Logfile of random's system information tool 1.05 (written by random/random)
Run by [removed] at 2009-02-26 12:46:36
Microsoft Windows XP Professional Service Pack 3
System drive C: has 72 GB (69%) free of 104 GB
Total RAM: 2039 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:47:19 PM, on 2/26/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\lotus\notes\ntmulti.exe
C:\Program Files\PDF Complete\pdfsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe
C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\PDF Complete\pdfsty.exe
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\SMINST\Scheduler.exe
C:\WINDOWS\system32\AccelerometerSt.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\tempo\RSIT.exe
C:\tempo\Administrator.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=74&bd=smb&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [PDF Complete] "C:\Program Files\PDF Complete\pdfsty.exe"
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\WINDOWS\system32\AccelerometerSt.exe
O4 - HKLM\..\Run: [HPWWANGSAssistant] c:\SWSetup\HPQWWAN\HPWWanGSAssistant.exe /TrayMode
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = houston.foxconn.com
O17 - HKLM\Software\..\Telephony: DomainName = houston.foxconn.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = houston.foxconn.com
O20 - AppInit_DLLs: APSHook.dll
O20 - Winlogon Notify: OneCard - C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Drive Encryption Service (HpFkCryptService) - SafeBoot International - c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: Sony SPTI Service for DVE (ICDSPTSV) - Sony Corporation - C:\WINDOWS\system32\IcdSptSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\Program Files\lotus\notes\ntmulti.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Symantec Management Client (SmcService) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
O23 - Service: Symantec Network Access Control (SNAC) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SWIHPWMI - Sierra Wireless Inc. - C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe
O23 - Service: Symantec Endpoint Protection (Symantec AntiVirus) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

--
End of file - 10452 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-02-06 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-02-06 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
Credential Manager for HP ProtectTools - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll [2006-11-21 71192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-02-06 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MsmqIntCert"=regsvr32 /s mqrt.dll []
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2007-01-05 872448]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2006-07-13 729088]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2007-05-08 331552]
"PTHOSTTR"=C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [2007-01-09 145184]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-01-12 827392]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-05-18 138008]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-05-18 162584]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-05-18 138008]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-05-11 472632]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-02-06 136600]
"Recguard"=C:\WINDOWS\Sminst\Recguard.exe [2005-12-20 1187840]
"Reminder"=C:\WINDOWS\Creator\Remind_XP.exe [2006-03-09 806912]
"Scheduler"=C:\WINDOWS\SMINST\Scheduler.exe [2006-10-09 697976]
"Cpqset"=C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe [2007-05-03 57344]
"WatchDog"=C:\Program Files\InterVideo\DVD Check\DVDCheck.exe [2007-05-23 192512]
"AccelerometerSysTrayApplet"=C:\WINDOWS\system32\AccelerometerSt.exe [2007-01-24 124928]
"HPWWANGSAssistant"=c:\SWSetup\HPQWWAN\HPWWanGSAssistant.exe [2007-09-07 4162864]
"ccApp"=C:\Program Files\Common Files\Symantec Shared\ccApp.exe [2008-02-01 115560]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-01-05 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-01-06 290088]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2007-04-19 484904]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
DVD Check.lnk - C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="APSHook.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-05-16 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OneCard]
