Logfile of random's system information tool (written by random/random) Run by [removed] at 2008-09-01 19:58:19 Microsoft Windows XP Home Edition Service Pack 3 System drive C: has 39 GB (68%) free of 57 GB Total RAM: 478 MB (10% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:58:48 PM, on 9/1/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Trend Micro\BM\TMBMSRV.exe C:\Program Files\Trend Micro\Internet Security\TmProxy.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\notepad.exe C:\WINDOWS\system32\hkcmd.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe C:\Program Files\Napster\napster.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\PROGRA~1\Nero\data\xtras\mssysmgr.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Robbie\My Documents\Rob's Folder\PC Security\RSIT.exe C:\Program Files\Trend Micro\HijackThis\Robbie.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=laptop O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: EarthLink Popup Blocker - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - C:\Program Files\EarthLink TotalAccess\PnEL.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll O3 - Toolbar: EarthLink Toolbar - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [eabconfg.cpl] "C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" /Start O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [HP OfficeJet T Series] "C:\Program Files\Hewlett-Packard\HP OfficeJet T Series\bin\ktchnsnk.exe" -reg "Software\Hewlett-Packard\OfficeJet T Series\Install" O4 - HKLM\..\Run: [StatusClient 2.6] "C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe" /auto O4 - HKLM\..\Run: [TomcatStartup 2.5] "C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe" O4 - HKLM\..\Run: [OrderReminder] "C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe" O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [NapsterShell] "C:\Program Files\Napster\napster.exe" /systray O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [EPSON PictureMate] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE /P17 "EPSON PictureMate" /O6 "USB001" /M "PictureMate" O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe" O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Nero\data\xtras\mssysmgr.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=laptop O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1173493133968 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\hpzipm12.exe O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe O24 - Desktop Component 0: (no name) - http://www.freshfolder.com/img/thumb/20051.jpg -- End of file - 9176 bytes Scheduled tasks folder C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\Symantec NetDetect.job Registry dump [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4B5F2E08-6F39-479a-B547-B2026E4C7EDF}] PnIEBrowserHelperObj Class - C:\Program Files\EarthLink TotalAccess\PnEL.dll [2004-06-18 438272] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - c:\program files\google\googletoolbar3.dll [2007-01-20 2403392] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll [2008-04-10 734704] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {D7F30B62-8269-41AF-9539-B2697FA7D77E} - EarthLink Toolbar - C:\Program Files\EarthLink TotalAccess\PnEL.dll [2004-06-18 438272] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar3.dll [2007-01-20 2403392] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2004-06-17 155648] "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2004-06-17 118784] "SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784] "UpdateManager"=C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe [2003-08-19 110592] "SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-10-05 98394] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-10-05 688218] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-10-25 282624] "eabconfg.cpl"=C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe [2004-09-17 290816] "Cpqset"=C:\Program Files\HPQ\Default Settings\cpqset.exe [2004-10-13 229438] "HP OfficeJet T Series"=C:\Program Files\Hewlett-Packard\HP OfficeJet T Series\bin\ktchnsnk.exe -reg Software\Hewlett-Packard\OfficeJet T Series\Install [] "StatusClient 2.6"=C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe [2003-10-03 61440] "TomcatStartup 2.5"=C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe [2004-04-09 184320] "OrderReminder"=C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe [2006-04-28 98304] "HP Software Update"=C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [2003-12-05 