Here are the logs requested
DDS (Ver_09-05-14.01) - NTFSx86
Run by BurgholzerJ at 20:53:44.00 on Wed 06/17/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2039.1405 [GMT -4:00]
AV: McAfee VirusScan Enterprise *On-access scanning enabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}
============== Running Processes ===============
C:\WINDOWS\System32\svchost.exe -k Cognizance
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
svchost.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\ifxspmgt.exe
C:\WINDOWS\system32\IFXTCS.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe
C:\WINDOWS\system32\IfxPsdSv.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe
C:\WINDOWS\system32\CCM\CcmExec.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\windows\ld09.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\windows\freddy46.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Embedded Security Software\PSDrt.exe
C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgent.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\burgholzerj\Desktop\dds.scr
============== Pseudo HJT Report ===============
uStart Page =
hxxp://www.providence.edu/uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_05\bin\ssv.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan enterprise\scriptcl.dll
BHO: Credential Manager for HP ProtectTools: {df21f1db-80c6-11d3-9483-b03d0ec10000} - c:\program files\hewlett-packard\iam\bin\ItIEAddIn.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Aim6]
uRun: [lsass] c:\documents and settings\burgholzerj\application data\lsas.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
mRun: [SoundMAX] c:\program files\analog devices\soundmax\Smax4.exe /tray
mRun: [IFXSPMGT] c:\windows\system32\ifxspmgt.exe /NotifyLogon
mRun: [ShStatEXE] "c:\program files\mcafee\virusscan enterprise\SHSTAT.EXE" /STANDALONE
mRun: [McAfeeUpdaterUI] "c:\program files\mcafee\common framework\UdaterUI.exe" /StartedFromRunKey
mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [sysldtray] c:\windows\ld09.exe
mRun: [sysfbtray] c:\windows\freddy46.exe
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\cleana~1.lnk - c:\program files\cisco systems\clean access agent\CCAAgentLauncher.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\nikonm~1.lnk - c:\program files\common files\nikon\monitor\NkMonitor.exe
uPolicies-explorer: ForceStartMenuLogOff = 1 (0x1)
uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)
uPolicies-explorer: ForceClassicControlPanel = 1 (0x1)
uPolicies-explorer: NoSMConfigurePrograms = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_05\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} -
hxxp://upload.facebook.com/controls/200 ... oader5.cabDPF: {166B1BCA-3F9C-11CF-8075-444553540000} -
hxxp://fpdownload.macromedia.com/get/sh ... tor/sw.cabDPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} -
hxxp://www.update.microsoft.com/windows ... 9562964765DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} -
hxxp://www.update.microsoft.com/microso ... 9563004500DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
hxxp://sdlc-esd.sun.com/ESD40/JSCDL/jre ... 586-jc.cabDPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} -
hxxp://fpdownload.macromedia.com/get/fl ... rashim.cabDPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cabDPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cabHandler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: DeviceNP - DeviceNP.dll
Notify: igfxcui - igfxdev.dll
Notify: OneCard - c:\program files\hewlett-packard\iam\bin\ASWLNPkg.dll
AppInit_DLLs: APSHook.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\wifd1f~1\MpShHook.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
LSA: Notification Packages = SbHpNp scecli ASWLNPkg
================= FIREFOX ===================
FF - ProfilePath -
============= SERVICES / DRIVERS ===============
