Here is the awf report...after the report, I have posted another HJT report (I probably changed some stuff since running the first one).
Find AWF report by noahdfear ©2006
Version 1.40
The current date is: Thu 09/20/2007
The current time is: 10:45:55.22
bak folders found
~~~~~~~~~~~
Directory of C:\PROGRA~1\LEXMAR~1\BAK
02/21/2005 07:21 AM 192,512 lxccmon.exe
1 File(s) 192,512 bytes
Directory of C:\PROGRA~1\MESSEN~1\BAK
0 File(s) 0 bytes
Directory of C:\PROGRA~1\QUICKT~1\BAK
12/08/2006 12:43 PM 282,624 qttask.exe
1 File(s) 282,624 bytes
Directory of C:\PROGRA~1\SYMANT~1\BAK
06/23/2005 07:27 PM 85,696 VPTray.exe
1 File(s) 85,696 bytes
Directory of C:\WINDOWS\SYSTEM32\BAK
07/09/2001 11:50 AM 155,648 NeroCheck.exe
1 File(s) 155,648 bytes
Directory of C:\PROGRA~1\ALTIRIS\ALTIRI~1\BAK
01/05/2006 08:59 PM 139,264 AeXAgentActivate.exe
1 File(s) 139,264 bytes
Directory of C:\PROGRA~1\COMMON~1\SYMANT~1\BAK
06/02/2005 09:21 AM 48,752 ccApp.exe
1 File(s) 48,752 bytes
Directory of C:\PROGRA~1\GOOGLE\GOOGLE~2\BAK
06/05/2007 07:13 PM 68,856 GoogleToolbarNotifier.exe
1 File(s) 68,856 bytes
Directory of C:\PROGRA~1\MYSPACE\IM\BAK
08/13/2007 07:04 PM 5,562,368 MySpaceIM.exe
1 File(s) 5,562,368 bytes
Directory of C:\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK
06/11/2007 06:52 AM 185,896 realsched.exe
1 File(s) 185,896 bytes
Directory of C:\ADS2005A\EXAMPLES\RF_BOARD\CELLUL~1\MOM_DSN\PAMP_BAK
0 File(s) 0 bytes
Directory of C:\ADS2005A\ADSPTO~1\SRC\GSL\STLPORT\BC50\BAK
04/30/2004 12:46 PM 354 stddef.h
04/30/2004 12:46 PM 275 stdlib.h
2 File(s) 629 bytes
Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~
24080 Aug 29 2007 "C:\Program Files\Lexmark 3300 Series\lxccmon.exe"
192512 Feb 21 2005 "C:\Program Files\Lexmark 3300 Series\bak\lxccmon.exe"
24080 Aug 29 2007 "C:\Program Files\QuickTime\qttask.exe"
282624 Dec 8 2006 "C:\Program Files\QuickTime\bak\qttask.exe"
24080 Aug 29 2007 "C:\Program Files\Symantec AntiVirus\VPTray.exe"
85696 Jun 23 2005 "C:\Program Files\Symantec AntiVirus\bak\VPTray.exe"
24080 Aug 29 2007 "C:\WINDOWS\system32\NeroCheck.exe"
155648 Jul 9 2001 "C:\WINDOWS\system32\bak\NeroCheck.exe"
24080 Aug 29 2007 "C:\Program Files\Altiris\Altiris Agent\AeXAgentActivate.exe"
139264 Jan 5 2006 "C:\Program Files\Altiris\Altiris Agent\bak\AeXAgentActivate.exe"
24080 Aug 29 2007 "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
48752 Jun 2 2005 "C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe"
52272 Jan 27 2007 "C:\Program Files\Google\googletoolbar1user.exe"
69632 Sep 12 2007 "C:\Program Files\Google\Google Earth\googleearth.exe"
24080 Aug 29 2007 "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
26694 Sep 18 2007 "C:\WINDOWS\Installer\{1E04F83B-2AB9-4301-9EF7-E86307F79C72}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe"
1145896 Jun 11 2007 "C:\Program Files\Common Files\Real\GToolbar\GoogleToolbarInstaller.exe"
138168 Jan 27 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"
68856 Jun 5 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe"
13411824 Sep 18 2007 "C:\Documents and Settings\local user\Local Settings\Temporary Internet Files\Content.IE5\YNURWIS9\Google_Earth_BZXD[1].exe"
79856 Aug 28 2007 "C:\Documents and Settings\local user\Desktop\MySpaceIM_Setup.exe"
5562368 Aug 13 2007 "C:\Program Files\MySpace\IM\MySpaceIM.exe"
5562368 Aug 13 2007 "C:\Program Files\MySpace\IM\bak\MySpaceIM.exe"
24080 Aug 29 2007 "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"
185896 Jun 11 2007 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe"
184 May 6 2003 "C:\ADS2005A\tiburon-da\tools\include\stddef.h"
203 Nov 3 1998 "C:\MATLAB_SV701\sys\lcc\include\stddef.h"
1010 Apr 30 2004 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stddef.h"
184 May 17 2006 "C:\Xilinx\gnu\MinGW\2.0.0-3\nt\include\stddef.h"
354 Apr 30 2004 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\bak\stddef.h"
13114 May 4 2003 "C:\ADS2005A\tiburon-da\tools\lib\gcc-lib\mingw32\3.2.3\include\stddef.h"
11583 May 17 2006 "C:\Xilinx\gnu\MinGW\2.0.0-3\nt\lib\gcc-lib\mingw32\3.2\include\stddef.h"
15675 May 6 2003 "C:\ADS2005A\tiburon-da\tools\include\stdlib.h"
2799 Nov 3 1998 "C:\MATLAB_SV701\sys\lcc\include\stdlib.h"
1081 Apr 30 2004 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stdlib.h"
13122 May 17 2006 "C:\Xilinx\gnu\MinGW\2.0.0-3\nt\include\stdlib.h"
275 Apr 30 2004 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\bak\stdlib.h"
18 Jul 25 2005 "C:\ADS2005A\smart\CVS\Entries"
626 Aug 5 2005 "C:\ADS2005A\de\defaults\CVS\Entries"
12846 Aug 5 2005 "C:\ADS2005A\de\fill_patterns\CVS\Entries"
1854 Aug 5 2005 "C:\ADS2005A\de\packages\CVS\Entries"
318 Aug 5 2005 "C:\ADS2005A\de\symbols\CVS\Entries"
189 Aug 6 2005 "C:\ADS2005A\esyn\symbols\CVS\Entries"