49152] "NapsterShell"=C:\Program Files\Napster\napster.exe [2006-06-29 319488] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2006-10-30 256576] "EPSON PictureMate"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE [2003-09-19 99840] "Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2007-08-31 1838592] "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648] "UfSeAgnt.exe"=C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe [2008-07-29 1398024] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-13 1695232] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-07-07 68856] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-10-18 204288] "PhotoShow Deluxe Media Manager"=C:\PROGRA~1\Nero\data\xtras\mssysmgr.exe [2004-11-11 212992] C:\Documents and Settings\All Users\Start Menu\Programs\Startup Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\WINDOWS\system32\igfxsrvc.dll [2004-06-17 344064] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WRNotifier] WRLogonNTF.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=msapsspc.dll schannel.dll digest.dll msnsspc.dll [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\WinAntiVirus Pro 2007\AVupd.exe"="C:\Program Files\WinAntiVirus Pro 2007\AVupd.exe:*:Enabled:avupd.exe" "C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe"="C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe:*:Enabled:javaw" "C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer" "C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{773821a6-4cfe-11dc-99d2-00c09f829417}] shell\AutoRun\command - notepad.exe File associations .scr - open - "%1" %* List of files/folders created in the last three months 2008-09-01 19:58:19 ----D---- C:\rsit 2008-09-01 17:58:40 ----D---- C:\WINDOWS\ERUNT 2008-09-01 17:55:48 ----A---- C:\WINDOWS\ntbtlog.txt 2008-09-01 17:46:01 ----D---- C:\SDFix 2008-08-31 11:21:11 ----D---- C:\Program Files\CCleaner 2008-08-28 18:45:12 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2008-08-28 18:45:12 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-08-28 12:05:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$ 2008-08-23 12:11:17 ----A---- C:\WINDOWS\DCEBoot.exe 2008-08-23 12:02:42 ----D---- C:\WINDOWS\Prefetch 2008-08-23 11:37:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$ 2008-08-23 11:36:49 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$ 2008-08-23 11:36:35 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$ 2008-08-23 11:36:23 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$ 2008-08-23 11:36:11 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$ 2008-08-23 11:36:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$ 2008-08-23 11:35:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$ 2008-08-23 11:35:35 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$ 2008-08-23 11:35:24 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$ 2008-08-23 11:35:11 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$ 2008-08-23 11:27:59 ----D---- C:\WINDOWS\system32\scripting 2008-08-23 11:27:58 ----D---- C:\WINDOWS\l2schemas 2008-08-23 11:27:56 ----D---- C:\WINDOWS\system32\en 2008-08-23 11:27:55 ----D---- C:\WINDOWS\system32\bits 2008-08-23 11:21:36 ----D---- C:\WINDOWS\ServicePackFiles 2008-08-23 11:09:17 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$ 2008-08-23 11:09:09 ----D---- C:\WINDOWS\EHome 2008-08-21 20:03:19 ----N---- C:\WINDOWS\system32\wmphoto.dll 2008-08-21 20:03:14 ----N---- C:\WINDOWS\system32\wlanapi.dll 2008-08-21 20:03:11 ----N---- C:\WINDOWS\system32\windowscodecsext.dll 2008-08-21 20:03:11 ----N---- C:\WINDOWS\system32\windowscodecs.dll 2008-08-21 20:02:47 ----N---- C:\WINDOWS\system32\tspkg.dll 2008-08-21 20:02:47 ----N---- C:\WINDOWS\system32\tsgqec.dll 2008-08-21 20:02:32 ----N---- C:\WINDOWS\system32\spupdwxp.exe 2008-08-21 20:02:30 ----A---- C:\WINDOWS\system32\spdwnwxp.exe 2008-08-21 20:02:23 ----N---- C:\WINDOWS\system32\slserv.exe 2008-08-21 20:02:23 ----N---- C:\WINDOWS\system32\slrundll.exe 2008-08-21 20:02:23 ----N---- C:\WINDOWS\system32\slgen.dll 2008-08-21 20:02:23 ----N---- C:\WINDOWS\system32\slextspk.dll 2008-08-21 20:02:23 ----N---- C:\WINDOWS\system32\slcoinst.dll 2008-08-21 20:02:23 ----N---- C:\WINDOWS\slrundll.exe 2008-08-21 20:02:14 ----N---- C:\WINDOWS\system32\setupn.exe 2008-08-21 20:02:09 ----N---- C:\WINDOWS\system32\s3gnb.dll 2008-08-21 20:02:04 ----N---- C:\WINDOWS\system32\rhttpaa.dll 2008-08-21 20:02:01 ----N---- C:\WINDOWS\system32\rasqec.dll 2008-08-21 20:01:58 ----N---- C:\WINDOWS\system32\qutil.dll 2008-08-21 