R0 SafeBoot;SafeBoot;c:\windows\system32\drivers\SafeBoot.sys [2007-8-14 101167]
R0 SbAlg;SbAlg;c:\windows\system32\drivers\SbAlg.sys [2006-10-9 44720]
R0 SbFsLock;SbFsLock;c:\windows\system32\drivers\SbFsLock.sys [2007-6-14 13184]
R1 mferkdk;VSCore mferkdk;c:\program files\mcafee\virusscan enterprise\mferkdk.sys [2006-11-30 31944]
R1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\system32\drivers\psd.sys [2007-7-24 38816]
R1 podmenadrv;podmenadrv;c:\program files\podmena\podmena.sys [2009-6-9 9472]
R1 RsvLock;RsvLock;c:\windows\system32\drivers\rsvlock.sys [2007-8-14 5840]
R2 ASBroker;Logon Session Broker;c:\windows\system32\svchost.exe -k Cognizance [2006-2-28 14336]
R2 ASChannel;Local Communication Channel;c:\windows\system32\svchost.exe -k Cognizance [2006-2-28 14336]
R2 HpFkCryptService;Drive Encryption Service;c:\program files\hewlett-packard\drive encryption\HpFkCrypt.exe [2007-9-6 221184]
R2 McAfeeFramework;McAfee Framework Service;c:\program files\mcafee\common framework\FrameworkService.exe [2008-5-2 104000]
R2 McShield;McAfee McShield;c:\program files\mcafee\virusscan enterprise\Mcshield.exe [2006-11-30 144960]
R2 McTaskManager;McAfee Task Manager;c:\program files\mcafee\virusscan enterprise\VsTskMgr.exe [2006-11-30 54872]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\viewpoint\common\ViewpointService.exe [2008-7-1 24652]
R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [2007-7-24 41216]
R3 mfeavfk;McAfee Inc.;c:\windows\system32\drivers\mfeavfk.sys [2008-5-2 72264]
R3 mfebopk;McAfee Inc.;c:\windows\system32\drivers\mfebopk.sys [2008-5-2 34152]
R3 mfehidk;McAfee Inc.;c:\windows\system32\drivers\mfehidk.sys [2008-5-2 168776]
S2 podmena;podmena;c:\windows\system32\svchost.exe -k podmena [2006-2-28 14336]
S3 DAMDrv;DAMDrv;c:\windows\system32\drivers\DAMDrv.sys [2008-5-2 30008]
S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing;c:\windows\system32\flcdlock.exe [2007-6-8 172131]
=============== Created Last 30 ================
2009-06-15 17:33 2 ----h--- c:\windows\ro123173.dat
2009-06-12 12:39 2 ----h--- c:\windows\ro123222.dat
2009-06-12 12:39 1 ----h--- c:\windows\bf23567.dat
2009-06-12 12:39 43,520 ----h--- c:\windows\freddy46.exe
2009-06-12 12:39 2 ----h--- c:\windows\ro123198.dat
2009-06-12 12:39 2 ----h--- c:\windows\ro123290.dat
2009-06-10 23:55 118 a------- c:\windows\system32\MRT.INI
2009-06-09 23:59 0 ----h--- c:\windows\f5087.dat
2009-06-09 23:59 1 a------- c:\windows\dk39fi4fe.dat
2009-06-09 23:57 <DIR> --d----- c:\program files\podmena
2009-06-09 23:57 2 ----h--- c:\windows\ro122390.dat
2009-06-09 23:57 1 ----h--- c:\windows\msmark2.dat
2009-06-09 23:57 1 ----h--- c:\windows\f23567.dat
2009-06-09 23:57 2 ----h--- c:\windows\ro122366.dat
2009-06-09 23:57 2 ----h--- c:\windows\ro122458.dat
2009-06-09 23:55 43,008 ----h--- c:\windows\ld09.exe
==================== Find3M ====================
2009-05-07 11:32 345,600 a------- c:\windows\system32\localspl.dll
2009-04-29 00:56 827,392 a------- c:\windows\system32\wininet.dll
2009-04-29 00:55 78,336 a------- c:\windows\system32\ieencode.dll
2009-04-17 08:26 1,847,168 a------- c:\windows\system32\win32k.sys
2009-04-15 10:51 585,216 a------- c:\windows\system32\rpcrt4.dll
2009-01-27 13:58 20 ----h--- c:\docume~1\alluse~1\applic~1\PKP_DLdu.DAT
2008-05-19 15:37 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\application data\microsoft\feeds cache\index.dat
2009-02-11 12:39 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009021120090212\index.dat
============= FINISH: 20:54:18.12 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_09-05-14.01)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 6/10/2008 10:29:04 PM
System Uptime: 6/17/2009 8:47:22 PM (0 hours ago)
Motherboard: Hewlett-Packard | | 30C0
Processor: Intel Pentium III Xeon processor | U10 | 2094/200mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 112 GiB total, 80.623 GiB free.
