[b]SDFix: Version 1.220 [/b] Run by [removed] on Mon 09/01/2008 at 06:01 PM Microsoft Windows XP [Version 5.1.2600] Running From: C:\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-01 19:07:28 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden services & system hive ... scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\\Program Files\\WinAntiVirus Pro 2007\\AVupd.exe"="C:\\Program Files\\WinAntiVirus Pro 2007\\AVupd.exe:*:Enabled:avupd.exe" "C:\\Program Files\\Hewlett-Packard\\Toolbox\\jre\\bin\\javaw.exe"="C:\\Program Files\\Hewlett-Packard\\Toolbox\\jre\\bin\\javaw.exe:*:Enabled:javaw" "C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer" "C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" [b]Remaining Files [/b]: [b]Files with Hidden Attributes [/b]: Fri 4 Mar 2005 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak" Mon 13 Sep 2004 94,458 ...H. --- "C:\Program Files\Nero\data\Nero PhotoShow Express.exe" Fri 26 Jan 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp" Fri 4 Mar 2005 4,348 ...H. --- "C:\Documents and Settings\Robbie\My Documents\My Music\License Backup\drmv1key.bak" Fri 5 May 2006 20 A..H. --- "C:\Documents and Settings\Robbie\My Documents\My Music\License Backup\drmv1lic.bak" Thu 16 Mar 2006 576 A.SH. --- "C:\Documents and Settings\Robbie\My Documents\My Music\License Backup\drmv2key.bak" Tue 14 Nov 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\5a0d771158cfd69be5ddd26d8f58c73b\BIT154.tmp" Fri 7 Sep 2007 1,974 A.SH. --- "C:\Documents and Settings\Dana\Application Data\Roxio\Dragon\DiscInfoCache\TSSTcorp_CD_DVDW_TS-L532A_HP20_300_DICV018_DRGV2050108.TMP" Tue 7 Aug 2007 1,636 A.SH. --- "C:\Documents and Settings\Robbie\Application Data\Roxio\Dragon\DiscInfoCache\TSSTcorp_CD_DVDW_TS-L532A_HP20_300_DICV018_DRGV2050108.TMP" [b]Finished![/b]