C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [2007-02-06 74240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 241704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=SbHpNp
scecli
ASWLNPkg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antvirus]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ccEvtMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ccSetMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmcService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Symantec Antivirus]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Symantec Antvirus]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=0
"undockwithoutlogon"=1
"disablecad"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\mqsvc.exe"="C:\WINDOWS\system32\mqsvc.exe:*:Enabled:Message Queuing"
"C:\WINDOWS\SMINST\Scheduler.exe"="C:\WINDOWS\SMINST\Scheduler.exe:*:Enabled:Scheduler "
"C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe"="C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe:*:Enabled:SMC Service"
"C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE"="C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE:*:Enabled:SNAC Service"
"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe:*:Enabled:Symantec Email"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\WINDOWS\system32\mqsvc.exe"="C:\WINDOWS\system32\mqsvc.exe:*:Disabled:Message Queuing"
"C:\WINDOWS\Network Diagnostic\xpnetdiag.exe"="C:\WINDOWS\Network Diagnostic\xpnetdiag.exe:*:Disabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
shell\AutoRun\command - F:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{04f3eed8-f9f3-11dd-8b7b-00215c06936d}]
shell\AutoRun\command - F:\LaunchU3.exe -a


======List of files/folders created in the last 1 months======

2009-02-26 12:46:36 ----D---- C:\rsit
2009-02-26 12:34:42 ----D---- C:\WINDOWS\ERUNT
2009-02-26 12:33:15 ----A---- C:\WINDOWS\ntbtlog.txt
2009-02-26 12:31:00 ----D---- C:\SDFix
2009-02-26 10:17:28 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-02-26 10:17:21 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-02-26 10:17:03 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-02-24 09:34:05 ----A---- C:\WINDOWS\system32\ZTAG.DLL
2009-02-24 09:34:04 ----A---- C:\WINDOWS\system32\ZSPOOL.DLL
2009-02-24 09:34:04 ----A---- C:\WINDOWS\system32\zSHP2600.EXE
2009-02-24 09:34:03 ----A---- C:\WINDOWS\system32\ZLHP2600.DLL
2009-02-24 09:34:02 ----A---- C:\WINDOWS\system32\zIMF.DLL
2009-02-24 09:34:02 ----A---- C:\WINDOWS\system32\ZHHP2600.EXE
2009-02-24 09:34:01 ----A---- C:\WINDOWS\system32\ZHHP_RES.DLL
2009-02-24 09:33:57 ----A---- C:\WINDOWS\system32\AGISSI.DLL
2009-02-24 08:35:58 ----HD---- C:\_rpcs
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\TrackID.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\TIFmtA.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\TIBase64.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\rpcsecl.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\RPCS.ini
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\RICJC32.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\RICDB32.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\rdrvlog.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\rdrvinf.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\RCPRINT.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\RCINST.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\RC5AE140.DLL
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\Rc4manNT.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\RC00C140.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\MP500dat.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\MFRICRES.dll
2009-02-24 08:35:58 ----A---- C:\WINDOWS\system32\JCUI.exe
2009-02-24 08:35:58 ----A---- C:\WINDOWS\ricdb.ini
2009-02-24 08:35:45 ----A---- C:\WINDOWS\system32\rc4mon.dll
2009-02-23 15:11:25 ----D---- C:\WINDOWS\pss
2009-02-17 11:20:14 ----D---- C:\Documents and Settings\Administrator\Application Data\WinRAR
2009-02-17 11:19:23 ----D---- C:\tempo
2009-02-14 01:57:56 ----N---- C:\WINDOWS\snymsico.dll
2009-02-14 01:57:22 ----A---- C:\WINDOWS\system32\StrmOut.dll
2009-02-14 01:57:22 ----A---- C:\WINDOWS\system32\IcdYsys.dll
2009-02-14 01:57:22 ----A---- C:\WINDOWS\system32\IcdSptSvps.dll
2009-02-14 01:57:22 ----A---- C:\WINDOWS\system32\IcdSptSv.exe
2009-02-14 01:57:22 ----A---- C:\WINDOWS\system32\ICDFConv.dll