D: is CDROM ()
E: is Removable
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP182: 3/19/2009 2:15:26 PM - Software Distribution Service 3.0
RP183: 3/19/2009 2:17:10 PM - Software Distribution Service 3.0
RP184: 3/20/2009 2:39:39 PM - System Checkpoint
RP185: 3/23/2009 11:41:37 AM - System Checkpoint
RP186: 3/23/2009 8:46:26 PM - Software Distribution Service 3.0
RP187: 3/25/2009 10:45:27 PM - System Checkpoint
RP188: 3/26/2009 3:18:51 PM - Software Distribution Service 3.0
RP189: 3/27/2009 7:17:36 PM - System Checkpoint
RP190: 3/29/2009 10:02:00 PM - System Checkpoint
RP191: 3/30/2009 2:55:51 PM - Software Distribution Service 3.0
RP192: 4/1/2009 12:10:01 AM - System Checkpoint
RP193: 4/2/2009 3:20:31 PM - Software Distribution Service 3.0
RP194: 4/3/2009 7:50:45 PM - System Checkpoint
RP195: 4/5/2009 5:23:57 PM - System Checkpoint
RP196: 4/6/2009 2:16:42 PM - Software Distribution Service 3.0
RP197: 4/7/2009 2:40:45 PM - System Checkpoint
RP198: 4/10/2009 1:54:30 PM - System Checkpoint
RP199: 4/13/2009 1:32:03 PM - Software Distribution Service 3.0
RP200: 4/14/2009 3:54:18 PM - System Checkpoint
RP201: 4/15/2009 2:51:28 PM - Software Distribution Service 3.0
RP202: 4/19/2009 2:09:28 PM - System Checkpoint
RP203: 4/20/2009 7:25:31 PM - System Checkpoint
RP204: 4/20/2009 7:42:35 PM - Software Distribution Service 3.0
RP205: 4/23/2009 10:44:21 AM - Software Distribution Service 3.0
RP206: 4/24/2009 1:47:42 PM - System Checkpoint
RP207: 4/25/2009 10:09:08 PM - System Checkpoint
RP208: 4/27/2009 12:14:41 PM - System Checkpoint
RP209: 4/27/2009 7:57:11 PM - Software Distribution Service 3.0
RP210: 4/29/2009 9:45:05 AM - Software Distribution Service 3.0
RP211: 4/30/2009 9:15:49 PM - Software Distribution Service 3.0
RP212: 5/1/2009 9:23:36 PM - System Checkpoint
RP213: 5/2/2009 11:05:21 PM - System Checkpoint
RP214: 5/4/2009 2:19:15 PM - Software Distribution Service 3.0
RP215: 5/6/2009 1:06:37 AM - Software Distribution Service 3.0
RP216: 5/6/2009 1:05:01 PM - Installed Windows XP WgaNotify.
RP217: 5/8/2009 12:58:23 PM - Software Distribution Service 3.0
RP218: 5/10/2009 12:42:48 AM - System Checkpoint
RP219: 5/11/2009 1:29:10 PM - Software Distribution Service 3.0
RP220: 5/12/2009 11:24:38 PM - Software Distribution Service 3.0
RP221: 5/14/2009 4:57:26 PM - Software Distribution Service 3.0
RP222: 5/18/2009 2:35:06 PM - Software Distribution Service 3.0
RP223: 5/19/2009 5:56:05 PM - System Checkpoint
RP224: 5/21/2009 10:38:03 AM - Software Distribution Service 3.0
RP225: 5/24/2009 7:48:41 PM - System Checkpoint
RP226: 5/25/2009 12:49:54 PM - Software Distribution Service 3.0
RP227: 5/28/2009 3:45:20 PM - Software Distribution Service 3.0
RP228: 6/1/2009 11:24:10 AM - Software Distribution Service 3.0
RP229: 6/5/2009 11:24:05 AM - Software Distribution Service 3.0
RP230: 6/7/2009 10:00:02 PM - System Checkpoint
RP231: 6/8/2009 12:22:42 PM - Software Distribution Service 3.0
RP232: 6/9/2009 2:14:49 PM - System Checkpoint
RP233: 6/10/2009 11:48:08 PM - Software Distribution Service 3.0
RP234: 6/11/2009 4:55:06 PM - Software Distribution Service 3.0
RP235: 6/13/2009 12:24:27 PM - System Checkpoint
RP236: 6/14/2009 5:54:14 PM - Software Distribution Service 3.0
RP237: 6/15/2009 5:36:31 PM - Software Distribution Service 3.0
==== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 1 (SP1)
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
Adobe AIR
Adobe Flash Player ActiveX
Adobe Media Player
Adobe Reader 8.1.2
Adobe Reader 8.1.2 Security Update 1 (KB403742)
Adobe Shockwave Player
Agere Systems HDA Modem
AIM 6
Apple Mobile Device Support
Apple Software Update
AuthenTec Fingerprint Sensor Minimum Install
BIOS Configuration for HP ProtectTools
Bonjour
Broadcom 802.11 Wireless LAN Adapter
Broadcom NetXtreme Ethernet Controller
Cisco Clean Access Agent
Credential Manager for HP ProtectTools
Critical Update for Windows Media Player 11 (KB959772)
Dell Photo Printer 720
Device Access Manager for HP ProtectTools
Drive Encryption for HP ProtectTools
Embedded Security for HP ProtectTools
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
HP Integrated Module with Bluetooth wireless technology
HP ProtectTools Security Manager
Intel(R) Graphics Media Accelerator Driver
InterActual Player