75 Aug 5 2005 "C:\ADS2005A\smart\simulation\CVS\Entries"
269 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\CVS\Entries"
1236 Aug 5 2005 "C:\ADS2005A\msgs\english\de\CVS\Entries"
9769 Aug 6 2005 "C:\ADS2005A\netlist_exp\components\assura\CVS\Entries"
9769 Aug 6 2005 "C:\ADS2005A\netlist_exp\components\calibre\CVS\Entries"
9769 Aug 6 2005 "C:\ADS2005A\netlist_exp\components\dracula\CVS\Entries"
4089 Aug 5 2005 "C:\ADS2005A\smart\simulation\adevice\CVS\Entries"
28 Aug 5 2005 "C:\ADS2005A\smart\simulation\adevice\CVS\Entries.Log"
1806 Aug 5 2005 "C:\ADS2005A\smart\simulation\amplifier\CVS\Entries"
122 Aug 5 2005 "C:\ADS2005A\smart\simulation\bitmaps\CVS\Entries"
2606 Aug 5 2005 "C:\ADS2005A\smart\simulation\mixer\CVS\Entries"
901 Aug 5 2005 "C:\ADS2005A\smart\simulation\passive\CVS\Entries"
4780 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\CVS\Entries"
61 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\data\CVS\Entries"
61 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\mom_dsn\CVS\Entries"
183 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\networks\CVS\Entries"
61 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\substrates\CVS\Entries"
61 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\synthesis\CVS\Entries"
61 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\verification\CVS\Entries"
128 Aug 5 2005 "C:\ADS2005A\smart\simulation\adevice\bitmaps\CVS\Entries"
15922 Aug 5 2005 "C:\ADS2005A\smart\simulation\adevice\networks\CVS\Entries"
128 Aug 5 2005 "C:\ADS2005A\smart\simulation\amplifier\bitmaps\CVS\Entries"
66 Aug 5 2005 "C:\ADS2005A\smart\simulation\amplifier\data\CVS\Entries"
7318 Aug 5 2005 "C:\ADS2005A\smart\simulation\amplifier\networks\CVS\Entries"
10563 Aug 5 2005 "C:\ADS2005A\smart\simulation\mixer\networks\CVS\Entries"
61 Aug 5 2005 "C:\ADS2005A\smart\simulation\passive\data\CVS\Entries"
4449 Aug 5 2005 "C:\ADS2005A\smart\simulation\passive\networks\CVS\Entries"
3246 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\CVS\Entries"
1958 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\config\CVS\Entries"
1519 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\old_hp\CVS\Entries"
7306 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\CVS\Entries"
696 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\using\CVS\Entries"
696 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\wrap_std\CVS\Entries"
111 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\bak\CVS\Entries"
662 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\using\CVS\Entries"
283 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\config\new_compiler\CVS\Entries"
675 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\debug\CVS\Entries"
490 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\wrappers\CVS\Entries"
338 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\using\h\CVS\Entries"
228 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\wrap_std\h\CVS\Entries"
11 Jul 25 2005 "C:\ADS2005A\smart\CVS\Repository"
10 Jul 25 2005 "C:\ADS2005A\de\defaults\CVS\Repository"
19 Jul 25 2005 "C:\ADS2005A\de\fill_patterns\CVS\Repository"
14 Jul 25 2005 "C:\ADS2005A\de\packages\CVS\Repository"
13 Jul 25 2005 "C:\ADS2005A\de\symbols\CVS\Repository"
16 Jul 26 2005 "C:\ADS2005A\esyn\symbols\CVS\Repository"
22 Jul 25 2005 "C:\ADS2005A\smart\simulation\CVS\Repository"
27 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\CVS\Repository"
10 Jul 25 2005 "C:\ADS2005A\msgs\english\de\CVS\Repository"
23 Jul 26 2005 "C:\ADS2005A\netlist_exp\components\assura\CVS\Repository"
24 Jul 26 2005 "C:\ADS2005A\netlist_exp\components\calibre\CVS\Repository"
24 Jul 26 2005 "C:\ADS2005A\netlist_exp\components\dracula\CVS\Repository"
30 Jul 25 2005 "C:\ADS2005A\smart\simulation\adevice\CVS\Repository"
32 Jul 25 2005 "C:\ADS2005A\smart\simulation\amplifier\CVS\Repository"
30 Jul 25 2005 "C:\ADS2005A\smart\simulation\bitmaps\CVS\Repository"
28 Jul 25 2005 "C:\ADS2005A\smart\simulation\mixer\CVS\Repository"
30 Jul 25 2005 "C:\ADS2005A\smart\simulation\passive\CVS\Repository"
25 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\CVS\Repository"
32 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\data\CVS\Repository"
35 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\mom_dsn\CVS\Repository"
36 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\networks\CVS\Repository"
38 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\substrates\CVS\Repository"
37 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\synthesis\CVS\Repository"
40 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\verification\CVS\Repository"
38 Jul 25 2005 "C:\ADS2005A\smart\simulation\adevice\bitmaps\CVS\Repository"