2009-02-14 01:57:22 ----A---- C:\WINDOWS\system32\DSConv.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\spicc.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\spc.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\rcnv2.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\LPEC.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\IcdXa.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\ICDUSB2.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\ICDUSB.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\IcdStor2.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\IcdSpi.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\IcdShlex.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\IcdShare.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\IcdSConv.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\IcdMSCom.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\icdcomm3.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\icdcomm2.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\icdcomm.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\IcdCdda.dll
2009-02-14 01:57:21 ----A---- C:\WINDOWS\system32\dsp_trc.dll
2009-02-14 01:56:36 ----D---- C:\Program Files\SONY
2009-02-13 11:23:32 ----D---- C:\Documents and Settings\Administrator\Application Data\U3
2009-02-12 11:17:41 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-02-09 11:15:06 ----D---- C:\Documents and Settings\Administrator\Application Data\Malwarebytes
2009-02-09 11:15:00 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-02-09 11:15:00 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-02-06 23:22:24 ----A---- C:\WINDOWS\unvise32.exe
2009-02-06 23:17:13 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-02-06 23:14:26 ----D---- C:\Program Files\Common Files\Adobe AIR
2009-02-06 23:13:58 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-02-06 23:13:53 ----D---- C:\Program Files\Common Files\Adobe
2009-02-06 23:13:53 ----D---- C:\Program Files\Adobe
2009-02-06 23:08:55 ----D---- C:\Documents and Settings\Administrator\Application Data\Apple Computer
2009-02-06 23:08:50 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2009-02-06 23:08:41 ----D---- C:\Program Files\iPod
2009-02-06 23:08:40 ----D---- C:\Program Files\iTunes
2009-02-06 23:08:40 ----D---- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-02-06 23:08:30 ----D---- C:\Program Files\Bonjour
2009-02-06 23:08:09 ----D---- C:\Program Files\QuickTime
2009-02-06 23:08:08 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-02-06 23:07:59 ----D---- C:\Program Files\Apple Software Update
2009-02-06 23:07:42 ----D---- C:\Program Files\Common Files\Apple
2009-02-06 23:07:42 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2009-02-06 22:22:29 ----D---- C:\Program Files\NOS
2009-02-05 23:06:50 ----D---- C:\WINDOWS\Sun
2009-02-05 22:20:05 ----D---- C:\Documents and Settings\Administrator\Application Data\Google
2009-02-05 22:19:18 ----D---- C:\Documents and Settings\Administrator\Application Data\Adobe
2009-02-05 22:16:41 ----D---- C:\Documents and Settings\Administrator\Application Data\Macromedia
2009-02-05 14:38:44 ----D---- C:\Documents and Settings\All Users\Application Data\LightScribe
2009-02-05 10:37:28 ----D---- C:\WINDOWS\ie7updates
2009-02-05 10:34:25 ----D---- C:\WINDOWS\system32\XPSViewer
2009-02-05 10:34:22 ----D---- C:\Program Files\MSBuild
2009-02-05 10:34:15 ----D---- C:\Program Files\Reference Assemblies
2009-02-05 10:33:49 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-02-05 10:33:49 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-02-05 10:33:49 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-02-05 10:33:48 ----D---- C:\3c10fd7fa45e45cf01d8535528
2009-02-04 16:08:04 ----D---- C:\Drivers_Programs
2009-02-04 13:38:11 ----HD---- C:\WINDOWS\PIF
2009-02-04 13:17:19 ----D---- C:\WINDOWS\system32\NtmsData
2009-02-04 09:48:00 ----A---- C:\nltest.exe
2009-02-03 17:20:06 ----D---- C:\WINDOWS\SchCache
2009-02-03 17:19:31 ----SHD---- C:\WINDOWS\CSC
2009-02-03 16:54:01 ----A---- C:\WINDOWS\system32\MRT.exe
2009-02-03 16:53:56 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-02-03 16:53:50 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-02-03 16:53:42 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-02-03 16:53:38 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$
2009-02-03 16:53:32 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-02-03 16:53:26 ----HDC---- C:\WINDOWS\$NtUninstallKB958215$
