-21 83312]
R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2007-11-21 129632]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe [2008-01-17 431456]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-09-28 128360]
R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service; C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-03 126976]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2006-08-23 49152]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-10-28 545568]
S2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-02 135664]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-20 21504]
S3 GameConsoleService;GameConsoleService; C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe [2007-09-24 181784]
S3 GoogleDesktopManager;GoogleDesktopManager; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-02-18 1862144]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-09 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 jswpsapi;Jumpstart Wifi Protected Setup; C:\Program Files\Jumpstart\jswpsapi.exe [2007-10-29 937984]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
-----------------EOF-----------------