39 Jul 25 2005 "C:\ADS2005A\smart\simulation\adevice\networks\CVS\Repository"
40 Jul 25 2005 "C:\ADS2005A\smart\simulation\amplifier\bitmaps\CVS\Repository"
37 Jul 25 2005 "C:\ADS2005A\smart\simulation\amplifier\data\CVS\Repository"
41 Jul 25 2005 "C:\ADS2005A\smart\simulation\amplifier\networks\CVS\Repository"
37 Jul 25 2005 "C:\ADS2005A\smart\simulation\mixer\networks\CVS\Repository"
35 Jul 25 2005 "C:\ADS2005A\smart\simulation\passive\data\CVS\Repository"
39 Jul 25 2005 "C:\ADS2005A\smart\simulation\passive\networks\CVS\Repository"
30 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\CVS\Repository"
32 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\config\CVS\Repository"
32 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\old_hp\CVS\Repository"
29 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\CVS\Repository"
31 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\using\CVS\Repository"
34 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\wrap_std\CVS\Repository"
78 Sep 19 2007 "C:\Documents and Settings\local user\Local Settings\Application Data\Google\Picasa2\db2\repository.dat"
34 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\bak\CVS\Repository"
36 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\using\CVS\Repository"
45 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\config\new_compiler\CVS\Repository"
35 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\debug\CVS\Repository"
38 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\wrappers\CVS\Repository"
33 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\using\h\CVS\Repository"
36 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\wrap_std\h\CVS\Repository"
49 Jul 25 2005 "C:\ADS2005A\smart\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\de\defaults\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\de\fill_patterns\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\de\packages\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\de\symbols\CVS\Root"
49 Jul 26 2005 "C:\ADS2005A\esyn\symbols\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\CVS\Root"
50 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\msgs\english\de\CVS\Root"
49 Jul 26 2005 "C:\ADS2005A\netlist_exp\components\assura\CVS\Root"
49 Jul 26 2005 "C:\ADS2005A\netlist_exp\components\calibre\CVS\Root"
49 Jul 26 2005 "C:\ADS2005A\netlist_exp\components\dracula\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\adevice\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\amplifier\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\bitmaps\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\mixer\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\passive\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\CVS\Root"
50 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\data\CVS\Root"
50 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\mom_dsn\CVS\Root"
50 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\networks\CVS\Root"
50 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\substrates\CVS\Root"
50 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\synthesis\CVS\Root"
50 Jul 26 2005 "C:\ADS2005A\momentum\test\autoTest_prj\verification\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\adevice\bitmaps\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\adevice\networks\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\amplifier\bitmaps\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\amplifier\data\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\amplifier\networks\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\mixer\networks\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\passive\data\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\smart\simulation\passive\networks\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\config\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\old_hp\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\using\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\wrap_std\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\bak\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\using\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\config\new_compiler\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\debug\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\wrappers\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\using\h\CVS\Root"
49 Jul 25 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\wrap_std\h\CVS\Root"