2009-02-03 16:53:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-02-03 16:53:14 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-02-03 16:53:08 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-02-03 16:53:02 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-02-03 16:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-02-03 16:52:42 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-02-03 16:52:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2009-02-03 16:52:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2009-02-03 16:52:19 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2009-02-03 16:51:57 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-02-03 16:51:55 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2009-02-03 16:51:49 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-02-03 16:51:43 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-02-03 16:51:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-02-03 16:51:33 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-02-03 16:51:27 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-02-03 16:51:22 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-02-03 16:51:07 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2009-02-03 16:50:54 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-02-03 16:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-02-03 16:50:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-02-03 16:50:27 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2009-02-03 16:50:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-02-03 16:50:16 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-02-03 16:49:59 ----D---- C:\WINDOWS\WBEM
2009-02-03 16:49:39 ----HDC---- C:\WINDOWS\ie7
2009-02-03 16:49:26 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2009-02-03 16:49:12 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2009-02-03 16:48:06 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-02-03 16:27:26 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-02-03 16:24:49 ----D---- C:\WINDOWS\system32\PreInstall
2009-02-03 16:24:47 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-02-03 16:22:17 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-02-03 16:18:19 ----HD---- C:\WINDOWS\system32\GroupPolicy
2009-02-03 15:53:50 ----D---- C:\WINDOWS\Prefetch
2009-02-03 15:48:31 ----N---- C:\WINDOWS\system32\smtpapi.dll
2009-02-03 15:48:31 ----N---- C:\WINDOWS\system32\rwnh.dll
2009-02-03 15:48:31 ----N---- C:\WINDOWS\system32\comsdupd.exe
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\eapsvc.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\eapqec.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\eappprxy.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\eapphost.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\eappgnui.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\eappcfg.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\eapolqec.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\dot3ui.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\dot3svc.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\dot3msm.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\dot3api.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\dimsroam.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\credssp.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\azroles.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\ati3duag.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2009-02-03 15:48:27 ----N---- C:\WINDOWS\system32\aaclient.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\napipsec.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\mssha.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\mmcperf.exe
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\mmcex.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\kmsvc.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\kbdpash.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2009-02-03 15:48:26 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\slcoinst.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\setupn.exe
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\s3gnb.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\rasqec.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\qutil.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\qcliprov.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\qagentrt.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\qagent.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\onex.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\napstat.exe