20:01:50 ----N---- C:\WINDOWS\system32\qcliprov.dll 2008-08-21 20:01:49 ----N---- C:\WINDOWS\system32\qagentrt.dll 2008-08-21 20:01:49 ----N---- C:\WINDOWS\system32\qagent.dll 2008-08-21 20:01:40 ----N---- C:\WINDOWS\system32\photometadatahandler.dll 2008-08-21 20:01:34 ----N---- C:\WINDOWS\system32\onex.dll 2008-08-21 20:01:28 ----N---- C:\WINDOWS\system32\nv4_disp.dll 2008-08-21 20:01:13 ----N---- C:\WINDOWS\system32\napstat.exe 2008-08-21 20:01:13 ----N---- C:\WINDOWS\system32\napmontr.dll 2008-08-21 20:01:13 ----N---- C:\WINDOWS\system32\napipsec.dll 2008-08-21 20:01:12 ----N---- C:\WINDOWS\system32\mtxparhd.dll 2008-08-21 20:01:11 ----N---- C:\WINDOWS\system32\msxml6r.dll 2008-08-21 20:01:11 ----N---- C:\WINDOWS\system32\msxml6.dll 2008-08-21 20:01:06 ----N---- C:\WINDOWS\system32\msshavmsg.dll 2008-08-21 20:01:06 ----N---- C:\WINDOWS\system32\mssha.dll 2008-08-21 20:00:34 ----N---- C:\WINDOWS\system32\mmcperf.exe 2008-08-21 20:00:33 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll 2008-08-21 20:00:33 ----N---- C:\WINDOWS\system32\mmcex.dll 2008-08-21 20:00:32 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll 2008-08-21 19:59:58 ----N---- C:\WINDOWS\system32\l2gpstore.dll 2008-08-21 19:59:56 ----N---- C:\WINDOWS\system32\kmsvc.dll 2008-08-21 19:59:52 ----N---- C:\WINDOWS\system32\kbdpash.dll 2008-08-21 19:59:52 ----N---- C:\WINDOWS\system32\kbdnepr.dll 2008-08-21 19:59:51 ----N---- C:\WINDOWS\system32\kbdiultn.dll 2008-08-21 19:59:51 ----N---- C:\WINDOWS\system32\kbdbhc.dll 2008-08-21 19:59:23 ----N---- C:\WINDOWS\system32\hsfcisp2.dll 2008-08-21 19:59:08 ----A---- C:\WINDOWS\002731_.tmp 2008-08-21 19:59:07 ----N---- C:\WINDOWS\system32\faxpatch.exe 2008-08-21 19:58:59 ----N---- C:\WINDOWS\system32\eapsvc.dll 2008-08-21 19:58:59 ----N---- C:\WINDOWS\system32\eapqec.dll 2008-08-21 19:58:59 ----N---- C:\WINDOWS\system32\eappprxy.dll 2008-08-21 19:58:59 ----N---- C:\WINDOWS\system32\eapphost.dll 2008-08-21 19:58:59 ----N---- C:\WINDOWS\system32\eappgnui.dll 2008-08-21 19:58:58 ----N---- C:\WINDOWS\system32\eappcfg.dll 2008-08-21 19:58:58 ----N---- C:\WINDOWS\system32\eapp3hst.dll 2008-08-21 19:58:58 ----N---- C:\WINDOWS\system32\eapolqec.dll 2008-08-21 19:58:50 ----N---- C:\WINDOWS\system32\dot3ui.dll 2008-08-21 19:58:50 ----N---- C:\WINDOWS\system32\dot3svc.dll 2008-08-21 19:58:50 ----N---- C:\WINDOWS\system32\dot3msm.dll 2008-08-21 19:58:50 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll 2008-08-21 19:58:50 ----N---- C:\WINDOWS\system32\dot3dlg.dll 2008-08-21 19:58:50 ----N---- C:\WINDOWS\system32\dot3cfg.dll 2008-08-21 19:58:50 ----N---- C:\WINDOWS\system32\dot3api.dll 2008-08-21 19:58:47 ----N---- C:\WINDOWS\system32\dimsroam.dll 2008-08-21 19:58:47 ----N---- C:\WINDOWS\system32\dimsntfy.dll 2008-08-21 19:58:44 ----N---- C:\WINDOWS\system32\dhcpqec.dll 2008-08-21 19:58:36 ----N---- C:\WINDOWS\system32\credssp.dll 2008-08-21 19:58:22 ----N---- C:\WINDOWS\system32\bitsprx4.dll 2008-08-21 19:58:21 ----N---- C:\WINDOWS\system32\azroles.dll 2008-08-21 19:58:19 ----N---- C:\WINDOWS\system32\ativvaxx.dll 2008-08-21 19:58:18 ----N---- C:\WINDOWS\system32\ativtmxx.dll 2008-08-21 19:58:17 ----N---- C:\WINDOWS\system32\ati3duag.dll 2008-08-21 19:58:14 ----N---- C:\WINDOWS\system32\ati3d1ag.dll 2008-08-21 19:58:10 ----N---- C:\WINDOWS\system32\ati2dvag.dll 2008-08-21 19:58:09 ----N---- C:\WINDOWS\system32\ati2dvaa.dll 2008-08-21 19:58:09 ----N---- C:\WINDOWS\system32\ati2cqag.dll 2008-08-21 19:57:50 ----N---- C:\WINDOWS\system32\aaclient.dll 2008-08-20 18:44:19 ----D---- C:\Documents and Settings\All Users\Application Data\Trend Micro 2008-08-13 22:25:33 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$ 2008-08-13 22:25:27 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$ 2008-08-13 22:25:19 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$ 2008-08-13 22:25:08 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$ 2008-08-13 22:22:35 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$ 2008-08-13 22:22:25 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$ 2008-08-13 22:21:38 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$ 2008-07-10 16:34:57 ----D---- C:\Program Files\Sun 2008-07-10 16:34:33 ----A---- C:\WINDOWS\system32\javaws.exe 2008-07-10 16:34:33 ----A---- C:\WINDOWS\system32\javaw.exe 2008-07-10 16:34:33 ----A---- C:\WINDOWS\system32\java.exe 2008-07-10 16:28:55 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$ 2008-06-21 17:46:11 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$ 2008-06-13 19:15:18 ----HDC---- C:\WINDOWS\$NtUninstallKB951698_0$ 2008-06-11 07:39:09 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$ 2008-06-11 07:39:03 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$ 2008-06-11 07:38:52 ----HDC---- C:\WINDOWS\$NtUninstallKB951376_0$ List of drivers R1 Cdr4_xp;Cdr4_xp; C:\WINDOWS\system32\drivers\Cdr4_xp.sys [2005-09-07 44288] R1 Cdralw2k;Cdralw2k; C:\WINDOWS\system32\drivers\Cdralw2k.sys [2005-09-07 24960] R1 eabfiltr;EABFiltr; \??