14 Aug 5 2005 "C:\ADS2005A\smart\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\de\defaults\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\de\fill_patterns\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\de\packages\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\de\symbols\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\esyn\symbols\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\msgs\english\de\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\netlist_exp\components\assura\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\netlist_exp\components\calibre\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\netlist_exp\components\dracula\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\adevice\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\amplifier\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\bitmaps\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\mixer\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\passive\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\data\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\mom_dsn\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\networks\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\substrates\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\synthesis\CVS\Tag"
14 Aug 6 2005 "C:\ADS2005A\momentum\test\autoTest_prj\verification\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\adevice\bitmaps\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\adevice\networks\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\amplifier\bitmaps\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\amplifier\data\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\amplifier\networks\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\mixer\networks\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\passive\data\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\smart\simulation\passive\networks\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\config\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\old_hp\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\using\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\wrap_std\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\bak\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\BC50\using\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\config\new_compiler\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\debug\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\stl\wrappers\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\using\h\CVS\Tag"
14 Aug 5 2005 "C:\ADS2005A\adsptolemy\src\gsl\stlport\wrap_std\h\CVS\Tag"
end of report
Hijack This report:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:55:25 AM, on 9/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\etlisrv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\notes\ntmulti.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\pctspk.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\PROGRA~1\SYMANT~1\bak\VPTray.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\OdHost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.myspace.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = mywebster.kcp.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://mywebster.kcp.com/
O1 - Hosts: 0 UseCustom # Webroot SpySweeper entry
O1 - Hosts: iefeadsl.com # Webroot SpySweeper entry
O1 - Hosts: 008k.com # Webroot SpySweeper entry
O1 - Hosts: 356563.net # Webroot SpySweeper entry
O1 - Hosts: 75tz.com # Webroot SpySweeper entry
O1 - Hosts: kitasearch.com # Webroot SpySweeper entry
O1 - Hosts: lookfor.com # Webroot SpySweeper entry
O1 - Hosts: look-today.com # Webroot SpySweeper entry
O1 - Hosts: new.8ad.com # Webroot SpySweeper entry
O1 - Hosts: rf104.com # Webroot SpySweeper entry
O1 - Hosts: search-to-find.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.05p.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.6o9.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.ga31.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.v61.com # Webroot SpySweeper entry
O1 - Hosts: iefeadsl.com # Webroot SpySweeper entry
O1 - Hosts: 008k.com # Webroot SpySweeper entry
O1 - Hosts: 356563.net # Webroot SpySweeper entry
O1 - Hosts: 75tz.com # Webroot SpySweeper entry
O1 - Hosts: kitasearch.com # Webroot SpySweeper entry
O1 - Hosts: lookfor.com # Webroot SpySweeper entry
O1 - Hosts: look-today.com # Webroot SpySweeper entry
O1 - Hosts: new.8ad.com # Webroot SpySweeper entry
O1 - Hosts: rf104.com # Webroot SpySweeper entry
O1 - Hosts: search-to-find.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.05p.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.6o9.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.ga31.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.v61.com # Webroot SpySweeper entry
O1 - Hosts: iefeadsl.com # Webroot SpySweeper entry
O1 - Hosts: 008k.com # Webroot SpySweeper entry
O1 - Hosts: 356563.net # Webroot SpySweeper entry