2009-02-03 15:48:25 ----N---- C:\WINDOWS\system32\napmontr.dll
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\wmphoto.dll
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\wlanapi.dll
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\verclsid.exe
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\tspkg.dll
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\tsgqec.dll
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\slserv.exe
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\slrundll.exe
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\slgen.dll
2009-02-03 15:48:24 ----N---- C:\WINDOWS\system32\slextspk.dll
2009-02-03 15:48:23 ----N---- C:\WINDOWS\system32\xmllite.dll
2009-02-03 15:48:23 ----N---- C:\WINDOWS\slrundll.exe
2009-02-03 15:48:23 ----D---- C:\WINDOWS\system32\en-us
2009-02-03 15:48:22 ----D---- C:\WINDOWS\system32\scripting
2009-02-03 15:48:22 ----D---- C:\WINDOWS\l2schemas
2009-02-03 15:48:21 ----D---- C:\WINDOWS\system32\en
2009-02-03 15:48:21 ----D---- C:\WINDOWS\system32\bits
2009-02-03 15:47:18 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2009-02-03 15:46:36 ----D---- C:\Program Files\Symantec
2009-02-03 15:46:30 ----D---- C:\Program Files\WinRAR
2009-02-03 15:45:46 ----D---- C:\WINDOWS\ServicePackFiles
2009-02-03 15:44:56 ----D---- C:\WINDOWS\network diagnostic
2009-02-03 15:44:24 ----A---- C:\WINDOWS\002830_.tmp
2009-02-03 15:43:54 ----A---- C:\WINDOWS\ODBC.INI
2009-02-03 15:43:51 ----A---- C:\WINDOWS\system32\mdimon.dll
2009-02-03 15:43:21 ----D---- C:\Program Files\Microsoft ActiveSync
2009-02-03 15:43:17 ----D---- C:\Program Files\Common Files\DESIGNER
2009-02-03 15:43:10 ----D---- C:\WINDOWS\SHELLNEW
2009-02-03 15:43:10 ----D---- C:\Program Files\Microsoft.NET
2009-02-03 15:43:10 ----D---- C:\Program Files\Microsoft Office
2009-02-03 15:41:44 ----RHD---- C:\MSOCache
2009-02-03 15:39:52 ----D---- C:\Program Files\lotus
2009-02-03 15:07:12 ----D---- C:\WINDOWS\system32\appmgmt
2009-02-03 14:33:03 ----HDC---- C:\WINDOWS\$NtUninstallKB914642$
2009-02-03 14:32:20 ----D---- C:\Program Files\WIDCOMM
2009-02-03 14:32:09 ----A---- C:\WINDOWS\system32\accelerometerST.exe
2009-02-03 14:32:09 ----A---- C:\WINDOWS\system32\accelerometerdll.DLL
2009-02-03 14:31:39 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-02-03 14:31:10 ----D---- C:\Documents and Settings\All Users\Application Data\InstallShield
2009-02-03 14:30:47 ----D---- C:\Program Files\Macrovision Corp
2009-02-03 14:30:42 ----A---- C:\WINDOWS\system32\IVIresizeW7.dll
2009-02-03 14:30:42 ----A---- C:\WINDOWS\system32\IVIresizePX.dll
2009-02-03 14:30:42 ----A---- C:\WINDOWS\system32\IVIresizeP6.dll
2009-02-03 14:30:42 ----A---- C:\WINDOWS\system32\IVIresizeM6.dll
2009-02-03 14:30:42 ----A---- C:\WINDOWS\system32\IVIresizeA6.dll
2009-02-03 14:30:42 ----A---- C:\WINDOWS\system32\IVIresize.dll
2009-02-03 14:30:23 ----D---- C:\Program Files\Common Files\InterVideo
2009-02-03 14:30:11 ----D---- C:\Program Files\InterVideo
2009-02-03 14:26:33 ----D---- C:\Program Files\Program Shortcuts
2009-02-03 14:21:12 ----A---- C:\WINDOWS\system32\Thawbrkr.dll
2009-02-03 14:21:12 ----A---- C:\WINDOWS\system32\kbdusa.dll
2009-02-03 14:21:12 ----A---- C:\WINDOWS\system32\c_iscii.dll
2009-02-03 14:21:11 ----A---- C:\WINDOWS\system32\ftlx041e.dll

======List of files/folders modified in the last 1 months======

2009-02-26 12:45:17 ----D---- C:\WINDOWS\system32
2009-02-26 12:45:17 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-02-26 12:43:29 ----D---- C:\WINDOWS\Temp
2009-02-26 12:43:27 ----D---- C:\WINDOWS\SMINST
2009-02-26 12:35:42 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-02-26 12:34:42 ----D---- C:\WINDOWS
2009-02-26 12:32:33 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-02-26 10:21:11 ----D---- C:\WINDOWS\system32\CatRoot2
2009-02-26 10:17:45 ----HD---- C:\WINDOWS\inf
2009-02-26 10:17:44 ----D---- C:\WINDOWS\system32\CatRoot
2009-02-26 10:17:26 ----A---- C:\WINDOWS\imsins.BAK
2009-02-26 10:17:16 ----HD---- C:\WINDOWS\$hf_mig$
2009-02-26 09:46:43 ----D---- C:\WINDOWS\security
2009-02-25 09:48:14 ----D---- C:\WINDOWS\system32\drivers
2009-02-24 11:44:52 ----RD---- C:\Program Files
2009-02-14 01:57:55 ----HD---- C:\Program Files\InstallShield Installation Information