InterVideo Register Manager
InterVideo WinDVD
iTunes
Java(TM) 6 Update 5
McAfee VirusScan Enterprise
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Move Media Player
Mozilla Firefox (2.0.0.14)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 6 Service Pack 2 (KB954459)
Nikon Message Center
Nikon Transfer
PHStat2
PHStat2 Update
QuickTime
Roxio Creator Audio
Roxio Creator Basic v9
Roxio Creator Copy
Roxio Creator Data
Roxio Creator Tools
Roxio Drag-to-Disc
Roxio Express Labeler 3
Roxio MyDVD Basic v9
Scratch
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB969679)
Security Update for Microsoft Office Excel 2007 (KB969682)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB969613)
Security Update for Microsoft Office Word 2007 (KB969604)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB970238)
SMS Advanced Client
Sonic Activation Module
SoundMAX
Spelling Dictionaries Support For Adobe Reader 8
Synaptics Pointing Device Driver
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office Outlook 2007 (KB969907)
Update for Outlook 2007 Junk Email Filter (kb970012)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Viewpoint Media Player
WebFldrs XP
Windows Defender
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Format SDK Hotfix - KB891122
Windows Media Player 11
Windows Presentation Foundation
Windows XP Service Pack 3
XML Paper Specification Shared Components Pack 1.0
==== Event Viewer Messages From Past Week ========
6/15/2009 5:31:53 PM, error: Service Control Manager [7023] - The podmena service terminated with the following error: The specified module could not be found.
6/12/2009 12:37:20 PM, error: NETLOGON [5719] - No Domain Controller is available for domain MERRIMACK due to the following: There are currently no logon servers available to service the logon request. . Make sure that the computer is connected to the network and try again. If the problem persists, please contact your domain administrator.
==== End Of File ===========================
ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Time: 2009/06/17 20:58
Program Version: Version 1.3.0.0
Windows Version: Windows XP SP3
==================================================
Drivers
-------------------
Name: dump_atapi.sys
Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
Address: 0x9DAE7000 Size: 98304 File Visible: No Signed: -
Status: -
Name: dump_WMILIB.SYS
Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
Address: 0xBA62E000 Size: 8192 File Visible: No Signed: -
Status: -
Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0x9C75F000 Size: 49152 File Visible: No Signed: -
Status: -
Hidden/Locked Files
-------------------
Path: c:\windows\system32\ccm\servicedata\messaging\endpointqueues\policyagent_policyevaluator\0000008b.msg
Status: Allocation size mismatch (API: 16384, Raw: 4096)
Path: c:\windows\system32\ccm\servicedata\messaging\endpointqueues\execmgr\00000010.msg
Status: Allocation size mismatch (API: 65536, Raw: 24576)
Path: c:\windows\system32\ccm\servicedata\messaging\endpointqueues\inventoryagent\0000000l.msg
Status: Allocation size mismatch (API: 122880, Raw: 106496)
Path: c:\windows\system32\ccm\servicedata\messaging\endpointqueues\inventoryagent\0000000m.msg
Status: Allocation size mismatch (API: 16384, Raw: 0)
Path: c:\windows\system32\ccm\servicedata\messaging\endpointqueues\ls_scheduledcleanup\0000001e.msg
Status: Allocation size mismatch (API: 49152, Raw: 45056)
Path: c:\windows\system32\ccm\servicedata\messaging\endpointqueues\policyagent_requestassignments\0000002g.msg
Status: Allocation size mismatch (API: 32768, Raw: 28672)
Path: c:\windows\system32\ccm\servicedata\messaging\outgoingqueues\amp_[http]mp_locationmanager\0000000n.msg
Status: Allocation size mismatch (API: 65536, Raw: 61440)
Path: c:\windows\system32\ccm\servicedata\messaging\outgoingqueues\mp_statusreceiver\0000001s.msg
Status: Allocation size mismatch (API: 32768, Raw: 0)
Path: c:\windows\system32\ccm\servicedata\messaging\outgoingqueues\mp_[http]mp_locationmanager\0000000q.msg
Status: Allocation size mismatch (API: 57344, Raw: 53248)
Path: c:\windows\system32\ccm\servicedata\messaging\outgoingqueues\mp_[http]mp_policymanager\00000026.msg
Status: Allocation size mismatch (API: 32768, Raw: 28672)
==EOF==