\C:\WINDOWS\system32\drivers\EABFiltr.sys [] R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352] R1 tmtdi;Trend Micro TDI Driver; C:\WINDOWS\system32\DRIVERS\tmtdi.sys [2008-02-15 65936] R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832] R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2003-04-09 11043] R2 tmactmon;tmactmon; \??\C:\WINDOWS\system32\drivers\tmactmon.sys [] R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys [] R2 tmevtmgr;tmevtmgr; \??\C:\WINDOWS\system32\drivers\tmevtmgr.sys [] R2 tmpreflt;tmpreflt; C:\WINDOWS\system32\DRIVERS\tmpreflt.sys [2008-07-18 36368] R2 tmxpflt;tmxpflt; C:\WINDOWS\system32\DRIVERS\tmxpflt.sys [2008-07-18 205328] R2 vsapint;vsapint; C:\WINDOWS\system32\DRIVERS\vsapint.sys [2008-07-18 1195448] R3 CAMCAUD;Conexant AMC 3D Environmental Audio; C:\WINDOWS\system32\drivers\camcaud.sys [2004-10-14 292864] R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camchal.sys [2004-10-14 276480] R3 catchme;catchme; \??\C:\DOCUME~1\Robbie\LOCALS~1\Temp\catchme.sys [] R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952] R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664] R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-03-10 1041536] R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2004-03-10 199552] R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2004-06-17 708989] R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160] R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-06-28 69760] R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232] R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-10-05 185824] R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2004-11-08 85504] R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] R3 w29n51;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2004-09-20 3210496] R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-03-10 682624] S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592] S1 vspf;vspf; \??\C:\WINDOWS\system32\drivers\vspf5.sys [] S1 vspf_hk;vspf_hk; \??\C:\WINDOWS\system32\drivers\vspf_hk5.sys [] S1 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2008-04-13 31744] S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] S3 Dot4;MS IEEE-1284.4 Driver; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2008-04-13 206976] S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2001-08-17 23808] S3 eabusb;eabusb; \??\C:\WINDOWS\system32\drivers\eabusb.sys [] S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] S3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584] S3 SMCIRDA;SMC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2001-08-17 35913] S3 StillCam;Still Serial Digital Camera Driver; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-08-17 6784] S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] List of services R2 AdobeActiveFileMonitor;Adobe Active File Monitor; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-04 98304] R2 PhotoshopElementsDeviceConnect;Photoshop Elements Device Connect; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe [2004-10-04 118784] R2 SfCtlCom;Trend Micro Central Control Component; C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe [2008-07-29 698888] R2 TMBMServer;Trend Micro Unauthorized Change Prevention Service; C:\Program Files\Trend Micro\BM\TMBMSRV.exe [2007-12-24 333064] R2 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408] R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336] R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2006-10-30 492608] R3 tmproxy;Trend Micro Proxy Service; C:\Program Files\Trend Micro\Internet Security\TmProxy.exe [2008-02-26 648456] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768] S3 GoogleDesktopManager;GoogleDesktopManager; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2007-08-31 1838592] S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-31 138168] S3 hpqwmi;HP WMI Interface; C:\Program Files\HPQ\SHARED\HPQWMI.exe [2004-07-27 98304] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\hpzipm12.exe [2003-10-22 65536] -----------------EOF-----------------