2009-02-13 11:33:30 ----SHD---- C:\WINDOWS\Installer
2009-02-12 11:19:14 ----D---- C:\Program Files\Internet Explorer
2009-02-09 23:25:36 ----SD---- C:\Documents and Settings\Administrator\Application Data\Microsoft
2009-02-06 23:17:07 ----A---- C:\WINDOWS\system32\javaws.exe
2009-02-06 23:17:07 ----A---- C:\WINDOWS\system32\javaw.exe
2009-02-06 23:17:07 ----A---- C:\WINDOWS\system32\java.exe
2009-02-06 23:17:04 ----D---- C:\Program Files\Java
2009-02-06 23:14:26 ----D---- C:\Program Files\Common Files
2009-02-06 23:08:50 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-02-06 23:08:00 ----SD---- C:\WINDOWS\Tasks
2009-02-06 21:38:12 ----A---- C:\WINDOWS\win.ini
2009-02-06 21:31:49 ----D---- C:\WINDOWS\system32\Macromed
2009-02-05 22:19:06 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-02-05 10:48:09 ----RSD---- C:\WINDOWS\assembly
2009-02-05 10:47:49 ----D---- C:\WINDOWS\Microsoft.NET
2009-02-05 10:36:24 ----D---- C:\WINDOWS\WinSxS
2009-02-05 10:34:20 ----RSD---- C:\WINDOWS\Fonts
2009-02-05 10:34:04 ----D---- C:\WINDOWS\system32\spool
2009-02-05 10:30:21 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-02-04 16:30:15 ----D---- C:\Documents and Settings
2009-02-04 13:37:41 ----SHD---- C:\RECYCLER
2009-02-04 13:17:19 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-02-03 19:04:58 ----D---- C:\WINDOWS\system32\LogFiles
2009-02-03 17:17:25 ----SHD---- C:\System Volume Information
2009-02-03 17:17:24 ----D---- C:\WINDOWS\system32\config
2009-02-03 17:17:24 ----D---- C:\WINDOWS\Debug
2009-02-03 17:11:16 ----D---- C:\WINDOWS\Help
2009-02-03 16:51:35 ----D---- C:\Program Files\Messenger
2009-02-03 16:49:53 ----D---- C:\WINDOWS\Media
2009-02-03 16:22:55 ----D---- C:\WINDOWS\SoftwareDistribution
2009-02-03 15:57:08 ----A---- C:\WINDOWS\OEWABLog.txt
2009-02-03 15:56:48 ----A---- C:\WINDOWS\setuplog.txt
2009-02-03 15:53:05 ----D---- C:\WINDOWS\system32\Setup
2009-02-03 15:53:05 ----D---- C:\WINDOWS\AppPatch
2009-02-03 15:53:04 ----D---- C:\WINDOWS\system32\wbem
2009-02-03 15:48:31 ----D---- C:\WINDOWS\system32\inetsrv
2009-02-03 15:48:29 ----D---- C:\WINDOWS\ime
2009-02-03 15:48:24 ----D---- C:\Program Files\Common Files\Symantec Shared
2009-02-03 15:48:23 ----D---- C:\WINDOWS\system32\usmt
2009-02-03 15:48:21 ----D---- C:\WINDOWS\PeerNet
2009-02-03 15:48:21 ----D---- C:\Program Files\Movie Maker
2009-02-03 15:48:10 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-02-03 15:45:40 ----D---- C:\WINDOWS\system32\Restore
2009-02-03 15:45:40 ----D---- C:\WINDOWS\system32\npp
2009-02-03 15:45:40 ----D---- C:\WINDOWS\mui
2009-02-03 15:45:39 ----D---- C:\WINDOWS\msagent
2009-02-03 15:45:38 ----D---- C:\WINDOWS\srchasst
2009-02-03 15:45:37 ----D---- C:\WINDOWS\system32\Com
2009-02-03 15:45:37 ----D---- C:\Program Files\NetMeeting
2009-02-03 15:45:36 ----D---- C:\Program Files\Windows NT
2009-02-03 15:45:36 ----D---- C:\Program Files\Windows Media Player
2009-02-03 15:45:36 ----D---- C:\Program Files\Outlook Express
2009-02-03 15:45:35 ----D---- C:\Program Files\Common Files\System
2009-02-03 15:45:31 ----D---- C:\WINDOWS\system32\oobe
2009-02-03 15:45:30 ----D---- C:\WINDOWS\system
2009-02-03 15:44:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-02-03 15:43:08 ----D---- C:\WINDOWS\ehome
2009-02-03 15:26:56 ----D---- C:\Program Files\Hewlett-Packard
2009-02-03 15:14:10 ----D---- C:\Program Files\HPQ
2009-02-03 15:03:59 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-02-03 14:35:04 ----HD---- C:\System.sav
2009-02-03 14:35:04 ----AD---- C:\SwSetup
2009-02-03 14:30:47 ----D---- C:\Program Files\Common Files\InstallShield
2009-02-03 14:26:37 ----RASH---- C:\boot.ini
2009-02-03 14:25:31 ----D---- C:\WINDOWS\Registration

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 RsvLock;RsvLock; C:\WINDOWS\system32\drivers\RsvLock.sys [2007-04-22 5808]
R1 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys []
R1 SRTSP;SRTSP; C:\WINDOWS\System32\Drivers\SRTSP.SYS [2008-03-21 279088]
R1 SRTSPX;SRTSPX; C:\WINDOWS\System32\Drivers\SRTSPX.SYS [2008-03-21 43696]
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2007-10-30 191536]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R3 Accelerometer;Accelerometer; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2006-07-24 22016]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-01-09 288768]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-07 93952]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2007-05-06 1160320]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ATSWPDRV;(****DEBUG****) AuthenTec TruePrint USB Driver (SwipeSensor); C:\WINDOWS\system32\DRIVERS\ATSwpDrv.sys [2007-04-10 140808]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2007-02-14 868298]