O1 - Hosts: 75tz.com # Webroot SpySweeper entry
O1 - Hosts: kitasearch.com # Webroot SpySweeper entry
O1 - Hosts: lookfor.com # Webroot SpySweeper entry
O1 - Hosts: look-today.com # Webroot SpySweeper entry
O1 - Hosts: new.8ad.com # Webroot SpySweeper entry
O1 - Hosts: rf104.com # Webroot SpySweeper entry
O1 - Hosts: search-to-find.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.05p.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.6o9.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.ga31.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.v61.com # Webroot SpySweeper entry
O1 - Hosts: iefeadsl.com # Webroot SpySweeper entry
O1 - Hosts: 008k.com # Webroot SpySweeper entry
O1 - Hosts: 356563.net # Webroot SpySweeper entry
O1 - Hosts: 75tz.com # Webroot SpySweeper entry
O1 - Hosts: kitasearch.com # Webroot SpySweeper entry
O1 - Hosts: lookfor.com # Webroot SpySweeper entry
O1 - Hosts: look-today.com # Webroot SpySweeper entry
O1 - Hosts: new.8ad.com # Webroot SpySweeper entry
O1 - Hosts: rf104.com # Webroot SpySweeper entry
O1 - Hosts: search-to-find.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.05p.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.6o9.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.ga31.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.v61.com # Webroot SpySweeper entry
O1 - Hosts: iefeadsl.com # Webroot SpySweeper entry
O1 - Hosts: 008k.com # Webroot SpySweeper entry
O1 - Hosts: 356563.net # Webroot SpySweeper entry
O1 - Hosts: 75tz.com # Webroot SpySweeper entry
O1 - Hosts: kitasearch.com # Webroot SpySweeper entry
O1 - Hosts: lookfor.com # Webroot SpySweeper entry
O1 - Hosts: look-today.com # Webroot SpySweeper entry
O1 - Hosts: new.8ad.com # Webroot SpySweeper entry
O1 - Hosts: rf104.com # Webroot SpySweeper entry
O1 - Hosts: search-to-find.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.05p.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.6o9.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.ga31.com # Webroot SpySweeper entry
O1 - Hosts:
http://www.v61.com # Webroot SpySweeper entry
O1 - Hosts: 1 UseDefs # Webroot SpySweeper entry
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AeXAgentLogon] C:\Program Files\Altiris\Altiris Agent\AeXAgentActivate.exe /logon
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [lxccmon.exe] "C:\Program Files\Lexmark 3300 Series\lxccmon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\ipsecdialer.exe
O4 - Global Startup: Entrust.lnk = ?
O4 - Global Startup: Wireless-G Notebook Adapter.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=mywebster.kcp.com
O15 - Trusted Zone: *.whataboutadog.com
O15 - Trusted Zone: *.whataboutarabit.com
O16 - DPF: {10E0E75E-6701-4134-9D95-C0942ED1F1C8} (Snapfish Outlook Import ActiveX Control) -
http://photo.walgreens.com/WalgreensOutlookImport.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
http://ak.exe.imgfarm.com/images/nocach ... 0.15-3.cab
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) -
https://ra.kcp.com/,DanaInfo=mail2.kcp. ... otes6W.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) -
http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://by130fd.bay130.hotmail.msn.com/r ... nPUpld.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.symantec.com/sscv6/Shar ... /cabsa.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) -
http://photo.walmart.com/photo/uploads/ ... Client.cab
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} (JuniperSetupSP1 Control) -
https://ra.kcp.com/dana-cached/setup/Ju ... tupSP1.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ad.kcp.com
O17 - HKLM\Software\..\Telephony: DomainName = ad.kcp.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = ad.kcp.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = ad.kcp.com,root.kcp.com,kcp.com,ko.kcp.com,test.kcp.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = ad.kcp.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = ad.kcp.com,root.kcp.com,kcp.com,ko.kcp.com,test.kcp.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = ad.kcp.com,root.kcp.com,kcp.com,ko.kcp.com,test.kcp.com
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Altiris Agent (AeXNSClient) - Altiris, Inc. - C:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Entrust Login Interface (ELIService) - Entrust(R) - C:\WINDOWS\etlisrv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe
O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\notes\ntmulti.exe
O23 - Service: NICSer_WPC54G - Unknown owner - C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
O23 - Service: OracleOraHome81ClientCache - Unknown owner - C:\ORACLE\ora817\bin\ONRSD.EXE
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
--
End of file - 12857 bytes