R3 catchme;catchme; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys []
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
R3 HBtnKey;HBtnKey; C:\WINDOWS\system32\DRIVERS\cpqbttn.sys [2005-09-19 9344]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-05-16 5707744]
R3 IFXTPM;IFXTPM; C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS [2006-09-19 36608]
R3 MQAC;Message Queuing access control; \??\C:\WINDOWS\system32\drivers\mqac.sys []
R3 NAVENG;NAVENG; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20090225.056\NAVENG.SYS []
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20090225.056\NAVEX15.SYS []
R3 NETw4x32;Intel(R) Wireless WiFi Link Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [2007-03-01 2203520]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 RMCAST;Reliable Multicast Protocol driver; \??\C:\WINDOWS\system32\drivers\RMCast.sys []
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2007-10-30 27696]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-01-12 201856]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 b57w2k;Broadcom NetLink (TM) Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2007-02-27 160256]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2007-02-14 67960]
S3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 HpqKbFiltr;HpqKbFilter Driver; C:\WINDOWS\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-10-21 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-10-21 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-10-21 21568]
S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
S3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
S3 SMCIRDA;SMC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2001-08-17 35913]
S3 SRTSPL;SRTSPL; C:\WINDOWS\System32\Drivers\SRTSPL.SYS [2008-03-21 317616]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 ASBroker;Logon Session Broker; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 ASChannel;Local Communication Channel; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2007-02-06 266295]
R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-01 108392]
R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2008-02-01 108392]
R2 HpFkCryptService;Drive Encryption Service; c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [2007-04-22 221184]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [2007-12-05 144688]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-02-06 152984]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-04-19 75304]
R2 MSMQ;Message Queuing; C:\WINDOWS\system32\mqsvc.exe [2008-04-14 4608]
R2 MSMQTriggers;Message Queuing Triggers; C:\WINDOWS\system32\mqtgsvc.exe [2008-04-14 117248]
R2 Multi-user Cleanup Service;Multi-user Cleanup Service; C:\Program Files\lotus\notes\ntmulti.exe [2007-03-07 57393]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2007-05-08 540448]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 SmcService;Symantec Management Client; C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe [2008-04-04 2475392]
R2 SWIHPWMI;SWIHPWMI; C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe [2006-12-04 292384]
R2 Symantec AntiVirus;Symantec Endpoint Protection; C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe [2008-04-04 2234296]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-01-06 536872]
S2 PCA;PC Angel; C:\WINDOWS\SMINST\PCAngel.exe [2006-01-12 294912]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 ICDSPTSV;Sony SPTI Service for DVE; C:\WINDOWS\system32\IcdSptSv.exe [2003-04-01 69632]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-08-11 3093872]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 RoxMediaDB9;RoxMediaDB9; c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2006-11-06 887544]
S3 SNAC;Symantec Network Access Control; C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE [2008-04-04 288136]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-11-01 73728]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 Microsoft Service Controler;Microsoft Service Controler; C:\WINDOWS\system32\services.exe [2008-04-14 108544]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------